86 lines
2.6 KiB
PHP
86 lines
2.6 KiB
PHP
<?php
|
|
|
|
namespace Pterodactyl\Services\Users;
|
|
|
|
use Carbon\Carbon;
|
|
use Pterodactyl\Models\User;
|
|
use PragmaRX\Google2FA\Google2FA;
|
|
use Illuminate\Contracts\Config\Repository;
|
|
use Illuminate\Contracts\Encryption\Encrypter;
|
|
use Pterodactyl\Contracts\Repository\UserRepositoryInterface;
|
|
use Pterodactyl\Exceptions\Service\User\TwoFactorAuthenticationTokenInvalid;
|
|
|
|
class ToggleTwoFactorService
|
|
{
|
|
/**
|
|
* @var \Illuminate\Contracts\Config\Repository
|
|
*/
|
|
private $config;
|
|
|
|
/**
|
|
* @var \Illuminate\Contracts\Encryption\Encrypter
|
|
*/
|
|
private $encrypter;
|
|
|
|
/**
|
|
* @var \PragmaRX\Google2FA\Google2FA
|
|
*/
|
|
private $google2FA;
|
|
|
|
/**
|
|
* @var \Pterodactyl\Contracts\Repository\UserRepositoryInterface
|
|
*/
|
|
private $repository;
|
|
|
|
/**
|
|
* ToggleTwoFactorService constructor.
|
|
*
|
|
* @param \Illuminate\Contracts\Encryption\Encrypter $encrypter
|
|
* @param \PragmaRX\Google2FA\Google2FA $google2FA
|
|
* @param \Illuminate\Contracts\Config\Repository $config
|
|
* @param \Pterodactyl\Contracts\Repository\UserRepositoryInterface $repository
|
|
*/
|
|
public function __construct(
|
|
Encrypter $encrypter,
|
|
Google2FA $google2FA,
|
|
Repository $config,
|
|
UserRepositoryInterface $repository
|
|
) {
|
|
$this->config = $config;
|
|
$this->encrypter = $encrypter;
|
|
$this->google2FA = $google2FA;
|
|
$this->repository = $repository;
|
|
}
|
|
|
|
/**
|
|
* Toggle 2FA on an account only if the token provided is valid.
|
|
*
|
|
* @param \Pterodactyl\Models\User $user
|
|
* @param string $token
|
|
* @param bool|null $toggleState
|
|
* @return bool
|
|
*
|
|
* @throws \Pterodactyl\Exceptions\Model\DataValidationException
|
|
* @throws \Pterodactyl\Exceptions\Repository\RecordNotFoundException
|
|
* @throws \Pterodactyl\Exceptions\Service\User\TwoFactorAuthenticationTokenInvalid
|
|
*/
|
|
public function handle(User $user, string $token, bool $toggleState = null): bool
|
|
{
|
|
$window = $this->config->get('pterodactyl.auth.2fa.window');
|
|
$secret = $this->encrypter->decrypt($user->totp_secret);
|
|
|
|
$isValidToken = $this->google2FA->verifyKey($secret, $token, $window);
|
|
|
|
if (! $isValidToken) {
|
|
throw new TwoFactorAuthenticationTokenInvalid;
|
|
}
|
|
|
|
$this->repository->withoutFreshModel()->update($user->id, [
|
|
'totp_authenticated_at' => Carbon::now(),
|
|
'use_totp' => (is_null($toggleState) ? ! $user->use_totp : $toggleState),
|
|
]);
|
|
|
|
return true;
|
|
}
|
|
}
|