refactor, feat: added proton auth support, added instruction for proton, added errors, some refactor and cleanup
This commit is contained in:
parent
52d053e024
commit
eaf6aefd5b
@ -14,11 +14,9 @@ Then press OK, record will appear on page
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
You can edit your otpauth:// records using button "Change TOTP link". Your previous record will be replaced with a new otpauth:// link from text field, and previous link will not be shown on field.
|
|
||||||
|
|
||||||
### If you use google migrations (otpauth-migration:// links)
|
### If you use google migrations (otpauth-migration:// links)
|
||||||
|
|
||||||
To add 2FA TOTP recods using migration from Google Authenticator app, you must go to menu, select "Transfer accounts" -> "Export accounts"
|
To add 2FA TOTP records using migration from Google Authenticator app, you must go to menu, select "Transfer accounts" -> "Export accounts"
|
||||||
|
|
||||||
Select codes then screenshot QR code and scan (decode) it to a URI. Use any app providing scan from image, ex: "Search screen" function (Google Lens) on Google Assistant.
|
Select codes then screenshot QR code and scan (decode) it to a URI. Use any app providing scan from image, ex: "Search screen" function (Google Lens) on Google Assistant.
|
||||||
|
|
||||||
@ -34,4 +32,20 @@ Then press OK, all selected records from Google Authenticator will appear on pag
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
You can edit your records using button "Change TOTP link". Your previous record will be replaced with a new otpauth:// link from text field (otpauth-migration:// will not work), and previous link will not be shown on field.
|
|
||||||
|
### If you use Proton Authenticator
|
||||||
|
|
||||||
|
To add 2FA TOTP records from Proton Authenticator you must go to settings and press "Export":
|
||||||
|

|
||||||
|
|
||||||
|
After this save file and open it on text editor:
|
||||||
|
|
||||||
|

|
||||||
|

|
||||||
|
|
||||||
|
Copy all stuff from file at clipboard and import in application:
|
||||||
|

|
||||||
|

|
||||||
|
|
||||||
|
Then press OK, records will appear on page:
|
||||||
|

|
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-27.jpg
Normal file
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-27.jpg
Normal file
Binary file not shown.
After Width: | Height: | Size: 34 KiB |
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-35.jpg
Normal file
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-35.jpg
Normal file
Binary file not shown.
After Width: | Height: | Size: 20 KiB |
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-38.jpg
Normal file
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-38.jpg
Normal file
Binary file not shown.
After Width: | Height: | Size: 19 KiB |
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-41.jpg
Normal file
BIN
docs/guides/how-to-add-totps/photo_2025-08-08_17-10-41.jpg
Normal file
Binary file not shown.
After Width: | Height: | Size: 16 KiB |
BIN
docs/guides/how-to-add-totps/Снимок экрана_20250808_170854.png
Normal file
BIN
docs/guides/how-to-add-totps/Снимок экрана_20250808_170854.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 41 KiB |
BIN
docs/guides/how-to-add-totps/Снимок экрана_20250808_170912.png
Normal file
BIN
docs/guides/how-to-add-totps/Снимок экрана_20250808_170912.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 37 KiB |
@ -10,7 +10,9 @@ export const colors = {
|
|||||||
|
|
||||||
export const content = {
|
export const content = {
|
||||||
addTotpsHint:
|
addTotpsHint:
|
||||||
"For add a 2FA TOTP record you must have otpauth:// link or otpauth-migration:// link from Google Authenticator Migration QR-Code",
|
