post https://api.cakemail.dev/token/challenge
This endpoint serves to complete the MFA (multi-factor authentication)
challenge and return an access and refresh token pair. The complete login
sequence for an MFA-enabled user is as follows:
- The client sends a POST request to
/token
with theusername
and
password
in the request body. - The API returns a
challenge
in the response body. - The client sends a POST request to
/token/challenge
with the
challenge
andcode
in the request body. - The API returns an
access_token
andrefresh_token
in the response
body.
Access and Refresh tokens should be treated as sensitive data and should
be stored securely.