Completed
Pull Request — master (#6189)
by Maxence
14:32
created
apps/encryption/lib/Hooks/Contracts/IHook.php 1 patch
Indentation   +6 added lines, -6 removed lines patch added patch discarded remove patch
@@ -24,10 +24,10 @@
 block discarded – undo
24 24
 
25 25
 
26 26
 interface IHook {
27
-	/**
28
-	 * Connects Hooks
29
-	 *
30
-	 * @return null
31
-	 */
32
-	public function addHooks();
27
+    /**
28
+     * Connects Hooks
29
+     *
30
+     * @return null
31
+     */
32
+    public function addHooks();
33 33
 }
Please login to merge, or discard this patch.
apps/encryption/lib/Settings/Admin.php 1 patch
Indentation   +85 added lines, -85 removed lines patch added patch discarded remove patch
@@ -38,90 +38,90 @@
 block discarded – undo
38 38
 
39 39
 class Admin implements ISettings {
40 40
 
41
-	/** @var IL10N */
42
-	private $l;
43
-
44
-	/** @var ILogger */
45
-	private $logger;
46
-
47
-	/** @var IUserSession */
48
-	private $userSession;
49
-
50
-	/** @var IConfig */
51
-	private $config;
52
-
53
-	/** @var IUserManager */
54
-	private $userManager;
55
-
56
-	/** @var ISession */
57
-	private $session;
58
-
59
-	public function __construct(
60
-		IL10N $l,
61
-		ILogger $logger,
62
-		IUserSession $userSession,
63
-		IConfig $config,
64
-		IUserManager $userManager,
65
-		ISession $session
66
-	) {
67
-		$this->l = $l;
68
-		$this->logger = $logger;
69
-		$this->userSession = $userSession;
70
-		$this->config = $config;
71
-		$this->userManager = $userManager;
72
-		$this->session = $session;
73
-	}
74
-
75
-	/**
76
-	 * @return TemplateResponse
77
-	 */
78
-	public function getForm() {
79
-		$crypt = new Crypt(
80
-			$this->logger,
81
-			$this->userSession,
82
-			$this->config,
83
-			$this->l);
84
-
85
-		$util = new Util(
86
-			new View(),
87
-			$crypt,
88
-			$this->logger,
89
-			$this->userSession,
90
-			$this->config,
91
-			$this->userManager);
92
-
93
-		// Check if an adminRecovery account is enabled for recovering files after lost pwd
94
-		$recoveryAdminEnabled = $this->config->getAppValue('encryption', 'recoveryAdminEnabled', '0');
95
-		$session = new Session($this->session);
96
-
97
-		$encryptHomeStorage = $util->shouldEncryptHomeStorage();
98
-
99
-		$parameters = [
100
-			'recoveryEnabled'    => $recoveryAdminEnabled,
101
-			'initStatus'         => $session->getStatus(),
102
-			'encryptHomeStorage' => $encryptHomeStorage,
103
-			'masterKeyEnabled'   => $util->isMasterKeyEnabled(),
104
-		];
105
-
106
-		return new TemplateResponse('encryption', 'settings-admin', $parameters, '');
107
-	}
108
-
109
-	/**
110
-	 * @return string the section ID, e.g. 'sharing'
111
-	 */
112
-	public function getSection() {
113
-		return 'encryption';
114
-	}
115
-
116
-	/**
117
-	 * @return int whether the form should be rather on the top or bottom of
118
-	 * the admin section. The forms are arranged in ascending order of the
119
-	 * priority values. It is required to return a value between 0 and 100.
120
-	 *
121
-	 * E.g.: 70
122
-	 */
123
-	public function getPriority() {
124
-		return 5;
125
-	}
41
+    /** @var IL10N */
42
+    private $l;
43
+
44
+    /** @var ILogger */
45
+    private $logger;
46
+
47
+    /** @var IUserSession */
48
+    private $userSession;
49
+
50
+    /** @var IConfig */
51
+    private $config;
52
+
53
+    /** @var IUserManager */
54
+    private $userManager;
55
+
56
+    /** @var ISession */
57
+    private $session;
58
+
59
+    public function __construct(
60
+        IL10N $l,
61
+        ILogger $logger,
62
+        IUserSession $userSession,
63
+        IConfig $config,
64
+        IUserManager $userManager,
65
+        ISession $session
66
+    ) {
67
+        $this->l = $l;
68
+        $this->logger = $logger;
69
+        $this->userSession = $userSession;
70
+        $this->config = $config;
71
+        $this->userManager = $userManager;
72
+        $this->session = $session;
73
+    }
74
+
75
+    /**
76
+     * @return TemplateResponse
77
+     */
78
+    public function getForm() {
79
+        $crypt = new Crypt(
80
+            $this->logger,
81
+            $this->userSession,
82
+            $this->config,
83
+            $this->l);
84
+
85
+        $util = new Util(
86
+            new View(),
87
+            $crypt,
88
+            $this->logger,
89
+            $this->userSession,
90
+            $this->config,
91
+            $this->userManager);
92
+
93
+        // Check if an adminRecovery account is enabled for recovering files after lost pwd
94
+        $recoveryAdminEnabled = $this->config->getAppValue('encryption', 'recoveryAdminEnabled', '0');
95
+        $session = new Session($this->session);
96
+
97
+        $encryptHomeStorage = $util->shouldEncryptHomeStorage();
98
+
99
+        $parameters = [
100
+            'recoveryEnabled'    => $recoveryAdminEnabled,
101
+            'initStatus'         => $session->getStatus(),
102
+            'encryptHomeStorage' => $encryptHomeStorage,
103
+            'masterKeyEnabled'   => $util->isMasterKeyEnabled(),
104
+        ];
105
+
106
+        return new TemplateResponse('encryption', 'settings-admin', $parameters, '');
107
+    }
108
+
109
+    /**
110
+     * @return string the section ID, e.g. 'sharing'
111
+     */
112
+    public function getSection() {
113
+        return 'encryption';
114
+    }
115
+
116
+    /**
117
+     * @return int whether the form should be rather on the top or bottom of
118
+     * the admin section. The forms are arranged in ascending order of the
119
+     * priority values. It is required to return a value between 0 and 100.
120
+     *
121
+     * E.g.: 70
122
+     */
123
+    public function getPriority() {
124
+        return 5;
125
+    }
126 126
 
127 127
 }
Please login to merge, or discard this patch.
apps/encryption/lib/Session.php 1 patch
Indentation   +154 added lines, -154 removed lines patch added patch discarded remove patch
@@ -29,159 +29,159 @@
 block discarded – undo
29 29
 
