Kolab Groupware OBS

roundcubemail.spec Changed

buildroundcubemailtarball.sh Changed

roundcubemail-1.5.3.tar.gz/composer.json Changed

roundcubemail-1.5.3.tar.gz/composer.lock Changed

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ,
-    "content-hash": "9c14e88b992f90d671aa18908e42ffd2",
+    "content-hash": "d9b8a5ccc1731890b71e5d779f031351",
     "packages": 
         {
             "name": "caxy/php-htmldiff",
@@ -67,6 +67,65 @@
             "time": "2019-02-20T18:52:14+00:00"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "time": "2021-02-26T10:19:33+00:00"
+        },
+        {
             "name": "endroid/qr-code",
             "version": "1.6.6",
             "source": {
@@ -121,6 +180,59 @@
             "time": "2016-05-29T07:37:18+00:00"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "time": "2018-03-08T20:38:39+00:00"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "source": {
@@ -572,6 +684,44 @@
             }
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "dist": {
@@ -977,6 +1127,36 @@
             }
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors":

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/README.md Added

@@ -0,0 +1,113 @@
+Kolab Multi-Factor Authentication Plugin
+========================================
+
+The plugin is designed to be a generic container for different 2nd factor 
+authentication mechanisms paired with different ways to store the related 
+data for Roundcube user accounts. Both drivers and storage backends are derived 
+from abstract classes which define the common interface and are configurable.
+
+Drivers
+-------
+
+Multiple methods for 2nd factor authentication can be enabled for the users 
+to select from. The basic implementation covers TOTP, HOTP and Yubikey methods.
+
+TOTP (RFC 6238) and HOTP (RFC 4226) can be used in conjunction with freely available 
+mobile phone apps like FreeOTP (TOTP only!) or Google Authenticator. To provision 
+the app with your account settings, a QR code is displayed which can be scanned 
+with the mobile phone camera.
+
+The Yubikey driver uses the Yubico Validation Service either by using the public 
+YubiCloud API or another locally hosted verification server. The host(s) to use 
+for validation are configurable.
+
+
+Storage Backends
+----------------
+
+Some authentication methods require to store secret data per user account on the 
+server. For this, one of different storage backends can be selected:
+
+**Roundcube**
+
+The simplest way is to store authentication secrets and configuration in the 
+user preferences of Roundcube itself.
+
+**LDAP**
+
+For an external storage option, the LDAP module can be used. This keeps the 
+authentication data separated from the Roundcube user database. See //LDAP Storage// 
+below for more information. The LDAP connection parameters are defined through the 
+`kolab_2fa_storage_config` config option.
+
+
+Installation
+------------
+
+After placing the plugin contents into Roundcube's plugins directory, the 3rd party 
+libraries need to be installed using Composer:
+
+```
+$ composer require "endroid/qrcode" "~1.5.0" --no-update
+$ composer require "spomky-labs/otphp" "~5.0.0" --no-update
+$ composer require "enygma/yubikey" "~3.2"
+```
+
+See the `composer.json` file for the actual module names and versions.
+
+
+Configuration
+-------------
+
+Copy the sample `config.inc.php.dist` file into `config.inc.php` and adjust the 
+settings according to your desired setup. All options are described with inline 
+comments directly in the sample file.
+
+When using the LDAP storage together with a Kolab installation, you may want to save 
+an additional LDAP lookup for authentication factors on every login, the LDAP driver 
+can assign roles to the user record when registering authentication factors
+(see `user_roles` storage config option). With the following additions to the 
+`kolab_auth` plugin config, these roles can be used to determine whether the user 
+has multi-factor authentication enabled:
+
+```
+// Disable lokkups by default:
+$config'kolab_2fa_check' = false;
+
+// Enable 2nd factor lookup on a role-by-role basis
+$config'kolab_auth_role_settings' = array(
+    'cn=totp-user,dc=example,dc=org' => array(
+        'kolab_2fa_check' => array(
+            'mode' => 'override',
+            'value' => true,
+        ),
+    ),
+);
+```
+
+LDAP Storage
+------------
+
+Define an `organizationalunit` with DN `ou=Tokens,dc=example,dc=org` to store 
+all authentication tokens.
+
+For token records, the https://git.fedorahosted.org/cgit/freeipa.git/tree/install/share/70ipaotp.ldif | FreeIPA OTP schema 
+can be used. Please install this schema in your Kolab LDAP directory.
+
+This is an example record for a TOTP token registered to user doe@example.org:
+
+```
+dn: ipatokenUniqueID=totp:c4a1ced768a0da55df662e73,ou=Tokens,dc=example,dc=org
+objectClass: top
+objectClass: ipaToken
+objectClass: ipatokenTOTP
+objectClass: ldapSubEntry
+cn: Mobile App (TOTP)
+ipatokenUniqueID: totp:c4a1ced768a0da55df662e73
+ipatokenOwner: uid=doe,ou=People,dc=example,dc=org
+ipatokenNotBefore: 201506110211Z
+ipatokenOTPkey: 4T5CI7SOKWYQ5JTM
+ipatokenDisabled: TRUE
+```
+
+

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/config.inc.php Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/config.inc.php.dist Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/kolab2fa.js Added

@@ -0,0 +1,367 @@
+/**
+ * Kolab 2-Factor-Authentication plugin client functions
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * @licstart  The following is the entire license notice for the
+ * JavaScript code in this page.
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ * @licend  The above is the entire license notice
+ * for the JavaScript code in this page.
+ */
+
+window.rcmail && rcmail.addEventListener('init', function(evt) {
+    var highsec_call_stack = ;
+    var highsec_dialog;
+    var factor_dialog;
+
+    if (!rcmail.env.kolab_2fa_factors) {
+        rcmail.env.kolab_2fa_factors = {};
+    }
+
+    /**
+     * Equivalend of PHP time()
+     */
+    function time() {
+        return Math.round(new Date().getTime() / 1000);
+    }
+
+    /**
+     * Render the settings UI
+     */
+    function render() {
+        var table = $('#kolab2fa-factors tbody');
+        table.html('');
+
+        var rows = 0;
+        $.each(rcmail.env.kolab_2fa_factors, function(id, props) {
+            if (props.active) {
+                var tr = $('<tr>').addClass(props.method).appendTo(table),
+                    button = $('<a class="button icon delete">').attr({href: '#', rel: id})
+                        .append($('<span class="inner">').text(rcmail.get_label('remove','kolab_2fa')));
+
+                $('<td>').addClass('name').text(props.label || props.name).appendTo(tr);
+                $('<td>').addClass('created').text(props.created || '??').appendTo(tr);
+                $('<td>').addClass('actions buttons-cell').append(button).appendTo(tr);
+                rows++;
+            }
+        });
+
+        table.parent()(rows > 0 ? 'show' : 'hide')();
+    }
+
+    /**
+     * Open dialog to add the given authentication factor
+     */
+    function add_factor(method) {
+        var lock, form = $('#kolab2fa-prop-' + method),
+            props = rcmail.env.kolab_2fa_factorsmethod;
+
+        if (form.length) {
+            form.get(0).reset();
+            form.find('img.qrcode').attr('src', 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7');
+            form.off('submit');
+
+            factor_dialog = rcmail.show_popup_dialog(
+                form.show(),
+                rcmail.get_label('addfactor', 'kolab_2fa'),
+                
+                    {
+                        text: rcmail.gettext('save', 'kolab_2fa'),
+                        'class': 'mainaction save',
+                        click: function(e) {
+                            save_data(method);
+                        }
+                    },
+                    {
+                        text: rcmail.gettext('cancel'),
+                        'class': 'cancel',
+                        click: function() {
+                            factor_dialog.dialog('close');
+                        }
+                    }
+                ,
+                {
+                    open: function(event, ui) {
+                        $(event.target).find('inputname="_verify_code"').keypress(function(e) {
+                            if (e.which == 13) {
+                                $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                            }
+                        });
+                    },
+                    close: function(event, ui) {
+                        form.hide().appendTo(document.body);
+                        factor_dialog = null;
+                    }
+                }
+            )
+            .data('method', method)
+            .data('timestamp', time());
+
+            form.on('submit', function(e) {
+                save_data(method);
+                return false;
+            });
+
+            // load generated data
+            lock = rcmail.set_busy(true, 'loading');
+            rcmail.http_post('plugin.kolab-2fa-data', { _method: method }, lock);
+        }
+    }
+
+    /**
+     * Remove the given factor from the account
+     */
+    function remove_factor(id) {
+        var lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', { _method: id, _data: 'false' }, lock);
+    }
+
+    /**
+     * Submit factor settings form
+     */
+    function save_data(method) {
+        var lock, data, form = $('#kolab2fa-prop-' + method),
+            verify = form.find('inputname="_verify_code"');
+
+        if (verify.length && !verify.val().length) {
+            alert(rcmail.get_label('verifycodemissing','kolab_2fa'));
+            verify.select();
+            return false;
+        }
+
+        data = form_data(form);
+        lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', {
+            _method: data.id || method,
+            _data: JSON.stringify(data),
+            _verify_code: verify.val(),
+            _timestamp: factor_dialog ? factor_dialog.data('timestamp') : null
+        }, lock);
+    }
+
+    /**
+     * Collect all factor properties from the form
+     */
+    function form_data(form)
+    {
+        var data = {};
+        form.find('input, select').each(function(i, elem) {
+            if (elem.name.indexOf('_prop') === 0) {
+                k = elem.name.match(/\(a-z0-9_.-+)\$/i) ? RegExp.$1 : null;
+                if (k) {
+                    datak = elem.tagName == 'SELECT' ? $('option:selected', elem).val() : $(elem).val();
+                }
+            }
+        });
+
+        return data;
+    }
+
+    /**
+     * Execute the given function after the user authorized the session with a 2nd factor
+     */
+    function require_high_security(func, exclude)
+    {
+        // request 2nd factor auth
+        if (rcmail.env.session_secured !== true && rcmail.env.session_secured < time() - 180) {
+            var method, name;
+
+            // find an active factor
+            $.each(rcmail.env.kolab_2fa_factors, function(id, prop) {
+                if (prop.active && !method || method == exclude) {
+                    method = id;
+                    name = prop.label || prop.name;
+                    if (!exclude || id !== exclude) {
+                        return true;
+                    }
+                }
+            });
+
+            // we have a registered factor, use it
+            if (method) {
+                highsec_call_stack.push(func);
+

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/kolab_2fa.php Added

@@ -0,0 +1,795 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class kolab_2fa extends rcube_plugin
+{
+    public $task = '(login|settings)';
+
+    protected $login_verified = null;
+    protected $login_factors = array();
+    protected $drivers = array();
+    protected $storage;
+
+    /**
+     * Plugin init
+     */
+    public function init()
+    {
+        $this->load_config();
+        $this->add_hook('startup', array($this, 'startup'));
+    }
+
+    /**
+     * Startup hook
+     */
+    public function startup($args)
+    {
+        $rcmail = rcmail::get_instance();
+
+        // register library namespace to autoloader
+        $loader = include(INSTALL_PATH . 'vendor/autoload.php');
+        $loader->set('Kolab2FA', array($this->home . '/lib'));
+
+        if ($args'task' === 'login' && $this->api->output) {
+            $this->add_texts('localization/', false);
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            // process 2nd factor auth step after regular login
+            if ($args'action' === 'plugin.kolab-2fa-login' /* || !empty($_SESSION'kolab_2fa_factors') */) {
+                return $this->login_verify($args);
+            }
+        }
+        else if ($args'task' === 'settings') {
+            $this->add_texts('localization/', !$this->api->output->ajax_call);
+            $this->add_hook('settings_actions', array($this, 'settings_actions'));
+            $this->register_action('plugin.kolab-2fa', array($this, 'settings_view'));
+            $this->register_action('plugin.kolab-2fa-data', array($this, 'settings_data'));
+            $this->register_action('plugin.kolab-2fa-save', array($this, 'settings_save'));
+            $this->register_action('plugin.kolab-2fa-verify', array($this, 'settings_verify'));
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for 'authenticate' plugin hook.
+     *
+     * ATTENTION: needs to be called *after* kolab_auth::authenticate()
+     */
+    public function authenticate($args)
+    {
+        // nothing to be done for me
+        if ($args'abort' || $this->login_verified !== null) {
+            return $args;
+        }
+
+        $rcmail = rcmail::get_instance();
+
+        // parse $host URL
+        $a_host = parse_url($args'host');
+        $hostname = $_SESSION'hostname' = $a_host'host' ?: $args'host';
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $args'user';
+
+        // Convert username to lowercase. Copied from rcmail::login()
+        $login_lc = $rcmail->config->get('login_lc', 2);
+        if ($login_lc) {
+            if ($login_lc == 2 || $login_lc === true) {
+                $username = mb_strtolower($username);
+            }
+            else if (strpos($username, '@')) {
+                // lowercase domain name
+                list($local, $domain) = explode('@', $username);
+                $username = $local . '@' . mb_strtolower($domain);
+            }
+        }
+
+        // 2a. let plugins provide the list of active authentication factors
+        $lookup = $rcmail->plugins->exec_hook('kolab_2fa_lookup', array(
+            'user'    => $username,
+            'host'    => $hostname,
+            'factors' => null,
+            'check'   => $rcmail->config->get('kolab_2fa_check', true),
+        ));
+
+        if (isset($lookup'factors')) {
+            $factors = (array)$lookup'factors';
+        }
+        // 2b. check storage if this user has 2FA enabled
+        else if ($lookup'check' !== false && ($storage = $this->get_storage($username))) {
+            $factors = (array)$storage->enumerate();
+        }
+
+        if (count($factors) > 0) {
+            $args'abort' = true;
+            $factors = array_unique($factors);
+
+            // 3. flag session for 2nd factor verification
+            $_SESSION'kolab_2fa_time'    = time();
+            $_SESSION'kolab_2fa_nonce'   = bin2hex(openssl_random_pseudo_bytes(32));
+            $_SESSION'kolab_2fa_factors' = $factors;
+
+            $_SESSION'username' = $args'user';
+            $_SESSION'host'     = $args'host';
+            $_SESSION'password' = $rcmail->encrypt($args'pass');
+
+            // 4. render to 2nd auth step
+            $this->login_step($factors);
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for the additional login step requesting the 2FA verification code
+     */
+    public function login_step($factors)
+    {
+        // replace handler for login form
+        $this->login_factors = array_values($factors);
+        $this->api->output->add_handler('loginform', array($this, 'auth_form'));
+
+        // focus the code input field on load
+        $this->api->output->add_script('$("input.kolab2facode").first().select();', 'docready');
+
+        $this->api->output->send('login');
+    }
+
+    /**
+     * Process the 2nd factor code verification form submission
+     */
+    public function login_verify($args)
+    {
+        $this->login_verified = false;
+
+        $rcmail = rcmail::get_instance();
+
+        $time     = $_SESSION'kolab_2fa_time';
+        $nonce    = $_SESSION'kolab_2fa_nonce';
+        $factors  = (array)$_SESSION'kolab_2fa_factors';
+        $expired  = $time < time() - $rcmail->config->get('kolab_2fa_timeout', 120);
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $_SESSION'username';
+
+        if (!empty($factors) && !empty($nonce) && !$expired) {
+            // TODO: check signature
+
+            // try to verify each configured factor
+            foreach ($factors as $factor) {
+                list($method) = explode(':', $factor, 2);
+
+                // verify the submitted code
+                $code = rcube_utils::get_input_value("_${nonce}_${method}", rcube_utils::INPUT_POST);
+                $this->login_verified = $this->verify_factor_auth($factor, $code, $username);
+
+                // accept first successful method
+                if ($this->login_verified) {
+                    break;
+                }
+            }
+        }
+
+        if ($this->login_verified) {
+            // restore POST data from session
+            $_POST'_user' = $_SESSION'username';
+            $_POST'_host' = $_SESSION'host';
+            $_POST'_pass' = $rcmail->decrypt($_SESSION'password');
+
+            if ($_SESSION'kolab_auth_admin') {
+                $_POST'_user'    = $_SESSION'kolab_auth_admin';
+                $_POST'_loginas' = $_SESSION'username';
+            }

