mirror of https://github.com/nextcloud/desktop
311 lines
12 KiB
C++
311 lines
12 KiB
C++
#include "propagateuploadencrypted.h"
|
|
#include "clientsideencryptionjobs.h"
|
|
#include "networkjobs.h"
|
|
#include "clientsideencryption.h"
|
|
#include "account.h"
|
|
|
|
#include <QFileInfo>
|
|
#include <QDir>
|
|
#include <QUrl>
|
|
#include <QFile>
|
|
#include <QTemporaryFile>
|
|
#include <QLoggingCategory>
|
|
#include <QMimeDatabase>
|
|
|
|
namespace OCC {
|
|
|
|
Q_LOGGING_CATEGORY(lcPropagateUploadEncrypted, "nextcloud.sync.propagator.upload.encrypted", QtInfoMsg)
|
|
|
|
PropagateUploadEncrypted::PropagateUploadEncrypted(OwncloudPropagator *propagator, const QString &remoteParentPath, SyncFileItemPtr item, QObject *parent)
|
|
: QObject(parent)
|
|
, _propagator(propagator)
|
|
, _remoteParentPath(remoteParentPath)
|
|
, _item(item)
|
|
, _metadata(nullptr)
|
|
{
|
|
}
|
|
|
|
void PropagateUploadEncrypted::start()
|
|
{
|
|
const auto rootPath = [=]() {
|
|
const auto result = _propagator->remotePath();
|
|
if (result.startsWith('/')) {
|
|
return result.mid(1);
|
|
} else {
|
|
return result;
|
|
}
|
|
}();
|
|
const auto absoluteRemoteParentPath = [=]{
|
|
auto path = QString(rootPath + _remoteParentPath);
|
|
if (path.endsWith('/')) {
|
|
path.chop(1);
|
|
}
|
|
return path;
|
|
}();
|
|
|
|
|
|
/* If the file is in a encrypted folder, which we know, we wouldn't be here otherwise,
|
|
* we need to do the long road:
|
|
* find the ID of the folder.
|
|
* lock the folder using it's id.
|
|
* download the metadata
|
|
* update the metadata
|
|
* upload the file
|
|
* upload the metadata
|
|
* unlock the folder.
|
|
*/
|
|
qCDebug(lcPropagateUploadEncrypted) << "Folder is encrypted, let's get the Id from it.";
|
|
auto job = new LsColJob(_propagator->account(), absoluteRemoteParentPath, this);
|
|
job->setProperties({"resourcetype", "http://owncloud.org/ns:fileid"});
|
|
connect(job, &LsColJob::directoryListingSubfolders, this, &PropagateUploadEncrypted::slotFolderEncryptedIdReceived);
|
|
connect(job, &LsColJob::finishedWithError, this, &PropagateUploadEncrypted::slotFolderEncryptedIdError);
|
|
job->start();
|
|
}
|
|
|
|
/* We try to lock a folder, if it's locked we try again in one second.
|
|
* if it's still locked we try again in one second. looping until one minute.
|
|
* -> fail.
|
|
* the 'loop': /
|
|
* slotFolderEncryptedIdReceived -> slotTryLock -> lockError -> stillTime? -> slotTryLock
|
|
* \
|
|
* -> success.
|
|
*/
|
|
|
|
void PropagateUploadEncrypted::slotFolderEncryptedIdReceived(const QStringList &list)
|
|
{
|
|
qCDebug(lcPropagateUploadEncrypted) << "Received id of folder, trying to lock it so we can prepare the metadata";
|
|
auto job = qobject_cast<LsColJob *>(sender());
|
|
const auto& folderInfo = job->_folderInfos.value(list.first());
|
|
_folderLockFirstTry.start();
|
|
slotTryLock(folderInfo.fileId);
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotTryLock(const QByteArray& fileId)
|
|
{
|
|
const auto lockJob = new LockEncryptFolderApiJob(_propagator->account(), fileId, _propagator->_journal, _propagator->account()->e2e()->_publicKey, this);
|
|
connect(lockJob, &LockEncryptFolderApiJob::success, this, &PropagateUploadEncrypted::slotFolderLockedSuccessfully);
|
|
connect(lockJob, &LockEncryptFolderApiJob::error, this, &PropagateUploadEncrypted::slotFolderLockedError);
|
|
lockJob->start();
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotFolderLockedSuccessfully(const QByteArray& fileId, const QByteArray& token)
|
|
{
|
|
qCDebug(lcPropagateUploadEncrypted) << "Folder" << fileId << "Locked Successfully for Upload, Fetching Metadata";
|
|
// Should I use a mutex here?
