add mfa_api.js

src/components/login_form/recovery_form.vue

@@ -31,7 +31,7 @@
 </div>
 </template>
 <script>
-import oauthApi from '../../services/new_api/oauth.js'
+import mfaApi from '../../services/new_api/mfa.js'
 export default {
   props: ['user'],
   data () {
@@ -49,7 +49,7 @@ export default {
         code: this.code
       }
 
-      oauthApi.verifyRecoveryCode(data).then((result) => {
+      mfaApi.verifyRecoveryCode(data).then((result) => {
         if (result.error) {
           this.$emit('display-errors', result.error)
           this.code = null

src/components/login_form/totp_form.vue

@@ -30,7 +30,7 @@
 </div>
 </template>
 <script>
-import oauthApi from '../../services/new_api/oauth.js'
+import mfaApi from '../../services/new_api/mfa.js'
 export default {
   props: ['user'],
   data () {
@@ -50,7 +50,7 @@ export default {
         mfaToken: this.$store.state.mfa.settings.mfa_token,
         code: this.code
       }
-      oauthApi.verifyOTPCode(data).then((result) => {
+      mfaApi.verifyOTPCode(data).then((result) => {
         if (result.error) {
           this.$emit('display-errors', result.error)
           this.code = null

src/services/new_api/mfa.js

@@ -0,0 +1,38 @@
+const verifyOTPCode = ({app, instance, mfaToken, code}) => {
+  const url = `${instance}/oauth/mfa/challenge`
+  const form = new window.FormData()
+
+  form.append('client_id', app.client_id)
+  form.append('client_secret', app.client_secret)
+  form.append('mfa_token', mfaToken)
+  form.append('code', code)
+  form.append('challenge_type', 'totp')
+
+  return window.fetch(url, {
+    method: 'POST',
+    body: form
+  }).then((data) => data.json())
+}
+
+const verifyRecoveryCode = ({app, instance, mfaToken, code}) => {
+  const url = `${instance}/oauth/mfa/challenge`
+  const form = new window.FormData()
+
+  form.append('client_id', app.client_id)
+  form.append('client_secret', app.client_secret)
+  form.append('mfa_token', mfaToken)
+  form.append('code', code)
+  form.append('challenge_type', 'recovery')
+
+  return window.fetch(url, {
+    method: 'POST',
+    body: form
+  }).then((data) => data.json())
+}
+
+const mfa = {
+  verifyOTPCode,
+  verifyRecoveryCode
+}
+
+export default mfa