Skip to main content

CodeAuthenticationRequest

Represents an authentication one-time-code request

Extends BaseAuthenticationRequest

Attributes (5)
AttributeTypeRequiredDescription
grant_type'code'YesThe grant type for the request
codestringYesThe one-time code
code_verifierstringNoPKCE verifier — required for a primary code login; absent when mfa_challenge_id is set
mfa_challenge_idstringNoWhen set, completes a pending MFA challenge; replaces code_verifier as proof-of-origin
challenge_idstringNoThe phone/email challenge id (returned by POST /auth/factors/start for phone-MFA). Required when mfa_challenge_id is set; ignored otherwise (resolved via PKCE)