Kunzisoft / Kunzisoft/KeePassDX
TOTP token is not generated if spaces in secret
Open
enhancement
- Dominant language
- Kotlin
- Stars
- 7.3k
- Forks
- 403
- Avg merge
- 2d 10h
- Merged PRs (30d)
- 1
Description
The TOTP token management algorithm can be improved to ignore spaces in the secret.
sample :
`key=lgdg shhdb bebxjs djenx
`This won't work
`key=lgdgshhdbbebxjsdjenx
`Edited, removed the spaces, it will work.
Contributor guide
Research direction
Locate the TOTP token generation entry point and reproduce the reported difference between spaced and unspaced secrets. Check the existing behavior for the sample secret, then verify that both forms generate the same token after the change.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100