Yubico Forum
https://forum.yubico.com/

Javascript implementation?
https://forum.yubico.com/viewtopic.php?f=8&t=76		 Page 1 of 1
Author:  Mardeg [ Tue Jun 03, 2008 9:14 am ]
Post subject:  Javascript implementation?
Some ways a javascript version could be implemented:

As a direct authentication method for web servers that natively support serverside javascript such as Aptana's Jaxer, or the Firefox extension Plain Old Webserver.

Also, as the authentication part of the code for a Firefox extension that adds the Yubikey as "something you have" multi-factor capability to the Master Password input that protects all the saved passwords in Firefox. I think this would require expert knowledge, which I do not have :(

----------------
Now playing: ABC Radio Online - Dr Karl - Science on TripleJ Mornings 2008-05-29
via FoxyTunes
Author:  paul [ Tue Jun 10, 2008 8:01 am ]
Post subject:  Re: Javascript implementation?
You are right that there are many kinds of shapes and forms that an OTP can be generated. And a web-based way or software tokens are highly desirable in some scenarios. But my opinion is that YubiKey is probably the easiest way and the most worry-free compromise that you don't need to worry much about many security challenges in software-based and Internet-based implementations.

Paul
Author:  Mardeg [ Sun Jun 15, 2008 9:24 am ]
Post subject:  Re: Javascript implementation?
I'm sorry I wasn't referring to a script-based implementation of a OTP. I was asking for a javascript implementation, or port, of the client library for Yubikey verification.
Author:  Simon [ Sun Jun 15, 2008 11:55 pm ]
Post subject:  Re: Javascript implementation?
I don't know of a javascript-implementation of the library. You will need to retrieve a HTTP URL from javascript, and some string parsing to parse the response according to our protocol:

http://yubico.com/developers/api/

Bonus points for verifying the HMAC-SHA1 signature against a shared secret.

If you or anyone comes up with any code to do this, I'm sure it will be appreciate by someone in the future!

/Simon
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/