491 lines
15 KiB
PHP
491 lines
15 KiB
PHP
<?php
|
|
/**
|
|
* @author Andreas Fischer <bantu@owncloud.com>
|
|
* @author Bart Visscher <bartv@thisnet.nl>
|
|
* @author Björn Schießle <schiessle@owncloud.com>
|
|
* @author Frank Karlitschek <frank@owncloud.org>
|
|
* @author Joas Schilling <nickvergessen@owncloud.com>
|
|
* @author Lukas Reschke <lukas@owncloud.com>
|
|
* @author Michael Gapczynski <GapczynskiM@gmail.com>
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
|
* @author Philipp Kapfer <philipp.kapfer@gmx.at>
|
|
* @author Robin Appelman <icewind@owncloud.com>
|
|
* @author Robin McCorkell <rmccorkell@karoshi.org.uk>
|
|
* @author Robin McCorkell <rmccorkell@owncloud.com>
|
|
* @author Thomas Müller <thomas.mueller@tmit.eu>
|
|
* @author Vincent Petry <pvince81@owncloud.com>
|
|
*
|
|
* @copyright Copyright (c) 2015, ownCloud, Inc.
|
|
* @license AGPL-3.0
|
|
*
|
|
* This code is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
* as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
*
|
|
*/
|
|
|
|
use phpseclib\Crypt\AES;
|
|
use \OCA\Files_External\Appinfo\Application;
|
|
use \OCA\Files_External\Lib\BackendConfig;
|
|
use \OCA\Files_External\Service\BackendService;
|
|
use \OCA\Files_External\Lib\Backend\LegacyBackend;
|
|
use \OCA\Files_External\Lib\StorageConfig;
|
|
|
|
/**
|
|
* Class to configure mount.json globally and for users
|
|
*/
|
|
class OC_Mount_Config {
|
|
// TODO: make this class non-static and give it a proper namespace
|
|
|
|
const MOUNT_TYPE_GLOBAL = 'global';
|
|
const MOUNT_TYPE_GROUP = 'group';
|
|
const MOUNT_TYPE_USER = 'user';
|
|
const MOUNT_TYPE_PERSONAL = 'personal';
|
|
|
|
// getBackendStatus return types
|
|
const STATUS_SUCCESS = 0;
|
|
const STATUS_ERROR = 1;
|
|
const STATUS_INDETERMINATE = 2;
|
|
|
|
// whether to skip backend test (for unit tests, as this static class is not mockable)
|
|
public static $skipTest = false;
|
|
|
|
/** @var Application */
|
|
public static $app;
|
|
|
|
/**
|
|
* @param string $class
|
|
* @param array $definition
|
|
* @return bool
|
|
* @deprecated 8.2.0 use \OCA\Files_External\Service\BackendService::registerBackend()
|
|
*/
|
|
public static function registerBackend($class, $definition) {
|
|
$backendService = self::$app->getContainer()->query('OCA\Files_External\Service\BackendService');
|
|
$auth = self::$app->getContainer()->query('OCA\Files_External\Lib\Auth\Builtin');
|
|
|
|
$backendService->registerBackend(new LegacyBackend($class, $definition, $auth));
|
|
|
|
return true;
|
|
}
|
|
|
|
/*
|
|
* Hook that mounts the given user's visible mount points
|
|
*
|
|
* @param array $data
|
|
*/
|
|
public static function initMountPointsHook($data) {
|
|
if ($data['user']) {
|
|
$user = \OC::$server->getUserManager()->get($data['user']);
|
|
if (!$user) {
|
|
\OC::$server->getLogger()->warning(
|
|
'Cannot init external mount points for non-existant user "' . $data['user'] . '".',
|
|
['app' => 'files_external']
|
|
);
|
|
return;
|
|
}
|
|
$userView = new \OC\Files\View('/' . $user->getUID() . '/files');
|
|
$changePropagator = new \OC\Files\Cache\ChangePropagator($userView);
|
|
$etagPropagator = new \OCA\Files_External\EtagPropagator($user, $changePropagator, \OC::$server->getConfig());
|
|
$etagPropagator->propagateDirtyMountPoints();
|
|
\OCP\Util::connectHook(
|
|
\OC\Files\Filesystem::CLASSNAME,
|
|
\OC\Files\Filesystem::signal_create_mount,
|
|
$etagPropagator, 'updateHook');
|
|
\OCP\Util::connectHook(
|
|
\OC\Files\Filesystem::CLASSNAME,
|
|
\OC\Files\Filesystem::signal_delete_mount,
|
|
$etagPropagator, 'updateHook');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Returns the mount points for the given user.
