Download the PHP package componenta/auth-totp without Composer
On this page you can find all versions of the php package componenta/auth-totp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download componenta/auth-totp
More information about componenta/auth-totp
Files in componenta/auth-totp
Download componenta/auth-totp
More information about componenta/auth-totp
Files in componenta/auth-totp
Vendor componenta
Package auth-totp
Short Description Encrypted TOTP enrollment and reauthentication for Componenta Auth 3
License MIT
Package auth-totp
Short Description Encrypted TOTP enrollment and reauthentication for Componenta Auth 3
License MIT
Please rate this library. Is it a good library?
Informations about the package auth-totp
Componenta Auth TOTP
Encrypted TOTP enrollment and reauthentication for Componenta Auth 3.
The package uses spomky-labs/otphp for RFC 6238 verification and libsodium
XChaCha20-Poly1305 for secret encryption at rest.
Security properties:
- raw TOTP secrets are returned only during enrollment and are never stored;
- database rows contain authenticated ciphertext + nonce + key id;
- accepted time steps are persisted and cannot be replayed;
- enrollment must be confirmed with a valid code before the credential becomes active;
- pending enrollment secrets expire after a bounded server-side TTL (10 minutes by default);
- TOTP evidence adds a possession factor but never claims phishing resistance;
- successful reauthentication rotates the active
SessionCredential.
All versions of auth-totp with dependencies
PHP Build Version
Package Version
Requires
php Version
^8.4
ext-sodium Version *
componenta/auth Version ^3.0
componenta/auth-session Version ^1.0
componenta/auth-session-http Version ^1.0
componenta/identity Version ^1.0.1
cycle/database Version ^2.22
psr/clock Version ^1.0
psr/http-factory Version ^1.0
psr/http-message Version ^2.0
psr/http-server-handler Version ^1.0
spomky-labs/otphp Version ^11.5
ext-sodium Version *
componenta/auth Version ^3.0
componenta/auth-session Version ^1.0
componenta/auth-session-http Version ^1.0
componenta/identity Version ^1.0.1
cycle/database Version ^2.22
psr/clock Version ^1.0
psr/http-factory Version ^1.0
psr/http-message Version ^2.0
psr/http-server-handler Version ^1.0
spomky-labs/otphp Version ^11.5
The package componenta/auth-totp contains the following files
Loading the files please wait ...