@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | #!/usr/bin/php |
2 | 2 | <?php |
3 | 3 | |
4 | - /* Copyright (c) 2015 Yubico AB |
|
4 | + /* Copyright (c) 2015 Yubico AB |
|
5 | 5 | * All rights reserved. |
6 | 6 | * |
7 | 7 | * Redistribution and use in source and binary forms, with or without |
@@ -44,38 +44,38 @@ discard block |
||
44 | 44 | $regs; |
45 | 45 | |
46 | 46 | if(array_key_exists('r', $options)) { |
47 | - $mode = "register"; |
|
47 | + $mode = "register"; |
|
48 | 48 | } elseif(array_key_exists('a', $options)) { |
49 | - if(!array_key_exists('R', $options)) { |
|
49 | + if(!array_key_exists('R', $options)) { |
|
50 | 50 | print "a registration must be supplied with -R"; |
51 | 51 | exit(1); |
52 | - } |
|
53 | - $regs = json_decode('[' . $options['R'] . ']'); |
|
54 | - $mode = "authenticate"; |
|
52 | + } |
|
53 | + $regs = json_decode('[' . $options['R'] . ']'); |
|
54 | + $mode = "authenticate"; |
|
55 | 55 | } else { |
56 | - print "-r or -a must be used\n"; |
|
57 | - exit(1); |
|
56 | + print "-r or -a must be used\n"; |
|
57 | + exit(1); |
|
58 | 58 | } |
59 | 59 | if(!array_key_exists('o', $options)) { |
60 | - print "origin must be supplied with -o\n"; |
|
61 | - exit(1); |
|
60 | + print "origin must be supplied with -o\n"; |
|
61 | + exit(1); |
|
62 | 62 | } |
63 | 63 | |
64 | 64 | $u2f = new u2flib_server\U2F($options['o']); |
65 | 65 | |
66 | 66 | if($mode === "register") { |
67 | - $challenge = $u2f->getRegisterData(); |
|
67 | + $challenge = $u2f->getRegisterData(); |
|
68 | 68 | } elseif($mode === "authenticate") { |
69 | - $challenge = $u2f->getAuthenticateData($regs); |
|
69 | + $challenge = $u2f->getAuthenticateData($regs); |
|
70 | 70 | } |
71 | 71 | |
72 | 72 | print json_encode($challenge[0]) . "\n"; |
73 | 73 | $response = fgets(STDIN); |
74 | 74 | |
75 | 75 | if($mode === "register") { |
76 | - $result = $u2f->doRegister($challenge[0], json_decode($response)); |
|
76 | + $result = $u2f->doRegister($challenge[0], json_decode($response)); |
|
77 | 77 | } elseif($mode === "authenticate") { |
78 | - $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
|
78 | + $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
|
79 | 79 | } |
80 | 80 | |
81 | 81 | print json_encode($result) . "\n"; |
@@ -43,41 +43,41 @@ |
||
43 | 43 | $result; |
44 | 44 | $regs; |
45 | 45 | |
46 | -if(array_key_exists('r', $options)) { |
|
46 | +if (array_key_exists('r', $options)) { |
|
47 | 47 | $mode = "register"; |
48 | -} elseif(array_key_exists('a', $options)) { |
|
49 | - if(!array_key_exists('R', $options)) { |
|
48 | +} elseif (array_key_exists('a', $options)) { |
|
49 | + if (!array_key_exists('R', $options)) { |
|
50 | 50 | print "a registration must be supplied with -R"; |
51 | 51 | exit(1); |
52 | 52 | } |
53 | - $regs = json_decode('[' . $options['R'] . ']'); |
|
53 | + $regs = json_decode('['.$options['R'].']'); |
|
54 | 54 | $mode = "authenticate"; |
55 | 55 | } else { |
56 | 56 | print "-r or -a must be used\n"; |
57 | 57 | exit(1); |
58 | 58 | } |
59 | -if(!array_key_exists('o', $options)) { |
|
59 | +if (!array_key_exists('o', $options)) { |
|
60 | 60 | print "origin must be supplied with -o\n"; |
61 | 61 | exit(1); |
62 | 62 | } |
63 | 63 | |
64 | 64 | $u2f = new u2flib_server\U2F($options['o']); |
65 | 65 | |
66 | -if($mode === "register") { |
|
66 | +if ($mode === "register") { |
|
67 | 67 | $challenge = $u2f->getRegisterData(); |
68 | -} elseif($mode === "authenticate") { |
|
68 | +} elseif ($mode === "authenticate") { |
|
69 | 69 | $challenge = $u2f->getAuthenticateData($regs); |
70 | 70 | } |
