OATH

A service for validating OATH tokens. Provides a service for other modules that want to perform token validation. Given a userID and a one-time passcode, the service will evaluate wether the passcode can be validated by any of the authentication tokens registered for that userID.

Configuration

This section includes the parameters for the OathValidation module

Module name: OathValidation

Name

Description

Default

Mandatory

namespace

Modules within the same namespace belong together.

db_driver

Database driver, fully qualified class name

jdbc.url

JDBC url

jdbc.username

JDBC username

jdbc.password

JDBC password

secret_key_directory

Search path for secrets

encryption_key

Encrypt/decrypt secret database entries

totp_max_drift

TOTP max drift

hotp_max_lookahead

HOTP max lookahead

{
  "name": "OathValidation",
  "config": {
    "namespace": "default",
    "totp_max_drift": 2,
    "hotp_max_lookahead": 2,
    "db_driver": "com.microsoft.sqlserver.jdbc.SQLServerDriver",
    "jdbc": {
     "url": "jdbc:sqlserver://<host>:<port>;database=<database>;encrypt=false",
      "username": "<user>",
      "password": "<password>"
    },
    "encryption_key": "<encryption key>",
    "secret_key_directory": "resources/secrets",
   }
}

PreviousWebAuthn