785 lines
29 KiB
PHP
Executable File
785 lines
29 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* ownCloud
|
|
*
|
|
* @author Florin Peter
|
|
* @copyright 2013 Florin Peter <owncloud@florin-peter.de>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
* License as published by the Free Software Foundation; either
|
|
* version 3 of the License, or any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
require_once realpath( dirname( __FILE__ ) . '/../3rdparty/Crypt_Blowfish/Blowfish.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../../../lib/base.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/crypt.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/keymanager.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/proxy.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/stream.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/util.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../lib/helper.php' );
|
|
require_once realpath( dirname( __FILE__ ) . '/../appinfo/app.php' );
|
|
|
|
use OCA\Encryption;
|
|
|
|
/**
|
|
* Class Test_Encryption_Share
|
|
*/
|
|
class Test_Encryption_Share extends \PHPUnit_Framework_TestCase
|
|
{
|
|
|
|
public $stateFilesTrashbin;
|
|
public $filename;
|
|
public $dataShort;
|
|
/**
|
|
* @var OC_FilesystemView
|
|
*/
|
|
public $view;
|
|
public $folder1;
|
|
public $subfolder;
|
|
public $subsubfolder;
|
|
|
|
public static function setUpBeforeClass() {
|
|
// reset backend
|
|
\OC_User::clearBackends();
|
|
\OC_User::useBackend( 'database' );
|
|
|
|
// enable resharing
|
|
\OC_Appconfig::setValue( 'core', 'shareapi_allow_resharing', 'yes' );
|
|
|
|
// clear share hooks
|
|
\OC_Hook::clear( 'OCP\\Share' );
|
|
\OC::registerShareHooks();
|
|
\OCP\Util::connectHook( 'OC_Filesystem', 'setup', '\OC\Files\Storage\Shared', 'setup' );
|
|
|
|
// Sharing related hooks
|
|
\OCA\Encryption\Helper::registerShareHooks();
|
|
|
|
// Filesystem related hooks
|
|
\OCA\Encryption\Helper::registerFilesystemHooks();
|
|
|
|
// clear and register hooks
|
|
\OC_FileProxy::clearProxies();
|
|
\OC_FileProxy::register( new OCA\Encryption\Proxy() );
|
|
|
|
// create users
|
|
\Test_Encryption_Share::loginHelper( 'user1', true );
|
|
\Test_Encryption_Share::loginHelper( 'user2', true );
|
|
\Test_Encryption_Share::loginHelper( 'user3', true );
|
|
|
|
// create group and assign users
|
|
\OC_Group::createGroup( 'group1' );
|
|
\OC_Group::addToGroup( 'user2', 'group1' );
|
|
\OC_Group::addToGroup( 'user3', 'group1' );
|
|
}
|
|
|
|
function setUp() {
|
|
$this->dataShort = 'hats';
|
|
$this->view = new \OC_FilesystemView( '/' );
|
|
|
|
$userHome = \OC_User::getHome( 'admin' );
|
|
$this->dataDir = str_replace( '/admin', '', $userHome );
|
|
|
|
$this->folder1 = '/folder1';
|
|
$this->subfolder = '/subfolder1';
|
|
$this->subsubfolder = '/subsubfolder1';
|
|
|
|
$this->filename = 'share-tmp.test';
|
|
|
|
// we don't want to tests with app files_trashbin enabled
|
|
\OC_App::disable( 'files_trashbin' );
|
|
|
|
// remember files_trashbin state
|
|
$this->stateFilesTrashbin = OC_App::isEnabled( 'files_trashbin' );
|
|
}
|
|
|
|
function tearDown() {
|
|
// reset app files_trashbin
|
|
if ( $this->stateFilesTrashbin ) {
|
|
OC_App::enable( 'files_trashbin' );
|
|
} else {
|
|
OC_App::disable( 'files_trashbin' );
|
|
}
|
|
}
|
|
|
|
public static function tearDownAfterClass() {
|
|
// clean group
|
|
\OC_Group::deleteGroup( 'group1' );
|
|
|
|
// cleanup users
|
|
\OC_User::deleteUser( 'user1' );
|
|
\OC_User::deleteUser( 'user2' );
|
|
\OC_User::deleteUser( 'user3' );
|
|
}
|
|
|
|
/**
|
|
* @param bool $withTeardown
|
|
*/
|
|
function testShareFile( $withTeardown = true ) {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created file
|
|
$fileInfo = $this->view->getFileInfo( '/admin/files/' . $this->filename );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// check if the unencrypted file size is stored
|
|
$this->assertGreaterThan( 0, $fileInfo['unencrypted_size'] );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the file
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user1 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user1/files/Shared/' . $this->filename );
|
|
|
|
// check if data is the same as we previously written
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// cleanup
|
|
if ( $withTeardown ) {
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// unshare the file
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.admin.shareKey' ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param bool $withTeardown
|
|
*/
|
|
function testReShareFile( $withTeardown = true ) {
|
|
$this->testShareFile( false );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// get the file info
|
|
$fileInfo = $this->view->getFileInfo( '/user1/files/Shared/' . $this->filename );
|
|
|
|
// share the file with user2
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user2', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user2 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// login as user2
