73 lines
2.4 KiB
C#
73 lines
2.4 KiB
C#
using Microsoft.AspNetCore.Mvc;
|
|
using OtpNet;
|
|
using static AUTS_Server.Service.MultiFactorAuthController;
|
|
|
|
namespace AUTS_Server.Service
|
|
{
|
|
public interface IEncryptionService
|
|
{
|
|
//md5加密
|
|
string Encrypt(string str);
|
|
// 手动构建TOTP URI
|
|
string BuildTotpUri(string secret, string user, string issuer);
|
|
// 验证TOTP
|
|
bool VerifyTOTP(VerifyTOTPRequest request);
|
|
// 生成并返回密钥和二维码URL
|
|
GenerateKeyinfo GenerateKey();
|
|
}
|
|
[ApiController]
|
|
[Route("[controller]")]
|
|
public class MultiFactorAuthController : ControllerBase
|
|
{
|
|
// 生成并返回密钥和二维码URL
|
|
[HttpGet("GenerateKey")]
|
|
public IActionResult GenerateKey()
|
|
{
|
|
var key = KeyGeneration.GenerateRandomKey(20);
|
|
var base32Secret = Base32Encoding.ToString(key);
|
|
var issuer = "AUTS";
|
|
var userAccount = "new.uts-data.com";
|
|
var totpSetupUrl = BuildTotpUri(base32Secret, userAccount, issuer);
|
|
|
|
// 返回密钥和二维码URL
|
|
return Ok(new { SecretKey = base32Secret, QrCodeSetupUrl = totpSetupUrl });
|
|
}
|
|
|
|
// 验证TOTP
|
|
[HttpPost("VerifyTOTP")]
|
|
public IActionResult VerifyTOTP([FromBody] VerifyTOTPRequest request)
|
|
{
|
|
var key = Base32Encoding.ToBytes(request.SecretKey);
|
|
long timeStepMatched;
|
|
var totp = new Totp(key);
|
|
var TotpCode = "";
|
|
bool isValid = totp.VerifyTotp(TotpCode, out timeStepMatched, new VerificationWindow(2, 2));
|
|
|
|
if (isValid)
|
|
{
|
|
// 验证成功
|
|
return Ok(new { Success = true });
|
|
}
|
|
else
|
|
{
|
|
// 验证失败
|
|
return BadRequest(new { Success = false });
|
|
}
|
|
}
|
|
|
|
// 手动构建TOTP URI
|
|
private string BuildTotpUri(string secret, string user, string issuer)
|
|
{
|
|
var issuerParameter = string.IsNullOrEmpty(issuer) ? "" : $"&issuer={Uri.EscapeDataString(issuer)}";
|
|
return $"otpauth://totp/{Uri.EscapeDataString(user)}?secret={secret}{issuerParameter}&algorithm=SHA1&digits=6&period=30";
|
|
}
|
|
|
|
|
|
}
|
|
public class VerifyTOTPRequest
|
|
{
|
|
public string SecretKey { get; set; }
|
|
public string UserId { get; set; }
|
|
}
|
|
}
|