Support KeyPassHttp protocol.
Allows using passIfox (firefox) and Chromeipass (chrome).
This commit is contained in:
Francois Ferrand
293
src/http/Service.cpp
Normal file
293
src/http/Service.cpp
Normal file
@@ -0,0 +1,293 @@
|
||||
/**
|
||||
***************************************************************************
|
||||
* @file Service.cpp
|
||||
*
|
||||
* @brief
|
||||
*
|
||||
* Copyright (C) 2013
|
||||
*
|
||||
* @author Francois Ferrand
|
||||
* @date 4/2013
|
||||
***************************************************************************
|
||||
*/
|
||||
|
||||
#include "Service.h"
|
||||
#include "Protocol.h"
|
||||
#include "core/Database.h"
|
||||
#include "core/Entry.h"
|
||||
#include "core/Group.h"
|
||||
#include "core/Metadata.h"
|
||||
#include "core/Uuid.h"
|
||||
#include "core/PasswordGenerator.h"
|
||||
#include <QtGui/QInputDialog>
|
||||
#include <QtGui/QMessageBox>
|
||||
#include <QtCore/QDebug>
|
||||
|
||||
Service::Service(DatabaseTabWidget *parent) :
|
||||
KeepassHttpProtocol::Server(parent),
|
||||
m_dbTabWidget(parent)
|
||||
{
|
||||
}
|
||||
|
||||
static const char KEEPASSHTTP_UUID_DATA[] = {
|
||||
0x34, 0x69, 0x7a, 0x40, 0x8a, 0x5b, 0x41, 0xc0,
|
||||
0x9f, 0x36, 0x89, 0x7d, 0x62, 0x3e, 0xcb, 0x31
|
||||
};
|
||||
static const Uuid KEEPASSHTTP_UUID = Uuid(QByteArray::fromRawData(KEEPASSHTTP_UUID_DATA, sizeof(KEEPASSHTTP_UUID_DATA)));
|
||||
static const char KEEPASSHTTP_NAME[] = "KeePassHttp Settings";
|
||||
static const char ASSOCIATE_KEY_PREFIX[] = "AES Key: ";
|
||||
static const char KEEPASSHTTP_GROUP_NAME[] = "KeePassHttp Passwords"; //Group where new KeePassHttp password are stored
|
||||
//private const int DEFAULT_NOTIFICATION_TIME = 5000;
|
||||
|
||||
Entry* Service::getConfigEntry(bool create)
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database()) {
|
||||
Entry* entry = db->resolveEntry(KEEPASSHTTP_UUID);
|
||||
if (!entry && create) {
|
||||
entry = new Entry();
|
||||
entry->setTitle(QLatin1String(KEEPASSHTTP_NAME));
|
||||
entry->setUuid(KEEPASSHTTP_UUID);
|
||||
entry->setAutoTypeEnabled(false);
|
||||
entry->setGroup(db->rootGroup());
|
||||
} else if (entry && entry->group() == db->metadata()->recycleBin()) {
|
||||
if (create)
|
||||
entry->setGroup(db->rootGroup());
|
||||
else
|
||||
entry = NULL;
|
||||
}
|
||||
return entry;
|
||||
}
|
||||
return NULL;
|
||||
}
|
||||
|
||||
bool Service::isDatabaseOpened() const
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
switch(dbWidget->currentMode()) {
|
||||
case DatabaseWidget::None:
|
||||
case DatabaseWidget::LockedMode:
|
||||
break;
|
||||
|
||||
case DatabaseWidget::ViewMode:
|
||||
case DatabaseWidget::EditMode:
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
bool Service::openDatabase()
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (dbWidget->currentMode() == DatabaseWidget::LockedMode) {
|
||||
//- show notification
|
||||
//- open window
|
||||
//- wait a few seconds for user to unlock...
