[keycloak-user] 2FA via REST API -> server-spi-private?

[Stefan Schlesinger]

Can you give an example where to post the mentioned data? The curl call I’m trying to do, gives me a 404:

curl -v \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d "[{"\""type"\"":"\""totp"\"","\""value"\"":"\""$OTP_CODE"\""}]" \
  $BASE_URL/realms/$REALM/credential-validation

Best, Stefan

> On 09 Jan 2017, at 12:47, Stian Thorgersen <sthorger at redhat.com> wrote:
> 
> Neither server-private-spi or authorization api hasn't anything to do with what you are trying to achieve.
> 
> You need to use the direct grant api and include otp code has "totp" in the form data.