@@ -33,30 +33,30 @@ |
||
33 | 33 | */ |
34 | 34 | class TokenHandler { |
35 | 35 | |
36 | - const TOKEN_LENGTH = 15; |
|
37 | - |
|
38 | - /** @var ISecureRandom */ |
|
39 | - private $secureRandom; |
|
40 | - |
|
41 | - /** |
|
42 | - * TokenHandler constructor. |
|
43 | - * |
|
44 | - * @param ISecureRandom $secureRandom |
|
45 | - */ |
|
46 | - public function __construct(ISecureRandom $secureRandom) { |
|
47 | - $this->secureRandom = $secureRandom; |
|
48 | - } |
|
49 | - |
|
50 | - /** |
|
51 | - * generate to token used to authenticate federated shares |
|
52 | - * |
|
53 | - * @return string |
|
54 | - */ |
|
55 | - public function generateToken() { |
|
56 | - $token = $this->secureRandom->generate( |
|
57 | - self::TOKEN_LENGTH, |
|
58 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS); |
|
59 | - return $token; |
|
60 | - } |
|
36 | + const TOKEN_LENGTH = 15; |
|
37 | + |
|
38 | + /** @var ISecureRandom */ |
|
39 | + private $secureRandom; |
|
40 | + |
|
41 | + /** |
|
42 | + * TokenHandler constructor. |
|
43 | + * |
|
44 | + * @param ISecureRandom $secureRandom |
|
45 | + */ |
|
46 | + public function __construct(ISecureRandom $secureRandom) { |
|
47 | + $this->secureRandom = $secureRandom; |
|
48 | + } |
|
49 | + |
|
50 | + /** |
|
51 | + * generate to token used to authenticate federated shares |
|
52 | + * |
|
53 | + * @return string |
|
54 | + */ |
|
55 | + public function generateToken() { |
|
56 | + $token = $this->secureRandom->generate( |
|
57 | + self::TOKEN_LENGTH, |
|
58 | + ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS); |
|
59 | + return $token; |
|
60 | + } |
|
61 | 61 | |
62 | 62 | } |
@@ -55,7 +55,7 @@ |
||
55 | 55 | public function generateToken() { |
56 | 56 | $token = $this->secureRandom->generate( |
57 | 57 | self::TOKEN_LENGTH, |
58 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS); |
|
58 | + ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_DIGITS); |
|
59 | 59 | return $token; |
60 | 60 | } |
61 | 61 |
@@ -28,10 +28,10 @@ |
||
28 | 28 | <?php if((int)$trustedServer['status'] === TrustedServers::STATUS_OK) { ?> |
29 | 29 | <span class="status success"></span> |
30 | 30 | <?php |
31 | - } elseif( |
|
32 | - (int)$trustedServer['status'] === TrustedServers::STATUS_PENDING || |
|
33 | - (int)$trustedServer['status'] === TrustedServers::STATUS_ACCESS_REVOKED |
|
34 | - ) { ?> |
|
31 | + } elseif( |
|
32 | + (int)$trustedServer['status'] === TrustedServers::STATUS_PENDING || |
|
33 | + (int)$trustedServer['status'] === TrustedServers::STATUS_ACCESS_REVOKED |
|
34 | + ) { ?> |
|
35 | 35 | <span class="status indeterminate"></span> |
36 | 36 | <?php } else {?> |
37 | 37 | <span class="status error"></span> |
@@ -11,7 +11,7 @@ discard block |
||
11 | 11 | <em><?php p($l->t('Federation allows you to connect with other trusted servers to exchange the user directory. For example this will be used to auto-complete external users for federated sharing.')); ?></em> |
12 | 12 | |
13 | 13 | <p> |
14 | - <input id="autoAddServers" type="checkbox" class="checkbox" <?php if($_['autoAddServers']) p('checked'); ?> /> |
|
14 | + <input id="autoAddServers" type="checkbox" class="checkbox" <?php if ($_['autoAddServers']) p('checked'); ?> /> |
|
15 | 15 | <label for="autoAddServers"><?php p($l->t('Add server automatically once a federated share was created successfully')); ?></label> |
16 | 16 | </p> |
17 | 17 | |
@@ -23,14 +23,14 @@ discard block |
||
23 | 23 | <span class="msg"></span> |
24 | 24 | </p> |
25 | 25 | <ul id="listOfTrustedServers"> |
26 | - <?php foreach($_['trustedServers'] as $trustedServer) { ?> |
|
26 | + <?php foreach ($_['trustedServers'] as $trustedServer) { ?> |
|
27 | 27 | <li id="<?php p($trustedServer['id']); ?>"> |
28 | - <?php if((int)$trustedServer['status'] === TrustedServers::STATUS_OK) { ?> |
|
28 | + <?php if ((int) $trustedServer['status'] === TrustedServers::STATUS_OK) { ?> |
|
29 | 29 | <span class="status success"></span> |
30 | 30 | <?php |
31 | - } elseif( |
|
32 | - (int)$trustedServer['status'] === TrustedServers::STATUS_PENDING || |
|
33 | - (int)$trustedServer['status'] === TrustedServers::STATUS_ACCESS_REVOKED |
|
31 | + } elseif ( |
|
32 | + (int) $trustedServer['status'] === TrustedServers::STATUS_PENDING || |
|
33 | + (int) $trustedServer['status'] === TrustedServers::STATUS_ACCESS_REVOKED |
|
34 | 34 | ) { ?> |
35 | 35 | <span class="status indeterminate"></span> |
36 | 36 | <?php } else {?> |
@@ -11,7 +11,10 @@ |
||
11 | 11 | <em><?php p($l->t('Federation allows you to connect with other trusted servers to exchange the user directory. For example this will be used to auto-complete external users for federated sharing.')); ?></em> |
12 | 12 | |
13 | 13 | <p> |
14 | - <input id="autoAddServers" type="checkbox" class="checkbox" <?php if($_['autoAddServers']) p('checked'); ?> /> |
|
14 | + <input id="autoAddServers" type="checkbox" class="checkbox" <?php if($_['autoAddServers']) { |
|
15 | + p('checked'); |
|
16 | +} |
|
17 | +?> /> |
|
15 | 18 | <label for="autoAddServers"><?php p($l->t('Add server automatically once a federated share was created successfully')); ?></label> |
16 | 19 | </p> |
17 | 20 |
@@ -34,91 +34,91 @@ |
||
34 | 34 | |
35 | 35 | class SettingsController extends Controller { |
36 | 36 | |
37 | - /** @var IL10N */ |
|
38 | - private $l; |
|
39 | - |
|
40 | - /** @var TrustedServers */ |
|
41 | - private $trustedServers; |
|
42 | - |
|
43 | - /** |
|
44 | - * @param string $AppName |
|
45 | - * @param IRequest $request |
|
46 | - * @param IL10N $l10n |
|
47 | - * @param TrustedServers $trustedServers |
|
48 | - */ |
|
49 | - public function __construct($AppName, |
|
50 | - IRequest $request, |
|
51 | - IL10N $l10n, |
|
52 | - TrustedServers $trustedServers |
|
53 | - ) { |
|
54 | - parent::__construct($AppName, $request); |
|
55 | - $this->l = $l10n; |
|
56 | - $this->trustedServers = $trustedServers; |
|
57 | - } |
|
58 | - |
|
59 | - |
|
60 | - /** |
|
61 | - * add server to the list of trusted ownClouds |
|
62 | - * |
|
63 | - * @param string $url |
|
64 | - * @return DataResponse |
|
65 | - * @throws HintException |
|
66 | - */ |
|
67 | - public function addServer($url) { |
|
68 | - $this->checkServer($url); |
|
69 | - $id = $this->trustedServers->addServer($url); |
|
70 | - |
|
71 | - return new DataResponse( |
|
72 | - [ |
|
73 | - 'url' => $url, |
|
74 | - 'id' => $id, |
|
75 | - 'message' => (string) $this->l->t('Added to the list of trusted servers') |
|
76 | - ] |
|
77 | - ); |
|
78 | - } |
|
79 | - |
|
80 | - /** |
|
81 | - * add server to the list of trusted ownClouds |
|
82 | - * |
|
83 | - * @param int $id |
|
84 | - * @return DataResponse |
|
85 | - */ |
|
86 | - public function removeServer($id) { |
|
87 | - $this->trustedServers->removeServer($id); |
|
88 | - return new DataResponse(); |
|
89 | - } |
|
90 | - |
|
91 | - /** |
|
92 | - * enable/disable to automatically add servers to the list of trusted servers |
|
93 | - * once a federated share was created and accepted successfully |
|
94 | - * |
|
95 | - * @param bool $autoAddServers |
|
96 | - */ |
|
97 | - public function autoAddServers($autoAddServers) { |
|
98 | - $this->trustedServers->setAutoAddServers($autoAddServers); |
|
99 | - } |
|
100 | - |
|
