两步认证在很多验证中都要使用。如果在手机客户端上，如果使用电脑，每次都要拿出手机，手动输入。还要担心会过时。效率不是很高。
我现在的处理方式以下方式：
- ＭＡＣ上alfred workflow支持
- Chrom扩展支持
- 手机客户端
- CLI记录工具
今天主要介绍CLI工具，我现在在golang,找一些练手的项目.
先上代码
package main
import (
"fmt"
"os"
"log"
"sort"
"github.com/urfave/cli"
"gopkg.in/ini.v1"
"crypto/hmac"
"crypto/sha1"
"strings"
"encoding/base32"
"time"
"github.com/atotto/clipboard"
"strconv"
)
func toBytes(value int64) []byte {
var result []byte
mask := int64(0xFF)
shifts := [8]uint16{56, 48, 40, 32, 24, 16, 8, 0}
for _, shift := range shifts {
result = append(result, byte((value>>shift)&mask))
}
return result
}
func toUint32(bytes []byte) uint32 {
return (uint32(bytes[0]) << 24) + (uint32(bytes[1]) << 16) +
(uint32(bytes[2]) << 8) + uint32(bytes[3])
}
func oneTimePassword(key []byte, value []byte) uint32 {
// sign the value using HMAC-SHA1
hmacSha1 := hmac.New(sha1.New, key)
hmacSha1.Write(value)
hash := hmacSha1.Sum(nil)
offset := hash[len(hash)-1] & 0x0F
// get a 32-bit (4-byte) chunk from the hash starting at offset
hashParts := hash[offset : offset+4]
// ignore the most significant bit as per RFC 4226
hashParts[0] = hashParts[0] & 0x7F
number := toUint32(hashParts)
// size to 6 digits
// one million is the first number with 7 digits so the remainder
// of the division will always return < 7 digits
pwd := number % 1000000
return pwd
}
func Cli() {
app := cli.NewApp()
app.Name = "Google Authentiator CLI"
app.Usage = "Create, List, Delete, Copy your GA"
app.Version = "0.0.1"
app.Commands = []cli.Command {
{
Name: "list",
Aliases: []string{"l"},
Usage: "list | l",
Description: "list all item",
Category: "Show",
Action: func(c *cli.Context) error {
list()
return nil
},
},
{
Name: "show",
Aliases: []string{"s"},
Usage: "show | s github.com",
Description: "show all item",
Category: "Show",
Action: func(c *cli.Context) error {
item := c.Args().First()
show(item)
return nil
},
},
{
Name: "copy",
Aliases: []string{"c"},
Usage: "copy | c github.com",
UsageText: "copy ga to Clipboard",
Category: "Show",
Action: func(c *cli.Context) error {
item := c.Args().First()
copy(item)
return nil
},
},
{
Name: "create",
Aliases: []string{"r"},
Usage: "create| r github.com xxxxxxxxxx",
UsageText: "create a new ga Secrete item",
Category: "Store",
Action: func(c *cli.Context) error {
item := c.Args().First()
secret := c.Args()[1]
create(item, secret)
return nil
},
},
{
Name: "modify",
Aliases: []string{"m"},
Usage: "modify | m github.com xxxxxxxxx",
UsageText: "Modify One item Secrete",
Category: "Store",
Action: func(c *cli.Context) error {
item := c.Args().First()
secret := c.Args()[1]
modify(item, secret)
return nil
},
},
{
Name: "delete",
Aliases: []string{"d"},
Usage: "delete | d github.com",
UsageText: "Delete One item Secrete",
Category: "Store",
Action: func(c *cli.Context) error {
delete(c.Args().First())
return nil
},
},
}
app.Action = func(c *cli.Context) error {
fmt.Println("you can use list")
return nil
}
sort.Sort(cli.FlagsByName(app.Flags))
cli.HelpFlag = cli.BoolFlag {
Name: "help, h",
Usage: "Help!Help!",
}
cli.VersionFlag = cli.BoolFlag {
Name: "print-version, v",
Usage: "print version",
}
err := app.Run(os.Args)
if err != nil {
log.Fatal(err)
}
}
func create(item, secret string) error {
file,er:=os.Open("/tmp/myga.ini")
if er != nil {
file, _ = os.Create("/tmp/myga.ini")
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
if _, err := cfg.GetSection(item); err == nil {
fmt.Println(item + " is Exist!!!!")
