Time-Based One-Time Passwords for Phone Support
4/17/2020
Introduced Time-Based One-Time Passwords (TOTP) for Enterprise phone support authentication. This feature allows customers to generate single-use tokens from the dashboard or use a 2FA app (like Google Authenticator) to authenticate during phone calls. The implementation uses RFC 6238 principles, generating tokens based on a shared secret (internal user ID and Cloudflare-internal secret) and Unix time. It also includes logic to validate tokens from the previous time step to account for network delay. Audit logging is integrated via API gateways.
