-class IdentitiesManager : Object {
+/*
+ * Copyright (c) 2011-2016, JANET(UK)
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of JANET(UK) nor the names of its contributors
+ * may be used to endorse or promote products derived from this software
+ * without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+*/
+using Gee;
- public SList<IdCard> id_card_list;
+public class Password {
+#if GNOME_KEYRING
+ private unowned string _password;
+ public string password {
+ get {
+ return _password;
+ }
+ set {
+ if (_password != null) {
+ GnomeKeyring.memory_free((void *)_password);
+ _password = null;
+ }
+ if (value != null)
+ _password = GnomeKeyring.memory_strdup(value);
+ }
+ }
+#else
+ public string password { get; set; default = null; }
+#endif
- private const string FILE_NAME = "identities.txt";
+ public Password(string in_password) {
+ password = in_password;
+ }
- public IdentitiesManager ()
- {
- var key_file = new KeyFile ();
+ ~Password() {
+ password = null;
+ }
+}
- var path = get_data_dir ();
- var filename = Path.build_filename (path, FILE_NAME);
+public class PasswordHashTable : Object {
+ private HashTable<string, Password> password_table;
- try
- {
- key_file.load_from_file (filename, KeyFileFlags.NONE);
- }
- catch (Error e)
- {
- stdout.printf("Error: %s\n", e.message);
- }
+ private static string ComputeHashKey(IdCard card, IIdentityCardStore store) {
+ return "%s_store_%d".printf( card.display_name, store.get_store_type() );
+ }
- var identities_uris = key_file.get_groups ();
- foreach (string identity in identities_uris)
- {
- try
- {
- IdCard id_card = new IdCard ();
+ public void CachePassword(IdCard card, IIdentityCardStore store) {
+ password_table.replace(ComputeHashKey(card, store), new Password(card.password));
+ }
+
+ public void RemovePassword(IdCard card, IIdentityCardStore store) {
+ password_table.remove(ComputeHashKey(card, store));
+ }
+ public void RetrievePassword(IdCard card, IIdentityCardStore store) {
+ weak Password password = password_table.lookup(ComputeHashKey(card, store));
+ if (password != null) {
+ card.password = password.password;
+ }
+ }
+ public PasswordHashTable() {
+ password_table = new HashTable<string, Password>(GLib.str_hash, GLib.str_equal);
+ }
+}
- id_card.issuer = key_file.get_string (identity, "Issuer");
- id_card.username = key_file.get_string (identity, "Username");
- id_card.password = key_file.get_string (identity, "Password");
- id_card.services = key_file.get_string_list (identity, "Services");
+public class IdentityManagerModel : Object {
+ static MoonshotLogger logger = get_logger("IdentityManagerModel");
- id_card_list.prepend (id_card);
+ private const string FILE_NAME = "identities.txt";
+ private PasswordHashTable password_table;
+ private IIdentityCardStore store;
+ public LinkedList<IdCard> get_card_list() {
+ var identities = store.get_card_list();
+ identities.sort((a, b) => {
+ IdCard id_a = (IdCard )a;
+ IdCard id_b = (IdCard )b;
+ if (id_a.is_no_identity() && !id_b.is_no_identity()) {
+ return -1;
+ } else if (id_b.is_no_identity() && !id_a.is_no_identity()) {
+ return 1;
+ }
+ return strcmp(id_a.display_name, id_b.display_name);
+ });
+ if (identities.is_empty || !identities[0].is_no_identity())
+ identities.insert(0, IdCard.NewNoIdentity());
+ foreach (IdCard id_card in identities) {
+ if (!id_card.store_password) {
+ password_table.RetrievePassword(id_card, store);
}
- catch (Error e)
+ }
+ return identities;
+ }
+ public signal void card_list_changed();
+
+ /* This method finds a valid display name */
+ public bool display_name_is_valid(string name,
+ out string? candidate)
+ {
+ if (&candidate != null)
+ candidate = null;
+ foreach (IdCard id_card in this.store.get_card_list())
+ {
+ if (id_card.display_name == name)
{
- stdout.printf ("Error: %s\n", e.message);
+ if (&candidate != null)
+ {
+ for (int i = 0; i < 1000; i++)
+ {
+ string tmp = "%s %d".printf(name, i);
+ if (display_name_is_valid(tmp, null))
+ {
+ candidate = tmp;
+ break;
+ }
+ }
+ }
+ return false;
}
}
+ return true;
}
