import { totp, generateSecretBytes, base32Encode } from '@nowarajs/totp';

// Generate a secret
const secret = generateSecretBytes(20); // 20 bytes = 160 bits
const secretBase32 = base32Encode(secret);

// Generate TOTP code
const code = await totp(secret, {
	algorithm: 'SHA-1',
	digits: 6,
	period: 30
});

console.log('TOTP Code:', code); // e.g., "123456"

import { verifyTotp } from '@nowarajs/totp';

// Verify a TOTP code
const isValid = await verifyTotp(secret, userInputCode, {
	algorithm: 'SHA-1',
	digits: 6,
	period: 30,
	window: 1 // Allow 1 time step before/after current time
});

if (isValid) {
	console.log('✅ Code is valid!');
} else {
	console.log('❌ Invalid code');
}

import { hotp } from '@nowarajs/totp';

// Generate HOTP code with counter
const counter = 123;
const hotpCode = await hotp(secret, counter, {
	algorithm: 'SHA-1',
	digits: 6
});

console.log('HOTP Code:', hotpCode);

import { buildOtpAuthUri, base32Encode } from '@nowarajs/totp';

const secret = generateSecretBytes(20);
const secretBase32 = base32Encode(secret);

// Create URI for QR code
const uri = buildOtpAuthUri({
	secretBase32,
	label: 'user@example.com',
	issuer: 'MyApp',
	algorithm: 'SHA-1',
	digits: 6,
	period: 30
});

console.log('QR Code URI:', uri);
// otpauth://totp/user@example.com?secret=JBSWY3DPEHPK3PXP&issuer=MyApp

import { generateSecretBytes, base32Encode, base32Decode } from '@nowarajs/totp/utils';

// Generate cryptographically secure secret
const secret = generateSecretBytes(32); // 256 bits for extra security

// Encode for storage/transmission
const encoded = base32Encode(secret);
console.log('Base32 Secret:', encoded);

// Decode when needed
const decoded = base32Decode(encoded);
console.log('Original bytes match:', secret.every((byte, i) => byte === decoded[i]));

// Use SHA-256 with 8 digits and 60-second period
const advancedCode = await totp(secret, {
	algorithm: 'SHA-256',
	digits: 8,
	period: 60
});

// Verify with larger time window for clock drift tolerance
const isValid = await verifyTotp(secret, userCode, {
	algorithm: 'SHA-256',
	digits: 8,
	period: 60,
	window: 2 // Allow ±2 time steps (±2 minutes)
});

import { parseOtpAuthUri } from '@nowarajs/totp';

const uri = 'otpauth://totp/Example:alice@google.com?secret=JBSWY3DPEHPK3PXP&issuer=Example';
const parsed = parseOtpAuthUri(uri);

console.log(parsed);
// {
//   type: 'totp',
//   label: 'Example:alice@google.com',
//   secret: 'JBSWY3DPEHPK3PXP',
//   issuer: 'Example',
//   algorithm: 'SHA-1',
//   digits: 6,
//   period: 30
// }

// Base32 encoding/decoding
import { base32Encode, base32Decode } from '@nowarajs/totp/utils';

// Secret generation
import { generateSecretBytes } from '@nowarajs/totp/utils';

// Time utilities
import { timeRemaining } from '@nowarajs/totp/utils';

// Get seconds until next TOTP generation
const remaining = timeRemaining(30); // for 30-second period
console.log(`Next code in ${remaining} seconds`);