Overview
POST/customer/login/mfacustomer

Complete customer login by satisfying the second factor → aal=2 session

Create a record in mfa.

Auth: bearerAuth — calls run as the authenticated user.

Request body

application/json · optional

  • tokenstring

    MFA pending token

  • method"sms" | "totp" | "recovery"
  • codestring
Example
{
  "token": "string",
  "method": "sms",
  "code": "string"
}
Responses
200

customer access token + opaque refresh token + customerId

  • tokenstring

    End-customer access token (typ='customer' JWT, short-lived)

  • refreshTokenstring

    Opaque customer-session refresh token (single-use; rotated on refresh)

  • customerIdstring

    The end-customer id

Example
{
  "token": "string",
  "refreshToken": "string",
  "customerId": "string"
}
400

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
401

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
409

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
Code examples
cURL
curl -X POST "https://api.agenticdeveloperhub.com/customer/login/mfa" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string",
  "method": "sms",
  "code": "string"
}'
JavaScript
const res = await fetch("https://api.agenticdeveloperhub.com/customer/login/mfa", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: "{\n  \"token\": \"string\",\n  \"method\": \"sms\",\n  \"code\": \"string\"\n}",
});
const data = await res.json();