PyOTP 2.2.1__py2.py3-none-any.whl → 2.2.5__py2.py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pyotp/hotp.py +28 -13
- pyotp/otp.py +14 -11
- pyotp/totp.py +38 -16
- pyotp/utils.py +18 -10
- {pyotp-2.2.1.dist-info → pyotp-2.2.5.dist-info}/DESCRIPTION.rst +20 -10
- {pyotp-2.2.1.dist-info → pyotp-2.2.5.dist-info}/METADATA +21 -11
- pyotp-2.2.5.dist-info/RECORD +12 -0
- {pyotp-2.2.1.dist-info → pyotp-2.2.5.dist-info}/metadata.json +1 -1
- pyotp-2.2.1.dist-info/RECORD +0 -12
- {pyotp-2.2.1.dist-info → pyotp-2.2.5.dist-info}/WHEEL +0 -0
- {pyotp-2.2.1.dist-info → pyotp-2.2.5.dist-info}/top_level.txt +0 -0
pyotp/hotp.py
CHANGED
|
@@ -5,32 +5,47 @@ from .otp import OTP
|
|
|
5
5
|
from .compat import str
|
|
6
6
|
|
|
7
7
|
class HOTP(OTP):
|
|
8
|
+
"""
|
|
9
|
+
Handler for HMAC-based OTP counters.
|
|
10
|
+
"""
|
|
8
11
|
def at(self, count):
|
|
9
12
|
"""
|
|
10
|
-
Generates the OTP for the given count
|
|
11
|
-
|
|
12
|
-
|
|
13
|
+
Generates the OTP for the given count.
|
|
14
|
+
|
|
15
|
+
:param count: the OTP HMAC counter
|
|
16
|
+
:type count: int
|
|
17
|
+
:returns: OTP
|
|
18
|
+
:rtype: str
|
|
13
19
|
"""
|
|
14
20
|
return self.generate_otp(count)
|
|
15
21
|
|
|
16
22
|
def verify(self, otp, counter):
|
|
17
23
|
"""
|
|
18
|
-
Verifies the OTP passed in against the current time OTP
|
|
19
|
-
|
|
20
|
-
|
|
24
|
+
Verifies the OTP passed in against the current time OTP.
|
|
25
|
+
|
|
26
|
+
:param otp: the OTP to check against
|
|
27
|
+
:type otp: str
|
|
28
|
+
:param count: the OTP HMAC counter
|
|
29
|
+
:type count: int
|
|
21
30
|
"""
|
|
22
31
|
return utils.strings_equal(str(otp), str(self.at(counter)))
|
|
23
32
|
|
|
24
33
|
def provisioning_uri(self, name, initial_count=0, issuer_name=None):
|
|
25
34
|
"""
|
|
26
|
-
Returns the provisioning URI for the OTP
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
35
|
+
Returns the provisioning URI for the OTP. This can then be
|
|
36
|
+
encoded in a QR Code and used to provision an OTP app like
|
|
37
|
+
Google Authenticator. See
|
|
38
|
+
https://github.com/google/google-authenticator/wiki/Key-Uri-Format
|
|
39
|
+
for more details.
|
|
40
|
+
|
|
41
|
+
:param name: name of the user account
|
|
42
|
+
:type name: str
|
|
43
|
+
:param initial_count: starting HMAC counter value, defaults to 0
|
|
44
|
+
:type initial_count: int
|
|
45
|
+
:param issuer_name: the name of the OTP issuer; this will be the
|
|
32
46
|
organization title of the OTP entry in Authenticator
|
|
33
|
-
|
|
47
|
+
:returns: provisioning URI
|
|
48
|
+
:rtype: str
|
|
34
49
|
"""
|
|
35
50
|
return utils.build_uri(
|
|
36
51
|
self.secret,
|
pyotp/otp.py
CHANGED
|
@@ -6,16 +6,17 @@ import hmac
|
|
|
6
6
|
from .compat import str
|
|
7
7
|
|
|
8
8
|
class OTP(object):
|
|
9
|
+
"""
|
|
10
|
+
Base class for OTP handlers.
