late-checkin

Commissioned project to generate un-tamperable digital late passes for use at Woodward Academy

The system uses a TOTP generator to create a rolling QR code, preventing users from re-using past QRs and thus requiring them to go to the check-in desk for a pass. This TOTP code is verified server-side and the user is supplied with an HMAC-signed cookie representing their pass.

Screenshots

Example .env file

This app requires some environment variables to be set before it can run. Below is a sample .env file

PERIOD=10
SECRET=KTIDPMJPVHPEY5TSFINNFCQTVEF34ZGO

Period defines the period (in seconds) that each token will be valid for

You can generate a secret at https://www.token2.com/site/page/totp-toolset (use the SEED box)

Usage

If you'd like to use this tech in your school, please send me a message before implementing