os.Exit(1)
}
cfg.NewSection(item)
cfg.Section(item).Key("secret").SetValue(secret)
cfg.SaveTo("/tmp/myga.ini")
return nil
}
func show(item string) error {
file,er:=os.Open("/tmp/myga.ini")
if er!=nil && os.IsNotExist(er){
fmt.Println("no data!!!")
os.Exit(1)
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
section, err := cfg.GetSection(item)
if err != nil {
panic(err)
}
key, err := section.GetKey("secret")
if err != nil {
panic(err)
}
inputNoSpaces := strings.Replace(key.String(), " ", "", -1)
inputNoSpacesUpper := strings.ToUpper(inputNoSpaces)
keyS, erro := base32.StdEncoding.DecodeString(inputNoSpacesUpper)
if erro != nil {
fmt.Fprintln(os.Stderr, err.Error())
os.Exit(1)
}
// generate a one-time password using the time at 30-second intervals
epochSeconds := time.Now().Unix()
pwd := oneTimePassword(keyS, toBytes(epochSeconds/30))
secondsRemaining := 30 - (epochSeconds % 30)
fmt.Printf("%06d (%d second(s) remaining)\n", pwd, secondsRemaining)
return nil
}
func copy(item string) error {
file,er:=os.Open("/tmp/myga.ini")
if er!=nil && os.IsNotExist(er){
fmt.Println("no data!!!")
os.Exit(1)
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
section, err := cfg.GetSection(item)
if err != nil {
panic(err)
}
key, err := section.GetKey("secret")
if err != nil {
panic(err)
}
inputNoSpaces := strings.Replace(key.String(), " ", "", -1)
inputNoSpacesUpper := strings.ToUpper(inputNoSpaces)
keyS, erro := base32.StdEncoding.DecodeString(inputNoSpacesUpper)
if erro != nil {
fmt.Fprintln(os.Stderr, err.Error())
os.Exit(1)
}
// generate a one-time password using the time at 30-second intervals
epochSeconds := time.Now().Unix()
pwd := oneTimePassword(keyS, toBytes(epochSeconds/30))
secondsRemaining := 30 - (epochSeconds % 30)
clipStr := strconv.Itoa(int(pwd))
clipboard.WriteAll(clipStr)
fmt.Printf("%06d (%d second(s) remaining)\n", pwd, secondsRemaining)
return nil
}
func list() error {
file,er:=os.Open("/tmp/myga.ini")
if er!=nil && os.IsNotExist(er){
fmt.Println("no data!!!")
os.Exit(1)
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
sections := cfg.Sections()
for _,v := range sections {
fmt.Println(v.Name())
}
return nil
}
func delete(item string) error {
file,er:=os.Open("/tmp/myga.ini")
if er!=nil && os.IsNotExist(er){
file, _ = os.Create("/tmp/myga.ini")
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
if _, err := cfg.GetSection(item); err != nil {
fmt.Println(item + " is not Exist!!!!")
os.Exit(1)
}
cfg.DeleteSection(item)
cfg.SaveTo("/tmp/myga.ini")
fmt.Println("ok!!!")
return nil
}
func modify(item string, secret string) error {
file,er:=os.Open("/tmp/myga.ini")
if er!=nil && os.IsNotExist(er){
file, _ = os.Create("/tmp/myga.ini")
}
file.Close()
cfg, err := ini.Load("/tmp/myga.ini")
if err != nil {
panic(err)
}
if _, err := cfg.GetSection(item); err != nil {
fmt.Println(item + " is not Exist!!!!")
os.Exit(1)
}
cfg.Section(item).Key("secret").SetValue(secret)
cfg.SaveTo("/tmp/myga.ini")
return nil
}
func main() {
Cli()
}
上面实现的功能有
- ga的创建，更新，删除，数据都是保存在本地的
- 显示所有条目
- 显示验证码，复制验证码到黏贴板上
后续介绍其他的方式以及ｇａ的工作原理。