101 | - /** |
|
102 | - * check if the server should be added to the list of trusted servers or not |
|
103 | - * |
|
104 | - * @param string $url |
|
105 | - * @return bool |
|
106 | - * @throws HintException |
|
107 | - */ |
|
108 | - protected function checkServer($url) { |
|
109 | - if ($this->trustedServers->isTrustedServer($url) === true) { |
|
110 | - $message = 'Server is already in the list of trusted servers.'; |
|
111 | - $hint = $this->l->t('Server is already in the list of trusted servers.'); |
|
112 | - throw new HintException($message, $hint); |
|
113 | - } |
|
114 | - |
|
115 | - if ($this->trustedServers->isOwnCloudServer($url) === false) { |
|
116 | - $message = 'No server to federate with found'; |
|
117 | - $hint = $this->l->t('No server to federate with found'); |
|
118 | - throw new HintException($message, $hint); |
|
119 | - } |
|
120 | - |
|
121 | - return true; |
|
122 | - } |
|
37 | + /** @var IL10N */ |
|
38 | + private $l; |
|
39 | + |
|
40 | + /** @var TrustedServers */ |
|
41 | + private $trustedServers; |
|
42 | + |
|
43 | + /** |
|
44 | + * @param string $AppName |
|
45 | + * @param IRequest $request |
|
46 | + * @param IL10N $l10n |
|
47 | + * @param TrustedServers $trustedServers |
|
48 | + */ |
|
49 | + public function __construct($AppName, |
|
50 | + IRequest $request, |
|
51 | + IL10N $l10n, |
|
52 | + TrustedServers $trustedServers |
|
53 | + ) { |
|
54 | + parent::__construct($AppName, $request); |
|
55 | + $this->l = $l10n; |
|
56 | + $this->trustedServers = $trustedServers; |
|
57 | + } |
|
58 | + |
|
59 | + |
|
60 | + /** |
|
61 | + * add server to the list of trusted ownClouds |
|
62 | + * |
|
63 | + * @param string $url |
|
64 | + * @return DataResponse |
|
65 | + * @throws HintException |
|
66 | + */ |
|
67 | + public function addServer($url) { |
|
68 | + $this->checkServer($url); |
|
69 | + $id = $this->trustedServers->addServer($url); |
|
70 | + |
|
71 | + return new DataResponse( |
|
72 | + [ |
|
73 | + 'url' => $url, |
|
74 | + 'id' => $id, |
|
75 | + 'message' => (string) $this->l->t('Added to the list of trusted servers') |
|
76 | + ] |
|
77 | + ); |
|
78 | + } |
|
79 | + |
|
80 | + /** |
|
81 | + * add server to the list of trusted ownClouds |
|
82 | + * |
|
83 | + * @param int $id |
|
84 | + * @return DataResponse |
|
85 | + */ |
|
86 | + public function removeServer($id) { |
|
87 | + $this->trustedServers->removeServer($id); |
|
88 | + return new DataResponse(); |
|
89 | + } |
|
90 | + |
|
91 | + /** |
|
92 | + * enable/disable to automatically add servers to the list of trusted servers |
|
93 | + * once a federated share was created and accepted successfully |
|
94 | + * |
|
95 | + * @param bool $autoAddServers |
|
96 | + */ |
|
97 | + public function autoAddServers($autoAddServers) { |
|
98 | + $this->trustedServers->setAutoAddServers($autoAddServers); |
|
99 | + } |
|
100 | + |
|
101 | + /** |
|
102 | + * check if the server should be added to the list of trusted servers or not |
|
103 | + * |
|
104 | + * @param string $url |
|
105 | + * @return bool |
|
106 | + * @throws HintException |
|
107 | + */ |
|
108 | + protected function checkServer($url) { |
|
109 | + if ($this->trustedServers->isTrustedServer($url) === true) { |
|
110 | + $message = 'Server is already in the list of trusted servers.'; |
|
111 | + $hint = $this->l->t('Server is already in the list of trusted servers.'); |
|
112 | + throw new HintException($message, $hint); |
|
113 | + } |
|
114 | + |
|
115 | + if ($this->trustedServers->isOwnCloudServer($url) === false) { |
|
116 | + $message = 'No server to federate with found'; |
|
117 | + $hint = $this->l->t('No server to federate with found'); |
|
118 | + throw new HintException($message, $hint); |
|
119 | + } |
|
120 | + |
|
121 | + return true; |
|
122 | + } |
|
123 | 123 | |
124 | 124 | } |
@@ -221,7 +221,7 @@ discard block |
||
221 | 221 | $client = $this->httpClientService->newClient(); |
222 | 222 | try { |
223 | 223 | $result = $client->get( |
224 | - $url . '/status.php', |
|
224 | + $url.'/status.php', |
|
225 | 225 | [ |
226 | 226 | 'timeout' => 3, |
227 | 227 | 'connect_timeout' => 3, |
@@ -232,7 +232,7 @@ discard block |
||
232 | 232 | |
233 | 233 | } |
234 | 234 | } catch (\Exception $e) { |
235 | - $this->logger->debug('No Nextcloud server: ' . $e->getMessage()); |
|
235 | + $this->logger->debug('No Nextcloud server: '.$e->getMessage()); |
|
236 | 236 | return false; |
237 | 237 | } |
238 | 238 | |
@@ -273,6 +273,6 @@ discard block |
||
273 | 273 | |
274 | 274 | } |
275 | 275 | |
276 | - return 'https://' . $url; |
|
276 | + return 'https://'.$url; |
|
277 | 277 | } |
278 | 278 | } |
@@ -38,241 +38,241 @@ |
||
38 | 38 | |
39 | 39 | class TrustedServers { |
40 | 40 | |
41 | - /** after a user list was exchanged at least once successfully */ |
|
42 | - const STATUS_OK = 1; |
|
43 | - /** waiting for shared secret or initial user list exchange */ |
|
44 | - const STATUS_PENDING = 2; |
|
45 | - /** something went wrong, misconfigured server, software bug,... user interaction needed */ |
|
46 | - const STATUS_FAILURE = 3; |
|
47 | - /** remote server revoked access */ |
|
48 | - const STATUS_ACCESS_REVOKED = 4; |
|
49 | - |
|
50 | - /** @var dbHandler */ |
|
51 | - private $dbHandler; |
|
52 | - |
|
53 | - /** @var IClientService */ |
|
54 | - private $httpClientService; |
|
55 | - |
|
56 | - /** @var ILogger */ |
|
57 | - private $logger; |
|
58 | - |
|
59 | - /** @var IJobList */ |
|
60 | - private $jobList; |
|
61 | - |
|
62 | - /** @var ISecureRandom */ |
|
63 | - private $secureRandom; |
|
64 | - |
|
65 | - /** @var IConfig */ |
|
66 | - private $config; |
|
67 | - |
|
68 | - /** @var EventDispatcherInterface */ |
|
69 | - private $dispatcher; |
|
70 | - |
|
71 | - /** |
|
72 | - * @param DbHandler $dbHandler |
|
73 | - * @param IClientService $httpClientService |
|
74 | - * @param ILogger $logger |
|
75 | - * @param IJobList $jobList |
|
76 | - * @param ISecureRandom $secureRandom |
|
77 | - * @param IConfig $config |
|
78 | - * @param EventDispatcherInterface $dispatcher |
|
79 | - */ |
|
80 | - public function __construct( |
|
81 | - DbHandler $dbHandler, |
|
82 | - IClientService $httpClientService, |
|
83 | - ILogger $logger, |
|
84 | - IJobList $jobList, |
|
85 | - ISecureRandom $secureRandom, |
|
86 | - IConfig $config, |
|
87 | - EventDispatcherInterface $dispatcher |
|
88 | - ) { |
|
89 | - $this->dbHandler = $dbHandler; |
|
90 | - $this->httpClientService = $httpClientService; |
|
91 | - $this->logger = $logger; |
|
92 | - $this->jobList = $jobList; |
|
93 | - $this->secureRandom = $secureRandom; |
|
94 | - $this->config = $config; |
|
95 | - $this->dispatcher = $dispatcher; |
|
96 | - } |
|
97 | - |
|
98 | - /** |
|
99 | - * add server to the list of trusted servers |
|
100 | - * |
|
101 | - * @param $url |
|
102 | - * @return int server id |
|
103 | - */ |
|
104 | - public function addServer($url) { |
|
105 | - $url = $this->updateProtocol($url); |
|
106 | - $result = $this->dbHandler->addServer($url); |
|
107 | - if ($result) { |
|
108 | - $token = $this->secureRandom->generate(16); |
|
109 | - $this->dbHandler->addToken($url, $token); |
|
110 | - $this->jobList->add( |
|
111 | - 'OCA\Federation\BackgroundJob\RequestSharedSecret', |
