Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.xreatlabs.space/llms.txt

Use this file to discover all available pages before exploring further.

TOTP Two-Factor Authentication

NexAuth supports TOTP (Time-based One-Time Password) two-factor authentication, adding an extra layer of security to player accounts.

Overview

TOTP 2FA requires players to provide a code from their authenticator app in addition to their password, preventing unauthorized access even if passwords are compromised.

Configuration

totp {
    # Should we enable TOTP-Based Two-Factor Authentication? If you don't know what this is, this is the 2FA used in applications like Google Authenticator etc.
    enabled=true
    # The label to be displayed in the 2FA app. Change this to your network name.
    label="NexAuth Network"
    # The delay in milliseconds until player is given a map to scan the QR code. Increase this value if the map disappears too quickly.
    delay=1000
}

Player Commands

/totp enable
/totp disable <password>
/totp verify <code>
/totp backup-codes

Setup Process

  1. Player runs /totp enable
  2. QR code is displayed
  3. Player scans with authenticator app
  4. Player enters verification code
  5. 2FA is enabled

Next Steps

Session Management

Learn about session persistence and management.