GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.
@@ -7,9 +7,9 @@ The HTTP API is responsible for registration, password resets and SMS verificati
### `GET /authentication/$phoneNumber`
Requests an SMS containing a 6 digit code to be send to `$phoneNumber`. The number is formatted according to E.164 (leading +, including the contry code, no spaces).
Requests an SMS containing a 6 digit code to be send to `$phoneNumber`. The number is formatted according to E.164 (leading +, including the contry code, no spaces). For example `GET /authentication/+18005222443`.
#### Header
#### Request Header
*`Accept-Language`: ISO 639-1 two letter language code. Will be used to change the language of the SMS
*`Installation-Id`: Randomly generated (at install time) UUID supplied by the client. Will be used for rate limiting on top of per number and per IP limits. Limits users on requesting multiple SMS for multiple phone numbers.
...
...
@@ -17,6 +17,18 @@ Requests an SMS containing a 6 digit code to be send to `$phoneNumber`. The numb
#### Response Codes
*`200`: Everything ok. SMS has been sent.
*`400`: Returned when supplied data (including headers) is invalid or not existend. This can include invalid phone number, invalid *Accept-Language*, missing or invalid *Installation-Id*. Since the phone number is already validated when entering it in the app the error will rarely be thrown. Displays to user as: **Invalid user input**.
*`403`: Outdated app version (as reported by *User-Agent*). Displays to user as: **You are using an out of date version of this app.**
*`409`: Conflict. When attempting to request an SMS for a phone number that is currently still logged in. Displays to user as: **This phone number is currently logged in with another device.**
*`429`: Rate limited. Displays to user as: **Please try again in …**
*`500`: Internal Server Error. Unable to reach the database, the XMPP server or the SMS verification provider. Displays to user as: **Something went wrong processing your request.**
*`501`, `502`, `503`: Temporary errors. Usually not throwns by QuicksyServer but by reverse proxy in front of it. Displays to user as: **Temporarily unavailable. Try again later.** Note: Not to be used for rate limiting.
#### Response Header
*`Retry-After`: Time in seconds after which the client can make another attempt. Parsed in combination with response code `429`.
