1 /* ownCloud Android client application
2 * Copyright (C) 2012 Bartek Przybylski
3 * Copyright (C) 2012-2013 ownCloud Inc.
5 * This program is free software: you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2,
7 * as published by the Free Software Foundation.
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program. If not, see <http://www.gnu.org/licenses/>.
19 package com
.owncloud
.android
.authentication
;
21 import com
.owncloud
.android
.AccountUtils
;
22 import com
.owncloud
.android
.Log_OC
;
23 import com
.owncloud
.android
.ui
.dialog
.SslValidatorDialog
;
24 import com
.owncloud
.android
.ui
.dialog
.SslValidatorDialog
.OnSslValidatorListener
;
25 import com
.owncloud
.android
.utils
.OwnCloudVersion
;
26 import com
.owncloud
.android
.network
.OwnCloudClientUtils
;
27 import com
.owncloud
.android
.operations
.OwnCloudServerCheckOperation
;
28 import com
.owncloud
.android
.operations
.ExistenceCheckOperation
;
29 import com
.owncloud
.android
.operations
.OAuth2GetAccessToken
;
30 import com
.owncloud
.android
.operations
.OnRemoteOperationListener
;
31 import com
.owncloud
.android
.operations
.RemoteOperation
;
32 import com
.owncloud
.android
.operations
.RemoteOperationResult
;
33 import com
.owncloud
.android
.operations
.RemoteOperationResult
.ResultCode
;
35 import android
.accounts
.Account
;
36 import android
.accounts
.AccountAuthenticatorActivity
;
37 import android
.accounts
.AccountManager
;
38 import android
.app
.AlertDialog
;
39 import android
.app
.Dialog
;
40 import android
.app
.ProgressDialog
;
41 import android
.content
.ContentResolver
;
42 import android
.content
.DialogInterface
;
43 import android
.content
.Intent
;
44 import android
.content
.SharedPreferences
;
45 import android
.graphics
.Rect
;
46 import android
.graphics
.drawable
.Drawable
;
47 import android
.net
.Uri
;
48 import android
.os
.Bundle
;
49 import android
.os
.Handler
;
50 import android
.preference
.PreferenceManager
;
51 import android
.text
.Editable
;
52 import android
.text
.InputType
;
53 import android
.text
.TextWatcher
;
54 import android
.view
.KeyEvent
;
55 import android
.view
.MotionEvent
;
56 import android
.view
.View
;
57 import android
.view
.View
.OnFocusChangeListener
;
58 import android
.view
.View
.OnTouchListener
;
59 import android
.view
.Window
;
60 import android
.view
.inputmethod
.EditorInfo
;
61 import android
.widget
.CheckBox
;
62 import android
.widget
.EditText
;
63 import android
.widget
.Button
;
64 import android
.widget
.ImageView
;
65 import android
.widget
.TextView
;
66 import android
.widget
.Toast
;
67 import android
.widget
.TextView
.OnEditorActionListener
;
69 import com
.owncloud
.android
.R
;
71 import eu
.alefzero
.webdav
.WebdavClient
;
74 * This Activity is used to add an ownCloud account to the App
76 * @author Bartek Przybylski
77 * @author David A. Velasco
79 public class AuthenticatorActivity
extends AccountAuthenticatorActivity
80 implements OnRemoteOperationListener
, OnSslValidatorListener
, OnFocusChangeListener
, OnEditorActionListener
{
82 private static final String TAG
= AuthenticatorActivity
.class.getSimpleName();
84 public static final String EXTRA_ACCOUNT
= "ACCOUNT";
85 public static final String EXTRA_USER_NAME
= "USER_NAME";
86 public static final String EXTRA_HOST_NAME
= "HOST_NAME";
87 public static final String EXTRA_ACTION
= "ACTION";
89 private static final String KEY_HOST_URL_TEXT
= "HOST_URL_TEXT";
90 private static final String KEY_OC_VERSION
= "OC_VERSION";
91 private static final String KEY_ACCOUNT
= "ACCOUNT";
92 private static final String KEY_SERVER_VALID
= "SERVER_VALID";
93 private static final String KEY_SERVER_CHECKED
= "SERVER_CHECKED";
94 private static final String KEY_SERVER_CHECK_IN_PROGRESS
= "SERVER_CHECK_IN_PROGRESS";
95 private static final String KEY_SERVER_STATUS_TEXT
= "SERVER_STATUS_TEXT";
96 private static final String KEY_SERVER_STATUS_ICON
= "SERVER_STATUS_ICON";
97 private static final String KEY_IS_SSL_CONN
= "IS_SSL_CONN";
98 private static final String KEY_AUTH_STATUS_TEXT
= "AUTH_STATUS_TEXT";
99 private static final String KEY_AUTH_STATUS_ICON
= "AUTH_STATUS_ICON";
101 private static final String OAUTH_MODE_ON
= "on";
102 private static final String OAUTH_MODE_OFF
= "off";
103 private static final String OAUTH_MODE_OPTIONAL
= "optional";
105 private static final int DIALOG_LOGIN_PROGRESS
= 0;
106 private static final int DIALOG_SSL_VALIDATOR
= 1;
107 private static final int DIALOG_CERT_NOT_SAVED
= 2;
108 private static final int DIALOG_OAUTH2_LOGIN_PROGRESS
= 3;
110 public static final byte ACTION_CREATE
= 0;
111 public static final byte ACTION_UPDATE_TOKEN
= 1;
113 public static final String WEBDAV_PATH
= "/remote.php/webdav";
115 private String mHostBaseUrl
;
116 private OwnCloudVersion mDiscoveredVersion
;
118 private int mServerStatusText
, mServerStatusIcon
;
119 private boolean mServerIsChecked
, mServerIsValid
, mIsSslConn
;
120 private int mAuthStatusText
, mAuthStatusIcon
;
122 private final Handler mHandler
= new Handler();
123 private Thread mOperationThread
;
