diff options
author | Christoph Wurst <christoph@winzerhof-wurst.at> | 2018-07-31 10:54:00 +0200 |
---|---|---|
committer | Christoph Wurst <christoph@winzerhof-wurst.at> | 2018-08-01 21:21:30 +0200 |
commit | f8fe7488a53fc2b93f4a47bcdeac2bbbe9f063a3 (patch) | |
tree | eedf37d1a64bf9f161c871f93807eec3f1c9ec27 /apps/twofactor_backupcodes/lib | |
parent | b5c5faebfc136d634fd7e80d6a0a8e1094bca717 (diff) | |
download | nextcloud-server-f8fe7488a53fc2b93f4a47bcdeac2bbbe9f063a3.tar.gz nextcloud-server-f8fe7488a53fc2b93f4a47bcdeac2bbbe9f063a3.zip |
Fix state propragation of the backup codes provider
Starting with Nextcloud 14, the server knows the enabled/disabled
state of 2fa providers. While it will query that information if it's
unknown (on first use), it won't notice any changes. Thus, providers
have to propagate that information themselves.
Ref https://github.com/nextcloud/twofactor_totp/pull/263
Ref https://github.com/nextcloud/twofactor_u2f/pull/210
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
Diffstat (limited to 'apps/twofactor_backupcodes/lib')
6 files changed, 230 insertions, 41 deletions
diff --git a/apps/twofactor_backupcodes/lib/AppInfo/Application.php b/apps/twofactor_backupcodes/lib/AppInfo/Application.php index 050473f7efe..d2541d87627 100644 --- a/apps/twofactor_backupcodes/lib/AppInfo/Application.php +++ b/apps/twofactor_backupcodes/lib/AppInfo/Application.php @@ -1,8 +1,10 @@ <?php + /** * @copyright Copyright (c) 2017 Joas Schilling <coding@schilljs.com> * * @author Joas Schilling <coding@schilljs.com> + * @author Christoph Wurst <christoph@winzerhof-wurst.at> * * @license GNU AGPL version 3 or any later version * @@ -24,11 +26,16 @@ namespace OCA\TwoFactorBackupCodes\AppInfo; use OCA\TwoFactorBackupCodes\Db\BackupCodeMapper; +use OCA\TwoFactorBackupCodes\Event\CodesGenerated; +use OCA\TwoFactorBackupCodes\Listener\ActivityPublisher; +use OCA\TwoFactorBackupCodes\Listener\IListener; +use OCA\TwoFactorBackupCodes\Listener\RegistryUpdater; use OCP\AppFramework\App; use OCP\Util; +use Symfony\Component\EventDispatcher\EventDispatcherInterface; class Application extends App { - public function __construct () { + public function __construct() { parent::__construct('twofactor_backupcodes'); } @@ -44,6 +51,21 @@ class Application extends App { */ public function registerHooksAndEvents() { Util::connectHook('OC_User', 'post_deleteUser', $this, 'deleteUser'); + + $container = $this->getContainer(); + /** @var EventDispatcherInterface $eventDispatcher */ + $eventDispatcher = $container->query(EventDispatcherInterface::class); + $eventDispatcher->addListener(CodesGenerated::class, function (CodesGenerated $event) use ($container) { + /** @var IListener[] $listeners */ + $listeners = [ + $container->query(ActivityPublisher::class), + $container->query(RegistryUpdater::class), + ]; + + foreach ($listeners as $listener) { + $listener->handle($event); + } + }); } public function deleteUser($params) { diff --git a/apps/twofactor_backupcodes/lib/Event/CodesGenerated.php b/apps/twofactor_backupcodes/lib/Event/CodesGenerated.php new file mode 100644 index 00000000000..c4ffcb37601 --- /dev/null +++ b/apps/twofactor_backupcodes/lib/Event/CodesGenerated.php @@ -0,0 +1,46 @@ +<?php + +declare(strict_types=1); + +/** + * @author Christoph Wurst <christoph@winzerhof-wurst.at> + * + * @license GNU AGPL version 3 or any later version + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + */ + +namespace OCA\TwoFactorBackupCodes\Event; + +use OCP\IUser; +use Symfony\Component\EventDispatcher\Event; + +class CodesGenerated