Kolab Groupware OBS

roundcubemail.spec Changed

buildroundcubemailtarball.sh Changed

roundcubemail-1.5.3.tar.gz/composer.json Changed

roundcubemail-1.5.3.tar.gz/composer.lock Changed

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ,
-    "content-hash": "9c14e88b992f90d671aa18908e42ffd2",
+    "content-hash": "d9b8a5ccc1731890b71e5d779f031351",
     "packages": 
         {
             "name": "caxy/php-htmldiff",
@@ -67,6 +67,65 @@
             "time": "2019-02-20T18:52:14+00:00"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "time": "2021-02-26T10:19:33+00:00"
+        },
+        {
             "name": "endroid/qr-code",
             "version": "1.6.6",
             "source": {
@@ -121,6 +180,59 @@
             "time": "2016-05-29T07:37:18+00:00"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "time": "2018-03-08T20:38:39+00:00"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "source": {
@@ -572,6 +684,44 @@
             }
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "dist": {
@@ -977,6 +1127,36 @@
             }
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Logon screen additions",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/net_ldap3",
             "version": "v1.1.4",
             "source": {
@@ -1031,6 +1211,41 @@
             "time": "2021-11-11T09:02:56+00:00"
         },
         {
+            "name": "kolab/nextcloud_link",
+            "version": "1.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+                "reference": "f00215f711dc4d376fb667d0d97c238c0b9e791f"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "extra": {
+                "roundcube": {
+                    "min-version": "1.4.0"
+                }
+            },
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@apheleia-it.ch",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Adds a link to Nextcloud in the task menu",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/odfviewer",
             "version": "3.4.0",
             "dist": {
@@ -2774,6 +2989,67 @@
             "time": "2023-03-28T19:45:54+00:00"
         },
         {
+            "name": "spomky-labs/otphp",
+            "version": "v5.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Spomky-Labs/otphp.git",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Spomky-Labs/otphp/zipball/ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "shasum": ""
+            },
+            "require": {
+                "christian-riesen/base32": "~1.1",
+                "php": ">=5.3.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "~4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "OTPHP\\": "lib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Florent Morselli",
+                    "homepage": "https://github.com/Spomky"
+                },
+                {
+                    "name": "All contributors",
+                    "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+                }
+            ,
+            "description": "PHP OTP Library compatible with Google Authenticator",
+            "homepage": "https://github.com/Spomky-Labs/otphp",
+            "keywords": 
+                "RFC 4226",
+                "RFC 6238",
+                "hotp",
+                "otp",
+                "totp"
+            ,
+            "support": {
+                "issues": "https://github.com/Spomky-Labs/otphp/issues",
+                "source": "https://github.com/Spomky-Labs/otphp/tree/v5.0.1"
+            },
+            "time": "2015-06-26T11:44:37+00:00"
+        },
+        {
             "name": "symfony/polyfill-intl-idn",
             "version": "v1.27.0",
             "source": {

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/README.md Added

@@ -0,0 +1,113 @@
+Kolab Multi-Factor Authentication Plugin
+========================================
+
+The plugin is designed to be a generic container for different 2nd factor 
+authentication mechanisms paired with different ways to store the related 
+data for Roundcube user accounts. Both drivers and storage backends are derived 
+from abstract classes which define the common interface and are configurable.
+
+Drivers
+-------
+
+Multiple methods for 2nd factor authentication can be enabled for the users 
+to select from. The basic implementation covers TOTP, HOTP and Yubikey methods.
+
+TOTP (RFC 6238) and HOTP (RFC 4226) can be used in conjunction with freely available 
+mobile phone apps like FreeOTP (TOTP only!) or Google Authenticator. To provision 
+the app with your account settings, a QR code is displayed which can be scanned 
+with the mobile phone camera.
+
+The Yubikey driver uses the Yubico Validation Service either by using the public 
+YubiCloud API or another locally hosted verification server. The host(s) to use 
+for validation are configurable.
+
+
+Storage Backends
+----------------
+
+Some authentication methods require to store secret data per user account on the 
+server. For this, one of different storage backends can be selected:
+
+**Roundcube**
+
+The simplest way is to store authentication secrets and configuration in the 
+user preferences of Roundcube itself.
+
+**LDAP**
+
+For an external storage option, the LDAP module can be used. This keeps the 
+authentication data separated from the Roundcube user database. See //LDAP Storage// 
+below for more information. The LDAP connection parameters are defined through the 
+`kolab_2fa_storage_config` config option.
+
+
+Installation
+------------
+
+After placing the plugin contents into Roundcube's plugins directory, the 3rd party 
+libraries need to be installed using Composer:
+
+```
+$ composer require "endroid/qrcode" "~1.5.0" --no-update
+$ composer require "spomky-labs/otphp" "~5.0.0" --no-update
+$ composer require "enygma/yubikey" "~3.2"
+```
+
+See the `composer.json` file for the actual module names and versions.
+
+
+Configuration
+-------------
+
+Copy the sample `config.inc.php.dist` file into `config.inc.php` and adjust the 
+settings according to your desired setup. All options are described with inline 
+comments directly in the sample file.
+
+When using the LDAP storage together with a Kolab installation, you may want to save 
+an additional LDAP lookup for authentication factors on every login, the LDAP driver 
+can assign roles to the user record when registering authentication factors
+(see `user_roles` storage config option). With the following additions to the 
+`kolab_auth` plugin config, these roles can be used to determine whether the user 
+has multi-factor authentication enabled:
+
+```
+// Disable lokkups by default:
+$config'kolab_2fa_check' = false;
+
+// Enable 2nd factor lookup on a role-by-role basis
+$config'kolab_auth_role_settings' = array(
+    'cn=totp-user,dc=example,dc=org' => array(
+        'kolab_2fa_check' => array(
+            'mode' => 'override',
+            'value' => true,
+        ),
+    ),
+);
+```
+
+LDAP Storage
+------------
+
+Define an `organizationalunit` with DN `ou=Tokens,dc=example,dc=org` to store 
+all authentication tokens.
+
+For token records, the https://git.fedorahosted.org/cgit/freeipa.git/tree/install/share/70ipaotp.ldif | FreeIPA OTP schema 
+can be used. Please install this schema in your Kolab LDAP directory.
+
+This is an example record for a TOTP token registered to user doe@example.org:
+
+```
+dn: ipatokenUniqueID=totp:c4a1ced768a0da55df662e73,ou=Tokens,dc=example,dc=org
+objectClass: top
+objectClass: ipaToken
+objectClass: ipatokenTOTP
+objectClass: ldapSubEntry
+cn: Mobile App (TOTP)
+ipatokenUniqueID: totp:c4a1ced768a0da55df662e73
+ipatokenOwner: uid=doe,ou=People,dc=example,dc=org
+ipatokenNotBefore: 201506110211Z
+ipatokenOTPkey: 4T5CI7SOKWYQ5JTM
+ipatokenDisabled: TRUE
+```
+
+

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/config.inc.php Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/config.inc.php.dist Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/kolab2fa.js Added

@@ -0,0 +1,367 @@
+/**
+ * Kolab 2-Factor-Authentication plugin client functions
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * @licstart  The following is the entire license notice for the
+ * JavaScript code in this page.
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ * @licend  The above is the entire license notice
+ * for the JavaScript code in this page.
+ */
+
+window.rcmail && rcmail.addEventListener('init', function(evt) {
+    var highsec_call_stack = ;
+    var highsec_dialog;
+    var factor_dialog;
+
+    if (!rcmail.env.kolab_2fa_factors) {
+        rcmail.env.kolab_2fa_factors = {};
+    }
+
+    /**
+     * Equivalend of PHP time()
+     */
+    function time() {
+        return Math.round(new Date().getTime() / 1000);
+    }
+
+    /**
+     * Render the settings UI
+     */
+    function render() {
+        var table = $('#kolab2fa-factors tbody');
+        table.html('');
+
+        var rows = 0;
+        $.each(rcmail.env.kolab_2fa_factors, function(id, props) {
+            if (props.active) {
+                var tr = $('<tr>').addClass(props.method).appendTo(table),
+                    button = $('<a class="button icon delete">').attr({href: '#', rel: id})
+                        .append($('<span class="inner">').text(rcmail.get_label('remove','kolab_2fa')));
+
+                $('<td>').addClass('name').text(props.label || props.name).appendTo(tr);
+                $('<td>').addClass('created').text(props.created || '??').appendTo(tr);
+                $('<td>').addClass('actions buttons-cell').append(button).appendTo(tr);
+                rows++;
+            }
+        });
+
+        table.parent()(rows > 0 ? 'show' : 'hide')();
+    }
+
+    /**
+     * Open dialog to add the given authentication factor
+     */
+    function add_factor(method) {
+        var lock, form = $('#kolab2fa-prop-' + method),
+            props = rcmail.env.kolab_2fa_factorsmethod;
+
+        if (form.length) {
+            form.get(0).reset();
+            form.find('img.qrcode').attr('src', 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7');
+            form.off('submit');
+
+            factor_dialog = rcmail.show_popup_dialog(
+                form.show(),
+                rcmail.get_label('addfactor', 'kolab_2fa'),
+                
+                    {
+                        text: rcmail.gettext('save', 'kolab_2fa'),
+                        'class': 'mainaction save',
+                        click: function(e) {
+                            save_data(method);
+                        }
+                    },
+                    {
+                        text: rcmail.gettext('cancel'),
+                        'class': 'cancel',
+                        click: function() {
+                            factor_dialog.dialog('close');
+                        }
+                    }
+                ,
+                {
+                    open: function(event, ui) {
+                        $(event.target).find('inputname="_verify_code"').keypress(function(e) {
+                            if (e.which == 13) {
+                                $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                            }
+                        });
+                    },
+                    close: function(event, ui) {
+                        form.hide().appendTo(document.body);
+                        factor_dialog = null;
+                    }
+                }
+            )
+            .data('method', method)
+            .data('timestamp', time());
+
+            form.on('submit', function(e) {
+                save_data(method);
+                return false;
+            });
+
+            // load generated data
+            lock = rcmail.set_busy(true, 'loading');
+            rcmail.http_post('plugin.kolab-2fa-data', { _method: method }, lock);
+        }
+    }
+
+    /**
+     * Remove the given factor from the account
+     */
+    function remove_factor(id) {
+        var lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', { _method: id, _data: 'false' }, lock);
+    }
+
+    /**
+     * Submit factor settings form
+     */
+    function save_data(method) {
+        var lock, data, form = $('#kolab2fa-prop-' + method),
+            verify = form.find('inputname="_verify_code"');
+
+        if (verify.length && !verify.val().length) {
+            alert(rcmail.get_label('verifycodemissing','kolab_2fa'));
+            verify.select();
+            return false;
+        }
+
+        data = form_data(form);
+        lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', {
+            _method: data.id || method,
+            _data: JSON.stringify(data),
+            _verify_code: verify.val(),
+            _timestamp: factor_dialog ? factor_dialog.data('timestamp') : null
+        }, lock);
+    }
+
+    /**
+     * Collect all factor properties from the form
+     */
+    function form_data(form)
+    {
+        var data = {};
+        form.find('input, select').each(function(i, elem) {
+            if (elem.name.indexOf('_prop') === 0) {
+                k = elem.name.match(/\(a-z0-9_.-+)\$/i) ? RegExp.$1 : null;
+                if (k) {
+                    datak = elem.tagName == 'SELECT' ? $('option:selected', elem).val() : $(elem).val();
+                }
+            }
+        });
+
+        return data;
+    }
+
+    /**
+     * Execute the given function after the user authorized the session with a 2nd factor
+     */
+    function require_high_security(func, exclude)
+    {
+        // request 2nd factor auth
+        if (rcmail.env.session_secured !== true && rcmail.env.session_secured < time() - 180) {
+            var method, name;
+
+            // find an active factor
+            $.each(rcmail.env.kolab_2fa_factors, function(id, prop) {
+                if (prop.active && !method || method == exclude) {
+                    method = id;
+                    name = prop.label || prop.name;
+                    if (!exclude || id !== exclude) {
+                        return true;
+                    }
+                }
+            });
+
+            // we have a registered factor, use it
+            if (method) {
+                highsec_call_stack.push(func);
+
+                // TODO: list all active factors to choose from
+                var html = String($('#kolab2fa-highsecuritydialog').html()).replace('$name', name);
+
+                highsec_dialog = rcmail.show_popup_dialog(
+                    html,
+                    rcmail.get_label('highsecurityrequired', 'kolab_2fa'),
+                    
+                        {
+                            text: rcmail.gettext('enterhighsecurity', 'kolab_2fa'),
+                            click: function(e) {
+                                var lock, code = highsec_dialog.find('inputname="_code"').val();
+
+                                if (code && code.length) {
+                                    lock = rcmail.set_busy(true, 'verifying');
+                                    rcmail.http_post('plugin.kolab-2fa-verify', {
+                                        _method: method,
+                                        _code: code,
+                                        _session: 1,
+                                        _timestamp: highsec_dialog.data('timestamp')
+                                    }, lock);
+                                }
+                                else {
+                                    highsec_dialog.find('inputname="_code"').select();
+                                }
+                            },
+                            'class': 'mainaction save'
+                        },
+                        {
+                            text: rcmail.gettext('cancel'),
+                            'class': 'cancel',
+                            click: function() {
+                                highsec_dialog.dialog('close');
+                            }
+                        }
+                    ,
+                    {
+                        open: function(event, ui) {
+                            // submit code on <Enter>
+                            $(event.target).find('inputname="_code"').keypress(function(e) {
+                                if (e.which == 13) {
+                                    $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                                }
+                            }).select();
+                        },
+                        close: function(event, ui) {
+                            $(this).remove();
+                            highsec_dialog = null;
+                            highsec_call_stack.pop();
+                        }
+                    }
+                ).data('timestamp', time());
+
+                return false;
+            }
+        }
+
+        // just trigger the callback
+        func.call(this);
+    };
+
+    // callback for factor data provided by the server
+    rcmail.addEventListener('plugin.render_data', function(data) {
+        var method = data.method,
+            form = $('#kolab2fa-prop-' + method);
+
+        if (form.length) {
+            $.each(data, function(field, value) {
+                form.find('name="_prop' + field + '"').val(value);
+            });
+
+            if (data.qrcode) {
+                $('img.qrcoderel='+method+'').attr('src', "data:image/png;base64," + data.qrcode);
+            }
+        }
+        else if (window.console) {
+            console.error("Cannot assign auth data", data);
+        }
+    });
+
+    // callback for save action
+    rcmail.addEventListener('plugin.save_success', function(data) {
+        if (!data.active && rcmail.env.kolab_2fa_factorsdata.id) {
+            delete rcmail.env.kolab_2fa_factorsdata.id;
+        }
+        else if (rcmail.env.kolab_2fa_factorsdata.id) {
+            $.extend(rcmail.env.kolab_2fa_factorsdata.id, data);
+        }
+        else {
+            rcmail.env.kolab_2fa_factorsdata.id = data;
+        }
+
+        if (factor_dialog) {
+            factor_dialog.dialog('close');
+        }
+
+        render();
+    });
+
+    // callback for verify action
+    rcmail.addEventListener('plugin.verify_response', function(data) {
+        // execute high-security call stack and close dialog
+        if (data.success && highsec_dialog && highsec_dialog.is(':visible')) {
+            var func;
+            while (highsec_call_stack.length) {
+                func = highsec_call_stack.pop();
+                func();
+            }
+
+            highsec_dialog.dialog('close');
+            rcmail.env.session_secured = time();
+        }
+        else {
+            rcmail.display_message(data.message, data.success ? 'confirmation' : 'warning');
+
+            if (highsec_dialog && highsec_dialog.is(':visible')) {
+                highsec_dialog.find('inputname="_code"').val('').select();
+            }
+            else {
+                $('#kolab2fa-prop-' + data.method + ' input.k2fa-verify').val('').select();
+            }
+        }
+    });
+
+    // callback for save failure
+    rcmail.addEventListener('plugin.reset_form', function(method) {
+        if (method && rcmail.env.kolab_2fa_factorsmethod) {
+            rcmail.env.kolab_2fa_factorsmethod.active = false;
+        }
+
+        render();
+    });
+
+    // handler for selections
+    $('#kolab2fa-add').change(function() {
+        var method = $('option:selected', this).val();
+
+        // require auth verification
+        require_high_security(function() {
+            add_factor(method);
+        });
+
+        this.selectedIndex = 0;
+    });
+
+    // handler for delete button clicks
+    $('#kolab2fa-factors tbody').on('click', '.button.delete', function(e) {
+        var id = $(this).attr('rel');
+
+        // require auth verification
+        require_high_security(function() {
+            if (confirm(rcmail.get_label('authremoveconfirm', 'kolab_2fa'))) {
+                remove_factor(id);
+            }
+        }, id);
+
+        return false;
+    });
+
+    // submit verification code on <Enter>
+    $('.propform input.k2fa-verify').keypress(function(e) {
+        if (e.which == 13) {
+            $(this).closest('.propform').find('.button.verify').click();
+        }
+    });
+
+    // render list initially
+    render();
+});
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/kolab_2fa.php Added

