1 /*
2 * Copyright (c) 2021-2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "inner_app_account_manager.h"
17
18 #include "ability_manager_adapter.h"
19 #include "account_info.h"
20 #include "account_log_wrapper.h"
21 #include "app_account_authenticator_session.h"
22 #include "app_account_control_manager.h"
23 #include "app_account_subscribe_manager.h"
24 #include "app_account_authorization_extension_callback_service.h"
25 #include "app_account_authorization_extension_stub.h"
26 #include "bundle_manager_adapter.h"
27
28 namespace OHOS {
29 namespace AccountSA {
InnerAppAccountManager()30 InnerAppAccountManager::InnerAppAccountManager()
31 : controlManager_(AppAccountControlManager::GetInstance()),
32 subscribeManager_(AppAccountSubscribeManager::GetInstance()),
33 sessionManager_(AppAccountAuthenticatorSessionManager::GetInstance())
34 {}
35
~InnerAppAccountManager()36 InnerAppAccountManager::~InnerAppAccountManager()
37 {}
38
AddAccount(const std::string & name,const std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)39 ErrCode InnerAppAccountManager::AddAccount(const std::string &name, const std::string &extraInfo,
40 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
41 {
42 AppAccountInfo appAccountInfo(name, bundleName);
43 appAccountInfo.SetAppIndex(appIndex);
44 return controlManager_.AddAccount(name, extraInfo, uid, bundleName, appAccountInfo);
45 }
46
AddAccountImplicitly(const AuthenticatorSessionRequest & request)47 ErrCode InnerAppAccountManager::AddAccountImplicitly(const AuthenticatorSessionRequest &request)
48 {
49 return sessionManager_.AddAccountImplicitly(request);
50 }
51
CreateAccount(const std::string & name,const CreateAccountOptions & options,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)52 ErrCode InnerAppAccountManager::CreateAccount(const std::string &name, const CreateAccountOptions &options,
53 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
54 {
55 AppAccountInfo appAccountInfo(name, bundleName);
56 appAccountInfo.SetAppIndex(appIndex);
57 return controlManager_.CreateAccount(name, options, uid, bundleName, appAccountInfo);
58 }
59
CreateAccountImplicitly(const AuthenticatorSessionRequest & request)60 ErrCode InnerAppAccountManager::CreateAccountImplicitly(const AuthenticatorSessionRequest &request)
61 {
62 return sessionManager_.CreateAccountImplicitly(request);
63 }
64
DeleteAccount(const std::string & name,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)65 ErrCode InnerAppAccountManager::DeleteAccount(
66 const std::string &name, const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
67 {
68 AppAccountInfo appAccountInfo(name, bundleName);
69 appAccountInfo.SetAppIndex(appIndex);
70 ErrCode result = controlManager_.DeleteAccount(name, uid, bundleName, appAccountInfo);
71 if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName))) {
72 ACCOUNT_LOGE("failed to publish account");
73 }
74 return result;
75 }
76
GetAccountExtraInfo(const std::string & name,std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)77 ErrCode InnerAppAccountManager::GetAccountExtraInfo(const std::string &name, std::string &extraInfo,
78 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
79 {
80 return controlManager_.GetAccountExtraInfo(name, extraInfo, uid, bundleName, appIndex);
81 }
82
SetAccountExtraInfo(const std::string & name,const std::string & extraInfo,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)83 ErrCode InnerAppAccountManager::SetAccountExtraInfo(const std::string &name, const std::string &extraInfo,
84 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
85 {
86 AppAccountInfo appAccountInfo(name, bundleName);
87 appAccountInfo.SetAppIndex(appIndex);
88 ErrCode result = controlManager_.SetAccountExtraInfo(name, extraInfo, uid, bundleName, appAccountInfo);
89 if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName))) {
90 ACCOUNT_LOGE("failed to publish account");
91 }
92 return result;
93 }
94
EnableAppAccess(const std::string & name,const std::string & authorizedApp,AppAccountCallingInfo & appAccountCallingInfo,const uint32_t apiVersion)95 ErrCode InnerAppAccountManager::EnableAppAccess(const std::string &name, const std::string &authorizedApp,
96 AppAccountCallingInfo &appAccountCallingInfo, const uint32_t apiVersion)
97 {
98 AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
99 appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
100 ErrCode result = controlManager_.EnableAppAccess(
101 name, authorizedApp, appAccountCallingInfo, appAccountInfo, apiVersion);
