CoreID/app/routing/routers/auth/mfa.routes.js

const mfa_routes = {
    prefix: '/auth/mfa',

    middleware: [
        'auth:UserOnly',
    ],

    get: {
        '/setup': [
            ['middleware::auth:RequireTrust', { scope: 'mfa.enable' }],
            'controller::auth:MFA.setup',
        ],
        '/challenge': [
            'controller::auth:MFA.challenge',
        ],
        '/disable': [
            'controller::auth:MFA.get_disable',
        ],
        '/disable/process': [
            ['middleware::auth:RequireTrust', { scope: 'mfa.disable' }],
            'controller::auth:MFA.do_disable',
        ],
    },

    post: {

    },
}

module.exports = exports = mfa_routes