mirror of
https://github.com/ALLFATHER-BV/wadamesh.git
synced 2026-11-10 20:17:30 +00:00
CarpeNoctemandCopilot
acd473fa24
Move File Transfer's 6-digit code and its lockout (3 wrong tries = 30 s) into a header-only WebAuthCode with one global, g_web_auth, so the other browser features can use the same code. WebFileTransfer and drainFileInput now call it. No behaviour change. Adds test/test_web_auth_code.cpp (host g++). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: CarpeNoctem <cryptomax@pm.me>
60 lines
1.5 KiB
C++
60 lines
1.5 KiB
C++
// SPDX-License-Identifier: GPL-3.0-or-later
|
|
#include <assert.h>
|
|
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
static uint32_t g_now = 1000;
|
|
static uint32_t g_rand = 123456;
|
|
static uint32_t millis() { return g_now; }
|
|
static uint32_t esp_random() { return g_rand; }
|
|
|
|
#include "helpers/esp32/WebAuthCode.h"
|
|
|
|
static bool tryCode(WebAuthCode& a, const char* text) {
|
|
return a.matches(reinterpret_cast<const uint8_t*>(text), strlen(text));
|
|
}
|
|
|
|
int main() {
|
|
WebAuthCode a;
|
|
assert(!tryCode(a, "000000")); // nothing armed yet
|
|
assert(a.code() == 0);
|
|
|
|
a.ensure();
|
|
assert(a.code() == 100000u + 123456u % 900000u);
|
|
assert(tryCode(a, "223456"));
|
|
assert(!tryCode(a, "223457"));
|
|
assert(!tryCode(a, "22345"));
|
|
assert(!tryCode(a, "2234567"));
|
|
assert(!tryCode(a, "22345a"));
|
|
|
|
g_rand = 777777; // a second feature turning on must not rotate the code
|
|
a.ensure();
|
|
assert(a.code() == 223456u);
|
|
|
|
assert(a.allowed());
|
|
a.noteFailure();
|
|
a.noteFailure();
|
|
assert(a.allowed());
|
|
a.noteFailure(); // third wrong try locks for 30 s
|
|
assert(!a.allowed());
|
|
g_now += 29999;
|
|
assert(!a.allowed());
|
|
g_now += 1;
|
|
assert(a.allowed());
|
|
|
|
a.noteFailure();
|
|
a.noteFailure();
|
|
a.noteSuccess(); // success clears the failure count
|
|
a.noteFailure();
|
|
a.noteFailure();
|
|
assert(a.allowed());
|
|
|
|
a.disarm();
|
|
assert(a.code() == 0);
|
|
assert(!tryCode(a, "223456"));
|
|
a.ensure(); // next session gets a fresh code and no leftover lockout
|
|
assert(a.code() == 100000u + 777777u % 900000u);
|
|
assert(a.allowed());
|
|
return 0;
|
|
}
|