/bff/account/setup-otp-disable

Removes the stored TOTP secret after verifying the user can still produce a valid code. When the user has no 2FA configured, returns { success: true } as a no-op.

AccountpostBffAccountSetup-otp-disable

Parameters

JSON body

Request body

application/json

otpCodestringRequired

Current 6-digit TOTP code from the authenticator app — required to prove the request comes from the legitimate device and is not a session-hijack attempt to drop 2FA.

Response schema

1 status code documented

200Success

object | object

One of 2:

Variant 1

success"true"Required

Variant 2

success"false"Required

reason"invalid-code"Required

Response example

application/json

{
  "success": true
}

Request example

POST /bff/account/setup-otp-disable

post

curl -X POST "https://api.bizkithub.com/bff/account/setup-otp-disable" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{
  "otpCode": "example_otpCode"
}'

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key