Struct libreauth::oath::TOTP

pub struct TOTP { /* fields omitted */ }

Generates and checks TOTP codes.

Methods

impl TOTP

pub fn generate(&self) -> String

Generate the current TOTP value.

Examples

let key_base32 = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ".to_owned();
let mut totp = libreauth::oath::TOTPBuilder::new()
    .base32_key(&key_base32)
    .finalize()
    .unwrap();

let code = totp.generate();
assert_eq!(code.len(), 6);

pub fn is_valid(&self, code: &str) -> bool

Checks if the given code is valid. This implementation uses the double HMAC verification in order to prevent a timing side channel attack.

Examples

let key_ascii = "12345678901234567890".to_owned();
let user_code = "755224".to_owned();
let valid = libreauth::oath::TOTPBuilder::new()
    .ascii_key(&key_ascii)
    .finalize()
    .unwrap()
    .is_valid(&user_code);

pub fn key_uri_format<'a>(
    &'a self,
    issuer: &'a str,
    account_name: &'a str
) -> KeyUriBuilder<'a>

Creates the Key Uri Format according to the Google authenticator specification. This value can be used to generete QR codes which allow easy scanning by the end user. The returned KeyUriBuilder allows for additional customizations.

WARNING: The finalized value contains the secret key of the authentication process and should only be displayed to the corresponding user!

Example

let key_ascii = "12345678901234567890".to_owned();
let mut totp = libreauth::oath::TOTPBuilder::new()
    .ascii_key(&key_ascii)
    .finalize()
    .unwrap();

let uri = totp
    .key_uri_format("Provider1", "alice@example.com")
    .finalize();

assert_eq!(
    uri,
    "otpauth://totp/Provider1:alice@example.com?secret=GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ&issuer=Provider1"
);