\notpauth:\/\/totp\/title<\/span>:email<\/span>?secret=sharedKey<\/span>&issuer=who<\/span>\n<\/div>\n

title<\/strong> : E\u015fle\u015ftirilen authenticator uygulamas\u0131nda yazacak ba\u015fl\u0131k. Genellikle uygulama ad\u0131 yahut adresi belirtilmektedir.<\/li>\n

email<\/strong> : Uygulamaya dair yetkili bir e-posta adresi.<\/li>\n

sharedKey<\/strong> : ‘GenerateSharedKey’ metodu ile \u00fcretilen shared key de\u011feri.<\/li>\n

who<\/strong> : Uygulamaya dair yetkili olan bir ki\u015finin ad\u0131 yahut yay\u0131nc\u0131 bilgisi.<\/li>\n<\/ul>\n
Path de\u011ferini in\u015fa etme sorumlulu\u011funu yukar\u0131da olu\u015fturdu\u011fumuz ‘AuthenticatorService’ s\u0131n\u0131f\u0131 i\u00e7erisinde tan\u0131mlanan ‘GenerateQrCodeUri’ metodu \u00fcstlenmektedir.<\/p>\n
\r\n public class AuthenticatorService\r\n {\r\n UserManager<AppUser> _userManager;\r\n UrlEncoder _urlEncoder;\r\n public AuthenticatorService(UserManager<AppUser> userManager, UrlEncoder urlEncoder)\r\n {\r\n _userManager = userManager;\r\n _urlEncoder = urlEncoder;\r\n }\r\n public async Task<string> GenerateSharedKey(AppUser user)\r\n {\r\n string sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n if (string.IsNullOrEmpty(sharedKey))\r\n {\r\n IdentityResult result = await _userManager.ResetAuthenticatorKeyAsync(user);\r\n if (result.Succeeded)\r\n sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n }\r\n return sharedKey;\r\n }\r\n public async Task<string> GenerateQrCodeUri(string sharedKey, string title, AppUser user) =>\r\n $"otpauth:\/\/totp\/{_urlEncoder.Encode(title)}:{_urlEncoder.Encode(user.Email)}?secret={sharedKey}&issuer={_urlEncoder.Encode(title)}";\r\n }\r\n<\/pre>\n
En nihayetinde olu\u015fturulan bu ‘AuthenticatorService’ isimli s\u0131n\u0131f\u0131 “Startup.cs” dosyas\u0131ndaki “ConfigureServices” metodu i\u00e7erisinden uygulama provider\u0131na dahil ediyorum.<\/p>\n
\r\n public class Startup\r\n {\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddScoped<AuthenticatorService, AuthenticatorService>();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n
Ad\u0131m 3 – QR Code’un Bas\u0131lmas\u0131 ve Temel Ayarlar\u0131n Yap\u0131m\u0131<\/h5>\n
Kullan\u0131c\u0131 kendi hesab\u0131nda iki ad\u0131ml\u0131 kullan\u0131c\u0131 do\u011frulama y\u00f6ntemini iradesiyle aktifle\u015ftirmeli ve ard\u0131ndan ekrana QrCode de\u011ferini tutan barkod olu\u015fturularak okutulmaya haz\u0131r hale getirilmelidir. Bunun i\u00e7in “AppUser” entitysinde ilgili kullan\u0131c\u0131n\u0131n hangi 2FA y\u00f6ntemini kulland\u0131\u011f\u0131na dair veri tutan property eklenmektedir.<\/p>\n
\r\n public enum TwoFactorType\r\n {\r\n [Display(Name = "Microsoft & Google Authenticator \u0130le Do\u011frulama")]\r\n Authenticator,\r\n [Display(Name = "SMS \u0130le Do\u011frulama")]\r\n SMS,\r\n [Display(Name = "E-Posta \u0130le Do\u011frulama")]\r\n Email\r\n }\r\n<\/pre>\n
\r\n public class AppUser : IdentityUser<int>\r\n {\r\n public TwoFactorType TwoFactorType { get; set; }\r\n }\r\n<\/pre>\n
Ard\u0131ndan “TwoAuthentication(Controller).cs” isimli controller s\u0131n\u0131f\u0131 olu\u015fturuyoruz ve i\u00e7erisini a\u015fa\u011f\u0131daki gibi kodluyoruz.<\/p>\n
\r\n public class TwoAuthenticationController : Controller\r\n {\r\n AuthenticatorService _authenticatorService;\r\n UserManager<AppUser> _userManager;\r\n public TwoAuthenticationController(AuthenticatorService authenticatorService, UserManager<AppUser> userManager)\r\n {\r\n _authenticatorService = authenticatorService;\r\n _userManager = userManager;\r\n }\r\n public async Task<IActionResult> SelectTwoFactorAuthentication()\r\n {\r\n return View();\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> SelectTwoFactorAuthentication(TwoFactorTypeSelectVM model)\r\n {\r\n switch (model.TwoFactorType)\r\n {\r\n case Models.Enums.TwoFactorType.Authenticator:\r\n return RedirectToAction("AuthenticatorVerify");\r\n case Models.Enums.TwoFactorType.SMS:\r\n return RedirectToAction("SMSVerify");\r\n case Models.Enums.TwoFactorType.Email:\r\n return RedirectToAction("EmailVerify");\r\n }\r\n return View();\r\n }\r\n public async Task<IActionResult> AuthenticatorVerify()\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n string sharedKey = await _authenticatorService.GenerateSharedKey(user);\r\n string qrcodeUri = await _authenticatorService.GenerateQrCodeUri(sharedKey, "www.gencayyildiz.com", user);\r\n\r\n return View(new AuthenticatorVM\r\n {\r\n SharedKey = sharedKey,\r\n QrCodeUri = qrcodeUri\r\n });\r\n }\r\n public async Task<IActionResult> SMSVerify()\r\n {\r\n \/\/\u0130lgili makalede kodlanacakt\u0131r...\r\n return View();\r\n }\r\n public async Task<IActionResult> EmailVerify()\r\n {\r\n \/\/\u0130lgili makalede kodlanacakt\u0131r...\r\n return View();\r\n }\r\n }\r\n<\/pre>\n
Yukar\u0131daki kod blo\u011funu incelerseniz e\u011fer 10 ile 27. sat\u0131rlar aras\u0131ndaki ‘SelectTwoFactorAuthentication’ metodu ile uygulamada iki ad\u0131ml\u0131 do\u011frulamada kullan\u0131lacak y\u00f6ntem se\u00e7ilmektedir. G\u00f6rseli a\u015fa\u011f\u0131daki gibidir;<\/p>\n
\r\n@model TwoFactorTypeSelectVM\r\n\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form method="post">\r\n <div class="form-group">\r\n <label for="exampleFormControlSelect1">\u0130ki ad\u0131ml\u0131 do\u011frulama y\u00f6ntemi se\u00e7iniz<\/label>\r\n <select class="form-control" asp-for="TwoFactorType" asp-items="Html.GetEnumSelectList<TwoFactorType>()">\r\n <\/select>\r\n <\/div>\r\n <button type="submit" class="btn btn-danger">Se\u00e7<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<\/pre>\n
Kullan\u0131lan ‘TwoFactorTypeSelectVM’ viewmodel’\u0131n\u0131n i\u00e7eri\u011fi ise a\u015fa\u011f\u0131daki gibidir;<\/p>\n
\r\n public class TwoFactorTypeSelectVM\r\n {\r\n public TwoFactorType TwoFactorType { get; set; }\r\n }\r\n<\/pre>\n
Tekrardan ilgili kod blo\u011funa g\u00f6z atarsak e\u011fer kullan\u0131c\u0131n\u0131n ‘Microsoft & Google Authenticator’ se\u00e7ene\u011fini se\u00e7mesi neticesinde 28. sat\u0131rdaki ‘AuthenticatorVerify’ action\u0131na y\u00f6nlendirilecek ve i\u00e7eri\u011finde gerekli shared key ile qr code uri de\u011ferleri olu\u015fturularak view’ine g\u00f6nderilecektir.
