go-otp

go-otp copied to clipboard

This should handle #7 by padding out the Base32 string to always be a multiple of 8 characters in length.

That said, it feels like a dangerous spot to hide the errors from base32 decoding the secret. Fixing that would require changing the API such that Get() (and thus the TOTP validate calls as well) would return an error in addition to their existing result.