92 lines
2.6 KiB
Perl
92 lines
2.6 KiB
Perl
package Lemonldap::NG::Portal::2F::Register::Yubikey;
|
|
|
|
use strict;
|
|
use Mouse;
|
|
use JSON qw(from_json to_json);
|
|
use Lemonldap::NG::Portal::Main::Constants qw(
|
|
PE_FORMEMPTY
|
|
PE_ERROR
|
|
);
|
|
|
|
our $VERSION = '2.0.0';
|
|
|
|
extends 'Lemonldap::NG::Portal::Main::Plugin';
|
|
|
|
# INITIALIZATION
|
|
|
|
has prefix => ( is => 'rw', default => 'yubikey' );
|
|
|
|
has template => ( is => 'ro', default => 'yubikey2fregister' );
|
|
|
|
has logo => ( is => 'rw', default => 'yubikey.png' );
|
|
|
|
sub init {
|
|
my ($self) = @_;
|
|
$self->conf->{yubikey2fPublicIDSize} ||= 12;
|
|
return 1;
|
|
}
|
|
|
|
# RUNNING METHODS
|
|
|
|
# Main method
|
|
sub run {
|
|
my ( $self, $req, $action ) = @_;
|
|
if ( $action eq 'register' ) {
|
|
my $otp = $req->param('otp');
|
|
if ( $otp and length($otp) > $self->conf->{yubikey2fPublicIDSize} ) {
|
|
my $keys = $req->userData->{_yubikeys} || '';
|
|
$keys .= ( $keys ? ', ' : '' )
|
|
. substr( $otp, 0, $self->conf->{yubikey2fPublicIDSize} );
|
|
|
|
|
|
|
|
|
|
my $key = substr( $otp, 0, $self->conf->{yubikey2fPublicIDSize} );
|
|
my $list2FDevices = eval { from_json($req->userData->{list2FDevices}, { allow_nonref => 1 } ) };
|
|
unless ($list2FDevices) {
|
|
$self->logger->debug("No 2F Device found");
|
|
$list2FDevices = [];
|
|
};
|
|
push $list2FDevices, { type => 'UBK', name => 'UBK_1', _yubikey => $key, epoch => time() };
|
|
$self->logger->debug("Append 2F Device : { type => 'UBK', name => 'UBK_1' }" );
|
|
$self->p->updatePersistentSession( $req,
|
|
{ list2FDevices => to_json($list2FDevices) } );
|
|
|
|
|
|
|
|
|
|
|
|
$self->p->updatePersistentSession( $req, { _yubikeys => $keys } );
|
|
return $self->p->sendHtml(
|
|
$req, 'error',
|
|
params => {
|
|
RAW_ERROR => 'yourKeyIsRegistered',
|
|
AUTH_ERROR_TYPE => 'positive',
|
|
}
|
|
);
|
|
}
|
|
else {
|
|
$self->userLogger->error('Yubikey 2F: no code');
|
|
return $self->p->sendHtml(
|
|
$req, 'error',
|
|
params => {
|
|
AUTH_ERROR => PE_FORMEMPTY,
|
|
AUTH_ERROR_TYPE => 'positive',
|
|
}
|
|
);
|
|
}
|
|
}
|
|
else {
|
|
$self->userLogger->error("Unknown Yubikey action $action");
|
|
return $self->p->sendHtml(
|
|
$req, 'error',
|
|
params => {
|
|
AUTH_ERROR => PE_ERROR,
|
|
AUTH_ERROR_TYPE => 'positive',
|
|
}
|
|
);
|
|
}
|
|
}
|
|
|
|
1;
|