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Base.php Added

@@ -0,0 +1,344 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Driver base class
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+abstract class Base
+{
+    public $method;
+    public $id;
+    public $storage;
+
+    protected $config          = array();
+    protected $props           = array();
+    protected $user_props      = array();
+    protected $pending_changes = false;
+    protected $temporary       = false;
+    protected $allowed_props   = array('username');
+
+    public $user_settings = array(
+        'active' => array(
+            'type'     => 'boolean',
+            'editable' => false,
+            'hidden'   => false,
+            'default'  => false,
+        ),
+        'label' => array(
+            'type'      => 'text',
+            'editable'  => true,
+            'label'     => 'label',
+            'generator' => 'default_label',
+        ),
+        'created' => array(
+            'type'      => 'datetime',
+            'editable'  => false,
+            'hidden'    => false,
+            'label'     => 'created',
+            'generator' => 'time',
+        ),
+    );
+
+    /**
+     * Static factory method
+     */
+    public static function factory($id, $config)
+    {
+        list($method) = explode(':', $id);
+
+        $classmap = array(
+            'totp'    => '\\Kolab2FA\\Driver\\TOTP',
+            'hotp'    => '\\Kolab2FA\\Driver\\HOTP',
+            'yubikey' => '\\Kolab2FA\\Driver\\Yubikey',
+        );
+
+        $cls = $classmapstrtolower($method);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config, $id);
+        }
+
+        throw new Exception("Unknown 2FA driver '$method'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null, $id = null)
+    {
+        $this->init($config);
+
+        if (!empty($id) && $id != $this->method) {
+            $this->id = $id;
+        }
+        else { // generate random ID
+            $this->id = $this->method . ':' . bin2hex(openssl_random_pseudo_bytes(12));
+            $this->temporary = true;
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init($config)
+    {
+        if (is_array($config)) {
+            $this->config = array_merge($this->config, $config);
+        }
+
+        if ($config'storage') {
+            $this->storage = \Kolab2FA\Storage\Base::factory($config'storage', $config'storage_config');
+        }
+    }
+
+    /**
+     * Verify the submitted authentication code
+     *
+     * @param string $code The 2nd authentication factor to verify
+     * @param int    $timestamp  Timestamp of authentication process (window start)
+     * @return boolean True if valid, false otherwise
+     */
+    abstract function verify($code, $timestamp = null);
+
+    /**
+     * Getter for user-visible properties
+     */
+    public function props($force = false)
+    {
+        $data = array();
+
+        foreach ($this->user_settings as $key => $p) {
+            if ($p'private') {
+                continue;
+            }
+
+            $data$key = array(
+                'type'     => $p'type',
+                'editable' => $p'editable',
+                'hidden'   => $p'hidden',
+                'label'    => $p'label',
+                'value'    => $this->get($key, $force),
+            );
+
+            // format value into text
+            switch ($p'type') {
+                case 'boolean':
+                    $data$key'value' = (bool)$data$key'value';
+                    $data$key'text' = $data$key'value' ? 'yes' : 'no';
+                    break;
+
+                case 'datetime':
+                    if (is_numeric($data$key'value')) {
+                        $data$key'text' = date('c', $data$key'value');
+                        break;
+                    }
+
+                default:
+                    $data$key'text' = $data$key'value';
+            }
+        }
+
+        return $data;
+    }
+
+    /**
+     * Implement this method if the driver can be prpvisioned via QR code
+     */
+    /* abstract function get_provisioning_uri(); */
+
+    /**
+     * Generate a random secret string
+     */
+    public function generate_secret($length = 16)
+    {
+        // Base32 characters
+        $chars = array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', //  7
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', // 15
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', // 23
+            'Y', 'Z', '2', '3', '4', '5', '6', '7', // 31
+        );
+
+        $secret = '';
+        for ($i = 0; $i < $length; $i++) {
+            $secret .= $charsarray_rand($chars);
+        }
+        return $secret;
+    }
+
+    /**
+     * Generate the default label based on the method
+     */
+    public function default_label()
+    {
+        if (class_exists('\\rcmail', false)) {
+            return \rcmail::get_instance()->gettext($this->method, 'kolab_2fa');
+        }
+
+        return strtoupper($this->method);
+    }
+
+    /**

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Exception.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/HOTP.php Added

@@ -0,0 +1,128 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication HOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class HOTP extends Base
+{
+    public $method = 'hotp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'window'   => 4,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+            'counter' => array(
+                'type'      => 'integer',
+                'editable'  => false,
+                'hidden'    => true,
+                'generator' => 'random_counter',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\HOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret  = $this->get('secret');
+        $counter = $this->get('counter');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY HOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        try {
+            $this->backend->setLabel($this->username)->setSecret($secret)->setCounter(intval($this->get('counter')));
+            $pass = $this->backend->verify($code, $counter, $this->config'window');
+
+            // store incremented counter value
+            $this->set('counter', $this->backend->getCounter());
+            $this->commit();
+        }
+        catch (\Exception $e) {
+            // LOG: exception
+            // rcube::console("VERIFY HOTP: $this->id, " . strval($e));
+            $pass = false;
+        }
+
+        // rcube::console('VERIFY HOTP', $this->username, $secret, $counter, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('counter', $this->get('counter', true));
+            $this->set('created', $this->get('created', true));
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret)->setCounter(intval($this->get('counter')));
+        return $this->backend->getProvisioningUri();
+    }
+
+    /**
+     * Generate a random counter value
+     */
+    public function random_counter()
+    {
+        return mt_rand(1, 999);
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/TOTP.php Added

@@ -0,0 +1,120 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication TOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class TOTP extends Base
+{
+    public $method = 'totp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'interval' => 30,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\TOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setInterval($this->config'interval')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret = $this->get('secret');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY TOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        $this->backend->setLabel($this->username)->setSecret($secret);
+
+        // PHP gets a string, but we're comparing integers.
+        $code = (int)$code;
+
+        // Pass a window to indicate the maximum timeslip between client (mobile
+        // device) and server.
+        $pass = $this->backend->verify($code, $timestamp, 150);
+
+        // try all codes from $timestamp till now
+        if (!$pass && $timestamp) {
+            $now = time();
+            while (!$pass && $timestamp < $now) {
+                $pass = $code === $this->backend->at($timestamp);
+                $timestamp += $this->config'interval';
+            }
+        }
+
+        // rcube::console('VERIFY TOTP', $this->username, $secret, $code, $timestamp, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        // rcube::console('PROV', $this->secret);
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('created', $this->get('created', true));
+            // rcube::console('PROV2', $this->secret);
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret);
+        return $this->backend->getProvisioningUri();
+    }
+
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Yubikey.php Added

@@ -0,0 +1,126 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Yubikey driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class Yubikey extends Base
+{
+    public $method = 'yubikey';
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'yubikeyid' => array(
+                'type'     => 'text',
+                'editable' => true,
+                'label'    => 'secret',
+            ),
+        );
+
+        // initialize validator
+        $this->backend = new \Yubikey\Validate($this->config'apikey', $this->config'clientid');
+
+        // set configured validation hosts
+        if (!empty($this->config'hosts')) {
+            $this->backend->setHosts((array)$this->config'hosts');
+        }
+
+        if (isset($this->config'use_https')) {
+            $this->backend->setUseSecure((bool)$this->config'use_https');
+        }
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $keyid = $this->get('yubikeyid');
+        $pass  = false;
+
+        if (!strlen($keyid)) {
+            // LOG: "no key registered for user $this->username"
+            return false;
+        }
+
+        // check key prefix with associated Yubikey ID
+        if (strpos($code, $keyid) === 0) {
+            try {
+                $response = $this->backend->check($code);
+                $pass     = $response->success() === true;
+            }
+            catch (\Exception $e) {
+                // TODO: log exception
+            }
+        }
+
+        // rcube::console('VERIFY Yubikey', $this->username, $keyid, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     * @override
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        if ($key == 'yubikeyid' && strlen($value) > 12) {
+            // verify the submitted code
+            try {
+                $response = $this->backend->check($value);
+                if ($response->success() !== true) {
+                    // TODO: report error
+                    return false;
+                }
+            }
+            catch (\Exception $e) {
+                return false;
+            }
+
+            // truncate the submitted yubikey code to 12 characters
+            $value = substr($value, 0, 12);
+        }
+
+        return parent::set($key, $value, $persistent);
+    }
+
+    /**
+     * @override
+     */
+    protected function set_user_prop($key, $value)
+    {
+        // set created timestamp
+        if ($key !== 'created' && !isset($this->created)) {
+            parent::set_user_prop('created', $this->get('created', true));
+        }
+
+        return parent::set_user_prop($key, $value);
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Logger.php Added

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * Logging interface for the Kolab 2-Factor-Authentication components
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+interface Logger
+{
+    /**
+     * Setter for the log name
+     */
+    public function set_name($name);
+
+    /**
+     * Setter for the minimum log level
+     */
+    public function set_level($level);
+
+    /**
+     * Do log the given message at the given level
+     */
+    public function log($level, $message);
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/RcubeLogger.php Added

@@ -0,0 +1,80 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class RcubeLogger implements Logger
+{
+    protected $name = null;
+    protected $level = LOG_DEBUG;
+
+    public function __construct($name = null)
+    {
+        if ($name !== null) {
+            $this->set_name($name);
+        }
+    }
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if (!is_string($message)) {
+            $message = var_export($message, true);
+        }
+
+        switch ($level) {
+        case LOG_DEBUG:
+        case LOG_INFO:
+        case LOG_NOTICE:
+            if ($level >= $this->level) {
+                rcube::write_log($this->name ?: 'console', $message);
+            }
+            break;
+
+        case LOG_EMERGE:
+        case LOG_ALERT:
+        case LOG_CRIT:
+        case LOG_ERR:
+        case LOG_WARNING:
+            rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'message' => $message,
+            ), true, false);
+            break;
+        }
+    }
+}
+

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Syslog.php Added

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class Syslog implements Logger
+{
+    protected $name = 'Kolab2FA';
+    protected $level = LOG_INFO;
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if ($level >= $this->level) {
+            if (!is_string($message)) {
+                $message = var_export($message, true);
+            }
+
+            syslog($level, '' . $this->name . ' ' . $message);
+        }
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/HOTP.php Added

@@ -0,0 +1,58 @@
+<?php
+
+/**
+ * Kolab HOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\HOTP as Base;
+
+class HOTP extends Base
+{
+    use OTP;
+    protected $counter = 0;
+
+    public function setCounter($counter)
+    {
+        if (!is_integer($counter) || $counter < 0) {
+            throw new \Exception('Counter must be at least 0.');
+        }
+        $this->counter = $counter;
+
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+
+        return $this;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/OTP.php Added

@@ -0,0 +1,133 @@
+<?php
+
+/**
+ * Kolab OTP trait based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/TOTP.php Added

@@ -0,0 +1,50 @@
+<?php
+
+/**
+ * Kolab TOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\TOTP as Base;
+
+class TOTP extends Base
+{
+    use OTP;
+    protected $interval = 30;
+
+    public function setInterval($interval)
+    {
+        if (!is_integer($interval) || $interval < 1) {
+            throw new \Exception('Interval must be at least 1.');
+        }
+        $this->interval = $interval;
+
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Base.php Added