|
|
_currentLockingInProgress = true;
|
|
_folderToken = token;
|
|
_folderId = fileId;
|
|
_isFolderLocked = true;
|
|
|
|
auto job = new GetMetadataApiJob(_propagator->account(), _folderId);
|
|
connect(job, &GetMetadataApiJob::jsonReceived,
|
|
this, &PropagateUploadEncrypted::slotFolderEncryptedMetadataReceived);
|
|
connect(job, &GetMetadataApiJob::error,
|
|
this, &PropagateUploadEncrypted::slotFolderEncryptedMetadataError);
|
|
|
|
job->start();
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotFolderEncryptedMetadataError(const QByteArray& fileId, int httpReturnCode)
|
|
{
|
|
Q_UNUSED(fileId);
|
|
Q_UNUSED(httpReturnCode);
|
|
qCDebug(lcPropagateUploadEncrypted()) << "Error Getting the encrypted metadata. Pretend we got empty metadata.";
|
|
const FolderMetadata emptyMetadata(_propagator->account());
|
|
auto json = QJsonDocument::fromJson(emptyMetadata.encryptedMetadata());
|
|
slotFolderEncryptedMetadataReceived(json, httpReturnCode);
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotFolderEncryptedMetadataReceived(const QJsonDocument &json, int statusCode)
|
|
{
|
|
qCDebug(lcPropagateUploadEncrypted) << "Metadata Received, Preparing it for the new file." << json.toVariant();
|
|
|
|
// Encrypt File!
|
|
_metadata.reset(new FolderMetadata(_propagator->account(),
|
|
_item->_e2eEncryptionStatus == SyncFileItem::EncryptionStatus::EncryptedMigratedV1_2 ? FolderMetadata::RequiredMetadataVersion::Version1_2 : FolderMetadata::RequiredMetadataVersion::Version1,
|
|
json.toJson(QJsonDocument::Compact), statusCode));
|
|
|
|
if (!_metadata->isMetadataSetup()) {
|
|
if (_isFolderLocked) {
|
|
connect(this, &PropagateUploadEncrypted::folderUnlocked, this, &PropagateUploadEncrypted::error);
|
|
unlockFolder();
|
|
} else {
|
|
emit error();
|
|
}
|
|
return;
|
|
}
|
|
|
|
QFileInfo info(_propagator->fullLocalPath(_item->_file));
|
|
const QString fileName = info.fileName();
|
|
|
|
// Find existing metadata for this file
|
|
bool found = false;
|
|
EncryptedFile encryptedFile;
|
|
const QVector<EncryptedFile> files = _metadata->files();
|
|
|
|
for(const EncryptedFile &file : files) {
|
|
if (file.originalFilename == fileName) {
|
|
encryptedFile = file;
|
|
found = true;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
// New encrypted file so set it all up!
|
|
if (!found) {
|
|
encryptedFile.encryptionKey = EncryptionHelper::generateRandom(16);
|
|
encryptedFile.encryptedFilename = EncryptionHelper::generateRandomFilename();
|
|
encryptedFile.originalFilename = fileName;
|
|
|
|
QMimeDatabase mdb;
|
|
encryptedFile.mimetype = mdb.mimeTypeForFile(info).name().toLocal8Bit();
|
|
|
|
// Other clients expect "httpd/unix-directory" instead of "inode/directory"
|
|
// Doesn't matter much for us since we don't do much about that mimetype anyway
|
|
if (encryptedFile.mimetype == QByteArrayLiteral("inode/directory")) {
|
|
encryptedFile.mimetype = QByteArrayLiteral("httpd/unix-directory");
|
|
}
|
|
}
|
|
|
|
encryptedFile.initializationVector = EncryptionHelper::generateRandom(16);
|
|
|
|
_item->_encryptedFileName = _remoteParentPath + QLatin1Char('/') + encryptedFile.encryptedFilename;
|
|
_item->_e2eEncryptionStatus = SyncFileItem::EncryptionStatus::EncryptedMigratedV1_2;
|
|
|
|
qCDebug(lcPropagateUploadEncrypted) << "Creating the encrypted file.";
|
|
|
|
if (info.isDir()) {
|
|
_completeFileName = encryptedFile.encryptedFilename;
|
|
} else {
|
|
QFile input(info.absoluteFilePath());
|
|
QFile output(QDir::tempPath() + QDir::separator() + encryptedFile.encryptedFilename);
|
|
|
|
QByteArray tag;
|
|
bool encryptionResult = EncryptionHelper::fileEncryption(
|
|
encryptedFile.encryptionKey,
|
|
encryptedFile.initializationVector,
|
|
&input, &output, tag);
|
|
|
|
if (!encryptionResult) {
|
|
qCDebug(lcPropagateUploadEncrypted()) << "There was an error encrypting the file, aborting upload.";
|
|
connect(this, &PropagateUploadEncrypted::folderUnlocked, this, &PropagateUploadEncrypted::error);
|
|
unlockFolder();
|
|
return;
|
|
}
|
|
|
|
encryptedFile.authenticationTag = tag;
|
|
_completeFileName = output.fileName();
|
|
}
|
|
|
|
qCDebug(lcPropagateUploadEncrypted) << "Creating the metadata for the encrypted file.";
|
|
|
|
_metadata->addEncryptedFile(encryptedFile);
