Merge remote-tracking branch 'remotes/GH/master' into rel_1.x
# Conflicts: # composer.json
Cette révision appartient à :
révision
87e18c90a1
10
README.md
Fichier normal
10
README.md
Fichier normal
@ -0,0 +1,10 @@
|
|||||||
|
# oxtotp (2FA)
|
||||||
|
Modul für eine 2-Faktor-Authentisierung (2FA) zum Login in Front- und Backend zusätzlich zu Benutzername und Passwort.
|
||||||
|
|
||||||
|
- Authentisierung wird nur bei Benutzerkonten gezeigt, die dieses aktiviert haben - sonst nur Standardanmeldung die Basis der Passwortgenerierung wird für jedes Benutzerkonto individuell angelegt</li>
|
||||||
|
|
||||||
|
- Einrichtung des Zugangs in der Auth-App kann durch scanbaren QR-Code oder kopierbare Zeichenkette erfolgen
|
||||||
|
|
||||||
|
- Validierung der Einmalpassworte und Generierung der QR-Codes werden ausschließlich innerhalb des Shops durchgeführt - keine Kommunikation nach außen nötig
|
||||||
|
|
||||||
|
- statische Backupcodes ermöglichen auch eine (begrenzte) Anmeldung ohne Zugang zum Generierungstool
|
@ -15,6 +15,12 @@
|
|||||||
"email": "info@shopmodule.com",
|
"email": "info@shopmodule.com",
|
||||||
"homepage": "https://www.d3data.de",
|
"homepage": "https://www.d3data.de",
|
||||||
"role": "Owner"
|
"role": "Owner"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"name": "Tobi Matthaiou",
|
||||||
|
"email": "tm@loberon.com",
|
||||||
|
"homepage": "http://www.loberon.de",
|
||||||
|
"role": "Contributor"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"support": {
|
"support": {
|
||||||
@ -32,9 +38,10 @@
|
|||||||
},
|
},
|
||||||
"require": {
|
"require": {
|
||||||
"php": ">=5.6",
|
"php": ">=5.6",
|
||||||
"oxid-esales/oxideshop-metapackage-ce": "~6.0.3 || ~6.1.0 || ~6.2.0",
|
"ext-xmlwriter": "*",
|
||||||
|
"oxid-esales/oxideshop-metapackage-ce": "~6.0.3 || ~6.1.0 || ~6.2.0 || ~6.3.0 || ~6.4.0 || ~6.5.0",
|
||||||
"spomky-labs/otphp": "^8.3",
|
"spomky-labs/otphp": "^8.3",
|
||||||
"bacon/bacon-qr-code": "^1.0",
|
"bacon/bacon-qr-code": "^1.0 || ^2.0",
|
||||||
"zendframework/zend-math": "^3.2"
|
"zendframework/zend-math": "^3.2"
|
||||||
},
|
},
|
||||||
"suggest": {
|
"suggest": {
|
||||||
|
47
src/Application/Factory/BaconQrCodeFactory.php
Fichier normal
47
src/Application/Factory/BaconQrCodeFactory.php
Fichier normal
@ -0,0 +1,47 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
declare(strict_types=1);
|
||||||
|
|
||||||
|
namespace D3\Totp\Application\Factory;
|
||||||
|
|
||||||
|
use BaconQrCode\Renderer\RendererInterface;
|
||||||
|
use BaconQrCode\Renderer\Image\Svg; // v1.0.3
|
||||||
|
use BaconQrCode\Renderer\ImageRenderer; // v2.0.0
|
||||||
|
use BaconQrCode\Renderer\Image\SvgImageBackEnd; // v2.0.0
|
||||||
|
use BaconQrCode\Renderer\RendererStyle\RendererStyle; // v2.0.0
|
||||||
|
|
||||||
|
|
||||||
|
class BaconQrCodeFactory
|
||||||
|
{
|
||||||
|
/**
|
||||||
|
* @return RendererInterface
|
||||||
|
*/
|
||||||
|
public static function renderer($size)
|
||||||
|
{
|
||||||
|
if (class_exists(Svg::class)) {
|
||||||
|
return self::v100($size);
|
||||||
|
}
|
||||||
|
|
||||||
|
return self::v200($size);
|
||||||
|
}
|
||||||
|
|
||||||
|
private static function v200($size)
|
||||||
|
{
|
||||||
|
$renderer = oxNew(
|
||||||
|
ImageRenderer::class,
|
||||||
|
oxNew(RendererStyle::class, $size),
|
||||||
|