124 private OwnCloudServerCheckOperation mOcServerChkOperation
;
125 private ExistenceCheckOperation mAuthCheckOperation
;
126 private RemoteOperationResult mLastSslUntrustedServerResult
;
128 private Uri mNewCapturedUriFromOAuth2Redirection
;
130 private AccountManager mAccountMgr
;
131 private boolean mJustCreated
;
132 private byte mAction
;
133 private Account mAccount
;
135 private ImageView mViewPasswordButton
;
136 private EditText mHostUrlInput
;
137 private EditText mUsernameInput
;
138 private EditText mPasswordInput
;
139 private CheckBox mOAuth2Check
;
140 private String mOAuthAccessToken
;
141 private View mOkButton
;
142 private TextView mAuthStatusLayout
;
144 private TextView mOAuthAuthEndpointText
;
145 private TextView mOAuthTokenEndpointText
;
151 * IMPORTANT ENTRY POINT 1: activity is shown to the user
154 protected void onCreate(Bundle savedInstanceState
) {
155 super.onCreate(savedInstanceState
);
156 getWindow().requestFeature(Window
.FEATURE_NO_TITLE
);
158 /// set view and get references to view elements
159 setContentView(R
.layout
.account_setup
);
160 mViewPasswordButton
= (ImageView
) findViewById(R
.id
.viewPasswordButton
);
161 mHostUrlInput
= (EditText
) findViewById(R
.id
.hostUrlInput
);
162 mUsernameInput
= (EditText
) findViewById(R
.id
.account_username
);
163 mPasswordInput
= (EditText
) findViewById(R
.id
.account_password
);
164 mOAuthAuthEndpointText
= (TextView
)findViewById(R
.id
.oAuthEntryPoint_1
);
165 mOAuthTokenEndpointText
= (TextView
)findViewById(R
.id
.oAuthEntryPoint_2
);
166 mOAuth2Check
= (CheckBox
) findViewById(R
.id
.oauth_onOff_check
);
167 mOkButton
= findViewById(R
.id
.buttonOK
);
168 mAuthStatusLayout
= (TextView
) findViewById(R
.id
.auth_status_text
);
170 /// complete label for 'register account' button
171 Button b
= (Button
) findViewById(R
.id
.account_register
);
173 b
.setText(String
.format(getString(R
.string
.auth_register
), getString(R
.string
.app_name
)));
177 mAccountMgr
= AccountManager
.get(this);
178 mNewCapturedUriFromOAuth2Redirection
= null
;
179 mAction
= getIntent().getByteExtra(EXTRA_ACTION
, ACTION_CREATE
);
183 if (savedInstanceState
== null
) {
184 /// connection state and info
185 mServerStatusText
= mServerStatusIcon
= 0;
186 mServerIsValid
= false
;
187 mServerIsChecked
= false
;
189 mAuthStatusText
= mAuthStatusIcon
= 0;
191 /// retrieve extras from intent
192 String tokenType
= getIntent().getExtras().getString(AccountAuthenticator
.KEY_AUTH_TOKEN_TYPE
);
193 boolean oAuthRequired
= AccountAuthenticator
.AUTH_TOKEN_TYPE_ACCESS_TOKEN
.equals(tokenType
) || OAUTH_MODE_ON
.equals(getString(R
.string
.oauth2_mode
));
195 mAccount
= getIntent().getExtras().getParcelable(EXTRA_ACCOUNT
);
196 if (mAccount
!= null
) {
197 String ocVersion
= mAccountMgr
.getUserData(mAccount
, AccountAuthenticator
.KEY_OC_VERSION
);
198 if (ocVersion
!= null
) {
199 mDiscoveredVersion
= new OwnCloudVersion(ocVersion
);
201 mHostBaseUrl
= normalizeUrl(mAccountMgr
.getUserData(mAccount
, AccountAuthenticator
.KEY_OC_BASE_URL
));
202 mHostUrlInput
.setText(mHostBaseUrl
);
203 String userName
= mAccount
.name
.substring(0, mAccount
.name
.lastIndexOf('@'));
204 mUsernameInput
.setText(userName
);
205 oAuthRequired
= (mAccountMgr
.getUserData(mAccount
, AccountAuthenticator
.KEY_SUPPORTS_OAUTH2
) != null
);
207 mOAuth2Check
.setChecked(oAuthRequired
);
208 changeViewByOAuth2Check(oAuthRequired
);
212 /// connection state and info
213 mServerIsValid
= savedInstanceState
.getBoolean(KEY_SERVER_VALID
);
214 mServerIsChecked
= savedInstanceState
.getBoolean(KEY_SERVER_CHECKED
);
215 mServerStatusText
= savedInstanceState
.getInt(KEY_SERVER_STATUS_TEXT
);
216 mServerStatusIcon
= savedInstanceState
.getInt(KEY_SERVER_STATUS_ICON
);
217 mIsSslConn
= savedInstanceState
.getBoolean(KEY_IS_SSL_CONN
);
218 mAuthStatusText
= savedInstanceState
.getInt(KEY_AUTH_STATUS_TEXT
);
219 mAuthStatusIcon
= savedInstanceState
.getInt(KEY_AUTH_STATUS_ICON
);
222 String ocVersion
= savedInstanceState
.getString(KEY_OC_VERSION
);
223 if (ocVersion
!= null
) {
224 mDiscoveredVersion
= new OwnCloudVersion(ocVersion
);
226 mHostBaseUrl
= savedInstanceState
.getString(KEY_HOST_URL_TEXT
);
228 // account data, if updating
229 mAccount
= savedInstanceState
.getParcelable(KEY_ACCOUNT
);
231 // check if server check was interrupted by a configuration change
232 if (savedInstanceState
.getBoolean(KEY_SERVER_CHECK_IN_PROGRESS
, false
)) {
240 if (mServerIsChecked
&& !mServerIsValid
) showRefreshButton();
241 mOkButton
.setEnabled(mServerIsValid
); // state not automatically recovered in configuration changes
243 if (!OAUTH_MODE_OPTIONAL
.equals(getString(R
.string
.oauth2_mode
))) {
244 mOAuth2Check
.setVisibility(View
.GONE
);
247 if (mAction
== ACTION_UPDATE_TOKEN
) {
248 /// lock things that should not change
249 mHostUrlInput
.setEnabled(false
);
250 mUsernameInput
.setEnabled(false
);
251 mOAuth2Check
.setVisibility(View
.GONE
);
252 if (!mServerIsValid
&& mOcServerChkOperation
== null
) {
257 mPasswordInput
.setText(""); // clean password to avoid social hacking (disadvantage: password in removed if the device is turned aside)
