Method setupTOTP

src/FileRise/Domain/UserModel.php:856–951

* Setup TOTP & build QR PNG. */

($username)

     * Setup TOTP & build QR PNG.
     */
    public static function setupTOTP($username)
    {
        global $encryptionKey;
        $usersFile = USERS_DIR . USERS_FILE;

        if (!preg_match(REGEX_USER, $username)) {
            return ['error' => 'Invalid username', 'statusCode' => 400];
        }

        if (!file_exists($usersFile)) {
            return ['error' => 'Users file not found'];
        }

        $lines = file($usersFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) ?: [];
        $userExists = false;

        foreach ($lines as $line) {
            $parts = explode(':', trim($line));
            if (count($parts) >= 3 && strcasecmp($parts[0], $username) === 0) {
                $userExists = true;
                if (count($parts) >= 4 && !empty($parts[3])) {
                    return ['error' => 'TOTP is already configured for this account', 'statusCode' => 409];
                }
                break;
            }
        }
        if (!$userExists) {
            return ['error' => 'User not found', 'statusCode' => 404];
        }

        $tfa = new \RobThree\Auth\TwoFactorAuth(
            new \RobThree\Auth\Providers\Qr\GoogleChartsQrCodeProvider(),
            'FileRise',
            6,
            30,
            \RobThree\Auth\Algorithm::Sha1
        );

        $totpSecret = $tfa->createSecret();
        $encryptedSecret = encryptData($totpSecret, $encryptionKey);

        $newLines = [];
        foreach ($lines as $line) {
            $parts = explode(':', trim($line));
            if (count($parts) >= 3 && strcasecmp($parts[0], $username) === 0) {
                if (count($parts) >= 4) {
                    $parts[3] = $encryptedSecret;
                } else {
                    $parts[] = $encryptedSecret;
                }
                $newLines[] = implode(':', $parts);
            } else {
                $newLines[] = $line;
            }
        }
        if (file_put_contents($usersFile, implode(PHP_EOL, $newLines) . PHP_EOL, LOCK_EX) === false) {
            return ['error' => 'Failed to save TOTP secret'];
        }