MFA API

Passkey registration and trusted-device challenge flows

MFA API

POST/api/mfa/passkey/register
POST/api/mfa/passkey/register/verify
{
  "deviceName": "MacBook Touch ID"
}
POST/api/mfa/device-trust/approve
{
  "challengeId": "challenge_123",
  "approved": true
}