Authentication & Security
API endpoints for customer authentication and security
Authentication & Security
These endpoints allow you to manage customer authentication and security in the FinHub platform. Each API endpoint has its own interactive documentation page with a “Try” button.
Login
Authenticate a customer and create a new session
Logout
End a customer’s active session
Two-Factor Authentication
Set up two-factor authentication for a customer
Validate 2FA
Validate a two-factor authentication code
Secret Questions
Set up secret questions for account recovery
Validate Secret Questions
Validate a customer’s answers to secret questions
Recover Credentials
Initiate the credential recovery process
Verify Credentials
Verify a customer’s credentials
Resend Credentials Code
Resend a verification code for credential verification
Implementation Notes
- Always use HTTPS for all authentication requests to ensure security
- Implement proper rate limiting for login attempts to prevent brute force attacks
- Session tokens should be stored securely and transmitted only over secure connections
- Two-factor authentication significantly enhances account security and should be encouraged
- Secret questions should be used as a secondary recovery method, not as a primary authentication method