Generate MFA authenticator secret

POST

/oauth/genAuthenticator

Last modified:2026-09-26 01:44:34

OperationId:GenerateMFAAuthenticator

Generates a new time-based one-time password (TOTP) secret and a QR code URL that an authenticator app can scan. No authentication is required. Nothing is saved: pass the returned secret as mfa_key to /oauth/mfaVerify to test a code, then to /oauth/mfaEnroll or /oauth/mfaEnrollWithToken to save it. The qrCodeUrl points to a third-party QR service (api.qrserver.com) and carries the secret in its query string. If you don't want the secret to leave your app, build the QR code yourself from secret. A missing tag returns 400.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The generated secret and QR code URL

Bodyapplication/json

🟠400Bad Request

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth/genAuthenticator' \
--header 'Content-Type: application/json' \
--data-raw '{
    "tag": "1001@example.com",
    "title": "Example App"
}'

Response Example

200 - Success

{
    "secret": "JBSWY3DPEHPK3PXP",
    "title": "Example App",
    "applicationName": "1001@example.com",
    "qrCodeUrl": "https://api.qrserver.com/v1/create-qr-code/?data=otpauth%3A%2F%2Ftotp%2F1001%40example.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DExample%2BPhone&size=200x200&ecc=M",
    "apiversion": "46.0.0"
}

Modified at 2026-09-26 01:44:34

Generate short-lived application JWT

Verify MFA passcode