@@ -45,431 +45,431 @@ |
||
| 45 | 45 | |
| 46 | 46 | class EncryptAll { |
| 47 | 47 | |
| 48 | - /** @var Setup */ |
|
| 49 | - protected $userSetup; |
|
| 50 | - |
|
| 51 | - /** @var IUserManager */ |
|
| 52 | - protected $userManager; |
|
| 53 | - |
|
| 54 | - /** @var View */ |
|
| 55 | - protected $rootView; |
|
| 56 | - |
|
| 57 | - /** @var KeyManager */ |
|
| 58 | - protected $keyManager; |
|
| 59 | - |
|
| 60 | - /** @var Util */ |
|
| 61 | - protected $util; |
|
| 62 | - |
|
| 63 | - /** @var array */ |
|
| 64 | - protected $userPasswords; |
|
| 65 | - |
|
| 66 | - /** @var IConfig */ |
|
| 67 | - protected $config; |
|
| 68 | - |
|
| 69 | - /** @var IMailer */ |
|
| 70 | - protected $mailer; |
|
| 71 | - |
|
| 72 | - /** @var IL10N */ |
|
| 73 | - protected $l; |
|
| 74 | - |
|
| 75 | - /** @var QuestionHelper */ |
|
| 76 | - protected $questionHelper; |
|
| 77 | - |
|
| 78 | - /** @var OutputInterface */ |
|
| 79 | - protected $output; |
|
| 80 | - |
|
| 81 | - /** @var InputInterface */ |
|
| 82 | - protected $input; |
|
| 83 | - |
|
| 84 | - /** @var ISecureRandom */ |
|
| 85 | - protected $secureRandom; |
|
| 86 | - |
|
| 87 | - /** |
|
| 88 | - * @param Setup $userSetup |
|
| 89 | - * @param IUserManager $userManager |
|
| 90 | - * @param View $rootView |
|
| 91 | - * @param KeyManager $keyManager |
|
| 92 | - * @param Util $util |
|
| 93 | - * @param IConfig $config |
|
| 94 | - * @param IMailer $mailer |
|
| 95 | - * @param IL10N $l |
|
| 96 | - * @param QuestionHelper $questionHelper |
|
| 97 | - * @param ISecureRandom $secureRandom |
|
| 98 | - */ |
|
| 99 | - public function __construct( |
|
| 100 | - Setup $userSetup, |
|
| 101 | - IUserManager $userManager, |
|
| 102 | - View $rootView, |
|
| 103 | - KeyManager $keyManager, |
|
| 104 | - Util $util, |
|
| 105 | - IConfig $config, |
|
| 106 | - IMailer $mailer, |
|
| 107 | - IL10N $l, |
|
| 108 | - QuestionHelper $questionHelper, |
|
| 109 | - ISecureRandom $secureRandom |
|
| 110 | - ) { |
|
| 111 | - $this->userSetup = $userSetup; |
|
| 112 | - $this->userManager = $userManager; |
|
| 113 | - $this->rootView = $rootView; |
|
| 114 | - $this->keyManager = $keyManager; |
|
| 115 | - $this->util = $util; |
|
| 116 | - $this->config = $config; |
|
| 117 | - $this->mailer = $mailer; |
|
| 118 | - $this->l = $l; |
|
| 119 | - $this->questionHelper = $questionHelper; |
|
| 120 | - $this->secureRandom = $secureRandom; |
|
| 121 | - // store one time passwords for the users |
|
| 122 | - $this->userPasswords = array(); |
|
| 123 | - } |
|
| 124 | - |
|
| 125 | - /** |
|
| 126 | - * start to encrypt all files |
|
| 127 | - * |
|
| 128 | - * @param InputInterface $input |
|
| 129 | - * @param OutputInterface $output |
|
| 130 | - */ |
|
| 131 | - public function encryptAll(InputInterface $input, OutputInterface $output) { |
|
| 132 | - |
|
| 133 | - $this->input = $input; |
|
| 134 | - $this->output = $output; |
|
| 135 | - |
|
| 136 | - $headline = 'Encrypt all files with the ' . Encryption::DISPLAY_NAME; |
|
| 137 | - $this->output->writeln("\n"); |
|
| 138 | - $this->output->writeln($headline); |
|
| 139 | - $this->output->writeln(str_pad('', strlen($headline), '=')); |
|
| 140 | - $this->output->writeln("\n"); |
|
| 141 | - |
|
| 142 | - if ($this->util->isMasterKeyEnabled()) { |
|
| 143 | - $this->output->writeln('Use master key to encrypt all files.'); |
|
| 144 | - $this->keyManager->validateMasterKey(); |
|
| 145 | - } else { |
|
| 146 | - //create private/public keys for each user and store the private key password |
|
| 147 | - $this->output->writeln('Create key-pair for every user'); |
|
| 148 | - $this->output->writeln('------------------------------'); |
|
| 149 | - $this->output->writeln(''); |
|
| 150 | - $this->output->writeln('This module will encrypt all files in the users files folder initially.'); |
|
| 151 | - $this->output->writeln('Already existing versions and files in the trash bin will not be encrypted.'); |
|
| 152 | - $this->output->writeln(''); |
|
| 153 | - $this->createKeyPairs(); |
|
| 154 | - } |
|
| 155 | - |
|
| 156 | - //setup users file system and encrypt all files one by one (take should encrypt setting of storage into account) |
|
| 157 | - $this->output->writeln("\n"); |
|
| 158 | - $this->output->writeln('Start to encrypt users files'); |
|
| 159 | - $this->output->writeln('----------------------------'); |
|
| 160 | - $this->output->writeln(''); |
|
| 161 | - $this->encryptAllUsersFiles(); |
|
| 162 | - if ($this->util->isMasterKeyEnabled() === false) { |
|
| 163 | - //send-out or display password list and write it to a file |
|
| 164 | - $this->output->writeln("\n"); |
|
| 165 | - $this->output->writeln('Generated encryption key passwords'); |
|
| 166 | - $this->output->writeln('----------------------------------'); |
|
| 167 | - $this->output->writeln(''); |
|
| 168 | - $this->outputPasswords(); |
|
| 169 | - } |
|
| 170 | - $this->output->writeln("\n"); |
|
| 171 | - } |
|
| 172 | - |
|
| 173 | - /** |
|
| 174 | - * create key-pair for every user |
|
| 175 | - */ |
|
| 176 | - protected function createKeyPairs() { |
|
| 177 | - $this->output->writeln("\n"); |
|
| 178 | - $progress = new ProgressBar($this->output); |
|
| 179 | - $progress->setFormat(" %message% \n [%bar%]"); |
|
| 180 | - $progress->start(); |
|
| 181 | - |
|
| 182 | - foreach($this->userManager->getBackends() as $backend) { |
|
| 183 | - $limit = 500; |
|
| 184 | - $offset = 0; |
|
| 185 | - do { |
|
| 186 | - $users = $backend->getUsers('', $limit, $offset); |
|
| 187 | - foreach ($users as $user) { |
|
| 188 | - if ($this->keyManager->userHasKeys($user) === false) { |
|
| 189 | - $progress->setMessage('Create key-pair for ' . $user); |
|
| 190 | - $progress->advance(); |
|
| 191 | - $this->setupUserFS($user); |
|
| 192 | - $password = $this->generateOneTimePassword($user); |
|
| 193 | - $this->userSetup->setupUser($user, $password); |
|
| 194 | - } else { |
|
| 195 | - // users which already have a key-pair will be stored with a |
|
| 196 | - // empty password and filtered out later |
|
| 197 | - $this->userPasswords[$user] = ''; |
|
| 198 | - } |
|
| 199 | - } |
|
| 200 | - $offset += $limit; |
|
| 201 | - } while(count($users) >= $limit); |
|
| 202 | - } |
|
| 203 | - |
|
| 204 | - $progress->setMessage('Key-pair created for all users'); |
|
| 205 | - $progress->finish(); |
|
| 206 | - } |
|
| 207 | - |
|
| 208 | - /** |
|
| 209 | - * iterate over all user and encrypt their files |
|
| 210 | - */ |
|
| 211 | - protected function encryptAllUsersFiles() { |
|
| 212 | - $this->output->writeln("\n"); |
|
| 213 | - $progress = new ProgressBar($this->output); |
|
| 214 | - $progress->setFormat(" %message% \n [%bar%]"); |
|
| 215 | - $progress->start(); |
|
| 216 | - $numberOfUsers = count($this->userPasswords); |
|
| 217 | - $userNo = 1; |
|
| 218 | - if ($this->util->isMasterKeyEnabled()) { |
|
| 219 | - $this->encryptAllUserFilesWithMasterKey($progress); |
|
| 220 | - } else { |
|
| 221 | - foreach ($this->userPasswords as $uid => $password) { |
|
| 222 | - $userCount = "$uid ($userNo of $numberOfUsers)"; |
|
| 223 | - $this->encryptUsersFiles($uid, $progress, $userCount); |
|
| 224 | - $userNo++; |
|
| 225 | - } |
|
| 226 | - } |
|
| 227 | - $progress->setMessage("all files encrypted"); |
|
| 228 | - $progress->finish(); |
|
| 229 | - |
|
| 230 | - } |
|
| 231 | - |
|
| 232 | - /** |
|
| 233 | - * encrypt all user files with the master key |
|
| 234 | - * |
|
| 235 | - * @param ProgressBar $progress |
|
| 236 | - */ |
|
| 237 | - protected function encryptAllUserFilesWithMasterKey(ProgressBar $progress) { |
|
| 238 | - $userNo = 1; |
|
| 239 | - foreach($this->userManager->getBackends() as $backend) { |
|
| 240 | - $limit = 500; |
|
| 241 | - $offset = 0; |
|
| 242 | - do { |
|
| 243 | - $users = $backend->getUsers('', $limit, $offset); |
|
| 244 | - foreach ($users as $user) { |
|
| 245 | - $userCount = "$user ($userNo)"; |
|
| 246 | - $this->encryptUsersFiles($user, $progress, $userCount); |
|
| 247 | - $userNo++; |
|
| 248 | - } |
|
| 249 | - $offset += $limit; |
|
| 250 | - } while(count($users) >= $limit); |
|
| 251 | - } |
|
| 252 | - } |
|
| 253 | - |
|
| 254 | - /** |
|
| 255 | - * encrypt files from the given user |
|
| 256 | - * |
|
| 257 | - * @param string $uid |
|
| 258 | - * @param ProgressBar $progress |
|
| 259 | - * @param string $userCount |
|
| 260 | - */ |
|
| 261 | - protected function encryptUsersFiles($uid, ProgressBar $progress, $userCount) { |
|
| 262 | - |
|
| 263 | - $this->setupUserFS($uid); |
|
| 264 | - $directories = array(); |
|
| 265 | - $directories[] = '/' . $uid . '/files'; |
|
| 266 | - |
|
| 267 | - while($root = array_pop($directories)) { |
|
| 268 | - $content = $this->rootView->getDirectoryContent($root); |
|
| 269 | - foreach ($content as $file) { |
|
| 270 | - $path = $root . '/' . $file['name']; |
|
| 271 | - if ($this->rootView->is_dir($path)) { |
|
| 272 | - $directories[] = $path; |
|
| 273 | - continue; |
|
| 274 | - } else { |
|
| 275 | - $progress->setMessage("encrypt files for user $userCount: $path"); |
|
| 276 | - $progress->advance(); |
|
| 277 | - if($this->encryptFile($path) === false) { |
|
| 278 | - $progress->setMessage("encrypt files for user $userCount: $path (already encrypted)"); |
|
| 279 | - $progress->advance(); |
|
| 280 | - } |
|
| 281 | - } |
|
| 282 | - } |
|
| 283 | - } |
|
| 284 | - } |
|
| 285 | - |
|
| 286 | - /** |
|
| 287 | - * encrypt file |
|
| 288 | - * |
|
| 289 | - * @param string $path |
|
| 290 | - * @return bool |
|
| 291 | - */ |
|
| 292 | - protected function encryptFile($path) { |
|
| 293 | - |
|
| 294 | - $source = $path; |
|
| 295 | - $target = $path . '.encrypted.' . time(); |
|
| 296 | - |
|
| 297 | - try { |
|
| 298 | - $this->rootView->copy($source, $target); |
|
| 299 | - $this->rootView->rename($target, $source); |
|
| 300 | - } catch (DecryptionFailedException $e) { |
