// Setup MFA for user
const setupMFA = async () => {{
  const {{ qrCode, secret, backupCodes }} = 
    await api.post('/users/mfa/setup');
  
  // Show QR code to user
  displayQRCode(qrCode);
  
  // Show backup codes (we handle the UI)
  showBackupCodes(backupCodes);
  
  // Wait for user to scan and enter code
  const verificationCode = await getUserInput();
  
  // Enable MFA
  const result = await api.post('/users/mfa/enable', {{
    code: verificationCode
  }});
  
  if (result.success) {{
    celebrate(); // 🎉
  }}
}};

// Enhanced login with MFA
const login = async (credentials) => {{
  const loginResult = await api.post('/auth/sign_in', {{
    email: credentials.email,
    password: credentials.password
  }});
  
  if (loginResult.requires_mfa) {{
    // Prompt for MFA code
    const mfaCode = await promptForMFA();
    
    const mfaResult = await api.post('/auth/verify_mfa', {{
      session_token: loginResult.session_token,
      mfa_code: mfaCode
    }});
    
    return mfaResult.access_token;
  }}
  
  return loginResult.access_token;
}};

// Using our React hook
import {{ useMFA }} from '23blocks-react';

function MFASetup() {{
  const {{ 
    setupMFA, 
    enableMFA, 
    qrCode, 
    backupCodes,
    isLoading 
  }} = useMFA();
  
  const handleSetup = async () => {{
    await setupMFA();
    // QR code and backup codes are now available
  }};
  
  const handleEnable = async (code) => {{
    await enableMFA(code);
    router.push('/dashboard');
  }};
  
  return (
    <MFASetupFlow 
      onSetup={{ '{' + '{' }}handleSetup{{ '}' + '}' }}
      onEnable={{ '{' + '{' }}handleEnable{{ '}' + '}' }}
      qrCode={{ '{' + '{' }}qrCode{{ '}' + '}' }}
      backupCodes={{ '{' + '{' }}backupCodes{{ '}' + '}' }}
      loading={{ '{' + '{' }}isLoading{{ '}' + '}' }}
    />
  );
}}

// Check MFA status and manage
const mfaStatus = await api.get('/users/mfa/status');
console.log(mfaStatus);
// {{
//   enabled: true,
//   backup_codes_remaining: 7,
//   last_used: '2024-01-15T10:30:00Z',
//   trusted_devices: 2
// }}

// Disable MFA (with confirmation)
await api.post('/users/mfa/disable', {{
  confirmation_code: '123456'
}});

// Regenerate backup codes
const newCodes = await api.post('/users/mfa/regenerate_codes');

// Check if code is valid (without consuming it)
const isValid = await api.post('/users/mfa/validate', {{
  code: '123456'
}});