Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 2 additions & 19 deletions docs/book/v7/security/2fa-with-totp.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,25 +9,8 @@ Our implementation follows the industry standard of using an Authenticator app t

Below is a simplified flow for the 2FA with a TOTP mechanism.

```mermaid
sequenceDiagram
participant U as 👤 User
participant A as 📱 Authenticator App
participant S as 🖥 Server

U->>S: 1. Enter username + password
S->>S: 2. Verify credentials

S-->>U: 3. Request TOTP code

A->>U: 4. Display TOTP (time-based)
U->>S: 5. Submit TOTP code

S->>S: 6. Validate (shared secret + time)

S-->>U: 7. ✅ Access granted
```
![totp-flow!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-flow.jpg)

## Next Steps

[Install 2FA with dot-totp](../configuring-2fa-with-totp.md).
[Install 2FA with dot-totp](https://docs.dotkernel.org/admin-documentation/v7/tutorials/install-dot-totp/).
8 changes: 4 additions & 4 deletions docs/book/v7/tutorials/install-dot-totp.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ There are still some code snippets in the [_misc](https://github.com/dotkernel/a
Once you have `dot-totp` implemented, you can activate the feature in your admin accounts.
If you navigate to your profile from the top-right image in Dotkernel Admin, you should see this box.

![Dotkernel Admin File Structure!](https://docs.dotkernel.org/img/admin/v7/install-totp/profile-totp-deactivated.jpg)
![profile-totp-deactivated!](https://docs.dotkernel.org/img/admin/v7/install-totp/profile-totp-deactivated.jpg)

Simply click on 'Enable TOTP' to begin the activation process.

Expand All @@ -52,7 +52,7 @@ Simply click on 'Enable TOTP' to begin the activation process.

> You will need to have an Authenticator app installed on your mobile device.

![Dotkernel Admin File Structure!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-activate-qr.jpg)
![totp-activate-qr!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-activate-qr.jpg)

Follow the instructions on the screen:

Expand All @@ -63,7 +63,7 @@ Follow the instructions on the screen:

The TOPT activation flow will list several recovery codes you can use if your mobile device isn't available.

![Dotkernel Admin File Structure!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-recovery-codes.jpg)
![totp-recovery-codes!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-recovery-codes.jpg)

> Each recovery code is usable only once.

Expand All @@ -75,7 +75,7 @@ Whenever you need to log into the account, you will start by entering your usern
Since TOTP is activated, you will need to also submit the code from your Authenticator app.
Alternatively, you can submit a recovery code.

![Dotkernel Admin File Structure!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-ask-code.jpg)
![totp-ask-code!](https://docs.dotkernel.org/img/admin/v7/install-totp/totp-ask-code.jpg)

That's it!
You are now logged in securely.
4 changes: 2 additions & 2 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,10 +35,10 @@ nav:
- "Set Up CSRF": v7/how-to/csrf.md
- Security:
- "Basic Security": v7/security/basic-security.md
- "Two Factor Authorization with Time-based One-Time Password": v7/security/2fa-with-totp.md
- "Two-Factor Authentication with Time-based One-Time Password": v7/security/2fa-with-totp.md
- Tutorials:
- "Creating a book module using DotMaker": v7/tutorials/create-book-module-via-dot-maker.md
- "Installing dot-totp": v7/tutorials/install-dot-totp.md
- "Enabling Time-based One-Time Password (TOTP)": v7/tutorials/install-dot-totp.md
- v6:
- Introduction: v6/introduction/introduction.md
- Overview:
Expand Down