Add remote commands via APNS for Loop users

Author: codebymini

.gitignore

@@ -80,3 +80,4 @@ fastlane/test_output
 fastlane/FastlaneRunner
 
 LoopFollowConfigOverride.xcconfig
+.history

Config.xcconfig

@@ -6,4 +6,4 @@
 unique_id = ${DEVELOPMENT_TEAM}
 
 //Version (DEFAULT)
-LOOP_FOLLOW_MARKETING_VERSION = 2.8.10
+LOOP_FOLLOW_MARKETING_VERSION = 2.8.11

LoopFollow.xcodeproj/project.pbxproj

@@ -2,8 +2,21 @@
 // NightscoutUtils.swift
 // Created by bjorkert.
 
+import CommonCrypto
 import Foundation
 
+extension String {
+    var sha1: String {
+        let data = Data(utf8)
+        var digest = [UInt8](repeating: 0, count: Int(CC_SHA1_DIGEST_LENGTH))
+        data.withUnsafeBytes {
+            _ = CC_SHA1($0.baseAddress, CC_LONG(data.count), &digest)
+        }
+        let hexBytes = digest.map { String(format: "%02hhx", $0) }
+        return hexBytes.joined()
+    }
+}
+
 class NightscoutUtils {
     enum NightscoutError: Error, LocalizedError {
         case emptyAddress

LoopFollow.xcworkspace/xcshareddata/swiftpm/Package.resolved

@@ -0,0 +1,113 @@
+// LoopFollow
+// TOTPGenerator.swift
+// Created by codebymini.
+
+import CommonCrypto
+import Foundation
+
+enum TOTPGenerator {
+    /// Generates a TOTP code from a base32 secret
+    /// - Parameter secret: The base32 encoded secret
+    /// - Returns: A 6-digit TOTP code as a string
+    static func generateTOTP(secret: String) -> String {
+        // Decode base32 secret
+        let decodedSecret = base32Decode(secret)
+
+        // Get current time in 30-second intervals
+        let timeInterval = Int(Date().timeIntervalSince1970)
+        let timeStep = 30
+        let counter = timeInterval / timeStep
+
+        // Convert counter to 8-byte big-endian data
+        var counterData = Data()
+        for i in 0 ..< 8 {
+            counterData.append(UInt8((counter >> (56 - i * 8)) & 0xFF))
+        }
+
+        // Generate HMAC-SHA1
+        let key = Data(decodedSecret)
+        let hmac = generateHMACSHA1(key: key, data: counterData)
+
+        // Get the last 4 bits of the HMAC
+        let offset = Int(hmac.withUnsafeBytes { $0.last! } & 0x0F)
+
+        // Extract 4 bytes starting at the offset
+        let hmacData = Data(hmac)
+        let codeBytes = hmacData.subdata(in: offset ..< (offset + 4))
+
+        // Convert to integer and get last 6 digits
+        let code = codeBytes.withUnsafeBytes { bytes in
+            let value = bytes.load(as: UInt32.self).bigEndian
+            return Int(value & 0x7FFF_FFFF) % 1_000_000
+        }
+
+        return String(format: "%06d", code)
+    }
+
+    /// Extracts OTP from various URL formats
+    /// - Parameter urlString: The URL string to parse
+    /// - Returns: The OTP code as a string, or nil if not found
+    static func extractOTPFromURL(_ urlString: String) -> String? {
+        guard let url = URL(string: urlString),
+              let components = URLComponents(url: url, resolvingAgainstBaseURL: false)
+        else {
+            return nil
+        }
+
+        // Check for TOTP format (otpauth://)
+        if url.scheme == "otpauth" {
+            if let secretItem = components.queryItems?.first(where: { $0.name == "secret" }),
+               let secret = secretItem.value
+            {
+                return generateTOTP(secret: secret)
+            }
+        }
+
+        // Check for regular OTP format
+        if let otpItem = components.queryItems?.first(where: { $0.name == "otp" }) {
+            return otpItem.value
+        }
+
+        return nil
+    }
+
+    /// Decodes a base32 string to bytes
+    /// - Parameter string: The base32 encoded string
+    /// - Returns: Array of decoded bytes
+    private static func base32Decode(_ string: String) -> [UInt8] {
+        let alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"
+        var result: [UInt8] = []
+        var buffer = 0
+        var bitsLeft = 0
+
+        for char in string.uppercased() {
+            guard let index = alphabet.firstIndex(of: char) else { continue }
+            let value = alphabet.distance(from: alphabet.startIndex, to: index)
+
+            buffer = (buffer << 5) | value
+            bitsLeft += 5
+
+            while bitsLeft >= 8 {
+                bitsLeft -= 8
+                result.append(UInt8((buffer >> bitsLeft) & 0xFF))
+            }
+        }
+
+        return result
+    }
+
+    /// Generates HMAC-SHA1 for the given key and data
+    /// - Parameters:
+    ///   - key: The key to use for HMAC
+    ///   - data: The data to hash
+    /// - Returns: The HMAC-SHA1 result as Data
+    private static func generateHMACSHA1(key: Data, data: Data) -> Data {
+        var hmac = [UInt8](repeating: 0, count: Int(CC_SHA1_DIGEST_LENGTH))
+        key.withUnsafeBytes { keyBytes in
+            data.withUnsafeBytes { dataBytes in
+                CCHmac(CCHmacAlgorithm(kCCHmacAlgSHA1), keyBytes.baseAddress, key.count, dataBytes.baseAddress, data.count, &hmac)
+            }
+        }
+        return Data(hmac)
+    }
+}

