@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | #!/usr/bin/php |
| 2 | 2 | <?php |
| 3 | 3 | |
| 4 | - /* Copyright (c) 2015 Yubico AB |
|
| 4 | + /* Copyright (c) 2015 Yubico AB |
|
| 5 | 5 | * All rights reserved. |
| 6 | 6 | * |
| 7 | 7 | * Redistribution and use in source and binary forms, with or without |
@@ -44,38 +44,38 @@ discard block |
||
| 44 | 44 | $regs; |
| 45 | 45 | |
| 46 | 46 | if(array_key_exists('r', $options)) { |
| 47 | - $mode = "register"; |
|
| 47 | + $mode = "register"; |
|
| 48 | 48 | } elseif(array_key_exists('a', $options)) { |
| 49 | - if(!array_key_exists('R', $options)) { |
|
| 49 | + if(!array_key_exists('R', $options)) { |
|
| 50 | 50 | print "a registration must be supplied with -R"; |
| 51 | 51 | exit(1); |
| 52 | - } |
|
| 53 | - $regs = json_decode('[' . $options['R'] . ']'); |
|
| 54 | - $mode = "authenticate"; |
|
| 52 | + } |
|
| 53 | + $regs = json_decode('[' . $options['R'] . ']'); |
|
| 54 | + $mode = "authenticate"; |
|
| 55 | 55 | } else { |
| 56 | - print "-r or -a must be used\n"; |
|
| 57 | - exit(1); |
|
| 56 | + print "-r or -a must be used\n"; |
|
| 57 | + exit(1); |
|
| 58 | 58 | } |
| 59 | 59 | if(!array_key_exists('o', $options)) { |
| 60 | - print "origin must be supplied with -o\n"; |
|
| 61 | - exit(1); |
|
| 60 | + print "origin must be supplied with -o\n"; |
|
| 61 | + exit(1); |
|
| 62 | 62 | } |
| 63 | 63 | |
| 64 | 64 | $u2f = new u2flib_server\U2F($options['o']); |
| 65 | 65 | |
| 66 | 66 | if($mode === "register") { |
| 67 | - $challenge = $u2f->getRegisterData(); |
|
| 67 | + $challenge = $u2f->getRegisterData(); |
|
| 68 | 68 | } elseif($mode === "authenticate") { |
| 69 | - $challenge = $u2f->getAuthenticateData($regs); |
|
| 69 | + $challenge = $u2f->getAuthenticateData($regs); |
|
| 70 | 70 | } |
| 71 | 71 | |
| 72 | 72 | print json_encode($challenge[0]) . "\n"; |
| 73 | 73 | $response = fgets(STDIN); |
| 74 | 74 | |
| 75 | 75 | if($mode === "register") { |
| 76 | - $result = $u2f->doRegister($challenge[0], json_decode($response)); |
|
| 76 | + $result = $u2f->doRegister($challenge[0], json_decode($response)); |
|
| 77 | 77 | } elseif($mode === "authenticate") { |
| 78 | - $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
|
| 78 | + $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
|
| 79 | 79 | } |
| 80 | 80 | |
| 81 | 81 | print json_encode($result) . "\n"; |
@@ -43,41 +43,41 @@ |
||
| 43 | 43 | $result; |
| 44 | 44 | $regs; |
| 45 | 45 | |
| 46 | -if(array_key_exists('r', $options)) { |
|
| 46 | +if (array_key_exists('r', $options)) { |
|
| 47 | 47 | $mode = "register"; |
| 48 | -} elseif(array_key_exists('a', $options)) { |
|
| 49 | - if(!array_key_exists('R', $options)) { |
|
| 48 | +} elseif (array_key_exists('a', $options)) { |
|
| 49 | + if (!array_key_exists('R', $options)) { |
|
| 50 | 50 | print "a registration must be supplied with -R"; |
| 51 | 51 | exit(1); |
| 52 | 52 | } |
| 53 | - $regs = json_decode('[' . $options['R'] . ']'); |
|
| 53 | + $regs = json_decode('['.$options['R'].']'); |
|
