GoogleAuthenticator.cs

/*
 * Copyright (C) 2011 Colin Mackie.
 * This software is distributed under the terms of the GNU General Public License.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

using System;
using System.Collections.Generic;
using System.IO;
using System.Net;
using System.Security.Cryptography;
using System.Runtime.InteropServices;
using System.Text;
using System.Text.RegularExpressions;
using System.Xml;
using System.Xml.Serialization;

using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Engines;
using Org.BouncyCastle.Crypto.Macs;
using Org.BouncyCastle.Crypto.Parameters;
using Org.BouncyCastle.Crypto.Paddings;
using Org.BouncyCastle.Crypto.Digests;
using Org.BouncyCastle.Crypto.Generators;

#if NUNIT
using NUnit.Framework;
#endif

#if NETCF
using OpenNETCF.Security.Cryptography;
#endif

namespace WinAuth
{
  /// <summary>
  /// Class that implements Google's authenticator
  /// </summary>
  public class GoogleAuthenticator : Authenticator
  {
    /// <summary>
    /// Number of digits in code
    /// </summary>
    private const int CODE_DIGITS = 6;

		/// <summary>
		/// Number of minutes to ignore syncing if network error
		/// </summary>
		private const int SYNC_ERROR_MINUTES = 5;

    /// <summary>
    /// URL used to sync time
    /// </summary>
    private const string TIME_SYNC_URL = "http://www.google.com";

		/// <summary>
		/// Time of last Sync error
		/// </summary>
		private static DateTime _lastSyncError = DateTime.MinValue;

    #region Authenticator data

    public string Serial
    {
      get
      {
        return Base32.getInstance().Encode(SecretKey);
      }
    }

    #endregion

    /// <summary>
    /// Create a new Authenticator object
    /// </summary>
    public GoogleAuthenticator()
      : base(CODE_DIGITS)
    {
    }

    /// <summary>
    /// Enroll the authenticator with the server.
    public void Enroll(string b32key)
    {
      SecretKey = Base32.getInstance().Decode(b32key);
      Sync();
    }

    /// <summary>
    /// Synchronise this authenticator's time with Google. We update our data record with the difference from our UTC time.
    /// </summary>
		public override void Sync()
    {
			// check if data is protected
			if (this.SecretKey == null && this.EncryptedData != null)
			{
				throw new EncrpytedSecretDataException();
			}

			// don't retry for 5 minutes
			if (_lastSyncError >= DateTime.Now.AddMinutes(0 - SYNC_ERROR_MINUTES))
			{
				return;
			}

			try
			{
				// we use the Header response field from a request to www.google.come
				HttpWebRequest request = (HttpWebRequest)WebRequest.Create(TIME_SYNC_URL);
				request.Method = "GET";
				request.ContentType = "text/html";
				request.Timeout = 5000;
				// get response
				using (HttpWebResponse response = (HttpWebResponse)request.GetResponse())
				{
					// OK?
					if (response.StatusCode != HttpStatusCode.OK)
					{
						throw new ApplicationException(string.Format("{0}: {1}", (int)response.StatusCode, response.StatusDescription));
					}

					string headerdate = response.Headers["Date"];
					if (string.IsNullOrEmpty(headerdate) == false)
					{
						DateTime dt;
						if (DateTime.TryParse(headerdate, out dt) == true)
						{
							// get as ms since epoch
							long dtms = Convert.ToInt64((dt.ToUniversalTime() - new DateTime(1970, 1, 1)).TotalMilliseconds);

							// get the difference between the server time and our current time
							long serverTimeDiff = dtms - CurrentTime;

							// update the Data object
							ServerTimeDiff = serverTimeDiff;
							LastServerTime = DateTime.Now.Ticks;
						}
					}

					// clear any sync error
					_lastSyncError = DateTime.MinValue;
				}
			}
			catch (WebException )
			{
				// don't retry for a while after error
				_lastSyncError = DateTime.Now;

				// set to zero to force reset
				ServerTimeDiff = 0;
			}
    }

  }
}