spec
Contract for the polyglot aice-otp delivery module: an abstract OpenAPI 3.1 channel interface (sms/whatsapp/email) plus conformance vectors every provider adapter must satisfy.
git@gitlab.com:aice-lab/otp/spec.git
Latest commit
40ab56e2 ·
README
aice-otp — Specification
The contract for aice-otp: the OTP token lifecycle — how an issuer mints,
stores, and verifies a single-use secret in two redemption forms (a high-entropy
magic-link token and a short numeric code). It ships a small lifecycle
conformance suite that runs against an in-tree reference issuer.
Delivery is not part of this spec: transporting the artifact over SMS or
email is owned by the
aice-notification framework.
(aice-otp v1 defined a channel/delivery interface; v2.0.0 removed it — see the
CHANGELOG.)
What lives here
| Path | Purpose |
|---|---|
docs/concepts/ | The issuer lifecycle contract (mint / store / verify), both redemption forms |
conformance/ | Lifecycle vectors, executed against an in-tree reference issuer |
vectors/ | The issue/verify lifecycle vectors themselves |
.gitlab/ci-templates/ | Minimal CI templates specific to OTP work (most are inherited from auth/spec) |
License
FSL-1.1-Apache-2.0 — same as auth/spec.
Documentation
https://otp.aice-lab.org (rolls up under https://developers.aice-lab.org).
This is a snapshot generated from GitLab. For the live README, see the project page.