Support for RFC6287 OCRA
- Dominant language
- Python
- Stars
- 159
- Forks
- 20
- PR merge metrics
- No merged PRs in 30d
Description
[RFC6287](https://www.rfc-editor.org/rfc/rfc6287.html) a.k.a. OCRA details how a *server* can generate a challenge to another *client*, and the client is expected to answer the challenge based on a shared private key.
I am not sure this belongs in otpauth, but the mechanism is quite similar, and the spec has been published by the OATH wg.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading RFC 6287 and comparing its server/client challenge flow with otpauth's existing HOTP/TOTP support. The issue does not name files, tests, or an implementation boundary; first determine whether OCRA belongs in this package, then define the required API and tests before considering the work complete.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100