|
| 301 | - if ($this->rootView->file_exists($target)) { |
|
| 302 | - $this->rootView->unlink($target); |
|
| 303 | - } |
|
| 304 | - return false; |
|
| 305 | - } |
|
| 306 | - |
|
| 307 | - return true; |
|
| 308 | - } |
|
| 309 | - |
|
| 310 | - /** |
|
| 311 | - * output one-time encryption passwords |
|
| 312 | - */ |
|
| 313 | - protected function outputPasswords() { |
|
| 314 | - $table = new Table($this->output); |
|
| 315 | - $table->setHeaders(array('Username', 'Private key password')); |
|
| 316 | - |
|
| 317 | - //create rows |
|
| 318 | - $newPasswords = array(); |
|
| 319 | - $unchangedPasswords = array(); |
|
| 320 | - foreach ($this->userPasswords as $uid => $password) { |
|
| 321 | - if (empty($password)) { |
|
| 322 | - $unchangedPasswords[] = $uid; |
|
| 323 | - } else { |
|
| 324 | - $newPasswords[] = [$uid, $password]; |
|
| 325 | - } |
|
| 326 | - } |
|
| 327 | - |
|
| 328 | - if (empty($newPasswords)) { |
|
| 329 | - $this->output->writeln("\nAll users already had a key-pair, no further action needed.\n"); |
|
| 330 | - return; |
|
| 331 | - } |
|
| 332 | - |
|
| 333 | - $table->setRows($newPasswords); |
|
| 334 | - $table->render(); |
|
| 335 | - |
|
| 336 | - if (!empty($unchangedPasswords)) { |
|
| 337 | - $this->output->writeln("\nThe following users already had a key-pair which was reused without setting a new password:\n"); |
|
| 338 | - foreach ($unchangedPasswords as $uid) { |
|
| 339 | - $this->output->writeln(" $uid"); |
|
| 340 | - } |
|
| 341 | - } |
|
| 342 | - |
|
| 343 | - $this->writePasswordsToFile($newPasswords); |
|
| 344 | - |
|
| 345 | - $this->output->writeln(''); |
|
| 346 | - $question = new ConfirmationQuestion('Do you want to send the passwords directly to the users by mail? (y/n) ', false); |
|
| 347 | - if ($this->questionHelper->ask($this->input, $this->output, $question)) { |
|
| 348 | - $this->sendPasswordsByMail(); |
|
| 349 | - } |
|
| 350 | - } |
|
| 351 | - |
|
| 352 | - /** |
|
| 353 | - * write one-time encryption passwords to a csv file |
|
| 354 | - * |
|
| 355 | - * @param array $passwords |
|
| 356 | - */ |
|
| 357 | - protected function writePasswordsToFile(array $passwords) { |
|
| 358 | - $fp = $this->rootView->fopen('oneTimeEncryptionPasswords.csv', 'w'); |
|
| 359 | - foreach ($passwords as $pwd) { |
|
| 360 | - fputcsv($fp, $pwd); |
|
| 361 | - } |
|
| 362 | - fclose($fp); |
|
| 363 | - $this->output->writeln("\n"); |
|
| 364 | - $this->output->writeln('A list of all newly created passwords was written to data/oneTimeEncryptionPasswords.csv'); |
|
| 365 | - $this->output->writeln(''); |
|
| 366 | - $this->output->writeln('Each of these users need to login to the web interface, go to the'); |
|
| 367 | - $this->output->writeln('personal settings section "basic encryption module" and'); |
|
| 368 | - $this->output->writeln('update the private key password to match the login password again by'); |
|
| 369 | - $this->output->writeln('entering the one-time password into the "old log-in password" field'); |
|
| 370 | - $this->output->writeln('and their current login password'); |
|
| 371 | - } |
|
| 372 | - |
|
| 373 | - /** |
|
| 374 | - * setup user file system |
|
| 375 | - * |
|
| 376 | - * @param string $uid |
|
| 377 | - */ |
|
| 378 | - protected function setupUserFS($uid) { |
|
| 379 | - \OC_Util::tearDownFS(); |
|
| 380 | - \OC_Util::setupFS($uid); |
|
| 381 | - } |
|
| 382 | - |
|
| 383 | - /** |
|
| 384 | - * generate one time password for the user and store it in a array |
|
| 385 | - * |
|
| 386 | - * @param string $uid |
|
| 387 | - * @return string password |
|
| 388 | - */ |
|
| 389 | - protected function generateOneTimePassword($uid) { |
|
| 390 | - $password = $this->secureRandom->generate(8); |
|
| 391 | - $this->userPasswords[$uid] = $password; |
|
| 392 | - return $password; |
|
| 393 | - } |
|
| 394 | - |
|
| 395 | - /** |
|
| 396 | - * send encryption key passwords to the users by mail |
|
| 397 | - */ |
|
| 398 | - protected function sendPasswordsByMail() { |
|
| 399 | - $noMail = []; |
|
| 400 | - |
|
| 401 | - $this->output->writeln(''); |
|
| 402 | - $progress = new ProgressBar($this->output, count($this->userPasswords)); |
|
| 403 | - $progress->start(); |
|
| 404 | - |
|
| 405 | - foreach ($this->userPasswords as $uid => $password) { |
|
| 406 | - $progress->advance(); |
|
| 407 | - if (!empty($password)) { |
|
| 408 | - $recipient = $this->userManager->get($uid); |
|
| 409 | - $recipientDisplayName = $recipient->getDisplayName(); |
|
| 410 | - $to = $recipient->getEMailAddress(); |
|
| 411 | - |
|
| 412 | - if ($to === '') { |
|
| 413 | - $noMail[] = $uid; |
|
| 414 | - continue; |
|
| 415 | - } |
|
| 416 | - |
|
| 417 | - $subject = (string)$this->l->t('one-time password for server-side-encryption'); |
|
| 418 | - list($htmlBody, $textBody) = $this->createMailBody($password); |
|
| 419 | - |
|
| 420 | - // send it out now |
|
| 421 | - try { |
|
| 422 | - $message = $this->mailer->createMessage(); |
|
| 423 | - $message->setSubject($subject); |
|
| 424 | - $message->setTo([$to => $recipientDisplayName]); |
|
| 425 | - $message->setHtmlBody($htmlBody); |
|
| 426 | - $message->setPlainBody($textBody); |
|
| 427 | - $message->setFrom([ |
|
| 428 | - \OCP\Util::getDefaultEmailAddress('admin-noreply') |
|
| 429 | - ]); |
|
| 430 | - |
|
| 431 | - $this->mailer->send($message); |
|
| 432 | - } catch (\Exception $e) { |
|
| 433 | - $noMail[] = $uid; |
|
| 434 | - } |
|
| 435 | - } |
|
| 436 | - } |
|
| 437 | - |
|
| 438 | - $progress->finish(); |
|
| 439 | - |
|
| 440 | - if (empty($noMail)) { |
|
| 441 | - $this->output->writeln("\n\nPassword successfully send to all users"); |
|
| 442 | - } else { |
|
| 443 | - $table = new Table($this->output); |
|
| 444 | - $table->setHeaders(array('Username', 'Private key password')); |
|
| 445 | - $this->output->writeln("\n\nCould not send password to following users:\n"); |
|
| 446 | - $rows = []; |
|
| 447 | - foreach ($noMail as $uid) { |
|
| 448 | - $rows[] = [$uid, $this->userPasswords[$uid]]; |
|
| 449 | - } |
|
| 450 | - $table->setRows($rows); |
|
| 451 | - $table->render(); |
|
| 452 | - } |
|
| 453 | - |
|
| 454 | - } |
|
| 455 | - |
|
| 456 | - /** |
|
| 457 | - * create mail body for plain text and html mail |
|
| 458 | - * |
|
| 459 | - * @param string $password one-time encryption password |
|
| 460 | - * @return array an array of the html mail body and the plain text mail body |
|
| 461 | - */ |
|
| 462 | - protected function createMailBody($password) { |
|
| 463 | - |
|
| 464 | - $html = new \OC_Template("encryption", "mail", ""); |
|
| 465 | - $html->assign ('password', $password); |
|
| 466 | - $htmlMail = $html->fetchPage(); |
|
| 467 | - |
|
| 468 | - $plainText = new \OC_Template("encryption", "altmail", ""); |
|
| 469 | - $plainText->assign ('password', $password); |
|
| 470 | - $plainTextMail = $plainText->fetchPage(); |
|
| 471 | - |
|
| 472 | - return [$htmlMail, $plainTextMail]; |
|
| 473 | - } |
|
| 48 | + /** @var Setup */ |
|
| 49 | + protected $userSetup; |
|
| 50 | + |
|
| 51 | + /** @var IUserManager */ |
|
| 52 | + protected $userManager; |
|
| 53 | + |
|
| 54 | + /** @var View */ |
|
| 55 | + protected $rootView; |
|
| 56 | + |
|
| 57 | + /** @var KeyManager */ |
|
| 58 | + protected $keyManager; |
|
| 59 | + |
|
| 60 | + /** @var Util */ |
|
| 61 | + protected $util; |
|
| 62 | + |
|
| 63 | + /** @var array */ |
|
| 64 | + protected $userPasswords; |
|
| 65 | + |
|
| 66 | + /** @var IConfig */ |
|
| 67 | + protected $config; |
|
| 68 | + |
|
| 69 | + /** @var IMailer */ |
|
| 70 | + protected $mailer; |
|
| 71 | + |
|
| 72 | + /** @var IL10N */ |
|
| 73 | + protected $l; |
|
| 74 | + |
|
| 75 | + /** @var QuestionHelper */ |
|
| 76 | + protected $questionHelper; |
|
| 77 | + |
|
| 78 | + /** @var OutputInterface */ |
|
| 79 | + protected $output; |
|
| 80 | + |
|
| 81 | + /** @var InputInterface */ |
|
| 82 | + protected $input; |
|
| 83 | + |
|
| 84 | + /** @var ISecureRandom */ |
|
| 85 | + protected $secureRandom; |
|
| 86 | + |
|
| 87 | + /** |
|
| 88 | + * @param Setup $userSetup |
|
| 89 | + * @param IUserManager $userManager |
|
| 90 | + * @param View $rootView |
|
| 91 | + * @param KeyManager $keyManager |
|
| 92 | + * @param Util $util |
|
| 93 | + * @param IConfig $config |
|
| 94 | + * @param IMailer $mailer |
|
| 95 | + * @param IL10N $l |
|
| 96 | + * @param QuestionHelper $questionHelper |
|
| 97 | + * @param ISecureRandom $secureRandom |
|
| 98 | + */ |
|
| 99 | + public function __construct( |
|
| 100 | + Setup $userSetup, |
|
| 101 | + IUserManager $userManager, |
|
| 102 | + View $rootView, |
|
| 103 | + KeyManager $keyManager, |
|
| 104 | + Util $util, |
|
| 105 | + IConfig $config, |
|
| 106 | + IMailer $mailer, |
|
| 107 | + IL10N $l, |
|
| 108 | + QuestionHelper $questionHelper, |
|
| 109 | + ISecureRandom $secureRandom |
|
| 110 | + ) { |
|
| 111 | + $this->userSetup = $userSetup; |
|
| 112 | + $this->userManager = $userManager; |
|
| 113 | + $this->rootView = $rootView; |
|
| 114 | + $this->keyManager = $keyManager; |
|
| 115 | + $this->util = $util; |
|
| 116 | + $this->config = $config; |
|
| 117 | + $this->mailer = $mailer; |
|
| 118 | + $this->l = $l; |
|
| 119 | + $this->questionHelper = $questionHelper; |
|
| 120 | + $this->secureRandom = $secureRandom; |
|
| 121 | + // store one time passwords for the users |
|
| 122 | + $this->userPasswords = array(); |
|
| 123 | + } |
|
| 124 | + |
|
| 125 | + /** |
|
| 126 | + * start to encrypt all files |
|
| 127 | + * |
|
| 128 | + * @param InputInterface $input |
|
| 129 | + * @param OutputInterface $output |
|
| 130 | + */ |
|
| 131 | + public function encryptAll(InputInterface $input, OutputInterface $output) { |
|
| 132 | + |
|
| 133 | + $this->input = $input; |
|
| 134 | + $this->output = $output; |
|
| 135 | + |
|
| 136 | + $headline = 'Encrypt all files with the ' . Encryption::DISPLAY_NAME; |
