# TOTP

Login using time-based one-time passcodes (TOTP), which can be generated by authenticator apps like Google Authenticator. This provides passwordless, two-factor authentication using a single login method.


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [TOTP](https://developer.transmitsecurity.com/_bundle/openapi/user/backend-totp.openapi.yaml)

 - [POST /v1/auth/totp/authenticate](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/authenticatetotp.md): Authenticates a user using a TOTP code generated by the user's authenticator app. Once the TOTP is validated using the secret created upon registration and the TOTP method configuration, user tokens a
 - [POST /v1/auth/totp/transaction/start](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/starttransactionsigningtotp.md): Start a transaction signing flow with TOTP. Receive a challenge to add to the authenticator app.
 - [POST /v1/auth/totp/transaction/authenticate](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/authenticatetransactionsigningtotp.md): Authenticates a user using a TOTP code generated by the user's authenticator app with the challenge received from the transaction start. Once the TOTP is validated using the secret created upon regist
 - [POST /v1/auth/totp/register](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/registertotpauth.md): Registers a TOTP authenticator for the logged-in user. The response contains the secret and other configuration that will be used to generate TOTP codes for authentication. The app must provide it to
 - [POST /v1/users/me/totp/revoke](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/revoketotp.md): Unregisters the TOTP authenticator of the currently logged-in user.
 - [POST /v1/users/{userId}/totp/revoke](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/revoketotpmanagement.md): Unregisters a user's TOTP authenticator. **Required permissions**: `apps:delete`, `[appId]:delete`, `authenticators:delete`.
 - [POST /v1/users/me/totp](https://developer.transmitsecurity.com/openapi/user/backend-totp.openapi/other/registertotp.md): **Deprecated:** use `POST /v1/auth/totp/register` instead. Registers a TOTP authenticator for the logged-in user. The response contains the secret and other configuration that will be used to generat