Merge pull request #259 from aspnetzero/pr/4681

Update two factor authentication docs

Author: ismcagdas

docs/en/Features-Angular-Two-Factor-Authentication.md

@@ -2,17 +2,17 @@
 
 ASP.NET Zero is ready to provide two factor login, but it's disabled as default. You can easily enable it in host settings page (in Security tab):
 
-<img src="images/lockout-two-factor-settings-1.png" class="img-thumbnail" />
+![Two factor settings](images/lockout-two-factor-settings-2.png)
 
 Note: In a multi-tenant application, two factor authentication is available to tenants only if it's enabled in the host settings. Also, email verification and SMS verification settings are only available in the host side. This is by design.
 
 When it's enabled, user is asked to select a verification provider after entering user name and password:
 
-<img src="images/send-security-code-1.png" alt="Send security code" class="img-thumbnail" />
+![Send security code](images/send-security-code-2.png)
 
 Then a **confirmation code** is sent to the selected provider and user enters the code in the next page:
 
-<img src="images/verify-security-code-1.png" alt="Verify security code" class="thumbnail" />
+![Verify security code](images/verify-security-code-2.png)
 
 ## Email Verification
 
@@ -42,6 +42,29 @@ In that case, you need to configure ASP.NET Zero to use your custom implementati
 Configuration.ReplaceService<ISmsSender,CustomSmsSender>();
 ```
 
+## Authenticator Verification
+
+This is available if user has enabled two factor authentication in his/her profile. You can enable it in profile page:
+
+![Enable two factor authenticator app](images/enable-authenticator.png)
+
+Then user can scan the QR code with an authenticator app (like Google Authenticator) and enter the code in the next page:
+
+![Authenticator verification](images/authenticator-verification.png)
+
+
+Then user can see his/her recovery codes:
+
+![Authenticator recovery codes](images/authenticator-recovery-codes.png)
+
+That's it. Now user use authenticator app to verify himself/herself. 
+
+![Authenticator enabled](images/authenticator-enabled.png)
+
+You can also disable two factor authentication and view the recovery codes again:
+
+![Disable two factor authenticator app](images/disable-authenticator.png)
+
 ### Twilio Integration
 
 In order to enable Twilio integration, just uncomment the following line in your **{YourProjectName}CoreModule** (in your Core project):

docs/en/Features-Mvc-Core-Two-Factor-Authentication.md

@@ -2,17 +2,17 @@
 
 ASP.NET Zero is ready to provide two factor login, but it's disabled as default. You can easily enable it in host settings page in security tab:
 
-<img src="images/lockout-two-factor-settings-1.png" class="img-thumbnail" />
+![Two factor settings](images/lockout-two-factor-settings-2.png)
 
 Note: In a multi-tenant application, two factor authentication is available to tenants only if it's enabled in the host settings. Also, email verification and SMS verification settings are only available in the host side. This is by design.
 
 When it's enabled, user is asked to select a verification provider after entering user name and password:
 
-<img src="images/send-security-code-1.png" alt="Send security code" class="img-thumbnail" />
+![Send security code](images/send-security-code-2.png)
 
 Then a **confirmation code** is sent to the selected provider and user enters the code in the next page:
 
-<img src="images/verify-security-code-1.png" alt="Verify security code" class="img-thumbnail" />
+![Verify security code](images/verify-security-code-2.png)
 
 ## Email Verification
 
@@ -22,6 +22,29 @@ This is available if user has a confirmed email address. Since email sending is
 
 This is available if user has a confirmed phone number. SMS sending is not implemented actually (because it requires an integration to an SMS vendor). Current implementation just writes security code to logs. You should complete **SmsSender** class in the solution to make it usable. Otherwise, disable SMS verification in the settings.
 
+## Authenticator Verification
+
+This is available if user has enabled two factor authentication in his/her profile. You can enable it in profile page:
+
+![Enable two factor authenticator app](images/enable-authenticator.png)
+
+Then user can scan the QR code with an authenticator app (like Google Authenticator) and enter the code in the next page:
+
+![Authenticator verification](images/authenticator-verification.png)
+
+
+Then user can see his/her recovery codes:
+
+![Authenticator recovery codes](images/authenticator-recovery-codes.png)
+
+That's it. Now user use authenticator app to verify himself/herself. 
+
+![Authenticator enabled](images/authenticator-enabled.png)
+
+You can also disable two factor authentication and view the recovery codes again:
+
+![Disable two factor authenticator app](images/disable-authenticator.png)
+
 ### Twilio Integration
 
 In order to enable Twilio integration, just uncomment the following line in your **CoreModule** (in your .Core project):