Merge branch 'main' into docs/basic-instructions

Author: replydev

CHANGELOG.md

@@ -1,3 +1,11 @@
+## [1.7.1](https://github.com/replydev/cotp/compare/v1.7.0...v1.7.1) (2024-06-19)
+
+
+### Bug Fixes
+
+* check for integer overflow if digits value is too high ([95cf5a2](https://github.com/replydev/cotp/commit/95cf5a28eeebb73b4aab3eb80787a614fe329da4))
+* validate digits input value from command line ([d03d4b8](https://github.com/replydev/cotp/commit/d03d4b8da72c25a6cab97b8f91a8ea28a7341bbb))
+
 # [1.7.0](https://github.com/replydev/cotp/compare/v1.6.1...v1.7.0) (2024-05-09)
 
 

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "cotp"
-version = "1.7.0"
+version = "1.7.1"
 authors = ["replydev <[email protected]>"]
 edition = "2021"
 description = "Trustworthy, encrypted, command-line TOTP/HOTP authenticator app with import functionality."

Cargo.toml

@@ -1,4 +1,4 @@
-use clap::Args;
+use clap::{value_parser, Args};
 use color_eyre::eyre::{eyre, ErrReport};
 
 use zeroize::Zeroize;
@@ -39,7 +39,8 @@ pub struct AddArgs {
         short,
         long,
         default_value_t = 6,
-        default_value_if("type", "STEAM", "5")
+        default_value_if("type", "STEAM", "5"),
+        value_parser=value_parser!(u64).range(0..=9)
     )]
     pub digits: u64,
 

src/arguments/add.rs

@@ -1,4 +1,4 @@
-use clap::Args;
+use clap::{value_parser, Args};
 use color_eyre::eyre::eyre;
 
 use crate::otp::{otp_algorithm::OTPAlgorithm, otp_element::OTPDatabase};
@@ -24,7 +24,7 @@ pub struct EditArgs {
     pub algorithm: Option<OTPAlgorithm>,
 
     /// Code digits
-    #[arg(short, long)]
+    #[arg(short, long, value_parser=value_parser!(u64).range(0..=9))]
     pub digits: Option<u64>,
 
     /// Code period

src/arguments/edit.rs

@@ -58,11 +58,11 @@ impl<'a> TryFrom<&'a OTPElement> for JsonOtpList<'a> {
 
 impl SubcommandExecutor for ListArgs {
     fn run_command(self, otp_database: OTPDatabase) -> color_eyre::Result<OTPDatabase> {
-        let elements_iterator = otp_database.elements.iter().enumerate();
-
         if self.format.unwrap_or_default().json {
-            let json_elements = elements_iterator
-                .map(|(_, element)| element.try_into())
+            let json_elements = otp_database
+                .elements
+                .iter()
+                .map(|element| element.try_into())
                 .collect::<Result<Vec<JsonOtpList>>>()?;
 
             let stringified = serde_json::to_string_pretty(&json_elements)
@@ -73,19 +73,23 @@ impl SubcommandExecutor for ListArgs {
                 "{0: <6} {1: <30} {2: <70} {3: <10}",
                 "Index", "Issuer", "Label", "OTP"
             );
-            elements_iterator.for_each(|(index, e)| {
-                println!(
-                    "{0: <6} {1: <30} {2: <70} {3: <10}",
-                    index,
-                    if e.issuer.is_empty() {
-                        "<No issuer>"
-                    } else {
-                        e.issuer.as_str()
-                    },
-                    &e.label,
-                    e.get_otp_code().unwrap_or("ERROR".to_string())
-                )
-            });
+            otp_database
+                .elements
+                .iter()
+                .enumerate()
+                .for_each(|(index, e)| {
+                    println!(
+                        "{0: <6} {1: <30} {2: <70} {3: <10}",
+                        index,
+                        if e.issuer.is_empty() {
+                            "<No issuer>"
+                        } else {
+                            e.issuer.as_str()
+                        },
+                        &e.label,
+                        e.get_otp_code().unwrap_or("ERROR".to_string())
+                    )
+                });
         }
 
         Ok(otp_database)

src/arguments/list.rs

@@ -2,7 +2,7 @@ use std::sync::mpsc;
 use std::thread;
 use std::time::{Duration, Instant};
 
