Replace the account's recovery codes
Replace the account's recovery codes
/api/v1/auth/mfa/recovery-codes/regenerateIssues a fresh set of ten codes and invalidates every previous one, including any still unused. Like the original set, they are shown exactly once.
The current password is required, because the codes this returns are
themselves a way past the second factor. An account with no confirmed
factor receives 409 mfa_not_enabled.
Header Parameters
Request Body
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.