@@ -0,0 +1,795 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class kolab_2fa extends rcube_plugin
+{
+    public $task = '(login|settings)';
+
+    protected $login_verified = null;
+    protected $login_factors = array();
+    protected $drivers = array();
+    protected $storage;
+
+    /**
+     * Plugin init
+     */
+    public function init()
+    {
+        $this->load_config();
+        $this->add_hook('startup', array($this, 'startup'));
+    }
+
+    /**
+     * Startup hook
+     */
+    public function startup($args)
+    {
+        $rcmail = rcmail::get_instance();
+
+        // register library namespace to autoloader
+        $loader = include(INSTALL_PATH . 'vendor/autoload.php');
+        $loader->set('Kolab2FA', array($this->home . '/lib'));
+
+        if ($args'task' === 'login' && $this->api->output) {
+            $this->add_texts('localization/', false);
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            // process 2nd factor auth step after regular login
+            if ($args'action' === 'plugin.kolab-2fa-login' /* || !empty($_SESSION'kolab_2fa_factors') */) {
+                return $this->login_verify($args);
+            }
+        }
+        else if ($args'task' === 'settings') {
+            $this->add_texts('localization/', !$this->api->output->ajax_call);
+            $this->add_hook('settings_actions', array($this, 'settings_actions'));
+            $this->register_action('plugin.kolab-2fa', array($this, 'settings_view'));
+            $this->register_action('plugin.kolab-2fa-data', array($this, 'settings_data'));
+            $this->register_action('plugin.kolab-2fa-save', array($this, 'settings_save'));
+            $this->register_action('plugin.kolab-2fa-verify', array($this, 'settings_verify'));
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for 'authenticate' plugin hook.
+     *
+     * ATTENTION: needs to be called *after* kolab_auth::authenticate()
+     */
+    public function authenticate($args)
+    {
+        // nothing to be done for me
+        if ($args'abort' || $this->login_verified !== null) {
+            return $args;
+        }
+
+        $rcmail = rcmail::get_instance();
+
+        // parse $host URL
+        $a_host = parse_url($args'host');
+        $hostname = $_SESSION'hostname' = $a_host'host' ?: $args'host';
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $args'user';
+
+        // Convert username to lowercase. Copied from rcmail::login()
+        $login_lc = $rcmail->config->get('login_lc', 2);
+        if ($login_lc) {
+            if ($login_lc == 2 || $login_lc === true) {
+                $username = mb_strtolower($username);
+            }
+            else if (strpos($username, '@')) {
+                // lowercase domain name
+                list($local, $domain) = explode('@', $username);
+                $username = $local . '@' . mb_strtolower($domain);
+            }
+        }
+
+        // 2a. let plugins provide the list of active authentication factors
+        $lookup = $rcmail->plugins->exec_hook('kolab_2fa_lookup', array(
+            'user'    => $username,
+            'host'    => $hostname,
+            'factors' => null,
+            'check'   => $rcmail->config->get('kolab_2fa_check', true),
+        ));
+
+        if (isset($lookup'factors')) {
+            $factors = (array)$lookup'factors';
+        }
+        // 2b. check storage if this user has 2FA enabled
+        else if ($lookup'check' !== false && ($storage = $this->get_storage($username))) {
+            $factors = (array)$storage->enumerate();
+        }
+
+        if (count($factors) > 0) {
+            $args'abort' = true;
+            $factors = array_unique($factors);
+
+            // 3. flag session for 2nd factor verification
+            $_SESSION'kolab_2fa_time'    = time();
+            $_SESSION'kolab_2fa_nonce'   = bin2hex(openssl_random_pseudo_bytes(32));
+            $_SESSION'kolab_2fa_factors' = $factors;
+
+            $_SESSION'username' = $args'user';
+            $_SESSION'host'     = $args'host';
+            $_SESSION'password' = $rcmail->encrypt($args'pass');
+
+            // 4. render to 2nd auth step
+            $this->login_step($factors);
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for the additional login step requesting the 2FA verification code
+     */
+    public function login_step($factors)
+    {
+        // replace handler for login form
+        $this->login_factors = array_values($factors);
+        $this->api->output->add_handler('loginform', array($this, 'auth_form'));
+
+        // focus the code input field on load
+        $this->api->output->add_script('$("input.kolab2facode").first().select();', 'docready');
+
+        $this->api->output->send('login');
+    }
+
+    /**
+     * Process the 2nd factor code verification form submission
+     */
+    public function login_verify($args)
+    {
+        $this->login_verified = false;
+
+        $rcmail = rcmail::get_instance();
+
+        $time     = $_SESSION'kolab_2fa_time';
+        $nonce    = $_SESSION'kolab_2fa_nonce';
+        $factors  = (array)$_SESSION'kolab_2fa_factors';
+        $expired  = $time < time() - $rcmail->config->get('kolab_2fa_timeout', 120);
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $_SESSION'username';
+
+        if (!empty($factors) && !empty($nonce) && !$expired) {
+            // TODO: check signature
+
+            // try to verify each configured factor
+            foreach ($factors as $factor) {
+                list($method) = explode(':', $factor, 2);
+
+                // verify the submitted code
+                $code = rcube_utils::get_input_value("_${nonce}_${method}", rcube_utils::INPUT_POST);
+                $this->login_verified = $this->verify_factor_auth($factor, $code, $username);
+
+                // accept first successful method
+                if ($this->login_verified) {
+                    break;
+                }
+            }
+        }
+
+        if ($this->login_verified) {
+            // restore POST data from session
+            $_POST'_user' = $_SESSION'username';
+            $_POST'_host' = $_SESSION'host';
+            $_POST'_pass' = $rcmail->decrypt($_SESSION'password');
+
+            if ($_SESSION'kolab_auth_admin') {
+                $_POST'_user'    = $_SESSION'kolab_auth_admin';
+                $_POST'_loginas' = $_SESSION'username';
+            }
+        }
+
+        // proceed with regular login ...
+        $args'action' = 'login';
+
+        // session data will be reset in index.php thus additional
+        // auth attempts with intercepted data will be rejected
+        // $rcmail->kill_session();
+
+        // we can't display any custom error messages on failed login
+        // but that's actually desired to expose as little information as possible
+
+        return $args;
+    }
+
+    /**
+     * Helper method to verify the given method/code tuple
+     */
+    protected function verify_factor_auth($method, $code, $username)
+    {
+        if (strlen($code) && ($driver = $this->get_driver($method))) {
+            // set properties from login
+            $driver->username = $username;
+
+            try {
+                // verify the submitted code
+                return $driver->verify($code, $_SESSION'kolab_2fa_time');
+            }
+            catch (Exception $e) {
+                rcube::raise_error($e, true, false);
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * Render 2nd factor authentication form in place of the regular login form
+     */
+    public function auth_form($attrib = array())
+    {
+        $form_name  = !empty($attrib'form') ? $attrib'form' : 'form';
+        $nonce = $_SESSION'kolab_2fa_nonce';
+
+        $methods = array_unique(array_map(function($factor) {
+                list($method, $id) = explode(':', $factor);
+                return $method;
+            },
+            $this->login_factors
+        ));
+
+        // forward these values as the regular login screen would submit them
+        $input_task   = new html_hiddenfield(array('name' => '_task', 'value' => 'login'));
+        $input_action = new html_hiddenfield(array('name' => '_action', 'value' => 'plugin.kolab-2fa-login'));
+        $input_tzone  = new html_hiddenfield(array('name' => '_timezone', 'id' => 'rcmlogintz', 'value' => rcube_utils::get_input_value('_timezone', rcube_utils::INPUT_POST)));
+        $input_url    = new html_hiddenfield(array('name' => '_url', 'id' => 'rcmloginurl', 'value' => rcube_utils::get_input_value('_url', rcube_utils::INPUT_POST)));
+
+        // create HTML table with two cols
+        $table = new html_table(array('cols' => 2));
+        $required = count($methods) > 1 ? null : 'required';
+
+        // render input for each configured auth method
+        foreach ($methods as $i => $method) {
+            if ($row++ > 0) {
+                $table->add(array('colspan' => 2, 'class' => 'title hint', 'style' => 'text-align:center'),
+                    $this->gettext('or'));
+            }
+
+            $field_id = "rcmlogin2fa$method";
+            $input_code = new html_inputfield(array(
+                    'name'         => "_${nonce}_${method}",
+                    'class'        => 'kolab2facode',
+                    'id'           => $field_id,
+                    'required'     => $required,
+                    'autocomplete' => 'off',
+                    'data-icon'    => 'key' // for Elastic
+                ) + $attrib);
+            $table->add('title', html::label($field_id, html::quote($this->gettext($method))));
+            $table->add('input', $input_code->show(''));
+        }
+
+        $out  = $input_task->show();
+        $out .= $input_action->show();
+        $out .= $input_tzone->show();
+        $out .= $input_url->show();
+        $out .= $table->show();
+
+        // add submit button
+        if (rcube_utils::get_boolean($attrib'submit')) {
+            $out .= html::p('formbuttons', html::tag('button', array(
+                    'type'  => 'submit',
+                    'id'    => 'rcmloginsubmit',
+                    'class' => 'button mainaction save',
+                ), $this->gettext('continue'))
+            );
+        }
+
+        // surround html output with a form tag
+        if (empty($attrib'form')) {
+            $out = $this->api->output->form_tag(array('name' => $form_name, 'method' => 'post'), $out);
+        }
+
+        return $out;
+    }
+
+    /**
+     * Load driver class for the given authentication factor
+     *
+     * @param string $factor Factor identifier (<method>:<id>)
+     * @return Kolab2FA\Driver\Base
+     */
+    public function get_driver($factor)
+    {
+        list($method) = explode(':', $factor, 2);
+
+        $rcmail = rcmail::get_instance();
+
+        if ($this->drivers$factor) {
+            return $this->drivers$factor;
+        }
+
+        $config = $rcmail->config->get('kolab_2fa_' . $method, array());
+
+        // use product name as "issuer""
+        if (empty($config'issuer')) {
+            $config'issuer' = $rcmail->config->get('product_name');
+        }
+
+        try {
+            // TODO: use external auth service if configured
+
+            $driver = \Kolab2FA\Driver\Base::factory($factor, $config);
+
+            // attach storage
+            $driver->storage = $this->get_storage();
+
+            if ($rcmail->user->ID) {
+                $driver->username  = $rcmail->get_user_name();
+            }
+
+            $this->drivers$factor = $driver;
+            return $driver;
+        }
+        catch (Exception $e) {
+            $error = strval($e);
+        }
+
+        rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'file' => __FILE__,
+                'line' => __LINE__,
+                'message' => $error),
+            true, false);
+
+        return false;
+    }
+
+    /**
+     * Getter for a storage instance singleton
+     */
+    public function get_storage($for = null)
+    {
+        if (!isset($this->storage) || (!empty($for) && $this->storage->username !== $for)) {
+            $rcmail = rcmail::get_instance();
+            try {
+                $this->storage = \Kolab2FA\Storage\Base::factory(
+                    $rcmail->config->get('kolab_2fa_storage', 'roundcube'),
+                    $rcmail->config->get('kolab_2fa_storage_config', array())
+                );
+
+                $this->storage->set_username($for);
+                $this->storage->set_logger(new \Kolab2FA\Log\RcubeLogger());
+
+                // set user properties from active session
+                if (!empty($_SESSION'kolab_dn')) {
+                    $this->storage->userdn = $_SESSION'kolab_dn';
+                }
+            }
+            catch (Exception $e) {
+                $this->storage = false;
+
+                rcube::raise_error(array(
+                        'code' => 600,
+                        'type' => 'php',
+                        'file' => __FILE__,
+                        'line' => __LINE__,
+                        'message' => $error),
+                    true, false);
+            }
+        }
+
+        return $this->storage;
+    }
+
+    /**
+     * Handler for 'settings_actions' hook
+     */
+    public function settings_actions($args)
+    {
+        // register as settings action
+        $args'actions' = array(
+            'action' => 'plugin.kolab-2fa',
+            'class'  => 'twofactorauth',
+            'label'  => 'settingslist',
+            'title'  => 'settingstitle',
+            'domain' => 'kolab_2fa',
+        );
+
+        return $args;
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa requests
+     */
+    public function settings_view()
+    {
+        $this->register_handler('plugin.settingsform', array($this, 'settings_form'));
+        $this->register_handler('plugin.settingslist', array($this, 'settings_list'));
+        $this->register_handler('plugin.factoradder', array($this, 'settings_factoradder'));
+        $this->register_handler('plugin.highsecuritydialog', array($this, 'settings_highsecuritydialog'));
+
+        $this->include_script('kolab2fa.js');
+        $this->include_stylesheet($this->local_skin_path() . '/kolab2fa.css');
+
+        $this->api->output->set_env('session_secured', $this->check_secure_mode());
+        $this->api->output->add_label('save','cancel');
+        $this->api->output->set_pagetitle($this->gettext('settingstitle'));
+        $this->api->output->send('kolab_2fa.config');
+    }
+
+    /**
+     * Render the menu to add another authentication factor
+     */
+    public function settings_factoradder($attrib)
+    {
+        $rcmail = rcmail::get_instance();
+
+        $attrib'id' = 'kolab2fa-add';
+
+        $select = new html_select($attrib);
+        $select->add($this->gettext('addfactor') . '...', '');
+        foreach ((array)$rcmail->config->get('kolab_2fa_drivers', array()) as $method) {
+            $select->add($this->gettext($method), $method);
+        }
+
+        return $select->show();
+    }
+
+    /**
+     * Render a list of active factor this user has configured
+     */
+    public function settings_list($attrib = array())
+    {
+        $attrib'id' = 'kolab2fa-factors';
+        $table = new html_table(array('cols' => 3));
+
+        $table->add_header('name', $this->gettext('factor'));
+        $table->add_header('created', $this->gettext('created'));
+        $table->add_header('actions', '');
+
+        return $table->show($attrib);
+    }
+
+    /**
+     * Render the settings form template object
+     */
+    public function settings_form($attrib = array())
+    {
+        $rcmail = rcmail::get_instance();
+        $storage = $this->get_storage($rcmail->get_user_name());
+        $factors = $storage ? (array)$storage->enumerate() : array();
+        $drivers = (array)$rcmail->config->get('kolab_2fa_drivers', array());
+        $env_methods = array();
+
+        foreach ($drivers as $j => $method) {
+            $out .= $this->settings_factor($method, $attrib);
+            $env_methods$method = array(
+                'name'   => $this->gettext($method),
+                'active' => 0,
+            );
+        }
+
+        $me = $this;
+        $factors = array_combine(
+            $factors,
+            array_map(function($id) use ($me, &$env_methods) {
+                $props = array('id' => $id);
+
+                if ($driver = $me->get_driver($id)) {
+                    $props += $this->format_props($driver->props());
+                    $props'method' = $driver->method;
+                    $props'name' = $me->gettext($driver->method);
+                    $env_methods$driver->method'active'++;
+                }
+
+                return $props;
+            }, $factors)
+        );
+
+        $this->api->output->set_env('kolab_2fa_methods', $env_methods);
+        $this->api->output->set_env('kolab_2fa_factors', !empty($factors) ? $factors : null);
+
+        return html::div(array('id' => 'kolab2fapropform'), $out);
+    }
+
+    /**
+     * Render the settings UI for the given method/driver
+     */
+    protected function settings_factor($method, $attrib)
+    {
+        $out = '';
+        $rcmail = rcmail::get_instance();
+        $attrib += array('class' => 'propform');
+
+        if ($driver = $this->get_driver($method)) {
+            $table = new html_table(array('cols' => 2, 'class' => $attrib'class'));
+
+            foreach ($driver->props() as $field => $prop) {
+                if (!$prop'editable') {
+                    continue;
+                }
+
+                switch ($prop'type') {
+                    case 'boolean':
+                    case 'checkbox':
+                        $input = new html_checkbox(array('value' => '1'));
+                        break;
+
+                    case 'enum':
+                    case 'select':
+                        $input = new html_select(array('disabled' => $prop'readonly'));
+                        $input->add(array_map(array($this, 'gettext'), $prop'options'), $prop'options');
+                        break;
+
+                    default:
+                        $input = new html_inputfield(array('size' => $prop'size' ?: 30, 'disabled' => !$prop'editable'));
+                }
+
+                $explain_label = $field . 'explain' . $method;
+                $explain_html = $rcmail->text_exists($explain_label, 'kolab_2fa') ? html::div('explain form-text', $this->gettext($explain_label)) : '';
+
+                $field_id = 'rcmk2fa' . $method . $field;
+                $table->add('title', html::label($field_id, $this->gettext($field)));
+                $table->add(null, $input->show('', array('id' => $field_id, 'name' => "_prop$field")) . $explain_html);
+            }
+
+            // add row for displaying the QR code
+            if (method_exists($driver, 'get_provisioning_uri')) {
+                $table->add('title', $this->gettext('qrcode'));
+                $table->add(null,
+                    html::div('explain form-text', $this->gettext("qrcodeexplain$method"))
+                    . html::tag('img', array('src' => 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7', 'class' => 'qrcode', 'rel' => $method))
+                );
+
+                // add row for testing the factor
+                $field_id = 'rcmk2faverify' . $method;
+                $table->add('title', html::label($field_id, $this->gettext('verifycode')));
+                $table->add(null,
+                    html::tag('input', array('type' => 'text', 'name' => '_verify_code', 'id' => $field_id, 'class' => 'k2fa-verify', 'size' => 20, 'required' => true)) .
+                    html::div('explain form-text', $this->gettext("verifycodeexplain$method"))
+                );
+
+            }
+
+            $input_id = new html_hiddenfield(array('name' => '_propid', 'value' => ''));
+
+            $out .= html::tag('form', array(
+                    'method' => 'post',
+                    'action' => '#',
+                    'id'     => 'kolab2fa-prop-' . $method,
+                    'style'  => 'display:none',
+                    'class'  => 'propform',
+                ),
+                html::tag('fieldset', array(),
+                    html::tag('legend', array(), $this->gettext($method)) .
+                    html::div('factorprop', $table->show()) .
+                    $input_id->show()
+                )
+            );
+        }
+
+        return $out;
+    }
+
+    /**
+     * Render the high-security-dialog content
+     */
+    public function settings_highsecuritydialog($attrib = array())
+    {
+        $attrib += array('id' => 'kolab2fa-highsecuritydialog');
+
+        $field_id = 'rcmk2facode';
+        $input = new html_inputfield(array('name' => '_code', 'id' => $field_id, 'class' => 'verifycode', 'size' => 20));
+        $label = html::label(array('for' => $field_id, 'class' => 'col-form-label col-sm-4'), '$name');
+
+        return html::div($attrib,
+            html::div('explain form-text', $this->gettext('highsecuritydialog'))
+            . html::div('propform row form-group', $label . html::div('col-sm-8', $input->show('')))
+        );
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-save requests
+     */
+    public function settings_save()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+        $data   = @json_decode(rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST), true);
+
+        $rcmail = rcmail::get_instance();
+        $storage = $this->get_storage($rcmail->get_user_name());
+        $success = false;
+        $errors = 0;
+        $save_data = array();
+
+        if ($driver = $this->get_driver($method)) {
+            if ($data === false) {
+                if ($this->check_secure_mode()) {
+                    // remove method from active factors and clear stored settings
+                    $success = $driver->clear();
+                }
+                else {
+                    $errors++;
+                }
+            }
+            else {
+                // verify the submitted code before saving
+                $verify_code = rcube_utils::get_input_value('_verify_code', rcube_utils::INPUT_POST);
+                $timestamp = intval(rcube_utils::get_input_value('_timestamp', rcube_utils::INPUT_POST));
+                if (!empty($verify_code)) {
+                    if (!$driver->verify($verify_code, $timestamp)) {
+                        $this->api->output->command('plugin.verify_response', array(
+                            'id'      => $driver->id,
+                            'method'  => $driver->method,
+                            'success' => false,
+                            'message' => str_replace('$method', $this->gettext($driver->method), $this->gettext('codeverificationfailed'))
+                        ));
+                        $this->api->output->send();
+                    }
+                }
+
+                foreach ($data as $prop => $value) {
+                    if (!$driver->set($prop, $value)) {
+                        $errors++;
+                    }
+                }
+
+                $driver->set('active', true);
+            }
+
+            // commit changes to the user properties
+            if (!$errors) {
+                if ($success = $driver->commit()) {
+                    $save_data = $data !== false ? $this->format_props($driver->props()) : array();
+                }
+                else {
+                    $errors++;
+                }
+            }
+        }
+
+        if ($success) {
+            $this->api->output->show_message($data === false ? $this->gettext('factorremovesuccess') : $this->gettext('factorsavesuccess'), 'confirmation');
+            $this->api->output->command('plugin.save_success', array(
+                    'method' => $method,
+                    'active' => $data !== false,
+                    'id'     => $driver->id) + $save_data);
+        }
+        else if ($errors) {
+            $this->api->output->show_message($this->gettext('factorsaveerror'), 'error');
+            $this->api->output->command('plugin.reset_form', $data !== false ? $method : null);
+        }
+
+        $this->api->output->send();
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-data requests
+     */
+    public function settings_data()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+
+        if ($driver = $this->get_driver($method)) {
+            $data = array('method' => $method, 'id' => $driver->id);
+
+            foreach ($driver->props(true) as $field => $prop) {
+                $data$field = $prop'text' ?: $prop'value';
+            }
+
+            // generate QR code for provisioning URI
+            if (method_exists($driver, 'get_provisioning_uri')) {
+                try {
+                    $uri = $driver->get_provisioning_uri();
+
+                    $qr = new Endroid\QrCode\QrCode();
+                    $qr->setText($uri)
+                       ->setSize(240)
+                       ->setPadding(10)
+                       ->setErrorCorrection('high')
+                       ->setForegroundColor(array('r' => 0, 'g' => 0, 'b' => 0, 'a' => 0))
+                       ->setBackgroundColor(array('r' => 255, 'g' => 255, 'b' => 255, 'a' => 0));
+                    $data'qrcode' = base64_encode($qr->get());
+                }
+                catch (Exception $e) {
+                    rcube::raise_error($e, true, false);
+                }
+            }
+
+            $this->api->output->command('plugin.render_data', $data);
+        }
+
+        $this->api->output->send();
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-verify requests
+     */
+    public function settings_verify()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+        $timestamp = intval(rcube_utils::get_input_value('_timestamp', rcube_utils::INPUT_POST));
+        $success = false;
+
+        if ($driver = $this->get_driver($method)) {
+            $data = @json_decode(rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST), true);
+            if (is_array($data)) {
+                foreach ($data as $key => $value) {
+                    if ($value !== '******') {
+                        $driver->$key = $value;
+                    }
+                }
+            }
+
+            $success = $driver->verify(rcube_utils::get_input_value('_code', rcube_utils::INPUT_POST), $timestamp);
+            $method = $driver->method;
+        }
+
+        // put session into high-security mode
+        if ($success && !empty($_POST'_session')) {
+            $_SESSION'kolab_2fa_secure_mode' = time();
+        }
+
+        $this->api->output->command('plugin.verify_response', array(
+            'method' => $method,
+            'success' => $success,
+            'message' => str_replace('$method', $this->gettext($method),
+                $this->gettext($success ? 'codeverificationpassed' : 'codeverificationfailed'))
+        ));
+
+        $this->api->output->send();
+    }
+
+    /**
+     *
+     */
+    protected function format_props($props)
+    {
+        $rcmail = rcmail::get_instance();
+        $values = array();
+
+        foreach ($props as $key => $prop) {
+            switch ($prop'type') {
+                case 'datetime':
+                    $value = $rcmail->format_date($prop'value');
+                    break;
+
+                default:
+                    $value = $prop'value';
+            }
+
+            $values$key = $value;
+        }
+
+        return $values;
+    }
+
+    /**
+     * Check whether the session is secured with 2FA (excluding the logon)
+     */
+    protected function check_secure_mode()
+    {
+        // Allow admins that used kolab_auth's "login as" feature to act without
+        // being asked for the user's second factor
+        if (!empty($_SESSION'kolab_auth_admin') && !empty($_SESSION'kolab_auth_password')) {
+            return true;
+        }
+
+        if ($_SESSION'kolab_2fa_secure_mode' && $_SESSION'kolab_2fa_secure_mode' > time() - 180) {
+            return $_SESSION'kolab_2fa_secure_mode';
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Base.php Added