|
| 137 | + $this->output->writeln("\n"); |
|
| 138 | + $this->output->writeln($headline); |
|
| 139 | + $this->output->writeln(str_pad('', strlen($headline), '=')); |
|
| 140 | + $this->output->writeln("\n"); |
|
| 141 | + |
|
| 142 | + if ($this->util->isMasterKeyEnabled()) { |
|
| 143 | + $this->output->writeln('Use master key to encrypt all files.'); |
|
| 144 | + $this->keyManager->validateMasterKey(); |
|
| 145 | + } else { |
|
| 146 | + //create private/public keys for each user and store the private key password |
|
| 147 | + $this->output->writeln('Create key-pair for every user'); |
|
| 148 | + $this->output->writeln('------------------------------'); |
|
| 149 | + $this->output->writeln(''); |
|
| 150 | + $this->output->writeln('This module will encrypt all files in the users files folder initially.'); |
|
| 151 | + $this->output->writeln('Already existing versions and files in the trash bin will not be encrypted.'); |
|
| 152 | + $this->output->writeln(''); |
|
| 153 | + $this->createKeyPairs(); |
|
| 154 | + } |
|
| 155 | + |
|
| 156 | + //setup users file system and encrypt all files one by one (take should encrypt setting of storage into account) |
|
| 157 | + $this->output->writeln("\n"); |
|
| 158 | + $this->output->writeln('Start to encrypt users files'); |
|
| 159 | + $this->output->writeln('----------------------------'); |
|
| 160 | + $this->output->writeln(''); |
|
| 161 | + $this->encryptAllUsersFiles(); |
|
| 162 | + if ($this->util->isMasterKeyEnabled() === false) { |
|
| 163 | + //send-out or display password list and write it to a file |
|
| 164 | + $this->output->writeln("\n"); |
|
| 165 | + $this->output->writeln('Generated encryption key passwords'); |
|
| 166 | + $this->output->writeln('----------------------------------'); |
|
| 167 | + $this->output->writeln(''); |
|
| 168 | + $this->outputPasswords(); |
|
| 169 | + } |
|
| 170 | + $this->output->writeln("\n"); |
|
| 171 | + } |
|
| 172 | + |
|
| 173 | + /** |
|
| 174 | + * create key-pair for every user |
|
| 175 | + */ |
|
| 176 | + protected function createKeyPairs() { |
|
| 177 | + $this->output->writeln("\n"); |
|
| 178 | + $progress = new ProgressBar($this->output); |
|
| 179 | + $progress->setFormat(" %message% \n [%bar%]"); |
|
| 180 | + $progress->start(); |
|
| 181 | + |
|
| 182 | + foreach($this->userManager->getBackends() as $backend) { |
|
| 183 | + $limit = 500; |
|
| 184 | + $offset = 0; |
|
| 185 | + do { |
|
| 186 | + $users = $backend->getUsers('', $limit, $offset); |
|
| 187 | + foreach ($users as $user) { |
|
| 188 | + if ($this->keyManager->userHasKeys($user) === false) { |
|
| 189 | + $progress->setMessage('Create key-pair for ' . $user); |
|
| 190 | + $progress->advance(); |
|
| 191 | + $this->setupUserFS($user); |
|
| 192 | + $password = $this->generateOneTimePassword($user); |
|
| 193 | + $this->userSetup->setupUser($user, $password); |
|
| 194 | + } else { |
|
| 195 | + // users which already have a key-pair will be stored with a |
|
| 196 | + // empty password and filtered out later |
|
| 197 | + $this->userPasswords[$user] = ''; |
|
| 198 | + } |
|
| 199 | + } |
|
| 200 | + $offset += $limit; |
|
| 201 | + } while(count($users) >= $limit); |
|
| 202 | + } |
|
| 203 | + |
|
| 204 | + $progress->setMessage('Key-pair created for all users'); |
|
| 205 | + $progress->finish(); |
|
| 206 | + } |
|
| 207 | + |
|
| 208 | + /** |
|
| 209 | + * iterate over all user and encrypt their files |
|
| 210 | + */ |
|
| 211 | + protected function encryptAllUsersFiles() { |
|
| 212 | + $this->output->writeln("\n"); |
|
| 213 | + $progress = new ProgressBar($this->output); |
|
| 214 | + $progress->setFormat(" %message% \n [%bar%]"); |
|
| 215 | + $progress->start(); |
|
| 216 | + $numberOfUsers = count($this->userPasswords); |
|
| 217 | + $userNo = 1; |
|
| 218 | + if ($this->util->isMasterKeyEnabled()) { |
|
| 219 | + $this->encryptAllUserFilesWithMasterKey($progress); |
|
| 220 | + } else { |
|
| 221 | + foreach ($this->userPasswords as $uid => $password) { |
|
| 222 | + $userCount = "$uid ($userNo of $numberOfUsers)"; |
|
| 223 | + $this->encryptUsersFiles($uid, $progress, $userCount); |
|
| 224 | + $userNo++; |
|
| 225 | + } |
|
| 226 | + } |
|
| 227 | + $progress->setMessage("all files encrypted"); |
|
| 228 | + $progress->finish(); |
|
| 229 | + |
|
| 230 | + } |
|
| 231 | + |
|
| 232 | + /** |
|
| 233 | + * encrypt all user files with the master key |
|
| 234 | + * |
|
| 235 | + * @param ProgressBar $progress |
|
| 236 | + */ |
|
| 237 | + protected function encryptAllUserFilesWithMasterKey(ProgressBar $progress) { |
|
| 238 | + $userNo = 1; |
|
| 239 | + foreach($this->userManager->getBackends() as $backend) { |
|
| 240 | + $limit = 500; |
|
| 241 | + $offset = 0; |
|
| 242 | + do { |
|
| 243 | + $users = $backend->getUsers('', $limit, $offset); |
|
| 244 | + foreach ($users as $user) { |
|
| 245 | + $userCount = "$user ($userNo)"; |
|
| 246 | + $this->encryptUsersFiles($user, $progress, $userCount); |
|
| 247 | + $userNo++; |
|
| 248 | + } |
|
| 249 | + $offset += $limit; |
|
| 250 | + } while(count($users) >= $limit); |
|
| 251 | + } |
|
| 252 | + } |
|
| 253 | + |
|
| 254 | + /** |
|
| 255 | + * encrypt files from the given user |
|
| 256 | + * |
|
| 257 | + * @param string $uid |
|
| 258 | + * @param ProgressBar $progress |
|
| 259 | + * @param string $userCount |
|
| 260 | + */ |
|
| 261 | + protected function encryptUsersFiles($uid, ProgressBar $progress, $userCount) { |
|
| 262 | + |
|
| 263 | + $this->setupUserFS($uid); |
|
| 264 | + $directories = array(); |
|
| 265 | + $directories[] = '/' . $uid . '/files'; |
|
| 266 | + |
|
| 267 | + while($root = array_pop($directories)) { |
|
| 268 | + $content = $this->rootView->getDirectoryContent($root); |
|
| 269 | + foreach ($content as $file) { |
|
| 270 | + $path = $root . '/' . $file['name']; |
|
| 271 | + if ($this->rootView->is_dir($path)) { |
|
| 272 | + $directories[] = $path; |
|
| 273 | + continue; |
|
| 274 | + } else { |
|
| 275 | + $progress->setMessage("encrypt files for user $userCount: $path"); |
|
| 276 | + $progress->advance(); |
|
| 277 | + if($this->encryptFile($path) === false) { |
|
| 278 | + $progress->setMessage("encrypt files for user $userCount: $path (already encrypted)"); |
|
| 279 | + $progress->advance(); |
|
| 280 | + } |
|
| 281 | + } |
|
| 282 | + } |
|
| 283 | + } |
|
| 284 | + } |
|
| 285 | + |
|
| 286 | + /** |
|
| 287 | + * encrypt file |
|
| 288 | + * |
|
| 289 | + * @param string $path |
|
| 290 | + * @return bool |
|
| 291 | + */ |
|
| 292 | + protected function encryptFile($path) { |
|
| 293 | + |
|
| 294 | + $source = $path; |
|
| 295 | + $target = $path . '.encrypted.' . time(); |
|
| 296 | + |
|
| 297 | + try { |
|
| 298 | + $this->rootView->copy($source, $target); |
|
| 299 | + $this->rootView->rename($target, $source); |
|
| 300 | + } catch (DecryptionFailedException $e) { |
|
| 301 | + if ($this->rootView->file_exists($target)) { |
|
| 302 | + $this->rootView->unlink($target); |
|
| 303 | + } |
|
| 304 | + return false; |
|
| 305 | + } |
|
| 306 | + |
|
| 307 | + return true; |
|
| 308 | + } |
|
| 309 | + |
|
| 310 | + /** |
|
| 311 | + * output one-time encryption passwords |
|
| 312 | + */ |
|
| 313 | + protected function outputPasswords() { |
|
| 314 | + $table = new Table($this->output); |
|
| 315 | + $table->setHeaders(array('Username', 'Private key password')); |
|
| 316 | + |
|
| 317 | + //create rows |
|
| 318 | + $newPasswords = array(); |
|
| 319 | + $unchangedPasswords = array(); |
|
| 320 | + foreach ($this->userPasswords as $uid => $password) { |
|
| 321 | + if (empty($password)) { |
|
| 322 | + $unchangedPasswords[] = $uid; |
|
| 323 | + } else { |
|
| 324 | + $newPasswords[] = [$uid, $password]; |
|
| 325 | + } |
|
| 326 | + } |
|
| 327 | + |
|
| 328 | + if (empty($newPasswords)) { |
|
| 329 | + $this->output->writeln("\nAll users already had a key-pair, no further action needed.\n"); |
|
| 330 | + return; |
|
| 331 | + } |
|
| 332 | + |
|
| 333 | + $table->setRows($newPasswords); |
|
| 334 | + $table->render(); |
|
| 335 | + |
|
| 336 | + if (!empty($unchangedPasswords)) { |
|
| 337 | + $this->output->writeln("\nThe following users already had a key-pair which was reused without setting a new password:\n"); |
|
| 338 | + foreach ($unchangedPasswords as $uid) { |
|
| 339 | + $this->output->writeln(" $uid"); |
|
| 340 | + } |
|
| 341 | + } |
|
| 342 | + |
|
| 343 | + $this->writePasswordsToFile($newPasswords); |
|
| 344 | + |
|
| 345 | + $this->output->writeln(''); |
|
| 346 | + $question = new ConfirmationQuestion('Do you want to send the passwords directly to the users by mail? (y/n) ', false); |
|
| 347 | + if ($this->questionHelper->ask($this->input, $this->output, $question)) { |
|
| 348 | + $this->sendPasswordsByMail(); |
|
| 349 | + } |
|
| 350 | + } |
|
| 351 | + |
|
| 352 | + /** |
|
| 353 | + * write one-time encryption passwords to a csv file |
|
| 354 | + * |
|
| 355 | + * @param array $passwords |
|
| 356 | + */ |
|
| 357 | + protected function writePasswordsToFile(array $passwords) { |
|
| 358 | + $fp = $this->rootView->fopen('oneTimeEncryptionPasswords.csv', 'w'); |
|
| 359 | + foreach ($passwords as $pwd) { |
|
| 360 | + fputcsv($fp, $pwd); |
|
| 361 | + } |
|
| 362 | + fclose($fp); |
|
| 363 | + $this->output->writeln("\n"); |
|
| 364 | + $this->output->writeln('A list of all newly created passwords was written to data/oneTimeEncryptionPasswords.csv'); |
|
| 365 | + $this->output->writeln(''); |
|
| 366 | + $this->output->writeln('Each of these users need to login to the web interface, go to the'); |
|
| 367 | + $this->output->writeln('personal settings section "basic encryption module" and'); |
|
| 368 | + $this->output->writeln('update the private key password to match the login password again by'); |
|
| 369 | + $this->output->writeln('entering the one-time password into the "old log-in password" field'); |
