extern/2FAuth
1
0
Fork 0
mirror of https://github.com/Bubka/2FAuth.git synced 2025-08-15 08:12:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Validate 2FAccount create form only with backend

Browse Source
This commit is contained in:
Bubka
2020-01-09 16:33:32 +01:00
parent 77b6ac3e3f
commit e966b06a2f
5 changed files with 144 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
app/Http/Controllers/TwoFAccountController.php
View File

@ -2,6 +2,7 @@
namespace App\Http\Controllers;
use Validator;
use App\TwoFAccount;
use OTPHP\TOTP;
use OTPHP\Factory;
@ -30,6 +31,22 @@ class TwoFAccountController extends Controller
*/
public function store(Request $request)
{
// see https://github.com/google/google-authenticator/wiki/Key-Uri-Format
// for otpauth uri format validation
$messages = [
'uri.starts_with' => 'Only valid TOTP uri are supported',
];
$validator = Validator::make($request->all(), [
'service' => 'required',
'uri' => 'required|starts_with:otpauth://totp/',
], $messages);
if ($validator->fails()) {
return response()->json(['error' => $validator->errors()], 400);
}
$twofaccount = TwoFAccount::create([
'service' => $request->service,
'account' => $request->account,