Spartan Java

Someone asked me about the implementation details of the Google Appengine sample I published a few weeks ago (http://obovweb.appspot.com/). Well, you can get a hold of the source code here.

There’s not much to tell, apart from the specific HMAC-SHA1 implementation (which you can check out in Obovs source code) it’s a very simple JSP/DWR application.

A new version of obov is available for download. Some nice new features were added:

• Methods to generate passwords using the HMAC-SHA1 algorithm
• A handy utility method to generate secret keys (seeds) based on any given string

Go get it!

obov stands for OATH Based OTP validator. It’s a 100% pure Java library that provides simple to use methods to validate (and related utilities) one time passwords generated by OATH compliant devices.
(continue reading…)