- public void store_id_cards ()
+ private bool remove_duplicates(IdCard new_card, out ArrayList<IdCard>? old_duplicates)
{
- var key_file = new KeyFile ();
-
- foreach (IdCard id_card in this.id_card_list)
- {
- key_file.set_string (id_card.issuer, "Issuer", id_card.issuer);
- key_file.set_string (id_card.issuer, "Username", id_card.username);
- key_file.set_string (id_card.issuer, "Password", id_card.password);
- key_file.set_string_list (id_card.issuer, "Services", id_card.services);
+ ArrayList<IdCard> dups = new ArrayList<IdCard>();
+ var cards = this.store.get_card_list();
+ foreach (IdCard id_card in cards) {
+ if ((new_card != id_card) && (id_card.nai == new_card.nai)) {
+ dups.add(id_card);
+ }
}
- var text = key_file.to_data (null);
+ foreach (IdCard id_card in dups) {
+ logger.trace("removing duplicate id for '%s'\n".printf(new_card.nai));
+ remove_card_internal(id_card);
- try
- {
- var path = get_data_dir ();
- var filename = Path.build_filename (path, FILE_NAME);
- FileUtils.set_contents (filename, text, -1);
+ if (new_card.trust_anchor.Compare(id_card.trust_anchor) == 0) {
+ logger.trace("Old and new cards have same trust anchor. Re-using the datetime_added field from the old card.");
+ new_card.trust_anchor.set_datetime_added(id_card.trust_anchor.datetime_added);
+ }
}
- catch (Error e)
- {
- stdout.printf ("Error: %s\n", e.message);
+
+ if (&old_duplicates != null) {
+ old_duplicates = dups;
}
+
+ return (dups.size > 0);
}
- private string get_data_dir()
+
+ public bool find_duplicate_nai_sets(out ArrayList<ArrayList<IdCard>> duplicates)
{
- string path;
+ var nais = new HashMap<string, ArrayList<IdCard>>();
- path = Path.build_filename (Environment.get_user_data_dir (),
- Config.PACKAGE_TARNAME);
- if (!FileUtils.test (path, FileTest.EXISTS))
- {
- DirUtils.create (path, 0700);
+ duplicates = new ArrayList<ArrayList<IdCard>>();
+ LinkedList<IdCard> card_list = get_card_list() ;
+ if (card_list == null) {
+ return false;
}
- return path;
+ bool found = false;
+ foreach (IdCard id_card in card_list) {
+ logger.trace(@"load_id_cards: Loading card with display name '$(id_card.display_name)'");
+
+ //!!TODO: This uniqueness check really belongs somewhere else -- like where we add
+ // IDs, and/or read them from storage. However, we should never hit this.
+
+ if (nais.has_key(id_card.nai)) {
+ ArrayList<IdCard> list = nais.get(id_card.nai);
+ list.add(id_card);
+ }
+ else {
+ ArrayList<IdCard> list = new ArrayList<IdCard>();
+ list.add(id_card);
+ nais.set(id_card.nai, list);
+ }
+ }
+
+ duplicates = new ArrayList<ArrayList<IdCard>>();
+ foreach (Map.Entry<string, ArrayList<IdCard>> entry in nais.entries) {
+ var list = entry.value;
+ if (list.size > 1) {
+ duplicates.add(list);
+ found = true;
+ }
+ }
+ return found;
}
- public IdCard? load_gss_eap_id_file ()
- {
- IdCard id_card = new IdCard();
- string text;
- string id_card_data[2];
- var filename = Path.build_filename (Environment.get_home_dir (),
- ".gss_eap_id");
- try {
- FileUtils.get_contents (filename, out text, null);
+ public IdCard? find_id_card(string nai, bool force_flat_file_store) {
+ IdCard? retval = null;
+ IIdentityCardStore.StoreType saved_store_type = get_store_type();
+ if (force_flat_file_store)
+ set_store_type(IIdentityCardStore.StoreType.FLAT_FILE);
+
+ foreach (IdCard id in get_card_list()) {
+ if (id.nai == nai) {
+ retval = id;
+ break;
+ }
}
- catch (Error e)
- {
- return null;
+ set_store_type(saved_store_type);
+ if (force_flat_file_store &&
+ (saved_store_type != IIdentityCardStore.StoreType.FLAT_FILE))
+ card_list_changed();
+ return retval;
+ }
+
+ public void add_card(IdCard card, bool force_flat_file_store, out ArrayList<IdCard>? old_duplicates=null) {
+ if (card.temporary) {
+ logger.trace("add_card: card is temporary; returning.");
+ return;
}
- if (text == "")
- return null;
+ string candidate;
+ IIdentityCardStore.StoreType saved_store_type = get_store_type();
- id_card_data = text.split ("\n", 2);
- id_card.password = id_card_data[1];
- id_card_data = id_card_data[0].split ("@", 2);
