Authenticator-Extension / Authenticator-Extension/Authenticator

Paypal QR code gives wrong secret

Open
#498 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
TypeScript
Stars
4.7k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Sort of thread necro, but then again I provide a workaround:
Yes the issue is real and it seems to be with PayPal.

1) If I scan the code with a different **offline** QR reader I got a 75 byte TOTP string.
2) Using an **offline** QR generator I got a working code working perfectly in the Authenticator.
3) The codes look completely different.

I suspect PayPal uses a QR library that doesn't check properly for the best mask pattern:
https://en.wikipedia.org/wiki/File:QR_Code_Mask_Patterns.svg

Using bad mask patterns creates noise in some readers, making it hard for the Authenticator extension.

However Aegis authenticator on Android (zxing java) can read PayPal codes just fine, but given how hard it can be to find a decent JS library (zxiing js) I guess there is not much we can do.

Unless the developer here wants to switch:
NPM: https://www.npmjs.com/package/@zxing/library
Demo: https://zxing-js.github.io/library/examples/qr-image/
Github: https://github.com/zxing-js/library

FLOSS ready MIT license.

_Originally posted by @vaporwave9 in https://github.com/Authenticator-Extension/Authenticator/issues/371#issuecomment-642637733_

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.