Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-09-06 07:57:02 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Resolve #263

Browse source
This commit is contained in:
the-djmaze 2022-03-04 11:53:36 +01:00
parent a0deddd4e2
commit 4f2f2dd485
1 changed files with 26 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

33
plugins/two-factor-auth/index.php
View file

@ -7,8 +7,8 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
{ {
const const
NAME = 'Two Factor Authentication', NAME = 'Two Factor Authentication',
VERSION = '2.13.2', VERSION = '2.13.3',
RELEASE = '2022-02-28', RELEASE = '2022-03-04',
REQUIRED = '2.13.2', REQUIRED = '2.13.2',
CATEGORY = 'Login', CATEGORY = 'Login',
DESCRIPTION = 'Provides support for TOTP 2FA'; DESCRIPTION = 'Provides support for TOTP 2FA';
@ -95,7 +95,7 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
$this->StorageProvider()->Put($oAccount, $this->StorageProvider()->Put($oAccount,
\RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG, \RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG,
'two_factor', 'two_factor',
\RainLoop\Utils::EncodeKeyValues(array( \json_encode(array(
'User' => $sEmail, 'User' => $sEmail,
'Enable' => false, 'Enable' => false,
'Secret' => $sSecret, 'Secret' => $sSecret,
@ -152,7 +152,7 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
$bResult = $this->StorageProvider()->Put($oAccount, $bResult = $this->StorageProvider()->Put($oAccount,
\RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG, \RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG,
'two_factor', 'two_factor',
\RainLoop\Utils::EncodeKeyValues(array( \json_encode(array(
'User' => $sEmail, 'User' => $sEmail,
'Enable' => '1' === \trim($this->jsonParam('Enable', '0')), 'Enable' => '1' === \trim($this->jsonParam('Enable', '0')),
'Secret' => $mData['Secret'], 'Secret' => $mData['Secret'],
@ -247,7 +247,7 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
if ($sData) if ($sData)
{ {
$mData = \RainLoop\Utils::DecodeKeyValues($sData); $mData = static::DecodeKeyValues($sData);
} }
} }
@ -297,7 +297,7 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
if ($sData) if ($sData)
{ {
$mData = \RainLoop\Utils::DecodeKeyValues($sData); $mData = static::DecodeKeyValues($sData);
if (!empty($mData['BackupCodes'])) if (!empty($mData['BackupCodes']))
{ {
@ -309,11 +309,30 @@ class TwoFactorAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
return $this->StorageProvider()->Put($oAccount, return $this->StorageProvider()->Put($oAccount,
\RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG, \RainLoop\Providers\Storage\Enumerations\StorageType::CONFIG,
'two_factor', 'two_factor',
\RainLoop\Utils::EncodeKeyValues($mData) \json_encode($mData)
); );
} }
} }
return false; return false;
} }
private static function DecodeKeyValues(string $sData) : array
{
if (!\str_contains($sData, 'User')) {
$sData = \MailSo\Base\Utils::UrlSafeBase64Decode($sData);
if (!\strlen($sData)) {
return '';
}
$sKey = \md5(APP_SALT);
$sData = \is_callable('xxtea_decrypt')
? \xxtea_decrypt($sData, $sKey)
: \MailSo\Base\Xxtea::decrypt($sData, $sKey);
}
try {
return \json_decode($sData, true, 512, JSON_THROW_ON_ERROR) ?: array();
} catch (\Throwable $e) {
return \unserialize($sData) ?: array();
}
}
} }