mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2025-12-19 06:32:30 +00:00
120 lines
2.7 KiB
Go
120 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
"time"
|
|
"tinyauth/internal/utils"
|
|
|
|
"github.com/charmbracelet/huh"
|
|
"github.com/mdp/qrterminal/v3"
|
|
"github.com/pquerna/otp/totp"
|
|
"github.com/rs/zerolog"
|
|
"github.com/rs/zerolog/log"
|
|
"github.com/traefik/paerser/cli"
|
|
)
|
|
|
|
type GenerateTotpConfig struct {
|
|
Interactive bool `description:"Generate a TOTP secret interactively."`
|
|
User string `description:"Your current user (username:hash)."`
|
|
}
|
|
|
|
func NewGenerateTotpConfig() *GenerateTotpConfig {
|
|
return &GenerateTotpConfig{
|
|
Interactive: false,
|
|
User: "",
|
|
}
|
|
}
|
|
|
|
func generateTotpCmd() *cli.Command {
|
|
tCfg := NewGenerateTotpConfig()
|
|
|
|
loaders := []cli.ResourceLoader{
|
|
&cli.FlagLoader{},
|
|
}
|
|
|
|
return &cli.Command{
|
|
Name: "generate",
|
|
Description: "Generate a TOTP secret",
|
|
Configuration: tCfg,
|
|
Resources: loaders,
|
|
Run: func(_ []string) error {
|
|
log.Logger = log.Output(zerolog.ConsoleWriter{Out: os.Stderr, TimeFormat: time.RFC3339}).With().Caller().Logger().Level(zerolog.InfoLevel)
|
|
|
|
if tCfg.Interactive {
|
|
form := huh.NewForm(
|
|
huh.NewGroup(
|
|
huh.NewInput().Title("Current user (username:hash)").Value(&tCfg.User).Validate((func(s string) error {
|
|
if s == "" {
|
|
return errors.New("user cannot be empty")
|
|
}
|
|
return nil
|
|
})),
|
|
),
|
|
)
|
|
|
|
var baseTheme *huh.Theme = huh.ThemeBase()
|
|
|
|
err := form.WithTheme(baseTheme).Run()
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("failed to run interactive prompt: %w", err)
|
|
}
|
|
}
|
|
|
|
user, err := utils.ParseUser(tCfg.User)
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse user: %w", err)
|
|
}
|
|
|
|
docker := false
|
|
if strings.Contains(tCfg.User, "$$") {
|
|
docker = true
|
|
}
|
|
|
|
if user.TotpSecret != "" {
|
|
return fmt.Errorf("user already has a TOTP secret")
|
|
}
|
|
|
|
key, err := totp.Generate(totp.GenerateOpts{
|
|
Issuer: "Tinyauth",
|
|
AccountName: user.Username,
|
|
})
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("failed to generate TOTP secret: %w", err)
|
|
}
|
|
|
|
secret := key.Secret()
|
|
|
|
log.Info().Str("secret", secret).Msg("Generated TOTP secret")
|
|
|
|
log.Info().Msg("Generated QR code")
|
|
|
|
config := qrterminal.Config{
|
|
Level: qrterminal.L,
|
|
Writer: os.Stdout,
|
|
BlackChar: qrterminal.BLACK,
|
|
WhiteChar: qrterminal.WHITE,
|
|
QuietZone: 2,
|
|
}
|
|
|
|
qrterminal.GenerateWithConfig(key.URL(), config)
|
|
|
|
user.TotpSecret = secret
|
|
|
|
// If using docker escape re-escape it
|
|
if docker {
|
|
user.Password = strings.ReplaceAll(user.Password, "$", "$$")
|
|
}
|
|
|
|
log.Info().Str("user", fmt.Sprintf("%s:%s:%s", user.Username, user.Password, user.TotpSecret)).Msg("Add the totp secret to your authenticator app then use the verify command to ensure everything is working correctly.")
|
|
|
|
return nil
|
|
},
|
|
}
|
|
}
|