|
| 370 | + $this->output->writeln('and their current login password'); |
|
| 371 | + } |
|
| 372 | + |
|
| 373 | + /** |
|
| 374 | + * setup user file system |
|
| 375 | + * |
|
| 376 | + * @param string $uid |
|
| 377 | + */ |
|
| 378 | + protected function setupUserFS($uid) { |
|
| 379 | + \OC_Util::tearDownFS(); |
|
| 380 | + \OC_Util::setupFS($uid); |
|
| 381 | + } |
|
| 382 | + |
|
| 383 | + /** |
|
| 384 | + * generate one time password for the user and store it in a array |
|
| 385 | + * |
|
| 386 | + * @param string $uid |
|
| 387 | + * @return string password |
|
| 388 | + */ |
|
| 389 | + protected function generateOneTimePassword($uid) { |
|
| 390 | + $password = $this->secureRandom->generate(8); |
|
| 391 | + $this->userPasswords[$uid] = $password; |
|
| 392 | + return $password; |
|
| 393 | + } |
|
| 394 | + |
|
| 395 | + /** |
|
| 396 | + * send encryption key passwords to the users by mail |
|
| 397 | + */ |
|
| 398 | + protected function sendPasswordsByMail() { |
|
| 399 | + $noMail = []; |
|
| 400 | + |
|
| 401 | + $this->output->writeln(''); |
|
| 402 | + $progress = new ProgressBar($this->output, count($this->userPasswords)); |
|
| 403 | + $progress->start(); |
|
| 404 | + |
|
| 405 | + foreach ($this->userPasswords as $uid => $password) { |
|
| 406 | + $progress->advance(); |
|
| 407 | + if (!empty($password)) { |
|
| 408 | + $recipient = $this->userManager->get($uid); |
|
| 409 | + $recipientDisplayName = $recipient->getDisplayName(); |
|
| 410 | + $to = $recipient->getEMailAddress(); |
|
| 411 | + |
|
| 412 | + if ($to === '') { |
|
| 413 | + $noMail[] = $uid; |
|
| 414 | + continue; |
|
| 415 | + } |
|
| 416 | + |
|
| 417 | + $subject = (string)$this->l->t('one-time password for server-side-encryption'); |
|
| 418 | + list($htmlBody, $textBody) = $this->createMailBody($password); |
|
| 419 | + |
|
| 420 | + // send it out now |
|
| 421 | + try { |
|
| 422 | + $message = $this->mailer->createMessage(); |
|
| 423 | + $message->setSubject($subject); |
|
| 424 | + $message->setTo([$to => $recipientDisplayName]); |
|
| 425 | + $message->setHtmlBody($htmlBody); |
|
| 426 | + $message->setPlainBody($textBody); |
|
| 427 | + $message->setFrom([ |
|
| 428 | + \OCP\Util::getDefaultEmailAddress('admin-noreply') |
|
| 429 | + ]); |
|
| 430 | + |
|
| 431 | + $this->mailer->send($message); |
|
| 432 | + } catch (\Exception $e) { |
|
| 433 | + $noMail[] = $uid; |
|
| 434 | + } |
|
| 435 | + } |
|
| 436 | + } |
|
| 437 | + |
|
| 438 | + $progress->finish(); |
|
| 439 | + |
|
| 440 | + if (empty($noMail)) { |
|
| 441 | + $this->output->writeln("\n\nPassword successfully send to all users"); |
|
| 442 | + } else { |
|
| 443 | + $table = new Table($this->output); |
|
| 444 | + $table->setHeaders(array('Username', 'Private key password')); |
|
| 445 | + $this->output->writeln("\n\nCould not send password to following users:\n"); |
|
| 446 | + $rows = []; |
|
| 447 | + foreach ($noMail as $uid) { |
|
| 448 | + $rows[] = [$uid, $this->userPasswords[$uid]]; |
|
| 449 | + } |
|
| 450 | + $table->setRows($rows); |
|
| 451 | + $table->render(); |
|
| 452 | + } |
|
| 453 | + |
|
| 454 | + } |
|
| 455 | + |
|
| 456 | + /** |
|
| 457 | + * create mail body for plain text and html mail |
|
| 458 | + * |
|
| 459 | + * @param string $password one-time encryption password |
|
| 460 | + * @return array an array of the html mail body and the plain text mail body |
|
| 461 | + */ |
|
| 462 | + protected function createMailBody($password) { |
|
| 463 | + |
|
| 464 | + $html = new \OC_Template("encryption", "mail", ""); |
|
| 465 | + $html->assign ('password', $password); |
|
| 466 | + $htmlMail = $html->fetchPage(); |
|
| 467 | + |
|
| 468 | + $plainText = new \OC_Template("encryption", "altmail", ""); |
|
| 469 | + $plainText->assign ('password', $password); |
|
| 470 | + $plainTextMail = $plainText->fetchPage(); |
|
| 471 | + |
|
| 472 | + return [$htmlMail, $plainTextMail]; |
|
| 473 | + } |
|
| 474 | 474 | |
| 475 | 475 | } |
@@ -35,127 +35,127 @@ |
||
| 35 | 35 | |
| 36 | 36 | class DecryptAll { |
| 37 | 37 | |
| 38 | - /** @var Util */ |
|
| 39 | - protected $util; |
|
| 40 | - |
|
| 41 | - /** @var QuestionHelper */ |
|
| 42 | - protected $questionHelper; |
|
| 43 | - |
|
| 44 | - /** @var Crypt */ |
|
| 45 | - protected $crypt; |
|
| 46 | - |
|
| 47 | - /** @var KeyManager */ |
|
| 48 | - protected $keyManager; |
|
| 49 | - |
|
| 50 | - /** @var Session */ |
|
| 51 | - protected $session; |
|
| 52 | - |
|
| 53 | - /** |
|
| 54 | - * @param Util $util |
|
| 55 | - * @param KeyManager $keyManager |
|
| 56 | - * @param Crypt $crypt |
|
| 57 | - * @param Session $session |
|
| 58 | - * @param QuestionHelper $questionHelper |
|
| 59 | - */ |
|
| 60 | - public function __construct( |
|
| 61 | - Util $util, |
|
| 62 | - KeyManager $keyManager, |
|
| 63 | - Crypt $crypt, |
|
| 64 | - Session $session, |
|
| 65 | - QuestionHelper $questionHelper |
|
| 66 | - ) { |
|
| 67 | - $this->util = $util; |
|
| 68 | - $this->keyManager = $keyManager; |
|
| 69 | - $this->crypt = $crypt; |
|
| 70 | - $this->session = $session; |
|
| 71 | - $this->questionHelper = $questionHelper; |
|
| 72 | - } |
|
| 73 | - |
|
| 74 | - /** |
|
| 75 | - * prepare encryption module to decrypt all files |
|
| 76 | - * |
|
| 77 | - * @param InputInterface $input |
|
| 78 | - * @param OutputInterface $output |
|
| 79 | - * @param $user |
|
| 80 | - * @return bool |
|
| 81 | - */ |
|
| 82 | - public function prepare(InputInterface $input, OutputInterface $output, $user) { |
|
| 83 | - |
|
| 84 | - $question = new Question('Please enter the recovery key password: '); |
|
| 85 | - |
|
| 86 | - if($this->util->isMasterKeyEnabled()) { |
|
| 87 | - $output->writeln('Use master key to decrypt all files'); |
|
| 88 | - $user = $this->keyManager->getMasterKeyId(); |
|
| 89 | - $password =$this->keyManager->getMasterKeyPassword(); |
|
| 90 | - } else { |
|
| 91 | - $recoveryKeyId = $this->keyManager->getRecoveryKeyId(); |
|
| 92 | - if (!empty($user)) { |
|
| 93 | - $output->writeln('You can only decrypt the users files if you know'); |
|
| 94 | - $output->writeln('the users password or if he activated the recovery key.'); |
|
| 95 | - $output->writeln(''); |
|
| 96 | - $questionUseLoginPassword = new ConfirmationQuestion( |
|
| 97 | - 'Do you want to use the users login password to decrypt all files? (y/n) ', |
|
| 98 | - false |
|
| 99 | - ); |
|
| 100 | - $useLoginPassword = $this->questionHelper->ask($input, $output, $questionUseLoginPassword); |
|
| 101 | - if ($useLoginPassword) { |
|
| 102 | - $question = new Question('Please enter the user\'s login password: '); |
|
| 103 | - } else if ($this->util->isRecoveryEnabledForUser($user) === false) { |
|
| 104 | - $output->writeln('No recovery key available for user ' . $user); |
|
| 105 | - return false; |
|
| 106 | - } else { |
|
| 107 | - $user = $recoveryKeyId; |
|
| 108 | - } |
|
| 109 | - } else { |
|
| 110 | - $output->writeln('You can only decrypt the files of all users if the'); |
|
| 111 | - $output->writeln('recovery key is enabled by the admin and activated by the users.'); |
|
| 112 | - $output->writeln(''); |
|
| 113 | - $user = $recoveryKeyId; |
|
| 114 | - } |
|
| 115 | - |
|
| 116 | - $question->setHidden(true); |
|
| 117 | - $question->setHiddenFallback(false); |
|
| 118 | - $password = $this->questionHelper->ask($input, $output, $question); |
|
| 119 | - } |
|
| 120 | - |
|
| 121 | - $privateKey = $this->getPrivateKey($user, $password); |
|
| 122 | - if ($privateKey !== false) { |
|
| 123 | - $this->updateSession($user, $privateKey); |
|
| 124 | - return true; |
|
| 125 | - } else { |
|
| 126 | - $output->writeln('Could not decrypt private key, maybe you entered the wrong password?'); |
|
| 127 | - } |
|
| 128 | - |
|
| 129 | - |
|
| 130 | - return false; |
|
| 131 | - } |
|
| 132 | - |
|
| 133 | - /** |
|
| 134 | - * get the private key which will be used to decrypt all files |
|
| 135 | - * |
|
| 136 | - * @param string $user |
|
| 137 | - * @param string $password |
|
| 138 | - * @return bool|string |
|
| 139 | - * @throws \OCA\Encryption\Exceptions\PrivateKeyMissingException |
|
| 140 | - */ |
|
| 141 | - protected function getPrivateKey($user, $password) { |
|
| 142 | - $recoveryKeyId = $this->keyManager->getRecoveryKeyId(); |
|
| 143 | - $masterKeyId = $this->keyManager->getMasterKeyId(); |
|
| 144 | - if ($user === $recoveryKeyId) { |
|
| 145 | - $recoveryKey = $this->keyManager->getSystemPrivateKey($recoveryKeyId); |
|
| 146 | - $privateKey = $this->crypt->decryptPrivateKey($recoveryKey, $password); |
|
| 147 | - } elseif ($user === $masterKeyId) { |
|
| 148 | - $masterKey = $this->keyManager->getSystemPrivateKey($masterKeyId); |
|
| 149 | - $privateKey = $this->crypt->decryptPrivateKey($masterKey, $password, $masterKeyId); |
|
| 150 | - } else { |
|
| 151 | - $userKey = $this->keyManager->getPrivateKey($user); |
|
| 152 | - $privateKey = $this->crypt->decryptPrivateKey($userKey, $password, $user); |
|
| 153 | - } |
|
| 154 | - |
|
| 155 | - return $privateKey; |
|
| 156 | - } |
|
| 157 | - |
|
| 158 | - protected function updateSession($user, $privateKey) { |
|
| 159 | - $this->session->prepareDecryptAll($user, $privateKey); |
|
| 160 | - } |
|
| 38 | + /** @var Util */ |
|
| 39 | + protected $util; |
|
| 40 | + |
|
| 41 | + /** @var QuestionHelper */ |
|
| 42 | + protected $questionHelper; |
|
| 43 | + |
|
| 44 | + /** @var Crypt */ |
|
| 45 | + protected $crypt; |
|
| 46 | + |
|
| 47 | + /** @var KeyManager */ |
|
| 48 | + protected $keyManager; |
|
| 49 | + |
|
| 50 | + /** @var Session */ |
|
| 51 | + protected $session; |
|
| 52 | + |
|
| 53 | + /** |
|
| 54 | + * @param Util $util |
|
| 55 | + * @param KeyManager $keyManager |
|
| 56 | + * @param Crypt $crypt |
|
| 57 | + * @param Session $session |
|
| 58 | + * @param QuestionHelper $questionHelper |
|
| 59 | + */ |
|
| 60 | + public function __construct( |
