Google Authenticator already set up — sign in with code
During mandatory 2FA login setup, POST /api/auth/mandatory-2fa/setup found the account already has an authenticator configured. Product: sign in with your authenticator code.
Why this happens
resolveTwoFactorConfigured is true — secret exists from a prior setup. The mandatory QR flow will not create a second secret. You should complete login with the 6-digit code instead.
Diagnose and fix
1. Go back to password login; after password, enter the 6-digit code from the app.
2. If the device is lost, staff: Reset user 2FA / sessions, then the member sets up again.
3. Distinct from Account Settings’ “turn on or off from Settings” sibling (voluntary setup path).