Single POST auth with OTP no longer supported?

[jhollowe]

Previously (in 7.x at least), you were able to include otp in a single request to /api2/json/access/ticket which would verify both the username/password and TOTP token and immediately provide a ticket and CSRF token. However, this appears to no longer work and requires the two-request flow the GUI uses involving the tfa-challenge.

Is the single-request TOTP purposefully no longer supported or would it be expected for this to still work and should have a bugzilla bug opened for this issue?

(see more discussion of this at proxmoxer/proxmoxer#156)

 

[jhollowe]

Is anyone able to confirm if a single request for the ticket is viable for users with TOTP enabled?