<p>I'd been unsuccessfully searching around for libraries to utilize RSA SecureID style one-time password code two-factor authentication in Go. There's a library that supports code generation, but not one I could find to do verification on the server side. I'd like to be able to implement the capability of using an RSA style keychain authenticator for logins on an application. Has anyone come across good, battle-tested libraries for doing this that are not tied to some cloud service?</p>
<hr/>**评论：**<br/><br/>zaphar: <pre><p>This probably isn't exactly what you are looking for but if you can work with something like Google Authenticator or DUO then the <a href="https://github.com/balasanjay/totp" rel="nofollow">https://github.com/balasanjay/totp</a> library is pretty simple to use.</p>
<p>I'm not super familiar with the RSA SecurID algorithm so I can't comment on that.</p></pre>_justinm: <pre><p>Using <a href="https://github.com/pquerna/otp" rel="nofollow">https://github.com/pquerna/otp</a> and satisfied. There are many UI libraries for transmitting the secret to an external device -- using <a href="https://github.com/zpao/qrcode.react" rel="nofollow">https://github.com/zpao/qrcode.react</a> as my UI is React.</p></pre>anoland: <pre><p><a href="https://blog.gopheracademy.com/advent-2013/day-21-two-factor-auth/" rel="nofollow">https://blog.gopheracademy.com/advent-2013/day-21-two-factor-auth/</a></p>
<p>Yubikey has a library.</p>
<p><a href="https://developers.yubico.com/U2F/Libraries/List_of_libraries.html" rel="nofollow">https://developers.yubico.com/U2F/Libraries/List_of_libraries.html</a></p>
<p>Myself, I would use the google authenticator route.
Example app*: <a href="https://github.com/gokyle/hotpweb/" rel="nofollow">https://github.com/gokyle/hotpweb/</a></p></pre>
