The library documents itself · Security & governance

stzTotp

19 own methods · 6 forms written with extensions, listed under their method

the source: base/security/stzTotp.ring(opens in a new tab) · All classes · The area reference: Security & governance

Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean

No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.

Method

Explanation, as the source carries it

init

a brand-new random secret (160-bit -- one SHA1 block, RFC-recommended size).no extension

Generate

configuration (plain + Q twins) --------------------------------- replace the secret with a fresh random one.QCSXTZZZIBWU

SetSecret

(no comment in the source: the name reads as a sentence) set secretQCSXTZZZIBWU

SetDigits

(no comment in the source: the name reads as a sentence) set digitsQCSXTZZZIBWU

SetPeriod

(no comment in the source: the name reads as a sentence) set periodQCSXTZZZIBWU

SetSkew

(no comment in the source: the name reads as a sentence) set skewQCSXTZZZIBWU

SetAlgo

1 = SHA1 (default, universal app support), 2 = SHA256.QCSXTZZZIBWU

Secret

read-out (data methods)no extension

Digits

(no comment in the source: the name reads as a sentence) digitsno extension

Period

(no comment in the source: the name reads as a sentence) periodno extension

Skew

(no comment in the source: the name reads as a sentence) skewno extension

Algo

(no comment in the source: the name reads as a sentence) algono extension

AlgorithmName

(no comment in the source: the name reads as a sentence) algorithm nameno extension

ProvisioningUri

the otpauth:// URI an authenticator app consumes (usually via a QR code). LABEL is issuer:account; the issuer is repeated as a query parameter, per the Key-Uri spec, so apps that read either place show the right name.no extension

CodeAt

codes ----------------------------------------------------------- the code valid at an explicit wall-clock instant (epoch seconds).no extension

Code

the code valid right now.no extension

Verify

verify a submitted code against now, tolerating +/- @nSkew steps of drift.no extension

VerifyAt

deterministic verify against an explicit instant (for tests + the auth layer).no extension

Show

(no comment in the source: the name reads as a sentence) showno extension