MFA sign in

Complete multi-factor authorization to sign in, with a TOTP and an MFA attempt code

POST /auth/mfa/sign-in

MFA sign in

cURL

curl --request POST \
  --url https://api.stack-auth.com/api/v1/auth/mfa/sign-in \
  --header 'Content-Type: application/json' \
  --data '
{
  "code": "u3h6gn4w24pqc8ya679inrhjwh1rybth6a7thurqhnpf2"
}
'

200

{
  "refresh_token": "i8ns3aq2...14y",
  "access_token": "eyJhmMiJB2TO...diI4QT",
  "is_new_user": true,
  "user_id": "3241a285-8329-4d69-8f3d-316e08cf140c"
}

Body

application/json

type · string · required

totp · string · required

code · string · required

A 45 character code

Example:

"u3h6gn4w24pqc8ya679inrhjwh1rybth6a7thurqhnpf2"

Response

200 - application/json

Successful response

refresh_token · string · required

Long-lived refresh token that can be used to obtain a new access token

Example:

"i8ns3aq2...14y"

access_token · string · required

Short-lived access token that can be used to authenticate the user

Example:

"eyJhmMiJB2TO...diI4QT"

is_new_user · boolean · required

Whether the user is a new user

Example:

true

user_id · string · required

The unique identifier of the user

Example:

"3241a285-8329-4d69-8f3d-316e08cf140c"