knl_meowscendence/doc/auth/2fa.md

2fa

Abailable endpoints:

• POST /2fa
• POST /2fa/verify
• DELETE /2fa

Common return:

• 500 with response

{
    "error": "Internal server error"
}

POST /2fa

Used to enable 2fa (need to verify after to confirm)

Inputs: just need a valid JWT cookie

Returns:

• 200

{
    "secret": "<the generated secret>"
    "otpauthUrl": "<the generated url>"
}

POST /2fa/verify

Used to confirm 2fa

Inputs: a valid JWT in cookie and

{
    "token": "<token given by 2fa>"
}

Returns:

• 200

{
    "msg": "2FA verified successfully"
}

• 401 || 400 || 404

{
    "error": "<corresponding error>"
}

DELETE /2fa

Used to remove 2fa

Inputs: a valid JWT in cookie

Returns:

• 200

{
    "msg": "TOTP removed"
}