I know this is an old question, but the following, which I have tested only with gitlab.com free hosted accounts, may be useful for others with GitLab 2fa problems. IF you have set up 2fa but then lost access to your 2fa device for some reason, and you have lost (or never saved) your recovery … Read more
This has very little to do with hash functions. A cryptographic hash function may be part of the implementation, but it’s not required. Actually, it generates the digits on a time-based interval, if I press the button for it to generate the digits, it generates the digits and after about 25 seconds, and I press … Read more
The key phrase that you’re looking for is “TOTP” (Time-Based One-time Password) – and it is a specification, rather than an API maintained by Google. At a very high level, your backend will generate a secret that it will share with your users’ Google Authenticator app. At login, both the Authenticator app and your backend … Read more
You can inject the OwinEnvironmentService into your user service’s ctor and then wrap it with an OwinContext. Please have a look act following link. https://identityserver.github.io/Documentation/docsv2/advanced/owin.html
While playing around with Google Authenticator, I came across this question and in particular the code contributed by Espo. I personally wasn’t satisfied with the conversion from Java to C# and so I thought I would share my version. Aside from heavily refactoring the code: Introduced check for little-endian byte ordering and convert to big-endian … Read more
Create a custom app in you Gmail security settings. Log-in into Gmail with your account Navigate to https://security.google.com/settings/security/apppasswords In ‘select app’ choose ‘custom’, give it an arbitrary name and press generate It will give you 16 chars token. Use the token as password in combination with your full Gmail account and two factor authentication will … Read more
You need to generate an access token. You can create one by going to your settings page. Use this access token as your password in the command line.