bagas/filekeeper
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Encrypt TOTP secret before saving to database

Browse Source
This commit is contained in:
Bagas Aulia Rezki
2024-10-31 16:24:32 +07:00
parent f705d9538f
commit 197383c414
21 changed files with 271 additions and 172 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
handler/auth/totp/totp.go
View File

@ -39,7 +39,12 @@ func POST(w http.ResponseWriter, r *http.Request) {
}
code := r.Form.Get("code")
_, user, key := session.GetSession(r)
totp := gotp.NewDefaultTOTP(user.Totp)
decryptedSecret, err := app.Server.Encryption.Decrypt(user.Totp)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
app.Server.Logger.Error(err.Error())
}
totp := gotp.NewDefaultTOTP(decryptedSecret)
if totp.Verify(code, time.Now().Unix()) {
storeSession := session.Get(key)

10
handler/user/totp/setup.go
View File

@ -82,12 +82,18 @@ func POST(w http.ResponseWriter, r *http.Request) {
}
var component templ.Component
if totp.Verify(code, time.Now().Unix()) {
if err := app.Server.Database.InitializeTotp(userSession.Email, secret); err != nil {
encryptedSecret, err := app.Server.Encryption.Encrypt(secret)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
app.Server.Logger.Error(err.Error())
return
}
err := app.Server.Cache.RemoveUserCache(r.Context(), userSession.Email)
if err := app.Server.Database.InitializeTotp(userSession.Email, encryptedSecret); err != nil {
w.WriteHeader(http.StatusInternalServerError)
app.Server.Logger.Error(err.Error())
return
}
err = app.Server.Cache.RemoveUserCache(r.Context(), userSession.Email)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
app.Server.Logger.Error(err.Error())