You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
_ahmedbilal d940a302fe updated 2 years ago
bin uotp-client added 2 years ago
uotp updated 2 years ago
.gitignore converted to python package 2 years ago
LICENSE converted to python package 2 years ago updated 2 years ago uotp-client added 2 years ago


uotp is a full blown authentication and authorisation service made for micro services. The basic idea is that every micro service has a (long term) triple constisting of (name, realm, seed) and creates time based tokens. This basically revamps Kerberos in a simple way into the web area. uotp has been created and is maintained by ungleich.

Technologies Used

  • Flask
  • PyOTP
  • Etcd



# Update and Upgrade 
cat > /etc/apk/repositories << EOF
apk update
apk upgrade

# Install Dependencies
apk add python3 git etcd etcd-ctl py3-grpcio

curl -o /etc/etcd/conf.yml

pip3 install git+

service etcd start

Create /etc/uotp/uotp.conf with something like the following configuration


and run uotp with the following command



Get Admin Credentials

Run the following commands in your uotp directory

uotp-client get-admin

Create Auth Account (or any account)

Run the following command in your uotp directory:

uotp-client create \
    --name auth --realm ungleich-auth \
    --admin-name admin --admin-realm ungleich-admin \
    --admin-seed admin_seed_here

In response, you would get a JSON object containing Message and Credentials of newly created account.

List All Accounts with credentials

uotp-client list \
    --admin-name admin_name_jere --admin-realm admin_realm_here \
    --admin-seed admin_seed_here

Verify OTP Credentials

uotp-client verify \
    --name user_name_here --realm user_realm_here \
    --seed user_seed_here --auth-name auth_name_here \
    --auth-realm auth_realm_here --auth-seed auth_seed_here

Delete OTP Account