emailauth 0.0.2

data/Rakefile

@@ -0,0 +1,8 @@
+require 'rake/testtask'
+
+Rake::TestTask.new do |t|
+  t.libs << 'test'
+end
+
+desc "Run tests"
+task :default => :test

data/lib/emailauth/authenticator.rb

@@ -0,0 +1,44 @@
+require 'securerandom'
+require 'base64'
+require 'rotp'
+
+class EmailAuth::Authenticator
+  ##
+  # Generates SAW tokens in base64 that are the provided number of bytes
+  ##
+  def self.generateTokens(bytes = 16)
+    complete_token = SecureRandom.random_bytes(bytes)
+    complete_token_s = Base64.urlsafe_encode64(complete_token)
+    email_token = SecureRandom.random_bytes(bytes)
+    email_token_s = Base64.urlsafe_encode64(email_token)
+
+    user_token_s = Base64.urlsafe_encode64(complete_token.unpack('C*').zip(email_token.unpack('C*')).map{ |a,b| a ^ b }.pack('C*'))
+
+    return [user_token_s,email_token_s,complete_token_s]
+  end
+
+  ##
+  # Validates whether the provided tokens are correct using SAW protocol
+  ##
+  def self.authenticate(user_token, email_token, complete_token)
+    email_token_e = Base64.urlsafe_decode64(email_token)
+    complete_token_e = Base64.urlsafe_decode64(complete_token)
+
+    calculated_user_token = Base64.urlsafe_encode64(complete_token_e.unpack('C*').zip(email_token_e.unpack('C*')).map{ |a,b| a ^ b }.pack('C*'))
+    return user_token==calculated_user_token
+  end
+
+  ##
+  # Validates whether a TOTP code is valid for a particular secret
+  ##
+  def self.validateTOTP(auth_secret, code)
+    return code == ROTP::TOTP.new(auth_secret).now.to_s
+  end
+
+  ##
+  # Generates a TOTP secret
+  ##
+  def self.generateTOTPSecret
+    ROTP::Base32.random_base32
+  end
+end

data/lib/emailauth.rb

@@ -0,0 +1,19 @@
+class EmailAuth
+  def self.generateTokens(bytes = 16)
+    EmailAuth::Authenticator.generateTokens(bytes)
+  end
+
+  def self.authenticate(user_token, email_token, complete_token)
+    EmailAuth::Authenticator.authenticate(user_token, email_token, complete_token)
+  end
+
+  def self.validateTOTP(auth_secret, code)
+    EmailAuth::Authenticator.validateTOTP(auth_secret, code)
+  end
+
+  def self.generateTOTPSecret
+    EmailAuth::Authenticator.generateTOTPSecret
+  end
+end
+
+require 'emailauth/authenticator'

data/test/test_emailauth.rb

@@ -0,0 +1,25 @@
+require 'test/unit'
+require 'emailauth'
+
+class EmailAuthTest < Test::Unit::TestCase
+  def test_generate_token
+    user_token, email_token, complete_token = EmailAuth.generateTokens
+    assert_not_nil user_token
+    assert_not_nil email_token
+    assert_not_nil complete_token
+  end
+
+  def test_authenticate
+    user_token, email_token, complete_token = EmailAuth.generateTokens
+    assert EmailAuth.authenticate(user_token, email_token, complete_token)
+  end
+
+  def test_totp
+    secret = ROTP::Base32.random_base32
+    assert !EmailAuth.validate_totp(secret, secret)
+  end
+
+  def test_totp
+    assert_not_nil EmailAuth.generateTOTPSecret
+  end
+end

metadata

@@ -0,0 +1,65 @@
+--- !ruby/object:Gem::Specification
+name: emailauth
+version: !ruby/object:Gem::Version
+  version: 0.0.2
+  prerelease: 
+platform: ruby
+authors:
+- Brian Lubben
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-03-27 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rotp
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Email based authentication with mobile devices
+email: blubben@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- Rakefile
+- lib/emailauth.rb
+- lib/emailauth/authenticator.rb
+- test/test_emailauth.rb
+homepage: 
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: 0.0.2
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: Hola Auth
+test_files:
+- test/test_emailauth.rb