cURL
curl --request POST \ --url https://api.flowxi.app/api/v1/auth/2fa/verify-login \ --header 'Content-Type: application/json' \ --data ' { "challenge_id": "6ff8f7f6-1eb3-3525-be4a-3932c805afed", "code": "123456" } '
{ "code": "TOKEN_ISSUED", "message": "Token issued.", "access_token": "125|XXXXXXXXXXXXXXXXXXXXXXXX", "token_type": "Bearer", "user_id": 123, "account_status": "active" }
Validates TOTP and issues a token (enforces 1 token/device). Challenge bound to IP + User-Agent + device_id.
"6ff8f7f6-1eb3-3525-be4a-3932c805afed"
"123456"
Token issued.
"OK"
Bearer token (plain text). Shown only once.
"125|XXXXXXXXXXXXXXXXXXXXXXXX"
"Bearer"
123
"active"