NCManageEndToEndEncryption.m 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407
  1. //
  2. // NCManageEndToEndEncryption.m
  3. // Nextcloud
  4. //
  5. // Created by Marino Faggiana on 13/10/17.
  6. // Copyright © 2017 Marino Faggiana. All rights reserved.
  7. //
  8. // Author Marino Faggiana <marino.faggiana@nextcloud.com>
  9. //
  10. // This program is free software: you can redistribute it and/or modify
  11. // it under the terms of the GNU General Public License as published by
  12. // the Free Software Foundation, either version 3 of the License, or
  13. // (at your option) any later version.
  14. //
  15. // This program is distributed in the hope that it will be useful,
  16. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. // GNU General Public License for more details.
  19. //
  20. // You should have received a copy of the GNU General Public License
  21. // along with this program. If not, see <http://www.gnu.org/licenses/>.
  22. //
  23. #import "NCManageEndToEndEncryption.h"
  24. #import "AppDelegate.h"
  25. #import <TOPasscodeViewController/TOPasscodeViewController.h>
  26. #import "NCBridgeSwift.h"
  27. @interface NCManageEndToEndEncryption () <NCEndToEndInitializeDelegate, TOPasscodeViewControllerDelegate>
  28. {
  29. AppDelegate *appDelegate;
  30. NSString *passcodeType;
  31. TOPasscodeViewController *passcodeViewController;
  32. }
  33. @end
  34. @implementation NCManageEndToEndEncryption
  35. - (void)initializeForm
  36. {
  37. XLFormDescriptor *form = [XLFormDescriptor formDescriptor];
  38. XLFormSectionDescriptor *section;
  39. XLFormRowDescriptor *row;
  40. BOOL isE2EEEnabled = [[NCManageDatabase shared] getCapabilitiesServerBoolWithAccount:appDelegate.account elements:NCElementsJSON.shared.capabilitiesE2EEEnabled exists:false];
  41. NSString *versionE2EE = [[NCManageDatabase shared] getCapabilitiesServerStringWithAccount:appDelegate.account elements:NCElementsJSON.shared.capabilitiesE2EEApiVersion];
  42. if (![versionE2EE isEqual:k_E2EE_API] && isE2EEEnabled) {
  43. [[NCContentPresenter shared] messageNotification:@"_error_e2ee_" description:@"_err_e2ee_app_version_" delay:k_dismissAfterSecond type:messageTypeError errorCode:k_CCErrorInternalError forced:true];
  44. }
  45. if (isE2EEEnabled == NO || ![versionE2EE isEqual:k_E2EE_API]) {
  46. // Section SERVICE NOT AVAILABLE -------------------------------------------------
  47. section = [XLFormSectionDescriptor formSection];
  48. if (isE2EEEnabled) {
  49. section.footerTitle = [NSString stringWithFormat:@"End-to-End Encryption %@", versionE2EE];
  50. }
  51. [form addFormSection:section];
  52. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"serviceActivated" rowType:XLFormRowDescriptorTypeInfo title:NSLocalizedString(@"_e2e_settings_not_available_", nil)];
  53. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  54. [row.cellConfig setObject:[CCGraphics changeThemingColorImage:[UIImage imageNamed:@"closeCircle"] width:50 height:50 color:[UIColor redColor]] forKey:@"imageView.image"];
  55. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  56. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  57. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  58. [section addFormRow:row];
  59. self.tableView.showsVerticalScrollIndicator = NO;
  60. self.form = form;
  61. return;
  62. }
  63. if ([CCUtility isEndToEndEnabled:appDelegate.account]) {
  64. // Section SERVICE ACTIVATED -------------------------------------------------
  65. section = [XLFormSectionDescriptor formSection];
  66. section.footerTitle = [NSString stringWithFormat:@"End-to-End Encryption %@", versionE2EE];
  67. [form addFormSection:section];
  68. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"serviceActivated" rowType:XLFormRowDescriptorTypeInfo title:NSLocalizedString(@"_e2e_settings_activated_", nil)];
  69. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  70. [row.cellConfig setObject:[CCGraphics changeThemingColorImage:[UIImage imageNamed:@"selectFull"] width:50 height:50 color:[UIColor greenColor]] forKey:@"imageView.image"];
  71. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  72. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  73. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  74. [section addFormRow:row];
  75. // Section PASSPHRASE -------------------------------------------------
  76. section = [XLFormSectionDescriptor formSection];
