Enroll Confirm

POST

/api/auth/mfa/enroll/confirm

Verify the first TOTP code and activate MFA. If reached via the forced mid-login path (mfa_pending_token with purpose=enroll), this ALSO completes login and issues real session cookies.

Authorizations

• HTTPBearer

Request Body ^required

object

mfa_pending_token

Any of:

string

string

null

null

otp_code

required

string

>= 6 characters <= 6 characters /^\d{6}$/

Responses

200

Successful Response

object

access_token

Any of:

string

string

null

null

backup_codes

required

Array<string>

expires_in

Any of:

integer

integer

null

null

refresh_token

Any of:

string

string

null

null

token_type

Any of:

string

string

null

null

422

Validation Error

object

detail

Array<object>

object

loc

required

Array

msg

required

string

type

required

string