|
| 61 | + Util $util, |
|
| 62 | + KeyManager $keyManager, |
|
| 63 | + Crypt $crypt, |
|
| 64 | + Session $session, |
|
| 65 | + QuestionHelper $questionHelper |
|
| 66 | + ) { |
|
| 67 | + $this->util = $util; |
|
| 68 | + $this->keyManager = $keyManager; |
|
| 69 | + $this->crypt = $crypt; |
|
| 70 | + $this->session = $session; |
|
| 71 | + $this->questionHelper = $questionHelper; |
|
| 72 | + } |
|
| 73 | + |
|
| 74 | + /** |
|
| 75 | + * prepare encryption module to decrypt all files |
|
| 76 | + * |
|
| 77 | + * @param InputInterface $input |
|
| 78 | + * @param OutputInterface $output |
|
| 79 | + * @param $user |
|
| 80 | + * @return bool |
|
| 81 | + */ |
|
| 82 | + public function prepare(InputInterface $input, OutputInterface $output, $user) { |
|
| 83 | + |
|
| 84 | + $question = new Question('Please enter the recovery key password: '); |
|
| 85 | + |
|
| 86 | + if($this->util->isMasterKeyEnabled()) { |
|
| 87 | + $output->writeln('Use master key to decrypt all files'); |
|
| 88 | + $user = $this->keyManager->getMasterKeyId(); |
|
| 89 | + $password =$this->keyManager->getMasterKeyPassword(); |
|
| 90 | + } else { |
|
| 91 | + $recoveryKeyId = $this->keyManager->getRecoveryKeyId(); |
|
| 92 | + if (!empty($user)) { |
|
| 93 | + $output->writeln('You can only decrypt the users files if you know'); |
|
| 94 | + $output->writeln('the users password or if he activated the recovery key.'); |
|
| 95 | + $output->writeln(''); |
|
| 96 | + $questionUseLoginPassword = new ConfirmationQuestion( |
|
| 97 | + 'Do you want to use the users login password to decrypt all files? (y/n) ', |
|
| 98 | + false |
|
| 99 | + ); |
|
| 100 | + $useLoginPassword = $this->questionHelper->ask($input, $output, $questionUseLoginPassword); |
|
| 101 | + if ($useLoginPassword) { |
|
| 102 | + $question = new Question('Please enter the user\'s login password: '); |
|
| 103 | + } else if ($this->util->isRecoveryEnabledForUser($user) === false) { |
|
| 104 | + $output->writeln('No recovery key available for user ' . $user); |
|
| 105 | + return false; |
|
| 106 | + } else { |
|
| 107 | + $user = $recoveryKeyId; |
|
| 108 | + } |
|
| 109 | + } else { |
|
| 110 | + $output->writeln('You can only decrypt the files of all users if the'); |
|
| 111 | + $output->writeln('recovery key is enabled by the admin and activated by the users.'); |
|
| 112 | + $output->writeln(''); |
|
| 113 | + $user = $recoveryKeyId; |
|
| 114 | + } |
|
| 115 | + |
|
| 116 | + $question->setHidden(true); |
|
| 117 | + $question->setHiddenFallback(false); |
|
| 118 | + $password = $this->questionHelper->ask($input, $output, $question); |
|
| 119 | + } |
|
| 120 | + |
|
| 121 | + $privateKey = $this->getPrivateKey($user, $password); |
|
| 122 | + if ($privateKey !== false) { |
|
| 123 | + $this->updateSession($user, $privateKey); |
|
| 124 | + return true; |
|
| 125 | + } else { |
|
| 126 | + $output->writeln('Could not decrypt private key, maybe you entered the wrong password?'); |
|
| 127 | + } |
|
| 128 | + |
|
| 129 | + |
|
| 130 | + return false; |
|
| 131 | + } |
|
| 132 | + |
|
| 133 | + /** |
|
| 134 | + * get the private key which will be used to decrypt all files |
|
| 135 | + * |
|
| 136 | + * @param string $user |
|
| 137 | + * @param string $password |
|
| 138 | + * @return bool|string |
|
| 139 | + * @throws \OCA\Encryption\Exceptions\PrivateKeyMissingException |
|
| 140 | + */ |
|
| 141 | + protected function getPrivateKey($user, $password) { |
|
| 142 | + $recoveryKeyId = $this->keyManager->getRecoveryKeyId(); |
|
| 143 | + $masterKeyId = $this->keyManager->getMasterKeyId(); |
|
| 144 | + if ($user === $recoveryKeyId) { |
|
| 145 | + $recoveryKey = $this->keyManager->getSystemPrivateKey($recoveryKeyId); |
|
| 146 | + $privateKey = $this->crypt->decryptPrivateKey($recoveryKey, $password); |
|
| 147 | + } elseif ($user === $masterKeyId) { |
|
| 148 | + $masterKey = $this->keyManager->getSystemPrivateKey($masterKeyId); |
|
| 149 | + $privateKey = $this->crypt->decryptPrivateKey($masterKey, $password, $masterKeyId); |
|
| 150 | + } else { |
|
| 151 | + $userKey = $this->keyManager->getPrivateKey($user); |
|
| 152 | + $privateKey = $this->crypt->decryptPrivateKey($userKey, $password, $user); |
|
| 153 | + } |
|
| 154 | + |
|
| 155 | + return $privateKey; |
|
| 156 | + } |
|
| 157 | + |
|
| 158 | + protected function updateSession($user, $privateKey) { |
|
| 159 | + $this->session->prepareDecryptAll($user, $privateKey); |
|
| 160 | + } |
|
| 161 | 161 | } |
@@ -28,38 +28,38 @@ |
||
| 28 | 28 | |
| 29 | 29 | class HookManager { |
| 30 | 30 | |
| 31 | - private $hookInstances = []; |
|
| 31 | + private $hookInstances = []; |
|
| 32 | 32 | |
| 33 | - /** |
|
| 34 | - * @param array|IHook $instances |
|
| 35 | - * - This accepts either a single instance of IHook or an array of instances of IHook |
|
| 36 | - * @return bool |
|
| 37 | - */ |
|
| 38 | - public function registerHook($instances) { |
|
| 39 | - if (is_array($instances)) { |
|
| 40 | - foreach ($instances as $instance) { |
|
| 41 | - if (!$instance instanceof IHook) { |
|
| 42 | - return false; |
|
| 43 | - } |
|
| 44 | - $this->hookInstances[] = $instance; |
|
| 45 | - } |
|
| 33 | + /** |
|
| 34 | + * @param array|IHook $instances |
|
| 35 | + * - This accepts either a single instance of IHook or an array of instances of IHook |
|
| 36 | + * @return bool |
|
| 37 | + */ |
|
| 38 | + public function registerHook($instances) { |
|
| 39 | + if (is_array($instances)) { |
|
| 40 | + foreach ($instances as $instance) { |
|
| 41 | + if (!$instance instanceof IHook) { |
|
| 42 | + return false; |
|
| 43 | + } |
|
| 44 | + $this->hookInstances[] = $instance; |
|
| 45 | + } |
|
| 46 | 46 | |
| 47 | - } elseif ($instances instanceof IHook) { |
|
| 48 | - $this->hookInstances[] = $instances; |
|
| 49 | - } |
|
| 50 | - return true; |
|
| 51 | - } |
|
| 47 | + } elseif ($instances instanceof IHook) { |
|
| 48 | + $this->hookInstances[] = $instances; |
|
| 49 | + } |
|
| 50 | + return true; |
|
| 51 | + } |
|
| 52 | 52 | |
| 53 | - public function fireHooks() { |
|
| 54 | - foreach ($this->hookInstances as $instance) { |
|
| 55 | - /** |
|
| 56 | - * Fire off the add hooks method of each instance stored in cache |
|
| 57 | - * |
|
| 58 | - * @var $instance IHook |
|
| 59 | - */ |
|
| 60 | - $instance->addHooks(); |
|
| 61 | - } |
|
| 53 | + public function fireHooks() { |
|
| 54 | + foreach ($this->hookInstances as $instance) { |
|
| 55 | + /** |
|
| 56 | + * Fire off the add hooks method of each instance stored in cache |
|
| 57 | + * |
|
| 58 | + * @var $instance IHook |
|
| 59 | + */ |
|
| 60 | + $instance->addHooks(); |
|
| 61 | + } |
|
| 62 | 62 | |
| 63 | - } |
|
| 63 | + } |
|
| 64 | 64 | |
| 65 | 65 | } |
@@ -26,36 +26,36 @@ |
||
| 26 | 26 | |
| 27 | 27 | (new Application())->registerRoutes($this, array('routes' => array( |
| 28 | 28 | |
| 29 | - [ |
|
| 30 | - 'name' => 'Recovery#adminRecovery', |
|
| 31 | - 'url' => '/ajax/adminRecovery', |
|
| 32 | - 'verb' => 'POST' |
|
| 33 | - ], |
|
| 34 | - [ |
|
| 35 | - 'name' => 'Settings#updatePrivateKeyPassword', |
|
| 36 | - 'url' => '/ajax/updatePrivateKeyPassword', |
|
| 37 | - 'verb' => 'POST' |
|
| 38 | - ], |
|
| 39 | - [ |
|
| 40 | - 'name' => 'Settings#setEncryptHomeStorage', |
|
| 41 | - 'url' => '/ajax/setEncryptHomeStorage', |
|
| 42 | - 'verb' => 'POST' |
|
| 43 | - ], |
|
| 44 | - [ |
|
| 45 | - 'name' => 'Recovery#changeRecoveryPassword', |
|
| 46 | - 'url' => '/ajax/changeRecoveryPassword', |
|
| 47 | - 'verb' => 'POST' |
|
| 48 | - ], |
|
| 49 | - [ |
|
| 50 | - 'name' => 'Recovery#userSetRecovery', |
|
| 51 | - 'url' => '/ajax/userSetRecovery', |
|
| 52 | - 'verb' => 'POST' |
|
| 53 | - ], |
|
| 54 | - [ |
|
| 55 | - 'name' => 'Status#getStatus', |
|
| 56 | - 'url' => '/ajax/getStatus', |
|
| 57 | - 'verb' => 'GET' |
|
| 58 | - ] |
|
| 29 | + [ |
|
| 30 | + 'name' => 'Recovery#adminRecovery', |
|
| 31 | + 'url' => '/ajax/adminRecovery', |
|
| 32 | + 'verb' => 'POST' |
|
| 33 | + ], |
|
| 34 | + [ |
|
| 35 | + 'name' => 'Settings#updatePrivateKeyPassword', |
|
| 36 | + 'url' => '/ajax/updatePrivateKeyPassword', |
|
| 37 | + 'verb' => 'POST' |
|
| 38 | + ], |
|
| 39 | + [ |
|
| 40 | + 'name' => 'Settings#setEncryptHomeStorage', |
|
| 41 | + 'url' => '/ajax/setEncryptHomeStorage', |
|
| 42 | + 'verb' => 'POST' |
|
| 43 | + ], |
|
| 44 | + [ |
|
| 45 | + 'name' => 'Recovery#changeRecoveryPassword', |
|
| 46 | + 'url' => '/ajax/changeRecoveryPassword', |
|
| 47 | + 'verb' => 'POST' |
|
| 48 | + ], |
|
| 49 | + [ |
|
| 50 | + 'name' => 'Recovery#userSetRecovery', |
|
| 51 | + 'url' => '/ajax/userSetRecovery', |
|
| 52 | + 'verb' => 'POST' |
|
| 53 | + ], |
|
| 54 | + [ |
|
| 55 | + 'name' => 'Status#getStatus', |
|
| 56 | + 'url' => '/ajax/getStatus', |
|
| 57 | + 'verb' => 'GET' |
|
| 58 | + ] |
|
| 59 | 59 | |
| 60 | 60 | |
| 61 | 61 | ))); |
@@ -29,7 +29,7 @@ |
||
| 29 | 29 | |
| 30 | 30 | $app = new Application([], $encryptionSystemReady); |
| 31 | 31 | if ($encryptionSystemReady) { |
| 32 | - $app->registerEncryptionModule(); |
|
| 33 | - $app->registerHooks(); |
|
| 34 | - $app->registerSettings(); |
|
| 32 | + $app->registerEncryptionModule(); |
|
| 33 | + $app->registerHooks(); |
|
| 34 | + $app->registerSettings(); |
|
| 35 | 35 | } |
@@ -27,26 +27,26 @@ discard block |
||
| 27 | 27 | |
| 28 | 28 | $template = new OCP\Template('encryption', 'settings-personal'); |
| 29 | 29 | $crypt = new \OCA\Encryption\Crypto\Crypt( |
| 30 | - \OC::$server->getLogger(), |
|
| 31 | - $userSession, |
|
| 32 | - \OC::$server->getConfig(), |
|
| 33 | - \OC::$server->getL10N('encryption')); |
|
| 30 | + \OC::$server->getLogger(), |
|
| 31 | + $userSession, |
|
| 32 | + \OC::$server->getConfig(), |
|
| 33 | + \OC::$server->getL10N('encryption')); |
|
| 34 | 34 | |
| 35 | 35 | $util = new \OCA\Encryption\Util( |
| 36 | - new \OC\Files\View(), |
|
| 37 | - $crypt, |
