dialogbrain-com Auth Totp API

openapi: 3.2.0
info:
  title: DialogBrain v2 API Gateway Auth Totp API
  description: Clean refactored API gateway with minimal vertical slice
  version: 0.1.0
tags:
- name: auth-totp
paths:
  /auth/totp/status:
    get:
      tags:
      - auth-totp
      summary: Totp Status
      operationId: totp_status_auth_totp_status_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/src__api__auth_totp__StatusResponse'
  /auth/totp/setup:
    post:
      tags:
      - auth-totp
      summary: Totp Setup
      description: 'Mint a fresh unconfirmed secret and return the QR payload.


        The secret lands in `totp_pending_secret_encrypted`, never on the live

        one. That is what makes "move to a new phone" safe: the authenticator the

        user still carries keeps working until a code from the NEW app promotes

        it, and a setup that is started and abandoned changes nothing at all.'
      operationId: totp_setup_auth_totp_setup_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SetupResponse'
  /auth/totp/confirm:
    post:
      tags:
      - auth-totp
      summary: Totp Confirm
      description: Prove the app works, then switch 2FA on and hand over recovery codes.
      operationId: totp_confirm_auth_totp_confirm_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CodeRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConfirmResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /auth/totp/disable:
    post:
      tags:
      - auth-totp
      summary: Totp Disable
      description: 'Remove the authenticator. Requires a current code or a recovery code,

        so a hijacked session cannot strip the factor that would stop it.


        2FA itself stays ON (the email code remains); turning 2FA off entirely is

        the separate Settings switch.'
      operationId: totp_disable_auth_totp_disable_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CodeRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    src__api__auth_totp__StatusResponse:
      properties:
        enrolled:
          type: boolean
          title: Enrolled
        pending:
          type: boolean
          title: Pending
          default: false
        confirmed:
          type: boolean
          title: Confirmed
        two_fa_enabled:
          type: boolean
          title: Two Fa Enabled
        recovery_codes_remaining:
          type: integer
          title: Recovery Codes Remaining
      type: object
      required:
      - enrolled
      - confirmed
      - two_fa_enabled
      - recovery_codes_remaining
      title: StatusResponse
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    SetupResponse:
      properties:
        secret:
          type: string
          title: Secret
        otpauth_uri:
          type: string
          title: Otpauth Uri
      type: object
      required:
      - secret
      - otpauth_uri
      title: SetupResponse
    ConfirmResponse:
      properties:
        two_fa_enabled:
          type: boolean
          title: Two Fa Enabled
        recovery_codes:
          items:
            type: string
          type: array
          title: Recovery Codes
      type: object
      required:
      - two_fa_enabled
      - recovery_codes
      title: ConfirmResponse
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    CodeRequest:
      properties:
        code:
          type: string
          maxLength: 14
          minLength: 6
          title: Code
      type: object
      required:
      - code
      title: CodeRequest