action.php

<?php

use dokuwiki\plugin\twofactor\Provider;
use dokuwiki\Form\Form;

// Load the PHP QR Code library.
require_once(dirname(__FILE__).'/phpqrcode.php');

/**
 * If we turn this into a helper class, it can have its own language and settings files.
 * Until then, we can only use per-user settings.
 */
class action_plugin_twofactorgoogleauth extends Provider
{

    /**
     * @inheritDoc
     */
    public function isConfigured()
    {
        return $this->settings->get('secret') &&
            $this->settings->get('verified');
    }

    /**
     * This user will need to interact with the QR code in order to configure GA.
     */
    public function renderProfileForm(Form $form)
    {
        global $conf;
        global $USERINFO;

        if (!$this->settings->get('verified')) {
            // Show the QR code so the user can add other devices.
            $secret = $this->getSecret();
            $this->settings->set('secret', $secret);
            $data = $this->generateQRCodeData($USERINFO['name'].'@'.$conf['title'], $secret);
            $form->addHTML('<figure><figcaption>'.$this->getLang('directions').'</figcaption>');
            $form->addHTML('<img src="'.$data.'" alt="'.$this->getLang('directions').'" />');
            $form->addHTML('</figure>');
            $form->addHTML('<span>'.$this->getLang('verifynotice').'</span><br>');
            $form->addTextInput(
                'googleauth_verify',
                $this->getLang('verifymodule')
            );
        } else {
            $form->addHTML('<span>' . $this->getLang('passedsetup') . '</span>');
        }
        return $form;
    }

    /**
     * Process any user configuration.
     */
    public function handleProfileForm()
    {
        global $INPUT;

        $otp = $INPUT->str('googleauth_verify');
        if ($otp && $this->processLogin($otp)) {
            $this->settings->set('verified', true);
        }
    }

    /**
     *  This module authenticates against a time-based code.
     */
    public function processLogin($code)
    {
        $ga = new dokuwiki\plugin\twofactor\GoogleAuthenticator();
        $twofactor = plugin_load('action', 'twofactor_profile');
        $expiry = $twofactor->getConf('generatorexpiry');
        $secret = $this->settings->get('secret');
        return $ga->verifyCode($secret, $code, $expiry);
    }

    /**
     * If there is
     * @return string
     * @throws Exception
     */
    public function getSecret()
    {
        $secret = $this->settings->get('secret');
        if (!$secret) {
            $ga = new dokuwiki\plugin\twofactor\GoogleAuthenticator();
            $secret = $ga->createSecret();
        }
        return $secret;
    }

    /**
     * Generates the QR Code used by Google Authenticator and produces a data
     * URI for direct insertion into the HTML source.
     * @param $name - The email address fo the user
     * @param $secret - The secret hash used to seed the otp formula
     * @return string - a complete data URI to be placed in an img tag's src
     *      attribute.
     */
    private function generateQRCodeData($name, $secret)
    {
        $url = 'otpauth://totp/'.rawurlencode($name).'?secret='.$secret;
        // Capture PNG image for embedding into HTML.
        // Thanks to https://evertpot.com/222/ for the stream tutorial
        // First create a stream that the PNG will be written into.
        $stream = fopen('php://memory', 'r+');
        // Write the PNG into the stream
        QRcode::png($url, $stream);
        // Reset the stream to the start.
        rewind($stream);
        // Read in the contents of the stream.
        $image_data = stream_get_contents($stream);
        // Convert to data URI.
        return "data:image/png;base64," . base64_encode($image_data);
    }

    /**
     * @inheritDoc
     */
    public function transmitMessage($code)
    {
        return $this->getLang('verifymodule');
    }
}