pub async fn verify_mfa(
__arg0: State<ApiState>,
headers: HeaderMap,
__arg2: Json<MfaVerifyRequest>,
) -> ApiResponse<()>Expand description
POST /mfa/verify — complete MFA enrollment.
Verifies a TOTP code against the pending secret created by /mfa/setup.
On success the pending secret is promoted to the active secret, backup-code
hashes are committed to permanent storage, and the user’s MFA-enabled flag
is set.