yaotpbot 0.0.9

A telegram bot to generate OTPs

Yet Another OTP Bot

A Telegram Bot to generate OTPs.

@yaotpbot

Architecture

Software

Yaotpbot is written in Python and use telegram-bot-api to interact with Telegram.

Infrastructure

A DynamoDB table it's used to store the identifiers of the chats and all the related seeds, needed to generate OTPs. All those information are stored encrypted and just decrpyted at runtime, using dynamodb-encryption-sdk library with AES encryption.

Deployment

CI/CD is automated with GitOps. in particular:

• The pipeline
  • Builds the artifact and publishes it on Pypi;
  • Builds the container using buildx to support multiple architecture and push the images on GitLab container registry.
• The operator deploys and keep synced the manifests created on a local k3s cluster.

Installation and usage

The bot can either be used as a container (registry) or installed directly with pip running

pip3 install --upgrade yaotpbot 

Note that following environment variables must be set:

Name	Description
TELEGRAM_API_TOKEN	Telegram Api Token of your bot needed to interact with Telegram. You always get a new one when creating a new bot.
DYNAMO_DB_ENDPOINT	A custom DynamoDB endpoint when not using AWS. By default the bot looks for a table called yaotpbot-table using the credentials provided.
DYNAMO_AES_SIGN_KEY	Key used to sign encrypted data stored on DynamoDB. Can be generated running python scrips/keys.py
DYNAMO_AES_ENCRYPTION_KEY	Key used to encrypt data stored on DynamoDB. Can be generated running python scrips/keys.py
AWS_ACCESS_KEY_ID	AWS access key id. Used with AWS_SECRET_ACCESS_KEY to interact with DynamoDB.
AWS_SECRET_ACCESS_KEY	AWS secret access key. Used with AWS_ACCESS_KEY_ID to interact with DynamoDB.