[GH-ISSUE #5198] TOTP API login workflow #3139

New issue

Open

opened 2026-02-26 07:37:56 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 07:37:56 +03:00

Owner

Originally created by @webysther on GitHub (Jan 20, 2026).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5198

Checklist

Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
- Yes
Are you sure you're not using someone else's docker image?
- Yes
Have you searched for similar issues (both open and closed)?
- Yes

Describe the bug
How works the API login workflow after enabled the TOTP?

Nginx Proxy Manager Version
v2.13.6

Additional context
When call the /api/tokens when a user have the 2fa, I got:

[
  {
    "requires_2fa": true,
    "challenge_token": "REDACTED"
  }
]

Before:

[
  {
    "token": "REDACTED",
    "expires": "2026-01-21T08:40:58.825Z"
  }
]

@piotrfx how proceed from to get the token to use the API? I have to keep the 2fa turned off to use the API or is possible to send the code somehow?

PS: will be nice to have API token in NPM to allow use the API.

Originally created by @webysther on GitHub (Jan 20, 2026). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5198  **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes **Describe the bug** How works the API login workflow after enabled the TOTP? **Nginx Proxy Manager Version** v2.13.6 **Additional context** When call the /api/tokens when a user have the 2fa, I got: ```json [ { "requires_2fa": true, "challenge_token": "REDACTED" } ] ``` Before: ```json [ { "token": "REDACTED", "expires": "2026-01-21T08:40:58.825Z" } ] ``` @piotrfx how proceed from to get the token to use the API? I have to keep the 2fa turned off to use the API or is possible to send the code somehow? PS: will be nice to have API token in NPM to allow use the API.

kerem added the

bug

label

2026-02-26 07:37:56 +03:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#3139

No description provided.

Rows
Columns