|
|
11
|
+
"""
|
|
9
12
|
def __init__(self, s, digits=6, digest=hashlib.sha1):
|
|
10
13
|
"""
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
Google Authenticate only supports 'sha1' currently
|
|
18
|
-
@returns [OTP] OTP instantiation
|
|
14
|
+
:param s: secret in base32 format
|
|
15
|
+
:type s: str
|
|
16
|
+
:param digits: number of integers in the OTP. Some apps expect this to be 6 digits, others support more.
|
|
17
|
+
:type digits: int
|
|
18
|
+
:param digest: digest function to use in the HMAC (expected to be sha1)
|
|
19
|
+
:type digest: callable
|
|
19
20
|
"""
|
|
20
21
|
self.digits = digits
|
|
21
22
|
self.digest = digest
|
|
@@ -23,10 +24,12 @@ class OTP(object):
|
|
|
23
24
|
|
|
24
25
|
def generate_otp(self, input):
|
|
25
26
|
"""
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
27
|
+
:param input: the HMAC counter value to use as the OTP input.
|
|
28
|
+
Usually either the counter, or the computed integer based on the Unix timestamp
|
|
29
|
+
:type input: int
|
|
29
30
|
"""
|
|
31
|
+
if input < 0:
|
|
32
|
+
raise ValueError('input must be positive integer')
|
|
30
33
|
hasher = hmac.new(self.byte_secret(), self.int_to_bytestring(input), self.digest)
|
|
31
34
|
hmac_hash = bytearray(hasher.digest())
|
|
32
35
|
offset = hmac_hash[-1] & 0xf
|
pyotp/totp.py
CHANGED
|
@@ -8,20 +8,27 @@ from .otp import OTP
|
|
|
8
8
|
from .compat import str
|
|
9
9
|
|
|
10
10
|
class TOTP(OTP):
|
|
11
|
+
"""
|
|
12
|
+
Handler for time-based OTP counters.
|
|
13
|
+
"""
|
|
11
14
|
def __init__(self, *args, **kwargs):
|
|
12
15
|
"""
|
|
13
|
-
|
|
14
|
-
for OTP This defaults to 30
|
|
16
|
+
:param interval: the time interval in seconds
|
|
17
|
+
for OTP. This defaults to 30.
|
|
18
|
+
:type interval: int
|
|
15
19
|
"""
|
|
16
20
|
self.interval = kwargs.pop('interval', 30)
|
|
17
21
|
super(TOTP, self).__init__(*args, **kwargs)
|
|
18
22
|
|
|
19
23
|
def at(self, for_time, counter_offset=0):
|
|
20
24
|
"""
|
|
21
|
-
Accepts either a Unix timestamp integer or a
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
+
Accepts either a Unix timestamp integer or a datetime object.
|
|
26
|
+
|
|
27
|
+
:param for_time: the time to generate an OTP for
|
|
28
|
+
:type for_time: int or datetime
|
|
29
|
+
:param counter_offset: the amount of ticks to add to the time counter
|
|
30
|
+
:returns: OTP value
|
|
31
|
+
:rtype: str
|
|
25
32
|
"""
|
|
26
33
|
if not isinstance(for_time, datetime.datetime):
|
|
27
34
|
for_time = datetime.datetime.fromtimestamp(int(for_time))
|
|
@@ -30,16 +37,24 @@ class TOTP(OTP):
|
|
|
30
37
|
def now(self):
|
|
31
38
|
"""
|
|
32
39
|
Generate the current time OTP
|
|
33
|
-
|
|
40
|
+
|
|
41
|
+
:returns: OTP value
|
|
42
|
+
:rtype: str
|
|
34
43
|
"""
|
|
35
44
|
return self.generate_otp(self.timecode(datetime.datetime.now()))
|
|
36
45
|
|
|
37
46
|
def verify(self, otp, for_time=None, valid_window=0):
|
|
38
47
|
"""
|
|
39
|
-
Verifies the OTP passed in against the current time OTP
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
48
|
+
Verifies the OTP passed in against the current time OTP.