  77. [form addFormSection:section];
  78. // Read Passphrase
  79. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"readPassphrase" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_read_passphrase_", nil)];
  80. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  81. [row.cellConfig setObject:[CCGraphics changeThemingColorImage:[UIImage imageNamed:@"e2eReadPassphrase"] width:50 height:50 color:NCBrandColor.shared.icon] forKey:@"imageView.image"];
  82. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  83. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  84. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  85. row.action.formSelector = @selector(readPassphrase:);
  86. [section addFormRow:row];
  87. // Section DELETE -------------------------------------------------
  88. section = [XLFormSectionDescriptor formSection];
  89. [form addFormSection:section];
  90. // remove locally Encryption
  91. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"removeLocallyEncryption" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_remove_", nil)];
  92. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  93. [row.cellConfig setObject:[CCGraphics changeThemingColorImage:[UIImage imageNamed:@"lock"] width:50 height:50 color:NCBrandColor.shared.icon] forKey:@"imageView.image"];
  94. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  95. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  96. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  97. row.action.formSelector = @selector(removeLocallyEncryption:);
  98. [section addFormRow:row];
  99. } else {
  100. // Section START E2E -------------------------------------------------
  101. section = [XLFormSectionDescriptor formSection];
  102. [form addFormSection:section];
  103. // Start e2e
  104. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"startE2E" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_start_", nil)];
  105. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  106. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  107. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  108. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  109. row.action.formSelector = @selector(startE2E:);
  110. [section addFormRow:row];
  111. }
  112. #ifdef DEBUG
  113. // Section DELETE KEYS -------------------------------------------------
  114. section = [XLFormSectionDescriptor formSectionWithTitle:NSLocalizedString(@"Delete server keys ", nil)];
  115. [form addFormSection:section];
  116. // Delete publicKey
  117. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"deletePublicKey" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"Delete PublicKey", nil)];
  118. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  119. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  120. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  121. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  122. row.action.formSelector = @selector(deletePublicKey:);
  123. [section addFormRow:row];
  124. // Delete privateKey
  125. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"deletePrivateKey" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"Delete PrivateKey", nil)];
  126. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.backgroundCell;
  127. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  128. [row.cellConfig setObject:NCBrandColor.shared.textView forKey:@"textLabel.textColor"];
  129. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  130. row.action.formSelector = @selector(deletePrivateKey:);
  131. [section addFormRow:row];
  132. #endif
  133. self.tableView.showsVerticalScrollIndicator = NO;
  134. self.form = form;
  135. }
  136. - (void)viewDidLoad
  137. {
  138. [super viewDidLoad];
  139. self.title = NSLocalizedString(@"_e2e_settings_", nil);
  140. appDelegate = (AppDelegate *)[[UIApplication sharedApplication] delegate];
  141. // E2EE
  142. self.endToEndInitialize = [NCEndToEndInitialize new];
  143. self.endToEndInitialize.delegate = self;
  144. // changeTheming
  145. [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(changeTheming) name:k_notificationCenter_changeTheming object:nil];
  146. [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(applicationDidEnterBackground) name:k_notificationCenter_applicationDidEnterBackground object:nil];
  147. [self changeTheming];
  148. }
  149. - (void)changeTheming
  150. {
