-/* ownCloud Android client application\r
- * Copyright (C) 2012 Bartek Przybylski\r
- * Copyright (C) 2012-2013 ownCloud Inc.\r
- *\r
- * This program is free software: you can redistribute it and/or modify\r
- * it under the terms of the GNU General Public License version 2,\r
- * as published by the Free Software Foundation.\r
- *\r
- * This program is distributed in the hope that it will be useful,\r
- * but WITHOUT ANY WARRANTY; without even the implied warranty of\r
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\r
- * GNU General Public License for more details.\r
- *\r
- * You should have received a copy of the GNU General Public License\r
- * along with this program. If not, see <http://www.gnu.org/licenses/>.\r
- *\r
- */\r
-\r
-package de.mobilcom.debitel.cloud.android.authentication;\r
-\r
-import android.accounts.Account;\r
-import android.accounts.AccountManager;\r
-import android.app.AlertDialog;\r
-import android.app.Dialog;\r
-import android.app.ProgressDialog;\r
-import android.content.ContentResolver;\r
-import android.content.DialogInterface;\r
-import android.content.Intent;\r
-import android.content.SharedPreferences;\r
-import android.graphics.Rect;\r
-import android.graphics.drawable.Drawable;\r
-import android.net.Uri;\r
-import android.os.Bundle;\r
-import android.os.Handler;\r
-import android.preference.PreferenceManager;\r
-import android.support.v4.app.Fragment;\r
-import android.text.Editable;\r
-import android.text.InputType;\r
-import android.text.TextWatcher;\r
-import android.view.KeyEvent;\r
-import android.view.MotionEvent;\r
-import android.view.View;\r
-import android.view.View.OnFocusChangeListener;\r
-import android.view.View.OnTouchListener;\r
-import android.view.Window;\r
-import android.view.inputmethod.EditorInfo;\r
-import android.widget.Button;\r
-import android.widget.CheckBox;\r
-import android.widget.EditText;\r
-import android.widget.TextView;\r
-import android.widget.TextView.OnEditorActionListener;\r
-\r
-import com.actionbarsherlock.app.SherlockDialogFragment;\r
-\r
-import de.mobilcom.debitel.cloud.android.Log_OC;\r
-import de.mobilcom.debitel.cloud.android.MainApp;\r
-import de.mobilcom.debitel.cloud.android.R;\r
-import de.mobilcom.debitel.cloud.android.authentication.SsoWebViewClient.SsoWebViewClientListener;\r
-import de.mobilcom.debitel.cloud.android.network.OwnCloudClientUtils;\r
-import de.mobilcom.debitel.cloud.android.operations.ExistenceCheckOperation;\r
-import de.mobilcom.debitel.cloud.android.operations.OAuth2GetAccessToken;\r
-import de.mobilcom.debitel.cloud.android.operations.OnRemoteOperationListener;\r
-import de.mobilcom.debitel.cloud.android.operations.OwnCloudServerCheckOperation;\r
-import de.mobilcom.debitel.cloud.android.operations.RemoteOperation;\r
-import de.mobilcom.debitel.cloud.android.operations.RemoteOperationResult;\r
-import de.mobilcom.debitel.cloud.android.operations.RemoteOperationResult.ResultCode;\r
-import de.mobilcom.debitel.cloud.android.ui.CustomButton;\r
-import de.mobilcom.debitel.cloud.android.ui.dialog.SamlWebViewDialog;\r
-import de.mobilcom.debitel.cloud.android.ui.dialog.SslValidatorDialog;\r
-import de.mobilcom.debitel.cloud.android.ui.dialog.SslValidatorDialog.OnSslValidatorListener;\r
-import de.mobilcom.debitel.cloud.android.utils.OwnCloudVersion;\r
-\r
-import eu.alefzero.webdav.WebdavClient;\r
-\r
-/**\r
- * This Activity is used to add an ownCloud account to the App\r
- * \r
- * @author Bartek Przybylski\r
- * @author David A. Velasco\r
- */\r
-public class AuthenticatorActivity extends AccountAuthenticatorActivity\r
-implements OnRemoteOperationListener, OnSslValidatorListener, OnFocusChangeListener, OnEditorActionListener, SsoWebViewClientListener{\r
-\r
- private static final String TAG = AuthenticatorActivity.class.getSimpleName();\r
-\r
- public static final String EXTRA_ACCOUNT = "ACCOUNT";\r
- public static final String EXTRA_USER_NAME = "USER_NAME";\r
- public static final String EXTRA_HOST_NAME = "HOST_NAME";\r
- public static final String EXTRA_ACTION = "ACTION";\r
- public static final String EXTRA_ENFORCED_UPDATE = "ENFORCE_UPDATE";\r
-\r
- private static final String KEY_AUTH_MESSAGE_VISIBILITY = "AUTH_MESSAGE_VISIBILITY";\r
- private static final String KEY_AUTH_MESSAGE_TEXT = "AUTH_MESSAGE_TEXT";\r
- private static final String KEY_HOST_URL_TEXT = "HOST_URL_TEXT";\r
- private static final String KEY_OC_VERSION = "OC_VERSION";\r
- private static final String KEY_ACCOUNT = "ACCOUNT";\r
- private static final String KEY_SERVER_VALID = "SERVER_VALID";\r
- private static final String KEY_SERVER_CHECKED = "SERVER_CHECKED";\r
- private static final String KEY_SERVER_CHECK_IN_PROGRESS = "SERVER_CHECK_IN_PROGRESS"; \r
- private static final String KEY_SERVER_STATUS_TEXT = "SERVER_STATUS_TEXT";\r
- private static final String KEY_SERVER_STATUS_ICON = "SERVER_STATUS_ICON";\r
- private static final String KEY_IS_SSL_CONN = "IS_SSL_CONN";\r
- private static final String KEY_PASSWORD_VISIBLE = "PASSWORD_VISIBLE";\r
- private static final String KEY_AUTH_STATUS_TEXT = "AUTH_STATUS_TEXT";\r
- private static final String KEY_AUTH_STATUS_ICON = "AUTH_STATUS_ICON";\r
- private static final String KEY_REFRESH_BUTTON_ENABLED = "KEY_REFRESH_BUTTON_ENABLED";\r
- \r
- private static final String KEY_OC_USERNAME_EQUALS = "oc_username=";\r
-\r
- private static final String AUTH_ON = "on";\r
- private static final String AUTH_OFF = "off";\r
- private static final String AUTH_OPTIONAL = "optional";\r
- \r
- private static final int DIALOG_LOGIN_PROGRESS = 0;\r
- private static final int DIALOG_SSL_VALIDATOR = 1;\r
- private static final int DIALOG_CERT_NOT_SAVED = 2;\r
- private static final int DIALOG_OAUTH2_LOGIN_PROGRESS = 3;\r
-\r
- public static final byte ACTION_CREATE = 0;\r
- public static final byte ACTION_UPDATE_TOKEN = 1;\r
-\r
- private static final String TAG_SAML_DIALOG = "samlWebViewDialog";\r
- \r
- private String mHostBaseUrl;\r
- private OwnCloudVersion mDiscoveredVersion;\r
-\r
- private String mAuthMessageText;\r
- private int mAuthMessageVisibility, mServerStatusText, mServerStatusIcon;\r
- private boolean mServerIsChecked, mServerIsValid, mIsSslConn;\r
- private int mAuthStatusText, mAuthStatusIcon; \r
- private TextView mAuthStatusLayout;\r
-\r
- private final Handler mHandler = new Handler();\r
- private Thread mOperationThread;\r
- private OwnCloudServerCheckOperation mOcServerChkOperation;\r
- private ExistenceCheckOperation mAuthCheckOperation;\r
- private RemoteOperationResult mLastSslUntrustedServerResult;\r
-\r
- private Uri mNewCapturedUriFromOAuth2Redirection;\r
-\r
- private AccountManager mAccountMgr;\r
- private boolean mJustCreated;\r
- private byte mAction;\r
- private Account mAccount;\r
-\r
- private TextView mAuthMessage;\r
- \r
- private EditText mHostUrlInput;\r
- private boolean mHostUrlInputEnabled;\r
- private View mRefreshButton;\r
-\r
- private String mAuthTokenType;\r
- \r
- private EditText mUsernameInput;\r
- private EditText mPasswordInput;\r
- \r
- private CheckBox mOAuth2Check;\r
- \r
- private TextView mOAuthAuthEndpointText;\r
- private TextView mOAuthTokenEndpointText;\r
- \r
- private SamlWebViewDialog mSamlDialog;\r
- \r
- private View mOkButton;\r
- \r
- private String mAuthToken;\r
- \r
- private boolean mResumed; // Control if activity is resumed\r
-\r
-\r
- /**\r
- * {@inheritDoc}\r
- * \r
- * IMPORTANT ENTRY POINT 1: activity is shown to the user\r
- */\r
- @Override\r
- protected void onCreate(Bundle savedInstanceState) {\r
- super.onCreate(savedInstanceState);\r