|
|
49
|
+
|
|
50
|
+
:param otp: the OTP to check against
|
|
51
|
+
:type otp: str
|
|
52
|
+
:param for_time: Time to check OTP at (defaults to now)
|
|
53
|
+
:type for_time: int or datetime
|
|
54
|
+
:param valid_window: extends the validity to this many counter ticks before and after the current one
|
|
55
|
+
:type valid_window: int
|
|
56
|
+
:returns: True if verification succeeded, False otherwise
|
|
57
|
+
:rtype: bool
|
|
43
58
|
"""
|
|
44
59
|
if for_time is None:
|
|
45
60
|
for_time = datetime.datetime.now()
|
|
@@ -54,11 +69,18 @@ class TOTP(OTP):
|
|
|
54
69
|
|
|
55
70
|
def provisioning_uri(self, name, issuer_name=None):
|
|
56
71
|
"""
|
|
57
|
-
Returns the provisioning URI for the OTP
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
72
|
+
Returns the provisioning URI for the OTP. This can then be
|
|
73
|
+
encoded in a QR Code and used to provision an OTP app like
|
|
74
|
+
Google Authenticator. See
|
|
75
|
+
https://github.com/google/google-authenticator/wiki/Key-Uri-Format
|
|
76
|
+
for more details.
|
|
77
|
+
|
|
78
|
+
:param name: name of the user account
|
|
79
|
+
:type name: str
|
|
80
|
+
:param issuer_name: the name of the OTP issuer; this will be the
|
|
81
|
+
organization title of the OTP entry in Authenticator
|
|
82
|
+
:returns: provisioning URI
|
|
83
|
+
:rtype: str
|
|
62
84
|
"""
|
|
63
85
|
return utils.build_uri(self.secret, name, issuer_name=issuer_name,
|
|
64
86
|
algorithm=self.digest().name,
|
pyotp/utils.py
CHANGED
|
@@ -25,17 +25,25 @@ def build_uri(secret, name, initial_count=None, issuer_name=None,
|
|
|
25
25
|
See also:
|
|
26
26
|
https://github.com/google/google-authenticator/wiki/Key-Uri-Format
|
|
27
27
|
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
28
|
+
:param secret: the hotp/totp secret used to generate the URI
|
|
29
|
+
:type secret: str
|
|
30
|
+
:param name: name of the account
|
|
31
|
+
:type name: str
|
|
32
|
+
:param initial_count: starting counter value, defaults to None.
|
|
31
33
|
If none, the OTP type will be assumed as TOTP.
|
|
32
|
-
|
|
34
|
+
:type initial_count: int
|
|
35
|
+
:param issuer_name: the name of the OTP issuer; this will be the
|
|
33
36
|
organization title of the OTP entry in Authenticator
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
+
:type issuer_name: str
|
|
38
|
+
:param algorithm: the algorithm used in the OTP generation.
|
|
39
|
+
:type algorithm: str
|
|
40
|
+
:param digits: the length of the OTP generated code.
|
|
41
|
+
:type digits: int
|
|
42
|
+
:param period: the number of seconds the OTP generator is set to
|
|
37
43
|
expire every code.