| 54 | 54 | $mode = "authenticate"; |
| 55 | 55 | } else { |
| 56 | 56 | print "-r or -a must be used\n"; |
| 57 | 57 | exit(1); |
| 58 | 58 | } |
| 59 | -if(!array_key_exists('o', $options)) { |
|
| 59 | +if (!array_key_exists('o', $options)) { |
|
| 60 | 60 | print "origin must be supplied with -o\n"; |
| 61 | 61 | exit(1); |
| 62 | 62 | } |
| 63 | 63 | |
| 64 | 64 | $u2f = new u2flib_server\U2F($options['o']); |
| 65 | 65 | |
| 66 | -if($mode === "register") { |
|
| 66 | +if ($mode === "register") { |
|
| 67 | 67 | $challenge = $u2f->getRegisterData(); |
| 68 | -} elseif($mode === "authenticate") { |
|
| 68 | +} elseif ($mode === "authenticate") { |
|
| 69 | 69 | $challenge = $u2f->getAuthenticateData($regs); |
| 70 | 70 | } |
| 71 | 71 | |
| 72 | -print json_encode($challenge[0]) . "\n"; |
|
| 72 | +print json_encode($challenge[0])."\n"; |
|
| 73 | 73 | $response = fgets(STDIN); |
| 74 | 74 | |
| 75 | -if($mode === "register") { |
|
| 75 | +if ($mode === "register") { |
|
| 76 | 76 | $result = $u2f->doRegister($challenge[0], json_decode($response)); |
| 77 | -} elseif($mode === "authenticate") { |
|
| 77 | +} elseif ($mode === "authenticate") { |
|
| 78 | 78 | $result = $u2f->doAuthenticate($challenge, $regs, json_decode($response)); |
| 79 | 79 | } |
| 80 | 80 | |
| 81 | -print json_encode($result) . "\n"; |
|
| 81 | +print json_encode($result)."\n"; |
|
| 82 | 82 | |
| 83 | 83 | ?> |
@@ -67,7 +67,7 @@ discard block |
||
| 67 | 67 | public function __construct($appId, $attestDir = null) |
| 68 | 68 | { |
| 69 | 69 | if (OPENSSL_VERSION_NUMBER < 0x10000000) { |
| 70 | - throw new U2fError('OpenSSL has to be at least version 1.0.0, this is ' . OPENSSL_VERSION_TEXT, U2fError::ERR_OLD_OPENSSL); |
|
| 70 | + throw new U2fError('OpenSSL has to be at least version 1.0.0, this is '.OPENSSL_VERSION_TEXT, U2fError::ERR_OLD_OPENSSL); |
|
| 71 | 71 | } |
| 72 | 72 | $this->appId = $appId; |
| 73 | 73 | $this->attestDir = $attestDir; |
@@ -84,7 +84,7 @@ discard block |
||
| 84 | 84 | public function doRegister(RegisterRequestInterface $request, RegisterResponseInterface $response, $includeCert = true) |
| 85 | 85 | { |
| 86 | 86 | if ($response->getErrorCode() !== null && $response->getErrorCode() !== 0) { |
| 87 | - throw new U2fError('User-agent returned error. Error code: ' . $response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
| 87 | + throw new U2fError('User-agent returned error. Error code: '.$response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
| 88 | 88 | } |
| 89 | 89 | |
| 90 | 90 | if (!is_bool($includeCert)) { |
@@ -167,7 +167,7 @@ discard block |
||
| 167 | 167 | public function doAuthenticate(array $requests, array $registrations, AuthenticationResponseInterface $response) |
| 168 | 168 | { |
| 169 | 169 | if ($response->getErrorCode() != null) { |
| 170 | - throw new U2fError('User-agent returned error. Error code: ' . $response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
| 170 | + throw new U2fError('User-agent returned error. Error code: '.$response->getErrorCode(), U2fError::ERR_BAD_UA_RETURNING); |
