post https://{applicationQualifiedDomain}.us.wristband.dev/api/v1/auth-factors/totp/verify-challenge
Verifies the TOTP auth factor challenge.
Required Permissions
Below is the list of required permissions needed to interact with this API. For each permission the allowed permission boundaries are also specified.
| Permission | Boundary | Description |
|---|---|---|
| totp-auth-factor:verify-challenge | Application | The subject can perform this operation if the user specified in the request belongs to the subject's associated application. |
| Tenant | The subject can perform this operation if the user specified in the request belongs to the subject's associated tenant. | |
| Tenant Inclusion List | The subject can perform this operation if the user specified in the request belongs to a tenant in the tenant inclusion list. | |
| Tenant Exclusion List | The subject can perform this operation if the user specified in the request belongs to the subject's associated application but does not belong to a tenant in the tenant exclusion list. | |
| Self | The subject can perform this operation if the user specified in the request is the subject itself. |