@@ -0,0 +1,127 @@
+<?php
+
+/**
+ * Abstract storage backend class for the Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Kolab2FA\Log;
+
+
+abstract class Base
+{
+    public $username = null;
+    protected $config = array();
+    protected $logger;
+
+    /**
+     *
+     */
+    public static function factory($backend, $config)
+    {
+        $classmap = array(
+            'ldap' => '\\Kolab2FA\\Storage\\LDAP',
+            'roundcube' => '\\Kolab2FA\\Storage\\RcubeUser',
+            'rcubeuser' => '\\Kolab2FA\\Storage\\RcubeUser',
+        );
+
+        $cls = $classmapstrtolower($backend);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config);
+        }
+
+        throw new Exception("Unknown storage backend '$backend'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null)
+    {
+        if (is_array($config)) {
+            $this->init($config);
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init(array $config)
+    {
+        $this->config = array_merge($this->config, $config);
+
+        // use syslog logger by default
+        $this->set_logger(new Log\Syslog());
+    }
+
+    /**
+     * 
+     */
+    public function set_logger(Log\Logger $logger)
+    {
+        $this->logger = $logger;
+
+        if ($this->config'debug') {
+            $this->logger->set_level(LOG_DEBUG);
+        }
+        else if ($this->config'loglevel') {
+            $this->logger->set_level($this->config'loglevel');
+        }
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        $this->username = $username;
+    }
+
+    /**
+     * Send messager to the logging system
+     */
+    protected function log($level, $message)
+    {
+        if ($this->logger) {
+            $this->logger->log($level, $message);
+        }
+    }
+
+    /**
+     * List keys holding settings for 2-factor-authentication
+     */
+    abstract public function enumerate();
+
+    /**
+     * Read data for the given key
+     */
+    abstract public function read($key);
+
+    /**
+     * Save data for the given key
+     */
+    abstract public function write($key, $value);
+
+    /**
+     * Remove the data stored for the given key
+     */
+    abstract public function remove($key);
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Exception.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/LDAP.php Added

@@ -0,0 +1,349 @@
+<?php
+
+/**
+ * Storage backend to store 2-Factor-Authentication settings in LDAP
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Net_LDAP3;
+use \Kolab2FA\Log\Logger;
+
+class LDAP extends Base
+{
+    public $userdn;
+
+    private $cache = array();
+    private $ldapcache = array();
+    private $conn;
+    private $error;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $this->conn = new Net_LDAP3($config);
+        $this->conn->config_set('log_hook', array($this, 'log'));
+
+        $this->conn->connect();
+
+        $bind_pass = $this->config'bind_pass';
+        $bind_user = $this->config'bind_user';
+        $bind_dn   = $this->config'bind_dn';
+
+        $this->ready = $this->conn->bind($bind_dn, $bind_pass);
+
+        if (!$this->ready) {
+            throw new Exception("LDAP storage not ready: " . $this->error);
+        }
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate($active = true)
+    {
+        $filter  = $this->parse_vars($this->config'filter',  '*');
+        $base_dn = $this->parse_vars($this->config'base_dn', '*');
+        $scope   = $this->config'scope' ?: 'sub';
+        $ids     = array();
+
+        if ($this->ready && ($result = $this->conn->search($base_dn, $filter, $scope, array($this->config'fieldmap''id', $this->config'fieldmap''active')))) {
+            foreach ($result as $dn => $entry) {
+                $rec = $this->field_mapping($dn, Net_LDAP3::normalize_entry($entry, true));
+                if (!empty($rec'id') && ($active === null || $active == $rec'active')) {
+                    $ids = $rec'id';
+                }
+            }
+        }
+
+        // TODO: cache this in memory
+
+        return $ids;
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $this->cache$key = $this->get_ldap_record($this->username, $key);
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $success = false;
+        $ldap_attrs = array();
+
+        if (is_array($value)) {
+            // add some default values
+            $value += (array)$this->config'defaults' + array('active' => false, 'username' => $this->username, 'userdn' => $this->userdn);
+
+            foreach ($value as $k => $val) {
+                if ($attr = $this->config'fieldmap'$k) {
+                    $ldap_attrs$attr = $this->value_mapping($k, $val, false);
+                }
+            }
+        }
+        else {
+            // invalid data structure
+            return false;
+        }
+
+        // update existing record
+        if ($rec = $this->get_ldap_record($this->username, $key)) {
+            $old_attrs = $rec'_raw';
+            $new_attrs = array_merge($old_attrs, $ldap_attrs);
+
+            $result = $this->conn->modify_entry($rec'_dn', $old_attrs, $new_attrs);
+            $success = !empty($result);
+        }
+        // insert new record
+        else if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+
+            // add object class attribute
+            $me = $this;
+            $ldap_attrs'objectclass' = array_map(function($cls) use ($me, $key) {
+                return $me->parse_vars($cls, $key);
+            }, (array)$this->config'objectclass');
+
+            $success = $this->conn->add_entry($entry_dn, $ldap_attrs);
+        }
+
+        if ($success) {
+            $this->cache$key = $value;
+            $this->ldapcache = array();
+
+            // cleanup: remove disabled/inactive/temporary entries
+            if ($value'active') {
+                foreach ($this->enumerate(false) as $id) {
+                    if ($id != $key) {
+                        $this->remove($id);
+                    }
+                }
+
+                // set user roles according to active factors
+                $this->set_user_roles();
+            }
+        }
+
+        return $success;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+            $success = $this->conn->delete_entry($entry_dn);
+
+            // set user roles according to active factors
+            if ($success) {
+                $this->set_user_roles();
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->ldapcache = array();
+    }
+
+    /**
+     *
+     */
+    protected function set_user_roles()
+    {
+        if (!$this->ready || !$this->userdn || empty($this->config'user_roles')) {
+            return false;
+        }
+
+        $auth_roles = array();

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/RcubeUser.php Added

@@ -0,0 +1,195 @@
+<?php
+
+/**
+ * Storage backend to use the Roundcube user prefs to store 2-Factor-Authentication settings
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \rcmail;
+use \rcube_user;
+
+class RcubeUser extends Base
+{
+    // sefault config
+    protected $config = array(
+        'keymap' => array(),
+    );
+
+    private $cache = array();
+    private $user;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $rcmail = rcmail::get_instance();
+        $this->config'hostname' = $rcmail->user->ID ? $rcmail->user->data'mail_host' : $_SESSION'hostname';
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate()
+    {
+        if ($factors = $this->get_factors()) {
+            return array_keys(array_filter($factors, function($prop) {
+                return !empty($prop'active');
+            }));
+        }
+
+        return array();
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $factors = $this->get_factors();
+            $this->log(LOG_DEBUG, 'RcubeUser::read() ' . $key);
+            $this->cache$key = $factors$key;
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $this->log(LOG_DEBUG, 'RcubeUser::write() ' . @json_encode($value));
+
+        if ($user = $this->get_user($this->username)) {
+            $this->cache$key = $value;
+
+            $factors = $this->get_factors();
+            $factors$key = $value;
+
+            $pkey = $this->key2property('blob');
+            $save_data = array($pkey => $factors);
+            $update_index = false;
+
+            // remove entry
+            if ($value === null) {
+                unset($factors$key);
+                $update_index = true;
+            }
+            // remove non-active entries
+            else if (!empty($value'active')) {
+                $factors = array_filter($factors, function($prop) {
+                    return !empty($prop'active');
+                });
+                $update_index = true;
+            }
+
+            // update the index of active factors
+            if ($update_index) {
+                $save_data$this->key2property('factors') = array_keys(
+                    array_filter($factors, function($prop) {
+                        return !empty($prop'active');
+                    })
+                );
+            }
+
+            $success = $user->save_prefs($save_data, true);
+
+            if (!$success) {
+                $this->log(LOG_WARNING, sprintf('Failed to save prefs for user %s', $this->username));
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        return $this->write($key, null);
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->user = null;
+    }
+
+    /**
+     * Helper method to get a rcube_user instance for storing prefs
+     */
+    private function get_user($username)
+    {
+        // use global instance if we have a valid Roundcube session
+        $rcmail = rcmail::get_instance();
+        if ($rcmail->user->ID && $rcmail->user->get_username() == $username) {
+            return $rcmail->user;
+        }
+
+        if (!$this->user) {
+            $this->user = rcube_user::query($username, $this->config'hostname');
+        }
+
+        if (!$this->user) {
+            $this->log(LOG_WARNING, sprintf('No user record found for %s @ %s', $username, $this->config'hostname'));
+        }
+
+        return $this->user;
+    }
+
+    /**
+     *
+     */
+    private function get_factors()
+    {
+        if ($user = $this->get_user($this->username)) {
+            $prefs = $user->get_prefs();
+            return (array)$prefs$this->key2property('blob');
+        }
+
+        return null;
+    }
+
+    /**
+     *
+     */
+    private function key2property($key)
+    {
+        // map key to configured property name
+        if (is_array($this->config'keymap') && isset($this->config'keymap'$key)) {
+            return $this->config'keymap'$key;
+        }
+
+        // default
+        return 'kolab_2fa_' . $key;
+    }
+
+}

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/bg_BG.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ca_ES.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/cs_CZ.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/da_DK.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de_CH.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/de_DE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/el.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/en_US.inc Added

@@ -0,0 +1,57 @@
+<?php
+
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+
+$labels'factor' = 'Factor';
+$labels'secret' = 'Secret Key';
+$labels'created' = 'Created';
+$labels'remove' = 'Remove';
+$labels'continue' = 'Continue';
+
+$labels'settingslist' = 'Multi-Factor Auth';
+$labels'settingstitle' = 'Authentication Factors';
+
+$labels'totp' = 'Mobile App (TOTP)';
+$labels'hotp' = 'Mobile App (HOTP)';
+$labels'yubikey' = 'Yubikey';
+
+$labels'or' = 'or';
+$labels'yes' = 'yes';
+$labels'no' = 'no';
+
+$labels'label' = 'Name';
+$labels'qrcode' = 'QR Code';
+$labels'showqrcode' = 'Show QR Code';
+$labels'qrcodeexplaintotp' = 'Download an authenticator app on your phone. Two apps which work well are <strong>FreeOTP</strong> and <strong>Google Authenticator</strong>, but any other TOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+$labels'qrcodeexplainhotp' = 'Download an authenticator app on your phone. One app known to work well is <strong>Google Authenticator</strong>, but any other HOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+
+$labels'yubikeyid' = 'Your YubiKey ID';
+$labels'yubikeyidexplainyubikey' = 'Press your YubiKey once and submit the generated code';
+
+$labels'addfactor' = 'Add Authentication Factor';
+$labels'testfactor' = 'Test this factor';
+$labels'verifycode' = 'Verify Code';
+$labels'verifycodeexplaintotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+$labels'verifycodeexplainhotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+
+$labels'loginexpired' = 'Login request expired! Please try again.';
+$labels'authremoveconfirm' = 'Do you really want to remove this authentication factor from your account?';
+$labels'verifycodemissing' = 'Please enter the verification code from your device';
+
+$labels'factorsavesuccess' = 'Successfully saved authentication factor';
+$labels'factorremovesuccess' = 'Successfully removed the authentication factor';
+$labels'factorsaveerror' = 'Failed to save authentication factor settings';
+$labels'codeverificationpassed' = 'Code verification for $method passed';
+$labels'codeverificationfailed' = 'Code verification for $method failed';
+
+$labels'highsecurityrequired' = 'Entering High Security - Verification required';
+$labels'highsecuritydialog' = 'High security mode helps protect your account from security threats, like session theft or someone messing with your stuff while you\'re away. To enter high security mode, confirm your credentials with the additional authentication factor:';
+$labels'enterhighsecurity' = 'Confirm';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/es_AR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/es_ES.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/et_EE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/fi_FI.inc Added

@@ -0,0 +1,35 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Tekijä';
+$labels'secret' = 'Salainen avain';
+$labels'created' = 'Luotu';
+$labels'remove' = 'Poista';
+$labels'continue' = 'Jatka';
+$labels'settingslist' = 'Monivaiheinen tunnistautuminen';
+$labels'settingstitle' = 'Tunnistautumistekijät';
+$labels'totp' = 'Mobiilisovellus (TOTP)';
+$labels'hotp' = 'Mobiilisovellus (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'tai';
+$labels'yes' = 'kyllä';
+$labels'no' = 'ei';
+$labels'label' = 'Nimi';
+$labels'qrcode' = 'QR-koodi';
+$labels'showqrcode' = 'Näytä QR-koodi';
+$labels'yubikeyid' = 'YubiKey-tunnisteesi';
+$labels'yubikeyidexplainyubikey' = 'Paina YubiKeytasi kerran ja kirjoita luotu koodi';
+$labels'addfactor' = 'Lisää tunnistautumistekijä';
+$labels'testfactor' = 'Testaa tätä tekijää';
+$labels'verifycode' = 'Vahvista koodi';
+$labels'loginexpired' = 'Kirjautumispyyntö vanheni! Yritä uudelleen.';
+$labels'authremoveconfirm' = 'Haluatko varmasti poistaa tämän tunnistautumistekijän tililtäsi?';
+$labels'verifycodemissing' = 'Kirjoita vahvistuskoodi laitteeltasi';
+$labels'factorsavesuccess' = 'Tunnistautumistekijä tallennettu onnistuneesti';
+$labels'factorremovesuccess' = 'Tunnistautumistekijä poistettu onnistuneesti';
+$labels'enterhighsecurity' = 'Vahvista';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/fr_FR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/he_IL.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/hr_HR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/hu_HU.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/it_IT.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ja_JP.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ko_KR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/lv.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/nl_NL.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pl.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Czynnik';
+$labels'secret' = 'Tajny klucz ';
+$labels'created' = 'Utworzono';
+$labels'remove' = 'Usuń';
+$labels'continue' = 'Kontynuuj';
+$labels'settingslist' = 'Uwierzytelnianie wieloetapowe';
+$labels'settingstitle' = 'Czynniki uwierzytelniania';
+$labels'totp' = 'Aplikacja mobilna (TOTP)';
+$labels'hotp' = 'Aplikacja mobilna (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'lub';
+$labels'yes' = 'tak';
+$labels'no' = 'nie';
+$labels'label' = 'Nazwa';
+$labels'qrcode' = 'Kod QR';
+$labels'showqrcode' = 'Pokaż kod QR';
+$labels'qrcodeexplaintotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>FreeOTP</strong> i <strong>Google Authenticator</strong> są przetestowane, ale dowolna aplikacja TOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'qrcodeexplainhotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>Google Authenticator</strong> jest znana z poprawnej pracy, ale dowolna aplikacja HOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'yubikeyid' = 'Twój identyfikator Yubikey';
+$labels'yubikeyidexplainyubikey' = 'Naciśnij swojego Yubikeya i wprowadź wygenerowany kod';
+$labels'addfactor' = 'Dodaj czynnik uwierzytelniający';
+$labels'enterhighsecurity' = 'Potwierdź';

