PHP-Laravel Quickstart for Twilio Authy Two-factor Authentication

1
git clone git@github.com:TwilioDevEd/account-security-quickstart-php.git
2
cd account-security-quickstart-php
3
composer install

1
# Get your API key here: https://www.twilio.com/console/authy/getting-started
2
API_KEY=your-authy-api-key
3

4
APP_DEBUG=true
5
APP_ENV=development
6
APP_KEY=
7
APP_LOG=errorlog
8

9
# By default, if you'd like to match this install MySQL locally.
10
#  host:       localhost:3306
11
#  DB user:    homestead
12
#  DB pass:    secret
13
#  DB name:    account_security
14

15
DB_DATABASE=account_security
16
DB_HOST=localhost
17
DB_PASSWORD=secret
18
DB_PORT=3306
19
DB_USERNAME=homestead
20
MYSQL_DATABASE=account_security
21
MYSQL_PASSWORD=secret
22
MYSQL_PORT=3306
23
MYSQL_ROOT_PASSWORD=secret
24
MYSQL_USER=homestead
25
SECRET=your-account-secret
26

1
php artisan key:generate
2
php artisan migrate
3
php artisan serve --port 8081

1
<?php
2

3
namespace App\Http\Controllers\Auth;
4

5
use \Exception;
6
use App\Http\Controllers\Controller;
7
use App\Library\Services\OneTouch;
8
use App\User;
9
use Authy\AuthyApi;
10
use Illuminate\Http\Request;
11
use Illuminate\Support\Facades\Validator;
12

13
class AccountSecurityController extends Controller
14
{
15
    /*
16
    |--------------------------------------------------------------------------
17
    | Account Security Controller
18
    |--------------------------------------------------------------------------
19
    |
20
    | Uses Authy to verify a users phone via voice, sms or notifications.
21
    |
22
    */
23

24
    /**
25
     * Create a new controller instance.
26
     *
27
     * @return void
28
     */
29
    public function __construct()
30
    {
31
        $this->middleware('auth');
32
    }
33

34
    /**
35
     * send verification code via SMS.
36
     *
37
     * @param  Illuminate\Support\Facades\Request  $request;
38
     * @return Illuminate\Support\Facades\Response;
39
     */
40
    protected function sendVerificationCodeSMS(
41
        Request $request,
42
        AuthyApi $authyApi
43
    ) {
44
        $user_id = session('user_id');
45
        $user = User::find($user_id);
46
        $authyID = $user['authyID'];
47
        $authyApi->requestSms($authyID, ['force' => 'true']);
48

49
        return response()->json(['message' => 'Verification Code sent via SMS succesfully.']);
50
    }
51

52

53
   /**
54
    * send verification code via Voice Call.
55
    *
56
    * @param  Illuminate\Support\Facades\Request  $request;
57
    * @return Illuminate\Support\Facades\Response;
58
    */
59
    protected function sendVerificationCodeVoice(
60
        Request $request,
61
        AuthyApi $authyApi
62
    ) {
63
        $user_id = session('user_id');
64
        $user = User::find($user_id);
65
        $authyID = $user['authyID'];
66
        $authyApi->phoneCall($authyID, ['force' => 'true']);
67

68
        return response()->json(['message' => 'Verification Code sent via Voice Call succesfully.']);
69
    }
70

71
   /**
72
    * verify token.
73
    *
74
    * @param  Illuminate\Support\Facades\Request  $request;
75
    * @return Illuminate\Support\Facades\Response;
76
    */
77
    protected function verifyToken(
78
        Request $request,
79
        AuthyApi $authyApi
80
    ) {
81
        $data = $request->all();
82
        $token = $data['token'];
83
        $user_id = session('user_id');
84
        $user = User::find($user_id);
85
        $authyID = $user['authyID'];
86
        $authyApi->verifyToken($authyID, $token);
87

88
        return response()->json(['message' => 'Token verified successfully.']);
89
    }
90

91
   /**
92
    * Create One Touch Approval Request.
93
    *
94
    * @param  Illuminate\Support\Facades\Request  $request;
95
    * @return Illuminate\Support\Facades\Response;
96
    */
97
    protected function createOneTouch(
98
        Request $request,
99
        OneTouch $oneTouch
100
    ) {
101
        $data = $request->all();
102
        $user_id = session('user_id');
103
        $user = User::find($user_id);
104
        $authyID = $user['authyID'];
105
        $username =$user['username'];
106

107
        $data = [
108
          'message' => 'Twilio Account Security Quickstart wants authentication approval.',
109
          'hidden' => 'this is a hidden value',
110
          'visible' => [
111
            'username' => $username,
112
            'AuthyID' => $authyID,
113
            'Location' => 'San Francisco, CA',
114
            'Reason' => 'Demo by Account Security'
115
          ],
116
          'seconds_to_expire' => 120
117
        ];
118

119
        $onetouch_uuid = $oneTouch->createApprovalRequest($data);
120
        session(['onetouch_uuid' => $onetouch_uuid]);
121

122
        return response()->json(['message' => 'Token verified successfully.']);
123
    }
124

125
   /**
126
    * Get OneTouch Status.
127
    *
128
    * @param  Illuminate\Support\Facades\Request  $request;
129
    * @return Illuminate\Support\Facades\Response;
130
    */
131
    protected function checkOneTouchStatus(
132
        Request $request,
133
        OneTouch $oneTouch
134
    ) {
135
        $response = $oneTouch->oneTouchStatus(session('onetouch_uuid'));
136

137
        session(['authy' => $body['approval_request']['status']]);
138

139
        return response()->json($response, 200);
140
    }
141
}
142