@@ -0,0 +1,344 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Driver base class
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+abstract class Base
+{
+    public $method;
+    public $id;
+    public $storage;
+
+    protected $config          = array();
+    protected $props           = array();
+    protected $user_props      = array();
+    protected $pending_changes = false;
+    protected $temporary       = false;
+    protected $allowed_props   = array('username');
+
+    public $user_settings = array(
+        'active' => array(
+            'type'     => 'boolean',
+            'editable' => false,
+            'hidden'   => false,
+            'default'  => false,
+        ),
+        'label' => array(
+            'type'      => 'text',
+            'editable'  => true,
+            'label'     => 'label',
+            'generator' => 'default_label',
+        ),
+        'created' => array(
+            'type'      => 'datetime',
+            'editable'  => false,
+            'hidden'    => false,
+            'label'     => 'created',
+            'generator' => 'time',
+        ),
+    );
+
+    /**
+     * Static factory method
+     */
+    public static function factory($id, $config)
+    {
+        list($method) = explode(':', $id);
+
+        $classmap = array(
+            'totp'    => '\\Kolab2FA\\Driver\\TOTP',
+            'hotp'    => '\\Kolab2FA\\Driver\\HOTP',
+            'yubikey' => '\\Kolab2FA\\Driver\\Yubikey',
+        );
+
+        $cls = $classmapstrtolower($method);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config, $id);
+        }
+
+        throw new Exception("Unknown 2FA driver '$method'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null, $id = null)
+    {
+        $this->init($config);
+
+        if (!empty($id) && $id != $this->method) {
+            $this->id = $id;
+        }
+        else { // generate random ID
+            $this->id = $this->method . ':' . bin2hex(openssl_random_pseudo_bytes(12));
+            $this->temporary = true;
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init($config)
+    {
+        if (is_array($config)) {
+            $this->config = array_merge($this->config, $config);
+        }
+
+        if ($config'storage') {
+            $this->storage = \Kolab2FA\Storage\Base::factory($config'storage', $config'storage_config');
+        }
+    }
+
+    /**
+     * Verify the submitted authentication code
+     *
+     * @param string $code The 2nd authentication factor to verify
+     * @param int    $timestamp  Timestamp of authentication process (window start)
+     * @return boolean True if valid, false otherwise
+     */
+    abstract function verify($code, $timestamp = null);
+
+    /**
+     * Getter for user-visible properties
+     */
+    public function props($force = false)
+    {
+        $data = array();
+
+        foreach ($this->user_settings as $key => $p) {
+            if ($p'private') {
+                continue;
+            }
+
+            $data$key = array(
+                'type'     => $p'type',
+                'editable' => $p'editable',
+                'hidden'   => $p'hidden',
+                'label'    => $p'label',
+                'value'    => $this->get($key, $force),
+            );
+
+            // format value into text
+            switch ($p'type') {
+                case 'boolean':
+                    $data$key'value' = (bool)$data$key'value';
+                    $data$key'text' = $data$key'value' ? 'yes' : 'no';
+                    break;
+
+                case 'datetime':
+                    if (is_numeric($data$key'value')) {
+                        $data$key'text' = date('c', $data$key'value');
+                        break;
+                    }
+
+                default:
+                    $data$key'text' = $data$key'value';
+            }
+        }
+
+        return $data;
+    }
+
+    /**
+     * Implement this method if the driver can be prpvisioned via QR code
+     */
+    /* abstract function get_provisioning_uri(); */
+
+    /**
+     * Generate a random secret string
+     */
+    public function generate_secret($length = 16)
+    {
+        // Base32 characters
+        $chars = array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', //  7
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', // 15
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', // 23
+            'Y', 'Z', '2', '3', '4', '5', '6', '7', // 31
+        );
+
+        $secret = '';
+        for ($i = 0; $i < $length; $i++) {
+            $secret .= $charsarray_rand($chars);
+        }
+        return $secret;
+    }
+
+    /**
+     * Generate the default label based on the method
+     */
+    public function default_label()
+    {
+        if (class_exists('\\rcmail', false)) {
+            return \rcmail::get_instance()->gettext($this->method, 'kolab_2fa');
+        }
+
+        return strtoupper($this->method);
+    }
+
+    /**
+     * Getter for read-only access to driver properties
+     */
+    public function get($key, $force = false)
+    {
+        // this is a per-user property: get from persistent storage
+        if (isset($this->user_settings$key)) {
+            $value = $this->get_user_prop($key);
+
+            // generate property value
+            if (!isset($value) && $force && $this->user_settings$key'generator') {
+                $func = $this->user_settings$key'generator';
+                if (is_string($func) && !is_callable($func)) {
+                    $func = array($this, $func);
+                }
+                if (is_callable($func)) {
+                    $value = call_user_func($func);
+                }
+                if (isset($value)) {
+                    $this->set_user_prop($key, $value);
+                }
+            }
+        }
+        else {
+            $value = $this->props$key;
+        }
+
+        return $value;
+    }
+
+    /**
+     * Setter for restricted access to driver properties
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        // store as per-user property
+        if (isset($this->user_settings$key)) {
+            if ($persistent) {
+                return $this->set_user_prop($key, $value);
+            }
+            $this->user_props$key = $value;
+        }
+
+        $setter = 'set_' . $key;
+        if (method_exists($this, $setter)) {
+            call_user_func(array($this, $setter), $value);
+        }
+        else if (in_array($key, $this->allowed_props)) {
+            $this->props$key = $value;
+        }
+
+        return true;
+    }
+
+    /**
+     * Commit changes to storage
+     */
+    public function commit()
+    {
+        if (!empty($this->user_props) && $this->storage && $this->pending_changes) {
+            if ($this->storage->write($this->id, $this->user_props)) {
+                $this->pending_changes = false;
+                $this->temporary = false;
+            }
+        }
+
+        return !$this->pending_changes;
+    }
+
+    /**
+     * Dedicated setter for the username property
+     */
+    public function set_username($username)
+    {
+        $this->props'username' = $username;
+
+        if ($this->storage) {
+            $this->storage->set_username($username);
+        }
+
+        return true;
+    }
+
+    /**
+     * Clear data stored for this driver
+     */
+    public function clear()
+    {
+        if ($this->storage) {
+            return $this->storage->remove($this->id);
+        }
+
+        return false;
+    }
+
+    /**
+     * Getter for per-user properties for this method
+     */
+    protected function get_user_prop($key)
+    {
+        if (!isset($this->user_props$key) && $this->storage && !$this->pending_changes && !$this->temporary) {
+            $this->user_props = (array)$this->storage->read($this->id);
+        }
+
+        return $this->user_props$key;
+    }
+
+    /**
+     * Setter for per-user properties for this method
+     */
+    protected function set_user_prop($key, $value)
+    {
+        $this->pending_changes |= ($this->user_props$key !== $value);
+        $this->user_props$key = $value;
+        return true;
+    }
+
+    /**
+     * Magic getter for read-only access to driver properties
+     */
+    public function __get($key)
+    {
+        // this is a per-user property: get from persistent storage
+        if (isset($this->user_settings$key)) {
+            return $this->get_user_prop($key);
+        }
+
+        return $this->props$key;
+    }
+
+    /**
+     * Magic setter for restricted access to driver properties
+     */
+    public function __set($key, $value)
+    {
+        $this->set($key, $value, false);
+    }
+
+    /**
+     * Magic check if driver property is defined
+     */
+    public function __isset($key)
+    {
+        return isset($this->props$key);
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Exception.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/HOTP.php Added

@@ -0,0 +1,128 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication HOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class HOTP extends Base
+{
+    public $method = 'hotp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'window'   => 4,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+            'counter' => array(
+                'type'      => 'integer',
+                'editable'  => false,
+                'hidden'    => true,
+                'generator' => 'random_counter',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\HOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret  = $this->get('secret');
+        $counter = $this->get('counter');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY HOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        try {
+            $this->backend->setLabel($this->username)->setSecret($secret)->setCounter(intval($this->get('counter')));
+            $pass = $this->backend->verify($code, $counter, $this->config'window');
+
+            // store incremented counter value
+            $this->set('counter', $this->backend->getCounter());
+            $this->commit();
+        }
+        catch (\Exception $e) {
+            // LOG: exception
+            // rcube::console("VERIFY HOTP: $this->id, " . strval($e));
+            $pass = false;
+        }
+
+        // rcube::console('VERIFY HOTP', $this->username, $secret, $counter, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('counter', $this->get('counter', true));
+            $this->set('created', $this->get('created', true));
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret)->setCounter(intval($this->get('counter')));
+        return $this->backend->getProvisioningUri();
+    }
+
+    /**
+     * Generate a random counter value
+     */
+    public function random_counter()
+    {
+        return mt_rand(1, 999);
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/TOTP.php Added

@@ -0,0 +1,120 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication TOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class TOTP extends Base
+{
+    public $method = 'totp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'interval' => 30,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\TOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setInterval($this->config'interval')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret = $this->get('secret');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY TOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        $this->backend->setLabel($this->username)->setSecret($secret);
+
+        // PHP gets a string, but we're comparing integers.
+        $code = (int)$code;
+
+        // Pass a window to indicate the maximum timeslip between client (mobile
+        // device) and server.
+        $pass = $this->backend->verify($code, $timestamp, 150);
+
+        // try all codes from $timestamp till now
+        if (!$pass && $timestamp) {
+            $now = time();
+            while (!$pass && $timestamp < $now) {
+                $pass = $code === $this->backend->at($timestamp);
+                $timestamp += $this->config'interval';
+            }
+        }
+
+        // rcube::console('VERIFY TOTP', $this->username, $secret, $code, $timestamp, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        // rcube::console('PROV', $this->secret);
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('created', $this->get('created', true));
+            // rcube::console('PROV2', $this->secret);
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret);
+        return $this->backend->getProvisioningUri();
+    }
+
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Yubikey.php Added

@@ -0,0 +1,126 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Yubikey driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class Yubikey extends Base
+{
+    public $method = 'yubikey';
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'yubikeyid' => array(
+                'type'     => 'text',
+                'editable' => true,
+                'label'    => 'secret',
+            ),
+        );
+
+        // initialize validator
+        $this->backend = new \Yubikey\Validate($this->config'apikey', $this->config'clientid');
+
+        // set configured validation hosts
+        if (!empty($this->config'hosts')) {
+            $this->backend->setHosts((array)$this->config'hosts');
+        }
+
+        if (isset($this->config'use_https')) {
+            $this->backend->setUseSecure((bool)$this->config'use_https');
+        }
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $keyid = $this->get('yubikeyid');
+        $pass  = false;
+
+        if (!strlen($keyid)) {
+            // LOG: "no key registered for user $this->username"
+            return false;
+        }
+
+        // check key prefix with associated Yubikey ID
+        if (strpos($code, $keyid) === 0) {
+            try {
+                $response = $this->backend->check($code);
+                $pass     = $response->success() === true;
+            }
+            catch (\Exception $e) {
+                // TODO: log exception
+            }
+        }
+
+        // rcube::console('VERIFY Yubikey', $this->username, $keyid, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     * @override
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        if ($key == 'yubikeyid' && strlen($value) > 12) {
+            // verify the submitted code
+            try {
+                $response = $this->backend->check($value);
+                if ($response->success() !== true) {
+                    // TODO: report error
+                    return false;
+                }
+            }
+            catch (\Exception $e) {
+                return false;
+            }
+
+            // truncate the submitted yubikey code to 12 characters
+            $value = substr($value, 0, 12);
+        }
+
+        return parent::set($key, $value, $persistent);
+    }
+
+    /**
+     * @override
+     */
+    protected function set_user_prop($key, $value)
+    {
+        // set created timestamp
+        if ($key !== 'created' && !isset($this->created)) {
+            parent::set_user_prop('created', $this->get('created', true));
+        }
+
+        return parent::set_user_prop($key, $value);
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Logger.php Added

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * Logging interface for the Kolab 2-Factor-Authentication components
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+interface Logger
+{
+    /**
+     * Setter for the log name
+     */
+    public function set_name($name);
+
+    /**
+     * Setter for the minimum log level
+     */
+    public function set_level($level);
+
+    /**
+     * Do log the given message at the given level
+     */
+    public function log($level, $message);
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/RcubeLogger.php Added

@@ -0,0 +1,80 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class RcubeLogger implements Logger
+{
+    protected $name = null;
+    protected $level = LOG_DEBUG;
+
+    public function __construct($name = null)
+    {
+        if ($name !== null) {
+            $this->set_name($name);
+        }
+    }
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if (!is_string($message)) {
+            $message = var_export($message, true);
+        }
+
+        switch ($level) {
+        case LOG_DEBUG:
+        case LOG_INFO:
+        case LOG_NOTICE:
+            if ($level >= $this->level) {
+                rcube::write_log($this->name ?: 'console', $message);
+            }
+            break;
+
+        case LOG_EMERGE:
+        case LOG_ALERT:
+        case LOG_CRIT:
+        case LOG_ERR:
+        case LOG_WARNING:
+            rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'message' => $message,
+            ), true, false);
+            break;
+        }
+    }
+}
+

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Syslog.php Added

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class Syslog implements Logger
+{
+    protected $name = 'Kolab2FA';
+    protected $level = LOG_INFO;
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if ($level >= $this->level) {
+            if (!is_string($message)) {
+                $message = var_export($message, true);
+            }
+
+            syslog($level, '' . $this->name . ' ' . $message);
+        }
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/HOTP.php Added

@@ -0,0 +1,58 @@
+<?php
+
+/**
+ * Kolab HOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\HOTP as Base;
+
+class HOTP extends Base
+{
+    use OTP;
+    protected $counter = 0;
+
+    public function setCounter($counter)
+    {
+        if (!is_integer($counter) || $counter < 0) {
+            throw new \Exception('Counter must be at least 0.');
+        }
+        $this->counter = $counter;
+
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+
+        return $this;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/OTP.php Added

@@ -0,0 +1,133 @@
+<?php
+
+/**
+ * Kolab OTP trait based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/TOTP.php Added

@@ -0,0 +1,50 @@
+<?php
+
+/**
+ * Kolab TOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\TOTP as Base;
+
+class TOTP extends Base
+{
+    use OTP;
+    protected $interval = 30;
+
+    public function setInterval($interval)
+    {
+        if (!is_integer($interval) || $interval < 1) {
+            throw new \Exception('Interval must be at least 1.');
+        }
+        $this->interval = $interval;
+
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Base.php Added

@@ -0,0 +1,127 @@
+<?php
+
+/**
+ * Abstract storage backend class for the Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Kolab2FA\Log;
+
+
+abstract class Base
+{
+    public $username = null;
+    protected $config = array();
+    protected $logger;
+
+    /**
+     *
+     */
+    public static function factory($backend, $config)
+    {
+        $classmap = array(
+            'ldap' => '\\Kolab2FA\\Storage\\LDAP',
+            'roundcube' => '\\Kolab2FA\\Storage\\RcubeUser',
+            'rcubeuser' => '\\Kolab2FA\\Storage\\RcubeUser',
+        );
+
+        $cls = $classmapstrtolower($backend);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config);
+        }
+
+        throw new Exception("Unknown storage backend '$backend'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null)
+    {
+        if (is_array($config)) {
+            $this->init($config);
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init(array $config)
+    {
+        $this->config = array_merge($this->config, $config);
+
+        // use syslog logger by default
+        $this->set_logger(new Log\Syslog());
+    }
+
+    /**
+     * 
+     */
+    public function set_logger(Log\Logger $logger)
+    {
+        $this->logger = $logger;
+
+        if ($this->config'debug') {
+            $this->logger->set_level(LOG_DEBUG);
+        }
+        else if ($this->config'loglevel') {
+            $this->logger->set_level($this->config'loglevel');
+        }
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        $this->username = $username;
+    }
+
+    /**
+     * Send messager to the logging system
+     */
+    protected function log($level, $message)
+    {
+        if ($this->logger) {
+            $this->logger->log($level, $message);
+        }
+    }
+
+    /**
+     * List keys holding settings for 2-factor-authentication
+     */
+    abstract public function enumerate();
+
+    /**
+     * Read data for the given key
+     */
+    abstract public function read($key);
+
+    /**
+     * Save data for the given key
+     */
+    abstract public function write($key, $value);
+
+    /**
+     * Remove the data stored for the given key
+     */
+    abstract public function remove($key);
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Exception.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/LDAP.php Added

