diff --git a/src/app/api/2fa/verify/route.ts b/src/app/api/2fa/verify/route.ts
index b61922624..22542410d 100644
--- a/src/app/api/2fa/verify/route.ts
+++ b/src/app/api/2fa/verify/route.ts
@@ -20,7 +20,6 @@ export async function POST(request: Request) {
     z.object({ backupCode: z.string().min(1), token: z.undefined() }),
   ]);
 
-  // Validate partial auth token — skip normal session auth
   const rawToken = getBearerToken(request);
   if (!rawToken) {
     return unauthorized({ code: 'two-factor-error-missing-token' });