-use crossterm::event::{self, Event as CrosstermEvent, KeyEvent, KeyEventKind, MouseEvent};
+use crossterm::event::{self, Event as CrosstermEvent, KeyEvent, KeyEventKind};
 
 use crate::interface::app::AppResult;
 
@@ -14,15 +14,15 @@ pub enum Event {
     /// Key press.
     Key(KeyEvent),
     /// Mouse click/scroll.
-    Mouse(MouseEvent),
+    Mouse(()),
     /// Terminal resize.
-    Resize(u16, u16),
+    Resize((), ()),
     /// Focus gained
     FocusGained(),
     /// Focus lost
     FocusLost(),
     /// Paste text
-    Paste(String),
+    Paste(()),
 }
 
 /// Terminal event handler.
@@ -59,11 +59,11 @@ impl EventHandler {
                                 Ok(())
                             }
                         }
-                        CrosstermEvent::Mouse(e) => sender.send(Event::Mouse(e)),
-                        CrosstermEvent::Resize(w, h) => sender.send(Event::Resize(w, h)),
+                        CrosstermEvent::Mouse(_e) => sender.send(Event::Mouse(())),
+                        CrosstermEvent::Resize(_w, _h) => sender.send(Event::Resize((), ())),
                         CrosstermEvent::FocusGained => sender.send(Event::FocusGained()),
                         CrosstermEvent::FocusLost => sender.send(Event::FocusLost()),
-                        CrosstermEvent::Paste(e) => sender.send(Event::Paste(e)),
+                        CrosstermEvent::Paste(_e) => sender.send(Event::Paste(())),
                     }
                     .expect("failed to send terminal event")
                 }

src/interface/event.rs

@@ -86,18 +86,16 @@ mod tests {
     #[test]
     fn test_hotp() {
         assert_eq!(
-            format_code(generate_hotp::<Sha1>("BASE32SECRET3232", 0).unwrap(), 6),
-            "260182"
-        );
-        assert_eq!(
-            format_code(generate_hotp::<Sha1>("BASE32SECRET3232", 1).unwrap(), 6),
-            "055283"
+            455260182,
+            generate_hotp::<Sha1>("BASE32SECRET3232", 0).unwrap()
         );
     }
 
-    fn format_code(value: u32, digits: u32) -> String {
-        // Get the formatted code
-        let s = (value % 10_u32.pow(digits)).to_string();
-        "0".repeat(digits as usize - s.chars().count()) + s.as_str()
+    #[test]
+    fn test_hotp_2() {
+        assert_eq!(
+            1617055283,
+            generate_hotp::<Sha1>("BASE32SECRET3232", 1).unwrap()
+        );
     }
 }

src/otp/algorithms/hotp_maker.rs

@@ -8,10 +8,7 @@ use super::totp_maker::totp;
 const STEAM_ALPHABET: &str = "23456789BCDFGHJKMNPQRTVWXY";
 
 pub fn steam(secret: &str, algorithm: OTPAlgorithm, digits: usize) -> Result<String, OtpError> {
-    match totp(secret, algorithm) {
-        Ok(v) => Ok(to_steam_string(v as usize, digits)),
-        Err(e) => Err(e),
-    }
+    totp(secret, algorithm).map(|v| to_steam_string(v as usize, digits))
 }
 
 fn to_steam_string(mut code: usize, digits: usize) -> String {

src/otp/algorithms/steam_otp_maker.rs

@@ -30,17 +30,8 @@ mod tests {
     #[test]
     fn test_totp() {
         assert_eq!(
-            format_code(
-                generate_totp("BASE32SECRET3232", OTPAlgorithm::Sha1, 0, 30, 0).unwrap(),
-                6
-            ),
-            "260182"
+            455260182,
+            generate_totp("BASE32SECRET3232", OTPAlgorithm::Sha1, 0, 30, 0).unwrap()
         );
     }
-
-    fn format_code(value: u32, digits: u32) -> String {
-        // Get the formatted code
-        let s = (value % 10_u32.pow(digits)).to_string();
-        "0".repeat(digits as usize - s.chars().count()) + s.as_str()
-    }
 }