org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService クラス

org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService の継承関係図

org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService 連携図

公開メンバ関数
void	init (HOTPConfig conf, String issuer)
byte []	generateSecretKey ()
String	generateSecretKeyUri (byte[] secretKey, String displayName)
String	getExternalUid (byte[] secretKey, String code)

非公開メンバ関数
Pair< Boolean, Long >	validateKey (byte[] secretKey, String otpCode)
Pair< Boolean, Long >	validateKey (byte[] secretKey, String otpCode, int movingFactor, Integer alternativeLookAheadWindow)

非公開変数類
Logger	logger
HOTPConfig	conf
String	issuer

静的非公開変数類
static int	MAX_LOOK_AHEAD_WINDOW = 25

詳解

Created by jgomer on 2018-06-28. An app. scoped bean that encapsulates logic related to generating and validating OTP keys. See https://tools.ietf.org/html/rfc6238 and https://tools.ietf.org/html/rfc4226.

関数詳解

generateSecretKey()

byte [] org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.generateSecretKey ( )

inline

org.gluu.credmanager.plugins.authnmethod.service.otp.IOTPAlgorithmを実装しています。

                                      {
        return Utils.randomBytes(conf.getKeyLength());
    }

generateSecretKeyUri()

String org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.generateSecretKeyUri ( byte []  secretKey, String  displayName  )

inline

org.gluu.credmanager.plugins.authnmethod.service.otp.IOTPAlgorithmを実装しています。

                                                                             {

        String secretKeyBase32 = BaseEncoding.base32().omitPadding().encode(secretKey);
        OTPKey otpKey = new OTPKey(secretKeyBase32, OTPType.HOTP);

        OTPAuthURIBuilder uribe = OTPAuthURIBuilder.fromKey(otpKey).label(displayName);
        uribe = uribe.issuer(issuer).digits(conf.getDigits());

        logger.trace("Generating secret key URI");
        return uribe.build().toUriString();

    }

getExternalUid()

String org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.getExternalUid ( byte []  secretKey, String  code  )

inline

org.gluu.credmanager.plugins.authnmethod.service.otp.IOTPAlgorithmを実装しています。

                                                                {
        Pair<Boolean, Long> result = validateKey(secretKey, code);
        return result.getX()
                ? String.format("%s:%s;%s", OTPType.HOTP.getName().toLowerCase(), BaseEncoding.base64Url().encode(secretKey), result.getY())
                : null;
    }

init()

void org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.init ( HOTPConfig  conf, String  issuer  )

inline

                                                     {
        this.issuer = issuer;
        this.conf = conf;
    }

validateKey() [1/2]

Pair<Boolean, Long> org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.validateKey ( byte []  secretKey, String  otpCode  )

inlineprivate

                                                                              {
        //Use 1 as moving factor (assumes this is the very first use of the OTP hard token). In practice, this might not
        //be the case, so a big value for look ahead window is used. This should not be done when validating an OTPs at
        //login time, however, for enrollment is OK
        return validateKey(secretKey, otpCode, 1, MAX_LOOK_AHEAD_WINDOW);
    }

validateKey() [2/2]

Pair<Boolean, Long> org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.validateKey ( byte []  secretKey, String  otpCode, int  movingFactor, Integer  alternativeLookAheadWindow  )

inlineprivate

                                                                                                                                    {
        int window = alternativeLookAheadWindow == null ? conf.getLookAheadWindow() : alternativeLookAheadWindow;
        HOTPValidationResult result = HOTPValidator.lookAheadWindow(window).validate(secretKey, movingFactor, conf.getDigits(), otpCode);
        return result.isValid() ? new Pair<>(true, result.getNewMovingFactor()) : new Pair<>(false, null);
    }

メンバ詳解

conf

HOTPConfig org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.conf

private

issuer

String org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.issuer

private

logger

Logger org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.logger

private

MAX_LOOK_AHEAD_WINDOW

int org.gluu.credmanager.plugins.authnmethod.service.otp.HOTPAlgorithmService.MAX_LOOK_AHEAD_WINDOW = 25

staticprivate

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/cred-manager/app/src/main/java/org/gluu/credmanager/plugins/authnmethod/service/otp/HOTPAlgorithmService.java