kotlin-vipaccess

Kotlin Multiplatform library for Symantec VIP Access TOTP tokens.

• 🌐 Kotlin Multiplatform - JVM, Native (Linux/macOS/Windows), JS and Wasm/JS targets
• 🔑 Provision VIP Access credentials directly from Symantec
• ⏱️ Generate TOTP/HOTP codes (RFC 6238, RFC 4226)
• 🔗 Export to otpauth:// URIs for any authenticator app
• ✅ Verify and re-sync tokens against the Symantec server

# module.yaml
dependencies:
  - dev.suresh.vipaccess:kotlin-vipaccess:<latest_version>

dependencies {
    implementation("dev.suresh.vipaccess:kotlin-vipaccess:<latest_version>")
}

val client = VipAccess(clientId = "kotlin-vipaccess")

// Provision a new credential
val token = client.provision()
println("ID: ${token.id}")

// Generate the current TOTP
val totp = client.generateOtp(token)
println("TOTP: $totp")

// Verify and sync with Symantec
when (client.verifyToken(token)) {
    is Success -> println("✓ Valid")
    is NeedsSync -> client.syncToken(token)
    is Failed -> println("✗ Invalid")
}

// Export for any authenticator app
println("URI: ${client.otpUri(token)}")

Get the OTP URI and add it to your authenticator of choice:

• Google Authenticator — generate a QR from the URI or manually enter the secret
• Authenticator Extension (Chrome) — paste the full otpauth:// URI

$ ./kotlin build                # Build all targets
$ ./kotlin test                 # Run tests
$ ./kotlin publish mavenLocal   # Publish to local Maven repository

Push a version tag to publish to Maven Central and create a GitHub release:

$ git tag -am "Release v1.0.0" v1.0.0
$ git push origin --tags

The build workflow handles signing and publishing automatically.

Based on the reverse engineering of the VIP Access provisioning protocol by Cyrozap.

Apache 2.0 — see LICENSE for details.