Initial commit

app/services/totp_service.rb

@@ -0,0 +1,96 @@
+# frozen_string_literal: true
+
+class TOTPService
+  Error = Class.new(StandardError)
+
+  class <<self
+    ISSUER_NAME = 'Barong'
+  
+    def server_available?
+      read_data('sys/health').present?
+    rescue StandardError
+      false
+    end
+  
+    def otp_secret(otp)
+      CGI.parse(URI.parse(otp.data[:url]).query)['secret'][0]
+    end
+  
+    def safe_create(uid, email)
+      return if exist?(uid)
+
+      create(uid, email)
+    end
+  
+    def create(uid, email)
+      write_data(totp_key(uid),
+                 generate: true,
+                 issuer: ::Barong::App.config.app_name,
+                 account_name: email,
+                 qr_size: 300)
+    end
+
+    def exist?(uid)
+      read_data(totp_key(uid)).present?
+    end
+  
+    def validate?(uid, code)
+      return false unless exist?(uid)
+
+      write_data(totp_code_key(uid), code: code).data[:valid]
+    end
+  
+    def delete(uid)
+      delete_data(totp_key(uid))
+    end
+  
+    def with_human_error
+      raise ArgumentError, 'Block is required' unless block_given?
+
+      yield
+    rescue Vault::VaultError => e
+      Rails.logger.error { e }
+
+      raise Error, '2FA server is under maintenance' if e.message.include?('connection refused')
+
+      raise Error, 'This code was already used. Wait until the next time period' if e.message.include?('code already used')
+
+      raise e
+    end
+  
+    def totp_key(uid)
+      "totp/keys/#{Vault.application}_#{uid}"
+    end
+  
+    def totp_code_key(uid)
+      "totp/code/#{Vault.application}_#{uid}"
+    end
+
+    def read_data(key)
+      with_human_error do
+        vault.read(key)
+      end
+    end
+
+    def read_code(uid)
+      read_data(totp_code_key(uid)).data[:code]
+    end
+
+
+    def write_data(key, params)
+      with_human_error do
+        vault.write(key, params)
+      end
+    end
+  
+    def delete_data(key)
+      with_human_error do
+        vault.delete(key)
+      end
+    end
+  
+    def vault
+      Vault.logical
+    end
+  end
+end