Goldmine
Two Factor

Complete a step-up re-verification

POST
/accounts.v1.Accounts/VerifyStepUp

Completes a step-up challenge by supplying one verification code. On success the caller is briefly marked as freshly re-verified so they can perform a sensitive action.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://loading/accounts.v1.Accounts/VerifyStepUp" \  -H "Content-Type: application/json" \  -d '{    "challengeId": "chl_8f3a2b1c9d4e",    "totpCode": "123456"  }'
{}

{
  "code": "failed_precondition",
  "message": "The request cannot be carried out in the current system state."
}

{
  "code": "unauthenticated",
  "message": "The request lacks a valid API key in the Authorization header."
}
{
  "code": "permission_denied",
  "message": "The API key is not allowed to perform this action on this workspace."
}
{
  "code": "resource_exhausted",
  "message": "The request was rate limited. Slow down and retry later."
}
{
  "code": "internal",
  "message": "An internal server error occurred."
}

SetupTOTP

Starts enrolling an authenticator app for two-factor sign-in. Returns the shared secret, a QR code to scan, and one-time backup codes. The setup must be confirmed with a generated code before it takes effect.

VerifyTOTPSetup

Confirms authenticator app enrollment by verifying a code generated by the app. Once confirmed, the authenticator becomes an available two-factor method.