core.js

   1 /* Copyright (c) 2012 Robert Sesek <http://robert.sesek.com>
   2  *
   3  * Permission is hereby granted, free of charge, to any person obtaining a copy
   4  * of this software and associated documentation files (the "Software"), to
   5  * deal in the Software without restriction, including without limitation the
   6  * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
   7  * sell copies of the Software, and to permit persons to whom the Software is
   8  * furnished to do so, subject to the following conditions:
   9  *
  10  * The above copyright notice and this permission notice shall be included in
  11  * all copies or substantial portions of the Software.
  12  *
  13  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  14  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  15  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  16  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  17  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
  18  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
  19  * DEALINGS IN THE SOFTWARE.
  20  */
  21
  22 (function main() {
  23   if (typeof chrome !== 'undefined') {
  24     // TODO: load the extension JS
  25   } else {
  26     // TODO: load the hosted JS
  27   }
  28
  29   document.addEventListener('DOMContentLoaded', function() {
  30     var controller = new SkeletonKey(document);
  31   });
  32 })();
  33
  34 /**
  35  * SkeletonKey is view controller for generating secure passwords.
  36  *
  37  * @param {HTMLDocument} doc The document on which to operate.
  38  */
  39 var SkeletonKey = SkeletonKey || function(doc) {
  40   this._master = doc.getElementById('master');
  41   this._sitekey = doc.getElementById('sitekey');
  42   this._username = doc.getElementById('username');
  43   this._password = doc.getElementById('password');
  44   this._generateButton = doc.getElementById('generate');
  45
  46   // If this is an extension, use defaults until the Chrome settings are loaded.
  47   var win = null;
  48   if (!this._isChromeExtension())
  49     win = window;
  50   this._options = new SkeletonKeyOptions(null, win);
  51
  52
  53   this._init();
  54 };
  55
  56 /**
  57  * The number of iterations to perform in PBKDF2.
  58  * @const {int}
  59  */
  60 SkeletonKey.prototype.ITERATIONS = 1000;
  61 /**
  62  * The size of the key, in bytes.
  63  * @const {int}
  64  */
  65 SkeletonKey.prototype.KEYSIZE = 256/32;
  66
  67 /**
  68  * Initializes event handlers for the page.
  69  * @private
  70  */
  71 SkeletonKey.prototype._init = function() {
  72   this._generateButton.onclick = this._onGenerate.bind(this);
  73
  74   this._master.onkeyup = this._nextFieldInterceptor.bind(this);
  75   this._sitekey.onkeyup = this._nextFieldInterceptor.bind(this);
  76   this._username.onkeyup = this._nextFieldInterceptor.bind(this);
  77
  78   this._password.onclick = this._selectPassword.bind(this);
  79   this._password.labels[0].onclick = this._selectPassword.bind(this);
  80
  81   this._initChromeExtension();
  82
  83   // Chrome extensions will get the first field focused automatically, so only
  84   // do it explicitly for hosted pages.
  85   if (!this._isChromeExtension())
  86     this._master.focus();
  87 };
  88
  89 /**
  90  * Event handler for generating a new password.
  91  * @param {Event} e
  92  * @private
  93  */
  94 SkeletonKey.prototype._onGenerate = function(e) {
  95   var salt = this._username.value + '@' + this._sitekey.value;
  96
  97   // |key| is a WordArray of 32-bit words.
  98   var key = CryptoJS.PBKDF2(this._master.value, salt,
  99       {keySize: this.KEYSIZE, iterations: this.ITERATIONS});
 100
 101   var hexString = key.toString();
 102   hexString = this._capitalizeKey(hexString);
 103
 104   var maxLength = this._options.getMaximumPasswordLength();
 105   if (hexString.length > maxLength)
 106     hexString = hexString.substr(0, maxLength);
 107
 108   this._password.value = hexString;
 109   this._selectPassword();
 110 };
 111
 112 /**
 113  * Takes a HEX string and returns a mixed-case string.
 114  * @param {string} key
 115  * @return string
 116  * @private
 117  */
 118 SkeletonKey.prototype._capitalizeKey = function(key) {
 119   // |key| is too long for a decent password, so try and use the second half of
 120   // it as the basis for capitalizing the key.
 121   var capsSource = null;
 122   var keyLength = key.length;
 123   if (keyLength / 2 <= this._options.getMinimumPasswordLength()) {
 124     capsSouce = key.substr(0, keyLength - this._options.getMinimumPasswordLength());
 125   } else {
 126     capsSource = key.substr(keyLength / 2);
 127   }
 128
 129   if (!capsSource || capsSource.length < 1) {
 130     return key;
 131   }
 132
 133   key = key.substr(0, capsSource.length);
 134   var capsSourceLength = capsSource.length;
 135
 136   var j = 0;
 137   var newKey = "";
 138   for (var i = 0; i < key.length; i++) {
 139     var c = key.charCodeAt(i);
 140     // If this is not a lowercase letter or there's no more source, skip.
 141     if (c < 0x61 || c > 0x7A || j >= capsSourceLength) {
 142       newKey += key[i];
 143       continue;
 144     }
 145
 146     var makeCap = capsSource.charCodeAt(j++) % 2;
 147     if (makeCap)
 148       newKey += String.fromCharCode(c - 0x20);
 149     else
 150       newKey += key[i];
 151   }
 152
 153   return newKey;
 154 };
 155
 156 /**
 157  * Checks if the given key event is from the enter key and moves onto the next
 158  * field or generates the password.
 159  * @param {Event} e
 160  * @private
 161  */
 162 SkeletonKey.prototype._nextFieldInterceptor = function(e) {
 163   if (e.keyCode != 0xD)
 164     return;
 165
 166   if (this._master.value == "") {
 167     this._master.focus();
 168   } else if (this._sitekey.value == "") {
 169     this._sitekey.focus();
 170   } else if (this._username.value == "") {
 171     this._username.focus();
 172   } else {
 173     this._generateButton.click();
 174   }
 175 };
 176
 177 /**
 178  * Selects the contents of the generated password.
 179  * @private
 180  */
 181 SkeletonKey.prototype._selectPassword = function() {
 182   this._password.focus();
 183   this._password.select();
 184 };
 185
 186 /**
 187  * Initalizes the Chrome extension pieces if running inside chrome.
 188  * @private
 189  */
 190 SkeletonKey.prototype._initChromeExtension = function() {
 191   return;
 192
 193   // getCurrent is undefined for backround pages. Need content script.
 194   chrome.tabs.getCurrent(function (tab) {
 195     if (tab == null)
 196       return;
 197
 198     var url = tab.url;
 199     if (url == null || url == "")
 200       return;
 201
 202     var siteKey = url.search(/https?:\/\/(www.?|login|accounts?)\.(.*)\.(com?|net|org|edu|biz|info)?.*/);
 203     console.log(siteKey);
 204   });
 205 };
 206
 207 /**
 208  * Checks if SkeletonKey is running as a Chrome extension.
 209  * @returns {bool}
 210  * @private
 211  */
 212 SkeletonKey.prototype._isChromeExtension = function() {
 213   return typeof chrome != 'undefined' && typeof chrome.extension != 'undefined';
 214 };