<?php
// Here are helpers for 2fa enrollment

/*
 * Do the http 2fa enrollment
 * Will return the key.
 */
function totp_enroll($db)
{
	global $test_url;

	rg_log_enter('test_enroll');

	$ret = array('ok' => 0);
	while (1) {
		rg_log('Loading enroll form...');
		$data = array(); $headers = array();
		$r = do_req($test_url . '/op/settings/totp/enroll', $data, $headers);
		if ($r === FALSE) {
			rg_log('Cannot load enroll page!');
			break;
		}
		$good_token = $r['tokens']['user_totp_enroll'];
		$key = isset($r['totp_secret']) ? $r['totp_secret'] : FALSE;
		if ($key === FALSE) {
			rg_log_ml('r: ' . print_r($r, TRUE));
			rg_log('Cannot find totp::secret!');
			break;
		}
		$ret['key'] = $key; // we may need it

		rg_log('Posting the enroll form...');
		$data = array(
			'enroll' => 1,
			'token' => $good_token,
			'totp::name' => 'test',
			'totp::secret' => $key,
			'totp::ver' => rg_totp_compute($key, time() / 30, 6)
			);
		$headers = array();
		$r = do_req($test_url . '/op/settings/totp/enroll', $data, $headers);
		if (!strstr($r['body'], 'You enrolled your new device with success')) {
			rg_log_ml('r: ' . print_r($r, TRUE));
			rg_log('Cannot enroll!');
			break;
		}
		$sql = "SELECT 1 FROM login_tokens WHERE secret = '" . $key . "'";
		$res = rg_sql_query($db, $sql);
		$rows = rg_sql_num_rows($res);
		rg_sql_free_result($res);
		if ($rows != 1) {
			rg_log('Secret not found in the database!');
			break;
		}

		$ret['ok'] = 1;
		break;
	}

	rg_log_exit();
	return $ret;
}

/*
 * Deletes scratch codes
 */
function totp_scratch_delete($list)
{
	global $test_url;

	rg_log_enter('totp_scratch_delete');

	$ret = array('ok' => 0);
	while (1) {
		$headers = array();
		$r = do_req($test_url . '/op/settings/totp/sc', $data, $headers);
		if ($r === FALSE) {
			rg_log('Cannot load sc page!');
			break;
		}
		$good_token = $r['tokens']['sc'];

		$data = array(
			'delete' => 1,
			'token' => $good_token
			);
		foreach ($list as $id)
			$data['delete_list[' . $id . ']'] = 'on';
		$headers = array();
		$r = do_req($test_url . '/op/settings/totp/sc', $data, $headers);
		if (!strstr($r['body'], 'success')) {
			rg_log('Cannot delete scratch codes!');
			break;
		}

		$ret['ok'] = 1;
		break;
	}

	rg_log_exit();
	return $ret;
}