implement a large chunk of the auth system itself :D

1 files changed, 27 insertions, 0 deletions

diff --git a/Psso/Challenge/Totp.php b/Psso/Challenge/Totp.php
new file mode 100644
index 0000000..4fd47f4
--- /dev/null
+++ b/Psso/Challenge/Totp.php
@@ -0,0 +1,27 @@
+<?php
+namespace Psso\Challenge;
+use Psso\{Challenge, AuthProvider, ChallengeResult, Context, Input, AuthInterface};
+
+class Totp extends Challenge {
+    public static function create(Context $context): static {
+        self::requireKnownUser($context);
+        return new self($context);
+    }
+
+    public function getInputs(): array {
+        return [new Input('otp', Input::NUMERIC, 'challenge.input.otp')];
+    }
+
+    public function validate(
+        AuthProvider $provider, array $inputData
+    ): ChallengeResult {
+        self::requireInterface($provider, AuthInterface\Totp::class);
+        $success = $provider->validateTotp(
+            $this->context->user, $inputData['otp']
+        );
+        return new ChallengeResult(
+            self::class, $success, null,
+            $success ? null : 'challenge.message.wrong-otp'
+        );
+    }
+}