diff --git a/doc/api_data.js b/doc/api_data.js
index 2eacc2aaf..a63c5dbd7 100644
--- a/doc/api_data.js
+++ b/doc/api_data.js
@@ -1,975 +1 @@
-define({ "api": [
-  {
-    "type": "get",
-    "url": "/",
-    "title": "First factor page",
-    "name": "Login",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "Content",
-            "description": "<p>The content of the first factor page.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Serves the login page and create a create a cookie for the client.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "get",
-    "url": "/logout",
-    "title": "Serves logout page",
-    "name": "Logout",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "redirect",
-            "description": "<p>Redirect to this URL when user is deauthenticated.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "redirect",
-            "description": "<p>Redirect to the URL.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Log out the user and redirect to the URL.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor",
-    "title": "Second factor page",
-    "name": "SecondFactor",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "Content",
-            "description": "<p>The content of second factor page.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Serves the second factor page</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "post",
-    "url": "/1stfactor",
-    "title": "Bind user against LDAP",
-    "name": "ValidateFirstFactor",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "username",
-            "description": "<p>User username.</p>"
-          },
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "password",
-            "description": "<p>User password.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>1st factor is validated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>1st factor is not validated.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify credentials against the LDAP.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/reset-password/request",
-    "title": "Finish password reset request",
-    "name": "FinishPasswordResetRequest",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Start password reset request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/password-reset/request",
-    "title": "Request username",
-    "name": "ServePasswordResetPage",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Serve a page that requires the username.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/password-reset",
-    "title": "Set new password",
-    "name": "SetNewLDAPPassword",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "password",
-            "description": "<p>New password</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Set a new password for the user.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/password-reset/identity/start",
-    "title": "Start password reset request",
-    "name": "StartPasswordResetRequest",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Start password reset request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/totp/identity/finish",
-    "title": "Finish TOTP registration identity validation",
-    "name": "FinishTOTPRegistration",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "description": "<p>Serves the TOTP registration page that displays the secret. The secret is a QRCode and a base32 secret.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/totp/identity/start",
-    "title": "Start TOTP registration identity validation",
-    "name": "StartTOTPRegistration",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "description": "<p>Initiates the identity validation</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/totp",
-    "title": "Complete TOTP authentication",
-    "name": "ValidateTOTPSecondFactor",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "token",
-            "description": "<p>TOTP token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>TOTP token is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify TOTP token. The user is authenticated upon success.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/u2f/sign",
-    "title": "Complete U2F authentication",
-    "name": "CompleteU2FAuthentication",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>No authentication request has been provided.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Complete authentication request of the U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/secondfactor/u2f/register",
-    "title": "Complete U2F registration",
-    "name": "FinishU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Complete U2F registration request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/u2f/identity/start",
-    "title": "Start U2F registration identity validation",
-    "name": "RequestU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>This request issue an identity validation token for the user bound to the session. It sends a challenge to the email address set in the user LDAP entry. The user must visit the sent URL to complete the validation and continue the registration process.</p>"
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/u2f/identity/finish",
-    "title": "Finish U2F registration identity validation",
-    "name": "ServeU2FRegistrationPage",
-    "group": "U2F",
-    "version": "1.0.0",
-    "description": "<p>Serves the U2F registration page that asks the user to touch the token of the U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/api/u2f/sign_request",
-    "title": "Start U2F authentication",
-    "name": "StartU2FAuthentication",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "optional": false,
-            "field": "authentication_request",