|
|
38
|
-
|
|
44
|
+
:type period: int
|
|
45
|
+
:returns: provisioning uri
|
|
46
|
+
:rtype: str
|
|
39
47
|
"""
|
|
40
48
|
# initial_count may be 0 as a valid param
|
|
41
49
|
is_initial_count_present = (initial_count is not None)
|
|
@@ -46,14 +54,14 @@ def build_uri(secret, name, initial_count=None, issuer_name=None,
|
|
|
46
54
|
is_period_set = (period is not None and period != 30)
|
|
47
55
|
|
|
48
56
|
otp_type = 'hotp' if is_initial_count_present else 'totp'
|
|
49
|
-
base_uri = 'otpauth://{}/{}?{}'
|
|
57
|
+
base_uri = 'otpauth://{0}/{1}?{2}'
|
|
50
58
|
|
|
51
59
|
url_args = {'secret': secret}
|
|
52
60
|
|
|
53
61
|
label = quote(name)
|
|
54
62
|
if issuer_name is not None:
|
|
55
63
|
label = quote(issuer_name) + ':' + label
|
|
56
|
-
url_args['issuer'] = issuer_name
|
|
64
|
+
url_args['issuer'] = quote(issuer_name)
|
|
57
65
|
|
|
58
66
|
if is_initial_count_present:
|
|
59
67
|
url_args['counter'] = initial_count
|
|
@@ -12,6 +12,8 @@ Authenticator <https://en.wikipedia.org/wiki/Google_Authenticator>`_, `Authy <ht
|
|
|
12
12
|
compatible app. Users can set up auth tokens in their apps easily by using their phone camera to scan `otpauth://
|
|
13
13
|
<https://github.com/google/google-authenticator/wiki/Key-Uri-Format>`_ QR codes provided by PyOTP.
|
|
14
14
|
|
|
15
|
+
We recommend that implementers read the `OWASP Authentication Cheat Sheet <https://www.owasp.org/index.php/Authentication_Cheat_Sheet>`_ and `NIST SP 800-63-3: Digital Authentication Guideline <https://pages.nist.gov/800-63-3/>`_ for a high level overview of authentication best practices.
|
|
16
|
+
|
|
15
17
|
Quick overview of using One Time Passwords on your phone
|
|
16
18
|
--------------------------------------------------------
|
|
17
19
|
|
|
@@ -29,7 +31,7 @@ Installation
|
|
|
29
31
|
Usage
|
|
30
32
|
-----
|
|
31
33
|
|
|
32
|
-
Time
|
|
34
|
+
Time-based OTPs
|
|
33
35
|
~~~~~~~~~~~~~~~
|
|
34
36
|
::
|
|
35
37
|
|
|
@@ -58,23 +60,29 @@ Generating a base32 Secret Key
|
|
|
58
60
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
59
61
|
::
|
|
60
62
|
|
|
61
|
-
pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator
|
|
63
|
+
pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator and other OTP apps
|
|
62
64
|
|
|
63
65
|
Google Authenticator Compatible
|
|
64
66
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
65
67
|
|
|
66
|
-
|
|
67
|
-
provisioning
|
|
68
|
+
PyOTP works with the Google Authenticator iPhone and Android app, as well as other OTP apps like Authy. PyOTP includes the
|
|
69
|
+
ability to generate provisioning URIs for use with the QR Code scanner built into these MFA client apps::
|
|
70
|
+
|
|
71
|
+
pyotp.totp.TOTP('JBSWY3DPEHPK3PXP').provisioning_uri("alice@google.com", issuer_name="Secure App")
|
|
72
|
+
|
|
73
|
+
>>> 'otpauth://totp/Secure%20App:alice%40google.com?secret=JBSWY3DPEHPK3PXP&issuer=Secure+App'
|
|
74
|
+
|
|
75
|
+
pyotp.hotp.HOTP('JBSWY3DPEHPK3PXP').provisioning_uri("alice@google.com", initial_count=0, issuer_name="Secure App")
|
|
68
76
|
|
|
69
|
-
|
|
70
|
-
hotp.provisioning_uri("alice@google.com", 0) # => 'otpauth://hotp/alice@google.com?secret=JBSWY3DPEHPK3PXP&counter=0'
|
|
77
|
+
>>> 'otpauth://hotp/Secure%20App:alice%40google.com?secret=JBSWY3DPEHPK3PXP&issuer=Secure+App&counter=0'
|
|
71
78
|
|
|
72
|
-
This can then be rendered as a QR Code which can then be scanned
|
|
79
|
+
This URL can then be rendered as a QR Code (for example, using https://github.com/neocotic/qrious) which can then be scanned
|
|
80
|
+
and added to the users list of OTP credentials.
|
|
73
81
|
|
|
74
82
|
Working example
|
|
75
83
|
~~~~~~~~~~~~~~~
|
|
76
84
|
|
|
77
|
-
Scan the following barcode with your phone
|
|
85
|
+
Scan the following barcode with your phone's OTP app (e.g. Google Authenticator):
|
|
78
86
|
|
|
79
87
|
.. image:: http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2Falice%40google.com%3Fsecret%3DJBSWY3DPEHPK3PXP
|
|
80
88
|
|
|
@@ -88,13 +96,15 @@ Links
|
|
|
88
96
|
~~~~~
|
|
89
97
|
|
|
90
98
|
* `Project home page (GitHub) <https://github.com/pyotp/pyotp>`_
|
|
91
|
-
* `Documentation (Read the Docs) <https://pyotp.readthedocs.
|
|
99
|
+
* `Documentation (Read the Docs) <https://pyotp.readthedocs.io/en/latest/>`_
|
|
92
100
|
* `Package distribution (PyPI) <https://pypi.python.org/pypi/pyotp>`_
|
|
93
101
|
* `Change log <https://github.com/pyotp/pyotp/blob/master/Changes.rst>`_
|
|
94
102
|
* `RFC 4226: HOTP: An HMAC-Based One-Time Password <https://tools.ietf.org/html/rfc4226>`_
|
|
95
103
|
* `RFC 6238: TOTP: Time-Based One-Time Password Algorithm <https://tools.ietf.org/html/rfc6238>`_
|
|
96
104
|
* `ROTP <https://github.com/mdp/rotp>`_ - Original Ruby OTP library by `Mark Percival <https://github.com/mdp>`_
|
|
97
105
|
* `OTPHP <https://github.com/lelag/otphp>`_ - PHP port of ROTP by `Le Lag <https://github.com/lelag>`_
|
|
106
|
+
* `OWASP Authentication Cheat Sheet <https://www.owasp.org/index.php/Authentication_Cheat_Sheet>`_
|
|
107
|
+
* `NIST SP 800-63-3: Digital Authentication Guideline <https://pages.nist.gov/800-63-3/>`_
|
|
98
108
|
|
|
99
109
|
.. image:: https://img.shields.io/travis/pyotp/pyotp.svg
|
|
100
110
|
:target: https://travis-ci.org/pyotp/pyotp
|
|
@@ -105,6 +115,6 @@ Links
|
|
|
105
115
|
.. image:: https://img.shields.io/pypi/l/pyotp.svg
|
|
106
116
|
:target: https://pypi.python.org/pypi/pyotp
|
|
107
117
|
.. image:: https://readthedocs.org/projects/pyotp/badge/?version=latest
|
|
108
|
-
:target: https://pyotp.readthedocs.
|
|
118
|
+
:target: https://pyotp.readthedocs.io/
|
|
109
119
|
|
|
110
120
|
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.0
|
|
2
2
|
Name: pyotp
|
|
3
|
-
Version: 2.2.
|
|
3
|
+
Version: 2.2.5
|
|
4
4
|
Summary: Python One Time Password Library
|
|
5
5
|
Home-page: https://github.com/pyotp/pyotp
|
|
6
6
|
Author: PyOTP contributors
|
|
@@ -32,6 +32,8 @@ Authenticator <https://en.wikipedia.org/wiki/Google_Authenticator>`_, `Authy <ht
|
|
|
32
32
|
compatible app. Users can set up auth tokens in their apps easily by using their phone camera to scan `otpauth://
|
|
33
33
|
<https://github.com/google/google-authenticator/wiki/Key-Uri-Format>`_ QR codes provided by PyOTP.
