Goldmine
Two Factor

Regenerate two-factor backup codes

POST
/accounts.v1.Accounts/RegenerateBackupCodes

Issues a fresh set of one-time backup codes and invalidates the previous set. The caller must supply their password and a current authenticator code to confirm.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://loading/accounts.v1.Accounts/RegenerateBackupCodes" \  -H "Content-Type: application/json" \  -d '{    "password": "correct-horse-battery-staple",    "totpCode": "123456"  }'
{
  "backupCodes": [
    "a1b2-c3d4",
    "e5f6-g7h8",
    "i9j0-k1l2",
    "m3n4-o5p6"
  ]
}

{
  "code": "failed_precondition",
  "message": "The request cannot be carried out in the current system state."
}

{
  "code": "unauthenticated",
  "message": "The request lacks a valid API key in the Authorization header."
}
{
  "code": "permission_denied",
  "message": "The API key is not allowed to perform this action on this workspace."
}
{
  "code": "resource_exhausted",
  "message": "The request was rate limited. Slow down and retry later."
}
{
  "code": "internal",
  "message": "An internal server error occurred."
}

GetTwoFactorStatus

Returns the caller's two-factor configuration, including the active method, which methods are enrolled or available, and how many backup codes remain.

SetTwoFactorMethod

Chooses which enrolled method, such as authenticator app, passkey, or email, is used as the primary two-factor challenge at sign-in.