Verify 2FA code during login

This endpoint documentation is generated directly from openapi.yaml.

Endpoint

POST /auth/2fa/verify

Operation

Operation ID: verify2fa

Complete the login process by verifying the 2FA code

Authentication

Security requirements:

Scheme	Scopes
BearerAuth	-

Request Body

Required: yes.

Content type: application/json

{
  "properties": {
    "2fa_token": {
      "description": "The temporary 2FA verification token",
      "type": "string"
    },
    "code": {
      "description": "The 6-digit TOTP code",
      "type": "string"
    }
  },
  "required": [
    "2fa_token",
    "code"
  ],
  "type": "object"
}
        

Responses

Status	Description	Content Types
200	Login successful	application/json
400
401

Schema for response 200 (application/json):

{
  "oneOf": [
    {
      "properties": {
        "token": {
          "description": "Bearer authentication token (for users/employees)",
          "type": "string"
        }
      },
      "required": [
        "token"
      ],
      "type": "object"
    },
    {
      "properties": {
        "session": {
          "description": "Session token (for subusers)",
          "type": "string"
        }
      },
      "required": [
        "session"
      ],
      "type": "object"
    }
  ]
}
        

17 March 2026