notandClaude Opus 5.5
0ea562db52
CI / lint (pull_request) Successful in 1m55s
CI / k8s (pull_request) Successful in 9s
CI / build (pull_request) Successful in 1m27s
CI / unit (pull_request) Successful in 1m51s
CI / frontend (pull_request) Successful in 3m24s
CI / mutation (pull_request) Successful in 6m40s
CI / verify-stack (pull_request) Failing after 1m1s
The theme was inline text in a Helm template. It now lives next to the realms and is seeded as rr-kc-theme by seed-configmaps.sh, like every other file input, so it can be edited as a normal Keycloak theme. demo.otpAutofill now only decides whether KC_SPI_THEME_DEFAULT is set (big.env skips values that render empty); off, Keycloak keeps its stock theme. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
25 lines
1.3 KiB
JavaScript
25 lines
1.3 KiB
JavaScript
// RFC 6238 with Keycloak's default policy (HmacSHA1, 6 digits, 30 s) over the
|
|
// raw bytes of the medewerker fixture secret — same as tests/e2e/keycloak-login.ts.
|
|
document.addEventListener('DOMContentLoaded', async () => {
|
|
const input = document.querySelector('input[name="otp"]');
|
|
if (!input || !input.form) return;
|
|
const key = await crypto.subtle.importKey('raw',
|
|
new TextEncoder().encode('BIGMEDEWERKEROTPSEED'), { name: 'HMAC', hash: 'SHA-1' }, false, ['sign']);
|
|
// A code is single-use, so a second login in the same window spends the next
|
|
// counter (Keycloak's look-ahead accepts it). Past that, fill but don't submit,
|
|
// so a rejected code can't turn into a submit loop.
|
|
const now = Math.floor(Date.now() / 30000);
|
|
let last = -1;
|
|
try { last = Number(sessionStorage.getItem('big-otp-counter')) || -1; } catch {}
|
|
const counter = Math.max(now, last + 1);
|
|
const msg = new DataView(new ArrayBuffer(8));
|
|
msg.setBigUint64(0, BigInt(counter));
|
|
const mac = new Uint8Array(await crypto.subtle.sign('HMAC', key, msg.buffer));
|
|
const o = mac[19] & 0x0f;
|
|
const n = ((mac[o] & 0x7f) << 24 | mac[o + 1] << 16 | mac[o + 2] << 8 | mac[o + 3]) % 1e6;
|
|
input.value = String(n).padStart(6, '0');
|
|
if (counter > now + 1) return;
|
|
try { sessionStorage.setItem('big-otp-counter', String(counter)); } catch {}
|
|
input.form.requestSubmit();
|
|
});
|