src/Module/TwoFactor/Verify.php

   1 <?php
   2
   3 namespace Friendica\Module\TwoFactor;
   4
   5 use Friendica\BaseModule;
   6 use Friendica\Core\L10n;
   7 use Friendica\Core\PConfig;
   8 use Friendica\Core\Renderer;
   9 use Friendica\Core\Session;
  10 use PragmaRX\Google2FA\Google2FA;
  11
  12 /**
  13  * Page 1: Authenticator code verification
  14  *
  15  * @package Friendica\Module\TwoFactor
  16  */
  17 class Verify extends BaseModule
  18 {
  19         public static function post()
  20         {
  21                 if (!local_user()) {
  22                         return;
  23                 }
  24
  25                 if (defaults($_POST, 'action', null) == 'verify') {
  26                         self::checkFormSecurityTokenRedirectOnError('2fa', 'twofactor_verify');
  27
  28                         $a = self::getApp();
  29
  30                         $code = defaults($_POST, 'verify_code', '');
  31
  32                         $valid = (new Google2FA())->verifyKey(PConfig::get(local_user(), '2fa', 'secret'), $code);
  33
  34                         // The same code can't be used twice even if it's valid
  35                         if ($valid && Session::get('2fa') !== $code) {
  36                                 Session::set('2fa', $code);
  37
  38                                 // Resume normal login workflow
  39                                 Session::setAuthenticatedForUser($a, $a->user, true, true);
  40                         } else {
  41                                 notice(L10n::t('Invalid code, please retry.'));
  42                         }
  43                 }
  44         }
  45
  46         public static function content()
  47         {
  48                 if (!local_user()) {
  49                         self::getApp()->internalRedirect();
  50                 }
  51
  52                 // Already authenticated with 2FA token
  53                 if (Session::get('2fa')) {
  54                         self::getApp()->internalRedirect();
  55                 }
  56
  57                 return Renderer::replaceMacros(Renderer::getMarkupTemplate('twofactor/verify.tpl'), [
  58                         '$form_security_token' => self::getFormSecurityToken('twofactor_verify'),
  59
  60                         '$title'            => L10n::t('Two-factor authentication'),
  61                         '$message'          => L10n::t('<p>Open the two-factor authentication app on your device to get an authentication code and verify your identity.</p>'),
  62                         '$recovery_message' => L10n::t('Don’t have your phone? <a href="%s">Enter a two-factor recovery code</a>', '2fa/recovery'),
  63                         '$verify_code'      => ['verify_code', L10n::t('Please enter a code from your authentication app'), '', '', 'required', 'autofocus placeholder="000000"'],
  64                         '$verify_label'     => L10n::t('Verify code and complete login'),
  65                 ]);
  66         }
  67 }