finishCurrentUserOtpRotation

Activates the new authenticator secret of the current user after a code from it was entered. The previous secret stops working. Every other refresh token of the user is revoked, so other sessions end as soon as their current access token expires (its lifetime is System.Auth.Provider.Jwt.JwtTokenLifeTimeMinutes). Only the browser session that sends its refresh-token cookie keeps its refresh token; a client without that cookie must log in again once its access token expires.

Type: BaseOperationResult!

Arguments

• newCode: String! — Six-digit code from the new authenticator entry.

Example

mutation($newCode: String!) {
  finishCurrentUserOtpRotation(newCode: $newCode) {
    errorData
    errorType
    message
    status
  }
}