one time password - how to get Google or Authy OTP by API

Question

Is there some way to get an OTP by API? I have an API that requires 2fa. Of course is is possible to turn it off, but I'd really much rather not to.

Answer 1

I can help you out with this. FYI, I work with Authy. Is your intention to get an OTP code and subsequently verify the code automatically? Just out of curiosity, are you doing this for integration testing?

You could approach this with Authy by:

1. Purchasing a Twilio VOIP number
2. Setting the SMS webhook of the Twilio VOIP number to an API endpoint
3. Requesting a Phone Verification or Authy 2FA OTP token to that number (NOTE: if you're requesting an Authy OneCode OTP, you will first have to register the number with Authy)
4. At this point, the OTP will be delivered to your API endpoint via the SMS webhook
5. Parse the OTP and verify the Phone Verification of Authy 2FA token.

If you are approaching this for testing, you can see a testing-sample app for both Phone Verification and Authy OneCode on Github.

Additional sample API calls are also available on Github.

Regards,

Josh @ Authy