6-step workflow2fa totp authentication security backend generated Auth & accounts guided-flow App Builder

Add Time‑Based One‑Time Password (TOTP) 2FA

Integrate real TOTP two‑factor authentication into an existing app with full persistence and verification.

Run this as a guided flow on Flows — verify gates and recovery prompts included →

Flows@flows12d ago

0 runs0 forks0

Chain

Inputs

Step 1

flow-two-factor-auth-2fa-1-locate-and-back-up-the-user-authentication-mo-c116fa

Step 2

flow-two-factor-auth-2fa-2-add-a-totp-secret-field-to-the-user-model-e5bb66

Step 3

flow-two-factor-auth-2fa-3-create-an-enrollment-endpoint-that-generates--e9a4ba

Step 4

flow-two-factor-auth-2fa-4-create-a-verification-endpoint-for-totp-codes-7ce296

Step 5

flow-two-factor-auth-2fa-5-integrate-totp-verification-into-the-existing-a7707b

Step 6

flow-two-factor-auth-2fa-6-test-the-full-2fa-flow-end-to-end-7988e4

Final output

Workflow inputs

No inputs required — hit Run to stream each step in order.

Each step streams from its model and feeds the next. BYOK — you pay your provider directly. Add a key in Settings if a step needs one.

Step 1 · Identify where users are stored and how passwords are verified so we can safely extend the model.

flow-two-factor-auth-2fa-1-locate-and-back-up-the-user-authentication-mo-c116fa

Claude Sonnet 4.6→ {{step_1}}

Awaiting upstream steps…

Step 2 · Persist each user’s 2FA secret so it can be used for verification.

flow-two-factor-auth-2fa-2-add-a-totp-secret-field-to-the-user-model-e5bb66

Claude Sonnet 4.6→ {{step_2}}

Awaiting upstream steps…

Step 3 · Allow users to enable 2FA by receiving a scannable QR code linked to a secret stored in the DB.

flow-two-factor-auth-2fa-3-create-an-enrollment-endpoint-that-generates--e9a4ba

Claude Sonnet 4.6→ {{step_3}}

Awaiting upstream steps…

Step 4 · Validate the 6‑digit code supplied by the user during login or 2FA prompt.

flow-two-factor-auth-2fa-4-create-a-verification-endpoint-for-totp-codes-7ce296

Claude Sonnet 4.6→ {{step_4}}

Awaiting upstream steps…

Step 5 · Require a valid TOTP token after password verification for users who have a `totpSecret` set.

flow-two-factor-auth-2fa-5-integrate-totp-verification-into-the-existing-a7707b

Claude Sonnet 4.6→ {{step_5}}

Awaiting upstream steps…

Step 6 · Verify that enrollment, verification, and login with 2FA all work with real data and persistence.

flow-two-factor-auth-2fa-6-test-the-full-2fa-flow-end-to-end-7988e4

Claude Sonnet 4.6→ {{step_6}}

Awaiting upstream steps…

About this workflow

Integrate real TOTP two‑factor authentication into an existing app with full persistence and verification.

What happens when you run it

1
Identify where users are stored and how passwords are verified so we can safely extend the model.
Runs flow-two-factor-auth-2fa-1-locate-and-back-up-the-user-authentication-mo-c116fa on Claude Sonnet 4.6
2
Persist each user’s 2FA secret so it can be used for verification.
Runs flow-two-factor-auth-2fa-2-add-a-totp-secret-field-to-the-user-model-e5bb66 on Claude Sonnet 4.6
3
Allow users to enable 2FA by receiving a scannable QR code linked to a secret stored in the DB.
Runs flow-two-factor-auth-2fa-3-create-an-enrollment-endpoint-that-generates--e9a4ba on Claude Sonnet 4.6
4
Validate the 6‑digit code supplied by the user during login or 2FA prompt.
Runs flow-two-factor-auth-2fa-4-create-a-verification-endpoint-for-totp-codes-7ce296 on Claude Sonnet 4.6
5
Require a valid TOTP token after password verification for users who have a `totpSecret` set.
Runs flow-two-factor-auth-2fa-5-integrate-totp-verification-into-the-existing-a7707b on Claude Sonnet 4.6
6
Verify that enrollment, verification, and login with 2FA all work with real data and persistence.
Runs flow-two-factor-auth-2fa-6-test-the-full-2fa-flow-end-to-end-7988e4 on Claude Sonnet 4.6

Best for

•Recurring tasks you currently copy-paste between tools.
•When a single prompt isn't enough — you need a chain where output(n) feeds prompt(n+1).
•Fork and adapt if your inputs differ materially from the author's use case.

Models used

Claude Sonnet 4.6