- ABP Framework version: v8.1.0
- UI Type: Flutter
- Database System: EF Core SQL Serve
- Tiered (for MVC): yes
- Exception message and full stack trace:
- { "error": "invalid_grant", "error_description": "RequiresTwoFactor", "error_uri": "https://documentation.openiddict.com/errors/ID2024", "userId": "[userId]", "twoFactorToken": "[token]" }
- Steps to reproduce the issue:
- Enable 2FA for the user:
-
- POST to /connect/token
- client_id: [clientId]
- grant_type: password
- username: [user]
- password: [password]
- scope: [scope]
We need to enable 2FA for our mobile app. When it is enabled for a user the connect/token request returns an "invalid_grant" error witth "RequiresTwoFactor" message. We can request a 2FA code with a request to account/send-two-factor-code but are unsure how to verify this code and proceed with authenticating the user.
How can we verify the code returned from account/send-two-factor-code and login the user?
6 Answer(s)
-
0
Hi this is related with OpenIddict https://docs.abp.io/en/commercial/latest/modules/openiddict
you need to register your flutter app to OpenId in that way you can enable 2F auth.
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
Thanks for the reply. We have the OpenIddict module on our Blazor web application (.Net 8.0). We are trying to have our mobile app authenticate against this application to allow for API calls.
Before we enabled 2FA we were able to authenticate with the token endpoint but cannot anymore with the 2FA challenge.
With the OpenIddict module already on the web application, is there an endpoint for our mobile app to login and handle a 2FA challenge?
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
Hi,
When your login fails, a security code will be generated and responded.
https://github.com/abpframework/abp/blob/OrganizationUnitEto/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs#L224-L244
Then you can request again using the security code
https://github.com/abpframework/abp/blob/OrganizationUnitEto/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs#L199-L200
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
Sorry,
https://github.com/abpframework/abp/blob/dev/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs#L224-L244
https://github.com/abpframework/abp/blob/dev/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/TokenController.Password.cs#L199-L200
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
