# Two-Factor Autentication

## Two-Factor Authentication

{% content-ref url="/pages/-MCzCxyTxYjoSrYzE7YW" %}
[Authentication](/rest-api/trading-api/authentication.md)
{% endcontent-ref %}

{% tabs %}
{% tab title="Python" %}

```python
import requests

class AutosharesAPIRequest:

    baseURL = "https://pub-api-et-demo-prod.etnasoft.us/api/"
    EtAppKey = "Et App Key from the BO Companies widget"

    token = 'uninitialized'

    username = "your username"
    password = "your password"

    def simpleAuth(self):
        authenticationRequest = requests.post(self.baseURL + 'token', 
                                              headers = {"Accept" : "application/json", "Et-App-Key" : self.EtAppKey, "Username":self.username, "Password":self.password})

        print('Authorization status code: ' + str(authenticationRequest.status_code) + '\n')

        try:
            responseJSON = authenticationRequest.json()
            print(responseJSON)
            self.token = "Bearer " + responseJSON["Token"]
            return responseJSON
        except:
            return "No response"


    #2-factor authentication
    def twoFactorAuthentication(self, verificationCode):

        secondRequest = requests.post(self.baseURL +  'token',
                                      headers = {"Accept" : "application/json", 
                                                   "Et-App-Key" : self.EtAppKey, 
                                                   "VerificationCode" : verificationCode,  #the code from email or SMS
                                                   "Username":self.username, 
                                                   "Password":self.password,
                                                   "Authorization":self.token})
        print('Authorization status code: ' + str(secondRequest.status_code) + '\n')
        print("Old bearer token: " + self.token)

        try:
            responseJSON = secondRequest.json()
            print(responseJSON)
            #Replacing the interim token with the final token
            self.token = "Bearer " + responseJSON["Token"] 
            return responseJSON
        except:
            return "No response"

sampleRequest = AutosharesAPIRequest()

#performing the first step of authentication
sampleRequest.simpleAuth()

#retrieving the verification code from the user
code = input("Enter the verification code: ")

#performing two-factor authentication
sampleRequest.twoFactorAuthentication(code)
```

Similar to the regular authentication, in this example we perform the initial authentication with the username and password, and in response we receive the interim authorization token which we'll need to provide in the second request along with the verification code from email or SMS.
{% endtab %}
{% endtabs %}

## CURL

The following are sample CURLs for performing two-factor authentication:

### First Request

```
curl -X POST "https://pub-api-et-demo-prod.etnasoft.us/api/token" \
    -H "Username: yourUsername" \
    -H "Password: yourPassword" \
    -H "Et-App-Key: yourEttAppKey" \
    -H "Content-Length: 0"
```

### Second Request

```
curl -X POST "https://pub-api-et-demo-prod.etnasoft.us/api/token" \
    -H "Username: yourUsername" \
    -H "Password: yourPassword" \
    -H "Authorization: Bearer {tokenFromTheFirstRequest}" \
    -H "VerificationCode: {codeFromEmailOrSMS}" \
    -H "Et-App-Key: yourEttAppKey" \
    -H "Content-Length: 0"
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://api-documentation.autoshares.dev/rest-api/trading-api/code-samples/two-factor-autentication.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.