puddly / android-otp-extractor

Extracts OTP tokens from rooted Android devices
GNU General Public License v3.0
242 stars 22 forks source link

Add steam authenticator support #6

Closed gergesh closed 6 years ago

gergesh commented 6 years ago

This branch adds support for extracting and generating andOTP backups for steam authenticator codes. Since the generation of steam codes is a slightly modified one, I had to denote the codes being steam codes by inserting 'steam-' at the beginning of their names. Ideally I think that adding an 'issuer' value to each code is a better solution, but I'm not familiar enough with any of the other authenticators to get it working properly.

gergesh commented 6 years ago

I've updated the README so the steam changes and last PR modifications are better documented, I think this is ready to go now.

puddly commented 6 years ago

I think adding an issuer parameter would be a better solution than encoding it in the name itself. Does Steam's algorithm require anything else besides the data in shared_secret?

gergesh commented 6 years ago

The only data steam's algorithm requires is the shared secret. Perhaps a type attribute would be better? Could be 'STEAM' for the steam codes and 'TOTP' for the other ones, just like it's done in andOTP.

puddly commented 6 years ago

Thanks, it looks fine to me.