yubioath-flutter/lib/oath/views/add_account_page.dart

import 'dart:math';

import 'package:flutter/material.dart';
import 'package:flutter/services.dart';
import 'package:flutter_riverpod/flutter_riverpod.dart';

import '../../app/message.dart';
import '../../app/state.dart';
import '../../app/models.dart';
import '../../widgets/responsive_dialog.dart';
import '../models.dart';
import '../state.dart';
import 'utils.dart';

final _secretFormatterPattern =
    RegExp('[abcdefghijklmnopqrstuvwxyz234567 ]', caseSensitive: false);

enum _QrScanState { none, scanning, success, failed }

class OathAddAccountPage extends ConsumerStatefulWidget {
  const OathAddAccountPage(this.devicePath, {Key? key}) : super(key: key);
  final DevicePath devicePath;

  @override
  ConsumerState<ConsumerStatefulWidget> createState() =>
      _OathAddAccountPageState();
}

class _OathAddAccountPageState extends ConsumerState<OathAddAccountPage> {
  final _issuerController = TextEditingController();
  final _accountController = TextEditingController();
  final _secretController = TextEditingController();
  final _periodController = TextEditingController(text: '$defaultPeriod');
  bool _touch = false;
  OathType _oathType = defaultOathType;
  HashAlgorithm _hashAlgorithm = defaultHashAlgorithm;
  int _digits = defaultDigits;
  bool _validateSecretLength = false;
  _QrScanState _qrState = _QrScanState.none;

  _scanQrCode(QrScanner qrScanner) async {
    try {
      setState(() {
        _qrState = _QrScanState.scanning;
      });
      final otpauth = await qrScanner.scanQr();
      final data = CredentialData.fromUri(Uri.parse(otpauth));
      setState(() {
        _issuerController.text = data.issuer ?? '';
        _accountController.text = data.name;
        _secretController.text = data.secret;
        _oathType = data.oathType;
        _hashAlgorithm = data.hashAlgorithm;
        _periodController.text = '${data.period}';
        _digits = data.digits;
        _qrState = _QrScanState.success;
      });
    } catch (e) {
      setState(() {
        _qrState = _QrScanState.failed;
      });
    }
  }

  List<Widget> _buildQrStatus() {
    switch (_qrState) {
      case _QrScanState.success:
        return const [
          Icon(Icons.check_circle_outline_outlined),
          Text('QR code scanned!'),
        ];
      case _QrScanState.scanning:
        return const [
          SizedBox.square(dimension: 16.0, child: CircularProgressIndicator()),
        ];
      case _QrScanState.failed:
        return const [
          Icon(Icons.warning_amber_rounded),
          Text('No QR code found'),
        ];
      default:
        return [];
    }
  }

  @override
  Widget build(BuildContext context) {
    // If current device changes, we need to pop back to the main Page.
    ref.listen<DeviceNode?>(currentDeviceProvider, (previous, next) {
      //TODO: This can probably be checked better to make sure it's the main page.
      Navigator.of(context).popUntil((route) => route.isFirst);
    });

    final period = int.tryParse(_periodController.text) ?? -1;
    final remaining = getRemainingKeySpace(
      oathType: _oathType,
      period: period,
      issuer: _issuerController.text,
      name: _accountController.text,
    );
    final issuerRemaining = remaining.first;
    final nameRemaining = remaining.second;

    final secret = _secretController.text.replaceAll(' ', '');
    final secretLengthValid = secret.length * 5 % 8 < 5;
    final isValid =
        _accountController.text.isNotEmpty && secret.isNotEmpty && period > 0;

    final qrScanner = ref.watch(qrScannerProvider);

