Authenticator application to generate TOTP codes on FitbitOS.
This app currently supports storing up to 10 tokens. Each token is submitted in the form name:key and must have a unique name. Due to hardware/software constraints on the watch, the TOTP calculations must be done on the companion app which runs on the phone. Upon submission of the secret key the data is stored on the phone and stripped from the visible settings. Every 30 seconds the watch requests the new translated tokens from the phone, these are calculated on the companion and sent back to the watch via Fitbit's Messaging API.
If the app is uninstalled all associated data is removed. Please do not use this as your sole source of accessing these MFA tokens
Configuration is offered for changing the color, changing the font and displaying a text-based counter. The settings also support removal and re-order of the tokens.
I would much prefer for everything to be stored and calculated on the watch (but cannot for reasons stated above), in pursuit of this I have opened up a feature request on the Fitbit forums. If you'd like to see this please vote!
Get it here: https://gam.fitbit.com/gallery/app/ff58cce2-1f9d-4a2f-917d-3cb70c11b542
If you experience any issues please feel free to create an issue. If you'd prefer to email me you can do so here.
For a list of all changes please click here.
- jsSHA library used from jsSHA
- TOTP generation code adapted from this blogpost
- Fitbit example project sdk-bart