116 lines
3.5 KiB
PHP
116 lines
3.5 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of NOALYSS.
|
|
*
|
|
* NOALYSS is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* NOALYSS is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with NOALYSS; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
// Copyright Author Dany De Bontridder danydb@aevalys.eu 22/10/23
|
|
|
|
|
|
/**
|
|
* @file
|
|
* @brief generate a QRCode for setting up freeOTP
|
|
*
|
|
*
|
|
*/
|
|
if (!file_exists($dirname . '/config.inc.php')) {
|
|
die("system not installed");
|
|
}
|
|
|
|
require_once __DIR__ . '/constant.php';
|
|
|
|
use Endroid\QrCode\Color\Color;
|
|
use Endroid\QrCode\Encoding\Encoding;
|
|
use Endroid\QrCode\ErrorCorrectionLevel;
|
|
use Endroid\QrCode\QrCode;
|
|
use Endroid\QrCode\Label\Label;
|
|
use Endroid\QrCode\Logo\Logo;
|
|
use Endroid\QrCode\RoundBlockSizeMode;
|
|
use Endroid\QrCode\Writer\PngWriter;
|
|
use Endroid\QrCode\Writer\ValidationException;
|
|
use chillerlan\Authenticator\{
|
|
Authenticator,
|
|
AuthenticatorOptions
|
|
};
|
|
use chillerlan\Authenticator\Authenticators\AuthenticatorInterface;
|
|
|
|
$http = new HttpInput();
|
|
try {
|
|
$uuid = $http->get('otp');
|
|
$repository = new \Database(0);
|
|
// remove old request (> 24 hours)
|
|
$repository->exec_sql("delete from otp_send_secret where os_timestamp < now()-interval '24 hours'");
|
|
|
|
// check if UUID exist
|
|
$id = $repository->get_value("select os_id from otp_send_secret where os_request=$1",
|
|
[$uuid]);
|
|
// if UUID doesn't exist exit
|
|
if ($repository->count() == 0) {
|
|
return;
|
|
}
|
|
|
|
// get email from id
|
|
$otp_send = new Otp_Send_Secret_SQL($repository, $id);
|
|
$user = new Noalyss_User($repository, $otp_send->get('use_id'));
|
|
$secret = $user->get_otp_secret();
|
|
|
|
// OTP
|
|
$options = new AuthenticatorOptions;
|
|
$options->secret_length = 32;
|
|
$options->algorithm = AuthenticatorInterface::ALGO_SHA512;
|
|
$options->digits=6;
|
|
$authenticator = new Authenticator($options);
|
|
$authenticator->setSecret($secret);
|
|
$data= $authenticator->getUri(label:"noalyss:".$user->getEmail(),issuer:"noalyss.eu");
|
|
// load secret for this id
|
|
//echo "use with php -S localhost:5000 puis ouvrir index.html ";
|
|
$writer = new PngWriter();
|
|
|
|
// Create QR code
|
|
$qrCode = new QrCode(
|
|
data: $data,
|
|
encoding: new Encoding('UTF-8'),
|
|
errorCorrectionLevel: ErrorCorrectionLevel::Medium,
|
|
size: 600,
|
|
margin: 10,
|
|
roundBlockSizeMode: RoundBlockSizeMode::Margin,
|
|
foregroundColor: new Color(0, 0, 0),
|
|
backgroundColor: new Color(255, 255, 255)
|
|
);
|
|
|
|
$result = $writer->write($qrCode);
|
|
echo '<div style="margin:4rem">';
|
|
// generate the QRCode
|
|
echo '<h1>',_("Scanner ceci avec freeOTP"),'</h1>';
|
|
|
|
echo '<p>';
|
|
echo _("Scanner ce QRCode avec votre application OTP afin de l'ajouter");
|
|
|
|
if ( DEBUGNOALYSS > 1) { echo "code attendu",$authenticator->code();}
|
|
echo '</p>';
|
|
|
|
printf('<img src="data:image/png;base64,%s">', base64_encode($result->getString()));
|
|
|
|
echo '</div>';
|
|
} catch (Exception $exc) {
|
|
record_log($e);
|
|
return;
|
|
}
|
|
?>
|
|
|
|
|
|
|
|
|