    return ResponsiveDialog(
      title: const Text('Add account'),
      child: Column(
        crossAxisAlignment: CrossAxisAlignment.start,
        children: [
          Text(
            'Account details',
            style: Theme.of(context).textTheme.headline6,
          ),
          TextField(
            controller: _issuerController,
            autofocus: true,
            enabled: issuerRemaining > 0,
            maxLength: max(issuerRemaining, 1),
            decoration: const InputDecoration(
              border: OutlineInputBorder(),
              labelText: 'Issuer (optional)',
              helperText: '', // Prevents dialog resizing when enabled = false
            ),
            onChanged: (value) {
              setState(() {
                // Update maxlengths
              });
            },
          ),
          TextField(
            controller: _accountController,
            maxLength: nameRemaining,
            decoration: const InputDecoration(
              border: OutlineInputBorder(),
              labelText: 'Account name',
              helperText: '', // Prevents dialog resizing when enabled = false
            ),
            onChanged: (value) {
              setState(() {
                // Update maxlengths
              });
            },
          ),
          TextField(
            controller: _secretController,
            inputFormatters: <TextInputFormatter>[
              FilteringTextInputFormatter.allow(_secretFormatterPattern)
            ],
            decoration: InputDecoration(
                border: const OutlineInputBorder(),
                labelText: 'Secret key',
                errorText: _validateSecretLength && !secretLengthValid
                    ? 'Invalid length'
                    : null),
            enabled: _qrState != _QrScanState.success,
            onChanged: (value) {
              setState(() {
                _validateSecretLength = false;
              });
            },
          ),
          if (qrScanner != null)
            Padding(
              padding: const EdgeInsets.only(top: 24.0),
              child: Row(
                children: [
                  OutlinedButton.icon(
                    onPressed: () {
                      _scanQrCode(qrScanner);
                    },
                    icon: const Icon(Icons.qr_code),
                    label: const Text('Scan QR code'),
                  ),
                  const SizedBox(width: 8.0),
                  ..._buildQrStatus(),
                ],
              ),
            ),
          const Divider(),
          Text(
            'Options',
            style: Theme.of(context).textTheme.headline6,
          ),
          Wrap(
            crossAxisAlignment: WrapCrossAlignment.center,
            spacing: 4.0,
            runSpacing: 8.0,
            children: [
              FilterChip(
                label: const Text('Require touch'),
                selected: _touch,
                onSelected: (value) {
                  setState(() {
                    _touch = value;
                  });
                },
              ),
              Chip(
                label: DropdownButtonHideUnderline(
                  child: DropdownButton<OathType>(
                    value: _oathType,
                    isDense: true,
                    underline: null,
                    items: OathType.values
                        .map((e) => DropdownMenuItem(
                              value: e,
                              child: Text(e.name.toUpperCase()),
                            ))
                        .toList(),
                    onChanged: _qrState != _QrScanState.success
                        ? (type) {
                            setState(() {
                              _oathType = type ?? OathType.totp;
                            });
                          }
                        : null,
                  ),
                ),
              ),
              Chip(
                label: DropdownButtonHideUnderline(
                  child: DropdownButton<HashAlgorithm>(
                    value: _hashAlgorithm,
                    isDense: true,
                    underline: null,
                    items: HashAlgorithm.values
                        .map((e) => DropdownMenuItem(
                              value: e,
                              child: Text(e.name.toUpperCase()),
                            ))
                        .toList(),
                    onChanged: _qrState != _QrScanState.success
                        ? (type) {
                            setState(() {
                              _hashAlgorithm = type ?? HashAlgorithm.sha1;
                            });
                          }
                        : null,
                  ),
                ),
              ),
              if (_oathType == OathType.totp)
                Chip(
                  label: DropdownButtonHideUnderline(
                    child: DropdownButton<int>(
                      value:
                          int.tryParse(_periodController.text) ?? defaultPeriod,
                      isDense: true,
                      underline: null,
                      items: [20, 30, 45, 60]
                          .map((e) => DropdownMenuItem(
                                value: e,
                                child: Text('$e sec'),
                              ))
                          .toList(),
                      onChanged: _qrState != _QrScanState.success
                          ? (period) {
                              setState(() {
                                _periodController.text =
                                    '${period ?? defaultPeriod}';
                              });
                            }
                          : null,
                    ),
                  ),
                ),
              Chip(
                label: DropdownButtonHideUnderline(
                  child: DropdownButton<int>(
                    value: _digits,
                    isDense: true,
                    underline: null,
                    items: [6, 7, 8]
                        .map((e) => DropdownMenuItem(
                              value: e,
                              child: Text('$e digits'),
                            ))
                        .toList(),
                    onChanged: _qrState != _QrScanState.success
                        ? (digits) {
                            setState(() {
                              _digits = digits ?? defaultDigits;
                            });
                          }
                        : null,
                  ),
                ),
              ),
            ],
          ),
        ]
            .map((e) => Padding(
                  padding: const EdgeInsets.symmetric(vertical: 8.0),
                  child: e,
                ))
            .toList(),
      ),
      actions: [
        TextButton(
          onPressed: isValid
              ? () {
                  if (secretLengthValid) {
                    final issuer = _issuerController.text;

                    final cred = CredentialData(
                      issuer: issuer.isEmpty ? null : issuer,
                      name: _accountController.text,
                      secret: secret,
                      oathType: _oathType,
                      hashAlgorithm: _hashAlgorithm,
                      digits: _digits,
                      period: period,
                    );

                    ref
                        .read(
                            credentialListProvider(widget.devicePath).notifier)
                        .addAccount(cred.toUri(), requireTouch: _touch);
                    Navigator.of(context).pop();
                    showMessage(context, 'Account added');
                  } else {
                    setState(() {
                      _validateSecretLength = true;
                    });
                  }
                }
              : null,
          child: const Text('Save'),
        ),
      ],
    );
  }
}