-            "description": "<p>The U2F authentication request.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>There is no key registered for user in session.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Initiate an authentication request using a U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/api/u2f/register_request",
-    "title": "Start U2F registration",
-    "name": "StartU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "optional": false,
-            "field": "authentication_request",
-            "description": "<p>The U2F registration request.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Unexpected identity validation challenge.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Initiate a U2F device registration request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/verify",
-    "title": "Verify user authentication",
-    "name": "VerifyAuthentication",
-    "group": "Verification",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>The user is authenticated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "optional": false,
-            "field": "status",
-            "description": "<p>The user is not authenticated.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify that the user is authenticated, i.e., the two factors have been validated</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Verification",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  }
-] });
+define({ "api": [
  {
    "type": "get",
    "url": "/",
    "title": "First factor page",
    "name": "Login",
    "group": "Authentication",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "Content",
            "description": "<p>The content of the first factor page.</p>"
          }
        ]
      }
    },
    "description": "<p>Serves the login page and create a create a cookie for the client.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "get",
    "url": "/logout",
    "title": "Serves logout page",
    "name": "Logout",
    "group": "Authentication",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "redirect",
            "description": "<p>Redirect to this URL when user is deauthenticated.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "redirect",
            "description": "<p>Redirect to the URL.</p>"
          }
        ]
      }
    },
    "description": "<p>Log out the user and redirect to the URL.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "get",
    "url": "/secondfactor",
    "title": "Second factor page",
    "name": "SecondFactor",
    "group": "Authentication",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "Content",
            "description": "<p>The content of second factor page.</p>"
          }
        ]
      }
    },
    "description": "<p>Serves the second factor page</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "post",
    "url": "/1stfactor",
    "title": "Bind user against LDAP",
    "name": "ValidateFirstFactor",
    "group": "Authentication",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "username",
            "description": "<p>User username.</p>"
          },
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "password",
            "description": "<p>User password.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>1st factor is validated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>1st factor is not validated.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify credentials against the LDAP.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/reset-password/request",
    "title": "Finish password reset request",
    "name": "FinishPasswordResetRequest",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Start password reset request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/password-reset/request",
    "title": "Request username",
    "name": "ServePasswordResetPage",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Serve a page that requires the username.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/password-reset",
    "title": "Set new password",
    "name": "SetNewLDAPPassword",
    "group": "PasswordReset",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "password",
            "description": "<p>New password</p>"
          }
        ]
      }
    },
    "description": "<p>Set a new password for the user.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/password-reset/identity/start",
    "title": "Start password reset request",
    "name": "StartPasswordResetRequest",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Start password reset request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/totp/identity/finish",
    "title": "Finish TOTP registration identity validation",
    "name": "FinishTOTPRegistration",
    "group": "TOTP",
    "version": "1.0.0",
    "description": "<p>Serves the TOTP registration page that displays the secret. The secret is a QRCode and a base32 secret.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/totp/identity/start",
    "title": "Start TOTP registration identity validation",
    "name": "StartTOTPRegistration",
    "group": "TOTP",
    "version": "1.0.0",
    "description": "<p>Initiates the identity validation</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/totp",
    "title": "Complete TOTP authentication",
    "name": "ValidateTOTPSecondFactor",
    "group": "TOTP",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "token",
            "description": "<p>TOTP token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>TOTP token is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify TOTP token. The user is authenticated upon success.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/u2f/sign",
    "title": "Complete U2F authentication",