71 | 71 | |
72 | -print json_encode($challenge[0]) . "\n"; |
|
72 | +print json_encode($challenge[0])."\n"; |
|
73 | 73 | $response = fgets(STDIN); |
74 | 74 | |
75 | -if($mode === "register") { |
|
75 | +if ($mode === "register") { |
|
76 | 76 | $result = $u2f->doRegister($challenge[0], json_decode($response)); |
77 | -} elseif($mode === "authenticate") { |
|
77 | +} elseif ($mode === "authenticate") { |
|
78 | 78 | $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
79 | 79 | } |
80 | 80 | |
81 | -print json_encode($result) . "\n"; |
|
81 | +print json_encode($result)."\n"; |
|
82 | 82 | |
83 | 83 | ?> |
@@ -67,7 +67,7 @@ discard block |
||
67 | 67 | public function __construct($appId, $attestDir = null) |
68 | 68 | { |
69 | 69 | if (OPENSSL_VERSION_NUMBER < 0x10000000) { |
70 | - throw new U2fError('OpenSSL has to be at least version 1.0.0, this is ' . OPENSSL_VERSION_TEXT, U2fError::ERR_OLD_OPENSSL); |
|
70 | + throw new U2fError('OpenSSL has to be at least version 1.0.0, this is '.OPENSSL_VERSION_TEXT, U2fError::ERR_OLD_OPENSSL); |
|
71 | 71 | } |
72 | 72 | $this->appId = $appId; |
73 | 73 | $this->attestDir = $attestDir; |
@@ -84,7 +84,7 @@ discard block |
||
84 | 84 | public function doRegister(RegisterRequestInterface $request, RegisterResponseInterface $response, $includeCert = true) |
85 | 85 | { |
86 | 86 | if ($response->getErrorCode() !== null && $response->getErrorCode() !== 0) { |
87 | - throw new U2fError('User-agent returned error. Error code: ' . $response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
87 | + throw new U2fError('User-agent returned error. Error code: '.$response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
88 | 88 | } |
89 | 89 | |
90 | 90 | if (!is_bool($includeCert)) { |
@@ -167,7 +167,7 @@ discard block |
||
167 | 167 | public function doAuthenticate(array $requests, array $registrations, AuthenticationResponseInterface $response) |
168 | 168 | { |
169 | 169 | if ($response->getErrorCode() != null) { |
170 | - throw new U2fError('User-agent returned error. Error code: ' . $response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
170 | + throw new U2fError('User-agent returned error. Error code: '.$response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
171 | 171 | } |
172 | 172 | |
173 | 173 | $clientData = $this->base64u_decode($response->getClientData()); |
@@ -287,7 +287,7 @@ discard block |
||
287 | 287 | */ |
288 | 288 | $der = "\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01"; |
289 | 289 | $der .= "\x06\x08\x2a\x86\x48\xce\x3d\x03\x01\x07\x03\x42"; |
290 | - $der .= "\0" . $key; |
|
290 | + $der .= "\0".$key; |
|
291 | 291 | |
292 | 292 | $pem = "-----BEGIN PUBLIC KEY-----\r\n"; |
293 | 293 | $pem .= chunk_split(base64_encode($der), 64); |
@@ -94,15 +94,15 @@ discard block |
||
94 | 94 | <?php |
95 | 95 | |
96 | 96 | if($_SERVER['REQUEST_METHOD'] === 'POST') { |
97 | - if(!$_POST['username']) { |
|
97 | + if(!$_POST['username']) { |
|
98 | 98 | echo "alert('no username provided!');"; |
99 | - } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
99 | + } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
100 | 100 | echo "alert('no action provided!');"; |
101 | - } else { |
|
101 | + } else { |
|
102 | 102 | $user = createAndGetUser($_POST['username']); |
103 | 103 | |
104 | 104 | if(isset($_POST['action'])) { |
105 | - switch($_POST['action']): |
|
105 | + switch($_POST['action']): |
|
106 | 106 | case 'register': |
107 | 107 | try { |
108 | 108 | $data = $u2f->getRegisterData(getRegs($user->id)); |
@@ -130,11 +130,11 @@ discard block |
||
130 | 130 | }); |
