2017-01-27 15:55:38 +03:00
|
|
|
import QtQuick 2.0
|
|
|
|
import io.thp.pyotherside 1.4
|
|
|
|
|
2017-01-30 16:59:58 +03:00
|
|
|
|
2017-01-27 15:55:38 +03:00
|
|
|
// @disable-check M300
|
|
|
|
Python {
|
|
|
|
id: py
|
|
|
|
|
|
|
|
property int nDevices
|
|
|
|
property bool hasDevice
|
|
|
|
property string name
|
|
|
|
property string version
|
|
|
|
property string serial
|
|
|
|
property var features: []
|
|
|
|
property var connections: []
|
2017-01-31 18:17:10 +03:00
|
|
|
property var credentials: null
|
|
|
|
property int nextRefresh: 0
|
2017-01-27 15:55:38 +03:00
|
|
|
property var enabled: []
|
|
|
|
property bool ready: false
|
|
|
|
property var queue: []
|
2017-02-07 16:17:54 +03:00
|
|
|
property bool validated
|
2017-02-08 13:55:53 +03:00
|
|
|
property var passwordKey
|
2017-02-08 18:47:28 +03:00
|
|
|
signal wrongPassword
|
2017-01-27 15:55:38 +03:00
|
|
|
|
|
|
|
Component.onCompleted: {
|
2017-01-30 16:59:58 +03:00
|
|
|
importModule('site', function () {
|
|
|
|
call('site.addsitedir', [appDir + '/pymodules'], function () {
|
2017-01-27 15:55:38 +03:00
|
|
|
addImportPath(urlPrefix + '/py')
|
|
|
|
importModule('yubikey', function () {
|
|
|
|
ready = true
|
2017-01-30 16:59:58 +03:00
|
|
|
do_call('yubikey.controller.get_features', [],
|
|
|
|
function (res) {
|
|
|
|
features = res
|
|
|
|
for (var i in queue) {
|
|
|
|
do_call(queue[i][0], queue[i][1],
|
|
|
|
queue[i][2])
|
|
|
|
}
|
|
|
|
queue = []
|
|
|
|
})
|
2017-01-27 15:55:38 +03:00
|
|
|
})
|
|
|
|
})
|
|
|
|
})
|
|
|
|
}
|
|
|
|
|
|
|
|
onError: {
|
|
|
|
console.log('Python error: ' + traceback)
|
|
|
|
}
|
|
|
|
|
|
|
|
function do_call(func, args, cb) {
|
|
|
|
if (!ready) {
|
|
|
|
queue.push([func, args, cb])
|
|
|
|
} else {
|
2017-02-01 18:51:02 +03:00
|
|
|
call(func, args.map(JSON.stringify), function (json) {
|
2017-01-27 15:55:38 +03:00
|
|
|
if (cb) {
|
|
|
|
cb(json ? JSON.parse(json) : undefined)
|
|
|
|
}
|
|
|
|
})
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
function refresh() {
|
|
|
|
do_call('yubikey.controller.count_devices', [], function (n) {
|
|
|
|
nDevices = n
|
|
|
|
if (nDevices == 1) {
|
|
|
|
do_call('yubikey.controller.refresh', [], function (dev) {
|
|
|
|
hasDevice = dev !== undefined && dev !== null
|
|
|
|
name = dev ? dev.name : ''
|
|
|
|
version = dev ? dev.version : ''
|
|
|
|
serial = dev ? dev.serial : ''
|
|
|
|
enabled = dev ? dev.enabled : []
|
|
|
|
connections = dev ? dev.connections : []
|
2017-01-31 18:17:10 +03:00
|
|
|
var now = Math.floor(Date.now() / 1000)
|
2017-02-07 16:17:54 +03:00
|
|
|
if (validated && nextRefresh < now) {
|
2017-02-03 14:24:41 +03:00
|
|
|
refreshCredentials()
|
2017-01-31 18:17:10 +03:00
|
|
|
}
|
2017-01-27 15:55:38 +03:00
|
|
|
})
|
|
|
|
} else if (hasDevice) {
|
|
|
|
hasDevice = false
|
2017-01-31 18:17:10 +03:00
|
|
|
credentials = null
|
|
|
|
nextRefresh = 0
|
2017-01-27 15:55:38 +03:00
|
|
|
}
|
|
|
|
})
|
2017-01-30 16:59:58 +03:00
|
|
|
}
|
2017-01-27 15:55:38 +03:00
|
|
|
|
2017-02-07 16:17:54 +03:00
|
|
|
function validate(providedPassword) {
|
2017-02-08 13:55:53 +03:00
|
|
|
do_call('yubikey.controller.validate', [providedPassword], function(res) {
|
|
|
|
if (res !== false) {
|
|
|
|
passwordKey = res
|
2017-02-07 16:17:54 +03:00
|
|
|
validated = true
|
|
|
|
}
|
2017-02-08 18:47:28 +03:00