- getWindow().requestFeature(Window.FEATURE_NO_TITLE);\r
-\r
- /// set view and get references to view elements\r
- setContentView(R.layout.account_setup);\r
- mAuthMessage = (TextView) findViewById(R.id.auth_message);\r
- mHostUrlInput = (EditText) findViewById(R.id.hostUrlInput);\r
- mHostUrlInput.setText(getString(R.string.server_url)); // valid although R.string.server_url is an empty string\r
- mUsernameInput = (EditText) findViewById(R.id.account_username);\r
- mPasswordInput = (EditText) findViewById(R.id.account_password);\r
- mOAuthAuthEndpointText = (TextView)findViewById(R.id.oAuthEntryPoint_1);\r
- mOAuthTokenEndpointText = (TextView)findViewById(R.id.oAuthEntryPoint_2);\r
- mOAuth2Check = (CheckBox) findViewById(R.id.oauth_onOff_check);\r
- mOkButton = (CustomButton) findViewById(R.id.buttonOK);\r
- mAuthStatusLayout = (TextView) findViewById(R.id.auth_status_text); \r
- \r
- /// set Host Url Input Enabled\r
- mHostUrlInputEnabled = getResources().getBoolean(R.bool.show_server_url_input);\r
- \r
-\r
- /// complete label for 'register account' button\r
- Button b = (Button) findViewById(R.id.account_register);\r
- if (b != null) {\r
- b.setText(String.format(getString(R.string.auth_register), getString(R.string.app_name))); \r
- }\r
-\r
-// /// complete background of 'OK' button\r
-// boolean customButtons = getResources().getBoolean(R.bool.custom_buttons);\r
-// if (customButtons)\r
-// mOkButton.setBackgroundResource(R.drawable.btn_default);\r
- \r
- /// initialization\r
- mAccountMgr = AccountManager.get(this);\r
- mNewCapturedUriFromOAuth2Redirection = null;\r
- mAction = getIntent().getByteExtra(EXTRA_ACTION, ACTION_CREATE); \r
- mAccount = null;\r
- mHostBaseUrl = "";\r
- boolean refreshButtonEnabled = false;\r
- \r
- // URL input configuration applied\r
- if (!mHostUrlInputEnabled)\r
- {\r
- findViewById(R.id.hostUrlFrame).setVisibility(View.GONE);\r
- mRefreshButton = findViewById(R.id.centeredRefreshButton);\r
-\r
- } else {\r
- mRefreshButton = findViewById(R.id.embeddedRefreshButton);\r
- }\r
-\r
- if (savedInstanceState == null) {\r
- mResumed = false;\r
- /// connection state and info\r
- mAuthMessageVisibility = View.GONE;\r
- mServerStatusText = mServerStatusIcon = 0;\r
- mServerIsValid = false;\r
- mServerIsChecked = false;\r
- mIsSslConn = false;\r
- mAuthStatusText = mAuthStatusIcon = 0;\r
-\r
- /// retrieve extras from intent\r
- mAccount = getIntent().getExtras().getParcelable(EXTRA_ACCOUNT);\r
- if (mAccount != null) {\r
- String ocVersion = mAccountMgr.getUserData(mAccount, AccountAuthenticator.KEY_OC_VERSION);\r
- if (ocVersion != null) {\r
- mDiscoveredVersion = new OwnCloudVersion(ocVersion);\r
- }\r
- mHostBaseUrl = normalizeUrl(mAccountMgr.getUserData(mAccount, AccountAuthenticator.KEY_OC_BASE_URL));\r
- mHostUrlInput.setText(mHostBaseUrl);\r
- String userName = mAccount.name.substring(0, mAccount.name.lastIndexOf('@'));\r
- mUsernameInput.setText(userName);\r
- }\r
- initAuthorizationMethod(); // checks intent and setup.xml to determine mCurrentAuthorizationMethod\r
- mJustCreated = true;\r
- \r
- if (mAction == ACTION_UPDATE_TOKEN || !mHostUrlInputEnabled) {\r
- checkOcServer(); \r
- }\r
- \r
- } else {\r
- mResumed = true;\r
- /// connection state and info\r
- mAuthMessageVisibility = savedInstanceState.getInt(KEY_AUTH_MESSAGE_VISIBILITY);\r
- mAuthMessageText = savedInstanceState.getString(KEY_AUTH_MESSAGE_TEXT);\r
- mServerIsValid = savedInstanceState.getBoolean(KEY_SERVER_VALID);\r
- mServerIsChecked = savedInstanceState.getBoolean(KEY_SERVER_CHECKED);\r
- mServerStatusText = savedInstanceState.getInt(KEY_SERVER_STATUS_TEXT);\r
- mServerStatusIcon = savedInstanceState.getInt(KEY_SERVER_STATUS_ICON);\r
- mIsSslConn = savedInstanceState.getBoolean(KEY_IS_SSL_CONN);\r
- mAuthStatusText = savedInstanceState.getInt(KEY_AUTH_STATUS_TEXT);\r
- mAuthStatusIcon = savedInstanceState.getInt(KEY_AUTH_STATUS_ICON);\r
- if (savedInstanceState.getBoolean(KEY_PASSWORD_VISIBLE, false)) {\r
- showPassword();\r
- }\r
- \r
- /// server data\r
- String ocVersion = savedInstanceState.getString(KEY_OC_VERSION);\r
- if (ocVersion != null) {\r
- mDiscoveredVersion = new OwnCloudVersion(ocVersion);\r
- }\r
- mHostBaseUrl = savedInstanceState.getString(KEY_HOST_URL_TEXT);\r
-\r
- // account data, if updating\r
- mAccount = savedInstanceState.getParcelable(KEY_ACCOUNT);\r
- mAuthTokenType = savedInstanceState.getString(AccountAuthenticator.KEY_AUTH_TOKEN_TYPE);\r
- if (mAuthTokenType == null) {\r
- mAuthTokenType = MainApp.getAuthTokenTypePass();\r
- \r
- }\r
-\r
- // check if server check was interrupted by a configuration change\r
- if (savedInstanceState.getBoolean(KEY_SERVER_CHECK_IN_PROGRESS, false)) {\r
- checkOcServer();\r
- } \r
- \r
- // refresh button enabled\r
- refreshButtonEnabled = savedInstanceState.getBoolean(KEY_REFRESH_BUTTON_ENABLED);\r
- \r
-\r
- }\r
-\r
- if (mAuthMessageVisibility== View.VISIBLE) {\r
- showAuthMessage(mAuthMessageText);\r
- }\r
- else {\r
- hideAuthMessage();\r
- }\r
- adaptViewAccordingToAuthenticationMethod();\r
- showServerStatus();\r
- showAuthStatus();\r
- \r
- if (mAction == ACTION_UPDATE_TOKEN) {\r
- /// lock things that should not change\r
- mHostUrlInput.setEnabled(false);\r
- mHostUrlInput.setFocusable(false);\r
- mUsernameInput.setEnabled(false);\r
- mUsernameInput.setFocusable(false);\r
- mOAuth2Check.setVisibility(View.GONE);\r
- }\r
- \r
- //if (mServerIsChecked && !mServerIsValid && mRefreshButtonEnabled) showRefreshButton();\r
- if (mServerIsChecked && !mServerIsValid && refreshButtonEnabled) showRefreshButton();\r
- mOkButton.setEnabled(mServerIsValid); // state not automatically recovered in configuration changes\r
-\r
- if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType) || \r
- !AUTH_OPTIONAL.equals(getString(R.string.auth_method_oauth2))) {\r
- mOAuth2Check.setVisibility(View.GONE);\r
- }\r
-\r
- mPasswordInput.setText(""); // clean password to avoid social hacking (disadvantage: password in removed if the device is turned aside)\r
-\r
- /// bind view elements to listeners and other friends\r
- mHostUrlInput.setOnFocusChangeListener(this);\r
- mHostUrlInput.setImeOptions(EditorInfo.IME_ACTION_NEXT);\r
- mHostUrlInput.setOnEditorActionListener(this);\r
- mHostUrlInput.addTextChangedListener(new TextWatcher() {\r
-\r
- @Override\r
- public void afterTextChanged(Editable s) {\r
- if (!mHostBaseUrl.equals(normalizeUrl(mHostUrlInput.getText().toString()))) {\r
- mOkButton.setEnabled(false);\r
- }\r
- }\r
-\r
- @Override\r
- public void beforeTextChanged(CharSequence s, int start, int count, int after) {\r
- }\r
-\r
- @Override\r
- public void onTextChanged(CharSequence s, int start, int before, int count) {\r
- if (!mResumed) {\r
- mAuthStatusIcon = 0;\r
- mAuthStatusText = 0;\r
- showAuthStatus(); \r
- }\r
- mResumed = false;\r
- }\r
- });\r
- \r
- mPasswordInput.setOnFocusChangeListener(this);\r
- mPasswordInput.setImeOptions(EditorInfo.IME_ACTION_DONE);\r
- mPasswordInput.setOnEditorActionListener(this);
- mPasswordInput.setOnTouchListener(new RightDrawableOnTouchListener() {\r
- @Override\r
- public boolean onDrawableTouch(final MotionEvent event) {\r
- if (event.getAction() == MotionEvent.ACTION_UP) {\r
- AuthenticatorActivity.this.onViewPasswordClick();\r
- }\r
- return true;\r
- }\r
- });\r
- \r
- findViewById(R.id.scroll).setOnTouchListener(new OnTouchListener() {\r
- @Override\r
- public boolean onTouch(View view, MotionEvent event) {\r
- if (event.getAction() == MotionEvent.ACTION_DOWN) {\r
