Approval Request 2FA authentication - two-factor-authentication

With Google Authenticator or Microsoft Authenticator I generate a Time-based One Time Password (TOTP).
User need to insert the code in my website complete two factor authentication.
How to generate a push notification "Approval Request" in Authenticator App with a custom account?
Like described here:
https://support.google.com/accounts/answer/7026266?co=GENIE.Platform%3DiOS&hl=en
https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Microsoft-Authenticator-iOS-now-supports-push-approval-for/ba-p/245120
Could not find any technical documentation

Twilio developer evangelist here.
You can't build that sort of integration with Google Authenticator or Microsoft Authenticator.
One option you have is to check out the Authy push notification API. It uses the Authy app which is free to download for your users, and can perform authentication via push notification or drop back to in app code or even SMS.
Let me know if that helps at all.

Related

I need to send product details to Google shopping Content API but first i need to generate oAuth token.How i will do it through function app

I need to send product details to Google shopping Content API but for using that i need to generate oAuth token with refresh token throgh Azure data factory.I have generated service account and client-secret json .How i will do it through function app?
Firstly, we need to understand that functions should not be used to do UI-related actions. In any app service the pop up for the login ( which allows to provide the credentials) will not be supported.
E.g. : To avoid this scenario , in case of AD auth we may use service principle where we feed the required credential to acquire the token. So if we want to use the google auth SDK we need to connect to the concerned team ( Google team) to understand if this is feasible at all.
For this you may check the Server-To-Server Service Account Authentication, as below:
https://cloud.google.com/docs/authentication/production
In case you need any assistance in this, we would recommend you to reach out to the concerned support team.

Firebase Authentication with multi-factor authentication

Is there a way to implement multi-factor authentication on Firebase Authentication? From my research it seems impossible since Firebase authentication has public REST api of which, assumingly, someone knowing API_KEY and user's email/pass could directly sign in to that user's account using
https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword?key=[API_KEY]
Thank you
Update: June 2020
From March 12, 2020, It is now possible to set up multi-factor authentication using SMS as 2nd factor with Firebase for Google Cloud Identity Platform projects but this is a paid service. This article shows you how to add SMS multi-factor authentication to your web app.
I am quoting from github firebase repo. here.
Firebase Auth does not support multi-factor authentication. FirebaseUI
cannot support this feature until the underlying SDK supports it. For
2-factor auth, 2 credentials need to be passed to get a Firebase ID
token. Currently, one is enough to get an ID token. You can submit an
official request for multi-factor auth with Firebase support.
However Multi-factor authentication itself works fine with Google account and FirebaseUI if it is enabled from Google settings.
hope it helps.
Firebase Authentication with multi-factor authentication should soon be available according to this Google I/O video
Firebase Authentication now supports Multi-Factor Authentication, but it only works for apps using Google Cloud Identity Platform, which is a paid service.
The logic is:
You ask the user to sign in with one of the providers bellow and also ask them to verify their email.
Email and password
Email link
Google
Google Play
Facebook
Twitter
GitHub
Microsoft
Yahoo
LinkedIn
You ask them for their phone number so you can send them an SMS as the second factor.
In order to enable MFA in your app, you'll need to enable the Identity Platform API. Note that this will also enable billing on your GCP Project, so you'll need to add credit card details.
Documentation links: [Web] [Android] [iOS]
Firebase should be now having Multifactor auth:
https://firebase.google.com/support/release-notes/js#version_7110_-_march_12_2020
https://cloud.google.com/identity-platform/docs/web/mfa
MFA in Firebase Auth officially landed on July 26, 2022. Here is the blog post that introduces it: https://firebase.blog/posts/2022/07/new-firebase-auth-features
Here's their official documentation: https://firebase.google.com/docs/auth/web/multi-factor

Authenticate IoT Appliance Using Firebase Auth

I can't figure out how to authenticate my IoT appliance to call Google Cloud App Engine APIs I've written using Firebase Auth.
We currently do this with our browser app using Firebase Auth tokens. We use the username and password to issue a token and then use that token during the life of the session to access APIs from our browser app.
This doesn't translate well to our IoT appliance as there is no username/password - so we are thinking we will need to use Firebase custom tokens. Unfortunately these tokens expire every hour - so we will need to use the Firebase Auth APIs to renew the tokens automatically - we think this is the way this works based on documentation.
A constraint we have is that this appliance doesn't have any user experience but instead needs to be able to restart at any time and reestablish it's authenticity with the server by retrieving a fresh token.
I'm having a hard time finding an example of how to do this - and I'm hoping someone can give me a simple example or some clear direction on how to keep a authentication token current while the appliance is on and establish a new one if it needs to restart.
Thanks!
Have you looked at Cloud IoT Core as an option? It handles the authentication piece for you without user/pass (uses JWT), and is designed for IoT. A quickie Cloud Function can bring your telemetry data into Firebase/Firestore very easily.
Another option would be to create a service account with permissions to write to AppEngine. Check out this link: https://cloud.google.com/docs/authentication/getting-started for some documentation on how to authenticate using a service account.

Xamarin.Firebase.Auth and LinkedIn - please for advice

My project is Xamarin.Forms PCL for Android and iOS.
Current stage is:
I'm able to get LinkedIn authorization(with Xamarin.Auth - OAuth2Authenticator),
and get user info from LinkedIn - Android Project.
What I would like to do:
After authorization, SignIn/LogIn to application using FireBase - in other words integrate OAuth with FireBase?
Is it possible?
I'm not sure if I'm going in good direction, or if I'm thinking right.
Thanks
If you are using an unsupported provider (eg. LinkedIn), you will need to use custom authentication. You would verify the LinkedIn sign in on your server, mint a custom token using Admin SDK: https://firebase.google.com/docs/auth/admin/create-custom-tokens, send the custom token to the client and complete sign in using signInWithCustomToken. This is also available via REST API: https://firebase.google.com/docs/reference/rest/auth/#section-verify-custom-token

QuickBooks integration with ASP.NET

Please provide some link or demo code for QuickBooks integration with ASP.NET.
I have App Token, OAuth Consumer Key, OAuth Consumer Secret.
You can get the developer documentation here https://developer.intuit.com/app/developer/homepage
First you need to signup as a developer and then have to create an app in the developer's dashboard: https://developer.intuit.com/app/developer/dashboard.
After creating an app you can get your client id and client secret in the app setting screen. Also you will find the sdk or similar code for your technology stack
here is a list of API endpoints from where you can fetch and post the data
https://developer.intuit.com/app/developer/qbo/docs/api/accounting/most-commonly-used/account

Resources