Comments (6)
Hi,
Not sure I completely get your issue. You mention two different URLs, one working, and one not working, but then you mention further down that neither work.
The syntax for an otpauth URL is:
otpauth://totp/LABEL?secret=SECRET&issuer=ISSUER&algorithm=SHA512&digits=6&period=NUM
If I plug my Github OTP secret into your first example, it does indeed generate an OTP code
otpauth://totp/default?secret=FX12345678912345&period=30&digits=6&algorithm=SHA1
Have yet too see any otpauth URLs formatted starting with otpauth://totp?secret
A tool I like to utilize to confirm otpauth URLs is: https://gchq.github.io/CyberChef/#recipe=Generate_TOTP('',32,6,0,30), or you can also use: https://stefansundin.github.io/2fa-qr/
If you can give me a URL from one of those two tools of an OTP url that works in the website, but not in KeeWeb, paste it here and I'll take a look. For security reasons; both those tools do have offline versions if you don't want to use the live sites.
from keeweb.
Thanks for supplying the page. Yes I am not sure if the format I got was from github itself or keepassium. I just wanted to post it since i came across it.
non working
otpauth://totp?secret=MNOTMSR4OU7U6&period=30&digits=6&algorithm=SHA1
working
otpauth://totp/default?secret=MNOTMSR4OU7U6&period=30&digits=6&algorithm=SHA1
The non working URL has been working in keepassium... just not in keeweb
from keeweb.
Ah ok. That's the first time I've seen an otpauth url like that. I even did a Google search for "otpauth://totp?secret" and it came back with exactly three search results, two of the same and one other in German, and sounded as if they were custom scripts that may have gotten it wrong or were doing something different.
The downside is that Keepassium is Apple, and I at present, don't have an iphone device to test with, which is what makes apple scenarios a pain.
I'll go do some more poking around today and see if I can find another example.
Edit: It looks like Proton is also doing something similar. Learn something new every day I guess. I'll investigate this more and let you know. It's super early morning, so I need to get my eyes open first.
I'm fairly certain it's going to require an update to the app. If my memory serves me correct, otpauth://totp/default?secret=
is hardcoded in without any deviation.
from keeweb.
@BoKKeR Managed to work it out to where KeeWeb now supports both options of formatted string and returns the same OTP code.
Need to go through and test the other aspects of OTP. I'm new to the development team, so I haven't completely memorized where everything ties in; so I have to ensure I don't need to implement additional adjustments to other areas.
from keeweb.
That was very fast! Thanks for your work!
from keeweb.
No problem. Just trying to prioritize right now and get a feel for what is what so that I can start making a game-plan. Need to figure out how releases are going to go.
from keeweb.
Related Issues (20)
- 💡 Feature: Support markdown with attachments
- Moving settings to another PC HOT 4
- 🐛 Bug: manual download & update is OK, but auto update is dead, and still think I am stuck with the old version. HOT 2
- KeeWeb HOT 2
- 💡 Feature: KDBX 4/4.1 Compatibility? HOT 2
- 💡 Feature: hide expired entries from search results
- 💡 Feature: MacOS menu bar icon
- 💡 Feature: Notification Library
- 💡 Feature: Autocopy the OTP after selecting an entry from KeeWeb Connect HOT 1
- 💡 Feature: CapsLock on autotype detection HOT 1
- 🐛 Bug: Chrome extension seems gone? HOT 2
- 💡 Feature: Allow clipboard manager to blacklist Keeweb (ie. don't store the copied password)
- 🐛 Bug: Google application is not verified HOT 11
- Access to Keepass database on Googledrive is blocked HOT 7
- Password reset HOT 1
- 💡 Feature: Database Maintenance - Removing Unused Icons
- Adding Elestio as deployment option
- 🐛 Bug: Problem installing KeeWeb-1.18.7.linux.x64.deb at Ubuntu 24.04.1 LTS HOT 3
- 🐛 Bug: <Global Shortcuts not working in fresh Debian Install>
- 💡 Feature: Move password to another file
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from keeweb.