|
|
34
34
|
|
|
35
|
+
We recommend that implementers read the `OWASP Authentication Cheat Sheet <https://www.owasp.org/index.php/Authentication_Cheat_Sheet>`_ and `NIST SP 800-63-3: Digital Authentication Guideline <https://pages.nist.gov/800-63-3/>`_ for a high level overview of authentication best practices.
|
|
36
|
+
|
|
35
37
|
Quick overview of using One Time Passwords on your phone
|
|
36
38
|
--------------------------------------------------------
|
|
37
39
|
|
|
@@ -49,7 +51,7 @@ Installation
|
|
|
49
51
|
Usage
|
|
50
52
|
-----
|
|
51
53
|
|
|
52
|
-
Time
|
|
54
|
+
Time-based OTPs
|
|
53
55
|
~~~~~~~~~~~~~~~
|
|
54
56
|
::
|
|
55
57
|
|
|
@@ -78,23 +80,29 @@ Generating a base32 Secret Key
|
|
|
78
80
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
79
81
|
::
|
|
80
82
|
|
|
81
|
-
pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator
|
|
83
|
+
pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator and other OTP apps
|
|
82
84
|
|
|
83
85
|
Google Authenticator Compatible
|
|
84
86
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
85
87
|
|
|
86
|
-
|
|
87
|
-
provisioning
|
|
88
|
+
PyOTP works with the Google Authenticator iPhone and Android app, as well as other OTP apps like Authy. PyOTP includes the
|
|
89
|
+
ability to generate provisioning URIs for use with the QR Code scanner built into these MFA client apps::
|
|
90
|
+
|
|
91
|
+
pyotp.totp.TOTP('JBSWY3DPEHPK3PXP').provisioning_uri("alice@google.com", issuer_name="Secure App")
|
|
92
|
+
|
|
93
|
+
>>> 'otpauth://totp/Secure%20App:alice%40google.com?secret=JBSWY3DPEHPK3PXP&issuer=Secure+App'
|
|
94
|
+
|
|
95
|
+
pyotp.hotp.HOTP('JBSWY3DPEHPK3PXP').provisioning_uri("alice@google.com", initial_count=0, issuer_name="Secure App")
|
|
88
96
|
|
|
89
|
-
|
|
90
|
-
hotp.provisioning_uri("alice@google.com", 0) # => 'otpauth://hotp/alice@google.com?secret=JBSWY3DPEHPK3PXP&counter=0'
|
|
97
|
+
>>> 'otpauth://hotp/Secure%20App:alice%40google.com?secret=JBSWY3DPEHPK3PXP&issuer=Secure+App&counter=0'
|
|
91
98
|
|
|
92
|
-
This can then be rendered as a QR Code which can then be scanned
|
|
99
|
+
This URL can then be rendered as a QR Code (for example, using https://github.com/neocotic/qrious) which can then be scanned
|
|
100
|
+
and added to the users list of OTP credentials.
|
|
93
101
|
|
|
94
102
|
Working example
|
|
95
103
|
~~~~~~~~~~~~~~~
|
|
96
104
|
|
|
97
|
-
Scan the following barcode with your phone
|
|
105
|
+
Scan the following barcode with your phone's OTP app (e.g. Google Authenticator):
|
|
98
106
|
|
|
99
107
|
.. image:: http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2Falice%40google.com%3Fsecret%3DJBSWY3DPEHPK3PXP
|
|
100
108
|
|
|
@@ -108,13 +116,15 @@ Links
|
|
|
108
116
|
~~~~~
|
|
109
117
|
|
|
110
118
|
* `Project home page (GitHub) <https://github.com/pyotp/pyotp>`_
|
|
111
|
-
* `Documentation (Read the Docs) <https://pyotp.readthedocs.
