1 /*
2  * Copyright (c) 2021-2023 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "inner_app_account_manager.h"
17 
18 #include "ability_manager_adapter.h"
19 #include "account_info.h"
20 #include "account_log_wrapper.h"
21 #include "app_account_authenticator_session.h"
22 #include "app_account_control_manager.h"
23 #include "app_account_subscribe_manager.h"
24 #include "app_account_authorization_extension_callback_service.h"
25 #include "app_account_authorization_extension_stub.h"
26 #include "bundle_manager_adapter.h"
27 
28 namespace OHOS {
29 namespace AccountSA {
InnerAppAccountManager()30 InnerAppAccountManager::InnerAppAccountManager()
31     : controlManager_(AppAccountControlManager::GetInstance()),
32       subscribeManager_(AppAccountSubscribeManager::GetInstance()),
33       sessionManager_(AppAccountAuthenticatorSessionManager::GetInstance())
34 {}
35 
~InnerAppAccountManager()36 InnerAppAccountManager::~InnerAppAccountManager()
37 {}
38 
AddAccount(const std::string & name,const std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)39 ErrCode InnerAppAccountManager::AddAccount(const std::string &name, const std::string &extraInfo,
40     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
41 {
42     AppAccountInfo appAccountInfo(name, bundleName);
43     appAccountInfo.SetAppIndex(appIndex);
44     return controlManager_.AddAccount(name, extraInfo, uid, bundleName, appAccountInfo);
45 }
46 
AddAccountImplicitly(const AuthenticatorSessionRequest & request)47 ErrCode InnerAppAccountManager::AddAccountImplicitly(const AuthenticatorSessionRequest &request)
48 {
49     return sessionManager_.AddAccountImplicitly(request);
50 }
51 
CreateAccount(const std::string & name,const CreateAccountOptions & options,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)52 ErrCode InnerAppAccountManager::CreateAccount(const std::string &name, const CreateAccountOptions &options,
53     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
54 {
55     AppAccountInfo appAccountInfo(name, bundleName);
56     appAccountInfo.SetAppIndex(appIndex);
57     return controlManager_.CreateAccount(name, options, uid, bundleName, appAccountInfo);
58 }
59 
CreateAccountImplicitly(const AuthenticatorSessionRequest & request)60 ErrCode InnerAppAccountManager::CreateAccountImplicitly(const AuthenticatorSessionRequest &request)
61 {
62     return sessionManager_.CreateAccountImplicitly(request);
63 }
64 
DeleteAccount(const std::string & name,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)65 ErrCode InnerAppAccountManager::DeleteAccount(
66     const std::string &name, const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
67 {
68     AppAccountInfo appAccountInfo(name, bundleName);
69     appAccountInfo.SetAppIndex(appIndex);
70     ErrCode result = controlManager_.DeleteAccount(name, uid, bundleName, appAccountInfo);
71     if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName))) {
72         ACCOUNT_LOGE("failed to publish account");
73     }
74     return result;
75 }
76 
GetAccountExtraInfo(const std::string & name,std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)77 ErrCode InnerAppAccountManager::GetAccountExtraInfo(const std::string &name, std::string &extraInfo,
78     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
79 {
80     return controlManager_.GetAccountExtraInfo(name, extraInfo, uid, bundleName, appIndex);
81 }
82 
SetAccountExtraInfo(const std::string & name,const std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)83 ErrCode InnerAppAccountManager::SetAccountExtraInfo(const std::string &name, const std::string &extraInfo,
84     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
85 {
86     AppAccountInfo appAccountInfo(name, bundleName);
87     appAccountInfo.SetAppIndex(appIndex);
88     ErrCode result = controlManager_.SetAccountExtraInfo(name, extraInfo, uid, bundleName, appAccountInfo);
89     if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName))) {
90         ACCOUNT_LOGE("failed to publish account");
91     }
92     return result;
93 }
94 
EnableAppAccess(const std::string & name,const std::string & authorizedApp,AppAccountCallingInfo & appAccountCallingInfo,const uint32_t apiVersion)95 ErrCode InnerAppAccountManager::EnableAppAccess(const std::string &name, const std::string &authorizedApp,
96     AppAccountCallingInfo &appAccountCallingInfo, const uint32_t apiVersion)
97 {
98     AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
99     appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
100     ErrCode result = controlManager_.EnableAppAccess(
101         name, authorizedApp, appAccountCallingInfo, appAccountInfo, apiVersion);
102     if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(
