Verify step-up MFA and issue step-up token

POST

/v1/auth/step-up/verify

Verifies step-up MFA and returns a short-lived step_up_token for the X-Step-Up-Token header. Public endpoint; requires step_up_session_id and OTP code. Token is validated by the gateway before forwarding sensitive requests.

Authentication: none.

Request

Body Params application/json

Examples

Responses

🟢200

application/json

Step-up token issued

Bodyapplication/json

🟠400BadRequest

🟠401Unauthorized

🟠403Forbidden

🟠404NotFound

🟠409Conflict

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location '/v1/auth/step-up/verify' \
--header 'Content-Type: application/json' \
--data '{
    "property1": "string",
    "property2": "string"
}'

Response Example

200 - Example 1

{
    "step_up_token": "string",
    "expires_in": 0
}

Modified at 2026-06-23 04:24:01

Initiate step-up authentication

Verify email OTP