diff options
Diffstat (limited to 'movement/watch_faces/complication')
-rw-r--r-- | movement/watch_faces/complication/totp_face_lfs.c | 253 | ||||
-rw-r--r-- | movement/watch_faces/complication/totp_face_lfs.h | 26 |
2 files changed, 279 insertions, 0 deletions
diff --git a/movement/watch_faces/complication/totp_face_lfs.c b/movement/watch_faces/complication/totp_face_lfs.c new file mode 100644 index 00000000..0b542653 --- /dev/null +++ b/movement/watch_faces/complication/totp_face_lfs.c @@ -0,0 +1,253 @@ +#include <stdlib.h> +#include <string.h> +#include <math.h> + +#include "TOTP.h" +#include "base32.h" + +#include "watch.h" +#include "watch_utility.h" +#include "filesystem.h" + +#include "totp_face_lfs.h" + +/* Reads from a file totp_uris.txt where each line is what's in a QR code: + * e.g. + * otpauth://totp/Example:alice@google.com?secret=JBSWY3DPEHPK3PXP&issuer=Example + * otpauth://totp/ACME%20Co:john.doe@email.com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm=SHA1&digits=6&period=30 + * This is also the same as what Aegis exports in plain-text format. + * + * Minimal sanitisation of input, however. + * + * At the moment, to get the records onto the filesystem, start a serial connection and do: + * echo otpauth://totp/Example:alice@google.com?secret=JBSWY3DPEHPK3PXP&issuer=Example > totp_uris.txt + * echo otpauth://totp/ACME%20Co:john.doe@email.com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm=SHA1&digits=6&period=30 >> totp_uris.txt + * (note the double >> in the second one) + * + * You may want to customise the characters that appear to identify the 2FA code. These are just the first two characters of the issuer, + * and it's fine to modify the URI. + */ + + +#define MAX_TOTP_RECORDS 20 +#define MAX_TOTP_SECRET_SIZE 48 +#define TOTP_FILE "totp_uris.txt" + +const char* TOTP_URI_START = "otpauth://totp/"; + +struct totp_record { + uint8_t *secret; + size_t secret_size; + char label[2]; + uint32_t period; +}; + +static struct totp_record totp_records[MAX_TOTP_RECORDS]; +static int num_totp_records = 0; + +static void init_totp_record(struct totp_record *totp_record) { + totp_record->secret_size = 0; + totp_record->label[0] = 'A'; + totp_record->label[1] = 'A'; + totp_record->period = 30; +} + +static bool totp_face_lfs_read_param(struct totp_record *totp_record, char *param, char *value) { + if (!strcmp(param, "issuer")) { + if (value[0] == '\0' || value[1] == '\0') { + printf("TOTP issuer must be >= 2 chars, got '%s'\n", value); + return false; + } + totp_record->label[0] = value[0]; + totp_record->label[1] = value[1]; + } else if (!strcmp(param, "secret")) { + if (UNBASE32_LEN(strlen(value)) > MAX_TOTP_SECRET_SIZE) { + printf("TOTP secret too long: %s\n", value); + return false; + } + totp_record->secret = malloc(UNBASE32_LEN(strlen(value))); + totp_record->secret_size = base32_decode((unsigned char *)value, totp_record->secret); + if (totp_record->secret_size == 0) { + free(totp_record->secret); + printf("TOTP can't decode secret: %s\n", value); + return false; + } + } else if (!strcmp(param, "digits")) { + if (!strcmp(param, "6")) { + printf("TOTP got %s, not 6 digits\n", value); + return false; + } + } else if (!strcmp(param, "period")) { + totp_record->period = atoi(value); + if (totp_record->period == 0) { + printf("TOTP invalid period %s\n", value); + return false; + } + } else if (!strcmp(param, "algorithm")) { + if (!strcmp(param, "SHA1")) { + printf("TOTP ignored due to algorithm %s\n", value); + return false; + } + } + + return true; +} + +static void totp_face_lfs_read_file(char *filename) { + // For 'format' of file, see comment at top. + const size_t uri_start_len = strlen(TOTP_URI_START); + + if (!filesystem_file_exists(filename)) { + printf("TOTP file error: %s\n", filename); + return; + } + + char line[256]; + int32_t offset = 0; + while (filesystem_read_line(filename, line, &offset, 255) && strlen(line)) { + if (num_totp_records == MAX_TOTP_RECORDS) { + printf("TOTP max records: %d\n", MAX_TOTP_RECORDS); + break; + } + + // Check that it looks like a URI + if (strncmp(TOTP_URI_START, line, uri_start_len)) { + printf("TOTP invalid uri start: %s\n", line); + continue; + } + + // Check that we can find a '?' (to start our parameters) + char *param; + char *param_saveptr = NULL; + char *params = strchr(line + uri_start_len, '?'); + if (params == NULL) { + printf("TOTP no params: %s\n", line); + continue; + } + + // Process the parameters and put them in the record + init_totp_record(&totp_records[num_totp_records]); + bool error = false; + param = strtok_r(params + 