Tolgee Octri Demo
DELETE/v2/user/mfa/totp

Disable TOTP-based multi-factor authentication

Disables TOTP-based multi-factor authentication for the authenticated user's account. Provide the account password to authorize the change. Successful requests invalidate all previous sessions and return a new access token.

1 body field

The account password used to authorize disabling TOTP-based multi-factor authentication.

passwordstringrequired
The account password. Must be no more than 50 characters.

5 status codes
200Returns an object containing the new `accessToken` and its `tokenType`.
accessTokenstringoptional
tokenTypestringoptional
400Returned when `password` is missing or the request is invalid.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
401Returned when the password or authentication is rejected.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
403Returned when the authenticated user is not permitted to change MFA settings.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
404Returned when the associated user or resource cannot be found.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional

Error handling

A 400 is returned when password is missing or the request is invalid. A 401 is returned when the password or authentication is rejected, a 403 when the authenticated user is not permitted to change MFA settings, and a 404 when the associated user or resource cannot be found. password can contain up to 50 characters.