Skip to main content
POST
Enable two-factor authentication

Authorizations

Authorization
string
header
required

The session token qumod login obtains through the device flow (POST /v1/auth/device/token). It acts as the signed-in user, like a console session, and needs no CSRF token.

Body

application/json
code
string
required

A current 6-digit code from the authenticator app. When disabling, an unused backup code is also accepted.

Example:

"492817"

Response

Two-factor authentication is enabled.

status
enum<string>
required
Available options:
enabled,
disabled
Example:

"enabled"