{"schemaVersion":"1.0","sourceCommit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca","sourceVisibility":"private","article":{"id":"api-mansoq-core-totpviewset-affceebd","title":"TOTP API reference · mansoq-core","summary":"Static source contract for TOTP: 4 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.","module":"IT & integrations","roles":["IT administrator","Developer","Integration engineer"],"facilities":["All configured facility types"],"kind":"reference","minutes":4,"prerequisites":["Use the API contract from the installed deployment and an authorized synthetic test environment.","Confirm facility/organization scope, action permissions and optional app enablement.","This reference is static source evidence; complete payload, authorization, failure and end-to-end review remains recorded as pending."],"steps":[],"sections":[{"title":"Declared route and availability","body":"This resource is declared in **mansoq-core** at `/api/v1/mfa/totp/`. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness."},{"title":"Operation map","body":"| Method | Path | Action | Evidence |\n| --- | --- | --- | --- |\n| POST | `/api/v1/mfa/totp/setup/` | setup | @action declaration |\n| POST | `/api/v1/mfa/totp/verify/` | verify | @action declaration |\n| POST | `/api/v1/mfa/totp/disable/` | disable | @action declaration |\n| POST | `/api/v1/mfa/totp/regenerate_backup_codes/` | regenerate_backup_codes | @action declaration |"},{"title":"setup · POST","body":"**POST /api/v1/mfa/totp/setup/** — action `setup`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator responses: TOTPSetupResponse**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| uri | str | true | No extra constraint extracted |\n| secret_key | str | true | No extra constraint extracted |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Declared refusal/error evidence:** ValidationError: Two-factor authentication is not enabled for your account; ValidationError: Two-factor authentication is already enabled for your account."},{"title":"verify · POST","body":"**POST /api/v1/mfa/totp/verify/** — action `verify`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator request: TOTPVerifyRequest**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| code | str | true | No extra constraint extracted |\n\n**decorator responses: TOTPVerifyResponse**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| backup_codes | list[str] | true | No extra constraint extracted |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Explicit response statuses in observed code:** status.HTTP_400_BAD_REQUEST. Other branches/framework exception handling may differ.\n\n**Declared refusal/error evidence:** ValidationError: TOTP not configured for your account; ValidationError: Two-factor authentication is not enabled for your account; ValidationError: Two-factor authentication is already enabled for your account."},{"title":"disable · POST","body":"**POST /api/v1/mfa/totp/disable/** — action `disable`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator request: PasswordVerifyRequest**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| password | str | true | No extra constraint extracted |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Explicit response statuses in observed code:** status.HTTP_200_OK. Other branches/framework exception handling may differ.\n\n**Declared refusal/error evidence:** ValidationError: Two-factor authentication is not enabled for your account; ValidationError: Two-factor authentication is already enabled for your account."},{"title":"regenerate_backup_codes · POST","body":"**POST /api/v1/mfa/totp/regenerate_backup_codes/** — action `regenerate_backup_codes`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator request: PasswordVerifyRequest**. Declared fields below; inherited fields are retained in the schema inventory.\n\nThe declared field table is shown at its first occurrence in this reference; this operation links the same schema.\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Declared refusal/error evidence:** ValidationError: Two-factor authentication is not enabled for your account; ValidationError: Two-factor authentication is already enabled for your account."},{"title":"Integration review checklist","body":"Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure."}],"troubleshooting":[{"problem":"A declared route is unavailable or a request is rejected","solution":"Compare the installed revision, actual API schema, optional plugin mount, HTTP-method restrictions and recorded validation/permission evidence. Do not bypass a refusal or send a production transaction to test documentation."}],"sources":[{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":24,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":33,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py","line":322,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":182,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":6,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":70,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":53,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":11,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":15,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":120,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":19,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":157,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}],"related":["it-api-contract","it-api-auth","security-rcm-roles"],"verification":"Static API contract — behavior review pending","version":"f6e9f05f76d4","apiReferenceIds":["backend-resource-11505cf7affceebd","backend-resource-11505cf7affceebd:POST:setup","backend-resource-11505cf7affceebd:POST:verify","backend-resource-11505cf7affceebd:POST:disable","backend-resource-11505cf7affceebd:POST:regenerate_backup_codes"]},"backend":{"resources":[{"id":"backend-resource-11505cf7affceebd","localPrefix":"mfa/totp","viewset":"TOTPViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","basename":"mfa-totp","source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"conditions":[],"repository":"repositories/platform/mansoq-core","classSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":24,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"description":"","path":"/api/v1/mfa/totp/","mountStatus":"verified core mount in config/urls.py","operationIds":["backend-resource-11505cf7affceebd:POST:setup","backend-resource-11505cf7affceebd:POST:verify","backend-resource-11505cf7affceebd:POST:disable","backend-resource-11505cf7affceebd:POST:regenerate_backup_codes"],"unresolvedViewset":false,"reviewStatus":"registered resource enumerated; behavioral review pending"}],"operations":[{"id":"backend-resource-11505cf7affceebd:POST:setup","resourceId":"backend-resource-11505cf7affceebd","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/mfa/totp/setup/","declaredPattern":"/api/v1/mfa/totp/setup/","action":"setup","viewset":"TOTPViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":33,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:33:setup","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py:322:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:182:_validate_totp_state"],"schemaIds":{"decorator responses":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPSetupResponse"},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]},{"id":"backend-resource-11505cf7affceebd:POST:verify","resourceId":"backend-resource-11505cf7affceebd","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/mfa/totp/verify/","declaredPattern":"/api/v1/mfa/totp/verify/","action":"verify","viewset":"TOTPViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":70,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:70:verify","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py:322:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:182:_validate_totp_state","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:53:_generate_backup_codes"],"schemaIds":{"decorator request":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyRequest","decorator