TwoFactor in code

[TaarnStar]

Hi,

I have a question regarding the TwoFactor login in code. Is it possible somehow to bypass the TwoFactor login in code since we are using the NuGet package inside of an API and we don't have the code in the frontend to insert the needed code?

Also we get frequently errors 429 (Too many requests) on a server were we have multiple websites that use the same package and same username and password. Is it possible to set a device and location so that we always send the same device and location on login or is it possible that the device will be blocked too?

[ramtinak]

Hi,
You can turn on TOTP authentication (Authentication App) in Instagram via Google Authenticator or Microsoft Authenticator apps.
Store the key from Instagram app and use it in your code via libraries like Otp.NET in your code.

Extra work required:
TwoFactorLoginAsync is incompatible with this scenario [ Public Library ONLY ].
You have to verification_method from 1 to 3: [ 1 => SMS Code, 3 => Authentication App ]

InstagramApiSharp/src/InstagramApiSharp/API/InstaApi.cs

Line 1170 in f9d3ef1

{"verification_method", "1"},

One of the reason you are getting this [429 response], is because Instagram uses a new API for authentication called Notification, it will sends one request repeatedly to their server and waiting for response for other logged in device. it will show an approve/decline notification to second device(Note, you don't need any verification code for this!). [ This only happens if you enabled that option in Two Factor Authentication section ].
After at least 2-10 tries, you can switch to another method, like authentication app, recovery code or even sms code and have a success login.

As I tested before, you have to call that function:

POST => /api/v1/two_factor/check_trusted_notification_status/
Body => two_factor_identifier=2FA_INDENTIFIER&username=USERNAME&device_id=DEVICEID

All of these scenarios (+ example projects) are already implemented in private version of InstagramApiSharp.

Regards.