init: 初始化 web_hgdjb_server 项目

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

pub/google/googleAuth.go

@@ -0,0 +1,92 @@
+package google
+
+import (
+	"bytes"
+	"crypto/hmac"
+	"crypto/sha1"
+	"encoding/base32"
+	"encoding/binary"
+	"fmt"
+	"strings"
+	"time"
+)
+
+type GoogleAuth struct {
+}
+
+func NewGoogleAuth() *GoogleAuth {
+	return &GoogleAuth{}
+}
+
+func (ga *GoogleAuth) un() int64 {
+	return time.Now().UnixNano() / 1000 / 30
+}
+
+func (ga *GoogleAuth) hmacSha1(key, data []byte) []byte {
+	h := hmac.New(sha1.New, key)
+	if total := len(data); total > 0 {
+		h.Write(data)
+	}
+	return h.Sum(nil)
+}
+
+func (ga *GoogleAuth) base32encode(src []byte) string {
+	return base32.StdEncoding.EncodeToString(src)
+}
+
+func (ga *GoogleAuth) base32decode(s string) ([]byte, error) {
+	return base32.StdEncoding.DecodeString(s)
+}
+
+func (ga *GoogleAuth) toBytes(value int64) []byte {
+	var result []byte
+	mask := int64(0xFF)
+	shifts := [8]uint16{56, 48, 40, 32, 24, 16, 8, 0}
+	for _, shift := range shifts {
+		result = append(result, byte((value>>shift)&mask))
+	}
+	return result
+}
+
+func (ga *GoogleAuth) toUint32(bts []byte) uint32 {
+	return (uint32(bts[0]) << 24) + (uint32(bts[1]) << 16) +
+		(uint32(bts[2]) << 8) + uint32(bts[3])
+}
+
+func (ga *GoogleAuth) oneTimePassword(key []byte, data []byte) uint32 {
+	hash := ga.hmacSha1(key, data)
+	offset := hash[len(hash)-1] & 0x0F
+	hashParts := hash[offset : offset+4]
+	hashParts[0] = hashParts[0] & 0x7F
+	number := ga.toUint32(hashParts)
+	return number % 1000000
+}
+
+func (ga *GoogleAuth) GetSecret() string {
+	var buf bytes.Buffer
+	binary.Write(&buf, binary.BigEndian, ga.un())
+	return strings.ToUpper(ga.base32encode(ga.hmacSha1(buf.Bytes(), nil)))
+}
+
+func (ga *GoogleAuth) GetCode(secret string) (string, error) {
+	secretUpper := strings.ToUpper(secret)
+	secretKey, err := ga.base32decode(secretUpper)
+	if err != nil {
+		return "", err
+	}
+	number := ga.oneTimePassword(secretKey, ga.toBytes(time.Now().Unix()/30))
+	return fmt.Sprintf("%06d", number), nil
+}
+
+func (ga *GoogleAuth) GetQrcode(user, secret string) string {
+	return fmt.Sprintf("otpauth://totp/%s?secret=%s", user, secret)
+}
+
+func (ga *GoogleAuth) VerifyCode(secret, code string) (bool, error) {
+	_code, err := ga.GetCode(secret)
+	fmt.Println(_code, code, err)
+	if err != nil {
+		return false, err
+	}
+	return _code == code, nil
+}