@@ -0,0 +1,349 @@
+<?php
+
+/**
+ * Storage backend to store 2-Factor-Authentication settings in LDAP
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Net_LDAP3;
+use \Kolab2FA\Log\Logger;
+
+class LDAP extends Base
+{
+    public $userdn;
+
+    private $cache = array();
+    private $ldapcache = array();
+    private $conn;
+    private $error;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $this->conn = new Net_LDAP3($config);
+        $this->conn->config_set('log_hook', array($this, 'log'));
+
+        $this->conn->connect();
+
+        $bind_pass = $this->config'bind_pass';
+        $bind_user = $this->config'bind_user';
+        $bind_dn   = $this->config'bind_dn';
+
+        $this->ready = $this->conn->bind($bind_dn, $bind_pass);
+
+        if (!$this->ready) {
+            throw new Exception("LDAP storage not ready: " . $this->error);
+        }
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate($active = true)
+    {
+        $filter  = $this->parse_vars($this->config'filter',  '*');
+        $base_dn = $this->parse_vars($this->config'base_dn', '*');
+        $scope   = $this->config'scope' ?: 'sub';
+        $ids     = array();
+
+        if ($this->ready && ($result = $this->conn->search($base_dn, $filter, $scope, array($this->config'fieldmap''id', $this->config'fieldmap''active')))) {
+            foreach ($result as $dn => $entry) {
+                $rec = $this->field_mapping($dn, Net_LDAP3::normalize_entry($entry, true));
+                if (!empty($rec'id') && ($active === null || $active == $rec'active')) {
+                    $ids = $rec'id';
+                }
+            }
+        }
+
+        // TODO: cache this in memory
+
+        return $ids;
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $this->cache$key = $this->get_ldap_record($this->username, $key);
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $success = false;
+        $ldap_attrs = array();
+
+        if (is_array($value)) {
+            // add some default values
+            $value += (array)$this->config'defaults' + array('active' => false, 'username' => $this->username, 'userdn' => $this->userdn);
+
+            foreach ($value as $k => $val) {
+                if ($attr = $this->config'fieldmap'$k) {
+                    $ldap_attrs$attr = $this->value_mapping($k, $val, false);
+                }
+            }
+        }
+        else {
+            // invalid data structure
+            return false;
+        }
+
+        // update existing record
+        if ($rec = $this->get_ldap_record($this->username, $key)) {
+            $old_attrs = $rec'_raw';
+            $new_attrs = array_merge($old_attrs, $ldap_attrs);
+
+            $result = $this->conn->modify_entry($rec'_dn', $old_attrs, $new_attrs);
+            $success = !empty($result);
+        }
+        // insert new record
+        else if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+
+            // add object class attribute
+            $me = $this;
+            $ldap_attrs'objectclass' = array_map(function($cls) use ($me, $key) {
+                return $me->parse_vars($cls, $key);
+            }, (array)$this->config'objectclass');
+
+            $success = $this->conn->add_entry($entry_dn, $ldap_attrs);
+        }
+
+        if ($success) {
+            $this->cache$key = $value;
+            $this->ldapcache = array();
+
+            // cleanup: remove disabled/inactive/temporary entries
+            if ($value'active') {
+                foreach ($this->enumerate(false) as $id) {
+                    if ($id != $key) {
+                        $this->remove($id);
+                    }
+                }
+
+                // set user roles according to active factors
+                $this->set_user_roles();
+            }
+        }
+
+        return $success;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+            $success = $this->conn->delete_entry($entry_dn);
+
+            // set user roles according to active factors
+            if ($success) {
+                $this->set_user_roles();
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->ldapcache = array();
+    }
+
+    /**
+     *
+     */
+    protected function set_user_roles()
+    {
+        if (!$this->ready || !$this->userdn || empty($this->config'user_roles')) {
+            return false;
+        }
+
+        $auth_roles = array();
+        foreach ($this->enumerate(true) as $id) {
+            foreach ($this->config'user_roles' as $prefix => $role) {
+                if (strpos($id, $prefix) === 0) {
+                    $auth_roles = $role;
+                }
+            }
+        }
+
+        $role_attr = $this->config'fieldmap''roles' ?: 'nsroledn';
+        if ($user_attrs = $this->conn->get_entry($this->userdn, array($role_attr))) {
+            $internals = array_values($this->config'user_roles');
+            $new_attrs = $old_attrs = Net_LDAP3::normalize_entry($user_attrs);
+            $new_attrs$role_attr = array_merge(
+                array_unique($auth_roles),
+                array_filter((array)$old_attrs$role_attr, function($f) use ($internals) { return !in_array($f, $internals); })
+            );
+
+            $result = $this->conn->modify_entry($this->userdn, $old_attrs, $new_attrs);
+            return !empty($result);
+        }
+
+        return false;
+    }
+
+    /**
+     * Fetches user data from LDAP addressbook
+     */
+    protected function get_ldap_record($user, $key)
+    {
+        $entry_dn = $this->get_entry_dn($user, $key);
+
+        if (!isset($this->ldapcache$entry_dn)) {
+            $this->ldapcache$entry_dn = array();
+
+            if ($this->ready && ($entry = $this->conn->get_entry($entry_dn, array_values($this->config'fieldmap')))) {
+                $this->ldapcache$entry_dn = $this->field_mapping($entry_dn, Net_LDAP3::normalize_entry($entry, true));
+            }
+        }
+
+        return $this->ldapcache$entry_dn;
+    }
+
+    /**
+     * Compose a full DN for the given record identifier
+     */
+    protected function get_entry_dn($user, $key)
+    {
+        $base_dn = $this->parse_vars($this->config'base_dn', $key);
+        return sprintf('%s=%s,%s', $this->config'rdn', Net_LDAP3::quote_string($key, true), $base_dn);
+    }
+
+    /**
+     * Maps LDAP attributes to defined fields
+     */
+    protected function field_mapping($dn, $entry)
+    {
+        $entry'_dn' = $dn;
+        $entry'_raw' = $entry;
+
+        // fields mapping
+        foreach ($this->config'fieldmap' as $field => $attr) {
+            $attr_lc = strtolower($attr);
+            if (isset($entry$attr_lc)) {
+                $entry$field = $this->value_mapping($field, $entry$attr_lc, true);
+            }
+            else if (isset($entry$attr)) {
+                $entry$field = $this->value_mapping($field, $entry$attr, true);
+            }
+        }
+
+        return $entry;
+    }
+
+    /**
+     *
+     */
+    protected function value_mapping($attr, $value, $reverse = false)
+    {
+        if ($map = $this->config'valuemap'$attr) {
+            if ($reverse) {
+                $map = array_flip($map);
+            }
+
+            if (is_array($value)) {
+                $value = array_filter(array_map(function($val) use ($map) {
+                    return $map$val;
+                }, $value));
+            }
+            else {
+                $value = $map$value;
+            }
+        }
+
+        // convert (date) type
+        switch ($this->config'attrtypes'$attr) {
+            case 'datetime':
+                $ts = is_numeric($value) ? $value : strtotime($value);
+                if ($ts) {
+                    $value = gmdate($reverse ? 'U' : 'YmdHi\Z', $ts);
+                }
+                break;
+
+            case 'integer':
+                $value = intval($value);
+                break;
+        }
+
+        return $value;
+    }
+
+    /**
+     * Prepares filter query for LDAP search
+     */
+    protected function parse_vars($str, $key)
+    {
+        $user = $this->username;
+
+        if (strpos($user, '@') > 0) {
+            list($u, $d) = explode('@', $user);
+        }
+        else if ($this->userdn) {
+            $u = $this->userdn;
+            $d = trim(str_replace(',dc=', '.', substr($u, strpos($u, ',dc='))), '.');
+        }
+
+        if ($this->userdn) {
+            $user = $this->userdn;
+        }
+
+        // build hierarchal domain string
+        $dc = $this->conn->domain_root_dn($d);
+
+        $class = $this->config'classmap' ? $this->config'classmap''*' : '*';
+
+        // map key to objectclass
+        if (is_array($this->config'classmap')) {
+            foreach ($this->config'classmap' as $k => $c) {
+                if (strpos($key, $k) === 0) {
+                    $class = $c;
+                    break;
+                }
+            }
+        }
+
+        $replaces = array('%dc' => $dc, '%d' => $d, '%fu' => $user, '%u' => $u, '%c' => $class);
+
+        return strtr($str, $replaces);
+    }
+
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/RcubeUser.php Added

@@ -0,0 +1,195 @@
+<?php
+
+/**
+ * Storage backend to use the Roundcube user prefs to store 2-Factor-Authentication settings
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \rcmail;
+use \rcube_user;
+
+class RcubeUser extends Base
+{
+    // sefault config
+    protected $config = array(
+        'keymap' => array(),
+    );
+
+    private $cache = array();
+    private $user;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $rcmail = rcmail::get_instance();
+        $this->config'hostname' = $rcmail->user->ID ? $rcmail->user->data'mail_host' : $_SESSION'hostname';
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate()
+    {
+        if ($factors = $this->get_factors()) {
+            return array_keys(array_filter($factors, function($prop) {
+                return !empty($prop'active');
+            }));
+        }
+
+        return array();
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $factors = $this->get_factors();
+            $this->log(LOG_DEBUG, 'RcubeUser::read() ' . $key);
+            $this->cache$key = $factors$key;
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $this->log(LOG_DEBUG, 'RcubeUser::write() ' . @json_encode($value));
+
+        if ($user = $this->get_user($this->username)) {
+            $this->cache$key = $value;
+
+            $factors = $this->get_factors();
+            $factors$key = $value;
+
+            $pkey = $this->key2property('blob');
+            $save_data = array($pkey => $factors);
+            $update_index = false;
+
+            // remove entry
+            if ($value === null) {
+                unset($factors$key);
+                $update_index = true;
+            }
+            // remove non-active entries
+            else if (!empty($value'active')) {
+                $factors = array_filter($factors, function($prop) {
+                    return !empty($prop'active');
+                });
+                $update_index = true;
+            }
+
+            // update the index of active factors
+            if ($update_index) {
+                $save_data$this->key2property('factors') = array_keys(
+                    array_filter($factors, function($prop) {
+                        return !empty($prop'active');
+                    })
+                );
+            }
+
+            $success = $user->save_prefs($save_data, true);
+
+            if (!$success) {
+                $this->log(LOG_WARNING, sprintf('Failed to save prefs for user %s', $this->username));
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        return $this->write($key, null);
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->user = null;
+    }
+
+    /**
+     * Helper method to get a rcube_user instance for storing prefs
+     */
+    private function get_user($username)
+    {
+        // use global instance if we have a valid Roundcube session
+        $rcmail = rcmail::get_instance();
+        if ($rcmail->user->ID && $rcmail->user->get_username() == $username) {
+            return $rcmail->user;
+        }
+
+        if (!$this->user) {
+            $this->user = rcube_user::query($username, $this->config'hostname');
+        }
+
+        if (!$this->user) {
+            $this->log(LOG_WARNING, sprintf('No user record found for %s @ %s', $username, $this->config'hostname'));
+        }
+
+        return $this->user;
+    }
+
+    /**
+     *
+     */
+    private function get_factors()
+    {
+        if ($user = $this->get_user($this->username)) {
+            $prefs = $user->get_prefs();
+            return (array)$prefs$this->key2property('blob');
+        }
+
+        return null;
+    }
+
+    /**
+     *
+     */
+    private function key2property($key)
+    {
+        // map key to configured property name
+        if (is_array($this->config'keymap') && isset($this->config'keymap'$key)) {
+            return $this->config'keymap'$key;
+        }
+
+        // default
+        return 'kolab_2fa_' . $key;
+    }
+
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/bg_BG.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ca_ES.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/cs_CZ.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/da_DK.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de_CH.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de_DE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/el.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/en_US.inc Added

@@ -0,0 +1,57 @@
+<?php
+
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+
+$labels'factor' = 'Factor';
+$labels'secret' = 'Secret Key';
+$labels'created' = 'Created';
+$labels'remove' = 'Remove';
+$labels'continue' = 'Continue';
+
+$labels'settingslist' = 'Multi-Factor Auth';
+$labels'settingstitle' = 'Authentication Factors';
+
+$labels'totp' = 'Mobile App (TOTP)';
+$labels'hotp' = 'Mobile App (HOTP)';
+$labels'yubikey' = 'Yubikey';
+
+$labels'or' = 'or';
+$labels'yes' = 'yes';
+$labels'no' = 'no';
+
+$labels'label' = 'Name';
+$labels'qrcode' = 'QR Code';
+$labels'showqrcode' = 'Show QR Code';
+$labels'qrcodeexplaintotp' = 'Download an authenticator app on your phone. Two apps which work well are <strong>FreeOTP</strong> and <strong>Google Authenticator</strong>, but any other TOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+$labels'qrcodeexplainhotp' = 'Download an authenticator app on your phone. One app known to work well is <strong>Google Authenticator</strong>, but any other HOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+
+$labels'yubikeyid' = 'Your YubiKey ID';
+$labels'yubikeyidexplainyubikey' = 'Press your YubiKey once and submit the generated code';
+
+$labels'addfactor' = 'Add Authentication Factor';
+$labels'testfactor' = 'Test this factor';
+$labels'verifycode' = 'Verify Code';
+$labels'verifycodeexplaintotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+$labels'verifycodeexplainhotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+
+$labels'loginexpired' = 'Login request expired! Please try again.';
+$labels'authremoveconfirm' = 'Do you really want to remove this authentication factor from your account?';
+$labels'verifycodemissing' = 'Please enter the verification code from your device';
+
+$labels'factorsavesuccess' = 'Successfully saved authentication factor';
+$labels'factorremovesuccess' = 'Successfully removed the authentication factor';
+$labels'factorsaveerror' = 'Failed to save authentication factor settings';
+$labels'codeverificationpassed' = 'Code verification for $method passed';
+$labels'codeverificationfailed' = 'Code verification for $method failed';
+
+$labels'highsecurityrequired' = 'Entering High Security - Verification required';
+$labels'highsecuritydialog' = 'High security mode helps protect your account from security threats, like session theft or someone messing with your stuff while you\'re away. To enter high security mode, confirm your credentials with the additional authentication factor:';
+$labels'enterhighsecurity' = 'Confirm';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/es_AR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/es_ES.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/et_EE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/fi_FI.inc Added

@@ -0,0 +1,35 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Tekijä';
+$labels'secret' = 'Salainen avain';
+$labels'created' = 'Luotu';
+$labels'remove' = 'Poista';
+$labels'continue' = 'Jatka';
+$labels'settingslist' = 'Monivaiheinen tunnistautuminen';
+$labels'settingstitle' = 'Tunnistautumistekijät';
+$labels'totp' = 'Mobiilisovellus (TOTP)';
+$labels'hotp' = 'Mobiilisovellus (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'tai';
+$labels'yes' = 'kyllä';
+$labels'no' = 'ei';
+$labels'label' = 'Nimi';
+$labels'qrcode' = 'QR-koodi';
+$labels'showqrcode' = 'Näytä QR-koodi';
+$labels'yubikeyid' = 'YubiKey-tunnisteesi';
+$labels'yubikeyidexplainyubikey' = 'Paina YubiKeytasi kerran ja kirjoita luotu koodi';
+$labels'addfactor' = 'Lisää tunnistautumistekijä';
+$labels'testfactor' = 'Testaa tätä tekijää';
+$labels'verifycode' = 'Vahvista koodi';
+$labels'loginexpired' = 'Kirjautumispyyntö vanheni! Yritä uudelleen.';
+$labels'authremoveconfirm' = 'Haluatko varmasti poistaa tämän tunnistautumistekijän tililtäsi?';
+$labels'verifycodemissing' = 'Kirjoita vahvistuskoodi laitteeltasi';
+$labels'factorsavesuccess' = 'Tunnistautumistekijä tallennettu onnistuneesti';
+$labels'factorremovesuccess' = 'Tunnistautumistekijä poistettu onnistuneesti';
+$labels'enterhighsecurity' = 'Vahvista';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/fr_FR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/he_IL.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/hr_HR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/hu_HU.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/it_IT.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ja_JP.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ko_KR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/lv.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/nl_NL.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pl.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Czynnik';
+$labels'secret' = 'Tajny klucz ';
+$labels'created' = 'Utworzono';
+$labels'remove' = 'Usuń';
+$labels'continue' = 'Kontynuuj';
+$labels'settingslist' = 'Uwierzytelnianie wieloetapowe';
+$labels'settingstitle' = 'Czynniki uwierzytelniania';
+$labels'totp' = 'Aplikacja mobilna (TOTP)';
+$labels'hotp' = 'Aplikacja mobilna (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'lub';
+$labels'yes' = 'tak';
+$labels'no' = 'nie';
+$labels'label' = 'Nazwa';
+$labels'qrcode' = 'Kod QR';
+$labels'showqrcode' = 'Pokaż kod QR';
+$labels'qrcodeexplaintotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>FreeOTP</strong> i <strong>Google Authenticator</strong> są przetestowane, ale dowolna aplikacja TOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'qrcodeexplainhotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>Google Authenticator</strong> jest znana z poprawnej pracy, ale dowolna aplikacja HOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'yubikeyid' = 'Twój identyfikator Yubikey';
+$labels'yubikeyidexplainyubikey' = 'Naciśnij swojego Yubikeya i wprowadź wygenerowany kod';
+$labels'addfactor' = 'Dodaj czynnik uwierzytelniający';
+$labels'enterhighsecurity' = 'Potwierdź';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pt_BR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pt_PT.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ru_RU.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sk_SK.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sl_SI.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sv.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sv_SE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/th_TH.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/uk_UA.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/vi_VN.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/zh_CN.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/zh_TW.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic/templates Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic/templates/config.html Added

@@ -0,0 +1,25 @@
+<roundcube:include file="includes/layout.html" />
+<roundcube:include file="includes/menu.html" />
+<roundcube:include file="includes/settings-menu.html" />
+
+<h1 class="voice"><roundcube:label name="kolab_2fa.settingstitle" /></h1>
+
+<div id="layout-content" class="selected no-navbar" role="main">
+	<h2 id="aria-label-toolbar" class="voice"><roundcube:label name="arialabeltoolbar" /></h2>
+	<div class="header" role="toolbar" aria-labelledby="aria-label-toolbar">
+		<a class="button icon back-list-button" href="#back"><span class="inner"><roundcube:label name="back" /></span></a>
+		<span class="header-title"><roundcube:label name="kolab_2fa.settingstitle" /></span>
+		<div class="toolbar menu"></div>
+	</div>
+	<div class="scroller frame-content">
+		<p class="addfactor">
+			<roundcube:object name="plugin.factoradder" class="form-control" />
+		</p>
+		<roundcube:object name="plugin.settingslist" class="authentication-factors" />
+	</div>
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog hidden" />
+
+<roundcube:include file="includes/footer.html" />

