Stytch - Auth platform for developers

The TOTP Authenticate method wraps the authenticate TOTP API endpoint.

If there is a current Member Session, the SDK will call the endpoint with the session token. This will add the totp factor to the existing Member Session. Otherwise, the SDK will use the intermediate session token. This will consume the intermediate session token and create a Member Session.

Intermediate session tokens are generated upon successful calls to primary authenticate methods in the case where MFA is required, such as email magic link authenticate,or upon successful calls to discovery authenticate methods, such as email magic link discovery authenticate.

If neither a Member Session nor an intermediate session token is present, this method will fail.

If this method succeeds, the Member will be logged in, granted an active session, and the session cookies will be minted and stored in the browser.

You can listen for successful login events anywhere in the codebase with the stytch.session.onChange() method or useStytchMemberSession hook if you are using React.

import React, { useCallback, useState } from 'react'; import { useStytchB2BClient } from '@stytch/react/b2b'; export const Authenticate = () => { const stytch = useStytchB2BClient(); const [totpCode, setTotpCode] = useState(''); const authenticate = useCallback( (e) => { e.preventDefault(); stytch.totp.authenticate({ member_id: 'member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f', organization_id: 'organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931', code: totpCode, session_duration_minutes: 60, }); }, [stytch, totpCode], ); const handleChange = useCallback((e) => { setTotpCode(e.target.value); }, []); return ( <form> <label htmlFor="totp-input">Enter code</label> <input id="totp-input" value={totpCode} onChange={handleChange} /> <button onClick={authenticate} type="submit"> Submit </button> </form> ); };

{ "status_code": 200, "request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141", "member_id": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f", "organization_id": "organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931", "session_jwt": "example_jwt", "session_token": "mZAYn5aLEqKUlZ_Ad9U_fWr38GaAQ1oFAhT8ds245v7Q", "member_session": {...}, "member": {...}, "organization": {...} }

Discovery

One-Time Passcodes

Time-Based One-Time Passcodes

Recovery Codes

TOTP Authenticate

Method parameters

Response fields