131 | 131 | }, 1000); |
132 | 132 | <?php |
133 | - } catch( Exception $e ) { |
|
133 | + } catch( Exception $e ) { |
|
134 | 134 | echo "alert('error: " . $e->getMessage() . "');"; |
135 | - } |
|
135 | + } |
|
136 | 136 | |
137 | - break; |
|
137 | + break; |
|
138 | 138 | |
139 | 139 | case 'authenticate': |
140 | 140 | try { |
@@ -157,34 +157,34 @@ discard block |
||
157 | 157 | }); |
158 | 158 | }, 1000); |
159 | 159 | <?php |
160 | - } catch( Exception $e ) { |
|
160 | + } catch( Exception $e ) { |
|
161 | 161 | echo "alert('error: " . $e->getMessage() . "');"; |
162 | - } |
|
162 | + } |
|
163 | 163 | |
164 | - break; |
|
164 | + break; |
|
165 | 165 | |
166 | - endswitch; |
|
166 | + endswitch; |
|
167 | 167 | } else if($_POST['register2']) { |
168 | - try { |
|
168 | + try { |
|
169 | 169 | $reg = $u2f->doRegister(json_decode($_SESSION['regReq']), json_decode($_POST['register2'])); |
170 | 170 | addReg($user->id, $reg); |
171 | - } catch( Exception $e ) { |
|
171 | + } catch( Exception $e ) { |
|
172 | 172 | echo "alert('error: " . $e->getMessage() . "');"; |
173 | - } finally { |
|
173 | + } finally { |
|
174 | 174 | $_SESSION['regReq'] = null; |
175 | - } |
|
175 | + } |
|
176 | 176 | } else if($_POST['authenticate2']) { |
177 | - try { |
|
177 | + try { |
|
178 | 178 | $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), getRegs($user->id), json_decode($_POST['authenticate2'])); |
179 | 179 | updateReg($reg); |
180 | 180 | echo "alert('success: " . $reg->counter . "');"; |
181 | - } catch( Exception $e ) { |
|
181 | + } catch( Exception $e ) { |
|
182 | 182 | echo "alert('error: " . $e->getMessage() . "');"; |
183 | - } finally { |
|
183 | + } finally { |
|
184 | 184 | $_SESSION['authReq'] = null; |
185 | - } |
|
185 | + } |
|
186 | + } |
|
186 | 187 | } |
187 | - } |
|
188 | 188 | } |
189 | 189 | ?> |
190 | 190 | </script> |
@@ -45,7 +45,7 @@ discard block |
||
45 | 45 | $pdo->exec("create table if not exists registrations (id integer primary key, user_id integer, keyHandle varchar(255), publicKey varchar(255), certificate text, counter integer)"); |
46 | 46 | |
47 | 47 | $scheme = isset($_SERVER['HTTPS']) ? "https://" : "http://"; |
48 | -$u2f = new u2flib_server\U2F($scheme . $_SERVER['HTTP_HOST']); |
|
48 | +$u2f = new u2flib_server\U2F($scheme.$_SERVER['HTTP_HOST']); |
|
49 | 49 | |
50 | 50 | session_start(); |
51 | 51 | |
@@ -54,7 +54,7 @@ discard block |
||
54 | 54 | $sel = $pdo->prepare("select * from users where name = ?"); |
55 | 55 | $sel->execute(array($name)); |
56 | 56 | $user = $sel->fetch(); |
57 | - if(!$user) { |
|
57 | + if (!$user) { |
|
58 | 58 | $ins = $pdo->prepare("insert into users (name) values(?)"); |
59 | 59 | $ins->execute(array($name)); |
60 | 60 | $sel->execute(array($name)); |
@@ -93,25 +93,25 @@ discard block |
||
93 | 93 | <script> |
94 | 94 | <?php |
95 | 95 | |
96 | - if($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
97 | - if(!$_POST['username']) { |
|
96 | + if ($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
97 | + if (!$_POST['username']) { |
|
98 | 98 | echo "alert('no username provided!');"; |
99 | - } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
99 | + } else if (!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
100 | 100 | echo "alert('no action provided!');"; |
101 | 101 | } else { |
102 | 102 | $user = createAndGetUser($_POST['username']); |
103 | 103 | |
104 | - if(isset($_POST['action'])) { |
|
105 | - switch($_POST['action']): |
|
104 | + if (isset($_POST['action'])) { |
|
105 | + switch ($_POST['action']): |
|
106 | 106 | case 'register': |
107 | 107 | try { |
