Download the PHP package covaleski/otp without Composer
On this page you can find all versions of the php package covaleski/otp. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download covaleski/otp
More information about covaleski/otp
Files in covaleski/otp
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package otp
OTP
PHP implementation of RFC 4226 and RFC 6238. Generates one-time passwords.
Provides a ready-to-use TOTP class for easy integration with authenticator apps along with an extensible HOTP class for custom one-time password implementations.
1 Installation
2 Usage
2.1 TOTP
The Totp class can be used to:
- Emit codes;
- Validate received codes;
- Create URIs for QR code generation.
2.1.1 Creating URIs
Authenticator QR codes are just the OTP URIs encoded as a QR code. Follow the steps below to create the URI.
You can output the URI as a QR code using any library of your choice.
2.1.2 Generating and validating codes
Use getPassword() to get the current code.
2.1.3 Customizing
You can change several parameters of your generator. The example below creates a TOTP object that:
- Outputs 8-digit codes;
- Change the code every 15 seconds;
- Calculates the code with a time offset of 1 hour.
Note that some implementations may ignore or even reject one or more custom TOTP parameters. The most compatible configuration (usually) is to generate 6-digit codes every 30 seconds with no time offset.
2.2 Custom HOTP implementation
You can extend the Covaleski\Otp\Hotp to create your own one-time password implementation.
Extensions must provide two methods: getCounter() and getUri(). The first one must output the current counter as an 8-byte binary string (e.g. a time counter), and the second is responsible for providing the integration URI.
Furthermore, the Hotp class will do the rest and:
- Generate the HMAC-SHA-1 string;
- Dinamically truncate the HMAC binary string;
- Compute the HOTP value and output the required amount of digits.
See how the methods are implemented in the Covaleski\Otp\Totp class:
The Totp class depends on time to create its counter and encode its secrets as base32 strings when creating the URI.
3 Testing
Tests were made with PHPUnit. Use the following command to run them.