\n $\"Asp.NET$ <\/a><\/p>\n
\n
$\"Asp.NET$ <\/a><\/p>\n
Qr Code Uri de\u011ferine kar\u015f\u0131l\u0131k barkodu basabilmek i\u00e7in davidshimjs.github.io\/qrcodejs<\/a> adresindeki JavaScript k\u00fct\u00fcphanesini indirerek uygulaman\u0131za dahil ediniz. Gerekli script include i\u015flemlerinden sonra a\u015fa\u011f\u0131daki gibi ilgili action\u0131n view g\u00f6r\u00fcnt\u00fcs\u00fcnde oldu\u011fu gibi barkodu olu\u015fturabilirsiniz.<\/p>\n
\r\n@model AuthenticatorVM\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-success" role="alert">\r\n A\u015fa\u011f\u0131daki barkodu telefonunuzdaki Google ya da Microsoft authenticator uygulamas\u0131 ile okutunuz veya yandaki kodu ilgili uygulamaya giriniz.\r\n <\/div>\r\n <\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-light" role="alert">\r\n @Model.SharedKey\r\n <\/div>\r\n <\/div>\r\n<\/div>\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <div id="qrcode"><\/div>\r\n <script type="text\/javascript">\r\n new QRCode(document.getElementById("qrcode"), {\r\n text:'@Model.QrCodeUri',\r\n width: 250,\r\n height: 250,\r\n correctLevel: QRCode.CorrectLevel.H\r\n });\r\n <\/script>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form method="post">\r\n <div class="form-group">\r\n <label>Do\u011frulama Kodu<\/label>\r\n <input type="hidden" asp-for="QrCodeUri" \/>\r\n <input type="hidden" asp-for="SharedKey" \/>\r\n <input type="hidden" \/>\r\n <input type="text" class="form-control" asp-for="VerificationCode">\r\n <\/div>\r\n <button type="submit" class="btn btn-primary">Do\u011frula<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n@if (TempData["message2"] != null)\r\n{\r\n <div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n @TempData["message2"]\r\n <\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-info" role="alert">\r\n Kurtarma Kodlar\u0131\r\n <\/div>\r\n <ul class="list-group">\r\n @foreach (var code in TempData["message3"] as IEnumerable<string>)\r\n {\r\n <li class="list-group-item">@code<\/li>\r\n }\r\n <\/ul>\r\n <\/div>\r\n <\/div>\r\n}\r\n\r\n@section Scripts { @{await Html.RenderPartialAsync("_ScriptPartial");} }\r\n<\/pre>\n
Barkodu olu\u015fturan JavaScript kodumuz 19 ile 26. sat\u0131rlar aras\u0131ndad\u0131r. Ayr\u0131ca bu actionda kullan\u0131lan ‘AuthenticatorVM’ isimli viewmodel nesnesinin i\u00e7eri\u011fini ele al\u0131rsak;<\/p>\n
\r\n public class AuthenticatorVM\r\n {\r\n public string SharedKey { get; set; }\r\n public string QrCodeUri { get; set; }\r\n public string VerificationCode { get; set; }\r\n }\r\n<\/pre>\n
\u015feklinde olacakt\u0131r. Bu i\u00e7eri\u011fimizde sadece Microsoft & Google authenticator y\u00f6ntemini inceliyor olaca\u011f\u0131m\u0131zdan dolay\u0131 40 ile 49. sat\u0131rlar aras\u0131ndaki action metotlar\u0131 \u015fimdilik in\u015fa etmeden o y\u00f6ntemleri kaleme alaca\u011f\u0131m\u0131z ilgili yaz\u0131lara b\u0131rak\u0131yorum.<\/p>\n
Ad\u0131m 4 – Barkodun Okunmas\u0131 ve Do\u011frulanmas\u0131<\/h5>\n
Olu\u015fturulan barkodun okunmas\u0131 i\u00e7in \u00f6ncelikle ak\u0131ll\u0131 telefonunuza ya da tabletinize Microsoft Authenticator<\/a> yahut Google Authenticator<\/a> uygulamalar\u0131n\u0131 y\u00fcklemeniz ve ard\u0131ndan a\u015fa\u011f\u0131daki i\u015flemleri ger\u00e7ekle\u015ftirmeniz gerekmektedir.<\/p>\n\n\n\n\n\n\n
Microsoft Authenticator<\/th>\n Google Authenticator<\/th>\n<\/tr>\n<\/thead>\n
$\"Asp.NET$ <\/a><\/td>\n \n $\"Asp.NET$ <\/a>\n<\/td>\n<\/tr>\n
G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere her iki do\u011frulay\u0131c\u0131da barkodu okumakta ve ba\u015far\u0131yla do\u011frulama kodu \u00fcretebilmektedir. E\u011fer ki farkl\u0131 authenticator uygulamalar\u0131n\u0131 ayn\u0131 barkod de\u011ferini okuttu\u011funuz taktirde ayn\u0131 anda a\u00e7arsan\u0131z ortak algoritmay\u0131 kullanmalar\u0131ndan dolay\u0131 birebir ayn\u0131 do\u011frulama kodu \u00fcrettiklerini g\u00f6receksiniz.<\/p>\n
Ayriyetten barkod yerine her iki uygulamada da shared key de\u011feri direkt olarak manuel verilerek devreye sokulabilmektedir.\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u015eimdi s\u0131ra authenticator taraf\u0131nda \u00fcretilen kodun do\u011frulamas\u0131na gelmi\u015ftir. Bunun i\u00e7in tekrardan olu\u015fturdu\u011fumuz ‘AuthenticatorService’ isimli servisimize gelerek a\u015fa\u011f\u0131daki ‘Verify’ isimli metodu ekleyelim.<\/p>\n
\r\n public class AuthenticatorService\r\n {\r\n UserManager<AppUser> _userManager;\r\n UrlEncoder _urlEncoder;\r\n public AuthenticatorService(UserManager<AppUser> userManager, UrlEncoder urlEncoder)\r\n {\r\n _userManager = userManager;\r\n _urlEncoder = urlEncoder;\r\n }\r\n .\r\n .\r\n .\r\n public async Task<VerifyState> Verify(AuthenticatorVM model, AppUser user)\r\n {\r\n VerifyState verifyState = new VerifyState();\r\n verifyState.State = await _userManager.VerifyTwoFactorTokenAsync(user, _userManager.Options.Tokens.AuthenticatorTokenProvider, model.VerificationCode);\r\n if (verifyState.State)\r\n {\r\n user.TwoFactorEnabled = true;\r\n verifyState.RecoveryCode = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 5);\r\n }\r\n return verifyState;\r\n }\r\n }\r\n<\/pre>\n
Bu metot sayesinde kullan\u0131c\u0131dan al\u0131nan do\u011frulama kodu onaylanarak ilgili hesapta iki ad\u0131ml\u0131 do\u011frulama s\u00fcreci aktifle\u015ftirilmektedir. Metodun detay\u0131na g\u00f6z atarsak e\u011fer 16. sat\u0131rda ‘VerifyTwoFactorTokenAsync’ metodu sayesinde do\u011frulama kodu ilgili user’a \u00f6zel kontrol edilmekte ve sonucu bool olarak d\u00f6nd\u00fcrmektedir. Burada dikkat etmeniz gereken husus telefon ile uygulama sunucusunun bulundu\u011fu yahut kulland\u0131\u011f\u0131 Zaman Dilimlerinin birebir ayn\u0131 yahut paralel bir e\u015fde\u011ferlikte olmalar\u0131 gerekti\u011fidir. Aksi taktirde farkl\u0131 zaman dilimlerinde unix time stamp de\u011ferlerinin farkl\u0131 olma ihtimali olduk\u00e7a y\u00fcksek olaca\u011f\u0131ndan dolay\u0131 do\u011frulama kodu onaylanmayacakt\u0131r. E\u011fer ki bu hususta t\u00fcm ayarlamalara ra\u011fmen localhost \u00fczerinde hata ya\u015fayanlar\u0131n\u0131z varsa bilgisayar\u0131n\u0131z\u0131n zaman dilimini ‘(UTC+03:00) Istanbul<\/em>‘, ak\u0131ll\u0131 telefon yahut tabletinizin zaman dilimini ise ‘GMT +03:00 Arabistan<\/em>‘ olarak ayarlaman\u0131z\u0131 tavsiye ederim.<\/p>\n
Ayriyetten ilgili metodun ikinci parametresine verdi\u011fimiz “_userManager.Options.Tokens.AuthenticatorTokenProvider<\/em>” komutu de\u011ferini uygulamada kullan\u0131lan varsay\u0131lan token providerdan almaya \u00e7al\u0131\u015facak ve biz e\u011fer ki default token provider ayarlar\u0131n\u0131 set etmediysek bu haliyle a\u015fa\u011f\u0131daki olas\u0131 hatay\u0131 verecektir.<\/p>\n
An unhandled exception occurred while processing the request.
