-
Notifications
You must be signed in to change notification settings - Fork 60
/
otp.go
121 lines (103 loc) · 3.06 KB
/
otp.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
package uadmin
import (
"fmt"
"image/png"
"os"
"strings"
"time"
"github.com/pquerna/otp"
"github.com/pquerna/otp/totp"
)
// getOTP is a function that generates TOTP using github.com/pquerna/otp
// Parameters:
// - seed: OTP seed is base32
// - digits: the number of digits for the OTP
// - algorithm: "sha1", "sha256", "sha512"
// - skew: the number of minutes to search around the OTP
// - period: the number of seconds for the OTP to change
func getOTP(seed string, digits int, algorithm string, skew uint, period uint) string {
algo := getOTPAlgorithm(strings.ToLower(algorithm))
opts := totp.ValidateOpts{
Algorithm: algo,
Digits: otp.Digits(digits),
Skew: skew,
Period: period,
}
pass, err := totp.GenerateCodeCustom(seed, time.Now().UTC(), opts)
if err != nil {
Trail(ERROR, "Unable to generate OTP. %s", err)
return ""
}
return pass
}
func verifyOTP(pass, seed string, digits int, algorithm string, skew uint, period uint) bool {
algo := getOTPAlgorithm(strings.ToLower(algorithm))
opts := totp.ValidateOpts{
Algorithm: algo,
Digits: otp.Digits(digits),
Skew: skew,
Period: period,
}
pass = fmt.Sprintf("%0"+fmt.Sprintf("%d.%d", digits, digits)+"s", pass)
valid, err := totp.ValidateCustom(pass, seed, time.Now().UTC(), opts)
if err != nil {
Trail(ERROR, "Unable to verify OTP. %s", err)
return false
}
return valid
}
func verifyOTPAt(pass, seed string, digits int, algorithm string, skew uint, period uint, t time.Time) bool {
algo := getOTPAlgorithm(strings.ToLower(algorithm))
opts := totp.ValidateOpts{
Algorithm: algo,
Digits: otp.Digits(digits),
Skew: skew,
Period: period,
}
pass = fmt.Sprintf("%0"+fmt.Sprintf("%d.%d", digits, digits)+"s", pass)
valid, err := totp.ValidateCustom(pass, seed, t.UTC(), opts)
if err != nil {
Trail(ERROR, "Unable to verify OTP. %s", err)
return false
}
return valid
}
func generateOTPSeed(digits int, algorithm string, skew uint, period uint, user *User) (secret string, imagePath string) {
algo := getOTPAlgorithm(strings.ToLower(algorithm))
opts := totp.GenerateOpts{
AccountName: user.Username,
Issuer: SiteName,
Algorithm: algo,
Digits: otp.Digits(digits),
Period: period,
SecretSize: 64,
}
key, _ := totp.Generate(opts)
img, _ := key.Image(250, 250)
os.MkdirAll("./media/otp/", 0744)
fName := "./media/otp/" + key.Secret() + ".png"
for _, err := os.Stat(fName); os.IsExist(err); {
key, _ = totp.Generate(opts)
img, _ = key.Image(250, 250)
fName = "./media/otp/" + key.Secret() + ".png"
}
qrImg, _ := os.OpenFile(fName, os.O_WRONLY|os.O_CREATE, 0644)
defer qrImg.Close()
png.Encode(qrImg, img)
return key.Secret(), fName
}
func getOTPAlgorithm(algorithm string) otp.Algorithm {
var algo otp.Algorithm
switch algorithm {
case "sha1":
algo = otp.AlgorithmSHA1
case "sha256":
algo = otp.AlgorithmSHA256
case "sha512":
algo = otp.AlgorithmSHA512
default:
Trail(WARNING, "getOTPAlgorithm: Unknown hash algorithm (%s). Defaulting to sha1", algorithm)
return otp.AlgorithmSHA1
}
return algo
}