responses":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyResponse"},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]},{"id":"backend-resource-11505cf7affceebd:POST:disable","resourceId":"backend-resource-11505cf7affceebd","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/mfa/totp/disable/","declaredPattern":"/api/v1/mfa/totp/disable/","action":"disable","viewset":"TOTPViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":120,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:120:disable","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py:322:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:182:_validate_totp_state"],"schemaIds":{"decorator request":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest"},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]},{"id":"backend-resource-11505cf7affceebd:POST:regenerate_backup_codes","resourceId":"backend-resource-11505cf7affceebd","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/mfa/totp/regenerate_backup_codes/","declaredPattern":"/api/v1/mfa/totp/regenerate_backup_codes/","action":"regenerate_backup_codes","viewset":"TOTPViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":280,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":157,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:157:regenerate_backup_codes","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py:322:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:182:_validate_totp_state","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:53:_generate_backup_codes"],"schemaIds":{"decorator request":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest"},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]}],"methodEvidence":[{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:33:setup","name":"setup","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":33,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":["repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPSetupResponse"],"schemaUsages":[{"purpose":"decorator responses","schemaId":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPSetupResponse","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":25,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py:322:get_queryset","name":"get_queryset","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.base.EMRBaseViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/base.py","line":322,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:182:_validate_totp_state","name":"_validate_totp_state","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":182,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"user","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":182,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"required_state","type":"bool","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":182,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":"Two-factor authentication is not enabled for your account","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":186,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"exception":"ValidationError","message":"Two-factor authentication is already enabled for your account","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":191,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:70:verify","name":"verify","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":70,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":"TOTP not configured for your account","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":75,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[{"value":null,"symbol":"status.HTTP_400_BAD_REQUEST","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":109,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"conditions":[],"schemaIds":["repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyRequest","repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyResponse"],"schemaUsages":[{"purpose":"decorator request","schemaId":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyRequest","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":61,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"purpose":"decorator responses","schemaId":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyResponse","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":61,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:53:_generate_backup_codes","name":"_generate_backup_codes","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"Generate 8-digit backup codes.","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":53,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"count","type":"int","required":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":53,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:120:disable","name":"disable","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":120,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[{"value":null,"symbol":"status.HTTP_200_OK","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":141,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"conditions":[],"schemaIds":["repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest"],"schemaUsages":[{"purpose":"decorator request","schemaId":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":111,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py:157:regenerate_backup_codes","name":"regenerate_backup_codes","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.totp.TOTPViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":157,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":["repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest"],"schemaUsages":[{"purpose":"decorator request","schemaId":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/totp.py","line":143,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"}],"schemas":[{"id":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPSetupResponse","name":"TOTPSetupResponse","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":6,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"uri","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":7,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}},{"name":"secret_key","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":8,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[],"baseTypes":["BaseModel"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]},{"id":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyRequest","name":"TOTPVerifyRequest","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":11,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"code","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":12,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[],"baseTypes":["BaseModel"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]},{"id":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.TOTPVerifyResponse","name":"TOTPVerifyResponse","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":15,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"backup_codes","type":"list[str]","required":true,"hasDefault":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":16,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[],"baseTypes":["BaseModel"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]},{"id":"repositories/platform/mansoq-core:mansoq.emr.resources.mfa.spec.PasswordVerifyRequest","name":"PasswordVerifyRequest","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":19,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"password","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/resources/mfa/spec.py","line":20,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[],"baseTypes":["BaseModel"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]}],"frameworkSettings":[{"name":"DEFAULT_AUTHENTICATION_CLASSES","value":["config.authentication.CustomJWTAuthentication","config.authentication.CustomBasicAuthentication","rest_framework.authentication.SessionAuthentication","rest_framework.authentication.TokenAuthentication"],"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PERMISSION_CLASSES","value":["rest_framework.permissions.IsAuthenticated","mansoq.security.utils.permission_class.MansoqAuthentication"],"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PAGINATION_CLASS","value":"mansoq.utils.pagination.mansoq_pagination.MansoqLimitOffsetPagination","source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"PAGE_SIZE","value":14,"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"}]},"frontend":{"operations":[],"schemas":[]},"services":{"operations":[]},"boundaries":[]}