|
|
|
if (res === false) {
|
|
|
|
wrongPassword()
|
2017-02-08 13:55:53 +03:00
|
|
|
}
|
2017-02-07 16:17:54 +03:00
|
|
|
})
|
2017-02-01 18:27:45 +03:00
|
|
|
}
|
|
|
|
|
2017-02-07 16:17:54 +03:00
|
|
|
|
|
|
|
function refreshCredentials() {
|
|
|
|
var now = Math.floor(Date.now() / 1000)
|
2017-02-08 13:55:53 +03:00
|
|
|
do_call('yubikey.controller.refresh_credentials', [now, passwordKey], handleCredentials)
|
2017-02-01 18:27:45 +03:00
|
|
|
}
|
|
|
|
|
2017-01-31 18:17:10 +03:00
|
|
|
function handleCredentials(creds) {
|
2017-01-31 11:57:44 +03:00
|
|
|
var result = []
|
2017-01-31 18:17:10 +03:00
|
|
|
var minExpiration = (Date.now() / 1000) + 10000
|
2017-01-31 11:57:44 +03:00
|
|
|
for (var i = 0; i < creds.length; i++) {
|
2017-02-01 18:27:45 +03:00
|
|
|
var cred = creds[i]
|
2017-02-03 15:58:22 +03:00
|
|
|
// Update min expiration
|
2017-01-31 18:17:10 +03:00
|
|
|
if (cred.expiration && cred.expiration < minExpiration) {
|
|
|
|
minExpiration = cred.expiration
|
|
|
|
}
|
2017-02-03 15:58:22 +03:00
|
|
|
// Touch credentials should only be replaced by user
|
|
|
|
if (credentialExists(cred.name) && cred.touch) {
|
|
|
|
result.push(getCredential(cred.name))
|
|
|
|
continue
|
|
|
|
}
|
|
|
|
// HOTP credentials should only be replaced by user
|
|
|
|
if (credentialExists(cred.name) && cred.oath_type === 'hotp') {
|
|
|
|
result.push(getCredential(cred.name))
|
|
|
|
continue
|
|
|
|
}
|
|
|
|
// TOTP credentials should be updated
|
2017-01-31 11:57:44 +03:00
|
|
|
result.push(cred)
|
|
|
|
}
|
2017-01-31 18:17:10 +03:00
|
|
|
nextRefresh = minExpiration
|
|
|
|
credentials = result
|
2017-01-31 11:57:44 +03:00
|
|
|
}
|
|
|
|
|
2017-02-03 15:58:22 +03:00
|
|
|
function getCredential(name) {
|
|
|
|
for (var i = 0; i < credentials.length; i++) {
|
|
|
|
if (credentials[i].name === name) {
|
|
|
|
return credentials[i]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
function credentialExists(name) {
|
|
|
|
if (credentials != null) {
|
|
|
|
for (var i = 0; i < credentials.length; i++) {
|
|
|
|
if (credentials[i].name === name) {
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2017-02-07 16:17:54 +03:00
|
|
|
function calculate(credential) {
|
|
|
|
var now = Math.floor(Date.now() / 1000)
|
2017-02-08 13:55:53 +03:00
|
|
|
do_call('yubikey.controller.calculate', [credential, now, passwordKey], updateCredential)
|
2017-02-07 16:17:54 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
function updateCredential(cred) {
|
|
|
|
var result = []
|
|
|
|
for (var i = 0; i < credentials.length; i++) {
|
|
|
|
if (credentials[i].name === cred.name) {
|
|
|
|
result.push(cred)
|
|
|
|
} else {
|
|
|
|
result.push(credentials[i])
|
|
|
|
}
|
|
|
|
}
|
|
|
|
credentials = result
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2017-02-03 14:24:41 +03:00
|
|
|
function addCredential(name, key, oathType, digits, algorithm, touch) {
|
|
|
|
do_call('yubikey.controller.add_credential',
|
2017-02-08 13:55:53 +03:00
|
|
|
[name, key, oathType, digits, algorithm, touch, passwordKey])
|
2017-02-03 14:24:41 +03:00
|
|
|
}
|
|
|
|
|
2017-02-03 18:23:28 +03:00
|
|
|
function deleteCredential(credential) {
|
2017-02-08 13:55:53 +03:00
|
|
|
do_call('yubikey.controller.delete_credential', [credential, passwordKey])
|
2017-01-27 15:55:38 +03:00
|
|
|
}
|
|
|
|
}
|