|
|
$this->loginHelper( 'user2' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user2/files/Shared/' . $this->filename );
|
|
|
|
// check if data is the same as previously written
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// cleanup
|
|
if ( $withTeardown ) {
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// unshare the file with user2
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user2' );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// unshare the file with user1
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.admin.shareKey' ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param bool $withTeardown
|
|
* @return array
|
|
*/
|
|
function testShareFolder( $withTeardown = true ) {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// create folder structure
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 );
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 . $this->subfolder );
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 . $this->subfolder . $this->subsubfolder );
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents( 'crypt://' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created folder
|
|
$fileInfo = $this->view->getFileInfo( '/admin/files' . $this->folder1 );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the folder with user1
|
|
\OCP\Share::shareItem( 'folder', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user1 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user1/files/Shared' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename );
|
|
|
|
// check if data is the same
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// cleanup
|
|
if ( $withTeardown ) {
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// unshare the folder with user1
|
|
\OCP\Share::unshare( 'folder', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files' . $this->folder1 );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.admin.shareKey' ) );
|
|
}
|
|
|
|
return $fileInfo;
|
|
}
|
|
|
|
/**
|
|
* @param bool $withTeardown
|
|
*/
|
|
function testReShareFolder( $withTeardown = true ) {
|
|
$fileInfoFolder1 = $this->testShareFolder( false );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created folder
|
|
$fileInfoSubFolder = $this->view->getFileInfo( '/user1/files/Shared' . $this->folder1 . $this->subfolder );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfoSubFolder ) );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the file with user2
|
|
\OCP\Share::shareItem( 'folder', $fileInfoSubFolder['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user2', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user2 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// login as user2
|
|
$this->loginHelper( 'user2' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user2/files/Shared' . $this->subfolder . $this->subsubfolder . '/' . $this->filename );
|
|
|
|
// check if data is the same
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// get the file info
|
|
$fileInfo = $this->view->getFileInfo( '/user2/files/Shared' . $this->subfolder . $this->subsubfolder . '/' . $this->filename );
|
|
|
|
// check if we have fileInfos
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// share the file with user3
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user3', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user3 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user3.shareKey' ) );
|
|
|
|
// login as user3
|
|
$this->loginHelper( 'user3' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user3/files/Shared/' . $this->filename );
|
|
|
|
// check if data is the same
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// cleanup
|
|
if ( $withTeardown ) {
|
|
|
|
// login as user2
|
|
$this->loginHelper( 'user2' );
|
|
|
|
// unshare the file with user3
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user3' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user3.shareKey' ) );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
// unshare the folder with user2
|
|
\OCP\Share::unshare( 'folder', $fileInfoSubFolder['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user2' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// unshare the folder1 with user1
|
|
\OCP\Share::unshare( 'folder', $fileInfoFolder1['fileid'], \OCP\Share::SHARE_TYPE_USER, 'user1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user1.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.admin.shareKey' ) );
|
|
}
|
|
}
|
|
|
|
function testPublicShareFile() {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created file
|
|
$fileInfo = $this->view->getFileInfo( '/admin/files/' . $this->filename );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// check if the unencrypted file size is stored
|
|
$this->assertGreaterThan( 0, $fileInfo['unencrypted_size'] );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the file
