init III

2024-10-14 00:08:40 +02:00
parent dbfba56f66
commit 1462d52e13
4572 changed files with 2658864 additions and 0 deletions
--- a/OTRS/Kernel/System/CustomerAuth/TwoFactor/GoogleAuthenticator.pm
+++ b/OTRS/Kernel/System/CustomerAuth/TwoFactor/GoogleAuthenticator.pm
@@ -0,0 +1,126 @@
+# --
+# Copyright (C) 2001-2019 OTRS AG, https://otrs.com/
+# --
+# This software comes with ABSOLUTELY NO WARRANTY. For details, see
+# the enclosed file COPYING for license information (GPL). If you
+# did not receive this file, see https://www.gnu.org/licenses/gpl-3.0.txt.
+# --
+
+package Kernel::System::CustomerAuth::TwoFactor::GoogleAuthenticator;
+
+use strict;
+use warnings;
+
+use Digest::SHA qw(sha1);
+use Digest::HMAC qw(hmac_hex);
+
+use parent qw(Kernel::System::Auth::TwoFactor::GoogleAuthenticator);
+
+our @ObjectDependencies = (
+    'Kernel::Config',
+    'Kernel::System::CustomerUser',
+    'Kernel::System::Log',
+);
+
+sub new {
+    my ( $Type, %Param ) = @_;
+
+    # allocate new hash for object
+    my $Self = {};
+    bless( $Self, $Type );
+
+    $Self->{Count} = $Param{Count} || '';
+
+    return $Self;
+}
+
+sub Auth {
+    my ( $Self, %Param ) = @_;
+
+    # check needed stuff
+    if ( !$Param{User} ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'error',
+            Message  => "Need User!"
+        );
+        return;
+    }
+
+    my $ConfigObject = $Kernel::OM->Get('Kernel::Config');
+    my $SecretPreferencesKey
+        = $ConfigObject->Get("Customer::AuthTwoFactorModule$Self->{Count}::SecretPreferencesKey") || '';
+    if ( !$SecretPreferencesKey ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'error',
+            Message  => "Found no configuration for SecretPreferencesKey in Customer::AuthTwoFactorModule.",
+        );
+        return;
+    }
+
+    # check if customer has secret stored in preferences
+    my %UserPreferences = $Kernel::OM->Get('Kernel::System::CustomerUser')->GetPreferences(
+        UserID => $Param{User},
+    );
+    if ( !$UserPreferences{$SecretPreferencesKey} ) {
+
+        # if login without a stored secret key is permitted, this counts as passed
+        if ( $ConfigObject->Get("Customer::AuthTwoFactorModule$Self->{Count}::AllowEmptySecret") ) {
+            return 1;
+        }
+
+        # otherwise login counts as failed
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'error',
+            Message  => "Found no SecretPreferencesKey for customer $Param{User}.",
+        );
+        return;
+    }
+
+    # if we get to here (user has preference), we need a passed token
+    if ( !$Param{TwoFactorToken} ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "CustomerUser: $Param{User} two factor customer authentication failed (TwoFactorToken missing)."
+        );
+        return;
+    }
+
+    # generate otp based on secret from preferences
+    my $OTP = $Self->_GenerateOTP(
+        Secret => $UserPreferences{$SecretPreferencesKey},
+    );
+
+    # compare against user provided otp
+    if ( $Param{TwoFactorToken} ne $OTP ) {
+
+        # check if previous token is also to be accepted
+        if ( $ConfigObject->Get("Customer::AuthTwoFactorModule$Self->{Count}::AllowPreviousToken") ) {
+
+            # try again with previous otp (from 30 seconds ago)
+            $OTP = $Self->_GenerateOTP(
+                Secret   => $UserPreferences{$SecretPreferencesKey},
+                Previous => 1,
+            );
+        }
+
+        if ( $Param{TwoFactorToken} ne $OTP ) {
+
+            # log failure
+            $Kernel::OM->Get('Kernel::System::Log')->Log(
+                Priority => 'notice',
+                Message  => "CustomerUser: $Param{User} two factor customer authentication failed (non-matching otp).",
+            );
+            return;
+        }
+    }
+
+    # log success
+    $Kernel::OM->Get('Kernel::System::Log')->Log(
+        Priority => 'notice',
+        Message  => "CustomerUser: $Param{User} two factor customer authentication ok.",
+    );
+
+    return 1;
+}
+
+1;