- if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType) &&\r
- mHostUrlInput.hasFocus()) {\r
- checkOcServer();\r
- }\r
- }\r
- return false;\r
- }\r
- });\r
- }\r
- \r
- \r
-\r
- private void initAuthorizationMethod() {\r
- boolean oAuthRequired = false;\r
- boolean samlWebSsoRequired = false;\r
-\r
- mAuthTokenType = getIntent().getExtras().getString(AccountAuthenticator.KEY_AUTH_TOKEN_TYPE);\r
- mAccount = getIntent().getExtras().getParcelable(EXTRA_ACCOUNT);\r
- \r
- // TODO could be a good moment to validate the received token type, if not null\r
- \r
- if (mAuthTokenType == null) { \r
- if (mAccount != null) {\r
- /// same authentication method than the one used to create the account to update\r
- oAuthRequired = (mAccountMgr.getUserData(mAccount, AccountAuthenticator.KEY_SUPPORTS_OAUTH2) != null);\r
- samlWebSsoRequired = (mAccountMgr.getUserData(mAccount, AccountAuthenticator.KEY_SUPPORTS_SAML_WEB_SSO) != null);\r
- \r
- } else {\r
- /// use the one set in setup.xml\r
- oAuthRequired = AUTH_ON.equals(getString(R.string.auth_method_oauth2));\r
- samlWebSsoRequired = AUTH_ON.equals(getString(R.string.auth_method_saml_web_sso)); \r
- }\r
- if (oAuthRequired) {\r
- mAuthTokenType = MainApp.getAuthTokenTypeAccessToken();\r
- } else if (samlWebSsoRequired) {\r
- mAuthTokenType = MainApp.getAuthTokenTypeSamlSessionCookie();\r
- } else {\r
- mAuthTokenType = MainApp.getAuthTokenTypePass();\r
- }\r
- }\r
- \r
- if (mAccount != null) {\r
- String userName = mAccount.name.substring(0, mAccount.name.lastIndexOf('@'));\r
- mUsernameInput.setText(userName);\r
- }\r
- \r
- mOAuth2Check.setChecked(MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType));\r
- \r
- }\r
-\r
- /**\r
- * Saves relevant state before {@link #onPause()}\r
- * \r
- * Do NOT save {@link #mNewCapturedUriFromOAuth2Redirection}; it keeps a temporal flag, intended to defer the \r
- * processing of the redirection caught in {@link #onNewIntent(Intent)} until {@link #onResume()} \r
- * \r
- * See {@link #loadSavedInstanceState(Bundle)}\r
- */\r
- @Override\r
- protected void onSaveInstanceState(Bundle outState) {\r
- super.onSaveInstanceState(outState);\r
-\r
- /// connection state and info\r
- outState.putInt(KEY_AUTH_MESSAGE_VISIBILITY, mAuthMessage.getVisibility());\r
- outState.putString(KEY_AUTH_MESSAGE_TEXT, mAuthMessage.getText().toString());\r
- outState.putInt(KEY_SERVER_STATUS_TEXT, mServerStatusText);\r
- outState.putInt(KEY_SERVER_STATUS_ICON, mServerStatusIcon);\r
- outState.putBoolean(KEY_SERVER_VALID, mServerIsValid);\r
- outState.putBoolean(KEY_SERVER_CHECKED, mServerIsChecked);\r
- outState.putBoolean(KEY_SERVER_CHECK_IN_PROGRESS, (!mServerIsValid && mOcServerChkOperation != null));\r
- outState.putBoolean(KEY_IS_SSL_CONN, mIsSslConn);\r
- outState.putBoolean(KEY_PASSWORD_VISIBLE, isPasswordVisible());\r
- outState.putInt(KEY_AUTH_STATUS_ICON, mAuthStatusIcon);\r
- outState.putInt(KEY_AUTH_STATUS_TEXT, mAuthStatusText);\r
-\r
- /// server data\r
- if (mDiscoveredVersion != null) {\r
- outState.putString(KEY_OC_VERSION, mDiscoveredVersion.toString());\r
- }\r
- outState.putString(KEY_HOST_URL_TEXT, mHostBaseUrl);\r
-\r
- /// account data, if updating\r
- if (mAccount != null) {\r
- outState.putParcelable(KEY_ACCOUNT, mAccount);\r
- }\r
- outState.putString(AccountAuthenticator.KEY_AUTH_TOKEN_TYPE, mAuthTokenType);\r
- \r
- // refresh button enabled\r
- outState.putBoolean(KEY_REFRESH_BUTTON_ENABLED, (mRefreshButton.getVisibility() == View.VISIBLE));\r
- \r
-\r
- }\r
-\r
-\r
- /**\r
- * The redirection triggered by the OAuth authentication server as response to the GET AUTHORIZATION request\r
- * is caught here.\r
- * \r
- * To make this possible, this activity needs to be qualified with android:launchMode = "singleTask" in the\r
- * AndroidManifest.xml file.\r
- */\r
- @Override\r
- protected void onNewIntent (Intent intent) {\r
- Log_OC.d(TAG, "onNewIntent()");\r
- Uri data = intent.getData();\r
- if (data != null && data.toString().startsWith(getString(R.string.oauth2_redirect_uri))) {\r
- mNewCapturedUriFromOAuth2Redirection = data;\r
- }\r
- }\r
-\r
-\r
- /**\r
- * The redirection triggered by the OAuth authentication server as response to the GET AUTHORIZATION, and \r
- * deferred in {@link #onNewIntent(Intent)}, is processed here.\r
- */\r
- @Override\r
- protected void onResume() {\r
- super.onResume();\r
- if (mAction == ACTION_UPDATE_TOKEN && mJustCreated && getIntent().getBooleanExtra(EXTRA_ENFORCED_UPDATE, false)) {\r
- if (MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType)) {\r
- //Toast.makeText(this, R.string.auth_expired_oauth_token_toast, Toast.LENGTH_LONG).show();\r
- showAuthMessage(getString(R.string.auth_expired_oauth_token_toast));\r
- } else if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) {\r
- //Toast.makeText(this, R.string.auth_expired_saml_sso_token_toast, Toast.LENGTH_LONG).show();\r
- showAuthMessage(getString(R.string.auth_expired_saml_sso_token_toast));\r
- } else {\r
- //Toast.makeText(this, R.string.auth_expired_basic_auth_toast, Toast.LENGTH_LONG).show();\r
- showAuthMessage(getString(R.string.auth_expired_basic_auth_toast));\r
- }\r
- }\r
-\r
- if (mNewCapturedUriFromOAuth2Redirection != null) {\r
- getOAuth2AccessTokenFromCapturedRedirection(); \r
- }\r
-\r
- mJustCreated = false;\r
- \r
- }\r
-\r
-\r
- /**\r
- * Parses the redirection with the response to the GET AUTHORIZATION request to the \r
- * oAuth server and requests for the access token (GET ACCESS TOKEN)\r
- */\r
- private void getOAuth2AccessTokenFromCapturedRedirection() {\r
- /// Parse data from OAuth redirection\r
- String queryParameters = mNewCapturedUriFromOAuth2Redirection.getQuery();\r
- mNewCapturedUriFromOAuth2Redirection = null;\r
-\r
- /// Showing the dialog with instructions for the user.\r
- showDialog(DIALOG_OAUTH2_LOGIN_PROGRESS);\r
-\r
- /// GET ACCESS TOKEN to the oAuth server \r
- RemoteOperation operation = new OAuth2GetAccessToken( getString(R.string.oauth2_client_id), \r
- getString(R.string.oauth2_redirect_uri), \r
- getString(R.string.oauth2_grant_type),\r
- queryParameters);\r
- //WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(getString(R.string.oauth2_url_endpoint_access)), getApplicationContext());\r
- WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(mOAuthTokenEndpointText.getText().toString().trim()), getApplicationContext(), true);\r
- operation.execute(client, this, mHandler);\r
- }\r
-\r
-\r
-\r
- /**\r
- * Handles the change of focus on the text inputs for the server URL and the password\r
- */\r
- public void onFocusChange(View view, boolean hasFocus) {\r
- if (view.getId() == R.id.hostUrlInput) { \r
- if (!hasFocus) {\r
- onUrlInputFocusLost((TextView) view);\r
- }\r
- else {\r
- hideRefreshButton();\r
- }\r
-\r
- } else if (view.getId() == R.id.account_password) {\r
- onPasswordFocusChanged((TextView) view, hasFocus);\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Handles changes in focus on the text input for the server URL.\r
- * \r
- * IMPORTANT ENTRY POINT 2: When (!hasFocus), user wrote the server URL and changed to \r
- * other field. The operation to check the existence of the server in the entered URL is\r
- * started. \r
- * \r
- * When hasFocus: user 'comes back' to write again the server URL.\r
- * \r
- * @param hostInput TextView with the URL input field receiving the change of focus.\r
- */\r
- private void onUrlInputFocusLost(TextView hostInput) {\r
- if (!mHostBaseUrl.equals(normalizeUrl(mHostUrlInput.getText().toString()))) {\r
- checkOcServer();\r