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/kolab2fa.css Added

@@ -0,0 +1,93 @@
+
+.propform .formbuttons {
+	margin-top: 1em;
+}
+
+.propform .explain {
+	max-width: 40em;
+	margin-top: 0.4em;
+	margin-bottom: 0.8em;
+}
+
+.propform .kolab2fa-showqr {
+	font-weight: bold;
+}
+
+.propform tr.hidden {
+	display: none;
+}
+
+table.propform thead th {
+	text-align: left;
+	padding: 6px 10px;
+}
+
+table.propform td.title {
+	vertical-align: top;
+	padding-top: 0.8em;
+}
+
+table.propform td.title > label {
+	line-height: 1.8em;
+}
+
+.propform img.qrcode {
+	min-width: 260px;
+	min-height: 260px;
+}
+
+table.authentication-factors {
+	width: 99%;
+	max-width: 60em;
+	border: 0;
+}
+
+table.authentication-factors td.name {
+	width: 60%;
+	font-weight: bold;
+}
+
+table.authentication-factors td.name:before {
+	content: "\2714";
+	display: inline-block;
+	margin-right: 1em;
+/*
+	width: 1.5em;
+	line-height: 1.5em;
+	text-align: center;
+	color: #c7e3ef;
+	background: #004458;
+	border-radius: 50%;
+*/
+}
+
+table.authentication-factors td.created {
+	width: 12em;
+	white-space: nowrap;
+}
+
+table.authentication-factors td.actions {
+	width: 8em;
+	white-space: nowrap;
+	text-align: right;
+}
+
+table.authentication-factors td.actions a.button {
+	padding: 2px 8px;
+	cursor: default;
+}
+
+.kolab2fa-highsecuritydialog {
+	display: none;
+}
+
+.ui-dialog-content .propform > label {
+	display: inline-block;
+	padding-top: 0.3em;
+	min-width: 12em;
+	font-weight: bold;
+}
+
+.ui-dialog-content .propform .verifycode {
+	width: 20em;
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/templates Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/templates/config.html Added

@@ -0,0 +1,34 @@
+<roundcube:object name="doctype" value="html5" />
+<html>
+<head>
+<title><roundcube:object name="pagetitle" /></title>
+<roundcube:include file="/includes/links.html" />
+</head>
+<body class="noscroll">
+
+<roundcube:include file="/includes/header.html" />
+
+<div id="mainscreen" class="offset">
+
+<roundcube:include file="/includes/settingstabs.html" />
+
+<div id="pluginbody" class="uibox contentbox scroller">
+    <h1 class="boxtitle"><roundcube:object name="steptitle" /></h1>
+    <div class="boxcontent propform">
+        <p class="addfactor">
+            <roundcube:object name="plugin.factoradder" />
+        </p>
+        <roundcube:object name="plugin.settingslist" class="propform authentication-factors" />
+    </div>
+</div>
+
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog" />
+
+<roundcube:include file="/includes/footer.html" />
+
+</body>
+</html>

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/tests Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.

roundcubemail-1.5.3.tar.gz/plugins/logon_page/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/logon_page.html Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/logon_page.php Added

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * Logon screen additions.
+ *
+ * Allows to display additional information (HTML code block) on logon page.
+ *
+ * Configuration: put your content in logon_page.html file. It will be parsed by
+ * Roundcube templates engine, so you can use all template features (tags).
+ *
+ * @version @package_version@
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2012-2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class logon_page extends rcube_plugin
+{
+    public $task    = 'login';
+    public $noajax  = true;
+    public $noframe = true;
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        $this->add_hook('template_object_loginform', array($this, 'logon_page_content'));
+    }
+
+    /**
+     * Login form object container handler. The content will be
+     * added to the BODY tag, not the container element itself.
+     */
+    public function logon_page_content($args)
+    {
+        $file = $this->home . '/logon_page.html';
+
+        if (file_exists($file)) {
+            $html = file_get_contents($file);
+            $html = trim(str_replace('', '', $html));
+        }
+
+        if ($html) {
+            $rcmail = rcube::get_instance();
+
+            // Parse content with templates engine, so we can use e.g. localization
+            $html = $rcmail->output->just_parse($html);
+
+            // Wrap the additional content inside <div>,
+            // so it can be styled by skins
+            $html = '<div id="logon_page">' . $html . '</div>';
+
+            // In Elastic we have to move the element to more apropriate place
+            $html .= "<script>\$('#login-footer').append(\$('#logon_page'));</script>";
+
+            // Add the content at the end of the BODY
+            $rcmail->output->add_footer($html);
+        }
+
+        return $args;
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link Added

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/config.inc.php Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/config.inc.php.dist Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/nextcloud_link.php Added

@@ -0,0 +1,61 @@
+<?php
+
+/**
+ * A plugin that adds a task menu icon linking to the Nextcloud files
+ *
+ * @author Aleksander Machniak <machniak@apheleia-it.ch>
+ *
+ * Copyright (C) 2022, Apheleia IT AG <contact@apheleia-it.ch>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class nextcloud_link extends rcube_plugin
+{
+    public $task = '?(?!login|logout).*';
+
+
+    /**
+     * Plugin initialization.
+     */
+    function init()
+    {
+        $this->rc = rcube::get_instance();
+
+        if ($this->rc->output->type !== 'html' || !empty($this->rc->output->env'framed')) {
+            return;
+        }
+
+        $this->load_config();
+
+        $url = $this->rc->config->get('nextcloud_link_url');
+
+        if (empty($url)) {
+            return;
+        }
+
+        $this->add_button(
+            'command'    => 'nextcloud',
+            'class'      => 'button-nextcloud',
+            'classsel'   => 'button-nextcloud button-selected',
+            'innerclass' => 'button-inner',
+            'label'      => '',
+            'type'       => 'link'
+        , 'taskbar');
+
+        $this->rc->output->add_footer("
+<style>#taskmenu a.button-nextcloud:before { content: \"\\f0c2\"; }</style>
+<script>\$('#taskmenu a.button-nextcloud').on('click', function () { window.open('$url', '_blank'); });</script>");
+    }
+}

roundcubemail-1.5.3.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip Changed

roundcubemail-1.5.3.tar.gz/vendor/autoload.php Changed

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32 Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/LICENSE Added

@@ -0,0 +1,19 @@
+Copyright (c) 2013-2014 Christian Riesen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/README.md Added

@@ -0,0 +1,64 @@
+base32
+======
+
+Base32 Encoder/Decoder for PHP according to RFC 4648(https://tools.ietf.org/html/rfc4648).
+
+!CI(https://github.com/ChristianRiesen/base32/workflows/CI/badge.svg)
+
+!Latest Stable Version(https://poser.pugx.org/christian-riesen/base32/v/stable.png)(https://packagist.org/packages/christian-riesen/base32) !Total Downloads(https://poser.pugx.org/christian-riesen/base32/downloads.png)(https://packagist.org/packages/christian-riesen/base32) !Latest Unstable Version(https://poser.pugx.org/christian-riesen/base32/v/unstable.png)(https://packagist.org/packages/christian-riesen/base32) !License(https://poser.pugx.org/christian-riesen/base32/license.png)(https://packagist.org/packages/christian-riesen/base32)
+
+
+Installation
+-----
+
+Use composer:
+
+```bash
+composer require christian-riesen/base32
+```
+
+Usage
+-----
+
+```php
+<?php
+
+// Include class or user autoloader
+use Base32\Base32;
+
+$string = 'fooba';
+
+// $encoded contains now 'MZXW6YTB'
+$encoded = Base32::encode($string);
+
+// $decoded is again 'fooba'
+$decoded = Base32::decode($encoded);
+```
+
+You can also use the extended hex alphabet by using the `Base32Hex` class instead.
+
+About
+=====
+
+Initially created to work with the one time password project(https://github.com/ChristianRiesen/otp), yet it can stand alone just as well as Jordi Boggiano(http://seld.be/) kindly pointed out. It's the only Base32 implementation that passes the test vectors and contains unit tests as well.
+
+Goal
+----
+Have a RFC compliant Base32 encoder and decoder. The implementation could be improved, but for now, it does the job and has unit tests. Ideally, the class can be enhanced while the unit tests keep passing.
+
+Requirements
+------------
+
+Works on PHP 7.2 and later, including PHP 8.0.
+
+Tests run on PHPUnit 9.5, with PHP 7.3 and later. For PHP 7.2, tests use an older PHPUnit version.
+
+Author
+------
+
+Christian Riesen <chris.riesen@gmail.com> http://christianriesen.com
+
+Acknowledgements
+----------------
+
+Base32 is mostly based on the work of https://github.com/NTICompass/PHP-Base32

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src/Base32.php Added

@@ -0,0 +1,168 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32 encoder and decoder.
+ *
+ * RFC 4648 compliant
+ *
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ * Some groundwork based on this class
+ * https://github.com/NTICompass/PHP-Base32
+ *
+ * @author  Christian Riesen <chris.riesen@gmail.com>
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32.
+     *
+     * @var string
+     */
+    protected const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=';
+
+    protected const BASE32HEX_PATTERN = '/^A-Z2-7/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        'A' => 0b00000,
+        'B' => 0b00001,
+        'C' => 0b00010,
+        'D' => 0b00011,
+        'E' => 0b00100,
+        'F' => 0b00101,
+        'G' => 0b00110,
+        'H' => 0b00111,
+        'I' => 0b01000,
+        'J' => 0b01001,
+        'K' => 0b01010,
+        'L' => 0b01011,
+        'M' => 0b01100,
+        'N' => 0b01101,
+        'O' => 0b01110,
+        'P' => 0b01111,
+        'Q' => 0b10000,
+        'R' => 0b10001,
+        'S' => 0b10010,
+        'T' => 0b10011,
+        'U' => 0b10100,
+        'V' => 0b10101,
+        'W' => 0b10110,
+        'X' => 0b10111,
+        'Y' => 0b11000,
+        'Z' => 0b11001,
+        '2' => 0b11010,
+        '3' => 0b11011,
+        '4' => 0b11100,
+        '5' => 0b11101,
+        '6' => 0b11110,
+        '7' => 0b11111,
+    ;
+
+    /**
+     * Encodes into base32.
+     *
+     * @param string $string Clear text string
+     *
+     * @return string Base32 encoded string
+     */
+    public static function encode(string $string): string
+    {
+        // Empty string results in empty string
+        if ('' === $string) {
+            return '';
+        }
+
+        $encoded = '';
+
+        //Set the initial values
+        $n = $bitLen = $val = 0;
+        $len = \strlen($string);
+
+        //Pad the end of the string - this ensures that there are enough zeros
+        $string .= \str_repeat(\chr(0), 4);
+
+        //Explode string into integers
+        $chars = (array) \unpack('C*', $string, 0);
+
+        while ($n < $len || 0 !== $bitLen) {
+            //If the bit length has fallen below 5, shift left 8 and add the next character.
+            if ($bitLen < 5) {
+                $val = $val << 8;
+                $bitLen += 8;
+                $n++;
+                $val += $chars$n;
+            }
+            $shift = $bitLen - 5;
+            $encoded .= ($n - (int)($bitLen > 8) > $len && 0 == $val) ? '=' : static::ALPHABET$val >> $shift;
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 5;
+        }
+
+        return $encoded;
+    }
+
+    /**
+     * Decodes base32.
+     *
+     * @param string $base32String Base32 encoded string
+     *
+     * @return string Clear text string
+     */
+    public static function decode(string $base32String): string
+    {
+        // Only work in upper cases
+        $base32String = \strtoupper($base32String);
+
+        // Remove anything that is not base32 alphabet
+        $base32String = \preg_replace(static::BASE32HEX_PATTERN, '', $base32String);
+
+        // Empty string results in empty string
+        if ('' === $base32String || null === $base32String) {
+            return '';
+        }
+
+        $decoded = '';
+
+        //Set the initial values
+        $len = \strlen($base32String);
+        $n = 0;
+        $bitLen = 5;
+        $val = static::MAPPING$base32String0;
+
+        while ($n < $len) {
+            //If the bit length has fallen below 8, shift left 5 and add the next pentet.
+            if ($bitLen < 8) {
+                $val = $val << 5;
+                $bitLen += 5;
+                $n++;
+                $pentet = $base32String$n ?? '=';
+
+                //If the new pentet is padding, make this the last iteration.
+                if ('=' === $pentet) {
+                    $n = $len;
+                }
+                $val += static::MAPPING$pentet;
+                continue;
+            }
+            $shift = $bitLen - 8;
+
+            $decoded .= \chr($val >> $shift);
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 8;
+        }
+
+        return $decoded;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src/Base32Hex.php Added

@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32Hex encoder and decoder.
+ *
+ * RFC 4648 compliant
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ *
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32Hex extends Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32 extended hex.
+     *
+     * @var string
+     */
+    protected const ALPHABET = '0123456789ABCDEFGHIJKLMNOPQRSTUV=';
+
+    protected const BASE32HEX_PATTERN = '/^0-9A-V/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        '0' => 0b00000,
+        '1' => 0b00001,
+        '2' => 0b00010,
+        '3' => 0b00011,
+        '4' => 0b00100,
+        '5' => 0b00101,
+        '6' => 0b00110,
+        '7' => 0b00111,
+        '8' => 0b01000,
+        '9' => 0b01001,
+        'A' => 0b01010,
+        'B' => 0b01011,
+        'C' => 0b01100,
+        'D' => 0b01101,
+        'E' => 0b01110,
+        'F' => 0b01111,
+        'G' => 0b10000,
+        'H' => 0b10001,
+        'I' => 0b10010,
+        'J' => 0b10011,
+        'K' => 0b10100,
+        'L' => 0b10101,
+        'M' => 0b10110,
+        'N' => 0b10111,
+        'O' => 0b11000,
+        'P' => 0b11001,
+        'Q' => 0b11010,
+        'R' => 0b11011,
+        'S' => 0b11100,
+        'T' => 0b11101,
+        'U' => 0b11110,
+        'V' => 0b11111,
+    ;
+}

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_namespaces.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_psr4.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_real.php Changed

@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d
+class ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97
 {
     private static $loader;
 
@@ -24,9 +24,9 @@
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(\dirname(__FILE__)));
-        spl_autoload_unregister(array('ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97', 'loadClassLoader'));
 
         $includePaths = require __DIR__ . '/include_paths.php';
         $includePaths = get_include_path();
@@ -36,7 +36,7 @@
         if ($useStaticLoader) {
             require __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInitcdc839bda5716c19b35267a053e20f97::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -57,19 +57,19 @@
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequirea72d5c6cdaa4a7dca1d35208e082810d($fileIdentifier, $file);
+            composerRequirecdc839bda5716c19b35267a053e20f97($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequirea72d5c6cdaa4a7dca1d35208e082810d($fileIdentifier, $file)
+function composerRequirecdc839bda5716c19b35267a053e20f97($fileIdentifier, $file)
 {
     if (empty($GLOBALS'__composer_autoload_files'$fileIdentifier)) {
         require $file;

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_static.php Changed

@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d
+class ComposerStaticInitcdc839bda5716c19b35267a053e20f97
 {
     public static $files = array (
         '320cde22f66dd4f5d3fd621d3e88b98f' => __DIR__ . '/..' . '/symfony/polyfill-ctype/bootstrap.php',
@@ -63,6 +63,10 @@
             'Psr\\Http\\Message\\' => 17,
             'Prophecy\\' => 9,
         ),
+        'O' => 
+        array (
+            'OTPHP\\' => 6,
+        ),
         'M' => 
         array (
             'Masterminds\\' => 12,
@@ -82,6 +86,10 @@
             'Doctrine\\Instantiator\\' => 22,
             'DeepCopy\\' => 9,
         ),
+        'B' => 
+        array (
+            'Base32\\' => 7,
+        ),
     );
 
     public static $prefixDirsPsr4 = array (
@@ -167,6 +175,10 @@
         array (
             0 => __DIR__ . '/..' . '/phpspec/prophecy/src/Prophecy',
         ),
+        'OTPHP\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/spomky-labs/otphp/lib',
+        ),
         'Masterminds\\' => 
         array (
             0 => __DIR__ . '/..' . '/masterminds/html5/src',
@@ -195,6 +207,10 @@
         array (
             0 => __DIR__ . '/..' . '/myclabs/deep-copy/src/DeepCopy',
         ),
+        'Base32\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/christian-riesen/base32/src',
+        ),
     );
 
     public static $prefixesPsr0 = array (
@@ -257,6 +273,13 @@
                 0 => __DIR__ . '/..' . '/zf1/zend-cache/library',
             ),
         ),
+        'Y' => 
+        array (
+            'Yubikey' => 
+            array (
+                0 => __DIR__ . '/..' . '/enygma/yubikey/src',
+            ),
+        ),
         'R' => 
         array (
             'Roundcube\\Composer' => 
@@ -1006,11 +1029,11 @@
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixDirsPsr4;
-            $loader->prefixesPsr0 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixesPsr0;
-            $loader->fallbackDirsPsr0 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$fallbackDirsPsr0;
-            $loader->classMap = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixDirsPsr4;
+            $loader->prefixesPsr0 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixesPsr0;
+            $loader->fallbackDirsPsr0 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$fallbackDirsPsr0;
+            $loader->classMap = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$classMap;
 
         }, null, ClassLoader::class);
     }

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.json Changed

@@ -64,6 +64,68 @@
             "install-path": "../caxy/php-htmldiff"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "version_normalized": "1.6.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "time": "2021-02-26T10:19:33+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "install-path": "../christian-riesen/base32"
+        },
+        {
             "name": "doctrine/instantiator",
             "version": "1.5.0",
             "version_normalized": "1.5.0.0",
@@ -194,6 +256,62 @@
             "install-path": "../endroid/qr-code"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "version_normalized": "3.3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "time": "2018-03-08T20:38:39+00:00",
+            "type": "library",
+            "installation-source": "dist",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "install-path": "../enygma/yubikey"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "version_normalized": "4.16.0.0",
@@ -663,6 +781,47 @@
             "install-path": "../../plugins/calendar"
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "version_normalized": "3.5.11.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/kolab_2fa"
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "version_normalized": "3.5.6.0",
@@ -1104,6 +1263,39 @@
             "install-path": "../../plugins/libkolab"
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "version_normalized": "3.4.2.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Logon screen additions",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/logon_page"
+        },
+        {
             "name": "kolab/net_ldap3",
             "version": "v1.1.4",
             "version_normalized": "1.1.4.0",
@@ -1161,6 +1353,44 @@
             "install-path": "../kolab/net_ldap3"
         },
         {
+            "name": "kolab/nextcloud_link",
+            "version": "1.0",
+            "version_normalized": "1.0.0.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+                "reference": "f00215f711dc4d376fb667d0d97c238c0b9e791f"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "extra": {
+                "roundcube": {
+                    "min-version": "1.4.0"
+                }
+            },
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@apheleia-it.ch",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Adds a link to Nextcloud in the task menu",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/nextcloud_link"
+        },
+        {
             "name": "kolab/odfviewer",
             "version": "3.4.0",
             "version_normalized": "3.4.0.0",
@@ -4458,6 +4688,70 @@
             "install-path": "../smarty/smarty"
         },
         {
+            "name": "spomky-labs/otphp",
+            "version": "v5.0.1",
+            "version_normalized": "5.0.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Spomky-Labs/otphp.git",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Spomky-Labs/otphp/zipball/ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "shasum": ""
+            },
+            "require": {
+                "christian-riesen/base32": "~1.1",
+                "php": ">=5.3.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "~4.0"
+            },
+            "time": "2015-06-26T11:44:37+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "OTPHP\\": "lib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Florent Morselli",
+                    "homepage": "https://github.com/Spomky"
+                },
+                {
+                    "name": "All contributors",
+                    "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+                }
+            ,
+            "description": "PHP OTP Library compatible with Google Authenticator",
+            "homepage": "https://github.com/Spomky-Labs/otphp",
+            "keywords": 
+                "RFC 4226",
+                "RFC 6238",
+                "hotp",
+                "otp",
+                "totp"
+            ,
+            "support": {
+                "issues": "https://github.com/Spomky-Labs/otphp/issues",
+                "source": "https://github.com/Spomky-Labs/otphp/tree/v5.0.1"
+            },
+            "install-path": "../spomky-labs/otphp"
+        },
+        {
             "name": "squizlabs/php_codesniffer",
             "version": "3.7.2",
             "version_normalized": "3.7.2.0",

