2fa — Blesyum Core API

POST/api/v1/2fa/backup-codes/regenerate

Regenerate 2FA backup/recovery codes (re-auth with the account password).

Oturum

Requires 2FA to be enabled; the old codes are invalidated and a fresh set of 10 one-time codes is returned once (never persisted in the clear). The user reveals/saves them from the Security page, same as at setup time.

İstek

curl -X POST "https://api.blesyum.com/api/v1/2fa/backup-codes/regenerate" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/2fa/confirm

Confirm TOTP setup with a code, enable 2FA, and return one-time backup codes.

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/2fa/confirm" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/2fa/disable

Disable 2FA (re-auth with the account password).

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/2fa/disable" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/2fa/setup

Begin TOTP 2FA setup: generate a pending secret + provisioning URI for a QR.

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/2fa/setup" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

GET/api/v1/2fa/status

Current 2FA status for the signed-in user.

Oturum

İstek

curl -X GET "https://api.blesyum.com/api/v1/2fa/status" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}