`api.auth.mfa.verify`

Redeem the challenge_id from a mfa_required login response, plus the user's current TOTP code, for a TokenPair. Persists the pair to the configured tokenStore automatically.

const  = await ...("b4bd…", "123456");

Argument	Type
`challenge_id`	string
`code`	string

Returns: Promise<TokenPair> (see Auth → Types).

Throws: ApiError with status: 401 on wrong code, expired challenge, or clock skew.

REST endpoint: POST /auth/mfa/verify.