curl --request POST \
  --url https://aropay.aro.media/api/v1/me/totp/enable \
  --header 'Content-Type: application/json' \
  --cookie aropay_session= \
  --data '
{
  "code": "123456",
  "password": "…"
}
'

const options = {
  method: 'POST',
  headers: {cookie: 'aropay_session=', 'Content-Type': 'application/json'},
  body: JSON.stringify({code: '123456', password: '…'})
};

fetch('https://aropay.aro.media/api/v1/me/totp/enable', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://aropay.aro.media/api/v1/me/totp/enable"

payload = {
    "code": "123456",
    "password": "…"
}
headers = {
    "cookie": "aropay_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)