|
112 | - [ |
|
113 | - 'url' => $url, |
|
114 | - 'token' => $token |
|
115 | - ] |
|
116 | - ); |
|
117 | - } |
|
118 | - |
|
119 | - return $result; |
|
120 | - } |
|
121 | - |
|
122 | - /** |
|
123 | - * enable/disable to automatically add servers to the list of trusted servers |
|
124 | - * once a federated share was created and accepted successfully |
|
125 | - * |
|
126 | - * @param bool $status |
|
127 | - */ |
|
128 | - public function setAutoAddServers($status) { |
|
129 | - $value = $status ? '1' : '0'; |
|
130 | - $this->config->setAppValue('federation', 'autoAddServers', $value); |
|
131 | - } |
|
132 | - |
|
133 | - /** |
|
134 | - * return if we automatically add servers to the list of trusted servers |
|
135 | - * once a federated share was created and accepted successfully |
|
136 | - * |
|
137 | - * @return bool |
|
138 | - */ |
|
139 | - public function getAutoAddServers() { |
|
140 | - $value = $this->config->getAppValue('federation', 'autoAddServers', '1'); |
|
141 | - return $value === '1'; |
|
142 | - } |
|
143 | - |
|
144 | - /** |
|
145 | - * get shared secret for the given server |
|
146 | - * |
|
147 | - * @param string $url |
|
148 | - * @return string |
|
149 | - */ |
|
150 | - public function getSharedSecret($url) { |
|
151 | - return $this->dbHandler->getSharedSecret($url); |
|
152 | - } |
|
153 | - |
|
154 | - /** |
|
155 | - * add shared secret for the given server |
|
156 | - * |
|
157 | - * @param string $url |
|
158 | - * @param $sharedSecret |
|
159 | - */ |
|
160 | - public function addSharedSecret($url, $sharedSecret) { |
|
161 | - $this->dbHandler->addSharedSecret($url, $sharedSecret); |
|
162 | - } |
|
163 | - |
|
164 | - /** |
|
165 | - * remove server from the list of trusted servers |
|
166 | - * |
|
167 | - * @param int $id |
|
168 | - */ |
|
169 | - public function removeServer($id) { |
|
170 | - $server = $this->dbHandler->getServerById($id); |
|
171 | - $this->dbHandler->removeServer($id); |
|
172 | - $event = new GenericEvent($server['url_hash']); |
|
173 | - $this->dispatcher->dispatch('OCP\Federation\TrustedServerEvent::remove', $event); |
|
174 | - } |
|
175 | - |
|
176 | - /** |
|
177 | - * get all trusted servers |
|
178 | - * |
|
179 | - * @return array |
|
180 | - */ |
|
181 | - public function getServers() { |
|
182 | - return $this->dbHandler->getAllServer(); |
|
183 | - } |
|
184 | - |
|
185 | - /** |
|
186 | - * check if given server is a trusted ownCloud server |
|
187 | - * |
|
188 | - * @param string $url |
|
189 | - * @return bool |
|
190 | - */ |
|
191 | - public function isTrustedServer($url) { |
|
192 | - return $this->dbHandler->serverExists($url); |
|
193 | - } |
|
194 | - |
|
195 | - /** |
|
196 | - * set server status |
|
197 | - * |
|
198 | - * @param string $url |
|
199 | - * @param int $status |
|
200 | - */ |
|
201 | - public function setServerStatus($url, $status) { |
|
202 | - $this->dbHandler->setServerStatus($url, $status); |
|
203 | - } |
|
204 | - |
|
205 | - /** |
|
206 | - * @param string $url |
|
207 | - * @return int |
|
208 | - */ |
|
209 | - public function getServerStatus($url) { |
|
210 | - return $this->dbHandler->getServerStatus($url); |
|
211 | - } |
|
212 | - |
|
213 | - /** |
|
214 | - * check if URL point to a ownCloud/Nextcloud server |
|
215 | - * |
|
216 | - * @param string $url |
|
217 | - * @return bool |
|
218 | - */ |
|
219 | - public function isOwnCloudServer($url) { |
|
220 | - $isValidOwnCloud = false; |
|
221 | - $client = $this->httpClientService->newClient(); |
|
222 | - try { |
|
223 | - $result = $client->get( |
|
224 | - $url . '/status.php', |
|
225 | - [ |
|
226 | - 'timeout' => 3, |
|
227 | - 'connect_timeout' => 3, |
|
228 | - ] |
|
229 | - ); |
|
230 | - if ($result->getStatusCode() === Http::STATUS_OK) { |
|
231 | - $isValidOwnCloud = $this->checkOwnCloudVersion($result->getBody()); |
|
232 | - |
|
233 | - } |
|
234 | - } catch (\Exception $e) { |
|
235 | - $this->logger->debug('No Nextcloud server: ' . $e->getMessage()); |
|
236 | - return false; |
|
237 | - } |
|
238 | - |
|
239 | - return $isValidOwnCloud; |
|
240 | - } |
|
241 | - |
|
242 | - /** |
|
243 | - * check if ownCloud version is >= 9.0 |
|
244 | - * |
|
245 | - * @param $status |
|
246 | - * @return bool |
|
247 | - * @throws HintException |
|
248 | - */ |
|
249 | - protected function checkOwnCloudVersion($status) { |
|
250 | - $decoded = json_decode($status, true); |
|
251 | - if (!empty($decoded) && isset($decoded['version'])) { |
|
252 | - if (!version_compare($decoded['version'], '9.0.0', '>=')) { |
|
253 | - throw new HintException('Remote server version is too low. 9.0 is required.'); |
|
254 | - } |
|
255 | - return true; |
|
256 | - } |
|
257 | - return false; |
|
258 | - } |
|
259 | - |
|
260 | - /** |
|
261 | - * check if the URL contain a protocol, if not add https |
|
262 | - * |
|
263 | - * @param string $url |
|
264 | - * @return string |
|
265 | - */ |
|
266 | - protected function updateProtocol($url) { |
|
267 | - if ( |
|
268 | - strpos($url, 'https://') === 0 |
|
269 | - || strpos($url, 'http://') === 0 |
|
270 | - ) { |
|
271 | - |
|
272 | - return $url; |
|
273 | - |
|
274 | - } |
|
275 | - |
|
276 | - return 'https://' . $url; |
|
277 | - } |
|
41 | + /** after a user list was exchanged at least once successfully */ |
|
42 | + const STATUS_OK = 1; |
|
43 | + /** waiting for shared secret or initial user list exchange */ |
|
44 | + const STATUS_PENDING = 2; |
|
45 | + /** something went wrong, misconfigured server, software bug,... user interaction needed */ |
|
46 | + const STATUS_FAILURE = 3; |
|
47 | + /** remote server revoked access */ |
|
48 | + const STATUS_ACCESS_REVOKED = 4; |
|
49 | + |
|
50 | + /** @var dbHandler */ |
|
51 | + private $dbHandler; |
|
52 | + |
|
53 | + /** @var IClientService */ |
|
54 | + private $httpClientService; |
|
55 | + |
|
56 | + /** @var ILogger */ |
|
57 | + private $logger; |
|
58 | + |
|
59 | + /** @var IJobList */ |
|
60 | + private $jobList; |
|
61 | + |
|
62 | + /** @var ISecureRandom */ |
|
63 | + private $secureRandom; |
|
64 | + |
|
65 | + /** @var IConfig */ |
|
66 | + private $config; |
|
67 | + |
|
68 | + /** @var EventDispatcherInterface */ |
|
69 | + private $dispatcher; |
|
70 | + |
|
71 | + /** |
|
72 | + * @param DbHandler $dbHandler |
|
73 | + * @param IClientService $httpClientService |
|
74 | + * @param ILogger $logger |
|
75 | + * @param IJobList $jobList |
|
76 | + * @param ISecureRandom $secureRandom |
|
77 | + * @param IConfig $config |
|
78 | + * @param EventDispatcherInterface $dispatcher |
|
79 | + */ |
|
80 | + public function __construct( |
|
81 | + DbHandler $dbHandler, |
|
82 | + IClientService $httpClientService, |
|
83 | + ILogger $logger, |
|
84 | + IJobList $jobList, |
|
85 | + ISecureRandom $secureRandom, |
|
86 | + IConfig $config, |
|
87 | + EventDispatcherInterface $dispatcher |
|
88 | + ) { |
|
89 | + $this->dbHandler = $dbHandler; |
|
90 | + $this->httpClientService = $httpClientService; |
|
91 | + $this->logger = $logger; |
|
92 | + $this->jobList = $jobList; |
|
93 | + $this->secureRandom = $secureRandom; |
|
94 | + $this->config = $config; |
|
95 | + $this->dispatcher = $dispatcher; |
|
96 | + } |
|
97 | + |
|
98 | + /** |
|
