mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
54694c4fca
* [MISC] Ignore errcheck recommendations for legacy code Some of this is likely intended to stay how it is, some could use refactoring, for now we will mark is and ignore it from the linter to be potentially addressed in the future. * [MISC] Ensure files are gofmt-ed
53 lines
1.6 KiB
Go
53 lines
1.6 KiB
Go
package handlers
|
|
|
|
import (
|
|
"crypto/elliptic"
|
|
"fmt"
|
|
|
|
"github.com/tstranex/u2f"
|
|
|
|
"github.com/authelia/authelia/internal/middlewares"
|
|
)
|
|
|
|
// SecondFactorU2FRegister handler validating the client has successfully validated the challenge
|
|
// to complete the U2F registration.
|
|
func SecondFactorU2FRegister(ctx *middlewares.AutheliaCtx) {
|
|
responseBody := u2f.RegisterResponse{}
|
|
err := ctx.ParseBody(&responseBody)
|
|
|
|
if err != nil {
|
|
ctx.Error(fmt.Errorf("Unable to parse response body: %v", err), unableToRegisterSecurityKeyMessage)
|
|
}
|
|
|
|
userSession := ctx.GetSession()
|
|
|
|
if userSession.U2FChallenge == nil {
|
|
ctx.Error(fmt.Errorf("U2F registration has not been initiated yet"), unableToRegisterSecurityKeyMessage)
|
|
return
|
|
}
|
|
// Ensure the challenge is cleared if anything goes wrong.
|
|
defer func() {
|
|
userSession.U2FChallenge = nil
|
|
ctx.SaveSession(userSession) //nolint:errcheck // TODO: Legacy code, consider refactoring time permitting.
|
|
}()
|
|
|
|
registration, err := u2f.Register(responseBody, *userSession.U2FChallenge, u2fConfig)
|
|
|
|
if err != nil {
|
|
ctx.Error(fmt.Errorf("Unable to verify U2F registration: %v", err), unableToRegisterSecurityKeyMessage)
|
|
return
|
|
}
|
|
|
|
ctx.Logger.Debugf("Register U2F device for user %s", userSession.Username)
|
|
|
|
publicKey := elliptic.Marshal(elliptic.P256(), registration.PubKey.X, registration.PubKey.Y)
|
|
err = ctx.Providers.StorageProvider.SaveU2FDeviceHandle(userSession.Username, registration.KeyHandle, publicKey)
|
|
|
|
if err != nil {
|
|
ctx.Error(fmt.Errorf("Unable to register U2F device for user %s: %v", userSession.Username, err), unableToRegisterSecurityKeyMessage)
|
|
return
|
|
}
|
|
|
|
ctx.ReplyOK()
|
|
}
|