IdentityAuthStateResponseDto

Example

JSON

{
  "is_active": false,
  "email_verified": false,
  "email_verified_at": "2026-04-20T12:00:00.000Z",
  "password_set": false,
  "locked": false,
  "locked_until": "2026-04-20T12:00:00.000Z",
  "failed_login_attempts": 0,
  "mfa_enrolled": false,
  "mfa_factor_count": 0,
  "mfa_admin_reset_at": "2026-04-20T12:00:00.000Z"
}

Properties

10 properties 7 required

is_active boolean Required

Master kill-switch — false means the identity cannot sign in.

email_verified boolean Required

email_verified_at string Optional

format: date-timenullable

password_set boolean Required

Whether the identity has a usable password. False for passwordless (SSO/social/code-only) identities.

locked boolean Required

True while the identity is in an active failed-login lockout window.

locked_until string Optional

When the current lockout lifts. `null` when not locked.

format: date-timenullable

failed_login_attempts number Required

Consecutive failed login attempts on record.

mfa_enrolled boolean Required

Whether the identity has ≥ 1 enrolled MFA factor.

mfa_factor_count number Required

mfa_admin_reset_at string Optional

Timestamp of the most recent admin MFA force-reset. `null` if never reset.

format: date-timenullable

Was this page helpful?

Tell us how we can improve this guide.