POST `/mfa/trusted-devices`

Mark the current device as a trusted device, exempting MFA verification for 30 days. Reference: NIST SP 800-63B §5.1 (Verifier Impersonation Resistance), OWASP ASVS V2.8.

Multi-Factor Authentication `bearerAuth` application/json

Request Body

Schema: dto.TrustDeviceRequest

Field	Type	Required
`device_fingerprint`	`string`	Yes
`device_name`	`string`	Yes
`user_agent`	`string`	No

Responses

Status	Description	Schema
201	Trusted Device	`dto.TrustedDeviceDataResponse`
400	Invalid Parameters	`gitee_com_linmes_authms_base_dto.SimpleResponse`
401	Unauthenticated	`gitee_com_linmes_authms_base_dto.SimpleResponse`
409	Device Already Registered	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal Server Error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Referenced Schemas

dto.TrustedDeviceDataResponse

Field	Type	Required
`code`	`integer`	No
`data`	`dto.TrustedDeviceItem`	No
`message`	`string`	No
`timestamp`	`string`	No

dto.TrustedDeviceItem

Field	Type	Required	Example
`created_at`	`string`	No	`2026-05-25T08:00:00Z`
`device_name`	`string`	No	`iPhone 15`
`id`	`string`	No	`td_abc123`
`ip_address`	`string`	No	`192.168.1.100`
`trusted_until`	`string`	No	`2026-06-25T08:00:00Z`

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No

Try this API in Scalar → Download OpenAPI spec (JSON) ↓

POST /mfa/trusted-devices