LoopFollow/Helpers/NightscoutUtils.swift

@@ -0,0 +1,61 @@
+// LoopFollow
+// SimpleQRCodeScannerView.swift
+// Created by codebymini.
+
+import AVFoundation
+import SwiftUI
+
+struct SimpleQRCodeScannerView: UIViewControllerRepresentable {
+    class Coordinator: NSObject, AVCaptureMetadataOutputObjectsDelegate {
+        var parent: SimpleQRCodeScannerView
+
+        init(parent: SimpleQRCodeScannerView) {
+            self.parent = parent
+        }
+
+        func metadataOutput(_: AVCaptureMetadataOutput, didOutput metadataObjects: [AVMetadataObject], from _: AVCaptureConnection) {
+            if let metadataObject = metadataObjects.first as? AVMetadataMachineReadableCodeObject,
+               metadataObject.type == .qr,
+               let stringValue = metadataObject.stringValue
+            {
+                parent.completion(.success(stringValue))
+                parent.presentationMode.wrappedValue.dismiss()
+            }
+        }
+    }
+
+    @Environment(\.presentationMode) var presentationMode
+    var completion: (Result<String, Error>) -> Void
+
+    func makeCoordinator() -> Coordinator {
+        Coordinator(parent: self)
+    }
+
+    func makeUIViewController(context: Context) -> UIViewController {
+        let controller = UIViewController()
+        let session = AVCaptureSession()
+
+        guard let videoCaptureDevice = AVCaptureDevice.default(for: .video) else { return controller }
+        guard let videoInput = try? AVCaptureDeviceInput(device: videoCaptureDevice) else { return controller }
+        if session.canAddInput(videoInput) {
+            session.addInput(videoInput)
+        }
+
+        let metadataOutput = AVCaptureMetadataOutput()
+        if session.canAddOutput(metadataOutput) {
+            session.addOutput(metadataOutput)
+            metadataOutput.setMetadataObjectsDelegate(context.coordinator, queue: DispatchQueue.main)
+            metadataOutput.metadataObjectTypes = [.qr]
+        }
+
+        let previewLayer = AVCaptureVideoPreviewLayer(session: session)
+        previewLayer.frame = controller.view.layer.bounds
+        previewLayer.videoGravity = .resizeAspectFill
+        controller.view.layer.addSublayer(previewLayer)
+
+        session.startRunning()
+        return controller
+    }
+
+    func updateUIViewController(_: UIViewController, context _: Context) {}
+}

LoopFollow/Helpers/TOTPGenerator.swift

@@ -57,6 +57,8 @@
 	<string>This app requires access to contacts to update a contact image with real-time blood glucose information.</string>
 	<key>NSFaceIDUsageDescription</key>
 	<string>This app requires Face ID for secure authentication.</string>
+	<key>NSCameraUsageDescription</key>
+	<string>Used for scanning QR codes for remote authentication</string>
 	<key>NSHumanReadableCopyright</key>
 	<string></string>
 	<key>UIApplicationSceneManifest</key>

LoopFollow/Helpers/Views/SimpleQRCodeScannerView.swift

@@ -96,12 +96,12 @@ class NightscoutSettingsViewModel: ObservableObject {
     }
 
     func checkNightscoutStatus() {
-        NightscoutUtils.verifyURLAndToken { error, _, nsWriteAuth, nsAdminAuth in
+        NightscoutUtils.verifyURLAndToken { [weak self] error, _, nsWriteAuth, nsAdminAuth in
             DispatchQueue.main.async {
                 Storage.shared.nsWriteAuth.value = nsWriteAuth
                 Storage.shared.nsAdminAuth.value = nsAdminAuth
 
-                self.updateStatusLabel(error: error)
+                self?.updateStatusLabel(error: error)
             }
         }
     }