otp 2.0.3

RFC6238 Time-Based One-Time Password / Google Authenticator Library

dart-otp

RFC6238 Time-Based One-Time Password / Google Authenticator Library

Features:

• Generate TOTP and HOTP codes.
• Annotated source code

Getting Started

Pubspec

pub.dartlang.org: (you can use 'any' instead of a version if you just want the latest always)

dependencies:
  otp: 2.0.3

import 'package:otp/otp.dart';

Start generating tokens.

// Generate TOTP code.
OTP.generateTOTPCode("JBSWY3DPEHPK3PXP", 1362302550000); // -> 238158

// base32 decoding to original string.
OTP.generateHOTPCode("JBSWY3DPEHPK3PXP", 7); // -> 449891

API

OTP.generateTOTPCode(String secret, int currentTime, {int length: 6, int interval: 30, Algorithm algorithm: Algorithm.SHA1})

Generate a code for the provided secret and time.

• secret - (String) A Base32 String.
• currentTime - (int) The current time in milliseconds.
• length - (int) The length of the resulting code.
• interval - (int) Refresh interval to get a new code.
• algorithm - (Algorithm) Hashing method.

Returns an int code. Does not preserve leading zeros.

OTP.generateTOTPCodeString(String secret, int currentTime, {int length: 6, int interval: 30, Algorithm algorithm: Algorithm.SHA1})

Generate a code for the provided secret and time.

• secret - (String) A Base32 String.
• currentTime - (int) The current time in milliseconds.
• length - (int) The length of the resulting code.
• interval - (int) Refresh interval to get a new code.
• algorithm - (Algorithm) Hashing method.

Returns an String code. Preserves leading zeros.

OTP.generateHOTPCode(String secret, int counter, {int length: 6})

Generate a code for the provided secret and time.

• secret - (String) A Base32 String.
• counter - (int) An int counter.
• length - (int) the length of the resulting code.

Returns an int code. Does not preserve leading zeros

OTP.generateHOTPCodeString(String secret, int counter, {int length: 6})

Generate a code for the provided secret and time.

• secret - (String) A Base32 String.
• counter - (int) An int counter.
• length - (int) the length of the resulting code.

Returns an String code. Preserves leading zeros

OTP.constantTimeVerification(final String code, final String othercode)

!DISCLAIMER! I can only get this to be within 1 millisecond between different codes and same codes. I have yet to get them to be equal. but 1 millisecond should be an OK room for error though.

Compares 2 codes in constant time to minimize risk of timing attacks.

• code - (String) A Base32 String.
• othercode - (String) A Base32 String.

Returns an bool if they match or not.

Testing

pub run test

Release notes

See CHANGELOG.md