\nNotSupportedException: No IUserTwoFactorTokenProvider named ‘Authenticator’ is registered.<\/em><\/p><\/blockquote>\n
$\"Asp.NET$ <\/a>
\nBu hatay\u0131 almamak i\u00e7in uygulamaya default token de\u011ferini a\u015fa\u011f\u0131daki gibi ‘Startup’ dosyas\u0131ndaki ‘ConfigurationServices’ metodu i\u00e7erisinde eklenen identity mod\u00fcl\u00fcn\u00fcn akabinde ‘AddDefaultTokenProviders’ metodunu kullanarak verebilirsiniz.<\/p>\n
\r\n public class Startup\r\n {\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddIdentity<AppUser, AppRole>(options =>\r\n {\r\n options.Password.RequireDigit = false;\r\n options.Password.RequireLowercase = false;\r\n options.Password.RequiredLength = 3;\r\n options.Password.RequireLowercase = false;\r\n options.Password.RequireNonAlphanumeric = false;\r\n options.Password.RequireUppercase = false;\r\n }).AddEntityFrameworkStores<TwoFactorAuthenticationContext>().AddDefaultTokenProviders();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n
Tekrardan servis kodlar\u0131na d\u00f6nerek 19. sat\u0131ra g\u00f6z atarsan\u0131z e\u011fer do\u011frulama kodu onayland\u0131ktan sonra ilgili kullan\u0131c\u0131ya dair “TwoFactorEnabled” kolonunu true yaparak iki ad\u0131ml\u0131 kimlik do\u011frulama s\u00fcrecini aktifle\u015ftirmekteyiz. B\u00f6ylece ilgili kullan\u0131c\u0131 login olmaya \u00e7al\u0131\u015f\u0131rken direkt olarak sign in olamayacak yaz\u0131m\u0131z\u0131n ileriki sat\u0131rlar\u0131nda g\u00f6rece\u011fimiz \u00fczere bizden bir ikinci ad\u0131m do\u011frulama gerektirdi\u011fine dair bilgilendirmede bulunacakt\u0131r.<\/p>\n
20. sat\u0131rda ise ‘GenerateNewTwoFactorRecoveryCodesAsync’ metodu ile ne olurrr ne olmazz durumlar\u0131na istinaden \u00f6nlem olmas\u0131 i\u00e7in 5 adet kurtarma kodu \u00fcretilmektedir \ud83d\ude42<\/p>\n
T\u00fcm bu s\u00fcre\u00e7te kullan\u0131lan “AuthenticatorVM” isimli viewmodel nesnesininde modeli a\u015fa\u011f\u0131daki gibi olacakt\u0131r;<\/p>\n
\r\n public class AuthenticatorVM\r\n {\r\n public string SharedKey { get; set; }\r\n public string QrCodeUri { get; set; }\r\n public string VerificationCode { get; set; }\r\n }\r\n<\/pre>\n
Ad\u0131m 5 – \u0130ki Ad\u0131ml\u0131 Do\u011frulaman\u0131n Onaylanmas\u0131<\/h5>\n
S\u0131rada ‘AuthenticatorService’ i\u00e7erisinde olu\u015fturdu\u011fumuz ‘Verify’ metodunu ‘TwoAuthenticationController’ isimli controller s\u0131n\u0131f\u0131nda kullanmaya geldi.<\/p>\n
\r\n public class TwoAuthenticationController : Controller\r\n {\r\n AuthenticatorService _authenticatorService;\r\n UserManager<AppUser> _userManager;\r\n public TwoAuthenticationController(AuthenticatorService authenticatorService, UserManager<AppUser> userManager)\r\n {\r\n _authenticatorService = authenticatorService;\r\n _userManager = userManager;\r\n }\r\n .\r\n .\r\n .\r\n public async Task<IActionResult> AuthenticatorVerify()\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n string sharedKey = await _authenticatorService.GenerateSharedKey(user);\r\n string qrcodeUri = await _authenticatorService.GenerateQrCodeUri(sharedKey, "www.gencayyildiz.com", user);\r\n\r\n return View(new AuthenticatorVM\r\n {\r\n SharedKey = sharedKey,\r\n QrCodeUri = qrcodeUri\r\n });\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> AuthenticatorVerify(AuthenticatorVM model)\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n VerifyState verifyState = await _authenticatorService.Verify(model, user);\r\n if (verifyState.State)\r\n {\r\n TempData["message2"] = "\u0130ki ad\u0131ml\u0131 do\u011frulama hesaba tan\u0131mlanm\u0131\u015ft\u0131r.";\r\n TempData["message3"] = verifyState.RecoveryCode;\r\n }\r\n return View(model);\r\n }\r\n }\r\n<\/pre>\n
Bunun i\u00e7in 26. sat\u0131rda g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere action metodunun post t\u00fcr\u00fcnden ‘AuthenticatorVerify’ overload’\u0131n\u0131 olu\u015fturuyoruz ve parametreden gelen post edilmi\u015f veriyi metot i\u00e7erisinde ilgili servisi kullanarak ‘Verify’ ediyoruz.<\/p>\n
Bu i\u015flemden sonra art\u0131k ilgili kullan\u0131c\u0131 hesab\u0131 i\u00e7in iki ad\u0131ml\u0131 do\u011frulamay\u0131 aktifle\u015ftirebiliriz;
\n $\"Asp.NET$ <\/a><\/p>\n
Ad\u0131m 6 – Login Esnas\u0131nda \u0130kinci Do\u011frulama Sayfas\u0131na Y\u00f6nlendirme<\/h5>\n
Art\u0131k, bir \u00f6nceki ad\u0131mda ‘VerifyTwoFactorTokenAsync’ metodu ile girilen kod do\u011fruland\u0131ktan ve ilgili kullan\u0131c\u0131n\u0131n ‘TwoFactorEnabled’ de\u011feri true yap\u0131ld\u0131ktan sonra login esnas\u0131nda ikinci ad\u0131mda do\u011frulama yap\u0131lmas\u0131 gerekmektedir.
\n $\"Asp.NET$ <\/a>
\nAksi taktirde soldaki g\u00f6rselde g\u00f6r\u00fcld\u00fc\u011f\u00fc gibi giri\u015f yapmaya \u00e7al\u0131\u015f\u0131ld\u0131\u011f\u0131 halde ikinci do\u011frulama olmaks\u0131z\u0131n authorize olunmayacakt\u0131r.<\/p>\n
Bunun i\u00e7in ‘Login(Controller).cs’ de a\u015fa\u011f\u0131daki gibi bir in\u015fan\u0131n yap\u0131lmas\u0131 gerekmektedir.<\/p>\n
\r\n public class LoginController : Controller\r\n {\r\n private readonly SignInManager<AppUser> _signInManager;\r\n private readonly UserManager<AppUser> _userManager;\r\n public LoginController(SignInManager<AppUser> signInManager, UserManager<AppUser> userManager)\r\n {\r\n _signInManager = signInManager;\r\n _userManager = userManager;\r\n }\r\n public IActionResult Index(string ReturnUrl = "")\r\n {\r\n return View();\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> Index(string ReturnUrl, UserSignVM model)\r\n {\r\n if (ModelState.IsValid)\r\n {\r\n AppUser user = await _userManager.FindByEmailAsync(model.Email);\r\n if (user != null)\r\n {\r\n Microsoft.AspNetCore.Identity.SignInResult result = await _signInManager.PasswordSignInAsync(user, model.Password, true, true);\r\n if (result.Succeeded)\r\n {\r\n if (string.IsNullOrEmpty(ReturnUrl))\r\n return RedirectToAction("Index", "Home");\r\n return Redirect(ReturnUrl);\r\n }\r\n else if (result.RequiresTwoFactor)\r\n return RedirectToAction("twofactorauthenticate", new { ReturnUrl = ReturnUrl });\r\n }\r\n }\r\n return View(model);\r\n }\r\n public async Task<IActionResult> TwoFactorAuthenticate(string ReturnUrl) => View();\r\n [HttpPost]\r\n public async Task<IActionResult> TwoFactorAuthenticate(string ReturnUrl, TwoFactorLoginVM model)\r\n {\r\n AppUser user = await _signInManager.GetTwoFactorAuthenticationUserAsync();\r\n Microsoft.AspNetCore.Identity.SignInResult result = null;\r\n if (model.Recovery)\r\n result = await _signInManager.TwoFactorRecoveryCodeSignInAsync(model.VerifyCode);\r\n else\r\n result = await _signInManager.TwoFactorAuthenticatorSignInAsync(model.VerifyCode, true, false);\r\n\r\n if (result.Succeeded)\r\n return Redirect(string.IsNullOrEmpty(ReturnUrl) ? "\/home\/index" : ReturnUrl);\r\n else\r\n ModelState.AddModelError("verifycode", "Do\u011frulama kodu yanl\u0131\u015f girilmi\u015ftir!");\r\n\r\n return View(model);\r\n }\r\n public async Task<IActionResult> Logout()\r\n {\r\n await _signInManager.SignOutAsync();\r\n return RedirectToAction("Index", "Login");\r\n }\r\n }\r\n<\/pre>\n
Yukar\u0131daki ‘Login(Controller).cs’ i\u00e7eri\u011fini incelersek e\u011fer ‘Index’ action\u0131n\u0131n post metoduna g\u00f6z atarsan\u0131z e\u011fer kullan\u0131c\u0131 sign in olmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda ‘TwoFactorEnabled’ kolonu true olaca\u011f\u0131ndan dolay\u0131 29. sat\u0131rdaki result nesnesinin ‘RequiresTwoFactor’ propertysi true olarak gelecektir ve ikinci bir kimlik do\u011frulama yap\u0131laca\u011f\u0131n\u0131 bize bildirecektir. Dolay\u0131s\u0131yla bizde bu durumda kullan\u0131c\u0131y\u0131 ‘TwoFactorAuthenticate’ isimli bir actiona y\u00f6nlendirmekte ve burada ikinci do\u011frulamay\u0131 ger\u00e7ekle\u015ftirmekteyiz. Birazdan view i\u00e7eri\u011fini g\u00f6rece\u011fimiz ilgili metodun 37. sat\u0131rda tan\u0131mlanm\u0131\u015f post t\u00fcr\u00fcne g\u00f6z atarsak e\u011fer modelden gelen ‘Recovery’ bilgisine g\u00f6re kullan\u0131c\u0131n\u0131n girdi\u011fi kodun authenticator taraf\u0131ndan \u00fcretilmi\u015f do\u011frulama kodu mu yoksa kurtarma kodu mu olup olmad\u0131\u011f\u0131 ay\u0131rt ederek m\u00fcdahalede bulunmaktay\u0131z. E\u011fer kurtarma kodu ile oturum a\u00e7\u0131lmas\u0131n\u0131 istiyorsak ‘TwoFactorRecoveryCodeSignInAsync’ metodunu yok e\u011fer normal do\u011frulama kodu ile oturum a\u00e7acaksak ‘TwoFactorAuthenticatorSignInAsync’ metodunu kullanmal\u0131y\u0131z.<\/p>\n
Ayr\u0131ca ikinci do\u011frulama sayfas\u0131na gelindi\u011finde hangi kullan\u0131c\u0131ya do\u011frulama yap\u0131ld\u0131\u011f\u0131n\u0131 nereden anl\u0131yoruz?<\/strong> sorunuzu duyar gibiyim… Bunun i\u00e7in mimarimiz kullan\u0131c\u0131n\u0131n bilgisini “Identity.TwoFactorUserId” anahtar\u0131nda bir cookie de\u011feri olarak tutmakta ve 39. sat\u0131rda oldu\u011fu gibi ‘GetTwoFactorAuthenticationUserAsync’ metodu ile ikinci sayfadaki cookie de\u011ferlerini okuyarak ilgili kullan\u0131c\u0131 nesnesini tekrar elde etmektedir.
\n $\"Asp.NET$ <\/a><\/p>\n
T\u00fcm bu yap\u0131lanma \u00fczerine ikinci do\u011frulama sayfas\u0131n\u0131n g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fcde a\u015fa\u011f\u0131daki gibi olu\u015fturuyoruz;<\/p>\n
\r\n@model TwoFactorLoginVM\r\n\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form asp-action="TwoFactorAuthenticate" method="post">\r\n <div asp-validation-summary="All">\r\n <\/div>\r\n <div class="form-group">\r\n <label asp-for="VerifyCode"><\/label>\r\n <input type="text" class="form-control" asp-for="VerifyCode">\r\n <span asp-validation-for="VerifyCode"><\/span>\r\n <\/div>\r\n <div class="form-group form-check">\r\n <input type="checkbox" class="form-check-input" asp-for="Recovery">\r\n <label class="form-check-label" for="exampleCheck1">Kurtarma kodu ile giri\u015f yapabilmek i\u00e7in bu kutucu\u011fu i\u015faretleyiniz.<\/label>\r\n <\/div>\r\n <button type="submit" class="btn btn-primary">Giri\u015f Yap<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<\/pre>\n
Ad\u0131m 7 – Test Etme<\/h5>\n
T\u00fcm bu yap\u0131lanmay\u0131 derleyip \u00e7al\u0131\u015ft\u0131ral\u0131m ve a\u015fa\u011f\u0131daki gibi test edelim.
\n $\"Asp.NET$ <\/a>
\nG\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere gayet ba\u015far\u0131l\u0131 bir \u015fekilde \u00e7al\u0131\u015fmakta ve iki ad\u0131ml\u0131 do\u011frulamay\u0131 ger\u00e7ekle\u015ftirmektedir.<\/p>\n
Vee b\u00f6ylece blog hayat\u0131m boyunca \u015fu ana kadar olan en uzun makaleyi kaleme alm\u0131\u015f bulunmaktay\u0131m \ud83d\ude42 Eee b\u00f6yle bir konuyu anlatabilmek zor; okuyabilmek, okurken anlayabilmek ap ayr\u0131 bir zor… O y\u00fczden bu sat\u0131rlara eri\u015febilenlerin nezdinde okumaya c\u00fcret eden lakin sonunu getiremeyenlerde dahil hepinize sonsuz te\u015fekk\u00fcr ediyorum…<\/p>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n
Not : \u00d6rnek projeyi indirebilmek i\u00e7in buraya<\/a> t\u0131klay\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Bir \u00f6nceki Two Factor Authentication Nedir? ba\u015fl\u0131kl\u0131 makalemizin akabinde art\u0131k Google & Microsoft Authenticator ile iki ad\u0131ml\u0131 kimlik do\u011frulama y\u00f6ntemi \u00fczerine detayl\u0131 durabilir ve pratiksel a\u00e7\u0131dan t\u00fcm in\u015fa s\u00fcrecini irdeleyebiliriz. Microsoft & Google...<\/p>\n","protected":false},"author":1,"featured_media":14035,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3102,2668,2656,2811,2832,2898,3103],"tags":[3252,3249,3254,3255,3256,3240,3250,3260,3253,2935,3237,3261,3258,3259],"class_list":["post-14039","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asp-net-core","category-asp-net-core-2","category-asp-net-core-2-mvc","category-asp-net-core-2-1","category-asp-net-core-2-2","category-asp-net-core-3-0","category-asp-net-core-3-1","tag-google-microsoft-authenticator","tag-google-authenticator","tag-hmac-based-one-time-password","tag-htop","tag-htop-algoritmasi","tag-iki-adimli-kimlik-dogrulama","tag-microsoft-authenticator","tag-rfc-6238","tag-shared-key","tag-timestamp","tag-two-factor-authentication","tag-unix-time-stamp","tag-zaman-bazli-tek-kullanimlik-sifre","tag-zaman-damgasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=14039"}],"version-history":[{"count":108,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039\/revisions"}],"predecessor-version":[{"id":14161,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039\/revisions\/14161"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/14035"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=14039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=14039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=14039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

One Factor Authenticator<\/th>\n	Two Factor Authenticator<\/th>\n<\/tr>\n<\/thead>\n
$\"Asp.NET$ <\/a><\/td>\n	$\"Asp.NET$ <\/a><\/td>\n<\/tr>\n
\nUygulama \u00fczerinden yetkileri do\u011frultusunda faaliyetlerde bulunabilmek i\u00e7in kullan\u0131c\u0131 taraf\u0131ndan ger\u00e7ekle\u015ftirilen kimlik do\u011frulama s\u00fcrecinde iki ad\u0131ml\u0131 do\u011frulama yapabilmek i\u00e7in Microsoft, Google ile birlikte esas\u0131nda bir\u00e7ok sa\u011flay\u0131c\u0131 taraf\u0131ndan geli\u015ftirilen uygulamad\u0131r.\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Peki teoride nas\u0131l \u00e7al\u0131\u015fmaktad\u0131r?<\/strong> \nKullan\u0131c\u0131ya \u00f6zel olarak \u00fcretilen Shared Key<\/em> isimli bir de\u011fer ile birlikte Zaman Damgas\u0131(Timestamp\/Counter)<\/em> ismi verilen bir de\u011feri kullanarak (HTOP) Hmac – Based One Time Password(Zaman Bazl\u0131 Tek Kullan\u0131ml\u0131k \u015eifre) – RFC 6238<\/em> algoritmas\u0131 ile 30 saniyede bir yenilenen ve tek seferlik kullan\u0131m hakk\u0131 olan do\u011frulama kodunu \u00fcretmekt\u00ebdir. Bu \u015fekilde t\u00fcm authenticator uygulamalar\u0131 ayn\u0131 algoritmay\u0131 kulland\u0131klar\u0131nda dolay\u0131 kullan\u0131c\u0131ya \u00f6zel shared key de\u011feri ile e\u015fle\u015fme sonras\u0131 ayn\u0131 anda ayn\u0131 kodu \u00fcretecektirler. Dolay\u0131s\u0131yla Google yahut Microsoft hangisi olursa olsun farketmeksizin ayn\u0131 i\u015fi g\u00f6recektir…<\/p>\n Kodun \u00fcretilmesinde kullan\u0131lan Unix Time Stamp(Zaman Damgas\u0131) de\u011ferinin ba\u015flang\u0131\u00e7 tarihi 01.01.1970 00:00:00 olarak kabul edilmi\u015ftir ve o andan \u015fu ana kadar ge\u00e7en toplam saniyeyi ifade etmektedir. Authenticator uygulamas\u0131nda counter do\u011frulama kodu \u00fcretildi\u011fi ana kadar olan toplam saniye de\u011feri olan o anki timestamp de\u011ferini tutuyor ve bu kod 30 saniye ge\u00e7ene kadar aktifli\u011fini s\u00fcrd\u00fcrebiliyor. Bir sonraki kodda ayn\u0131 \u015fekilde \u00fcretildi\u011fi andaki toplam saniye de\u011ferini countera veriyor ve aradaki fark\u0131 30 saniye olana kadar aktifli\u011fini koruyor. Vee bu s\u00fcre\u00e7 aynen bu d\u00f6ng\u00fcyle devam ediyor. Burada dikkat edilmesi gereken nokta \u015fudur ki, bu toplam saniye verisini baz al\u0131rken ilgili telefon yahut tabletinde bu ba\u015flang\u0131\u00e7 tarihiyle birebir tutarl\u0131 olmas\u0131 gerekmekte ve bunun i\u00e7in Zaman Dilimi kavram\u0131n\u0131n do\u011fru \u015fekilde ayarlanmas\u0131 gerekmektedir. Aksi taktirde zaman dilimi Afrika’da olan bir telefon ya da tabletten \u00fcretilen do\u011frulama kodu Kanada zaman dilimini benimsemi\u015f bir uygulamayla unix time stamp olarak tutarl\u0131l\u0131k g\u00f6stermeyece\u011finden dolay\u0131 ge\u00e7ersiz olacakt\u0131r.