feat(mfa): allow disabling 2FA with a backup code when authenticator is lost

2026-04-20 14:19:10 +07:00
parent 6cbddbdb67
commit 6094060381
5 changed files with 44 additions and 8 deletions
@@ -14,9 +14,9 @@ class MfaAPI extends ApiClient {
    return axios.post(`${this.url}/verify`, { otp_code: otpCode });
  }

-  disable(password, otpCode) {
+  disable(password, { otpCode, backupCode } = {}) {
    return axios.delete(this.url, {
-      data: { password, otp_code: otpCode },
+      data: { password, otp_code: otpCode, backup_code: backupCode },
    });
  }