eduVPN / vpn-server-api

        $service->post(

            '/set_yubi_key_id',

            function (Request $request, array $hookData) {

                AuthUtils::requireUser($hookData, ['vpn-user-portal']);

                $userId = InputValidation::userId($request->getPostParameter('user_id'));

                $yubiKeyOtp = InputValidation::yubiKeyOtp($request->getPostParameter('yubi_key_otp'));

                // check if there is already a YubiKey ID registered for this user

                if ($this->storage->hasYubiKeyId($userId)) {

                    return new ApiErrorResponse('set_yubi_key_id', 'YubiKey ID already set');

                }

                $yubiKey = new YubiKey();

                try {

                    $yubiKeyId = $yubiKey->verify($userId, $yubiKeyOtp);

                    $this->storage->setYubiKeyId($userId, $yubiKeyId);

                    $this->storage->addUserMessage($userId, 'notification', sprintf('YubiKey ID "%s" registered', $yubiKeyId));

                    return new ApiResponse('set_yubi_key_id');

                } catch (YubiKeyException $e) {

                    $msg = sprintf('YubiKey OTP verification failed: %s', $e->getMessage());

                    $this->storage->addUserMessage($userId, 'notification', $msg);

                    return new ApiErrorResponse('set_yubi_key_id', $msg);

                }

            }

        );

        $service->post(

        $service->post(

            '/set_totp_secret',

            function (Request $request, array $hookData) {

                AuthUtils::requireUser($hookData, ['vpn-user-portal']);

                $userId = InputValidation::userId($request->getPostParameter('user_id'));

                $totpKey = InputValidation::totpKey($request->getPostParameter('totp_key'));

                $totpSecret = InputValidation::totpSecret($request->getPostParameter('totp_secret'));

                // check if there is already a TOTP secret registered for this user

                if ($this->storage->hasTotpSecret($userId)) {

                    return new ApiErrorResponse('set_totp_secret', 'TOTP secret already set');

                }

                $totp = new Totp($this->storage);

                try {

                    $totp->verify($userId, $totpKey, $totpSecret);

                } catch (TotpException $e) {

                    $msg = sprintf('TOTP verification failed: %s', $e->getMessage());

                    $this->storage->addUserMessage($userId, 'notification', $msg);

                    return new ApiErrorResponse('set_totp_secret', $msg);

                }

                $this->storage->setTotpSecret($userId, $totpSecret);

                $this->storage->addUserMessage($userId, 'notification', 'TOTP secret registered');

                return new ApiResponse('set_totp_secret');

            }

        );

        $service->post(