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.php Changed

@@ -19,6 +19,15 @@
             'reference' => '4bad5c6a4ecc76954d37764e6a29273b6b7bf1f8',
             'dev_requirement' => false,
         ),
+        'christian-riesen/base32' => array(
+            'pretty_version' => '1.6.0',
+            'version' => '1.6.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../christian-riesen/base32',
+            'aliases' => array(),
+            'reference' => '2e82dab3baa008e24a505649b0d583c31d31e894',
+            'dev_requirement' => false,
+        ),
         'doctrine/instantiator' => array(
             'pretty_version' => '1.5.0',
             'version' => '1.5.0.0',
@@ -37,6 +46,15 @@
             'reference' => 'cef5d5b7b904d7bb0708eb744c35316364b65fa0',
             'dev_requirement' => false,
         ),
+        'enygma/yubikey' => array(
+            'pretty_version' => '3.3',
+            'version' => '3.3.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../enygma/yubikey',
+            'aliases' => array(),
+            'reference' => '2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6',
+            'dev_requirement' => false,
+        ),
         'ezyang/htmlpurifier' => array(
             'pretty_version' => 'v4.16.0',
             'version' => '4.16.0.0',
@@ -91,6 +109,15 @@
             'reference' => 'bcca59cdaa6cf7b2109eac32685bb750425c305e',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_2fa' => array(
+            'pretty_version' => '3.5.11',
+            'version' => '3.5.11.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_2fa',
+            'aliases' => array(),
+            'reference' => 'ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_activesync' => array(
             'pretty_version' => '3.5.6',
             'version' => '3.5.6.0',
@@ -199,6 +226,15 @@
             'reference' => '30bad7150f1999a5a2a0d33c9bcd490514a4a307',
             'dev_requirement' => false,
         ),
+        'kolab/logon_page' => array(
+            'pretty_version' => '3.4.2',
+            'version' => '3.4.2.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/logon_page',
+            'aliases' => array(),
+            'reference' => '262a87c48721ba04a581eb5c1f8dcfd44a565993',
+            'dev_requirement' => false,
+        ),
         'kolab/net_ldap3' => array(
             'pretty_version' => 'v1.1.4',
             'version' => '1.1.4.0',
@@ -208,6 +244,15 @@
             'reference' => 'ec4f0d6918aa4b5364e99e1132e0a5a9b3ab23ab',
             'dev_requirement' => false,
         ),
+        'kolab/nextcloud_link' => array(
+            'pretty_version' => '1.0',
+            'version' => '1.0.0.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/nextcloud_link',
+            'aliases' => array(),
+            'reference' => 'f00215f711dc4d376fb667d0d97c238c0b9e791f',
+            'dev_requirement' => false,
+        ),
         'kolab/odfviewer' => array(
             'pretty_version' => '3.4.0',
             'version' => '3.4.0.0',
@@ -715,6 +760,15 @@
             'reference' => '2fc443806cdcaee4441be4d0bb09f8fa56a17f2c',
             'dev_requirement' => false,
         ),
+        'spomky-labs/otphp' => array(
+            'pretty_version' => 'v5.0.1',
+            'version' => '5.0.1.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../spomky-labs/otphp',
+            'aliases' => array(),
+            'reference' => 'ada44930d9d85be1480123eca418c8c24e9a1f96',
+            'dev_requirement' => false,
+        ),
         'squizlabs/php_codesniffer' => array(
             'pretty_version' => '3.7.2',
             'version' => '3.7.2.0',

roundcubemail-1.5.3.tar.gz/vendor/enygma Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/.travis.yml Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/LICENSE.md Added

@@ -0,0 +1,7 @@
+Copyright 2017 Chris Cornutt <ccornutt@phpdeveloper.org>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/README.md Added

@@ -0,0 +1,106 @@
+Yubikey PHP Library
+=======================
+
+!Travis-CI Build Status(https://secure.travis-ci.org/enygma/yubikey.png?branch=master)(http://travis-ci.org/enygma/yubikey)
+!Codacy Badge(https://www.codacy.com/project/badge/6b73c56a21734a6d93dae6019f733c5e)(https://www.codacy.com)
+!Code Climate(https://codeclimate.com/github/enygma/yubikey/badges/gpa.svg)(https://codeclimate.com/github/enygma/yubikey)
+!Total Downloads(https://img.shields.io/packagist/dt/enygma/yubikey.svg?style=flat-square)(https://packagist.org/packages/enygma/yubikey)
+
+This library lets you easily interface with the Yubico REST API for validating
+the codes created by the Yubikey.
+
+### Requirements:
+
+- An API as requested from the Yubico site
+- A client ID requested from Yubico
+- A Yubikey to test out the implementation
+
+### Installation
+
+Use the followng command to install the library via Composer:
+
+```
+composer require enygma/yubikey
+```
+
+### Usage:
+
+Look at the `test.php` example script to see how to use it. This can be executed like:
+
+`php test.php generated key`
+
+Example code:
+
+```php
+<?php
+$apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+$clientId = '12345';
+
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+```
+
+### HTTP vs HTTPS
+
+By default the library will try to use a `HTTPS` request to the host given. If you need to disable this for some reason
+(like no SSL support), you can use the `setUseSecure` method and set it to false:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setUseSecure(false);
+```
+
+### Overriding hosts
+
+The library comes with a set of hostnames for the Yubico external API servers (api.yubico.com through api5.yubico.com). If
+you ever have a need to override these, you can use `setHosts`:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setHosts(array(
+    'api.myhost1.com',
+    'api1.myhost.com'
+));
+```
+Remember, this will *overwrite* the current hosts in the class, so be sure you don't still need those. If you just want to add
+another host, look at the `addHost` method.
+
+### Multi-Server Requests:
+
+Additonally, the library also supports simultaneous connections to multiple servers. By default it will only make
+the request to the first server in the `hosts` list. You can enable the multi-server checking with a second parameter on
+the `check()` method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+This will make multiple requests and return the pass/fail status of the aggregate responses from each. So, if you have all but one
+server pass, the overall response will be a fail. If all return `OK` though, you're in the clear.
+
+### "First in" result
+
+Additionally, you can also switch on and off this aggregation of the results and go with only the "first in" response. You do this
+with a flag on the `success` checking method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success(true) === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+**NOTE:** This will still work without multi-server checking. The "first in" will just always be the single response.
+
+
+@author Chris Cornutt <ccornutt@phpdeveloper.org>

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/composer.json Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Client.php Added

@@ -0,0 +1,65 @@
+<?php
+namespace Yubikey;
+
+class Client
+{
+    /**
+     * Send the request(s) via curl
+     *
+     * @param  array|\Yukikey\RequestCollection $requests Set of \Yubikey\Request objects
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function send($requests)
+    {
+        if (get_class($requests) !== 'Yubikey\\RequestCollection') {
+            $requests = new \Yubikey\RequestCollection($requests);
+        }
+
+        $responses = $this->request($requests);
+        return $responses;
+    }
+
+    /**
+     * Make the request given the Request set and content
+     *
+     * @param \Yubikey\RequestCollection $requests Request collection
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function request(\Yubikey\RequestCollection $requests)
+    {
+        $responses = new \Yubikey\ResponseCollection();
+        $startTime = microtime(true);
+        $multi = curl_multi_init();
+        $curls = array();
+
+        foreach ($requests as $index => $request) {
+            $curls$index = curl_init();
+            curl_setopt_array($curls$index, array(
+                CURLOPT_URL => $request->getUrl(),
+                CURLOPT_HEADER => 0,
+                CURLOPT_RETURNTRANSFER => 1
+            ));
+            curl_multi_add_handle($multi, $curls$index);
+        }
+
+        do {
+            while ((curl_multi_exec($multi, $active)) == CURLM_CALL_MULTI_PERFORM);
+            while ($info = curl_multi_info_read($multi)) {
+                if ($info'result' == CURLE_OK) {
+                    $return = curl_multi_getcontent($info'handle');
+                    $cinfo = curl_getinfo($info'handle');
+                    $url = parse_url($cinfo'url');
+
+                    $response = new \Yubikey\Response(array(
+                        'host' => $url'host',
+                        'mt' => (microtime(true)-$startTime)
+                    ));
+                    $response->parse($return);
+                    $responses->add($response);
+                }
+            }
+        } while ($active);
+
+        return $responses;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Request.php Added

@@ -0,0 +1,73 @@
+<?php
+
+namespace Yubikey;
+
+class Request
+{
+    /**
+     * Request HTTP type (verb)
+     * @var string
+     */
+    private $type = 'GET';
+
+    /**
+     * Request URL location
+     * @var string
+     */
+    private $url;
+
+    /**
+     * Init the object and set the URL if given
+     *
+     * @param string $url URL to request
+     */
+    public function __construct($url = null)
+    {
+        if ($url !== null) {
+            $this->setUrl($url);
+        }
+    }
+
+    /**
+     * Get the type of request
+     *
+     * @return string HTTP verb type
+     */
+    public function getType()
+    {
+        return $this->type;
+    }
+
+    /**
+     * Set the type of the request
+     *
+     * @param string $type HTTP verb type
+     */
+    public function setType($type)
+    {
+        $this->type = $type;
+    }
+
+    /**
+     * Get the current request URL location
+     *
+     * @return string URL location
+     */
+    public function getUrl()
+    {
+        return $this->url;
+    }
+
+    /**
+     * Set the URL location for the request
+     *
+     * @param string $url URL location
+     */
+    public function setUrl($url)
+    {
+        if (filter_var($url, FILTER_VALIDATE_URL) !== $url) {
+            throw new \Exception('Invalid URL: '.$url);
+        }
+        $this->url = $url;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/RequestCollection.php Added

@@ -0,0 +1,143 @@
+<?php
+
+namespace Yubikey;
+
+class RequestCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Request objects
+     * @var array
+     */
+    private $requests = array();
+
+    /**
+     * Current array position
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the collection and set requests data if given
+     *
+     * @param array $requests Set of \Yubikey\Requests objects
+     */
+    public function __construct(array $requests = array())
+    {
+        if (!empty($requests)) {
+            foreach ($requests as $request) {
+                $this->add($request);
+            }
+        }
+    }
+
+    /**
+     * Add the given request to the set
+     *
+     * @param \Yubikey\Request $request Request object
+     */
+    public function add(\Yubikey\Request $request)
+    {
+        $this->requests = $request;
+    }
+
+    /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->requests);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->requests$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->requests$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->requests$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->requests$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->requests$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->requests$offset);
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Response.php Added

@@ -0,0 +1,286 @@
+<?php
+
+namespace Yubikey;
+
+class Response
+{
+    /**
+     * Returned value of the hash given in the request
+     * @var string
+     */
+    private $h = null;
+
+    /**
+     * Timestamp in UTC of request
+     * @var string
+     */
+    private $t = null;
+
+    /**
+     * OTP given in request
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Nonce given in the request
+     * @var string
+     */
+    private $nonce = null;
+
+    /**
+     * Percent of validation servers that replied with "success" (0% - 100%)
+     * @var integer
+     */
+    private $sl = null;
+
+    /**
+     * Status of the response (see constants below)
+     * @var string
+     */
+    private $status = null;
+
+    /**
+     * OTP given by the user (used for verification)
+     * @var string
+     */
+    private $inputOtp = null;
+
+    /**
+     * Nonce used in the request (used for verification)
+     * @var string
+     */
+    private $inputNonce = null;
+
+    /**
+     * Timestamp returned from the response
+     * @var string
+     */
+    private $timestamp = null;
+
+    /**
+     * Session counter
+     * @var integer
+     */
+    private $sessioncounter = null;
+
+    /**
+     * Session use #
+     * @var integer
+     */
+    private $sessionuse = null;
+
+    /**
+     * Hostname request was made to
+     * @var string
+     */
+    private $host;
+
+    /**
+     * Microtime difference taken to get response
+     * @var integer
+     */
+    private $mt;
+
+    /**
+     * Define constants for the return status from API
+     */
+    const SUCCESS = 'OK';
+    const REPLAY_OTP = 'REPLAYED_OTP';
+    const REPLAY_REQUEST = 'REPLAYED_REQUEST';
+    const MISSING_PARAMETER = 'MISSING_PARAMETER';
+    const NO_CLIENT = 'NO_SUCH_CLIENT';
+    const BAD_OTP = 'BAD_OTP';
+    const BAD_SIGNATURE = 'BAD_SIGNATURE';
+    const OP_NOT_ALLOWED = 'OPERATION_NOT_ALLOWED';
+    const BACKEND_ERROR = 'BACKEND_ERROR';
+    const NOT_ENOUGH_ANSWERS = 'NOT_ENOUGH_ANSWERS';
+
+    /**
+     * Init the object and set the data into the response
+     *
+     * @param array $data Data from the Yubi API response
+     */
+    public function __construct($data = null)
+    {
+        if ($data !== null) {
+            $this->load($data);
+        }
+    }
+
+    /**
+     * Load the data into the object
+     *
+     * @param array $data Data from the object
+     * @return boolean True when loading is done
+     */
+    public function load($data)
+    {
+        foreach ($data as $index => $value) {
+            if (property_exists($this, $index)) {
+                $this->$index = trim($value);
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Parse the return data from the request and
+     *     load it into the object properties
+     *
+     * @param string $data API return data
+     */
+    public function parse($data)
+    {
+        $result = array();
+        $parts = explode("\n", $data);
+
+        foreach($parts as $index => $part) {
+            $kv = explode("=", $part);
+            if (!empty($kv1)) {
+                $result$kv0 = $kv1;
+            }
+        }
+
+        $this->load($result);
+    }
+
+    /**
+     * Get the time value for the response
+     *
+     * @return string Date/time string
+     */
+    public function getTime()
+    {
+        return $this->t;
+    }
+
+    /**
+     * Return the time to execute (microtime)
+     *
+     * @return integer Time result
+     */
+    public function getMt()
+    {
+        return $this->mt;
+    }
+
+    /**
+     * Set the OTP used in the request
+     * @param string $otp OTP string (from key)
+     */
+    public function setInputOtp($otp)
+    {
+        $this->inputOtp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the OTP used in the request
+     * @return string OTP string
+     */
+    public function getInputOtp()
+    {
+        return $this->inputOtp;
+    }
+
+    /**
+     * Set the nonce used in the request
+     * @param string $nonce Nonce from request
+     */
+    public function setInputNonce($nonce)
+    {
+        $this->inputNonce = $nonce;
+        return $this;
+    }
+
+    /**
+     * Get the nonce used in the request
+     * @return string Nonce from request
+     */
+    public function getInputNonce()
+    {
+        return $this->inputNonce;
+    }
+
+    /**
+     * Set response hostname
+     * @param string $host Hostname
+     */
+    public function setHost($host)
+    {
+        $this->host = $host;
+        return $this;
+    }
+
+    /**
+     * Get the current hostname
+     * @return string
+     */
+    public function getHost()
+    {
+        return $this->host;
+    }
+
+    /**
+     * Get the hash from the response
+     *
+     * @param boolean $encode "Encode" the data (replace + with %2B)
+     * @return string Hash value
+     */
+    public function getHash($encode = false)
+    {
+        $hash = $this->h;
+        if (substr($hash, -1) !== '=') {
+            $hash .= '=';
+        }
+        if ($encode === true) {
+            $hash = str_replace('+', '%2B', $hash);
+        }
+        return $hash;
+    }
+
+    /**
+     * Get the properties of the response
+     *
+     * @return array Response property list
+     */
+    public function getProperties()
+    {
+        return array(
+            't', 'otp', 'nonce', 'sl', 'status',
+            'timestamp', 'sessioncounter', 'sessionuse'
+        );
+    }
+
+    /**
+     * Magic method to get access to the private properties
+     * @param string $name Property name
+     * @return string|null If found, returns teh value. If not, null
+     */
+    public function __get($name)
+    {
+        return (property_exists($this, $name)) ? $this->$name : null;
+    }
+
+    /**
+     * Check the success of the response
+     *     Validates: status, OTP and nonce
+     * @return boolean Success/fail of request
+     */
+    public function success()
+    {
+        $inputOtp = $this->getInputOtp();
+        $inputNonce = $this->getInputNonce();
+
+        if ($inputNonce === null || $inputOtp === null) {
+            return false;
+        }
+
+        return (
+            $inputOtp == $this->otp
+            && $inputNonce === $this->nonce
+            && $this->status === Response::SUCCESS
+        ) ? true : false;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/ResponseCollection.php Added

@@ -0,0 +1,172 @@
+<?php
+
+namespace Yubikey;
+
+class ResponseCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Response objects
+     * @var array
+     */
+    private $responses = array();
+
+    /**
+     * Position in the data set (for Iterator)
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the object and set the Response objects if provided
+     *
+     * @param array $responses Response object set
+     */
+    public function __construct(array $responses = array())
+    {
+        if (!empty($responses)) {
+            foreach ($responses as $response) {
+                $this->add($response);
+            }
+        }
+    }
+
+    /**
+     * Determine, based on the Response status (success)
+     *     if the overall operation was successful
+     *
+     * @return boolean Success/fail status
+     */
+    public function success($first = false)
+    {
+        $success = false;
+        if ($first === true) {
+            // Sort them by timestamp, pop the first one and return pass/fail
+            usort($this->responses, function(\Yubikey\Response $r1, \Yubikey\Response $r2) {
+                return $r1->getMt() > $r2->getMt();
+            });
+            $response = $this->responses0;
+            return $response->success();
+        } else {
+            foreach ($this->responses as $response) {
+                if ($response->success() === false
+                    && $response->status !== Response::REPLAY_REQUEST) {
+                    return false;
+                } elseif ($response->success()) {
+                    $success = true;
+                }
+            }
+        }
+        return $success;
+    }
+
+    /**
+     * Add a new Response object to the set
+     *
+     * @param \Yubikey\Response $response Response object
+     */
+    public function add(\Yubikey\Response $response)
+    {
+        $this->responses = $response;
+    }
+
+        /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->responses);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->responses$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->responses$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->responses$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->responses$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->responses$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->responses$offset);
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Validate.php Added

