Log in with an authenticator-app code, skipping the email step
POST/auth/totp/login-verify
Takes a live 6-digit code or an unused backup code and issues the same account JWT GET /auth/verify does — only usable once TOTP has been enabled via POST /auth/totp/confirm.
Request
Responses
- 200
- 401
OK
Missing or invalid token/key