totp.verify docs are incorrect. Default window is 50 not 6.

guyht / notp

Node One Time Password library, supports HOTP, TOTP and works with Google Authenticator

https://github.com/guyht/notp

MIT License

685 stars 66 forks source link

totp.verify docs are incorrect. Default window is 50 not 6. #19

Open gflarity opened 9 years ago

gflarity commented 9 years ago

totp.verify docs are wrong, says the default window is 6 but it relies on hotp.verify which has a default window of 50.

devniel commented 8 years ago

I agree with you. When I try to verify a token, only the ones that have a delta >= -50 are valid. I'm not sure if this delta has to do with the window property.

naz commented 8 years ago

Yeah, it was addressed in this PR - https://github.com/guyht/notp/pull/36 , but it never got merged in. Would be great to have it in main repository, as using forks kind of sucks :smiley: