does anyone have an example of using Google Authenticator authentication as part of a SPA?
There's a lot of examples using the baked in solution and ASP generated pages, however in a SPA solution it's more tricky to pick apart the auth
15 Replies
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
im currently using the standard user/pass identity setup
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
yeah i want to use generic TOTP QR codes, and the setup seems to be working, but im not 100% on how you do a two-step authentication as thats kinda hidden in the internals of the templates
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
those are neat links, it does show a decent bit behind the scenes too
might need to create a default scaffolded app and investigate in there
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
cuz 1st step is for the user to provide user/pass, app needs to say somehow that it knows they're good but you need a response to provide that secondary token before auth is complete, just seems tricky
as you obviously dont want them to just hit back or somehow escape that journey before submitting the 2fa
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
ah so ur technically logged in after 1st step, but security stops you cuz of the lack of MFA token submitted
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
ah reacher, they've helped me many times 😄
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
@Duke just getting to that anatomy of a TOTP code, very good article!
I did some totp in either Python or C, but I'm on vaca right now 🙂