POST
/
me
/
authenticator
/
attempt-verification
Verify TOTP Authenticator Setup
curl --request POST \
  --url https://{deploymentHost}/me/authenticator/attempt-verification \
  --header 'Content-Type: application/json' \
  --data '{
  "code1": "123456",
  "code2": "789012"
}'
{
"status": 200,
"message": "",
"data": {
"verified": true,
"two_factor_enabled": true,
"authenticator": {
"id": "auth_123456789",
"verified": true,
"created_at": "2024-01-15T10:30:00Z",
"verified_at": "2024-01-15T10:35:00Z"
}
},
"session": {
"signin_attempts": [],
"signins": [
{
"id": "signin_987654321",
"user_id": "user_456789123",
"created_at": "2024-01-01T12:00:00Z"
}
],
"signup_attempts": [],
"active_signin": {
"id": "signin_987654321",
"user_id": "user_456789123",
"created_at": "2024-01-01T12:00:00Z"
}
},
"errors": []
}

Authorizations

__session
string
cookie
required

Session cookie authentication for production deployments. The session token is automatically set as an HTTP-only, secure cookie.

Body

application/json

Response

200
application/json

Authenticator verified and activated successfully

The response is of type object.