NCManageEndToEndEncryption.m 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427
  1. //
  2. // NCManageEndToEndEncryption.m
  3. // Nextcloud
  4. //
  5. // Created by Marino Faggiana on 13/10/17.
  6. // Copyright © 2017 Marino Faggiana. All rights reserved.
  7. //
  8. // Author Marino Faggiana <marino.faggiana@nextcloud.com>
  9. //
  10. // This program is free software: you can redistribute it and/or modify
  11. // it under the terms of the GNU General Public License as published by
  12. // the Free Software Foundation, either version 3 of the License, or
  13. // (at your option) any later version.
  14. //
  15. // This program is distributed in the hope that it will be useful,
  16. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. // GNU General Public License for more details.
  19. //
  20. // You should have received a copy of the GNU General Public License
  21. // along with this program. If not, see <http://www.gnu.org/licenses/>.
  22. //
  23. #import "NCManageEndToEndEncryption.h"
  24. #import "NSNotificationCenter+MainThread.h"
  25. #import <LocalAuthentication/LocalAuthentication.h>
  26. #import <TOPasscodeViewController/TOPasscodeViewController.h>
  27. #import "NCBridgeSwift.h"
  28. #import "CCUtility.h"
  29. @interface NCManageEndToEndEncryption () <NCEndToEndInitializeDelegate, TOPasscodeViewControllerDelegate>
  30. {
  31. AppDelegate *appDelegate;
  32. NSString *passcodeType;
  33. TOPasscodeViewController *passcodeViewController;
  34. }
  35. @end
  36. @implementation NCManageEndToEndEncryption
  37. - (void)initializeForm
  38. {
  39. XLFormDescriptor *form = [XLFormDescriptor formDescriptor];
  40. XLFormSectionDescriptor *section;
  41. XLFormRowDescriptor *row;
  42. BOOL isE2EEEnabled = [[NCManageDatabase shared] getCapabilitiesServerBoolWithAccount:appDelegate.account elements:NCElementsJSON.shared.capabilitiesE2EEEnabled exists:false];
  43. NSString *versionE2EE = [[NCManageDatabase shared] getCapabilitiesServerStringWithAccount:appDelegate.account elements:NCElementsJSON.shared.capabilitiesE2EEApiVersion];
  44. if (![versionE2EE isEqual:[[NCGlobal shared] e2eeVersion]] && isE2EEEnabled) {
  45. [[NCContentPresenter shared] messageNotification:@"_error_e2ee_" description:@"_err_e2ee_app_version_" delay:[[NCGlobal shared] dismissAfterSecond] type:messageTypeError errorCode:NCGlobal.shared.errorInternalError forced:true];
  46. }
  47. if (isE2EEEnabled == NO || ![versionE2EE isEqual:[[NCGlobal shared] e2eeVersion]]) {
  48. // Section SERVICE NOT AVAILABLE -------------------------------------------------
  49. section = [XLFormSectionDescriptor formSection];
  50. if (isE2EEEnabled) {
  51. section.footerTitle = [NSString stringWithFormat:@"End-to-End Encryption %@", versionE2EE];
  52. }
  53. [form addFormSection:section];
  54. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"serviceActivated" rowType:XLFormRowDescriptorTypeInfo title:NSLocalizedString(@"_e2e_settings_not_available_", nil)];
  55. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  56. [row.cellConfig setObject:[[UIImage imageNamed:@"closeCircle"] imageWithColor:[UIColor redColor] size:25] forKey:@"imageView.image"];
  57. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  58. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  59. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  60. [section addFormRow:row];
  61. self.tableView.showsVerticalScrollIndicator = NO;
  62. self.form = form;
  63. return;
  64. }
  65. if ([CCUtility isEndToEndEnabled:appDelegate.account]) {
  66. // Section SERVICE ACTIVATED -------------------------------------------------
  67. section = [XLFormSectionDescriptor formSection];
  68. section.footerTitle = [NSString stringWithFormat:@"End-to-End Encryption %@", versionE2EE];
  69. [form addFormSection:section];
  70. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"serviceActivated" rowType:XLFormRowDescriptorTypeInfo title:NSLocalizedString(@"_e2e_settings_activated_", nil)];
  71. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  72. [row.cellConfig setObject:[[UIImage imageNamed:@"checkmark.circle.fill"] imageWithColor:[UIColor redColor] size:25] forKey:@"imageView.image"];
  73. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  74. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  75. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  76. [section addFormRow:row];
  77. // Section PASSPHRASE -------------------------------------------------
  78. section = [XLFormSectionDescriptor formSection];
  79. [form addFormSection:section];
  80. // Read Passphrase
  81. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"readPassphrase" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_read_passphrase_", nil)];
