/bff/account/setup-otp-generate-secret

Generates a fresh RFC 4226 base32 TOTP secret (160 bits) plus the canonical otpauth:// URI for QR-code rendering. The secret is NOT persisted yet — call /setup-otp-save with a verification code to enable 2FA.

AccountpostBffAccountSetup-otp-generate-secret

Parameters

No parameters required

This endpoint takes no path, query, header or body parameters.

Response schema

1 status code documented

200Success

secretstringRequired

Base32-encoded TOTP secret (RFC 4648, A–Z2–7, 32 chars).

otpAuthUristringRequired

Canonical otpauth://totp/… URI suitable for direct QR encoding (works with all TOTP apps).

qrCodeUrlstringRequired

Pre-rendered QR code image URL hosted on cdn.bizkithub.com.

Response example

application/json

{
  "secret": "example_secret",
  "otpAuthUri": "example_otpAuthUri",
  "qrCodeUrl": "example_qrCodeUrl"
}

Request example

POST /bff/account/setup-otp-generate-secret

post

curl -X POST "https://api.bizkithub.com/bff/account/setup-otp-generate-secret" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY"

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key