6.3.1.10. Paper Token (PPR)

The token type paper lets you print out a list of OTP values, which you can use to authenticate and cross off the list.

The paper token is based on the HOTP Token. I.e. you need to use one value after the other.

6.3.1.10.1. Customization

Note

This applies to the previous WebUI only, which is served when pi.cfg selects it as described in Serving the previous WebUI. The WebUI offers a print button for the OTP values, which does not use these files.

6.3.1.10.1.1. CSS

You can customize the look and feel of the printed paper token. You may change the style sheet papertoken.css which is only loaded for printing.

6.3.1.10.1.2. Header and Footer

Then you may add a header in front and a footer behind the table containing the OTP values.

Create the files

• static_old/customize/views/includes/token.enrolled.paper.top.html

• static_old/customize/views/includes/token.enrolled.paper.bottom.html

to display the contents before (top) and behind (bottom) the table.

Within these html templates you may use angular replacements. To get the serial number of the token use:

{{ enrolledToken.serial }}

to get the name and realm of the user use:

{{ newUser.user }}
{{ newUser.realm }}

A good example for the token.enrolled.paper.top.html is:

<h1>{{ enrolledToken.serial }}</h1>
<p>
  Please use the OTP values of your paper token in order one after the
  other. You may scratch off or otherwise mark used values.
</p>

A good example for the token.enrolled.paper.bottom.html is:

<p>
  The paper token is a weak second factor. Please assure, that no one gets
  hold  of this paper and can make a copy of it.
</p>
<p>
  Store it at a safe location.
</p>

Note

You can change the directory static_old/customize to a URL that fits your needs the best by defining a variable PI_CUSTOMIZATION in the file pi.cfg. This way you can put all modifications in one place apart from the original code.

6.3.1.10.1.3. OTP Table

If you want to change the complete layout of the table you need to overwrite the file static_old/components/token/views/token.enrolled.paper.html. The scope variable:

{{ enrolledToken.otps }}

contains an object with the complete OTP value list.