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_LINK, false, OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
$publicShareKeyId = \OC_Appconfig::getValue( 'files_encryption', 'publicShareKeyId' );
|
|
|
|
// check if share key for public exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $publicShareKeyId . '.shareKey' ) );
|
|
|
|
// some hacking to simulate public link
|
|
$GLOBALS['app'] = 'files_sharing';
|
|
$GLOBALS['fileOwner'] = 'admin';
|
|
\OC_User::setUserId( '' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = file_get_contents( 'crypt://' . $this->filename );
|
|
|
|
// check if data is the same as we previously written
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// tear down
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// unshare the file
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_LINK, null );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $publicShareKeyId . '.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.admin.shareKey' ) );
|
|
}
|
|
|
|
function testShareFileWithGroup() {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created file
|
|
$fileInfo = $this->view->getFileInfo( '/admin/files/' . $this->filename );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// check if the unencrypted file size is stored
|
|
$this->assertGreaterThan( 0, $fileInfo['unencrypted_size'] );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the file
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_GROUP, 'group1', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user2 and user3 exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user3.shareKey' ) );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user2' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile = $this->view->file_get_contents( '/user2/files/Shared/' . $this->filename );
|
|
|
|
// check if data is the same as we previously written
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// unshare the file
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_GROUP, 'group1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user3.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.admin.shareKey' ) );
|
|
|
|
}
|
|
|
|
function testRecoveryFile() {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
\OCA\Encryption\Helper::adminEnableRecovery( null, 'test123' );
|
|
$recoveryKeyId = OC_Appconfig::getValue( 'files_encryption', 'recoveryKeyId' );
|
|
|
|
// check if control file created
|
|
$this->assertTrue( $this->view->file_exists( '/control-file/controlfile.enc' ) );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
$util = new \OCA\Encryption\Util( new \OC_FilesystemView( '/' ), 'admin' );
|
|
|
|
// check if recovery password match
|
|
$this->assertTrue( $util->checkRecoveryPassword( 'test123' ) );
|
|
|
|
// enable recovery for admin
|
|
$this->assertTrue( $util->setRecoveryForUser( 1 ) );
|
|
|
|
// create folder structure
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 );
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 . $this->subfolder );
|
|
$this->view->mkdir( '/admin/files' . $this->folder1 . $this->subfolder . $this->subsubfolder );
|
|
|
|
// save file with content
|
|
$cryptedFile1 = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
$cryptedFile2 = file_put_contents( 'crypt://' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile1 ) );
|
|
$this->assertTrue( is_int( $cryptedFile2 ) );
|
|
|
|
// check if share key for admin and recovery exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.admin.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.admin.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
// disable recovery for admin
|
|
$this->assertTrue( $util->setRecoveryForUser( 0 ) );
|
|
|
|
// remove all recovery keys
|
|
$util->removeRecoveryKeys( '/' );
|
|
|
|
// check if share key for recovery not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
// enable recovery for admin
|
|
$this->assertTrue( $util->setRecoveryForUser( 1 ) );
|
|
|
|
// remove all recovery keys
|
|
$util->addRecoveryKeys( '/' );
|
|
|
|
// check if share key for admin and recovery exists
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
$this->view->unlink( '/admin/files/' . $this->folder1 );
|
|
|
|
// check if share key for recovery not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
$this->assertTrue( \OCA\Encryption\Helper::adminEnableRecovery( null, 'test123' ) );
|
|
$this->assertTrue( \OCA\Encryption\Helper::adminDisableRecovery( 'test123' ) );
|
|
$this->assertEquals( 0, \OC_Appconfig::getValue( 'files_encryption', 'recoveryAdminEnabled' ) );
|
|
}
|
|
|
|
function testRecoveryForUser() {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
\OCA\Encryption\Helper::adminEnableRecovery( null, 'test123' );
|
|
$recoveryKeyId = OC_Appconfig::getValue( 'files_encryption', 'recoveryKeyId' );
|
|
|
|
// check if control file created
|
|
$this->assertTrue( $this->view->file_exists( '/control-file/controlfile.enc' ) );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1' );
