Use placeholder values for password fields in external storage webui
This prevents the password from being sent to the webui. While an admin will always be able to retrieve the passwords (as they can do arbitrairy code execution by design) this prevents casual password snooping Signed-off-by: Robin Appelman <robin@icewind.nl>
This commit is contained in:
parent
24d0fb9fcd
commit
0d112d7901
|
@ -113,7 +113,7 @@ class GlobalStoragesController extends StoragesController {
|
|||
$this->updateStorageStatus($newStorage);
|
||||
|
||||
return new DataResponse(
|
||||
$newStorage,
|
||||
$this->formatStorageForUI($newStorage),
|
||||
Http::STATUS_CREATED
|
||||
);
|
||||
}
|
||||
|
@ -180,7 +180,7 @@ class GlobalStoragesController extends StoragesController {
|
|||
$this->updateStorageStatus($storage, $testOnly);
|
||||
|
||||
return new DataResponse(
|
||||
$storage,
|
||||
$this->formatStorageForUI($storage),
|
||||
Http::STATUS_OK
|
||||
);
|
||||
|
||||
|
|
|
@ -31,6 +31,7 @@ namespace OCA\Files_External\Controller;
|
|||
|
||||
use OCA\Files_External\Lib\Auth\AuthMechanism;
|
||||
use OCA\Files_External\Lib\Backend\Backend;
|
||||
use OCA\Files_External\Lib\DefinitionParameter;
|
||||
use OCA\Files_External\Lib\InsufficientDataForMeaningfulAnswerException;
|
||||
use OCA\Files_External\Lib\StorageConfig;
|
||||
use OCA\Files_External\NotFoundException;
|
||||
|
@ -146,9 +147,9 @@ abstract class StoragesController extends Controller {
|
|||
$mountPoint = $storage->getMountPoint();
|
||||
if ($mountPoint === '') {
|
||||
return new DataResponse(
|
||||
array(
|
||||
'message' => (string)$this->l10n->t('Invalid mount point')
|
||||
),
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Invalid mount point'),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
|
@ -156,9 +157,9 @@ abstract class StoragesController extends Controller {
|
|||
if ($storage->getBackendOption('objectstore')) {
|
||||
// objectstore must not be sent from client side
|
||||
return new DataResponse(
|
||||
array(
|
||||
'message' => (string)$this->l10n->t('Objectstore forbidden')
|
||||
),
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Objectstore forbidden'),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
|
@ -170,11 +171,11 @@ abstract class StoragesController extends Controller {
|
|||
if ($backend->checkDependencies()) {
|
||||
// invalid backend
|
||||
return new DataResponse(
|
||||
array(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Invalid storage backend "%s"', [
|
||||
$backend->getIdentifier()
|
||||
])
|
||||
),
|
||||
$backend->getIdentifier(),
|
||||
]),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
|
@ -182,22 +183,22 @@ abstract class StoragesController extends Controller {
|
|||
if (!$backend->isVisibleFor($this->service->getVisibilityType())) {
|
||||
// not permitted to use backend
|
||||
return new DataResponse(
|
||||
array(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Not permitted to use backend "%s"', [
|
||||
$backend->getIdentifier()
|
||||
])
|
||||
),
|
||||
$backend->getIdentifier(),
|
||||
]),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
if (!$authMechanism->isVisibleFor($this->service->getVisibilityType())) {
|
||||
// not permitted to use auth mechanism
|
||||
return new DataResponse(
|
||||
array(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Not permitted to use authentication mechanism "%s"', [
|
||||
$authMechanism->getIdentifier()
|
||||
])
|
||||
),
|
||||
$authMechanism->getIdentifier(),
|
||||