    "name": "CompleteU2FAuthentication",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>No authentication request has been provided.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Complete authentication request of the U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/secondfactor/u2f/register",
    "title": "Complete U2F registration",
    "name": "FinishU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "description": "<p>Complete U2F registration request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/u2f/identity/start",
    "title": "Start U2F registration identity validation",
    "name": "RequestU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>This request issue an identity validation token for the user bound to the session. It sends a challenge to the email address set in the user LDAP entry. The user must visit the sent URL to complete the validation and continue the registration process.</p>"
  },
  {
    "type": "get",
    "url": "/secondfactor/u2f/identity/finish",
    "title": "Finish U2F registration identity validation",
    "name": "ServeU2FRegistrationPage",
    "group": "U2F",
    "version": "1.0.0",
    "description": "<p>Serves the U2F registration page that asks the user to touch the token of the U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/api/u2f/sign_request",
    "title": "Start U2F authentication",
    "name": "StartU2FAuthentication",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "optional": false,
            "field": "authentication_request",
            "description": "<p>The U2F authentication request.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>There is no key registered for user in session.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Initiate an authentication request using a U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/api/u2f/register_request",
    "title": "Start U2F registration",
    "name": "StartU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "optional": false,
            "field": "authentication_request",
            "description": "<p>The U2F registration request.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>Unexpected identity validation challenge.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Initiate a U2F device registration request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/verify",
    "title": "Verify user authentication",
    "name": "VerifyAuthentication",
    "group": "Verification",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>The user is authenticated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "optional": false,
            "field": "status",
            "description": "<p>The user is not authenticated.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify that the user is authenticated, i.e., the two factors have been validated. If the user is authenticated the response headers Remote-User and Remote-Groups are set. Remote-User contains the user id of the currently logged in user and Remote-Groups a comma separated list of assigned groups.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Verification",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  }
] });
diff --git a/doc/api_data.json b/doc/api_data.json
index 527b67508..83564ce6e 100644
--- a/doc/api_data.json
+++ b/doc/api_data.json
@@ -1,975 +1 @@
-[
-  {
-    "type": "get",
-    "url": "/",
-    "title": "First factor page",
-    "name": "Login",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "Content",
-            "description": "<p>The content of the first factor page.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Serves the login page and create a create a cookie for the client.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "get",
-    "url": "/logout",
-    "title": "Serves logout page",
-    "name": "Logout",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "redirect",
-            "description": "<p>Redirect to this URL when user is deauthenticated.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "redirect",
-            "description": "<p>Redirect to the URL.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Log out the user and redirect to the URL.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor",
-    "title": "Second factor page",
-    "name": "SecondFactor",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "Content",
-            "description": "<p>The content of second factor page.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Serves the second factor page</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication"
-  },
-  {
-    "type": "post",
-    "url": "/1stfactor",
-    "title": "Bind user against LDAP",
-    "name": "ValidateFirstFactor",
-    "group": "Authentication",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "username",
-            "description": "<p>User username.</p>"
-          },
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "password",
-            "description": "<p>User password.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>1st factor is validated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>1st factor is not validated.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify credentials against the LDAP.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Authentication",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/reset-password/request",
-    "title": "Finish password reset request",
-    "name": "FinishPasswordResetRequest",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Start password reset request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/password-reset/request",
-    "title": "Request username",
