OAuth hosted login: view sealed enrollment recovery codes (WebAuthn fetch-flow seam)
/oauth/mfa-enroll-codesServer-renders the one-shot recovery-codes page from a sealed codes_token. This is the seam for the WebAuthn enroll-verify fetch flow, which cannot render the codes page itself, so it seals the codes plus OAuth-resume context and navigates here; the unseal also produces the acknowledgement envelope used by the subsequent codes-ack POST. Renders an expired-session error page when the token is missing or stale.
Query Parameters
codes_tokenstring Required Responses
text/html
stringtext/html
stringcurl -X GET "https://auth.canopy-io.com/oauth/mfa-enroll-codes?codes_token=value"
Content-Type: text/html
<!doctype html>
<html lang="en">
<head>…</head>
<body>
<!-- The hosted page: its form, any error, and the Environment's branding -->
</body>
</html>Tell us how we can improve this guide.