Skip to main content
POST
Submit a 6-digit MFA code to complete login

Body

application/json
challengeId
string
required

Opaque server-issued challenge identifier returned by POST /api/auth/signin (or /autosignup) when the response carried mfaRequired=true.

Example:

"65f2c9a1d8e4b3c5a1234567"

code
string
required

The 6-digit numeric code the user received by email.

Pattern: ^[0-9]{6}$
Example:

"472918"

Response

Code accepted. Response shape matches POST /api/auth/signin success — a JWT token plus the user profile. A Set-Cookie pria_mfa_trust=... header is also set.

token
string

JWT authentication token

profile
object