-    "name": "ServePasswordResetPage",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Serve a page that requires the username.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/password-reset",
-    "title": "Set new password",
-    "name": "SetNewLDAPPassword",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "password",
-            "description": "<p>New password</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Set a new password for the user.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/password-reset/identity/start",
-    "title": "Start password reset request",
-    "name": "StartPasswordResetRequest",
-    "group": "PasswordReset",
-    "version": "1.0.0",
-    "description": "<p>Start password reset request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "PasswordReset",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/totp/identity/finish",
-    "title": "Finish TOTP registration identity validation",
-    "name": "FinishTOTPRegistration",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "description": "<p>Serves the TOTP registration page that displays the secret. The secret is a QRCode and a base32 secret.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/totp/identity/start",
-    "title": "Start TOTP registration identity validation",
-    "name": "StartTOTPRegistration",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "description": "<p>Initiates the identity validation</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/totp",
-    "title": "Complete TOTP authentication",
-    "name": "ValidateTOTPSecondFactor",
-    "group": "TOTP",
-    "version": "1.0.0",
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "token",
-            "description": "<p>TOTP token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>TOTP token is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify TOTP token. The user is authenticated upon success.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "TOTP",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/u2f/sign",
-    "title": "Complete U2F authentication",
-    "name": "CompleteU2FAuthentication",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>No authentication request has been provided.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Complete authentication request of the U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "post",
-    "url": "/api/secondfactor/u2f/register",
-    "title": "Complete U2F registration",
-    "name": "FinishU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 302": [
-          {
-            "group": "Success 302",
-            "optional": false,
-            "field": "Redirect",
-            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Complete U2F registration request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/u2f/identity/start",
-    "title": "Start U2F registration identity validation",
-    "name": "RequestU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>Identity validation has been initiated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 400": [
-          {
-            "group": "Error 400",
-            "optional": false,
-            "field": "InvalidIdentity",
-            "description": "<p>User identity is invalid.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>This request issue an identity validation token for the user bound to the session. It sends a challenge to the email address set in the user LDAP entry. The user must visit the sent URL to complete the validation and continue the registration process.</p>"
-  },
-  {
-    "type": "get",
-    "url": "/secondfactor/u2f/identity/finish",
-    "title": "Finish U2F registration identity validation",
-    "name": "ServeU2FRegistrationPage",
-    "group": "U2F",
-    "version": "1.0.0",
-    "description": "<p>Serves the U2F registration page that asks the user to touch the token of the U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    },
-    "parameter": {
-      "fields": {
-        "Parameter": [
-          {
-            "group": "Parameter",
-            "type": "String",
-            "optional": false,
-            "field": "identity_token",
-            "description": "<p>The one-time identity validation token provided in the email.</p>"
-          }
-        ]
-      }
-    },
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "type": "String",
-            "optional": false,
-            "field": "content",
-            "description": "<p>The content of the page.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "optional": false,
-            "field": "AccessDenied",
-            "description": "<p>Access is denied.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/api/u2f/sign_request",
-    "title": "Start U2F authentication",
-    "name": "StartU2FAuthentication",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "optional": false,
-            "field": "authentication_request",
-            "description": "<p>The U2F authentication request.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>There is no key registered for user in session.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Initiate an authentication request using a U2F device.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/api/u2f/register_request",
-    "title": "Start U2F registration",
-    "name": "StartU2FRegistration",
-    "group": "U2F",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 200": [
-          {
-            "group": "Success 200",
-            "optional": false,
-            "field": "authentication_request",
-            "description": "<p>The U2F registration request.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 403": [
-          {
-            "group": "Error 403",
-            "type": "none",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Unexpected identity validation challenge.</p>"