- } else {\r
- mOkButton.setEnabled(mServerIsValid);\r
- if (!mServerIsValid) {\r
- showRefreshButton();\r
- }\r
- }\r
- }\r
-\r
-\r
- private void checkOcServer() {\r
- String uri = trimUrlWebdav(mHostUrlInput.getText().toString().trim());\r
- \r
- if (!mHostUrlInputEnabled){\r
- uri = getString(R.string.server_url);\r
- }\r
- \r
- mServerIsValid = false;\r
- mServerIsChecked = false;\r
- mOkButton.setEnabled(false);\r
- mDiscoveredVersion = null;\r
- hideRefreshButton();\r
- if (uri.length() != 0) {\r
- mServerStatusText = R.string.auth_testing_connection;\r
- mServerStatusIcon = R.drawable.progress_small;\r
- showServerStatus();\r
- mOcServerChkOperation = new OwnCloudServerCheckOperation(uri, this);\r
- WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(uri), this, true);\r
- mOperationThread = mOcServerChkOperation.execute(client, this, mHandler);\r
- } else {\r
- mServerStatusText = 0;\r
- mServerStatusIcon = 0;\r
- showServerStatus();\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Handles changes in focus on the text input for the password (basic authorization).\r
- * \r
- * When (hasFocus), the button to toggle password visibility is shown.\r
- * \r
- * When (!hasFocus), the button is made invisible and the password is hidden.\r
- * \r
- * @param passwordInput TextView with the password input field receiving the change of focus.\r
- * @param hasFocus 'True' if focus is received, 'false' if is lost\r
- */\r
- private void onPasswordFocusChanged(TextView passwordInput, boolean hasFocus) {\r
- if (hasFocus) {\r
- showViewPasswordButton();\r
- } else {\r
- hidePassword();\r
- hidePasswordButton();\r
- }\r
- }\r
-\r
-\r
- private void showViewPasswordButton() {\r
- //int drawable = android.R.drawable.ic_menu_view;\r
- int drawable = R.drawable.ic_view;\r
- if (isPasswordVisible()) {\r
- //drawable = android.R.drawable.ic_secure;\r
- drawable = R.drawable.ic_hide;\r
- }\r
- mPasswordInput.setCompoundDrawablesWithIntrinsicBounds(0, 0, drawable, 0);\r
- }\r
-\r
- private boolean isPasswordVisible() {\r
- return ((mPasswordInput.getInputType() & InputType.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD) == InputType.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD);\r
- }\r
- \r
- private void hidePasswordButton() {\r
- mPasswordInput.setCompoundDrawablesWithIntrinsicBounds(0, 0, 0, 0);\r
- }\r
-\r
- private void showPassword() {\r
- mPasswordInput.setInputType(InputType.TYPE_CLASS_TEXT | InputType.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD);\r
- showViewPasswordButton();\r
- }\r
- \r
- private void hidePassword() {\r
- mPasswordInput.setInputType(InputType.TYPE_CLASS_TEXT | InputType.TYPE_TEXT_VARIATION_PASSWORD);\r
- showViewPasswordButton();\r
- }\r
- \r
- \r
- /**\r
- * Cancels the authenticator activity\r
- * \r
- * IMPORTANT ENTRY POINT 3: Never underestimate the importance of cancellation\r
- * \r
- * This method is bound in the layout/acceoun_setup.xml resource file.\r
- * \r
- * @param view Cancel button\r
- */\r
- public void onCancelClick(View view) {\r
- setResult(RESULT_CANCELED); // TODO review how is this related to AccountAuthenticator (debugging)\r
- finish();\r
- }\r
-\r
-\r
-\r
- /**\r
- * Checks the credentials of the user in the root of the ownCloud server\r
- * before creating a new local account.\r
- * \r
- * For basic authorization, a check of existence of the root folder is\r
- * performed.\r
- * \r
- * For OAuth, starts the flow to get an access token; the credentials test \r
- * is postponed until it is available.\r
- * \r
- * IMPORTANT ENTRY POINT 4\r
- * \r
- * @param view OK button\r
- */\r
- public void onOkClick(View view) {\r
- // this check should be unnecessary\r
- if (mDiscoveredVersion == null || !mDiscoveredVersion.isVersionValid() || mHostBaseUrl == null || mHostBaseUrl.length() == 0) {\r
- mServerStatusIcon = R.drawable.common_error;\r
- mServerStatusText = R.string.auth_wtf_reenter_URL;\r
- showServerStatus();\r
- mOkButton.setEnabled(false);\r
- Log_OC.wtf(TAG, "The user was allowed to click 'connect' to an unchecked server!!");\r
- return;\r
- }\r
-\r
- if (MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType)) {\r
- startOauthorization();\r
- } else if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) { \r
- startSamlBasedFederatedSingleSignOnAuthorization();\r
- } else {\r
- checkBasicAuthorization();\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Tests the credentials entered by the user performing a check of existence on \r
- * the root folder of the ownCloud server.\r
- */\r
- private void checkBasicAuthorization() {\r
- /// get the path to the root folder through WebDAV from the version server\r
- String webdav_path = AccountUtils.getWebdavPath(mDiscoveredVersion, mAuthTokenType);\r
-\r
- /// get basic credentials entered by user\r
- String username = mUsernameInput.getText().toString();\r
- String password = mPasswordInput.getText().toString();\r
-\r
- /// be gentle with the user\r
- showDialog(DIALOG_LOGIN_PROGRESS);\r
-\r
- /// test credentials accessing the root folder\r
- mAuthCheckOperation = new ExistenceCheckOperation("", this, false);\r
- WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(mHostBaseUrl + webdav_path), this, true);\r
- client.setBasicCredentials(username, password);\r
- mOperationThread = mAuthCheckOperation.execute(client, this, mHandler);\r
- }\r
-\r
-\r
- /**\r
- * Starts the OAuth 'grant type' flow to get an access token, with \r
- * a GET AUTHORIZATION request to the BUILT-IN authorization server. \r
- */\r
- private void startOauthorization() {\r
- // be gentle with the user\r
- mAuthStatusIcon = R.drawable.progress_small;\r
- mAuthStatusText = R.string.oauth_login_connection;\r
- showAuthStatus();\r
- \r
-\r
- // GET AUTHORIZATION request\r
- //Uri uri = Uri.parse(getString(R.string.oauth2_url_endpoint_auth));\r
- Uri uri = Uri.parse(mOAuthAuthEndpointText.getText().toString().trim());\r
- Uri.Builder uriBuilder = uri.buildUpon();\r
- uriBuilder.appendQueryParameter(OAuth2Constants.KEY_RESPONSE_TYPE, getString(R.string.oauth2_response_type));\r
- uriBuilder.appendQueryParameter(OAuth2Constants.KEY_REDIRECT_URI, getString(R.string.oauth2_redirect_uri)); \r
- uriBuilder.appendQueryParameter(OAuth2Constants.KEY_CLIENT_ID, getString(R.string.oauth2_client_id));\r
- uriBuilder.appendQueryParameter(OAuth2Constants.KEY_SCOPE, getString(R.string.oauth2_scope));\r
- //uriBuilder.appendQueryParameter(OAuth2Constants.KEY_STATE, whateverwewant);\r
- uri = uriBuilder.build();\r
- Log_OC.d(TAG, "Starting browser to view " + uri.toString());\r
- Intent i = new Intent(Intent.ACTION_VIEW, uri);\r
- startActivity(i);\r
- }\r
-\r
-\r
- /**\r
- * Starts the Web Single Sign On flow to get access to the root folder\r
- * in the server.\r
- */\r
- private void startSamlBasedFederatedSingleSignOnAuthorization() {\r
- // be gentle with the user\r
- mAuthStatusIcon = R.drawable.progress_small;\r
- mAuthStatusText = R.string.auth_connecting_auth_server;\r
- showAuthStatus();\r
- showDialog(DIALOG_LOGIN_PROGRESS);\r
- \r
- /// get the path to the root folder through WebDAV from the version server\r
- String webdav_path = AccountUtils.getWebdavPath(mDiscoveredVersion, mAuthTokenType);\r
-\r
- /// test credentials accessing the root folder\r
- mAuthCheckOperation = new ExistenceCheckOperation("", this, false);\r
- WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(mHostBaseUrl + webdav_path), this, false);\r
- mOperationThread = mAuthCheckOperation.execute(client, this, mHandler);\r
- \r
- }\r
-\r
- /**\r
