POSTPublic

Verify login MFA

/api/v1/login/mfa/verify

Complete the login challenge. Success returns the same contract as POST /api/v1/login (user + access_token). Wrong code → 422 MFA_CODE_INVALID while the challenge is still valid.

Path parameters

This endpoint has no path parameters.

Query parameters

This endpoint has no query parameters.

Request body

Field	Type	Description
challenge_token Required	string	Challenge token returned by login. e.g. "opaque-challenge"
method Required	string	`email` or `totp`. e.g. "email"
code Required	string	6-digit email or TOTP code. e.g. "123456"

Responses

Status	Meaning
200	Logged in successfully
401	Missing or invalid Bearer token.

Request

curl

curl -X POST 'https://api.dkbsigns.com/api/v1/login/mfa/verify' \
  -H 'Content-Type: application/json' \
  -d '{"challenge_token":"opaque-challenge","method":"email","code":"123456"}'

Response 200

json

{
  "status": "success",
  "message": "Logged in successfully",
  "data": {
    "user": {
      "id": 4,
      "first_name": "Jane",
      "last_name": "Doe",
      "email": "user@acme.test",
      "role": "user",
      "company_id": 1,
      "job_title": "Chief Financial Officer",
      "locale": "fr",
      "seal": null,
      "signature_mentions": {
        "enabled": true,
        "frame": false,
        "mentions": [
          "fullName",
          "jobTitle"
        ]
      },
      "is_available": true
    },
    "access_token": "1|abcdefghijklmnopqrstuvwxyz"
  }
}