-          }
-        ],
-        "Error 500": [
-          {
-            "group": "Error 500",
-            "type": "String",
-            "optional": false,
-            "field": "error",
-            "description": "<p>Internal error message.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Initiate a U2F device registration request.</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "U2F",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  },
-  {
-    "type": "get",
-    "url": "/verify",
-    "title": "Verify user authentication",
-    "name": "VerifyAuthentication",
-    "group": "Verification",
-    "version": "1.0.0",
-    "success": {
-      "fields": {
-        "Success 204": [
-          {
-            "group": "Success 204",
-            "optional": false,
-            "field": "status",
-            "description": "<p>The user is authenticated.</p>"
-          }
-        ]
-      }
-    },
-    "error": {
-      "fields": {
-        "Error 401": [
-          {
-            "group": "Error 401",
-            "optional": false,
-            "field": "status",
-            "description": "<p>The user is not authenticated.</p>"
-          }
-        ]
-      }
-    },
-    "description": "<p>Verify that the user is authenticated, i.e., the two factors have been validated</p>",
-    "filename": "src/server/endpoints.ts",
-    "groupTitle": "Verification",
-    "header": {
-      "fields": {
-        "Header": [
-          {
-            "group": "Header",
-            "type": "String",
-            "optional": false,
-            "field": "Cookie",
-            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
-          }
-        ]
-      }
-    }
-  }
-]
+[
  {
    "type": "get",
    "url": "/",
    "title": "First factor page",
    "name": "Login",
    "group": "Authentication",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "Content",
            "description": "<p>The content of the first factor page.</p>"
          }
        ]
      }
    },
    "description": "<p>Serves the login page and create a create a cookie for the client.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "get",
    "url": "/logout",
    "title": "Serves logout page",
    "name": "Logout",
    "group": "Authentication",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "redirect",
            "description": "<p>Redirect to this URL when user is deauthenticated.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "redirect",
            "description": "<p>Redirect to the URL.</p>"
          }
        ]
      }
    },
    "description": "<p>Log out the user and redirect to the URL.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "get",
    "url": "/secondfactor",
    "title": "Second factor page",
    "name": "SecondFactor",
    "group": "Authentication",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "Content",
            "description": "<p>The content of second factor page.</p>"
          }
        ]
      }
    },
    "description": "<p>Serves the second factor page</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication"
  },
  {
    "type": "post",
    "url": "/1stfactor",
    "title": "Bind user against LDAP",
    "name": "ValidateFirstFactor",
    "group": "Authentication",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "username",
            "description": "<p>User username.</p>"
          },
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "password",
            "description": "<p>User password.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>1st factor is validated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>1st factor is not validated.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify credentials against the LDAP.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Authentication",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/reset-password/request",
    "title": "Finish password reset request",
    "name": "FinishPasswordResetRequest",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Start password reset request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/password-reset/request",
    "title": "Request username",
    "name": "ServePasswordResetPage",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Serve a page that requires the username.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/password-reset",
    "title": "Set new password",
    "name": "SetNewLDAPPassword",
    "group": "PasswordReset",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "password",
            "description": "<p>New password</p>"
          }
        ]
      }
    },
    "description": "<p>Set a new password for the user.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/password-reset/identity/start",
    "title": "Start password reset request",
    "name": "StartPasswordResetRequest",
    "group": "PasswordReset",
    "version": "1.0.0",
    "description": "<p>Start password reset request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "PasswordReset",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/totp/identity/finish",
    "title": "Finish TOTP registration identity validation",
    "name": "FinishTOTPRegistration",
    "group": "TOTP",
    "version": "1.0.0",
    "description": "<p>Serves the TOTP registration page that displays the secret. The secret is a QRCode and a base32 secret.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/totp/identity/start",
    "title": "Start TOTP registration identity validation",
    "name": "StartTOTPRegistration",
    "group": "TOTP",
    "version": "1.0.0",
    "description": "<p>Initiates the identity validation</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/totp",