  82. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  83. [row.cellConfig setObject:[[UIImage imageNamed:@"e2eReadPassphrase"] imageWithColor:NCBrandColor.shared.icon size:25] forKey:@"imageView.image"];
  84. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  85. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  86. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  87. row.action.formSelector = @selector(readPassphrase:);
  88. [section addFormRow:row];
  89. // Section DELETE -------------------------------------------------
  90. section = [XLFormSectionDescriptor formSection];
  91. [form addFormSection:section];
  92. // remove locally Encryption
  93. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"removeLocallyEncryption" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_remove_", nil)];
  94. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  95. [row.cellConfig setObject:[[UIImage imageNamed:@"lock"] imageWithColor:NCBrandColor.shared.icon size:25] forKey:@"imageView.image"];
  96. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  97. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  98. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  99. row.action.formSelector = @selector(removeLocallyEncryption:);
  100. [section addFormRow:row];
  101. } else {
  102. // Section START E2E -------------------------------------------------
  103. section = [XLFormSectionDescriptor formSection];
  104. [form addFormSection:section];
  105. // Start e2e
  106. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"startE2E" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"_e2e_settings_start_", nil)];
  107. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  108. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  109. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  110. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  111. row.action.formSelector = @selector(startE2E:);
  112. [section addFormRow:row];
  113. }
  114. #ifdef DEBUG
  115. // Section DELETE KEYS -------------------------------------------------
  116. section = [XLFormSectionDescriptor formSectionWithTitle:NSLocalizedString(@"Delete server keys ", nil)];
  117. [form addFormSection:section];
  118. // Delete publicKey
  119. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"deletePublicKey" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"Delete PublicKey", nil)];
  120. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  121. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  122. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  123. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  124. row.action.formSelector = @selector(deletePublicKey:);
  125. [section addFormRow:row];
  126. // Delete privateKey
  127. row = [XLFormRowDescriptor formRowDescriptorWithTag:@"deletePrivateKey" rowType:XLFormRowDescriptorTypeButton title:NSLocalizedString(@"Delete PrivateKey", nil)];
  128. row.cellConfigAtConfigure[@"backgroundColor"] = NCBrandColor.shared.cellSettings;
  129. [row.cellConfig setObject:[UIFont systemFontOfSize:15.0] forKey:@"textLabel.font"];
  130. [row.cellConfig setObject:NCBrandColor.shared.label forKey:@"textLabel.textColor"];
  131. [row.cellConfig setObject:@(NSTextAlignmentLeft) forKey:@"textLabel.textAlignment"];
  132. row.action.formSelector = @selector(deletePrivateKey:);
  133. [section addFormRow:row];
  134. #endif
  135. self.tableView.showsVerticalScrollIndicator = NO;
  136. self.form = form;
  137. }
  138. #pragma mark - Life Cycle
  139. - (void)viewDidLoad
  140. {
  141. [super viewDidLoad];
  142. self.title = NSLocalizedString(@"_e2e_settings_", nil);
  143. appDelegate = (AppDelegate *)[[UIApplication sharedApplication] delegate];
  144. self.view.backgroundColor = NCBrandColor.shared.systemGroupedBackground;
  145. self.tableView.backgroundColor = NCBrandColor.shared.systemGroupedBackground;
  146. // E2EE
  147. self.endToEndInitialize = [NCEndToEndInitialize new];
  148. self.endToEndInitialize.delegate = self;
  149. [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(changeTheming) name:NCGlobal.shared.notificationCenterChangeTheming object:nil];
  150. [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(applicationDidEnterBackground) name:NCGlobal.shared.notificationCenterApplicationDidEnterBackground object:nil];
  151. [[NSNotificationCenter defaultCenter] addObserver:self selector:@selector(initializeMain) name:NCGlobal.shared.notificationCenterInitializeMain object:nil];
  152. [self changeTheming];
  153. }
  154. - (void)viewWillAppear:(BOOL)animated
  155. {
  156. [super viewWillAppear:animated];
