How to verify Backup Codes for pattern 'xxxx-xxxx-xxxx'

[MuhammadAbbasAkhtar]

verifyHOTP generates code in xxxxxx format

backup codes are in xxxx-xxxx-xxxx format

No method for verifying them is available.

How to do that?

[MuhammadAbbasAkhtar]

Currently, the only solution I can think of is to hash the backup codes using bcrypt and store them in DB, and when the user logs in using the code, compare it via bcrypt.compareSync method

[oneyoung19]

Currently, the only solution I can think of is to hash the backup codes using bcrypt and store them in DB, and when the user logs in using the code, compare it via bcrypt.compareSync method

Yes, that's what I'm thinking. The recovery codes provided in this library are just utility functions.