99 | + * add server to the list of trusted servers |
|
100 | + * |
|
101 | + * @param $url |
|
102 | + * @return int server id |
|
103 | + */ |
|
104 | + public function addServer($url) { |
|
105 | + $url = $this->updateProtocol($url); |
|
106 | + $result = $this->dbHandler->addServer($url); |
|
107 | + if ($result) { |
|
108 | + $token = $this->secureRandom->generate(16); |
|
109 | + $this->dbHandler->addToken($url, $token); |
|
110 | + $this->jobList->add( |
|
111 | + 'OCA\Federation\BackgroundJob\RequestSharedSecret', |
|
112 | + [ |
|
113 | + 'url' => $url, |
|
114 | + 'token' => $token |
|
115 | + ] |
|
116 | + ); |
|
117 | + } |
|
118 | + |
|
119 | + return $result; |
|
120 | + } |
|
121 | + |
|
122 | + /** |
|
123 | + * enable/disable to automatically add servers to the list of trusted servers |
|
124 | + * once a federated share was created and accepted successfully |
|
125 | + * |
|
126 | + * @param bool $status |
|
127 | + */ |
|
128 | + public function setAutoAddServers($status) { |
|
129 | + $value = $status ? '1' : '0'; |
|
130 | + $this->config->setAppValue('federation', 'autoAddServers', $value); |
|
131 | + } |
|
132 | + |
|
133 | + /** |
|
134 | + * return if we automatically add servers to the list of trusted servers |
|
135 | + * once a federated share was created and accepted successfully |
|
136 | + * |
|
137 | + * @return bool |
|
138 | + */ |
|
139 | + public function getAutoAddServers() { |
|
140 | + $value = $this->config->getAppValue('federation', 'autoAddServers', '1'); |
|
141 | + return $value === '1'; |
|
142 | + } |
|
143 | + |
|
144 | + /** |
|
145 | + * get shared secret for the given server |
|
146 | + * |
|
147 | + * @param string $url |
|
148 | + * @return string |
|
149 | + */ |
|
150 | + public function getSharedSecret($url) { |
|
151 | + return $this->dbHandler->getSharedSecret($url); |
|
152 | + } |
|
153 | + |
|
154 | + /** |
|
155 | + * add shared secret for the given server |
|
156 | + * |
|
157 | + * @param string $url |
|
158 | + * @param $sharedSecret |
|
159 | + */ |
|
160 | + public function addSharedSecret($url, $sharedSecret) { |
|
161 | + $this->dbHandler->addSharedSecret($url, $sharedSecret); |
|
162 | + } |
|
163 | + |
|
164 | + /** |
|
165 | + * remove server from the list of trusted servers |
|
166 | + * |
|
167 | + * @param int $id |
|
168 | + */ |
|
169 | + public function removeServer($id) { |
|
170 | + $server = $this->dbHandler->getServerById($id); |
|
171 | + $this->dbHandler->removeServer($id); |
|
172 | + $event = new GenericEvent($server['url_hash']); |
|
173 | + $this->dispatcher->dispatch('OCP\Federation\TrustedServerEvent::remove', $event); |
|
174 | + } |
|
175 | + |
|
176 | + /** |
|
177 | + * get all trusted servers |
|
178 | + * |
|
179 | + * @return array |
|
180 | + */ |
|
181 | + public function getServers() { |
|
182 | + return $this->dbHandler->getAllServer(); |
|
183 | + } |
|
184 | + |
|
185 | + /** |
|
186 | + * check if given server is a trusted ownCloud server |
|
187 | + * |
|
188 | + * @param string $url |
|
189 | + * @return bool |
|
190 | + */ |
|
191 | + public function isTrustedServer($url) { |
|
192 | + return $this->dbHandler->serverExists($url); |
|
193 | + } |
|
194 | + |
|
195 | + /** |
|
196 | + * set server status |
|
197 | + * |
|
198 | + * @param string $url |
|
199 | + * @param int $status |
|
200 | + */ |
|
201 | + public function setServerStatus($url, $status) { |
|
202 | + $this->dbHandler->setServerStatus($url, $status); |
|
203 | + } |
|
204 | + |
|
205 | + /** |
|
206 | + * @param string $url |
|
207 | + * @return int |
|
208 | + */ |
|
209 | + public function getServerStatus($url) { |
|
210 | + return $this->dbHandler->getServerStatus($url); |
|
211 | + } |
|
212 | + |
|
213 | + /** |
|
214 | + * check if URL point to a ownCloud/Nextcloud server |
|
215 | + * |
|
216 | + * @param string $url |
|
217 | + * @return bool |
|
218 | + */ |
|
219 | + public function isOwnCloudServer($url) { |
|
220 | + $isValidOwnCloud = false; |
|
221 | + $client = $this->httpClientService->newClient(); |
|
222 | + try { |
|
223 | + $result = $client->get( |
|
224 | + $url . '/status.php', |
|
225 | + [ |
|
226 | + 'timeout' => 3, |
|
227 | + 'connect_timeout' => 3, |
|
228 | + ] |
|
229 | + ); |
|
230 | + if ($result->getStatusCode() === Http::STATUS_OK) { |
|
231 | + $isValidOwnCloud = $this->checkOwnCloudVersion($result->getBody()); |
|
232 | + |
|
233 | + } |
|
234 | + } catch (\Exception $e) { |
|
235 | + $this->logger->debug('No Nextcloud server: ' . $e->getMessage()); |
|
236 | + return false; |
|
237 | + } |
|
238 | + |
|
239 | + return $isValidOwnCloud; |
|
240 | + } |
|
241 | + |
|
242 | + /** |
|
243 | + * check if ownCloud version is >= 9.0 |
|
244 | + * |
|
245 | + * @param $status |
|
246 | + * @return bool |
|
247 | + * @throws HintException |
|
248 | + */ |
|
249 | + protected function checkOwnCloudVersion($status) { |
|
250 | + $decoded = json_decode($status, true); |
|
251 | + if (!empty($decoded) && isset($decoded['version'])) { |
|
252 | + if (!version_compare($decoded['version'], '9.0.0', '>=')) { |
|
253 | + throw new HintException('Remote server version is too low. 9.0 is required.'); |
|
254 | + } |
|
255 | + return true; |
|
256 | + } |
|
257 | + return false; |
|
258 | + } |
|
259 | + |
|
260 | + /** |
|
261 | + * check if the URL contain a protocol, if not add https |
|
262 | + * |
|
263 | + * @param string $url |
|
264 | + * @return string |
|
265 | + */ |
|
266 | + protected function updateProtocol($url) { |
|
267 | + if ( |
|
268 | + strpos($url, 'https://') === 0 |
|
269 | + || strpos($url, 'http://') === 0 |
|
270 | + ) { |
|
271 | + |
|
272 | + return $url; |
|
273 | + |
|
274 | + } |
|
275 | + |
|
276 | + return 'https://' . $url; |
|
277 | + } |
|
278 | 278 | } |
@@ -47,157 +47,157 @@ |
||
47 | 47 | */ |
48 | 48 | class GetSharedSecret extends Job{ |
49 | 49 | |
50 | - /** @var IClient */ |
|
51 | - private $httpClient; |
|
52 | - |
|
53 | - /** @var IJobList */ |
|
54 | - private $jobList; |
|
55 | - |
|
56 | - /** @var IURLGenerator */ |
|
57 | - private $urlGenerator; |
|
58 | - |
|
59 | - /** @var TrustedServers */ |
|
60 | - private $trustedServers; |
|
61 | - |
|
62 | - /** @var DbHandler */ |
|
63 | - private $dbHandler; |
|
64 | - |
|
65 | - /** @var ILogger */ |
|
66 | - private $logger; |
|
67 | - |
|
68 | - /** @var bool */ |
|
69 | - protected $retainJob = false; |
|
70 | - |
|
71 | - private $endPoint = '/ocs/v2.php/apps/federation/api/v1/shared-secret?format=json'; |
|
72 | - |
|
73 | - /** |
|
74 | - * RequestSharedSecret constructor. |
|
75 | - * |
|
76 | - * @param IClient $httpClient |
|
77 | - * @param IURLGenerator $urlGenerator |
|
78 | - * @param IJobList $jobList |
|
79 | - * @param TrustedServers $trustedServers |
|
80 | - * @param ILogger $logger |
|
81 | - * @param DbHandler $dbHandler |
|
82 | - */ |
|
83 | - public function __construct( |
|
84 | - IClient $httpClient = null, |
|
85 | - IURLGenerator $urlGenerator = null, |
|
86 | - IJobList $jobList = null, |
|
87 | - TrustedServers $trustedServers = null, |
|
88 | - ILogger $logger = null, |
|
89 | - DbHandler $dbHandler = null |
|
90 | - ) { |
|
91 | - $this->logger = $logger ? $logger : \OC::$server->getLogger(); |
|
