hiqdev / yii2-mfa

            return ['_error' => 'mfa already enabled' . $secret];

        }

        if (!$this->module->getTotp()->verifyCode($identity->getTemporarySecret(), \Yii::$app->request->post()['code'] ?? '')) {

            return ['_error' => 'invalid totp code'];

        }

        $identity->setTotpSecret($identity->getTemporarySecret());

        $identity->setTemporarySecret(null);

            return ['_error' => 'mfa disabled, enable first'];

        }

        if (!$this->module->getTotp()->verifyCode($secret, \Yii::$app->request->post()['code'] ?? '')) {

            return ['_error' => 'wrong code'];

        }

        $identity->setTotpSecret('');

        $identity->save();