30 30
 class Session {
31 31
 
32
-	/** @var ISession */
33
-	protected $session;
34
-
35
-	const NOT_INITIALIZED = '0';
36
-	const INIT_EXECUTED = '1';
37
-	const INIT_SUCCESSFUL = '2';
38
-	const RUN_MIGRATION = '3';
39
-
40
-	/**
41
-	 * @param ISession $session
42
-	 */
43
-	public function __construct(ISession $session) {
44
-		$this->session = $session;
45
-	}
46
-
47
-	/**
48
-	 * Sets status of encryption app
49
-	 *
50
-	 * @param string $status INIT_SUCCESSFUL, INIT_EXECUTED, NOT_INITIALIZED
51
-	 */
52
-	public function setStatus($status) {
53
-		$this->session->set('encryptionInitialized', $status);
54
-	}
55
-
56
-	/**
57
-	 * Gets status if we already tried to initialize the encryption app
58
-	 *
59
-	 * @return string init status INIT_SUCCESSFUL, INIT_EXECUTED, NOT_INITIALIZED
60
-	 */
61
-	public function getStatus() {
62
-		$status = $this->session->get('encryptionInitialized');
63
-		if (is_null($status)) {
64
-			$status = self::NOT_INITIALIZED;
65
-		}
66
-
67
-		return $status;
68
-	}
69
-
70
-	/**
71
-	 * check if encryption was initialized successfully
72
-	 *
73
-	 * @return bool
74
-	 */
75
-	public function isReady() {
76
-		$status = $this->getStatus();
77
-		return $status === self::INIT_SUCCESSFUL;
78
-	}
79
-
80
-	/**
81
-	 * Gets user or public share private key from session
82
-	 *
83
-	 * @return string $privateKey The user's plaintext private key
84
-	 * @throws Exceptions\PrivateKeyMissingException
85
-	 */
86
-	public function getPrivateKey() {
87
-		$key = $this->session->get('privateKey');
88
-		if (is_null($key)) {
89
-			throw new Exceptions\PrivateKeyMissingException('please try to log-out and log-in again', 0);
90
-		}
91
-		return $key;
92
-	}
93
-
94
-	/**
95
-	 * check if private key is set
96
-	 *
97
-	 * @return boolean
98
-	 */
99
-	public function isPrivateKeySet() {
100
-		$key = $this->session->get('privateKey');
101
-		if (is_null($key)) {
102
-			return false;
103
-		}
104
-
105
-		return true;
106
-	}
107
-
108
-	/**
109
-	 * Sets user private key to session
110
-	 *
111
-	 * @param string $key users private key
112
-	 *
113
-	 * @note this should only be set on login
114
-	 */
115
-	public function setPrivateKey($key) {
116
-		$this->session->set('privateKey', $key);
117
-	}
118
-
119
-	/**
120
-	 * store data needed for the decrypt all operation in the session
121
-	 *
122
-	 * @param string $user
123
-	 * @param string $key
124
-	 */
125
-	public function prepareDecryptAll($user, $key) {
126
-		$this->session->set('decryptAll', true);
127
-		$this->session->set('decryptAllKey', $key);
128
-		$this->session->set('decryptAllUid', $user);
129
-	}
130
-
131
-	/**
132
-	 * check if we are in decrypt all mode
133
-	 *
134
-	 * @return bool
135
-	 */
136
-	public function decryptAllModeActivated() {
137
-		$decryptAll = $this->session->get('decryptAll');
138
-		return ($decryptAll === true);
139
-	}
140
-
141
-	/**
142
-	 * get uid used for decrypt all operation
143
-	 *
144
-	 * @return string
145
-	 * @throws \Exception
146
-	 */
147
-	public function getDecryptAllUid() {
148
-		$uid = $this->session->get('decryptAllUid');
149
-		if (is_null($uid) && $this->decryptAllModeActivated()) {
150
-			throw new \Exception('No uid found while in decrypt all mode');
151
-		} elseif (is_null($uid)) {
152
-			throw new \Exception('Please activate decrypt all mode first');
153
-		}
154
-
155
-		return $uid;
156
-	}
157
-
158
-	/**
159
-	 * get private key for decrypt all operation
160
-	 *
161
-	 * @return string
162
-	 * @throws PrivateKeyMissingException
163
-	 */
164
-	public function getDecryptAllKey() {
165
-		$privateKey = $this->session->get('decryptAllKey');
166
-		if (is_null($privateKey) && $this->decryptAllModeActivated()) {
167
-			throw new PrivateKeyMissingException('No private key found while in decrypt all mode');
168
-		} elseif (is_null($privateKey)) {
169
-			throw new PrivateKeyMissingException('Please activate decrypt all mode first');
170
-		}
171
-
172
-		return $privateKey;
173
-	}
174
-
175
-	/**
176
-	 * remove keys from session
177
-	 */
178
-	public function clear() {
179
-		$this->session->remove('publicSharePrivateKey');
180
-		$this->session->remove('privateKey');
181
-		$this->session->remove('encryptionInitialized');
182
-		$this->session->remove('decryptAll');
183
-		$this->session->remove('decryptAllKey');
184
-		$this->session->remove('decryptAllUid');
185
-	}
32
+    /** @var ISession */
33
+    protected $session;
34
+
35
+    const NOT_INITIALIZED = '0';
36
+    const INIT_EXECUTED = '1';
37
+    const INIT_SUCCESSFUL = '2';
38
+    const RUN_MIGRATION = '3';
39
+
40
+    /**
41
+     * @param ISession $session
42
+     */
43
+    public function __construct(ISession $session) {
44
+        $this->session = $session;
45
+    }
46
+
47
+    /**
48
+     * Sets status of encryption app
49
+     *
50
+     * @param string $status INIT_SUCCESSFUL, INIT_EXECUTED, NOT_INITIALIZED
51
+     */
52
+    public function setStatus($status) {
53
+        $this->session->set('encryptionInitialized', $status);
54
+    }
55
+
56
+    /**
57
+     * Gets status if we already tried to initialize the encryption app
58
+     *
59
+     * @return string init status INIT_SUCCESSFUL, INIT_EXECUTED, NOT_INITIALIZED
60
+     */
61
+    public function getStatus() {
62
+        $status = $this->session->get('encryptionInitialized');
63
+        if (is_null($status)) {
64
+            $status = self::NOT_INITIALIZED;
65
+        }
66
+
67
+        return $status;
68
+    }
69
+
70
+    /**
71
+     * check if encryption was initialized successfully
72
+     *
73
+     * @return bool
74
+     */
75
+    public function isReady() {
76
+        $status = $this->getStatus();
77
+        return $status === self::INIT_SUCCESSFUL;
78
+    }
79
+
80
+    /**
81
+     * Gets user or public share private key from session
82
+     *
83
+     * @return string $privateKey The user's plaintext private key
84
+     * @throws Exceptions\PrivateKeyMissingException
85
+     */
86
+    public function getPrivateKey() {
87
+        $key = $this->session->get('privateKey');
88
+        if (is_null($key)) {
89
+            throw new Exceptions\PrivateKeyMissingException('please try to log-out and log-in again', 0);
90
+        }
91
+        return $key;
92
+    }
93
+
94
+    /**
95
+     * check if private key is set
96
+     *
97
+     * @return boolean
98
+     */
99
+    public function isPrivateKeySet() {
100
+        $key = $this->session->get('privateKey');
101
+        if (is_null($key)) {
102
+            return false;
103
+        }
104
+
105
+        return true;
106
+    }
107
+
108
+    /**
109
+     * Sets user private key to session
110
+     *
111
+     * @param string $key users private key
112
+     *
113
+     * @note this should only be set on login
114
+     */
115
+    public function setPrivateKey($key) {
116
+        $this->session->set('privateKey', $key);
117
+    }
118
+
119
+    /**
120
+     * store data needed for the decrypt all operation in the session
121
+     *
122
+     * @param string $user
123
+     * @param string $key
124
+     */
125
+    public function prepareDecryptAll($user, $key) {
126
+        $this->session->set('decryptAll', true);
127
+        $this->session->set('decryptAllKey', $key);
128
+        $this->session->set('decryptAllUid', $user);
129
+    }
130
+
131
+    /**
132
+     * check if we are in decrypt all mode
133
+     *
134
+     * @return bool
135
+     */
136
+    public function decryptAllModeActivated() {
137
+        $decryptAll = $this->session->get('decryptAll');
138
+        return ($decryptAll === true);
139
+    }
140
+
141
+    /**
142
+     * get uid used for decrypt all operation
143
+     *
144
+     * @return string
145
+     * @throws \Exception
146
+     */
147
+    public function getDecryptAllUid() {
148
+        $uid = $this->session->get('decryptAllUid');
149
+        if (is_null($uid) && $this->decryptAllModeActivated()) {
150
+            throw new \Exception('No uid found while in decrypt all mode');
151
+        } elseif (is_null($uid)) {
152
+            throw new \Exception('Please activate decrypt all mode first');
153
+        }
154
+
155
+        return $uid;
156
+    }
157
+
158
+    /**
159
+     * get private key for decrypt all operation
160
+     *
161
+     * @return string
162
+     * @throws PrivateKeyMissingException
163
+     */
164
+    public function getDecryptAllKey() {
165
+        $privateKey = $this->session->get('decryptAllKey');
166
+        if (is_null($privateKey) && $this->decryptAllModeActivated()) {
167
+            throw new PrivateKeyMissingException('No private key found while in decrypt all mode');
168
+        } elseif (is_null($privateKey)) {
169
+            throw new PrivateKeyMissingException('Please activate decrypt all mode first');
170
+        }
171
+
172
+        return $privateKey;
173
+    }
174
+
175
+    /**
176
+     * remove keys from session
177
+     */
178
+    public function clear() {
179
+        $this->session->remove('publicSharePrivateKey');
180
+        $this->session->remove('privateKey');
181
+        $this->session->remove('encryptionInitialized');
182
+        $this->session->remove('decryptAll');
183
+        $this->session->remove('decryptAllKey');
184
+        $this->session->remove('decryptAllUid');
185
+    }
186 186
 
187 187
 }
Please login to merge, or discard this patch.
apps/encryption/lib/Crypto/EncryptAll.php 1 patch
Indentation   +426 added lines, -426 removed lines patch added patch discarded remove patch
@@ -45,431 +45,431 @@
 block discarded – undo
45 45
 
