@kiryano/etherealotp
Version:
A library for two-factor authentication using Twilio and Speakeasy.
73 lines (72 loc) • 2.61 kB
JavaScript
;
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.verifyToken = exports.generateToken = exports.generateSecret = void 0;
const speakeasy = __importStar(require("speakeasy"));
const TokenGenerationError_1 = require("../errors/TokenGenerationError");
const TokenVerificationError_1 = require("../errors/TokenVerificationError");
/**
* Generates a secret key for TOTP.
* @returns A generated secret key
*/
function generateSecret() {
return speakeasy.generateSecret({ length: 20 });
}
exports.generateSecret = generateSecret;
/**
* Generates a TOTP token based on the secret.
* @param secret The user's TOTP secret
* @returns The generated token as a string
*/
function generateToken(secret) {
const token = speakeasy.totp({
secret: secret,
encoding: 'base32'
});
if (!token) {
throw new TokenGenerationError_1.TokenGenerationError('Failed to generate TOTP token.');
}
return token;
}
exports.generateToken = generateToken;
/**
* Verifies a TOTP token against the user's secret.
* @param token The TOTP token to verify
* @param secret The user's TOTP secret
* @returns True if the token is valid, otherwise false
*/
function verifyToken(token, secret) {
const isVerified = speakeasy.totp.verify({
secret: secret,
encoding: 'base32',
token: token,
window: 1
});
if (!isVerified) {
throw new TokenVerificationError_1.TokenVerificationError('Failed to verify TOTP token.');
}
return isVerified;
}
exports.verifyToken = verifyToken;