|
| 38 | - \OC::$server->getLogger(), |
|
| 39 | - $userSession, |
|
| 40 | - \OC::$server->getConfig(), |
|
| 41 | - \OC::$server->getUserManager()); |
|
| 36 | + new \OC\Files\View(), |
|
| 37 | + $crypt, |
|
| 38 | + \OC::$server->getLogger(), |
|
| 39 | + $userSession, |
|
| 40 | + \OC::$server->getConfig(), |
|
| 41 | + \OC::$server->getUserManager()); |
|
| 42 | 42 | |
| 43 | 43 | $keyManager = new \OCA\Encryption\KeyManager( |
| 44 | - \OC::$server->getEncryptionKeyStorage(), |
|
| 45 | - $crypt, |
|
| 46 | - \OC::$server->getConfig(), |
|
| 47 | - $userSession, |
|
| 48 | - $session, |
|
| 49 | - \OC::$server->getLogger(), $util); |
|
| 44 | + \OC::$server->getEncryptionKeyStorage(), |
|
| 45 | + $crypt, |
|
| 46 | + \OC::$server->getConfig(), |
|
| 47 | + $userSession, |
|
| 48 | + $session, |
|
| 49 | + \OC::$server->getLogger(), $util); |
|
| 50 | 50 | |
| 51 | 51 | $user = $userSession->getUser()->getUID(); |
| 52 | 52 | |
@@ -64,12 +64,12 @@ discard block |
||
| 64 | 64 | $result = false; |
| 65 | 65 | |
| 66 | 66 | if ($recoveryAdminEnabled || !$privateKeySet) { |
| 67 | - $template->assign('recoveryEnabled', $recoveryAdminEnabled); |
|
| 68 | - $template->assign('recoveryEnabledForUser', $recoveryEnabledForUser); |
|
| 69 | - $template->assign('privateKeySet', $privateKeySet); |
|
| 70 | - $template->assign('initialized', $initialized); |
|
| 67 | + $template->assign('recoveryEnabled', $recoveryAdminEnabled); |
|
| 68 | + $template->assign('recoveryEnabledForUser', $recoveryEnabledForUser); |
|
| 69 | + $template->assign('privateKeySet', $privateKeySet); |
|
| 70 | + $template->assign('initialized', $initialized); |
|
| 71 | 71 | |
| 72 | - $result = $template->fetchPage(); |
|
| 72 | + $result = $template->fetchPage(); |
|
| 73 | 73 | } |
| 74 | 74 | |
| 75 | 75 | return $result; |
@@ -34,209 +34,209 @@ |
||
| 34 | 34 | |
| 35 | 35 | class Provider implements IProvider { |
| 36 | 36 | |
| 37 | - /** @var IFactory */ |
|
| 38 | - protected $languageFactory; |
|
| 39 | - |
|
| 40 | - /** @var IL10N */ |
|
| 41 | - protected $l; |
|
| 42 | - |
|
| 43 | - /** @var IURLGenerator */ |
|
| 44 | - protected $url; |
|
| 45 | - |
|
| 46 | - /** @var ICommentsManager */ |
|
| 47 | - protected $commentsManager; |
|
| 48 | - |
|
| 49 | - /** @var IUserManager */ |
|
| 50 | - protected $userManager; |
|
| 51 | - |
|
| 52 | - /** @var IManager */ |
|
| 53 | - protected $activityManager; |
|
| 54 | - |
|
| 55 | - /** @var string[] */ |
|
| 56 | - protected $displayNames = []; |
|
| 57 | - |
|
| 58 | - /** |
|
| 59 | - * @param IFactory $languageFactory |
|
| 60 | - * @param IURLGenerator $url |
|
| 61 | - * @param ICommentsManager $commentsManager |
|
| 62 | - * @param IUserManager $userManager |
|
| 63 | - * @param IManager $activityManager |
|
| 64 | - */ |
|
| 65 | - public function __construct(IFactory $languageFactory, IURLGenerator $url, ICommentsManager $commentsManager, IUserManager $userManager, IManager $activityManager) { |
|
| 66 | - $this->languageFactory = $languageFactory; |
|
| 67 | - $this->url = $url; |
|
| 68 | - $this->commentsManager = $commentsManager; |
|
| 69 | - $this->userManager = $userManager; |
|
| 70 | - $this->activityManager = $activityManager; |
|
| 71 | - } |
|
| 72 | - |
|
| 73 | - /** |
|
| 74 | - * @param string $language |
|
| 75 | - * @param IEvent $event |
|
| 76 | - * @param IEvent|null $previousEvent |
|
| 77 | - * @return IEvent |
|
| 78 | - * @throws \InvalidArgumentException |
|
| 79 | - * @since 11.0.0 |
|
| 80 | - */ |
|
| 81 | - public function parse($language, IEvent $event, IEvent $previousEvent = null) { |
|
| 82 | - if ($event->getApp() !== 'comments') { |
|
| 83 | - throw new \InvalidArgumentException(); |
|
| 84 | - } |
|
| 85 | - |
|
| 86 | - $this->l = $this->languageFactory->get('comments', $language); |
|
| 87 | - |
|
| 88 | - if ($event->getSubject() === 'add_comment_subject') { |
|
| 89 | - $this->parseMessage($event); |
|
| 90 | - $event->setIcon($this->url->getAbsoluteURL($this->url->imagePath('core', 'actions/comment.svg'))); |
|
| 91 | - |
|
| 92 | - if ($this->activityManager->isFormattingFilteredObject()) { |
|
| 93 | - try { |
|
| 94 | - return $this->parseShortVersion($event); |
|
| 95 | - } catch (\InvalidArgumentException $e) { |
|
| 96 | - // Ignore and simply use the long version... |
|
| 97 | - } |
|
| 98 | - } |
|
| 99 | - |
|
| 100 | - return $this->parseLongVersion($event); |
|
| 101 | - } else { |
|
| 102 | - throw new \InvalidArgumentException(); |
|
| 103 | - } |
|
| 104 | - } |
|
| 105 | - |
|
| 106 | - /** |
|
| 107 | - * @param IEvent $event |
|
| 108 | - * @return IEvent |
|
| 109 | - * @throws \InvalidArgumentException |
|
| 110 | - */ |
|
| 111 | - protected function parseShortVersion(IEvent $event) { |
|
| 112 | - $subjectParameters = $event->getSubjectParameters(); |
|
| 113 | - |
|
| 114 | - if ($event->getSubject() === 'add_comment_subject') { |
|
| 115 | - if ($subjectParameters[0] === $this->activityManager->getCurrentUserId()) { |
|
| 116 | - $event->setParsedSubject($this->l->t('You commented')) |
|
| 117 | - ->setRichSubject($this->l->t('You commented'), []); |
|
| 118 | - } else { |
|
| 119 | - $author = $this->generateUserParameter($subjectParameters[0]); |
|
| 120 | - $event->setParsedSubject($this->l->t('%1$s commented', [$author['name']])) |
|
| 121 | - ->setRichSubject($this->l->t('{author} commented'), [ |
|
| 122 | - 'author' => $author, |
|
| 123 | - ]); |
|
| 124 | - } |
|
| 125 | - } else { |
|
| 126 | - throw new \InvalidArgumentException(); |
|
| 127 | - } |
|
| 128 | - |
|
| 129 | - return $event; |
|
| 130 | - } |
|
| 131 | - |
|
| 132 | - /** |
|
| 133 | - * @param IEvent $event |
|
| 134 | - * @return IEvent |
|
| 135 | - * @throws \InvalidArgumentException |
|
| 136 | - */ |
|
| 137 | - protected function parseLongVersion(IEvent $event) { |
|
| 138 | - $subjectParameters = $event->getSubjectParameters(); |
|
| 139 | - |
|
| 140 | - if ($event->getSubject() === 'add_comment_subject') { |
|
| 141 | - if ($subjectParameters[0] === $this->activityManager->getCurrentUserId()) { |
|
| 142 | - $event->setParsedSubject($this->l->t('You commented on %1$s', [ |
|
| 143 | - trim($subjectParameters[1], '/'), |
|
| 144 | - ])) |
|
| 145 | - ->setRichSubject($this->l->t('You commented on {file}'), [ |
|
| 146 | - 'file' => $this->generateFileParameter($event->getObjectId(), $subjectParameters[1]), |
|
| 147 | - ]); |
|
| 148 | - } else { |
|
| 149 | - $author = $this->generateUserParameter($subjectParameters[0]); |
|
| 150 | - $event->setParsedSubject($this->l->t('%1$s commented on %2$s', [ |
|
| 151 | - $author['name'], |
|
| 152 | - trim($subjectParameters[1], '/'), |
|
| 153 | - ])) |
|
| 154 | - ->setRichSubject($this->l->t('{author} commented on {file}'), [ |
|
| 155 | - 'author' => $author, |
|
| 156 | - 'file' => $this->generateFileParameter($event->getObjectId(), $subjectParameters[1]), |
|
| 157 | - ]); |
|
| 158 | - } |
|
| 159 | - } else { |
|
| 160 | - throw new \InvalidArgumentException(); |
|
| 161 | - } |
|
| 162 | - |
|
| 163 | - return $event; |
|
| 164 | - } |
|
| 165 | - |
|
| 166 | - /** |
|
| 167 | - * @param IEvent $event |
|
| 168 | - */ |
|
| 169 | - protected function parseMessage(IEvent $event) { |
|
| 170 | - $messageParameters = $event->getMessageParameters(); |
|
| 171 | - try { |
|
| 172 | - $comment = $this->commentsManager->get((int) $messageParameters[0]); |
|
| 173 | - $message = $comment->getMessage(); |
|
| 174 | - $message = str_replace("\n", '<br />', str_replace(['<', '>'], ['<', '>'], $message)); |
|
| 175 | - |
|
| 176 | - $mentionCount = 1; |
|
| 177 | - $mentions = []; |
|
| 178 | - foreach ($comment->getMentions() as $mention) { |
|
| 179 | - if ($mention['type'] !== 'user') { |
|
| 180 | - continue; |
|
| 181 | - } |
|
| 182 | - |
|
| 183 | - $message = preg_replace( |
|
| 184 | - '/(^|\s)(' . '@' . $mention['id'] . ')(\b)/', |
|
| 185 | - //'${1}' . $this->regexSafeUser($mention['id'], $displayName) . '${3}', |
|
| 186 | - '${1}' . '{mention' . $mentionCount . '}' . '${3}', |
|
| 187 | - $message |
|
| 188 | - ); |
|
| 189 | - $mentions['mention' . $mentionCount] = $this->generateUserParameter($mention['id']); |
|
| 190 | - $mentionCount++; |
|
| 191 | - } |
|
| 192 | - |
|
| 193 | - $event->setParsedMessage($comment->getMessage()) |
|
| 194 | - ->setRichMessage($message, $mentions); |
|
| 195 | - } catch (NotFoundException $e) { |
|
| 196 | - } |
|
| 197 | - } |
|
| 198 | - |
|
| 199 | - /** |
|
| 200 | - * @param int $id |
|
| 201 | - * @param string $path |
|
| 202 | - * @return array |
|
| 203 | - */ |
|
| 204 | - protected function generateFileParameter($id, $path) { |
|
| 205 | - return [ |
|
| 206 | - 'type' => 'file', |
|
| 207 | - 'id' => $id, |
|
| 208 | - 'name' => basename($path), |
|
| 209 | - 'path' => trim($path, '/'), |
|
| 210 | - 'link' => $this->url->linkToRouteAbsolute('files.viewcontroller.showFile', ['fileid' => $id]), |
|
| 211 | - ]; |
|
| 212 | - } |
|
| 213 | - |
|
| 214 | - /** |
|
| 215 | - * @param string $uid |
|
| 216 | - * @return array |
|
| 217 | - */ |
|
| 218 | - protected function generateUserParameter($uid) { |
|
| 219 | - if (!isset($this->displayNames[$uid])) { |
|
| 220 | - $this->displayNames[$uid] = $this->getDisplayName($uid); |
|
| 221 | - } |
|
| 222 | - |
|
| 223 | - return [ |
|
| 224 | - 'type' => 'user', |
|
| 225 | - 'id' => $uid, |
|
| 226 | - 'name' => $this->displayNames[$uid], |
|
| 227 | - ]; |
|
| 228 | - } |
|
| 229 | - |
|
| 230 | - /** |
|
| 231 | - * @param string $uid |
|
| 232 | - * @return string |
|
| 233 | - */ |
|
| 234 | - protected function getDisplayName($uid) { |
|
| 235 | - $user = $this->userManager->get($uid); |
|
| 236 | - if ($user instanceof IUser) { |
|
| 237 | - return $user->getDisplayName(); |
|
| 238 | - } else { |
|
| 239 | - return $uid; |
|
| 240 | - } |
|
| 241 | - } |
|
| 37 | + /** @var IFactory */ |