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
QString Service::getDatabaseRootUuid()
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Group * rootGroup = db->rootGroup())
|
||||
return rootGroup->uuid().toHex();
|
||||
return QString();
|
||||
}
|
||||
|
||||
QString Service::getDatabaseRecycleBinUuid()
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Group * recycleBin = db->metadata()->recycleBin())
|
||||
return recycleBin->uuid().toHex();
|
||||
return QString();
|
||||
}
|
||||
|
||||
QString Service::getKey(const QString &id)
|
||||
{
|
||||
if (Entry* config = getConfigEntry())
|
||||
return config->attributes()->value(QLatin1String(ASSOCIATE_KEY_PREFIX) + id);
|
||||
return QString();
|
||||
}
|
||||
|
||||
QString Service::storeKey(const QString &key)
|
||||
{
|
||||
QString id;
|
||||
if (Entry* config = getConfigEntry(true)) {
|
||||
do {
|
||||
bool ok;
|
||||
//Indicate who wants to associate, and request user to enter the 'name' of association key
|
||||
id = QInputDialog::getText(0, tr("KeyPassX/Http: New key association request"),
|
||||
tr("You have received an association request for the above key. If you would like to "
|
||||
"allow it access to your KeePassX database give it a unique name to identify and a"
|
||||
"ccept it."),
|
||||
QLineEdit::Normal, QString(), &ok);
|
||||
if (!ok || id.isEmpty())
|
||||
return QString();
|
||||
//Warn if association key already exists
|
||||
} while(!config->attributes()->value(QLatin1String(ASSOCIATE_KEY_PREFIX) + id).isEmpty() &&
|
||||
QMessageBox(QMessageBox::Warning, tr("KeyPassX/Http: Overwrite existing key?"),
|
||||
tr("A shared encryption-key with the name \"%1\" already exists.\nDo you want to overwrite it?").arg(id),
|
||||
QMessageBox::Yes|QMessageBox::No).exec() == QMessageBox::No);
|
||||
|
||||
config->attributes()->set(QLatin1String(ASSOCIATE_KEY_PREFIX) + id, key, true);
|
||||
}
|
||||
return id;
|
||||
}
|
||||
|
||||
bool Service::matchUrlScheme(const QString & url)
|
||||
{
|
||||
QString str = url.left(8).toLower();
|
||||
return str.startsWith("http://") ||
|
||||
str.startsWith("https://") ||
|
||||
str.startsWith("ftp://") ||
|
||||
str.startsWith("ftps://");
|
||||
}
|
||||
|
||||
bool Service::removeFirstDomain(QString & hostname)
|
||||
{
|
||||
int pos = hostname.indexOf(".");
|
||||
if (pos < 0)
|
||||
return false;
|
||||
hostname = hostname.mid(pos + 1);
|
||||
return !hostname.isEmpty();
|
||||
}
|
||||
|
||||
QList<Entry*> Service::searchEntries(const QString &text)
|
||||
{
|
||||
QList<Entry*> entries;
|
||||
|
||||
//TODO: setting to search all databases [e.g. as long as the 'current' db is authentified
|
||||
|
||||
//Search entries matching the hostname
|
||||
QString hostname = QUrl(text).host();
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Group * rootGroup = db->rootGroup())
|
||||
do {
|
||||
Q_FOREACH (Entry * entry, rootGroup->search(hostname, Qt::CaseInsensitive)) {
|
||||
QString title = entry->title();
|
||||
QString url = entry->url();
|
||||
|
||||
//Filter to match hostname in Title and Url fields
|
||||
if ( hostname.contains(title)
|
||||
|| hostname.contains(url)
|
||||
|| (matchUrlScheme(title) && hostname.contains(QUrl(title).host()))
|
||||
|| (matchUrlScheme(url) && hostname.contains(QUrl(url).host())) )
|
||||
entries.append(entry);
|
||||
}
|
||||
} while(entries.isEmpty() && removeFirstDomain(hostname));
|
||||
return entries;
|
||||
}
|
||||
|
||||
QList<KeepassHttpProtocol::Entry> Service::findMatchingEntries(const QString &id, const QString &url, const QString &submitUrl, const QString &realm)
|
||||
{
|
||||
QList<KeepassHttpProtocol::Entry> result;
|
||||
const QList<Entry*> pwEntries = searchEntries(url);
|
||||
Q_FOREACH (Entry * entry, pwEntries) {
|
||||
//Filter accepted/denied entries
|
||||
// if (c.Allow.Contains(formHost) && (submitHost == null || c.Allow.Contains(submitHost)))
|
||||
// return true;
|
||||
// if (c.Deny.Contains(formHost) || (submitHost != null && c.Deny.Contains(submitHost)))
|
||||
// return false;
|
||||
// if (realm != null && c.Realm != realm)
|
||||
// return false;
|
||||
|
||||
//If we are unsure for some entries:
|
||||
//- balloon to grant accessc if possible
|
||||
//- if clicked, show confirmation dialog --> accept/reject (w/ list of items?)