260 /// bind view elements to listeners
261 mHostUrlInput
.setOnFocusChangeListener(this);
262 mHostUrlInput
.setOnTouchListener(new RightDrawableOnTouchListener() {
264 public boolean onDrawableTouch(final MotionEvent event
) {
265 AuthenticatorActivity
.this.onRefreshClick(mHostUrlInput
);
269 mHostUrlInput
.addTextChangedListener(new TextWatcher() {
272 public void afterTextChanged(Editable s
) {
273 if (!mHostBaseUrl
.equals(normalizeUrl(mHostUrlInput
.getText().toString()))) {
274 mOkButton
.setEnabled(false
);
279 public void beforeTextChanged(CharSequence s
, int start
, int count
, int after
) {}
282 public void onTextChanged(CharSequence s
, int start
, int before
, int count
) {}
285 mPasswordInput
.setOnFocusChangeListener(this);
286 mPasswordInput
.setImeOptions(EditorInfo
.IME_ACTION_DONE
);
287 mPasswordInput
.setOnEditorActionListener(this);
291 * Saves relevant state before {@link #onPause()}
293 * Do NOT save {@link #mNewCapturedUriFromOAuth2Redirection}; it keeps a temporal flag, intended to defer the
294 * processing of the redirection caught in {@link #onNewIntent(Intent)} until {@link #onResume()}
296 * See {@link #loadSavedInstanceState(Bundle)}
299 protected void onSaveInstanceState(Bundle outState
) {
300 super.onSaveInstanceState(outState
);
302 /// connection state and info
303 outState
.putInt(KEY_SERVER_STATUS_TEXT
, mServerStatusText
);
304 outState
.putInt(KEY_SERVER_STATUS_ICON
, mServerStatusIcon
);
305 outState
.putBoolean(KEY_SERVER_VALID
, mServerIsValid
);
306 outState
.putBoolean(KEY_SERVER_CHECKED
, mServerIsChecked
);
307 outState
.putBoolean(KEY_SERVER_CHECK_IN_PROGRESS
, (!mServerIsValid
&& mOcServerChkOperation
!= null
));
308 outState
.putBoolean(KEY_IS_SSL_CONN
, mIsSslConn
);
309 outState
.putInt(KEY_AUTH_STATUS_ICON
, mAuthStatusIcon
);
310 outState
.putInt(KEY_AUTH_STATUS_TEXT
, mAuthStatusText
);
313 if (mDiscoveredVersion
!= null
) {
314 outState
.putString(KEY_OC_VERSION
, mDiscoveredVersion
.toString());
316 outState
.putString(KEY_HOST_URL_TEXT
, mHostBaseUrl
);
318 /// account data, if updating
319 if (mAccount
!= null
) {
320 outState
.putParcelable(KEY_ACCOUNT
, mAccount
);
327 * The redirection triggered by the OAuth authentication server as response to the GET AUTHORIZATION request
330 * To make this possible, this activity needs to be qualified with android:launchMode = "singleTask" in the
331 * AndroidManifest.xml file.
334 protected void onNewIntent (Intent intent
) {
335 Log_OC
.d(TAG
, "onNewIntent()");
336 Uri data
= intent
.getData();
337 if (data
!= null
&& data
.toString().startsWith(getString(R
.string
.oauth2_redirect_uri
))) {
338 mNewCapturedUriFromOAuth2Redirection
= data
;
344 * The redirection triggered by the OAuth authentication server as response to the GET AUTHORIZATION, and
345 * deferred in {@link #onNewIntent(Intent)}, is processed here.
348 protected void onResume() {
350 // the state of mOAuth2Check is automatically recovered between configuration changes, but not before onCreate() finishes; so keep the next lines here
351 changeViewByOAuth2Check(mOAuth2Check
.isChecked());
352 if (mAction
== ACTION_UPDATE_TOKEN
&& mJustCreated
) {
353 if (mOAuth2Check
.isChecked())
354 Toast
.makeText(this, R
.string
.auth_expired_oauth_token_toast
, Toast
.LENGTH_LONG
).show();
356 Toast
.makeText(this, R
.string
.auth_expired_basic_auth_toast
, Toast
.LENGTH_LONG
).show();
359 if (mNewCapturedUriFromOAuth2Redirection
!= null
) {
360 getOAuth2AccessTokenFromCapturedRedirection();
363 mJustCreated
= false
;
368 * Parses the redirection with the response to the GET AUTHORIZATION request to the
369 * oAuth server and requests for the access token (GET ACCESS TOKEN)
371 private void getOAuth2AccessTokenFromCapturedRedirection() {
372 /// Parse data from OAuth redirection
373 String queryParameters
= mNewCapturedUriFromOAuth2Redirection
.getQuery();
374 mNewCapturedUriFromOAuth2Redirection
= null
;
376 /// Showing the dialog with instructions for the user.
377 showDialog(DIALOG_OAUTH2_LOGIN_PROGRESS
);
379 /// GET ACCESS TOKEN to the oAuth server
380 RemoteOperation operation
= new OAuth2GetAccessToken( getString(R
.string
.oauth2_client_id
),
381 getString(R
.string
.oauth2_redirect_uri
),
382 getString(R
.string
.oauth2_grant_type
),
384 //WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(getString(R.string.oauth2_url_endpoint_access)), getApplicationContext());
385 WebdavClient client
= OwnCloudClientUtils
.createOwnCloudClient(Uri
.parse(mOAuthTokenEndpointText
.getText().toString().trim()), getApplicationContext());
386 operation
.execute(client
, this, mHandler
);
392 * Handles the change of focus on the text inputs for the server URL and the password
394 public void onFocusChange(View view
, boolean hasFocus
) {
395 if (view
.getId() == R
.id
.hostUrlInput
) {
397 onUrlInputFocusLost((TextView
) view
);
403 } else if (view
.getId() == R
.id
.account_password
) {
404 onPasswordFocusChanged((TextView
) view
, hasFocus
);
410 * Handles changes in focus on the text input for the server URL.