"For add a 2FA TOTP record you must have otpauth:// link otpauth-migration://" +
|
||||||
|
"link from Google Authenticator Migration QR-Code or Proton authenticator Export JSON string." +
|
||||||
|
"If you have a questions - check instruction below!",
|
||||||
totpRecordsHint: "TOTP records:",
|
totpRecordsHint: "TOTP records:",
|
||||||
createButton: {
|
createButton: {
|
||||||
placeHolder: "otpauth(-migration)://",
|
placeHolder: "otpauth(-migration)://",
|
||||||
@ -24,6 +26,14 @@ export const content = {
|
|||||||
label: "Change TOTP link",
|
label: "Change TOTP link",
|
||||||
placeHolder: "otpauth(-migration)://",
|
placeHolder: "otpauth(-migration)://",
|
||||||
},
|
},
|
||||||
|
renameButtons: {
|
||||||
|
rename: "Rename",
|
||||||
|
renameIssuer: "Rename Issuer",
|
||||||
|
renameClient: "Rename Client"
|
||||||
|
},
|
||||||
|
saveButton: {
|
||||||
|
label: "Save"
|
||||||
|
},
|
||||||
deleteButton: {
|
deleteButton: {
|
||||||
label: "Delete",
|
label: "Delete",
|
||||||
},
|
},
|
||||||
|
@ -98,11 +98,6 @@ AppSettingsPage({
|
|||||||
try {
|
try {
|
||||||
errorMessage = "";
|
errorMessage = "";
|
||||||
let link = getTOTPByLink(changes);
|
let link = getTOTPByLink(changes);
|
||||||
if (link == null) {
|
|
||||||
throw new Error(
|
|
||||||
"Unsupported link type. Please use an otpauth:// or otpauth-migration:// link",
|
|
||||||
);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (Array.isArray(link)) {
|
if (Array.isArray(link)) {
|
||||||
storage.push(...link);
|
storage.push(...link);
|
||||||
@ -121,6 +116,8 @@ AppSettingsPage({
|
|||||||
alignItems: "center",
|
alignItems: "center",
|
||||||
justifyContent: "center",
|
justifyContent: "center",
|
||||||
marginBottom: "10px",
|
marginBottom: "10px",
|
||||||
|
marginLeft: "10px",
|
||||||
|
marginRight: "10px",
|
||||||
fontSize: "20px",
|
fontSize: "20px",
|
||||||
color: colors.text,
|
color: colors.text,
|
||||||
borderRadius: "5px",
|
borderRadius: "5px",
|
||||||
@ -138,7 +135,7 @@ AppSettingsPage({
|
|||||||
},
|
},
|
||||||
errorMessage,
|
errorMessage,
|
||||||
)
|
)
|
||||||
: null; //TODO: Check for work
|
: null;
|
||||||
|
|
||||||
const bottomContainer = View(
|
const bottomContainer = View(
|
||||||
{
|
{
|
||||||
|
@ -27,7 +27,7 @@ export function createTOTPCard({
|
|||||||
isEditing
|
isEditing
|
||||||
? [
|
? [
|
||||||
TextInput({
|
TextInput({
|
||||||
label: "Rename Issuer",
|
label: content.renameButtons.renameIssuer,
|
||||||
value: tempIssuer,
|
value: tempIssuer,
|
||||||
onChange: onIssuerChange,
|
onChange: onIssuerChange,
|
||||||
labelStyle: {
|
labelStyle: {
|
||||||
@ -47,7 +47,7 @@ export function createTOTPCard({
|
|||||||
},
|
},
|
||||||
}),
|
}),
|
||||||
TextInput({
|
TextInput({
|
||||||
label: "Rename client",
|
label: content.renameButtons.renameClient,
|
||||||
value: tempClient,
|
value: tempClient,
|
||||||
onChange: onClientChange,
|
onChange: onClientChange,
|
||||||
labelStyle: {
|
labelStyle: {
|
||||||
@ -90,7 +90,7 @@ export function createTOTPCard({
|
|||||||
isEditing
|
isEditing
|
||||||
? [
|
? [
|
||||||
Button({
|
Button({
|
||||||
label: "Save",
|
label: content.saveButton.label,
|
||||||
style: {
|
style: {
|
||||||
margin: "5px",
|
margin: "5px",
|
||||||
backgroundColor: "#28a745",
|
backgroundColor: "#28a745",
|
||||||
@ -101,7 +101,7 @@ export function createTOTPCard({
|
|||||||
]
|
]
|
||||||
: [
|
: [
|
||||||
Button({
|
Button({
|
||||||
label: "Rename",
|
label: content.renameButtons.rename,
|
||||||
style: {
|
style: {
|
||||||
margin: "5px",
|
margin: "5px",
|
||||||
backgroundColor: colors.notify,
|
backgroundColor: colors.notify,
|
||||||
@ -111,7 +111,7 @@ export function createTOTPCard({
|
|||||||
}),
|
}),
|
||||||
!isEditInProgress ?
|
!isEditInProgress ?
