Start a 2FA reset

curl --request POST \
  --url https://api.lightspark.com/grid/2025-10-13/sca/factors/reset \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '{}'

const options = {
  method: 'POST',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({})
};

fetch('https://api.lightspark.com/grid/2025-10-13/sca/factors/reset', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

val client = OkHttpClient()

val mediaType = MediaType.parse("application/json")
val body = RequestBody.create(mediaType, "{}")
val request = Request.Builder()
  .url("https://api.lightspark.com/grid/2025-10-13/sca/factors/reset")
  .post(body)
  .addHeader("Authorization", "Basic <encoded-value>")
  .addHeader("Content-Type", "application/json")
  .build()

val response = client.newCall(request).execute()

{
  "resetId": "<string>",
  "livenessAccessToken": "<string>",
  "verificationLink": "<string>",
  "expiresAt": "2025-10-03T12:30:00Z"
}

{
  "status": 400,
  "message": "<string>",
  "details": {}
}

{
  "status": 401,
  "message": "<string>",
  "details": {}
}

{
  "status": 404,
  "message": "<string>",
  "details": {}
}

{
  "status": 409,
  "message": "<string>",
  "details": {}
}

{
  "status": 429,
  "code": "RATE_LIMITED",
  "message": "<string>",
  "details": {}
}

{
  "status": 500,
  "message": "<string>",
  "details": {}
}

Strong Customer Authentication

Start a 2FA reset

Begin recovering a lost enrolled factor via a liveness-gated, poll-based flow. Opens the liveness check and returns a resetId plus the opaque liveness handles (livenessAccessToken / verificationLink) the end user completes it with. Poll GET /sca/factors/reset/{resetId} until liveness passes, then call the complete endpoint.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

POST

sca

factors

reset

Start a 2FA reset

curl --request POST \
  --url https://api.lightspark.com/grid/2025-10-13/sca/factors/reset \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '{}'

const options = {
  method: 'POST',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({})
};

fetch('https://api.lightspark.com/grid/2025-10-13/sca/factors/reset', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

val client = OkHttpClient()

val mediaType = MediaType.parse("application/json")
val body = RequestBody.create(mediaType, "{}")
val request = Request.Builder()
  .url("https://api.lightspark.com/grid/2025-10-13/sca/factors/reset")
  .post(body)
  .addHeader("Authorization", "Basic <encoded-value>")
  .addHeader("Content-Type", "application/json")
  .build()

val response = client.newCall(request).execute()

{
  "resetId": "<string>",
  "livenessAccessToken": "<string>",
  "verificationLink": "<string>",
  "expiresAt": "2025-10-03T12:30:00Z"
}

{
  "status": 400,
  "message": "<string>",
  "details": {}
}

{
  "status": 401,
  "message": "<string>",
  "details": {}
}

{
  "status": 404,
  "message": "<string>",
  "details": {}
}

{
  "status": 409,
  "message": "<string>",
  "details": {}
}

{
  "status": 429,
  "code": "RATE_LIMITED",
  "message": "<string>",
  "details": {}
}

{
  "status": 500,
  "message": "<string>",
  "details": {}
}

Authorizations

Authorization

string

header

required

API token authentication using format <api token id>:<api client secret>

Query Parameters

customerId

string

required

The unique identifier of the customer resetting a factor.

Body

application/json

Selects which enrolled factor to reset via the liveness-gated recovery flow.

factor

enum<string>

required

The enrolled factor to reset.

Available options:

SMS_OTP,

TOTP,

PASSKEY

Response

Reset initiated; the reset handle and liveness material are returned.

The reset handle plus the opaque liveness handles a caller relays to the end-user device to complete the liveness check. resetId threads the ceremony together (status and complete reference it). livenessAccessToken and verificationLink are omitted when they are not returned.

resetId

string

required

Identifier for this reset; pass it to the status and complete endpoints.

livenessAccessToken

string | null

Access token for the embedded liveness/verification SDK, bound to this reset. Omitted when one is not returned.

verificationLink

string | null

Hosted identity-verification page URL for completing liveness. Omitted when one is not returned.

expiresAt

string<date-time> | null

Absolute UTC timestamp at the end of the reset window. Omitted when one is not returned.

Example:

"2025-10-03T12:30:00Z"

Record a security event

Get 2FA reset status

⌘I

Using the API

API documentation

Start a 2FA reset

Authorizations

Query Parameters

Body

Response