TotpEnrollRequest

Both fields are optional for a first enrolment. Once TOTP is already active on the account, exactly one must prove the caller still holds it — the current password, or a current TOTP code — or enrollTotp is refused; supplying both is refused too.

passwordstring

Possible values: <= 1024 characters

codestring

Possible values: <= 16 characters

TotpEnrollRequest

{
  "password": "string",
  "code": "string"
}