Goldmine
Two Factor

Disable the authenticator app

POST
/accounts.v1.Accounts/DisableTOTP

Removes the enrolled authenticator app from the account. The caller must supply their password and a current authenticator or backup code to confirm.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://loading/accounts.v1.Accounts/DisableTOTP" \  -H "Content-Type: application/json" \  -d '{    "password": "correct-horse-battery-staple",    "totpCode": "123456"  }'
{}

{
  "code": "failed_precondition",
  "message": "The request cannot be carried out in the current system state."
}

{
  "code": "unauthenticated",
  "message": "The request lacks a valid API key in the Authorization header."
}
{
  "code": "permission_denied",
  "message": "The API key is not allowed to perform this action on this workspace."
}
{
  "code": "resource_exhausted",
  "message": "The request was rate limited. Slow down and retry later."
}
{
  "code": "internal",
  "message": "An internal server error occurred."
}

BeginStepUp

Starts a fresh two-factor re-verification for the signed-in user ahead of a sensitive action. Returns a challenge ID and the methods available to complete it.

GetTwoFactorStatus

Returns the caller's two-factor configuration, including the active method, which methods are enrolled or available, and how many backup codes remain.