|
|
119
|
+
* `Documentation (Read the Docs) <https://pyotp.readthedocs.io/en/latest/>`_
|
|
112
120
|
* `Package distribution (PyPI) <https://pypi.python.org/pypi/pyotp>`_
|
|
113
121
|
* `Change log <https://github.com/pyotp/pyotp/blob/master/Changes.rst>`_
|
|
114
122
|
* `RFC 4226: HOTP: An HMAC-Based One-Time Password <https://tools.ietf.org/html/rfc4226>`_
|
|
115
123
|
* `RFC 6238: TOTP: Time-Based One-Time Password Algorithm <https://tools.ietf.org/html/rfc6238>`_
|
|
116
124
|
* `ROTP <https://github.com/mdp/rotp>`_ - Original Ruby OTP library by `Mark Percival <https://github.com/mdp>`_
|
|
117
125
|
* `OTPHP <https://github.com/lelag/otphp>`_ - PHP port of ROTP by `Le Lag <https://github.com/lelag>`_
|
|
126
|
+
* `OWASP Authentication Cheat Sheet <https://www.owasp.org/index.php/Authentication_Cheat_Sheet>`_
|
|
127
|
+
* `NIST SP 800-63-3: Digital Authentication Guideline <https://pages.nist.gov/800-63-3/>`_
|
|
118
128
|
|
|
119
129
|
.. image:: https://img.shields.io/travis/pyotp/pyotp.svg
|
|
120
130
|
:target: https://travis-ci.org/pyotp/pyotp
|
|
@@ -125,6 +135,6 @@ Links
|
|
|
125
135
|
.. image:: https://img.shields.io/pypi/l/pyotp.svg
|
|
126
136
|
:target: https://pypi.python.org/pypi/pyotp
|
|
127
137
|
.. image:: https://readthedocs.org/projects/pyotp/badge/?version=latest
|
|
128
|
-
:target: https://pyotp.readthedocs.
|
|
138
|
+
:target: https://pyotp.readthedocs.io/
|
|
129
139
|
|
|
130
140
|
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
pyotp/__init__.py,sha256=3I4NkdbXw4iHBbtfL7-dbNv8XZn0EUzS0Fc1riI1CJ8,485
|
|
2
|
+
pyotp/compat.py,sha256=QVb4buImn4PyP0qe5uLiXsO2-p4ItTGl01Vbt2dILNE,222
|
|
3
|
+
pyotp/hotp.py,sha256=BsY90HvawLuye4PuY7Q5DY0_HmR-83N1FVfwuw-SunI,1776
|
|
4
|
+
pyotp/otp.py,sha256=QPyHxZ7fY7_zlrMVVveGQrCfn6gatpaHO3-ok9XwCaU,2344
|
|
5
|
+
pyotp/totp.py,sha256=C734M9EaFqCFa2G0bzpJ6sW1M9bIwJj8Ib3BMuztHGE,3175
|
|
6
|
+
pyotp/utils.py,sha256=op4qfvo-b4sE5zFeRIOW7jhC6LXXLuODjNaEFYdZh-4,3482
|
|
7
|
+
pyotp-2.2.5.dist-info/DESCRIPTION.rst,sha256=FASDLIZAvjB-IGhzvwZRnNvFvh7KroZk0cvfezrj9JA,5471
|
|
8
|
+
pyotp-2.2.5.dist-info/METADATA,sha256=uVlep_WEqWdYGLTAo528H7ZJI-XKCgTNCM1yHMth3co,6167
|
|
9
|
+
pyotp-2.2.5.dist-info/RECORD,,
|
|
10
|
+
pyotp-2.2.5.dist-info/WHEEL,sha256=o2k-Qa-RMNIJmUdIc7KU6VWR_ErNRbWNlxDIpl7lm34,110
|
|
11
|
+
pyotp-2.2.5.dist-info/metadata.json,sha256=pG8Q257aEUFTs4h1opMfmDLYhP6Cl2RawF1ZFBOdY8M,825
|
|
12
|
+
pyotp-2.2.5.dist-info/top_level.txt,sha256=rFDgz6Sm4nbkYk6tlSRiMcJPyYdnY6LcZiAaYTxVc5k,6
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"classifiers": ["Intended Audience :: Developers", "License :: OSI Approved :: BSD License", "Operating System :: MacOS :: MacOS X", "Operating System :: POSIX", "Programming Language :: Python", "Programming Language :: Python :: 2.7", "Programming Language :: Python :: 3.3", "Programming Language :: Python :: 3.4", "Topic :: Software Development :: Libraries :: Python Modules"], "extensions": {"python.details": {"contacts": [{"email": "kislyuk@gmail.com", "name": "PyOTP contributors", "role": "author"}], "document_names": {"description": "DESCRIPTION.rst"}, "project_urls": {"Home": "https://github.com/pyotp/pyotp"}}}, "generator": "bdist_wheel (0.29.0)", "license": "BSD License", "metadata_version": "2.0", "name": "pyotp", "platform": "MacOS X", "summary": "Python One Time Password Library", "version": "2.2.
