Similar to Keruald GitHub, could we have a Keruald Tokens to validate security tokens like Yubico keys?
A first need for Zed is to replace YubiCloud authentication, as Auth_Yubico PHP class is deprecated and points to non existing anymore endpoints.
Plan:
- create a new component in rKERUALD for security tokens and publish it under keruald/tokens
- implement OTP validation protocol in a Yubico\OTP class
- verify signature, with code as described in the protocol (keruald/github XHubSignature verification code can be helpful there)
Reference: https://developers.yubico.com/OTP/Specifications/OTP_validation_protocol.html