Admin — answer a sign-in challenge

post

https://api.acc.funtrips.io/{stage}/admin/auth/challenge

ADMIN

Answers the challenge returned by POST /admin/auth/login. Answering one
challenge may return the next, so keep calling this endpoint until
status is AUTHENTICATED.

The final step sets the refresh token as an HttpOnly cookie, exactly as
POST /admin/auth/login does when it issues a session directly.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Answers an outstanding challenge. Supply new_password for NEW_PASSWORD, or code for MFA_SETUP and MFA_CODE.

kind

string

enum

required

The step required before a session can be issued.
NEW_PASSWORD — the account still has its invitation password and must choose a new one. MFA_SETUP — no authenticator is enrolled yet; the response carries a one-time secret_code to register, and the reply must be a code generated from it. MFA_CODE — an authenticator is enrolled; supply the current code.

Allowed:

string

required

session

string

required

The session handle from the previous response.

new_password

password

code

string

Current authenticator code.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

Language

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200Signed in, or a further challenge to answer.

400The request body or parameters are invalid.

401Missing or invalid authentication credentials.

429Too many attempts. Retry later.

500An unexpected server error occurred.