andOTP/andOTP

Twitch TOTP invalid after a while

Open

#545 建立於 2020年5月8日

在 GitHub 查看
 (9 留言) (0 反應) (1 負責人)Java (3,711 star) (368 fork)batch import
bughelp wanted

描述

General information

  • App version: 0.7.0-play
  • App source: Google Play
  • Android Version: 9
  • Custom ROM: ALEXNDR

Expected result

What is expected?

That everything just works and I do not need to reimport entries after a while.

What does happen instead?

The Twitch Authy token got invalidated after a while and I needed to re-import this. Today I noticed that the Microsoft token was also invalid. I have no idea why and how. I can only imagine that either the algorithm is faulty and gets more incorrect after a while or backup restores/titanium backup somehow mess it up. I use the app more than daily with other services and they just work fine and never have such problems.

Logcat

There is no relevant information or crashes.

Steps to reproduce

  • Import Authy Twitch
  • Wait?
  • In X amount of time it is broken

貢獻者指南

技術棧
javaandroid
領域
mobilesecurityauthentication
議題類型
bug
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
4
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
1-2 days
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
needs investigation
前置要求
TOTP algorithmAndroid developmentDebugging intermittent issues
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
20
研究方向
Investigate the TOTP generation and storage logic in andOTP, particularly focusing on the Time based One Time Password algorithm implementation and how tokens are imported from Authy. Look for any time drift or backup restore issues that could cause invalidation after some time. The issue mentions that only Twitch token fails, so compare with other services to isolate the problem. Since the repo is unmaintained, maintainer response is unlikely.