# wstrange/GoogleAuth

Google Authenticator Server side code

Repository: https://github.com/wstrange/GoogleAuth
Canonical: https://ross.abutalabs.com/products/googleauth
Language: Java
License: BSD-3-Clause
License Family: permissive
Last push: 2026-08-14T16:34:36+00:00

## Health v2 (maintenance only)
Score: 66/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 97, release rhythm 8, longevity 100
- inputs: {"age_days": 5349, "days_push": 19, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1108, forks 333 (observed 2026-08-28T04:03:36.970042+00:00)

## What it is
GoogleAuth is a Java server-side library implementing the Time-based One-Time Password (TOTP) algorithm from RFC 6238, compatible with Google Authenticator clients. It lets Java applications generate TOTP shared secrets and verify one-time passwords for multi-factor authentication.

## Use cases
- add TOTP two-factor authentication to a Java web app
- generate TOTP shared secrets for users to scan into Google Authenticator
- verify one-time passwords server-side during login
- implement MFA compatible with authenticator apps like Google Authenticator or Authy
- build custom TOTP token validation in Java 7+ applications

## When to choose
- you need server-side TOTP verification in a Java or JVM application
- you want compatibility with standard authenticator apps without implementing RFC 6238 yourself
- you need a small, well-documented library with JavaDoc and tests

## When to avoid
- you need full MFA flows including enrollment UI, backup codes, or push notifications
- your stack is not on the JVM
- you need HOTP counter-based OTP or other OTP variants beyond TOTP

## Facets
- artifact type: library
- maturity: stable
- function: auth, cryptography, security
- domain: security, backend, developer-tools
- platform: jvm, cross-platform
- tags: totp, two-factor-authentication, google-authenticator, rfc6238, mfa, otp

## Member repositories
- wstrange/GoogleAuth (main) score 66

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:36.970042+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:44:00.329969+00:00, confidence not recorded.
  - readme: https://github.com/wstrange/GoogleAuth (fetched 2026-08-28T04:03:36.970042+00:00, sha 850ecb31acb1)
- Data as of 2026-08-30T08:39:29.467469+00:00.