Entrega Proyecto 1

Procfile

@@ -0,0 +1 @@
+web: vendor/bin/heroku-php-apache2 public

README.md

@@ -22,4 +22,9 @@ TODO
 
 ## Herramienta Audit de Chrome
 
-TODO
+Para el Home tengo una accesibilidad de 87 y performance 78 tanto para los usuarios registrados como no registrados
+Para el login tengo una accesibilidad de 73 y performance 98
+En la pagina de mis listas para usuarios autenticados tengo una accesibilidad de 87 y performance de 82
+
+## LINK A LA PÁGINA EN HEROKU
+https://futboleroos.herokuapp.com/

app/Authenticator.php

@@ -0,0 +1,177 @@
+<?php
+namespace App;
+
+
+class Authenticator
+{
+    protected $length = 6;
+
+    public function generateRandomSecret()
+    {
+        $secretLength = 16;
+        $secret = '';
+        $validChars = array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H',
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P',
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X',
+            'Y', 'Z', '2', '3', '4', '5', '6', '7',
+            '=',
+        );
+
+        // valida que el tamaño de la clave sea entre 80 a 640 bits
+        if ($secretLength < 16 || $secretLength > 128) {
+            throw new Exception('Bad secret length');
+        }
+        $random = false;
+        if (function_exists('random_bytes')) {
+            //genera una cadena de longitud $secretLength.
+            $random = random_bytes($secretLength);
+        }
+        if ($random !== false) {
+            for ($i = 0; $i < $secretLength; ++$i) {
+                //ord convierte el primer byte del string a un valor entre 0 y 255.
+                $secret .= $validChars[ord($random[$i]) & 31];
+            }
+        } else {
+            throw new Exception('Cannot create secure random secret due to source unavailbility');
+        }
+        //FIMQ2OOBU5EVRQ5D
+        return $secret;
+    }
+
+
+    public function getCode($secret, $timeSlice = null)
+    {
+        if ($timeSlice === null) {
+            $timeSlice = floor(time() / 30);
+        }
+
+        $secretkey = $this->debase32($secret);
+
+        $time = chr(0).chr(0).chr(0).chr(0).pack('N*', $timeSlice);
+        $hm = hash_hmac('SHA1', $time, $secretkey, true);
+        $offset = ord(substr($hm, -1)) & 0x0F;
+        $hashpart = substr($hm, $offset, 4);
+
+        $value = unpack('N', $hashpart);
+        $value = $value[1];
+        $value = $value & 0x7FFFFFFF;
+
+        $modulo = pow(10, $this->length);
+
+        return str_pad($value % $modulo, $this->length, '0', STR_PAD_LEFT);
+    }
+
+
+    public function getQR($name, $secret, $title = null, $params = array())
+    {
+        $width = !empty($params['width']) && (int) $params['width'] > 0 ? (int) $params['width'] : 200;
+        $height = !empty($params['height']) && (int) $params['height'] > 0 ? (int) $params['height'] : 200;
+        $level = !empty($params['level']) && array_search($params['level'], array('L', 'M', 'Q', 'H')) !== false ? $params['level'] : 'M';
+
+        $urlencoded = urlencode('otpauth://totp/'.$name.'?secret='.$secret.'');
+        if (isset($title)) {
+            $urlencoded .= urlencode('&issuer='.urlencode($title));
+        }
+
+        //api de google para generar QR
+        return 'https://chart.googleapis.com/chart?chs='.$width.'x'.$height.'&chld='.$level.'|0&cht=qr&chl='.$urlencoded.'';
+    }
+
+    //parametros que espera $llavesemillasecreta y codigoTOTPrequest
+    public function verifyCode($secret, $code, $discrepancy = 1, $currentTimeSlice = null)
+    {
+        if ($currentTimeSlice === null) {
+            $currentTimeSlice = floor(time() / 30);
+        }
+
+        if (strlen($code) != 6) {
+            return false;
+        }
+
+        for ($i = -$discrepancy; $i <= $discrepancy; ++$i) {
+            $calculatedCode = $this->getCode($secret, $currentTimeSlice + $i);
+            if ($this->timingSafeEquals($calculatedCode, $code)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+
+    public function setCodeLength($length)
+    {
+        $this->length  = $length;
+
+        return $this;
+    }
+
+
+    protected function debase32($secret)
+    {
+        if (empty($secret)) {
+            return '';
+        }
+
+        $base32chars =  array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H',
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P',
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X',
+            'Y', 'Z', '2', '3', '4', '5', '6', '7',
+            '=',
+        );
+        $base32charsFlipped = array_flip($base32chars);
+
+        $paddingCharCount = substr_count($secret, $base32chars[32]);
+        $allowedValues = array(6, 4, 3, 1, 0);
+        if (!in_array($paddingCharCount, $allowedValues)) {
+            return false;
+        }
+        for ($i = 0; $i < 4; ++$i) {
+            if ($paddingCharCount == $allowedValues[$i] &&
+                substr($secret, -($allowedValues[$i])) != str_repeat($base32chars[32], $allowedValues[$i])) {
+                return false;
+            }
+        }
+        $secret = str_replace('=', '', $secret);
+        $secret = str_split($secret);
+        $binaryString = '';
+        for ($i = 0; $i < count($secret); $i = $i + 8) {
+            $x = '';
+            if (!in_array($secret[$i], $base32chars)) {
+                return false;
+            }
+            for ($j = 0; $j < 8; ++$j) {
+                $x .= str_pad(base_convert(@$base32charsFlipped[@$secret[$i + $j]], 10, 2), 5, '0', STR_PAD_LEFT);
+            }
+            $eightBits = str_split($x, 8);
+            for ($z = 0; $z < count($eightBits); ++$z) {
+                $binaryString .= (($y = chr(base_convert($eightBits[$z], 2, 10))) || ord($y) == 48) ? $y : '';
+            }
+        }
+
+        return $binaryString;
+    }
+
+
+    private function timingSafeEquals($safeString, $userString)
+    {
+        if (function_exists('hash_equals')) {
+            return hash_equals($safeString, $userString);
+        }
+        $safeLen = strlen($safeString);
+        $userLen = strlen($userString);
+
+        if ($userLen != $safeLen) {
+            return false;
+        }
+
+        $result = 0;
+
+        for ($i = 0; $i < $userLen; ++$i) {
+            $result |= (ord($safeString[$i]) ^ ord($userString[$i]));
+        }
+        return $result === 0;
+    }
+}