<\/p>\n \u015eimdi gelin Google & Microsoft Authenticator stratejisinin pratik olarak nas\u0131l uyguland\u0131\u011f\u0131n\u0131 \u00f6rnek bir proje \u00fczerinden inceleyelim. Bunun i\u00e7in temel Identity<\/a> yap\u0131lanmas\u0131 One Factor Authentication kullan\u0131lacak \u015fekilde haz\u0131r olan herhangi bir Asp.NET Core projesinde Two Factor Authentication y\u00f6nteminin nas\u0131l in\u015fa edildi\u011fini irdeleyelim… <\/p>\n Two Factor Authentication \u0130n\u015fas\u0131<\/h3>\n Ad\u0131m 1 – Kullan\u0131c\u0131ya \u00d6zel Shared Key \u00dcretimi \n Ad\u0131m 2 \u2013 QR Code \u0130\u00e7in Path Haz\u0131rlama \n Ad\u0131m 3 \u2013 QR Code\u2019un Bas\u0131lmas\u0131 ve Temel Ayarlar\u0131n Yap\u0131m\u0131 \n Ad\u0131m 4 \u2013 Barkodun Okunmas\u0131 ve Do\u011frulanmas\u0131 \n Ad\u0131m 5 – \u0130ki Ad\u0131ml\u0131 Do\u011frulaman\u0131n Onaylanmas\u0131 \n Ad\u0131m 6 – Login Esnas\u0131nda \u0130kinci Do\u011frulama Sayfas\u0131na Y\u00f6nlendirme \n Ad\u0131m 7 – Test Etme<\/a><\/p>\n Ad\u0131m 1 – Kullan\u0131c\u0131ya \u00d6zel Shared Key \u00dcretimi<\/h5>\n \u0130lk olarak uygulamam\u0131zda iki ad\u0131ml\u0131 do\u011frulamay\u0131 ger\u00e7ekle\u015ftirebilmek i\u00e7in kullan\u0131c\u0131ya \u00f6zel Shared Key \u00fcretmemiz gerekmektedir. Bunun i\u00e7in ‘AuthenticatorService’ ismini verdi\u011fim bir servis olu\u015fturarak i\u00e7eri\u011fini a\u015fa\u011f\u0131daki gibi geli\u015ftiriyorum.<\/p>\n \r\n public class AuthenticatorService\r\n {\r\n UserManager<AppUser> _userManager;\r\n public AuthenticatorService(UserManager<AppUser> userManager)\r\n {\r\n _userManager = userManager;\r\n }\r\n public async Task<string> GenerateSharedKey(AppUser user)\r\n {\r\n string sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n if (string.IsNullOrEmpty(sharedKey))\r\n {\r\n IdentityResult result = await _userManager.ResetAuthenticatorKeyAsync(user);\r\n if (result.Succeeded)\r\n sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n }\r\n return sharedKey;\r\n }\r\n }\r\n<\/pre>\n Burada 10. sat\u0131rda parametreden gelen kullan\u0131c\u0131ya ait varsa shared key de\u011ferini “GetAuthenticatorKeyAsync” metodu ile elde ediyoruz. E\u011fer yoksa 13. sat\u0131rda “ResetAuthenticatorKeyAsync” metodu ile olu\u015fturuyoruz.<\/p>\n $\"Asp.NET$ <\/a> \nOlu\u015fturulan bu shared key de\u011feri yukar\u0131daki g\u00f6rselde de g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere “AspNetUserTokens” tablosunda kullan\u0131c\u0131yla ili\u015fkisel bir \u015fekilde tutulmaktad\u0131r.<\/p>\n Ad\u0131m 2 – QR Code \u0130\u00e7in Path Haz\u0131rlama<\/h5>\n Google & Microsoft authenticator uygulamalar\u0131 ile ilgili kullan\u0131c\u0131 hesab\u0131n\u0131n e\u015fle\u015febilmesi i\u00e7in bir barkod okuma operasyonu ger\u00e7ekle\u015ftirilecektir. Olu\u015fturulacak barkod i\u00e7erisinde a\u015fa\u011f\u0131da izahatini ger\u00e7ekle\u015ftirdi\u011fimiz path format\u0131n\u0131n de\u011feri bas\u0131lmal\u0131d\u0131r.<\/p>\n \notpauth:\/\/totp\/title<\/span>:email<\/span>?secret=sharedKey<\/span>&issuer=who<\/span>\n<\/div>\n \n title<\/strong> : E\u015fle\u015ftirilen authenticator uygulamas\u0131nda yazacak ba\u015fl\u0131k. Genellikle uygulama ad\u0131 yahut adresi belirtilmektedir.<\/li>\n email<\/strong> : Uygulamaya dair yetkili bir e-posta adresi.<\/li>\n sharedKey<\/strong> : ‘GenerateSharedKey’ metodu ile \u00fcretilen shared key de\u011feri.<\/li>\n who<\/strong> : Uygulamaya dair yetkili olan bir ki\u015finin ad\u0131 yahut yay\u0131nc\u0131 bilgisi.<\/li>\n<\/ul>\n Path de\u011ferini in\u015fa etme sorumlulu\u011funu yukar\u0131da olu\u015fturdu\u011fumuz ‘AuthenticatorService’ s\u0131n\u0131f\u0131 i\u00e7erisinde tan\u0131mlanan ‘GenerateQrCodeUri’ metodu \u00fcstlenmektedir.<\/p>\n \r\n public class AuthenticatorService\r\n {\r\n UserManager<AppUser> _userManager;\r\n UrlEncoder _urlEncoder;\r\n public AuthenticatorService(UserManager<AppUser> userManager, UrlEncoder urlEncoder)\r\n {\r\n _userManager = userManager;\r\n _urlEncoder = urlEncoder;\r\n }\r\n public async Task<string> GenerateSharedKey(AppUser user)\r\n {\r\n string sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n if (string.IsNullOrEmpty(sharedKey))\r\n {\r\n IdentityResult result = await _userManager.ResetAuthenticatorKeyAsync(user);\r\n if (result.Succeeded)\r\n sharedKey = await _userManager.GetAuthenticatorKeyAsync(user);\r\n }\r\n return sharedKey;\r\n }\r\n public async Task<string> GenerateQrCodeUri(string sharedKey, string title, AppUser user) =>\r\n $"otpauth:\/\/totp\/{_urlEncoder.Encode(title)}:{_urlEncoder.Encode(user.Email)}?secret={sharedKey}&issuer={_urlEncoder.Encode(title)}";\r\n }\r\n<\/pre>\n En nihayetinde olu\u015fturulan bu ‘AuthenticatorService’ isimli s\u0131n\u0131f\u0131 “Startup.cs” dosyas\u0131ndaki “ConfigureServices” metodu i\u00e7erisinden uygulama provider\u0131na dahil ediyorum.<\/p>\n \r\n public class Startup\r\n {\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddScoped<AuthenticatorService, AuthenticatorService>();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n Ad\u0131m 3 – QR Code’un Bas\u0131lmas\u0131 ve Temel Ayarlar\u0131n Yap\u0131m\u0131<\/h5>\n Kullan\u0131c\u0131 kendi hesab\u0131nda iki ad\u0131ml\u0131 kullan\u0131c\u0131 do\u011frulama y\u00f6ntemini iradesiyle aktifle\u015ftirmeli ve ard\u0131ndan ekrana QrCode de\u011ferini tutan barkod olu\u015fturularak okutulmaya haz\u0131r hale getirilmelidir. Bunun i\u00e7in “AppUser” entitysinde ilgili kullan\u0131c\u0131n\u0131n hangi 2FA y\u00f6ntemini kulland\u0131\u011f\u0131na dair veri tutan property eklenmektedir.<\/p>\n \r\n public enum TwoFactorType\r\n {\r\n [Display(Name = "Microsoft & Google Authenticator \u0130le Do\u011frulama")]\r\n Authenticator,\r\n [Display(Name = "SMS \u0130le Do\u011frulama")]\r\n SMS,\r\n [Display(Name = "E-Posta \u0130le Do\u011frulama")]\r\n Email\r\n }\r\n<\/pre>\n \r\n public class AppUser : IdentityUser<int>\r\n {\r\n public TwoFactorType TwoFactorType { get; set; }\r\n }\r\n<\/pre>\n Ard\u0131ndan “TwoAuthentication(Controller).cs” isimli controller s\u0131n\u0131f\u0131 olu\u015fturuyoruz ve i\u00e7erisini a\u015fa\u011f\u0131daki gibi kodluyoruz.<\/p>\n \r\n public class TwoAuthenticationController : Controller\r\n {\r\n AuthenticatorService _authenticatorService;\r\n UserManager<AppUser> _userManager;\r\n public TwoAuthenticationController(AuthenticatorService authenticatorService, UserManager<AppUser> userManager)\r\n {\r\n _authenticatorService = authenticatorService;\r\n _userManager = userManager;\r\n }\r\n public async Task<IActionResult> SelectTwoFactorAuthentication()\r\n {\r\n return View();\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> SelectTwoFactorAuthentication(TwoFactorTypeSelectVM model)\r\n {\r\n switch (model.TwoFactorType)\r\n {\r\n case Models.Enums.TwoFactorType.Authenticator:\r\n return RedirectToAction("AuthenticatorVerify");\r\n case Models.Enums.TwoFactorType.SMS:\r\n return RedirectToAction("SMSVerify");\r\n case Models.Enums.TwoFactorType.Email:\r\n return RedirectToAction("EmailVerify");\r\n }\r\n return View();\r\n }\r\n public async Task<IActionResult> AuthenticatorVerify()\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n string sharedKey = await _authenticatorService.GenerateSharedKey(user);\r\n string qrcodeUri = await _authenticatorService.GenerateQrCodeUri(sharedKey, "www.gencayyildiz.com", user);\r\n\r\n return View(new AuthenticatorVM\r\n {\r\n SharedKey = sharedKey,\r\n QrCodeUri = qrcodeUri\r\n });\r\n }\r\n public async Task<IActionResult> SMSVerify()\r\n {\r\n \/\/\u0130lgili makalede kodlanacakt\u0131r...\r\n return View();\r\n }\r\n public async Task<IActionResult> EmailVerify()\r\n {\r\n \/\/\u0130lgili makalede kodlanacakt\u0131r...