Generate TOTP secret for setup

POSThttps://app.speybooks.com/api/v1/auth/totp/setup

Begin TOTP enrolment. Returns a shared secret and an otpauth URI for the client to render as a QR code. The secret is stored but not yet active; the user activates it by verifying a code at the enable endpoint. Returns an error if TOTP is already enabled.

Response

200Returns the TOTP secret and otpauth URL for QR code generation. Call /totp/enable with a valid code to activate.

Show response fields

otpauthstring

secretstring

Error codes

400TOTP is already enabled for this user.

RequestPOST/v1/auth/totp/setupcurl

curl -X POST https://api.speybooks.com/v1/auth/totp/setup \
  -H "Authorization: Bearer eyJ..."

Response200

{
  "success": true,
  "data": {
    "secret": "EXAMPLEONLYDONOTUSE2",
    "otpauth": "otpauth://totp/SpeyTech%20Accounting:user@example.com?secret=EXAMPLEONLYDONOTUSE2&issuer=SpeyTech%20Accounting"
  }
}