exlim/cyberchef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: handle invalid character error in Generate HOTP (issue #2445)

Browse Source
This commit is contained in:
vanhci 2026-05-25 13:10:51 +08:00
parent 6a3a370bb1
commit 173abaf64a
1 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
src/core/operations/GenerateHOTP.mjs
View File

@ -5,6 +5,7 @@
*/ */
import Operation from "../Operation.mjs"; import Operation from "../Operation.mjs";
import OperationError from "../errors/OperationError.mjs";
import * as OTPAuth from "otpauth"; import * as OTPAuth from "otpauth";
/** /**
@ -46,22 +47,29 @@ class GenerateHOTP extends Operation {
* *
*/ */
run(input, args) { run(input, args) {
const secretStr = new TextDecoder("utf-8").decode(input).trim(); try {
const secret = secretStr ? secretStr.toUpperCase().replace(/\s+/g, "") : ""; const secretStr = new TextDecoder("utf-8").decode(input).trim();
const secret = secretStr ? secretStr.toUpperCase().replace(/\s+/g, "") : "";
const hotp = new OTPAuth.HOTP({ const hotp = new OTPAuth.HOTP({
issuer: "", issuer: "",
label: args[0], label: args[0],
algorithm: "SHA1", algorithm: "SHA1",
digits: args[1], digits: args[1],
counter: args[2], counter: args[2],
secret: OTPAuth.Secret.fromBase32(secret) secret: OTPAuth.Secret.fromBase32(secret)
}); });
const uri = hotp.toString(); const uri = hotp.toString();
const code = hotp.generate(); const code = hotp.generate();
return `URI: ${uri}\n\nPassword: ${code}`; return `URI: ${uri}\n\nPassword: ${code}`;
} catch (err) {
if (err instanceof TypeError) {
throw new OperationError("Invalid character found in input. HOTP secrets must be valid Base32 characters (A-Z, 2-7).");
}
throw err;
}
} }
} }