\r\n return View();\r\n }\r\n }\r\n<\/pre>\n Yukar\u0131daki kod blo\u011funu incelerseniz e\u011fer 10 ile 27. sat\u0131rlar aras\u0131ndaki ‘SelectTwoFactorAuthentication’ metodu ile uygulamada iki ad\u0131ml\u0131 do\u011frulamada kullan\u0131lacak y\u00f6ntem se\u00e7ilmektedir. G\u00f6rseli a\u015fa\u011f\u0131daki gibidir;<\/p>\n \r\n@model TwoFactorTypeSelectVM\r\n\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form method="post">\r\n <div class="form-group">\r\n <label for="exampleFormControlSelect1">\u0130ki ad\u0131ml\u0131 do\u011frulama y\u00f6ntemi se\u00e7iniz<\/label>\r\n <select class="form-control" asp-for="TwoFactorType" asp-items="Html.GetEnumSelectList<TwoFactorType>()">\r\n <\/select>\r\n <\/div>\r\n <button type="submit" class="btn btn-danger">Se\u00e7<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<\/pre>\n Kullan\u0131lan ‘TwoFactorTypeSelectVM’ viewmodel’\u0131n\u0131n i\u00e7eri\u011fi ise a\u015fa\u011f\u0131daki gibidir;<\/p>\n \r\n public class TwoFactorTypeSelectVM\r\n {\r\n public TwoFactorType TwoFactorType { get; set; }\r\n }\r\n<\/pre>\n Tekrardan ilgili kod blo\u011funa g\u00f6z atarsak e\u011fer kullan\u0131c\u0131n\u0131n ‘Microsoft & Google Authenticator’ se\u00e7ene\u011fini se\u00e7mesi neticesinde 28. sat\u0131rdaki ‘AuthenticatorVerify’ action\u0131na y\u00f6nlendirilecek ve i\u00e7eri\u011finde gerekli shared key ile qr code uri de\u011ferleri olu\u015fturularak view’ine g\u00f6nderilecektir. \n $\"Asp.NET$ <\/a><\/p>\n \n $\"Asp.NET$ <\/a><\/p>\n Qr Code Uri de\u011ferine kar\u015f\u0131l\u0131k barkodu basabilmek i\u00e7in davidshimjs.github.io\/qrcodejs<\/a> adresindeki JavaScript k\u00fct\u00fcphanesini indirerek uygulaman\u0131za dahil ediniz. Gerekli script include i\u015flemlerinden sonra a\u015fa\u011f\u0131daki gibi ilgili action\u0131n view g\u00f6r\u00fcnt\u00fcs\u00fcnde oldu\u011fu gibi barkodu olu\u015fturabilirsiniz.<\/p>\n \r\n@model AuthenticatorVM\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-success" role="alert">\r\n A\u015fa\u011f\u0131daki barkodu telefonunuzdaki Google ya da Microsoft authenticator uygulamas\u0131 ile okutunuz veya yandaki kodu ilgili uygulamaya giriniz.\r\n <\/div>\r\n <\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-light" role="alert">\r\n @Model.SharedKey\r\n <\/div>\r\n <\/div>\r\n<\/div>\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <div id="qrcode"><\/div>\r\n <script type="text\/javascript">\r\n new QRCode(document.getElementById("qrcode"), {\r\n text:'@Model.QrCodeUri',\r\n width: 250,\r\n height: 250,\r\n correctLevel: QRCode.CorrectLevel.H\r\n });\r\n <\/script>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form method="post">\r\n <div class="form-group">\r\n <label>Do\u011frulama Kodu<\/label>\r\n <input type="hidden" asp-for="QrCodeUri" \/>\r\n <input type="hidden" asp-for="SharedKey" \/>\r\n <input type="hidden" \/>\r\n <input type="text" class="form-control" asp-for="VerificationCode">\r\n <\/div>\r\n <button type="submit" class="btn btn-primary">Do\u011frula<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n@if (TempData["message2"] != null)\r\n{\r\n <div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n @TempData["message2"]\r\n <\/div>\r\n <div class="col-md-4">\r\n <div class="alert alert-info" role="alert">\r\n Kurtarma Kodlar\u0131\r\n <\/div>\r\n <ul class="list-group">\r\n @foreach (var code in TempData["message3"] as IEnumerable<string>)\r\n {\r\n <li class="list-group-item">@code<\/li>\r\n }\r\n <\/ul>\r\n <\/div>\r\n <\/div>\r\n}\r\n\r\n@section Scripts { @{await Html.RenderPartialAsync("_ScriptPartial");} }\r\n<\/pre>\n Barkodu olu\u015fturan JavaScript kodumuz 19 ile 26. sat\u0131rlar aras\u0131ndad\u0131r. Ayr\u0131ca bu actionda kullan\u0131lan ‘AuthenticatorVM’ isimli viewmodel nesnesinin i\u00e7eri\u011fini ele al\u0131rsak;<\/p>\n \r\n public class AuthenticatorVM\r\n {\r\n public string SharedKey { get; set; }\r\n public string QrCodeUri { get; set; }\r\n public string VerificationCode { get; set; }\r\n }\r\n<\/pre>\n \u015feklinde olacakt\u0131r. Bu i\u00e7eri\u011fimizde sadece Microsoft & Google authenticator y\u00f6ntemini inceliyor olaca\u011f\u0131m\u0131zdan dolay\u0131 40 ile 49. sat\u0131rlar aras\u0131ndaki action metotlar\u0131 \u015fimdilik in\u015fa etmeden o y\u00f6ntemleri kaleme alaca\u011f\u0131m\u0131z ilgili yaz\u0131lara b\u0131rak\u0131yorum.<\/p>\n Ad\u0131m 4 – Barkodun Okunmas\u0131 ve Do\u011frulanmas\u0131<\/h5>\n Olu\u015fturulan barkodun okunmas\u0131 i\u00e7in \u00f6ncelikle ak\u0131ll\u0131 telefonunuza ya da tabletinize Microsoft Authenticator<\/a> yahut Google Authenticator<\/a> uygulamalar\u0131n\u0131 y\u00fcklemeniz ve ard\u0131ndan a\u015fa\u011f\u0131daki i\u015flemleri ger\u00e7ekle\u015ftirmeniz gerekmektedir.<\/p>\n\n\n\n\n\n\n Microsoft Authenticator<\/th>\n Google Authenticator<\/th>\n<\/tr>\n<\/thead>\n $\"Asp.NET$ <\/a><\/td>\n \n $\"Asp.NET$ <\/a>\n<\/td>\n<\/tr>\n G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere her iki do\u011frulay\u0131c\u0131da barkodu okumakta ve ba\u015far\u0131yla do\u011frulama kodu \u00fcretebilmektedir. E\u011fer ki farkl\u0131 authenticator uygulamalar\u0131n\u0131 ayn\u0131 barkod de\u011ferini okuttu\u011funuz taktirde ayn\u0131 anda a\u00e7arsan\u0131z ortak algoritmay\u0131 kullanmalar\u0131ndan dolay\u0131 birebir ayn\u0131 do\u011frulama kodu \u00fcrettiklerini g\u00f6receksiniz.<\/p>\n Ayriyetten barkod yerine her iki uygulamada da shared key de\u011feri direkt olarak manuel verilerek devreye sokulabilmektedir.\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \u015eimdi s\u0131ra authenticator taraf\u0131nda \u00fcretilen kodun do\u011frulamas\u0131na gelmi\u015ftir. Bunun i\u00e7in tekrardan olu\u015fturdu\u011fumuz ‘AuthenticatorService’ isimli servisimize gelerek a\u015fa\u011f\u0131daki ‘Verify’ isimli metodu ekleyelim.<\/p>\n \r\n public class AuthenticatorService\r\n {\r\n UserManager<AppUser> _userManager;\r\n UrlEncoder _urlEncoder;\r\n public AuthenticatorService(UserManager<AppUser> userManager, UrlEncoder urlEncoder)\r\n {\r\n _userManager = userManager;\r\n _urlEncoder = urlEncoder;\r\n }\r\n .\r\n .\r\n .\r\n public async Task<VerifyState> Verify(AuthenticatorVM model, AppUser user)\r\n {\r\n VerifyState verifyState = new VerifyState();\r\n verifyState.State = await _userManager.VerifyTwoFactorTokenAsync(user, _userManager.Options.Tokens.AuthenticatorTokenProvider, model.VerificationCode);\r\n if (verifyState.State)\r\n {\r\n user.TwoFactorEnabled = true;\r\n verifyState.RecoveryCode = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 5);\r\n }\r\n return verifyState;\r\n }\r\n }\r\n<\/pre>\n Bu metot sayesinde kullan\u0131c\u0131dan al\u0131nan do\u011frulama kodu onaylanarak ilgili hesapta iki ad\u0131ml\u0131 do\u011frulama s\u00fcreci aktifle\u015ftirilmektedir. Metodun detay\u0131na g\u00f6z atarsak e\u011fer 16. sat\u0131rda ‘VerifyTwoFactorTokenAsync’ metodu sayesinde do\u011frulama kodu ilgili user’a \u00f6zel kontrol edilmekte ve sonucu bool olarak d\u00f6nd\u00fcrmektedir. Burada dikkat etmeniz gereken husus telefon ile uygulama sunucusunun bulundu\u011fu yahut kulland\u0131\u011f\u0131 Zaman Dilimlerinin birebir ayn\u0131 yahut paralel bir e\u015fde\u011ferlikte olmalar\u0131 gerekti\u011fidir. Aksi taktirde farkl\u0131 zaman dilimlerinde unix time stamp de\u011ferlerinin farkl\u0131 olma ihtimali olduk\u00e7a y\u00fcksek olaca\u011f\u0131ndan dolay\u0131 do\u011frulama kodu onaylanmayacakt\u0131r. E\u011fer ki bu hususta t\u00fcm ayarlamalara ra\u011fmen localhost \u00fczerinde hata ya\u015fayanlar\u0131n\u0131z varsa bilgisayar\u0131n\u0131z\u0131n zaman dilimini ‘(UTC+03:00) Istanbul<\/em>‘, ak\u0131ll\u0131 telefon yahut tabletinizin zaman dilimini ise ‘GMT +03:00 Arabistan<\/em>‘ olarak ayarlaman\u0131z\u0131 tavsiye ederim.