space-ios/iOSClient/Settings/NCManageE2EE.swift

//
//  NCManageE2EE.swift
//  Nextcloud
//
//  Created by Marino Faggiana on 17/11/22.
//  Copyright © 2022 Marino Faggiana. All rights reserved.
//
//  Author Marino Faggiana <marino.faggiana@nextcloud.com>
//
//  This program is free software: you can redistribute it and/or modify
//  it under the terms of the GNU General Public License as published by
//  the Free Software Foundation, either version 3 of the License, or
//  (at your option) any later version.
//
//  This program is distributed in the hope that it will be useful,
//  but WITHOUT ANY WARRANTY; without even the implied warranty of
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//  GNU General Public License for more details.
//
//  You should have received a copy of the GNU General Public License
//  along with this program.  If not, see <http://www.gnu.org/licenses/>.
//

import SwiftUI
import NextcloudKit
import TOPasscodeViewController
import LocalAuthentication

@objc class NCManageE2EEInterface: NSObject {

    @objc func makeShipDetailsUI(account: String) -> UIViewController {
        let account = (UIApplication.shared.delegate as! AppDelegate).account
        let details = NCViewE2EE(account: account)
        return UIHostingController(rootView: details)
    }
}

class NCManageE2EE: NSObject, ObservableObject, NCEndToEndInitializeDelegate, TOPasscodeViewControllerDelegate {

    let endToEndInitialize = NCEndToEndInitialize()
    let appDelegate = UIApplication.shared.delegate as! AppDelegate
    var passcodeType = ""

    @Published var isEndToEndEnabled: Bool = false
    @Published var statusOfService: NKError?

    override init() {
        super.init()

        endToEndInitialize.delegate = self
        isEndToEndEnabled = CCUtility.isEnd(toEndEnabled: appDelegate.account)
        endToEndInitialize.statusOfService { error in
            self.statusOfService = error
        }
    }

    func endToEndInitializeSuccess() {
        isEndToEndEnabled = true
    }

    // MARK: - Passcode

    @objc func requestPasscodeType(_ passcodeType: String) {

        let laContext = LAContext()
        var error: NSError?

        let passcodeViewController = TOPasscodeViewController(passcodeType: .sixDigits, allowCancel: true)
        passcodeViewController.delegate = self
        passcodeViewController.keypadButtonShowLettering = false
        if CCUtility.getEnableTouchFaceID() && laContext.canEvaluatePolicy(.deviceOwnerAuthenticationWithBiometrics, error: &error) {
            if error == nil {
                if laContext.biometryType == .faceID  {
                    passcodeViewController.biometryType = .faceID
                    passcodeViewController.allowBiometricValidation = true
                } else if laContext.biometryType == .touchID  {
                    passcodeViewController.biometryType = .touchID
                }
                passcodeViewController.allowBiometricValidation = true
                passcodeViewController.automaticallyPromptForBiometricValidation = true
            }
        }

        self.passcodeType = passcodeType
        appDelegate.window?.rootViewController?.present(passcodeViewController, animated: true)
    }

    @objc func correctPasscode() {

        switch self.passcodeType {
        case "startE2E":
            endToEndInitialize.initEndToEndEncryption()
        case "readPassphrase":
            if let e2ePassphrase = CCUtility.getEndToEndPassphrase(appDelegate.account) {
                print("[LOG]Passphrase: " + e2ePassphrase)
                let message = "\n" + NSLocalizedString("_e2e_settings_the_passphrase_is_", comment: "") + "\n\n\n" + e2ePassphrase
                let alertController = UIAlertController(title: NSLocalizedString("_info_", comment: ""), message: message, preferredStyle: .alert)
                alertController.addAction(UIAlertAction(title: NSLocalizedString("_ok_", comment: ""), style: .default, handler: { action in }))
                alertController.addAction(UIAlertAction(title: NSLocalizedString("_copy_passphrase_", comment: ""), style: .default, handler: { action in
                    UIPasteboard.general.string = e2ePassphrase
                }))
                appDelegate.window?.rootViewController?.present(alertController, animated: true)
            }
        case "removeLocallyEncryption":
            let alertController = UIAlertController(title: NSLocalizedString("_e2e_settings_remove_", comment: ""), message: NSLocalizedString("_e2e_settings_remove_message_", comment: ""), preferredStyle: .alert)
            alertController.addAction(UIAlertAction(title: NSLocalizedString("_remove_", comment: ""), style: .default, handler: { action in
                CCUtility.clearAllKeysEnd(toEnd: self.appDelegate.account)
                self.isEndToEndEnabled = CCUtility.isEnd(toEndEnabled: self.appDelegate.account)
            }))
            alertController.addAction(UIAlertAction(title: NSLocalizedString("_cancel_", comment: ""), style: .default, handler: { action in }))
            appDelegate.window?.rootViewController?.present(alertController, animated: true)
        default:
            break
        }
    }

    func passcodeViewController(_ passcodeViewController: TOPasscodeViewController, isCorrectCode code: String) -> Bool {

        if code == CCUtility.getPasscode() {
            DispatchQueue.main.asyncAfter(deadline: .now() + 0.3) {
                self.correctPasscode()
            }
            return true
        } else {
            return false
        }
    }

    func didPerformBiometricValidationRequest(in passcodeViewController: TOPasscodeViewController) {

        LAContext().evaluatePolicy(.deviceOwnerAuthenticationWithBiometrics, localizedReason: NCBrandOptions.shared.brand) { (success, error) in
            if success {
                DispatchQueue.main.asyncAfter(deadline: .now() + 0.3) {
                    passcodeViewController.dismiss(animated: true)
                    self.correctPasscode()
                }
            }
        }
    }

    func didTapCancel(in passcodeViewController: TOPasscodeViewController) {
        passcodeViewController.dismiss(animated: true)
    }
}

struct NCViewE2EE: View {

    @ObservedObject var manageE2EE = NCManageE2EE()
    @State var account: String = ""

    var body: some View {

        let versionE2EE = NCManageDatabase.shared.getCapabilitiesServerString(account: account, elements: NCElementsJSON.shared.capabilitiesE2EEApiVersion) ?? ""