|
||||
// The website XXX wants to access your credentials
|
||||
// MORE (---> if clicked, shows the list of returned entries)
|
||||
// [x] Ask me again [Allow] [Deny]
|
||||
// If accepted, store that entry can be accessed without confirmation
|
||||
//- else, show only items which do not require validation
|
||||
|
||||
//TODO: sort [--> need a flag], or do this in Server class [--> need an extra 'sort order' key in Entry, and we always compute it]
|
||||
result << KeepassHttpProtocol::Entry(entry->title(), entry->username(), entry->password(), entry->uuid().toHex());
|
||||
}
|
||||
return result;
|
||||
}
|
||||
|
||||
int Service::countMatchingEntries(const QString &id, const QString &url, const QString &submitUrl, const QString &realm)
|
||||
{
|
||||
return searchEntries(url).count();
|
||||
}
|
||||
|
||||
QList<KeepassHttpProtocol::Entry> Service::searchAllEntries(const QString &id)
|
||||
{
|
||||
QList<KeepassHttpProtocol::Entry> result;
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Group * rootGroup = db->rootGroup())
|
||||
Q_FOREACH (Entry * entry, rootGroup->entriesRecursive())
|
||||
result << KeepassHttpProtocol::Entry(entry->title(), entry->username(), QString(), entry->uuid().toHex());
|
||||
return result;
|
||||
}
|
||||
|
||||
Group * Service::findCreateAddEntryGroup()
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Group * rootGroup = db->rootGroup()) {
|
||||
const QString groupName = QLatin1String(KEEPASSHTTP_GROUP_NAME);//TODO: setting to decide where new keys are created
|
||||
|
||||
Q_FOREACH (const Group * g, rootGroup->groupsRecursive(true))
|
||||
if (g->name() == groupName)
|
||||
return db->resolveGroup(g->uuid());
|
||||
|
||||
Group * group;
|
||||
group = new Group();
|
||||
group->setUuid(Uuid::random());
|
||||
group->setName(groupName);
|
||||
group->setIcon(Group::DefaultIconNumber); //TODO: WorldIconNumber
|
||||
group->setParent(rootGroup);
|
||||
return group;
|
||||
}
|
||||
return NULL;
|
||||
}
|
||||
|
||||
void Service::addEntry(const QString &id, const QString &login, const QString &password, const QString &url, const QString &submitUrl, const QString &realm)
|
||||
{
|
||||
if (Group * group = findCreateAddEntryGroup()) {
|
||||
Entry * entry = new Entry();
|
||||
entry->setUuid(Uuid::random());
|
||||
entry->setTitle(QUrl(url).host());
|
||||
entry->setUrl(url);
|
||||
entry->setIcon(Entry::DefaultIconNumber); //TODO: WorldIconNumber
|
||||
entry->setUsername(login);
|
||||
entry->setPassword(password);
|
||||
entry->setGroup(group);
|
||||
}
|
||||
}
|
||||
|
||||
void Service::updateEntry(const QString &id, const QString &uuid, const QString &login, const QString &password, const QString &url)
|
||||
{
|
||||
if (DatabaseWidget * dbWidget = m_dbTabWidget->currentDatabaseWidget())
|
||||
if (Database * db = dbWidget->database())
|
||||
if (Entry * entry = db->resolveEntry(Uuid::fromHex(uuid))) {
|
||||
QString u = entry->username();
|
||||
if (u != login || entry->password() != password) {
|
||||
bool autoAllow = false; //TODO: setting to request confirmation/auto-allow
|
||||
if ( autoAllow
|
||||
|| QMessageBox(QMessageBox::Warning, tr("KeyPassX/Http: Update Entry"),
|
||||
tr("Do you want to update the information in {0} - {1}?").arg(QUrl(url).host()).arg(u),
|
||||
QMessageBox::Yes|QMessageBox::No).exec() == QMessageBox::Yes ) {
|
||||
entry->beginUpdate();
|
||||
entry->setUsername(login);
|
||||
entry->setPassword(password);
|
||||
entry->endUpdate();
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
QString Service::generatePassword()
|
||||
{
|
||||
PasswordGenerator * pwGenerator = passwordGenerator();
|
||||
//TODO: password generator settings
|
||||
return pwGenerator->generatePassword(20,
|
||||
PasswordGenerator::LowerLetters | PasswordGenerator::UpperLetters | PasswordGenerator::Numbers,
|
||||
PasswordGenerator::ExcludeLookAlike | PasswordGenerator::CharFromEveryGroup);
|
||||
}
|
||||
Reference in New Issue
Block a user