Project

totp

0.03
No commit activity in last 3 years
No release in over 3 years
Time-based One-Time Passwords
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
 Dependencies

Development

>= 0

Runtime

>= 0
 Project Readme

Time-based One-Time Passwords

This is an implementation of a Time-Based One-Time Password Algorithm compatible with Google Authenticator. You can read more about TOTP at http://tools.ietf.org/html/rfc6238.

Usage

Passwords are derived from a secret and a time. You can use the TOTP.secret function to obtain a new, random secret.

TOTP.secret #=> "YYZ27CO4WZTPZAYX"

This helper is handy if you want to implement 2 factor authentication in your application.

In order to generate time based one time passwords, you can use the TOTP.passwords function:

# Using the secret "AAAAAAAAAAAAAAAA" and the current time
TOTP.passwords("AAAAAAAAAAAAAAAA") #=> [783743, 17086, 955099]

You can also provide a specific time or timestamp:

# Using the same secret and a timestamp
passwords = TOTP.passwords("AAAAAAAAAAAAAAAA", 1400000000)

assert_equal [306281, 553572, 304383], passwords #=> true

To check the validity of a given password, you can use the TOTP.valid? function:

TOTP.valid?(secret, password)

If you want to check if a password was valid at a particular time, you can provide a time object or a timestamp as a third argument:

TOTP.valid?(secret, password, time)

Installation

  $ gem install totp

Acknowledgments

This library is inspired by the following implementations: