PUT /admin/mfa/risk-policies/{level}

Update the MFA factor requirements for a specified risk level for the tenant. Reference: NIST SP 800-63B §5.2 (Risk-based Authentication). Requires admin permissions.

Request Parameters

Name	In	Type	Required	Default	Example	Constraints	Description
level	path	string	Yes				Risk level (low/medium/high)

Request Body

Schema: dto.UpdateRiskPolicyByLevelRequest

Field	Type	Required	Example	Constraints	Description
required_methods	array of string	Yes
description	string	No
enabled	boolean	No

Responses

Status	Description	Schema
200	Updated policy	dto.RiskPolicyItemDetailResponse
400	Invalid parameter	gitee_com_linmes_authms_base_dto.SimpleResponse
401	Unauthenticated	gitee_com_linmes_authms_base_dto.SimpleResponse
403	Insufficient permissions	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.RiskPolicyItem

Field	Type	Required	Example	Constraints	Description
created_at	string	No	2026-05-25T08:00:00Z
description	string	No	High-risk policy for new devices
enabled	boolean	No	True
id	string	No	rp_abc123
level	string	No	high
required_methods	array of string	No	['["totp"', '"sms"]']
updated_at	string	No	2026-05-25T08:00:00Z

dto.RiskPolicyItemDetailResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
data	dto.RiskPolicyItem	No
message	string	No
timestamp	string	No

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No