Implementation of TOTP and AES-128 in the Bengkayang Parish Application

This project focused on enhancing the login system of the Bengkayang Parish web application. I implemented Google login using the OAuth 2.0 protocol and integrated a Time-Based One-Time Password (TOTP) mechanism, allowing users to enter a one-time code valid for 30 seconds with a maximum of 5 attempts. To strengthen data security, AES-128 encryption was applied to encrypt the JSON Web Token (JWT). The enhanced system was tested against various attack scenarios including dictionary attacks, rainbow table attacks, and man-in-the-middle (MITM) attacks. As a result, the system successfully prevented unauthorized access and proved resilient to brute-force attacks by applying rate limiting.