Kunzisoft / Kunzisoft/KeePassDX

TOTP token is not generated if spaces in secret

Open
#1,313 1 comment 2 reactions 0 assignees View on GitHub
enhancement
Dominant language
Kotlin
Stars
7.3k
Forks
403
Avg merge
2d 10h
Merged PRs (30d)
1

Description

The TOTP token management algorithm can be improved to ignore spaces in the secret.

sample :
`key=lgdg shhdb bebxjs djenx
`This won't work

`key=lgdgshhdbbebxjsdjenx
`Edited, removed the spaces, it will work.

Contributor guide

Open the contributing guide

Research direction

Locate the TOTP token generation entry point and reproduce the reported difference between spaced and unspaced secrets. Check the existing behavior for the sample secret, then verify that both forms generate the same token after the change.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.