attempt_id; the login runs in the background and you
poll until it resolves.
1
Start the attempt
202 with an attempt:remember_credentials: true to seal the credentials so the account
can later be reauthenticated
without a fresh login.2
Poll until it resolves
state is pending. It ends at
completed_success (with an account_id) or parks on a 2FA state.3
Resolve any challenge
If
state becomes needs_otp, needs_app_otp, needs_email, or
needs_face_otp, submit the code or signal completion. See
Two-factor & challenges.Fields
Email/password login may be temporarily unavailable, returning
503. When
it is, use mobile / QR or embedded connect
instead — those have no such dependency.