auth.login_ex_continue¶
Continue in-progress authentication attempt. This endpoint should be called to continue an auth.login_ex attempt that returned OTP_REQUIRED.
This is a convenience wrapper around auth.login_ex for API consumers.
params: mechanism: the mechanism by which to continue authentication. Currently the only supported mechanism here is OTP_TOKEN.
OTP_TOKEN otp_token: one-time password token. This is only permitted if a previous auth.login_ex call responded with “OTP_REQUIRED”.
returns: JSON object containing the following keys:
response_type - will be one of the following: SUCCESS - continued auth was required
OTP_REQUIRED - otp token was rejected. API consumer may call this endpoint again with correct OTP token.
AUTH_ERR - invalid OTP token submitted too many times.
No Additional Items
Tuple Validation
Parameter 1: login_data
login_data
Type: objectNo Additional Properties
Mechanism
Type: constMust be one of:
- "OTP_TOKEN"
"OTP_TOKEN" Otp Token
Type: stringAuthCommonOptions
Type: object Default: {"user_info": true}No Additional Properties
User Info
Type: boolean Default: trueResult
AuthRespSuccess
Type: objectNo Additional Properties
Response Type
Type: constMust be one of:
- "SUCCESS"
"SUCCESS" AuthUserInfo
Type: objectNo Additional Properties
Pw Name
Type: stringName of the user.
Pw Gecos
Type: stringFull username or comment field.
Pw Dir
Type: stringUser home directory.
Pw Shell
Type: stringUser command line interpreter.
Pw Uid
Type: integerNumerical user ID of the user.
Pw Gid
Type: integerNumerical group id for the user's primary group.
Grouplist
Optional list of group IDs for groups of which this account is a member. If get_groups is not specified, this value will be null.
No Additional Items
Each item of this array must be:
Sid
Optional SID value for the account that is present if sid_info is specified in payload.
Source
Type: enum (of string)The source for the user account.
Must be one of:
- "LOCAL"
- "ACTIVEDIRECTORY"
- "LDAP"
Local
Type: booleanThe account is local to TrueNAS or provided by a directory service.
Attributes
Type: objectTwo Factor Config
Type: objectPrivilege
Type: objectAccount Attributes
Type: array of stringNo Additional Items
Each item of this array must be:
Authenticator
Type: enum (of string)Must be one of:
- "LEVEL_1"
- "LEVEL_2"
AuthRespAuthErr
Type: objectNo Additional Properties
Response Type
Type: constMust be one of:
- "AUTH_ERR"
"AUTH_ERR" AuthRespExpired
Type: objectNo Additional Properties
Response Type
Type: constMust be one of:
- "EXPIRED"
"EXPIRED" AuthRespOTPRequired
Type: objectNo Additional Properties
Response Type
Type: constMust be one of:
- "OTP_REQUIRED"
"OTP_REQUIRED" Username
Type: stringAuthRespAuthRedirect
Type: objectNo Additional Properties
Response Type
Type: constMust be one of:
- "REDIRECT"
"REDIRECT" Urls
Type: array of stringNo Additional Items
Each item of this array must be:
Required roles: