From 60f182b99d9b312c0806264fbbc922917c4c06d7 Mon Sep 17 00:00:00 2001 From: Elizabeth Cray Date: Sun, 1 May 2022 20:20:59 +0000 Subject: [PATCH] OAuth & SSH Keygen --- .gitignore | 1 + README.md | 2 + auth/index.php | 155 +++++++++ base64url.js | 31 ++ composer.json | 5 + composer.lock | 794 ++++++++++++++++++++++++++++++++++++++++++++++ fittext.js | 2 +- index.html | 8 +- index.js | 73 ++++- keygen.js | 52 +++ pkcs1To8.js | 84 +++++ publicSshToPem.js | 103 ++++++ send.php | 56 ++++ ssh-util.js | 121 +++++++ style.css | 12 +- 15 files changed, 1494 insertions(+), 5 deletions(-) create mode 100644 .gitignore create mode 100644 auth/index.php create mode 100644 base64url.js create mode 100644 composer.json create mode 100644 composer.lock create mode 100644 keygen.js create mode 100644 pkcs1To8.js create mode 100644 publicSshToPem.js create mode 100644 send.php create mode 100644 ssh-util.js diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..48b8bf9 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +vendor/ diff --git a/README.md b/README.md index 315c388..21336ad 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,5 @@ # Hackers Town Tilde User Generator use Mastodon oauth to generate system users + +Warrant canary available at /etc/ttyserver/canary \ No newline at end of file diff --git a/auth/index.php b/auth/index.php new file mode 100644 index 0000000..2117b1a --- /dev/null +++ b/auth/index.php @@ -0,0 +1,155 @@ + $config->oauth->key)); + exit(); + break; + default: + break; + } +}else if (isset($_REQUEST["code"])){ + // Mastodon callback + $MastCode = $_REQUEST["code"]; +} +?> + + + HackersTown Server Access + + + + + + + + + + + + + + + + + + +
+
+
+
+ + + +
+ oauth->key."&client_secret=".$config->oauth->secret."&scope=read:accounts&redirect_uri=".$reqirectUri; + curl_setopt($request, CURLOPT_POSTFIELDS, $options); + // echo $options; + // echo json_encode($request); + $response = curl_exec($request); + curl_close($request); + // echo $response; + $Auth = json_decode($response); + if(isset($Auth->token_type)){ + // Valid Auth? + $request = curl_init(); + curl_setopt($request, CURLOPT_URL, "https://hackers.town/api/v1/accounts/verify_credentials"); + curl_setopt($request, CURLOPT_RETURNTRANSFER, 1); + curl_setopt($request, CURLOPT_HTTPHEADER, array( + "Authorization: ".$Auth->token_type." ".$Auth->access_token + )); + $response = curl_exec($request); + curl_close($request); + $User = json_decode($response); + + if (isset($User->id)){ + // Congrats! + $AuthToken = $Auth->access_token; + $UserName = $User->display_name; + }else{ + // invalid auth + $AuthToken = "BadUser"; + $ErrorDesc = "User Not Found"; + } + }else{ + // invalid auth + $AuthToken = "BadOauth"; + $ErrorDesc = "Invalid OAuth"; + } + + // revoke token after usage + ?> + +
> + + + Invalid + + + try again + +
+ +
+
> + + +
+
> + + + + + + + +
+ Setup an account SSH key +
+
+
> + + +
+
+ + +
+ Copyright ©️ 2022 Elizabeth Anne Cray +
+
+
+
+ + \ No newline at end of file diff --git a/base64url.js b/base64url.js new file mode 100644 index 0000000..19d1c85 --- /dev/null +++ b/base64url.js @@ -0,0 +1,31 @@ +// adapted from https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-08#appendix-C + +function base64urlEncode(arg) { + const step1 = window.btoa(arg); // Regular base64 encoder + const step2 = step1.split("=")[0]; // Remove any trailing '='s + const step3 = step2.replace(/\+/g, "-"); // 62nd char of encoding + const step4 = step3.replace(/\//g, "_"); // 63rd char of encoding + return step4; + } + + function base64urlDecode(s) { + const step1 = s.replace(/-/g, "+"); // 62nd char of encoding + const step2 = step1.replace(/_/g, "/"); // 63rd char of encoding + let step3 = step2; + switch (step2.length % 4) { // Pad with trailing '='s + case 0: // No pad chars in this case + break; + case 2: // Two pad chars + step3 += "=="; + break; + case 3: // One pad char + step3 += "="; + break; + default: + throw new Error("Illegal base64url string!"); + } + return window.atob(step3); // Regular base64 decoder + } + + const module = window.module || {}; + module.exports = { base64urlDecode, base64urlEncode }; \ No newline at end of file diff --git a/composer.json b/composer.json new file mode 100644 index 0000000..fcd700c --- /dev/null +++ b/composer.json @@ -0,0 +1,5 @@ +{ + "require": { + "lrf141/oauth2-mastodon": "^1.0" + } +} diff --git a/composer.lock b/composer.lock new file mode 100644 index 0000000..9433036 --- /dev/null +++ b/composer.lock @@ -0,0 +1,794 @@ +{ + "_readme": [ + "This file locks the dependencies of your project to a known state", + "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", + "This file is @generated automatically" + ], + "content-hash": "d823e547e45f296dd119344b20f3fbcd", + "packages": [ + { + "name": "guzzlehttp/guzzle", + "version": "7.4.2", + "source": { + "type": "git", + "url": "https://github.com/guzzle/guzzle.git", + "reference": "ac1ec1cd9b5624694c3a40be801d94137afb12b4" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/guzzle/zipball/ac1ec1cd9b5624694c3a40be801d94137afb12b4", + "reference": "ac1ec1cd9b5624694c3a40be801d94137afb12b4", + "shasum": "" + }, + "require": { + "ext-json": "*", + "guzzlehttp/promises": "^1.5", + "guzzlehttp/psr7": "^1.8.3 || ^2.1", + "php": "^7.2.5 || ^8.0", + "psr/http-client": "^1.0", + "symfony/deprecation-contracts": "^2.2 || ^3.0" + }, + "provide": { + "psr/http-client-implementation": "1.0" + }, + "require-dev": { + "bamarni/composer-bin-plugin": "^1.4.1", + "ext-curl": "*", + "php-http/client-integration-tests": "^3.0", + "phpunit/phpunit": "^8.5.5 || ^9.3.5", + "psr/log": "^1.1 || ^2.0 || ^3.0" + }, + "suggest": { + "ext-curl": "Required for CURL handler support", + "ext-intl": "Required for Internationalized Domain Name (IDN) support", + "psr/log": "Required for using the Log middleware" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "7.4-dev" + } + }, + "autoload": { + "files": [ + "src/functions_include.php" + ], + "psr-4": { + "GuzzleHttp\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Graham Campbell", + "email": "hello@gjcampbell.co.uk", + "homepage": "https://github.com/GrahamCampbell" + }, + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + }, + { + "name": "Jeremy Lindblom", + "email": "jeremeamia@gmail.com", + "homepage": "https://github.com/jeremeamia" + }, + { + "name": "George Mponos", + "email": "gmponos@gmail.com", + "homepage": "https://github.com/gmponos" + }, + { + "name": "Tobias Nyholm", + "email": "tobias.nyholm@gmail.com", + "homepage": "https://github.com/Nyholm" + }, + { + "name": "Márk Sági-Kazár", + "email": "mark.sagikazar@gmail.com", + "homepage": "https://github.com/sagikazarmark" + }, + { + "name": "Tobias Schultze", + "email": "webmaster@tubo-world.de", + "homepage": "https://github.com/Tobion" + } + ], + "description": "Guzzle is a PHP HTTP client library", + "keywords": [ + "client", + "curl", + "framework", + "http", + "http client", + "psr-18", + "psr-7", + "rest", + "web service" + ], + "support": { + "issues": "https://github.com/guzzle/guzzle/issues", + "source": "https://github.com/guzzle/guzzle/tree/7.4.2" + }, + "funding": [ + { + "url": "https://github.com/GrahamCampbell", + "type": "github" + }, + { + "url": "https://github.com/Nyholm", + "type": "github" + }, + { + "url": "https://tidelift.com/funding/github/packagist/guzzlehttp/guzzle", + "type": "tidelift" + } + ], + "time": "2022-03-20T14:16:28+00:00" + }, + { + "name": "guzzlehttp/promises", + "version": "1.5.1", + "source": { + "type": "git", + "url": "https://github.com/guzzle/promises.git", + "reference": "fe752aedc9fd8fcca3fe7ad05d419d32998a06da" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/promises/zipball/fe752aedc9fd8fcca3fe7ad05d419d32998a06da", + "reference": "fe752aedc9fd8fcca3fe7ad05d419d32998a06da", + "shasum": "" + }, + "require": { + "php": ">=5.5" + }, + "require-dev": { + "symfony/phpunit-bridge": "^4.4 || ^5.1" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.5-dev" + } + }, + "autoload": { + "files": [ + "src/functions_include.php" + ], + "psr-4": { + "GuzzleHttp\\Promise\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Graham Campbell", + "email": "hello@gjcampbell.co.uk", + "homepage": "https://github.com/GrahamCampbell" + }, + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + }, + { + "name": "Tobias Nyholm", + "email": "tobias.nyholm@gmail.com", + "homepage": "https://github.com/Nyholm" + }, + { + "name": "Tobias Schultze", + "email": "webmaster@tubo-world.de", + "homepage": "https://github.com/Tobion" + } + ], + "description": "Guzzle promises library", + "keywords": [ + "promise" + ], + "support": { + "issues": "https://github.com/guzzle/promises/issues", + "source": "https://github.com/guzzle/promises/tree/1.5.1" + }, + "funding": [ + { + "url": "https://github.com/GrahamCampbell", + "type": "github" + }, + { + "url": "https://github.com/Nyholm", + "type": "github" + }, + { + "url": "https://tidelift.com/funding/github/packagist/guzzlehttp/promises", + "type": "tidelift" + } + ], + "time": "2021-10-22T20:56:57+00:00" + }, + { + "name": "guzzlehttp/psr7", + "version": "2.2.1", + "source": { + "type": "git", + "url": "https://github.com/guzzle/psr7.git", + "reference": "c94a94f120803a18554c1805ef2e539f8285f9a2" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/psr7/zipball/c94a94f120803a18554c1805ef2e539f8285f9a2", + "reference": "c94a94f120803a18554c1805ef2e539f8285f9a2", + "shasum": "" + }, + "require": { + "php": "^7.2.5 || ^8.0", + "psr/http-factory": "^1.0", + "psr/http-message": "^1.0", + "ralouphie/getallheaders": "^3.0" + }, + "provide": { + "psr/http-factory-implementation": "1.0", + "psr/http-message-implementation": "1.0" + }, + "require-dev": { + "bamarni/composer-bin-plugin": "^1.4.1", + "http-interop/http-factory-tests": "^0.9", + "phpunit/phpunit": "^8.5.8 || ^9.3.10" + }, + "suggest": { + "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "2.2-dev" + } + }, + "autoload": { + "psr-4": { + "GuzzleHttp\\Psr7\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Graham Campbell", + "email": "hello@gjcampbell.co.uk", + "homepage": "https://github.com/GrahamCampbell" + }, + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + }, + { + "name": "George Mponos", + "email": "gmponos@gmail.com", + "homepage": "https://github.com/gmponos" + }, + { + "name": "Tobias Nyholm", + "email": "tobias.nyholm@gmail.com", + "homepage": "https://github.com/Nyholm" + }, + { + "name": "Márk Sági-Kazár", + "email": "mark.sagikazar@gmail.com", + "homepage": "https://github.com/sagikazarmark" + }, + { + "name": "Tobias Schultze", + "email": "webmaster@tubo-world.de", + "homepage": "https://github.com/Tobion" + }, + { + "name": "Márk Sági-Kazár", + "email": "mark.sagikazar@gmail.com", + "homepage": "https://sagikazarmark.hu" + } + ], + "description": "PSR-7 message implementation that also provides common utility methods", + "keywords": [ + "http", + "message", + "psr-7", + "request", + "response", + "stream", + "uri", + "url" + ], + "support": { + "issues": "https://github.com/guzzle/psr7/issues", + "source": "https://github.com/guzzle/psr7/tree/2.2.1" + }, + "funding": [ + { + "url": "https://github.com/GrahamCampbell", + "type": "github" + }, + { + "url": "https://github.com/Nyholm", + "type": "github" + }, + { + "url": "https://tidelift.com/funding/github/packagist/guzzlehttp/psr7", + "type": "tidelift" + } + ], + "time": "2022-03-20T21:55:58+00:00" + }, + { + "name": "league/oauth2-client", + "version": "2.6.1", + "source": { + "type": "git", + "url": "https://github.com/thephpleague/oauth2-client.git", + "reference": "2334c249907190c132364f5dae0287ab8666aa19" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/thephpleague/oauth2-client/zipball/2334c249907190c132364f5dae0287ab8666aa19", + "reference": "2334c249907190c132364f5dae0287ab8666aa19", + "shasum": "" + }, + "require": { + "guzzlehttp/guzzle": "^6.0 || ^7.0", + "paragonie/random_compat": "^1 || ^2 || ^9.99", + "php": "^5.6 || ^7.0 || ^8.0" + }, + "require-dev": { + "mockery/mockery": "^1.3.5", + "php-parallel-lint/php-parallel-lint": "^1.3.1", + "phpunit/phpunit": "^5.7 || ^6.0 || ^9.5", + "squizlabs/php_codesniffer": "^2.3 || ^3.0" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-2.x": "2.0.x-dev" + } + }, + "autoload": { + "psr-4": { + "League\\OAuth2\\Client\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Alex Bilbie", + "email": "hello@alexbilbie.com", + "homepage": "http://www.alexbilbie.com", + "role": "Developer" + }, + { + "name": "Woody Gilk", + "homepage": "https://github.com/shadowhand", + "role": "Contributor" + } + ], + "description": "OAuth 2.0 Client Library", + "keywords": [ + "Authentication", + "SSO", + "authorization", + "identity", + "idp", + "oauth", + "oauth2", + "single sign on" + ], + "support": { + "issues": "https://github.com/thephpleague/oauth2-client/issues", + "source": "https://github.com/thephpleague/oauth2-client/tree/2.6.1" + }, + "time": "2021-12-22T16:42:49+00:00" + }, + { + "name": "lrf141/oauth2-mastodon", + "version": "1.0.1", + "source": { + "type": "git", + "url": "https://github.com/lrf141/oauth2-mastodon.git", + "reference": "ba051985643bf46788c151dc70bc8ee85edff6a4" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/lrf141/oauth2-mastodon/zipball/ba051985643bf46788c151dc70bc8ee85edff6a4", + "reference": "ba051985643bf46788c151dc70bc8ee85edff6a4", + "shasum": "" + }, + "require": { + "league/oauth2-client": "^2.0" + }, + "require-dev": { + "mockery/mockery": "^1.1", + "phpunit/phpunit": ">=5.4.3", + "squizlabs/php_codesniffer": "^2.3" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.0-dev" + } + }, + "autoload": { + "psr-4": { + "Lrf141\\OAuth2\\Client\\": "src" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "K.Takeuchi", + "email": "ghost141.kentyo@gmail.com", + "homepage": "https://github.com/lrf141", + "role": "Developer" + } + ], + "description": "Mastodon OAuth 2.0 support for the PHP League's OAuth 2.0 Client", + "homepage": "https://github.com/lrf141/oauth2-client", + "keywords": [ + "authorization", + "client", + "lrf141", + "mastodon", + "oauth2", + "oauth2-mastodon" + ], + "support": { + "issues": "https://github.com/lrf141/oauth2-mastodon/issues", + "source": "https://github.com/lrf141/oauth2-mastodon/tree/1.0.1" + }, + "time": "2018-08-31T08:03:49+00:00" + }, + { + "name": "paragonie/random_compat", + "version": "v9.99.100", + "source": { + "type": "git", + "url": "https://github.com/paragonie/random_compat.git", + "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/paragonie/random_compat/zipball/996434e5492cb4c3edcb9168db6fbb1359ef965a", + "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a", + "shasum": "" + }, + "require": { + "php": ">= 7" + }, + "require-dev": { + "phpunit/phpunit": "4.*|5.*", + "vimeo/psalm": "^1" + }, + "suggest": { + "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes." + }, + "type": "library", + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com", + "homepage": "https://paragonie.com" + } + ], + "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7", + "keywords": [ + "csprng", + "polyfill", + "pseudorandom", + "random" + ], + "support": { + "email": "info@paragonie.com", + "issues": "https://github.com/paragonie/random_compat/issues", + "source": "https://github.com/paragonie/random_compat" + }, + "time": "2020-10-15T08:29:30+00:00" + }, + { + "name": "psr/http-client", + "version": "1.0.1", + "source": { + "type": "git", + "url": "https://github.com/php-fig/http-client.git", + "reference": "2dfb5f6c5eff0e91e20e913f8c5452ed95b86621" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/php-fig/http-client/zipball/2dfb5f6c5eff0e91e20e913f8c5452ed95b86621", + "reference": "2dfb5f6c5eff0e91e20e913f8c5452ed95b86621", + "shasum": "" + }, + "require": { + "php": "^7.0 || ^8.0", + "psr/http-message": "^1.0" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.0.x-dev" + } + }, + "autoload": { + "psr-4": { + "Psr\\Http\\Client\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "PHP-FIG", + "homepage": "http://www.php-fig.org/" + } + ], + "description": "Common interface for HTTP clients", + "homepage": "https://github.com/php-fig/http-client", + "keywords": [ + "http", + "http-client", + "psr", + "psr-18" + ], + "support": { + "source": "https://github.com/php-fig/http-client/tree/master" + }, + "time": "2020-06-29T06:28:15+00:00" + }, + { + "name": "psr/http-factory", + "version": "1.0.1", + "source": { + "type": "git", + "url": "https://github.com/php-fig/http-factory.git", + "reference": "12ac7fcd07e5b077433f5f2bee95b3a771bf61be" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/php-fig/http-factory/zipball/12ac7fcd07e5b077433f5f2bee95b3a771bf61be", + "reference": "12ac7fcd07e5b077433f5f2bee95b3a771bf61be", + "shasum": "" + }, + "require": { + "php": ">=7.0.0", + "psr/http-message": "^1.0" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.0.x-dev" + } + }, + "autoload": { + "psr-4": { + "Psr\\Http\\Message\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "PHP-FIG", + "homepage": "http://www.php-fig.org/" + } + ], + "description": "Common interfaces for PSR-7 HTTP message factories", + "keywords": [ + "factory", + "http", + "message", + "psr", + "psr-17", + "psr-7", + "request", + "response" + ], + "support": { + "source": "https://github.com/php-fig/http-factory/tree/master" + }, + "time": "2019-04-30T12:38:16+00:00" + }, + { + "name": "psr/http-message", + "version": "1.0.1", + "source": { + "type": "git", + "url": "https://github.com/php-fig/http-message.git", + "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/php-fig/http-message/zipball/f6561bf28d520154e4b0ec72be95418abe6d9363", + "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363", + "shasum": "" + }, + "require": { + "php": ">=5.3.0" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.0.x-dev" + } + }, + "autoload": { + "psr-4": { + "Psr\\Http\\Message\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "PHP-FIG", + "homepage": "http://www.php-fig.org/" + } + ], + "description": "Common interface for HTTP messages", + "homepage": "https://github.com/php-fig/http-message", + "keywords": [ + "http", + "http-message", + "psr", + "psr-7", + "request", + "response" + ], + "support": { + "source": "https://github.com/php-fig/http-message/tree/master" + }, + "time": "2016-08-06T14:39:51+00:00" + }, + { + "name": "ralouphie/getallheaders", + "version": "3.0.3", + "source": { + "type": "git", + "url": "https://github.com/ralouphie/getallheaders.git", + "reference": "120b605dfeb996808c31b6477290a714d356e822" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822", + "reference": "120b605dfeb996808c31b6477290a714d356e822", + "shasum": "" + }, + "require": { + "php": ">=5.6" + }, + "require-dev": { + "php-coveralls/php-coveralls": "^2.1", + "phpunit/phpunit": "^5 || ^6.5" + }, + "type": "library", + "autoload": { + "files": [ + "src/getallheaders.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Ralph Khattar", + "email": "ralph.khattar@gmail.com" + } + ], + "description": "A polyfill for getallheaders.", + "support": { + "issues": "https://github.com/ralouphie/getallheaders/issues", + "source": "https://github.com/ralouphie/getallheaders/tree/develop" + }, + "time": "2019-03-08T08:55:37+00:00" + }, + { + "name": "symfony/deprecation-contracts", + "version": "v3.0.1", + "source": { + "type": "git", + "url": "https://github.com/symfony/deprecation-contracts.git", + "reference": "26954b3d62a6c5fd0ea8a2a00c0353a14978d05c" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/symfony/deprecation-contracts/zipball/26954b3d62a6c5fd0ea8a2a00c0353a14978d05c", + "reference": "26954b3d62a6c5fd0ea8a2a00c0353a14978d05c", + "shasum": "" + }, + "require": { + "php": ">=8.0.2" + }, + "type": "library", + "extra": { + "branch-alias": { + "dev-main": "3.0-dev" + }, + "thanks": { + "name": "symfony/contracts", + "url": "https://github.com/symfony/contracts" + } + }, + "autoload": { + "files": [ + "function.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Nicolas Grekas", + "email": "p@tchwork.com" + }, + { + "name": "Symfony Community", + "homepage": "https://symfony.com/contributors" + } + ], + "description": "A generic function and convention to trigger deprecation notices", + "homepage": "https://symfony.com", + "support": { + "source": "https://github.com/symfony/deprecation-contracts/tree/v3.0.1" + }, + "funding": [ + { + "url": "https://symfony.com/sponsor", + "type": "custom" + }, + { + "url": "https://github.com/fabpot", + "type": "github" + }, + { + "url": "https://tidelift.com/funding/github/packagist/symfony/symfony", + "type": "tidelift" + } + ], + "time": "2022-01-02T09:55:41+00:00" + } + ], + "packages-dev": [], + "aliases": [], + "minimum-stability": "stable", + "stability-flags": [], + "prefer-stable": false, + "prefer-lowest": false, + "platform": [], + "platform-dev": [], + "plugin-api-version": "2.3.0" +} diff --git a/fittext.js b/fittext.js index 0106a7f..6328bae 100644 --- a/fittext.js +++ b/fittext.js @@ -35,7 +35,7 @@ var compressor = kompressor || 1; var resizer = function () { - el.style.fontSize = Math.max(Math.min(el.clientWidth / (compressor*10), parseFloat(settings.maxFontSize)), parseFloat(settings.minFontSize)) + 'px'; + el.style.fontSize = Math.max(Math.min(el.clientWidth / (compressor*10.5), parseFloat(settings.maxFontSize)), parseFloat(settings.minFontSize)) + 'px'; }; // Call once to set. diff --git a/index.html b/index.html index 6975e98..e7d7b20 100644 --- a/index.html +++ b/index.html @@ -9,6 +9,7 @@ + @@ -20,7 +21,9 @@
- + + +
@@ -28,9 +31,10 @@
- +
+ Canary
Copyright ©️ 2022 Elizabeth Anne Cray diff --git a/index.js b/index.js index df611d4..cc6e4b5 100644 --- a/index.js +++ b/index.js @@ -27,6 +27,19 @@ const resizeText = ({ element, elements, minSize = 10, maxSize = 512, step = 1, }) } +const saveFile = (name, type, data) => { + if (data !== null && navigator.msSaveBlob) + return navigator.msSaveBlob(new Blob([data], { type: type }), name); + var a = $(""); + var url = window.URL.createObjectURL(new Blob([data], {type: type})); + a.attr("href", url); + a.attr("download", name); + $("body").append(a); + a[0].click(); + window.URL.revokeObjectURL(url); + a.remove(); +} + const disableNonDesktopElements = () => { var disableElements = document.getElementsByClassName("desktopOnly"); for(var i=0; i< disableElements.length; i++){ @@ -41,8 +54,66 @@ const disableNonDesktopElements = () => { content.classList.add("col-10"); var te = document.getElementById("resizer"); window.fitText(te); - document.getElementById("bttn").style.height = "15vw"; + + var buttons = document.getElementsByClassName("keyButton"); + for(var i=0; i { + dbp("Generate Key"); + generateKeyPair("RSASSA-PKCS1-v1_5", 4096, "namehere") + .then((keys) => { + console.dir(keys); + // saveFile("ssh_key.pem", "text/plain", keys[0]); + // saveFile("ssh_key.pub", "text/plain", keys[1]); + var KeyExport = new JSZip(); + KeyExport.file("HackersTownTTY-"+name, keys[0]); + KeyExport.file("HackersTownTTY-"+name+".pub", keys[1]); + KeyExport.generateAsync({type:"blob"}) + .then((content) => { + saveFile("HackersTownTTY-"+name+".zip", "application/zip", content); + // saveAs(content, "HackersTownTTY-"+name+".zip"); + }); + }).catch((err) => { + console.log(err); + }); + +} + +const uploadSSH = () => { + +} + +const beginOauth = () => { + dbp("Auth"); + $.ajax({ + url: "https://tty.hackers.town/auth?act=id" + }).then((data) => { + console.table(data); + if(data.id){ + var redirect = "https://hackers.town/oauth/authorize?"+ + "response_type=code&client_id="+data.id+"&redirect_uri="+ + "https://tty.hackers.town/auth&scope=read:accounts"; + dbp(redirect); + window.location.href = redirect; + }else{ + // Auth Failed + $("#resizer").html("AUTH FAILED"); + $("#resizer").css("color", "#400112"); + $("#resizer").css("background-color", "#79F257"); + $("#resizer").animate({ + color: "#79F257", + backgroundColor: "#022601" + }, 1000); + } + }); +} + +// On Page Load... $(() => { dbp("Begin Init Content"); // Device Detection diff --git a/keygen.js b/keygen.js new file mode 100644 index 0000000..bb927f4 --- /dev/null +++ b/keygen.js @@ -0,0 +1,52 @@ +/* global encodePrivateKey, encodePublicKey */ +const extractable = true; + +function wrap(text, len) { + const length = len || 72; + let result = ""; + for (let i = 0; i < text.length; i += length) { + result += text.slice(i, i + length); + result += "\n"; + } + return result; +} + +function rsaPrivateKey(key) { + return `-----BEGIN RSA PRIVATE KEY-----\n${key}-----END RSA PRIVATE KEY-----`; +} + +function arrayBufferToBase64(buffer) { + let binary = ""; + const bytes = new Uint8Array(buffer); + const len = bytes.byteLength; + for (let i = 0; i < len; i += 1) { + binary += String.fromCharCode(bytes[i]); + } + return window.btoa(binary); +} + +function generateKeyPair(alg, size, name) { + return window.crypto.subtle + .generateKey( + { + name: "RSASSA-PKCS1-v1_5", + modulusLength: 2048, // can be 1024, 2048, or 4096 + publicExponent: new Uint8Array([0x01, 0x00, 0x01]), + hash: { name: "SHA-1" }, // can be "SHA-1", "SHA-256", "SHA-384", or "SHA-512" + }, + extractable, + ["sign", "verify"] + ) + .then(key => { + const privateKey = window.crypto.subtle + .exportKey("jwk", key.privateKey) + .then(encodePrivateKey) + .then(wrap) + .then(rsaPrivateKey); + + const publicKey = window.crypto.subtle.exportKey("jwk", key.publicKey).then(jwk => encodePublicKey(jwk, name)); + return Promise.all([privateKey, publicKey]); + }); +} + +// module.exports = { arrayBufferToBase64, generateKeyPair }; \ No newline at end of file diff --git a/pkcs1To8.js b/pkcs1To8.js new file mode 100644 index 0000000..eeac2df --- /dev/null +++ b/pkcs1To8.js @@ -0,0 +1,84 @@ +/* eslint no-bitwise: 0 */ + +function wrap(text, len) { + const length = len || 72; + let result = ""; + for (let i = 0; i < text.length; i += length) { + result += text.slice(i, i + length); + result += "\n"; + } + return result; + } + + function pemPrivateKey(key) { + return `-----BEGIN PRIVATE KEY-----\n${wrap(key, 64)}-----END PRIVATE KEY-----`; + } + + function stripPemFormatting(str) { + return str + .replace(/^-----BEGIN (?:RSA )?(?:PRIVATE|PUBLIC) KEY-----$/m, "") + .replace(/^-----END (?:RSA )?(?:PRIVATE|PUBLIC) KEY-----$/m, "") + .replace(/[\n\r]/g, ""); + } + function arrayToPem(a) { + return window.btoa(a.map(c => String.fromCharCode(c)).join("")); + } + + function stringToArray(s) { + return s.split("").map(c => c.charCodeAt()); + } + + function pemToArray(pem) { + return stringToArray(window.atob(pem)); + } + + const prefix = [ + 0x30, + 0x82, + 0x04, + 0xbc, + 0x02, + 0x01, + 0x00, + 0x30, + 0x0d, + 0x06, + 0x09, + 0x2a, + 0x86, + 0x48, + 0x86, + 0xf7, + 0x0d, + 0x01, + 0x01, + 0x01, + 0x05, + 0x00, + 0x04, + 0x82, + 0x04, + 0xa6, + ]; + + function pkcs1To8(privateKeyPkcs1Pem) { + const pem = stripPemFormatting(privateKeyPkcs1Pem); + const privateKeyPkcs1Array = pemToArray(pem); + const prefixPkcs8 = prefix.concat(privateKeyPkcs1Array); + const privateKeyPkcs8Pem = arrayToPem(prefixPkcs8); + const pkcs8Pem = pemPrivateKey(privateKeyPkcs8Pem); + return pkcs8Pem; + } + + // crypto.subtle.importKey( + // "spki", + // keyTextBuffer, + // { + // name: "RSASSA-PKCS1-v1_5", + // hash: { name: "SHA-256" }, + // }, + // true, + // ["verify"] + // ); + + module.exports = { pkcs1To8 }; \ No newline at end of file diff --git a/publicSshToPem.js b/publicSshToPem.js new file mode 100644 index 0000000..7ebc38f --- /dev/null +++ b/publicSshToPem.js @@ -0,0 +1,103 @@ +/* eslint no-bitwise: 0 */ + +function wrap(text, len) { + const length = len || 72; + let result = ""; + for (let i = 0; i < text.length; i += length) { + result += text.slice(i, i + length); + result += "\n"; + } + return result; + } + + function pemPublicKey(key) { + return `---- BEGIN RSA PUBLIC KEY ----\n${wrap(key, 65)}---- END RSA PUBLIC KEY ----`; + } + + function integerToOctet(n) { + const result = []; + for (let i = n; i > 0; i >>= 8) { + result.push(i & 0xff); + } + return result.reverse(); + } + + function asnEncodeLen(n) { + let result = []; + if (n >> 7) { + result = integerToOctet(n); + result.unshift(0x80 + result.length); + } else { + result.push(n); + } + return result; + } + + function checkHighestBit(v) { + if (v[0] >> 7 === 1) { + v.unshift(0); // add leading zero if first bit is set + } + return v; + } + + function asn1Int(int) { + const v = checkHighestBit(int); + const len = asnEncodeLen(v.length); + return [0x02].concat(len, v); // int tag is 0x02 + } + + function asn1Seq(seq) { + const len = asnEncodeLen(seq.length); + return [0x30].concat(len, seq); // seq tag is 0x30 + } + + function arrayToPem(a) { + return window.btoa(a.map(c => String.fromCharCode(c)).join("")); + } + + function arrayToString(a) { + return String.fromCharCode.apply(null, a); + } + + function stringToArray(s) { + return s.split("").map(c => c.charCodeAt()); + } + + function pemToArray(pem) { + return stringToArray(window.atob(pem)); + } + + function arrayToLen(a) { + let result = 0; + for (let i = 0; i < a.length; i += 1) { + result = result * 256 + a[i]; + } + return result; + } + + function decodePublicKey(s) { + const split = s.split(" "); + const prefix = split[0]; + if (prefix !== "ssh-rsa") { + throw new Error(`Unknown prefix: ${prefix}`); + } + const buffer = pemToArray(split[1]); + const nameLen = arrayToLen(buffer.splice(0, 4)); + const type = arrayToString(buffer.splice(0, nameLen)); + if (type !== "ssh-rsa") { + throw new Error(`Unknown key type: ${type}`); + } + const exponentLen = arrayToLen(buffer.splice(0, 4)); + const exponent = buffer.splice(0, exponentLen); + const keyLen = arrayToLen(buffer.splice(0, 4)); + const key = buffer.splice(0, keyLen); + return { type, exponent, key, name: split[2] }; + } + + function publicSshToPem(publicKey) { + const { key, exponent } = decodePublicKey(publicKey); + const seq = [key, exponent].map(asn1Int).reduce((acc, a) => acc.concat(a)); + return pemPublicKey(arrayToPem(asn1Seq(seq))); + } + + module.exports = { publicSshToPem }; \ No newline at end of file diff --git a/send.php b/send.php new file mode 100644 index 0000000..4affb01 --- /dev/null +++ b/send.php @@ -0,0 +1,56 @@ + $config.oauth.key, + 'clientSecret' => $config.oauth.secret, + 'redirectUri' => 'https://tty.hackers.town/auth', + 'instance' => 'https://hackers.town', + 'scope' => 'read:accounts', +]); + + +if (!isset($_GET['code'])) { + + $authUrl = $provider->getAuthorizationUrl(); + + $_SESSION['oauth2state'] = $provider->getState(); + header('Location: '.$authUrl); + exit; + +// Check given state against previously stored one to mitigate CSRF attack +} elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) { + + unset($_SESSION['oauth2state']); + exit('Invalid state'); + +} else { + + // Try to get an access token (using the authorization code grant) + $token = $provider->getAccessToken('authorization_code', [ + 'code' => $_GET['code'] + ]); + + // Optional: Now you have a token you can look up a users profile data + try { + + $user = $provider->getResourceOwner($token); + + echo $user->getName(); + + } catch(Exception $e) { + + + exit('Oh dear...'); + } + + + echo $token->getToken(); +} + +?> \ No newline at end of file diff --git a/ssh-util.js b/ssh-util.js new file mode 100644 index 0000000..bce9925 --- /dev/null +++ b/ssh-util.js @@ -0,0 +1,121 @@ +/* eslint no-bitwise: 0 */ +/* global base64urlDecode */ + +function arrayToString(a) { + return String.fromCharCode.apply(null, a); + } + + function stringToArray(s) { + return s.split("").map(c => c.charCodeAt()); + } + + function base64urlToArray(s) { + return stringToArray(base64urlDecode(s)); + } + + function pemToArray(pem) { + return stringToArray(window.atob(pem)); + } + + function arrayToPem(a) { + return window.btoa(a.map(c => String.fromCharCode(c)).join("")); + } + + function arrayToLen(a) { + let result = 0; + for (let i = 0; i < a.length; i += 1) { + result = result * 256 + a[i]; + } + return result; + } + + function integerToOctet(n) { + const result = []; + for (let i = n; i > 0; i >>= 8) { + result.push(i & 0xff); + } + return result.reverse(); + } + + function lenToArray(n) { + const oct = integerToOctet(n); + let i; + for (i = oct.length; i < 4; i += 1) { + oct.unshift(0); + } + return oct; + } + + function decodePublicKey(s) { + const split = s.split(" "); + const prefix = split[0]; + if (prefix !== "ssh-rsa") { + throw new Error(`Unknown prefix: ${prefix}`); + } + const buffer = pemToArray(split[1]); + const nameLen = arrayToLen(buffer.splice(0, 4)); + const type = arrayToString(buffer.splice(0, nameLen)); + if (type !== "ssh-rsa") { + throw new Error(`Unknown key type: ${type}`); + } + const exponentLen = arrayToLen(buffer.splice(0, 4)); + const exponent = buffer.splice(0, exponentLen); + const keyLen = arrayToLen(buffer.splice(0, 4)); + const key = buffer.splice(0, keyLen); + return { type, exponent, key, name: split[2] }; + } + + function checkHighestBit(v) { + if (v[0] >> 7 === 1) { + // add leading zero if first bit is set + v.unshift(0); + } + return v; + } + + function jwkToInternal(jwk) { + return { + type: "ssh-rsa", + exponent: checkHighestBit(stringToArray(base64urlDecode(jwk.e))), + name: "name", + key: checkHighestBit(stringToArray(base64urlDecode(jwk.n))), + }; + } + + function encodePublicKey(jwk, name) { + const k = jwkToInternal(jwk); + k.name = name; + const keyLenA = lenToArray(k.key.length); + const exponentLenA = lenToArray(k.exponent.length); + const typeLenA = lenToArray(k.type.length); + const array = [].concat(typeLenA, stringToArray(k.type), exponentLenA, k.exponent, keyLenA, k.key); + const encoding = arrayToPem(array); + return `${k.type} ${encoding} ${k.name}`; + } + + function asnEncodeLen(n) { + let result = []; + if (n >> 7) { + result = integerToOctet(n); + result.unshift(0x80 + result.length); + } else { + result.push(n); + } + return result; + } + + function encodePrivateKey(jwk) { + const order = ["n", "e", "d", "p", "q", "dp", "dq", "qi"]; + const list = order.map(prop => { + const v = checkHighestBit(stringToArray(base64urlDecode(jwk[prop]))); + const len = asnEncodeLen(v.length); + return [0x02].concat(len, v); // int tag is 0x02 + }); + let seq = [0x02, 0x01, 0x00]; // extra seq for SSH + seq = seq.concat(...list); + const len = asnEncodeLen(seq.length); + const a = [0x30].concat(len, seq); // seq is 0x30 + return arrayToPem(a); + } + + module.exports = { base64urlToArray, decodePublicKey, encodePublicKey, encodePrivateKey }; \ No newline at end of file diff --git a/style.css b/style.css index 265737b..7684c83 100644 --- a/style.css +++ b/style.css @@ -23,7 +23,7 @@ body { height: 80%; margin: 2vw; padding: 2vw; - color: white; + color: #79F257; border: 2px solid #377326; border-radius: 1em; } @@ -43,6 +43,12 @@ span { display: block; } +.message { + width: 100%; + text-align: center; + display: block; +} + .button { margin: 8px; } @@ -59,4 +65,8 @@ span { text-align: center; display: block; color: #377326; +} + +.keyButton { + margin: 1px; } \ No newline at end of file