|
||||||
Button({
|
Button({
|
||||||
label: "Delete",
|
label: content.deleteButton.label,
|
||||||
style: {
|
style: {
|
||||||
margin: "5px",
|
margin: "5px",
|
||||||
backgroundColor: colors.alert,
|
backgroundColor: colors.alert,
|
||||||
@ -129,7 +129,6 @@ export function createTOTPCard({
|
|||||||
label: "⬆",
|
label: "⬆",
|
||||||
disabled: index === 0,
|
disabled: index === 0,
|
||||||
style: {
|
style: {
|
||||||
width: "50px",
|
|
||||||
margin: "2px",
|
margin: "2px",
|
||||||
color: colors.text,
|
color: colors.text,
|
||||||
backgroundColor: colors.notify,
|
backgroundColor: colors.notify,
|
||||||
@ -140,7 +139,6 @@ export function createTOTPCard({
|
|||||||
label: "⬇",
|
label: "⬇",
|
||||||
disabled: index === storage.length - 1,
|
disabled: index === storage.length - 1,
|
||||||
style: {
|
style: {
|
||||||
width: "50px",
|
|
||||||
margin: "2px",
|
margin: "2px",
|
||||||
color: colors.text,
|
color: colors.text,
|
||||||
backgroundColor: colors.notify,
|
backgroundColor: colors.notify,
|
||||||
|
11
setting/utils/protonBackupExport.js
Normal file
11
setting/utils/protonBackupExport.js
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
export class ProtonBackupExport {
|
||||||
|
version;
|
||||||
|
entries = Array.of(ProtonTotpRecord);
|
||||||
|
}
|
||||||
|
|
||||||
|
export class ProtonTotpRecord {
|
||||||
|
content = {
|
||||||
|
uri,
|
||||||
|
entry_type,
|
||||||
|
}
|
||||||
|
}
|
@ -1,11 +1,132 @@
|
|||||||
import { decodeProto, TYPES } from "../../lib/protobuf-decoder/protobufDecoder";
|
import { decodeProto, TYPES } from "../../lib/protobuf-decoder/protobufDecoder";
|
||||||
import { TOTP } from "../../lib/totp-quickjs";
|
import { TOTP } from "../../lib/totp-quickjs";
|
||||||
import { base64decode, encode } from "../../lib/totp-quickjs/base32decoder";
|
import { base64decode, encode } from "../../lib/totp-quickjs/base32decoder";
|
||||||
|
import { ProtonBackupExport } from "./protonBackupExport";
|
||||||
|
|
||||||
const otpauthScheme = "otpauth://";
|
const otpauthScheme = "otpauth://";
|
||||||
const googleMigrationScheme = "otpauth-migration://";
|
const googleMigrationScheme = "otpauth-migration://";
|
||||||
|
export function getTOTPByLink(link) {
|
||||||
|
try { //proton export
|
||||||
|
const json = JSON.parse(link);
|
||||||
|
console.log(json)
|
||||||
|
return getByProtonBackup(json);
|
||||||
|
|
||||||
function _parseSingleMigrationEntry(part) {
|
} catch (e) {
|
||||||
|
if (link.startsWith(googleMigrationScheme)) { //google migration export
|
||||||
|
return getByGoogleMigrationScheme(link);
|
||||||
|
}
|
||||||
|
if (link.startsWith(otpauthScheme)) {//otpauth export
|
||||||
|
return getByOtpauthScheme(link);
|
||||||
|
}
|
||||||
|
throw new Error(`Unsupported link type. Please use an otpauth:// or otpauth-migration:// link\n ERR: ${e}`);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function getHashType(algorithm) {
|
||||||
|
if (algorithm == "SHA1") return "SHA-1";
|
||||||
|
if (algorithm == "SHA256") return "SHA-256";
|
||||||
|
if (algorithm == "SHA512") return "SHA-512";
|
||||||
|
else return "SHA-1";
|
||||||
|
}
|
||||||
|
|
||||||
|
function getByProtonBackup(protonjson) {
|
||||||
|
try {
|
||||||
|
if ("entries" in protonjson && protonjson.version == 1) { //Is proton export?