|
|
* The mount point is relative to the data directory.
|
|
*
|
|
* @param string $uid user
|
|
* @return array of mount point string as key, mountpoint config as value
|
|
*
|
|
* @deprecated 8.2.0 use UserGlobalStoragesService::getStorages() and UserStoragesService::getStorages()
|
|
*/
|
|
public static function getAbsoluteMountPoints($uid) {
|
|
$mountPoints = array();
|
|
|
|
$userGlobalStoragesService = self::$app->getContainer()->query('OCA\Files_External\Service\UserGlobalStoragesService');
|
|
$userStoragesService = self::$app->getContainer()->query('OCA\Files_External\Service\UserStoragesService');
|
|
$user = self::$app->getContainer()->query('OCP\IUserManager')->get($uid);
|
|
|
|
$userGlobalStoragesService->setUser($user);
|
|
$userStoragesService->setUser($user);
|
|
|
|
foreach ($userGlobalStoragesService->getStorages() as $storage) {
|
|
$mountPoint = '/'.$uid.'/files'.$storage->getMountPoint();
|
|
$mountEntry = self::prepareMountPointEntry($storage, false);
|
|
foreach ($mountEntry['options'] as &$option) {
|
|
$option = self::setUserVars($uid, $option);
|
|
}
|
|
$mountPoints[$mountPoint] = $mountEntry;
|
|
}
|
|
|
|
foreach ($userStoragesService->getStorages() as $storage) {
|
|
$mountPoint = '/'.$uid.'/files'.$storage->getMountPoint();
|
|
$mountEntry = self::prepareMountPointEntry($storage, true);
|
|
foreach ($mountEntry['options'] as &$option) {
|
|
$option = self::setUserVars($uid, $option);
|
|
}
|
|
$mountPoints[$mountPoint] = $mountEntry;
|
|
}
|
|
|
|
$userGlobalStoragesService->resetUser();
|
|
$userStoragesService->resetUser();
|
|
|
|
return $mountPoints;
|
|
}
|
|
|
|
/**
|
|
* Get the system mount points
|
|
*
|
|
* @return array
|
|
*
|
|
* @deprecated 8.2.0 use GlobalStoragesService::getStorages()
|
|
*/
|
|
public static function getSystemMountPoints() {
|
|
$mountPoints = [];
|
|
$service = self::$app->getContainer()->query('OCA\Files_External\Service\GlobalStoragesService');
|
|
|
|
foreach ($service->getStorages() as $storage) {
|
|
$mountPoints[] = self::prepareMountPointEntry($storage, false);
|
|
}
|
|
|
|
return $mountPoints;
|
|
}
|
|
|
|
/**
|
|
* Get the personal mount points of the current user
|
|
*
|
|
* @return array
|
|
*
|
|
* @deprecated 8.2.0 use UserStoragesService::getStorages()
|
|
*/
|
|
public static function getPersonalMountPoints() {
|
|
$mountPoints = [];
|
|
$service = self::$app->getContainer()->query('OCA\Files_External\Service\UserStoragesService');
|
|
|
|
foreach ($service->getStorages() as $storage) {
|
|
$mountPoints[] = self::prepareMountPointEntry($storage, true);
|
|
}
|
|
|
|
return $mountPoints;
|
|
}
|
|
|
|
/**
|
|
* Convert a StorageConfig to the legacy mountPoints array format
|
|
* There's a lot of extra information in here, to satisfy all of the legacy functions
|
|
*
|
|
* @param StorageConfig $storage
|
|
* @param bool $isPersonal
|
|
* @return array
|
|
*/
|
|
private static function prepareMountPointEntry(StorageConfig $storage, $isPersonal) {
|
|
$mountEntry = [];
|
|
|
|
$mountEntry['mountpoint'] = substr($storage->getMountPoint(), 1); // remove leading slash
|
|
$mountEntry['class'] = $storage->getBackend()->getIdentifier();
