Current Session
Authenticated with:
<%= Enum.map_join(@auth_strategies, ", ", &to_string/1) %>
<%= if @totp_verified_at do %>
TOTP verified at: <%= Calendar.strftime(@totp_verified_at, "%Y-%m-%d %H:%M UTC") %>
<% end %>
```
## Common Use Cases
### Requiring Recent TOTP Verification
For sensitive operations, require that TOTP was verified recently:
```elixir
defmodule MyApp.Security do
@max_totp_age_minutes 15
def recent_totp_verification?(user) do
case user.__metadata__[:totp_verified_at] do
nil ->
false
verified_at ->
age_minutes = DateTime.diff(DateTime.utc_now(), verified_at, :minute)
age_minutes < @max_totp_age_minutes
end
end
end
```
### Building an Audit Log
Track authentication events using the metadata:
```elixir
defmodule MyApp.AuthAudit do
def log_authentication(user, conn) do
MyApp.AuditLog.create!(%{
user_id: user.id,
strategies: user.__metadata__[:authentication_strategies] || [],
totp_verified: user.__metadata__[:totp_verified_at] != nil,
ip_address: get_ip(conn),
user_agent: get_user_agent(conn),
timestamp: DateTime.utc_now()
})
end
defp get_ip(conn) do
conn.remote_ip |> :inet.ntoa() |> to_string()
end
defp get_user_agent(conn) do
Plug.Conn.get_req_header(conn, "user-agent") |> List.first()
end
end
```
### Conditional UI Based on Auth Method
Show different UI elements based on how the user authenticated:
```elixir
defmodule MyAppWeb.Components.SecurityBadge do
use Phoenix.Component
def security_badge(assigns) do
~H"""