Confirm an MFA factor's enrollment

post

https://api.wingspan.app/v3/platform/mfa-factors/{mfaFactorId}/verify

Finalizes enrollment by validating a proof (TOTP / SMS / Email code). Transitions the factor from PendingVerification to Active.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

mfaFactorId

required

MFA factor resource id. New factors use the canonical 22-character Wingspan id. The legacy mfa_email_ form remains accepted so factors auto-enrolled before WIN-15277 can still be acted on without rewriting persisted Spanner primary keys.

Body Params

totpCode

string

smsCode

string

emailCode

string

Headers

Idempotency-Key

string

length between 1 and 255

^[\x21-\x7e]{1,255}$

Optional idempotency token for authenticated POST and PATCH requests. Reusing the same key and body returns the cached response for 24 hours, except credential operations that explicitly document a 409 because one-time secret material is never cached; reusing it with a different body returns 409 IdempotencyKeyConflict. Use 1-255 printable ASCII characters.

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

Language

Credentials

Bearer

JWT

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200Factor verified, now Active

401Unauthenticated

403Recent step-up MFA is required for this elevated write.

404Resource not found

409Conflict

422Validation error