CHW-1102 TOTPRequired

two-factor authentication required; complete the /api/auth/2fa/verify handshake

Default message: two-factor authentication required; complete the /api/auth/2fa/verify handshake
HTTP status: 401 (client)

Problem. Password authentication succeeded but the account has 2FA enabled; the session is not yet live. Cause. The login response includes a short-lived pending_token the client must exchange at /api/auth/2fa/verify with a TOTP or recovery code. Fix. Complete the 2FA step within the pending TTL. If the pending token is lost, restart the login flow. HTTP 401.