IssueRaiser

I recently implemented TOTP authentication[1] for a webapp of mine.

I recently implemented TOTP authentication[1] for a webapp of mine. Then I decided to extract it into its own web service offering, because I thought it was one of those things that was easy for people to implement insecurely if they weren't careful. This is the V1. I'm trying to get a sense of whether implementing TOTP auth is a pain point for anyone and to develop this project further. The way it works is that you redirect your website's users to it for authentication or master secret provisioning, and it redirects them back to you with a pass/fail response when done. [1] http://en.wikipedia.org/wiki/Time-based_One-time_Password_Al...

Posted by 29J on Aug 23, 2014, 2:42 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.9,000 issues0 comments

reliability (Other)

I recently implemented TOTP authentication[1] for a webapp of mine.

29JAug 23, 2014, 2:42 AM

I recently implemented TOTP authentication[1] for a webapp of mine. Then I decided to extract it into its own web service offering, because I thought it was one of those things that was easy for people to implement insecurely if they weren't careful. This is the V1. I'm trying to get a sense of whether implementing TOTP auth is a pain point for anyone and to develop this project further. The way it works is that you redirect your website's users to it for authentication or master secret provisioning, and it redirects them back to you with a pass/fail response when done. [1] http://en.wikipedia.org/wiki/Time-based_One-time_Password_Al...

Comments (0)

No comments yet. Start the discussion.

Comment on this issue