# respond-to-challenge

In case asked for a challenge, use it to respond.

Endpoint: POST /auth/challenge/{tenant_tag}
Version: 1.0

## Path parameters:

  - `tenant_tag` (string, required)
    Tenant Tag

## Request body:

  - `application/json` (unknown)
    Challenge request params

## Request fields (application/json):

  - `challenge_name` (string, required)

  - `challenge_responses` (object, required)

  - `challenge_responses.new_password` (string)

  - `challenge_responses.sms_mfa_code` (string)

  - `challenge_responses.software_token_mfa_code` (string)

  - `challenge_responses.user_attributes` (object)

  - `challenge_responses.username` (string)

  - `session` (string, required)

## Response 200:

  - `200` (unknown)
    OK

## Response 200 fields (application/json):

  - `authentication_result` (object)

  - `authentication_result.access_token` (string)

  - `authentication_result.expires_in` (integer)

  - `authentication_result.id_token` (string)

  - `authentication_result.refresh_token` (string)

  - `authentication_result.token_type` (string)

  - `challenge_name` (string)

  - `challenge_parameters` (object)

  - `challenge_parameters.qr_code` (string)

  - `challenge_parameters.required_attributes` (array)

  - `challenge_parameters.secret_code` (string)

  - `challenge_parameters.user_attributes` (object)

  - `challenge_parameters.user_id_for_srp` (string)

  - `data` (object)

## Response 400:

  - `400` (unknown)
    Bad request

## Response 400 fields (application/json):

  - `errors` (array)

  - `errors.code` (string)

  - `errors.message` (string)

  - `errors.params` (object)

## Response 500:

  - `500` (unknown)
    Internal server error

## Response 500 fields (application/json):

  - `errors` (array)

  - `errors.code` (string)

  - `errors.message` (string)

  - `errors.params` (object)