yubioath-flutter/lib/oath/views/add_account_page.dart

import 'dart:math';
import 'dart:convert';

import 'package:flutter/material.dart';
import 'package:flutter/services.dart';
import 'package:flutter_riverpod/flutter_riverpod.dart';

import '../../app/state.dart';
import '../../app/models.dart';
import '../../app/views/responsive_dialog.dart';
import '../../widgets/file_drop_target.dart';
import '../models.dart';
import '../state.dart';
import 'utils.dart';

final _secretFormatterPattern =
    RegExp('[abcdefghijklmnopqrstuvwxyz234567 ]', caseSensitive: false);

enum _QrScanState { none, scanning, success, failed }

class OathAddAccountPage extends ConsumerStatefulWidget {
  const OathAddAccountPage({required this.device, Key? key}) : super(key: key);
  final DeviceNode device;

  @override
  ConsumerState<ConsumerStatefulWidget> createState() =>
      _OathAddAccountPageState();
}

class _OathAddAccountPageState extends ConsumerState<OathAddAccountPage> {
  final _issuerController = TextEditingController();
  final _accountController = TextEditingController();
  final _secretController = TextEditingController();
  final _periodController = TextEditingController(text: '$defaultPeriod');
  bool _touch = false;
  OathType _oathType = defaultOathType;
  HashAlgorithm _hashAlgorithm = defaultHashAlgorithm;
  int _digits = defaultDigits;
  bool _validateSecretLength = false;
  _QrScanState _qrState = _QrScanState.none;
  bool isObscure = true;

  _scanQrCode(QrScanner qrScanner) async {
    try {
      setState(() {
        _qrState = _QrScanState.scanning;
      });
      final otpauth = await qrScanner.scanQr();
      final data = CredentialData.fromUri(Uri.parse(otpauth));
      setState(() {
        _issuerController.text = data.issuer ?? '';
        _accountController.text = data.name;
        _secretController.text = data.secret;
        _oathType = data.oathType;
        _hashAlgorithm = data.hashAlgorithm;
        _periodController.text = '${data.period}';
        _digits = data.digits;
        _qrState = _QrScanState.success;
      });
    } catch (e) {
      setState(() {
        _qrState = _QrScanState.failed;
      });
    }
  }

  List<Widget> _buildQrStatus() {
    switch (_qrState) {
      case _QrScanState.success:
        return const [
          Icon(Icons.check_circle_outline_outlined),
          Text('QR code scanned!'),
        ];
      case _QrScanState.scanning:
        return const [
          SizedBox.square(dimension: 16.0, child: CircularProgressIndicator()),
        ];
      case _QrScanState.failed:
        return const [
          Icon(Icons.warning_amber_rounded),
          Text('No QR code found'),
        ];
      default:
        return [];
    }
  }

  @override
  Widget build(BuildContext context) {
    // If current device changes, we need to pop back to the main Page.
    ref.listen<DeviceNode?>(currentDeviceProvider, (previous, next) {
      //TODO: This can probably be checked better to make sure it's the main page.
      Navigator.of(context).popUntil((route) => route.isFirst);
    });

    final period = int.tryParse(_periodController.text) ?? -1;
    final remaining = getRemainingKeySpace(
      oathType: _oathType,
      period: period,
      issuer: _issuerController.text,
      name: _accountController.text,
    );
    final issuerRemaining = remaining.first;
    final nameRemaining = remaining.second;

    final secret = _secretController.text.replaceAll(' ', '');
    final secretLengthValid = secret.length * 5 % 8 < 5;
    final isValid = _accountController.text.isNotEmpty &&
        secret.isNotEmpty &&
        issuerRemaining >= -1 &&
        nameRemaining >= 0 &&
        period > 0;

    final qrScanner = ref.watch(qrScannerProvider);