        VStack {
            VStack {

                if manageE2EE.statusOfService == nil {
                    Text(NSLocalizedString("_status_in_progress_", comment: ""))
                } else if manageE2EE.statusOfService == .success {
                    Text(NSLocalizedString("_status_e2ee_on_server_", comment: ""))
                } else {
                    Text(NSLocalizedString("_status_e2ee_not_setup_", comment: ""))
                }

                if manageE2EE.isEndToEndEnabled {

                    List {

                        Section(footer:Text("End-to-End Encription " + versionE2EE)) {
                            Label {
                                Text(NSLocalizedString("_e2e_settings_activated_", comment: ""))
                            } icon: {
                                Image(systemName: "checkmark.circle.fill")
                                    .resizable()
                                    .scaledToFit()
                                    .frame(width: 25, height: 25)
                                    .foregroundColor(.green)
                            }
                        }

                        Label {
                            Text(NSLocalizedString("_e2e_settings_read_passphrase_", comment: "")).onTapGesture {
                                if CCUtility.getPasscode().isEmpty {
                                    NCContentPresenter.shared.showInfo(error: NKError(errorCode: 0, errorDescription: "_e2e_settings_lock_not_active_"))
                                } else {
                                    manageE2EE.requestPasscodeType("readPassphrase")
                                }
                            }
                        } icon: {
                            Image(systemName: "text.word.spacing")
                                .resizable()
                                .scaledToFit()
                                .frame(width: 25, height: 25)
                        }

                        Label {
                            Text(NSLocalizedString("_e2e_settings_remove_", comment: "")).onTapGesture {
                                if CCUtility.getPasscode().isEmpty {
                                    NCContentPresenter.shared.showInfo(error: NKError(errorCode: 0, errorDescription: "_e2e_settings_lock_not_active_"))
                                } else {
                                    manageE2EE.requestPasscodeType("removeLocallyEncryption")
                                }
                            }
                        } icon: {
                            Image(systemName: "xmark.circle")
                                .resizable()
                                .scaledToFit()
                                .frame(width: 25, height: 25)
                        }

                    #if DEBUG
                        DeleteCerificateSection()
                    #endif
                    }

                } else {


                }




                /*
                if manageE2EE.isEndToEndEnabled {
                    Text(NSLocalizedString("_e2e_settings_activated_", comment: ""))
                } else {
                    Button(action: {
                        if CCUtility.getPasscode().isEmpty {
                            NCContentPresenter.shared.showInfo(error: NKError(errorCode: 0, errorDescription: "_e2e_settings_lock_not_active_"))
                        } else {
                            manageE2EE.requestPasscodeType("startE2E")
                        }
                    }, label: {
                        Text(NSLocalizedString("_e2e_settings_start_", comment: ""))
                    })
                }

                if manageE2EE.isEndToEndEnabled {
                    Button(action: {
                        if CCUtility.getPasscode().isEmpty {
                            NCContentPresenter.shared.showInfo(error: NKError(errorCode: 0, errorDescription: "_e2e_settings_lock_not_active_"))
                        } else {
                            manageE2EE.requestPasscodeType("readPassphrase")
                        }
                    }, label: {
                        Text(NSLocalizedString("_e2e_settings_read_passphrase_", comment: ""))
                    })
                }

                if manageE2EE.isEndToEndEnabled {
                    Button(action: {
                        if CCUtility.getPasscode().isEmpty {
                            NCContentPresenter.shared.showInfo(error: NKError(errorCode: 0, errorDescription: "_e2e_settings_lock_not_active_"))
                        } else {
                            manageE2EE.requestPasscodeType("removeLocallyEncryption")
                        }
                    }, label: {
                        Text(NSLocalizedString("_e2e_settings_remove_", comment: ""))
                    })
                }
                */
            }
        }
        .navigationTitle("Cifratura End-To-End")
    }
}

struct DeleteCerificateSection: View {

    var body: some View {

        Section(header:Text("Delete Server keys")) {

            Label {
                Text("Delete certificate").onTapGesture {
                    NextcloudKit.shared.deleteE2EECertificate { account, error in
                        if error == .success {
                            NCContentPresenter.shared.messageNotification("E2E delete certificate", error: error, delay: NCGlobal.shared.dismissAfterSecond, type: .success)
                        } else {
                            NCContentPresenter.shared.messageNotification("E2E delete certificate", error: error, delay: NCGlobal.shared.dismissAfterSecond, type: .error)
                        }
                    }
                }
            } icon: {
                Image(systemName: "delete.left")
                    .resizable()
                    .scaledToFit()
                    .frame(width: 25, height: 25)
                    .foregroundColor(.gray)

            }

            Label {
                Text("Delete PrivateKey").onTapGesture {
                    NextcloudKit.shared.deleteE2EEPrivateKey { account, error in
                        if error == .success {
                            NCContentPresenter.shared.messageNotification("E2E delete privateKey", error: error, delay: NCGlobal.shared.dismissAfterSecond, type: .success)
                        } else {
                            NCContentPresenter.shared.messageNotification("E2E delete privateKey", error: error, delay: NCGlobal.shared.dismissAfterSecond, type: .error)
                        }
                    }
                }
            } icon: {
                Image(systemName: "delete.left")
                    .resizable()
                    .scaledToFit()
                    .frame(width: 25, height: 25)
                    .foregroundColor(.gray)
            }
        }
    }
}