108 | 108 | $data = $u2f->getRegisterData(getRegs($user->id)); |
109 | 109 | |
110 | - list($req,$sigs) = $data; |
|
110 | + list($req, $sigs) = $data; |
|
111 | 111 | $_SESSION['regReq'] = json_encode($req); |
112 | - echo "var req = " . json_encode($req) . ";"; |
|
113 | - echo "var sigs = " . json_encode($sigs) . ";"; |
|
114 | - echo "var username = '" . $user->name . "';"; |
|
112 | + echo "var req = ".json_encode($req).";"; |
|
113 | + echo "var sigs = ".json_encode($sigs).";"; |
|
114 | + echo "var username = '".$user->name."';"; |
|
115 | 115 | ?> |
116 | 116 | setTimeout(function() { |
117 | 117 | console.log("Register: ", req); |
@@ -130,8 +130,8 @@ discard block |
||
130 | 130 | }); |
131 | 131 | }, 1000); |
132 | 132 | <?php |
133 | - } catch( Exception $e ) { |
|
134 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
133 | + } catch (Exception $e) { |
|
134 | + echo "alert('error: ".$e->getMessage()."');"; |
|
135 | 135 | } |
136 | 136 | |
137 | 137 | break; |
@@ -142,7 +142,7 @@ discard block |
||
142 | 142 | |
143 | 143 | $_SESSION['authReq'] = $reqs; |
144 | 144 | echo "var req = $reqs;"; |
145 | - echo "var username = '" . $user->name . "';"; |
|
145 | + echo "var username = '".$user->name."';"; |
|
146 | 146 | ?> |
147 | 147 | setTimeout(function() { |
148 | 148 | console.log("sign: ", req); |
@@ -157,29 +157,29 @@ discard block |
||
157 | 157 | }); |
158 | 158 | }, 1000); |
159 | 159 | <?php |
160 | - } catch( Exception $e ) { |
|
161 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
160 | + } catch (Exception $e) { |
|
161 | + echo "alert('error: ".$e->getMessage()."');"; |
|
162 | 162 | } |
163 | 163 | |
164 | 164 | break; |
165 | 165 | |
166 | 166 | endswitch; |
167 | - } else if($_POST['register2']) { |
|
167 | + } else if ($_POST['register2']) { |
|
168 | 168 | try { |
169 | 169 | $reg = $u2f->doRegister(json_decode($_SESSION['regReq']), json_decode($_POST['register2'])); |
170 | 170 | addReg($user->id, $reg); |
171 | - } catch( Exception $e ) { |
|
172 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
171 | + } catch (Exception $e) { |
|
172 | + echo "alert('error: ".$e->getMessage()."');"; |
|
173 | 173 | } finally { |
174 | 174 | $_SESSION['regReq'] = null; |
175 | 175 | } |
176 | - } else if($_POST['authenticate2']) { |
|
176 | + } else if ($_POST['authenticate2']) { |
|
177 | 177 | try { |
178 | 178 | $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), getRegs($user->id), json_decode($_POST['authenticate2'])); |
179 | 179 | updateReg($reg); |
180 | - echo "alert('success: " . $reg->counter . "');"; |
|
181 | - } catch( Exception $e ) { |
|
182 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
180 | + echo "alert('success: ".$reg->counter."');"; |
|
181 | + } catch (Exception $e) { |
|
182 | + echo "alert('error: ".$e->getMessage()."');"; |
|
183 | 183 | } finally { |
184 | 184 | $_SESSION['authReq'] = null; |
185 | 185 | } |
@@ -36,7 +36,7 @@ discard block |
||
36 | 36 | */ |
37 | 37 | require_once('../../src/u2flib_server/U2F.php'); |
38 | 38 | $scheme = isset($_SERVER['HTTPS']) ? "https://" : "http://"; |
39 | -$u2f = new u2flib_server\U2F($scheme . $_SERVER['HTTP_HOST']); |
|
39 | +$u2f = new u2flib_server\U2F($scheme.$_SERVER['HTTP_HOST']); |
|
40 | 40 | ?> |
41 | 41 | <html> |
42 | 42 | <head> |
@@ -77,12 +77,12 @@ discard block |
||
77 | 77 | } |
78 | 78 | return $ret; |
79 | 79 | } |
80 | - if($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
81 | - if(isset($_POST['startRegister'])) { |
|
82 | - $regs = json_decode($_POST['registrations']) ? : array(); |
|