|
| 171 | 171 | } |
| 172 | 172 | |
| 173 | 173 | $clientData = $this->base64u_decode($response->getClientData()); |
@@ -287,7 +287,7 @@ discard block |
||
| 287 | 287 | */ |
| 288 | 288 | $der = "\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01"; |
| 289 | 289 | $der .= "\x06\x08\x2a\x86\x48\xce\x3d\x03\x01\x07\x03\x42"; |
| 290 | - $der .= "\0" . $key; |
|
| 290 | + $der .= "\0".$key; |
|
| 291 | 291 | |
| 292 | 292 | $pem = "-----BEGIN PUBLIC KEY-----\r\n"; |
| 293 | 293 | $pem .= chunk_split(base64_encode($der), 64); |
@@ -94,15 +94,15 @@ discard block |
||
| 94 | 94 | <?php |
| 95 | 95 | |
| 96 | 96 | if($_SERVER['REQUEST_METHOD'] === 'POST') { |
| 97 | - if(!$_POST['username']) { |
|
| 97 | + if(!$_POST['username']) { |
|
| 98 | 98 | echo "alert('no username provided!');"; |
| 99 | - } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
| 99 | + } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
| 100 | 100 | echo "alert('no action provided!');"; |
| 101 | - } else { |
|
| 101 | + } else { |
|
| 102 | 102 | $user = createAndGetUser($_POST['username']); |
| 103 | 103 | |
| 104 | 104 | if(isset($_POST['action'])) { |
| 105 | - switch($_POST['action']): |
|
| 105 | + switch($_POST['action']): |
|
| 106 | 106 | case 'register': |
| 107 | 107 | try { |
| 108 | 108 | $data = $u2f->getRegisterData(getRegs($user->id)); |
@@ -130,11 +130,11 @@ discard block |
||
| 130 | 130 | }); |
| 131 | 131 | }, 1000); |
| 132 | 132 | <?php |
| 133 | - } catch( Exception $e ) { |
|
| 133 | + } catch( Exception $e ) { |
|
| 134 | 134 | echo "alert('error: " . $e->getMessage() . "');"; |
| 135 | - } |
|
| 135 | + } |
|
| 136 | 136 | |
| 137 | - break; |
|
| 137 | + break; |
|
| 138 | 138 | |
| 139 | 139 | case 'authenticate': |
| 140 | 140 | try { |
@@ -157,34 +157,34 @@ discard block |
||
| 157 | 157 | }); |
| 158 | 158 | }, 1000); |
| 159 | 159 | <?php |
| 160 | - } catch( Exception $e ) { |
|
| 160 | + } catch( Exception $e ) { |
|
| 161 | 161 | echo "alert('error: " . $e->getMessage() . "');"; |
| 162 | - } |
|
| 162 | + } |
|
| 163 | 163 | |
| 164 | - break; |
|
| 164 | + break; |
|
| 165 | 165 | |
| 166 | - endswitch; |
|
| 166 | + endswitch; |
|
| 167 | 167 | } else if($_POST['register2']) { |
| 168 | - try { |
|
| 168 | + try { |
|
| 169 | 169 | $reg = $u2f->doRegister(json_decode($_SESSION['regReq']), json_decode($_POST['register2'])); |
| 170 | 170 | addReg($user->id, $reg); |
| 171 | - } catch( Exception $e ) { |
|
| 171 | + } catch( Exception $e ) { |
|
| 172 | 172 | echo "alert('error: " . $e->getMessage() . "');"; |
| 173 | - } finally { |
|
| 173 | + } finally { |
|
| 174 | 174 | $_SESSION['regReq'] = null; |
| 175 | - } |
|
| 175 | + } |
|
| 176 | 176 | } else if($_POST['authenticate2']) { |
| 177 | - try { |
|
| 177 | + try { |
|
| 178 | 178 | $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), getRegs($user->id), json_decode($_POST['authenticate2'])); |
| 179 | 179 | updateReg($reg); |
| 180 | 180 | echo "alert('success: " . $reg->counter . "');"; |
| 181 | - } catch( Exception $e ) { |