oxNew(SvgImageBackEnd::class),
|
||||||
|
);
|
||||||
|
|
||||||
|
return $renderer;
|
||||||
|
}
|
||||||
|
|
||||||
|
private static function v100($size)
|
||||||
|
{
|
||||||
|
$renderer = oxNew(Svg::class);
|
||||||
|
$renderer->setHeight($size);
|
||||||
|
$renderer->setWidth($size);
|
||||||
|
|
||||||
|
return $renderer;
|
||||||
|
}
|
||||||
|
}
|
@ -15,9 +15,9 @@
|
|||||||
|
|
||||||
namespace D3\Totp\Application\Model;
|
namespace D3\Totp\Application\Model;
|
||||||
|
|
||||||
use BaconQrCode\Renderer\Image\Svg;
|
|
||||||
use BaconQrCode\Renderer\RendererInterface;
|
use BaconQrCode\Renderer\RendererInterface;
|
||||||
use BaconQrCode\Writer;
|
use BaconQrCode\Writer;
|
||||||
|
use D3\Totp\Application\Factory\BaconQrCodeFactory;
|
||||||
use D3\Totp\Application\Model\Exceptions\d3totp_wrongOtpException;
|
use D3\Totp\Application\Model\Exceptions\d3totp_wrongOtpException;
|
||||||
use Doctrine\DBAL\DBALException;
|
use Doctrine\DBAL\DBALException;
|
||||||
use OTPHP\TOTP;
|
use OTPHP\TOTP;
|
||||||
@ -177,10 +177,7 @@ class d3totp extends BaseModel
|
|||||||
*/
|
*/
|
||||||
public function getQrCodeElement()
|
public function getQrCodeElement()
|
||||||
{
|
{
|
||||||
$renderer = oxNew(Svg::class);
|
$renderer = BaconQrCodeFactory::renderer(200);
|
||||||
$renderer->setHeight(200);
|
|
||||||
$renderer->setWidth(200);
|
|
||||||
|
|
||||||
$writer = $this->d3GetWriter($renderer);
|
$writer = $this->d3GetWriter($renderer);
|
||||||
return $writer->writeString($this->getTotp()->getProvisioningUri());
|
return $writer->writeString($this->getTotp()->getProvisioningUri());
|
||||||
}
|
}
|
||||||
|
@ -17,8 +17,8 @@
|
|||||||
|
|
||||||
namespace D3\Totp\tests\unit\Application\Model;
|
namespace D3\Totp\tests\unit\Application\Model;
|
||||||
|
|
||||||
use BaconQrCode\Renderer\Image\Svg;
|
|
||||||
use BaconQrCode\Writer;
|
use BaconQrCode\Writer;
|
||||||
|
use D3\Totp\Application\Factory\BaconQrCodeFactory;
|
||||||
use D3\Totp\Application\Model\d3backupcodelist;
|
use D3\Totp\Application\Model\d3backupcodelist;
|
||||||
use D3\Totp\Application\Model\d3totp;
|
use D3\Totp\Application\Model\d3totp;
|
||||||
use D3\Totp\Application\Model\Exceptions\d3totp_wrongOtpException;
|
use D3\Totp\Application\Model\Exceptions\d3totp_wrongOtpException;
|
||||||
@ -562,7 +562,7 @@ class d3totpTest extends d3TotpUnitTestCase
|
|||||||
*/
|
*/
|
||||||
public function getQrCodeElement()
|
public function getQrCodeElement()
|
||||||
{
|
{
|
||||||
$renderer = oxNew(Svg::class);
|
$renderer = BaconQrCodeFactory::renderer(200);
|
||||||
|
|
||||||
/** @var d3totp|PHPUnit_Framework_MockObject_MockObject $oTotpMock */
|
/** @var d3totp|PHPUnit_Framework_MockObject_MockObject $oTotpMock */
|
||||||
$oTotpMock = $this->getMock(d3totp::class, array(
|
$oTotpMock = $this->getMock(d3totp::class, array(
|
||||||
@ -595,7 +595,7 @@ class d3totpTest extends d3TotpUnitTestCase
|
|||||||
*/
|
*/
|
||||||
public function d3GetWriterReturnsRightInstance()
|
public function d3GetWriterReturnsRightInstance()
|
||||||
{
|
{
|
||||||
$renderer = oxNew(Svg::class);
|
$renderer = BaconQrCodeFactory::renderer(200);;
|
||||||
|
|
||||||
$this->assertInstanceOf(
|
$this->assertInstanceOf(
|
||||||
Writer::class,
|
Writer::class,
|
||||||
|
Chargement…
x
Référencer dans un nouveau ticket
Bloquer un utilisateur