103         appAccountInfo, appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName))) {
104         ACCOUNT_LOGE("failed to publish account");
105     }
106     return result;
107 }
108 
DisableAppAccess(const std::string & name,const std::string & authorizedApp,AppAccountCallingInfo & appAccountCallingInfo,const uint32_t apiVersion)109 ErrCode InnerAppAccountManager::DisableAppAccess(const std::string &name, const std::string &authorizedApp,
110     AppAccountCallingInfo &appAccountCallingInfo, const uint32_t apiVersion)
111 {
112     AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
113     appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
114     ErrCode result = controlManager_.DisableAppAccess(
115         name, authorizedApp, appAccountCallingInfo, appAccountInfo, apiVersion);
116     if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(
117         appAccountInfo, appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName))) {
118         ACCOUNT_LOGE("failed to publish account");
119     }
120     return result;
121 }
122 
CheckAppAccess(const std::string & name,const std::string & authorizedApp,bool & isAccessible,const AppAccountCallingInfo & appAccountCallingInfo)123 ErrCode InnerAppAccountManager::CheckAppAccess(const std::string &name, const std::string &authorizedApp,
124     bool &isAccessible, const AppAccountCallingInfo &appAccountCallingInfo)
125 {
126     return controlManager_.CheckAppAccess(name, authorizedApp, isAccessible, appAccountCallingInfo);
127 }
128 
CheckAppAccountSyncEnable(const std::string & name,bool & syncEnable,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)129 ErrCode InnerAppAccountManager::CheckAppAccountSyncEnable(const std::string &name, bool &syncEnable,
130     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
131 {
132     return controlManager_.CheckAppAccountSyncEnable(name, syncEnable, uid, bundleName, appIndex);
133 }
134 
SetAppAccountSyncEnable(const std::string & name,const bool & syncEnable,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)135 ErrCode InnerAppAccountManager::SetAppAccountSyncEnable(const std::string &name, const bool &syncEnable,
136     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
137 {
138     AppAccountInfo appAccountInfo(name, bundleName);
139     appAccountInfo.SetAppIndex(appIndex);
140     return controlManager_.SetAppAccountSyncEnable(name, syncEnable, uid, bundleName, appAccountInfo);
141 }
142 
GetAssociatedData(const std::string & name,const std::string & key,std::string & value,const uid_t & uid)143 ErrCode InnerAppAccountManager::GetAssociatedData(const std::string &name, const std::string &key,
144     std::string &value, const uid_t &uid)
145 {
146     return controlManager_.GetAssociatedData(name, key, value, uid);
147 }
148 
SetAssociatedData(const std::string & name,const std::string & key,const std::string & value,const AppAccountCallingInfo & appAccountCallingInfo)149 ErrCode InnerAppAccountManager::SetAssociatedData(const std::string &name, const std::string &key,
150     const std::string &value, const AppAccountCallingInfo &appAccountCallingInfo)
151 {
152     ErrCode result = controlManager_.SetAssociatedData(name, key, value, appAccountCallingInfo);
153     if (result != ERR_OK) {
154         return result;
155     }
156     AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
157     appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
158     if (!subscribeManager_.PublishAccount(appAccountInfo,
159         appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName)) {
160         ACCOUNT_LOGE("failed to publish account");
161     }
162     return result;
163 }
164 
GetAccountCredential(const std::string & name,const std::string & credentialType,std::string & credential,const AppAccountCallingInfo & appAccountCallingInfo)165 ErrCode InnerAppAccountManager::GetAccountCredential(const std::string &name, const std::string &credentialType,
166     std::string &credential, const AppAccountCallingInfo &appAccountCallingInfo)
167 {
168     return controlManager_.GetAccountCredential(name, credentialType, credential, appAccountCallingInfo);
169 }
170 
SetAccountCredential(const std::string & name,const std::string & credentialType,const std::string & credential,const AppAccountCallingInfo & appAccountCallingInfo)171 ErrCode InnerAppAccountManager::SetAccountCredential(const std::string &name, const std::string &credentialType,
172     const std::string &credential, const AppAccountCallingInfo &appAccountCallingInfo)
173 {
174     ErrCode result = controlManager_.SetAccountCredential(name, credentialType, credential, appAccountCallingInfo);
175     if (result != ERR_OK) {
