#1141 Add TOTP key field to database and PlayerAuth

- Add new field for storing TOTP key
- Implement data source methods for manipulation of its value

src/main/java/fr/xephi/authme/datasource/CacheDataSource.java

@@ -268,6 +268,15 @@ public class CacheDataSource implements DataSource {
         return source.getRecentlyLoggedInPlayers();
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        boolean result = source.setTotpKey(user, totpKey);
+        if (result) {
+            cachedAuths.refresh(user);
+        }
+        return result;
+    }
+
     @Override
     public void invalidateCache(String playerName) {
         cachedAuths.invalidate(playerName);

src/main/java/fr/xephi/authme/datasource/Columns.java

@@ -14,6 +14,7 @@ public final class Columns {
     public final String REAL_NAME;
     public final String PASSWORD;
     public final String SALT;
+    public final String TOTP_KEY;
     public final String LAST_IP;
     public final String LAST_LOGIN;
     public final String GROUP;
@@ -35,6 +36,7 @@ public final class Columns {
         REAL_NAME         = settings.getProperty(DatabaseSettings.MYSQL_COL_REALNAME);
         PASSWORD          = settings.getProperty(DatabaseSettings.MYSQL_COL_PASSWORD);
         SALT              = settings.getProperty(DatabaseSettings.MYSQL_COL_SALT);
+        TOTP_KEY          = settings.getProperty(DatabaseSettings.MYSQL_COL_TOTP_KEY);
         LAST_IP           = settings.getProperty(DatabaseSettings.MYSQL_COL_LAST_IP);
         LAST_LOGIN        = settings.getProperty(DatabaseSettings.MYSQL_COL_LASTLOGIN);
         GROUP             = settings.getProperty(DatabaseSettings.MYSQL_COL_GROUP);

src/main/java/fr/xephi/authme/datasource/DataSource.java

@@ -232,6 +232,25 @@ public interface DataSource extends Reloadable {
      */
     List<PlayerAuth> getRecentlyLoggedInPlayers();
 
+    /**
+     * Sets the given TOTP key to the player's account.
+     *
+     * @param user the name of the player to modify
+     * @param totpKey the totp key to set
+     * @return True upon success, false upon failure
+     */
+    boolean setTotpKey(String user, String totpKey);
+
+    /**
+     * Removes the TOTP key if present of the given player's account.
+     *
+     * @param user the name of the player to modify
+     * @return True upon success, false upon failure
+     */
+    default boolean removeTotpKey(String user) {
+        return setTotpKey(user, null);
+    }
+
     /**
      * Reload the data source.
      */

src/main/java/fr/xephi/authme/datasource/FlatFile.java

@@ -398,6 +398,11 @@ public class FlatFile implements DataSource {
         throw new UnsupportedOperationException("Flat file no longer supported");
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        throw new UnsupportedOperationException("Flat file no longer supported");
+    }
+
     /**
      * Creates a PlayerAuth object from the read data.
      *

src/main/java/fr/xephi/authme/datasource/MySQL.java

@@ -248,6 +248,11 @@ public class MySQL implements DataSource {
                 st.executeUpdate("ALTER TABLE " + tableName + " ADD COLUMN "
                     + col.HAS_SESSION + " SMALLINT NOT NULL DEFAULT '0' AFTER " + col.IS_LOGGED);
             }
+
+            if (isColumnMissing(md, col.TOTP_KEY)) {
+                st.executeUpdate("ALTER TABLE " + tableName
+                    + " ADD COLUMN " + col.TOTP_KEY + " VARCHAR(16);");
+            }
         }
         ConsoleLogger.info("MySQL setup finished");
     }
@@ -728,6 +733,20 @@ public class MySQL implements DataSource {
         return players;
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        String sql = "UPDATE " + tableName + " SET " + col.TOTP_KEY + " = ? WHERE " + col.NAME + " = ?";
+        try (Connection con = getConnection(); PreparedStatement pst = con.prepareStatement(sql)) {
+            pst.setString(1, totpKey);
+            pst.setString(2, user.toLowerCase());
+            pst.executeUpdate();
+            return true;
+        } catch (SQLException e) {
+            logSqlException(e);
+        }
+        return false;
+    }
+
     private PlayerAuth buildAuthFromResultSet(ResultSet row) throws SQLException {
         String salt = col.SALT.isEmpty() ? null : row.getString(col.SALT);
         int group = col.GROUP.isEmpty() ? -1 : row.getInt(col.GROUP);
@@ -735,6 +754,7 @@ public class MySQL implements DataSource {
             .name(row.getString(col.NAME))
             .realName(row.getString(col.REAL_NAME))
             .password(row.getString(col.PASSWORD), salt)
+            .totpKey(row.getString(col.TOTP_KEY))
             .lastLogin(getNullableLong(row, col.LAST_LOGIN))
             .lastIp(row.getString(col.LAST_IP))
             .email(row.getString(col.EMAIL))

src/main/java/fr/xephi/authme/datasource/SQLite.java

@@ -171,6 +171,11 @@ public class SQLite implements DataSource {
                 st.executeUpdate("ALTER TABLE " + tableName
                     + " ADD COLUMN " + col.HAS_SESSION + " INT NOT NULL DEFAULT '0';");
             }
+
+            if (isColumnMissing(md, col.TOTP_KEY)) {
+                st.executeUpdate("ALTER TABLE " + tableName
+                    + " ADD COLUMN " + col.TOTP_KEY + " VARCHAR(16);");
+            }
         }
         ConsoleLogger.info("SQLite Setup finished");
     }
@@ -654,6 +659,21 @@ public class SQLite implements DataSource {
         return players;
     }
 
+
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        String sql = "UPDATE " + tableName + " SET " + col.TOTP_KEY + " = ? WHERE " + col.NAME + " = ?";
+        try (PreparedStatement pst = con.prepareStatement(sql)) {
+            pst.setString(1, totpKey);
+            pst.setString(2, user.toLowerCase());
+            pst.executeUpdate();
+            return true;
+        } catch (SQLException e) {
+            logSqlException(e);
+        }
+        return false;
+    }
+
     private PlayerAuth buildAuthFromResultSet(ResultSet row) throws SQLException {
         String salt = !col.SALT.isEmpty() ? row.getString(col.SALT) : null;
 
@@ -662,6 +682,7 @@ public class SQLite implements DataSource {
             .email(row.getString(col.EMAIL))
             .realName(row.getString(col.REAL_NAME))
             .password(row.getString(col.PASSWORD), salt)
+            .totpKey(row.getString(col.TOTP_KEY))
             .lastLogin(getNullableLong(row, col.LAST_LOGIN))
             .lastIp(row.getString(col.LAST_IP))
             .registrationDate(row.getLong(col.REGISTRATION_DATE))