46 46
 class EncryptAll {
47 47
 
48
-	/** @var Setup */
49
-	protected $userSetup;
50
-
51
-	/** @var IUserManager */
52
-	protected $userManager;
53
-
54
-	/** @var View */
55
-	protected $rootView;
56
-
57
-	/** @var KeyManager */
58
-	protected $keyManager;
59
-
60
-	/** @var Util */
61
-	protected $util;
62
-
63
-	/** @var array  */
64
-	protected $userPasswords;
65
-
66
-	/** @var  IConfig */
67
-	protected $config;
68
-
69
-	/** @var IMailer */
70
-	protected $mailer;
71
-
72
-	/** @var  IL10N */
73
-	protected $l;
74
-
75
-	/** @var  QuestionHelper */
76
-	protected $questionHelper;
77
-
78
-	/** @var  OutputInterface */
79
-	protected $output;
80
-
81
-	/** @var  InputInterface */
82
-	protected $input;
83
-
84
-	/** @var ISecureRandom */
85
-	protected $secureRandom;
86
-
87
-	/**
88
-	 * @param Setup $userSetup
89
-	 * @param IUserManager $userManager
90
-	 * @param View $rootView
91
-	 * @param KeyManager $keyManager
92
-	 * @param Util $util
93
-	 * @param IConfig $config
94
-	 * @param IMailer $mailer
95
-	 * @param IL10N $l
96
-	 * @param QuestionHelper $questionHelper
97
-	 * @param ISecureRandom $secureRandom
98
-	 */
99
-	public function __construct(
100
-		Setup $userSetup,
101
-		IUserManager $userManager,
102
-		View $rootView,
103
-		KeyManager $keyManager,
104
-		Util $util,
105
-		IConfig $config,
106
-		IMailer $mailer,
107
-		IL10N $l,
108
-		QuestionHelper $questionHelper,
109
-		ISecureRandom $secureRandom
110
-	) {
111
-		$this->userSetup = $userSetup;
112
-		$this->userManager = $userManager;
113
-		$this->rootView = $rootView;
114
-		$this->keyManager = $keyManager;
115
-		$this->util = $util;
116
-		$this->config = $config;
117
-		$this->mailer = $mailer;
118
-		$this->l = $l;
119
-		$this->questionHelper = $questionHelper;
120
-		$this->secureRandom = $secureRandom;
121
-		// store one time passwords for the users
122
-		$this->userPasswords = array();
123
-	}
124
-
125
-	/**
126
-	 * start to encrypt all files
127
-	 *
128
-	 * @param InputInterface $input
129
-	 * @param OutputInterface $output
130
-	 */
131
-	public function encryptAll(InputInterface $input, OutputInterface $output) {
132
-
133
-		$this->input = $input;
134
-		$this->output = $output;
135
-
136
-		$headline = 'Encrypt all files with the ' . Encryption::DISPLAY_NAME;
137
-		$this->output->writeln("\n");
138
-		$this->output->writeln($headline);
139
-		$this->output->writeln(str_pad('', strlen($headline), '='));
140
-		$this->output->writeln("\n");
141
-
142
-		if ($this->util->isMasterKeyEnabled()) {
143
-			$this->output->writeln('Use master key to encrypt all files.');
144
-			$this->keyManager->validateMasterKey();
145
-		} else {
146
-			//create private/public keys for each user and store the private key password
147
-			$this->output->writeln('Create key-pair for every user');
148
-			$this->output->writeln('------------------------------');
149
-			$this->output->writeln('');
150
-			$this->output->writeln('This module will encrypt all files in the users files folder initially.');
151
-			$this->output->writeln('Already existing versions and files in the trash bin will not be encrypted.');
152
-			$this->output->writeln('');
153
-			$this->createKeyPairs();
154
-		}
155
-
156
-		//setup users file system and encrypt all files one by one (take should encrypt setting of storage into account)
157
-		$this->output->writeln("\n");
158
-		$this->output->writeln('Start to encrypt users files');
159
-		$this->output->writeln('----------------------------');
160
-		$this->output->writeln('');
161
-		$this->encryptAllUsersFiles();
162
-		if ($this->util->isMasterKeyEnabled() === false) {
163
-			//send-out or display password list and write it to a file
164
-			$this->output->writeln("\n");
165
-			$this->output->writeln('Generated encryption key passwords');
166
-			$this->output->writeln('----------------------------------');
167
-			$this->output->writeln('');
168
-			$this->outputPasswords();
169
-		}
170
-		$this->output->writeln("\n");
171
-	}
172
-
173
-	/**
174
-	 * create key-pair for every user
175
-	 */
176
-	protected function createKeyPairs() {
177
-		$this->output->writeln("\n");
178
-		$progress = new ProgressBar($this->output);
179
-		$progress->setFormat(" %message% \n [%bar%]");
180
-		$progress->start();
181
-
182
-		foreach($this->userManager->getBackends() as $backend) {
183
-			$limit = 500;
184
-			$offset = 0;
185
-			do {
186
-				$users = $backend->getUsers('', $limit, $offset);
187
-				foreach ($users as $user) {
188
-					if ($this->keyManager->userHasKeys($user) === false) {
189
-						$progress->setMessage('Create key-pair for ' . $user);
190
-						$progress->advance();
191
-						$this->setupUserFS($user);
192
-						$password = $this->generateOneTimePassword($user);
193
-						$this->userSetup->setupUser($user, $password);
194
-					} else {
195
-						// users which already have a key-pair will be stored with a
196
-						// empty password and filtered out later
197
-						$this->userPasswords[$user] = '';
198
-					}
199
-				}
200
-				$offset += $limit;
201
-			} while(count($users) >= $limit);
202
-		}
203
-
204
-		$progress->setMessage('Key-pair created for all users');
205
-		$progress->finish();
206
-	}
207
-
208
-	/**
209
-	 * iterate over all user and encrypt their files
210
-	 */
211
-	protected function encryptAllUsersFiles() {
212
-		$this->output->writeln("\n");
213
-		$progress = new ProgressBar($this->output);
214
-		$progress->setFormat(" %message% \n [%bar%]");
215
-		$progress->start();
216
-		$numberOfUsers = count($this->userPasswords);
217
-		$userNo = 1;
218
-		if ($this->util->isMasterKeyEnabled()) {
219
-			$this->encryptAllUserFilesWithMasterKey($progress);
220
-		} else {
221
-			foreach ($this->userPasswords as $uid => $password) {
222
-				$userCount = "$uid ($userNo of $numberOfUsers)";
223
-				$this->encryptUsersFiles($uid, $progress, $userCount);
224
-				$userNo++;
225
-			}
226
-		}
227
-		$progress->setMessage("all files encrypted");
228
-		$progress->finish();
229
-
230
-	}
231
-
232
-	/**
233
-	 * encrypt all user files with the master key
234
-	 *
235
-	 * @param ProgressBar $progress
236
-	 */
237
-	protected function encryptAllUserFilesWithMasterKey(ProgressBar $progress) {
238
-		$userNo = 1;
239
-		foreach($this->userManager->getBackends() as $backend) {
240
-			$limit = 500;
241
-			$offset = 0;
242
-			do {
243
-				$users = $backend->getUsers('', $limit, $offset);
244
-				foreach ($users as $user) {
245
-					$userCount = "$user ($userNo)";
246
-					$this->encryptUsersFiles($user, $progress, $userCount);
247
-					$userNo++;
248
-				}
249
-				$offset += $limit;
250
-			} while(count($users) >= $limit);
251
-		}
252
-	}
253
-
254
-	/**
255
-	 * encrypt files from the given user
256
-	 *
257
-	 * @param string $uid
258
-	 * @param ProgressBar $progress
259
-	 * @param string $userCount
260
-	 */
261
-	protected function encryptUsersFiles($uid, ProgressBar $progress, $userCount) {
262
-
263
-		$this->setupUserFS($uid);
264
-		$directories = array();
265
-		$directories[] =  '/' . $uid . '/files';
266
-
267
-		while($root = array_pop($directories)) {
268
-			$content = $this->rootView->getDirectoryContent($root);
269
-			foreach ($content as $file) {
270
-				$path = $root . '/' . $file['name'];
271
-				if ($this->rootView->is_dir($path)) {
272
-					$directories[] = $path;
273
-					continue;
274
-				} else {
275
-					$progress->setMessage("encrypt files for user $userCount: $path");
276
-					$progress->advance();
277
-					if($this->encryptFile($path) === false) {
278
-						$progress->setMessage("encrypt files for user $userCount: $path (already encrypted)");
279
-						$progress->advance();
280
-					}
281
-				}
282
-			}
283
-		}
284
-	}
285
-
286
-	/**
287
-	 * encrypt file
288
-	 *
289
-	 * @param string $path
290
-	 * @return bool
291
-	 */
292
-	protected function encryptFile($path) {
293
-
294
-		$source = $path;
295
-		$target = $path . '.encrypted.' . time();
296
-
297
-		try {
298
-			$this->rootView->copy($source, $target);
299
-			$this->rootView->rename($target, $source);
300
-		} catch (DecryptionFailedException $e) {
301
-			if ($this->rootView->file_exists($target)) {
302
-				$this->rootView->unlink($target);
303
-			}
304
-			return false;
305
-		}
306
-
307
-		return true;
308
-	}
309
-
310
-	/**
311
-	 * output one-time encryption passwords
312
-	 */
313
-	protected function outputPasswords() {
314
-		$table = new Table($this->output);
315
-		$table->setHeaders(array('Username', 'Private key password'));
316
-
317
-		//create rows
318
-		$newPasswords = array();
319
-		$unchangedPasswords = array();
320
-		foreach ($this->userPasswords as $uid => $password) {
321
-			if (empty($password)) {
322
-				$unchangedPasswords[] = $uid;
323
-			} else {
324
-				$newPasswords[] = [$uid, $password];
325
-			}
326
-		}
327
-
328
-		if (empty($newPasswords)) {
329
-			$this->output->writeln("\nAll users already had a key-pair, no further action needed.\n");
330
-			return;
331
-		}
332
-
333
-		$table->setRows($newPasswords);
334
-		$table->render();
335
-
336
-		if (!empty($unchangedPasswords)) {
337
-			$this->output->writeln("\nThe following users already had a key-pair which was reused without setting a new password:\n");
338
-			foreach ($unchangedPasswords as $uid) {
339
-				$this->output->writeln("    $uid");
340
-			}
341
-		}
342
-
343
-		$this->writePasswordsToFile($newPasswords);
344
-
345
-		$this->output->writeln('');
346
-		$question = new ConfirmationQuestion('Do you want to send the passwords directly to the users by mail? (y/n) ', false);
347
-		if ($this->questionHelper->ask($this->input, $this->output, $question)) {
348
-			$this->sendPasswordsByMail();
349
-		}
350
-	}
351
-
352
-	/**
353
-	 * write one-time encryption passwords to a csv file
354
-	 *
355
-	 * @param array $passwords
356
-	 */
357
-	protected function writePasswordsToFile(array $passwords) {
358
-		$fp = $this->rootView->fopen('oneTimeEncryptionPasswords.csv', 'w');
359
-		foreach ($passwords as $pwd) {
360
-			fputcsv($fp, $pwd);
361
-		}
362
-		fclose($fp);
363
-		$this->output->writeln("\n");