  157. appDelegate.activeViewController = self;
  158. [self initializeForm];
  159. [self.tableView reloadData];
  160. }
  161. #pragma mark - NotificationCenter
  162. - (void)changeTheming
  163. {
  164. [self.tableView reloadData];
  165. [self initializeForm];
  166. }
  167. - (void)applicationDidEnterBackground
  168. {
  169. if (passcodeViewController.view.window != nil) {
  170. [passcodeViewController dismissViewControllerAnimated:true completion:nil];
  171. }
  172. }
  173. - (void)initializeMain
  174. {
  175. [[self navigationController] popViewControllerAnimated:YES];
  176. }
  177. #pragma --------------------------------------------------------------------------------------------
  178. #pragma mark === Action ===
  179. #pragma --------------------------------------------------------------------------------------------
  180. - (void)startE2E:(XLFormRowDescriptor *)sender
  181. {
  182. [self deselectFormRow:sender];
  183. if ([[CCUtility getPasscode] length]) {
  184. [self passcodeType:@"startE2E"];
  185. } else {
  186. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  187. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  188. }];
  189. [alertController addAction:okAction];
  190. [self presentViewController:alertController animated:YES completion:nil];
  191. }
  192. }
  193. - (void)readPassphrase:(XLFormRowDescriptor *)sender
  194. {
  195. [self deselectFormRow:sender];
  196. if ([[CCUtility getPasscode] length]) {
  197. [self passcodeType:@"readPassphrase"];
  198. } else {
  199. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  200. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  201. }];
  202. [alertController addAction:okAction];
  203. [self presentViewController:alertController animated:YES completion:nil];
  204. }
  205. }
  206. - (void)removeLocallyEncryption:(XLFormRowDescriptor *)sender
  207. {
  208. [self deselectFormRow:sender];
  209. if ([[CCUtility getPasscode] length]) {
  210. [self passcodeType:@"removeLocallyEncryption"];
  211. } else {
  212. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:NSLocalizedString(@"_e2e_settings_lock_not_active_", nil) preferredStyle:UIAlertControllerStyleAlert];
  213. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  214. }];
  215. [alertController addAction:okAction];
  216. [self presentViewController:alertController animated:YES completion:nil];
  217. }
  218. }
  219. #pragma mark - Passcode -
  220. - (void)passcodeType:(NSString *)type
  221. {
  222. LAContext *laContext = [LAContext new];
  223. NSError *error;
  224. if ([[CCUtility getPasscode] length] > 0) {
  225. passcodeViewController = [[TOPasscodeViewController alloc] initWithStyle:TOPasscodeViewStyleTranslucentLight passcodeType:TOPasscodeTypeSixDigits];
  226. if (@available(iOS 13.0, *)) {
  227. if ([[UITraitCollection currentTraitCollection] userInterfaceStyle] == UIUserInterfaceStyleDark) {
  228. passcodeViewController.style = TOPasscodeViewStyleTranslucentDark;
  229. }
  230. }
  231. passcodeViewController.delegate = self;
  232. passcodeViewController.allowCancel = true;
  233. passcodeViewController.keypadButtonShowLettering = false;
  234. if (CCUtility.getEnableTouchFaceID && [laContext canEvaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics error:&error]) {
  235. if (error == NULL) {
  236. if (laContext.biometryType == LABiometryTypeFaceID) {
  237. passcodeViewController.biometryType = TOPasscodeBiometryTypeFaceID;
  238. passcodeViewController.allowBiometricValidation = true;
  239. passcodeViewController.automaticallyPromptForBiometricValidation = true;
  240. } else if (laContext.biometryType == LABiometryTypeTouchID) {
  241. passcodeViewController.biometryType = TOPasscodeBiometryTypeTouchID;
  242. passcodeViewController.allowBiometricValidation = true;
  243. passcodeViewController.automaticallyPromptForBiometricValidation = true;
  244. } else {
  245. NSLog(@"No Biometric support");
  246. }
  247. }
  248. }
  249. // Type of passcode
  250. passcodeType = type;
  251. [self presentViewController:passcodeViewController animated:YES completion:nil];
  252. }
  253. }
  254. - (void)didTapCancelInPasscodeViewController:(TOPasscodeViewController *)passcodeViewController
  255. {
  256. [passcodeViewController dismissViewControllerAnimated:YES completion:nil];
  257. }
  258. - (BOOL)passcodeViewController:(TOPasscodeViewController *)passcodeViewController isCorrectCode:(NSString *)code
  259. {
  260. if ([code isEqualToString:[CCUtility getPasscode]]) {
  261. dispatch_after(dispatch_time(DISPATCH_TIME_NOW, 0.5 * NSEC_PER_SEC), dispatch_get_main_queue(), ^(void) {
  262. [self passcodeCorrectCode];
  263. });
  264. return YES;
  265. }
  266. return NO;
