What implementation does it support? (RFC 6238 (TOTP) vs. RFC 4226 (HOTP))

Question

What implementation does it support? (RFC 6238 (TOTP) vs. RFC 4226 (HOTP))

ehdis opened this issue 5 years ago · comments

ehdis commented 5 years ago

Description on https://openrepos.net/content/slava/foil-auth says:

Only time-based (TOTP) passwords are supported in this version.

and https://github.com/monich/harbour-foilauth says:

is an HMAC-based generator of One-Time Passwords

so RFC 6238 (TOTP) vs. RFC 4226 (HOTP).

What implementation does it support?

Slava Monich · Answer 1 · Fri Feb 07 2020 23:40:33 GMT+0800 (China Standard Time)

RFC 6238 with 30-seconds time step sounds like it, HMAC-SHA1 only. If HMAC-SHA256 is needed, it's easy enough to add SHA-256 option, but I would need a service to test against.