Verify doesn't work correctly about otphp HOT 5 CLOSED

Hi,

Thank you for the issue report.
I am not sure it is a bug from the library. I think that when you run your test the timecode changed.

Could you try your tests using a window parameter i.e. $totp->verify($otp, null, 1)?

from otphp.

In fact I think you misunderstood how period works.

In your example the OTP are valid for 10 sec. but if you get it 2 sec before it expires then 5 seconds later the test will fail.
Example: the timestamp is 123456789. The timecode is 12345678. If you wait 5 seconds the timestamp is 123456794 but the timecode is 12345679. The otp is not verified.

An OTP is always valid for the given period of time. But when you get it, it may be valid only for few seconds.

from otphp.

What's the point of a few second life for otp password in real world use ? Could you give me an example ?

from otphp.

None. That is why a window parameter exists.

from otphp.

That means if I really want OTP life for 60 seconds, so I have to set period to 30 and window = 1. Am I right ?

from otphp.