364
-		$this->output->writeln('A list of all newly created passwords was written to data/oneTimeEncryptionPasswords.csv');
365
-		$this->output->writeln('');
366
-		$this->output->writeln('Each of these users need to login to the web interface, go to the');
367
-		$this->output->writeln('personal settings section "basic encryption module" and');
368
-		$this->output->writeln('update the private key password to match the login password again by');
369
-		$this->output->writeln('entering the one-time password into the "old log-in password" field');
370
-		$this->output->writeln('and their current login password');
371
-	}
372
-
373
-	/**
374
-	 * setup user file system
375
-	 *
376
-	 * @param string $uid
377
-	 */
378
-	protected function setupUserFS($uid) {
379
-		\OC_Util::tearDownFS();
380
-		\OC_Util::setupFS($uid);
381
-	}
382
-
383
-	/**
384
-	 * generate one time password for the user and store it in a array
385
-	 *
386
-	 * @param string $uid
387
-	 * @return string password
388
-	 */
389
-	protected function generateOneTimePassword($uid) {
390
-		$password = $this->secureRandom->generate(8);
391
-		$this->userPasswords[$uid] = $password;
392
-		return $password;
393
-	}
394
-
395
-	/**
396
-	 * send encryption key passwords to the users by mail
397
-	 */
398
-	protected function sendPasswordsByMail() {
399
-		$noMail = [];
400
-
401
-		$this->output->writeln('');
402
-		$progress = new ProgressBar($this->output, count($this->userPasswords));
403
-		$progress->start();
404
-
405
-		foreach ($this->userPasswords as $uid => $password) {
406
-			$progress->advance();
407
-			if (!empty($password)) {
408
-				$recipient = $this->userManager->get($uid);
409
-				$recipientDisplayName = $recipient->getDisplayName();
410
-				$to = $recipient->getEMailAddress();
411
-
412
-				if ($to === '') {
413
-					$noMail[] = $uid;
414
-					continue;
415
-				}
416
-
417
-				$subject = (string)$this->l->t('one-time password for server-side-encryption');
418
-				list($htmlBody, $textBody) = $this->createMailBody($password);
419
-
420
-				// send it out now
421
-				try {
422
-					$message = $this->mailer->createMessage();
423
-					$message->setSubject($subject);
424
-					$message->setTo([$to => $recipientDisplayName]);
425
-					$message->setHtmlBody($htmlBody);
426
-					$message->setPlainBody($textBody);
427
-					$message->setFrom([
428
-						\OCP\Util::getDefaultEmailAddress('admin-noreply')
429
-					]);
430
-
431
-					$this->mailer->send($message);
432
-				} catch (\Exception $e) {
433
-					$noMail[] = $uid;
434
-				}
435
-			}
436
-		}
437
-
438
-		$progress->finish();
439
-
440
-		if (empty($noMail)) {
441
-			$this->output->writeln("\n\nPassword successfully send to all users");
442
-		} else {
443
-			$table = new Table($this->output);
444
-			$table->setHeaders(array('Username', 'Private key password'));
445
-			$this->output->writeln("\n\nCould not send password to following users:\n");
446
-			$rows = [];
447
-			foreach ($noMail as $uid) {
448
-				$rows[] = [$uid, $this->userPasswords[$uid]];
449
-			}
450
-			$table->setRows($rows);
451
-			$table->render();
452
-		}
453
-
454
-	}
455
-
456
-	/**
457
-	 * create mail body for plain text and html mail
458
-	 *
459
-	 * @param string $password one-time encryption password
460
-	 * @return array an array of the html mail body and the plain text mail body
461
-	 */
462
-	protected function createMailBody($password) {
463
-
464
-		$html = new \OC_Template("encryption", "mail", "");
465
-		$html->assign ('password', $password);
466
-		$htmlMail = $html->fetchPage();
467
-
468
-		$plainText = new \OC_Template("encryption", "altmail", "");
469
-		$plainText->assign ('password', $password);
470
-		$plainTextMail = $plainText->fetchPage();
471
-
472
-		return [$htmlMail, $plainTextMail];
473
-	}
48
+    /** @var Setup */
49
+    protected $userSetup;
50
+
51
+    /** @var IUserManager */
52
+    protected $userManager;
53
+
54
+    /** @var View */
55
+    protected $rootView;
56
+
57
+    /** @var KeyManager */
58
+    protected $keyManager;
59
+
60
+    /** @var Util */
61
+    protected $util;
62
+
63
+    /** @var array  */
64
+    protected $userPasswords;
65
+
66
+    /** @var  IConfig */
67
+    protected $config;
68
+
69
+    /** @var IMailer */
70
+    protected $mailer;
71
+
72
+    /** @var  IL10N */
73
+    protected $l;
74
+
75
+    /** @var  QuestionHelper */
76
+    protected $questionHelper;
77
+
78
+    /** @var  OutputInterface */
79
+    protected $output;
80
+
81
+    /** @var  InputInterface */
82
+    protected $input;
83
+
84
+    /** @var ISecureRandom */
85
+    protected $secureRandom;
86
+
87
+    /**
88
+     * @param Setup $userSetup
89
+     * @param IUserManager $userManager
90
+     * @param View $rootView
91
+     * @param KeyManager $keyManager
92
+     * @param Util $util
93
+     * @param IConfig $config
94
+     * @param IMailer $mailer
95
+     * @param IL10N $l
96
+     * @param QuestionHelper $questionHelper
97
+     * @param ISecureRandom $secureRandom
98
+     */
99
+    public function __construct(
100
+        Setup $userSetup,
101
+        IUserManager $userManager,
102
+        View $rootView,
103
+        KeyManager $keyManager,
104
+        Util $util,
105
+        IConfig $config,
106
+        IMailer $mailer,
107
+        IL10N $l,
108
+        QuestionHelper $questionHelper,
109
+        ISecureRandom $secureRandom
110
+    ) {
111
+        $this->userSetup = $userSetup;
112
+        $this->userManager = $userManager;
113
+        $this->rootView = $rootView;
114
+        $this->keyManager = $keyManager;
115
+        $this->util = $util;
116
+        $this->config = $config;
117
+        $this->mailer = $mailer;
118
+        $this->l = $l;
119
+        $this->questionHelper = $questionHelper;
120
+        $this->secureRandom = $secureRandom;
121
+        // store one time passwords for the users
122
+        $this->userPasswords = array();
123
+    }
124
+
125
+    /**
126
+     * start to encrypt all files
127
+     *
128
+     * @param InputInterface $input
129
+     * @param OutputInterface $output
130
+     */
131
+    public function encryptAll(InputInterface $input, OutputInterface $output) {
132
+
133
+        $this->input = $input;
134
+        $this->output = $output;
135
+
136
+        $headline = 'Encrypt all files with the ' . Encryption::DISPLAY_NAME;
137
+        $this->output->writeln("\n");
138
+        $this->output->writeln($headline);
139
+        $this->output->writeln(str_pad('', strlen($headline), '='));
140
+        $this->output->writeln("\n");
141
+
142
+        if ($this->util->isMasterKeyEnabled()) {
143
+            $this->output->writeln('Use master key to encrypt all files.');
144
+            $this->keyManager->validateMasterKey();
145
+        } else {
146
+            //create private/public keys for each user and store the private key password
147
+            $this->output->writeln('Create key-pair for every user');
148
+            $this->output->writeln('------------------------------');
149
+            $this->output->writeln('');
150
+            $this->output->writeln('This module will encrypt all files in the users files folder initially.');
151
+            $this->output->writeln('Already existing versions and files in the trash bin will not be encrypted.');
152
+            $this->output->writeln('');
153
+            $this->createKeyPairs();
154
+        }
155
+
156
+        //setup users file system and encrypt all files one by one (take should encrypt setting of storage into account)
157
+        $this->output->writeln("\n");
158
+        $this->output->writeln('Start to encrypt users files');
159
+        $this->output->writeln('----------------------------');
160
+        $this->output->writeln('');
161
+        $this->encryptAllUsersFiles();
162
+        if ($this->util->isMasterKeyEnabled() === false) {
163
+            //send-out or display password list and write it to a file
164
+            $this->output->writeln("\n");
165
+            $this->output->writeln('Generated encryption key passwords');
166
+            $this->output->writeln('----------------------------------');
167
+            $this->output->writeln('');
168
+            $this->outputPasswords();
169
+        }
170
+        $this->output->writeln("\n");
171
+    }
172
+
173
+    /**
174
+     * create key-pair for every user
175
+     */
176
+    protected function createKeyPairs() {
177
+        $this->output->writeln("\n");
178
+        $progress = new ProgressBar($this->output);
179
+        $progress->setFormat(" %message% \n [%bar%]");
180
+        $progress->start();
181
+
182
+        foreach($this->userManager->getBackends() as $backend) {
183
+            $limit = 500;
184
+            $offset = 0;
185
+            do {
186
+                $users = $backend->getUsers('', $limit, $offset);
187
+                foreach ($users as $user) {
188
+                    if ($this->keyManager->userHasKeys($user) === false) {
189
+                        $progress->setMessage('Create key-pair for ' . $user);
190
+                        $progress->advance();
191
+                        $this->setupUserFS($user);
192
+                        $password = $this->generateOneTimePassword($user);
193
+                        $this->userSetup->setupUser($user, $password);
194
+                    } else {
195
+                        // users which already have a key-pair will be stored with a
196
+                        // empty password and filtered out later
197
+                        $this->userPasswords[$user] = '';
198
+                    }
199
+                }
200
+                $offset += $limit;
201
+            } while(count($users) >= $limit);
202
+        }
203
+
204
+        $progress->setMessage('Key-pair created for all users');
205
+        $progress->finish();
206
+    }
207
+
208
+    /**
209
+     * iterate over all user and encrypt their files
210
+     */
211
+    protected function encryptAllUsersFiles() {
212
+        $this->output->writeln("\n");
213
+        $progress = new ProgressBar($this->output);
214
