c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
60 lines
1.3 KiB
Go
60 lines
1.3 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package totp
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"encoding/base64"
|
|
"image/png"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/pquerna/otp"
|
|
stdtotp "github.com/pquerna/otp/totp"
|
|
|
|
"github.com/ory/kratos/driver/config"
|
|
)
|
|
|
|
// rfc4226 recommends:
|
|
//
|
|
// The algorithm MUST use a strong shared secret. The length of
|
|
// the shared secret MUST be at least 128 bits. This document
|
|
// RECOMMENDs a shared secret length of 160 bits.
|
|
//
|
|
// So we need 160/8 = 20 key length. stdtotp.Generate uses the key
|
|
// length for reading from crypto.Rand.
|
|
const secretSize = 160 / 8
|
|
const digits = otp.DigitsSix
|
|
|
|
func NewKey(ctx context.Context, accountName string, d interface {
|
|
config.Provider
|
|
}) (*otp.Key, error) {
|
|
key, err := stdtotp.Generate(stdtotp.GenerateOpts{
|
|
Issuer: d.Config().TOTPIssuer(ctx),
|
|
AccountName: accountName,
|
|
SecretSize: secretSize,
|
|
Digits: digits,
|
|
Period: 30,
|
|
})
|
|
if err != nil {
|
|
return nil, errors.WithStack(err)
|
|
}
|
|
|
|
return key, err
|
|
}
|
|
|
|
func KeyToHTMLImage(key *otp.Key) (string, error) {
|
|
var buf bytes.Buffer
|
|
img, err := key.Image(256, 256)
|
|
if err != nil {
|
|
return "", errors.WithStack(err)
|
|
}
|
|
|
|
if err := png.Encode(&buf, img); err != nil {
|
|
return "", errors.WithStack(err)
|
|
}
|
|
|
|
return "data:image/png;base64," + base64.StdEncoding.EncodeToString(buf.Bytes()), nil
|
|
}
|