在 express js 中一次性生成密码

Question

I am trying to generate OTP in express js using speakeasy https://www.npmjs.com/package/speakeasy .

Here is the sample code i've tried

var speakeasy = require('speakeasy');
        var secret = speakeasy.generateSecret({length:32});

        //generate token
        var code = speakeasy.totp({
            secret:secret.base32,
            encoding: 'base32',
            step:300,
            window:100,
            counter:123
        });

        //verify token
        var verified = speakeasy.totp.verify({
            secret:secret.base32 ,
            encoding: 'base32',
            token: code
        });

When verify the token console.log(verified) always return false.

I've followed this github link https://github.com/speakeasyjs/speakeasy/issues/52 but it didn't help

Answer 1

我不知道speakeasy ，但我们已经成功地在我们的项目中使用了notp来生成我们与 Express 一起使用的一次性密码，也许这可能会有所帮助： https : //www.npmjs.com/package/notp

Answer 2

Add step value given while generating token for verify.

var verified = speakeasy.totp.verify({
        secret:secret.base32 ,
        encoding: 'base32',
        token: code,
        step: 300
    });

Answer 3

You should be added counter = 123 into verify function:

var verified = speakeasy.totp.verify({
      secret: secret.base32,
      encoding: 'base32',
      token: code, 
      counter: 123
});

Answer 4

module.exports = (num = 4) => {
    return Math.random().toFixed(num).substr(`-${num}`)
}

OTP: 9749