Complete the approve-time TOTP challenge for an approval

POST 
/mfa/challenge/verify/APPROVAL_REVIEW

Submits the authenticator TOTP to complete the APPROVAL_REVIEW challenge started for this approval. On success the approver may call PUT /approvals/{identifier}/approve. Send the same approval UUID as resourceIdentifier and the randomVerificationCode returned by start.

Requires approvals.request.approve in the selected entity.

Request

Responses

200

Challenge verified; approve may now proceed. Empty body.

400

Invalid/failed OTP or request body validation error.

401

Missing/invalid JWT or entity selection

403

RBAC_PERMISSION_DENIED — caller lacks approvals.request.approve