|
||||||
|
console.log(1)
|
||||||
|
const protonBE = Object.assign(new ProtonBackupExport(), protonjson)
|
||||||
|
const res = protonBE.entries.map(x => {
|
||||||
|
return getByOtpauthScheme(x.content.uri);
|
||||||
|
});
|
||||||
|
console.log(res)
|
||||||
|
return res;
|
||||||
|
} else throw new Error("use proton export backup with version: 1");
|
||||||
|
} catch (e) {
|
||||||
|
console.log(e)
|
||||||
|
throw new Error(`Unsupported JSON type: ${e}`);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function getByOtpauthScheme(link) {
|
||||||
|
try {
|
||||||
|
let args = link.split("?");
|
||||||
|
let path = args[0];
|
||||||
|
let params = args[1];
|
||||||
|
|
||||||
|
let pathParts = path.split("/");
|
||||||
|
let type = pathParts[2]; //hotp or totp
|
||||||
|
let label = decodeURIComponent(pathParts[3]);
|
||||||
|
|
||||||
|
let issuerFromLabel = label.includes(":") ? label.split(":")[0] : null;
|
||||||
|
let client = label.includes(":") ? label.split(":")[1].trim() : label;
|
||||||
|
client = decodeURIComponent(client);
|
||||||
|
|
||||||
|
let secret = params.match(/secret=([^&]*)/)?.[1];
|
||||||
|
let issuerFromParams = params.match(/issuer=([^&]*)/)?.[1];
|
||||||
|
|
||||||
|
let issuer = issuerFromParams
|
||||||
|
? decodeURIComponent(issuerFromParams)
|
||||||
|
: decodeURIComponent(issuerFromLabel);
|
||||||
|
if (!issuer) issuer = client;
|
||||||
|
|
||||||
|
let period = params.match(/period=([^&]*)/)?.[1];
|
||||||
|
let digits = params.match(/digits=([^&]*)/)?.[1];
|
||||||
|
let algorithm = params.match(/algorithm=([^&]*)/)?.[1];
|
||||||
|
let offset = params.match(/offset=([^&]*)/)?.[1] ?? 0;
|
||||||
|
|
||||||
|
if (type.toLowerCase() != "totp")
|
||||||
|
throw new Error("Type is not valid, requires 'TOTP'");
|
||||||
|
|
||||||
|
if (!secret) throw new Error("Secret not defined");
|
||||||
|
|
||||||
|
return new TOTP(
|
||||||
|
secret,
|
||||||
|
issuer,
|
||||||
|
client,
|
||||||
|
Number(digits) || 6,
|
||||||
|
Number(period) || 30,
|
||||||
|
Number(offset),
|
||||||
|
getHashType(algorithm),
|
||||||
|
);
|
||||||
|
} catch (err) {
|
||||||
|
console.log("Failed to parse otpauth scheme:", err);
|
||||||
|
throw new Error(
|
||||||
|
`Invalid otpauth:// link. Please check the link and try again. ERR: ${err}`,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function getByGoogleMigrationScheme(link) {
|
||||||
|
try {
|
||||||
|
const data = link.split("data=")[1];
|
||||||
|
if (!data) return null;
|
||||||
|
|
||||||
|
const decodedData = decodeURIComponent(data);
|
||||||
|
const buffer = base64decode(decodedData);
|
||||||
|
const proto = decodeProto(buffer);
|
||||||
|
|
||||||
|
const totps = [];
|
||||||
|
const otpParameters = proto.parts.filter(
|
||||||
|
(p) => p.index === 1 && p.type === TYPES.LENDELIM,
|
||||||
|
);
|
||||||
|
|
||||||
|
otpParameters.forEach((part) => {
|
||||||
|
const totp = parseSingleMigrationEntry(part);
|
||||||
|
if (totp) {
|
||||||
|
totps.push(totp);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
return totps.length > 0 ? totps : null;
|
||||||
|
} catch (err) {
|
||||||
|
console.log("Failed to parse Google Migration scheme:", err);
|
||||||
|
throw new Error(
|
||||||
|
"Invalid otpauth-migration:// link. Failed to parse migration data.",
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseSingleMigrationEntry(part) {
|
||||||
const totpProto = decodeProto(part.value);
|
const totpProto = decodeProto(part.value);
|
||||||
const otpData = {};
|
const otpData = {};
|
||||||
|
|
||||||
@ -64,102 +185,6 @@ function _parseSingleMigrationEntry(part) {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
