DELETE
/v1/me/two-factorRemoves the authenticator, as the settings screen on the website does. Its recovery codes go with it. Passkeys stay.
Refused for an account that has to have two-factor when the authenticator is its only second factor: add a passkey first. Asking when there is nothing to turn off is not an error.
Request
curl -X DELETE https://api.proppertrading.com/v1/me/two-factor \
-H "Authorization: Bearer ptat_9f2c1a44_3b8e7d2f5c9a1b4e6d8f0a2c4e6b8d1f"
Response
204, with no body.
Errors
| Status | Code | Meaning |
|---|---|---|
| 400 | last_two_factor_method | The account has to have two-factor, and this is its only second factor |
| 403 | insufficient_scope | This device does not hold me:write |