|
|
|
|
$util = new \OCA\Encryption\Util( new \OC_FilesystemView( '/' ), 'user1' );
|
|
|
|
// enable recovery for admin
|
|
$this->assertTrue( $util->setRecoveryForUser( 1 ) );
|
|
|
|
// create folder structure
|
|
$this->view->mkdir( '/user1/files' . $this->folder1 );
|
|
$this->view->mkdir( '/user1/files' . $this->folder1 . $this->subfolder );
|
|
$this->view->mkdir( '/user1/files' . $this->folder1 . $this->subfolder . $this->subsubfolder );
|
|
|
|
// save file with content
|
|
$cryptedFile1 = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
$cryptedFile2 = file_put_contents( 'crypt://' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile1 ) );
|
|
$this->assertTrue( is_int( $cryptedFile2 ) );
|
|
|
|
// check if share key for user and recovery exists
|
|
$this->assertTrue( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->filename . '.user1.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user1.shareKey' ) );
|
|
$this->assertTrue( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// change password
|
|
\OC_User::setPassword( 'user1', 'test', 'test123' );
|
|
|
|
// login as user1
|
|
$this->loginHelper( 'user1', false, 'test' );
|
|
|
|
// get file contents
|
|
$retrievedCryptedFile1 = file_get_contents( 'crypt://' . $this->filename );
|
|
$retrievedCryptedFile2 = file_get_contents( 'crypt://' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename );
|
|
|
|
// check if data is the same as we previously written
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile1 );
|
|
$this->assertEquals( $this->dataShort, $retrievedCryptedFile2 );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/user1/files' . $this->folder1 );
|
|
$this->view->unlink( '/user1/files' . $this->filename );
|
|
|
|
// check if share key for user and recovery exists
|
|
$this->assertFalse( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->filename . '.user1.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.user1.shareKey' ) );
|
|
$this->assertFalse( $this->view->file_exists( '/user1/files_encryption/share-keys/' . $this->folder1 . $this->subfolder . $this->subsubfolder . '/' . $this->filename . '.' . $recoveryKeyId . '.shareKey' ) );
|
|
|
|
// enable recovery for admin
|
|
$this->assertTrue( $util->setRecoveryForUser( 0 ) );
|
|
|
|
\OCA\Encryption\Helper::adminDisableRecovery( 'test123' );
|
|
$this->assertEquals( 0, \OC_Appconfig::getValue( 'files_encryption', 'recoveryAdminEnabled' ) );
|
|
}
|
|
|
|
function testFailShareFile() {
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents( 'crypt://' . $this->filename, $this->dataShort );
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue( is_int( $cryptedFile ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// get the file info from previous created file
|
|
$fileInfo = $this->view->getFileInfo( '/admin/files/' . $this->filename );
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue( is_array( $fileInfo ) );
|
|
|
|
// check if the unencrypted file size is stored
|
|
$this->assertGreaterThan( 0, $fileInfo['unencrypted_size'] );
|
|
|
|
// break users public key
|
|
$this->view->rename( '/public-keys/user2.public.key', '/public-keys/user2.public.key_backup' );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// share the file
|
|
\OCP\Share::shareItem( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_GROUP, 'group1', OCP\PERMISSION_ALL );
|
|
|
|
// login as admin
|
|
$this->loginHelper( 'admin' );
|
|
|
|
// check if share key for user1 not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// disable encryption proxy to prevent recursive calls
|
|
$proxyStatus = \OC_FileProxy::$enabled;
|
|
\OC_FileProxy::$enabled = false;
|
|
|
|
// break user1 public key
|
|
$this->view->rename( '/public-keys/user2.public.key_backup', '/public-keys/user2.public.key' );
|
|
|
|
// remove share file
|
|
$this->view->unlink( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' );
|
|
|
|
// re-enable the file proxy
|
|
\OC_FileProxy::$enabled = $proxyStatus;
|
|
|
|
// unshare the file with user1
|
|
\OCP\Share::unshare( 'file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_GROUP, 'group1' );
|
|
|
|
// check if share key not exists
|
|
$this->assertFalse( $this->view->file_exists( '/admin/files_encryption/share-keys/' . $this->filename . '.user2.shareKey' ) );
|
|
|
|
// cleanup
|
|
$this->view->unlink( '/admin/files/' . $this->filename );
|
|
}
|
|
|
|
|
|
/**
|
|
* @param $user
|
|
* @param bool $create
|
|
* @param bool $password
|
|
*/
|
|
public static function loginHelper( $user, $create = false, $password = false ) {
|
|
if ( $create ) {
|
|
\OC_User::createUser( $user, $user );
|
|
}
|
|
|
|
if ( $password === false ) {
|
|
$password = $user;
|
|
}
|
|
|
|
\OC_Util::tearDownFS();
|
|
\OC_User::setUserId( '' );
|
|
\OC\Files\Filesystem::tearDown();
|
|
\OC_Util::setupFS( $user );
|
|
\OC_User::setUserId( $user );
|
|
|
|
$params['uid'] = $user;
|
|
$params['password'] = $password;
|
|
OCA\Encryption\Hooks::login( $params );
|
|
}
|
|
}
|