|
| 181 | + } catch( Exception $e ) { |
|
| 182 | 182 | echo "alert('error: " . $e->getMessage() . "');"; |
| 183 | - } finally { |
|
| 183 | + } finally { |
|
| 184 | 184 | $_SESSION['authReq'] = null; |
| 185 | - } |
|
| 185 | + } |
|
| 186 | + } |
|
| 186 | 187 | } |
| 187 | - } |
|
| 188 | 188 | } |
| 189 | 189 | ?> |
| 190 | 190 | </script> |
@@ -45,7 +45,7 @@ discard block |
||
| 45 | 45 | $pdo->exec("create table if not exists registrations (id integer primary key, user_id integer, keyHandle varchar(255), publicKey varchar(255), certificate text, counter integer)"); |
| 46 | 46 | |
| 47 | 47 | $scheme = isset($_SERVER['HTTPS']) ? "https://" : "http://"; |
| 48 | -$u2f = new u2flib_server\U2F($scheme . $_SERVER['HTTP_HOST']); |
|
| 48 | +$u2f = new u2flib_server\U2F($scheme.$_SERVER['HTTP_HOST']); |
|
| 49 | 49 | |
| 50 | 50 | session_start(); |
| 51 | 51 | |
@@ -54,7 +54,7 @@ discard block |
||
| 54 | 54 | $sel = $pdo->prepare("select * from users where name = ?"); |
| 55 | 55 | $sel->execute(array($name)); |
| 56 | 56 | $user = $sel->fetch(); |
| 57 | - if(!$user) { |
|
| 57 | + if (!$user) { |
|
| 58 | 58 | $ins = $pdo->prepare("insert into users (name) values(?)"); |
| 59 | 59 | $ins->execute(array($name)); |
| 60 | 60 | $sel->execute(array($name)); |
@@ -93,25 +93,25 @@ discard block |
||
| 93 | 93 | <script> |
| 94 | 94 | <?php |
| 95 | 95 | |
| 96 | - if($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
| 97 | - if(!$_POST['username']) { |
|
| 96 | + if ($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
| 97 | + if (!$_POST['username']) { |
|
| 98 | 98 | echo "alert('no username provided!');"; |
| 99 | - } else if(!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
| 99 | + } else if (!isset($_POST['action']) && !isset($_POST['register2']) && !isset($_POST['authenticate2'])) { |
|
| 100 | 100 | echo "alert('no action provided!');"; |
| 101 | 101 | } else { |
| 102 | 102 | $user = createAndGetUser($_POST['username']); |
| 103 | 103 | |
| 104 | - if(isset($_POST['action'])) { |
|
| 105 | - switch($_POST['action']): |
|
| 104 | + if (isset($_POST['action'])) { |
|
| 105 | + switch ($_POST['action']): |
|
| 106 | 106 | case 'register': |
| 107 | 107 | try { |
| 108 | 108 | $data = $u2f->getRegisterData(getRegs($user->id)); |
| 109 | 109 | |
| 110 | - list($req,$sigs) = $data; |
|
| 110 | + list($req, $sigs) = $data; |
|
| 111 | 111 | $_SESSION['regReq'] = json_encode($req); |
| 112 | - echo "var req = " . json_encode($req) . ";"; |
|
| 113 | - echo "var sigs = " . json_encode($sigs) . ";"; |
|
| 114 | - echo "var username = '" . $user->name . "';"; |
|
| 112 | + echo "var req = ".json_encode($req).";"; |
|
| 113 | + echo "var sigs = ".json_encode($sigs).";"; |
|
| 114 | + echo "var username = '".$user->name."';"; |
|
| 115 | 115 | ?> |
| 116 | 116 | setTimeout(function() { |
| 117 | 117 | console.log("Register: ", req); |
@@ -130,8 +130,8 @@ discard block |
||
| 130 | 130 | }); |
| 131 | 131 | }, 1000); |
| 132 | 132 | <?php |
| 133 | - } catch( Exception $e ) { |
|
