browser-authenticator.js/authenticator.js

88 lines
2.4 KiB
JavaScript
Raw Normal View History

2015-10-23 07:11:29 +00:00
(function (exports) {
'use strict';
2015-10-23 07:40:01 +00:00
var Authenticator = exports.Authenticator; // || exports;
var Unibabel = window.Unibabel; // || require('unibabel');
var totp = window.totp; // || require('notp').totp;
2015-10-23 07:11:29 +00:00
if (!window.crypto) {
document.addEventListener('mousemove', function (event) {
var ev = event || window.event;
window.forge.random.collectInt(ev.pageX, 16);
window.forge.random.collectInt(ev.pageY, 16);
});
}
// Generate a key
function generateOtpKey() {
// 20 cryptographically random binary bytes (160-bit key)
2015-10-23 07:40:01 +00:00
if (window.crypto) {
2015-10-23 07:11:29 +00:00
var key = window.crypto.getRandomValues(new Uint8Array(20));
return Promise.resolve(key);
} else {
2015-10-23 07:40:01 +00:00
// Promises are supported even in Microsoft Edge
// only old IE and old android need shims
2015-10-23 07:11:29 +00:00
return new Promise(function (resolve, reject) {
window.forge.random.getBytes(20, function (err, bytes) {
if (err) {
reject(err);
return;
}
resolve(Unibabel.binaryStringToBuffer(bytes));
});
});
}
}
// Text-encode the key as base32 (in the style of Google Authenticator - same as Facebook, Microsoft, etc)
function encodeGoogleAuthKey(bin) {
// 32 ascii characters without trailing '='s
2015-10-23 07:40:01 +00:00
var base32 = (Unibabel||window).bufferToBase32(bin).replace(/=/g, '');
2015-10-23 07:11:29 +00:00
// lowercase with a space every 4 characters
var key = base32.toLowerCase().replace(/(\w{4})/g, "$1 ").trim();
return key;
}
function generateGoogleAuthKey() {
return generateOtpKey().then(encodeGoogleAuthKey);
}
// Binary-decode the key from base32 (Google Authenticator, FB, M$, etc)
function decodeGoogleAuthKey(key) {
// decode base32 google auth key to binary
var unformatted = key.replace(/\W+/g, '').toUpperCase();
2015-10-23 07:40:01 +00:00
var bin = (Unibabel||window).base32ToBuffer(unformatted);
2015-10-23 07:11:29 +00:00
return bin;
}
// Generate a Google Auth Token
function generateGoogleAuthToken(key) {
var bin = decodeGoogleAuthKey(key);
return totp.gen(bin);
}
// Verify a Google Auth Token
function verifyGoogleAuthToken(key, token) {
var bin = decodeGoogleAuthKey(key);
token = token.replace(/\W+/g, '');
// window is +/- 1 period of 30 seconds
return totp.verify(token, bin, { window: 1, time: 30 });
}
Authenticator.generateKey = generateGoogleAuthKey;
Authenticator.generateToken = generateGoogleAuthToken;
Authenticator.verifyToken = verifyGoogleAuthToken;
}(
'undefined' !== typeof window ? (window.Authenticator = {}) : module.exports
));