Status codes
Invalid input
Most400 bodies name the problem per field:
non_field_errors:
message:
Two-factor login
A wrong code atPOST /v1/totp/login/ returns 400 with a message field; a
missing code returns 400 under the code field. After too many wrong codes
the account is locked, and the next POST /v1/login/ returns 429 with a
message field.
Other errors
401, 403 and 404 return a detail message, as does a 429 from the
login rate limit:
404 with an HTML page instead of JSON.
