search

Cantara / Whydah-Java-SDK

A client library which might make Whydah integration more easy and more resilient
Apache License 2.0
1 stars 0 forks source link

Implement Google Authenticator MFA Command #24

Open totto opened 8 years ago

totto commented 8 years ago

Should be easy by folloiwng this totorial

StigLau commented 8 years ago

Really nice tutorial. Looks like timing issues between server and mobile is an issue for testing. Have 8min difference in time, and still haven't gotten the same auth-kode on both devices. Will need to store a rather long time-series of auth-kodes, and the google-way of comparing two consecutive auth codes to align the system clocks, and possibly store it on the server (to the user account) to align the codes in time, without generating a ton of auth-codes to check, and expecting the time-difference to a users mobile. Will need an additional calibration after the users mobile phones time is changed.