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pt_BR.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/pt_PT.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/ru_RU.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sk_SK.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sl_SI.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sv.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/sv_SE.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/th_TH.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/uk_UA.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/vi_VN.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/zh_CN.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/localization/zh_TW.inc Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic/templates Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/elastic/templates/config.html Added

@@ -0,0 +1,25 @@
+<roundcube:include file="includes/layout.html" />
+<roundcube:include file="includes/menu.html" />
+<roundcube:include file="includes/settings-menu.html" />
+
+<h1 class="voice"><roundcube:label name="kolab_2fa.settingstitle" /></h1>
+
+<div id="layout-content" class="selected no-navbar" role="main">
+	<h2 id="aria-label-toolbar" class="voice"><roundcube:label name="arialabeltoolbar" /></h2>
+	<div class="header" role="toolbar" aria-labelledby="aria-label-toolbar">
+		<a class="button icon back-list-button" href="#back"><span class="inner"><roundcube:label name="back" /></span></a>
+		<span class="header-title"><roundcube:label name="kolab_2fa.settingstitle" /></span>
+		<div class="toolbar menu"></div>
+	</div>
+	<div class="scroller frame-content">
+		<p class="addfactor">
+			<roundcube:object name="plugin.factoradder" class="form-control" />
+		</p>
+		<roundcube:object name="plugin.settingslist" class="authentication-factors" />
+	</div>
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog hidden" />
+
+<roundcube:include file="includes/footer.html" />

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/kolab2fa.css Added

@@ -0,0 +1,93 @@
+
+.propform .formbuttons {
+	margin-top: 1em;
+}
+
+.propform .explain {
+	max-width: 40em;
+	margin-top: 0.4em;
+	margin-bottom: 0.8em;
+}
+
+.propform .kolab2fa-showqr {
+	font-weight: bold;
+}
+
+.propform tr.hidden {
+	display: none;
+}
+
+table.propform thead th {
+	text-align: left;
+	padding: 6px 10px;
+}
+
+table.propform td.title {
+	vertical-align: top;
+	padding-top: 0.8em;
+}
+
+table.propform td.title > label {
+	line-height: 1.8em;
+}
+
+.propform img.qrcode {
+	min-width: 260px;
+	min-height: 260px;
+}
+
+table.authentication-factors {
+	width: 99%;
+	max-width: 60em;
+	border: 0;
+}
+
+table.authentication-factors td.name {
+	width: 60%;
+	font-weight: bold;
+}
+
+table.authentication-factors td.name:before {
+	content: "\2714";
+	display: inline-block;
+	margin-right: 1em;
+/*
+	width: 1.5em;
+	line-height: 1.5em;
+	text-align: center;
+	color: #c7e3ef;
+	background: #004458;
+	border-radius: 50%;
+*/
+}
+
+table.authentication-factors td.created {
+	width: 12em;
+	white-space: nowrap;
+}
+
+table.authentication-factors td.actions {
+	width: 8em;
+	white-space: nowrap;
+	text-align: right;
+}
+
+table.authentication-factors td.actions a.button {
+	padding: 2px 8px;
+	cursor: default;
+}
+
+.kolab2fa-highsecuritydialog {
+	display: none;
+}
+
+.ui-dialog-content .propform > label {
+	display: inline-block;
+	padding-top: 0.3em;
+	min-width: 12em;
+	font-weight: bold;
+}
+
+.ui-dialog-content .propform .verifycode {
+	width: 20em;
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/templates Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/skins/larry/templates/config.html Added

@@ -0,0 +1,34 @@
+<roundcube:object name="doctype" value="html5" />
+<html>
+<head>
+<title><roundcube:object name="pagetitle" /></title>
+<roundcube:include file="/includes/links.html" />
+</head>
+<body class="noscroll">
+
+<roundcube:include file="/includes/header.html" />
+
+<div id="mainscreen" class="offset">
+
+<roundcube:include file="/includes/settingstabs.html" />
+
+<div id="pluginbody" class="uibox contentbox scroller">
+    <h1 class="boxtitle"><roundcube:object name="steptitle" /></h1>
+    <div class="boxcontent propform">
+        <p class="addfactor">
+            <roundcube:object name="plugin.factoradder" />
+        </p>
+        <roundcube:object name="plugin.settingslist" class="propform authentication-factors" />
+    </div>
+</div>
+
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog" />
+
+<roundcube:include file="/includes/footer.html" />
+
+</body>
+</html>

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/tests Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_2fa/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the

roundcubemail-1.5.3.tar.gz/plugins/logon_page/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/logon_page.html Added

roundcubemail-1.5.3.tar.gz/plugins/logon_page/logon_page.php Added

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * Logon screen additions.
+ *
+ * Allows to display additional information (HTML code block) on logon page.
+ *
+ * Configuration: put your content in logon_page.html file. It will be parsed by
+ * Roundcube templates engine, so you can use all template features (tags).
+ *
+ * @version @package_version@
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2012-2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class logon_page extends rcube_plugin
+{
+    public $task    = 'login';
+    public $noajax  = true;
+    public $noframe = true;
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        $this->add_hook('template_object_loginform', array($this, 'logon_page_content'));
+    }
+
+    /**
+     * Login form object container handler. The content will be
+     * added to the BODY tag, not the container element itself.
+     */
+    public function logon_page_content($args)
+    {
+        $file = $this->home . '/logon_page.html';
+
+        if (file_exists($file)) {
+            $html = file_get_contents($file);
+            $html = trim(str_replace('', '', $html));
+        }
+
+        if ($html) {
+            $rcmail = rcube::get_instance();
+
+            // Parse content with templates engine, so we can use e.g. localization
+            $html = $rcmail->output->just_parse($html);
+
+            // Wrap the additional content inside <div>,
+            // so it can be styled by skins
+            $html = '<div id="logon_page">' . $html . '</div>';
+
+            // In Elastic we have to move the element to more apropriate place
+            $html .= "<script>\$('#login-footer').append(\$('#logon_page'));</script>";
+
+            // Add the content at the end of the BODY
+            $rcmail->output->add_footer($html);
+        }
+
+        return $args;
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link Added

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/composer.json Added

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/config.inc.php Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/config.inc.php.dist Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.3.tar.gz/plugins/nextcloud_link/nextcloud_link.php Added

@@ -0,0 +1,61 @@
+<?php
+
+/**
+ * A plugin that adds a task menu icon linking to the Nextcloud files
+ *
+ * @author Aleksander Machniak <machniak@apheleia-it.ch>
+ *
+ * Copyright (C) 2022, Apheleia IT AG <contact@apheleia-it.ch>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class nextcloud_link extends rcube_plugin
+{
+    public $task = '?(?!login|logout).*';
+
+
+    /**
+     * Plugin initialization.
+     */
+    function init()
+    {
+        $this->rc = rcube::get_instance();
+
+        if ($this->rc->output->type !== 'html' || !empty($this->rc->output->env'framed')) {
+            return;
+        }
+
+        $this->load_config();
+
+        $url = $this->rc->config->get('nextcloud_link_url');
+
+        if (empty($url)) {
+            return;
+        }
+
+        $this->add_button(
+            'command'    => 'nextcloud',
+            'class'      => 'button-nextcloud',
+            'classsel'   => 'button-nextcloud button-selected',
+            'innerclass' => 'button-inner',
+            'label'      => '',
+            'type'       => 'link'
+        , 'taskbar');
+
+        $this->rc->output->add_footer("
+<style>#taskmenu a.button-nextcloud:before { content: \"\\f0c2\"; }</style>
+<script>\$('#taskmenu a.button-nextcloud').on('click', function () { window.open('$url', '_blank'); });</script>");
+    }
+}

roundcubemail-1.5.3.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip Changed

roundcubemail-1.5.3.tar.gz/vendor/autoload.php Changed

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32 Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/LICENSE Added

@@ -0,0 +1,19 @@
+Copyright (c) 2013-2014 Christian Riesen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/README.md Added

@@ -0,0 +1,64 @@
+base32
+======
+
+Base32 Encoder/Decoder for PHP according to RFC 4648(https://tools.ietf.org/html/rfc4648).
+
+!CI(https://github.com/ChristianRiesen/base32/workflows/CI/badge.svg)
+
+!Latest Stable Version(https://poser.pugx.org/christian-riesen/base32/v/stable.png)(https://packagist.org/packages/christian-riesen/base32) !Total Downloads(https://poser.pugx.org/christian-riesen/base32/downloads.png)(https://packagist.org/packages/christian-riesen/base32) !Latest Unstable Version(https://poser.pugx.org/christian-riesen/base32/v/unstable.png)(https://packagist.org/packages/christian-riesen/base32) !License(https://poser.pugx.org/christian-riesen/base32/license.png)(https://packagist.org/packages/christian-riesen/base32)
+
+
+Installation
+-----
+
+Use composer:
+
+```bash
+composer require christian-riesen/base32
+```
+
+Usage
+-----
+
+```php
+<?php
+
+// Include class or user autoloader
+use Base32\Base32;
+
+$string = 'fooba';
+
+// $encoded contains now 'MZXW6YTB'
+$encoded = Base32::encode($string);
+
+// $decoded is again 'fooba'
+$decoded = Base32::decode($encoded);
+```
+
+You can also use the extended hex alphabet by using the `Base32Hex` class instead.
+
+About
+=====
+
+Initially created to work with the one time password project(https://github.com/ChristianRiesen/otp), yet it can stand alone just as well as Jordi Boggiano(http://seld.be/) kindly pointed out. It's the only Base32 implementation that passes the test vectors and contains unit tests as well.
+
+Goal
+----
+Have a RFC compliant Base32 encoder and decoder. The implementation could be improved, but for now, it does the job and has unit tests. Ideally, the class can be enhanced while the unit tests keep passing.
+
+Requirements
+------------
+
+Works on PHP 7.2 and later, including PHP 8.0.
+
+Tests run on PHPUnit 9.5, with PHP 7.3 and later. For PHP 7.2, tests use an older PHPUnit version.
+
+Author
+------
+
+Christian Riesen <chris.riesen@gmail.com> http://christianriesen.com
+
+Acknowledgements
+----------------
+
+Base32 is mostly based on the work of https://github.com/NTICompass/PHP-Base32

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src Added

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src/Base32.php Added

@@ -0,0 +1,168 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32 encoder and decoder.
+ *
+ * RFC 4648 compliant
+ *
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ * Some groundwork based on this class
+ * https://github.com/NTICompass/PHP-Base32
+ *
+ * @author  Christian Riesen <chris.riesen@gmail.com>
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32.
+     *
+     * @var string
+     */
+    protected const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=';
+
+    protected const BASE32HEX_PATTERN = '/^A-Z2-7/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        'A' => 0b00000,
+        'B' => 0b00001,
+        'C' => 0b00010,
+        'D' => 0b00011,
+        'E' => 0b00100,
+        'F' => 0b00101,
+        'G' => 0b00110,
+        'H' => 0b00111,
+        'I' => 0b01000,
+        'J' => 0b01001,
+        'K' => 0b01010,
+        'L' => 0b01011,
+        'M' => 0b01100,
+        'N' => 0b01101,
+        'O' => 0b01110,
+        'P' => 0b01111,
+        'Q' => 0b10000,
+        'R' => 0b10001,
+        'S' => 0b10010,
+        'T' => 0b10011,
+        'U' => 0b10100,
+        'V' => 0b10101,
+        'W' => 0b10110,
+        'X' => 0b10111,
+        'Y' => 0b11000,
+        'Z' => 0b11001,
+        '2' => 0b11010,
+        '3' => 0b11011,
+        '4' => 0b11100,
+        '5' => 0b11101,
+        '6' => 0b11110,
+        '7' => 0b11111,
+    ;
+
+    /**
+     * Encodes into base32.
+     *
+     * @param string $string Clear text string
+     *
+     * @return string Base32 encoded string
+     */
+    public static function encode(string $string): string
+    {
+        // Empty string results in empty string
+        if ('' === $string) {
+            return '';
+        }
+
+        $encoded = '';
+
+        //Set the initial values
+        $n = $bitLen = $val = 0;
+        $len = \strlen($string);
+
+        //Pad the end of the string - this ensures that there are enough zeros
+        $string .= \str_repeat(\chr(0), 4);
+
+        //Explode string into integers
+        $chars = (array) \unpack('C*', $string, 0);
+
+        while ($n < $len || 0 !== $bitLen) {
+            //If the bit length has fallen below 5, shift left 8 and add the next character.
+            if ($bitLen < 5) {
+                $val = $val << 8;
+                $bitLen += 8;
+                $n++;
+                $val += $chars$n;
+            }
+            $shift = $bitLen - 5;
+            $encoded .= ($n - (int)($bitLen > 8) > $len && 0 == $val) ? '=' : static::ALPHABET$val >> $shift;
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 5;
+        }
+
+        return $encoded;
+    }
+
+    /**
+     * Decodes base32.
+     *
+     * @param string $base32String Base32 encoded string
+     *
+     * @return string Clear text string
+     */
+    public static function decode(string $base32String): string
+    {
+        // Only work in upper cases
+        $base32String = \strtoupper($base32String);
+
+        // Remove anything that is not base32 alphabet
+        $base32String = \preg_replace(static::BASE32HEX_PATTERN, '', $base32String);
+
+        // Empty string results in empty string
+        if ('' === $base32String || null === $base32String) {
+            return '';
+        }
+
+        $decoded = '';
+
+        //Set the initial values
+        $len = \strlen($base32String);
+        $n = 0;
+        $bitLen = 5;
+        $val = static::MAPPING$base32String0;
+
+        while ($n < $len) {
+            //If the bit length has fallen below 8, shift left 5 and add the next pentet.
+            if ($bitLen < 8) {
+                $val = $val << 5;
+                $bitLen += 5;
+                $n++;
+                $pentet = $base32String$n ?? '=';
+
+                //If the new pentet is padding, make this the last iteration.
+                if ('=' === $pentet) {
+                    $n = $len;
+                }
+                $val += static::MAPPING$pentet;
+                continue;
+            }
+            $shift = $bitLen - 8;
+
+            $decoded .= \chr($val >> $shift);
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 8;
+        }
+
+        return $decoded;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/christian-riesen/base32/src/Base32Hex.php Added

