This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP JOTP Project"
Rob Upcraft (talk | contribs) (→Quick Download) |
Rob Upcraft (talk | contribs) (→Description) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 8: | Line 8: | ||
==OWASP jOTP== | ==OWASP jOTP== | ||
| − | OWASP jOTP is a microservice implemented in Java that can be used to generate, validate, and automatically expire one-time use password tokens | + | OWASP jOTP is a microservice implemented in Java that can be used to generate, validate, and automatically expire one-time use password tokens. |
==Description== | ==Description== | ||
A common use case for jOTP is as follows: | A common use case for jOTP is as follows: | ||
| − | 1. Client | + | 1. Client applications displays a login page requesting the user enter his/her username and password. |
| − | + | 2. If the credentials check passes, the user's email is looked up and a message containing the token is sent. | |
| − | + | 3. The application then requests that the OTP token that was sent be entered in a text box. Once entered, it is sent to jOTP. | |
| − | + | 4. jOTP validates the token. If the token was valid, the application finishes authenticating the user. If the token was not valid, the user is redirected to the login page. | |
| − | |||
==Licensing== | ==Licensing== | ||
Latest revision as of 22:36, 13 March 2016
OWASP jOTPOWASP jOTP is a microservice implemented in Java that can be used to generate, validate, and automatically expire one-time use password tokens. DescriptionA common use case for jOTP is as follows: 1. Client applications displays a login page requesting the user enter his/her username and password. 2. If the credentials check passes, the user's email is looked up and a message containing the token is sent. 3. The application then requests that the OTP token that was sent be entered in a text box. Once entered, it is sent to jOTP. 4. jOTP validates the token. If the token was valid, the application finishes authenticating the user. If the token was not valid, the user is redirected to the login page. LicensingOWASP jOTP is available under the BSD 2-Clause License.
|
What is jOTP?OWASP jOTP provides:
Project LeaderRob Upcraft
|
Quick DownloadEmail ListOWASP jOTP Mailing List NOTE: Include "jOTP" in the subject heading of all emails to this list. News and EventsClassifications
| |||||||
