Checks that the TOTP sent in the body belongs to the totp device (specified by deviceName, belonging to the session user)
Request
Body Params application/json
{
"totp": "123456",
"deviceName": "asdf123asdf"
}
Request Code Samples
curl --location --request POST 'http://localhost:8000//totp/device/verify' \
--header 'Content-Type: application/json' \
--data-raw '{
"totp": "123456",
"deviceName": "asdf123asdf"
}'
Responses
application/json
Verification result and optionally the session with a refreshed MFA claim
Modified at 2024-10-01 07:35:40