speakeasyjs / speakeasy

**NOT MAINTAINED** Two-factor authentication for Node.js. One-time passcode generator (HOTP/TOTP) with support for Google Authenticator.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

New totp every function call

digitalml opened this issue · comments

I'm trying to create a time based one time password in node that is new every single time totp is called... (secret is the same every time from env file)... I need the verify window to be 5 mins...

The problem i am having is that I get duplicates. I assume this is because step = 30 by default and only a new totp will be generated every 30 seconds? I tried to set it to 0, that didn't work. I tried 1 and i do get a new key everyone one second but if I call it more times than once a second i get duplicates.

Can someone please tell me on how to get a new totp every single call but still have it valid for 5 mins on verify?

@digitalml did you find a solution for this ?

@kunalm8470 I ended up appending the users login id to the secret code each time so it was always different but I could still decode it. this was unique enough for my purposes.