2FA? Is it hard to implement?
How hard is it to implement 2FA into a log in. Using something like google Authenticator?
28 Replies
its not hard, just a bit of effort doing all the required endpoints and updating the logic of your already existing ones, but espeically if you only focus on one type of 2FA like google authenticator, its definitely not hard.
Only one is fine not sure if Microsoft has one
2FA is actually built into Identity
:sadge:
So if you use that for user accounts, then no need to implement anything
I'm making a web password manager
It only has a master password
And it's for 1 user
Like for a local network
If you're not using Identity, then it's still stupid easy to do
I implemented 2FA easily even back in my PHP days lol
That's what I like to hear
:email: but like how to do it
Any docs?
i mean i dont know if there is something new better for it, but one library that does all the heavy lifting of actually doing the generating and validating is: https://github.com/BrandonPotter/GoogleAuthenticator
GitHub
GitHub - BrandonPotter/GoogleAuthenticator: Simple, easy to use ser...
Simple, easy to use server-side two-factor authentication library for .NET that works with Google Authenticator and Authy. - BrandonPotter/GoogleAuthenticator
you just have to implement the logic around that in your specific app structure
Thanks!
Is there anything for Microsoft Authenticator maybe?
Id assume it has better support
havent done microsoft before
Hei. U can 2fa auth using OTP. Like to send 6 digits code on email or on phone
6 digits
On an app sounds easier
And this is not so hard to make
Because like I wouldn't need email / phone micro services
To send sms u can use api
and send requests with payload data
you shouldnt use sms 2fa anymore nowadays if you build something new
SMS 2FA is insecure
Email 2FA is debatable
TOTP is recommended
Time based authentication sounds the easiest
Not sure if that's exactly what it's called
https://github.com/BrandonPotter/GoogleAuthenticator
this looks amazing
GitHub
GitHub - BrandonPotter/GoogleAuthenticator: Simple, easy to use ser...
Simple, easy to use server-side two-factor authentication library for .NET that works with Google Authenticator and Authy. - BrandonPotter/GoogleAuthenticator
to use for Google Auth
I'm looking at it rn!
Awesome
I hope it still works it hasn't been updated in a while
I'll update you guys later today
Thanks for the help everyone
i use it for one project and still works, last update was Jan 12. And google authenticator isnt really changing much often
:blobthumbsup:
google authenticator and microsofts all support the same TOTP protocol
you dont implement it for a specific authenticator, you just implement totp 2fa