Auth2026.8.0

Verify MFA code

Verifies a TOTP MFA code for the authenticated user. Requires user to be authenticated with password first (AAL1). Returns success state upon successful verification.

POST/api/v1/auth/mfa/verify

The source export uses a local development server. Examples use the configured Dashio API origin.

Authentication

Authentication is not declared in this export. This does not imply anonymous access.

Understand authentication

Path parameters

None declared in this export.

Query parameters

None declared in this export.

Header parameters

None declared in this export.

Request body

application/json · Required

factorIdstring (uuid)Required: MFA factor ID
codestringRequired: 6-digit TOTP code

Request & response examples

Copy an example in your preferred language.

request.sh

curl --request POST 'https://dashio.net/api/v1/auth/mfa/verify' \
  --header 'Content-Type: application/json' \
  --data '{
  "factorId": "123e4567-e89b-12d3-a456-426614174000",
  "code": "123456"
}'

Replace URL parameters, credentials, and schema placeholders before running. No request is sent by this page.

Schema-generated example; not a captured response.

{
  "success": true
}

Examples use the configured API origin. Replace credentials, URL parameters, and schema placeholders before running.

Responses

200

MFA verification successful.

successbooleanRequired: No field description supplied.
Exampletrue

401

Authentication failed (not authenticated or invalid MFA code).

statusCodenumberRequired

No field description supplied.

Example401

statusMessagestringRequired

No field description supplied.

Example"Verification failed"

dataobjectOptional

No field description supplied.

422

Validation failed (missing/invalid factor ID or code).

statusCodenumberRequired: No field description supplied.
Example422
statusMessagestringRequired: No field description supplied.
Example"Authentication code is required."

429

Too many requests (rate limit exceeded).

statusCodenumberRequired

No field description supplied.

Example429

statusMessagestringRequired

No field description supplied.

Example"Too Many Requests"

dataobjectOptional

No field description supplied.

500

Internal server error during processing.

No response body schema supplied.

Was this helpful?

Verify MFA code

Authentication

Path parameters

Query parameters

Header parameters

Cookie parameters

Request body

Responses

200

401

1 child fields

422

429

1 child fields

500