|
|
$mountEntry['backend'] = $storage->getBackend()->getText();
|
|
$mountEntry['authMechanism'] = $storage->getAuthMechanism()->getIdentifier();
|
|
$mountEntry['personal'] = $isPersonal;
|
|
$mountEntry['options'] = self::decryptPasswords($storage->getBackendOptions());
|
|
$mountEntry['mountOptions'] = $storage->getMountOptions();
|
|
$mountEntry['priority'] = $storage->getPriority();
|
|
$mountEntry['applicable'] = [
|
|
'groups' => $storage->getApplicableGroups(),
|
|
'users' => $storage->getApplicableUsers(),
|
|
];
|
|
// if mountpoint is applicable to all users the old API expects ['all']
|
|
if (empty($mountEntry['applicable']['groups']) && empty($mountEntry['applicable']['users'])) {
|
|
$mountEntry['applicable']['users'] = ['all'];
|
|
}
|
|
|
|
$mountEntry['id'] = $storage->getId();
|
|
|
|
return $mountEntry;
|
|
}
|
|
|
|
/**
|
|
* fill in the correct values for $user
|
|
*
|
|
* @param string $user user value
|
|
* @param string|array $input
|
|
* @return string
|
|
*/
|
|
public static function setUserVars($user, $input) {
|
|
if (is_array($input)) {
|
|
foreach ($input as &$value) {
|
|
if (is_string($value)) {
|
|
$value = str_replace('$user', $user, $value);
|
|
}
|
|
}
|
|
} else {
|
|
if (is_string($input)) {
|
|
$input = str_replace('$user', $user, $input);
|
|
}
|
|
}
|
|
return $input;
|
|
}
|
|
|
|
/**
|
|
* Test connecting using the given backend configuration
|
|
*
|
|
* @param string $class backend class name
|
|
* @param array $options backend configuration options
|
|
* @return int see self::STATUS_*
|
|
*/
|
|
public static function getBackendStatus($class, $options, $isPersonal) {
|
|
if (self::$skipTest) {
|
|
return self::STATUS_SUCCESS;
|
|
}
|
|
foreach ($options as &$option) {
|
|
$option = self::setUserVars(OCP\User::getUser(), $option);
|
|
}
|
|
if (class_exists($class)) {
|
|
try {
|
|
$storage = new $class($options);
|
|
|
|
try {
|
|
$result = $storage->test($isPersonal);
|
|
$storage->setAvailability($result);
|
|
if ($result) {
|
|
return self::STATUS_SUCCESS;
|
|
}
|
|
} catch (\Exception $e) {
|
|
$storage->setAvailability(false);
|
|
throw $e;
|
|
}
|
|
} catch (Exception $exception) {
|
|
\OCP\Util::logException('files_external', $exception);
|
|
}
|
|
}
|
|
return self::STATUS_ERROR;
|
|
}
|
|
|
|
/**
|
|
* Read the mount points in the config file into an array
|
|
*
|
|
* @param string|null $user If not null, personal for $user, otherwise system
|
|
* @return array
|
|
*/
|
|
public static function readData($user = null) {
|
|
if (isset($user)) {
|
|
$jsonFile = \OC::$server->getUserManager()->get($user)->getHome() . '/mount.json';
|
|
} else {
|
|
$config = \OC::$server->getConfig();
|
|
$datadir = $config->getSystemValue('datadirectory', \OC::$SERVERROOT . '/data/');
|
|
$jsonFile = $config->getSystemValue('mount_file', $datadir . '/mount.json');
|
|
}
|
|
if (is_file($jsonFile)) {
|
|
$mountPoints = json_decode(file_get_contents($jsonFile), true);
|
|
if (is_array($mountPoints)) {
|
|
return $mountPoints;
|
|
}
|
|
}
|
|
return array();
|
|
}
|
|
|
|
/**
|
|
* Write the mount points to the config file
|
|
*
|
|