    "title": "Complete TOTP authentication",
    "name": "ValidateTOTPSecondFactor",
    "group": "TOTP",
    "version": "1.0.0",
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "token",
            "description": "<p>TOTP token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>TOTP token is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify TOTP token. The user is authenticated upon success.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "TOTP",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/u2f/sign",
    "title": "Complete U2F authentication",
    "name": "CompleteU2FAuthentication",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>No authentication request has been provided.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Complete authentication request of the U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "post",
    "url": "/api/secondfactor/u2f/register",
    "title": "Complete U2F registration",
    "name": "FinishU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 302": [
          {
            "group": "Success 302",
            "optional": false,
            "field": "Redirect",
            "description": "<p>to the URL that has been stored during last call to /verify.</p>"
          }
        ]
      }
    },
    "description": "<p>Complete U2F registration request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/secondfactor/u2f/identity/start",
    "title": "Start U2F registration identity validation",
    "name": "RequestU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>Identity validation has been initiated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 400": [
          {
            "group": "Error 400",
            "optional": false,
            "field": "InvalidIdentity",
            "description": "<p>User identity is invalid.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>This request issue an identity validation token for the user bound to the session. It sends a challenge to the email address set in the user LDAP entry. The user must visit the sent URL to complete the validation and continue the registration process.</p>"
  },
  {
    "type": "get",
    "url": "/secondfactor/u2f/identity/finish",
    "title": "Finish U2F registration identity validation",
    "name": "ServeU2FRegistrationPage",
    "group": "U2F",
    "version": "1.0.0",
    "description": "<p>Serves the U2F registration page that asks the user to touch the token of the U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    },
    "parameter": {
      "fields": {
        "Parameter": [
          {
            "group": "Parameter",
            "type": "String",
            "optional": false,
            "field": "identity_token",
            "description": "<p>The one-time identity validation token provided in the email.</p>"
          }
        ]
      }
    },
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "type": "String",
            "optional": false,
            "field": "content",
            "description": "<p>The content of the page.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "optional": false,
            "field": "AccessDenied",
            "description": "<p>Access is denied.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/api/u2f/sign_request",
    "title": "Start U2F authentication",
    "name": "StartU2FAuthentication",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "optional": false,
            "field": "authentication_request",
            "description": "<p>The U2F authentication request.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>There is no key registered for user in session.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Initiate an authentication request using a U2F device.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/api/u2f/register_request",
    "title": "Start U2F registration",
    "name": "StartU2FRegistration",
    "group": "U2F",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 200": [
          {
            "group": "Success 200",
            "optional": false,
            "field": "authentication_request",
            "description": "<p>The U2F registration request.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 403": [
          {
            "group": "Error 403",
            "type": "none",
            "optional": false,
            "field": "error",
            "description": "<p>Unexpected identity validation challenge.</p>"
          }
        ],
        "Error 500": [
          {
            "group": "Error 500",
            "type": "String",
            "optional": false,
            "field": "error",
            "description": "<p>Internal error message.</p>"
          }
        ]
      }
    },
    "description": "<p>Initiate a U2F device registration request.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "U2F",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  },
  {
    "type": "get",
    "url": "/verify",
    "title": "Verify user authentication",
    "name": "VerifyAuthentication",
    "group": "Verification",
    "version": "1.0.0",
    "success": {
      "fields": {
        "Success 204": [
          {
            "group": "Success 204",
            "optional": false,
            "field": "status",
            "description": "<p>The user is authenticated.</p>"
          }
        ]
      }
    },
    "error": {
      "fields": {
        "Error 401": [
          {
            "group": "Error 401",
            "optional": false,
            "field": "status",
            "description": "<p>The user is not authenticated.</p>"
          }
        ]
      }
    },