176         return result;
177     }
178     AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
179     appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
180     if (!subscribeManager_.PublishAccount(appAccountInfo,
181         appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName)) {
182         ACCOUNT_LOGE("failed to publish account");
183     }
184     return result;
185 }
186 
DeleteAccountCredential(const std::string & name,const std::string & credentialType,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)187 ErrCode InnerAppAccountManager::DeleteAccountCredential(const std::string &name, const std::string &credentialType,
188     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
189 {
190     AppAccountCallingInfo appAccountCallingInfo;
191     appAccountCallingInfo.callingUid = uid;
192     appAccountCallingInfo.bundleName = bundleName;
193     appAccountCallingInfo.appIndex = appIndex;
194     ErrCode result = controlManager_.DeleteAccountCredential(name, credentialType, appAccountCallingInfo);
195     if (result != ERR_OK) {
196         return result;
197     }
198     AppAccountInfo appAccountInfo(name, bundleName);
199     appAccountInfo.SetAppIndex(appIndex);
200     if (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName)) {
201         ACCOUNT_LOGE("failed to publish account");
202     }
203     return result;
204 }
205 
Authenticate(const AuthenticatorSessionRequest & request)206 ErrCode InnerAppAccountManager::Authenticate(const AuthenticatorSessionRequest &request)
207 {
208     std::string token;
209     ErrCode ret = ERR_OK;
210     bool isApi9 = request.options.GetBoolParam(Constants::API_V9, false);
211     if (isApi9) {
212         ret = controlManager_.GetOAuthToken(request, token, Constants::API_VERSION9);
213     } else {
214         ret = controlManager_.GetOAuthToken(request, token);
215     }
216     if (ret == ERR_OK) {
217         if ((request.callback != nullptr) && (request.callback->AsObject() != nullptr)) {
218             AAFwk::Want result;
219             result.SetParam(Constants::KEY_NAME, request.name);
220             result.SetParam(Constants::KEY_AUTH_TYPE, request.authType);
221             result.SetParam(Constants::KEY_TOKEN, token);
222             request.callback->OnResult(ERR_OK, result);
223         }
224         return ERR_OK;
225     }
226     if (isApi9) {
227         return sessionManager_.Auth(request);
228     }
229     return sessionManager_.Authenticate(request);
230 }
231 
GetOAuthToken(const AuthenticatorSessionRequest & request,std::string & token,const uint32_t apiVersion)232 ErrCode InnerAppAccountManager::GetOAuthToken(
233     const AuthenticatorSessionRequest &request, std::string &token, const uint32_t apiVersion)
234 {
235     return controlManager_.GetOAuthToken(request, token, apiVersion);
236 }
237 
SetOAuthToken(const AuthenticatorSessionRequest & request)238 ErrCode InnerAppAccountManager::SetOAuthToken(const AuthenticatorSessionRequest &request)
239 {
240     ErrCode result = controlManager_.SetOAuthToken(request);
241     if (result != ERR_OK) {
242         return result;
243     }
244     AppAccountInfo appAccountInfo(request.name, request.callerBundleName);
245     appAccountInfo.SetAppIndex(request.appIndex);
246     if (!subscribeManager_.PublishAccount(appAccountInfo, request.callerUid, request.callerBundleName)) {
247         ACCOUNT_LOGE("failed to publish account");
248     }
249     return ERR_OK;
250 }
251 
DeleteOAuthToken(const AuthenticatorSessionRequest & request,const uint32_t apiVersion)252 ErrCode InnerAppAccountManager::DeleteOAuthToken(const AuthenticatorSessionRequest &request, const uint32_t apiVersion)
253 {
254     return controlManager_.DeleteOAuthToken(request, apiVersion);
255 }
256 
SetOAuthTokenVisibility(const AuthenticatorSessionRequest & request,const uint32_t apiVersion)257 ErrCode InnerAppAccountManager::SetOAuthTokenVisibility(
258     const AuthenticatorSessionRequest &request, const uint32_t apiVersion)
259 {
260     return controlManager_.SetOAuthTokenVisibility(request, apiVersion);
261 }
262 
CheckOAuthTokenVisibility(const AuthenticatorSessionRequest & request,bool & isVisible,const uint32_t apiVersion)263 ErrCode InnerAppAccountManager::CheckOAuthTokenVisibility(
264     const AuthenticatorSessionRequest &request, bool &isVisible, const uint32_t apiVersion)
265 {
266     return controlManager_.CheckOAuthTokenVisibility(request, isVisible, apiVersion);
267 }
268 
GetAuthenticatorInfo(const AuthenticatorSessionRequest & request,AuthenticatorInfo & info)269 ErrCode InnerAppAccountManager::GetAuthenticatorInfo(
270     const AuthenticatorSessionRequest &request, AuthenticatorInfo &info)
