Sida Loo Ku Daro Xaqiijinta Laba-Tallaabood (2FA) App-ka

Si aad xaqiijinta laba-tallaabood (2FA) ugu daro app-kaaga, ogolow isticmaalayaasha inay ku xidhaan app authenticator iyagoo sawirta QR code-ka iska, weydiiso koodka lix lambar ee uu muujiyo ka dib password-ka, oo kaliya markii koodkaasi sax yahay ku samee session buuxa server-ka. Mid kasta ka sii koodadka dib-u-soo-celinta mar keliya markay shidaan, xadid inta koodka qofku qiyaasi karo, oo u baahnow password iyo koodka hadda jira ka hor intaan 2FA la demin. Haddii aad isticmaasho bixiye auth martiqaad ah, shid doorashada multi-factor ee gudaha ah halkii aad dhisi lahayd adigu naftaadu.

Hagahan wuxuu soo mari doonaa doorashooyinka, habka saxda ah, prompts-ka aad siin karto AI builder-ka, iyo khaladaadka ka dhigaya 2FA mid muuqda laakiin aan waxba qabanin. Haddii fikraddu cusub tahay, bilow what two-factor authentication is.

Ka hor intaadan bilaabin: waxaad u baahan tahay login shaqeeya

2FA waxay ku fadhiisaa galitaan horay u jiray. Waxaad u baahan tahay mid ka mid ah kuwan marka hore:

• Login-kaaga gaarka ah, oo leh isticmaalayaal iyo passwords la hash-gareeyay oo lagu kaydiyay database-ka app-kaaga.
• Bixiye auth martiqaad ah oo maamula isticmaalayaasha adiga kuu jirta.

Haddii aadan wali midna haysan, bilow how to add login to your app. Hagahan intiisa kale wuxuu ka dhex dhacaa tallaabada password-ka oo hore u shaqeysa.

Dooro tallaabada labaad

TOTP wuxuu u taagan yahay time-based one-time password, heerka (RFC 6238) ee app-yada authenticator-ku isticmaalaan. Server-kaaga iyo telefoonka isticmaaluhu waxay wadaagaan sir; mid kastaa wuxuu abuuraa koodka gaaban ee isku mid ah sirta iyo waqtiga hadda, badanaa wuxuu isbedelaa 30 ilbiriqsi kasta. Ma loo baahna xidhiidh network ama bixiye SMS.

Passkeys waxay beddelaan ama taageeraan passwords adigoo isticmaalaya furaha cryptographic ee lagu kaydiyay qalabka isticmaalaha. Way xoogan yihiin laakiin shaqo badan ayay kuu keentaa inaad dhisto adigu naftaadu, sidaas darteed apps badan waxay ku bilaabaan TOTP oo markii dambe ku daraan passkeys, ama ka helaan bixiye auth.

Dhisaa mise shido?

Hubi dukumentiyada hadda ee bixiyahaaga si aad u ogaato factors-ka uu taageero iyo qorshayaasha ay ku jiraan. Labadaba, weligaa ha qorin xisaabta abuurista code-ka adigu; isticmaal maktabad caan ah.

Go'aan ka gaar siyaasadda marka hore

Jawaab su'aalahan ka hor intaadan weydiin, sababtoo ah way beddelaan naqshadda:

1. Yaa loo baahan yahay inuu isticmaalo? Ikhtiyaari ah dadka oo dhan, loo baahan yahay shaqaalaha iyo admin-ka, ama loo baahan yahay dhammaan. Loo baahan yahay qof kasta oo awood admin leh waa caadi. Eeg role-based access control.
2. Sideed ayay isticmaalayaashu mar kale u soo galaan koodka? Login kasta, ama mar qalab kasta 30 maalmood ("remember this device").
3. Ficillada noocee u baahan hubin cusub? Beddelidda email-ka, faahfaahinta lacag-bixinta, iyo demidda 2FA waa musharraxyo wanaagsan. Waxaa loo yaqaan step-up authentication.
4. Waa maxay habka telefoonka lumay? Koodadka dib-u-soo-celinta, iyo habka gacanta ee aad diyaar u tahay inaad maamusho.

Tallaabo tallaabo: 2FA TOTP login-kaaga gaarka ah

1. Kaydi goobaha saxda ah

Isticmaale kasta wuxuu u baahan yahay: haddii 2FA uu shaqeeyo, sirta TOTP (lagu qariyay kaydinta, ma aha qoraal caadi ah), waqtiga markii la shiday, iyo liis koodadka dib-u-soo-celinta oo hash-ga la sameeyay, sida passwords-ka. Ku dar meel lagu tiriyo isku dayyada fashilmay.