|
| 38 | + protected $languageFactory; |
|
| 39 | + |
|
| 40 | + /** @var IL10N */ |
|
| 41 | + protected $l; |
|
| 42 | + |
|
| 43 | + /** @var IURLGenerator */ |
|
| 44 | + protected $url; |
|
| 45 | + |
|
| 46 | + /** @var ICommentsManager */ |
|
| 47 | + protected $commentsManager; |
|
| 48 | + |
|
| 49 | + /** @var IUserManager */ |
|
| 50 | + protected $userManager; |
|
| 51 | + |
|
| 52 | + /** @var IManager */ |
|
| 53 | + protected $activityManager; |
|
| 54 | + |
|
| 55 | + /** @var string[] */ |
|
| 56 | + protected $displayNames = []; |
|
| 57 | + |
|
| 58 | + /** |
|
| 59 | + * @param IFactory $languageFactory |
|
| 60 | + * @param IURLGenerator $url |
|
| 61 | + * @param ICommentsManager $commentsManager |
|
| 62 | + * @param IUserManager $userManager |
|
| 63 | + * @param IManager $activityManager |
|
| 64 | + */ |
|
| 65 | + public function __construct(IFactory $languageFactory, IURLGenerator $url, ICommentsManager $commentsManager, IUserManager $userManager, IManager $activityManager) { |
|
| 66 | + $this->languageFactory = $languageFactory; |
|
| 67 | + $this->url = $url; |
|
| 68 | + $this->commentsManager = $commentsManager; |
|
| 69 | + $this->userManager = $userManager; |
|
| 70 | + $this->activityManager = $activityManager; |
|
| 71 | + } |
|
| 72 | + |
|
| 73 | + /** |
|
| 74 | + * @param string $language |
|
| 75 | + * @param IEvent $event |
|
| 76 | + * @param IEvent|null $previousEvent |
|
| 77 | + * @return IEvent |
|
| 78 | + * @throws \InvalidArgumentException |
|
| 79 | + * @since 11.0.0 |
|
| 80 | + */ |
|
| 81 | + public function parse($language, IEvent $event, IEvent $previousEvent = null) { |
|
| 82 | + if ($event->getApp() !== 'comments') { |
|
| 83 | + throw new \InvalidArgumentException(); |
|
| 84 | + } |
|
| 85 | + |
|
| 86 | + $this->l = $this->languageFactory->get('comments', $language); |
|
| 87 | + |
|
| 88 | + if ($event->getSubject() === 'add_comment_subject') { |
|
| 89 | + $this->parseMessage($event); |
|
| 90 | + $event->setIcon($this->url->getAbsoluteURL($this->url->imagePath('core', 'actions/comment.svg'))); |
|
| 91 | + |
|
| 92 | + if ($this->activityManager->isFormattingFilteredObject()) { |
|
| 93 | + try { |
|
| 94 | + return $this->parseShortVersion($event); |
|
| 95 | + } catch (\InvalidArgumentException $e) { |
|
| 96 | + // Ignore and simply use the long version... |
|
| 97 | + } |
|
| 98 | + } |
|
| 99 | + |
|
| 100 | + return $this->parseLongVersion($event); |
|
| 101 | + } else { |
|
| 102 | + throw new \InvalidArgumentException(); |
|
| 103 | + } |
|
| 104 | + } |
|
| 105 | + |
|
| 106 | + /** |
|
| 107 | + * @param IEvent $event |
|
| 108 | + * @return IEvent |
|
| 109 | + * @throws \InvalidArgumentException |
|
| 110 | + */ |
|
| 111 | + protected function parseShortVersion(IEvent $event) { |
|
| 112 | + $subjectParameters = $event->getSubjectParameters(); |
|
| 113 | + |
|
| 114 | + if ($event->getSubject() === 'add_comment_subject') { |
|
| 115 | + if ($subjectParameters[0] === $this->activityManager->getCurrentUserId()) { |
|
| 116 | + $event->setParsedSubject($this->l->t('You commented')) |
|
| 117 | + ->setRichSubject($this->l->t('You commented'), []); |
|
| 118 | + } else { |
|
| 119 | + $author = $this->generateUserParameter($subjectParameters[0]); |
|
| 120 | + $event->setParsedSubject($this->l->t('%1$s commented', [$author['name']])) |
|
| 121 | + ->setRichSubject($this->l->t('{author} commented'), [ |
|
| 122 | + 'author' => $author, |
|
| 123 | + ]); |
|
| 124 | + } |
|
| 125 | + } else { |
|
| 126 | + throw new \InvalidArgumentException(); |
|
| 127 | + } |
|
| 128 | + |
|
| 129 | + return $event; |
|
| 130 | + } |
|
| 131 | + |
|
| 132 | + /** |
|
| 133 | + * @param IEvent $event |
|
| 134 | + * @return IEvent |
|
| 135 | + * @throws \InvalidArgumentException |
|
| 136 | + */ |
|
| 137 | + protected function parseLongVersion(IEvent $event) { |
|
| 138 | + $subjectParameters = $event->getSubjectParameters(); |
|
| 139 | + |
|
| 140 | + if ($event->getSubject() === 'add_comment_subject') { |
|
| 141 | + if ($subjectParameters[0] === $this->activityManager->getCurrentUserId()) { |
|
| 142 | + $event->setParsedSubject($this->l->t('You commented on %1$s', [ |
|
| 143 | + trim($subjectParameters[1], '/'), |
|
| 144 | + ])) |
|
| 145 | + ->setRichSubject($this->l->t('You commented on {file}'), [ |
|
| 146 | + 'file' => $this->generateFileParameter($event->getObjectId(), $subjectParameters[1]), |
|
| 147 | + ]); |
|
| 148 | + } else { |
|
| 149 | + $author = $this->generateUserParameter($subjectParameters[0]); |
|
| 150 | + $event->setParsedSubject($this->l->t('%1$s commented on %2$s', [ |
|
| 151 | + $author['name'], |
|
| 152 | + trim($subjectParameters[1], '/'), |
|
| 153 | + ])) |
|
| 154 | + ->setRichSubject($this->l->t('{author} commented on {file}'), [ |
|
| 155 | + 'author' => $author, |
|
| 156 | + 'file' => $this->generateFileParameter($event->getObjectId(), $subjectParameters[1]), |
|
| 157 | + ]); |
|
| 158 | + } |
|
| 159 | + } else { |
|
| 160 | + throw new \InvalidArgumentException(); |
|
| 161 | + } |
|
| 162 | + |
|
| 163 | + return $event; |
|
| 164 | + } |
|
| 165 | + |
|
| 166 | + /** |
|
| 167 | + * @param IEvent $event |
|
| 168 | + */ |
|
| 169 | + protected function parseMessage(IEvent $event) { |
|
| 170 | + $messageParameters = $event->getMessageParameters(); |
|
| 171 | + try { |
|
| 172 | + $comment = $this->commentsManager->get((int) $messageParameters[0]); |
|
| 173 | + $message = $comment->getMessage(); |
|
| 174 | + $message = str_replace("\n", '<br />', str_replace(['<', '>'], ['<', '>'], $message)); |
|
| 175 | + |
|
| 176 | + $mentionCount = 1; |
|
| 177 | + $mentions = []; |
|
| 178 | + foreach ($comment->getMentions() as $mention) { |
|
| 179 | + if ($mention['type'] !== 'user') { |
|
| 180 | + continue; |
|
| 181 | + } |
|
| 182 | + |
|
| 183 | + $message = preg_replace( |
|
| 184 | + '/(^|\s)(' . '@' . $mention['id'] . ')(\b)/', |
|
| 185 | + //'${1}' . $this->regexSafeUser($mention['id'], $displayName) . '${3}', |
|
| 186 | + '${1}' . '{mention' . $mentionCount . '}' . '${3}', |
|
| 187 | + $message |
|
| 188 | + ); |
|
| 189 | + $mentions['mention' . $mentionCount] = $this->generateUserParameter($mention['id']); |
|
| 190 | + $mentionCount++; |
|
| 191 | + } |
|
| 192 | + |
|
| 193 | + $event->setParsedMessage($comment->getMessage()) |
|
| 194 | + ->setRichMessage($message, $mentions); |
|
| 195 | + } catch (NotFoundException $e) { |
|
| 196 | + } |
|
| 197 | + } |
|
| 198 | + |
|
| 199 | + /** |
|
| 200 | + * @param int $id |
|
| 201 | + * @param string $path |
|
| 202 | + * @return array |
|
| 203 | + */ |
|
| 204 | + protected function generateFileParameter($id, $path) { |
|
| 205 | + return [ |
|
| 206 | + 'type' => 'file', |
|
| 207 | + 'id' => $id, |
|
| 208 | + 'name' => basename($path), |
|
| 209 | + 'path' => trim($path, '/'), |
|
| 210 | + 'link' => $this->url->linkToRouteAbsolute('files.viewcontroller.showFile', ['fileid' => $id]), |
|
| 211 | + ]; |
|
| 212 | + } |
|
| 213 | + |
|
| 214 | + /** |
|
| 215 | + * @param string $uid |
|
| 216 | + * @return array |
|
| 217 | + */ |
|
| 218 | + protected function generateUserParameter($uid) { |
|
| 219 | + if (!isset($this->displayNames[$uid])) { |
|
| 220 | + $this->displayNames[$uid] = $this->getDisplayName($uid); |
|
| 221 | + } |
|
| 222 | + |
|
| 223 | + return [ |
|
| 224 | + 'type' => 'user', |
|
| 225 | + 'id' => $uid, |
|
| 226 | + 'name' => $this->displayNames[$uid], |
|
| 227 | + ]; |
|
| 228 | + } |
|
| 229 | + |
|
| 230 | + /** |
|
| 231 | + * @param string $uid |
|
| 232 | + * @return string |
|
| 233 | + */ |
|
| 234 | + protected function getDisplayName($uid) { |
|
| 235 | + $user = $this->userManager->get($uid); |
|
| 236 | + if ($user instanceof IUser) { |
|
| 237 | + return $user->getDisplayName(); |
|
| 238 | + } else { |
|
| 239 | + return $uid; |
|
| 240 | + } |
|
| 241 | + } |
|
| 242 | 242 | } |
@@ -27,72 +27,72 @@ |
||
| 27 | 27 | |
| 28 | 28 | class Setting implements ISetting { |
| 29 | 29 | |
| 30 | - /** @var IL10N */ |
|
| 31 | - protected $l; |
|
| 30 | + /** @var IL10N */ |
|
| 31 | + protected $l; |
|
| 32 | 32 | |
| 33 | - /** |
|
| 34 | - * @param IL10N $l |
|
| 35 | - */ |
|
| 36 | - public function __construct(IL10N $l) { |
|
| 37 | - $this->l = $l; |
|
| 38 | - } |
|
| 33 | + /** |
|
| 34 | + * @param IL10N $l |
|
| 35 | + */ |
|
| 36 | + public function __construct(IL10N $l) { |
|
| 37 | + $this->l = $l; |
|
| 38 | + } |
|
| 39 | 39 | |
| 40 | - /** |
|
| 41 | - * @return string Lowercase a-z and underscore only identifier |
|
| 42 | - * @since 11.0.0 |
|
| 43 | - */ |
|
| 44 | - public function getIdentifier() { |
|
| 45 | - return 'comments'; |
|
| 46 | - } |
|
| 40 | + /** |
|
| 41 | + * @return string Lowercase a-z and underscore only identifier |
|
| 42 | + * @since 11.0.0 |
|
| 43 | + */ |
|
| 44 | + public function getIdentifier() { |
|
| 45 | + return 'comments'; |
|
| 46 | + } |
|
| 47 | 47 | |
| 48 | - /** |
|
| 49 | - * @return string A translated string |
|
| 50 | - * @since 11.0.0 |
|
| 51 | - */ |
|
| 52 | - public function getName() { |
|
| 53 | - return $this->l->t('<strong>Comments</strong> for files'); |
|
| 54 | - } |
|
| 48 | + /** |
|
| 49 | + * @return string A translated string |
|
| 50 | + * @since 11.0.0 |
|
| 51 | + */ |
|
| 52 | + public function getName() { |
|
| 53 | + return $this->l->t('<strong>Comments</strong> for files'); |
|
| 54 | + } |
|
| 55 | 55 | |
| 56 | - /** |
|
| 57 | - * @return int whether the filter should be rather on the top or bottom of |
|
| 58 | - * the admin section. The filters are arranged in ascending order of the |
|
| 59 | - * priority values. It is required to return a value between 0 and 100. |
|
| 60 | - * @since 11.0.0 |
|
| 61 | - */ |
|
| 62 | - public function getPriority() { |
|
| 63 | - return 50; |
|
| 64 | - } |
|
| 56 | + /** |
|