extends Event { + + /** @var IUser */ + private $user; + + public function __construct(IUser $user) { + $this->user = $user; + } + + /** + * @return IUser + */ + public function getUser(): IUser { + return $this->user; + } + +} diff --git a/apps/twofactor_backupcodes/lib/Listener/ActivityPublisher.php b/apps/twofactor_backupcodes/lib/Listener/ActivityPublisher.php new file mode 100644 index 00000000000..31e2ac6e508 --- /dev/null +++ b/apps/twofactor_backupcodes/lib/Listener/ActivityPublisher.php @@ -0,0 +1,66 @@ +<?php + +declare(strict_types=1); + +/** + * @author Christoph Wurst <christoph@winzerhof-wurst.at> + * + * @license GNU AGPL version 3 or any later version + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + */ + +namespace OCA\TwoFactorBackupCodes\Listener; + +use BadMethodCallException; +use OCA\TwoFactorBackupCodes\Event\CodesGenerated; +use OCP\Activity\IManager; +use OCP\ILogger; +use Symfony\Component\EventDispatcher\Event; + +class ActivityPublisher implements IListener { + + /** @var IManager */ + private $activityManager; + + /** @var ILogger */ + private $logger; + + public function __construct(IManager $activityManager, ILogger $logger) { + $this->activityManager = $activityManager; + $this->logger = $logger; + } + + /** + * Push an event to the user's activity stream + */ + public function handle(Event $event) { + if ($event instanceof CodesGenerated) { + $activity = $this->activityManager->generateEvent(); + $activity->setApp('twofactor_backupcodes') + ->setType('security') + ->setAuthor($event->getUser()->getUID()) + ->setAffectedUser($event->getUser()->getUID()) + ->setSubject('codes_generated'); + try { + $this->activityManager->publish($activity); + } catch (BadMethodCallException $e) { + $this->logger->warning('could not publish backup code creation activity', ['app' => 'twofactor_backupcodes']); + $this->logger->logException($e, ['app' => 'twofactor_backupcodes']); + } + } + } + +} diff --git a/apps/twofactor_backupcodes/lib/Listener/IListener.php b/apps/twofactor_backupcodes/lib/Listener/IListener.php new file mode 100644 index 00000000000..ec45de5c075 --- /dev/null +++ b/apps/twofactor_backupcodes/lib/Listener/IListener.php @@ -0,0 +1,33 @@ +<?php + +declare(strict_types=1); + +/** + * @author Christoph Wurst <christoph@winzerhof-wurst.at> + * + * @license GNU AGPL version 3 or any later version + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + */ + +namespace OCA\TwoFactorBackupCodes\Listener; + +use Symfony\Component\EventDispatcher\Event; + +interface IListener { + + public function handle(Event $event); + +} diff --git a/apps/twofactor_backupcodes/lib/Listener/RegistryUpdater.php b/apps/twofactor_backupcodes/lib/Listener/RegistryUpdater.php new file mode 100644 index 00000000000..95b0db090ee --- /dev/null +++ b/apps/twofactor_backupcodes/lib/Listener/RegistryUpdater.php @@ -0,0 +1,50 @@ +<?php + +declare(strict_types=1); + +/** + * @author Christoph Wurst <christoph@winzerhof-wurst.at> + * + * @license GNU AGPL version 3 or any later version + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as + * published by the Free Software Foundation, either version 3 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + */ + +namespace OCA\TwoFactorBackupCodes\Listener; + +use OCA\TwoFactorBackupCodes\Event\CodesGenerated; +use OCA\TwoFactorBackupCodes\Provider\BackupCodesProvider; +use OCP\Authentication\TwoFactorAuth\IRegistry; +use Symfony\Component\EventDispatcher\Event; + +class RegistryUpdater implements IListener { + + /** @var IRegistry */ + private $registry; + + /** @var