Implement TOTP Multi-Factor Authentication Verification Flow
PROJECT DASHBOARD
Human control points
● Human control active
PROJECT LIFECYCLE
Project is active
Only you can mark this project complete. Axiom will keep checking active scopes until then.
1 item requires your attention.
1 item requires your attention.
1 item requires your attention.
ACTION REQUIRED
Your next decision
TASK PROPOSALAuthentication Flow
Implement TOTP Multi-Factor Authentication Verification Flow
Adds time-based one-time password (TOTP) verification endpoints, QR code generation, session state binding, and cryptographic recovery codes.
ACTION INBOX
Other pending decisions
CLARIFICATION NEEDED
Should MFA enforcement be optional for existing enterprise accounts during migration?
Project brief specifies MFA is mandatory for admin roles, but grace period policy for legacy sessions is unstated.
REQUIRED PREREQUISITEAuthentication Flow
Configure STAGING_MFA_AES_SECRET environment variable in deployment settings
Required before Axiom can continue: Implement TOTP Multi-Factor Authentication Verification Flow
AXIOM TO-DO LIST
Your next actions
Verify Twilio / SMS fallback rate limits
Prevent SMS pump fraud if phone-based OTP fallback is enabled alongside TOTP.
Audit Twilio messaging service Max Daily Spend quota in account console.EXECUTION QUEUE
Ready to run
Propose task
Describe the requested outcome in at least 10 characters (0/10).
PROJECT FEATURES
Project features
active
Multi-Factor Authentication (MFA)
TOTP authenticator app support with encrypted recovery keys.
Details
- RFC 6238 TOTP algorithms
- QR code onboarding modal
- Emergency recovery key generator
active
Session Revocation & Token Rotation
Cryptographic refresh token rotation with immediate session kill-switch.
Details
- Redis blacklist session cache
- Single-device logout
- Global logout all devices
completed
OAuth2 Provider Integration
GitHub and Google identity provider sign-in flow.
Details
- OAuth callback handler
- Account linking protection
- Scope minimization