Appearance
Stored only in your browser. Get one under Tokens.
Start a TOTP (authenticator app) enrollment
POST
/auth/mfa/totp
Generates a fresh TOTP secret for the authenticated user. Requires the account password (or a fresh session for passwordless accounts). The enrollment stays pending until confirmed with a first valid code.
Authorizations
ApiKeyAuth
Type
API Key (header: Authorization)
Request Body
application/json
JSON "password": "string", "sudo_token": "string"
{
}
Responses
OK
application/json
JSON "otpauth_url": "string", "secret": "string"
{
}