curl --location --request POST '/api/user/verify-totp' \ --header 'Content-Type: application/json' \ --data-raw '{ "code": "123456" }'