Guide to secure your SmartAPI Account with two factor authentication

gautamnaik1994

@admin https://smartapi.angelbroking.com/enable-totp not opening

ivar

Nse circular does not say that you have to use TOTP. This process will make things complicated and orders may fail. Because before placing the orders, the bot/server will have to check if the TOTP is valid or not and then wait/refresh for the latest TOTP. And with 30 second hash
Simple solution is to have a one time otp for logging everyday.

anil_patel

@admin Should User Add OTP every day? if yes then I think it is the End of Trading using APIs because no one wants to do the Same Process Again and Again.

I think SEBI Circular is not Telling the OTP required for API Trading. it is only required to Login Account on a Web or Mobile App or Broker.

anil_patel

@admin One Solution is to Provide the TOTP Via API by Sending the Username & Password of User.

anil_patel

@gautamnaik1994 I Agree, need something to Automate the Process.

Amit 0

How to enable TOTP

priya

@gautamnaik1994 said in Guide to secure your SmartAPI Account with two factor authentication:

@admin https://smartapi.angelbroking.com/enable-totp not opening

labeebta

@gautamnaik1994 If you are using python, you can use totp module to generate totp automatically

J300558

Using smart api-Angel Broker plugin, include following js file

then passing api key; <smartapi-login href="#" data-smartapi="<api-key>">Login</smartapi-login>

How to solve with this integration?

Durai

@admin not open link

anil_patel

@labeebta what should be the Secret Key to Generate TOTP?

luckymonu007

@admin It already 13:00 and the link still does not work. How can I access the API ?

Meenavenkit

The link http://smartapi.angelbroking.com/enable-totp is not working @admin @administrators . Please help. already last 2 days your APIs never worked with all changes you did without proper testing.

Resolve this please.

admin

@anil_patel @gautamnaik1994 @ivar @sachinchauhan @priya @labeebta @sachinsrm @Durai @luckymonu007 @Meenavenkit

https://smartapi.angelbroking.com/enable-totp is live now

Meenavenkit

@admin The site is working but OTP is not working or sent to the email.

aj_Brk

Hi folks

If anyone looking for automating totp part , you can use the following python sample for the same. The secret here comes after validating on enable-totp url .

from smartapi import SmartConnect # or from smartapi.smartConnect import SmartConnect
import pyotp

import smartapi.smartExceptions(for smartExceptions)

create object of call

obj = SmartConnect(api_key="your api key here ")

login api call

totp = pyotp.TOTP(s='secret key in qr uri after qr generation')

attempts = 5

while attempts > 0:
attempts = attempts-1
data = obj.generateSession("Your client id ", "your password ", totp.now())
if not data['message'].contains('Invalid totp'):
break
time.sleep(2) ###rate limiting might block if we try immediately

refreshToken = data['data']['refreshToken']

aj_Brk

@gautamnaik1994 I have provided a sample code below. You can give it a shot. Worked for me .

anil_patel

@admin @aj_Brk can you tell me how to Create a Secret Key Based on the User ID & Pass of the User?

aj_Brk

@anil_patel I generated it here - http://smartapi.angelbroking.com/enable-totp . It is printed below QR code

anil_patel

@admin @aj_Brk Thank you but I want the user to Login without Generating TOTP. so users only add their User ID & Pass and based on that Python will generate the Secret Key to generate TOTP.