wildwolf/yubico-otp

Alternative to the official php-yubico client

4.0.1 2025-06-28 02:27 UTC

Requires

• php: ^8.1
• ext-curl: *
• ext-openssl: *

Requires (Dev)

• phpunit/phpunit: ^9.5.11
• psalm/plugin-phpunit: ^0.19.0
• vimeo/psalm: ^6.0.0

MIT

• Volodymyr Kolesnykov

• security
• Authentication
• otp
• yubico
• 2fa

README

PHP 7/8-friendly alternative to the official php-yubico client.

Installation

composer require wildwolf/yubico-otp

Usage

$otp      = new WildWolf\Yubico\OTP($id, $secret);
$response = null;
$result   = $otp->verify($code, null, &$response);

Where:

• $id, $secret are the Client ID and the secret key; you will need to sign up for them;
• $code is the OTP code to verify (it will look something like ccccccjknjjnfffttntuknrfnkednknkfjegcrhhkuut; see OTP::parsePasswordOTP() for its format);
• $result is the verification result (true for success, false for failure);
• $response is the raw response from Yubico (details).

verify() can throw OTPBadResponseException if the response fails the basic sanity checks, OTPTamperedResponseException if the response signature fails to validate, OTPTransportException in case of the issues talking to the OTP server.