412 * IMPORTANT ENTRY POINT 2: When (!hasFocus), user wrote the server URL and changed to
413 * other field. The operation to check the existence of the server in the entered URL is
416 * When hasFocus: user 'comes back' to write again the server URL.
418 * @param hostInput TextView with the URL input field receiving the change of focus.
420 private void onUrlInputFocusLost(TextView hostInput
) {
421 if (!mHostBaseUrl
.equals(normalizeUrl(mHostUrlInput
.getText().toString()))) {
424 mOkButton
.setEnabled(mServerIsValid
);
429 private void checkOcServer() {
430 String uri
= trimUrlWebdav(mHostUrlInput
.getText().toString().trim());
431 mServerIsValid
= false
;
432 mServerIsChecked
= false
;
433 mOkButton
.setEnabled(false
);
434 mDiscoveredVersion
= null
;
436 if (uri
.length() != 0) {
437 mServerStatusText
= R
.string
.auth_testing_connection
;
438 mServerStatusIcon
= R
.drawable
.progress_small
;
440 mOcServerChkOperation
= new OwnCloudServerCheckOperation(uri
, this);
441 WebdavClient client
= OwnCloudClientUtils
.createOwnCloudClient(Uri
.parse(uri
), this);
442 mOperationThread
= mOcServerChkOperation
.execute(client
, this, mHandler
);
444 mServerStatusText
= 0;
445 mServerStatusIcon
= 0;
452 * Handles changes in focus on the text input for the password (basic authorization).
454 * When (hasFocus), the button to toggle password visibility is shown.
456 * When (!hasFocus), the button is made invisible and the password is hidden.
458 * @param passwordInput TextView with the password input field receiving the change of focus.
459 * @param hasFocus 'True' if focus is received, 'false' if is lost
461 private void onPasswordFocusChanged(TextView passwordInput
, boolean hasFocus
) {
463 mViewPasswordButton
.setVisibility(View
.VISIBLE
);
465 int input_type
= InputType
.TYPE_CLASS_TEXT
| InputType
.TYPE_TEXT_VARIATION_PASSWORD
;
466 passwordInput
.setInputType(input_type
);
467 mViewPasswordButton
.setVisibility(View
.INVISIBLE
);
474 * Cancels the authenticator activity
476 * IMPORTANT ENTRY POINT 3: Never underestimate the importance of cancellation
478 * This method is bound in the layout/acceoun_setup.xml resource file.
480 * @param view Cancel button
482 public void onCancelClick(View view
) {
483 setResult(RESULT_CANCELED
); // TODO review how is this related to AccountAuthenticator (debugging)
490 * Checks the credentials of the user in the root of the ownCloud server
491 * before creating a new local account.
493 * For basic authorization, a check of existence of the root folder is
496 * For OAuth, starts the flow to get an access token; the credentials test
497 * is postponed until it is available.
499 * IMPORTANT ENTRY POINT 4
501 * @param view OK button
503 public void onOkClick(View view
) {
504 // this check should be unnecessary
505 if (mDiscoveredVersion
== null
|| !mDiscoveredVersion
.isVersionValid() || mHostBaseUrl
== null
|| mHostBaseUrl
.length() == 0) {
506 mServerStatusIcon
= R
.drawable
.common_error
;
507 mServerStatusText
= R
.string
.auth_wtf_reenter_URL
;
509 mOkButton
.setEnabled(false
);
510 Log_OC
.wtf(TAG
, "The user was allowed to click 'connect' to an unchecked server!!");
514 if (mOAuth2Check
.isChecked()) {
515 startOauthorization();
518 checkBasicAuthorization();
524 * Tests the credentials entered by the user performing a check of existence on
525 * the root folder of the ownCloud server.
527 private void checkBasicAuthorization() {
528 /// get the path to the root folder through WebDAV from the version server
529 String webdav_path
= AccountUtils
.getWebdavPath(mDiscoveredVersion
, false
);
531 /// get basic credentials entered by user
532 String username
= mUsernameInput
.getText().toString();
533 String password
= mPasswordInput
.getText().toString();
535 /// be gentle with the user
536 showDialog(DIALOG_LOGIN_PROGRESS
);
538 /// test credentials accessing the root folder
539 mAuthCheckOperation
= new ExistenceCheckOperation("", this, false
);
540 WebdavClient client
= OwnCloudClientUtils
.createOwnCloudClient(Uri
.parse(mHostBaseUrl
+ webdav_path
), this);
541 client
.setBasicCredentials(username
, password
);
542 mOperationThread
= mAuthCheckOperation
.execute(client
, this, mHandler
);
547 * Starts the OAuth 'grant type' flow to get an access token, with
548 * a GET AUTHORIZATION request to the BUILT-IN authorization server.
550 private void startOauthorization() {
551 // be gentle with the user
552 mAuthStatusIcon
= R
.drawable
.progress_small
;
553 mAuthStatusText
= R
.string
.oauth_login_connection
;
556 // GET AUTHORIZATION request
557 //Uri uri = Uri.parse(getString(R.string.oauth2_url_endpoint_auth));
558 Uri uri
= Uri
.parse(mOAuthAuthEndpointText
.getText().toString().trim());
559 Uri
.Builder uriBuilder
= uri
.buildUpon();
560 uriBuilder
.appendQueryParameter(OAuth2Constants
.KEY_RESPONSE_TYPE
, getString(R
.string
.oauth2_response_type
));
561 uriBuilder
.appendQueryParameter(OAuth2Constants
.KEY_REDIRECT_URI
, getString(R
.string
.oauth2_redirect_uri
));
562 uriBuilder
.appendQueryParameter(OAuth2Constants
.KEY_CLIENT_ID
, getString(R
.string
.oauth2_client_id
));
563 uriBuilder
.appendQueryParameter(OAuth2Constants
.KEY_SCOPE
, getString(R
.string
.oauth2_scope
));
564 //uriBuilder.appendQueryParameter(OAuth2Constants.KEY_STATE, whateverwewant);
565 uri
= uriBuilder
.build();
566 Log_OC
.d(TAG
, "Starting browser to view " + uri
.toString());
567 Intent i
= new Intent(Intent
.ACTION_VIEW
, uri
);
573 * Callback method invoked when a RemoteOperation executed by this Activity finishes.
