Complete a 2FA login on behalf of the SaaS service: validates the temporary token (blacklist + TEMPORARY_JWT_SECRET) and verifies the OTP code.

POST 
/saas/user/otp/login

Complete a 2FA login on behalf of the SaaS service: validates the temporary token (blacklist + TEMPORARY_JWT_SECRET) and verifies the OTP code.

Request

Responses

201

OTP accepted; returns the user identity so the SaaS caller can sign its own full-session cookie.