app/Http/Controllers/Auth/LoginController.php

@@ -1,7 +1,9 @@
 <?php
 
 namespace App\Http\Controllers\Auth;
-
+use Illuminate\Http\Request;
+use App\User;
+use Illuminate\Support\Facades\Auth;
 use App\Http\Controllers\Controller;
 use Illuminate\Foundation\Auth\AuthenticatesUsers;
 
@@ -25,15 +27,40 @@ class LoginController extends Controller
      *
      * @var string
      */
+
     protected $redirectTo = '/home';
 
+
     /**
      * Create a new controller instance.
      *
      * @return void
      */
+
     public function __construct()
     {
         $this->middleware('guest')->except('logout');
     }
+
+    public function twofactor(User $user){
+        return view('sfactor',[
+            'users' => $user->get()
+        ]);
+    }
+
+    protected function authenticated(Request $request, User $user)
+    {
+        if($user->activar2F == true){
+            return view('sfactor',[
+                'user' => $user
+            ]);
+        }else
+            return redirect('home');
+    }
+
+    public function logout()
+     {
+        Auth::logout();
+        return view('Auth.login');
+     }
 }

app/Http/Controllers/Auth/RegisterController.php

@@ -40,6 +40,7 @@ public function __construct()
         $this->middleware('guest');
     }
 
+
     /**
      * Get a validator for an incoming registration request.
      *

app/Http/Controllers/HomeController.php

@@ -0,0 +1,50 @@
+<?php
+
+
+namespace App\Http\Controllers;
+use Illuminate\Validation\Rule;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use App\User;
+use App\Lista;
+use App\Item;
+class HomeController extends Controller
+{
+// /**Index se va a referir a nuestro modulo de usuario, cuya logica va a estar encapsulada en UserController  */
+// public function index(){
+
+//     //usoEloquentModel para obtener la tabla de usuarios
+//     $lists = Lista::orderBy('created_at','desc')->get();
+
+//     foreach($lists as $list){
+//         $users = [
+//             'user' => User::where('id','=',$list->user_id),
+//         ];
+
+//     }
+
+
+//     //A la vista le paso un arreglo asociativo, donde cada fila va a ser (llave,valor)
+//     return view('welcome', [
+//         'lists' => $lists,
+//         'users' => $users,
+//     ]);
+// }
+
+/**Index se va a referir a nuestro modulo de usuario, cuya logica va a estar encapsulada en UserController  */
+public function index(){
+
+        //usoEloquentModel para obtener la tabla de listas
+        $lists = Lista::orderBy('created_at','desc')->get();
+
+        $items = Item::all();
+
+        //A la vista le paso un arreglo asociativo, donde cada fila va a ser (llave,valor)
+        return view('home', [
+            'lists' => $lists,
+            'items' => $items,
+        ]);
+
+}
+
+}