Authenticator API ignoring secret and generates it's own secret

[compwiz21]

HI i'm using this api and the secret that is being returned is NOT the secret that i'm submitting.

For example: https://www.authenticatorApi.com/Pair.aspx?appName=MyApp&appInfo=Preston&secretCode=PC577AWGZ5AMGKSD

results in the following:

Decoding that results in this:

Can you fix this bug or if it's a me issue (could be) then can you let me know what i'm doing wrong?

[infiniteloopltd]

Ok, 3 years late, but the answer is this;

Google.Authenticator (RobThree/TwoFactorAuth and its older ports) does the following when you pass a secret:

It expects the secret in Base32 format*

If the supplied secret is not valid Base32, it transforms it, or generates a new key internally

• I just found this now.