Very simple implementation of TOTP code validation for 2FA.
npm install crypto-totpVery simple implementation of TOTP code validation for 2FA.
yarn add crypto-totpjs
const totp = require('crypto-totp')
`API
$3
> Generate a new totp secret, this is what will be revealed to the customer.
js
const secret = totp.generateSecret()
`$3
> Generate a valid totp code for use in validation. This can be used to build an authenticator app or locally test.
-
- the value used to generate totp codes`js
const code = totp.generateToken('supersecret')
`$3
> This method is provided to validated a provided totp token. Customer would usually provide this from thier choosen authenticator app or device.
-
- the 6 digit token generated.
- secret - the secret revealed to the customer during setup.
- window - Optional the number of previous codes to compare against, default is 1.`js
const isValid = totp.validateToken(123456, 'supersecret')
`$3
> Generate an ecoded string used to link the customer device. Issuer and account name are combined and displayed in the authenticator app.
- - the value used to genertae totp codes
- accountName - the unique value used to identify the customer.
- issuer - the name displayed in the totp app.
- algo - Optional the encryption algo used.
- digits - Optional the number of digits to display.
- period - Optional the length of time the generated code will be valid.
`js
const URI = totp.generateTotpUri('supersecret', 'tacyarg', "Project")
console.log(URI) // //Issuer and account name are displayed in the authenticator app for the customer.
Project:tacyarg
``