31         OTPPolicy policy = realm.getOTPPolicy();
    32         if (policy.getType().equals(UserCredentialModel.TOTP)) {
    33             TimeBasedOTP validator = 
new TimeBasedOTP(policy.getAlgorithm(), policy.getDigits(), policy.getPeriod(), policy.getLookAheadWindow());
    34             return validator.validateTOTP(token, secret.getBytes());
    36             HmacOTP validator = 
new HmacOTP(policy.getDigits(), policy.getAlgorithm(), policy.getLookAheadWindow());
    37             int c = validator.validateHOTP(token, secret, policy.getInitialCounter());