A AuthMS API Wiki API Reference iam.tianv.com →

POST /mfa/totp/verify

验证用户提交的TOTP验证码,验证通过后启用TOTP多因素认证。使用限流保护(checkRateLimit)。参考:RFC 6238 (TOTP)、OWASP ASVS V2.8.3。

MFA `bearerAuth` application/json

Request Body

Schema: dto.TOTPVerifyRequest

FieldTypeRequiredExampleConstraintsDescription
code string Yes

Responses

StatusDescriptionSchema
200验证成功dto.ValidDetailResponse
400参数错误或验证码无效gitee_com_linmes_authms_base_dto.SimpleResponse
401未认证gitee_com_linmes_authms_base_dto.SimpleResponse
429请求过于频繁gitee_com_linmes_authms_base_dto.SimpleResponse
500服务器内部错误gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.ValidDetailResponse

FieldTypeRequiredExampleConstraintsDescription
code integer No
data dto.ValidResponse No
message string No
timestamp string No

dto.ValidResponse

FieldTypeRequiredExampleConstraintsDescription
valid boolean No True

gitee_com_linmes_authms_base_dto.SimpleResponse

FieldTypeRequiredExampleConstraintsDescription
code integer No
message string No
timestamp string No