    "description": "<p>Verify that the user is authenticated, i.e., the two factors have been validated. If the user is authenticated the response headers Remote-User and Remote-Groups are set. Remote-User contains the user id of the currently logged in user and Remote-Groups a comma separated list of assigned groups.</p>",
    "filename": "src/server/endpoints.ts",
    "groupTitle": "Verification",
    "header": {
      "fields": {
        "Header": [
          {
            "group": "Header",
            "type": "String",
            "optional": false,
            "field": "Cookie",
            "description": "<p>Cookie containing &quot;connect.sid&quot;, the user session token.</p>"
          }
        ]
      }
    }
  }
]
diff --git a/doc/api_project.js b/doc/api_project.js
index 9b4ecf09d..bfb686bdb 100644
--- a/doc/api_project.js
+++ b/doc/api_project.js
@@ -1,15 +1 @@
-define({
-  "title": "Authelia API documentation",
-  "name": "authelia",
-  "version": "2.1.3",
-  "description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
-  "sampleUrl": false,
-  "defaultVersion": "0.0.0",
-  "apidoc": "0.3.0",
-  "generator": {
-    "name": "apidoc",
-    "time": "2017-06-11T20:41:36.025Z",
-    "url": "http://apidocjs.com",
-    "version": "0.17.6"
-  }
-});
+define({
  "title": "Authelia API documentation",
  "name": "authelia",
  "version": "3.2.0",
  "description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
  "sampleUrl": false,
  "defaultVersion": "0.0.0",
  "apidoc": "0.3.0",
  "generator": {
    "name": "apidoc",
    "time": "2017-08-19T09:41:58.170Z",
    "url": "http://apidocjs.com",
    "version": "0.17.6"
  }
});
diff --git a/doc/api_project.json b/doc/api_project.json
index b27e7e63e..aeb44a2e2 100644
--- a/doc/api_project.json
+++ b/doc/api_project.json
@@ -1,15 +1 @@
-{
-  "title": "Authelia API documentation",
-  "name": "authelia",
-  "version": "2.1.3",
-  "description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
-  "sampleUrl": false,
-  "defaultVersion": "0.0.0",
-  "apidoc": "0.3.0",
-  "generator": {
-    "name": "apidoc",
-    "time": "2017-06-11T20:41:36.025Z",
-    "url": "http://apidocjs.com",
-    "version": "0.17.6"
-  }
-}
+{
  "title": "Authelia API documentation",
  "name": "authelia",
  "version": "3.2.0",
  "description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
  "sampleUrl": false,
  "defaultVersion": "0.0.0",
  "apidoc": "0.3.0",
  "generator": {
    "name": "apidoc",
    "time": "2017-08-19T09:41:58.170Z",
    "url": "http://apidocjs.com",
    "version": "0.17.6"
  }
}
diff --git a/example/nginx/nginx.conf b/example/nginx/nginx.conf
index a91df4ce6..5c7520b1c 100644
--- a/example/nginx/nginx.conf
+++ b/example/nginx/nginx.conf
@@ -78,12 +78,10 @@ http {
         location = /secret.html {
             auth_request /auth_verify;
             
-            auth_request_set $user $upstream_http_x_remote_user;
+            auth_request_set $user $upstream_http_remote_user;
             proxy_set_header X-Forwarded-User $user;
             auth_request_set $groups $upstream_http_remote_groups;
             proxy_set_header Remote-Groups $groups;
-            auth_request_set $expiry $upstream_http_remote_expiry;
-            proxy_set_header Remote-Expiry $expiry;
         }
     }
 }
diff --git a/src/server/endpoints.ts b/src/server/endpoints.ts
index 7412aa967..852c9a79d 100644
--- a/src/server/endpoints.ts
+++ b/src/server/endpoints.ts
@@ -274,7 +274,10 @@ export const SECOND_FACTOR_GET = "/secondfactor";
  * @apiError (Error 401) status The user is not authenticated.
  *
  * @apiDescription Verify that the user is authenticated, i.e., the two
- * factors have been validated
+ * factors have been validated.
+ * If the user is authenticated the response headers Remote-User and Remote-Groups
+ * are set. Remote-User contains the user id of the currently logged in user and Remote-Groups
+ * a comma separated list of assigned groups.
  */
 export const VERIFY_GET = "/verify";
 
diff --git a/src/server/lib/routes/verify/get.ts b/src/server/lib/routes/verify/get.ts
index 59d06387b..3449ebdab 100644
--- a/src/server/lib/routes/verify/get.ts
+++ b/src/server/lib/routes/verify/get.ts
@@ -1,9 +1,7 @@
 
-import { Winston } from "winston";
 import objectPath = require("object-path");
 import BluebirdPromise = require("bluebird");
 import express = require("express");
-import { AccessController } from "../../access_control/AccessController";
 import exceptions = require("../../Exceptions");
 import winston = require("winston");
 import AuthenticationValidator = require("../../AuthenticationValidator");
@@ -35,6 +33,9 @@ function verify_filter(req: express.Request, res: express.Response): BluebirdPro
       if (!authSession.first_factor || !authSession.second_factor)
         return BluebirdPromise.reject(new exceptions.AccessDeniedError("First or second factor not validated"));
 
+      res.setHeader("Remote-User", username);
+      res.setHeader("Remote-Groups", groups.join(","));
+
       return BluebirdPromise.resolve();
     });
 }
diff --git a/test/unit/server/routes/verify/get.test.ts b/test/unit/server/routes/verify/get.test.ts
index 65cb5ab32..6ba9ce2eb 100644
--- a/test/unit/server/routes/verify/get.test.ts
+++ b/test/unit/server/routes/verify/get.test.ts
@@ -41,9 +41,12 @@ describe("test authentication token verification", function () {
     authSession.first_factor = true;
     authSession.second_factor = true;
     authSession.userid = "myuser";
+    authSession.groups = ["mygroup", "othergroup"];
 
     return VerifyGet.default(req as express.Request, res as any)
       .then(function () {
+        sinon.assert.calledWithExactly(res.setHeader, "Remote-User", "myuser");
+        sinon.assert.calledWithExactly(res.setHeader, "Remote-Groups", "mygroup,othergroup");
         assert.equal(204, res.status.getCall(0).args[0]);
       });
   });