diff --git a/pkg/swagger/docs.go b/pkg/swagger/docs.go
index 6061a40a2..7546594b4 100644
--- a/pkg/swagger/docs.go
+++ b/pkg/swagger/docs.go
@@ -67,6 +67,12 @@ const docTemplate = `{
                             "$ref": "#/definitions/auth.Token"
                         }
                     },
+                    "412": {
+                        "description": "Invalid totp passcode.",
+                        "schema": {
+                            "$ref": "#/definitions/models.Message"
+                        }
+                    },
                     "500": {
                         "description": "Internal error",
                         "schema": {
@@ -10062,6 +10068,10 @@ const docTemplate = `{
                 },
                 "scope": {
                     "type": "string"
+                },
+                "totp_passcode": {
+                    "description": "TOTPPasscode is required when the resolved user has TOTP enabled.\nClients must restart the OIDC flow and populate this field after\nreceiving a 412 with error code 1017. See GHSA-8jvc-mcx6-r4cg.",
+                    "type": "string"
                 }
             }
         },
diff --git a/pkg/swagger/swagger.json b/pkg/swagger/swagger.json
index a23bd2231..234462352 100644
--- a/pkg/swagger/swagger.json
+++ b/pkg/swagger/swagger.json
@@ -59,6 +59,12 @@
                             "$ref": "#/definitions/auth.Token"
                         }
                     },
+                    "412": {
+                        "description": "Invalid totp passcode.",
+                        "schema": {
+                            "$ref": "#/definitions/models.Message"
+                        }
+                    },
                     "500": {
                         "description": "Internal error",
                         "schema": {
@@ -10054,6 +10060,10 @@
                 },
                 "scope": {
                     "type": "string"
+                },
+                "totp_passcode": {
+                    "description": "TOTPPasscode is required when the resolved user has TOTP enabled.\nClients must restart the OIDC flow and populate this field after\nreceiving a 412 with error code 1017. See GHSA-8jvc-mcx6-r4cg.",
+                    "type": "string"
                 }
             }
         },
diff --git a/pkg/swagger/swagger.yaml b/pkg/swagger/swagger.yaml
index 4a1a5f504..4ad3fdc47 100644
--- a/pkg/swagger/swagger.yaml
+++ b/pkg/swagger/swagger.yaml
@@ -1270,6 +1270,12 @@ definitions:
         type: string
       scope:
         type: string
+      totp_passcode:
+        description: |-
+          TOTPPasscode is required when the resolved user has TOTP enabled.
+          Clients must restart the OIDC flow and populate this field after
+          receiving a 412 with error code 1017. See GHSA-8jvc-mcx6-r4cg.
+        type: string
     type: object
   todoist.Migration:
     properties:
@@ -1832,6 +1838,10 @@ paths:
           description: OK
           schema:
             $ref: '#/definitions/auth.Token'
+        "412":
+          description: Invalid totp passcode.
+          schema:
+            $ref: '#/definitions/models.Message'
         "500":
           description: Internal error
           schema: