otp

import OTP from 'otp'; async function demonstrateOtp() { // Use a securely generated, base32-encoded secret. // For demonstration, a common test secret "JBSWY3DPEHPK3PXP" (Hello!) is used. const secret = 'JBSWY3DPEHPK3PXP'; // Replace with a strong, random secret in production console.log('Using Secret (Base32):', secret); // Initialize OTP with a secret and desired name const otpInstance = new OTP({ name: 'MyOTPApp', secret: secret, codeLength: 6, timeSlice: 30, // Default is 30 seconds }); // --- TOTP Demonstration --- console.log('\n--- TOTP ---'); const currentTotpCode = await otpInstance.totp(); console.log(`Current TOTP code (valid for ~30s): ${currentTotpCode}`); console.log('Google Authenticator URL (TOTP):', otpInstance.totpURL); // --- HOTP Demonstration --- console.log('\n--- HOTP ---'); // For HOTP, the counter must be managed and incremented server-side const counter = 123; const hotpCode = await otpInstance.hotp(counter); console.log(`HOTP code for counter ${counter}: ${hotpCode}`); console.log('Google Authenticator URL (HOTP):', otpInstance.hotpURL); // --- Parsing an OTP URL --- console.log('\n--- URL Parsing ---'); const exampleTotpUrl = otpInstance.totpURL; // Or any `otpauth://` URL const parsedOptions = OTP.parse(exampleTotpUrl); console.log('Parsed OTP options from URL:', parsedOptions); // Example: parsedOptions might contain { type: 'totp', label: 'MyOTPApp', secret: 'JBSWY3DPEHPK3PXP', ... } // --- Reviving an OTP object from JSON --- console.log('\n--- JSON Reviver ---'); const stringifiedOtp = JSON.stringify(otpInstance); console.log('Stringified OTP object (truncated):', stringifiedOtp.substring(0, 100) + '...'); const revivedOtp = JSON.parse(stringifiedOtp, OTP.reviveJSON); console.log('Revived OTP object secret matches original:', revivedOtp.secret === otpInstance.secret); } demonstrateOtp().catch(console.error);