{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnet/Identity/issues/1632","repository_url":"https://api.github.com/repos/aspnet/Identity","labels_url":"https://api.github.com/repos/aspnet/Identity/issues/1632/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Identity/issues/1632/comments","events_url":"https://api.github.com/repos/aspnet/Identity/issues/1632/events","html_url":"https://github.com/aspnet/Identity/issues/1632","id":297420525,"number":1632,"title":"TOTP without cookies (using tokens)","user":{"login":"Werner-Swart-83","id":11144067,"avatar_url":"https://avatars2.githubusercontent.com/u/11144067?v=4","gravatar_id":"","url":"https://api.github.com/users/Werner-Swart-83","html_url":"https://github.com/Werner-Swart-83","followers_url":"https://api.github.com/users/Werner-Swart-83/followers","following_url":"https://api.github.com/users/Werner-Swart-83/following{/other_user}","gists_url":"https://api.github.com/users/Werner-Swart-83/gists{/gist_id}","starred_url":"https://api.github.com/users/Werner-Swart-83/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Werner-Swart-83/subscriptions","organizations_url":"https://api.github.com/users/Werner-Swart-83/orgs","repos_url":"https://api.github.com/users/Werner-Swart-83/repos","events_url":"https://api.github.com/users/Werner-Swart-83/events{/privacy}","received_events_url":"https://api.github.com/users/Werner-Swart-83/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-15T11:57:20Z","updated_at":"2018-02-15T11:57:20Z","closed_at":null,"author_association":"NONE","body":"Is it possible to implement TOTP authentication without using cookies?\r\n\r\nI am currently using the GetTwoFactorAuthenticationUserAsync() method to get the user from the cookie being sent back from the SPA which is fine. There are however business scenarios where clients do not allow the use of cookies (legal reason or what not).\r\n\r\nWould it be possible to generate a PasswordSignIn token instead of a cookie to be used by the TwoFactorAuthenticatorSignIn?\r\n"}}
{"actor":{"display_login":"Werner-Swart-83"}}