POST /mfa/challenge
为指定用户创建一次性的MFA挑战码，支持短信、邮件、TOTP、推送等多种验证方式，用于登录或敏感操作前的二次认证。参考：NIST SP 800-63B §5.1.7 (Verifier Impersonation Resistance)、OWASP ASVS V2.8。
MFA `bearerAuth` application/json
Referenced Schemas
dto.MFAChallengeDetailResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
code |
integer |
No |
|
|
|
data |
dto.MFAChallengeResponse |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|
dto.MFAChallengeResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
challenge_id |
string |
No |
challenge-1234567890 |
|
|
created_at |
string |
No |
2026-04-14T12:00:00Z |
|
|
expires_in |
integer |
No |
300 |
|
|
method |
string |
No |
sms |
|
|
tenant_id |
string |
No |
tenant-001 |
|
|
user_id |
string |
No |
user-001 |
|
|
gitee_com_linmes_authms_base_dto.SimpleResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
code |
integer |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|