Regenerate backup codes — requires a valid TOTP code

POST

/api/v1/auth/2fa/backup-codes

Invalidates the previous set. New codes shown once.

Authorization

bearer

Example Request

curl -X POST 'http://localhost:3001/api/v1/auth/2fa/backup-codes'

Example Request

curl -X POST 'http://localhost:3001/api/v1/auth/2fa/backup-codes'

Example Response201

Empty

Refresh access token POST

Get a new access token using a valid refresh token. Rate limited to 20 requests per minute.

Creates a new user account and sends email verification link. Rate limited to 5 requests per minute.