  151. self.view.backgroundColor = NCBrandColor.shared.backgroundForm;
  152. self.tableView.backgroundColor = NCBrandColor.shared.backgroundForm;
  153. [self.tableView reloadData];
  154. [self initializeForm];
  155. }
  156. - (void)applicationDidEnterBackground
  157. {
  158. if (passcodeViewController.view.window != nil) {
  159. [passcodeViewController dismissViewControllerAnimated:true completion:nil];
  160. }
  161. }
  162. #pragma --------------------------------------------------------------------------------------------
  163. #pragma mark === Action ===
  164. #pragma --------------------------------------------------------------------------------------------
  165. - (void)startE2E:(XLFormRowDescriptor *)sender
  166. {
  167. [self deselectFormRow:sender];
  168. if ([[CCUtility getPasscode] length]) {
  169. [self passcodeType:@"startE2E"];
  170. } else {
  171. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  172. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  173. }];
  174. [alertController addAction:okAction];
  175. [self presentViewController:alertController animated:YES completion:nil];
  176. }
  177. }
  178. - (void)readPassphrase:(XLFormRowDescriptor *)sender
  179. {
  180. [self deselectFormRow:sender];
  181. if ([[CCUtility getPasscode] length]) {
  182. [self passcodeType:@"readPassphrase"];
  183. } else {
  184. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  185. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  186. }];
  187. [alertController addAction:okAction];
  188. [self presentViewController:alertController animated:YES completion:nil];
  189. }
  190. }
  191. - (void)removeLocallyEncryption:(XLFormRowDescriptor *)sender
  192. {
  193. [self deselectFormRow:sender];
  194. if ([[CCUtility getPasscode] length]) {
  195. [self passcodeType:@"removeLocallyEncryption"];
  196. } else {
  197. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  198. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  199. }];
  200. [alertController addAction:okAction];
  201. [self presentViewController:alertController animated:YES completion:nil];
  202. }
  203. }
  204. #pragma mark - Passcode -
  205. - (void)passcodeType:(NSString *)type
  206. {
  207. LAContext *laContext = [LAContext new];
  208. NSError *error;
  209. if ([[CCUtility getPasscode] length] > 0) {
  210. passcodeViewController = [[TOPasscodeViewController alloc] initWithStyle:TOPasscodeViewStyleTranslucentLight passcodeType:TOPasscodeTypeSixDigits];
  211. if (@available(iOS 13.0, *)) {
  212. if ([[UITraitCollection currentTraitCollection] userInterfaceStyle] == UIUserInterfaceStyleDark) {
  213. passcodeViewController.style = TOPasscodeViewStyleTranslucentDark;
  214. }
  215. }
  216. passcodeViewController.delegate = self;
  217. passcodeViewController.allowCancel = true;
  218. passcodeViewController.keypadButtonShowLettering = false;
  219. if (CCUtility.getEnableTouchFaceID && [laContext canEvaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics error:&error]) {
  220. if (error == NULL) {
  221. if (laContext.biometryType == LABiometryTypeFaceID) {
  222. passcodeViewController.biometryType = TOPasscodeBiometryTypeFaceID;
  223. passcodeViewController.allowBiometricValidation = true;
  224. passcodeViewController.automaticallyPromptForBiometricValidation = true;
  225. } else if (laContext.biometryType == LABiometryTypeTouchID) {
  226. passcodeViewController.biometryType = TOPasscodeBiometryTypeTouchID;
  227. passcodeViewController.allowBiometricValidation = true;
  228. passcodeViewController.automaticallyPromptForBiometricValidation = true;
  229. } else {
  230. NSLog(@"No Biometric support");
  231. }
  232. }
  233. }
  234. // Type of passcode
  235. passcodeType = type;
  236. [self presentViewController:passcodeViewController animated:YES completion:nil];
  237. }
  238. }
  239. - (void)didTapCancelInPasscodeViewController:(TOPasscodeViewController *)passcodeViewController
  240. {
  241. [passcodeViewController dismissViewControllerAnimated:YES completion:nil];
  242. }
  243. - (BOOL)passcodeViewController:(TOPasscodeViewController *)passcodeViewController isCorrectCode:(NSString *)code
  244. {
  245. if ([code isEqualToString:[CCUtility getPasscode]]) {
  246. dispatch_after(dispatch_time(DISPATCH_TIME_NOW, 0.5 * NSEC_PER_SEC), dispatch_get_main_queue(), ^(void) {
  247. [self passcodeCorrectCode];
  248. });
  249. return YES;
  250. }