92 | - $this->httpClient = $httpClient ? $httpClient : \OC::$server->getHTTPClientService()->newClient(); |
|
93 | - $this->jobList = $jobList ? $jobList : \OC::$server->getJobList(); |
|
94 | - $this->urlGenerator = $urlGenerator ? $urlGenerator : \OC::$server->getURLGenerator(); |
|
95 | - $this->dbHandler = $dbHandler ? $dbHandler : new DbHandler(\OC::$server->getDatabaseConnection(), \OC::$server->getL10N('federation')); |
|
96 | - if ($trustedServers) { |
|
97 | - $this->trustedServers = $trustedServers; |
|
98 | - } else { |
|
99 | - $this->trustedServers = new TrustedServers( |
|
100 | - $this->dbHandler, |
|
101 | - \OC::$server->getHTTPClientService(), |
|
102 | - $this->logger, |
|
103 | - $this->jobList, |
|
104 | - \OC::$server->getSecureRandom(), |
|
105 | - \OC::$server->getConfig(), |
|
106 | - \OC::$server->getEventDispatcher() |
|
107 | - ); |
|
108 | - } |
|
109 | - } |
|
110 | - |
|
111 | - /** |
|
112 | - * run the job, then remove it from the joblist |
|
113 | - * |
|
114 | - * @param JobList $jobList |
|
115 | - * @param ILogger $logger |
|
116 | - */ |
|
117 | - public function execute($jobList, ILogger $logger = null) { |
|
118 | - $target = $this->argument['url']; |
|
119 | - // only execute if target is still in the list of trusted domains |
|
120 | - if ($this->trustedServers->isTrustedServer($target)) { |
|
121 | - $this->parentExecute($jobList, $logger); |
|
122 | - } |
|
123 | - |
|
124 | - if (!$this->retainJob) { |
|
125 | - $jobList->remove($this, $this->argument); |
|
126 | - } |
|
127 | - } |
|
128 | - |
|
129 | - /** |
|
130 | - * call execute() method of parent |
|
131 | - * |
|
132 | - * @param JobList $jobList |
|
133 | - * @param ILogger $logger |
|
134 | - */ |
|
135 | - protected function parentExecute($jobList, $logger = null) { |
|
136 | - parent::execute($jobList, $logger); |
|
137 | - } |
|
138 | - |
|
139 | - protected function run($argument) { |
|
140 | - $target = $argument['url']; |
|
141 | - $source = $this->urlGenerator->getAbsoluteURL('/'); |
|
142 | - $source = rtrim($source, '/'); |
|
143 | - $token = $argument['token']; |
|
144 | - |
|
145 | - $result = null; |
|
146 | - try { |
|
147 | - $result = $this->httpClient->get( |
|
148 | - $target . $this->endPoint, |
|
149 | - [ |
|
150 | - 'query' => |
|
151 | - [ |
|
152 | - 'url' => $source, |
|
153 | - 'token' => $token |
|
154 | - ], |
|
155 | - 'timeout' => 3, |
|
156 | - 'connect_timeout' => 3, |
|
157 | - ] |
|
158 | - ); |
|
159 | - |
|
160 | - $status = $result->getStatusCode(); |
|
161 | - |
|
162 | - } catch (ClientException $e) { |
|
163 | - $status = $e->getCode(); |
|
164 | - if ($status === Http::STATUS_FORBIDDEN) { |
|
165 | - $this->logger->info($target . ' refused to exchange a shared secret with you.', ['app' => 'federation']); |
|
166 | - } else { |
|
167 | - $this->logger->logException($e, ['app' => 'federation']); |
|
168 | - } |
|
169 | - } catch (\Exception $e) { |
|
170 | - $status = Http::STATUS_INTERNAL_SERVER_ERROR; |
|
171 | - $this->logger->logException($e, ['app' => 'federation']); |
|
172 | - } |
|
173 | - |
|
174 | - // if we received a unexpected response we try again later |
|
175 | - if ( |
|
176 | - $status !== Http::STATUS_OK |
|
177 | - && $status !== Http::STATUS_FORBIDDEN |
|
178 | - ) { |
|
179 | - $this->retainJob = true; |
|
180 | - } else { |
|
181 | - // reset token if we received a valid response |
|
182 | - $this->dbHandler->addToken($target, ''); |
|
183 | - } |
|
184 | - |
|
185 | - if ($status === Http::STATUS_OK && $result instanceof IResponse) { |
|
186 | - $body = $result->getBody(); |
|
187 | - $result = json_decode($body, true); |
|
188 | - if (isset($result['ocs']['data']['sharedSecret'])) { |
|
189 | - $this->trustedServers->addSharedSecret( |
|
190 | - $target, |
|
191 | - $result['ocs']['data']['sharedSecret'] |
|
192 | - ); |
|
193 | - } else { |
|
194 | - $this->logger->error( |
|
195 | - 'remote server "' . $target . '"" does not return a valid shared secret', |
|
196 | - ['app' => 'federation'] |
|
197 | - ); |
|
198 | - $this->trustedServers->setServerStatus($target, TrustedServers::STATUS_FAILURE); |
|
199 | - } |
|
200 | - } |
|
201 | - |
|
202 | - } |
|
50 | + /** @var IClient */ |
|
51 | + private $httpClient; |
|
52 | + |
|
53 | + /** @var IJobList */ |
|
54 | + private $jobList; |
|
55 | + |
|
56 | + /** @var IURLGenerator */ |
|
57 | + private $urlGenerator; |
|
58 | + |
|
59 | + /** @var TrustedServers */ |
|
60 | + private $trustedServers; |
|
61 | + |
|
62 | + /** @var DbHandler */ |
|
63 | + private $dbHandler; |
|
64 | + |
|
65 | + /** @var ILogger */ |
|
66 | + private $logger; |
|
67 | + |
|
68 | + /** @var bool */ |
|
69 | + protected $retainJob = false; |
|
70 | + |
|
71 | + private $endPoint = '/ocs/v2.php/apps/federation/api/v1/shared-secret?format=json'; |
|
72 | + |
|
73 | + /** |
|
74 | + * RequestSharedSecret constructor. |
|
75 | + * |
|
76 | + * @param IClient $httpClient |
|
77 | + * @param IURLGenerator $urlGenerator |
|
78 | + * @param IJobList $jobList |
|
79 | + * @param TrustedServers $trustedServers |
|
80 | + * @param ILogger $logger |
|
81 | + * @param DbHandler $dbHandler |
|
82 | + */ |
|
83 | + public function __construct( |
|
84 | + IClient $httpClient = null, |
|
85 | + IURLGenerator $urlGenerator = null, |
|
86 | + IJobList $jobList = null, |
|
87 | + TrustedServers $trustedServers = null, |
|
88 | + ILogger $logger = null, |
|
89 | + DbHandler $dbHandler = null |
|
90 | + ) { |
|
91 | + $this->logger = $logger ? $logger : \OC::$server->getLogger(); |
|
92 | + $this->httpClient = $httpClient ? $httpClient : \OC::$server->getHTTPClientService()->newClient(); |
|
93 | + $this->jobList = $jobList ? $jobList : \OC::$server->getJobList(); |
|
94 | + $this->urlGenerator = $urlGenerator ? $urlGenerator : \OC::$server->getURLGenerator(); |
|
95 | + $this->dbHandler = $dbHandler ? $dbHandler : new DbHandler(\OC::$server->getDatabaseConnection(), \OC::$server->getL10N('federation')); |
|
96 | + if ($trustedServers) { |
|
97 | + $this->trustedServers = $trustedServers; |
|
98 | + } else { |
|
99 | + $this->trustedServers = new TrustedServers( |
|
100 | + $this->dbHandler, |
|
101 | + \OC::$server->getHTTPClientService(), |
|
102 | + $this->logger, |
|
103 | + $this->jobList, |
|
104 | + \OC::$server->getSecureRandom(), |
|
105 | + \OC::$server->getConfig(), |
|
106 | + \OC::$server->getEventDispatcher() |
|
107 | + ); |
|
108 | + } |
|
109 | + } |
|
110 | + |
|
111 | + /** |
|
112 | + * run the job, then remove it from the joblist |
|
113 | + * |
|
114 | + * @param JobList $jobList |
|
115 | + * @param ILogger $logger |
|
116 | + */ |
|
117 | + public function execute($jobList, ILogger $logger = null) { |
|
118 | + $target = $this->argument['url']; |
|
119 | + // only execute if target is still in the list of trusted domains |
|
120 | + if ($this->trustedServers->isTrustedServer($target)) { |
|
121 | + $this->parentExecute($jobList, $logger); |
|
122 | + } |
|
123 | + |
|
124 | + if (!$this->retainJob) { |
|
125 | + $jobList->remove($this, $this->argument); |
|
126 | + } |
|
127 | + } |
|
128 | + |
|
129 | + /** |
|
130 | + * call execute() method of parent |
|
131 | + * |
|
132 | + * @param JobList $jobList |
|
133 | + * @param ILogger $logger |
|
