Security Keys

const speakeasy = require('speakeasy');

// Your 2FA secret (base32 encoded string)
// This is the secret you received when setting up 2FA in your Deribit account
const secret = 'JBSWY3DPEHPK3PXP'; // Replace with your actual secret

// Generate current TOTP code
const token = speakeasy.totp({
    secret: secret,
    encoding: 'base32'
});

console.log(`Current TOTP code: ${token}`);

// Example: Use in API request
const axios = require('axios');

async function makeAuthenticatedRequest() {
    // First request
    const response = await axios.post('https://test.deribit.com/api/v2/private/list_api_keys', {
        method: 'private/list_api_keys',
        params: {}
    });
    
    if (response.data.result?.security_key_authorization_required) {
        const challenge = response.data.result.challenge;
        const totpCode = speakeasy.totp({
            secret: secret,
            encoding: 'base32'
        });
        
        // Retry with authorization
        const retryResponse = await axios.post('https://test.deribit.com/api/v2/private/list_api_keys', {
            method: 'private/list_api_keys',
            params: {
                authorization_data: totpCode,
                challenge: challenge
            }
        });
        
        return retryResponse.data;
    }
    
    return response.data;
}

#include <iostream>
#include <string>
#include <ctime>
#include <openssl/hmac.h>
#include <openssl/sha.h>
#include <iomanip>
#include <sstream>

// Base32 decoding (simplified - you may want to use a library)
// TOTP generation function
std::string generateTOTP(const std::string& secret, int timeStep = 30) {
    // Get current time in seconds
    time_t currentTime = time(nullptr);
    long counter = currentTime / timeStep;
    
    // Convert counter to 8-byte big-endian
    unsigned char counterBytes[8];
    for (int i = 7; i >= 0; i--) {
        counterBytes[i] = counter & 0xff;
        counter >>= 8;
    }
    
    // HMAC-SHA1 (you'll need to base32 decode the secret first)
    unsigned char hmac[20];
    unsigned int hmacLen;
    HMAC(EVP_sha1(), secret.c_str(), secret.length(),
         counterBytes, 8, hmac, &hmacLen);
    
    // Dynamic truncation
    int offset = hmac[19] & 0x0f;
    int binary = ((hmac[offset] & 0x7f) << 24) |
                 ((hmac[offset + 1] & 0xff) << 16) |
                 ((hmac[offset + 2] & 0xff) << 8) |
                 (hmac[offset + 3] & 0xff);
    
    int otp = binary % 1000000;
    
    // Format as 6-digit string
    std::ostringstream oss;
    oss << std::setfill('0') << std::setw(6) << otp;
    return oss.str();
}

int main() {
    std::string secret = "JBSWY3DPEHPK3PXP"; // Replace with your actual secret
    std::string totpCode = generateTOTP(secret);
    std::cout << "Current TOTP code: " << totpCode << std::endl;
    return 0;
}