Unenroll a TOTP factor
Auth
Unenroll a TOTP factor
Requires an aal2 session (freshly MFA-verified). Returns 403 code: aal2_required if the session isn’t aal2.
POST
Unenroll a TOTP factor
Authorizations
HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".
Body
application/json
Response
Success