Access token
OptionalaudienceAPI audience
Expires in seconds
Optionalid_ID token (if present)
Optionalrecovery_Recovery code (if regenerated by tenant config)
Optionalrefresh_Refresh token (if present)
OptionalscopeToken scope
Token type (usually "Bearer")
MFA verify response from Auth0. Uses snake_case to match Auth0 API and SPA SDK conventions.
See
https://auth0.com/docs/api/authentication#verify-with-one-time-password-otp-