- * Callback method invoked when a RemoteOperation executed by this Activity finishes.\r
- * \r
- * Dispatches the operation flow to the right method.\r
- */\r
- @Override\r
- public void onRemoteOperationFinish(RemoteOperation operation, RemoteOperationResult result) {\r
-\r
- if (operation instanceof OwnCloudServerCheckOperation) {\r
- onOcServerCheckFinish((OwnCloudServerCheckOperation) operation, result);\r
-\r
- } else if (operation instanceof OAuth2GetAccessToken) {\r
- onGetOAuthAccessTokenFinish((OAuth2GetAccessToken)operation, result);\r
-\r
- } else if (operation instanceof ExistenceCheckOperation) {\r
- if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) {\r
- onSamlBasedFederatedSingleSignOnAuthorizationStart(operation, result);\r
- \r
- } else {\r
- onAuthorizationCheckFinish((ExistenceCheckOperation)operation, result);\r
- }\r
- }\r
- }\r
- \r
- \r
- private void onSamlBasedFederatedSingleSignOnAuthorizationStart(RemoteOperation operation, RemoteOperationResult result) {\r
- try {\r
- dismissDialog(DIALOG_LOGIN_PROGRESS);\r
- } catch (IllegalArgumentException e) {\r
- // NOTHING TO DO ; can't find out what situation that leads to the exception in this code, but user logs signal that it happens\r
- }\r
-
- //if (result.isTemporalRedirection() && result.isIdPRedirection()) {\r
- if (result.isIdPRedirection()) {
- String url = result.getRedirectedLocation();\r
- String targetUrl = mHostBaseUrl + AccountUtils.getWebdavPath(mDiscoveredVersion, mAuthTokenType);\r
- \r
- // Show dialog\r
- mSamlDialog = SamlWebViewDialog.newInstance(url, targetUrl); \r
- mSamlDialog.show(getSupportFragmentManager(), TAG_SAML_DIALOG);\r
- \r
- mAuthStatusIcon = 0;\r
- mAuthStatusText = 0;\r
- \r
- } else {\r
- mAuthStatusIcon = R.drawable.common_error;\r
- mAuthStatusText = R.string.auth_unsupported_auth_method;\r
- \r
- }\r
- showAuthStatus();\r
- }\r
-\r
-\r
- /**\r
- * Processes the result of the server check performed when the user finishes the enter of the\r
- * server URL.\r
- * \r
- * @param operation Server check performed.\r
- * @param result Result of the check.\r
- */\r
- private void onOcServerCheckFinish(OwnCloudServerCheckOperation operation, RemoteOperationResult result) {\r
- if (operation.equals(mOcServerChkOperation)) {\r
- /// save result state\r
- mServerIsChecked = true;\r
- mServerIsValid = result.isSuccess();\r
- mIsSslConn = (result.getCode() == ResultCode.OK_SSL);\r
- mOcServerChkOperation = null;\r
-\r
- /// update status icon and text\r
- if (mServerIsValid) {\r
- hideRefreshButton();\r
- } else {\r
- showRefreshButton();\r
- }\r
- updateServerStatusIconAndText(result);\r
- showServerStatus();\r
-\r
- /// very special case (TODO: move to a common place for all the remote operations)\r
- if (result.getCode() == ResultCode.SSL_RECOVERABLE_PEER_UNVERIFIED) {\r
- mLastSslUntrustedServerResult = result;\r
- showDialog(DIALOG_SSL_VALIDATOR); \r
- }\r
-\r
- /// retrieve discovered version and normalize server URL\r
- mDiscoveredVersion = operation.getDiscoveredVersion();\r
- mHostBaseUrl = normalizeUrl(mHostUrlInput.getText().toString());\r
-\r
- /// allow or not the user try to access the server\r
- mOkButton.setEnabled(mServerIsValid);\r
-\r
- } // else nothing ; only the last check operation is considered; \r
- // multiple can be triggered if the user amends a URL before a previous check can be triggered\r
- }\r
-\r
-\r
- private String normalizeUrl(String url) {\r
- if (url != null && url.length() > 0) {\r
- url = url.trim();\r
- if (!url.toLowerCase().startsWith("http://") &&\r
- !url.toLowerCase().startsWith("https://")) {\r
- if (mIsSslConn) {\r
- url = "https://" + url;\r
- } else {\r
- url = "http://" + url;\r
- }\r
- }\r
-\r
- // OC-208: Add suffix remote.php/webdav to normalize (OC-34) \r
- url = trimUrlWebdav(url);\r
-\r
- if (url.endsWith("/")) {\r
- url = url.substring(0, url.length() - 1);\r
- }\r
-\r
- }\r
- return (url != null ? url : "");\r
- }\r
-\r
-\r
- private String trimUrlWebdav(String url){ \r
- if(url.toLowerCase().endsWith(AccountUtils.WEBDAV_PATH_4_0)){\r
- url = url.substring(0, url.length() - AccountUtils.WEBDAV_PATH_4_0.length()); \r
- } else if(url.toLowerCase().endsWith(AccountUtils.WEBDAV_PATH_2_0)){\r
- url = url.substring(0, url.length() - AccountUtils.WEBDAV_PATH_2_0.length()); \r
- } else if (url.toLowerCase().endsWith(AccountUtils.WEBDAV_PATH_1_2)){\r
- url = url.substring(0, url.length() - AccountUtils.WEBDAV_PATH_1_2.length()); \r
- } \r
- return (url != null ? url : "");\r
- }\r
- \r
- \r
- /**\r
- * Chooses the right icon and text to show to the user for the received operation result.\r
- * \r
- * @param result Result of a remote operation performed in this activity\r
- */\r
- private void updateServerStatusIconAndText(RemoteOperationResult result) {\r
- mServerStatusIcon = R.drawable.common_error; // the most common case in the switch below\r
-\r
- switch (result.getCode()) {\r
- case OK_SSL:\r
- mServerStatusIcon = android.R.drawable.ic_secure;\r
- mServerStatusText = R.string.auth_secure_connection;\r
- break;\r
-\r
- case OK_NO_SSL:\r
- case OK:\r
- if (mHostUrlInput.getText().toString().trim().toLowerCase().startsWith("http://") ) {\r
- mServerStatusText = R.string.auth_connection_established;\r
- mServerStatusIcon = R.drawable.ic_ok;\r
- } else {\r
- mServerStatusText = R.string.auth_nossl_plain_ok_title;\r
- mServerStatusIcon = android.R.drawable.ic_partial_secure;\r
- }\r
- break;\r
-\r
- case NO_NETWORK_CONNECTION:\r
- mServerStatusIcon = R.drawable.no_network;\r
- mServerStatusText = R.string.auth_no_net_conn_title;\r
- break;\r
-\r
- case SSL_RECOVERABLE_PEER_UNVERIFIED:\r
- mServerStatusText = R.string.auth_ssl_unverified_server_title;\r
- break;\r
- case BAD_OC_VERSION:\r
- mServerStatusText = R.string.auth_bad_oc_version_title;\r
- break;\r
- case WRONG_CONNECTION:\r
- mServerStatusText = R.string.auth_wrong_connection_title;\r
- break;\r
- case TIMEOUT:\r
- mServerStatusText = R.string.auth_timeout_title;\r
- break;\r
- case INCORRECT_ADDRESS:\r
- mServerStatusText = R.string.auth_incorrect_address_title;\r
- break;\r
- case SSL_ERROR:\r
- mServerStatusText = R.string.auth_ssl_general_error_title;\r
- break;\r
- case UNAUTHORIZED:\r
- mServerStatusText = R.string.auth_unauthorized;\r
- break;\r
- case HOST_NOT_AVAILABLE:\r
- mServerStatusText = R.string.auth_unknown_host_title;\r
- break;\r
- case INSTANCE_NOT_CONFIGURED:\r
- mServerStatusText = R.string.auth_not_configured_title;\r
- break;\r
- case FILE_NOT_FOUND:\r
- mServerStatusText = R.string.auth_incorrect_path_title;\r
- break;\r
- case OAUTH2_ERROR:\r
- mServerStatusText = R.string.auth_oauth_error;\r
- break;\r
- case OAUTH2_ERROR_ACCESS_DENIED:\r
- mServerStatusText = R.string.auth_oauth_error_access_denied;\r
- break;\r
- case UNHANDLED_HTTP_CODE:\r
- case UNKNOWN_ERROR:\r
- mServerStatusText = R.string.auth_unknown_error_title;\r
- break;\r
- default:\r
- mServerStatusText = 0;\r
- mServerStatusIcon = 0;\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Chooses the right icon and text to show to the user for the received operation result.\r
- * \r
- * @param result Result of a remote operation performed in this activity\r
- */\r
- private void updateAuthStatusIconAndText(RemoteOperationResult result) {\r
- mAuthStatusIcon = R.drawable.common_error; // the most common case in the switch below\r
-\r
- switch (result.getCode()) {\r
- case OK_SSL:\r
- mAuthStatusIcon = android.R.drawable.ic_secure;\r
- mAuthStatusText = R.string.auth_secure_connection;\r
- break;\r
-\r