function getByGoogleMigrationScheme(link) {
|
|
||||||
try {
|
|
||||||
const data = link.split("data=")[1];
|
|
||||||
if (!data) return null;
|
|
||||||
|
|
||||||
const decodedData = decodeURIComponent(data);
|
|
||||||
const buffer = base64decode(decodedData);
|
|
||||||
const proto = decodeProto(buffer);
|
|
||||||
|
|
||||||
const totps = [];
|
|
||||||
const otpParameters = proto.parts.filter(
|
|
||||||
(p) => p.index === 1 && p.type === TYPES.LENDELIM,
|
|
||||||
);
|
|
||||||
|
|
||||||
otpParameters.forEach((part) => {
|
|
||||||
const totp = _parseSingleMigrationEntry(part);
|
|
||||||
if (totp) {
|
|
||||||
totps.push(totp);
|
|
||||||
}
|
|
||||||
});
|
|
||||||
|
|
||||||
return totps.length > 0 ? totps : null;
|
|
||||||
} catch (err) {
|
|
||||||
console.log("Failed to parse Google Migration scheme:", err);
|
|
||||||
throw new Error(
|
|
||||||
"Invalid otpauth-migration:// link. Failed to parse migration data.",
|
|
||||||
);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
export function getTOTPByLink(link) {
|
|
||||||
if (link.startsWith(googleMigrationScheme)) {
|
|
||||||
return getByGoogleMigrationScheme(link);
|
|
||||||
}
|
|
||||||
if (link.startsWith(otpauthScheme)) {
|
|
||||||
return getByOtpauthScheme(link);
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
function getHashType(algorithm) {
|
|
||||||
if (algorithm == "SHA1") return "SHA-1";
|
|
||||||
if (algorithm == "SHA256") return "SHA-256";
|
|
||||||
if (algorithm == "SHA512") return "SHA-512";
|
|
||||||
else return "SHA-1";
|
|
||||||
}
|
|
||||||
|
|
||||||
function getByOtpauthScheme(link) {
|
|
||||||
try {
|
|
||||||
let args = link.split("?");
|
|
||||||
let path = args[0];
|
|
||||||
let params = args[1];
|
|
||||||
|
|
||||||
let pathParts = path.split("/");
|
|
||||||
let type = pathParts[2]; //hotp or totp
|
|
||||||
let label = decodeURIComponent(pathParts[3]);
|
|
||||||
|
|
||||||
let issuerFromLabel = label.includes(":") ? label.split(":")[0] : null;
|
|
||||||
let client = label.includes(":") ? label.split(":")[1].trim() : label;
|
|
||||||
|
|
||||||
let secret = params.match(/secret=([^&]*)/)?.[1];
|
|
||||||
let issuerFromParams = params.match(/issuer=([^&]*)/)?.[1];
|
|
||||||
|
|
||||||
let issuer = issuerFromParams
|
|
||||||
? decodeURIComponent(issuerFromParams)
|
|
||||||
: issuerFromLabel;
|
|
||||||
if (!issuer) issuer = client;
|
|
||||||
|
|
||||||
let period = params.match(/period=([^&]*)/)?.[1];
|
|
||||||
let digits = params.match(/digits=([^&]*)/)?.[1];
|
|
||||||
let algorithm = params.match(/algorithm=([^&]*)/)?.[1];
|
|
||||||
let offset = params.match(/offset=([^&]*)/)?.[1] ?? 0;
|
|
||||||
|
|
||||||
if (type.toLowerCase() != "totp")
|
|
||||||
throw new Error("Type is not valid, requires 'TOTP'");
|
|
||||||
|
|
||||||
if (!secret) throw new Error("Secret not defined");
|
|
||||||
|
|
||||||
return new TOTP(
|
|
||||||
secret,
|
|
||||||
issuer,
|
|
||||||
client,
|
|
||||||
Number(digits) || 6,
|
|
||||||
Number(period) || 30,
|
|
||||||
Number(offset),
|
|
||||||
getHashType(algorithm),
|
|
||||||
);
|
|
||||||
} catch (err) {
|
|
||||||
console.log("Failed to parse otpauth scheme:", err);
|
|
||||||
throw new Error(
|
|
||||||
`Invalid otpauth:// link. Please check the link and try again. ERR: ${err}`,
|
|
||||||
);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function bytesToString(bytes) {
|
function bytesToString(bytes) {
|
||||||
let str = "";
|
let str = "";
|
||||||
for (let i = 0; i < bytes.length; i++) {
|
for (let i = 0; i < bytes.length; i++) {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user