Skip to main content
POST
/
v1
/
login
/
mfa
/
verify
curl --request POST \
  --url https://auth.sandbox.lerian.net/v1/login/mfa/verify \
  --header 'Content-Type: application/json' \
  --data '
{
  "mfaToken": "eyJhbGciOiJIUzI1NiJ9...",
  "passcode": "123456",
  "mfaType": "app",
  "rememberDevice": false
}
'
{
  "accessToken": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtYnVpbHQtaW4iLCJ0eXAiOiJKV1QifQ...",
  "idToken": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtYnVpbHQtaW4iLCJ0eXAiOiJKV1QifQ...",
  "tokenType": "Bearer",
  "expiresIn": 3600,
  "refreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "scope": "openid profile email"
}

Documentation Index

Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt

Use this file to discover all available pages before exploring further.

Body

application/json

Information used to verify an MFA challenge during login. Provide either a passcode or a recovery code — not both.

​
mfaToken
string
required

The temporary MFA token received from the access token endpoint.

​
passcode
string
required

The 6-digit verification code from your authenticator app, email, or SMS.

Required string length: 6
​
mfaType
enum<string>
required

The MFA method being verified.

Available options:
app,
email,
sms
​
recoveryCode
string

A recovery code to use when the primary MFA method is unavailable.

​
rememberDevice
boolean
default:false

When set to true, the device is remembered for future logins.

Response

MFA verification succeeded. Returns the access credentials for the authenticated session.

Information used to manage OAuth2 authentication data. It securely stores access credentials, ensuring seamless authorization and control over protected resources.

​
accessToken
string
required

A temporary token that grants the user secure access the APIs.

​
expiresIn
integer
required

The time (in seconds) until the token expires.

​
refreshToken
string
required

A long-lived token that allows users to obtain a new access_token without requiring them to log in again.

​
tokenType
string
required

The type of token issued.

​
idToken
string

The identity details about the authenticated user in OpenID Connect standards. It can be used to verify user authentication.

​
scope
string

The level of access granted to the issued tokens