Enable the time-based one-time password factor
Enable the time-based one-time password factor
/api/v1/auth/mfa/totp/confirmEnables the factor once a code from the enrolling authenticator matches, and returns the account's ten recovery codes. Like the secret, the codes are shown exactly once — only their hashes are stored.
The code used here is spent by the confirmation, so it cannot immediately be replayed as a sign-in.
Calling this without a preceding setup returns 409 mfa_not_set_up;
calling it when a factor is already confirmed returns
409 mfa_already_enabled.
Header Parameters
Request Body
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.