Token2 API is a RESTful API for enabling two-factor authentication of users of a website or a web application. To start using Token2 TOTPRadius appliance Web API, you will need to have the TOTPRadius appliance installed and reachable. This API uses keys that can be set on TOTPRadius admin panel. The web API is implemented for TOTPRadius appliance v0.2.1 and above.
http[s]://totpradius_appliance_ip/createuser?api_key
=[api_key]&phone
=[mobile_phone]&type
=[authentication type]&pin
=[pin code]&format
=[response format]
This API call requires the following arguments to be provided:
api
- the API key for the website. Can be obtained or set in the admin panel of the appliance phone
- the mobile phone number of the user in e.164 format. email
- User's email address type
- Authentication type to be used. Following values are possible: 0 - mobile application only (default). There is no other options for TOTPRadius appliance Web API . Kept for backward compatibility with Token2 Cloud API. pin
- PIN code, not required for TOTPRadius appliance Web API. Kept for backward compatibility with Token2 Cloud API.format
- format of the response data. Values: 1- json, 2- xml, 3- simplified plain text (true or false, no details or description), 0- serialized data (default) response
- result's description (e.g. "user created")userid
- user's unique ID. This ID will need to be stored and associated with your local user database. User ID is required to validate/generate/send OTP codessuccess
- returns "true" if the user was successfully created and assigned a unique Token2 IDhash
- User's secret key to be added to the Token2 Mobile Application or any other TOTP Mobile application hashqr
- QR Code image URL of user's secret key to be scanned using Token2 Mobile Application http[s]://totpradius_appliance_ip/validate?api_key
=[api key]&token
=[OTP]&userid
=[User's Token2 ID]&format
=[response format]
api
- the API key for the website. userid
- User's Token2 ID.token
- OTP to be verifiedformat
- format of the response data. Values: 1- json, 2- xml, 3- simplified plain text (true or false, no details or description), 0- serialized data (default) response
- result's description in English (e.g. "OTP generated and sent by SMS")userid
- User's Token2 IDvalidation
- returns "true" if OTP provided via API is valid, or "false" if not valid. Use this value to check if a user should be authenticated.[this API call is available from v0.2.8 ]
http[s]://totpradius_appliance_ip/validate?api_key
=[api key]&actionlistusers
This API returns the list of current users in JSON format only, containing the userid, username and the registration timestamp