Skip to main content
POST
Confirm MFA passcode

Query Parameters

fluid_shop
string

Company subdomain used to pick which company receives the mfa_verified webhook. When omitted the company is resolved from the authenticated record's own companies.

Body

application/json
uuid
string
required
multi_factor_authentication
object
required

Response

Success

authenticated
boolean
required

true once the submitted verification code matched, meaning the JWTs in companies are usable.

auth_type
enum<string>
required

Top-level principal kind resolved by this login. Prefer the per-entry companies[].auth_type when routing, since a user can be a rep in one company and a customer in another.

Available options:
user,
customer,
rep
companies
object[]
required

One entry per company the authenticated principal belongs to, each with its own bearer JWT. A single-company user gets a one-element array.

meta
object

Response metadata (request id and generation timestamp).