POST /mfa/push/approve

User approves a Push MFA challenge via device to complete identity verification. Supports Number Matching verification. Reference: NIST SP 800-63B §5.1.7 (Verifier Impersonation Resistance), OWASP ASVS V2.8.

Request Body

Schema: dto.PushApproveRequest

Field	Type	Required	Example	Constraints	Description
challenge_id	string	Yes	chal-abc123
number_matching	string	Yes	42
device_key	string	No	hmac-sig

Responses

Status	Description	Schema
200	Approved successfully	dto.ValidDetailResponse
400	Invalid parameter or challenge expired	gitee_com_linmes_authms_base_dto.SimpleResponse
401	Unauthenticated	gitee_com_linmes_authms_base_dto.SimpleResponse
404	Challenge not found	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.ValidDetailResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
data	dto.ValidResponse	No
message	string	No
timestamp	string	No

dto.ValidResponse

Field	Type	Required	Example	Constraints	Description
valid	boolean	No	True

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No