| 134 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
| 133 | + } catch (Exception $e) { |
|
| 134 | + echo "alert('error: ".$e->getMessage()."');"; |
|
| 135 | 135 | } |
| 136 | 136 | |
| 137 | 137 | break; |
@@ -142,7 +142,7 @@ discard block |
||
| 142 | 142 | |
| 143 | 143 | $_SESSION['authReq'] = $reqs; |
| 144 | 144 | echo "var req = $reqs;"; |
| 145 | - echo "var username = '" . $user->name . "';"; |
|
| 145 | + echo "var username = '".$user->name."';"; |
|
| 146 | 146 | ?> |
| 147 | 147 | setTimeout(function() { |
| 148 | 148 | console.log("sign: ", req); |
@@ -157,29 +157,29 @@ discard block |
||
| 157 | 157 | }); |
| 158 | 158 | }, 1000); |
| 159 | 159 | <?php |
| 160 | - } catch( Exception $e ) { |
|
| 161 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
| 160 | + } catch (Exception $e) { |
|
| 161 | + echo "alert('error: ".$e->getMessage()."');"; |
|
| 162 | 162 | } |
| 163 | 163 | |
| 164 | 164 | break; |
| 165 | 165 | |
| 166 | 166 | endswitch; |
| 167 | - } else if($_POST['register2']) { |
|
| 167 | + } else if ($_POST['register2']) { |
|
| 168 | 168 | try { |
| 169 | 169 | $reg = $u2f->doRegister(json_decode($_SESSION['regReq']), json_decode($_POST['register2'])); |
| 170 | 170 | addReg($user->id, $reg); |
| 171 | - } catch( Exception $e ) { |
|
| 172 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
| 171 | + } catch (Exception $e) { |
|
| 172 | + echo "alert('error: ".$e->getMessage()."');"; |
|
| 173 | 173 | } finally { |
| 174 | 174 | $_SESSION['regReq'] = null; |
| 175 | 175 | } |
| 176 | - } else if($_POST['authenticate2']) { |
|
| 176 | + } else if ($_POST['authenticate2']) { |
|
| 177 | 177 | try { |
| 178 | 178 | $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), getRegs($user->id), json_decode($_POST['authenticate2'])); |
| 179 | 179 | updateReg($reg); |
| 180 | - echo "alert('success: " . $reg->counter . "');"; |
|
| 181 | - } catch( Exception $e ) { |
|
| 182 | - echo "alert('error: " . $e->getMessage() . "');"; |
|
| 180 | + echo "alert('success: ".$reg->counter."');"; |
|
| 181 | + } catch (Exception $e) { |
|
| 182 | + echo "alert('error: ".$e->getMessage()."');"; |
|
| 183 | 183 | } finally { |
| 184 | 184 | $_SESSION['authReq'] = null; |
| 185 | 185 | } |
@@ -36,7 +36,7 @@ discard block |
||
| 36 | 36 | */ |
| 37 | 37 | require_once('../../src/u2flib_server/U2F.php'); |
| 38 | 38 | $scheme = isset($_SERVER['HTTPS']) ? "https://" : "http://"; |
| 39 | -$u2f = new u2flib_server\U2F($scheme . $_SERVER['HTTP_HOST']); |
|
| 39 | +$u2f = new u2flib_server\U2F($scheme.$_SERVER['HTTP_HOST']); |
|
| 40 | 40 | ?> |
| 41 | 41 | <html> |
| 42 | 42 | <head> |
@@ -77,12 +77,12 @@ discard block |
||
| 77 | 77 | } |
| 78 | 78 | return $ret; |
| 79 | 79 | } |
| 80 | - if($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
| 81 | - if(isset($_POST['startRegister'])) { |
|
| 82 | - $regs = json_decode($_POST['registrations']) ? : array(); |
|
| 80 | + if ($_SERVER['REQUEST_METHOD'] === 'POST') { |
|
| 81 | + if (isset($_POST['startRegister'])) { |
|
