Settings

Account security settings, primarily two-factor authentication (2FA).

2FA setup flow:

1. GET /settings/enable_two_factor — returns QR code and secret
2. Scan QR code with authenticator app
3. POST /settings/enable_two_factor — submit code + secret to activate

📄️ Get two-factor setup data

Retrieve the QR code and secret needed to set up two-factor

📄️ Enable two-factor authentication

Activate 2FA by submitting the TOTP code from the authenticator app

📄️ Disable two-factor authentication

Disable 2FA. Requires the user's password and a current TOTP code