@@ -0,0 +1,412 @@
+<?php
+
+namespace Yubikey;
+
+class Validate
+{
+    /**
+     * Yubico API hosts
+     * @var array
+     */
+    private $hosts = array(
+        'api.yubico.com',
+        'api2.yubico.com',
+        'api3.yubico.com',
+        'api4.yubico.com',
+        'api5.yubico.com'
+    );
+
+    /**
+     * Selected hosted for request
+     * @var string
+     */
+    private $host = null;
+
+    /**
+     * API given for request
+     * @var string
+     */
+    private $apiKey = null;
+
+    /**
+     * Use a secure/insecure connection (HTTPS vs HTTP)
+     * @var boolean
+     */
+    private $useSecure = true;
+
+    /**
+     * OTP provided by user
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Yubikey ID, to identify a connected user
+     * @var string
+     */
+    private $yubikeyid = null;
+
+    /**
+     * Init the object and set the API key, Client ID and optionally hosts
+     *
+     * @param string $apiKey API Key
+     * @param string $clientId Client ID
+     * @param array $hosts Set of hostnames (overwrites current)
+     * @throws \DomainException If curl is not enabled
+     */
+    public function __construct($apiKey, $clientId, array $hosts = array())
+    {
+        if ($this->checkCurlSupport() === false) {
+            throw new \DomainException('cURL support is required and is not enabled!');
+        }
+
+        $this->setApiKey($apiKey);
+        $this->setClientId($clientId);
+
+        if (!empty($hosts)) {
+            $this->setHosts($hosts);
+        }
+    }
+
+    /**
+     * Check for enabled curl support (requirement)
+     *
+     * @return boolean Enabled/not found flag
+     */
+    public function checkCurlSupport()
+    {
+        return (function_exists('curl_init'));
+    }
+
+    /**
+     * Get the currently set API key
+     *
+     * @return string API key
+     */
+    public function getApiKey($decoded = false)
+    {
+        return ($decoded === false) ? $this->apiKey : base64_decode($this->apiKey);
+    }
+
+    /**
+     * Set the API key
+     *
+     * @param string $apiKey API request key
+     */
+    public function setApiKey($apiKey)
+    {
+        $key = base64_decode($apiKey, true);
+        if ($key === false) {
+            throw new \InvalidArgumentException('Invalid API key');
+        }
+
+        $this->apiKey = $key;
+        return $this;
+    }
+
+    /**
+     * Set the OTP for the request
+     *
+     * @param string $otp One-time password
+     */
+    public function setOtp($otp)
+    {
+        $this->otp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the currently set OTP
+     *
+     * @return string One-time password
+     */
+    public function getOtp()
+    {
+        return $this->otp;
+    }
+
+    /**
+     * Get the current Client ID
+     *
+     * @return integer Client ID
+     */
+    public function getClientId()
+    {
+        return $this->clientId;
+    }
+
+    /**
+     * Set the current Client ID
+     *
+     * @param integer $clientId Client ID
+     */
+    public function setClientId($clientId)
+    {
+        $this->clientId = $clientId;
+        return $this;
+    }
+
+    /**
+     * Get the "use secure" setting
+     *
+     * @return boolean Use flag
+     */
+    public function getUseSecure()
+    {
+        return $this->useSecure;
+    }
+
+    /**
+     * Set the "use secure" setting
+     *
+     * @param boolean $use Use/don't use secure
+     * @throws \InvalidArgumentException when value is not boolean
+     */
+    public function setUseSecure($use)
+    {
+        if (!is_bool($use)) {
+            throw new \InvalidArgumentException('"Use secure" value must be boolean');
+        }
+        $this->useSecure = $use;
+        return $this;
+    }
+
+    /**
+     * Get the host for the request
+     *     If one is not set, it returns a random one from the host set
+     *
+     * @return string Hostname string
+     */
+    public function getHost()
+    {
+        if ($this->host === null) {
+            // pick a "random" host
+            $host = $this->hostsmt_rand(0,count($this->hosts)-1);
+            $this->setHost($host);
+            return $host;
+        } else {
+            return $this->host;
+        }
+    }
+
+    /**
+     * Get the current hosts list
+     *
+     * @return array Hosts list
+     */
+    public function getHosts()
+    {
+        return $this->hosts;
+    }
+
+    /**
+     * Set the API host for the request
+     *
+     * @param string $host Hostname
+     */
+    public function setHost($host)
+    {
+        $this->host = $host;
+        return $this;
+    }
+
+    /**
+     * Add a new host to the list
+     *
+     * @param string $host Hostname to add
+     */
+    public function addHost($host)
+    {
+        $this->hosts = $host;
+        return $this;
+    }
+
+    /**
+     * Set the hosts to request results from
+     *
+     * @param array $hosts Set of hostnames
+     */
+    public function setHosts(array $hosts)
+    {
+        $this->hosts = $hosts;
+    }
+
+    /**
+     * Geenrate the signature for the request values
+     *
+     * @param array $data Data for request
+     * @throws \InvalidArgumentException when API key is invalid
+     * @return Hashed request signature (string)
+     */
+    public function generateSignature($data, $key = null)
+    {
+        if ($key === null) {
+            $key = $this->getApiKey();
+            if ($key === null || empty($key)) {
+                throw new \InvalidArgumentException('Invalid API key!');
+            }
+        }
+
+        $query = http_build_query($data);
+        $query = utf8_encode(str_replace('%3A', ':', $query));
+
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            // base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+            base64_encode(hash_hmac('sha1', $query, $key, true))
+        );
+        return $hash;
+    }
+
+    /**
+     * Check the One-time Password with API request
+     *
+     * @param string $otp One-time password
+     * @param integer $clientId Client ID for API
+     * @throws \InvalidArgumentException when OTP length is invalid
+     * @return \Yubikey\Response object
+     */
+    public function check($otp, $multi = false)
+    {
+        $otp = trim($otp);
+        if (strlen($otp) < 32 || strlen($otp) > 48) {
+            throw new \InvalidArgumentException('Invalid OTP length');
+        }
+
+        $this->setOtp($otp);
+        $this->setYubikeyId();
+
+        $clientId = $this->getClientId();
+        if ($clientId === null) {
+            throw new \InvalidArgumentException('Client ID cannot be null');
+        }
+
+        $nonce = $this->generateNonce();
+        $params = array(
+            'id' => $clientId,
+            'otp' => $otp,
+            'nonce' => $nonce,
+            'timestamp' => '1'
+        );
+        ksort($params);
+
+        $url = '/wsapi/2.0/verify?'.http_build_query($params).'&h='.$this->generateSignature($params);
+        $hosts = ($multi === false) ? array(array_shift($this->hosts)) : $this->hosts;
+
+        return $this->request($url, $hosts, $otp, $nonce);
+    }
+
+    /**
+     * Generate a good nonce for the request
+     *
+     * @return string Generated hash
+     */
+    public function generateNonce()
+    {
+        if (function_exists('openssl_random_pseudo_bytes') === true) {
+            $hash = md5(openssl_random_pseudo_bytes(32));
+        } else {
+            $hash = md5(uniqid(mt_rand()));
+        }
+        return $hash;
+    }
+
+    /**
+     * Make the request(s) to the Yubi server(s)
+     *
+     * @param string $url URL for request
+     * @param array $hosts Set of hosts to request
+     * @param string $otp One-time password string
+     * @param string $nonce Generated nonce
+     * @return array Set of responses
+     */
+    public function request($url, array $hosts, $otp, $nonce)
+    {
+        $client = new \Yubikey\Client();
+        $pool = new \Yubikey\RequestCollection();
+
+        // Make the requests for the host(s)
+        $prefix = ($this->getUseSecure() === true) ? 'https' : 'http';
+        foreach ($hosts as $host) {
+            $link = $prefix.'://'.$host.$url;
+            $pool->add(new \Yubikey\Request($link));
+        }
+        $responses = $client->send($pool);
+        $responseCount = count($responses);
+
+        for ($i = 0; $i < $responseCount; $i++) {
+            $responses$i->setInputOtp($otp)->setInputNonce($nonce);
+
+            if ($this->validateResponseSignature($responses$i) === false) {
+                unset($responses$i);
+            }
+        }
+
+        return $responses;
+    }
+
+    /**
+     * Validate the signature on the response
+     *
+     * @param  \Yubikey\Response $response Response instance
+     * @return boolean Pass/fail status of signature validation
+     */
+    public function validateResponseSignature(\Yubikey\Response $response)
+    {
+        $params = array();
+        foreach ($response->getProperties() as $property) {
+            $value = $response->$property;
+            if ($value !== null) {
+                $params$property = $value;
+            }
+        }
+        ksort($params);
+
+        $signature = $this->generateSignature($params);
+        return $this->hash_equals($signature, $response->getHash(true));
+    }
+
+    /**
+     * Polyfill PHP 5.6.0's hash_equals() feature
+     */
+    public function hash_equals($a, $b)
+    {
+        if (\function_exists('hash_equals')) {
+            return \hash_equals($a, $b);
+        }
+        if (\strlen($a) !== \strlen($b)) {
+            return false;
+        }
+        $res = 0;
+        $len = \strlen($a);
+        for ($i = 0; $i < $len; ++$i) {
+            $res |= \ord($a$i) ^ \ord($b$i);
+        }
+        return $res === 0;
+    }
+
+    /**
+     * Extract the yubikey ID from the OTP
+     */
+    public function setYubikeyId()
+    {
+        $this->yubikeyid = substr($this->getOtp(), 0, -32);
+        return $this;
+    }
+
+    /**
+     * Get the yubikey ID from the OTP
+     *
+     * @param string Optional OTP to extract the ID from
+     *
+     * @return string Yubikey ID string
+     */
+    public function getYubikeyId($otp = '')
+    {
+      if (!empty($otp)) {
+        return substr($otp, 0, -32);
+      }
+
+      return $this->yubikeyid;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/test.php Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/ValidateTest.php Added

@@ -0,0 +1,179 @@
+<?php
+
+class ValidateTest extends \PHPUnit_Framework_TestCase
+{
+    private $validate = null;
+
+    private $apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+
+    private $clientId = 12345;
+
+    public function setUp()
+    {
+        $this->validate = new \Yubikey\Validate($this->apiKey, $this->clientId);
+    }
+
+    /**
+     * Test the getter and setter for the API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @covers \Yubikey\Validate::getApiKey
+     */
+    public function testGetSetApiKey()
+    {
+        $preKey = 'testing1234567890';
+        $key = base64_encode($preKey);
+
+        $this->validate->setApiKey($key);
+        $this->assertEquals($this->validate->getApiKey(), $preKey);
+    }
+
+    /**
+     * Test the setting of a non-base64 encoded API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSetInvalidApiKey()
+    {
+        $key = 'testing1234^%$#^#';
+        $this->validate->setApiKey($key);
+    }
+
+    /**
+     * Test the getter and setter for the One-time password
+     * @covers \Yubikey\Validate::setOtp
+     * @covers \Yubikey\Validate::getOtp
+     */
+    public function testGetSetOtp()
+    {
+        $otp = base64_encode('testing1234567890');
+
+        $this->validate->setOtp($otp);
+        $this->assertEquals($this->validate->getOtp(), $otp);
+    }
+
+    /**
+     * Test that the getter/setter for the Client ID works correctly
+     * @covers \Yubikey\Validate::getClientId
+     * @covers \Yubikey\Validate::setClientId
+     */
+    public function testGetSetClientId()
+    {
+        $clientId = 12345;
+
+        $this->validate->setClientId($clientId);
+        $this->assertEquals($clientId, $this->validate->getClientId());
+    }
+
+    /**
+     * Test thta the getter/setter for the "use secure" setting works correctly
+     * @covers \Yubikey\Validate::setUseSecure
+     * @covers \Yubikey\Validate::getUseSecure
+     */
+    public function testGetSetUseSecure()
+    {
+        $useSecure = true;
+
+        $this->validate->setUseSecure($useSecure);
+        $this->assertEquals($useSecure, $this->validate->getUseSecure());
+    }
+
+    /**
+     * Test that an exception is thrown when the "use secure" valus
+     *     is not boolean
+     *
+     * @expectedException \InvalidArgumentException
+     * @covers \Yubikey\Validate::setUseSecure
+     */
+    public function testSetUseSecureInvalid()
+    {
+        $useSecure = 'invalid';
+        $this->validate->setUseSecure($useSecure);
+    }
+
+    /**
+     * Test that the getter/setter for the host works correctly
+     * @covers \Yubikey\Validate::setHost
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetSetHost()
+    {
+        $host = 'test.foo.com';
+
+        $this->validate->setHost($host);
+        $this->assertEquals($this->validate->getHost(), $host);
+    }
+
+    /**
+     * Test that a valid random host is selected if none was previously set
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetRandomHost()
+    {
+        $host1 = $this->validate->getHost();
+        $this->assertNotEquals($host1, null);
+    }
+
+    /**
+     * Test that the signature generation is valid
+     * @covers \Yubikey\Validate::generateSignature
+     */
+    public function testSignatureGenerate()
+    {
+        $data = array('foo' => 'bar');
+        $key = $this->validate->getApiKey();
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $this->validate->generateSignature($data);
+        $this->assertEquals($hash, $signature);
+    }
+
+    /**
+     * Test that an exception is thrown when the API is invalid (null or empty)
+     * @covers \Yubikey\Validate::generateSignature
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSignatureGenerateNoApiKey()
+    {
+        $key = null;
+        $data = array('foo' => 'bar');
+        $validate = new \Yubikey\Validate($key, $this->clientId);
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $validate->generateSignature($data);
+    }
+
+    /**
+     * Add a new Host to the list
+     * @covers \Yubikey\Validate::addHost
+     */
+    public function testAddNewHost()
+    {
+        $this->validate->addHost('test.com');
+        $this->assertTrue(
+            in_array('test.com', $this->validate->getHosts())
+        );
+    }
+
+    /**
+     * Set the new Hosts list (override)
+     * @covers \Yubikey\Validate::setHosts
+     * @covers \Yubikey\Validate::getHosts
+     */
+    public function testSetHosts()
+    {
+        $hosts = array('foo.com');
+        $this->validate->setHosts($hosts);
+
+        $this->assertEquals(
+            $this->validate->getHosts(),
+            $hosts
+        );
+    }
+}
+

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/bootstrap.php Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/phpunit.xml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/.scrutinizer.yml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/.travis.yml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/LICENCE Added

@@ -0,0 +1,20 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Florent Morselli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/README.md Added

@@ -0,0 +1,61 @@
+# TOTP / HOTP library in PHP #
+
+!Scrutinizer Quality Score(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/quality-score.png?s=a184d180414b30764d19b421a12d6cf7e9e5e7c2)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+!Code Coverage(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/coverage.png?s=d1bd1b26b56e581d6a4d1deb87eaadc51a05f31d)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+
+!Build Status(https://travis-ci.org/Spomky-Labs/otphp.svg?branch=master)(https://travis-ci.org/Spomky-Labs/otphp)
+!HHVM Status(http://hhvm.h4cc.de/badge/Spomky-Labs/otphp.png)(http://hhvm.h4cc.de/package/Spomky-Labs/otphp)
+!PHP 7 ready(http://php7ready.timesplinter.ch/Spomky-Labs/otphp/badge.svg)(https://travis-ci.org/Spomky-Labs/otphp)
+
+!SensioLabsInsight(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9/big.png)(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9)
+
+!Latest Stable Version(https://poser.pugx.org/spomky-labs/otphp/v/stable.png)(https://packagist.org/packages/spomky-labs/otphp) !Total Downloads(https://poser.pugx.org/spomky-labs/otphp/downloads.png)(https://packagist.org/packages/spomky-labs/otphp) !Latest Unstable Version(https://poser.pugx.org/spomky-labs/otphp/v/unstable.png)(https://packagist.org/packages/spomky-labs/otphp) !License(https://poser.pugx.org/spomky-labs/otphp/license.png)(https://packagist.org/packages/spomky-labs/otphp)
+
+A php library for generating one time passwords according to  RFC 4226 (http://tools.ietf.org/html/rfc4226) (HOTP Algorithm) and the  RFC 6238 (http://tools.ietf.org/html/rfc6238) (TOTP Algorithm)
+
+This library is compatible with Google Authenticator apps available for Android and iPhone. It is also compatible with other applications such as FreeOTP(https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp) for example.
+
+This is a fork of https://github.com/lelag/otphp with the following changes:
+
+* Continuous unit and functional tests using Travis-CI
+* 100% test coverage
+* Code Quality improvement
+* Better namespace usage
+* Issuer support
+* Window support
+* Completely abstract objects
+
+## The Release Process
+
+The release process is described here(doc/Release.md).
+
+## Prerequisites
+
+This library needs at least `PHP 5.3`.
+It has been successfully tested using `PHP 5.3` to `PHP 5.6`, `PHP 7` and `HHVM`
+
+## Installation
+
+The preferred way to install this library is to rely on Composer:
+
+```sh
+composer require "spomky-labs/otphp" "~5.0.0"
+```
+
+## Extend the library
+
+This library only contains the logic. You must extend all classes to define setters and getters.
+
+Look at Extend classes(doc/Extend.md) for more information and examples.
+
+## How to use
+
+Your classes are ready to use? Have a look at How to use(doc/Use.md) to generate your first OTP.
+
+## Contributing
+
+Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices(doc/Contributing.md).
+
+## Licence
+
+This software is release under MIT licence(LICENSE).