| 57 | + * @return int whether the filter should be rather on the top or bottom of |
|
| 58 | + * the admin section. The filters are arranged in ascending order of the |
|
| 59 | + * priority values. It is required to return a value between 0 and 100. |
|
| 60 | + * @since 11.0.0 |
|
| 61 | + */ |
|
| 62 | + public function getPriority() { |
|
| 63 | + return 50; |
|
| 64 | + } |
|
| 65 | 65 | |
| 66 | - /** |
|
| 67 | - * @return bool True when the option can be changed for the stream |
|
| 68 | - * @since 11.0.0 |
|
| 69 | - */ |
|
| 70 | - public function canChangeStream() { |
|
| 71 | - return true; |
|
| 72 | - } |
|
| 66 | + /** |
|
| 67 | + * @return bool True when the option can be changed for the stream |
|
| 68 | + * @since 11.0.0 |
|
| 69 | + */ |
|
| 70 | + public function canChangeStream() { |
|
| 71 | + return true; |
|
| 72 | + } |
|
| 73 | 73 | |
| 74 | - /** |
|
| 75 | - * @return bool True when the option can be changed for the stream |
|
| 76 | - * @since 11.0.0 |
|
| 77 | - */ |
|
| 78 | - public function isDefaultEnabledStream() { |
|
| 79 | - return true; |
|
| 80 | - } |
|
| 74 | + /** |
|
| 75 | + * @return bool True when the option can be changed for the stream |
|
| 76 | + * @since 11.0.0 |
|
| 77 | + */ |
|
| 78 | + public function isDefaultEnabledStream() { |
|
| 79 | + return true; |
|
| 80 | + } |
|
| 81 | 81 | |
| 82 | - /** |
|
| 83 | - * @return bool True when the option can be changed for the mail |
|
| 84 | - * @since 11.0.0 |
|
| 85 | - */ |
|
| 86 | - public function canChangeMail() { |
|
| 87 | - return true; |
|
| 88 | - } |
|
| 82 | + /** |
|
| 83 | + * @return bool True when the option can be changed for the mail |
|
| 84 | + * @since 11.0.0 |
|
| 85 | + */ |
|
| 86 | + public function canChangeMail() { |
|
| 87 | + return true; |
|
| 88 | + } |
|
| 89 | 89 | |
| 90 | - /** |
|
| 91 | - * @return bool True when the option can be changed for the stream |
|
| 92 | - * @since 11.0.0 |
|
| 93 | - */ |
|
| 94 | - public function isDefaultEnabledMail() { |
|
| 95 | - return false; |
|
| 96 | - } |
|
| 90 | + /** |
|
| 91 | + * @return bool True when the option can be changed for the stream |
|
| 92 | + * @since 11.0.0 |
|
| 93 | + */ |
|
| 94 | + public function isDefaultEnabledMail() { |
|
| 95 | + return false; |
|
| 96 | + } |
|
| 97 | 97 | } |
| 98 | 98 | |
@@ -33,97 +33,97 @@ |
||
| 33 | 33 | use OCP\Share; |
| 34 | 34 | |
| 35 | 35 | class Listener { |
| 36 | - /** @var IManager */ |
|
| 37 | - protected $activityManager; |
|
| 38 | - /** @var IUserSession */ |
|
| 39 | - protected $session; |
|
| 40 | - /** @var \OCP\App\IAppManager */ |
|
| 41 | - protected $appManager; |
|
| 42 | - /** @var \OCP\Files\Config\IMountProviderCollection */ |
|
| 43 | - protected $mountCollection; |
|
| 44 | - /** @var \OCP\Files\IRootFolder */ |
|
| 45 | - protected $rootFolder; |
|
| 36 | + /** @var IManager */ |
|
| 37 | + protected $activityManager; |
|
| 38 | + /** @var IUserSession */ |
|
| 39 | + protected $session; |
|
| 40 | + /** @var \OCP\App\IAppManager */ |
|
| 41 | + protected $appManager; |
|
| 42 | + /** @var \OCP\Files\Config\IMountProviderCollection */ |
|
| 43 | + protected $mountCollection; |
|
| 44 | + /** @var \OCP\Files\IRootFolder */ |
|
| 45 | + protected $rootFolder; |
|
| 46 | 46 | |
| 47 | - /** |
|
| 48 | - * Listener constructor. |
|
| 49 | - * |
|
| 50 | - * @param IManager $activityManager |
|
| 51 | - * @param IUserSession $session |
|
| 52 | - * @param IAppManager $appManager |
|
| 53 | - * @param IMountProviderCollection $mountCollection |
|
| 54 | - * @param IRootFolder $rootFolder |
|
| 55 | - */ |
|
| 56 | - public function __construct(IManager $activityManager, |
|
| 57 | - IUserSession $session, |
|
| 58 | - IAppManager $appManager, |
|
| 59 | - IMountProviderCollection $mountCollection, |
|
| 60 | - IRootFolder $rootFolder) { |
|
| 61 | - $this->activityManager = $activityManager; |
|
| 62 | - $this->session = $session; |
|
| 63 | - $this->appManager = $appManager; |
|
| 64 | - $this->mountCollection = $mountCollection; |
|
| 65 | - $this->rootFolder = $rootFolder; |
|
| 66 | - } |
|
| 47 | + /** |
|
| 48 | + * Listener constructor. |
|
| 49 | + * |
|
| 50 | + * @param IManager $activityManager |
|
| 51 | + * @param IUserSession $session |
|
| 52 | + * @param IAppManager $appManager |
|
| 53 | + * @param IMountProviderCollection $mountCollection |
|
| 54 | + * @param IRootFolder $rootFolder |
|
| 55 | + */ |
|
| 56 | + public function __construct(IManager $activityManager, |
|
| 57 | + IUserSession $session, |
|
| 58 | + IAppManager $appManager, |
|
| 59 | + IMountProviderCollection $mountCollection, |
|
| 60 | + IRootFolder $rootFolder) { |
|
| 61 | + $this->activityManager = $activityManager; |
|
| 62 | + $this->session = $session; |
|
| 63 | + $this->appManager = $appManager; |
|
| 64 | + $this->mountCollection = $mountCollection; |
|
| 65 | + $this->rootFolder = $rootFolder; |
|
| 66 | + } |
|
| 67 | 67 | |
| 68 | - /** |
|
| 69 | - * @param CommentsEvent $event |
|
| 70 | - */ |
|
| 71 | - public function commentEvent(CommentsEvent $event) { |
|
| 72 | - if ($event->getComment()->getObjectType() !== 'files' |
|
| 73 | - || !in_array($event->getEvent(), [CommentsEvent::EVENT_ADD]) |
|
| 74 | - || !$this->appManager->isInstalled('activity')) { |
|
| 75 | - // Comment not for file, not adding a comment or no activity-app enabled (save the energy) |
|
| 76 | - return; |
|
| 77 | - } |
|
| 68 | + /** |
|
| 69 | + * @param CommentsEvent $event |
|
| 70 | + */ |
|
| 71 | + public function commentEvent(CommentsEvent $event) { |
|
| 72 | + if ($event->getComment()->getObjectType() !== 'files' |
|
| 73 | + || !in_array($event->getEvent(), [CommentsEvent::EVENT_ADD]) |
|
| 74 | + || !$this->appManager->isInstalled('activity')) { |
|
| 75 | + // Comment not for file, not adding a comment or no activity-app enabled (save the energy) |
|
| 76 | + return; |
|
| 77 | + } |
|
| 78 | 78 | |
| 79 | - // Get all mount point owners |
|
| 80 | - $cache = $this->mountCollection->getMountCache(); |
|
| 81 | - $mounts = $cache->getMountsForFileId($event->getComment()->getObjectId()); |
|
| 82 | - if (empty($mounts)) { |
|
| 83 | - return; |
|
| 84 | - } |
|
| 79 | + // Get all mount point owners |
|
| 80 | + $cache = $this->mountCollection->getMountCache(); |
|
| 81 | + $mounts = $cache->getMountsForFileId($event->getComment()->getObjectId()); |
|
| 82 | + if (empty($mounts)) { |
|
| 83 | + return; |
|
| 84 | + } |
|
| 85 | 85 | |
| 86 | - $users = []; |
|
| 87 | - foreach ($mounts as $mount) { |
|
| 88 | - $owner = $mount->getUser()->getUID(); |
|
| 89 | - $ownerFolder = $this->rootFolder->getUserFolder($owner); |
|
| 90 | - $nodes = $ownerFolder->getById($event->getComment()->getObjectId()); |
|
| 91 | - if (!empty($nodes)) { |
|
| 92 | - /** @var Node $node */ |
|
| 93 | - $node = array_shift($nodes); |
|
| 94 | - $path = $node->getPath(); |
|
| 95 | - if (strpos($path, '/' . $owner . '/files/') === 0) { |
|
| 96 | - $path = substr($path, strlen('/' . $owner . '/files')); |
|
| 97 | - } |
|
| 98 | - // Get all users that have access to the mount point |
|
| 99 | - $users = array_merge($users, Share::getUsersSharingFile($path, $owner, true, true)); |
|
| 100 | - } |
|
| 101 | - } |
|
| 86 | + $users = []; |
|
| 87 | + foreach ($mounts as $mount) { |
|
| 88 | + $owner = $mount->getUser()->getUID(); |
|
| 89 | + $ownerFolder = $this->rootFolder->getUserFolder($owner); |
|
| 90 | + $nodes = $ownerFolder->getById($event->getComment()->getObjectId()); |
|
| 91 | + if (!empty($nodes)) { |
|
| 92 | + /** @var Node $node */ |
|
| 93 | + $node = array_shift($nodes); |
|
| 94 | + $path = $node->getPath(); |
|
| 95 | + if (strpos($path, '/' . $owner . '/files/') === 0) { |
|
| 96 | + $path = substr($path, strlen('/' . $owner . '/files')); |
|
| 97 | + } |
|
| 98 | + // Get all users that have access to the mount point |
|
| 99 | + $users = array_merge($users, Share::getUsersSharingFile($path, $owner, true, true)); |
|
| 100 | + } |
|
| 101 | + } |
|
| 102 | 102 | |
| 103 | - $actor = $this->session->getUser(); |
|
| 104 | - if ($actor instanceof IUser) { |
|
| 105 | - $actor = $actor->getUID(); |
|
| 106 | - } else { |
|
| 107 | - $actor = ''; |
|
| 108 | - } |
|
| 103 | + $actor = $this->session->getUser(); |
|
| 104 | + if ($actor instanceof IUser) { |
|
| 105 | + $actor = $actor->getUID(); |
|
| 106 | + } else { |
|
| 107 | + $actor = ''; |
|
| 108 | + } |
|
| 109 | 109 | |
| 110 | - $activity = $this->activityManager->generateEvent(); |
|
| 111 | - $activity->setApp('comments') |
|
| 112 | - ->setType('comments') |
|
| 113 | - ->setAuthor($actor) |
|
| 114 | - ->setObject($event->getComment()->getObjectType(), (int) $event->getComment()->getObjectId()) |
|
| 115 | - ->setMessage('add_comment_message', [ |
|
| 116 | - $event->getComment()->getId(), |
|
| 117 | - ]); |
|
| 110 | + $activity = $this->activityManager->generateEvent(); |
|
| 111 | + $activity->setApp('comments') |
|
| 112 | + ->setType('comments') |
|
| 113 | + ->setAuthor($actor) |
|
| 114 | + ->setObject($event->getComment()->getObjectType(), (int) $event->getComment()->getObjectId()) |
|
| 115 | + ->setMessage('add_comment_message', [ |
|
| 116 | + $event->getComment()->getId(), |
|
| 117 | + ]); |
|
| 118 | 118 | |
| 119 | - foreach ($users as $user => $path) { |
|
| 120 | - $activity->setAffectedUser($user); |
|
| 119 | + foreach ($users as $user => $path) { |
|
| 120 | + $activity->setAffectedUser($user); |
|
| 121 | 121 | |
| 122 | - $activity->setSubject('add_comment_subject', [ |
|
| 123 | - $actor, |
|
| 124 | - $path, |
|
| 125 | - ]); |
|
| 126 | - $this->activityManager->publish($activity); |
|
| 127 | - } |
|
| 128 | - } |
|
| 122 | + $activity->setSubject('add_comment_subject', [ |
|
| 123 | + $actor, |
|
| 124 | + $path, |
|
| 125 | + ]); |
|
| 126 | + $this->activityManager->publish($activity); |
|
| 127 | + } |
|
| 128 | + } |
|
| 129 | 129 | } |