Verify
For TOTP users, `code` accepts either a 6-digit TOTP code OR a 10-char alphanumeric recovery code (hyphenated or not, e.g. `XXXXX-XXXXX`). Response may additionally include: `attributes.recovery_codes` (array, ONCE on first-time TOTP confirmation), `attributes.recovery_codes_remaining` (int, on recovery-code login), `attributes.recovery_codes_low` (bool, true when ≤3 remain).
Request
This endpoint expects a multipart form.
code
Required: Code Received from OTP or TOTP
auth_challenge
Required: auth_challenge Received from auth/login
Response headers
Host
X-Powered-By
Cache-Control
Response
OK
data
Errors
401
Unauthorized Error

