Skip to main content
POST
Issue a challenge for a TOTP factor

Authorizations

mnemom_session
string
cookie
required

HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".

Body

application/json
factor_id
string
required

Response

Challenge issued.

challenge_id
string
required