post:
  operationId: authMfaConfirmRegistration
  tags:
    - Auth MFA
  summary: Confirm a user's registration for MFA
  description: >-
    For a user who is not currently registered for MFA and who has just scanned the QR code containing the TOTP URL provided by the /generate-secret </br>
    endpoint, confirms registration for MFA by validating a new TOTP code generated by the authenticator used to scan the QR code containing the TOTP URL.</br>
    </br>
    Request requires a unique header as proof of partial authentication. This header is called 'slpt-auth-mfa', and it must contain a special </br>
    MFA token for calling this endpoint. </br>
    </br>
    While no specific right is required for a user to confirm registration, it is expected that the caller first make a request to the /generate-secret </br>
    endpoint so that a TOTP secret exists as a basis for registration confirmation. It is also assumed that the caller has previously verified that the user is </br>
    associated with an auth profile that has MFA enabled.
  requestBody:
    description: Request body containing TOTP code to validate.
    required: true
    content:
      application/json:
        schema:
          $ref: '../../schemas/TotpCodeRequest.yaml'
  responses:
    '200':
      description: Response indicating that the user's MFA has been verified.
      content:
        application/json:
          schema:
            $ref: '../../schemas/MfaVerificationResponse.yaml'
    '400':
      $ref: '../../../v3/responses/400.yaml'
    '403':
      $ref: '../../../v3/responses/403.yaml'
    '429':
      $ref: '../../../v3/responses/429.yaml'
    '500':
      $ref: '../../../v3/responses/500.yaml'
