Roonia.TOTP 1.0.1

TOTP SetupCode and Verification helper

This is a library for .NET to generate SetupCode for TOTP Authenticator apps like Google Authenticator and to verify the codes Authenticator app will generate.

How to use

Using this library is very straight forward. Just install package Roonia.TOTP to your project and start using TOTPAuthenticator class. It has methods to generate SetupCode for users of your applications. The process of adding an authenticator app as a two-factor authentication method for your application :

• Generate an unique secret key for each user
• Get SetupCode based on generated secret key for each user
• Call ValidatePIN method for checking the totp code users enter every time they want to login (Or any other action).

Generate SetupCode

using Roonia.TOTP;
//just for sample, you can use anther strategy for generating secret keys of your application
var secretKey = Guid.NewGuid().ToString().Replace("-", "").Substring(0, 10);
var totp = new TOTPAuthenticator();
var userAccountName = "imun22@gmail.com";
var appName = "myapp";
var setupCode = totp.GetStupCode(userAccountName, appName, secretKey);

Validating PINs

//You have to save secret key for each user, somewhere
var secretKey = ""; //read from database
//assume that this variable hold the user input
var totp = new TOTPAuthenticator();
var userTotpCode = "...";
if(totp.ValidatePIN(secretKey, userTotpCode, TimeSpan.FromMinutes(1))) {
    //continue the login (or any other) process.
}
else {
    //Raise exception or show error to user.
}