Purpose

Disable/Enable 2FA for user (via Admin-console).

Request parameters

• user_id
• 2fa_id

Logic WS

• Validate token & scope
• Validate user_id FK
• Validate 2fa_id FK

• Get 2FA item by 2fa_id  for non-blocked user by $.user_id

  SELECT *
  FROM authentication_factors AS 2FA
  	INNER JOIN user AS U
  		ON 2FA.user_id = U.id
  WHERE 
  	U.id = $.user_id
  		AND 2FA.id = $.2fa_id
  		AND U.is_active = TRUE
  		AND U.is_blocked = FALSE

  • If  exist 2FA item for user →  update 2FA item (set values):
    • 2FA.is_active = TRUE
    • 2FA.update_at = now()
• Return 200

Response

• 200 if 2FA successful disable + 2FA_object_view
• 4xx in other case