AXIAM PHP SDK

MfaEnrollment
in package

Read onlyYes
FinalYes

A TOTP factor offered but not yet active (CONTRACT.md §25.1).

Both halves are Sensitive, and the second one is why. The otpauth:// URI contains the secret: wrapping the bare secret and then logging the URI leaks exactly the same bytes (§25.3).

Table of Contents

Properties

$secretBase32  : Sensitive
$totpUri  : Sensitive

Methods

__construct()  : mixed

Properties

Methods

__construct()

public __construct(Sensitive $secretBase32, Sensitive $totpUri) : mixed
Parameters
$secretBase32 : Sensitive

The shared TOTP secret. Anyone holding it can generate valid codes for this account indefinitely.

$totpUri : Sensitive

otpauth://totp/…?secret=<secretBase32> — the string an authenticator app scans out of a QR code.

On this page

Search results