2. Diiwaan-gelinta

1. Isticmaaluhu wuxuu furaa Settings wuxuuna riixaa Turn on two-factor authentication.
2. Server-ku wuxuu abuuraa sir cusub wuxuuna soo celinayaa sida QR code, oo ay ku jirto qoraalka qoraalka ah ee dadka aan sawiri karin.
3. Isticmaaluhu wuxuu sawiraa app authenticator-ka kadibna wuxuu qoraa koodka hadda jira.
4. Server-ku wuxuu hubiyaa koodka. Kaliya haddii uu sax yahay ayuu kaydinayaa sirta wuxuuna calaamadinayaa 2FA inuu shaqeeyo.
5. App-ku wuxuu muujiyaa 8–10 koodka dib-u-soo-celinta hal mar, wuxuuna weydiinayaa isticmaalaha inuu kaydiyo.

Tallaabada 4aad waa muhiim: haddii aad 2FA ku demiso ka hor inta aan koodka la xaqiijin, qof kasta oo sawirkiisu fashilmay wuu qufulmi doonaa login-ka xiga.

3. Login oo leh tallaabo labaad

1. Isticmaaluhu wuxuu soo gudbiyaa email iyo password. Server-ku wuu hubiyaa.
2. Haddii 2FA uu shaqeeyo, server-ku ma samaynayo session buuxa. Waxa uu samaynayaa gobol gaaban oo "second factor pending" ah halkaas.
3. App-ku wuxuu muujiyaa shaashadda koodka. Server-ku wuu hubiyaa koodka, isagoo oggolaanaya daaqad yar oo ku saabsan kala-duwanaanshaha saacadda.
4. Hadda kaliya server-ku wuxuu soo saarayaa session-ka dhabta ah.

Dhammaan route-yada la ilaaliyo iyo API endpoint-yada waa inay diidaan gobolka pending-ka. Shaashad 2FA ah oo kaliya qariya bogagga browser-ka ayaa laga gudbi karaa haddii API-ga si toos ah loo wicito.

4. Xadka iyo digniinaha

Koodka lix lambar wuxuu leeyahay milyan isku-darka, taas oo la qiyaasi karo haddii aan xadka la dhigin. Xaddid isku-dayyada, quful tallaabada labaad muddo markii ay fashilmaan isku-dayyo badan, oo email u dir isticmaalaha markaas. Eeg rate limiting iyo sending emails from your app.

5. Dib-u-soo-celinta iyo demidda

• Koodka dib-u-soo-celinta wuxuu shaqeeyaa hal mar, kadibna waa la tirtiraa.
• Demidda 2FA waxay u baahan tahay password iyo koodka hadda jira ama koodka dib-u-soo-celinta.
• Dib-u-soo-celinta koodadka dib-u-soo-celinta wuxuu baabi'iyaa kuwii hore.
• Email u dir isticmaalaha markasta oo 2FA la shido ama la demo.

Prompts-ka aad siin karto AI builder-kaaga

Bilow habka asaasiga ah:

Ku dar xaqiijinta laba-tallaabood ee ikhtiyaarka ah oo isticmaalaya app authenticator-ka (TOTP) login-kayaga email iyo password-ka hadda jira. Isticmaal maktabad TOTP caan ah, ha qorin algorithm-ka adigu. Settings-ka, muuji QR code iyo sirta qoraalka, oo kaliya ka dib markii isticmaaluhu geliyo koodka sax ah ayaad 2FA awood u siinaysaa. Kaydi sirta si la qarinayo oo weligaa ha mar kale muujin markii la dejiyo. Muuji 10 koodka dib-u-soo-celinta ee hal mar, oo hash-ka kaydi.

Kadibna fulinta, halkaas oo koodka la abuuray inta badan uu ku dhacaa:

Fulin 2FA server-ka. Password-ka sax ah ka dib, isticmaalayaasha leh 2FA waxay helaan gobol pending oo gaaban, ma aha session buuxa. Bog kasta oo la ilaaliyo iyo API route kasta waa inay diidaan gobolka pending-ka. Xaddid isku-dayyada koodka 5 ah, kadibna quful tallaabada labaad 15 daqiiqo oo email u dir isticmaalaha.

