admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Doc - improve

Browse source
This commit is contained in:
sparkyx 2025-08-08 13:38:55 +02:00
parent 5eb7b35bfe
commit 894a77618f
2 changed files with 11 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
include/class/noalyss_user.class.php
View file

@ -1887,14 +1887,19 @@ class Noalyss_User
return $result;
}
/**
* @brief generate OTP
* @brief generate OTP secret to store in AC_USER.USE_OTP_SECRET
*/
function generate_otp()
{
$otp=new \Noalyss\OTP();
$this->otp_secret=$otp->build_secret();
}
/**
* @brief retrieve authent_method
* - 0 password
* - 1 password + code by email
* - 2 password + OTP from application
*/
public function get_authent_method() {
return $this->authent_method;
}
@ -2000,7 +2005,6 @@ Voici votre code secret pour NOALYSS : $code
$mail->set_subject(_("NOALYSS : Double authentification lien pour 2FA: OTP"));
$noalyss_url = NOALYSS_URL;
$uuid = guidv4();
$id = $this->getId();
$valid_time=new \DateTime();
$valid_time->add(new \DateInterval('PT12H'));
$str_time=$valid_time->format('d-m-Y H:i');
@ -2012,7 +2016,7 @@ Voici votre code secret pour NOALYSS : $code
Afin de pouvoir utiliser la double authentification avec 2FA: OTP, pourriez-vous
suivre ce lien et scanner le QRCode avec votre application android freeOTP ou Google Authenticator.
Ce lien ne sera actif que 12 heures et expirera le {$str_time}.
Ce lien expirera le {$str_time}.
{$noalyss_url}/index.php?otp={$uuid}
@ -2032,7 +2036,7 @@ Bien cordialement,
$repository->exec_sql("delete from otp_send_secret where os_valid_time < now()");
$otp_send_secret_sql = new \Otp_Send_Secret_SQL($repository);
$otp_send_secret_sql->set('use_id', $id)
$otp_send_secret_sql->set('use_id', $this->id)
->set('os_valid_time',$valid_time->format('d-m-Y H:i'))
->set('os_request', $uuid);

4
include/lib/otp.class.php
View file

@ -50,7 +50,7 @@ class OTP {
}
/**
* @brief build a secret key and returns it
* @return string random string of 32
* @return string random string of 32 char
*/
function build_secret() {
@ -61,7 +61,7 @@ class OTP {
/**
* @brief compute a code for auth. for the user passed in parameter
* @param $user (\Noalyss_User)
* @param $secret (string) secret stored in AC_USER
*/
function compute_code($secret)
{