Struct TOTP 

pub struct TOTP {
    pub algorithm: Algorithm,
    pub digits: usize,
    pub skew: u8,
    pub step: u64,
    pub secret: Vec<u8>,
}

TOTP holds informations as to how to generate an auth code and validate it. Its secret field is sensitive data, treat it accordingly

Fields

algorithm: Algorithm

SHA-1 is the most widespread algorithm used, and for totp pursposes, SHA-1 hash collisions are not a problem as HMAC-SHA-1 is not impacted. It’s also the main one cited in rfc-6238 even though the reference implementation permits the use of SHA-1, SHA-256 and SHA-512. Not all clients support other algorithms then SHA-1

digits: usize

The number of digits composing the auth code. Per rfc-4226, this can oscilate between 6 and 8 digits

skew: u8

Number of steps allowed as network delay. 1 would mean one step before current step and one step after are valids. The recommended value per rfc-6238 is 1. Anything more is sketchy, and anyone recommending more is, by definition, ugly and stupid

step: u64

Duration in seconds of a step. The recommended value per rfc-6238 is 30 seconds

secret: Vec<u8>

As per rfc-4226 the secret should come from a strong source, most likely a CSPRNG. It should be at least 128 bits, but 160 are recommended

non-encoded value

Implementations

impl TOTP

pub fn new( algorithm: Algorithm, digits: usize, skew: u8, step: u64, secret: Vec<u8>, ) -> Result<TOTP, TotpUrlError>

Will create a new instance of TOTP with given parameters. See the doc for reference as to how to choose those values

Description

• secret: expect a non-encoded value, to pass in base32 string use Secret::Encoded(String)
• digits: MUST be between 6 & 8
• secret: Must have bitsize of at least 128

Example

use totp_rs::{Secret, TOTP, Algorithm};
let secret = Secret::Encoded("OBWGC2LOFVZXI4TJNZTS243FMNZGK5BNGEZDG".to_string());
let totp = TOTP::new(Algorithm::SHA1, 6, 1, 30, secret.to_bytes().unwrap()).unwrap();

Errors

Will return an error if the digit or secret size is invalid

pub fn new_unchecked( algorithm: Algorithm, digits: usize, skew: u8, step: u64, secret: Vec<u8>, ) -> TOTP

Will create a new instance of TOTP with given parameters. See the doc for reference as to how to choose those values. This is unchecked and does not check the digits and secret size

Description

• secret: expect a non-encoded value, to pass in base32 string use Secret::Encoded(String)

Example

use totp_rs::{Secret, TOTP, Algorithm};
let secret = Secret::Encoded("OBWGC2LOFVZXI4TJNZTS243FMNZGK5BNGEZDG".to_string());
let totp = TOTP::new_unchecked(Algorithm::SHA1, 6, 1, 30, secret.to_bytes().unwrap());

pub fn from_rfc6238(rfc: Rfc6238) -> Result<TOTP, TotpUrlError>

Will create a new instance of TOTP from the given Rfc6238 struct

Errors

Will return an error in case issuer or label contain the character ‘:’

pub fn sign(&self, time: u64) -> Vec<u8>

Will sign the given timestamp

pub fn generate(&self, time: u64) -> String

Will generate a token given the provided timestamp in seconds

pub fn next_step(&self, time: u64) -> u64

Returns the timestamp of the first second for the next step given the provided timestamp in seconds

pub fn next_step_current(&self) -> Result<u64, SystemTimeError>

Returns the timestamp of the first second of the next step According to system time

pub fn ttl(&self) -> Result<u64, SystemTimeError>

Give the ttl (in seconds) of the current token

pub fn generate_current(&self) -> Result<String, SystemTimeError>

Generate a token from the current system time

pub fn check(&self, token: &str, time: u64) -> bool

Will check if token is valid given the provided timestamp in seconds, accounting skew

pub fn check_current(&self, token: &str) -> Result<bool, SystemTimeError>

Will check if token is valid by current system time, accounting skew

pub fn get_secret_base32(&self) -> String

Will return the base32 representation of the secret, which might be useful when users want to manually add the secret to their authenticator

Trait Implementations

impl Clone for TOTP

fn clone(&self) -> TOTP

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TOTP

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TOTP

Available on non-crate feature otpauth only.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for TOTP

fn eq(&self, other: &Self) -> bool

Will not check for issuer and account_name equality As they aren’t taken in account for token generation/token checking

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl TryFrom<Rfc6238> for TOTP

Available on non-crate feature otpauth only.

fn try_from(rfc: Rfc6238) -> Result<Self, Self::Error>

Try to create a TOTP from a Rfc6238 config.

type Error = TotpUrlError

The type returned in the event of a conversion error.