76 lines
2.2 KiB
PHP
76 lines
2.2 KiB
PHP
<?php
|
|
|
|
namespace Pterodactyl\Services\Users;
|
|
|
|
use Exception;
|
|
use RuntimeException;
|
|
use Pterodactyl\Models\User;
|
|
use Illuminate\Contracts\Encryption\Encrypter;
|
|
use Pterodactyl\Contracts\Repository\UserRepositoryInterface;
|
|
use Illuminate\Contracts\Config\Repository as ConfigRepository;
|
|
|
|
class TwoFactorSetupService
|
|
{
|
|
public const VALID_BASE32_CHARACTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
|
|
|
|
/**
|
|
* @var \Illuminate\Contracts\Config\Repository
|
|
*/
|
|
private $config;
|
|
|
|
/**
|
|
* @var \Illuminate\Contracts\Encryption\Encrypter
|
|
*/
|
|
private $encrypter;
|
|
|
|
/**
|
|
* @var \Pterodactyl\Contracts\Repository\UserRepositoryInterface
|
|
*/
|
|
private $repository;
|
|
|
|
/**
|
|
* TwoFactorSetupService constructor.
|
|
*/
|
|
public function __construct(
|
|
ConfigRepository $config,
|
|
Encrypter $encrypter,
|
|
UserRepositoryInterface $repository
|
|
) {
|
|
$this->config = $config;
|
|
$this->encrypter = $encrypter;
|
|
$this->repository = $repository;
|
|
}
|
|
|
|
/**
|
|
* Generate a 2FA token and store it in the database before returning the
|
|
* QR code URL. This URL will need to be attached to a QR generating service in
|
|
* order to function.
|
|
*
|
|
* @throws \Pterodactyl\Exceptions\Model\DataValidationException
|
|
* @throws \Pterodactyl\Exceptions\Repository\RecordNotFoundException
|
|
*/
|
|
public function handle(User $user): string
|
|
{
|
|
$secret = '';
|
|
try {
|
|
for ($i = 0; $i < $this->config->get('pterodactyl.auth.2fa.bytes', 16); ++$i) {
|
|
$secret .= substr(self::VALID_BASE32_CHARACTERS, random_int(0, 31), 1);
|
|
}
|
|
} catch (Exception $exception) {
|
|
throw new RuntimeException($exception->getMessage(), 0, $exception);
|
|
}
|
|
|
|
$this->repository->withoutFreshModel()->update($user->id, [
|
|
'totp_secret' => $this->encrypter->encrypt($secret),
|
|
]);
|
|
|
|
$company = urlencode(preg_replace('/\s/', '', $this->config->get('app.name')));
|
|
|
|
return sprintf(
|
|
'otpauth://totp/%1$s:%2$s?secret=%3$s&issuer=%1$s',
|
|
rawurlencode($company),
|
|
rawurlencode($user->email),
|
|
rawurlencode($secret)
|
|
);
|
|
}
|
|
}
|