Initiate MFA Challenge

Use this endpoint with mfaType: email to request a new verification code sent via email. The API also accepts app, but it does not send a code for that method: authenticator apps generate passcodes locally. Clients using an authenticator app can proceed directly to verification.

Requires a valid mfaToken obtained from the access token endpoint.

POST /v1/login/mfa/challenge

Initiate MFA Challenge

cURL

curl --request POST \
  --url https://auth.sandbox.lerian.net/v1/login/mfa/challenge \
  --header 'Content-Type: application/json' \
  --data '
{
  "mfaToken": "eyJhbGciOiJIUzI1NiJ9...",
  "mfaType": "email"
}
'

200

Example

{
  "message": "MFA challenge initiated"
}

Cuerpo

application/json

Information used to request a new MFA verification code via email.

mfaToken · string · requerido

The temporary MFA token received from the access token endpoint.

mfaType · enum<string> · requerido

Use email to send a verification code. The app value is accepted but does not send a code; authenticator apps generate passcodes locally.

Opciones disponibles: app, email

Respuesta

200

application/json

The challenge request succeeded. For email, a verification code was sent. For app, no code is sent.

message · string

Confirmation that the challenge was initiated.