1, "&", ¶m_saveptr); + do { + char *param_middle = strchr(param, '='); + *param_middle = '\0'; + error = error || !totp_face_lfs_read_param(&totp_records[num_totp_records], param, param_middle + 1); + } while ((param = strtok_r(NULL, "&", ¶m_saveptr))); + + if (error) { + totp_records[num_totp_records].secret_size = 0; + continue; + } + + // If we found a probably valid TOTP record, keep it. + if (totp_records[num_totp_records].secret_size) { + num_totp_records += 1; + } else { + printf("TOTP missing secret: %s\n", line); + } + } +} + +void totp_face_lfs_setup(movement_settings_t *settings, uint8_t watch_face_index, void ** context_ptr) { + (void) settings; + (void) watch_face_index; + if (*context_ptr == NULL) { + *context_ptr = malloc(sizeof(totp_lfs_state_t)); + } + +#if !(__EMSCRIPTEN__) + if (num_totp_records == 0) { + totp_face_lfs_read_file(TOTP_FILE); + } +#endif +} + +static void totp_face_set_record(totp_lfs_state_t *totp_state, int i) { + if (num_totp_records == 0 && i >= num_totp_records) { + return; + } + + totp_state->current_index = i; + TOTP(totp_records[i].secret, totp_records[i].secret_size, totp_records[i].period); + totp_state->current_code = getCodeFromTimestamp(totp_state->timestamp); + totp_state->steps = totp_state->timestamp / totp_records[i].period; +} + +void totp_face_lfs_activate(movement_settings_t *settings, void *context) { + (void) settings; + memset(context, 0, sizeof(totp_lfs_state_t)); + totp_lfs_state_t *totp_state = (totp_lfs_state_t *)context; + +#if __EMSCRIPTEN__ + if (num_totp_records == 0) { + // Doing this here rather than in setup makes things a bit more pleasant in the simulator, since there's no easy way to trigger + // setup again after uploading the data. + totp_face_lfs_read_file(TOTP_FILE); + } +#endif + + totp_state->timestamp = watch_utility_date_time_to_unix_time(watch_rtc_get_date_time(), movement_timezone_offsets[settings->bit.time_zone] * 60); + totp_face_set_record(totp_state, 0); +} + +static void totp_face_display(totp_lfs_state_t *totp_state) { + uint8_t index = totp_state->current_index; + char buf[14]; + + if (num_totp_records == 0) { + watch_display_string("No2F Codes", 0); + return; + } + + div_t result = div(totp_state->timestamp, totp_records[index].period); + if (result.quot != totp_state->steps) { + totp_state->current_code = getCodeFromTimestamp(totp_state->timestamp); + totp_state->steps = result.quot; + } + uint8_t valid_for = totp_records[index].period - result.rem; + + sprintf(buf, "%c%c%2d%06lu", totp_records[index].label[0], totp_records[index].label[1], valid_for, totp_state->current_code); + + watch_display_string(buf, 0); +} + +bool totp_face_lfs_loop(movement_event_t event, movement_settings_t *settings, void *context) { + (void) settings; + + totp_lfs_state_t *totp_state = (totp_lfs_state_t *)context; + + switch (event.event_type) { + case EVENT_TICK: + totp_state->timestamp++; + totp_face_display(totp_state); + break; + case EVENT_ACTIVATE: + totp_face_display(totp_state); + break; + case EVENT_MODE_BUTTON_UP: + movement_move_to_next_face(); + break; + case EVENT_LIGHT_BUTTON_DOWN: + movement_illuminate_led(); + break; + case EVENT_TIMEOUT: + movement_move_to_face(0); + break; + case EVENT_ALARM_BUTTON_UP: + totp_face_set_record(totp_state, (totp_state->current_index + 1) % num_totp_records); + totp_face_display(totp_state); + break; + case EVENT_ALARM_BUTTON_DOWN: + case EVENT_ALARM_LONG_PRESS: + default: + break; + } + + return true; +} + +void totp_face_lfs_resign(movement_settings_t *settings, void *context) { + (void) settings; + (void) context; +} diff --git a/movement/watch_faces/complication/totp_face_lfs.h b/movement/watch_faces/complication/totp_face_lfs.h new file mode 100644 index 00000000..0f388bc3 --- /dev/null +++ b/movement/watch_faces/complication/totp_face_lfs.h @@ -0,0 +1,26 @@ +#ifndef TOTP_FACE_LFS_H_ +#define TOTP_FACE_LFS_H_ + +#include "movement.h" + +typedef struct { + uint32_t timestamp; + uint8_t steps; + uint32_t current_code; + uint8_t current_index; +} totp_lfs_state_t; + +void totp_face_lfs_setup(movement_settings_t *settings, uint8_t watch_face_index, void ** context_ptr); +void totp_face_lfs_activate(movement_settings_t *settings, void *context); +bool totp_face_lfs_loop(movement_event_t event, movement_settings_t *settings, void *context); +void totp_face_lfs_resign(movement_settings_t *settings, void *context); + +#define totp_face_lfs ((const watch_face_t){ \ + totp_face_lfs_setup, \ + totp_face_lfs_activate, \ + totp_face_lfs_loop, \ + totp_face_lfs_resign, \ + NULL, \ +}) + +#endif // TOTP_FACE_LFS_H_ |