+        $progress->setFormat(" %message% \n [%bar%]");
215
+        $progress->start();
216
+        $numberOfUsers = count($this->userPasswords);
217
+        $userNo = 1;
218
+        if ($this->util->isMasterKeyEnabled()) {
219
+            $this->encryptAllUserFilesWithMasterKey($progress);
220
+        } else {
221
+            foreach ($this->userPasswords as $uid => $password) {
222
+                $userCount = "$uid ($userNo of $numberOfUsers)";
223
+                $this->encryptUsersFiles($uid, $progress, $userCount);
224
+                $userNo++;
225
+            }
226
+        }
227
+        $progress->setMessage("all files encrypted");
228
+        $progress->finish();
229
+
230
+    }
231
+
232
+    /**
233
+     * encrypt all user files with the master key
234
+     *
235
+     * @param ProgressBar $progress
236
+     */
237
+    protected function encryptAllUserFilesWithMasterKey(ProgressBar $progress) {
238
+        $userNo = 1;
239
+        foreach($this->userManager->getBackends() as $backend) {
240
+            $limit = 500;
241
+            $offset = 0;
242
+            do {
243
+                $users = $backend->getUsers('', $limit, $offset);
244
+                foreach ($users as $user) {
245
+                    $userCount = "$user ($userNo)";
246
+                    $this->encryptUsersFiles($user, $progress, $userCount);
247
+                    $userNo++;
248
+                }
249
+                $offset += $limit;
250
+            } while(count($users) >= $limit);
251
+        }
252
+    }
253
+
254
+    /**
255
+     * encrypt files from the given user
256
+     *
257
+     * @param string $uid
258
+     * @param ProgressBar $progress
259
+     * @param string $userCount
260
+     */
261
+    protected function encryptUsersFiles($uid, ProgressBar $progress, $userCount) {
262
+
263
+        $this->setupUserFS($uid);
264
+        $directories = array();
265
+        $directories[] =  '/' . $uid . '/files';
266
+
267
+        while($root = array_pop($directories)) {
268
+            $content = $this->rootView->getDirectoryContent($root);
269
+            foreach ($content as $file) {
270
+                $path = $root . '/' . $file['name'];
271
+                if ($this->rootView->is_dir($path)) {
272
+                    $directories[] = $path;
273
+                    continue;
274
+                } else {
275
+                    $progress->setMessage("encrypt files for user $userCount: $path");
276
+                    $progress->advance();
277
+                    if($this->encryptFile($path) === false) {
278
+                        $progress->setMessage("encrypt files for user $userCount: $path (already encrypted)");
279
+                        $progress->advance();
280
+                    }
281
+                }
282
+            }
283
+        }
284
+    }
285
+
286
+    /**
287
+     * encrypt file
288
+     *
289
+     * @param string $path
290
+     * @return bool
291
+     */
292
+    protected function encryptFile($path) {
293
+
294
+        $source = $path;
295
+        $target = $path . '.encrypted.' . time();
296
+
297
+        try {
298
+            $this->rootView->copy($source, $target);
299
+            $this->rootView->rename($target, $source);
300
+        } catch (DecryptionFailedException $e) {
301
+            if ($this->rootView->file_exists($target)) {
302
+                $this->rootView->unlink($target);
303
+            }
304
+            return false;
305
+        }
306
+
307
+        return true;
308
+    }
309
+
310
+    /**
311
+     * output one-time encryption passwords
312
+     */
313
+    protected function outputPasswords() {
314
+        $table = new Table($this->output);
315
+        $table->setHeaders(array('Username', 'Private key password'));
316
+
317
+        //create rows
318
+        $newPasswords = array();
319
+        $unchangedPasswords = array();
320
+        foreach ($this->userPasswords as $uid => $password) {
321
+            if (empty($password)) {
322
+                $unchangedPasswords[] = $uid;
323
+            } else {
324
+                $newPasswords[] = [$uid, $password];
325
+            }
326
+        }
327
+
328
+        if (empty($newPasswords)) {
329
+            $this->output->writeln("\nAll users already had a key-pair, no further action needed.\n");
330
+            return;
331
+        }
332
+
333
+        $table->setRows($newPasswords);
334
+        $table->render();
335
+
336
+        if (!empty($unchangedPasswords)) {
337
+            $this->output->writeln("\nThe following users already had a key-pair which was reused without setting a new password:\n");
338
+            foreach ($unchangedPasswords as $uid) {
339
+                $this->output->writeln("    $uid");
340
+            }
341
+        }
342
+
343
+        $this->writePasswordsToFile($newPasswords);
344
+
345
+        $this->output->writeln('');
346
+        $question = new ConfirmationQuestion('Do you want to send the passwords directly to the users by mail? (y/n) ', false);
347
+        if ($this->questionHelper->ask($this->input, $this->output, $question)) {
348
+            $this->sendPasswordsByMail();
349
+        }
350
+    }
351
+
352
+    /**
353
+     * write one-time encryption passwords to a csv file
354
+     *
355
+     * @param array $passwords
356
+     */
357
+    protected function writePasswordsToFile(array $passwords) {
358
+        $fp = $this->rootView->fopen('oneTimeEncryptionPasswords.csv', 'w');
359
+        foreach ($passwords as $pwd) {
360
+            fputcsv($fp, $pwd);
361
+        }
362
+        fclose($fp);
363
+        $this->output->writeln("\n");
364
+        $this->output->writeln('A list of all newly created passwords was written to data/oneTimeEncryptionPasswords.csv');
365
+        $this->output->writeln('');
366
+        $this->output->writeln('Each of these users need to login to the web interface, go to the');
367
+        $this->output->writeln('personal settings section "basic encryption module" and');
368
+        $this->output->writeln('update the private key password to match the login password again by');
369
+        $this->output->writeln('entering the one-time password into the "old log-in password" field');
370
+        $this->output->writeln('and their current login password');
371
+    }
372
+
373
+    /**
374
+     * setup user file system
375
+     *
376
+     * @param string $uid
377
+     */
378
+    protected function setupUserFS($uid) {
379
+        \OC_Util::tearDownFS();
380
+        \OC_Util::setupFS($uid);
381
+    }
382
+
383
+    /**
384
+     * generate one time password for the user and store it in a array
385
+     *
386
+     * @param string $uid
387
+     * @return string password
388
+     */
389
+    protected function generateOneTimePassword($uid) {
390
+        $password = $this->secureRandom->generate(8);
391
+        $this->userPasswords[$uid] = $password;
392
+        return $password;
393
+    }
394
+
395
+    /**
396
+     * send encryption key passwords to the users by mail
397
+     */
398
+    protected function sendPasswordsByMail() {
399
+        $noMail = [];
400
+
401
+        $this->output->writeln('');
402
+        $progress = new ProgressBar($this->output, count($this->userPasswords));
403
+        $progress->start();
404
+
405
+        foreach ($this->userPasswords as $uid => $password) {
406
+            $progress->advance();
407
+            if (!empty($password)) {
408
+                $recipient = $this->userManager->get($uid);
409
+                $recipientDisplayName = $recipient->getDisplayName();
410
+                $to = $recipient->getEMailAddress();
411
+
412
+                if ($to === '') {
413
+                    $noMail[] = $uid;
414
+                    continue;
415
+                }
416
+
417
+                $subject = (string)$this->l->t('one-time password for server-side-encryption');
418
+                list($htmlBody, $textBody) = $this->createMailBody($password);
419
+
420
+                // send it out now
421
+                try {
422
+                    $message = $this->mailer->createMessage();
423
+                    $message->setSubject($subject);
424
+                    $message->setTo([$to => $recipientDisplayName]);
425
+                    $message->setHtmlBody($htmlBody);
426
+                    $message->setPlainBody($textBody);
427
+                    $message->setFrom([
428
+                        \OCP\Util::getDefaultEmailAddress('admin-noreply')
429
+                    ]);
430
+
431
+                    $this->mailer->send($message);
432
+                } catch (\Exception $e) {
433
+                    $noMail[] = $uid;
434
+                }
435
+            }
436
+        }
437
+
438
+        $progress->finish();
439
+
440
+        if (empty($noMail)) {
441
+            $this->output->writeln("\n\nPassword successfully send to all users");
442
+        } else {
443
+            $table = new Table($this->output);
444
+            $table->setHeaders(array('Username', 'Private key password'));
445
+            $this->output->writeln("\n\nCould not send password to following users:\n");
446
+            $rows = [];
447
+            foreach ($noMail as $uid) {
448
+                $rows[] = [$uid, $this->userPasswords[$uid]];
449
+            }
450
+            $table->setRows($rows);
451
+            $table->render();
452
+        }
453
+
454
+    }
455
+
456
+    /**
457
+     * create mail body for plain text and html mail
458
+     *
459
+     * @param string $password one-time encryption password
460
+     * @return array an array of the html mail body and the plain text mail body
461
+     */
462
+    protected function createMailBody($password) {
463
+
464
+        $html = new \OC_Template("encryption", "mail", "");
465
+        $html->assign ('password', $password);
466
+        $htmlMail = $html->fetchPage();
467
+
468
+        $plainText = new \OC_Template("encryption", "altmail", "");
469
+        $plainText->assign ('password', $password);
470
+        $plainTextMail = $plainText->fetchPage();
471
+
472
+        return [$htmlMail, $plainTextMail];
473
+    }
474 474
 
