Atomically replace the active TOTP factor after fresh non-recovery step-up.

Authorization

platformSession

laravel_session<token>

In: cookie

Header Parameters

X-XSRF-TOKEN*string

CSRF token paired with the current web session.

Length1 <= length <= 2048

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

factor*Uuid

Formatuuid

code*string

Match^\d{6}$

Response Body

`application/json`

curl -X POST "https://example.com/platform/v1/identity/mfa/replacement/confirm" \  -H "X-XSRF-TOKEN: string" \  -H "Content-Type: application/json" \  -d '{    "factor": "7187a4e0-5c7c-4f48-ae84-7d7f380604d0",    "code": "string"  }'

{  "data": {    "factor": "7187a4e0-5c7c-4f48-ae84-7d7f380604d0",    "recovery_codes": [      "string"    ],    "mfa_verified": true  }}

Authorization

Header Parameters

Request Body

Response Body

200application/json

401application/json

403application/json

422application/json

429application/json

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`