win-cliauth 1.0.0 → 1.0.3

package/README.md

@@ -33,6 +33,17 @@ win-cliauth --help
 - The secret keys are stored in an encrypted file in the user's data directory, protected by the user's operating system.
 - Please note that the encrypted file can only be read on the same Windows user account where it was created. It may not be readable on other user accounts or operating systems.
 
+## Credits
+
+This project uses the following open-source libraries:
+
+- [otpauth](https://github.com/hectorm/otpauth) - One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.
+- [steam-totp](https://github.com/DoctorMcKay/node-steam-totp) - A Node.js library for generating Steam-compatible 2FA tokens.
+- [yargs](https://github.com/yargs/yargs) - A command-line argument parsing library for Node.js.
+
+Please refer to the respective library documentation for detailed information on their usage, licensing, and contributions.
+
+
 ## Contributing
 
 Contributions are welcome! If you find any issues or have suggestions for improvements, please feel free to open an issue or submit a pull request on [GitHub](https://github.com/pedrolucasmag/win-cliauth).

package/dist/main.js

@@ -11,7 +11,17 @@ var _a, _b;
 Object.defineProperty(exports, "__esModule", { value: true });
 const commands_1 = require("./src/commands");
 const pshell_1 = require("./src/pshell");
-(_b = (_a = (0, pshell_1.decrypt)().stdout) === null || _a === void 0 ? void 0 : _a.on('data', (data) => {
-    const svcs = JSON.parse(data);
-    (0, commands_1.handleCommands)(svcs);
-})) !== null && _b !== void 0 ? _b : false;
+const childProcess = (0, pshell_1.decrypt)();
+let rawData = '';
+(_a = childProcess.stdout) === null || _a === void 0 ? void 0 : _a.on('data', (chunk) => {
+    rawData += chunk;
+});
+(_b = childProcess.stdout) === null || _b === void 0 ? void 0 : _b.on('end', () => {
+    try {
+        const svcs = JSON.parse(rawData);
+        (0, commands_1.handleCommands)(svcs);
+    }
+    catch (error) {
+        console.error('Error parsing JSON:', error);
+    }
+});

package/dist/src/auth.js

@@ -6,24 +6,64 @@ All rights reserved.
 This source code is licensed under the BSD-style license found in the
 LICENSE file in the root directory of this source tree.
  */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.listAuth = exports.removeAuth = exports.addAuth = exports.getAuth = void 0;
 const child_process_1 = require("child_process");
-const otplib_1 = require("otplib");
+const otpauth_1 = require("otpauth");
 const steam_totp_1 = require("steam-totp");
 const pshell_1 = require("./pshell");
+function synchronizeTime() {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        (_a = AbortSignal.timeout) !== null && _a !== void 0 ? _a : (AbortSignal.timeout = function timeout(ms) {
+            const ctrl = new AbortController();
+            setTimeout(() => ctrl.abort(), ms);
+            return ctrl.signal;
+        });
+        try {
+            const response = yield fetch('http://www.google.com', { signal: AbortSignal.timeout(5000) });
+            const responseHeaders = response.headers;
+            const headerDate = responseHeaders.get('date');
+            const serverTime = headerDate ? Date.parse(headerDate) : Date.now();
+            const localTime = Date.now();
+            const timeDifference = serverTime - localTime;
+            return Date.now() + timeDifference;
+        }
+        catch (error) {
+            return Date.now();
+        }
+    });
+}
+function getTOTP(key) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const auth = new otpauth_1.TOTP({ secret: key, digits: 6, period: 30 });
+        const timestamp = yield synchronizeTime();
+        return auth.generate({ timestamp });
+    });
+}
 function getToken({ key, steam }) {
-    return steam ? (0, steam_totp_1.generateAuthCode)(key) : otplib_1.authenticator.generate(key);
+    return steam ? (0, steam_totp_1.generateAuthCode)(key) : getTOTP(key).then((code) => code);
 }
 function getAuth({ objAuth, svc, clipboard, steam }) {
-    const skey = objAuth[`${svc}`];
-    if (skey) {
-        const token = getToken({ key: skey, steam: steam });
-        if (clipboard)
-            (0, child_process_1.spawn)('clip').stdin.end(token);
-        return console.info(token);
-    }
-    return console.info(`${svc} not found.`);
+    return __awaiter(this, void 0, void 0, function* () {
+        const skey = objAuth[`${svc}`];
+        if (skey) {
+            const token = yield getToken({ key: skey, steam: steam });
+            if (clipboard)
+                (0, child_process_1.spawn)('clip').stdin.end(token);
+            return console.info(token);
+        }
+        return console.info(`${svc} not found.`);
+    });
 }
 exports.getAuth = getAuth;
 function addAuth({ objAuth, svc, sk, replace }) {

package/dist/src/pshell.js

@@ -10,7 +10,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.decrypt = exports.encrypt = void 0;
 const child_process_1 = require("child_process");
 function pshell({ cmd }) {
-    return (0, child_process_1.exec)(cmd, { shell: 'powershell.exe' });
+    return (0, child_process_1.spawn)('powershell.exe', ['/c', cmd], { stdio: 'pipe' });
 }
 function encrypt({ str }) {
     return pshell({

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "win-cliauth",
-  "version": "1.0.0",
+  "version": "1.0.3",
   "description": "win-cliauth is a CLI-based OTP (One-Time Password) authenticator management tool for Windows.",
   "author": "Pedro Lucas Magalhães <pedrolucasmag@gmail.com>",
   "license": "BSD-3-Clause",
   "scripts": {
     "build": "tsc",
+    "release": "standard-version",
     "prepack": "tsc"
   },
   "bin": {
@@ -18,19 +19,31 @@
     "!dist/keys"
   ],
   "devDependencies": {
+    "@commitlint/cli": "^17.7.1",
+    "@commitlint/config-conventional": "^17.7.0",
     "@types/node": "^18.11.10",
     "@types/steam-totp": "^2.1.0",
     "@types/yargs": "^17.0.10",
     "@typescript-eslint/eslint-plugin": "^5.33.1",
     "@typescript-eslint/parser": "^5.33.1",
-    "eslint": "^8.22.0"
+    "eslint": "^8.22.0",
+    "husky": "^8.0.3"
   },
   "os": [
     "win32"
   ],
+  "keywords": [
+    "otp",
+    "authenticator",
+    "cli",
+    "windows",
+    "steamguard",
+    "2fa",
+    "totp"
+  ],
   "dependencies": {
-    "otplib": "^12.0.1",
+    "otpauth": "^9.1.4",
     "steam-totp": "^2.1.2",
     "yargs": "^17.5.1"
   }
-}
+}