BackupCodesProvider */ + private $provider; + + public function __construct(IRegistry $registry, BackupCodesProvider $provider) { + $this->registry = $registry; + $this->provider = $provider; + } + + public function handle(Event $event) { + if ($event instanceof CodesGenerated) { + $this->registry->enableProviderFor($this->provider, $event->getUser()); + } + } +} diff --git a/apps/twofactor_backupcodes/lib/Service/BackupCodeStorage.php b/apps/twofactor_backupcodes/lib/Service/BackupCodeStorage.php index 2fb5fe8a6c0..74a032dcc0a 100644 --- a/apps/twofactor_backupcodes/lib/Service/BackupCodeStorage.php +++ b/apps/twofactor_backupcodes/lib/Service/BackupCodeStorage.php @@ -25,11 +25,13 @@ namespace OCA\TwoFactorBackupCodes\Service; use BadMethodCallException; use OCA\TwoFactorBackupCodes\Db\BackupCode; use OCA\TwoFactorBackupCodes\Db\BackupCodeMapper; +use OCA\TwoFactorBackupCodes\Event\CodesGenerated; use OCP\Activity\IManager; use OCP\ILogger; use OCP\IUser; use OCP\Security\IHasher; use OCP\Security\ISecureRandom; +use Symfony\Component\EventDispatcher\EventDispatcherInterface; class BackupCodeStorage { @@ -44,26 +46,17 @@ class BackupCodeStorage { /** @var ISecureRandom */ private $random; - /** @var IManager */ - private $activityManager; + /** @var EventDispatcherInterface */ + private $eventDispatcher; - /** @var ILogger */ - private $logger; - - /** - * @param BackupCodeMapper $mapper - * @param ISecureRandom $random - * @param IHasher $hasher - * @param IManager $activityManager - * @param ILogger $logger - */ - public function __construct(BackupCodeMapper $mapper, ISecureRandom $random, IHasher $hasher, - IManager $activityManager, ILogger $logger) { + public function __construct(BackupCodeMapper $mapper, + ISecureRandom $random, + IHasher $hasher, + EventDispatcherInterface $eventDispatcher) { $this->mapper = $mapper; $this->hasher = $hasher; $this->random = $random; - $this->activityManager = $activityManager; - $this->logger = $logger; + $this->eventDispatcher = $eventDispatcher; } /** @@ -89,33 +82,12 @@ class BackupCodeStorage { $result[] = $code; } - $this->publishEvent($user, 'codes_generated'); + $this->eventDispatcher->dispatch(CodesGenerated::class, new CodesGenerated($user)); return $result; } /** - * Push an event the user's activity stream - * - * @param IUser $user - * @param string $event - */ - private function publishEvent(IUser $user, $event) { - $activity = $this->activityManager->generateEvent(); - $activity->setApp('twofactor_backupcodes') - ->setType('security') - ->setAuthor($user->getUID()) - ->setAffectedUser($user->getUID()) - ->setSubject($event); - try { - $this->activityManager->publish($activity); - } catch (BadMethodCallException $e) { - $this->logger->warning('could not publish backup code creation activity', ['app' => 'twofactor_backupcodes']); - $this->logger->logException($e, ['app' => 'twofactor_backupcodes']); - } - } - - /** * @param IUser $user * @return bool */ @@ -133,7 +105,7 @@ class BackupCodeStorage { $total = count($codes); $used = 0; array_walk($codes, function (BackupCode $code) use (&$used) { - if (1 === (int) $code->getUsed()) { + if (1 === (int)$code->getUsed()) { $used++; } }); @@ -153,7 +125,7 @@ class BackupCodeStorage { $dbCodes = $this->mapper->getBackupCodes($user); foreach ($dbCodes as $dbCode) { - if (0 === (int) $dbCode->getUsed() && $this->hasher->verify($code, $dbCode->getCode())) { + if (0 === (int)$dbCode->getUsed() && $this->hasher->verify($code, $dbCode->getCode())) { $dbCode->setUsed(1); $this->mapper->update($dbCode); return true; |