v1

latestOpenAPI 3.1.02026-07-26165182724.7 KB
Enrollment

Complete TOTP enrollment

Confirms the secret returned by /user/start/setup-two-factor by submitting the current 6-digit code from the authenticator app. Returns the one-time recovery codes — show them to the user once.

post/user/resume/setup-two-factor

Request body

userIdstring required
secretstring required

Secret returned by /user/start/setup-two-factor.

codestring required

Response

TOTP is now enrolled. Recovery codes returned once.

recoveryCodesstring[]

One-time recovery codes.