134 | + */ |
|
135 | + protected function parentExecute($jobList, $logger = null) { |
|
136 | + parent::execute($jobList, $logger); |
|
137 | + } |
|
138 | + |
|
139 | + protected function run($argument) { |
|
140 | + $target = $argument['url']; |
|
141 | + $source = $this->urlGenerator->getAbsoluteURL('/'); |
|
142 | + $source = rtrim($source, '/'); |
|
143 | + $token = $argument['token']; |
|
144 | + |
|
145 | + $result = null; |
|
146 | + try { |
|
147 | + $result = $this->httpClient->get( |
|
148 | + $target . $this->endPoint, |
|
149 | + [ |
|
150 | + 'query' => |
|
151 | + [ |
|
152 | + 'url' => $source, |
|
153 | + 'token' => $token |
|
154 | + ], |
|
155 | + 'timeout' => 3, |
|
156 | + 'connect_timeout' => 3, |
|
157 | + ] |
|
158 | + ); |
|
159 | + |
|
160 | + $status = $result->getStatusCode(); |
|
161 | + |
|
162 | + } catch (ClientException $e) { |
|
163 | + $status = $e->getCode(); |
|
164 | + if ($status === Http::STATUS_FORBIDDEN) { |
|
165 | + $this->logger->info($target . ' refused to exchange a shared secret with you.', ['app' => 'federation']); |
|
166 | + } else { |
|
167 | + $this->logger->logException($e, ['app' => 'federation']); |
|
168 | + } |
|
169 | + } catch (\Exception $e) { |
|
170 | + $status = Http::STATUS_INTERNAL_SERVER_ERROR; |
|
171 | + $this->logger->logException($e, ['app' => 'federation']); |
|
172 | + } |
|
173 | + |
|
174 | + // if we received a unexpected response we try again later |
|
175 | + if ( |
|
176 | + $status !== Http::STATUS_OK |
|
177 | + && $status !== Http::STATUS_FORBIDDEN |
|
178 | + ) { |
|
179 | + $this->retainJob = true; |
|
180 | + } else { |
|
181 | + // reset token if we received a valid response |
|
182 | + $this->dbHandler->addToken($target, ''); |
|
183 | + } |
|
184 | + |
|
185 | + if ($status === Http::STATUS_OK && $result instanceof IResponse) { |
|
186 | + $body = $result->getBody(); |
|
187 | + $result = json_decode($body, true); |
|
188 | + if (isset($result['ocs']['data']['sharedSecret'])) { |
|
189 | + $this->trustedServers->addSharedSecret( |
|
190 | + $target, |
|
191 | + $result['ocs']['data']['sharedSecret'] |
|
192 | + ); |
|
193 | + } else { |
|
194 | + $this->logger->error( |
|
195 | + 'remote server "' . $target . '"" does not return a valid shared secret', |
|
196 | + ['app' => 'federation'] |
|
197 | + ); |
|
198 | + $this->trustedServers->setServerStatus($target, TrustedServers::STATUS_FAILURE); |
|
199 | + } |
|
200 | + } |
|
201 | + |
|
202 | + } |
|
203 | 203 | } |
@@ -45,7 +45,7 @@ discard block |
||
45 | 45 | * |
46 | 46 | * @package OCA\Federation\Backgroundjob |
47 | 47 | */ |
48 | -class GetSharedSecret extends Job{ |
|
48 | +class GetSharedSecret extends Job { |
|
49 | 49 | |
50 | 50 | /** @var IClient */ |
51 | 51 | private $httpClient; |
@@ -145,7 +145,7 @@ discard block |
||
145 | 145 | $result = null; |
146 | 146 | try { |
147 | 147 | $result = $this->httpClient->get( |
148 | - $target . $this->endPoint, |
|
148 | + $target.$this->endPoint, |
|
149 | 149 | [ |
150 | 150 | 'query' => |
151 | 151 | [ |
@@ -162,7 +162,7 @@ discard block |
||
162 | 162 | } catch (ClientException $e) { |
163 | 163 | $status = $e->getCode(); |
164 | 164 | if ($status === Http::STATUS_FORBIDDEN) { |
165 | - $this->logger->info($target . ' refused to exchange a shared secret with you.', ['app' => 'federation']); |
|
165 | + $this->logger->info($target.' refused to exchange a shared secret with you.', ['app' => 'federation']); |
|
166 | 166 | } else { |
167 | 167 | $this->logger->logException($e, ['app' => 'federation']); |
168 | 168 | } |
@@ -177,7 +177,7 @@ discard block |
||
177 | 177 | && $status !== Http::STATUS_FORBIDDEN |
178 | 178 | ) { |
179 | 179 | $this->retainJob = true; |
180 | - } else { |
|
180 | + } else { |
|
181 | 181 | // reset token if we received a valid response |
182 | 182 | $this->dbHandler->addToken($target, ''); |
183 | 183 | } |
@@ -192,7 +192,7 @@ discard block |
||
192 | 192 | ); |
193 | 193 | } else { |
194 | 194 | $this->logger->error( |
195 | - 'remote server "' . $target . '"" does not return a valid shared secret', |
|
195 | + 'remote server "'.$target.'"" does not return a valid shared secret', |
|
196 | 196 | ['app' => 'federation'] |
197 | 197 | ); |
198 | 198 | $this->trustedServers->setServerStatus($target, TrustedServers::STATUS_FAILURE); |
@@ -177,7 +177,7 @@ |
||
177 | 177 | && $status !== Http::STATUS_FORBIDDEN |
178 | 178 | ) { |
179 | 179 | $this->retainJob = true; |
180 | - } else { |
|
180 | + } else { |
|
181 | 181 | // reset token if we received a valid response |
182 | 182 | $this->dbHandler->addToken($target, ''); |
183 | 183 | } |
@@ -47,140 +47,140 @@ |
||
47 | 47 | */ |
48 | 48 | class RequestSharedSecret extends Job { |
49 | 49 | |
50 | - /** @var IClient */ |
|
51 | - private $httpClient; |
|
52 | - |
|
53 | - /** @var IJobList */ |
|
54 | - private $jobList; |
|
55 | - |
|
56 | - /** @var IURLGenerator */ |
|
57 | - private $urlGenerator; |
|
58 | - |
|
59 | - /** @var DbHandler */ |
|
60 | - private $dbHandler; |
|
61 | - |
|
62 | - /** @var TrustedServers */ |
|
63 | - private $trustedServers; |
|
64 | - |
|
65 | - private $endPoint = '/ocs/v2.php/apps/federation/api/v1/request-shared-secret?format=json'; |
|
66 | - |
|
67 | - /** @var ILogger */ |
|
68 | - private $logger; |
|
69 | - |
|
70 | - /** @var bool */ |
|
71 | - protected $retainJob = false; |
|
72 | - |
|
73 | - /** |
|
74 | - * RequestSharedSecret constructor. |
|
75 | - * |
|
76 | - * @param IClient $httpClient |
|
77 | - * @param IURLGenerator $urlGenerator |
|
78 | - * @param IJobList $jobList |
|
79 | - * @param TrustedServers $trustedServers |
|
80 | - * @param DbHandler $dbHandler |
|
81 | - */ |
|
82 | - public function __construct( |
|
83 | - IClient $httpClient = null, |
|
84 | - IURLGenerator $urlGenerator = null, |
|
85 | - IJobList $jobList = null, |
|
86 | - TrustedServers $trustedServers = null, |
|
87 | - DbHandler $dbHandler = null |
|
88 | - ) { |
|
89 | - $this->httpClient = $httpClient ? $httpClient : \OC::$server->getHTTPClientService()->newClient(); |
|
90 | - $this->jobList = $jobList ? $jobList : \OC::$server->getJobList(); |
|
91 | - $this->urlGenerator = $urlGenerator ? $urlGenerator : \OC::$server->getURLGenerator(); |
|
92 | - $this->dbHandler = $dbHandler ? $dbHandler : new DbHandler(\OC::$server->getDatabaseConnection(), \OC::$server->getL10N('federation')); |
|
93 | - $this->logger = \OC::$server->getLogger(); |
|
94 | - if ($trustedServers) { |
|
95 | - $this->trustedServers = $trustedServers; |
|
96 | - } else { |
|
97 | - $this->trustedServers = new TrustedServers( |
|
98 | - $this->dbHandler, |
|
99 | - \OC::$server->getHTTPClientService(), |
|
100 | - $this->logger, |
|
101 | - $this->jobList, |
|
102 | - \OC::$server->getSecureRandom(), |
|
103 | - \OC::$server->getConfig(), |
|
104 | - \OC::$server->getEventDispatcher() |
|
105 | - ); |
|
106 | - } |
|
107 | - } |
|
108 | - |
|
109 | - |
|
110 | - /** |
|
111 | - * run the job, then remove it from the joblist |
|
112 | - * |
|
113 | - * @param JobList $jobList |
|
114 | - * @param ILogger $logger |
|
115 | - */ |
|
116 | - public function execute($jobList, ILogger $logger = null) { |
|
117 | - $target = $this->argument['url']; |
|
