lemonldap-ng/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/2F/Register/Yubikey.pm

92 lines
2.6 KiB
Perl
Raw Normal View History

2018-03-20 18:19:53 +01:00
package Lemonldap::NG::Portal::2F::Register::Yubikey;
use strict;
use Mouse;
use JSON qw(from_json to_json);
2018-03-20 18:19:53 +01:00
use Lemonldap::NG::Portal::Main::Constants qw(
PE_FORMEMPTY
PE_ERROR
);
our $VERSION = '2.0.0';
extends 'Lemonldap::NG::Portal::Main::Plugin';
# INITIALIZATION
has prefix => ( is => 'rw', default => 'yubikey' );
has template => ( is => 'ro', default => 'yubikey2fregister' );
has logo => ( is => 'rw', default => 'yubikey.png' );
2018-03-20 18:19:53 +01:00
sub init {
my ($self) = @_;
$self->conf->{yubikey2fPublicIDSize} ||= 12;
return 1;
}
# RUNNING METHODS
# Main method
sub run {
my ( $self, $req, $action ) = @_;
if ( $action eq 'register' ) {
my $otp = $req->param('otp');
if ( $otp and length($otp) > $self->conf->{yubikey2fPublicIDSize} ) {
2018-03-20 18:19:53 +01:00
my $keys = $req->userData->{_yubikeys} || '';
$keys .= ( $keys ? ', ' : '' )
2018-03-26 10:15:37 +02:00
. substr( $otp, 0, $self->conf->{yubikey2fPublicIDSize} );
my $key = substr( $otp, 0, $self->conf->{yubikey2fPublicIDSize} );
my $list2FDevices = eval { from_json($req->userData->{list2FDevices}, { allow_nonref => 1 } ) };
unless ($list2FDevices) {
$self->logger->debug("No 2F Device found");
$list2FDevices = [];
};
push $list2FDevices, { type => 'UBK', name => 'UBK_1', _yubikey => $key, epoch => time() };
$self->logger->debug("Append 2F Device : { type => 'UBK', name => 'UBK_1' }" );
$self->p->updatePersistentSession( $req,
{ list2FDevices => to_json($list2FDevices) } );
2018-03-20 18:19:53 +01:00
$self->p->updatePersistentSession( $req, { _yubikeys => $keys } );
2018-03-26 10:15:37 +02:00
return $self->p->sendHtml(
$req, 'error',
params => {
RAW_ERROR => 'yourKeyIsRegistered',
AUTH_ERROR_TYPE => 'positive',
}
);
2018-03-20 18:19:53 +01:00
}
else {
$self->userLogger->error('Yubikey 2F: no code');
2018-03-26 10:15:37 +02:00
return $self->p->sendHtml(
$req, 'error',
params => {
AUTH_ERROR => PE_FORMEMPTY,
AUTH_ERROR_TYPE => 'positive',
}
);
2018-03-20 18:19:53 +01:00
}
}
else {
$self->userLogger->error("Unknown Yubikey action $action");
2018-03-26 10:15:37 +02:00
return $self->p->sendHtml(
$req, 'error',
params => {
AUTH_ERROR => PE_ERROR,
AUTH_ERROR_TYPE => 'positive',
}
);
2018-03-20 18:19:53 +01:00
}
}
1;