| 82 | + $regs = json_decode($_POST['registrations']) ?: array(); |
|
| 83 | 83 | list($data, $reqs) = $u2f->getRegisterData($regs); |
| 84 | - echo "var request = " . json_encode($data) . ";\n"; |
|
| 85 | - echo "var signs = " . json_encode($reqs) . ";\n"; |
|
| 84 | + echo "var request = ".json_encode($data).";\n"; |
|
| 85 | + echo "var signs = ".json_encode($reqs).";\n"; |
|
| 86 | 86 | ?> |
| 87 | 87 | setTimeout(function() { |
| 88 | 88 | console.log("Register: ", request); |
@@ -101,22 +101,22 @@ discard block |
||
| 101 | 101 | }); |
| 102 | 102 | }, 1000); |
| 103 | 103 | <?php |
| 104 | - } else if($_POST['doRegister']) { |
|
| 104 | + } else if ($_POST['doRegister']) { |
|
| 105 | 105 | try { |
| 106 | 106 | $data = $u2f->doRegister(json_decode($_POST['request']), json_decode($_POST['doRegister'])); |
| 107 | - echo "var registration = '" . json_encode($data) . "';\n"; |
|
| 107 | + echo "var registration = '".json_encode($data)."';\n"; |
|
| 108 | 108 | ?> |
| 109 | 109 | addRegistration(registration); |
| 110 | 110 | alert("registration successful!"); |
| 111 | 111 | <?php |
| 112 | - } catch(u2flib_server\Error $e) { |
|
| 113 | - echo "alert('error:" . $e->getMessage() . "');\n"; |
|
| 112 | + } catch (u2flib_server\Error $e) { |
|
| 113 | + echo "alert('error:".$e->getMessage()."');\n"; |
|
| 114 | 114 | } |
| 115 | - } else if(isset($_POST['startAuthenticate'])) { |
|
| 115 | + } else if (isset($_POST['startAuthenticate'])) { |
|
| 116 | 116 | $regs = json_decode($_POST['registrations']); |
| 117 | 117 | $data = $u2f->getAuthenticateData($regs); |
| 118 | - echo "var registrations = " . $_POST['registrations'] . ";\n"; |
|
| 119 | - echo "var request = " . json_encode($data) . ";\n"; |
|
| 118 | + echo "var registrations = ".$_POST['registrations'].";\n"; |
|
| 119 | + echo "var request = ".json_encode($data).";\n"; |
|
| 120 | 120 | ?> |
| 121 | 121 | setTimeout(function() { |
| 122 | 122 | console.log("sign: ", request); |
@@ -133,16 +133,16 @@ discard block |
||
| 133 | 133 | }); |
| 134 | 134 | }, 1000); |
| 135 | 135 | <?php |
| 136 | - } else if($_POST['doAuthenticate']) { |
|
| 136 | + } else if ($_POST['doAuthenticate']) { |
|
| 137 | 137 | $reqs = json_decode($_POST['request']); |
| 138 | 138 | $regs = json_decode($_POST['registrations']); |
| 139 | 139 | try { |
| 140 | 140 | $data = $u2f->doAuthenticate($reqs, $regs, json_decode($_POST['doAuthenticate'])); |
| 141 | - echo "var registration = '" . json_encode($data) . "';\n"; |
|
| 141 | + echo "var registration = '".json_encode($data)."';\n"; |
|
| 142 | 142 | echo "addRegistration(registration);\n"; |
| 143 | - echo "alert('Authentication successful, counter:" . $data->counter . "');\n"; |
|
| 144 | - } catch(u2flib_server\Error $e) { |
|
| 145 | - echo "alert('error:" . $e->getMessage() . "');\n"; |
|
| 143 | + echo "alert('Authentication successful, counter:".$data->counter."');\n"; |
|
| 144 | + } catch (u2flib_server\Error $e) { |
|
| 145 | + echo "alert('error:".$e->getMessage()."');\n"; |
|
| 146 | 146 | } |
| 147 | 147 | } |
| 148 | 148 | } |