fixed various issues around how google auth'er wants to see urls.
[ga4php.git] / example / index.php
index ca69203..78caa96 100644 (file)
@@ -1,6 +1,14 @@
 <?php
 
 require_once("../lib/lib.php");
+if(isset($_REQUEST["action"])) {
+       switch($_REQUEST["action"]) {
+               case "destroy":
+                       unlink("/tmp/gaexpage.db");
+                       break;
+       }
+}
+
 
 $ga = new GoogleAuthenticator("/tmp/gaexpage.db");
 ?>
@@ -13,14 +21,17 @@ if(isset($_REQUEST["action"])) {
                case "createuser":
                        $username = $_REQUEST["username"];
                        $pr = preg_match('/^[a-zA-Z0-9@\.]+$/',"$username");
+                       $ttype = $_REQUEST["ttype"];
                        echo "<hr>";
                        if(strlen($username)<3) {
                                echo "<font color=\"red\">Sorry, username must be at least 3 chars</font>";
                        } else if($pr<1) {
                                echo "<font color=\"red\">Sorry, username can only contain a-z, A-Z, 0-9 @ and .</font>";
                        } else {
-                               $url = $ga->setupUser($username);
-                               echo "QRCode for user \"$username\" is <img src=\"http://chart.apis.google.com/chart?cht=qr&chl=$url&chs=120x120\">";
+                               $key = $ga->setupUser($username, $ttype);
+                               $keyinhex = $ga->helperb322hex($key);
+                               $url = urlencode($ga->createURL($username, $key, $ttype));
+                               echo "QRCode for user \"$username\" is <img src=\"http://chart.apis.google.com/chart?cht=qr&chl=$url&chs=120x120\"> or type in $key (google authenticator) or $keyinhex (for most other otp's)";
                        }
                        echo "<hr>";
                        break;
@@ -33,24 +44,58 @@ if(isset($_REQUEST["action"])) {
                                echo "<font color=\"red\">Failed!</font>";
                        }
                        break;
+               case "resync":
+                       $username = $_REQUEST["username"];
+                       $code1 = $_REQUEST["code1"];
+                       $code2 = $_REQUEST["code2"];
+                       if($ga->resyncCode($username, $code1, $code2)) {
+                               echo "<font color=\"green\">Passed!</font>";
+                       } else {
+                               echo "<font color=\"red\">Failed!</font>";
+                       }
+                       break;
                default:
                        // do nothing
        }
 }
 
 ?>
-
-Create a User:
+<h2>Destroy the DB</h2>
+<a href="index.php?action=destroy">This is UNDOABLE - but this is a test system, so you dont care</a>
+<h2>Create a User:</h2>
 <form method="post" action="index.php?action=createuser">
 Username: <input type="text" name="username"><br>
-Type (ignored for now): <select name="ttype"><option value="HOTP">HOTP</option><option value="TOTP">TOTP</option></select><br>
+Type: <select name="ttype"><option value="HOTP">HOTP</option><option value="TOTP">TOTP</option></select><br>
 <input type="submit" name="go" value="go"><br>
 </form>
 <hr>
+<h2>Test Token</h2>
 <form method="post" action="index.php?action=authuser">
-Username: <input type="text" name="username"><br>
+Username: <select name="username">
+<?php
+$res = $ga->getUserList();
+foreach($res as $row) {
+       echo "<option value=\"".$row."\">".$row."</option>";
+}
+?>
+</select><br>
 Code: <input type="text" name="code"><br>
 <input type="submit" name="go" value="go"><br>
 </form>
 <hr>
+<h2>Resync Code (only valid for HOTP codes)</h2>
+<form method="post" action="index.php?action=resync">
+Username: <select name="username">
+<?php
+$res = $ga->getUserList();
+foreach($res as $row) {
+       echo "<option value=\"".$row."\">".$row."</option>";
+}
+?>
+</select><br>
+Code one: <input type="text" name="code1"><br>
+Code two: <input type="text" name="code2"><br>
+<input type="submit" name="go" value="go"><br>
+</form>
+<hr>
 </html>
\ No newline at end of file