Struct TwoFactorSecret 

pub struct TwoFactorSecret {
    pub id: Uuid,
    pub user_id: Uuid,
    pub secret_encrypted: String,
    pub backup_codes_encrypted: Vec<String>,
    pub is_enabled: bool,
    pub verified_at: Option<DateTime<Utc>>,
    pub last_used_at: Option<DateTime<Utc>>,
    pub created_at: DateTime<Utc>,
    pub updated_at: DateTime<Utc>,
}

Two-factor authentication secret for TOTP (Time-based One-Time Password) Stores encrypted TOTP secret and backup codes for account recovery

Fields

id: Uuid

user_id: Uuid

secret_encrypted: String

backup_codes_encrypted: Vec<String>

is_enabled: bool

verified_at: Option<DateTime<Utc>>

last_used_at: Option<DateTime<Utc>>

created_at: DateTime<Utc>

updated_at: DateTime<Utc>

Implementations

impl TwoFactorSecret

pub fn new(user_id: Uuid, secret_encrypted: String) -> Result<Self, String>

Create a new 2FA secret (not yet enabled)

pub fn with_backup_codes( self, backup_codes_encrypted: Vec<String>, ) -> Result<Self, String>

Set backup codes (encrypted/hashed by caller)

pub fn enable(&mut self) -> Result<(), String>

Enable 2FA after successful verification

pub fn disable(&mut self)

Disable 2FA

pub fn mark_used(&mut self)

Mark TOTP as used (update last_used_at)

pub fn regenerate_backup_codes( &mut self, new_backup_codes_encrypted: Vec<String>, ) -> Result<(), String>

Regenerate backup codes (caller must hash/encrypt new codes)

pub fn remove_backup_code(&mut self, code_index: usize) -> Result<(), String>

Remove a used backup code (caller must identify which code was used)

pub fn backup_codes_low(&self) -> bool

Check if backup codes are exhausted (< 3 remaining)

pub fn needs_reverification(&self) -> bool

Check if 2FA needs re-verification (not used in 90 days)

Trait Implementations

impl Clone for TwoFactorSecret

fn clone(&self) -> TwoFactorSecret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TwoFactorSecret

Custom Debug implementation that redacts sensitive cryptographic fields to prevent accidental logging of TOTP secrets and backup codes.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TwoFactorSecret

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<TwoFactorSecret> for TwoFactorStatusDto

fn from(secret: TwoFactorSecret) -> Self

Converts to this type from the input type.

impl PartialEq for TwoFactorSecret

fn eq(&self, other: &TwoFactorSecret) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TwoFactorSecret

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TwoFactorSecret