575 * Dispatches the operation flow to the right method.
578 public void onRemoteOperationFinish(RemoteOperation operation
, RemoteOperationResult result
) {
580 if (operation
instanceof OwnCloudServerCheckOperation
) {
581 onOcServerCheckFinish((OwnCloudServerCheckOperation
) operation
, result
);
583 } else if (operation
instanceof OAuth2GetAccessToken
) {
584 onGetOAuthAccessTokenFinish((OAuth2GetAccessToken
)operation
, result
);
586 } else if (operation
instanceof ExistenceCheckOperation
) {
587 onAuthorizationCheckFinish((ExistenceCheckOperation
)operation
, result
);
594 * Processes the result of the server check performed when the user finishes the enter of the
597 * @param operation Server check performed.
598 * @param result Result of the check.
600 private void onOcServerCheckFinish(OwnCloudServerCheckOperation operation
, RemoteOperationResult result
) {
601 if (operation
.equals(mOcServerChkOperation
)) {
602 /// save result state
603 mServerIsChecked
= true
;
604 mServerIsValid
= result
.isSuccess();
605 mIsSslConn
= (result
.getCode() == ResultCode
.OK_SSL
);
606 mOcServerChkOperation
= null
;
608 /// update status icon and text
609 if (mServerIsValid
) {
614 updateServerStatusIconAndText(result
);
617 /// very special case (TODO: move to a common place for all the remote operations)
618 if (result
.getCode() == ResultCode
.SSL_RECOVERABLE_PEER_UNVERIFIED
) {
619 mLastSslUntrustedServerResult
= result
;
620 showDialog(DIALOG_SSL_VALIDATOR
);
623 /// retrieve discovered version and normalize server URL
624 mDiscoveredVersion
= operation
.getDiscoveredVersion();
625 mHostBaseUrl
= normalizeUrl(mHostUrlInput
.getText().toString());
627 /// allow or not the user try to access the server
628 mOkButton
.setEnabled(mServerIsValid
);
630 } // else nothing ; only the last check operation is considered;
631 // multiple can be triggered if the user amends a URL before a previous check can be triggered
635 private String
normalizeUrl(String url
) {
636 if (url
!= null
&& url
.length() > 0) {
638 if (!url
.toLowerCase().startsWith("http://") &&
639 !url
.toLowerCase().startsWith("https://")) {
641 url
= "https://" + url
;
643 url
= "http://" + url
;
647 // OC-208: Add suffix remote.php/webdav to normalize (OC-34)
648 url
= trimUrlWebdav(url
);
650 if (url
.endsWith("/")) {
651 url
= url
.substring(0, url
.length() - 1);
655 Log_OC
.d(TAG
, "URL Normalize " + url
);
656 return (url
!= null ? url
: "");
660 private String
trimUrlWebdav(String url
){
661 if(url
.toLowerCase().endsWith(WEBDAV_PATH
)){
662 url
= url
.substring(0, url
.length() - WEBDAV_PATH
.length());
664 return (url
!= null ? url
: "");
669 * Chooses the right icon and text to show to the user for the received operation result.
671 * @param result Result of a remote operation performed in this activity
673 private void updateServerStatusIconAndText(RemoteOperationResult result
) {
674 mServerStatusIcon
= R
.drawable
.common_error
; // the most common case in the switch below
676 switch (result
.getCode()) {
678 mServerStatusIcon
= android
.R
.drawable
.ic_secure
;
679 mServerStatusText
= R
.string
.auth_secure_connection
;
684 if (mHostUrlInput
.getText().toString().trim().toLowerCase().startsWith("http://") ) {
685 mServerStatusText
= R
.string
.auth_connection_established
;
686 mServerStatusIcon
= R
.drawable
.ic_ok
;
688 mServerStatusText
= R
.string
.auth_nossl_plain_ok_title
;
689 mServerStatusIcon
= android
.R
.drawable
.ic_partial_secure
;
693 case NO_NETWORK_CONNECTION
:
694 mServerStatusIcon
= R
.drawable
.no_network
;
695 mServerStatusText
= R
.string
.auth_no_net_conn_title
;
698 case SSL_RECOVERABLE_PEER_UNVERIFIED
:
699 mServerStatusText
= R
.string
.auth_ssl_unverified_server_title
;
702 mServerStatusText
= R
.string
.auth_bad_oc_version_title
;
704 case WRONG_CONNECTION
:
705 mServerStatusText
= R
.string
.auth_wrong_connection_title
;
708 mServerStatusText
= R
.string
.auth_timeout_title
;
710 case INCORRECT_ADDRESS
:
711 mServerStatusText
= R
.string
.auth_incorrect_address_title
;
714 mServerStatusText
= R
.string
.auth_ssl_general_error_title
;
717 mServerStatusText
= R
.string
.auth_unauthorized
;
719 case HOST_NOT_AVAILABLE
:
720 mServerStatusText
= R
.string
.auth_unknown_host_title
;
722 case INSTANCE_NOT_CONFIGURED
:
723 mServerStatusText
= R
.string
.auth_not_configured_title
;
726 mServerStatusText
= R
.string
.auth_incorrect_path_title
;
729 mServerStatusText
= R
.string
.auth_oauth_error
;
731 case OAUTH2_ERROR_ACCESS_DENIED
:
732 mServerStatusText
= R
.string
.auth_oauth_error_access_denied
;
734 case UNHANDLED_HTTP_CODE
:
736 mServerStatusText
= R
.string
.auth_unknown_error_title
;
739 mServerStatusText
= 0;
740 mServerStatusIcon
= 0;
746 * Chooses the right icon and text to show to the user for the received operation result.
