Xeonr Developer Docs
API SpecificationPRIVATEAuthentication

Verify MFA Challenge

POST
/xeonr.auth.private.v1.AuthService/VerifyMfaChallenge

Completes a login held by org-account 2FA: validates the TOTP or recovery code against the challenge token from HandleLogin and returns the portal token.

Authentication: None required (challenge token required)

Authorization

BearerAuth
AuthorizationBearer <token>

JWT access token for internal API access. Requires 'private' scope for most endpoints, 'admin' scope for administrative operations.

In: header

Header Parameters

Connect-Protocol-Version*number

Define the version of the Connect protocol

Value in1
Connect-Timeout-Ms?number

Define the timeout, in ms

Request Body

application/json

challengeToken?string

The challenge token from HandleLoginResponse.Mfa.

Length1 <= length <= 128
code?string

A 6-digit TOTP code from the authenticator app, or a recovery code.

Length1 <= length <= 32
[key: string]?never

Response Body

application/json

application/json

curl -X POST "https://auth.xeonr.io/xeonr.auth.private.v1.AuthService/VerifyMfaChallenge" \  -H "Connect-Protocol-Version: 1" \  -H "Content-Type: application/json" \  -d '{}'
{
  "token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresAt": "2023-01-15T01:30:15.01Z",
  "sessionToken": "string"
}
{
  "code": "not_found",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

Resolve Organisation POST

Resolves organisation metadata and public identity providers by domain or hostname. **Authentication:** None required

xeonr.auth.private.v1.BrandingService

Manages an organisation's brand profiles (the list of branded sign-in flows that application clients can select). Organisation administrators only.