271 {
272     return AppAccountAuthenticatorManager::GetAuthenticatorInfo(
273         request.owner, request.callerUid / UID_TRANSFORM_DIVISOR, info);
274 }
275 
GetAllOAuthTokens(const AuthenticatorSessionRequest & request,std::vector<OAuthTokenInfo> & tokenInfos)276 ErrCode InnerAppAccountManager::GetAllOAuthTokens(
277     const AuthenticatorSessionRequest &request, std::vector<OAuthTokenInfo> &tokenInfos)
278 {
279     return controlManager_.GetAllOAuthTokens(request, tokenInfos);
280 }
281 
GetOAuthList(const AuthenticatorSessionRequest & request,std::set<std::string> & oauthList,const uint32_t apiVersion)282 ErrCode InnerAppAccountManager::GetOAuthList(
283     const AuthenticatorSessionRequest &request, std::set<std::string> &oauthList, const uint32_t apiVersion)
284 {
285     return controlManager_.GetOAuthList(request, oauthList, apiVersion);
286 }
287 
GetAuthenticatorCallback(const AuthenticatorSessionRequest & request,sptr<IRemoteObject> & callback)288 ErrCode InnerAppAccountManager::GetAuthenticatorCallback(
289     const AuthenticatorSessionRequest &request, sptr<IRemoteObject> &callback)
290 {
291     callback = nullptr;
292     return sessionManager_.GetAuthenticatorCallback(request, callback);
293 }
294 
GetAllAccounts(const std::string & owner,std::vector<AppAccountInfo> & appAccounts,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)295 ErrCode InnerAppAccountManager::GetAllAccounts(const std::string &owner, std::vector<AppAccountInfo> &appAccounts,
296     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
297 {
298     return controlManager_.GetAllAccounts(owner, appAccounts, uid, bundleName, appIndex);
299 }
300 
GetAllAccessibleAccounts(std::vector<AppAccountInfo> & appAccounts,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)301 ErrCode InnerAppAccountManager::GetAllAccessibleAccounts(std::vector<AppAccountInfo> &appAccounts,
302     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
303 {
304     return controlManager_.GetAllAccessibleAccounts(appAccounts, uid, bundleName, appIndex);
305 }
306 
SelectAccountsByOptions(const SelectAccountsOptions & options,const sptr<IAppAccountAuthenticatorCallback> & callback,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)307 ErrCode InnerAppAccountManager::SelectAccountsByOptions(
308     const SelectAccountsOptions &options, const sptr<IAppAccountAuthenticatorCallback> &callback,
309     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
310 {
311     AuthenticatorSessionRequest request;
312     return controlManager_.SelectAccountsByOptions(options, callback, uid, bundleName, appIndex);
313 }
314 
VerifyCredential(const AuthenticatorSessionRequest & request)315 ErrCode InnerAppAccountManager::VerifyCredential(const AuthenticatorSessionRequest &request)
316 {
317     return sessionManager_.VerifyCredential(request);
318 }
319 
CheckAccountLabels(const AuthenticatorSessionRequest & request)320 ErrCode InnerAppAccountManager::CheckAccountLabels(const AuthenticatorSessionRequest &request)
321 {
322     return sessionManager_.CheckAccountLabels(request);
323 }
324 
SetAuthenticatorProperties(const AuthenticatorSessionRequest & request)325 ErrCode InnerAppAccountManager::SetAuthenticatorProperties(const AuthenticatorSessionRequest &request)
326 {
327     return sessionManager_.SetAuthenticatorProperties(request);
328 }
329 
SubscribeAppAccount(const AppAccountSubscribeInfo & subscribeInfo,const sptr<IRemoteObject> & eventListener,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)330 ErrCode InnerAppAccountManager::SubscribeAppAccount(const AppAccountSubscribeInfo &subscribeInfo,
331     const sptr<IRemoteObject> &eventListener, const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
332 {
333     auto subscribeInfoPtr = std::make_shared<AppAccountSubscribeInfo>(subscribeInfo);
334     return subscribeManager_.SubscribeAppAccount(subscribeInfoPtr, eventListener, uid, bundleName, appIndex);
335 }
336 
UnsubscribeAppAccount(const sptr<IRemoteObject> & eventListener)337 ErrCode InnerAppAccountManager::UnsubscribeAppAccount(const sptr<IRemoteObject> &eventListener)
338 {
339     return subscribeManager_.UnsubscribeAppAccount(eventListener);
340 }
341 
OnPackageRemoved(const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)342 ErrCode InnerAppAccountManager::OnPackageRemoved(
343     const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
344 {
345     return controlManager_.OnPackageRemoved(uid, bundleName, appIndex);
346 }
347 
OnUserRemoved(int32_t userId)348 ErrCode InnerAppAccountManager::OnUserRemoved(int32_t userId)
349 {
350     return controlManager_.OnUserRemoved(userId);
351 }
352 }  // namespace AccountSA
353 }  // namespace OHOS
354