Log in with OTPAuth (TOTP) - Momentic

Prerequisite: A Base32 TOTP secret (shown during 2FA enrollment) or an otpauth:// URI (often embedded in a QR code).

Generate a time-based 2FA code inside a JavaScript step with the otpauth library, which Momentic preloads in the step sandbox. Reach for this when a login flow asks for an authenticator-app code.

From a Base32 secret

const totp = new OTPAuth.TOTP({
  issuer: "MyApp",
  label: "alice@example.com",
  algorithm: "SHA1",
  digits: 6,
  period: 30,
  secret: env.TOTP_SECRET, // Base32-encoded
});

setVariable("TOTP_CODE", totp.generate());

From an `otpauth://` URI

const totp = OTPAuth.URI.parse(env.TOTP_URI);
setVariable("TOTP_CODE", totp.generate());

Then add a Type step with value {{ env.TOTP_CODE }}.

Store the secret as an environment variable rather than hardcoding it.

⌘I