Kadibna siyaasadda:

U baahan 2FA akoonada admin-ka: admin aan 2FA lahayn wuxuu u gudbiyaa dejinta oo ma gaari karo dashboard-ka ilaa ay dhammaato. U baahan password iyo koodka hadda jira si loo demo 2FA ama loo beddelo email-ka akoonka. Email u dir isticmaalaha markii 2FA la shido ama la demo.

Ugu dambeyn, weydii agent-ka inuu sharaxo waxa dhisay:

Liiji dhammaan route-yada hubiya in tallaabada labaad la dhammaystiray, meesha sirta TOTP-ka iyo koodadka dib-u-soo-celinta lagu kaydiyo, iyo sida loo ilaaliyo.

Khaladaadka caadiga ah

• Session la siiyo ka dib password-ka. Tan waa cilladda ugu khatarta badan. Haddii session buuxa uu jiro ka hor intaan koodka la hubin, 2FA waa qurxin oo keliya. Tijaabi adigoo wicitaan API ilaaliyan kaliya kadib tallaabada password-ka.
• Xadka isku-dayyada oo aan lahayn. Mala-awaal aan xad lahayn ayaa koodka ka dhigaya mid la jebin karo qof xoog ku doonaya.
• Sirta qoraalka caadiga ah ama koodadka dib-u-soo-celinta. Xog-gelinta database-ka waxay siin doontaa tallaabada labaad ee dadka oo dhan.
• Ku daridda ka hor intaan la xaqiijin. Isticmaalayaasha sawirkoodu fashilmay waxay qufulmaan login-ka xiga.
• Habka dib-u-soo-celinta oo maqan. Telefoon kasta oo lumay wuxuu noqonayaa tiketi taageero ama macaamil lumay.
• Demidda fudud. Haddii session la xaday uu 2FA ka demi karo iyadoon koodka la gelin, ilaalintu way baabi'isay.
• Koodadka logs-ka. Hubi in koodadka iyo sirta aanay waligood ka muuqan server logs-ka ama fariimaha khaladaadka.
• Hubinta bogga login-ka oo keliya. Dib u dejinta password-ka, sign-in-ka "magic link" iyo social login kasta waa inay sidoo kale ixtiraamaan 2FA, haddii kale waxay noqon doonaan jid lagu dhaafo.

Liiska tijaabada

• Diiwaan-gelinta waxay dhammaystirmaysaa kaliya ka dib koodka sax ah
• Login oo leh password sax ah laakiin aan koodka lahayn ma siinayo gelitaan bog ama API la ilaaliyo
• Koodka qaldan waa la diidaa; isku-dayyo badan oo qaldan waxay keenaan qufulka iyo email
• Koodka ka soo baxay daqiiqado yar ka hor waa la diidaa
• Koodka dib-u-soo-celinta kasta wuxuu shaqeeyaa hal mar oo keliya
• Demidda 2FA waxay u baahan tahay password iyo koodka hadda jira
• Dib u dejinta password-ka ma dhaafayso 2FA
• Admin-ka aan 2FA lahayn ma gaari karo bogagga admin-ka (haddii loo baahan yahay)
• Sirta iyo koodadka dib-u-soo-celinta waa la qariyay ama la hash-gareeyay database-ka
• Koodad ama sir ma muuqdaan logs-ka

Sidoo kale ka hor launch-ka, orod security checklist for AI-built apps oo dhan.

Ku darista 2FA Mythex

Mythex ma ku darto login dhisan oo isticmaalayaasha dhammaadka app-kaaga, sidaas darteed 2FA waa qayb ka mid ah habka auth-ka aad doorato: login-kaaga email-iyo-password ee database-ka mashruuca, ama bixiye martiqaad ah oo leh taageero multi-factor. Waxaad chat-ka ku sharraxdaa waxa aad rabto adigoo isticmaalaya prompts-ka kor ku xusan, furayaasha bixiyaha waxay galaan secrets-ka mashruuca (adigoo isticmaalaya /secrets, settings-ka mashruuca, ama kaarka secrets-ka ee agent-ku muujiyo) ma aha sanduuqa fariinta. Recipe-ka docs-ka Add login to your app wuxuu leeyahay starter prompt, Security for apps you build wuxuu daboolaa habka furayaasha iyo oggolaanshaha. Kadib markii agent-ku dhammeeyo, tijaabi liiska oo dhan Preview ka hor publish.

Su'aalaha