102 if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(
103 appAccountInfo, appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName))) {
104 ACCOUNT_LOGE("failed to publish account");
105 }
106 return result;
107 }
108
DisableAppAccess(const std::string & name,const std::string & authorizedApp,AppAccountCallingInfo & appAccountCallingInfo,const uint32_t apiVersion)109 ErrCode InnerAppAccountManager::DisableAppAccess(const std::string &name, const std::string &authorizedApp,
110 AppAccountCallingInfo &appAccountCallingInfo, const uint32_t apiVersion)
111 {
112 AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
113 appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
114 ErrCode result = controlManager_.DisableAppAccess(
115 name, authorizedApp, appAccountCallingInfo, appAccountInfo, apiVersion);
116 if ((result == ERR_OK) && (!subscribeManager_.PublishAccount(
117 appAccountInfo, appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName))) {
118 ACCOUNT_LOGE("failed to publish account");
119 }
120 return result;
121 }
122
CheckAppAccess(const std::string & name,const std::string & authorizedApp,bool & isAccessible,const AppAccountCallingInfo & appAccountCallingInfo)123 ErrCode InnerAppAccountManager::CheckAppAccess(const std::string &name, const std::string &authorizedApp,
124 bool &isAccessible, const AppAccountCallingInfo &appAccountCallingInfo)
125 {
126 return controlManager_.CheckAppAccess(name, authorizedApp, isAccessible, appAccountCallingInfo);
127 }
128
CheckAppAccountSyncEnable(const std::string & name,bool & syncEnable,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)129 ErrCode InnerAppAccountManager::CheckAppAccountSyncEnable(const std::string &name, bool &syncEnable,
130 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
131 {
132 return controlManager_.CheckAppAccountSyncEnable(name, syncEnable, uid, bundleName, appIndex);
133 }
134
SetAppAccountSyncEnable(const std::string & name,const bool & syncEnable,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)135 ErrCode InnerAppAccountManager::SetAppAccountSyncEnable(const std::string &name, const bool &syncEnable,
136 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
137 {
138 AppAccountInfo appAccountInfo(name, bundleName);
139 appAccountInfo.SetAppIndex(appIndex);
140 return controlManager_.SetAppAccountSyncEnable(name, syncEnable, uid, bundleName, appAccountInfo);
141 }
142
GetAssociatedData(const std::string & name,const std::string & key,std::string & value,const uid_t & uid)143 ErrCode InnerAppAccountManager::GetAssociatedData(const std::string &name, const std::string &key,
144 std::string &value, const uid_t &uid)
145 {
146 return controlManager_.GetAssociatedData(name, key, value, uid);
147 }
148
SetAssociatedData(const std::string & name,const std::string & key,const std::string & value,const AppAccountCallingInfo & appAccountCallingInfo)149 ErrCode InnerAppAccountManager::SetAssociatedData(const std::string &name, const std::string &key,
150 const std::string &value, const AppAccountCallingInfo &appAccountCallingInfo)
151 {
152 ErrCode result = controlManager_.SetAssociatedData(name, key, value, appAccountCallingInfo);
153 if (result != ERR_OK) {
154 return result;
155 }
156 AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
157 appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
158 if (!subscribeManager_.PublishAccount(appAccountInfo,
159 appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName)) {
160 ACCOUNT_LOGE("failed to publish account");
161 }
162 return result;
163 }
164
GetAccountCredential(const std::string & name,const std::string & credentialType,std::string & credential,const AppAccountCallingInfo & appAccountCallingInfo)165 ErrCode InnerAppAccountManager::GetAccountCredential(const std::string &name, const std::string &credentialType,
166 std::string &credential, const AppAccountCallingInfo &appAccountCallingInfo)
167 {
168 return controlManager_.GetAccountCredential(name, credentialType, credential, appAccountCallingInfo);
169 }
170
SetAccountCredential(const std::string & name,const std::string & credentialType,const std::string & credential,const AppAccountCallingInfo & appAccountCallingInfo)171 ErrCode InnerAppAccountManager::SetAccountCredential(const std::string &name, const std::string &credentialType,
172 const std::string &credential, const AppAccountCallingInfo &appAccountCallingInfo)
173 {
174 ErrCode result = controlManager_.SetAccountCredential(name, credentialType, credential, appAccountCallingInfo);