@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32Hex encoder and decoder.
+ *
+ * RFC 4648 compliant
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ *
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32Hex extends Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32 extended hex.
+     *
+     * @var string
+     */
+    protected const ALPHABET = '0123456789ABCDEFGHIJKLMNOPQRSTUV=';
+
+    protected const BASE32HEX_PATTERN = '/^0-9A-V/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        '0' => 0b00000,
+        '1' => 0b00001,
+        '2' => 0b00010,
+        '3' => 0b00011,
+        '4' => 0b00100,
+        '5' => 0b00101,
+        '6' => 0b00110,
+        '7' => 0b00111,
+        '8' => 0b01000,
+        '9' => 0b01001,
+        'A' => 0b01010,
+        'B' => 0b01011,
+        'C' => 0b01100,
+        'D' => 0b01101,
+        'E' => 0b01110,
+        'F' => 0b01111,
+        'G' => 0b10000,
+        'H' => 0b10001,
+        'I' => 0b10010,
+        'J' => 0b10011,
+        'K' => 0b10100,
+        'L' => 0b10101,
+        'M' => 0b10110,
+        'N' => 0b10111,
+        'O' => 0b11000,
+        'P' => 0b11001,
+        'Q' => 0b11010,
+        'R' => 0b11011,
+        'S' => 0b11100,
+        'T' => 0b11101,
+        'U' => 0b11110,
+        'V' => 0b11111,
+    ;
+}

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_namespaces.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_psr4.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_real.php Changed

@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d
+class ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97
 {
     private static $loader;
 
@@ -24,9 +24,9 @@
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(\dirname(__FILE__)));
-        spl_autoload_unregister(array('ComposerAutoloaderInita72d5c6cdaa4a7dca1d35208e082810d', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInitcdc839bda5716c19b35267a053e20f97', 'loadClassLoader'));
 
         $includePaths = require __DIR__ . '/include_paths.php';
         $includePaths = get_include_path();
@@ -36,7 +36,7 @@
         if ($useStaticLoader) {
             require __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInitcdc839bda5716c19b35267a053e20f97::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -57,19 +57,19 @@
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequirea72d5c6cdaa4a7dca1d35208e082810d($fileIdentifier, $file);
+            composerRequirecdc839bda5716c19b35267a053e20f97($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequirea72d5c6cdaa4a7dca1d35208e082810d($fileIdentifier, $file)
+function composerRequirecdc839bda5716c19b35267a053e20f97($fileIdentifier, $file)
 {
     if (empty($GLOBALS'__composer_autoload_files'$fileIdentifier)) {
         require $file;

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_static.php Changed

@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d
+class ComposerStaticInitcdc839bda5716c19b35267a053e20f97
 {
     public static $files = array (
         '320cde22f66dd4f5d3fd621d3e88b98f' => __DIR__ . '/..' . '/symfony/polyfill-ctype/bootstrap.php',
@@ -63,6 +63,10 @@
             'Psr\\Http\\Message\\' => 17,
             'Prophecy\\' => 9,
         ),
+        'O' => 
+        array (
+            'OTPHP\\' => 6,
+        ),
         'M' => 
         array (
             'Masterminds\\' => 12,
@@ -82,6 +86,10 @@
             'Doctrine\\Instantiator\\' => 22,
             'DeepCopy\\' => 9,
         ),
+        'B' => 
+        array (
+            'Base32\\' => 7,
+        ),
     );
 
     public static $prefixDirsPsr4 = array (
@@ -167,6 +175,10 @@
         array (
             0 => __DIR__ . '/..' . '/phpspec/prophecy/src/Prophecy',
         ),
+        'OTPHP\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/spomky-labs/otphp/lib',
+        ),
         'Masterminds\\' => 
         array (
             0 => __DIR__ . '/..' . '/masterminds/html5/src',
@@ -195,6 +207,10 @@
         array (
             0 => __DIR__ . '/..' . '/myclabs/deep-copy/src/DeepCopy',
         ),
+        'Base32\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/christian-riesen/base32/src',
+        ),
     );
 
     public static $prefixesPsr0 = array (
@@ -257,6 +273,13 @@
                 0 => __DIR__ . '/..' . '/zf1/zend-cache/library',
             ),
         ),
+        'Y' => 
+        array (
+            'Yubikey' => 
+            array (
+                0 => __DIR__ . '/..' . '/enygma/yubikey/src',
+            ),
+        ),
         'R' => 
         array (
             'Roundcube\\Composer' => 
@@ -1006,11 +1029,11 @@
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixDirsPsr4;
-            $loader->prefixesPsr0 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$prefixesPsr0;
-            $loader->fallbackDirsPsr0 = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$fallbackDirsPsr0;
-            $loader->classMap = ComposerStaticInita72d5c6cdaa4a7dca1d35208e082810d::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixDirsPsr4;
+            $loader->prefixesPsr0 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$prefixesPsr0;
+            $loader->fallbackDirsPsr0 = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$fallbackDirsPsr0;
+            $loader->classMap = ComposerStaticInitcdc839bda5716c19b35267a053e20f97::$classMap;
 
         }, null, ClassLoader::class);
     }

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.json Changed

@@ -64,6 +64,68 @@
             "install-path": "../caxy/php-htmldiff"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "version_normalized": "1.6.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "time": "2021-02-26T10:19:33+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "install-path": "../christian-riesen/base32"
+        },
+        {
             "name": "doctrine/instantiator",
             "version": "1.5.0",
             "version_normalized": "1.5.0.0",
@@ -194,6 +256,62 @@
             "install-path": "../endroid/qr-code"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "version_normalized": "3.3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "time": "2018-03-08T20:38:39+00:00",
+            "type": "library",
+            "installation-source": "dist",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "install-path": "../enygma/yubikey"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "version_normalized": "4.16.0.0",
@@ -663,6 +781,47 @@
             "install-path": "../../plugins/calendar"
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "version_normalized": "3.5.11.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/kolab_2fa"
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "version_normalized": "3.5.6.0",
@@ -1104,6 +1263,39 @@
             "install-path": "../../plugins/libkolab"
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "version_normalized": "3.4.2.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.php Changed

@@ -19,6 +19,15 @@
             'reference' => '4bad5c6a4ecc76954d37764e6a29273b6b7bf1f8',
             'dev_requirement' => false,
         ),
+        'christian-riesen/base32' => array(
+            'pretty_version' => '1.6.0',
+            'version' => '1.6.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../christian-riesen/base32',
+            'aliases' => array(),
+            'reference' => '2e82dab3baa008e24a505649b0d583c31d31e894',
+            'dev_requirement' => false,
+        ),
         'doctrine/instantiator' => array(
             'pretty_version' => '1.5.0',
             'version' => '1.5.0.0',
@@ -37,6 +46,15 @@
             'reference' => 'cef5d5b7b904d7bb0708eb744c35316364b65fa0',
             'dev_requirement' => false,
         ),
+        'enygma/yubikey' => array(
+            'pretty_version' => '3.3',
+            'version' => '3.3.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../enygma/yubikey',
+            'aliases' => array(),
+            'reference' => '2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6',
+            'dev_requirement' => false,
+        ),
         'ezyang/htmlpurifier' => array(
             'pretty_version' => 'v4.16.0',
             'version' => '4.16.0.0',
@@ -91,6 +109,15 @@
             'reference' => 'bcca59cdaa6cf7b2109eac32685bb750425c305e',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_2fa' => array(
+            'pretty_version' => '3.5.11',
+            'version' => '3.5.11.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_2fa',
+            'aliases' => array(),
+            'reference' => 'ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_activesync' => array(
             'pretty_version' => '3.5.6',
             'version' => '3.5.6.0',
@@ -199,6 +226,15 @@
             'reference' => '30bad7150f1999a5a2a0d33c9bcd490514a4a307',
             'dev_requirement' => false,
         ),
+        'kolab/logon_page' => array(
+            'pretty_version' => '3.4.2',
+            'version' => '3.4.2.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/logon_page',
+            'aliases' => array(),
+            'reference' => '262a87c48721ba04a581eb5c1f8dcfd44a565993',
+            'dev_requirement' => false,
+        ),
         'kolab/net_ldap3' => array(
             'pretty_version' => 'v1.1.4',
             'version' => '1.1.4.0',
@@ -208,6 +244,15 @@
             'reference' => 'ec4f0d6918aa4b5364e99e1132e0a5a9b3ab23ab',
             'dev_requirement' => false,
         ),
+        'kolab/nextcloud_link' => array(
+            'pretty_version' => '1.0',
+            'version' => '1.0.0.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/nextcloud_link',
+            'aliases' => array(),
+            'reference' => 'f00215f711dc4d376fb667d0d97c238c0b9e791f',
+            'dev_requirement' => false,
+        ),
         'kolab/odfviewer' => array(
             'pretty_version' => '3.4.0',
             'version' => '3.4.0.0',
@@ -715,6 +760,15 @@
             'reference' => '2fc443806cdcaee4441be4d0bb09f8fa56a17f2c',
             'dev_requirement' => false,
         ),
+        'spomky-labs/otphp' => array(
+            'pretty_version' => 'v5.0.1',
+            'version' => '5.0.1.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../spomky-labs/otphp',
+            'aliases' => array(),
+            'reference' => 'ada44930d9d85be1480123eca418c8c24e9a1f96',
+            'dev_requirement' => false,
+        ),
         'squizlabs/php_codesniffer' => array(
             'pretty_version' => '3.7.2',
             'version' => '3.7.2.0',

roundcubemail-1.5.3.tar.gz/vendor/enygma Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/.travis.yml Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/LICENSE.md Added

@@ -0,0 +1,7 @@
+Copyright 2017 Chris Cornutt <ccornutt@phpdeveloper.org>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/README.md Added

@@ -0,0 +1,106 @@
+Yubikey PHP Library
+=======================
+
+!Travis-CI Build Status(https://secure.travis-ci.org/enygma/yubikey.png?branch=master)(http://travis-ci.org/enygma/yubikey)
+!Codacy Badge(https://www.codacy.com/project/badge/6b73c56a21734a6d93dae6019f733c5e)(https://www.codacy.com)
+!Code Climate(https://codeclimate.com/github/enygma/yubikey/badges/gpa.svg)(https://codeclimate.com/github/enygma/yubikey)
+!Total Downloads(https://img.shields.io/packagist/dt/enygma/yubikey.svg?style=flat-square)(https://packagist.org/packages/enygma/yubikey)
+
+This library lets you easily interface with the Yubico REST API for validating
+the codes created by the Yubikey.
+
+### Requirements:
+
+- An API as requested from the Yubico site
+- A client ID requested from Yubico
+- A Yubikey to test out the implementation
+
+### Installation
+
+Use the followng command to install the library via Composer:
+
+```
+composer require enygma/yubikey
+```
+
+### Usage:
+
+Look at the `test.php` example script to see how to use it. This can be executed like:
+
+`php test.php generated key`
+
+Example code:
+
+```php
+<?php
+$apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+$clientId = '12345';
+
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+```
+
+### HTTP vs HTTPS
+
+By default the library will try to use a `HTTPS` request to the host given. If you need to disable this for some reason
+(like no SSL support), you can use the `setUseSecure` method and set it to false:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setUseSecure(false);
+```
+
+### Overriding hosts
+
+The library comes with a set of hostnames for the Yubico external API servers (api.yubico.com through api5.yubico.com). If
+you ever have a need to override these, you can use `setHosts`:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setHosts(array(
+    'api.myhost1.com',
+    'api1.myhost.com'
+));
+```
+Remember, this will *overwrite* the current hosts in the class, so be sure you don't still need those. If you just want to add
+another host, look at the `addHost` method.
+
+### Multi-Server Requests:
+
+Additonally, the library also supports simultaneous connections to multiple servers. By default it will only make
+the request to the first server in the `hosts` list. You can enable the multi-server checking with a second parameter on
+the `check()` method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+This will make multiple requests and return the pass/fail status of the aggregate responses from each. So, if you have all but one
+server pass, the overall response will be a fail. If all return `OK` though, you're in the clear.
+
+### "First in" result
+
+Additionally, you can also switch on and off this aggregation of the results and go with only the "first in" response. You do this
+with a flag on the `success` checking method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success(true) === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+**NOTE:** This will still work without multi-server checking. The "first in" will just always be the single response.
+
+
+@author Chris Cornutt <ccornutt@phpdeveloper.org>

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/composer.json Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Client.php Added

@@ -0,0 +1,65 @@
+<?php
+namespace Yubikey;
+
+class Client
+{
+    /**
+     * Send the request(s) via curl
+     *
+     * @param  array|\Yukikey\RequestCollection $requests Set of \Yubikey\Request objects
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function send($requests)
+    {
+        if (get_class($requests) !== 'Yubikey\\RequestCollection') {
+            $requests = new \Yubikey\RequestCollection($requests);
+        }
+
+        $responses = $this->request($requests);
+        return $responses;
+    }
+
+    /**
+     * Make the request given the Request set and content
+     *
+     * @param \Yubikey\RequestCollection $requests Request collection
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function request(\Yubikey\RequestCollection $requests)
+    {
+        $responses = new \Yubikey\ResponseCollection();
+        $startTime = microtime(true);
+        $multi = curl_multi_init();
+        $curls = array();
+
+        foreach ($requests as $index => $request) {
+            $curls$index = curl_init();
+            curl_setopt_array($curls$index, array(
+                CURLOPT_URL => $request->getUrl(),
+                CURLOPT_HEADER => 0,
+                CURLOPT_RETURNTRANSFER => 1
+            ));
+            curl_multi_add_handle($multi, $curls$index);
+        }
+
+        do {
+            while ((curl_multi_exec($multi, $active)) == CURLM_CALL_MULTI_PERFORM);
+            while ($info = curl_multi_info_read($multi)) {
+                if ($info'result' == CURLE_OK) {
+                    $return = curl_multi_getcontent($info'handle');
+                    $cinfo = curl_getinfo($info'handle');
+                    $url = parse_url($cinfo'url');
+
+                    $response = new \Yubikey\Response(array(
+                        'host' => $url'host',
+                        'mt' => (microtime(true)-$startTime)
+                    ));
+                    $response->parse($return);
+                    $responses->add($response);
+                }
+            }
+        } while ($active);
+
+        return $responses;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Request.php Added

