feat(totp): flexible TOTP code generation for authenticator entries (v0.2.0) - #3
Merged
Conversation
…tor entries
Adds generateTotpCode(secret, {algorithm, digits, period, timestamp}) and
buildTotpUriWithOptions so the password-manager authenticator view can render
codes for imported entries (SHA1/SHA256/SHA512, 6-8 digits, custom periods)
without touching otpauth directly. Singra's own 2FA enrolment keeps the pinned
buildTotpUri/verifyTotpCode parameter set. Bumps version to 0.2.0 for the
Phase-6 full-extraction release.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…4-m6w7-qqqr) tsup pins a vulnerable esbuild range; the override forces the patched build tool without downgrading tsup. Unblocks the security workflow's npm audit gate. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Phase 6 — letzte DIS-Lücke für die vollständige Krypto-Extraktion
Singra Vaults Authenticator-Seite rendert TOTP-Codes für importierte Dritt-Einträge (variable Algorithmen SHA1/SHA256/SHA512, 6–8 Digits, beliebige Perioden). Dafür fehlte in DIS eine flexible Generierungs-API — das war die einzige Lücke der Inventur über alle 21 verbleibenden Crypto-Dateien in Vault + Premium.
Neu (rein additiv)
generateTotpCode(secret, { algorithm?, digits?, period?, timestamp? })buildTotpUriWithOptions(params, options)für Provisioning-URIs mit expliziten ParameternTotpAlgorithm/TotpCodeOptions-TypenSingras eigene 2FA bleibt auf dem gepinnten Parametersatz (
buildTotpUri/verifyTotpCodeunverändert).Tests
8/8 totp-Tests grün, inkl. Interop-Matrix gegen rohes
otpauthüber alle Algorithmus/Digits/Period-Kombinationen bei fixem Timestamp. Typecheck + Lint sauber.Version → 0.2.0 (Basis für das Phase-6-Release, danach Tag
v0.2.0).🤖 Generated with Claude Code