<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Want to enable Login via OTP (no password)]]></title><description><![CDATA[<p dir="auto">Basically I want the functionality of using MFA with SMS, but not actually have them enter a password. Steps would look like:</p>
<ol>
<li>User enters Username</li>
<li>They are texted a code</li>
<li>They enter code on new page</li>
<li>Get a JWT and enter the application.</li>
</ol>
<p dir="auto">We would build the UI for this but trying to figure out which APIs would be involved.<br />
<a href="https://fusionauth.io/docs/v1/tech/apis/login#authenticate-a-user-with-a-one-time-password" rel="nofollow ugc">This</a> exists, but it requires a password on the request. I <em>think</em> I need to make a call that generates a <code>changePasswordId</code> request, is that the <a href="https://fusionauth.io/docs/v1/tech/apis/users#start-forgot-password-workflow" rel="nofollow ugc">Start Reset Flow</a> and then I pass <em>that</em> to the above generation?</p>
<p dir="auto">As mentioned, we can handle:</p>
<ol>
<li>Capture the username</li>
<li><strong>Do things to generate a code</strong></li>
<li>Send code via SMS on our end</li>
<li>Capture the code (as entered by the user)</li>
<li>Make a Login call back to FA for token</li>
<li>Use app</li>
</ol>
<p dir="auto">I'm just not 100% which to use on step 2.</p>
]]></description><link>https://fusionauth.io/community/forum/topic/2479/want-to-enable-login-via-otp-no-password</link><generator>RSS for Node</generator><lastBuildDate>Tue, 15 Sep 2026 17:43:52 GMT</lastBuildDate><atom:link href="https://fusionauth.io/community/forum/topic/2479.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 23 Aug 2023 17:44:24 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Want to enable Login via OTP (no password) on Fri, 25 Aug 2023 21:50:59 GMT]]></title><description><![CDATA[<p dir="auto"><a class="mention plugin-mentions-user plugin-mentions-a" href="https://fusionauth.io/community/forum/uid/2585">@mark-shapiro</a> Thanks for sharing with the community.</p>
]]></description><link>https://fusionauth.io/community/forum/post/6480</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/6480</guid><dc:creator><![CDATA[mark.robustelli]]></dc:creator><pubDate>Fri, 25 Aug 2023 21:50:59 GMT</pubDate></item><item><title><![CDATA[Reply to Want to enable Login via OTP (no password) on Fri, 25 Aug 2023 15:15:03 GMT]]></title><description><![CDATA[<p dir="auto">Found it for reference <a href="https://github.com/FusionAuth/fusionauth-issues/issues/615" rel="nofollow ugc">https://github.com/FusionAuth/fusionauth-issues/issues/615</a></p>
]]></description><link>https://fusionauth.io/community/forum/post/6479</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/6479</guid><dc:creator><![CDATA[mark.shapiro]]></dc:creator><pubDate>Fri, 25 Aug 2023 15:15:03 GMT</pubDate></item><item><title><![CDATA[Reply to Want to enable Login via OTP (no password) on Thu, 24 Aug 2023 21:42:17 GMT]]></title><description><![CDATA[<p dir="auto">Think I may have gotten this sorted out (closed the other post I found on this)</p>
<ol>
<li>use <code>/api/passwordless/start</code> to get a code<br />
-- Send Code externally --</li>
<li>call <code>/api/passwordless/login</code> after user enters code to get JWT<br />
-- Do stuff in app --</li>
</ol>
<p dir="auto">seems like it should work</p>
]]></description><link>https://fusionauth.io/community/forum/post/6473</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/6473</guid><dc:creator><![CDATA[mark.shapiro]]></dc:creator><pubDate>Thu, 24 Aug 2023 21:42:17 GMT</pubDate></item></channel></rss>