{"action":"created","issue":{"url":"https://api.github.com/repos/openiddict/openiddict-core/issues/222","repository_url":"https://api.github.com/repos/openiddict/openiddict-core","labels_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/222/labels{/name}","comments_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/222/comments","events_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/222/events","html_url":"https://github.com/openiddict/openiddict-core/issues/222","id":176015071,"number":222,"title":"2FA support?","user":{"login":"norcis","id":1047487,"avatar_url":"https://avatars.githubusercontent.com/u/1047487?v=3","gravatar_id":"","url":"https://api.github.com/users/norcis","html_url":"https://github.com/norcis","followers_url":"https://api.github.com/users/norcis/followers","following_url":"https://api.github.com/users/norcis/following{/other_user}","gists_url":"https://api.github.com/users/norcis/gists{/gist_id}","starred_url":"https://api.github.com/users/norcis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/norcis/subscriptions","organizations_url":"https://api.github.com/users/norcis/orgs","repos_url":"https://api.github.com/users/norcis/repos","events_url":"https://api.github.com/users/norcis/events{/privacy}","received_events_url":"https://api.github.com/users/norcis/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openiddict/openiddict-core/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-09-09T13:52:51Z","updated_at":"2016-09-09T16:21:43Z","closed_at":null,"body":"Hello,\r\n\r\nI'm creating rest api and first party native mobile app which will consume it. To authorize API access and authenticate users I want to implement OpenId Connect with 2FA. \r\n\r\nIt would look like this: \r\n\r\n1) in the app, user enters his username/password or use Facebook/Google etc.\r\n2) if it's validated, server send SMS with shared secret to customer associated phone number.\r\n3) clients enters PIN code received by SMS in the app. This pin could be passed to server to get token or maybe it should be stored in app and used for signing future requests. I'm not sure which flow should be used in such case.\r\n\r\nAny recommendations how to do that with openiddict?"},"comment":{"url":"https://api.github.com/repos/openiddict/openiddict-core/issues/comments/245963347","html_url":"https://github.com/openiddict/openiddict-core/issues/222#issuecomment-245963347","issue_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/222","id":245963347,"user":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"created_at":"2016-09-09T16:21:43Z","updated_at":"2016-09-09T16:21:43Z","body":"Hey.\r\n\r\n2FA is supported with interactive flows like code or implicit for a simple reason: OpenIddict doesn't handle the authentication part, which is something you must implement yourself. In practice, this is often handled using the `AccountController` that comes with the default template when you select individual authentication (it uses ASP.NET Core Identity under the hood).\r\n\r\nIf you need more information about Identity's 2FA functionalities, consider opening a new ticket here: https://github.com/aspnet/Identity/issues."}}
{"actor":{"display_login":"PinpointTownes"}}