Mastering ASP.NET Web API

Two-factor authentication

The usual way of authentication, that is, username with password, works in most cases, but when the need for additional security arises, such as a phone number or email verification, then we need to use the two-factor authentication (2FA).

We will still use the good old username and password authentication; however, along with that, if 2FA is enabled for users, then we will send a security code via SMS or email, and only when the code is entered, the actual sign in takes place.

Note that either the SMS or email needs to be confirmed along with 2FA enabled.

We will create TwoFactorAuthController with the following piece of code:

 namespace BudegetIdentityDemo.Controllers { public class TwoFactorAuthController : Controller ...