Skip to main content
POST
/
me
/
authenticator
/
attempt-verification
Verify TOTP Authenticator Setup
curl --request POST \
  --url https://{deploymentHost}/me/authenticator/attempt-verification \
  --header 'Content-Type: application/json' \
  --data '{
  "code1": "123456",
  "code2": "789012"
}'
{
"status": 200,
"message": "",
"data": {
"verified": true,
"two_factor_enabled": true,
"authenticator": {
"id": "auth_123456789",
"verified": true,
"created_at": "2024-01-15T10:30:00Z",
"verified_at": "2024-01-15T10:35:00Z"
}
},
"session": {
"signin_attempts": [],
"signins": [
{
"id": "signin_987654321",
"user_id": "user_456789123",
"created_at": "2024-01-01T12:00:00Z"
}
],
"signup_attempts": [],
"active_signin": {
"id": "signin_987654321",
"user_id": "user_456789123",
"created_at": "2024-01-01T12:00:00Z"
}
},
"errors": []
}

Authorizations

__session
string
cookie
required

Session cookie authentication for production deployments. The session token is automatically set as an HTTP-only, secure cookie.

Body

application/json
code1
string
required

First 6-digit TOTP code

code2
string
required

Second 6-digit TOTP code (must be different from first)

Response

Authenticator verified and activated successfully

status
integer
required

HTTP status code

message
string
required

Response message (empty for success)

data
any
required

Response data (can be any type)

session
object
required
errors
object[]
required

Array of error objects (empty for success)