/netsapiensjs. The tokens are also set as ns_access_token and ns_refresh_token cookies. If scope is mfa_required, the body instead holds a limited token and the MFA fields.{
"token": "string",
"refresh": "string",
"auth_requirement": "string",
"allow_user_primary_email_edit": true,
"account_recovery_user_primary_email": true,
"email": "string",
"domain": "string",
"mfa": "string",
"email_verification_data": "string",
"scope": "string",
"mfa_vendor": "string",
"mfa_type": "string",
"user_email": "string"
}