post
https://account.api.here.com/authentication/v1.1/users/me/mfa/recover
Recovers the MFA enabled user account by sending a one time passcode to the user's primary email address.
The generated passcode is valid for 5 minutes and can be consumed only once.
Access Control:
- The calling principal must provide MFA required token issued for the user.
- The calling principal MUST NOT include a project scope.