]),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
|
@ -205,9 +206,9 @@ abstract class StoragesController extends Controller {
|
|||
if (!$backend->validateStorage($storage)) {
|
||||
// unsatisfied parameters
|
||||
return new DataResponse(
|
||||
array(
|
||||
'message' => (string)$this->l10n->t('Unsatisfied backend parameters')
|
||||
),
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Unsatisfied backend parameters'),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
}
|
||||
|
@ -215,7 +216,7 @@ abstract class StoragesController extends Controller {
|
|||
// unsatisfied parameters
|
||||
return new DataResponse(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Unsatisfied authentication mechanism parameters')
|
||||
'message' => (string)$this->l10n->t('Unsatisfied authentication mechanism parameters'),
|
||||
],
|
||||
Http::STATUS_UNPROCESSABLE_ENTITY
|
||||
);
|
||||
|
@ -272,7 +273,7 @@ abstract class StoragesController extends Controller {
|
|||
// FIXME: convert storage exceptions to StorageNotAvailableException
|
||||
$storage->setStatus(
|
||||
StorageNotAvailableException::STATUS_ERROR,
|
||||
get_class($e).': '.$e->getMessage()
|
||||
get_class($e) . ': ' . $e->getMessage()
|
||||
);
|
||||
}
|
||||
}
|
||||
|
@ -283,7 +284,7 @@ abstract class StoragesController extends Controller {
|
|||
* @return DataResponse
|
||||
*/
|
||||
public function index() {
|
||||
$storages = $this->service->getStorages();
|
||||
$storages = $this->formatStoragesForUI($this->service->getStorages());
|
||||
|
||||
return new DataResponse(
|
||||
$storages,
|
||||
|
@ -291,6 +292,29 @@ abstract class StoragesController extends Controller {
|
|||
);
|
||||
}
|
||||
|
||||
protected function formatStoragesForUI(array $storages): array {
|
||||
return array_map(function ($storage) {
|
||||
return $this->formatStorageForUI($storage);
|
||||
}, $storages);
|
||||
}
|
||||
|
||||
protected function formatStorageForUI(StorageConfig $storage): StorageConfig {
|
||||
/** @var DefinitionParameter[] $parameters */
|
||||
$parameters = array_merge($storage->getBackend()->getParameters(), $storage->getAuthMechanism()->getParameters());
|
||||
|
||||
$options = $storage->getBackendOptions();
|
||||
foreach ($options as $key => $value) {
|
||||
foreach ($parameters as $parameter) {
|
||||
if ($parameter->getName() === $key && $parameter->getType() === DefinitionParameter::VALUE_PASSWORD) {
|
||||
$storage->setBackendOption($key, DefinitionParameter::UNMODIFIED_PLACEHOLDER);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return $storage;
|
||||
}
|
||||
|
||||
/**
|
||||
* Get an external storage entry.
|
||||
*
|
||||
|
@ -307,14 +331,14 @@ abstract class StoragesController extends Controller {
|
|||
} catch (NotFoundException $e) {
|
||||
return new DataResponse(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Storage with ID "%d" not found', array($id))
|
||||
'message' => (string)$this->l10n->t('Storage with ID "%d" not found', [$id]),
|
||||
],
|
||||
Http::STATUS_NOT_FOUND
|
||||
);
|
||||
}
|
||||
|
||||
return new DataResponse(
|
||||
$storage,
|
||||
$this->formatStorageForUI($storage),
|
||||
Http::STATUS_OK
|
||||
);
|
||||
}
|
||||
|
@ -332,7 +356,7 @@ abstract class StoragesController extends Controller {
|
|||
} catch (NotFoundException $e) {
|
||||
return new DataResponse(
|
||||
[
|
||||
'message' => (string)$this->l10n->t('Storage with ID "%d" not found', array($id))
|
||||
'message' => (string)$this->l10n->t('Storage with ID "%d" not found', [$id]),