<\/p>\n Ayriyetten ilgili metodun ikinci parametresine verdi\u011fimiz “_userManager.Options.Tokens.AuthenticatorTokenProvider<\/em>” komutu de\u011ferini uygulamada kullan\u0131lan varsay\u0131lan token providerdan almaya \u00e7al\u0131\u015facak ve biz e\u011fer ki default token provider ayarlar\u0131n\u0131 set etmediysek bu haliyle a\u015fa\u011f\u0131daki olas\u0131 hatay\u0131 verecektir.<\/p>\n An unhandled exception occurred while processing the request. \nNotSupportedException: No IUserTwoFactorTokenProvider named ‘Authenticator’ is registered.<\/em><\/p><\/blockquote>\n $\"Asp.NET$ <\/a> \nBu hatay\u0131 almamak i\u00e7in uygulamaya default token de\u011ferini a\u015fa\u011f\u0131daki gibi ‘Startup’ dosyas\u0131ndaki ‘ConfigurationServices’ metodu i\u00e7erisinde eklenen identity mod\u00fcl\u00fcn\u00fcn akabinde ‘AddDefaultTokenProviders’ metodunu kullanarak verebilirsiniz.<\/p>\n \r\n public class Startup\r\n {\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddIdentity<AppUser, AppRole>(options =>\r\n {\r\n options.Password.RequireDigit = false;\r\n options.Password.RequireLowercase = false;\r\n options.Password.RequiredLength = 3;\r\n options.Password.RequireLowercase = false;\r\n options.Password.RequireNonAlphanumeric = false;\r\n options.Password.RequireUppercase = false;\r\n }).AddEntityFrameworkStores<TwoFactorAuthenticationContext>().AddDefaultTokenProviders();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n Tekrardan servis kodlar\u0131na d\u00f6nerek 19. sat\u0131ra g\u00f6z atarsan\u0131z e\u011fer do\u011frulama kodu onayland\u0131ktan sonra ilgili kullan\u0131c\u0131ya dair “TwoFactorEnabled” kolonunu true yaparak iki ad\u0131ml\u0131 kimlik do\u011frulama s\u00fcrecini aktifle\u015ftirmekteyiz. B\u00f6ylece ilgili kullan\u0131c\u0131 login olmaya \u00e7al\u0131\u015f\u0131rken direkt olarak sign in olamayacak yaz\u0131m\u0131z\u0131n ileriki sat\u0131rlar\u0131nda g\u00f6rece\u011fimiz \u00fczere bizden bir ikinci ad\u0131m do\u011frulama gerektirdi\u011fine dair bilgilendirmede bulunacakt\u0131r.<\/p>\n 20. sat\u0131rda ise ‘GenerateNewTwoFactorRecoveryCodesAsync’ metodu ile ne olurrr ne olmazz durumlar\u0131na istinaden \u00f6nlem olmas\u0131 i\u00e7in 5 adet kurtarma kodu \u00fcretilmektedir \ud83d\ude42<\/p>\n T\u00fcm bu s\u00fcre\u00e7te kullan\u0131lan “AuthenticatorVM” isimli viewmodel nesnesininde modeli a\u015fa\u011f\u0131daki gibi olacakt\u0131r;<\/p>\n \r\n public class AuthenticatorVM\r\n {\r\n public string SharedKey { get; set; }\r\n public string QrCodeUri { get; set; }\r\n public string VerificationCode { get; set; }\r\n }\r\n<\/pre>\n Ad\u0131m 5 – \u0130ki Ad\u0131ml\u0131 Do\u011frulaman\u0131n Onaylanmas\u0131<\/h5>\n S\u0131rada ‘AuthenticatorService’ i\u00e7erisinde olu\u015fturdu\u011fumuz ‘Verify’ metodunu ‘TwoAuthenticationController’ isimli controller s\u0131n\u0131f\u0131nda kullanmaya geldi.<\/p>\n \r\n public class TwoAuthenticationController : Controller\r\n {\r\n AuthenticatorService _authenticatorService;\r\n UserManager<AppUser> _userManager;\r\n public TwoAuthenticationController(AuthenticatorService authenticatorService, UserManager<AppUser> userManager)\r\n {\r\n _authenticatorService = authenticatorService;\r\n _userManager = userManager;\r\n }\r\n .\r\n .\r\n .\r\n public async Task<IActionResult> AuthenticatorVerify()\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n string sharedKey = await _authenticatorService.GenerateSharedKey(user);\r\n string qrcodeUri = await _authenticatorService.GenerateQrCodeUri(sharedKey, "www.gencayyildiz.com", user);\r\n\r\n return View(new AuthenticatorVM\r\n {\r\n SharedKey = sharedKey,\r\n QrCodeUri = qrcodeUri\r\n });\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> AuthenticatorVerify(AuthenticatorVM model)\r\n {\r\n AppUser user = await _userManager.FindByNameAsync(User.Identity.Name);\r\n VerifyState verifyState = await _authenticatorService.Verify(model, user);\r\n if (verifyState.State)\r\n {\r\n TempData["message2"] = "\u0130ki ad\u0131ml\u0131 do\u011frulama hesaba tan\u0131mlanm\u0131\u015ft\u0131r.";\r\n TempData["message3"] = verifyState.RecoveryCode;\r\n }\r\n return View(model);\r\n }\r\n }\r\n<\/pre>\n Bunun i\u00e7in 26. sat\u0131rda g\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere action metodunun post t\u00fcr\u00fcnden ‘AuthenticatorVerify’ overload’\u0131n\u0131 olu\u015fturuyoruz ve parametreden gelen post edilmi\u015f veriyi metot i\u00e7erisinde ilgili servisi kullanarak ‘Verify’ ediyoruz.<\/p>\n Bu i\u015flemden sonra art\u0131k ilgili kullan\u0131c\u0131 hesab\u0131 i\u00e7in iki ad\u0131ml\u0131 do\u011frulamay\u0131 aktifle\u015ftirebiliriz; \n $\"Asp.NET$ <\/a><\/p>\n Ad\u0131m 6 – Login Esnas\u0131nda \u0130kinci Do\u011frulama Sayfas\u0131na Y\u00f6nlendirme<\/h5>\n Art\u0131k, bir \u00f6nceki ad\u0131mda ‘VerifyTwoFactorTokenAsync’ metodu ile girilen kod do\u011fruland\u0131ktan ve ilgili kullan\u0131c\u0131n\u0131n ‘TwoFactorEnabled’ de\u011feri true yap\u0131ld\u0131ktan sonra login esnas\u0131nda ikinci ad\u0131mda do\u011frulama yap\u0131lmas\u0131 gerekmektedir. \n $\"Asp.NET$ <\/a> \nAksi taktirde soldaki g\u00f6rselde g\u00f6r\u00fcld\u00fc\u011f\u00fc gibi giri\u015f yapmaya \u00e7al\u0131\u015f\u0131ld\u0131\u011f\u0131 halde ikinci do\u011frulama olmaks\u0131z\u0131n authorize olunmayacakt\u0131r.<\/p>\n Bunun i\u00e7in ‘Login(Controller).cs’ de a\u015fa\u011f\u0131daki gibi bir in\u015fan\u0131n yap\u0131lmas\u0131 gerekmektedir.<\/p>\n \r\n public class LoginController : Controller\r\n {\r\n private readonly SignInManager<AppUser> _signInManager;\r\n private readonly UserManager<AppUser> _userManager;\r\n public LoginController(SignInManager<AppUser> signInManager, UserManager<AppUser> userManager)\r\n {\r\n _signInManager = signInManager;\r\n _userManager = userManager;\r\n }\r\n public IActionResult Index(string ReturnUrl = "")\r\n {\r\n return View();\r\n }\r\n [HttpPost]\r\n public async Task<IActionResult> Index(string ReturnUrl, UserSignVM model)\r\n {\r\n if (ModelState.IsValid)\r\n {\r\n AppUser user = await _userManager.FindByEmailAsync(model.Email);\r\n if (user != null)\r\n {\r\n Microsoft.AspNetCore.Identity.SignInResult result = await _signInManager.PasswordSignInAsync(user, model.Password, true, true);\r\n if (result.Succeeded)\r\n {\r\n if (string.IsNullOrEmpty(ReturnUrl))\r\n return RedirectToAction("Index", "Home");\r\n return Redirect(ReturnUrl);\r\n }\r\n else if (result.RequiresTwoFactor)\r\n return RedirectToAction("twofactorauthenticate", new { ReturnUrl = ReturnUrl });\r\n }\r\n }\r\n return View(model);\r\n }\r\n public async Task<IActionResult> TwoFactorAuthenticate(string ReturnUrl) => View();\r\n [HttpPost]\r\n public async Task<IActionResult> TwoFactorAuthenticate(string ReturnUrl, TwoFactorLoginVM model)\r\n {\r\n AppUser user = await _signInManager.GetTwoFactorAuthenticationUserAsync();\r\n Microsoft.AspNetCore.Identity.SignInResult result = null;\r\n if (model.Recovery)\r\n result = await _signInManager.TwoFactorRecoveryCodeSignInAsync(model.VerifyCode);\r\n else\r\n result = await _signInManager.TwoFactorAuthenticatorSignInAsync(model.VerifyCode, true, false);\r\n\r\n if (result.Succeeded)\r\n return Redirect(string.IsNullOrEmpty(ReturnUrl) ? "\/home\/index" : ReturnUrl);\r\n else\r\n ModelState.AddModelError("verifycode", "Do\u011frulama kodu yanl\u0131\u015f girilmi\u015ftir!");\r\n\r\n return View(model);\r\n }\r\n public async Task<IActionResult> Logout()\r\n {\r\n await _signInManager.SignOutAsync();\r\n return RedirectToAction("Index", "Login");\r\n }\r\n }\r\n<\/pre>\n Yukar\u0131daki ‘Login(Controller).cs’ i\u00e7eri\u011fini incelersek e\u011fer ‘Index’ action\u0131n\u0131n post metoduna g\u00f6z atarsan\u0131z e\u011fer kullan\u0131c\u0131 sign in olmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda ‘TwoFactorEnabled’ kolonu true olaca\u011f\u0131ndan dolay\u0131 29. sat\u0131rdaki result nesnesinin ‘RequiresTwoFactor’ propertysi true olarak gelecektir ve ikinci bir kimlik do\u011frulama yap\u0131laca\u011f\u0131n\u0131 bize bildirecektir. Dolay\u0131s\u0131yla bizde bu durumda kullan\u0131c\u0131y\u0131 ‘TwoFactorAuthenticate’ isimli bir actiona y\u00f6nlendirmekte ve burada ikinci do\u011frulamay\u0131 ger\u00e7ekle\u015ftirmekteyiz. Birazdan view i\u00e7eri\u011fini g\u00f6rece\u011fimiz ilgili metodun 37. sat\u0131rda tan\u0131mlanm\u0131\u015f post t\u00fcr\u00fcne g\u00f6z atarsak e\u011fer modelden gelen ‘Recovery’ bilgisine g\u00f6re kullan\u0131c\u0131n\u0131n girdi\u011fi kodun authenticator taraf\u0131ndan \u00fcretilmi\u015f do\u011frulama kodu mu yoksa kurtarma kodu mu olup olmad\u0131\u011f\u0131 ay\u0131rt ederek m\u00fcdahalede bulunmaktay\u0131z. E\u011fer kurtarma kodu ile oturum a\u00e7\u0131lmas\u0131n\u0131 istiyorsak ‘TwoFactorRecoveryCodeSignInAsync’ metodunu yok e\u011fer normal do\u011frulama kodu ile oturum a\u00e7acaksak ‘TwoFactorAuthenticatorSignInAsync’ metodunu kullanmal\u0131y\u0131z.<\/p>\n Ayr\u0131ca ikinci do\u011frulama sayfas\u0131na gelindi\u011finde hangi kullan\u0131c\u0131ya do\u011frulama yap\u0131ld\u0131\u011f\u0131n\u0131 nereden anl\u0131yoruz?<\/strong> sorunuzu duyar gibiyim… Bunun i\u00e7in mimarimiz kullan\u0131c\u0131n\u0131n bilgisini “Identity.TwoFactorUserId” anahtar\u0131nda bir cookie de\u011feri olarak tutmakta ve 39. sat\u0131rda oldu\u011fu gibi ‘GetTwoFactorAuthenticationUserAsync’ metodu ile ikinci sayfadaki cookie de\u011ferlerini okuyarak ilgili kullan\u0131c\u0131 nesnesini tekrar elde etmektedir. \n $\"Asp.NET$ <\/a><\/p>\n T\u00fcm bu yap\u0131lanma \u00fczerine ikinci do\u011frulama sayfas\u0131n\u0131n g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fcde a\u015fa\u011f\u0131daki gibi olu\u015fturuyoruz;<\/p>\n \r\n@model TwoFactorLoginVM\r\n\r\n<div class="row">\r\n <div class="col-md-4"><\/div>\r\n <div class="col-md-4">\r\n <form asp-action="TwoFactorAuthenticate" method="post">\r\n <div asp-validation-summary="All">\r\n <\/div>\r\n <div class="form-group">\r\n <label asp-for="VerifyCode"><\/label>\r\n <input type="text" class="form-control" asp-for="VerifyCode">\r\n <span asp-validation-for="VerifyCode"><\/span>\r\n <\/div>\r\n <div class="form-group form-check">\r\n <input type="checkbox" class="form-check-input" asp-for="Recovery">\r\n <label class="form-check-label" for="exampleCheck1">Kurtarma kodu ile giri\u015f yapabilmek i\u00e7in bu kutucu\u011fu i\u015faretleyiniz.<\/label>\r\n <\/div>\r\n <button type="submit" class="btn btn-primary">Giri\u015f Yap<\/button>\r\n <\/form>\r\n <\/div>\r\n <div class="col-md-4"><\/div>\r\n<\/div>\r\n<\/pre>\n Ad\u0131m 7 – Test Etme<\/h5>\n T\u00fcm bu yap\u0131lanmay\u0131 derleyip \u00e7al\u0131\u015ft\u0131ral\u0131m ve a\u015fa\u011f\u0131daki gibi test edelim. \n $\"Asp.NET$ <\/a> \nG\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere gayet ba\u015far\u0131l\u0131 bir \u015fekilde \u00e7al\u0131\u015fmakta ve iki ad\u0131ml\u0131 do\u011frulamay\u0131 ger\u00e7ekle\u015ftirmektedir.<\/p>\n Vee b\u00f6ylece blog hayat\u0131m boyunca \u015fu ana kadar olan en uzun makaleyi kaleme alm\u0131\u015f bulunmaktay\u0131m \ud83d\ude42 Eee b\u00f6yle bir konuyu anlatabilmek zor; okuyabilmek, okurken anlayabilmek ap ayr\u0131 bir zor… O y\u00fczden bu sat\u0131rlara eri\u015febilenlerin nezdinde okumaya c\u00fcret eden lakin sonunu getiremeyenlerde dahil hepinize sonsuz te\u015fekk\u00fcr ediyorum…<\/p>\n \u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle… \nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere… \n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n Not : \u00d6rnek projeyi indirebilmek i\u00e7in buraya<\/a> t\u0131klay\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":" Merhaba, Bir \u00f6nceki Two Factor Authentication Nedir? ba\u015fl\u0131kl\u0131 makalemizin akabinde art\u0131k Google & Microsoft Authenticator ile iki ad\u0131ml\u0131 kimlik do\u011frulama y\u00f6ntemi \u00fczerine detayl\u0131 durabilir ve pratiksel a\u00e7\u0131dan t\u00fcm in\u015fa s\u00fcrecini irdeleyebiliriz. Microsoft & Google...<\/p>\n","protected":false},"author":1,"featured_media":14035,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3102,2668,2656,2811,2832,2898,3103],"tags":[3252,3249,3254,3255,3256,3240,3250,3260,3253,2935,3237,3261,3258,3259],"class_list":["post-14039","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asp-net-core","category-asp-net-core-2","category-asp-net-core-2-mvc","category-asp-net-core-2-1","category-asp-net-core-2-2","category-asp-net-core-3-0","category-asp-net-core-3-1","tag-google-microsoft-authenticator","tag-google-authenticator","tag-hmac-based-one-time-password","tag-htop","tag-htop-algoritmasi","tag-iki-adimli-kimlik-dogrulama","tag-microsoft-authenticator","tag-rfc-6238","tag-shared-key","tag-timestamp","tag-two-factor-authentication","tag-unix-time-stamp","tag-zaman-bazli-tek-kullanimlik-sifre","tag-zaman-damgasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=14039"}],"version-history":[{"count":108,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039\/revisions"}],"predecessor-version":[{"id":14161,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/14039\/revisions\/14161"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/14035"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=14039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=14039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=14039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

Ad\u0131m 5 – \u0130ki Ad\u0131ml\u0131 Do\u011frulaman\u0131n Onaylanmas\u0131<\/h5>\nS\u0131rada ‘AuthenticatorService’ i\u00e7erisinde olu\u015fturdu\u011fumuz ‘Verify’ metodunu ‘TwoAuthenticationController’ isimli controller s\u0131n\u0131f\u0131nda kullanmaya geldi.<\/p>\n