748 * @param result Result of a remote operation performed in this activity
750 private void updateAuthStatusIconAndText(RemoteOperationResult result
) {
751 mAuthStatusIcon
= R
.drawable
.common_error
; // the most common case in the switch below
753 switch (result
.getCode()) {
755 mAuthStatusIcon
= android
.R
.drawable
.ic_secure
;
756 mAuthStatusText
= R
.string
.auth_secure_connection
;
761 if (mHostUrlInput
.getText().toString().trim().toLowerCase().startsWith("http://") ) {
762 mAuthStatusText
= R
.string
.auth_connection_established
;
763 mAuthStatusIcon
= R
.drawable
.ic_ok
;
765 mAuthStatusText
= R
.string
.auth_nossl_plain_ok_title
;
766 mAuthStatusIcon
= android
.R
.drawable
.ic_partial_secure
;
770 case NO_NETWORK_CONNECTION
:
771 mAuthStatusIcon
= R
.drawable
.no_network
;
772 mAuthStatusText
= R
.string
.auth_no_net_conn_title
;
775 case SSL_RECOVERABLE_PEER_UNVERIFIED
:
776 mAuthStatusText
= R
.string
.auth_ssl_unverified_server_title
;
779 mAuthStatusText
= R
.string
.auth_bad_oc_version_title
;
781 case WRONG_CONNECTION
:
782 mAuthStatusText
= R
.string
.auth_wrong_connection_title
;
785 mAuthStatusText
= R
.string
.auth_timeout_title
;
787 case INCORRECT_ADDRESS
:
788 mAuthStatusText
= R
.string
.auth_incorrect_address_title
;
791 mAuthStatusText
= R
.string
.auth_ssl_general_error_title
;
794 mAuthStatusText
= R
.string
.auth_unauthorized
;
796 case HOST_NOT_AVAILABLE
:
797 mAuthStatusText
= R
.string
.auth_unknown_host_title
;
799 case INSTANCE_NOT_CONFIGURED
:
800 mAuthStatusText
= R
.string
.auth_not_configured_title
;
803 mAuthStatusText
= R
.string
.auth_incorrect_path_title
;
806 mAuthStatusText
= R
.string
.auth_oauth_error
;
808 case OAUTH2_ERROR_ACCESS_DENIED
:
809 mAuthStatusText
= R
.string
.auth_oauth_error_access_denied
;
811 case UNHANDLED_HTTP_CODE
:
813 mAuthStatusText
= R
.string
.auth_unknown_error_title
;
823 * Processes the result of the request for and access token send
824 * to an OAuth authorization server.
826 * @param operation Operation performed requesting the access token.
827 * @param result Result of the operation.
829 private void onGetOAuthAccessTokenFinish(OAuth2GetAccessToken operation
, RemoteOperationResult result
) {
831 dismissDialog(DIALOG_OAUTH2_LOGIN_PROGRESS
);
832 } catch (IllegalArgumentException e
) {
833 // NOTHING TO DO ; can't find out what situation that leads to the exception in this code, but user logs signal that it happens
836 String webdav_path
= AccountUtils
.getWebdavPath(mDiscoveredVersion
, true
);
837 if (result
.isSuccess() && webdav_path
!= null
) {
838 /// be gentle with the user
839 showDialog(DIALOG_LOGIN_PROGRESS
);
841 /// time to test the retrieved access token on the ownCloud server
842 mOAuthAccessToken
= ((OAuth2GetAccessToken
)operation
).getResultTokenMap().get(OAuth2Constants
.KEY_ACCESS_TOKEN
);
843 Log_OC
.d(TAG
, "Got ACCESS TOKEN: " + mOAuthAccessToken
);
844 mAuthCheckOperation
= new ExistenceCheckOperation("", this, false
);
845 WebdavClient client
= OwnCloudClientUtils
.createOwnCloudClient(Uri
.parse(mHostBaseUrl
+ webdav_path
), this);
846 client
.setBearerCredentials(mOAuthAccessToken
);
847 mAuthCheckOperation
.execute(client
, this, mHandler
);
850 updateAuthStatusIconAndText(result
);
852 Log_OC
.d(TAG
, "Access failed: " + result
.getLogMessage());
858 * Processes the result of the access check performed to try the user credentials.
860 * Creates a new account through the AccountManager.
862 * @param operation Access check performed.
863 * @param result Result of the operation.
865 private void onAuthorizationCheckFinish(ExistenceCheckOperation operation
, RemoteOperationResult result
) {
867 dismissDialog(DIALOG_LOGIN_PROGRESS
);
868 } catch (IllegalArgumentException e
) {
869 // NOTHING TO DO ; can't find out what situation that leads to the exception in this code, but user logs signal that it happens
872 if (result
.isSuccess()) {
873 Log_OC
.d(TAG
, "Successful access - time to save the account");
875 if (mAction
== ACTION_CREATE
) {
885 updateAuthStatusIconAndText(result
);
887 Log_OC
.d(TAG
, "Access failed: " + result
.getLogMessage());
893 * Sets the proper response to get that the Account Authenticator that started this activity saves
894 * a new authorization token for mAccount.
896 private void updateToken() {
897 Bundle response
= new Bundle();
898 response
.putString(AccountManager
.KEY_ACCOUNT_NAME
, mAccount
.name
);
899 response
.putString(AccountManager
.KEY_ACCOUNT_TYPE
, mAccount
.type
);
900 boolean isOAuth
= mOAuth2Check
.isChecked();
902 response
.putString(AccountManager
.KEY_AUTHTOKEN
, mOAuthAccessToken
);
903 // the next line is necessary; by now, notifications are calling directly to the AuthenticatorActivity to update, without AccountManager intervention
904 mAccountMgr
.setAuthToken(mAccount
, AccountAuthenticator
.AUTH_TOKEN_TYPE_ACCESS_TOKEN
, mOAuthAccessToken
);
906 response
.putString(AccountManager
.KEY_AUTHTOKEN
, mPasswordInput
.getText().toString());
907 mAccountMgr
.setPassword(mAccount
, mPasswordInput
.getText().toString());
909 setAccountAuthenticatorResult(response
);
914 * Creates a new account through the Account Authenticator that started this activity.
916 * This makes the account permanent.
