令牌正在使用nodejs speakeasy库失效

Question

我的目的是在1小时(3600秒)后使令牌过期。在尝试使用nodejs speakeasy时，令牌在此之前就失效了。下面的日志是"1分钟，10分钟和60分钟“，并且在1分钟之前也会失效。我得到不一致结果的最大时间。

部分代码片段

let secret = speakeasy.generateSecret({
length: 10
});
let seconds= 3600; //1Hr

let token = speakeasy.totp({
  secret: secret.base32,
  step: seconds
});

let otp = {
  "secret": secret.base32.toString(),
  "token": token
};

function checkOTP(otp) {
  let verified = speakeasy.totp.verify({
    secret: otp.secret,
    token: otp.token,
    step: seconds
});
return verified;
}

我做错了什么吗？示例脚本中的几个控制台日志：

For 1 minute - Invalidated before 18secs
[ Fri Dec 08 2017 09:16:18 GMT-0800 (Pacific Standard Time) ](true) 9:16:59 AM
[ Fri Dec 08 2017 09:16:18 GMT-0800 (Pacific Standard Time) ](false) 9:17:00 AM

For 10Mins - Invalidated before 7minutes
[ Fri Dec 08 2017 09:18:28 GMT-0800 (Pacific Standard Time) ](true) 9:19:59 AM
[ Fri Dec 08 2017 09:18:28 GMT-0800 (Pacific Standard Time) ](true) 9:19:59 AM
[ Fri Dec 08 2017 09:18:28 GMT-0800 (Pacific Standard Time) ](true) 9:19:59 AM
[ Fri Dec 08 2017 09:18:28 GMT-0800 (Pacific Standard Time) ](true) 9:19:59 AM
[ Fri Dec 08 2017 09:18:28 GMT-0800 (Pacific Standard Time) ](false) 9:20:00 AM

For 1Hr - Invalidated before 7minutes
[ Fri Dec 08 2017 11:07:01 GMT-0800 (Pacific Standard Time) ](true) 11:56:41 AM
[ Fri Dec 08 2017 11:07:01 GMT-0800 (Pacific Standard Time) ](true) 11:56:43 AM
[ Fri Dec 08 2017 11:07:01 GMT-0800 (Pacific Standard Time) ](false) 12:00:37 PM

在上述窗口中进行验证的合适方式是什么？

Answer 1

从speakeasy的自述文件中可以看出，您的token参数是错误的：

var token = speakeasy.totp({
  secret: secret.base32,
  encoding: 'base32',
  time: 1453667708 // You have this as 'step' not 'time' 
});