aerogear-attic / aerogear-otp-java Goto Github PK

License: Apache License 2.0

Java 100.00%

aerogear-otp-java's Introduction

aerogear-otp-java

Java One Time Password API

A Java library for generating one time passwords according to RFC 4226..

This API is compatible with Google Authenticator apps available for Android and iPhone. You can follow the instructions here to install Google Authenticator.

	Project Info
License:	Apache License, Version 2.0
Build:	Maven
Documentation:	https://aerogear.org/docs/
Issue tracker:	https://issues.jboss.org/browse/AGSEC
Mailing lists:	aerogear-users (subscribe)
	aerogear-dev (subscribe)

Usage

Android Studio

Add to your application's build.gradle file

dependencies {
  compile 'org.jboss.aerogear:aerogear-otp-java:1.0.0'
}

Maven

Include the following dependencies in your project's pom.xml

<dependency>
  <groupId>org.jboss.aerogear</groupId>
  <artifactId>aerogear-otp-java</artifactId>
  <version>1.0.0</version>
</dependency>

Demo apps

Take a look in our demo apps

Android
iOS

If you wanna test thoses app without need to run you own server you can use the browser-authenticator page

Documentation

For more details about the current release, please consult our documentation.

Development

If you would like to help develop AeroGear you can join our developer's mailing list, join #aerogear on Freenode, or shout at us on Twitter @aerogears.

Also takes some time and skim the contributor guide

Questions?

Join our user mailing list for any questions or help! We really hope you enjoy app development with AeroGear!

Found a bug?

If you found a bug please create a ticket for us on Jira with some steps to reproduce it.

aerogear-otp-java's People

Contributors

Stargazers

Watchers

Forkers

lholmquist manzke danw cvasilak chandanpasunoori travisspencer albert-ozaeta miamarti yingsean lichong19880911 lfryc edewit boazy sskdb07 michiyoct yonchev others-cdrone mpetris waar19 dufabricio thomasliasn yoraco valens254 daengky davesnowdon zhonghai sujeshthekkepatt livotov sauravmndl-zz rgolangh yuzun gepukz karkaletsis divarvel sheikhshamirshakir aminempdam bobylevd reej fieldju oucem nku915 archetipo xxfatai nandadotexe xdgimf antoniodesouza chakra-coder kumar-asista suthariy onceclick nohadbadreddine s202071 debenson gomoretec itguygokul aminroslan rodrigovenancio tool-recommender-bot marjanakarzek thestift imran536 khongthequenbluestar sgumirov jtaiwaijin rpratap9058 gertjangaillet sz429194802 rajeshchy lcroot brainagenet gaffy94 helloong pwsunf wowb21 bataware byungjun25 jurakp obreckoff psychomantis71 iluvtr uni-hamburg do-khac-hung amolnikamspeedy a546388268 yograthi iq-scm tomones

aerogear-otp-java's Issues

Any recommended way to encrypt the secret?

Is there any recommended way to encrypt to secret instead of storing it plain in database?

How long is the old otp code valid?

It seems its longer than the 30 secs configurered.. Any explanation how long it should be valid?

Basic code example doesn't work

Hello,
I am kind of surprised that even your main example on your git readme doesn't work. Even though you haven't work in years for this library, I guess it worked at some moment, but someone probably crashed it some time ago and pushed it. It would be nice, if you change it to "deprecated and not working" instead of keeping it up without any comments...

Thanks

Why verify param is a string?

It is a long expected, isn't?

Delay window should be configurable

The delay window is set to 1 and it cannot be changed.

I want to change the delay window.

Make it configurable:
totp.setDelayWindow(int delayWindow);

Error: Illegal character: _, underscore character

I have an error, when I try use secret word: "SECRET_SHOWN_BY_BITSKINS"

org.jboss.aerogear.security.otp.api.Base32$DecodingException: Illegal character: _
My code:
Totp totp = new Totp("SECRET_SHOWN_BY_BITSKINS");
System.out.println(totp.now());
What I should to do?
I want try release this API:
https://bitskins.com/api/nodejs#totp_code

Labels containing a space sign are improperly encoded in the Totp.uri method output

UrlEncoder encodes spaces as + instead of %20, which is consistent with application/x-www-form-urlencoded and OK in query strings, but causes an error if it's in other components.

A solution would be to use java.net.URI to build the uri. I can write a PR if needed.

Leading zeros

Hey,

I found out that under specific circumstances the generated token is missing the leading zeros.

You can easily test it with:

secret "R5MB5FAQNX5UIPWL"
interval "45187109"
generated token "2941" but should be "002941"

Totp totp = new Totp("R5MB5FAQNX5UIPWL", new Clock(){
@OverRide
public long getCurrentInterval() {
return 45187109;
}
});

Support for SHA-256/512?

Are there any plans to add SHA-256/512 in addition to the "broken" SHA-1?

java.lang.ArrayIndexOutOfBoundsException: length=0; index=-1

Hi, I have one question. When I started using your library I tested it on android 5.1.1 and all were ok, but when I start app on the android 4.2 app fall down with this exception.

On this line topt.now()).

Can you please help me?

There are my exception list:
11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: 11-21 12:47:32.955 13002-13002/com.grand.capital.app E/AndroidRuntime: FATAL EXCEPTION: main
Process: com.grand.capital.app, PID: 13002
java.lang.ArrayIndexOutOfBoundsException: length=0; index=-1
at org.jboss.aerogear.security.otp.Totp.bytesToInt(Totp.java:134)
at org.jboss.aerogear.security.otp.Totp.hash(Totp.java:129)
at org.jboss.aerogear.security.otp.Totp.now(Totp.java:79)
at com.grand.capital.app.ui.OneTimeCodeFragment.onCreateView(OneTimeCodeFragment.java:37)
at android.support.v4.app.Fragment.performCreateView(Fragment.java:1965)
at android.support.v4.app.FragmentManagerImpl.moveToState(FragmentManager.java:1078)
at android.support.v4.app.FragmentManagerImpl.moveToState(FragmentManager.java:1259)
at android.support.v4.app.BackStackRecord.run(BackStackRecord.java:738)
at android.support.v4.app.FragmentManagerImpl.execPendingActions(FragmentManager.java:1624)
at android.support.v4.app.FragmentManagerImpl$1.run(FragmentManager.java:517)
at android.os.Handler.handleCallback(Handler.java:733)
at android.os.Handler.dispatchMessage(Handler.java:95)
at android.os.Looper.loop(Looper.java:137)
at android.app.ActivityThread.main(ActivityThread.java:4998)
at java.lang.reflect.Method.invokeNative(Native Method)
at java.lang.reflect.Method.invoke(Method.java:515)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:777)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:593)
at dalvik.system.NativeStart.main(Native Method)

Totp.now() throws NullPointerException using Clock with custom interval

calendar variable is not initialized if using the follow constructor to create Clock instance with custom interval.

    public Clock(int interval) {
        this.interval = interval;
    }

This in turn will cause Totp.now() to throw NullPointerException.