Generate MFA authenticator secret

POST

/oauth/genAuthenticator

Last modified:2026-10-30 21:19:50

OperationId:GenerateMFAAuthenticator

Generates a time-based one-time password (TOTP) secret and a QR code URL for an authenticator app to scan, without saving anything. No authentication is required. Test a code against the secret with /oauth/mfaVerify, then save it with /oauth/mfaEnroll or /oauth/mfaEnrollWithToken.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The generated secret and QR code URL.

Bodyapplication/json

🟠400Bad Request

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth/genAuthenticator' \
--header 'Content-Type: application/json' \
--data-raw '{
    "tag": "1001@example.com",
    "title": "Example App"
}'

Response Example

200 - Success

{
    "secret": "JBSWY3DPEHPK3PXP",
    "title": "Example App",
    "applicationName": "1001@example.com",
    "qrCodeUrl": "https://api.qrserver.com/v1/create-qr-code/?data=otpauth%3A%2F%2Ftotp%2F1001%40example.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DExample%2BPhone&size=200x200&ecc=M",
    "apiversion": "46.0.0"
}

Modified at 2026-10-30 21:19:50

Generate short-lived application JWT

Verify MFA passcode