I dont think i ever posted a link to this blog post i wrote on doing multi factor authentication in WebApp

This is of course only one way of doing MFA but hopefully this helps someone

http://salzlechner.com/dev/2018/11/0...uthentication/