* @param string|null $user If not null, personal for $user, otherwise system
|
|
* @param array $data Mount points
|
|
*/
|
|
public static function writeData($user, $data) {
|
|
if (isset($user)) {
|
|
$file = \OC::$server->getUserManager()->get($user)->getHome() . '/mount.json';
|
|
} else {
|
|
$config = \OC::$server->getConfig();
|
|
$datadir = $config->getSystemValue('datadirectory', \OC::$SERVERROOT . '/data/');
|
|
$file = $config->getSystemValue('mount_file', $datadir . '/mount.json');
|
|
}
|
|
|
|
$content = json_encode($data, JSON_PRETTY_PRINT);
|
|
@file_put_contents($file, $content);
|
|
@chmod($file, 0640);
|
|
}
|
|
|
|
/**
|
|
* Get backend dependency message
|
|
* TODO: move into AppFramework along with templates
|
|
*
|
|
* @param BackendConfig[] $backends
|
|
* @return string
|
|
*/
|
|
public static function dependencyMessage($backends) {
|
|
$l = \OC::$server->getL10N('files_external');
|
|
$message = '';
|
|
$dependencyGroups = [];
|
|
|
|
foreach ($backends as $backend) {
|
|
foreach ($backend->checkDependencies() as $dependency) {
|
|
if ($message = $dependency->getMessage()) {
|
|
$message .= '<br />' . $l->t('<b>Note:</b> ') . $message;
|
|
} else {
|
|
$dependencyGroups[$dependency->getDependency()][] = $backend;
|
|
}
|
|
}
|
|
}
|
|
|
|
foreach ($dependencyGroups as $module => $dependants) {
|
|
$backends = implode(', ', array_map(function($backend) {
|
|
return '<i>' . $backend->getText() . '</i>';
|
|
}, $dependants));
|
|
$message .= '<br />' . OC_Mount_Config::getSingleDependencyMessage($l, $module, $backends);
|
|
}
|
|
|
|
return $message;
|
|
}
|
|
|
|
/**
|
|
* Returns a dependency missing message
|
|
*
|
|
* @param \OCP\IL10N $l
|
|
* @param string $module
|
|
* @param string $backend
|
|
* @return string
|
|
*/
|
|
private static function getSingleDependencyMessage(\OCP\IL10N $l, $module, $backend) {
|
|
switch (strtolower($module)) {
|
|
case 'curl':
|
|
return $l->t('<b>Note:</b> The cURL support in PHP is not enabled or installed. Mounting of %s is not possible. Please ask your system administrator to install it.', $backend);
|
|
case 'ftp':
|
|
return $l->t('<b>Note:</b> The FTP support in PHP is not enabled or installed. Mounting of %s is not possible. Please ask your system administrator to install it.', $backend);
|
|
default:
|
|
return $l->t('<b>Note:</b> "%s" is not installed. Mounting of %s is not possible. Please ask your system administrator to install it.', array($module, $backend));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Encrypt passwords in the given config options
|
|
*
|
|
* @param array $options mount options
|
|
* @return array updated options
|
|
*/
|
|
public static function encryptPasswords($options) {
|
|
if (isset($options['password'])) {
|
|
$options['password_encrypted'] = self::encryptPassword($options['password']);
|
|
// do not unset the password, we want to keep the keys order
|
|
// on load... because that's how the UI currently works
|
|
$options['password'] = '';
|
|
}
|
|
return $options;
|
|
}
|
|
|
|
/**
|
|
* Decrypt passwords in the given config options
|
|
*
|
|
* @param array $options mount options
|
|
