README.md in rotp-6.2.0 vs README.md in rotp-6.2.1

- old
+ new

@@ -1,22 +1,35 @@ +## Webauthn and the future of 2FA + +Although this library will continue to be maintained, if you're implementing a 2FA solution today, you should take a look at [Webauthn](https://webauthn.guide/). It doesn't involve shared secrets and it's supported by most modern browsers and operating systems. + +### Ruby resources for Webauthn + +- [Multi-Factor Authentication for Rails With WebAuthn and Devise](https://www.honeybadger.io/blog/multi-factor-2fa-authentication-rails-webauthn-devise/) +- [Webauthn Ruby Gem](https://github.com/cedarcode/webauthn-ruby) +- [Rails demo app with Webauthn](https://github.com/cedarcode/webauthn-rails-demo-app) + +---- + # The Ruby One Time Password Library -[![Build Status](https://travis-ci.org/mdp/rotp.svg?branch=master)](https://travis-ci.org/mdp/rotp) +[![Build Status](https://github.com/mdp/rotp/actions/workflows/test.yaml/badge.svg)](https://github.com/mdp/rotp/actions/workflows/test.yaml) [![Gem Version](https://badge.fury.io/rb/rotp.svg)](https://rubygems.org/gems/rotp) [![Documentation](http://img.shields.io/badge/docs-rdoc.info-blue.svg)](https://www.rubydoc.info/github/mdp/rotp/master) [![License](https://img.shields.io/badge/license-MIT-blue.svg?style=flat)](https://github.com/mdp/rotp/blob/master/LICENSE) -A ruby library for generating and validating one time passwords (HOTP & TOTP) according to [RFC 4226](http://tools.ietf.org/html/rfc4226) and [RFC 6238](http://tools.ietf.org/html/rfc6238). +A ruby library for generating and validating one time passwords (HOTP & TOTP) according to [RFC 4226](https://datatracker.ietf.org/doc/html/rfc4226) and [RFC 6238](https://datatracker.ietf.org/doc/html/rfc6238). + ROTP is compatible with [Google Authenticator](https://github.com/google/google-authenticator) available for [Android](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2) and [iPhone](https://itunes.apple.com/en/app/google-authenticator/id388497605) and any other TOTP based implementations. Many websites use this for [multi-factor authentication](https://www.youtube.com/watch?v=17rykTIX_HY), such as GMail, Facebook, Amazon EC2, WordPress, and Salesforce. You can find a more complete [list here](https://en.wikipedia.org/wiki/Google_Authenticator#Usage). ## Dependencies * OpenSSL -* Ruby 2.0 or higher +* Ruby 2.3 or higher ## Breaking changes ### Breaking changes in >= 6.0 @@ -30,10 +43,10 @@ - Cleaned up the Base32 implementation to match Google Authenticator's version. ### Breaking changes in >= 4.0 - Simplified API - - `verify` now takes options for `drift` and `after` + - `verify` now takes options for `drift` and `after`,`padding` is no longer an option - `verify` returns a timestamp if true, nil if false - Dropping support for Ruby < 2.0 - Docs for 3.x can be found [here](https://github.com/mdp/rotp/tree/v3.x) ## Installation