rootandClaude Opus 5.5
7974a42301
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
93 lines
2.1 KiB
Go
93 lines
2.1 KiB
Go
package google
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/hmac"
|
|
"crypto/sha1"
|
|
"encoding/base32"
|
|
"encoding/binary"
|
|
"fmt"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
type GoogleAuth struct {
|
|
}
|
|
|
|
func NewGoogleAuth() *GoogleAuth {
|
|
return &GoogleAuth{}
|
|
}
|
|
|
|
func (ga *GoogleAuth) un() int64 {
|
|
return time.Now().UnixNano() / 1000 / 30
|
|
}
|
|
|
|
func (ga *GoogleAuth) hmacSha1(key, data []byte) []byte {
|
|
h := hmac.New(sha1.New, key)
|
|
if total := len(data); total > 0 {
|
|
h.Write(data)
|
|
}
|
|
return h.Sum(nil)
|
|
}
|
|
|
|
func (ga *GoogleAuth) base32encode(src []byte) string {
|
|
return base32.StdEncoding.EncodeToString(src)
|
|
}
|
|
|
|
func (ga *GoogleAuth) base32decode(s string) ([]byte, error) {
|
|
return base32.StdEncoding.DecodeString(s)
|
|
}
|
|
|
|
func (ga *GoogleAuth) toBytes(value int64) []byte {
|
|
var result []byte
|
|
mask := int64(0xFF)
|
|
shifts := [8]uint16{56, 48, 40, 32, 24, 16, 8, 0}
|
|
for _, shift := range shifts {
|
|
result = append(result, byte((value>>shift)&mask))
|
|
}
|
|
return result
|
|
}
|
|
|
|
func (ga *GoogleAuth) toUint32(bts []byte) uint32 {
|
|
return (uint32(bts[0]) << 24) + (uint32(bts[1]) << 16) +
|
|
(uint32(bts[2]) << 8) + uint32(bts[3])
|
|
}
|
|
|
|
func (ga *GoogleAuth) oneTimePassword(key []byte, data []byte) uint32 {
|
|
hash := ga.hmacSha1(key, data)
|
|
offset := hash[len(hash)-1] & 0x0F
|
|
hashParts := hash[offset : offset+4]
|
|
hashParts[0] = hashParts[0] & 0x7F
|
|
number := ga.toUint32(hashParts)
|
|
return number % 1000000
|
|
}
|
|
|
|
func (ga *GoogleAuth) GetSecret() string {
|
|
var buf bytes.Buffer
|
|
binary.Write(&buf, binary.BigEndian, ga.un())
|
|
return strings.ToUpper(ga.base32encode(ga.hmacSha1(buf.Bytes(), nil)))
|
|
}
|
|
|
|
func (ga *GoogleAuth) GetCode(secret string) (string, error) {
|
|
secretUpper := strings.ToUpper(secret)
|
|
secretKey, err := ga.base32decode(secretUpper)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
number := ga.oneTimePassword(secretKey, ga.toBytes(time.Now().Unix()/30))
|
|
return fmt.Sprintf("%06d", number), nil
|
|
}
|
|
|
|
func (ga *GoogleAuth) GetQrcode(user, secret string) string {
|
|
return fmt.Sprintf("otpauth://totp/%s?secret=%s", user, secret)
|
|
}
|
|
|
|
func (ga *GoogleAuth) VerifyCode(secret, code string) (bool, error) {
|
|
_code, err := ga.GetCode(secret)
|
|
fmt.Println(_code, code, err)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return _code == code, nil
|
|
}
|