475 475
 }
Please login to merge, or discard this patch.
apps/encryption/lib/Crypto/DecryptAll.php 1 patch
Indentation   +123 added lines, -123 removed lines patch added patch discarded remove patch
@@ -35,127 +35,127 @@
 block discarded – undo
35 35
 
36 36
 class DecryptAll {
37 37
 
38
-	/** @var Util  */
39
-	protected $util;
40
-
41
-	/** @var QuestionHelper  */
42
-	protected $questionHelper;
43
-
44
-	/** @var  Crypt */
45
-	protected $crypt;
46
-
47
-	/** @var  KeyManager */
48
-	protected $keyManager;
49
-
50
-	/** @var Session  */
51
-	protected $session;
52
-
53
-	/**
54
-	 * @param Util $util
55
-	 * @param KeyManager $keyManager
56
-	 * @param Crypt $crypt
57
-	 * @param Session $session
58
-	 * @param QuestionHelper $questionHelper
59
-	 */
60
-	public function __construct(
61
-		Util $util,
62
-		KeyManager $keyManager,
63
-		Crypt $crypt,
64
-		Session $session,
65
-		QuestionHelper $questionHelper
66
-	) {
67
-		$this->util = $util;
68
-		$this->keyManager = $keyManager;
69
-		$this->crypt = $crypt;
70
-		$this->session = $session;
71
-		$this->questionHelper = $questionHelper;
72
-	}
73
-
74
-	/**
75
-	 * prepare encryption module to decrypt all files
76
-	 *
77
-	 * @param InputInterface $input
78
-	 * @param OutputInterface $output
79
-	 * @param $user
80
-	 * @return bool
81
-	 */
82
-	public function prepare(InputInterface $input, OutputInterface $output, $user) {
83
-
84
-		$question = new Question('Please enter the recovery key password: ');
85
-
86
-		if($this->util->isMasterKeyEnabled()) {
87
-			$output->writeln('Use master key to decrypt all files');
88
-			$user = $this->keyManager->getMasterKeyId();
89
-			$password =$this->keyManager->getMasterKeyPassword();
90
-		} else {
91
-			$recoveryKeyId = $this->keyManager->getRecoveryKeyId();
92
-			if (!empty($user)) {
93
-				$output->writeln('You can only decrypt the users files if you know');
94
-				$output->writeln('the users password or if he activated the recovery key.');
95
-				$output->writeln('');
96
-				$questionUseLoginPassword = new ConfirmationQuestion(
97
-					'Do you want to use the users login password to decrypt all files? (y/n) ',
98
-					false
99
-				);
100
-				$useLoginPassword = $this->questionHelper->ask($input, $output, $questionUseLoginPassword);
101
-				if ($useLoginPassword) {
102
-					$question = new Question('Please enter the user\'s login password: ');
103
-				} else if ($this->util->isRecoveryEnabledForUser($user) === false) {
104
-					$output->writeln('No recovery key available for user ' . $user);
105
-					return false;
106
-				} else {
107
-					$user = $recoveryKeyId;
108
-				}
109
-			} else {
110
-				$output->writeln('You can only decrypt the files of all users if the');
111
-				$output->writeln('recovery key is enabled by the admin and activated by the users.');
112
-				$output->writeln('');
113
-				$user = $recoveryKeyId;
114
-			}
115
-
116
-			$question->setHidden(true);
117
-			$question->setHiddenFallback(false);
118
-			$password = $this->questionHelper->ask($input, $output, $question);
119
-		}
120
-
121
-		$privateKey = $this->getPrivateKey($user, $password);
122
-		if ($privateKey !== false) {
123
-			$this->updateSession($user, $privateKey);
124
-			return true;
125
-		} else {
126
-			$output->writeln('Could not decrypt private key, maybe you entered the wrong password?');
127
-		}
128
-
129
-
130
-		return false;
131
-	}
132
-
133
-	/**
134
-	 * get the private key which will be used to decrypt all files
135
-	 *
136
-	 * @param string $user
137
-	 * @param string $password
138
-	 * @return bool|string
139
-	 * @throws \OCA\Encryption\Exceptions\PrivateKeyMissingException
140
-	 */
141
-	protected function getPrivateKey($user, $password) {
142
-		$recoveryKeyId = $this->keyManager->getRecoveryKeyId();
143
-		$masterKeyId = $this->keyManager->getMasterKeyId();
144
-		if ($user === $recoveryKeyId) {
145
-			$recoveryKey = $this->keyManager->getSystemPrivateKey($recoveryKeyId);
146
-			$privateKey = $this->crypt->decryptPrivateKey($recoveryKey, $password);
147
-		} elseif ($user === $masterKeyId) {
148
-			$masterKey = $this->keyManager->getSystemPrivateKey($masterKeyId);
149
-			$privateKey = $this->crypt->decryptPrivateKey($masterKey, $password, $masterKeyId);
150
-		} else {
151
-			$userKey = $this->keyManager->getPrivateKey($user);
152
-			$privateKey = $this->crypt->decryptPrivateKey($userKey, $password, $user);
153
-		}
154
-
155
-		return $privateKey;
156
-	}
157
-
158
-	protected function updateSession($user, $privateKey) {
159
-		$this->session->prepareDecryptAll($user, $privateKey);
160
-	}
38
+    /** @var Util  */
39
+    protected $util;
40
+
41
+    /** @var QuestionHelper  */
42
+    protected $questionHelper;
43
+
44
+    /** @var  Crypt */
45
+    protected $crypt;
46
+
47
+    /** @var  KeyManager */
48
+    protected $keyManager;
49
+
50
+    /** @var Session  */
51
+    protected $session;
52
+
53
+    /**
54
+     * @param Util $util
55
+     * @param KeyManager $keyManager
56
+     * @param Crypt $crypt
57
+     * @param Session $session
58
+     * @param QuestionHelper $questionHelper
59
+     */
60
+    public function __construct(
61
+        Util $util,
62
+        KeyManager $keyManager,
63
+        Crypt $crypt,
64
+        Session $session,
65
+        QuestionHelper $questionHelper
66
+    ) {
67
+        $this->util = $util;
68
+        $this->keyManager = $keyManager;
69
+        $this->crypt = $crypt;
70
+        $this->session = $session;
71
+        $this->questionHelper = $questionHelper;
72
+    }
73
+
74
+    /**
75
+     * prepare encryption module to decrypt all files
76
+     *
77
+     * @param InputInterface $input
78
+     * @param OutputInterface $output
79
+     * @param $user
80
+     * @return bool
81
+     */
82
+    public function prepare(InputInterface $input, OutputInterface $output, $user) {
83
+
84
+        $question = new Question('Please enter the recovery key password: ');
85
+
86
+        if($this->util->isMasterKeyEnabled()) {
87
+            $output->writeln('Use master key to decrypt all files');
88
+            $user = $this->keyManager->getMasterKeyId();
89
+            $password =$this->keyManager->getMasterKeyPassword();
90
+        } else {
91
+            $recoveryKeyId = $this->keyManager->getRecoveryKeyId();
92
+            if (!empty($user)) {
93
+                $output->writeln('You can only decrypt the users files if you know');
94
+                $output->writeln('the users password or if he activated the recovery key.');
95
+                $output->writeln('');
96
+                $questionUseLoginPassword = new ConfirmationQuestion(
97
+                    'Do you want to use the users login password to decrypt all files? (y/n) ',
98
+                    false
99
+                );
100
+                $useLoginPassword = $this->questionHelper->ask($input, $output, $questionUseLoginPassword);
101
