Generated secret too long about otp-java HOT 6 CLOSED

@whsoul I created a new release for the secret generator fix.

from otp-java.

@BastiaanJansen
oh, great!
I will check with new version 1.1.3
thanks!

from otp-java.

Thank you, I will look into it!

Preferably, the key should be completely random. But you could generate a key based on a custom seed, it would work, but it wouldn't be as secure. But that's a trade of. May I ask why you want to add a an id / email in your key?

from otp-java.

@BastiaanJansen
because if multi users request a OTP at the same time for emails verify, in my case,
same master key generate same OTP with in 30sec.

so different OTP per user at the same time, need to store different generated key per email(user) or use the custom combination key ( email + generated secret )

from otp-java.

@whsoul Ah, that makes sense! Yes, that should work!
However, the generated secrets are different without the email attached, right? Because the secret generator will always create a random secret. So, they will generate a different OTP, even when multiple users generate an OTP at the same time.

from otp-java.

@BastiaanJansen
thank you for your feed back!

from otp-java.