    return ResponsiveDialog(
      title: const Text('Add account'),
      child: FileDropTarget(
        onFileDropped: (fileData) async {
          if (qrScanner != null) {
            final b64Image = base64Encode(fileData);
            final otpauth = await qrScanner.scanQr(b64Image);
            final data = CredentialData.fromUri(Uri.parse(otpauth));
            setState(() {
              _issuerController.text = data.issuer ?? '';
              _accountController.text = data.name;
              _secretController.text = data.secret;
              _oathType = data.oathType;
              _hashAlgorithm = data.hashAlgorithm;
              _periodController.text = '${data.period}';
              _digits = data.digits;
              _qrState = _QrScanState.success;
            });
          }
        },
        child: Column(
          crossAxisAlignment: CrossAxisAlignment.start,
          children: [
            Text(
              'Account details',
              style: Theme.of(context).textTheme.headline6,
            ),
            TextField(
              controller: _issuerController,
              autofocus: true,
              enabled: issuerRemaining > 0,
              maxLength: max(issuerRemaining, 1),
              decoration: const InputDecoration(
                border: OutlineInputBorder(),
                labelText: 'Issuer (optional)',
                helperText: '', // Prevents dialog resizing when enabled = false
              ),
              onChanged: (value) {
                setState(() {
                  // Update maxlengths
                });
              },
            ),
            TextField(
              controller: _accountController,
              maxLength: max(nameRemaining, 1),
              decoration: const InputDecoration(
                border: OutlineInputBorder(),
                labelText: 'Account name',
                helperText: '', // Prevents dialog resizing when enabled = false
              ),
              onChanged: (value) {
                setState(() {
                  // Update maxlengths
                });
              },
            ),
            TextField(
              controller: _secretController,
              obscureText: isObscure,
              inputFormatters: <TextInputFormatter>[
                FilteringTextInputFormatter.allow(_secretFormatterPattern)
              ],
              decoration: InputDecoration(
                  suffixIcon: IconButton(
                    icon: Icon(
                      isObscure ? Icons.visibility : Icons.visibility_off,
                    ),
                    onPressed: () {
                      setState(() {
                        isObscure = !isObscure;
                      });
                    },
                  ),
                  border: const OutlineInputBorder(),
                  labelText: 'Secret key',
                  errorText: _validateSecretLength && !secretLengthValid
                      ? 'Invalid length'
                      : null),
              enabled: _qrState != _QrScanState.success,
              onChanged: (value) {
                setState(() {
                  _validateSecretLength = false;
                });
              },
            ),
            if (qrScanner != null)
              Padding(
                padding: const EdgeInsets.only(top: 24.0),
                child: Row(
                  children: [
                    OutlinedButton.icon(
                      onPressed: () {
                        _scanQrCode(qrScanner);
                      },
                      icon: const Icon(Icons.qr_code),
                      label: const Text('Scan QR code'),
                    ),
                    const SizedBox(width: 8.0),
                    ..._buildQrStatus(),
                  ],
                ),
              ),
            const Divider(),
            Text(
              'Options',
              style: Theme.of(context).textTheme.headline6,
            ),
            Wrap(
              crossAxisAlignment: WrapCrossAlignment.center,
              spacing: 4.0,
              runSpacing: 8.0,
              children: [
                FilterChip(
                  label: const Text('Require touch'),
                  selected: _touch,
                  onSelected: (value) {
                    setState(() {
                      _touch = value;
                    });
                  },
                ),
                Chip(
                  label: DropdownButtonHideUnderline(
                    child: DropdownButton<OathType>(
                      value: _oathType,
                      isDense: true,
                      underline: null,
                      items: OathType.values
                          .map((e) => DropdownMenuItem(
                                value: e,
                                child: Text(e.name.toUpperCase()),
                              ))
                          .toList(),
                      onChanged: _qrState != _QrScanState.success
                          ? (type) {
                              setState(() {
                                _oathType = type ?? OathType.totp;
                              });
                            }
                          : null,
                    ),
                  ),
                ),
                Chip(
                  label: DropdownButtonHideUnderline(
                    child: DropdownButton<HashAlgorithm>(
                      value: _hashAlgorithm,
                      isDense: true,
                      underline: null,
                      items: HashAlgorithm.values
                          .map((e) => DropdownMenuItem(
                                value: e,
                                child: Text(e.name.toUpperCase()),
                              ))
                          .toList(),
                      onChanged: _qrState != _QrScanState.success
                          ? (type) {
                              setState(() {
                                _hashAlgorithm = type ?? HashAlgorithm.sha1;
                              });
                            }
                          : null,
                    ),
                  ),
                ),
                if (_oathType == OathType.totp)
                  Chip(
                    label: DropdownButtonHideUnderline(
                      child: DropdownButton<int>(
                        value: int.tryParse(_periodController.text) ??
                            defaultPeriod,
                        isDense: true,
                        underline: null,
                        items: [20, 30, 45, 60]
                            .map((e) => DropdownMenuItem(
                                  value: e,
                                  child: Text('$e sec'),
                                ))
                            .toList(),
                        onChanged: _qrState != _QrScanState.success
                            ? (period) {
                                setState(() {
                                  _periodController.text =
                                      '${period ?? defaultPeriod}';
                                });
                              }
                            : null,
                      ),
                    ),
                  ),
                Chip(
                  label: DropdownButtonHideUnderline(
                    child: DropdownButton<int>(
                      value: _digits,
                      isDense: true,
                      underline: null,
                      items: [6, 7, 8]
                          .map((e) => DropdownMenuItem(
                                value: e,
                                child: Text('$e digits'),
                              ))
                          .toList(),
                      onChanged: _qrState != _QrScanState.success
                          ? (digits) {
                              setState(() {
                                _digits = digits ?? defaultDigits;
                              });
                            }
                          : null,
                    ),
                  ),
                ),
              ],
            ),
          ]
              .map((e) => Padding(
                    padding: const EdgeInsets.symmetric(vertical: 8.0),
                    child: e,
                  ))
              .toList(),
        ),
      ),
      actions: [
        TextButton(
          onPressed: isValid
              ? () {
                  if (secretLengthValid) {
                    final issuer = _issuerController.text;

                    final cred = CredentialData(
                      issuer: issuer.isEmpty ? null : issuer,
                      name: _accountController.text,
                      secret: secret,
                      oathType: _oathType,
                      hashAlgorithm: _hashAlgorithm,
                      digits: _digits,
                      period: period,
                    );

                    ref
                        .read(
                            credentialListProvider(widget.device.path).notifier)
                        .addAccount(cred.toUri(), requireTouch: _touch);
                    Navigator.of(context).pop();
                    ScaffoldMessenger.of(context).showSnackBar(
                      const SnackBar(
                        content: Text('Account added'),
                        duration: Duration(seconds: 2),
                      ),
                    );
                  } else {
                    setState(() {
                      _validateSecretLength = true;
                    });
                  }
                }
              : null,
          child: const Text('Save'),
        ),
      ],
    );
  }
}