918 * TODO Decide how to name the OAuth accounts
920 private void createAccount() {
921 /// create and save new ownCloud account
922 boolean isOAuth
= mOAuth2Check
.isChecked();
924 Uri uri
= Uri
.parse(mHostBaseUrl
);
925 String username
= mUsernameInput
.getText().toString().trim();
927 username
= "OAuth_user" + (new java
.util
.Random(System
.currentTimeMillis())).nextLong();
929 String accountName
= username
+ "@" + uri
.getHost();
930 if (uri
.getPort() >= 0) {
931 accountName
+= ":" + uri
.getPort();
933 mAccount
= new Account(accountName
, AccountAuthenticator
.ACCOUNT_TYPE
);
935 mAccountMgr
.addAccountExplicitly(mAccount
, "", null
); // with our implementation, the password is never input in the app
937 mAccountMgr
.addAccountExplicitly(mAccount
, mPasswordInput
.getText().toString(), null
);
940 /// add the new account as default in preferences, if there is none already
941 Account defaultAccount
= AccountUtils
.getCurrentOwnCloudAccount(this);
942 if (defaultAccount
== null
) {
943 SharedPreferences
.Editor editor
= PreferenceManager
944 .getDefaultSharedPreferences(this).edit();
945 editor
.putString("select_oc_account", accountName
);
949 /// prepare result to return to the Authenticator
950 // TODO check again what the Authenticator makes with it; probably has the same effect as addAccountExplicitly, but it's not well done
951 final Intent intent
= new Intent();
952 intent
.putExtra(AccountManager
.KEY_ACCOUNT_TYPE
, AccountAuthenticator
.ACCOUNT_TYPE
);
953 intent
.putExtra(AccountManager
.KEY_ACCOUNT_NAME
, mAccount
.name
);
955 intent
.putExtra(AccountManager
.KEY_AUTHTOKEN
, AccountAuthenticator
.ACCOUNT_TYPE
); // TODO check this; not sure it's right; maybe
956 intent
.putExtra(AccountManager
.KEY_USERDATA
, username
);
958 mAccountMgr
.setAuthToken(mAccount
, AccountAuthenticator
.AUTH_TOKEN_TYPE_ACCESS_TOKEN
, mOAuthAccessToken
);
960 /// add user data to the new account; TODO probably can be done in the last parameter addAccountExplicitly, or in KEY_USERDATA
961 mAccountMgr
.setUserData(mAccount
, AccountAuthenticator
.KEY_OC_VERSION
, mDiscoveredVersion
.toString());
962 mAccountMgr
.setUserData(mAccount
, AccountAuthenticator
.KEY_OC_BASE_URL
, mHostBaseUrl
);
964 mAccountMgr
.setUserData(mAccount
, AccountAuthenticator
.KEY_SUPPORTS_OAUTH2
, "TRUE"); // TODO this flag should be unnecessary
966 setAccountAuthenticatorResult(intent
.getExtras());
967 setResult(RESULT_OK
, intent
);
969 /// immediately request for the synchronization of the new account
970 Bundle bundle
= new Bundle();
971 bundle
.putBoolean(ContentResolver
.SYNC_EXTRAS_MANUAL
, true
);
972 ContentResolver
.requestSync(mAccount
, AccountAuthenticator
.AUTHORITY
, bundle
);
979 * Necessary to update the contents of the SSL Dialog
981 * TODO move to some common place for all possible untrusted SSL failures
984 protected void onPrepareDialog(int id
, Dialog dialog
, Bundle args
) {
986 case DIALOG_LOGIN_PROGRESS
:
987 case DIALOG_CERT_NOT_SAVED
:
988 case DIALOG_OAUTH2_LOGIN_PROGRESS
:
990 case DIALOG_SSL_VALIDATOR
: {
991 ((SslValidatorDialog
)dialog
).updateResult(mLastSslUntrustedServerResult
);
995 Log_OC
.e(TAG
, "Incorrect dialog called with id = " + id
);
1004 protected Dialog
onCreateDialog(int id
) {
1005 Dialog dialog
= null
;
1007 case DIALOG_LOGIN_PROGRESS
: {
1008 /// simple progress dialog
1009 ProgressDialog working_dialog
= new ProgressDialog(this);
1010 working_dialog
.setMessage(getResources().getString(R
.string
.auth_trying_to_login
));
1011 working_dialog
.setIndeterminate(true
);
1012 working_dialog
.setCancelable(true
);
1014 .setOnCancelListener(new DialogInterface
.OnCancelListener() {
1016 public void onCancel(DialogInterface dialog
) {
1017 /// TODO study if this is enough
1018 Log_OC
.i(TAG
, "Login canceled");
1019 if (mOperationThread
!= null
) {
1020 mOperationThread
.interrupt();
1025 dialog
= working_dialog
;
1028 case DIALOG_OAUTH2_LOGIN_PROGRESS
: {
1029 ProgressDialog working_dialog
= new ProgressDialog(this);
1030 working_dialog
.setMessage(String
.format("Getting authorization"));
1031 working_dialog
.setIndeterminate(true
);
1032 working_dialog
.setCancelable(true
);
1034 .setOnCancelListener(new DialogInterface
.OnCancelListener() {
1036 public void onCancel(DialogInterface dialog
) {
1037 Log_OC
.i(TAG
, "Login canceled");
1041 dialog
= working_dialog
;
1044 case DIALOG_SSL_VALIDATOR
: {
1045 /// TODO start to use new dialog interface, at least for this (it is a FragmentDialog already)
1046 dialog
= SslValidatorDialog
.newInstance(this, mLastSslUntrustedServerResult
, this);
1049 case DIALOG_CERT_NOT_SAVED
: {
1050 AlertDialog
.Builder builder
= new AlertDialog
.Builder(this);
1051 builder
.setMessage(getResources().getString(R
.string
.ssl_validator_not_saved
));
1052 builder
.setCancelable(false
);
1053 builder
.setPositiveButton(R
.string
.common_ok
, new DialogInterface
.OnClickListener() {
1055 public void onClick(DialogInterface dialog
, int which
) {
1059 dialog
= builder
.create();
1063 Log_OC
.e(TAG
, "Incorrect dialog called with id = " + id
);
1070 * Starts and activity to open the 'new account' page in the ownCloud web site
1072 * @param view 'Account register' button
1074 public void onRegisterClick(View view
) {
1075 Intent register
= new Intent(Intent
.ACTION_VIEW
, Uri
.parse(getString(R
.string
.url_account_register
)));
1076 setResult(RESULT_CANCELED
);
1077 startActivity(register
);
1082 * Updates the content and visibility state of the icon and text associated
1083 * to the last check on the ownCloud server.