175 if (result != ERR_OK) {
176 return result;
177 }
178 AppAccountInfo appAccountInfo(name, appAccountCallingInfo.bundleName);
179 appAccountInfo.SetAppIndex(appAccountCallingInfo.appIndex);
180 if (!subscribeManager_.PublishAccount(appAccountInfo,
181 appAccountCallingInfo.callingUid, appAccountCallingInfo.bundleName)) {
182 ACCOUNT_LOGE("failed to publish account");
183 }
184 return result;
185 }
186
DeleteAccountCredential(const std::string & name,const std::string & credentialType,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)187 ErrCode InnerAppAccountManager::DeleteAccountCredential(const std::string &name, const std::string &credentialType,
188 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
189 {
190 AppAccountCallingInfo appAccountCallingInfo;
191 appAccountCallingInfo.callingUid = uid;
192 appAccountCallingInfo.bundleName = bundleName;
193 appAccountCallingInfo.appIndex = appIndex;
194 ErrCode result = controlManager_.DeleteAccountCredential(name, credentialType, appAccountCallingInfo);
195 if (result != ERR_OK) {
196 return result;
197 }
198 AppAccountInfo appAccountInfo(name, bundleName);
199 appAccountInfo.SetAppIndex(appIndex);
200 if (!subscribeManager_.PublishAccount(appAccountInfo, uid, bundleName)) {
201 ACCOUNT_LOGE("failed to publish account");
202 }
203 return result;
204 }
205
Authenticate(const AuthenticatorSessionRequest & request)206 ErrCode InnerAppAccountManager::Authenticate(const AuthenticatorSessionRequest &request)
207 {
208 std::string token;
209 ErrCode ret = ERR_OK;
210 bool isApi9 = request.options.GetBoolParam(Constants::API_V9, false);
211 if (isApi9) {
212 ret = controlManager_.GetOAuthToken(request, token, Constants::API_VERSION9);
213 } else {
214 ret = controlManager_.GetOAuthToken(request, token);
215 }
216 if (ret == ERR_OK) {
217 if ((request.callback != nullptr) && (request.callback->AsObject() != nullptr)) {
218 AAFwk::Want result;
219 result.SetParam(Constants::KEY_NAME, request.name);
220 result.SetParam(Constants::KEY_AUTH_TYPE, request.authType);
221 result.SetParam(Constants::KEY_TOKEN, token);
222 request.callback->OnResult(ERR_OK, result);
223 }
224 return ERR_OK;
225 }
226 if (isApi9) {
227 return sessionManager_.Auth(request);
228 }
229 return sessionManager_.Authenticate(request);
230 }
231
GetOAuthToken(const AuthenticatorSessionRequest & request,std::string & token,const uint32_t apiVersion)232 ErrCode InnerAppAccountManager::GetOAuthToken(
233 const AuthenticatorSessionRequest &request, std::string &token, const uint32_t apiVersion)
234 {
235 return controlManager_.GetOAuthToken(request, token, apiVersion);
236 }
237
SetOAuthToken(const AuthenticatorSessionRequest & request)238 ErrCode InnerAppAccountManager::SetOAuthToken(const AuthenticatorSessionRequest &request)
239 {
240 ErrCode result = controlManager_.SetOAuthToken(request);
241 if (result != ERR_OK) {
242 return result;
243 }
244 AppAccountInfo appAccountInfo(request.name, request.callerBundleName);
245 appAccountInfo.SetAppIndex(request.appIndex);
246 if (!subscribeManager_.PublishAccount(appAccountInfo, request.callerUid, request.callerBundleName)) {
247 ACCOUNT_LOGE("failed to publish account");
248 }
249 return ERR_OK;
250 }
251
DeleteOAuthToken(const AuthenticatorSessionRequest & request,const uint32_t apiVersion)252 ErrCode InnerAppAccountManager::DeleteOAuthToken(const AuthenticatorSessionRequest &request, const uint32_t apiVersion)
253 {
254 return controlManager_.DeleteOAuthToken(request, apiVersion);
255 }
256
SetOAuthTokenVisibility(const AuthenticatorSessionRequest & request,const uint32_t apiVersion)257 ErrCode InnerAppAccountManager::SetOAuthTokenVisibility(
258 const AuthenticatorSessionRequest &request, const uint32_t apiVersion)
259 {
260 return controlManager_.SetOAuthTokenVisibility(request, apiVersion);
261 }
262
CheckOAuthTokenVisibility(const AuthenticatorSessionRequest & request,bool & isVisible,const uint32_t apiVersion)263 ErrCode InnerAppAccountManager::CheckOAuthTokenVisibility(
264 const AuthenticatorSessionRequest &request, bool &isVisible, const uint32_t apiVersion)
265 {
266 return controlManager_.CheckOAuthTokenVisibility(request, isVisible, apiVersion);
267 }
268
GetAuthenticatorInfo(const AuthenticatorSessionRequest & request,AuthenticatorInfo & info)269 ErrCode InnerAppAccountManager::GetAuthenticatorInfo(
270 const AuthenticatorSessionRequest &request, AuthenticatorInfo &info)
271 {
272 return AppAccountAuthenticatorManager::GetAuthenticatorInfo(
