SPA Authentication

SPA 2FA Verify - Complete login with 2FA code

Verifies the 2FA code sent to user email and completes the login process.

POST/api/spa/auth/2fa/verify

SPA 2FA Verify - Complete login with 2FA code

curl --request POST \
  --url 'https://app.output.rocks/api/spa/auth/2fa/verify' \
  --header 'X-AUTH-TOKEN: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '{
  "twoFactorToken": "eyJ0eXAiOiIyZmEiLCJ1c2VySWQiOjF9...",
  "code": "123456"
}'

201

application/json

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refreshToken": "<api-key>",
  "expiresIn": 3600,
  "user": {}
}

Authorizations

X-AUTH-TOKEN

stringheaderrequired

Value for the X-AUTH-TOKEN header parameter.

Request Body

application/json

required

The new SpaTwoFactor resource

{
  "twoFactorToken": "eyJ0eXAiOiIyZmEiLCJ1c2VySWQiOjF9...",
  "code": "123456"
}

Response

201application/json

SpaTwoFactor resource created

accessToken

string

JWT access token

Example: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

refreshToken

string

Refresh token

expiresIn

integer

Access token lifetime in seconds

Example: 3600

user

object

User profile