asp.net - Google Authenticator 2FA 总是返回 True

Question

我在 ASP.NET 应用程序中使用GoogleAuthenticatornuget 包进行身份验证。问题是即使身份验证器应用程序已经更改了代码2FA，该函数也ValidateTwoFactorPIN总是返回。Nuget 包trueTOTP

public TwoFactorSetupResponse Enable(string email)
        {
            var accountSecretKey = $"{SecretCode}-{email}";
            var setupInfo = _twoFactorAuthenticator.GenerateSetupCode("App", email, Encoding.ASCII.GetBytes(accountSecretKey));

            return new TwoFactorSetupResponse()
            {
                Account = setupInfo.Account,
                ManualEntryKey = setupInfo.ManualEntryKey,
                QrCodeSetupImageUrl = setupInfo.QrCodeSetupImageUrl,
            };
        }

        public bool IsCodeValid(string email, string code)
        {
            var accountSecretKey = $"{SecretCode}-{email}";
            return _twoFactorAuthenticator.ValidateTwoFactorPIN(accountSecretKey, code);
        }

Answer 1

该软件包的默认漂移容差为五分钟，因此要么使用较小的容差进行测试，要么等到容差窗口过去。