authentic 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8a5638eac32ad5d3c4da52d99a8c25ca5c2bdca5
-  data.tar.gz: ca509f3b357a2d5a8cdffa593c6721f45adb72cf
+  metadata.gz: c3ab2e1fa925121b4404ff3f34e23a0e7e4e8437
+  data.tar.gz: 63809f5dc1296be67f369b143a8d1d95f3489f6f
 SHA512:
-  metadata.gz: 17d8c8a27bb04f8c36cfdd4adbbffcfe4d797ceb3ac4581fcbcca60a7157629024f6b72ecdd890aff20e25f7458a2b291da2ab818c5ae7d44d3d10c21aa365d0
-  data.tar.gz: 29649b4fdb4fe73a9193bd8a14d0b17956a886a81db9275854c480212402c7550d1c608455da30134191e16b32c879ec6de2ef4db9807608d6b7490bbe49aa51
+  metadata.gz: ee92948d013b885d18f911acd694b6ba803386e2640695530aa17365e53c7f3fe39fb75956beefa53f0cb52cd294024262bb301f2d2d7f64b7c510a67caee6ef
+  data.tar.gz: 6dc8572b0913523d15f26a9c226bceb993dcadeec9e930470c0f385a17ca0f0de01efa36ecd6ce4496489f6cc4995b53e2a506efb6e6ccae4a3c7689c45f5507

data/lib/authentic.rb

@@ -5,6 +5,9 @@ require "keychain"
 require "rotp"
 require "colorize"
 require "ostruct"
+require "json"
+require "openssl"
+require "base64"
 
 module Authentic
   class CLI < Thor
@@ -37,7 +40,7 @@ module Authentic
     desc "delete NAME", "Delete a TOTP key"
     option :force, default: false, type: :boolean, aliases: '-f'
     def delete(name)
-      item = Keychain.generic_passwords.where(service: "authentic gem", account: name).first
+      item = Keychain.generic_passwords.where(label: "authentic gem", account: name).first
       unless item
         return say "\u2717".colorize(:red) + " Couldn't find service #{name.colorize(:red)}..."
       end
@@ -57,9 +60,70 @@ module Authentic
       28 => "🌑",
     }
 
+    desc "export", "Export TOTP secret keys"
+    option 'qr', default: false, type: :boolean, aliases: '-q'
+    def export
+      keys = Keychain
+        .generic_passwords
+        .where(label: "authentic gem")
+        .all.map do |key|
+          secret = key.password.gsub(/=*$/, '')
+          totp = ROTP::TOTP.new(secret)
+          OpenStruct.new(
+            secret:  secret,
+            name:    key.attributes[:account],
+            service: key.attributes[:service]
+          )
+        end.sort_by { |k| [k.service, k.name] }
+
+      if options['qr']
+        keys.each do |key|
+          puts "#{key.service} - #{key.name}\n"
+          puts `qrencode 'otpauth://totp/#{key.name}?issuer=#{key.service}&secret=#{key.secret}' -s 5 -o - | ~/.iterm2/imgcat`
+        end
+      else
+        data = keys.map(&:to_h).to_json
+
+        password = ask "Please enter a password for exported data:", echo: false
+        return if password.empty?
+
+        salt = OpenSSL::Random.random_bytes(32)
+        cipher = OpenSSL::Cipher::AES256.new :CBC
+        cipher.encrypt
+        cipher.key = OpenSSL::PKCS5.pbkdf2_hmac_sha1(password, salt, 20000, 32)
+        cipher.iv = salt
+
+        cipher_text = cipher.update(data)
+        cipher_text << cipher.final
+
+        puts [salt, cipher_text].map { |part| Base64.strict_encode64(part) }.join(':')
+      end
+    end
+
+    desc "import DATA", "Import TOTP secret keys"
+    def import(data)
+      password = ask "Please enter a password for exported data:", echo: false
+      return if password.empty?
+
+      salt, cipher_text = data.split(':').map { |part| Base64.strict_decode64(part) }
+
+      cipher = OpenSSL::Cipher::AES256.new :CBC
+      cipher.decrypt
+      cipher.iv = salt
+      cipher.key = OpenSSL::PKCS5.pbkdf2_hmac_sha1(password, salt, 20000, 32)
+
+      text = cipher.update(cipher_text)
+      text << cipher.final
+
+      keys = JSON.parse(text)
+
+      keys.each do |key|
+        add(key['name'], key['secret'], key['service'])
+      end
+    end
+
     desc "generate", "Generate TOTP codes"
     option 'skip-copy', default: false, type: :boolean, aliases: '-s'
-    option 'qr-codes', default: false, type: :boolean, aliases: '-qr'
     def generate
       now  = Time.now
       keys = Keychain
@@ -77,14 +141,6 @@ module Authentic
                 )
               end.sort_by { |k| [k.service, k.name] }
 
-      if options['qr-codes']
-        keys.each do |key|
-          puts "#{key.service} - #{key.name}\n"
-          puts `qrencode 'otpauth://totp/#{key.name}?issuer=#{key.service}&secret=#{key.secret}' -s 5 -o - | ~/.iterm2/imgcat`
-        end
-        return
-      end
-
       table = keys.each_with_index.map do |key, idx|
         number = (idx + 1).to_s.rjust(keys.size.to_s.size, ' ')
         service_prefix = "#{key.service} - " if key.service && key.service != key.name
@@ -98,7 +154,7 @@ module Authentic
 
       print_table(table.to_a)
 
-      unless options['skip-copy']
+      unless options['skip-copy'] || keys.size == 0
         if keys.size > 1
           prompt = "\nWhich key should I copy?"
           prompt += " [1-#{keys.size}, leave empty to exit]"

data/lib/authentic/version.rb

@@ -1,3 +1,3 @@
 module Authentic
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentic
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Ufuk Kayserilioglu
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-09-01 00:00:00.000000000 Z
+date: 2017-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize