curl --location '/api/user/verify-totp' \ --header 'Content-Type: application/json' \ --data '{ "code": "123456" }'