# Get user authentication factors

Retrieves the list of authentication factors that can be used to verify the logged-in user.

Endpoint: GET /authentication_factors
Version: 3.63.5
Security: auth_token, api-key

## Response 200 fields (application/json):

  - `factors` (array)
    The list of challenge types the logged-in user is enrolled on.

  - `factors.type` (string)
    - "OTP": The OTP is sent as a text message
- "PUSH": The authorisation request is sent as a push notification
- "BIOMETRIC": The push notification is sent via Firebase to a mobile application
    Enum: "OTP", "PUSH", "BIOMETRIC"

  - `factors.status` (string)
    The state of the factor type.
- PENDING_VERIFICATION : The user has started the enrolment process but still hasn't completed enrolment. Challenges cannot be used before they are verified.
- ACTIVE : The user has successfully completed enrolment and the challenge can be used to verify transactions.
- INACTIVE : The user has rejected the enrolment.
    Enum: "PENDING_VERIFICATION", "ACTIVE", "INACTIVE"

  - `factors.channel` (string)
    - "SMS": The one-time-password is sent as a text message
- "AUTHY": The push notification is sent to an Authy application
- "BIOMETRIC": The push notification is sent to an innovator application
    Enum: "SMS", "AUTHY", "BIOMETRIC"

## Response 400 fields (application/json):

  - `message` (string)
    When present helps to identify and fix the problem.

  - `syntaxErrors` (object)
    Is returned as part of an HTTP error response whenever a syntax error is detected. A list of the fields together with their syntax error will be provided.

  - `syntaxErrors.invalidFields` (array)

  - `syntaxErrors.invalidFields.params` (array)

  - `syntaxErrors.invalidFields.fieldName` (string)

  - `syntaxErrors.invalidFields.error` (string)
    Enum: "REQUIRED", "HAS_TEXT", "REQUIRES", "SIZE", "RANGE", "IN", "NOT_IN", "REGEX", "EXACTLY", "AT_LEAST", "AT_MOST", "ALL_OR_NONE"

## Response 404 fields (application/json):

  - `code` (string)

  - `message` (string)

## Response default fields (application/json):

  - `code` (string)

  - `message` (string)


## Response 401 fields

## Response 403 fields

## Response 429 fields

## Response 500 fields

## Response 503 fields