|
||||
],
|
||||
Http::STATUS_NOT_FOUND
|
||||
);
|
||||
|
|
|
@ -85,7 +85,7 @@ class UserGlobalStoragesController extends StoragesController {
|
|||
* @NoAdminRequired
|
||||
*/
|
||||
public function index() {
|
||||
$storages = $this->service->getUniqueStorages();
|
||||
$storages = $this->formatStoragesForUI($this->service->getUniqueStorages());
|
||||
|
||||
// remove configuration data, this must be kept private
|
||||
foreach ($storages as $storage) {
|
||||
|
@ -133,7 +133,7 @@ class UserGlobalStoragesController extends StoragesController {
|
|||
$this->sanitizeStorage($storage);
|
||||
|
||||
return new DataResponse(
|
||||
$storage,
|
||||
$this->formatStorageForUI($storage),
|
||||
Http::STATUS_OK
|
||||
);
|
||||
}
|
||||
|
@ -182,7 +182,7 @@ class UserGlobalStoragesController extends StoragesController {
|
|||
$this->sanitizeStorage($storage);
|
||||
|
||||
return new DataResponse(
|
||||
$storage,
|
||||
$this->formatStorageForUI($storage),
|
||||
Http::STATUS_OK
|
||||
);
|
||||
|
||||
|
|
|
@ -148,7 +148,7 @@ class UserStoragesController extends StoragesController {
|
|||
$this->updateStorageStatus($newStorage);
|
||||
|
||||
return new DataResponse(
|
||||
$newStorage,
|
||||
$this->formatStorageForUI($newStorage),
|
||||
Http::STATUS_CREATED
|
||||
);
|
||||
}
|
||||
|
@ -208,7 +208,7 @@ class UserStoragesController extends StoragesController {
|
|||
$this->updateStorageStatus($storage, $testOnly);
|
||||
|
||||
return new DataResponse(
|
||||
$storage,
|
||||
$this->formatStorageForUI($storage),
|
||||
Http::STATUS_OK
|
||||
);
|
||||
|
||||
|
|
|
@ -51,7 +51,6 @@ use OCA\Files_External\Lib\VisibilityTrait;
|
|||
* Object can affect storage mounting
|
||||
*/
|
||||
class AuthMechanism implements \JsonSerializable {
|
||||
|
||||
/** Standard authentication schemes */
|
||||
const SCHEME_NULL = 'null';
|
||||
const SCHEME_BUILTIN = 'builtin';
|
||||
|
|
|
@ -27,6 +27,9 @@ namespace OCA\Files_External\Lib;
|
|||
* Parameter for an external storage definition
|
||||
*/
|
||||
class DefinitionParameter implements \JsonSerializable {
|
||||
// placeholder value for password fields, when the client updates a storage configuration
|
||||
// placeholder values are ignored and the field is left unmodified
|
||||
const UNMODIFIED_PLACEHOLDER = '__unmodified__';
|
||||
|
||||
/** Value constants */
|
||||
const VALUE_TEXT = 0;
|
||||
|
|
|
@ -154,5 +154,4 @@ trait FrontendDefinitionTrait {
|
|||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
}
|
||||
|
|
|
@ -36,6 +36,7 @@ use OCA\Files_External\Lib\Auth\AuthMechanism;
|
|||
use OCA\Files_External\Lib\Auth\InvalidAuth;
|
||||
use OCA\Files_External\Lib\Backend\Backend;
|
||||
use OCA\Files_External\Lib\Backend\InvalidBackend;
|
||||
use OCA\Files_External\Lib\DefinitionParameter;
|
||||
use OCA\Files_External\Lib\StorageConfig;
|
||||
use OCA\Files_External\NotFoundException;
|
||||
use OCP\Files\Config\IUserMountCache;
|
||||
|
@ -427,7 +428,9 @@ abstract class StoragesService {
|
|||
$changedOptions = array_diff_assoc($updatedStorage->getMountOptions(), $oldStorage->getMountOptions());
|
||||
|
||||
foreach ($changedConfig as $key => $value) {
|
||||
$this->dbConfig->setConfig($id, $key, $value);
|
||||
if ($value !== DefinitionParameter::UNMODIFIED_PLACEHOLDER) {
|
||||
$this->dbConfig->setConfig($id, $key, $value);
|
||||
}
|
||||
}
|
||||
foreach ($changedOptions as $key => $value) {
|
||||
$this->dbConfig->setOption($id, $key, $value);
|
||||
|
|
Loading…
Reference in New Issue