  251. return NO;
  252. }
  253. - (void)didPerformBiometricValidationRequestInPasscodeViewController:(TOPasscodeViewController *)passcodeViewController
  254. {
  255. [[LAContext new] evaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics localizedReason:[[NCBrandOptions shared] brand] reply:^(BOOL success, NSError * _Nullable error) {
  256. if (success) {
  257. dispatch_after(dispatch_time(DISPATCH_TIME_NOW, 0.5 * NSEC_PER_SEC), dispatch_get_main_queue(), ^(void) {
  258. [passcodeViewController dismissViewControllerAnimated:YES completion:nil];
  259. [self passcodeCorrectCode];
  260. });
  261. }
  262. }];
  263. }
  264. -(void)passcodeCorrectCode {
  265. if ([passcodeType isEqualToString:@"startE2E"]) {
  266. [self.endToEndInitialize initEndToEndEncryption];
  267. } else if ([passcodeType isEqualToString:@"readPassphrase"]) {
  268. NSString *e2ePassphrase = [CCUtility getEndToEndPassphrase:appDelegate.account];
  269. NSLog(@"[LOG] Passphrase: %@", e2ePassphrase);
  270. NSString *message = [NSString stringWithFormat:@"\n%@\n\n\n%@", NSLocalizedString(@"_e2e_settings_the_passphrase_is_", nil), e2ePassphrase];
  271. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:message preferredStyle:UIAlertControllerStyleAlert];
  272. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) { }];
  273. [alertController addAction:okAction];
  274. [self presentViewController:alertController animated:YES completion:nil];
  275. } else if ([passcodeType isEqualToString:@"removeLocallyEncryption"]) {
  276. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_e2e_settings_remove_", nil) message:NSLocalizedString(@"_e2e_settings_remove_message_", nil) preferredStyle:UIAlertControllerStyleAlert];
  277. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"_remove_", nil) style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  278. [CCUtility clearAllKeysEndToEnd:appDelegate.account];
  279. [self initializeForm];
  280. }];
  281. UIAlertAction *cancelAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"_cancel_",nil) style:UIAlertActionStyleCancel handler:^(UIAlertAction *action) {}];
  282. [alertController addAction:okAction];
  283. [alertController addAction:cancelAction];
  284. [self presentViewController:alertController animated:YES completion:nil];
  285. }
  286. }
  287. - (void)deletePublicKey:(XLFormRowDescriptor *)sender
  288. {
  289. [self deselectFormRow:sender];
  290. [[NCCommunication shared] deleteE2EEPublicKeyWithCustomUserAgent:nil addCustomHeaders:nil completionHandler:^(NSString *account, NSInteger errorCode, NSString *errorDescription) {
  291. if (errorCode == 0 && [account isEqualToString:appDelegate.account]) {
  292. [[NCContentPresenter shared] messageNotification:@"E2E delete publicKey" description:@"Success" delay:k_dismissAfterSecond type:messageTypeSuccess errorCode:k_CCErrorInternalError forced:true];
  293. } else {
  294. [[NCContentPresenter shared] messageNotification:@"E2E delete publicKey" description:errorDescription delay:k_dismissAfterSecond type:messageTypeError errorCode:errorCode forced:true];
  295. }
  296. }];
  297. }
  298. - (void)deletePrivateKey:(XLFormRowDescriptor *)sender
  299. {
  300. [self deselectFormRow:sender];
  301. [[NCCommunication shared] deleteE2EEPrivateKeyWithCustomUserAgent:nil addCustomHeaders:nil completionHandler:^(NSString *account, NSInteger errorCode, NSString *errorDescription) {
  302. if (errorCode == 0 && [account isEqualToString:appDelegate.account]) {
  303. [[NCContentPresenter shared] messageNotification:@"E2E delete privateKey" description:@"Success" delay:k_dismissAfterSecond type:messageTypeSuccess errorCode:k_CCErrorInternalError forced:true];
  304. } else {
  305. [[NCContentPresenter shared] messageNotification:@"E2E delete privateKey" description:errorDescription delay:k_dismissAfterSecond type:messageTypeError errorCode:errorCode forced:true];
  306. }
  307. }];
  308. }
  309. #pragma --------------------------------------------------------------------------------------------
  310. #pragma mark === Delegate ===
  311. #pragma --------------------------------------------------------------------------------------------
  312. - (void)endToEndInitializeSuccess
  313. {
  314. // Reload All Datasource
  315. [[NSNotificationCenter defaultCenter] postNotificationOnMainThreadName:k_notificationCenter_reloadDataSource object:nil];
  316. [self initializeForm];
  317. }
  318. @end