|
|
_encryptedFile = encryptedFile;
|
|
|
|
qCDebug(lcPropagateUploadEncrypted) << "Metadata created, sending to the server.";
|
|
|
|
if (statusCode == 404) {
|
|
auto job = new StoreMetaDataApiJob(_propagator->account(),
|
|
_folderId,
|
|
_metadata->encryptedMetadata());
|
|
connect(job, &StoreMetaDataApiJob::success, this, &PropagateUploadEncrypted::slotUpdateMetadataSuccess);
|
|
connect(job, &StoreMetaDataApiJob::error, this, &PropagateUploadEncrypted::slotUpdateMetadataError);
|
|
job->start();
|
|
} else {
|
|
auto job = new UpdateMetadataApiJob(_propagator->account(),
|
|
_folderId,
|
|
_metadata->encryptedMetadata(),
|
|
_folderToken);
|
|
|
|
connect(job, &UpdateMetadataApiJob::success, this, &PropagateUploadEncrypted::slotUpdateMetadataSuccess);
|
|
connect(job, &UpdateMetadataApiJob::error, this, &PropagateUploadEncrypted::slotUpdateMetadataError);
|
|
job->start();
|
|
}
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotUpdateMetadataSuccess(const QByteArray& fileId)
|
|
{
|
|
Q_UNUSED(fileId);
|
|
qCDebug(lcPropagateUploadEncrypted) << "Uploading of the metadata success, Encrypting the file";
|
|
QFileInfo outputInfo(_completeFileName);
|
|
|
|
qCDebug(lcPropagateUploadEncrypted) << "Encrypted Info:" << outputInfo.path() << outputInfo.fileName() << outputInfo.size();
|
|
qCDebug(lcPropagateUploadEncrypted) << "Finalizing the upload part, now the actual uploader will take over";
|
|
emit finalized(outputInfo.path() + QLatin1Char('/') + outputInfo.fileName(),
|
|
_remoteParentPath + QLatin1Char('/') + outputInfo.fileName(),
|
|
outputInfo.size());
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotUpdateMetadataError(const QByteArray& fileId, int httpErrorResponse)
|
|
{
|
|
qCDebug(lcPropagateUploadEncrypted) << "Update metadata error for folder" << fileId << "with error" << httpErrorResponse;
|
|
qCDebug(lcPropagateUploadEncrypted()) << "Unlocking the folder.";
|
|
connect(this, &PropagateUploadEncrypted::folderUnlocked, this, &PropagateUploadEncrypted::error);
|
|
unlockFolder();
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotFolderLockedError(const QByteArray& fileId, int httpErrorCode)
|
|
{
|
|
Q_UNUSED(httpErrorCode);
|
|
/* try to call the lock from 5 to 5 seconds
|
|
* and fail if it's more than 5 minutes. */
|
|
QTimer::singleShot(5000, this, [this, fileId]{
|
|
if (!_currentLockingInProgress) {
|
|
qCDebug(lcPropagateUploadEncrypted) << "Error locking the folder while no other update is locking it up.";
|
|
qCDebug(lcPropagateUploadEncrypted) << "Perhaps another client locked it.";
|
|
qCDebug(lcPropagateUploadEncrypted) << "Abort";
|
|
return;
|
|
}
|
|
|
|
// Perhaps I should remove the elapsed timer if the lock is from this client?
|
|
if (_folderLockFirstTry.elapsed() > /* five minutes */ 1000 * 60 * 5 ) {
|
|
qCDebug(lcPropagateUploadEncrypted) << "One minute passed, ignoring more attempts to lock the folder.";
|
|
return;
|
|
}
|
|
slotTryLock(fileId);
|
|
});
|
|
|
|
qCDebug(lcPropagateUploadEncrypted) << "Folder" << fileId << "Coundn't be locked.";
|
|
}
|
|
|
|
void PropagateUploadEncrypted::slotFolderEncryptedIdError(QNetworkReply *r)
|
|
{
|
|
Q_UNUSED(r);
|
|
qCDebug(lcPropagateUploadEncrypted) << "Error retrieving the Id of the encrypted folder.";
|
|
}
|
|
|
|
void PropagateUploadEncrypted::unlockFolder()
|
|
{
|
|
ASSERT(!_isUnlockRunning);
|
|
|
|
if (_isUnlockRunning) {
|
|
qWarning() << "Double-call to unlockFolder.";
|
|
return;
|
|
}
|
|
|
|
_isUnlockRunning = true;
|
|
|
|
qDebug() << "Calling Unlock";
|
|
auto *unlockJob = new UnlockEncryptFolderApiJob(_propagator->account(), _folderId, _folderToken, _propagator->_journal, this);
|
|
|
|
connect(unlockJob, &UnlockEncryptFolderApiJob::success, [this](const QByteArray &folderId) {
|
|
qDebug() << "Successfully Unlocked";
|
|
_folderToken = "";
|
|
_folderId = "";
|
|
_isFolderLocked = false;
|
|
|
|
emit folderUnlocked(folderId, 200);
|
|
_isUnlockRunning = false;
|
|
});
|
|
connect(unlockJob, &UnlockEncryptFolderApiJob::error, [this](const QByteArray &folderId, int httpStatus) {
|
|
qDebug() << "Unlock Error";
|
|
|
|
emit folderUnlocked(folderId, httpStatus);
|
|
_isUnlockRunning = false;
|
|
});
|
|
unlockJob->start();
|
|
}
|
|
|
|
} // namespace OCC
|