* @return array updated options
|
|
*/
|
|
public static function decryptPasswords($options) {
|
|
// note: legacy options might still have the unencrypted password in the "password" field
|
|
if (isset($options['password_encrypted'])) {
|
|
$options['password'] = self::decryptPassword($options['password_encrypted']);
|
|
unset($options['password_encrypted']);
|
|
}
|
|
return $options;
|
|
}
|
|
|
|
/**
|
|
* Encrypt a single password
|
|
*
|
|
* @param string $password plain text password
|
|
* @return string encrypted password
|
|
*/
|
|
private static function encryptPassword($password) {
|
|
$cipher = self::getCipher();
|
|
$iv = \OCP\Util::generateRandomBytes(16);
|
|
$cipher->setIV($iv);
|
|
return base64_encode($iv . $cipher->encrypt($password));
|
|
}
|
|
|
|
/**
|
|
* Decrypts a single password
|
|
*
|
|
* @param string $encryptedPassword encrypted password
|
|
* @return string plain text password
|
|
*/
|
|
private static function decryptPassword($encryptedPassword) {
|
|
$cipher = self::getCipher();
|
|
$binaryPassword = base64_decode($encryptedPassword);
|
|
$iv = substr($binaryPassword, 0, 16);
|
|
$cipher->setIV($iv);
|
|
$binaryPassword = substr($binaryPassword, 16);
|
|
return $cipher->decrypt($binaryPassword);
|
|
}
|
|
|
|
/**
|
|
* Merges mount points
|
|
*
|
|
* @param array $data Existing mount points
|
|
* @param array $mountPoint New mount point
|
|
* @param string $mountType
|
|
* @return array
|
|
*/
|
|
private static function mergeMountPoints($data, $mountPoint, $mountType) {
|
|
$applicable = key($mountPoint);
|
|
$mountPath = key($mountPoint[$applicable]);
|
|
if (isset($data[$mountType])) {
|
|
if (isset($data[$mountType][$applicable])) {
|
|
// Merge priorities
|
|
if (isset($data[$mountType][$applicable][$mountPath])
|
|
&& isset($data[$mountType][$applicable][$mountPath]['priority'])
|
|
&& !isset($mountPoint[$applicable][$mountPath]['priority'])
|
|
) {
|
|
$mountPoint[$applicable][$mountPath]['priority']
|
|
= $data[$mountType][$applicable][$mountPath]['priority'];
|
|
}
|
|
$data[$mountType][$applicable]
|
|
= array_merge($data[$mountType][$applicable], $mountPoint[$applicable]);
|
|
} else {
|
|
$data[$mountType] = array_merge($data[$mountType], $mountPoint);
|
|
}
|
|
} else {
|
|
$data[$mountType] = $mountPoint;
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Returns the encryption cipher
|
|
*/
|
|
private static function getCipher() {
|
|
$cipher = new AES(AES::MODE_CBC);
|
|
$cipher->setKey(\OC::$server->getConfig()->getSystemValue('passwordsalt', null));
|
|
return $cipher;
|
|
}
|
|
|
|
/**
|
|
* Computes a hash based on the given configuration.
|
|
* This is mostly used to find out whether configurations
|
|
* are the same.
|
|
*/
|
|
public static function makeConfigHash($config) {
|
|
$data = json_encode(
|
|
array(
|
|
'c' => $config['backend'],
|
|
'a' => $config['authMechanism'],
|
|
'm' => $config['mountpoint'],
|
|
'o' => $config['options'],
|
|
'p' => isset($config['priority']) ? $config['priority'] : -1,
|
|
'mo' => isset($config['mountOptions']) ? $config['mountOptions'] : [],
|
|
)
|
|
);
|
|
return hash('md5', $data);
|
|
}
|
|
}
|