Strict anti-enumeration: unknown email, wrong password, non-active account => INVALID_CREDENTIALS (401). If 2FA enabled: returns a challenge (no token). If 2FA disabled: issues a token (1 token per device_id).
Documentation Index
Fetch the complete documentation index at: https://docs.flowxi.app/llms.txt
Use this file to discover all available pages before exploring further.
Login success (token) OR 2FA challenge returned.