- case OK_NO_SSL:\r
- case OK:\r
- if (mHostUrlInput.getText().toString().trim().toLowerCase().startsWith("http://") ) {\r
- mAuthStatusText = R.string.auth_connection_established;\r
- mAuthStatusIcon = R.drawable.ic_ok;\r
- } else {\r
- mAuthStatusText = R.string.auth_nossl_plain_ok_title;\r
- mAuthStatusIcon = android.R.drawable.ic_partial_secure;\r
- }\r
- break;\r
-\r
- case NO_NETWORK_CONNECTION:\r
- mAuthStatusIcon = R.drawable.no_network;\r
- mAuthStatusText = R.string.auth_no_net_conn_title;\r
- break;\r
-\r
- case SSL_RECOVERABLE_PEER_UNVERIFIED:\r
- mAuthStatusText = R.string.auth_ssl_unverified_server_title;\r
- break;\r
- case BAD_OC_VERSION:\r
- mAuthStatusText = R.string.auth_bad_oc_version_title;\r
- break;\r
- case WRONG_CONNECTION:\r
- mAuthStatusText = R.string.auth_wrong_connection_title;\r
- break;\r
- case TIMEOUT:\r
- mAuthStatusText = R.string.auth_timeout_title;\r
- break;\r
- case INCORRECT_ADDRESS:\r
- mAuthStatusText = R.string.auth_incorrect_address_title;\r
- break;\r
- case SSL_ERROR:\r
- mAuthStatusText = R.string.auth_ssl_general_error_title;\r
- break;\r
- case UNAUTHORIZED:\r
- mAuthStatusText = R.string.auth_unauthorized;\r
- break;\r
- case HOST_NOT_AVAILABLE:\r
- mAuthStatusText = R.string.auth_unknown_host_title;\r
- break;\r
- case INSTANCE_NOT_CONFIGURED:\r
- mAuthStatusText = R.string.auth_not_configured_title;\r
- break;\r
- case FILE_NOT_FOUND:\r
- mAuthStatusText = R.string.auth_incorrect_path_title;\r
- break;\r
- case OAUTH2_ERROR:\r
- mAuthStatusText = R.string.auth_oauth_error;\r
- break;\r
- case OAUTH2_ERROR_ACCESS_DENIED:\r
- mAuthStatusText = R.string.auth_oauth_error_access_denied;\r
- break;\r
- case ACCOUNT_NOT_NEW:\r
- mAuthStatusText = R.string.auth_account_not_new;\r
- break;\r
- case ACCOUNT_NOT_THE_SAME:\r
- mAuthStatusText = R.string.auth_account_not_the_same;\r
- break;\r
- case UNHANDLED_HTTP_CODE:\r
- case UNKNOWN_ERROR:\r
- mAuthStatusText = R.string.auth_unknown_error_title;\r
- break;\r
- default:\r
- mAuthStatusText = 0;\r
- mAuthStatusIcon = 0;\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Processes the result of the request for and access token send \r
- * to an OAuth authorization server.\r
- * \r
- * @param operation Operation performed requesting the access token.\r
- * @param result Result of the operation.\r
- */\r
- private void onGetOAuthAccessTokenFinish(OAuth2GetAccessToken operation, RemoteOperationResult result) {\r
- try {\r
- dismissDialog(DIALOG_OAUTH2_LOGIN_PROGRESS);\r
- } catch (IllegalArgumentException e) {\r
- // NOTHING TO DO ; can't find out what situation that leads to the exception in this code, but user logs signal that it happens\r
- }\r
-\r
- String webdav_path = AccountUtils.getWebdavPath(mDiscoveredVersion, mAuthTokenType);\r
- if (result.isSuccess() && webdav_path != null) {\r
- /// be gentle with the user\r
- showDialog(DIALOG_LOGIN_PROGRESS);\r
-\r
- /// time to test the retrieved access token on the ownCloud server\r
- mAuthToken = ((OAuth2GetAccessToken)operation).getResultTokenMap().get(OAuth2Constants.KEY_ACCESS_TOKEN);\r
- Log_OC.d(TAG, "Got ACCESS TOKEN: " + mAuthToken);\r
- mAuthCheckOperation = new ExistenceCheckOperation("", this, false);\r
- WebdavClient client = OwnCloudClientUtils.createOwnCloudClient(Uri.parse(mHostBaseUrl + webdav_path), this, true);\r
- client.setBearerCredentials(mAuthToken);\r
- mAuthCheckOperation.execute(client, this, mHandler);\r
-\r
- } else {\r
- updateAuthStatusIconAndText(result);\r
- showAuthStatus();\r
- Log_OC.d(TAG, "Access failed: " + result.getLogMessage());\r
- }\r
- }\r
-\r
-\r
- /**\r
- * Processes the result of the access check performed to try the user credentials.\r
- * \r
- * Creates a new account through the AccountManager.\r
- * \r
- * @param operation Access check performed.\r
- * @param result Result of the operation.\r
- */\r
- private void onAuthorizationCheckFinish(ExistenceCheckOperation operation, RemoteOperationResult result) {\r
- try {\r
- dismissDialog(DIALOG_LOGIN_PROGRESS);\r
- } catch (IllegalArgumentException e) {\r
- // NOTHING TO DO ; can't find out what situation that leads to the exception in this code, but user logs signal that it happens\r
- }\r
-\r
- if (result.isSuccess()) {\r
- Log_OC.d(TAG, "Successful access - time to save the account");\r
-\r
- boolean success = false;\r
- if (mAction == ACTION_CREATE) {\r
- success = createAccount();\r
-\r
- } else {\r
- success = updateToken();\r
- }\r
-\r
- if (success) {\r
- finish();\r
- }\r
-\r
- } else if (result.isServerFail() || result.isException()) {\r
- /// if server fail or exception in authorization, the UI is updated as when a server check failed\r
- mServerIsChecked = true;\r
- mServerIsValid = false;\r
- mIsSslConn = false;\r
- mOcServerChkOperation = null;\r
- mDiscoveredVersion = null;\r
- mHostBaseUrl = normalizeUrl(mHostUrlInput.getText().toString());\r
-\r
- // update status icon and text\r
- updateServerStatusIconAndText(result);\r
- showServerStatus();\r
- mAuthStatusIcon = 0;\r
- mAuthStatusText = 0;\r
- showAuthStatus();\r
- \r
- // update input controls state\r
- showRefreshButton();\r
- mOkButton.setEnabled(false);\r
-\r
- // very special case (TODO: move to a common place for all the remote operations) (dangerous here?)\r
- if (result.getCode() == ResultCode.SSL_RECOVERABLE_PEER_UNVERIFIED) {\r
- mLastSslUntrustedServerResult = result;\r
- showDialog(DIALOG_SSL_VALIDATOR); \r
- }\r
-\r
- } else { // authorization fail due to client side - probably wrong credentials\r
- updateAuthStatusIconAndText(result);\r
- showAuthStatus();\r
- Log_OC.d(TAG, "Access failed: " + result.getLogMessage());\r
- }\r
-\r
- }\r
-\r
-\r
- /**\r
- * Sets the proper response to get that the Account Authenticator that started this activity saves \r
- * a new authorization token for mAccount.\r
- */\r
- private boolean updateToken() {\r
- Bundle response = new Bundle();\r
- response.putString(AccountManager.KEY_ACCOUNT_NAME, mAccount.name);\r
- response.putString(AccountManager.KEY_ACCOUNT_TYPE, mAccount.type);\r
- \r
- if (MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType)) { \r
- response.putString(AccountManager.KEY_AUTHTOKEN, mAuthToken);\r
- // the next line is necessary; by now, notifications are calling directly to the AuthenticatorActivity to update, without AccountManager intervention\r
- mAccountMgr.setAuthToken(mAccount, mAuthTokenType, mAuthToken);\r
- \r
- } else if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) {\r
- String username = getUserNameForSamlSso();\r
- if (!mUsernameInput.getText().toString().equals(username)) {\r
- // fail - not a new account, but an existing one; disallow\r
- RemoteOperationResult result = new RemoteOperationResult(ResultCode.ACCOUNT_NOT_THE_SAME); \r
- updateAuthStatusIconAndText(result);\r
- showAuthStatus();\r
- Log_OC.d(TAG, result.getLogMessage());\r
- \r
- return false;\r
- }\r
- \r
- response.putString(AccountManager.KEY_AUTHTOKEN, mAuthToken);\r
- // the next line is necessary; by now, notifications are calling directly to the AuthenticatorActivity to update, without AccountManager intervention\r
- mAccountMgr.setAuthToken(mAccount, mAuthTokenType, mAuthToken);\r
- \r
- } else {\r
- response.putString(AccountManager.KEY_AUTHTOKEN, mPasswordInput.getText().toString());\r
- mAccountMgr.setPassword(mAccount, mPasswordInput.getText().toString());\r
- }\r
- setAccountAuthenticatorResult(response);\r
- \r
- return true;\r
- }\r
-\r
-\r
- /**\r
- * Creates a new account through the Account Authenticator that started this activity. \r