118 | - // only execute if target is still in the list of trusted domains |
|
119 | - if ($this->trustedServers->isTrustedServer($target)) { |
|
120 | - $this->parentExecute($jobList, $logger); |
|
121 | - } |
|
122 | - |
|
123 | - if (!$this->retainJob) { |
|
124 | - $jobList->remove($this, $this->argument); |
|
125 | - } |
|
126 | - } |
|
127 | - |
|
128 | - /** |
|
129 | - * call execute() method of parent |
|
130 | - * |
|
131 | - * @param JobList $jobList |
|
132 | - * @param ILogger $logger |
|
133 | - */ |
|
134 | - protected function parentExecute($jobList, $logger) { |
|
135 | - parent::execute($jobList, $logger); |
|
136 | - } |
|
137 | - |
|
138 | - protected function run($argument) { |
|
139 | - |
|
140 | - $target = $argument['url']; |
|
141 | - $source = $this->urlGenerator->getAbsoluteURL('/'); |
|
142 | - $source = rtrim($source, '/'); |
|
143 | - $token = $argument['token']; |
|
144 | - |
|
145 | - try { |
|
146 | - $result = $this->httpClient->post( |
|
147 | - $target . $this->endPoint, |
|
148 | - [ |
|
149 | - 'body' => [ |
|
150 | - 'url' => $source, |
|
151 | - 'token' => $token, |
|
152 | - ], |
|
153 | - 'timeout' => 3, |
|
154 | - 'connect_timeout' => 3, |
|
155 | - ] |
|
156 | - ); |
|
157 | - |
|
158 | - $status = $result->getStatusCode(); |
|
159 | - |
|
160 | - } catch (ClientException $e) { |
|
161 | - $status = $e->getCode(); |
|
162 | - if ($status === Http::STATUS_FORBIDDEN) { |
|
163 | - $this->logger->info($target . ' refused to ask for a shared secret.', ['app' => 'federation']); |
|
164 | - } else { |
|
165 | - $this->logger->logException($e, ['app' => 'federation']); |
|
166 | - } |
|
167 | - } catch (\Exception $e) { |
|
168 | - $status = Http::STATUS_INTERNAL_SERVER_ERROR; |
|
169 | - $this->logger->logException($e, ['app' => 'federation']); |
|
170 | - } |
|
171 | - |
|
172 | - // if we received a unexpected response we try again later |
|
173 | - if ( |
|
174 | - $status !== Http::STATUS_OK |
|
175 | - && $status !== Http::STATUS_FORBIDDEN |
|
176 | - ) { |
|
177 | - $this->retainJob = true; |
|
178 | - } |
|
179 | - |
|
180 | - if ($status === Http::STATUS_FORBIDDEN) { |
|
181 | - // clear token if remote server refuses to ask for shared secret |
|
182 | - $this->dbHandler->addToken($target, ''); |
|
183 | - } |
|
184 | - |
|
185 | - } |
|
50 | + /** @var IClient */ |
|
51 | + private $httpClient; |
|
52 | + |
|
53 | + /** @var IJobList */ |
|
54 | + private $jobList; |
|
55 | + |
|
56 | + /** @var IURLGenerator */ |
|
57 | + private $urlGenerator; |
|
58 | + |
|
59 | + /** @var DbHandler */ |
|
60 | + private $dbHandler; |
|
61 | + |
|
62 | + /** @var TrustedServers */ |
|
63 | + private $trustedServers; |
|
64 | + |
|
65 | + private $endPoint = '/ocs/v2.php/apps/federation/api/v1/request-shared-secret?format=json'; |
|
66 | + |
|
67 | + /** @var ILogger */ |
|
68 | + private $logger; |
|
69 | + |
|
70 | + /** @var bool */ |
|
71 | + protected $retainJob = false; |
|
72 | + |
|
73 | + /** |
|
74 | + * RequestSharedSecret constructor. |
|
75 | + * |
|
76 | + * @param IClient $httpClient |
|
77 | + * @param IURLGenerator $urlGenerator |
|
78 | + * @param IJobList $jobList |
|
79 | + * @param TrustedServers $trustedServers |
|
80 | + * @param DbHandler $dbHandler |
|
81 | + */ |
|
82 | + public function __construct( |
|
83 | + IClient $httpClient = null, |
|
84 | + IURLGenerator $urlGenerator = null, |
|
85 | + IJobList $jobList = null, |
|
86 | + TrustedServers $trustedServers = null, |
|
87 | + DbHandler $dbHandler = null |
|
88 | + ) { |
|
89 | + $this->httpClient = $httpClient ? $httpClient : \OC::$server->getHTTPClientService()->newClient(); |
|
90 | + $this->jobList = $jobList ? $jobList : \OC::$server->getJobList(); |
|
91 | + $this->urlGenerator = $urlGenerator ? $urlGenerator : \OC::$server->getURLGenerator(); |
|
92 | + $this->dbHandler = $dbHandler ? $dbHandler : new DbHandler(\OC::$server->getDatabaseConnection(), \OC::$server->getL10N('federation')); |
|
93 | + $this->logger = \OC::$server->getLogger(); |
|
94 | + if ($trustedServers) { |
|
95 | + $this->trustedServers = $trustedServers; |
|
96 | + } else { |
|
97 | + $this->trustedServers = new TrustedServers( |
|
98 | + $this->dbHandler, |
|
99 | + \OC::$server->getHTTPClientService(), |
|
100 | + $this->logger, |
|
101 | + $this->jobList, |
|
102 | + \OC::$server->getSecureRandom(), |
|
103 | + \OC::$server->getConfig(), |
|
104 | + \OC::$server->getEventDispatcher() |
|
105 | + ); |
|
106 | + } |
|
107 | + } |
|
108 | + |
|
109 | + |
|
110 | + /** |
|
111 | + * run the job, then remove it from the joblist |
|
112 | + * |
|
113 | + * @param JobList $jobList |
|
114 | + * @param ILogger $logger |
|
115 | + */ |
|
116 | + public function execute($jobList, ILogger $logger = null) { |
|
117 | + $target = $this->argument['url']; |
|
118 | + // only execute if target is still in the list of trusted domains |
|
119 | + if ($this->trustedServers->isTrustedServer($target)) { |
|
120 | + $this->parentExecute($jobList, $logger); |
|
121 | + } |
|
122 | + |
|
123 | + if (!$this->retainJob) { |
|
124 | + $jobList->remove($this, $this->argument); |
|
125 | + } |
|
126 | + } |
|
127 | + |
|
128 | + /** |
|
129 | + * call execute() method of parent |
|
130 | + * |
|
131 | + * @param JobList $jobList |
|
132 | + * @param ILogger $logger |
|
133 | + */ |
|
134 | + protected function parentExecute($jobList, $logger) { |
|
135 | + parent::execute($jobList, $logger); |
|
136 | + } |
|
137 | + |
|
138 | + protected function run($argument) { |
|
139 | + |
|
140 | + $target = $argument['url']; |
|
141 | + $source = $this->urlGenerator->getAbsoluteURL('/'); |
|
142 | + $source = rtrim($source, '/'); |
|
143 | + $token = $argument['token']; |
|
144 | + |
|
145 | + try { |
|
146 | + $result = $this->httpClient->post( |
|
147 | + $target . $this->endPoint, |
|
148 | + [ |
|
149 | + 'body' => [ |
|
150 | + 'url' => $source, |
|
151 | + 'token' => $token, |
|
152 | + ], |
|
153 | + 'timeout' => 3, |
|
154 | + 'connect_timeout' => 3, |
|
155 | + ] |
|
156 | + ); |
|
157 | + |
|
158 | + $status = $result->getStatusCode(); |
|
159 | + |
|
160 | + } catch (ClientException $e) { |
|
161 | + $status = $e->getCode(); |
|
162 | + if ($status === Http::STATUS_FORBIDDEN) { |
|
163 | + $this->logger->info($target . ' refused to ask for a shared secret.', ['app' => 'federation']); |
|
164 | + } else { |
|
165 | + $this->logger->logException($e, ['app' => 'federation']); |
|
166 | + } |
|
167 | + } catch (\Exception $e) { |
|
168 | + $status = Http::STATUS_INTERNAL_SERVER_ERROR; |
|
169 | + $this->logger->logException($e, ['app' => 'federation']); |
|
170 | + } |
|
171 | + |
|
172 | + // if we received a unexpected response we try again later |
|
173 | + if ( |
|
174 | + $status !== Http::STATUS_OK |
|
175 | + && $status !== Http::STATUS_FORBIDDEN |
|
176 | + ) { |
|
177 | + $this->retainJob = true; |
|
178 | + } |
|
179 | + |
|
180 | + if ($status === Http::STATUS_FORBIDDEN) { |
|
181 | + // clear token if remote server refuses to ask for shared secret |
|
182 | + $this->dbHandler->addToken($target, ''); |
|
183 | + } |
|
184 | + |
|
185 | + } |
|
186 | 186 | } |
@@ -144,7 +144,7 @@ discard block |
||
144 | 144 | |
145 | 145 | try { |
146 | 146 | $result = $this->httpClient->post( |