- id_card.username = id_card_data[0];
- id_card.issuer = id_card_data[1];
- id_card.services = {"email","jabber","irc"};
+ if (force_flat_file_store)
+ set_store_type(IIdentityCardStore.StoreType.FLAT_FILE);
- var icon_theme = Gtk.IconTheme.get_default ();
- try
+ remove_duplicates(card, out old_duplicates);
+
+ if (!display_name_is_valid(card.display_name, out candidate))
{
- id_card.pixbuf = icon_theme.load_icon ("avatar-default",
- 48,
- Gtk.IconLookupFlags.FORCE_SIZE);
+ card.display_name = candidate;
}
- catch (Error e)
- {
- id_card.pixbuf = null;
- stdout.printf("Error: %s\n", e.message);
+
+ if (!card.store_password)
+ password_table.CachePassword(card, store);
+
+ logger.trace("add_card: Adding card '%s' with services: '%s'"
+ .printf(card.display_name, card.get_services_string("; ")));
+
+ store.add_card(card);
+ set_store_type(saved_store_type);
+ card_list_changed();
+ }
+
+ public IdCard update_card(IdCard card) {
+ logger.trace("update_card");
+
+ IdCard retval;
+ if (card.temporary) {
+ retval = card;
+ return retval;
}
+
+ if (!card.store_password)
+ password_table.CachePassword(card, store);
+ else
+ password_table.RemovePassword(card, store);
+ retval = store.update_card(card);
+ card_list_changed();
+ return retval;
+ }
- return id_card;
+ private bool remove_card_internal(IdCard card) {
+ if (card.temporary)
+ return false;
+ password_table.RemovePassword(card, store);
+ return store.remove_card(card);
}
- public void store_gss_eap_id_file (IdCard ?id_card)
- {
- string text = "";
+ public bool remove_card(IdCard card) {
+ if (remove_card_internal(card)) {
+ logger.trace(@"remove_card: Removed '$(card.display_name)'");
+ card_list_changed();
+ return true;
+ }
+ logger.warn(@"remove_card: Couldn't remove '$(card.display_name)'");
+ return false;
+ }
- if (id_card != null)
- text = id_card.username + "@" + id_card.issuer + "\n" + id_card.password;
+ // The name is misleading: This not only sets the store type,
+ // it also creates a new store instance, which loads the card data.
+ public void set_store_type(IIdentityCardStore.StoreType type) {
+ if ((store != null) && (store.get_store_type() == type))
+ return;
+ switch (type) {
+ #if GNOME_KEYRING
+ case IIdentityCardStore.StoreType.KEYRING:
+ store = new KeyringStore();
+ break;
+ #endif
+ case IIdentityCardStore.StoreType.FLAT_FILE:
+ default:
+ store = new LocalFlatFileStore();
+ break;
+ }
- var filename = Path.build_filename (Environment.get_home_dir (),
- ".gss_eap_id");
- try
- {
- FileUtils.set_contents (filename, text, -1);
+ // Loop through the loaded IDs. If any trust anchors are old enough that we didn't record
+ // the datetime_added, add it now.
+ string before_now = _("Before ") + TrustAnchor.format_datetime_now();
+ bool save_needed = false;
+ foreach (IdCard id in this.store.get_card_list()) {
+ if (!id.trust_anchor.is_empty() && id.trust_anchor.datetime_added == "") {
+ logger.trace("set_store_type : Set ta_datetime_added for old trust anchor on '%s' to '%s'".printf(id.display_name, before_now));
+ id.trust_anchor.set_datetime_added(before_now);
+ save_needed = true;
+ }
}
- catch (Error e)
- {
- stdout.printf ("Error: %s\n", e.message);
+ if (save_needed) {
+ this.store.store_id_cards();
}
}
+
+ public IIdentityCardStore.StoreType get_store_type() {
+ return store.get_store_type();
+ }
+
+ public bool HasNonTrivialIdentities() {
+ foreach (IdCard card in this.store.get_card_list()) {
+ // The 'NoIdentity' card is non-trivial if it has services or rules.
+ // All other cards are automatically non-trivial.
+ if ((!card.is_no_identity()) ||
+ (card.services.size > 0) ||
+ (card.rules.length > 0)) {
+ return true;
+ }
+ }
+ return false;
+ }
+
+
+ private IdentityManagerApp parent;
+
+ public IdentityManagerModel(IdentityManagerApp parent_app, IIdentityCardStore.StoreType store_type) {
+ logger.trace("IdentityManagerModel: store_type=" + store_type.to_string());
+ parent = parent_app;
+ password_table = new PasswordHashTable();
+ set_store_type(store_type);
+ }
}
projects / moonshot-ui.git / blobdiff