Google Authenticator ValidateTwoFactorPIN(UserUniqueKey, token) 总是假 MVC 5

Question

您好，我正在尝试使用 google 身份验证器实现 2FA，但我无法开始工作。

我正在关注下一篇文章 http://demo.dotnetawesome.com/two-factor-authentication-in-aspnet-mvc

我听说我必须同步代码的时间校正但是当我尝试谷歌身份验证器应用程序时说时间已经正确

有什么想法吗？ 谢谢

public class HomeController : Controller
{
    private const string key = "Max@123456"; // any 10-12 char string for use as private key in google authenticator
    public ActionResult Login()
    {
        return View();
    }

    [HttpPost]
    public ActionResult Login(LoginModel login)
    {
        string message = "";
        bool status = false;

        //check username and password form our database here
        //for demo I am going to use Admin as Username and Password1 as Password static value
        if (login.Username == "Admin" && login.Password == "Password1")
        {
            status = true; // show 2FA form
            message = "2FA Verification";
            Session["Username"] = login.Username;

            //2FA Setup
            TwoFactorAuthenticator tfa = new TwoFactorAuthenticator();
            string UserUniqueKey = login.Username + key; //as Its a demo, I have done this way. But you should use any encrypted value here which will be unique value per user 
            Session["UserUniqueKey"] = UserUniqueKey;
            var setupInfo = tfa.GenerateSetupCode("NAVIGIA 2FA", login.Username, UserUniqueKey, 300, 300);
            ViewBag.BarcodeImageUrl = setupInfo.QrCodeSetupImageUrl;
            ViewBag.SetupCode = setupInfo.ManualEntryKey;
        }
        else
        {
            message = "Invalid credential";
        }
        ViewBag.Message = message;
        ViewBag.Status = status;
        return View();
    }

    public ActionResult MyProfile()
    {
        if (Session["Username"] == null || Session["IsValid2FA"] == null || !(bool)Session["IsValid2FA"])
        {
            return RedirectToAction("Login");
        }
        ViewBag.Message = "Welcome " + Session["Username"].ToString();
        return View();
    }
    public ActionResult Verify2FA()
    {
        var token = Request["passcode"];
        TwoFactorAuthenticator tfa = new TwoFactorAuthenticator();
        string UserUniqueKey = Session["UserUniqueKey"].ToString();
        bool isValid = tfa.ValidateTwoFactorPIN(UserUniqueKey, token);
        if (isValid)
        {
            Session["IsValid2FA"] = true;
            return RedirectToAction("MyProfile", "Home");
        }
        return RedirectToAction("Login", "Home");
    }
}

Answer 1

我发现了我的问题。这是与时区。我设置了自动时间和时区，现在运行良好。

感谢大家