1085 private void showServerStatus() {
1086 TextView tv
= (TextView
) findViewById(R
.id
.server_status_text
);
1088 if (mServerStatusIcon
== 0 && mServerStatusText
== 0) {
1089 tv
.setVisibility(View
.INVISIBLE
);
1092 tv
.setText(mServerStatusText
);
1093 tv
.setCompoundDrawablesWithIntrinsicBounds(mServerStatusIcon
, 0, 0, 0);
1094 tv
.setVisibility(View
.VISIBLE
);
1101 * Updates the content and visibility state of the icon and text associated
1102 * to the interactions with the OAuth authorization server.
1104 private void showAuthStatus() {
1105 if (mAuthStatusIcon
== 0 && mAuthStatusText
== 0) {
1106 mAuthStatusLayout
.setVisibility(View
.INVISIBLE
);
1109 mAuthStatusLayout
.setText(mAuthStatusText
);
1110 mAuthStatusLayout
.setCompoundDrawablesWithIntrinsicBounds(mAuthStatusIcon
, 0, 0, 0);
1111 mAuthStatusLayout
.setVisibility(View
.VISIBLE
);
1116 private void showRefreshButton() {
1117 mHostUrlInput
.setCompoundDrawablesWithIntrinsicBounds(0, 0, R
.drawable
.ic_action_refresh_black
, 0);
1120 private void hideRefreshButton() {
1121 mHostUrlInput
.setCompoundDrawablesWithIntrinsicBounds(0, 0, 0, 0);
1125 * Called when the refresh button in the input field for ownCloud host is clicked.
1127 * Performs a new check on the URL in the input field.
1129 * @param view Refresh 'button'
1131 public void onRefreshClick(View view
) {
1137 * Called when the eye icon in the password field is clicked.
1139 * Toggles the visibility of the password in the field.
1141 * @param view 'View password' 'button'
1143 public void onViewPasswordClick(View view
) {
1144 int selectionStart
= mPasswordInput
.getSelectionStart();
1145 int selectionEnd
= mPasswordInput
.getSelectionEnd();
1146 int input_type
= mPasswordInput
.getInputType();
1147 if ((input_type
& InputType
.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD
) == InputType
.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD
) {
1148 input_type
= InputType
.TYPE_CLASS_TEXT
1149 | InputType
.TYPE_TEXT_VARIATION_PASSWORD
;
1151 input_type
= InputType
.TYPE_CLASS_TEXT
1152 | InputType
.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD
;
1154 mPasswordInput
.setInputType(input_type
);
1155 mPasswordInput
.setSelection(selectionStart
, selectionEnd
);
1160 * Called when the checkbox for OAuth authorization is clicked.
1162 * Hides or shows the input fields for user & password.
1164 * @param view 'View password' 'button'
1166 public void onCheckClick(View view
) {
1167 CheckBox oAuth2Check
= (CheckBox
)view
;
1168 changeViewByOAuth2Check(oAuth2Check
.isChecked());
1173 * Changes the visibility of input elements depending upon the kind of authorization
1174 * chosen by the user: basic or OAuth
1176 * @param checked 'True' when OAuth is selected.
1178 public void changeViewByOAuth2Check(Boolean checked
) {
1181 mOAuthAuthEndpointText
.setVisibility(View
.VISIBLE
);
1182 mOAuthTokenEndpointText
.setVisibility(View
.VISIBLE
);
1183 mUsernameInput
.setVisibility(View
.GONE
);
1184 mPasswordInput
.setVisibility(View
.GONE
);
1185 mViewPasswordButton
.setVisibility(View
.GONE
);
1187 mOAuthAuthEndpointText
.setVisibility(View
.GONE
);
1188 mOAuthTokenEndpointText
.setVisibility(View
.GONE
);
1189 mUsernameInput
.setVisibility(View
.VISIBLE
);
1190 mPasswordInput
.setVisibility(View
.VISIBLE
);
1191 mViewPasswordButton
.setVisibility(View
.INVISIBLE
);
1197 * Called from SslValidatorDialog when a new server certificate was correctly saved.
1199 public void onSavedCertificate() {
1200 mOperationThread
= mOcServerChkOperation
.retry(this, mHandler
);
1204 * Called from SslValidatorDialog when a new server certificate could not be saved
1205 * when the user requested it.
1208 public void onFailedSavingCertificate() {
1209 showDialog(DIALOG_CERT_NOT_SAVED
);
1214 * Called when the 'action' button in an IME is pressed ('enter' in software keyboard).
1216 * Used to trigger the authorization check when the user presses 'enter' after writing the password.
1219 public boolean onEditorAction(TextView inputField
, int actionId
, KeyEvent event
) {
1220 if (inputField
!= null
&& inputField
.equals(mPasswordInput
) &&
1221 actionId
== EditorInfo
.IME_ACTION_DONE
) {
1222 if (mOkButton
.isEnabled()) {
1223 mOkButton
.performClick();
1226 return false
; // always return false to grant that the software keyboard is hidden anyway
1230 private abstract static class RightDrawableOnTouchListener
implements OnTouchListener
{
1232 private int fuzz
= 10;
1238 public boolean onTouch(View view
, MotionEvent event
) {
1239 if (event
.getAction() == MotionEvent
.ACTION_DOWN
) {
1240 Drawable rightDrawable
= null
;
1241 if (view
instanceof TextView
) {
1242 Drawable
[] drawables
= ((TextView
)view
).getCompoundDrawables();
1243 if (drawables
.length
> 2) {
1244 rightDrawable
= drawables
[2];
1247 if (rightDrawable
!= null
) {
1248 final int x
= (int) event
.getX();
1249 final int y
= (int) event
.getY();
1250 final Rect bounds
= rightDrawable
.getBounds();
1251 if (x
>= (view
.getRight() - bounds
.width() - fuzz
) && x
<= (view
.getRight() - view
.getPaddingRight() + fuzz
)
1252 && y
>= (view
.getPaddingTop() - fuzz
) && y
<= (view
.getHeight() - view
.getPaddingBottom()) + fuzz
) {
1254 return onDrawableTouch(event
);
1261 public abstract boolean onDrawableTouch(final MotionEvent event
);