* Authors: Nathaniel McCallum <npmccallum@redhat.com>
*
* Copyright (C) 2013 Nathaniel McCallum, Red Hat
- * see file 'COPYING' for use and warranty information
*
- * This program is free software you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
*
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
+ * http://www.apache.org/licenses/LICENSE-2.0
*
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
*/
package org.fedorahosted.freeotp;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
-import com.google.android.apps.authenticator.Base32String;
-import com.google.android.apps.authenticator.Base32String.DecodingException;
-
import android.content.Context;
import android.content.SharedPreferences;
import android.net.Uri;
+import com.google.android.apps.authenticator.Base32String;
+import com.google.android.apps.authenticator.Base32String.DecodingException;
+
public class Token {
public static class TokenUriInvalidException extends Exception {
private static final long serialVersionUID = -1108624734612362345L;
}
-
+
public static enum TokenType {
HOTP, TOTP
}
-
- private String issuerInt;
- private String issuerExt;
- private String label;
+
+ private final String issuerInt;
+ private final String issuerExt;
+ private final String label;
private TokenType type;
private String algo;
private byte[] key;
private int digits;
private long counter;
private int period;
-
+
public static List<Token> getTokens(Context ctx) {
SharedPreferences prefs = ctx.getSharedPreferences(Token.class.getName(), Context.MODE_PRIVATE);
-
+
List<Token> tokens = new ArrayList<Token>();
for (String key : prefs.getAll().keySet()) {
try {
tokens.add(new Token(prefs.getString(key, null)));
} catch (TokenUriInvalidException e) {
e.printStackTrace();
- } catch (NoSuchAlgorithmException e) {
- e.printStackTrace();
}
}
-
+
return tokens;
}
- private Token(Uri uri) throws TokenUriInvalidException, NoSuchAlgorithmException {
+ private Token(Uri uri) throws TokenUriInvalidException {
if (!uri.getScheme().equals("otpauth"))
throw new TokenUriInvalidException();
-
+
if (uri.getAuthority().equals("totp"))
type = TokenType.TOTP;
else if (uri.getAuthority().equals("hotp"))
type = TokenType.HOTP;
else
throw new TokenUriInvalidException();
-
+
String path = uri.getPath();
if (path == null)
throw new TokenUriInvalidException();
path = path.substring(1);
if (path.length() == 0)
throw new TokenUriInvalidException();
-
+
int i = path.indexOf(':');
issuerExt = i < 0 ? "" : path.substring(0, i);
issuerInt = uri.getQueryParameter("issuer");
label = path.substring(i >= 0 ? i + 1 : 0);
-
+
algo = uri.getQueryParameter("algorithm");
if (algo == null)
algo = "sha1";
algo = algo.toUpperCase(Locale.US);
- if (!algo.equals("SHA1") && !algo.equals("SHA256") &&
- !algo.equals("SHA512") && !algo.equals("MD5"))
+ try {
+ Mac.getInstance("Hmac" + algo);
+ } catch (NoSuchAlgorithmException e1) {
throw new TokenUriInvalidException();
- Mac.getInstance("Hmac" + algo);
-
+ }
+
try {
String d = uri.getQueryParameter("digits");
if (d == null)
} catch (NumberFormatException e) {
throw new TokenUriInvalidException();
}
-
+
switch (type) {
case HOTP:
try {
}
break;
}
-
+
try {
String s = uri.getQueryParameter("secret");
key = Base32String.decode(s);
throw new TokenUriInvalidException();
}
}
-
+
private String getHOTP(long counter) {
// Encode counter in network byte order
ByteBuffer bb = ByteBuffer.allocate(8);
bb.putLong(counter);
-
+
// Create digits divisor
int div = 1;
for (int i = digits; i > 0; i--)
div *= 10;
-
+
// Create the HMAC
try {
Mac mac = Mac.getInstance("Hmac" + algo);
mac.init(new SecretKeySpec(key, "Hmac" + algo));
-
+
// Do the hashing
byte[] digest = mac.doFinal(bb.array());
-
+
// Truncate
int binary;
int off = digest[digest.length - 1] & 0xf;
binary |= (digest[off + 2] & 0xff) << 0x08;
binary |= (digest[off + 3] & 0xff) << 0x00;
binary = binary % div;
-
+
// Zero pad
String hotp = Integer.toString(binary);
while (hotp.length() != digits)
hotp = "0" + hotp;
-
+
return hotp;
} catch (InvalidKeyException e) {
e.printStackTrace();
return "";
}
-
- public Token(String uri) throws TokenUriInvalidException, NoSuchAlgorithmException {
+
+ public Token(String uri) throws TokenUriInvalidException {
this(Uri.parse(uri));
}
-
+
private String getId() {
String id;
if (issuerInt != null && !issuerInt.equals(""))
id = issuerExt + ":" + label;
else
id = label;
-
+
return id;
}
-
+
public void remove(Context ctx) {
SharedPreferences prefs = ctx.getSharedPreferences(Token.class.getName(), Context.MODE_PRIVATE);
prefs.edit().remove(getId()).apply();
}
-
+
public void save(Context ctx) {
SharedPreferences prefs = ctx.getSharedPreferences(Token.class.getName(), Context.MODE_PRIVATE);
prefs.edit().putString(getId(), toString()).apply();
}
-
+
public String getTitle() {
String title = "";
if (issuerExt != null && !issuerExt.equals(""))
title += label;
return title;
}
-
+
public String getCurrentTokenValue(Context ctx, boolean increment) {
if (type == TokenType.HOTP) {
if (increment) {
String placeholder = "";
for (int i = 0; i < digits; i++)
placeholder += "-";
-
+
return placeholder;
}
}
-
+
return getHOTP(System.currentTimeMillis() / 1000 / period);
}
-
+
public Uri toUri() {
String issuerLabel = !issuerExt.equals("") ? issuerExt + ":" + label : label;
-
+
Uri.Builder builder = new Uri.Builder()
.scheme("otpauth")
.path(issuerLabel)
.appendQueryParameter("issuer", issuerInt == null ? issuerExt : issuerInt)
.appendQueryParameter("algorithm", algo)
.appendQueryParameter("digits", Integer.toString(digits));
-
+
switch (type) {
case HOTP:
builder.authority("hotp");
builder.appendQueryParameter("period", Integer.toString(period));
break;
}
-
+
return builder.build();
}
-
+
public TokenType getType() {
return type;
}
-
+
// Progress is on a scale from 0 - 1000.
public int getProgress() {
int p = period * 10;
-
+
long time = System.currentTimeMillis() / 100;
return (int) ((time % p) * 1000 / p);
}
-
+
@Override
public String toString() {
return toUri().toString();
projects / ~andy / freeotp / blobdiff