RFC6238 Time-Based One-Time Password / Google Authenticator Library
Features:
- Generate TOTP and HOTP codes.
- Annotated source code
pub.dartlang.org: (you can use 'any' instead of a version if you just want the latest always)
dependencies:
otp: 2.0.3
import 'package:otp/otp.dart';
Start generating tokens.
// Generate TOTP code.
OTP.generateTOTPCode("JBSWY3DPEHPK3PXP", 1362302550000); // -> 238158
// base32 decoding to original string.
OTP.generateHOTPCode("JBSWY3DPEHPK3PXP", 7); // -> 449891
OTP.generateTOTPCode(String secret, int currentTime, {int length: 6, int interval: 30, Algorithm algorithm: Algorithm.SHA1})
Generate a code for the provided secret and time.
secret
- (String) A Base32 String.currentTime
- (int) The current time in milliseconds.length
- (int) The length of the resulting code.interval
- (int) Refresh interval to get a new code.algorithm
- (Algorithm) Hashing method.
Returns an int
code. Does not preserve leading zeros.
OTP.generateTOTPCodeString(String secret, int currentTime, {int length: 6, int interval: 30, Algorithm algorithm: Algorithm.SHA1})
Generate a code for the provided secret and time.
secret
- (String) A Base32 String.currentTime
- (int) The current time in milliseconds.length
- (int) The length of the resulting code.interval
- (int) Refresh interval to get a new code.algorithm
- (Algorithm) Hashing method.
Returns an String
code. Preserves leading zeros.
Generate a code for the provided secret and time.
secret
- (String) A Base32 String.counter
- (int) An int counter.length
- (int) the length of the resulting code.
Returns an int
code. Does not preserve leading zeros
Generate a code for the provided secret and time.
secret
- (String) A Base32 String.counter
- (int) An int counter.length
- (int) the length of the resulting code.
Returns an String
code. Preserves leading zeros
!DISCLAIMER! I can only get this to be within 1 millisecond between different codes and same codes. I have yet to get them to be equal. but 1 millisecond should be an OK room for error though.
Compares 2 codes in constant time to minimize risk of timing attacks.
code
- (String) A Base32 String.othercode
- (String) A Base32 String.
Returns an bool
if they match or not.
pub run test
See CHANGELOG.md