Authentication
❌ Organization User (CustomerEmployee)❌ Delegated User (
EndUser)❌ Service Account
✅ Recovery Code
Recovers a user, using a recovery credential. After successfully recovering the user, all of the user’s previous credentials and personal access tokens will be invalidated.
This flow requires cryptographic validation of newly created credential(s) using a recovery credential. The recovery.credentialAssertion.clientData field’s challenge must be the base64url-encoded representation of the newCredential object.
The process is as follows:
newCredential object, using the challenge obtained from either the Create Recovery Challenge or Create Delegated Recovery Challenge endpoints.newCredential object to JSON and then base64url-encode the resulting JSON string. This base64url-encoded string will serve as the challenge for the recovery.credentialAssertion object.recovery.credentialAssertion object, using the base64url-encoded string generated in step 2 as its challenge.CustomerEmployee)EndUser)