+                if ($useLoginPassword) {
102
+                    $question = new Question('Please enter the user\'s login password: ');
103
+                } else if ($this->util->isRecoveryEnabledForUser($user) === false) {
104
+                    $output->writeln('No recovery key available for user ' . $user);
105
+                    return false;
106
+                } else {
107
+                    $user = $recoveryKeyId;
108
+                }
109
+            } else {
110
+                $output->writeln('You can only decrypt the files of all users if the');
111
+                $output->writeln('recovery key is enabled by the admin and activated by the users.');
112
+                $output->writeln('');
113
+                $user = $recoveryKeyId;
114
+            }
115
+
116
+            $question->setHidden(true);
117
+            $question->setHiddenFallback(false);
118
+            $password = $this->questionHelper->ask($input, $output, $question);
119
+        }
120
+
121
+        $privateKey = $this->getPrivateKey($user, $password);
122
+        if ($privateKey !== false) {
123
+            $this->updateSession($user, $privateKey);
124
+            return true;
125
+        } else {
126
+            $output->writeln('Could not decrypt private key, maybe you entered the wrong password?');
127
+        }
128
+
129
+
130
+        return false;
131
+    }
132
+
133
+    /**
134
+     * get the private key which will be used to decrypt all files
135
+     *
136
+     * @param string $user
137
+     * @param string $password
138
+     * @return bool|string
139
+     * @throws \OCA\Encryption\Exceptions\PrivateKeyMissingException
140
+     */
141
+    protected function getPrivateKey($user, $password) {
142
+        $recoveryKeyId = $this->keyManager->getRecoveryKeyId();
143
+        $masterKeyId = $this->keyManager->getMasterKeyId();
144
+        if ($user === $recoveryKeyId) {
145
+            $recoveryKey = $this->keyManager->getSystemPrivateKey($recoveryKeyId);
146
+            $privateKey = $this->crypt->decryptPrivateKey($recoveryKey, $password);
147
+        } elseif ($user === $masterKeyId) {
148
+            $masterKey = $this->keyManager->getSystemPrivateKey($masterKeyId);
149
+            $privateKey = $this->crypt->decryptPrivateKey($masterKey, $password, $masterKeyId);
150
+        } else {
151
+            $userKey = $this->keyManager->getPrivateKey($user);
152
+            $privateKey = $this->crypt->decryptPrivateKey($userKey, $password, $user);
153
+        }
154
+
155
+        return $privateKey;
156
+    }
157
+
158
+    protected function updateSession($user, $privateKey) {
159
+        $this->session->prepareDecryptAll($user, $privateKey);
160
+    }
161 161
 }
Please login to merge, or discard this patch.
apps/encryption/lib/HookManager.php 1 patch
Indentation   +29 added lines, -29 removed lines patch added patch discarded remove patch
@@ -28,38 +28,38 @@
 block discarded – undo
28 28
 
29 29
 class HookManager {
30 30
 
31
-	private $hookInstances = [];
31
+    private $hookInstances = [];
32 32
 
33
-	/**
34
-	 * @param array|IHook $instances
35
-	 *        - This accepts either a single instance of IHook or an array of instances of IHook
36
-	 * @return bool
37
-	 */
38
-	public function registerHook($instances) {
39
-		if (is_array($instances)) {
40
-			foreach ($instances as $instance) {
41
-				if (!$instance instanceof IHook) {
42
-					return false;
43
-				}
44
-				$this->hookInstances[] = $instance;
45
-			}
33
+    /**
34
+     * @param array|IHook $instances
35
+     *        - This accepts either a single instance of IHook or an array of instances of IHook
36
+     * @return bool
37
+     */
38
+    public function registerHook($instances) {
39
+        if (is_array($instances)) {
40
+            foreach ($instances as $instance) {
41
+                if (!$instance instanceof IHook) {
42
+                    return false;
43
+                }
44
+                $this->hookInstances[] = $instance;
45
+            }
46 46
 
47
-		} elseif ($instances instanceof IHook) {
48
-			$this->hookInstances[] = $instances;
49
-		}
50
-		return true;
51
-	}
47
+        } elseif ($instances instanceof IHook) {
48
+            $this->hookInstances[] = $instances;
49
+        }
50
+        return true;
51
+    }
52 52
 
53
-	public function fireHooks() {
54
-		foreach ($this->hookInstances as $instance) {
55
-			/**
56
-			 * Fire off the add hooks method of each instance stored in cache
57
-			 *
58
-			 * @var $instance IHook
59
-			 */
60
-			$instance->addHooks();
61
-		}
53
+    public function fireHooks() {
54
+        foreach ($this->hookInstances as $instance) {
55
+            /**
56
+             * Fire off the add hooks method of each instance stored in cache
57
+             *
58
+             * @var $instance IHook
59
+             */
60
+            $instance->addHooks();
61
+        }
62 62
 
63
-	}
63
+    }
64 64
 
65 65
 }
Please login to merge, or discard this patch.
apps/encryption/appinfo/routes.php 1 patch
Indentation   +30 added lines, -30 removed lines patch added patch discarded remove patch
@@ -26,36 +26,36 @@
 block discarded – undo
26 26
 
27 27
 (new Application())->registerRoutes($this, array('routes' => array(
28 28
 
29
-	[
30
-		'name' => 'Recovery#adminRecovery',
31
-		'url' => '/ajax/adminRecovery',
32
-		'verb' => 'POST'
33
-	],
34
-	[
35
-		'name' => 'Settings#updatePrivateKeyPassword',
36
-		'url' => '/ajax/updatePrivateKeyPassword',
37
-		'verb' => 'POST'
38
-	],
39
-	[
40
-		'name' => 'Settings#setEncryptHomeStorage',
41
-		'url' => '/ajax/setEncryptHomeStorage',
42
-		'verb' => 'POST'
43
-	],
44
-	[
45
-		'name' => 'Recovery#changeRecoveryPassword',
46
-		'url' => '/ajax/changeRecoveryPassword',
47
-		'verb' => 'POST'
48
-	],
49
-	[
50
-		'name' => 'Recovery#userSetRecovery',
51
-		'url' => '/ajax/userSetRecovery',
52
-		'verb' => 'POST'
53
-	],
54
-	[
55
-		'name' => 'Status#getStatus',
56
-		'url' => '/ajax/getStatus',
57
-		'verb' => 'GET'
58
-	]
29
+    [
30
+        'name' => 'Recovery#adminRecovery',
31
+        'url' => '/ajax/adminRecovery',
32
+        'verb' => 'POST'
33
+    ],
34
+    [
35
+        'name' => 'Settings#updatePrivateKeyPassword',
36
+        'url' => '/ajax/updatePrivateKeyPassword',
37
+        'verb' => 'POST'
38
+    ],
39
+    [
40
+        'name' => 'Settings#setEncryptHomeStorage',
41
+        'url' => '/ajax/setEncryptHomeStorage',
42
+        'verb' => 'POST'
43
+    ],
44
+    [
45
+        'name' => 'Recovery#changeRecoveryPassword',
46
+        'url' => '/ajax/changeRecoveryPassword',
47
+        'verb' => 'POST'
48
+    ],
49
+    [
50
+        'name' => 'Recovery#userSetRecovery',
51
+        'url' => '/ajax/userSetRecovery',
52
+        'verb' => 'POST'
53
+    ],
54
+    [
55
+        'name' => 'Status#getStatus',
56
+        'url' => '/ajax/getStatus',
57
+        'verb' => 'GET'
58
+    ]
59 59
 