80 | + if ($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
81 | + if (isset($_POST['startRegister'])) { |
|
82 | + $regs = json_decode($_POST['registrations']) ?: array(); |
|
83 | 83 | list($data, $reqs) = $u2f->getRegisterData($regs); |
84 | - echo "var request = " . json_encode($data) . ";\n"; |
|
85 | - echo "var signs = " . json_encode($reqs) . ";\n"; |
|
84 | + echo "var request = ".json_encode($data).";\n"; |
|
85 | + echo "var signs = ".json_encode($reqs).";\n"; |
|
86 | 86 | ?> |
87 | 87 | setTimeout(function() { |
88 | 88 | console.log("Register: ", request); |
@@ -101,22 +101,22 @@ discard block |
||
101 | 101 | }); |
102 | 102 | }, 1000); |
103 | 103 | <?php |
104 | - } else if($_POST['doRegister']) { |
|
104 | + } else if ($_POST['doRegister']) { |
|
105 | 105 | try { |
106 | 106 | $data = $u2f->doRegister(json_decode($_POST['request']), json_decode($_POST['doRegister'])); |
107 | - echo "var registration = '" . json_encode($data) . "';\n"; |
|
107 | + echo "var registration = '".json_encode($data)."';\n"; |
|
108 | 108 | ?> |
109 | 109 | addRegistration(registration); |
110 | 110 | alert("registration successful!"); |
111 | 111 | <?php |
112 | - } catch(u2flib_server\Error $e) { |
|
113 | - echo "alert('error:" . $e->getMessage() . "');\n"; |
|
112 | + } catch (u2flib_server\Error $e) { |
|
113 | + echo "alert('error:".$e->getMessage()."');\n"; |
|
114 | 114 | } |
115 | - } else if(isset($_POST['startAuthenticate'])) { |
|
115 | + } else if (isset($_POST['startAuthenticate'])) { |
|
116 | 116 | $regs = json_decode($_POST['registrations']); |
117 | 117 | $data = $u2f->getAuthenticateData($regs); |
118 | - echo "var registrations = " . $_POST['registrations'] . ";\n"; |
|
119 | - echo "var request = " . json_encode($data) . ";\n"; |
|
118 | + echo "var registrations = ".$_POST['registrations'].";\n"; |
|
119 | + echo "var request = ".json_encode($data).";\n"; |
|
120 | 120 | ?> |
121 | 121 | setTimeout(function() { |
122 | 122 | console.log("sign: ", request); |
@@ -133,16 +133,16 @@ discard block |
||
133 | 133 | }); |
134 | 134 | }, 1000); |
135 | 135 | <?php |
136 | - } else if($_POST['doAuthenticate']) { |
|
136 | + } else if ($_POST['doAuthenticate']) { |
|
137 | 137 | $reqs = json_decode($_POST['request']); |
138 | 138 | $regs = json_decode($_POST['registrations']); |
139 | 139 | try { |
140 | 140 | $data = $u2f->doAuthenticate($reqs, $regs, json_decode($_POST['doAuthenticate'])); |
141 | - echo "var registration = '" . json_encode($data) . "';\n"; |
|
141 | + echo "var registration = '".json_encode($data)."';\n"; |
|
142 | 142 | echo "addRegistration(registration);\n"; |
143 | - echo "alert('Authentication successful, counter:" . $data->counter . "');\n"; |
|
144 | - } catch(u2flib_server\Error $e) { |
|
145 | - echo "alert('error:" . $e->getMessage() . "');\n"; |
|
143 | + echo "alert('Authentication successful, counter:".$data->counter."');\n"; |
|
144 | + } catch (u2flib_server\Error $e) { |
|
145 | + echo "alert('error:".$e->getMessage()."');\n"; |
|
146 | 146 | } |
147 | 147 | } |
148 | 148 | } |
@@ -92,7 +92,7 @@ discard block |
||
92 | 92 | } |
93 | 93 | |
94 | 94 | /** |
95 | - * @param mixed $challenge |
|
95 | + * @param string $challenge |
|
96 | 96 | * @return RegisterRequestInterface |
97 | 97 | */ |
98 | 98 | public function setChallenge($challenge) |
@@ -110,7 +110,7 @@ discard block |
||
110 | 110 | } |
111 | 111 | |
112 | 112 | /** |
113 | - * @param mixed $appId |
|
113 | + * @param string $appId |
|
114 | 114 | * @return RegisterRequestInterface |
115 | 115 | */ |
116 | 116 | public function setAppId($appId) |