Pular para o conteúdo principal

Turn two-factor off

DELETE 
/admin/auth/totp

Removes the second factor and burns every recovery code with it.

A DELETE with a body — the password. Unusual, and deliberate: the alternative is POST /totp/disable, which describes the effect less honestly for the sake of a convention no client here enforces. The password is required for the same reason it is on the recovery codes, with more at stake.

Request​

Responses​

Two-factor disabled