147 | - $target . $this->endPoint, |
|
147 | + $target.$this->endPoint, |
|
148 | 148 | [ |
149 | 149 | 'body' => [ |
150 | 150 | 'url' => $source, |
@@ -160,7 +160,7 @@ discard block |
||
160 | 160 | } catch (ClientException $e) { |
161 | 161 | $status = $e->getCode(); |
162 | 162 | if ($status === Http::STATUS_FORBIDDEN) { |
163 | - $this->logger->info($target . ' refused to ask for a shared secret.', ['app' => 'federation']); |
|
163 | + $this->logger->info($target.' refused to ask for a shared secret.', ['app' => 'federation']); |
|
164 | 164 | } else { |
165 | 165 | $this->logger->logException($e, ['app' => 'federation']); |
166 | 166 | } |
@@ -29,41 +29,41 @@ |
||
29 | 29 | |
30 | 30 | class Admin implements ISettings { |
31 | 31 | |
32 | - /** @var TrustedServers */ |
|
33 | - private $trustedServers; |
|
32 | + /** @var TrustedServers */ |
|
33 | + private $trustedServers; |
|
34 | 34 | |
35 | - public function __construct(TrustedServers $trustedServers) { |
|
36 | - $this->trustedServers = $trustedServers; |
|
37 | - } |
|
35 | + public function __construct(TrustedServers $trustedServers) { |
|
36 | + $this->trustedServers = $trustedServers; |
|
37 | + } |
|
38 | 38 | |
39 | - /** |
|
40 | - * @return TemplateResponse |
|
41 | - */ |
|
42 | - public function getForm() { |
|
43 | - $parameters = [ |
|
44 | - 'trustedServers' => $this->trustedServers->getServers(), |
|
45 | - 'autoAddServers' => $this->trustedServers->getAutoAddServers(), |
|
46 | - ]; |
|
39 | + /** |
|
40 | + * @return TemplateResponse |
|
41 | + */ |
|
42 | + public function getForm() { |
|
43 | + $parameters = [ |
|
44 | + 'trustedServers' => $this->trustedServers->getServers(), |
|
45 | + 'autoAddServers' => $this->trustedServers->getAutoAddServers(), |
|
46 | + ]; |
|
47 | 47 | |
48 | - return new TemplateResponse('federation', 'settings-admin', $parameters, ''); |
|
49 | - } |
|
48 | + return new TemplateResponse('federation', 'settings-admin', $parameters, ''); |
|
49 | + } |
|
50 | 50 | |
51 | - /** |
|
52 | - * @return string the section ID, e.g. 'sharing' |
|
53 | - */ |
|
54 | - public function getSection() { |
|
55 | - return 'sharing'; |
|
56 | - } |
|
51 | + /** |
|
52 | + * @return string the section ID, e.g. 'sharing' |
|
53 | + */ |
|
54 | + public function getSection() { |
|
55 | + return 'sharing'; |
|
56 | + } |
|
57 | 57 | |
58 | - /** |
|
59 | - * @return int whether the form should be rather on the top or bottom of |
|
60 | - * the admin section. The forms are arranged in ascending order of the |
|
61 | - * priority values. It is required to return a value between 0 and 100. |
|
62 | - * |
|
63 | - * E.g.: 70 |
|
64 | - */ |
|
65 | - public function getPriority() { |
|
66 | - return 30; |
|
67 | - } |
|
58 | + /** |
|
59 | + * @return int whether the form should be rather on the top or bottom of |
|
60 | + * the admin section. The forms are arranged in ascending order of the |
|
61 | + * priority values. It is required to return a value between 0 and 100. |
|
62 | + * |
|
63 | + * E.g.: 70 |
|
64 | + */ |
|
65 | + public function getPriority() { |
|
66 | + return 30; |
|
67 | + } |
|
68 | 68 | |
69 | 69 | } |
@@ -27,25 +27,25 @@ |
||
27 | 27 | |
28 | 28 | class Hooks { |
29 | 29 | |
30 | - /** @var TrustedServers */ |
|
31 | - private $trustedServers; |
|
32 | - |
|
33 | - public function __construct(TrustedServers $trustedServers) { |
|
34 | - $this->trustedServers = $trustedServers; |
|
35 | - } |
|
36 | - |
|
37 | - /** |
|
38 | - * add servers to the list of trusted servers once a federated share was established |
|
39 | - * |
|
40 | - * @param array $params |
|
41 | - */ |
|
42 | - public function addServerHook($params) { |
|
43 | - if ( |
|
44 | - $this->trustedServers->getAutoAddServers() === true && |
|
45 | - $this->trustedServers->isTrustedServer($params['server']) === false |
|
46 | - ) { |
|
47 | - $this->trustedServers->addServer($params['server']); |
|
48 | - } |
|
49 | - } |
|
30 | + /** @var TrustedServers */ |
|
31 | + private $trustedServers; |
|
32 | + |
|
33 | + public function __construct(TrustedServers $trustedServers) { |
|
34 | + $this->trustedServers = $trustedServers; |
|
35 | + } |
|
36 | + |
|
37 | + /** |
|
38 | + * add servers to the list of trusted servers once a federated share was established |
|
39 | + * |
|
40 | + * @param array $params |
|
41 | + */ |
|
42 | + public function addServerHook($params) { |
|
43 | + if ( |
|
44 | + $this->trustedServers->getAutoAddServers() === true && |
|
45 | + $this->trustedServers->isTrustedServer($params['server']) === false |
|
46 | + ) { |
|
47 | + $this->trustedServers->addServer($params['server']); |
|
48 | + } |
|
49 | + } |
|
50 | 50 | |
51 | 51 | } |
@@ -33,42 +33,42 @@ |
||
33 | 33 | |
34 | 34 | class AddServerMiddleware extends Middleware { |
35 | 35 | |
36 | - /** @var string */ |
|
37 | - protected $appName; |
|
36 | + /** @var string */ |
|
37 | + protected $appName; |
|
38 | 38 | |
39 | - /** @var IL10N */ |
|
40 | - protected $l; |
|
39 | + /** @var IL10N */ |
|
40 | + protected $l; |
|
41 | 41 | |
42 | - /** @var ILogger */ |
|
43 | - protected $logger; |
|
42 | + /** @var ILogger */ |
|
43 | + protected $logger; |
|
44 | 44 | |
45 | - public function __construct($appName, IL10N $l, ILogger $logger) { |
|
46 | - $this->appName = $appName; |
|
47 | - $this->l = $l; |
|
48 | - $this->logger = $logger; |
|
49 | - } |
|
45 | + public function __construct($appName, IL10N $l, ILogger $logger) { |
|
46 | + $this->appName = $appName; |
|
47 | + $this->l = $l; |
|
48 | + $this->logger = $logger; |
|
49 | + } |
|
50 | 50 | |
51 | - /** |
|
52 | - * Log error message and return a response which can be displayed to the user |
|
53 | - * |
|
54 | - * @param \OCP\AppFramework\Controller $controller |
|
55 | - * @param string $methodName |
|
56 | - * @param \Exception $exception |
|
57 | - * @return JSONResponse |
|
58 | - */ |
|
59 | - public function afterException($controller, $methodName, \Exception $exception) { |
|
60 | - $this->logger->error($exception->getMessage(), ['app' => $this->appName]); |
|
61 | - if ($exception instanceof HintException) { |
|
62 | - $message = $exception->getHint(); |
|
63 | - } else { |
|
64 | - $message = $exception->getMessage(); |
|
65 | - } |
|
51 | + /** |
|
52 | + * Log error message and return a response which can be displayed to the user |
|
53 | + * |
|
54 | + * @param \OCP\AppFramework\Controller $controller |
|
55 | + * @param string $methodName |
|
56 | + * @param \Exception $exception |
|
57 | + * @return JSONResponse |
|
58 | + */ |
|
59 | + public function afterException($controller, $methodName, \Exception $exception) { |
|
60 | + $this->logger->error($exception->getMessage(), ['app' => $this->appName]); |
|
61 | + if ($exception instanceof HintException) { |
|
62 | + $message = $exception->getHint(); |
|
63 | + } else { |
|
64 | + $message = $exception->getMessage(); |
|
65 | + } |
|
66 | 66 | |
67 | - return new JSONResponse( |
|
68 | - ['message' => $message], |
|
69 | - Http::STATUS_BAD_REQUEST |
|
70 | - ); |
|
67 | + return new JSONResponse( |
|
68 | + ['message' => $message], |
|
69 | + Http::STATUS_BAD_REQUEST |
|
70 | + ); |
|
71 | 71 | |
72 | - } |
|
72 | + } |
|
73 | 73 | |
74 | 74 | } |