minitotp 0.1.0__tar.gz

minitotp-0.1.0/PKG-INFO

@@ -0,0 +1,12 @@
+Metadata-Version: 2.4
+Name: minitotp
+Version: 0.1.0
+Summary: Standard TOTP (RFC6238) two-factor authentication SDK, pure standard library
+License: MIT
+Keywords: totp,2fa,otpauth,rfc6238,hotp,security
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Topic :: Security
+Requires-Python: >=3.7
+Provides-Extra: qr
+Requires-Dist: qrcode[pil]; extra == "qr"

minitotp-0.1.0/minitotp/__init__.py

@@ -0,0 +1,23 @@
+# minitotp —— 标准 TOTP（RFC6238）二次验证 SDK（纯标准库）
+"""Standard TOTP (RFC6238) two-factor authentication SDK.
+
+Pure standard-library implementation. Provides secret generation, otpauth
+URI building, optional QR SVG, TOTP calculation and verification.
+"""
+
+from .wxtotp import (
+    generate_secret,
+    build_otpauth_uri,
+    generate_qr_svg,
+    calc_totp,
+    verify_code,
+)
+
+__version__ = "0.1.0"
+__all__ = [
+    "generate_secret",
+    "build_otpauth_uri",
+    "generate_qr_svg",
+    "calc_totp",
+    "verify_code",
+]

minitotp-0.1.0/minitotp/base32.py

@@ -0,0 +1,27 @@
+# sdk/python/base32.py —— RFC4648 Base32（纯标准库实现）
+import re
+
+_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"
+_ALPHABET_REVERSE = {c: i for i, c in enumerate(_ALPHABET)}
+
+
+def b32decode(s):
+    """Base32 解码，忽略大小写与非 base32 字符，返回 bytes。"""
+    s = s.upper()
+    s = re.sub(r"[^A-Z2-7]", "", s)
+    bits = ""
+    for c in s:
+        bits += format(_ALPHABET_REVERSE[c], "05b")
+    out = bytearray()
+    for i in range(0, len(bits) - 7, 8):
+        out.append(int(bits[i:i + 8], 2))
+    return bytes(out)
+
+
+def b32encode(buf):
+    """Base32 编码（无填充），返回 str。"""
+    bits = "".join(format(b, "08b") for b in buf)
+    out = []
+    for i in range(0, len(bits) - 4, 5):
+        out.append(_ALPHABET[int(bits[i:i + 5], 2)])
+    return "".join(out)

minitotp-0.1.0/minitotp/wxtotp.py

@@ -0,0 +1,61 @@
+# sdk/python/wxtotp.py —— TOTP 后端 SDK（RFC6238），仅用标准库
+import os
+import hmac
+import hashlib
+import time
+from urllib.parse import quote
+from .base32 import b32decode, b32encode
+
+
+def generate_secret(bits=160):
+    """生成 base32 编码随机密钥（加密安全随机）。"""
+    raw = os.urandom((bits + 7) // 8)
+    return b32encode(raw)
+
+
+def build_otpauth_uri(issuer, account, secret, period=30, digits=6):
+    """构造 otpauth://totp URI。"""
+    return (
+        f"otpauth://totp/{quote(issuer)}:{quote(account)}"
+        f"?secret={secret}&issuer={quote(issuer)}&period={period}"
+        f"&digits={digits}&algorithm=SHA1"
+    )
+
+
+def generate_qr_svg(uri):
+    """生成二维码 SVG 文本（可选依赖 qrcode 库）。"""
+    try:
+        import qrcode
+        from io import BytesIO
+    except ImportError:
+        raise RuntimeError(
+            "可选依赖 qrcode 未安装。请先 pip install qrcode[pil]，或用标准库版本跳过二维码。"
+        )
+    img = qrcode.make(uri)
+    buf = BytesIO()
+    img.save(buf, format="SVG")
+    return buf.getvalue().decode("utf-8")
+
+
+def calc_totp(secret_b32, ts=None, period=30, digits=6):
+    """计算 TOTP 验证码。"""
+    if ts is None:
+        ts = time.time()
+    key = b32decode(secret_b32)
+    t_int = int(ts // period)
+    t_bytes = t_int.to_bytes(8, byteorder="big")
+    h = hmac.new(key, t_bytes, hashlib.sha1).digest()
+    offset = h[19] & 0x0F
+    bin_code = int.from_bytes(h[offset:offset + 4], byteorder="big") & 0x7FFFFFFF
+    mod = 10 ** digits
+    return f"{bin_code % mod:0{digits}d}"
+
+
+def verify_code(input_code, secret_b32, window=1, period=30, digits=6, ts=None):
+    """校验验证码，支持时间窗口容错。"""
+    if ts is None:
+        ts = time.time()
+    for i in range(-window, window + 1):
+        if calc_totp(secret_b32, ts + i * period, period, digits) == input_code:
+            return True
+    return False

minitotp-0.1.0/minitotp.egg-info/PKG-INFO

@@ -0,0 +1,12 @@
+Metadata-Version: 2.4
+Name: minitotp
+Version: 0.1.0
+Summary: Standard TOTP (RFC6238) two-factor authentication SDK, pure standard library
+License: MIT
+Keywords: totp,2fa,otpauth,rfc6238,hotp,security
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Topic :: Security
+Requires-Python: >=3.7
+Provides-Extra: qr
+Requires-Dist: qrcode[pil]; extra == "qr"

minitotp-0.1.0/minitotp.egg-info/SOURCES.txt

@@ -0,0 +1,9 @@
+pyproject.toml
+minitotp/__init__.py
+minitotp/base32.py
+minitotp/wxtotp.py
+minitotp.egg-info/PKG-INFO
+minitotp.egg-info/SOURCES.txt
+minitotp.egg-info/dependency_links.txt
+minitotp.egg-info/requires.txt
+minitotp.egg-info/top_level.txt

minitotp-0.1.0/minitotp.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

minitotp-0.1.0/minitotp.egg-info/requires.txt

@@ -0,0 +1,3 @@
+
+[qr]
+qrcode[pil]

minitotp-0.1.0/minitotp.egg-info/top_level.txt

@@ -0,0 +1 @@
+minitotp

minitotp-0.1.0/pyproject.toml

@@ -0,0 +1,23 @@
+# sdk/python/pyproject.toml —— minitotp Python 打包配置
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "minitotp"
+version = "0.1.0"
+description = "Standard TOTP (RFC6238) two-factor authentication SDK, pure standard library"
+requires-python = ">=3.7"
+license = { text = "MIT" }
+keywords = ["totp", "2fa", "otpauth", "rfc6238", "hotp", "security"]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "License :: OSI Approved :: MIT License",
+    "Topic :: Security",
+]
+# 可选依赖：generate_qr_svg 需要 qrcode 库
+[project.optional-dependencies]
+qr = ["qrcode[pil]"]
+
+[tool.setuptools]
+packages = ["minitotp"]

minitotp-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+