POST /api/v2/auth/totp/setup

Authorization: Bearer <jwt_access_token>

{
  "success": true,
  "data": {
    "secret": "JBSWY3DPEHPK3PXP",
    "otpauthUrl": "otpauth://totp/LearnWay:john.doe@example.com?secret=JBSWY3DPEHPK3PXP&issuer=LearnWay",
    "qrCode": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAA..."
  },
  "message": "TOTP secret generated successfully. Please verify with a token to activate."
}

POST /api/v2/auth/totp/verify

Authorization: Bearer <jwt_access_token>

{
  "token": "492019"
}

{
  "success": true,
  "data": {
    "is2FAEnabled": true,
    "recoveryCodes": [
      "A1B2-C3D4-E5F6",
      "G7H8-I9J0-K1L2",
      "M3N4-O5P6-Q7R8",
      "S9T0-U1V2-W3X4"
    ]
  },
  "message": "Two-factor authentication enabled successfully"
}

POST /api/v2/auth/totp/disable

{
  "token": "492019",
  "password": "CurrentPassword123!"
}