- * \r
- * This makes the account permanent.\r
- * \r
- * TODO Decide how to name the OAuth accounts\r
- */\r
- private boolean createAccount() {\r
- /// create and save new ownCloud account\r
- boolean isOAuth = MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType);\r
- boolean isSaml = MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType);\r
-\r
- Uri uri = Uri.parse(mHostBaseUrl);\r
- String username = mUsernameInput.getText().toString().trim();\r
- if (isSaml) {\r
- username = getUserNameForSamlSso();\r
- \r
- } else if (isOAuth) {\r
- username = "OAuth_user" + (new java.util.Random(System.currentTimeMillis())).nextLong();\r
- } \r
- String accountName = username + "@" + uri.getHost();\r
- if (uri.getPort() >= 0) {\r
- accountName += ":" + uri.getPort();\r
- }\r
- mAccount = new Account(accountName, MainApp.getAccountType());\r
- if (AccountUtils.exists(mAccount, getApplicationContext())) {\r
- // fail - not a new account, but an existing one; disallow\r
- RemoteOperationResult result = new RemoteOperationResult(ResultCode.ACCOUNT_NOT_NEW); \r
- updateAuthStatusIconAndText(result);\r
- showAuthStatus();\r
- Log_OC.d(TAG, result.getLogMessage());\r
- return false;\r
- \r
- } else {\r
- \r
- if (isOAuth || isSaml) {\r
- mAccountMgr.addAccountExplicitly(mAccount, "", null); // with external authorizations, the password is never input in the app\r
- } else {\r
- mAccountMgr.addAccountExplicitly(mAccount, mPasswordInput.getText().toString(), null);\r
- }\r
- \r
- /// add the new account as default in preferences, if there is none already\r
- Account defaultAccount = AccountUtils.getCurrentOwnCloudAccount(this);\r
- if (defaultAccount == null) {\r
- SharedPreferences.Editor editor = PreferenceManager\r
- .getDefaultSharedPreferences(this).edit();\r
- editor.putString("select_oc_account", accountName);\r
- editor.commit();\r
- }\r
- \r
- /// prepare result to return to the Authenticator\r
- // TODO check again what the Authenticator makes with it; probably has the same effect as addAccountExplicitly, but it's not well done\r
- final Intent intent = new Intent(); \r
- intent.putExtra(AccountManager.KEY_ACCOUNT_TYPE, MainApp.getAccountType());\r
- intent.putExtra(AccountManager.KEY_ACCOUNT_NAME, mAccount.name);\r
- /*if (!isOAuth)\r
- intent.putExtra(AccountManager.KEY_AUTHTOKEN, MainApp.getAccountType()); */\r
- intent.putExtra(AccountManager.KEY_USERDATA, username);\r
- if (isOAuth || isSaml) {\r
- mAccountMgr.setAuthToken(mAccount, mAuthTokenType, mAuthToken);\r
- }\r
- /// add user data to the new account; TODO probably can be done in the last parameter addAccountExplicitly, or in KEY_USERDATA\r
- mAccountMgr.setUserData(mAccount, AccountAuthenticator.KEY_OC_VERSION, mDiscoveredVersion.toString());\r
- mAccountMgr.setUserData(mAccount, AccountAuthenticator.KEY_OC_BASE_URL, mHostBaseUrl);\r
- if (isSaml) {\r
- mAccountMgr.setUserData(mAccount, AccountAuthenticator.KEY_SUPPORTS_SAML_WEB_SSO, "TRUE"); \r
- } else if (isOAuth) {\r
- mAccountMgr.setUserData(mAccount, AccountAuthenticator.KEY_SUPPORTS_OAUTH2, "TRUE"); \r
- }\r
- \r
- setAccountAuthenticatorResult(intent.getExtras());\r
- setResult(RESULT_OK, intent);\r
- \r
- /// immediately request for the synchronization of the new account\r
- Bundle bundle = new Bundle();\r
- bundle.putBoolean(ContentResolver.SYNC_EXTRAS_MANUAL, true);\r
- ContentResolver.requestSync(mAccount, MainApp.getAuthTokenType(), bundle);\r
- syncAccount();\r
-// Bundle bundle = new Bundle();\r
-// bundle.putBoolean(ContentResolver.SYNC_EXTRAS_MANUAL, true);\r
-// ContentResolver.requestSync(mAccount, MainApp.getAuthTokenType(), bundle);\r
- return true;\r
- }\r
- }\r
-\r
- \r
- private String getUserNameForSamlSso() {\r
- if (mAuthToken != null) {\r
- String [] cookies = mAuthToken.split(";");\r
- for (int i=0; i<cookies.length; i++) {\r
- if (cookies[i].startsWith(KEY_OC_USERNAME_EQUALS )) {\r
- String value = Uri.decode(cookies[i].substring(KEY_OC_USERNAME_EQUALS.length()));\r
- return value;\r
- }\r
- }\r
- }\r
- return "";\r
- }\r
-\r
-\r
- /**\r
- * {@inheritDoc}\r
- * \r
- * Necessary to update the contents of the SSL Dialog\r
- * \r
- * TODO move to some common place for all possible untrusted SSL failures\r
- */\r
- @Override\r
- protected void onPrepareDialog(int id, Dialog dialog, Bundle args) {\r
- switch (id) {\r
- case DIALOG_LOGIN_PROGRESS:\r
- case DIALOG_CERT_NOT_SAVED:\r
- case DIALOG_OAUTH2_LOGIN_PROGRESS:\r
- break;\r
- case DIALOG_SSL_VALIDATOR: {\r
- ((SslValidatorDialog)dialog).updateResult(mLastSslUntrustedServerResult);\r
- break;\r
- }\r
- default:\r
- Log_OC.e(TAG, "Incorrect dialog called with id = " + id);\r
- }\r
- }\r
-\r
-\r
- /**\r
- * {@inheritDoc}\r
- */\r
- @Override\r
- protected Dialog onCreateDialog(int id) {\r
- Dialog dialog = null;\r
- switch (id) {\r
- case DIALOG_LOGIN_PROGRESS: {\r
- /// simple progress dialog\r
- ProgressDialog working_dialog = new ProgressDialog(this);\r
- working_dialog.setMessage(getResources().getString(R.string.auth_trying_to_login));\r
- working_dialog.setIndeterminate(true);\r
- working_dialog.setCancelable(true);\r
- working_dialog\r
- .setOnCancelListener(new DialogInterface.OnCancelListener() {\r
- @Override\r
- public void onCancel(DialogInterface dialog) {\r
- /// TODO study if this is enough\r
- Log_OC.i(TAG, "Login canceled");\r
- if (mOperationThread != null) {\r
- mOperationThread.interrupt();\r
- finish();\r
- }\r
- }\r
- });\r
- dialog = working_dialog;\r
- break;\r
- }\r
- case DIALOG_OAUTH2_LOGIN_PROGRESS: {\r
- ProgressDialog working_dialog = new ProgressDialog(this);\r
- working_dialog.setMessage(String.format("Getting authorization")); \r
- working_dialog.setIndeterminate(true);\r
- working_dialog.setCancelable(true);\r
- working_dialog\r
- .setOnCancelListener(new DialogInterface.OnCancelListener() {\r
- @Override\r
- public void onCancel(DialogInterface dialog) {\r
- Log_OC.i(TAG, "Login canceled");\r
- finish();\r
- }\r
- });\r
- dialog = working_dialog;\r
- break;\r
- }\r
- case DIALOG_SSL_VALIDATOR: {\r
- /// TODO start to use new dialog interface, at least for this (it is a FragmentDialog already)\r
- dialog = SslValidatorDialog.newInstance(this, mLastSslUntrustedServerResult, this);\r
- break;\r
- }\r
- case DIALOG_CERT_NOT_SAVED: {\r
- AlertDialog.Builder builder = new AlertDialog.Builder(this);\r
- builder.setMessage(getResources().getString(R.string.ssl_validator_not_saved));\r
- builder.setCancelable(false);\r
- builder.setPositiveButton(R.string.common_ok, new DialogInterface.OnClickListener() {\r
- @Override\r
- public void onClick(DialogInterface dialog, int which) {\r
- dialog.dismiss();\r
- };\r
- });\r
- dialog = builder.create();\r
- break;\r
- }\r
- default:\r
- Log_OC.e(TAG, "Incorrect dialog called with id = " + id);\r
- }\r
- return dialog;\r
- }\r
-\r
-\r
- /**\r
- * Starts and activity to open the 'new account' page in the ownCloud web site\r
- * \r
- * @param view 'Account register' button\r
- */\r
- public void onRegisterClick(View view) {\r
- Intent register = new Intent(Intent.ACTION_VIEW, Uri.parse(getString(R.string.url_account_register)));\r
- setResult(RESULT_CANCELED);\r
- startActivity(register);\r
- }\r
-\r
-\r
- /**\r
- * Updates the content and visibility state of the icon and text associated\r
- * to the last check on the ownCloud server.\r
- */\r
- private void showServerStatus() {\r
- TextView tv = (TextView) findViewById(R.id.server_status_text);\r
-\r
- if (mServerStatusIcon == 0 && mServerStatusText == 0) {\r
- tv.setVisibility(View.INVISIBLE);\r
-\r
