Send the password unless this session verified a second factor in the last 10 minutes. Not allowed for the last second factor while a role requires two-factor authentication.
Authorization
bearer
Authorizationheader · stringrequired
Session token from POST /v1/auth/login with "transport": "bearer". Browsers use the session cookie that login sets instead.
Path
idstringrequired
maxLength: 64
Body
application/json
passwordstring
Required unless this session verified a second factor in the last 10 minutes
maxLength: 512
Responses
errors: application/problem+json
204
No Content
401
Unauthorized
404
Not Found
409
Conflict
422
Unprocessable Entity
500
Internal Server Error
Match errors on the problem's code, which stays the same, not on its message.