POST `/mfa/devices/sync`

Upload device TOTP configuration data, encrypt and store it, and return a sync token. Reference: RFC 6238 (TOTP), OWASP ASVS V2.8.3.

Multi-Factor Authentication `bearerAuth` application/json

Request Body

Schema: dto.DeviceSyncRequest

Field	Type	Required	Example
`device_name`	`string`	Yes	`iPhone 15`
`totp_devices`	`string`	Yes	`[{"secret":"JBSWY3DPEHPK3PXP"}]`
`device_fingerprint`	`string`	No	`fp-abc123`

Status	Description	Schema
201	Device sync successful	`dto.DeviceSyncDetailResponse`
400	Invalid parameter	`gitee_com_linmes_authms_base_dto.SimpleResponse`
401	Unauthenticated	`gitee_com_linmes_authms_base_dto.SimpleResponse`
409	Device count limit reached	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal server error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Field	Type	Required
`code`	`integer`	No
`data`	`dto.DeviceSyncResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

Field	Type	Required	Example
`created_at`	`string`	No	`2026-05-21T12:00:00Z`
`device_fingerprint`	`string`	No	`fp-abc123`
`device_name`	`string`	No	`iPhone 15`
`id`	`string`	No	`devsync_abc123`
`last_sync_at`	`string`	No	`2026-05-21T12:00:00Z`
`totp_devices`	`string`	No	`[{"secret":"JBSWY3DPEHPK3PXP"}]`

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No