@@ -0,0 +1,73 @@
+<?php
+
+namespace Yubikey;
+
+class Request
+{
+    /**
+     * Request HTTP type (verb)
+     * @var string
+     */
+    private $type = 'GET';
+
+    /**
+     * Request URL location
+     * @var string
+     */
+    private $url;
+
+    /**
+     * Init the object and set the URL if given
+     *
+     * @param string $url URL to request
+     */
+    public function __construct($url = null)
+    {
+        if ($url !== null) {
+            $this->setUrl($url);
+        }
+    }
+
+    /**
+     * Get the type of request
+     *
+     * @return string HTTP verb type
+     */
+    public function getType()
+    {
+        return $this->type;
+    }
+
+    /**
+     * Set the type of the request
+     *
+     * @param string $type HTTP verb type
+     */
+    public function setType($type)
+    {
+        $this->type = $type;
+    }
+
+    /**
+     * Get the current request URL location
+     *
+     * @return string URL location
+     */
+    public function getUrl()
+    {
+        return $this->url;
+    }
+
+    /**
+     * Set the URL location for the request
+     *
+     * @param string $url URL location
+     */
+    public function setUrl($url)
+    {
+        if (filter_var($url, FILTER_VALIDATE_URL) !== $url) {
+            throw new \Exception('Invalid URL: '.$url);
+        }
+        $this->url = $url;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/RequestCollection.php Added

@@ -0,0 +1,143 @@
+<?php
+
+namespace Yubikey;
+
+class RequestCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Request objects
+     * @var array
+     */
+    private $requests = array();
+
+    /**
+     * Current array position
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the collection and set requests data if given
+     *
+     * @param array $requests Set of \Yubikey\Requests objects
+     */
+    public function __construct(array $requests = array())
+    {
+        if (!empty($requests)) {
+            foreach ($requests as $request) {
+                $this->add($request);
+            }
+        }
+    }
+
+    /**
+     * Add the given request to the set
+     *
+     * @param \Yubikey\Request $request Request object
+     */
+    public function add(\Yubikey\Request $request)
+    {
+        $this->requests = $request;
+    }
+
+    /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->requests);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->requests$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->requests$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->requests$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->requests$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->requests$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->requests$offset);
+    }
+}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Response.php Added

@@ -0,0 +1,286 @@
+<?php
+
+namespace Yubikey;
+
+class Response
+{
+    /**
+     * Returned value of the hash given in the request
+     * @var string
+     */
+    private $h = null;
+
+    /**
+     * Timestamp in UTC of request
+     * @var string
+     */
+    private $t = null;
+
+    /**
+     * OTP given in request
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Nonce given in the request
+     * @var string
+     */
+    private $nonce = null;
+
+    /**
+     * Percent of validation servers that replied with "success" (0% - 100%)
+     * @var integer
+     */
+    private $sl = null;
+
+    /**
+     * Status of the response (see constants below)
+     * @var string
+     */
+    private $status = null;
+
+    /**
+     * OTP given by the user (used for verification)
+     * @var string
+     */
+    private $inputOtp = null;
+
+    /**
+     * Nonce used in the request (used for verification)
+     * @var string
+     */
+    private $inputNonce = null;
+
+    /**
+     * Timestamp returned from the response
+     * @var string
+     */
+    private $timestamp = null;
+
+    /**
+     * Session counter
+     * @var integer
+     */
+    private $sessioncounter = null;
+
+    /**
+     * Session use #
+     * @var integer
+     */
+    private $sessionuse = null;
+
+    /**
+     * Hostname request was made to
+     * @var string
+     */
+    private $host;
+
+    /**
+     * Microtime difference taken to get response
+     * @var integer
+     */
+    private $mt;
+
+    /**
+     * Define constants for the return status from API
+     */
+    const SUCCESS = 'OK';
+    const REPLAY_OTP = 'REPLAYED_OTP';
+    const REPLAY_REQUEST = 'REPLAYED_REQUEST';
+    const MISSING_PARAMETER = 'MISSING_PARAMETER';
+    const NO_CLIENT = 'NO_SUCH_CLIENT';
+    const BAD_OTP = 'BAD_OTP';
+    const BAD_SIGNATURE = 'BAD_SIGNATURE';
+    const OP_NOT_ALLOWED = 'OPERATION_NOT_ALLOWED';
+    const BACKEND_ERROR = 'BACKEND_ERROR';
+    const NOT_ENOUGH_ANSWERS = 'NOT_ENOUGH_ANSWERS';
+
+    /**
+     * Init the object and set the data into the response
+     *
+     * @param array $data Data from the Yubi API response
+     */
+    public function __construct($data = null)
+    {
+        if ($data !== null) {
+            $this->load($data);
+        }
+    }
+
+    /**
+     * Load the data into the object
+     *
+     * @param array $data Data from the object
+     * @return boolean True when loading is done
+     */
+    public function load($data)
+    {
+        foreach ($data as $index => $value) {
+            if (property_exists($this, $index)) {
+                $this->$index = trim($value);
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Parse the return data from the request and
+     *     load it into the object properties
+     *
+     * @param string $data API return data
+     */
+    public function parse($data)
+    {
+        $result = array();
+        $parts = explode("\n", $data);
+
+        foreach($parts as $index => $part) {
+            $kv = explode("=", $part);
+            if (!empty($kv1)) {
+                $result$kv0 = $kv1;
+            }
+        }
+
+        $this->load($result);
+    }
+
+    /**
+     * Get the time value for the response
+     *
+     * @return string Date/time string
+     */
+    public function getTime()
+    {
+        return $this->t;
+    }
+
+    /**
+     * Return the time to execute (microtime)
+     *
+     * @return integer Time result
+     */
+    public function getMt()
+    {
+        return $this->mt;
+    }
+
+    /**
+     * Set the OTP used in the request
+     * @param string $otp OTP string (from key)
+     */
+    public function setInputOtp($otp)
+    {
+        $this->inputOtp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the OTP used in the request
+     * @return string OTP string
+     */
+    public function getInputOtp()
+    {
+        return $this->inputOtp;
+    }
+
+    /**
+     * Set the nonce used in the request
+     * @param string $nonce Nonce from request
+     */
+    public function setInputNonce($nonce)
+    {
+        $this->inputNonce = $nonce;
+        return $this;
+    }
+
+    /**
+     * Get the nonce used in the request
+     * @return string Nonce from request

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/ResponseCollection.php Added

@@ -0,0 +1,172 @@
+<?php
+
+namespace Yubikey;
+
+class ResponseCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Response objects
+     * @var array
+     */
+    private $responses = array();
+
+    /**
+     * Position in the data set (for Iterator)
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the object and set the Response objects if provided
+     *
+     * @param array $responses Response object set
+     */
+    public function __construct(array $responses = array())
+    {
+        if (!empty($responses)) {
+            foreach ($responses as $response) {
+                $this->add($response);
+            }
+        }
+    }
+
+    /**
+     * Determine, based on the Response status (success)
+     *     if the overall operation was successful
+     *
+     * @return boolean Success/fail status
+     */
+    public function success($first = false)
+    {
+        $success = false;
+        if ($first === true) {
+            // Sort them by timestamp, pop the first one and return pass/fail
+            usort($this->responses, function(\Yubikey\Response $r1, \Yubikey\Response $r2) {
+                return $r1->getMt() > $r2->getMt();
+            });
+            $response = $this->responses0;
+            return $response->success();
+        } else {
+            foreach ($this->responses as $response) {
+                if ($response->success() === false
+                    && $response->status !== Response::REPLAY_REQUEST) {
+                    return false;
+                } elseif ($response->success()) {
+                    $success = true;
+                }
+            }
+        }
+        return $success;
+    }
+
+    /**
+     * Add a new Response object to the set
+     *
+     * @param \Yubikey\Response $response Response object
+     */
+    public function add(\Yubikey\Response $response)
+    {
+        $this->responses = $response;
+    }
+
+        /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->responses);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->responses$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->responses$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->responses$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->responses$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->responses$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->responses$offset);
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/src/Yubikey/Validate.php Added

@@ -0,0 +1,412 @@
+<?php
+
+namespace Yubikey;
+
+class Validate
+{
+    /**
+     * Yubico API hosts
+     * @var array
+     */
+    private $hosts = array(
+        'api.yubico.com',
+        'api2.yubico.com',
+        'api3.yubico.com',
+        'api4.yubico.com',
+        'api5.yubico.com'
+    );
+
+    /**
+     * Selected hosted for request
+     * @var string
+     */
+    private $host = null;
+
+    /**
+     * API given for request
+     * @var string
+     */
+    private $apiKey = null;
+
+    /**
+     * Use a secure/insecure connection (HTTPS vs HTTP)
+     * @var boolean
+     */
+    private $useSecure = true;
+
+    /**
+     * OTP provided by user
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Yubikey ID, to identify a connected user
+     * @var string
+     */
+    private $yubikeyid = null;
+
+    /**
+     * Init the object and set the API key, Client ID and optionally hosts
+     *
+     * @param string $apiKey API Key
+     * @param string $clientId Client ID
+     * @param array $hosts Set of hostnames (overwrites current)
+     * @throws \DomainException If curl is not enabled
+     */
+    public function __construct($apiKey, $clientId, array $hosts = array())
+    {
+        if ($this->checkCurlSupport() === false) {
+            throw new \DomainException('cURL support is required and is not enabled!');
+        }
+
+        $this->setApiKey($apiKey);
+        $this->setClientId($clientId);
+
+        if (!empty($hosts)) {
+            $this->setHosts($hosts);
+        }
+    }
+
+    /**
+     * Check for enabled curl support (requirement)
+     *
+     * @return boolean Enabled/not found flag
+     */
+    public function checkCurlSupport()
+    {
+        return (function_exists('curl_init'));
+    }
+
+    /**
+     * Get the currently set API key
+     *
+     * @return string API key
+     */
+    public function getApiKey($decoded = false)
+    {
+        return ($decoded === false) ? $this->apiKey : base64_decode($this->apiKey);
+    }
+
+    /**
+     * Set the API key
+     *
+     * @param string $apiKey API request key
+     */
+    public function setApiKey($apiKey)
+    {
+        $key = base64_decode($apiKey, true);
+        if ($key === false) {
+            throw new \InvalidArgumentException('Invalid API key');
+        }
+
+        $this->apiKey = $key;
+        return $this;
+    }
+
+    /**
+     * Set the OTP for the request
+     *
+     * @param string $otp One-time password
+     */
+    public function setOtp($otp)
+    {
+        $this->otp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the currently set OTP
+     *
+     * @return string One-time password
+     */
+    public function getOtp()
+    {
+        return $this->otp;
+    }
+
+    /**
+     * Get the current Client ID
+     *
+     * @return integer Client ID
+     */
+    public function getClientId()
+    {
+        return $this->clientId;
+    }
+
+    /**
+     * Set the current Client ID
+     *
+     * @param integer $clientId Client ID
+     */
+    public function setClientId($clientId)
+    {
+        $this->clientId = $clientId;
+        return $this;
+    }
+
+    /**
+     * Get the "use secure" setting
+     *
+     * @return boolean Use flag
+     */
+    public function getUseSecure()
+    {
+        return $this->useSecure;
+    }
+
+    /**
+     * Set the "use secure" setting
+     *
+     * @param boolean $use Use/don't use secure
+     * @throws \InvalidArgumentException when value is not boolean
+     */
+    public function setUseSecure($use)
+    {
+        if (!is_bool($use)) {
+            throw new \InvalidArgumentException('"Use secure" value must be boolean');
+        }
+        $this->useSecure = $use;
+        return $this;
+    }
+
+    /**
+     * Get the host for the request
+     *     If one is not set, it returns a random one from the host set
+     *
+     * @return string Hostname string
+     */
+    public function getHost()
+    {
+        if ($this->host === null) {
+            // pick a "random" host
+            $host = $this->hostsmt_rand(0,count($this->hosts)-1);
+            $this->setHost($host);
+            return $host;
+        } else {
+            return $this->host;
+        }
+    }
+
+    /**
+     * Get the current hosts list
+     *
+     * @return array Hosts list
+     */
+    public function getHosts()
+    {
+        return $this->hosts;

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/test.php Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/ValidateTest.php Added