|
|
1
|
+
{"classifiers": ["Intended Audience :: Developers", "License :: OSI Approved :: BSD License", "Operating System :: MacOS :: MacOS X", "Operating System :: POSIX", "Programming Language :: Python", "Programming Language :: Python :: 2.7", "Programming Language :: Python :: 3.3", "Programming Language :: Python :: 3.4", "Topic :: Software Development :: Libraries :: Python Modules"], "extensions": {"python.details": {"contacts": [{"email": "kislyuk@gmail.com", "name": "PyOTP contributors", "role": "author"}], "document_names": {"description": "DESCRIPTION.rst"}, "project_urls": {"Home": "https://github.com/pyotp/pyotp"}}}, "generator": "bdist_wheel (0.29.0)", "license": "BSD License", "metadata_version": "2.0", "name": "pyotp", "platform": "MacOS X", "summary": "Python One Time Password Library", "version": "2.2.5"}
|
pyotp-2.2.1.dist-info/RECORD
DELETED
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
pyotp/__init__.py,sha256=3I4NkdbXw4iHBbtfL7-dbNv8XZn0EUzS0Fc1riI1CJ8,485
|
|
2
|
-
pyotp/compat.py,sha256=QVb4buImn4PyP0qe5uLiXsO2-p4ItTGl01Vbt2dILNE,222
|
|
3
|
-
pyotp/hotp.py,sha256=npnuKlg4NWg5XLv2p3cMrDbtjZB24hpeQVNquFpMZdM,1467
|
|
4
|
-
pyotp/otp.py,sha256=pyX-Rdo6AyyRAotMv-rAOQh82JtXp5tfCreIKmIq93E,2262
|
|
5
|
-
pyotp/totp.py,sha256=2gk1cr-F3G8QBbkdSLggmKmWhEB3NqcQbhJTs6sAlvs,2561
|
|
6
|
-
pyotp/utils.py,sha256=kNwgfDnm1jlAyJeDf3bGtA4Olg9NzkZVHoHPK7OegGo,3307
|
|
7
|
-
pyotp-2.2.1.dist-info/DESCRIPTION.rst,sha256=VEX6K-7MXd4G-xKz2XuJXZyPrmNi4Gv5M2eJMJ208jU,4657
|
|
8
|
-
pyotp-2.2.1.dist-info/METADATA,sha256=JqhyRbosUDjj0Kj4oKWIeODbXQcpk7xg-3YecJAusa4,5353
|
|
9
|
-
pyotp-2.2.1.dist-info/RECORD,,
|
|
10
|
-
pyotp-2.2.1.dist-info/WHEEL,sha256=o2k-Qa-RMNIJmUdIc7KU6VWR_ErNRbWNlxDIpl7lm34,110
|
|
11
|
-
pyotp-2.2.1.dist-info/metadata.json,sha256=pIO9EU3zTtJEh4U6l6YQsZXK1TtPFU6iZvJiV0ZVSyk,825
|
|
12
|
-
pyotp-2.2.1.dist-info/top_level.txt,sha256=rFDgz6Sm4nbkYk6tlSRiMcJPyYdnY6LcZiAaYTxVc5k,6
|
|
File without changes
|
|
File without changes
|