viljoviitanen / freeotp-export Goto Github PK

View Code? Open in Web Editor NEW

126.0 126.0 40.0 15 KB

NOT MAINTAINED AND ARCHIVED. FreeOTP qrcode exporter in javascript

License: Apache License 2.0

HTML 100.00%

freeotp-export's People

Contributors

Stargazers

Watchers

freeotp-export's Issues

Not working on Google Chrome

Hello there. I just tried the freeotp-export and I think it's a wonderful tool. I tried on it on Chrome and unfortunately it didn't work. It took the exported .ad file but didn't show anything but in Firefox it worked perfectly well showing all the QRs for all the accounts.
OS: Ubuntu 16.04
Browser: Google Chrome 64.0.3282.140

AWS credentials failed to parse

The following XML could not be displayed as you can see in the screenshot: The barcode is missing.
I edited the data a bit for privacy/security: removing other entries and changing some digits. The result stays the same.

<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<map>
    <string name="Amazon Web Services:root-account-mfa-device@123456789012">{&quot;algo&quot;:&quot;SHA1&quot;,&quot;counter&quot;:0,&quot;digits&quot;:6,&quot;issuerExt&quot;:&quot;Amazon Web Services&quot;,&quot;issuerInt&quot;:&quot;Amazon Web Services&quot;,&quot;label&quot;:&quot;root-account-mfa-device@123456789012&quot;,&quot;period&quot;:30,&quot;secret&quot;:[100,-106,-69,38,-57,73,33,13,-75,11,-62,-87,21,-48,3,-15,-106,-36,42,50,114,-89,-38,-50,-127,109,-64,0,-86,23,127,31,21,-18,-62,-89,16,117,-26,-6],&quot;type&quot;:&quot;TOTP&quot;}</string>
</map>

BTW: Thank you for this app. Saved me at least an hour today!

QR codes are not made visible in Firefox

On export-xml.html, after selecting a tokens.xml file such as this example file, only the name of the site/username are made visible, along with a fully-white <img>, while the <canvas> containing the image data is hidden. Removing the inline CSS hiding the canvas works fine though.

There are only two console lines logged, as follows:

Object { algo: "SHA1", counter: 0, digits: 6, issuerExt: "Google", issuerInt: "Google", label: "[email protected]", period: 30, secret: (20) […], type: "TOTP" }
export-xml.html:97:5
otpauth://totp/Google%3Aexample%40gmail.com?secret=ZNATJX4LWUXY5P3LOUWHLM74NE236PNT&issuer=Google&algorithm=SHA1&digits=6&period=30 export-xml.html:111:5

Additionally, the full source of the page body after processing the example file is as follows:

<body><a href="https://github.com/viljoviitanen/freeotp-export">Instructions at GitHub</a>
<br>
FreeOTP XML file: <input id="file" type="file" onchange="onChange(event)"><p></p><div>Google:[email protected]</div><div id="0" title="otpauth://totp/Google%3Aexample%40gmail.com?secret=ZNATJX4LWUXY5P3LOUWHLM74NE236PNT&amp;issuer=Google&amp;algorithm=SHA1&amp;digits=6&amp;period=30"><canvas width="256" height="256" style="display: none;"></canvas><img style="display: block;" src="data:image/png;base64,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"></div>

</body>

From this, I would either expect (a) the <canvas> with the valid image data is not hidden, and an image tag is not created, or (b) the <img> is populated with a valid base-64 png image data corresponding to the QR code shown in the canvas.

P.S. I have adjusted my browser config in some ways that would resist fingerprinting and could be the cause of this. If this issue is not reproduceable in a clean environment, I am happy to investigate these settings further to see if one of them is the cause of this behavior.

Add image param if exists

FreeOTP supports an image in the QR URL.
See commit freeotp/freeotp-android@e1dbb3c, in particular this line.

Example of a real XML string entry (edited for obvious reasons):

<string name="OVH:EDITED-ovh">
{"algo":"SHA1","counter":0,"digits":6,"image":"https://www.ovh.com/images/totp/ovh.png","issuerExt":"OVH","label":"EDITED-ovh","period":30,"secret":[0,0,0,0,0,0,0,0,0,0],"type":"TOTP"}
</string>

It would be helpful to be able to backup and restore this (now it reverts to the default image).

I guess it only requires adding an optional field to params.

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.