AuthTwoFactorResult

What BeginEnrolmentAsync returns: the new shared secret in the two forms an authenticator app accepts.

WARNING

Both values are the secret itself. Return them only to the authenticated user enrolling, over the response to their own request, and never write them to a log.

Fields

Secret: string
The Base32 shared secret, for the user to type into an authenticator that cannot scan a code. Shown once at enrolment and never retrievable again.

Uri: string
The otpauth://totp/ URI carrying the same secret plus the issuer, account, digit count, and period. Render it as a QR code.

Type signature

public sealed record AuthTwoFactorResult
{
    public required string Secret { get; init; }
    public required string Uri { get; init; }
}