Merge pull request #107 from mkende/safe_totp

Allow to pass secrets to totp_face through a separate (ignored) header.
2026-04-01 16:42:04 -04:00
parent fd504d03dc ed7761cca4
commit 4f9d7b7219
3 changed files with 9 additions and 0 deletions
@@ -62,6 +62,10 @@
 *      o `algorithm` is one of the supported hashing algorithms listed above.
 *      o `timestep` is how often the TOTP refreshes in seconds. This is usually
 *        30 seconds.
+ *  o Alternatively, place the `credentials` variable as-is in a file named
+ *    `totp_face.secrets.h` in this directory, and it will be included instead.
+ *    This lowers the risk of commiting your OTP secrets to GitHub as that file
+ *    is listed in the .gitignore file.
 *
 * If you have more than one secret key, press ALARM to cycle through them.
 * Press LIGHT to cycle in the other direction or keep it pressed longer to