/bff/account/login-otp-auth

Validates the 6-digit TOTP code (RFC 6238, HMAC-SHA1, 30s period) against the user's stored base32 secret with ±1-step clock skew tolerance, and authorizes the login identity if correct.

AccountpostBffAccountLogin-otp-auth

Parameters

JSON body

Request body

application/json

otpCodestringRequired

One-time password code from the authenticator app.

Response schema

1 status code documented

200Success

successbooleanRequired

Whether the OTP code was valid.

Response example

application/json

{
  "success": false
}

Request example

POST /bff/account/login-otp-auth

post

curl -X POST "https://api.bizkithub.com/bff/account/login-otp-auth" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{
  "otpCode": "example_otpCode"
}'

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key