PRIVATExeonr.auth.private.v1.PasswordService
PasswordService provides password-based authentication methods
postContinue Session
Uses an existing session to generate an exchange code without re-entering credentials. For 'Continue as X' flow. **Authentication:** None required
postDisable TOTP
Disables TOTP 2FA for the user. Requires current password for verification. **Required scopes:** `auth:account:edit`
postEnroll TOTP
Generates a TOTP secret for 2FA enrollment. Returns the secret and provisioning URI for QR code display. **Required scopes:** `auth:account:edit`
postGet Session
Checks if a session token is valid and returns user info. Used to show 'Continue as X' UI. **Authentication:** None required
postGet TOTP Status
Returns the current TOTP 2FA status including whether it is enabled and remaining recovery codes. **Required scopes:** `auth:account:read`
postLogout
Invalidates the session token. User will need to re-enter credentials on next login. **Authentication:** None required
postPassword Authorize
Validates password authorize request parameters and returns a callback redirect URL containing code/state. **Authentication:** None required
postPassword Login
Authenticates with email and password. Returns an exchange code for the HandleLogin flow. Email must be verified. **Authentication:** None required **Protection:** Rate limited; requires Cloudflare Turnstile token when the organisation enables it
postPassword Signup
Creates a new password-based account. A verification email will be sent to confirm the email address. **Authentication:** None required **Protection:** Requires Cloudflare Turnstile token
postRegenerate Recovery Codes
Generates a new set of recovery codes, invalidating all previous codes. Requires current password. **Required scopes:** `auth:account:edit`
postRequest Password Reset
Sends a password reset email to the specified address if an account exists. **Authentication:** None required **Protection:** Requires Cloudflare Turnstile token
postResend Verification
Resends the verification email to the specified address. **Authentication:** None required **Protection:** Requires Cloudflare Turnstile token
postReset Password
Resets the password using the token from the reset email. **Authentication:** None required
postVerify Email
Verifies the email address using the token from the verification email. Returns an exchange code for the HandleLogin flow. **Authentication:** None required
postVerify TOTP Enrollment
Confirms TOTP setup by validating a code from the authenticator app. Returns recovery codes on success. **Required scopes:** `auth:account:edit`
postVerify TOTP Login
Completes login by verifying the TOTP code or recovery code. Required when 2FA is enabled. **Authentication:** None required (challenge token required)