@@ -0,0 +1,179 @@
+<?php
+
+class ValidateTest extends \PHPUnit_Framework_TestCase
+{
+    private $validate = null;
+
+    private $apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+
+    private $clientId = 12345;
+
+    public function setUp()
+    {
+        $this->validate = new \Yubikey\Validate($this->apiKey, $this->clientId);
+    }
+
+    /**
+     * Test the getter and setter for the API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @covers \Yubikey\Validate::getApiKey
+     */
+    public function testGetSetApiKey()
+    {
+        $preKey = 'testing1234567890';
+        $key = base64_encode($preKey);
+
+        $this->validate->setApiKey($key);
+        $this->assertEquals($this->validate->getApiKey(), $preKey);
+    }
+
+    /**
+     * Test the setting of a non-base64 encoded API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSetInvalidApiKey()
+    {
+        $key = 'testing1234^%$#^#';
+        $this->validate->setApiKey($key);
+    }
+
+    /**
+     * Test the getter and setter for the One-time password
+     * @covers \Yubikey\Validate::setOtp
+     * @covers \Yubikey\Validate::getOtp
+     */
+    public function testGetSetOtp()
+    {
+        $otp = base64_encode('testing1234567890');
+
+        $this->validate->setOtp($otp);
+        $this->assertEquals($this->validate->getOtp(), $otp);
+    }
+
+    /**
+     * Test that the getter/setter for the Client ID works correctly
+     * @covers \Yubikey\Validate::getClientId
+     * @covers \Yubikey\Validate::setClientId
+     */
+    public function testGetSetClientId()
+    {
+        $clientId = 12345;
+
+        $this->validate->setClientId($clientId);
+        $this->assertEquals($clientId, $this->validate->getClientId());
+    }
+
+    /**
+     * Test thta the getter/setter for the "use secure" setting works correctly
+     * @covers \Yubikey\Validate::setUseSecure
+     * @covers \Yubikey\Validate::getUseSecure
+     */
+    public function testGetSetUseSecure()
+    {
+        $useSecure = true;
+
+        $this->validate->setUseSecure($useSecure);
+        $this->assertEquals($useSecure, $this->validate->getUseSecure());
+    }
+
+    /**
+     * Test that an exception is thrown when the "use secure" valus
+     *     is not boolean
+     *
+     * @expectedException \InvalidArgumentException
+     * @covers \Yubikey\Validate::setUseSecure
+     */
+    public function testSetUseSecureInvalid()
+    {
+        $useSecure = 'invalid';
+        $this->validate->setUseSecure($useSecure);
+    }
+
+    /**
+     * Test that the getter/setter for the host works correctly
+     * @covers \Yubikey\Validate::setHost
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetSetHost()
+    {
+        $host = 'test.foo.com';
+
+        $this->validate->setHost($host);
+        $this->assertEquals($this->validate->getHost(), $host);
+    }
+
+    /**
+     * Test that a valid random host is selected if none was previously set
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetRandomHost()
+    {
+        $host1 = $this->validate->getHost();
+        $this->assertNotEquals($host1, null);
+    }
+
+    /**
+     * Test that the signature generation is valid
+     * @covers \Yubikey\Validate::generateSignature
+     */
+    public function testSignatureGenerate()
+    {
+        $data = array('foo' => 'bar');
+        $key = $this->validate->getApiKey();
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $this->validate->generateSignature($data);
+        $this->assertEquals($hash, $signature);
+    }
+
+    /**
+     * Test that an exception is thrown when the API is invalid (null or empty)
+     * @covers \Yubikey\Validate::generateSignature
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSignatureGenerateNoApiKey()
+    {
+        $key = null;
+        $data = array('foo' => 'bar');
+        $validate = new \Yubikey\Validate($key, $this->clientId);
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $validate->generateSignature($data);
+    }
+
+    /**
+     * Add a new Host to the list
+     * @covers \Yubikey\Validate::addHost
+     */
+    public function testAddNewHost()
+    {
+        $this->validate->addHost('test.com');
+        $this->assertTrue(
+            in_array('test.com', $this->validate->getHosts())
+        );
+    }
+
+    /**
+     * Set the new Hosts list (override)
+     * @covers \Yubikey\Validate::setHosts
+     * @covers \Yubikey\Validate::getHosts
+     */
+    public function testSetHosts()
+    {
+        $hosts = array('foo.com');
+        $this->validate->setHosts($hosts);
+
+        $this->assertEquals(
+            $this->validate->getHosts(),
+            $hosts
+        );
+    }
+}
+

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/bootstrap.php Added

roundcubemail-1.5.3.tar.gz/vendor/enygma/yubikey/tests/phpunit.xml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/.scrutinizer.yml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/.travis.yml Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/LICENCE Added

@@ -0,0 +1,20 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Florent Morselli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/README.md Added

@@ -0,0 +1,61 @@
+# TOTP / HOTP library in PHP #
+
+!Scrutinizer Quality Score(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/quality-score.png?s=a184d180414b30764d19b421a12d6cf7e9e5e7c2)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+!Code Coverage(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/coverage.png?s=d1bd1b26b56e581d6a4d1deb87eaadc51a05f31d)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+
+!Build Status(https://travis-ci.org/Spomky-Labs/otphp.svg?branch=master)(https://travis-ci.org/Spomky-Labs/otphp)
+!HHVM Status(http://hhvm.h4cc.de/badge/Spomky-Labs/otphp.png)(http://hhvm.h4cc.de/package/Spomky-Labs/otphp)
+!PHP 7 ready(http://php7ready.timesplinter.ch/Spomky-Labs/otphp/badge.svg)(https://travis-ci.org/Spomky-Labs/otphp)
+
+!SensioLabsInsight(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9/big.png)(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9)
+
+!Latest Stable Version(https://poser.pugx.org/spomky-labs/otphp/v/stable.png)(https://packagist.org/packages/spomky-labs/otphp) !Total Downloads(https://poser.pugx.org/spomky-labs/otphp/downloads.png)(https://packagist.org/packages/spomky-labs/otphp) !Latest Unstable Version(https://poser.pugx.org/spomky-labs/otphp/v/unstable.png)(https://packagist.org/packages/spomky-labs/otphp) !License(https://poser.pugx.org/spomky-labs/otphp/license.png)(https://packagist.org/packages/spomky-labs/otphp)
+
+A php library for generating one time passwords according to  RFC 4226 (http://tools.ietf.org/html/rfc4226) (HOTP Algorithm) and the  RFC 6238 (http://tools.ietf.org/html/rfc6238) (TOTP Algorithm)
+
+This library is compatible with Google Authenticator apps available for Android and iPhone. It is also compatible with other applications such as FreeOTP(https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp) for example.
+
+This is a fork of https://github.com/lelag/otphp with the following changes:
+
+* Continuous unit and functional tests using Travis-CI
+* 100% test coverage
+* Code Quality improvement
+* Better namespace usage
+* Issuer support
+* Window support
+* Completely abstract objects
+
+## The Release Process
+
+The release process is described here(doc/Release.md).
+
+## Prerequisites
+
+This library needs at least `PHP 5.3`.
+It has been successfully tested using `PHP 5.3` to `PHP 5.6`, `PHP 7` and `HHVM`
+
+## Installation
+
+The preferred way to install this library is to rely on Composer:
+
+```sh
+composer require "spomky-labs/otphp" "~5.0.0"
+```
+
+## Extend the library
+
+This library only contains the logic. You must extend all classes to define setters and getters.
+
+Look at Extend classes(doc/Extend.md) for more information and examples.
+
+## How to use
+
+Your classes are ready to use? Have a look at How to use(doc/Use.md) to generate your first OTP.
+
+## Contributing
+
+Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices(doc/Contributing.md).
+
+## Licence
+
+This software is release under MIT licence(LICENSE).

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/composer.json Added

@@ -0,0 +1,38 @@
+{
+    "name": "spomky-labs/otphp",
+    "type": "library",
+    "description": "PHP OTP Library compatible with Google Authenticator",
+    "license": "MIT",
+    "keywords": "otp", "hotp", "totp", "RFC 4226", "RFC 6238",
+    "homepage": "https://github.com/Spomky-Labs/otphp",
+    "authors": 
+        {
+            "name": "Florent Morselli",
+            "homepage": "https://github.com/Spomky"
+        },
+        {
+            "name": "All contributors",
+            "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+        }
+    ,
+    "require": {
+        "php": ">=5.3.2",
+        "christian-riesen/base32": "~1.1"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "~4.0"
+    },
+    "suggest": {
+    },
+    "autoload": {
+        "psr-4": { "OTPHP\\": "lib/" }
+    },
+    "autoload-dev": {
+        "psr-4": { "MyProject\\": "examples/" }
+    },
+    "extra": {
+        "branch-alias": {
+            "dev-master": "5.0.x-dev"
+        }
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Contributing.md Added

@@ -0,0 +1,26 @@
+Contributing
+=============================
+
+First of all, **thank you** for contributing.
+
+Bugs or feature requests can be posted online on the GitHub issues section of the project.
+
+Few rules to ease code reviews and merges:
+
+- You MUST follow the PSR-1(http://www.php-fig.org/psr/psr-1/), PSR-2(http://www.php-fig.org/psr/psr-2/) and PSR-4(http://www.php-fig.org/psr/psr-4/).
+- You MUST run the test suite.
+- You MUST write (or update) unit tests when bugs are fixed or features are added.
+- You SHOULD write documentation.
+
+We use Git-Flow(http://jeffkreeftmeijer.com/2010/why-arent-you-using-git-flow/) to automate our git branching workflow.
+
+To contribute use Pull Requests(https://help.github.com/articles/using-pull-requests), please, write commit messages that make sense, and rebase your branch before submitting your PR.
+
+May be asked to squash your commits too. This is used to "clean" your Pull Request before merging it, avoiding commits such as fix tests, fix 2, fix 3, etc.
+
+Run test suite
+------------
+
+* install composer: `curl -s http://getcomposer.org/installer | php`
+* install dependencies: `php composer.phar install`
+* run tests: `vendor/bin/phpunit`

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Extend.md Added

@@ -0,0 +1,331 @@
+# Extending all classes
+
+## Description of classes
+
+This library has three abstract classes:
+
+* OTP: the base of all OTP classes
+* TOTP: Time Based OTP
+* HOTP: Counter Based OTP
+
+## OTP Class
+
+The all classes must implement the following methods:
+
+* ```public functon getLabel();```
+* ```public functon getIssuer();```
+* ```public functon isIssuerIncludedAsParameter();```
+* ```public functon getDigits();```
+* ```public functon getDigest();```
+
+If you wand to extend
+
+* TOTP Class, you must also implement ```public functon getInterval();```.
+* HOTP Class, you must also implement ```public functon getCounter();``` and ```protected functon updateCounter($counter);```.
+
+## Implementation
+
+### TOTP Class
+
+The following class is a possible implementation of the TOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\TOTP as BaseTOTP;
+
+class TOTP extends BaseTOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $interval = 30;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setInterval($interval)
+    {
+        if( !is_integer($interval) || $interval < 1 ) {
+            throw new \Exception("Interval must be at least 1.");
+        }
+        $this->interval = $interval;
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a TOTP object:
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$totp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setInterval(60);
+```
+
+
+### HOTP Class
+
+The following class is a possible implementation of the HOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\HOTP as BaseHOTP;
+
+class HOTP extends BaseHOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $counter = 0;
+
+    public function setSecret($secret)

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Release.md Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/doc/Use.md Added

@@ -0,0 +1,131 @@
+# How to Use
+
+## Common methods
+
+TOTP and HOTP objects have the following common methods:
+
+* ```public function at($input);```: generate an OTP at the specified counter
+* ```public function verify($otp, $input, $window);```: verify if the OTP is valid for the specified input (timestamp, counter...)
+* ```public function getProvisioningUri()```: return a provisioning URI to ease integration in applications
+
+Example:
+
+```php
+$my_otp_object->at(1000); //e.g. will return 123456
+$my_otp_object->verify(123456, 1000); //Will return true
+$my_otp_object->verify(123456, 1001); //Will return false
+```
+
+## Counter Based OTP (HOTP)
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of counters.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact counter.
+
+If the parameter is an integer, the OTP from `counter` to `counter+window` will be tested.
+For example, if the `counter`is `1000` and the window `10`, the OTP tested are within `1000` and `1010`.
+
+```php
+$my_otp_object->verify(123456, 999); //Will return false
+$my_otp_object->verify(123456, 999, 10); //Will return true (1000 is tested)
+```
+
+If the verification succeed, the counter will be updated.
+
+## Time Based OTP (TOTP)
+
+This OTP object has a specific method:
+
+* ```public function now()```: return an OTP at the current timestamp
+
+Example:
+
+```php
+$my_otp_object->now(); //e.g. will return 123456
+$my_otp_object->verify(123456); //Will return true.
+```
+    
+After the interval defined by the object:
+
+```php
+$my_otp_object->verify(123456); //Will return false
+```
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of timestamps.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact timestamp.
+If the parameter is an integer, the OTP before and after the timestamp will be tested.
+
+The window of timestamps goes from `- $window * interval + timestamp` to `+ $window * interval + timestamp`. For example, if the `window`is `5`, the interval `30` and the timestamp `600`, the OTP tested are within `450` and `750`.
+
+### Google Authenticator Compatible
+
+The library works with the Google Authenticator iPhone and Android app, and also
+includes the ability to generate provisioning URI's for use with the QR Code scanner
+built into the app.
+
+Google only supports SHA-1 digest algorithm, 30 second interval and 6 digits OTP. Other values for these parameters are ignored by the Google Authenticator application.
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+$totp->getProvisioningUri(); // => 'otpauth://totp/alice%40google.com?secret=JBSWY3DPEHPK3PXP'
+```
+
+### Working examples
+
+#### Compatible with Google Authenticator
+
+Scan the following barcode with your phone, using Google Authenticator
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30);
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```
+
+#### Not Compatible with Google Authenticator
+
+The following barcode will not work with Google Authenticator because digest algoritm is not SHA-1, there are 8 digits and counter is not 30 seconds.
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Falgorithm%3Dsha512%26digits%3D8%26period%3D10%26secret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(8)
+     ->setDigest('sha512')
+     ->setInterval(10)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/HOTP.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/OTP.php Added

@@ -0,0 +1,109 @@
+<?php
+
+namespace MyProject;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/TOTP.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/examples/examples.php Added

