# Interactive

Browser-facing endpoints backing the hosted auth UI (/ui): password sign-in, local registration, and sign-out. Same-origin JSON; not part of the OAuth2/OIDC wire protocol.

## Endpoints

- [`POST /v1/auth/sign-in` Password sign-in (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/sign-in.md)
- [`POST /v1/auth/register` Local account registration (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/register-user.md)
- [`GET /v1/auth/captcha` The captcha the hosted UI must solve (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/get-captcha-challenge.md)
- [`POST /v1/auth/password-reset` Ask for a password-reset link (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/request-password-reset.md)
- [`POST /v1/auth/password-reset/confirm` Set a new password from a reset link (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/confirm-password-reset.md)
- [`POST /v1/auth/invitation/accept` Choose a password from an invitation link (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/accept-invitation.md)
- [`POST /v1/auth/verify-email/resend` Ask for a link that verifies an email address (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/request-email-verification.md)
- [`POST /v1/auth/verify-email/confirm` Verify an email address from a link (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/confirm-email-verification.md)
- [`POST /v1/auth/broker/route` Route an email address to the member organization that owns its domain](https://www.nauthera.io/docs/v1/api/interactive/broker-route.md)
- [`GET /v1/auth/broker/{member}/start` Begin a sign-in at a member organization of this broker](https://www.nauthera.io/docs/v1/api/interactive/broker-start.md)
- [`GET /v1/auth/broker/{member}/callback` The member organization's redirect back to this broker](https://www.nauthera.io/docs/v1/api/interactive/broker-callback.md)
- [`GET /v1/auth/federation/{slug}/start` Begin a sign-in through an identity provider](https://www.nauthera.io/docs/v1/api/interactive/federation-start.md)
- [`GET /v1/auth/federation/{slug}/callback` The identity provider's redirect back](https://www.nauthera.io/docs/v1/api/interactive/federation-callback.md)
- [`POST /v1/auth/sign-out` Sign out of the interactive session (hosted auth UI)](https://www.nauthera.io/docs/v1/api/interactive/sign-out.md)
- [`POST /v1/auth/logout/confirm` Answer an RP-initiated logout confirmation (RP-Initiated Logout 1.0 §2)](https://www.nauthera.io/docs/v1/api/interactive/confirm-logout.md)
- [`POST /v1/auth/consent` Describe the pending authorization request (OIDC Core §3.1.2.4)](https://www.nauthera.io/docs/v1/api/interactive/consent-prompt.md)
- [`POST /v1/auth/consent/decision` Record the user's consent decision (OIDC Core §3.1.2.4)](https://www.nauthera.io/docs/v1/api/interactive/decide-consent.md)
- [`POST /v1/auth/device/verify` Look up a device authorization by its user code (RFC 8628 §3.3)](https://www.nauthera.io/docs/v1/api/interactive/verify-device-user-code.md)
- [`POST /v1/auth/device/decision` Approve or deny a device authorization (RFC 8628 §3.3)](https://www.nauthera.io/docs/v1/api/interactive/decide-device-authorization.md)
- [`GET /v1/auth/mfa/totp/enroll` Begin (or re-display) TOTP enrollment](https://www.nauthera.io/docs/v1/api/interactive/begin-totp-enrollment.md)
- [`POST /v1/auth/mfa/totp/activate` Confirm and activate TOTP enrollment](https://www.nauthera.io/docs/v1/api/interactive/activate-totp-enrollment.md)
- [`POST /v1/auth/mfa/totp/recovery-ack` Acknowledge saved recovery codes and complete enrollment](https://www.nauthera.io/docs/v1/api/interactive/acknowledge-recovery-codes.md)
- [`POST /v1/auth/mfa/totp/verify` Verify a TOTP code during sign-in (step-up)](https://www.nauthera.io/docs/v1/api/interactive/verify-totp-challenge.md)
- [`POST /v1/auth/mfa/email/enroll` Send the code that enrolls the email second factor](https://www.nauthera.io/docs/v1/api/interactive/send-email-enrollment-code.md)
- [`POST /v1/auth/mfa/email/activate` Confirm and activate the email second factor](https://www.nauthera.io/docs/v1/api/interactive/activate-email-enrollment.md)
- [`POST /v1/auth/mfa/email/send` Send a sign-in code to the email second factor](https://www.nauthera.io/docs/v1/api/interactive/send-email-challenge-code.md)
- [`POST /v1/auth/mfa/email/verify` Verify an emailed code during sign-in (step-up)](https://www.nauthera.io/docs/v1/api/interactive/verify-email-challenge.md)
- [`POST /v1/auth/mfa/passkey/registration/options` Begin a passkey registration ceremony](https://www.nauthera.io/docs/v1/api/interactive/begin-passkey-registration.md)
- [`POST /v1/auth/mfa/passkey/registration/verify` Verify a passkey registration and enroll the credential](https://www.nauthera.io/docs/v1/api/interactive/verify-passkey-registration.md)
- [`POST /v1/auth/mfa/passkey/authentication/options` Begin a passkey authentication ceremony](https://www.nauthera.io/docs/v1/api/interactive/begin-passkey-authentication.md)
- [`POST /v1/auth/mfa/passkey/authentication/verify` Verify a passkey assertion during sign-in (step-up)](https://www.nauthera.io/docs/v1/api/interactive/verify-passkey-authentication.md)
- [`POST /v1/auth/mfa/passkey/offer/decline` Decline the offer to add a passkey and complete the sign-in](https://www.nauthera.io/docs/v1/api/interactive/decline-passkey-offer.md)
- [`POST /v1/auth/passkey/options` Begin a passwordless passkey sign-in](https://www.nauthera.io/docs/v1/api/interactive/passkey-sign-in-options.md)
- [`POST /v1/auth/passkey/verify` Sign in with a passkey and no password](https://www.nauthera.io/docs/v1/api/interactive/passkey-sign-in.md)
- [`POST /v1/auth/mfa/recovery-code/verify` Redeem a single-use recovery code during sign-in](https://www.nauthera.io/docs/v1/api/interactive/verify-recovery-code.md)
- [`POST /v1/auth/mfa/recovery-codes` Regenerate recovery codes](https://www.nauthera.io/docs/v1/api/interactive/regenerate-recovery-codes.md)
- [`GET /v1/auth/mfa` MFA status for the current session](https://www.nauthera.io/docs/v1/api/interactive/get-mfa-status.md)
- [`DELETE /v1/auth/mfa/totp` Disable (remove) the TOTP factor](https://www.nauthera.io/docs/v1/api/interactive/disable-totp.md)