POST `/admin/mfa/ip-whitelist`

Add an IP whitelist rule (CIDR format) for the tenant, used for IP trust check in adaptive MFA risk scoring. Reference: NIST SP 800-63B §5.2 (Risk-based Authentication). Requires admin permissions.

Multi-Factor Authentication `bearerAuth` application/json

Request Body

Schema: dto.CreateIPWhitelistRequest

Field	Type	Required	Example	Constraints	Description
`cidr`	`string`	Yes	`192.168.1.0/24`
`label`	`string`	Yes	`office network`

Responses

Status	Description	Schema
201	Created successfully	`dto.IPWhitelistDetailResponse`
400	Invalid parameter	`gitee_com_linmes_authms_base_dto.SimpleResponse`
401	Unauthenticated	`gitee_com_linmes_authms_base_dto.SimpleResponse`
403	Insufficient permissions	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal server error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Referenced Schemas

dto.IPWhitelistDetailResponse

Field	Type	Required
`code`	`integer`	No
`data`	`dto.IPWhitelistResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

dto.IPWhitelistResponse

Field	Type	Required	Example
`cidr`	`string`	No	`192.168.1.0/24`
`created_at`	`string`	No	`2026-05-15T08:00:00Z`
`enabled`	`boolean`	No	`True`
`id`	`string`	No	`wl_abc123`
`label`	`string`	No	`office network`
`tenant_id`	`string`	No	`tnt_001`

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No

Try this API in Scalar → Download OpenAPI spec (JSON) ↓

POST /admin/mfa/ip-whitelist