Send a verification code to prove email ownership (post-enable enrollment)

Called by the client right after PUT /api/user/me {mfaEnabled:true}. Creates a 5-min challenge, emails the 6-digit code, returns challengeId + maskedEmail so the frontend can launch the verify screen. On success the user gets a trusted-device cookie; on cancel the frontend rolls mfaEnabled back to false to prevent self-lockout.

POST /api/user/me/mfa-enroll

Send a verification code to prove email ownership (post-enable enrollment)

cURL

curl --request POST \
  --url https://pria.praxislxp.com/api/user/me/mfa-enroll \
  --header 'Authorization: Bearer <token>'

200

{
  "success": true,
  "challengeId": "<string>",
  "maskedEmail": "hu***@praxis-ai.com"
}

Authorizations

Authorization · string · header · required

JWT token passed in authorization header

Response

200

application/json

Code emailed.

success · boolean

challengeId · string

maskedEmail · string

Example:

"hu***@praxis-ai.com"