POST /internal/mfa/totp/validate
内部验证用户TOTP码,无需JWT认证,供其他服务(identity-service)在登录时调用。需要InternalAPIKey认证。参考:RFC 6238 (TOTP)、OWASP ASVS V2.8.3。
MFA None application/json
Referenced Schemas
dto.ValidDetailResponse
| Field | Type | Required | Example | Constraints | Description |
code |
integer |
No |
|
|
|
data |
dto.ValidResponse |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|
dto.ValidResponse
| Field | Type | Required | Example | Constraints | Description |
valid |
boolean |
No |
True |
|
|
gitee_com_linmes_authms_base_dto.SimpleResponse
| Field | Type | Required | Example | Constraints | Description |
code |
integer |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|