CHW-1102 TOTPRequired
two-factor authentication required; complete the /api/auth/2fa/verify handshake
Default message: two-factor authentication required; complete the /api/auth/2fa/verify handshake
HTTP status:401(client)
Problem. Password authentication succeeded but the account has 2FA
enabled; the session is not yet live. Cause. The login response
includes a short-lived pending_token the client must exchange at
/api/auth/2fa/verify with a TOTP or recovery code. Fix. Complete
the 2FA step within the pending TTL. If the pending token is lost,
restart the login flow. HTTP 401.