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/composer.json Added

@@ -0,0 +1,38 @@
+{
+    "name": "spomky-labs/otphp",
+    "type": "library",
+    "description": "PHP OTP Library compatible with Google Authenticator",
+    "license": "MIT",
+    "keywords": "otp", "hotp", "totp", "RFC 4226", "RFC 6238",
+    "homepage": "https://github.com/Spomky-Labs/otphp",
+    "authors": 
+        {
+            "name": "Florent Morselli",
+            "homepage": "https://github.com/Spomky"
+        },
+        {
+            "name": "All contributors",
+            "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+        }
+    ,
+    "require": {
+        "php": ">=5.3.2",
+        "christian-riesen/base32": "~1.1"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "~4.0"
+    },
+    "suggest": {
+    },
+    "autoload": {
+        "psr-4": { "OTPHP\\": "lib/" }
+    },
+    "autoload-dev": {
+        "psr-4": { "MyProject\\": "examples/" }
+    },
+    "extra": {
+        "branch-alias": {
+            "dev-master": "5.0.x-dev"
+        }
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Contributing.md Added

@@ -0,0 +1,26 @@
+Contributing
+=============================
+
+First of all, **thank you** for contributing.
+
+Bugs or feature requests can be posted online on the GitHub issues section of the project.
+
+Few rules to ease code reviews and merges:
+
+- You MUST follow the PSR-1(http://www.php-fig.org/psr/psr-1/), PSR-2(http://www.php-fig.org/psr/psr-2/) and PSR-4(http://www.php-fig.org/psr/psr-4/).
+- You MUST run the test suite.
+- You MUST write (or update) unit tests when bugs are fixed or features are added.
+- You SHOULD write documentation.
+
+We use Git-Flow(http://jeffkreeftmeijer.com/2010/why-arent-you-using-git-flow/) to automate our git branching workflow.
+
+To contribute use Pull Requests(https://help.github.com/articles/using-pull-requests), please, write commit messages that make sense, and rebase your branch before submitting your PR.
+
+May be asked to squash your commits too. This is used to "clean" your Pull Request before merging it, avoiding commits such as fix tests, fix 2, fix 3, etc.
+
+Run test suite
+------------
+
+* install composer: `curl -s http://getcomposer.org/installer | php`
+* install dependencies: `php composer.phar install`
+* run tests: `vendor/bin/phpunit`

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Extend.md Added

@@ -0,0 +1,331 @@
+# Extending all classes
+
+## Description of classes
+
+This library has three abstract classes:
+
+* OTP: the base of all OTP classes
+* TOTP: Time Based OTP
+* HOTP: Counter Based OTP
+
+## OTP Class
+
+The all classes must implement the following methods:
+
+* ```public functon getLabel();```
+* ```public functon getIssuer();```
+* ```public functon isIssuerIncludedAsParameter();```
+* ```public functon getDigits();```
+* ```public functon getDigest();```
+
+If you wand to extend
+
+* TOTP Class, you must also implement ```public functon getInterval();```.
+* HOTP Class, you must also implement ```public functon getCounter();``` and ```protected functon updateCounter($counter);```.
+
+## Implementation
+
+### TOTP Class
+
+The following class is a possible implementation of the TOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\TOTP as BaseTOTP;
+
+class TOTP extends BaseTOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $interval = 30;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setInterval($interval)
+    {
+        if( !is_integer($interval) || $interval < 1 ) {
+            throw new \Exception("Interval must be at least 1.");
+        }
+        $this->interval = $interval;
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a TOTP object:
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$totp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setInterval(60);
+```
+
+
+### HOTP Class
+
+The following class is a possible implementation of the HOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\HOTP as BaseHOTP;
+
+class HOTP extends BaseHOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $counter = 0;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setCounter($counter)
+    {
+        if( !is_integer($counter) || $counter < 0 ) {
+            throw new \Exception("Counter must be at least 0.");
+        }
+        $this->counter = $counter;
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+        return $this;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a HOTP object:
+
+```php
+<?php
+use MyProject\HOTP;
+
+$hotp = new HOTP;
+$hotp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$hotp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setCounter(100);
+```

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Release.md Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Use.md Added

@@ -0,0 +1,131 @@
+# How to Use
+
+## Common methods
+
+TOTP and HOTP objects have the following common methods:
+
+* ```public function at($input);```: generate an OTP at the specified counter
+* ```public function verify($otp, $input, $window);```: verify if the OTP is valid for the specified input (timestamp, counter...)
+* ```public function getProvisioningUri()```: return a provisioning URI to ease integration in applications
+
+Example:
+
+```php
+$my_otp_object->at(1000); //e.g. will return 123456
+$my_otp_object->verify(123456, 1000); //Will return true
+$my_otp_object->verify(123456, 1001); //Will return false
+```
+
+## Counter Based OTP (HOTP)
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of counters.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact counter.
+
+If the parameter is an integer, the OTP from `counter` to `counter+window` will be tested.
+For example, if the `counter`is `1000` and the window `10`, the OTP tested are within `1000` and `1010`.
+
+```php
+$my_otp_object->verify(123456, 999); //Will return false
+$my_otp_object->verify(123456, 999, 10); //Will return true (1000 is tested)
+```
+
+If the verification succeed, the counter will be updated.
+
+## Time Based OTP (TOTP)
+
+This OTP object has a specific method:
+
+* ```public function now()```: return an OTP at the current timestamp
+
+Example:
+
+```php
+$my_otp_object->now(); //e.g. will return 123456
+$my_otp_object->verify(123456); //Will return true.
+```
+    
+After the interval defined by the object:
+
+```php
+$my_otp_object->verify(123456); //Will return false
+```
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of timestamps.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact timestamp.
+If the parameter is an integer, the OTP before and after the timestamp will be tested.
+
+The window of timestamps goes from `- $window * interval + timestamp` to `+ $window * interval + timestamp`. For example, if the `window`is `5`, the interval `30` and the timestamp `600`, the OTP tested are within `450` and `750`.
+
+### Google Authenticator Compatible
+
+The library works with the Google Authenticator iPhone and Android app, and also
+includes the ability to generate provisioning URI's for use with the QR Code scanner
+built into the app.
+
+Google only supports SHA-1 digest algorithm, 30 second interval and 6 digits OTP. Other values for these parameters are ignored by the Google Authenticator application.
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+$totp->getProvisioningUri(); // => 'otpauth://totp/alice%40google.com?secret=JBSWY3DPEHPK3PXP'
+```
+
+### Working examples
+
+#### Compatible with Google Authenticator
+
+Scan the following barcode with your phone, using Google Authenticator
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30);
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```
+
+#### Not Compatible with Google Authenticator
+
+The following barcode will not work with Google Authenticator because digest algoritm is not SHA-1, there are 8 digits and counter is not 30 seconds.
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Falgorithm%3Dsha512%26digits%3D8%26period%3D10%26secret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(8)
+     ->setDigest('sha512')
+     ->setInterval(10)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/HOTP.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/OTP.php Added

@@ -0,0 +1,109 @@
+<?php
+
+namespace MyProject;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/TOTP.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/examples.php Added

@@ -0,0 +1,45 @@
+<?php
+
+require_once implode(DIRECTORY_SEPARATOR, array(__DIR__, '..', 'vendor', 'autoload.php'));
+
+use MyProject\TOTP;
+use MyProject\HOTP;
+use Base32\Base32;
+
+$secret = trim(Base32::encode(uniqid('', true)), '=');
+
+$totp = new TOTP();
+
+$totp->setSecret($secret)
+     ->setDigest('sha256')
+     ->setDigits(8)
+     ->setLabel('alice@localhost')
+     ->setIssuer('MyProject')
+     ->setInterval(60)
+     ->setIssuerIncludedAsParameter(true);
+
+$hotp = new HOTP();
+
+$hotp->setSecret($secret)
+    ->setDigest('sha512')
+    ->setDigits(5)
+    ->setLabel('alice@localhost')
+    ->setIssuer('MyProject')
+    ->setCounter(1000)
+    ->setIssuerIncludedAsParameter(true);
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Time Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $totp->getProvisioningUri());
+printf("Current code is %s\r\n", $totp->now());
+
+printf(str_repeat("\r\n", 3));
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Counter Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $hotp->getProvisioningUri());
+printf("Current code is %s\r\n", $hotp->at(1010));

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/HOTP.php Added

@@ -0,0 +1,44 @@
+<?php
+
+namespace OTPHP;
+
+abstract class HOTP extends OTP implements HOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        return $this->generateURI('hotp', array('counter' => $this->getCounter()), $google_compatible);
+    }
+
+    /**
+     * @param int $counter The new initial counter (a positive integer)
+     */
+    abstract protected function updateCounter($counter);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $counter, $window = null)
+    {
+        if ($counter < $this->getCounter()) {
+            return false;
+        }
+
+        if (!is_integer($window)) {
+            $window = 0;
+        }
+        $window = abs($window);
+
+        for ($i = $counter; $i <= $counter + $window; ++$i) {
+            if ($otp === $this->at($i)) {
+                $this->updateCounter($i + 1);
+
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/HOTPInterface.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/OTP.php Added

@@ -0,0 +1,146 @@
+<?php
+
+namespace OTPHP;
+
+use Base32\Base32;
+
+abstract class OTP implements OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string The OTP at the specified input
+     */
+    protected function generateOTP($input)
+    {
+        $hash = hash_hmac($this->getDigest(), $this->intToByteString($input), $this->getDecodedSecret());
+        $hmac = array();
+        foreach (str_split($hash, 2) as $hex) {
+            $hmac = hexdec($hex);
+        }
+        $offset = $hmaccount($hmac) - 1 & 0xF;
+        $code = ($hmac$offset + 0 & 0x7F) << 24 |
+            ($hmac$offset + 1 & 0xFF) << 16 |
+            ($hmac$offset + 2 & 0xFF) << 8 |
+            ($hmac$offset + 3 & 0xFF);
+
+        $otp = $code % pow(10, $this->getDigits());
+
+        return str_pad((string) $otp, $this->getDigits(), '0', STR_PAD_LEFT);
+    }
+
+    /**
+     * @return bool Return true is it must be included as parameter, else false
+     */
+    protected function issuerAsParameter()
+    {
+        if (!is_null($this->getIssuer()) && $this->isIssuerIncludedAsParameter() === true) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * @throws \InvalidArgumentException
+     *
+     * @return array
+     */
+    private function getParameters()
+    {
+        $options = array(
+            'algorithm' => $this->getDigest(),
+            'digits' => $this->getDigits(),
+            'secret' => $this->getSecret(),
+        );
+        if ($this->issuerAsParameter()) {
+            $options'issuer' = $this->getIssuer();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @param array $options
+     * @param bool  $google_compatible
+     */
+    protected function filterOptions(array &$options, $google_compatible)
+    {
+        if (true === $google_compatible) {
+            foreach (array('algorithm' => 'sha1', 'period' => 30, 'digits' => 6) as $key => $default) {
+                if (isset($options$key) && $default === $options$key) {
+                    unset($options$key);
+                }
+            }
+        }
+
+        ksort($options);
+    }
+
+    /**
+     * @param       $type
+     * @param array $options
+     * @param       $google_compatible
+     *
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    protected function generateURI($type, array $options = array(), $google_compatible)
+    {
+        if (is_null($this->getLabel())) {
+            throw new \InvalidArgumentException('No label defined.');
+        }
+        $options = array_merge($options, $this->getParameters());
+        $this->filterOptions($options, $google_compatible);
+
+        $params = str_replace(
+            array('+', '%7E'),
+            array('%20', '~'),
+            http_build_query($options)
+        );
+
+        return sprintf(
+            'otpauth://%s/%s?%s',
+            $type,
+            rawurlencode((!is_null($this->getIssuer()) ? $this->getIssuer().':' : '').$this->getLabel()),
+            $params
+        );
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function at($input)
+    {
+        return $this->generateOTP($input);
+    }
+
+    /**
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    private function getDecodedSecret()
+    {
+        $secret = Base32::decode($this->getSecret());
+
+        return $secret;
+    }
+
+    /**
+     * @param int $int
+     *
+     * @return string
+     */
+    private function intToByteString($int)
+    {
+        $result = array();
+        while (0 !== $int) {
+            $result = chr($int & 0xFF);
+            $int >>= 8;
+        }
+
+        return str_pad(implode(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/OTPInterface.php Added

@@ -0,0 +1,61 @@
+<?php
+
+namespace OTPHP;
+
+interface OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string Return the OTP at the specified input
+     */
+    public function at($input);
+
+    /**
+     * Verify that the OTP is valid with the specified input.
+     *
+     * @param string   $otp
+     * @param int      $input
+     * @param int|null $window
+     *
+     * @return bool
+     */
+    public function verify($otp, $input, $window = null);
+
+    /**
+     * @return string The secret of the OTP
+     */
+    public function getSecret();
+
+    /**
+     * @return string The label of the OTP
+     */
+    public function getLabel();
+
+    /**
+     * @return string The issuer
+     */
+    public function getIssuer();
+
+    /**
+     * @return bool If true, the issuer will be added as a parameter in the provisioning URI
+     */
+    public function isIssuerIncludedAsParameter();
+
+    /**
+     * @return int Number of digits in the OTP
+     */
+    public function getDigits();
+
+    /**
+     * @return string Digest algorithm used to calculate the OTP. Possible values are 'md5', 'sha1', 'sha256' and 'sha512'
+     */
+    public function getDigest();
+
+    /**
+     * @param bool $google_compatible If true (default), will produce provisioning URI compatible with Google Authenticator. Only applicable if algorithm="sha1", period=30 and digits=6.
+     *
+     * @return string Get the provisioning URI
+     */
+    public function getProvisioningUri($google_compatible = true);
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/TOTP.php Added

@@ -0,0 +1,68 @@
+<?php
+
+namespace OTPHP;
+
+abstract class TOTP extends OTP implements TOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function at($timestamp)
+    {
+        return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function now()
+    {
+        return $this->at(time());
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $timestamp = null, $window = null)
+    {
+        if (is_null($timestamp)) {
+            $timestamp = time();
+        }
+
+        if (!is_integer($window)) {
+            return $otp === $this->at($timestamp);
+        }
+        $window = abs($window);
+
+        for ($i = -$window; $i <= $window; ++$i) {
+            if ($otp === $this->at($i * $this->getInterval() + $timestamp)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        $params = array();
+        if (true !== $google_compatible || 30 !== $this->getInterval()) {
+            $params = array('period' => $this->getInterval());
+        }
+
+        return $this->generateURI('totp', $params, $google_compatible);
+    }
+
+    /**
+     * @param int $timestamp
+     *
+     * @return int
+     */
+    private function timecode($timestamp)
+    {
+        return (int) ((((int) $timestamp * 1000) / ($this->getInterval() * 1000)));
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/TOTPInterface.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/phpunit.xml.dist Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/HOTPTest.php Added

@@ -0,0 +1,144 @@
+<?php
+
+class HOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertEquals('otpauth://hotp/My%20Project%3Aalice%40foo.bar?counter=1000&digits=8&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testVerifyCounterInvalid()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertFalse($otp->verify(0, 100));
+    }
+
+    public function testVerifyCounterChanged()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->method('getCounter')
+            ->will($this->onConsecutiveCalls(1000, 1100, 1100));
+
+        $otp->expects($this->once())
+            ->method('updateCounter')
+            ->with(1101);
+
+        $this->assertTrue($otp->verify('98449994', 1100));
+        $this->assertFalse($otp->verify('11111111', 1099));
+    }
+
+    public function testVerifyValidInWindow()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertTrue($otp->verify('59647237', 1000, 50));
+        $this->assertFalse($otp->verify('51642065', 1000, 50));
+        $this->assertTrue($otp->verify('51642065', 1000, 100));
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/OTPTest.php Added

@@ -0,0 +1,92 @@
+<?php
+
+class OTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(6));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('549607', $otp->at(500));
+        $this->assertEquals('654666', $otp->at(1500));
+    }
+
+    /**
+     * @expectedException Exception
+     */
+    public function testGenerateUriWithoutLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->getMock();
+
+        $method = self::getMethod('generateURI');
+
+        $method->invokeArgs($otp, array('test', array(), true));
+    }
+
+    public function testGenerateUriWithValidLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $method = self::getMethod('generateURI');
+
+        $this->assertEquals('otpauth://test/alice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+        $this->assertEquals('otpauth://test/alice%40foo.bar?option1=baz&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array('option1' => 'baz'), true)));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+
+        $otp->expects($this->any())
+            ->method('isIssuerIncludedAsParameter')
+            ->will($this->returnValue(true));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&issuer=My%20Project&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+    }
+
+    /**
+     * @param string $name
+     */
+    protected static function getMethod($name)
+    {
+        $class = new \ReflectionClass('OTPHP\OTP');
+        $method = $class->getMethod($name);
+        $method->setAccessible(true);
+
+        return $method;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/TOTPTest.php Added

@@ -0,0 +1,151 @@
+<?php
+
+use Base32\Base32;
+
+class TOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('762124', $otp->at(319690800));
+        $this->assertEquals('139664', $otp->at(1301012137));
+    }
+
+    public function testGenerateOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals($otp->now(), $otp->at(time()));
+    }
+
+    public function testVerifyOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $totp = $otp->at(time());
+        $this->assertTrue($otp->verify($totp));
+    }
+
+    public function testVerifyOtp()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertTrue($otp->verify('855783', 0));
+        $this->assertTrue($otp->verify('762124', 319690800));
+        $this->assertTrue($otp->verify('139664', 1301012137));
+
+        $this->assertFalse($otp->verify('139664', 1301012107));
+        $this->assertFalse($otp->verify('139664', 1301012167));
+        $this->assertFalse($otp->verify('139664', 1301012197));
+    }
+
+    public function testNotCompatibleWithGoogleAuthenticator()
+    {
+        $otp = $this->creatTOTP(9, 'sha512', 10);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha512&digits=9&period=10&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    /**
+     * @dataProvider testVectorsData
+     */
+    public function testVectors($totp, $timestamp, $expected_value)
+    {
+        $this->assertEquals($expected_value, $totp->at($timestamp));
+        $this->assertTrue($totp->verify($expected_value, $timestamp));
+    }
+
+    /**
+     * @see https://tools.ietf.org/html/rfc6238#appendix-B
+     * @see http://www.rfc-editor.org/errata_search.php?rfc=6238
+     */
+    public function testVectorsData()
+    {
+        $totp_sha1 = $this->creatTOTP(8, 'sha1',   30, Base32::encode('12345678901234567890'));
+        $totp_sha256 = $this->creatTOTP(8, 'sha256', 30, Base32::encode('12345678901234567890123456789012'));
+        $totp_sha512 = $this->creatTOTP(8, 'sha512', 30, Base32::encode('1234567890123456789012345678901234567890123456789012345678901234'));
+
+        return array(
+            array($totp_sha1,   59, '94287082'),
+            array($totp_sha256, 59, '46119246'),
+            array($totp_sha512, 59, '90693936'),
+            array($totp_sha1,   1111111109, '07081804'),
+            array($totp_sha256, 1111111109, '68084774'),
+            array($totp_sha512, 1111111109, '25091201'),
+            array($totp_sha1,   1111111111, '14050471'),
+            array($totp_sha256, 1111111111, '67062674'),
+            array($totp_sha512, 1111111111, '99943326'),
+            array($totp_sha1,   1234567890, '89005924'),
+            array($totp_sha256, 1234567890, '91819424'),
+            array($totp_sha512, 1234567890, '93441116'),
+            array($totp_sha1,   2000000000, '69279037'),
+            array($totp_sha256, 2000000000, '90698825'),
+            array($totp_sha512, 2000000000, '38618901'),
+            array($totp_sha1,   20000000000, '65353130'),
+            array($totp_sha256, 20000000000, '77737706'),
+            array($totp_sha512, 20000000000, '47863826'),
+        );
+    }
+
+    public function testWithoutGoogleAuthenticatorCompatibility()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha1&digits=6&period=30&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri(false));
+    }
+
+    public function testVerifyOtpInWindow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertFalse($otp->verify('054409', 319690800, 10)); // -11 intervals
+        $this->assertTrue($otp->verify('808167', 319690800, 10)); // -10 intervals
+        $this->assertTrue($otp->verify('364393', 319690800, 10)); // -9 intervals
+        $this->assertTrue($otp->verify('762124', 319690800, 10)); // 0 intervals
+        $this->assertTrue($otp->verify('988451', 319690800, 10)); // +9 intervals
+        $this->assertTrue($otp->verify('789387', 319690800, 10)); // +10 intervals
+        $this->assertFalse($otp->verify('465009', 319690800, 10)); // +11 intervals
+    }
+
+    private function creatTOTP($digits, $digest, $interval, $secret = 'JDDK4U6G3BJLEZ7Y', $label = 'alice@foo.bar', $issuer = 'My Project')
+    {
+        $otp = $this->getMockBuilder('OTPHP\TOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getInterval'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue($label));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue($secret));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue($issuer));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue($digest));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue($digits));
+
+        $otp->expects($this->any())
+            ->method('getInterval')
+            ->will($this->returnValue($interval));
+
+        return $otp;
+    }
+}

Changes of Revision 11