Complete a 2FA reset

Complete a 2FA reset once liveness has passed, clearing the lost factor so the customer can re-enroll.

For an SMS_OTP reset, supply the new mobile number in the body — completing the reset enrolls it as the customer’s number. Other factors need no body.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

POST /sca/factors/reset/{resetId}/complete

Complete a 2FA reset

cURL

curl --request POST \
  --url https://api.lightspark.com/grid/2025-10-13/sca/factors/reset/{resetId}/complete \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '{}'

const options = {
  method: 'POST',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({})
};

fetch('https://api.lightspark.com/grid/2025-10-13/sca/factors/reset/{resetId}/complete', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

val client = OkHttpClient()

val mediaType = MediaType.parse("application/json")
val body = RequestBody.create(mediaType, "{}")
val request = Request.Builder()
  .url("https://api.lightspark.com/grid/2025-10-13/sca/factors/reset/{resetId}/complete")
  .post(body)
  .addHeader("Authorization", "Basic <encoded-value>")
  .addHeader("Content-Type", "application/json")
  .build()

val response = client.newCall(request).execute()

400

{
  "status": 400,
  "message": "<string>",
  "details": {}
}

{
  "status": 401,
  "message": "<string>",
  "details": {}
}

{
  "status": 404,
  "message": "<string>",
  "details": {}
}

{
  "status": 409,
  "message": "<string>",
  "details": {}
}

{
  "status": 500,
  "message": "<string>",
  "details": {}
}

Authorizations

Authorization · string · header · required

API token authentication using format <api token id>:<api client secret>

Path Parameters

resetId · string · required

The reset handle returned by the start call.

Query Parameters

customerId · string · required

The unique identifier of the customer completing the reset.

Body

application/json

Optional body for completing a 2FA reset. Only needed when resetting the SMS_OTP factor to a new phone number; omit the body entirely otherwise.

mobile · object

For an SMS_OTP reset, the new mobile number to enroll as the customer completes the reset. Required for an SMS_OTP reset; ignored for TOTP / PASSKEY resets.

Show child attributes

Response

204

Reset completed; no content is returned.