Validate the Second Factor During Login
curl --request POST \
--url https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data 'totp=<string>'const options = {
method: 'POST',
headers: {'Content-Type': 'application/x-www-form-urlencoded'},
body: new URLSearchParams({totp: '<string>'})
};
fetch('https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa"
payload = { "totp": "<string>" }
headers = {"Content-Type": "application/x-www-form-urlencoded"}
response = requests.post(url, data=payload, headers=headers)
print(response.text){
"error": "BadParameters",
"message": "<string>",
"details": "<unknown>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}OIDC
Validate the Second Factor During Login
Verify the submitted TOTP for a pending mfa interaction, completing a pending enrolment when there is one, and finish the interaction with otp appended to the session amr. The authorization code is only ever issued after this succeeds. The front-end must then navigate to GET /oidc/auth/ to resume the authorization request.
POST
/
oidc
/
interaction
/
{grant}
/
mfa
Validate the Second Factor During Login
curl --request POST \
--url https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data 'totp=<string>'const options = {
method: 'POST',
headers: {'Content-Type': 'application/x-www-form-urlencoded'},
body: new URLSearchParams({totp: '<string>'})
};
fetch('https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/oidc/interaction/{grant}/mfa"
payload = { "totp": "<string>" }
headers = {"Content-Type": "application/x-www-form-urlencoded"}
response = requests.post(url, data=payload, headers=headers)
print(response.text){
"error": "BadParameters",
"message": "<string>",
"details": "<unknown>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}Was this page helpful?