- } else {\r
- tv.setText(mServerStatusText);\r
- tv.setCompoundDrawablesWithIntrinsicBounds(mServerStatusIcon, 0, 0, 0);\r
- tv.setVisibility(View.VISIBLE);\r
- }\r
-\r
- }\r
-\r
-\r
- /**\r
- * Updates the content and visibility state of the icon and text associated\r
- * to the interactions with the OAuth authorization server.\r
- */\r
- private void showAuthStatus() {\r
- if (mAuthStatusIcon == 0 && mAuthStatusText == 0) {\r
- mAuthStatusLayout.setVisibility(View.INVISIBLE);\r
-\r
- } else {\r
- mAuthStatusLayout.setText(mAuthStatusText);\r
- mAuthStatusLayout.setCompoundDrawablesWithIntrinsicBounds(mAuthStatusIcon, 0, 0, 0);\r
- mAuthStatusLayout.setVisibility(View.VISIBLE);\r
- }\r
- } \r
-\r
-\r
- private void showRefreshButton() {\r
- mRefreshButton.setVisibility(View.VISIBLE);\r
- }\r
-\r
- private void hideRefreshButton() {\r
- mRefreshButton.setVisibility(View.GONE);\r
- }\r
-\r
- /**\r
- * Called when the refresh button in the input field for ownCloud host is clicked.\r
- * \r
- * Performs a new check on the URL in the input field.\r
- * \r
- * @param view Refresh 'button'\r
- */\r
- public void onRefreshClick(View view) {\r
- checkOcServer();\r
- }\r
- \r
- \r
- /**\r
- * Called when the eye icon in the password field is clicked.\r
- * \r
- * Toggles the visibility of the password in the field. \r
- */\r
- public void onViewPasswordClick() {\r
- int selectionStart = mPasswordInput.getSelectionStart();\r
- int selectionEnd = mPasswordInput.getSelectionEnd();\r
- if (isPasswordVisible()) {\r
- hidePassword();\r
- } else {\r
- showPassword();\r
- }\r
- mPasswordInput.setSelection(selectionStart, selectionEnd);\r
- } \r
-\r
-\r
- /**\r
- * Called when the checkbox for OAuth authorization is clicked.\r
- * \r
- * Hides or shows the input fields for user & password. \r
- * \r
- * @param view 'View password' 'button'\r
- */\r
- public void onCheckClick(View view) {\r
- CheckBox oAuth2Check = (CheckBox)view;\r
- if (oAuth2Check.isChecked()) {\r
- mAuthTokenType = MainApp.getAuthTokenTypeAccessToken();\r
- } else {\r
- mAuthTokenType = MainApp.getAuthTokenTypePass();\r
- }\r
- adaptViewAccordingToAuthenticationMethod();\r
- }\r
-\r
- \r
- /**\r
- * Changes the visibility of input elements depending on\r
- * the current authorization method.\r
- */\r
- private void adaptViewAccordingToAuthenticationMethod () {\r
- if (MainApp.getAuthTokenTypeAccessToken().equals(mAuthTokenType)) {\r
- // OAuth 2 authorization\r
- mOAuthAuthEndpointText.setVisibility(View.VISIBLE);\r
- mOAuthTokenEndpointText.setVisibility(View.VISIBLE);\r
- mUsernameInput.setVisibility(View.GONE);\r
- mPasswordInput.setVisibility(View.GONE);\r
- \r
- } else if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) {\r
- // SAML-based web Single Sign On\r
- mOAuthAuthEndpointText.setVisibility(View.GONE);\r
- mOAuthTokenEndpointText.setVisibility(View.GONE);\r
- mUsernameInput.setVisibility(View.GONE);\r
- mPasswordInput.setVisibility(View.GONE);\r
- } else {\r
- // basic HTTP authorization\r
- mOAuthAuthEndpointText.setVisibility(View.GONE);\r
- mOAuthTokenEndpointText.setVisibility(View.GONE);\r
- mUsernameInput.setVisibility(View.VISIBLE);\r
- mPasswordInput.setVisibility(View.VISIBLE);\r
- }\r
- }\r
- \r
- /**\r
- * Called from SslValidatorDialog when a new server certificate was correctly saved.\r
- */\r
- public void onSavedCertificate() {\r
- checkOcServer();\r
- }\r
-\r
- /**\r
- * Called from SslValidatorDialog when a new server certificate could not be saved \r
- * when the user requested it.\r
- */\r
- @Override\r
- public void onFailedSavingCertificate() {\r
- showDialog(DIALOG_CERT_NOT_SAVED);\r
- }\r
-\r
-\r
- /**\r
- * Called when the 'action' button in an IME is pressed ('enter' in software keyboard).\r
- * \r
- * Used to trigger the authentication check when the user presses 'enter' after writing the password, \r
- * or to throw the server test when the only field on screen is the URL input field.\r
- */\r
- @Override\r
- public boolean onEditorAction(TextView inputField, int actionId, KeyEvent event) {\r
- if (actionId == EditorInfo.IME_ACTION_DONE && inputField != null && inputField.equals(mPasswordInput)) {\r
- if (mOkButton.isEnabled()) {\r
- mOkButton.performClick();\r
- }\r
- \r
- } else if (actionId == EditorInfo.IME_ACTION_NEXT && inputField != null && inputField.equals(mHostUrlInput)) {\r
- if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType)) {\r
- checkOcServer();\r
- }\r
- }\r
- return false; // always return false to grant that the software keyboard is hidden anyway\r
- }\r
-\r
-\r
- private abstract static class RightDrawableOnTouchListener implements OnTouchListener {\r
-\r
- private int fuzz = 75;\r
- \r
- /**\r
- * {@inheritDoc}\r
- */\r
- @Override\r
- public boolean onTouch(View view, MotionEvent event) {\r
- Drawable rightDrawable = null;\r
- if (view instanceof TextView) {\r
- Drawable[] drawables = ((TextView)view).getCompoundDrawables();\r
- if (drawables.length > 2) {\r
- rightDrawable = drawables[2];\r
- }\r
- }\r
- if (rightDrawable != null) {\r
- final int x = (int) event.getX();\r
- final int y = (int) event.getY();\r
- final Rect bounds = rightDrawable.getBounds();\r
- if (x >= (view.getRight() - bounds.width() - fuzz) && x <= (view.getRight() - view.getPaddingRight() + fuzz)\r
- && y >= (view.getPaddingTop() - fuzz) && y <= (view.getHeight() - view.getPaddingBottom()) + fuzz) {\r
- \r
- return onDrawableTouch(event);\r
- }\r
- }\r
- return false;\r
- }\r
-\r
- public abstract boolean onDrawableTouch(final MotionEvent event);\r
- }\r
-\r
-\r
- public void onSamlDialogSuccess(String sessionCookie){\r
- mAuthToken = sessionCookie;\r
- \r
- if (sessionCookie != null && sessionCookie.length() > 0) {\r
- mAuthToken = sessionCookie;\r
- boolean success = false;\r
- if (mAction == ACTION_CREATE) {\r
- success = createAccount();\r
- \r
- } else {\r
- success = updateToken();\r
- }\r
- if (success) {\r
- finish();\r
- }\r
- }\r
-\r
- \r
- }\r
-\r
-\r
- @Override\r
- public void onSsoFinished(String sessionCookies) {\r
- //Toast.makeText(this, "got cookies: " + sessionCookie, Toast.LENGTH_LONG).show();\r
-\r
- if (sessionCookies != null && sessionCookies.length() > 0) {\r
- Log_OC.d(TAG, "Successful SSO - time to save the account");\r
- onSamlDialogSuccess(sessionCookies);\r
- Fragment fd = getSupportFragmentManager().findFragmentByTag(TAG_SAML_DIALOG);\r
- if (fd != null && fd instanceof SherlockDialogFragment) {\r
- Dialog d = ((SherlockDialogFragment)fd).getDialog();\r
- if (d != null && d.isShowing()) {\r
- d.dismiss();\r
- }\r
- }\r
-\r
- } else { \r
- // TODO - show fail\r
- Log_OC.d(TAG, "SSO failed");\r
- }\r
- \r
- }\r
- \r
- /** Show auth_message \r
- * \r
- * @param message\r
- */\r
- private void showAuthMessage(String message) {\r
- mAuthMessage.setVisibility(View.VISIBLE);\r
- mAuthMessage.setText(message);\r
- }\r
- \r
- private void hideAuthMessage() {\r
- mAuthMessage.setVisibility(View.GONE);\r
- }\r
-\r
- private void syncAccount(){\r
- /// immediately request for the synchronization of the new account\r
- Bundle bundle = new Bundle();\r
- bundle.putBoolean(ContentResolver.SYNC_EXTRAS_MANUAL, true);\r
- ContentResolver.requestSync(mAccount, MainApp.getAuthTokenType(), bundle);\r
- }\r
- \r
- @Override\r
- public boolean onTouchEvent(MotionEvent event) {\r
- if (MainApp.getAuthTokenTypeSamlSessionCookie().equals(mAuthTokenType) &&\r
- mHostUrlInput.hasFocus() && event.getAction() == MotionEvent.ACTION_DOWN) {\r
- checkOcServer();\r
- }\r
- return super.onTouchEvent(event);\r
- }\r
-}\r