generate new codes accordingly.', 'wpdef' ),
esc_url( get_edit_user_link( $user->ID ) . '#wpdef-2fa-backup-codes' )
),
array( 'a' => array( 'href' => true ) )
);
?>
get_component()->is_checked_enabled_provider_by_slug( $user, self::$slug )
&& $this->is_available_for_user( $user );
$attr = $cond ? '' : ' disabled';
// Check whether codes were generated before or not.
if ( empty( $this->is_activated ) ) {
$button_text = __( 'Generate Backup Codes', 'wpdef' );
$class = 'hidden';
$count = 0;
$show_notice = 'no';
} else {
$button_text = __( 'Get New Codes', 'wpdef' );
$class = $cond ? '' : 'hidden';
$count = self::get_unused_codes_for_user( $user );
$show_notice = 0 === $count ? 'yes' : 'no';
}
$this->get_controller()->render_partial(
'two-fa/providers/backup-codes',
array(
'number_of_codes' => self::display_number_of_codes( $count ),
'url' => $this->get_url( 'generate_backup_codes' ),
'user' => $user,
'attr' => $attr,
'class' => $class,
'show_notice' => $show_notice,
'button_text' => $button_text,
)
);
}
/**
* Generate backup codes.
*
* @param \WP_User $user
* @param array $args
*
* @return array
*/
public static function generate_codes( $user, $args = '' ) {
$codes = array();
$codes_hashed = array();
// Check for arguments.
if ( isset( $args['number'] ) ) {
$num_codes = (int) $args['number'];
} else {
$num_codes = self::BACKUP_CODE_COUNT;
}
// Add a flag if it haven't existed yet.
if ( empty( get_user_meta( $user->ID,self::BACKUP_CODE_START, true ) ) ) {
update_user_meta( $user->ID,self::BACKUP_CODE_START, 1 );
}
// Append or replace (default).
if ( isset( $args['method'] ) && 'append' === $args['method'] ) {
$codes_hashed = (array) get_user_meta( $user->ID, self::BACKUP_CODE_VALUES, true );
}
for ( $i = 0; $i < $num_codes; $i++ ) {
$code = self::get_code();
$codes_hashed[] = wp_hash_password( $code );
$codes[] = $code;
unset( $code );
}
update_user_meta( $user->ID, self::BACKUP_CODE_VALUES, $codes_hashed );
// Unhashed values.
return $codes;
}
/**
* Delete codes.
*
* @param \WP_User $user
* @param string $code_hashed
*/
public function delete_code( $user, $code_hashed ) {
$backup_codes = get_user_meta( $user->ID, self::BACKUP_CODE_VALUES, true );
// Delete the current code from the list since it's been used.
$backup_codes = array_flip( $backup_codes );
unset( $backup_codes[ $code_hashed ] );
$backup_codes = array_values( array_flip( $backup_codes ) );
// Update the backup code master list.
update_user_meta( $user->ID, self::BACKUP_CODE_VALUES, $backup_codes );
}
/**
* @param int $count
*
* @return string
*/
public static function display_number_of_codes( $count ) {
return sprintf(
/* translators: %s: count */
_n( '%s unused code remaining', '%s unused codes remaining', $count, 'wpdef' ),
$count
);
}
/**
* @param \WP_User $user
* @param string $code
*
* @return bool|\WP_Error
*/
public function validate_code( $user, $code ) {
$backup_codes = get_user_meta( $user->ID, self::BACKUP_CODE_VALUES, true );
if ( is_array( $backup_codes ) && ! empty( $backup_codes ) ) {
foreach ( $backup_codes as $key => $code_hashed ) {
if ( wp_check_password( $code, $code_hashed, $user->ID ) ) {
$this->delete_code( $user, $code_hashed );
return true;
}
}
}
return new \WP_Error( 'opt_fail', __( 'ERROR: Invalid verification code.', 'wpdef' ) );
}
/**
* @param \WP_User $user
*
* @return bool|\WP_Error
*/
public function validate_authentication( $user ) {
$backup_code = isset( $_POST['backup-codes'] )
? sanitize_text_field( wp_unslash( $_POST['backup-codes'] ) )
: false;
return $this->validate_code( $user, filter_var( $backup_code, FILTER_SANITIZE_STRING ) );
}
}