  267. }
  268. - (void)didPerformBiometricValidationRequestInPasscodeViewController:(TOPasscodeViewController *)passcodeViewController
  269. {
  270. [[LAContext new] evaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics localizedReason:[[NCBrandOptions shared] brand] reply:^(BOOL success, NSError * _Nullable error) {
  271. if (success) {
  272. dispatch_after(dispatch_time(DISPATCH_TIME_NOW, 0.5 * NSEC_PER_SEC), dispatch_get_main_queue(), ^(void) {
  273. [passcodeViewController dismissViewControllerAnimated:YES completion:nil];
  274. [self passcodeCorrectCode];
  275. });
  276. }
  277. }];
  278. }
  279. -(void)passcodeCorrectCode {
  280. if ([passcodeType isEqualToString:@"startE2E"]) {
  281. [self.endToEndInitialize initEndToEndEncryption];
  282. } else if ([passcodeType isEqualToString:@"readPassphrase"]) {
  283. NSString *e2ePassphrase = [CCUtility getEndToEndPassphrase:appDelegate.account];
  284. NSLog(@"[LOG] Passphrase: %@", e2ePassphrase);
  285. NSString *message = [NSString stringWithFormat:@"\n%@\n\n\n%@", NSLocalizedString(@"_e2e_settings_the_passphrase_is_", nil), e2ePassphrase];
  286. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_info_", nil) message:message preferredStyle:UIAlertControllerStyleAlert];
  287. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"OK", @"OK action") style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) { }];
  288. [alertController addAction:okAction];
  289. [self presentViewController:alertController animated:YES completion:nil];
  290. } else if ([passcodeType isEqualToString:@"removeLocallyEncryption"]) {
  291. UIAlertController *alertController = [UIAlertController alertControllerWithTitle:NSLocalizedString(@"_e2e_settings_remove_", nil) message:NSLocalizedString(@"_e2e_settings_remove_message_", nil) preferredStyle:UIAlertControllerStyleAlert];
  292. UIAlertAction *okAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"_remove_", nil) style:UIAlertActionStyleDefault handler:^(UIAlertAction *action) {
  293. [CCUtility clearAllKeysEndToEnd:appDelegate.account];
  294. [self initializeForm];
  295. }];
  296. UIAlertAction *cancelAction = [UIAlertAction actionWithTitle:NSLocalizedString(@"_cancel_",nil) style:UIAlertActionStyleCancel handler:^(UIAlertAction *action) {}];
  297. [alertController addAction:okAction];
  298. [alertController addAction:cancelAction];
  299. [self presentViewController:alertController animated:YES completion:nil];
  300. }
  301. }
  302. - (void)deletePublicKey:(XLFormRowDescriptor *)sender
  303. {
  304. [self deselectFormRow:sender];
  305. [[NCCommunication shared] deleteE2EEPublicKeyWithCustomUserAgent:nil addCustomHeaders:nil completionHandler:^(NSString *account, NSInteger errorCode, NSString *errorDescription) {
  306. if (errorCode == 0 && [account isEqualToString:appDelegate.account]) {
  307. [[NCContentPresenter shared] messageNotification:@"E2E delete publicKey" description:@"Success" delay:[[NCGlobal shared] dismissAfterSecond] type:messageTypeSuccess errorCode:NCGlobal.shared.errorInternalError forced:true];
  308. } else {
  309. [[NCContentPresenter shared] messageNotification:@"E2E delete publicKey" description:errorDescription delay:[[NCGlobal shared] dismissAfterSecond] type:messageTypeError errorCode:errorCode forced:true];
  310. }
  311. }];
  312. }
  313. - (void)deletePrivateKey:(XLFormRowDescriptor *)sender
  314. {
  315. [self deselectFormRow:sender];
  316. [[NCCommunication shared] deleteE2EEPrivateKeyWithCustomUserAgent:nil addCustomHeaders:nil completionHandler:^(NSString *account, NSInteger errorCode, NSString *errorDescription) {
  317. if (errorCode == 0 && [account isEqualToString:appDelegate.account]) {
  318. [[NCContentPresenter shared] messageNotification:@"E2E delete privateKey" description:@"Success" delay:[[NCGlobal shared] dismissAfterSecond] type:messageTypeSuccess errorCode:NCGlobal.shared.errorInternalError forced:true];
  319. } else {
  320. [[NCContentPresenter shared] messageNotification:@"E2E delete privateKey" description:errorDescription delay:[[NCGlobal shared] dismissAfterSecond] type:messageTypeError errorCode:errorCode forced:true];
  321. }
  322. }];
  323. }
  324. #pragma --------------------------------------------------------------------------------------------
  325. #pragma mark === Delegate ===
  326. #pragma --------------------------------------------------------------------------------------------
  327. - (void)endToEndInitializeSuccess
  328. {
  329. // Reload All Datasource
  330. [[NSNotificationCenter defaultCenter] postNotificationOnMainThreadName:NCGlobal.shared.notificationCenterReloadDataSource object:nil];
  331. [self initializeForm];
  332. }
  333. @end