273 request.owner, request.callerUid / UID_TRANSFORM_DIVISOR, info);
274 }
275
GetAllOAuthTokens(const AuthenticatorSessionRequest & request,std::vector<OAuthTokenInfo> & tokenInfos)276 ErrCode InnerAppAccountManager::GetAllOAuthTokens(
277 const AuthenticatorSessionRequest &request, std::vector<OAuthTokenInfo> &tokenInfos)
278 {
279 return controlManager_.GetAllOAuthTokens(request, tokenInfos);
280 }
281
GetOAuthList(const AuthenticatorSessionRequest & request,std::set<std::string> & oauthList,const uint32_t apiVersion)282 ErrCode InnerAppAccountManager::GetOAuthList(
283 const AuthenticatorSessionRequest &request, std::set<std::string> &oauthList, const uint32_t apiVersion)
284 {
285 return controlManager_.GetOAuthList(request, oauthList, apiVersion);
286 }
287
GetAuthenticatorCallback(const AuthenticatorSessionRequest & request,sptr<IRemoteObject> & callback)288 ErrCode InnerAppAccountManager::GetAuthenticatorCallback(
289 const AuthenticatorSessionRequest &request, sptr<IRemoteObject> &callback)
290 {
291 callback = nullptr;
292 return sessionManager_.GetAuthenticatorCallback(request, callback);
293 }
294
GetAllAccounts(const std::string & owner,std::vector<AppAccountInfo> & appAccounts,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)295 ErrCode InnerAppAccountManager::GetAllAccounts(const std::string &owner, std::vector<AppAccountInfo> &appAccounts,
296 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
297 {
298 return controlManager_.GetAllAccounts(owner, appAccounts, uid, bundleName, appIndex);
299 }
300
GetAllAccessibleAccounts(std::vector<AppAccountInfo> & appAccounts,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)301 ErrCode InnerAppAccountManager::GetAllAccessibleAccounts(std::vector<AppAccountInfo> &appAccounts,
302 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
303 {
304 return controlManager_.GetAllAccessibleAccounts(appAccounts, uid, bundleName, appIndex);
305 }
306
SelectAccountsByOptions(const SelectAccountsOptions & options,const sptr<IAppAccountAuthenticatorCallback> & callback,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)307 ErrCode InnerAppAccountManager::SelectAccountsByOptions(
308 const SelectAccountsOptions &options, const sptr<IAppAccountAuthenticatorCallback> &callback,
309 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
310 {
311 AuthenticatorSessionRequest request;
312 return controlManager_.SelectAccountsByOptions(options, callback, uid, bundleName, appIndex);
313 }
314
VerifyCredential(const AuthenticatorSessionRequest & request)315 ErrCode InnerAppAccountManager::VerifyCredential(const AuthenticatorSessionRequest &request)
316 {
317 return sessionManager_.VerifyCredential(request);
318 }
319
CheckAccountLabels(const AuthenticatorSessionRequest & request)320 ErrCode InnerAppAccountManager::CheckAccountLabels(const AuthenticatorSessionRequest &request)
321 {
322 return sessionManager_.CheckAccountLabels(request);
323 }
324
SetAuthenticatorProperties(const AuthenticatorSessionRequest & request)325 ErrCode InnerAppAccountManager::SetAuthenticatorProperties(const AuthenticatorSessionRequest &request)
326 {
327 return sessionManager_.SetAuthenticatorProperties(request);
328 }
329
SubscribeAppAccount(const AppAccountSubscribeInfo & subscribeInfo,const sptr<IRemoteObject> & eventListener,const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)330 ErrCode InnerAppAccountManager::SubscribeAppAccount(const AppAccountSubscribeInfo &subscribeInfo,
331 const sptr<IRemoteObject> &eventListener, const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
332 {
333 auto subscribeInfoPtr = std::make_shared<AppAccountSubscribeInfo>(subscribeInfo);
334 return subscribeManager_.SubscribeAppAccount(subscribeInfoPtr, eventListener, uid, bundleName, appIndex);
335 }
336
UnsubscribeAppAccount(const sptr<IRemoteObject> & eventListener)337 ErrCode InnerAppAccountManager::UnsubscribeAppAccount(const sptr<IRemoteObject> &eventListener)
338 {
339 return subscribeManager_.UnsubscribeAppAccount(eventListener);
340 }
341
OnPackageRemoved(const uid_t & uid,const std::string & bundleName,const uint32_t & appIndex)342 ErrCode InnerAppAccountManager::OnPackageRemoved(
343 const uid_t &uid, const std::string &bundleName, const uint32_t &appIndex)
344 {
345 return controlManager_.OnPackageRemoved(uid, bundleName, appIndex);
346 }
347
OnUserRemoved(int32_t userId)348 ErrCode InnerAppAccountManager::OnUserRemoved(int32_t userId)
349 {
350 return controlManager_.OnUserRemoved(userId);
351 }
352 } // namespace AccountSA
353 } // namespace OHOS
354