mfaRefreshJwt property

String? mfaRefreshJwt
final

Used to add layered security to your app by implementing Multi-factor authentication.

Assuming the user has already signed in successfully with one authentication method, we can take the refreshJwt from the AuthenticationResponse and pass it as the mfaRefreshJwt value to another authentication method.

final options = SignInOptions(mfaRefreshJwt: authResponse.refreshJwt);
final future = Descope.otp.signIn(method: DeliveryMethod.email, loginId: email, options: options);

After the MFA authentication completes successfully the amr claim in both the session and refresh JWTs will be an array with an entry for each authentication method used.

Implementation

final String? mfaRefreshJwt;