Page History

...

• Login | switchable, depends on MFA
  • get email/phone number OTT (MFA) – "api/v1/token/login" + requestBody: {"type": "email/phoneNumber", "processingId": UUID}
    
    
• Reset password
  • get OTT (email or phone number, depending on which option has been chosen by user) – "api/v1/token/password/recovery" + requestBody: {"/processingId" : UUID} + responseBody: {"destination": ..., "expiration": ...}
    
    
• MFA recovery | switchable, depends on MFA 
  
  • get email/phone number OTT for verification – "api/v1/token/mfa/recovery/verification" + requestBody: {"destination": "email/phoneNumber", "processingId": UUID} + responseBody: {"destination": ..., "expiration": UUID} + validate if recovered type not passed as OTT
  • get email/phone number OTT for changing user key – "api/v1/token/mfa/recovery/newKey" + responseBody: {"destination": ..., "expiration": UUID}
    
    
• Registration
  • registration OTT (email or phone number, depending on which option has been chosen by user) – "api/v1/token/registration"  +  requestBody: {"/processingId": UUID} + responseBody: {"destination": ..., "expiration": UUID}

...

• User key management (TO BE DISCUSSED)
  • get OTT passing required operation: change/remove email/phoneNumber – "api/v1/token/userKeys" +  requestBody: {"operation": ..., "userKeyType": ...} + responseBody: {"destination": ..., "expiration": UUID}
  • get OTT for new user key – "api/v1/token/newKey" + requestBody: {"destination": ..., "ott": ...} + responseBody: {"destination": ..., "expiration": UUID} + reject if
  • add OTT for new user key – "api/v1/token/newKey/adding" + requestBody: {"destination": ...}
    
    
• Anti-phising code | switchable, depends on anti-phishing
  • "api/v1/token/antiPhishing/changing"
    
    
• Disable MFA | switchable, depends on MFA
  • get email/phone number OTT – "api/v1/token/mfa/disabling" + requestBody: {"destination": ...} + reject if destination MFA is disabled

...