gws.plugin.auth_mfa.totp

Multi-factor authentication with time-based one-time passwords.

The adapter checks TOTP codes generated by authenticator apps. The secret is taken from the mfaSecret attribute of the user; users without it cannot start a transaction. The client sends the code as {"code": ...}. key_uri creates a key URI for a secret, which can be shown as a QR code to set up the app.

Example:

auth.mfa+ {
    type "totp"
    uid "AUTH_MFA_TOTP"
}

Source code: gws.plugin.auth_mfa.totp

Package Contents

class gws.plugin.auth_mfa.totp.Config

Bases: gws.base.auth.mfa.Config

Multi-factor authentication with time-based one-time passwords.

class gws.plugin.auth_mfa.totp.Object

Bases: gws.base.auth.mfa.Object

TOTP multi-factor adapter.

key_uri(secret, issuer_name, account_name)

start(user)

verify(mfa, payload)