60 60
 
61 61
 )));
Please login to merge, or discard this patch.
apps/comments/lib/Activity/Setting.php 1 patch
Indentation   +59 added lines, -59 removed lines patch added patch discarded remove patch
@@ -27,72 +27,72 @@
 block discarded – undo
27 27
 
28 28
 class Setting implements ISetting {
29 29
 
30
-	/** @var IL10N */
31
-	protected $l;
30
+    /** @var IL10N */
31
+    protected $l;
32 32
 
33
-	/**
34
-	 * @param IL10N $l
35
-	 */
36
-	public function __construct(IL10N $l) {
37
-		$this->l = $l;
38
-	}
33
+    /**
34
+     * @param IL10N $l
35
+     */
36
+    public function __construct(IL10N $l) {
37
+        $this->l = $l;
38
+    }
39 39
 
40
-	/**
41
-	 * @return string Lowercase a-z and underscore only identifier
42
-	 * @since 11.0.0
43
-	 */
44
-	public function getIdentifier() {
45
-		return 'comments';
46
-	}
40
+    /**
41
+     * @return string Lowercase a-z and underscore only identifier
42
+     * @since 11.0.0
43
+     */
44
+    public function getIdentifier() {
45
+        return 'comments';
46
+    }
47 47
 
48
-	/**
49
-	 * @return string A translated string
50
-	 * @since 11.0.0
51
-	 */
52
-	public function getName() {
53
-		return $this->l->t('<strong>Comments</strong> for files');
54
-	}
48
+    /**
49
+     * @return string A translated string
50
+     * @since 11.0.0
51
+     */
52
+    public function getName() {
53
+        return $this->l->t('<strong>Comments</strong> for files');
54
+    }
55 55
 
56
-	/**
57
-	 * @return int whether the filter should be rather on the top or bottom of
58
-	 * the admin section. The filters are arranged in ascending order of the
59
-	 * priority values. It is required to return a value between 0 and 100.
60
-	 * @since 11.0.0
61
-	 */
62
-	public function getPriority() {
63
-		return 50;
64
-	}
56
+    /**
57
+     * @return int whether the filter should be rather on the top or bottom of
58
+     * the admin section. The filters are arranged in ascending order of the
59
+     * priority values. It is required to return a value between 0 and 100.
60
+     * @since 11.0.0
61
+     */
62
+    public function getPriority() {
63
+        return 50;
64
+    }
65 65
 
66
-	/**
67
-	 * @return bool True when the option can be changed for the stream
68
-	 * @since 11.0.0
69
-	 */
70
-	public function canChangeStream() {
71
-		return true;
72
-	}
66
+    /**
67
+     * @return bool True when the option can be changed for the stream
68
+     * @since 11.0.0
69
+     */
70
+    public function canChangeStream() {
71
+        return true;
72
+    }
73 73
 
74
-	/**
75
-	 * @return bool True when the option can be changed for the stream
76
-	 * @since 11.0.0
77
-	 */
78
-	public function isDefaultEnabledStream() {
79
-		return true;
80
-	}
74
+    /**
75
+     * @return bool True when the option can be changed for the stream
76
+     * @since 11.0.0
77
+     */
78
+    public function isDefaultEnabledStream() {
79
+        return true;
80
+    }
81 81
 
82
-	/**
83
-	 * @return bool True when the option can be changed for the mail
84
-	 * @since 11.0.0
85
-	 */
86
-	public function canChangeMail() {
87
-		return true;
88
-	}
82
+    /**
83
+     * @return bool True when the option can be changed for the mail
84
+     * @since 11.0.0
85
+     */
86
+    public function canChangeMail() {
87
+        return true;
88
+    }
89 89
 
90
-	/**
91
-	 * @return bool True when the option can be changed for the stream
92
-	 * @since 11.0.0
93
-	 */
94
-	public function isDefaultEnabledMail() {
95
-		return false;
96
-	}
90
+    /**
91
+     * @return bool True when the option can be changed for the stream
92
+     * @since 11.0.0
93
+     */
94
+    public function isDefaultEnabledMail() {
95
+        return false;
96
+    }
97 97
 }
98 98
 
Please login to merge, or discard this patch.
apps/comments/lib/Activity/Filter.php 1 patch
Indentation   +51 added lines, -51 removed lines patch added patch discarded remove patch
@@ -28,63 +28,63 @@
 block discarded – undo
28 28
 
29 29
 class Filter implements IFilter {
30 30
 
31
-	/** @var IL10N */
32
-	protected $l;
31
+    /** @var IL10N */
32
+    protected $l;
33 33
 
34
-	/** @var IURLGenerator */
35
-	protected $url;
34
+    /** @var IURLGenerator */
35
+    protected $url;
36 36
 
37
-	public function __construct(IL10N $l, IURLGenerator $url) {
38
-		$this->l = $l;
39
-		$this->url = $url;
40
-	}
37
+    public function __construct(IL10N $l, IURLGenerator $url) {
38
+        $this->l = $l;
39
+        $this->url = $url;
40
+    }
41 41
 
42
-	/**
43
-	 * @return string Lowercase a-z only identifier
44
-	 * @since 11.0.0
45
-	 */
46
-	public function getIdentifier() {
47
-		return 'comments';
48
-	}
42
+    /**
43
+     * @return string Lowercase a-z only identifier
44
+     * @since 11.0.0
45
+     */
46
+    public function getIdentifier() {
47
+        return 'comments';
48
+    }
49 49
 
50
-	/**
51
-	 * @return string A translated string
52
-	 * @since 11.0.0
53
-	 */
54
-	public function getName() {
55
-		return $this->l->t('Comments');
56
-	}
50
+    /**
51
+     * @return string A translated string
52
+     * @since 11.0.0
53
+     */
54
+    public function getName() {
55
+        return $this->l->t('Comments');
56
+    }
57 57
 
58
-	/**
59
-	 * @return int
60
-	 * @since 11.0.0
61
-	 */
62
-	public function getPriority() {
63
-		return 40;
64
-	}
58
+    /**
59
+     * @return int
60
+     * @since 11.0.0
61
+     */
62
+    public function getPriority() {
63
+        return 40;
64
+    }
65 65
 
66
-	/**
67
-	 * @return string Full URL to an icon, empty string when none is given
68
-	 * @since 11.0.0
69
-	 */
70
-	public function getIcon() {
71
-		return $this->url->getAbsoluteURL($this->url->imagePath('core', 'actions/comment.svg'));
72
-	}
66
+    /**
67
+     * @return string Full URL to an icon, empty string when none is given
68
+     * @since 11.0.0
69
+     */
70
+    public function getIcon() {
71
+        return $this->url->getAbsoluteURL($this->url->imagePath('core', 'actions/comment.svg'));
72
+    }
73 73
 
74
-	/**
75
-	 * @param string[] $types
76
-	 * @return string[] An array of allowed apps from which activities should be displayed
77
-	 * @since 11.0.0
78
-	 */
79
-	public function filterTypes(array $types) {
80
-		return $types;
81
-	}
74
+    /**
75
+     * @param string[] $types
76
+     * @return string[] An array of allowed apps from which activities should be displayed
77
+     * @since 11.0.0
78
+     */
79
+    public function filterTypes(array $types) {
80
+        return $types;
81
+    }
82 82
 
83
-	/**
84
-	 * @return string[] An array of allowed apps from which activities should be displayed
85
-	 * @since 11.0.0
86
-	 */
87
-	public function allowedApps() {
88
-		return ['comments'];
89
-	}
83
+    /**
84
+     * @return string[] An array of allowed apps from which activities should be displayed
85
+     * @since 11.0.0
86
+     */
87
+    public function allowedApps() {
88
+        return ['comments'];
89
+    }
90 90
 }
Please login to merge, or discard this patch.