@@ -0,0 +1,45 @@
+<?php
+
+require_once implode(DIRECTORY_SEPARATOR, array(__DIR__, '..', 'vendor', 'autoload.php'));
+
+use MyProject\TOTP;
+use MyProject\HOTP;
+use Base32\Base32;
+
+$secret = trim(Base32::encode(uniqid('', true)), '=');
+
+$totp = new TOTP();
+
+$totp->setSecret($secret)
+     ->setDigest('sha256')
+     ->setDigits(8)
+     ->setLabel('alice@localhost')
+     ->setIssuer('MyProject')
+     ->setInterval(60)
+     ->setIssuerIncludedAsParameter(true);
+
+$hotp = new HOTP();
+
+$hotp->setSecret($secret)
+    ->setDigest('sha512')
+    ->setDigits(5)
+    ->setLabel('alice@localhost')
+    ->setIssuer('MyProject')
+    ->setCounter(1000)
+    ->setIssuerIncludedAsParameter(true);
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Time Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $totp->getProvisioningUri());
+printf("Current code is %s\r\n", $totp->now());
+
+printf(str_repeat("\r\n", 3));
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Counter Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $hotp->getProvisioningUri());
+printf("Current code is %s\r\n", $hotp->at(1010));

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/HOTP.php Added

@@ -0,0 +1,44 @@
+<?php
+
+namespace OTPHP;
+
+abstract class HOTP extends OTP implements HOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        return $this->generateURI('hotp', array('counter' => $this->getCounter()), $google_compatible);
+    }
+
+    /**
+     * @param int $counter The new initial counter (a positive integer)
+     */
+    abstract protected function updateCounter($counter);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $counter, $window = null)
+    {
+        if ($counter < $this->getCounter()) {
+            return false;
+        }
+
+        if (!is_integer($window)) {
+            $window = 0;
+        }
+        $window = abs($window);
+
+        for ($i = $counter; $i <= $counter + $window; ++$i) {
+            if ($otp === $this->at($i)) {
+                $this->updateCounter($i + 1);
+
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/HOTPInterface.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/OTP.php Added

@@ -0,0 +1,146 @@
+<?php
+
+namespace OTPHP;
+
+use Base32\Base32;
+
+abstract class OTP implements OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string The OTP at the specified input
+     */
+    protected function generateOTP($input)
+    {
+        $hash = hash_hmac($this->getDigest(), $this->intToByteString($input), $this->getDecodedSecret());
+        $hmac = array();
+        foreach (str_split($hash, 2) as $hex) {
+            $hmac = hexdec($hex);
+        }
+        $offset = $hmaccount($hmac) - 1 & 0xF;
+        $code = ($hmac$offset + 0 & 0x7F) << 24 |
+            ($hmac$offset + 1 & 0xFF) << 16 |
+            ($hmac$offset + 2 & 0xFF) << 8 |
+            ($hmac$offset + 3 & 0xFF);
+
+        $otp = $code % pow(10, $this->getDigits());
+
+        return str_pad((string) $otp, $this->getDigits(), '0', STR_PAD_LEFT);
+    }
+
+    /**
+     * @return bool Return true is it must be included as parameter, else false
+     */
+    protected function issuerAsParameter()
+    {
+        if (!is_null($this->getIssuer()) && $this->isIssuerIncludedAsParameter() === true) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * @throws \InvalidArgumentException
+     *
+     * @return array
+     */
+    private function getParameters()
+    {
+        $options = array(
+            'algorithm' => $this->getDigest(),
+            'digits' => $this->getDigits(),
+            'secret' => $this->getSecret(),
+        );
+        if ($this->issuerAsParameter()) {
+            $options'issuer' = $this->getIssuer();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @param array $options
+     * @param bool  $google_compatible
+     */
+    protected function filterOptions(array &$options, $google_compatible)
+    {
+        if (true === $google_compatible) {
+            foreach (array('algorithm' => 'sha1', 'period' => 30, 'digits' => 6) as $key => $default) {
+                if (isset($options$key) && $default === $options$key) {
+                    unset($options$key);
+                }
+            }
+        }
+
+        ksort($options);
+    }
+
+    /**
+     * @param       $type
+     * @param array $options
+     * @param       $google_compatible
+     *
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    protected function generateURI($type, array $options = array(), $google_compatible)
+    {
+        if (is_null($this->getLabel())) {
+            throw new \InvalidArgumentException('No label defined.');
+        }
+        $options = array_merge($options, $this->getParameters());
+        $this->filterOptions($options, $google_compatible);
+
+        $params = str_replace(
+            array('+', '%7E'),
+            array('%20', '~'),
+            http_build_query($options)
+        );
+
+        return sprintf(
+            'otpauth://%s/%s?%s',
+            $type,
+            rawurlencode((!is_null($this->getIssuer()) ? $this->getIssuer().':' : '').$this->getLabel()),
+            $params
+        );
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function at($input)
+    {
+        return $this->generateOTP($input);
+    }
+
+    /**
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    private function getDecodedSecret()
+    {
+        $secret = Base32::decode($this->getSecret());
+
+        return $secret;
+    }
+
+    /**
+     * @param int $int
+     *
+     * @return string
+     */
+    private function intToByteString($int)
+    {
+        $result = array();
+        while (0 !== $int) {
+            $result = chr($int & 0xFF);
+            $int >>= 8;
+        }
+
+        return str_pad(implode(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/OTPInterface.php Added

@@ -0,0 +1,61 @@
+<?php
+
+namespace OTPHP;
+
+interface OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string Return the OTP at the specified input
+     */
+    public function at($input);
+
+    /**
+     * Verify that the OTP is valid with the specified input.
+     *
+     * @param string   $otp
+     * @param int      $input
+     * @param int|null $window
+     *
+     * @return bool
+     */
+    public function verify($otp, $input, $window = null);
+
+    /**
+     * @return string The secret of the OTP
+     */
+    public function getSecret();
+
+    /**
+     * @return string The label of the OTP
+     */
+    public function getLabel();
+
+    /**
+     * @return string The issuer
+     */
+    public function getIssuer();
+
+    /**
+     * @return bool If true, the issuer will be added as a parameter in the provisioning URI
+     */
+    public function isIssuerIncludedAsParameter();
+
+    /**
+     * @return int Number of digits in the OTP
+     */
+    public function getDigits();
+
+    /**
+     * @return string Digest algorithm used to calculate the OTP. Possible values are 'md5', 'sha1', 'sha256' and 'sha512'
+     */
+    public function getDigest();
+
+    /**
+     * @param bool $google_compatible If true (default), will produce provisioning URI compatible with Google Authenticator. Only applicable if algorithm="sha1", period=30 and digits=6.
+     *
+     * @return string Get the provisioning URI
+     */
+    public function getProvisioningUri($google_compatible = true);
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/TOTP.php Added

@@ -0,0 +1,68 @@
+<?php
+
+namespace OTPHP;
+
+abstract class TOTP extends OTP implements TOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function at($timestamp)
+    {
+        return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function now()
+    {
+        return $this->at(time());
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $timestamp = null, $window = null)
+    {
+        if (is_null($timestamp)) {
+            $timestamp = time();
+        }
+
+        if (!is_integer($window)) {
+            return $otp === $this->at($timestamp);
+        }
+        $window = abs($window);
+
+        for ($i = -$window; $i <= $window; ++$i) {
+            if ($otp === $this->at($i * $this->getInterval() + $timestamp)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        $params = array();
+        if (true !== $google_compatible || 30 !== $this->getInterval()) {
+            $params = array('period' => $this->getInterval());
+        }
+
+        return $this->generateURI('totp', $params, $google_compatible);
+    }
+
+    /**
+     * @param int $timestamp
+     *
+     * @return int
+     */
+    private function timecode($timestamp)
+    {
+        return (int) ((((int) $timestamp * 1000) / ($this->getInterval() * 1000)));
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/lib/TOTPInterface.php Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/phpunit.xml.dist Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests Added

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/HOTPTest.php Added

@@ -0,0 +1,144 @@
+<?php
+
+class HOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertEquals('otpauth://hotp/My%20Project%3Aalice%40foo.bar?counter=1000&digits=8&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testVerifyCounterInvalid()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertFalse($otp->verify(0, 100));
+    }
+
+    public function testVerifyCounterChanged()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->method('getCounter')
+            ->will($this->onConsecutiveCalls(1000, 1100, 1100));
+
+        $otp->expects($this->once())
+            ->method('updateCounter')
+            ->with(1101);
+
+        $this->assertTrue($otp->verify('98449994', 1100));
+        $this->assertFalse($otp->verify('11111111', 1099));
+    }
+
+    public function testVerifyValidInWindow()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertTrue($otp->verify('59647237', 1000, 50));
+        $this->assertFalse($otp->verify('51642065', 1000, 50));
+        $this->assertTrue($otp->verify('51642065', 1000, 100));
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/OTPTest.php Added

@@ -0,0 +1,92 @@
+<?php
+
+class OTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(6));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('549607', $otp->at(500));
+        $this->assertEquals('654666', $otp->at(1500));
+    }
+
+    /**
+     * @expectedException Exception
+     */
+    public function testGenerateUriWithoutLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->getMock();
+
+        $method = self::getMethod('generateURI');
+
+        $method->invokeArgs($otp, array('test', array(), true));
+    }
+
+    public function testGenerateUriWithValidLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $method = self::getMethod('generateURI');
+
+        $this->assertEquals('otpauth://test/alice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+        $this->assertEquals('otpauth://test/alice%40foo.bar?option1=baz&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array('option1' => 'baz'), true)));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+
+        $otp->expects($this->any())
+            ->method('isIssuerIncludedAsParameter')
+            ->will($this->returnValue(true));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&issuer=My%20Project&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+    }
+
+    /**
+     * @param string $name
+     */
+    protected static function getMethod($name)
+    {
+        $class = new \ReflectionClass('OTPHP\OTP');
+        $method = $class->getMethod($name);
+        $method->setAccessible(true);
+
+        return $method;
+    }
+}

roundcubemail-1.5.3.tar.gz/vendor/spomky-labs/otphp/tests/TOTPTest.php Added

@@ -0,0 +1,151 @@
+<?php
+
+use Base32\Base32;
+
+class TOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('762124', $otp->at(319690800));
+        $this->assertEquals('139664', $otp->at(1301012137));
+    }
+
+    public function testGenerateOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals($otp->now(), $otp->at(time()));
+    }
+
+    public function testVerifyOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $totp = $otp->at(time());
+        $this->assertTrue($otp->verify($totp));
+    }
+
+    public function testVerifyOtp()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertTrue($otp->verify('855783', 0));
+        $this->assertTrue($otp->verify('762124', 319690800));
+        $this->assertTrue($otp->verify('139664', 1301012137));
+
+        $this->assertFalse($otp->verify('139664', 1301012107));
+        $this->assertFalse($otp->verify('139664', 1301012167));
+        $this->assertFalse($otp->verify('139664', 1301012197));
+    }
+
+    public function testNotCompatibleWithGoogleAuthenticator()
+    {
+        $otp = $this->creatTOTP(9, 'sha512', 10);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha512&digits=9&period=10&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    /**
+     * @dataProvider testVectorsData
+     */
+    public function testVectors($totp, $timestamp, $expected_value)
+    {
+        $this->assertEquals($expected_value, $totp->at($timestamp));
+        $this->assertTrue($totp->verify($expected_value, $timestamp));
+    }
+
+    /**
+     * @see https://tools.ietf.org/html/rfc6238#appendix-B
+     * @see http://www.rfc-editor.org/errata_search.php?rfc=6238
+     */
+    public function testVectorsData()
+    {
+        $totp_sha1 = $this->creatTOTP(8, 'sha1',   30, Base32::encode('12345678901234567890'));
+        $totp_sha256 = $this->creatTOTP(8, 'sha256', 30, Base32::encode('12345678901234567890123456789012'));
+        $totp_sha512 = $this->creatTOTP(8, 'sha512', 30, Base32::encode('1234567890123456789012345678901234567890123456789012345678901234'));
+
+        return array(
+            array($totp_sha1,   59, '94287082'),
+            array($totp_sha256, 59, '46119246'),
+            array($totp_sha512, 59, '90693936'),
+            array($totp_sha1,   1111111109, '07081804'),
+            array($totp_sha256, 1111111109, '68084774'),
+            array($totp_sha512, 1111111109, '25091201'),
+            array($totp_sha1,   1111111111, '14050471'),
+            array($totp_sha256, 1111111111, '67062674'),
+            array($totp_sha512, 1111111111, '99943326'),
+            array($totp_sha1,   1234567890, '89005924'),
+            array($totp_sha256, 1234567890, '91819424'),
+            array($totp_sha512, 1234567890, '93441116'),
+            array($totp_sha1,   2000000000, '69279037'),
+            array($totp_sha256, 2000000000, '90698825'),
+            array($totp_sha512, 2000000000, '38618901'),
+            array($totp_sha1,   20000000000, '65353130'),
+            array($totp_sha256, 20000000000, '77737706'),
+            array($totp_sha512, 20000000000, '47863826'),
+        );
+    }
+
+    public function testWithoutGoogleAuthenticatorCompatibility()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha1&digits=6&period=30&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri(false));
+    }
+
+    public function testVerifyOtpInWindow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertFalse($otp->verify('054409', 319690800, 10)); // -11 intervals
+        $this->assertTrue($otp->verify('808167', 319690800, 10)); // -10 intervals
+        $this->assertTrue($otp->verify('364393', 319690800, 10)); // -9 intervals
+        $this->assertTrue($otp->verify('762124', 319690800, 10)); // 0 intervals
+        $this->assertTrue($otp->verify('988451', 319690800, 10)); // +9 intervals
+        $this->assertTrue($otp->verify('789387', 319690800, 10)); // +10 intervals
+        $this->assertFalse($otp->verify('465009', 319690800, 10)); // +11 intervals
+    }
+
+    private function creatTOTP($digits, $digest, $interval, $secret = 'JDDK4U6G3BJLEZ7Y', $label = 'alice@foo.bar', $issuer = 'My Project')
+    {
+        $otp = $this->getMockBuilder('OTPHP\TOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getInterval'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue($label));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue($secret));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue($issuer));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue($digest));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue($digits));
+
+        $otp->expects($this->any())
+            ->method('getInterval')
+            ->will($this->returnValue($interval));
+
+        return $otp;
+    }
+}

Changes of Revision 11