* Copyright (c) 2023-2025 Huawei Device Co., Ltd.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "app_manager.h"
#include "accesstoken_kit.h"
#include "access_token.h"
#include "if_system_ability_manager.h"
#include "ipc_skeleton.h"
#include "iservice_registry.h"
#include "os_account_manager.h"
#include "parameter.h"
#include "system_ability_definition.h"
#include "tokenid_kit.h"
#include "dm_anonymous.h"
#include "dm_error_type.h"
#include "dm_log.h"
using namespace OHOS::Security::AccessToken;
namespace OHOS {
namespace DistributedHardware {
namespace {
const uint32_t MAX_CONTAINER_SIZE = 1000;
constexpr int32_t DEVICE_UUID_LENGTH = 65;
}
DM_IMPLEMENT_SINGLE_INSTANCE(AppManager);
const std::string AppManager::GetAppId()
{
std::string appId = "";
AccessTokenID tokenId = IPCSkeleton::GetCallingTokenID();
if (AccessTokenKit::GetTokenTypeFlag(tokenId) != TOKEN_HAP) {
LOGD("The caller is not token_hap.");
return appId;
}
sptr<AppExecFwk::IBundleMgr> bundleManager = nullptr;
if (!GetBundleManagerProxy(bundleManager)) {
LOGE("get bundleManager failed.");
return appId;
}
if (bundleManager == nullptr) {
LOGE("bundleManager is nullptr.");
return appId;
}
int32_t userId = -1;
if (AccountSA::OsAccountManager::GetForegroundOsAccountLocalId(userId) != ERR_OK) {
LOGE("GetAppIdByCallingUid QueryActiveOsAccountIds failed.");
return appId;
}
std::string BundleName = "";
bundleManager->GetNameForUid(IPCSkeleton::GetCallingUid(), BundleName);
AppExecFwk::BundleInfo bundleInfo;
int32_t ret = bundleManager->GetBundleInfoV9(
BundleName, static_cast<int32_t>(AppExecFwk::GetBundleInfoFlag::GET_BUNDLE_INFO_WITH_SIGNATURE_INFO),
bundleInfo, userId);
if (ret != 0) {
LOGE(" GetBundleInfoV9 failed %{public}d.", ret);
return appId;
}
appId = bundleInfo.appId;
return appId;
}
DM_EXPORT void AppManager::RegisterCallerAppId(const std::string &pkgName, const int32_t userId)
{
if (pkgName.empty()) {
LOGE("Invalid parameter, pkgName is empty.");
return;
}
std::string appIdKey = pkgName + "#" + std::to_string(userId);
{
std::lock_guard<std::mutex> lock(appIdMapLock_);
if (appIdMap_.find(appIdKey) != appIdMap_.end()) {
LOGI("PkgName %{public}s, userId %{public}d, appId %{public}s.",
pkgName.c_str(), userId, GetAnonyString(appIdMap_[appIdKey]).c_str());
return;
}
}
std::string appId = GetAppId();
if (appId.empty()) {
LOGE("PkgName %{public}s get appid failed.", pkgName.c_str());
return;
}
LOGI("PkgName %{public}s, userId %{public}d, appId %{public}s.",
pkgName.c_str(), userId, GetAnonyString(appId).c_str());
std::lock_guard<std::mutex> lock(appIdMapLock_);
CHECK_SIZE_VOID(appIdMap_);
appIdMap_[appIdKey] = appId;
}
DM_EXPORT void AppManager::UnRegisterCallerAppId(const std::string &pkgName, const int32_t userId)
{
if (pkgName.empty()) {
LOGE("Invalid parameter, pkgName is empty.");
return;
}
LOGI("PkgName %{public}s, userId %{public}d", pkgName.c_str(), userId);
std::string appIdKey = pkgName + "#" + std::to_string(userId);
std::lock_guard<std::mutex> lock(appIdMapLock_);
if (appIdMap_.find(appIdKey) == appIdMap_.end()) {
return;
}
appIdMap_.erase(appIdKey);
}
int32_t AppManager::GetAppIdByPkgName(const std::string &pkgName, std::string &appId, const int32_t userId)
{
if (pkgName.empty()) {
LOGE("Invalid parameter, pkgName is empty.");
return ERR_DM_INPUT_PARA_INVALID;
}
LOGD("PkgName %{public}s, userId %{public}d", pkgName.c_str(), userId);
std::string appIdKey = pkgName + "#" + std::to_string(userId);
std::lock_guard<std::mutex> lock(appIdMapLock_);
if (appIdMap_.find(appIdKey) == appIdMap_.end()) {
LOGE("appIdKey %{public}s get appid failed.", appIdKey.c_str());
return ERR_DM_FAILED;
}
LOGI("PkgName %{public}s, userId %{public}d, appId %{public}s.",
pkgName.c_str(), userId, GetAnonyString(appId).c_str());
CHECK_SIZE_RETURN(appIdMap_, ERR_DM_FAILED);
appId = appIdMap_[appIdKey];
return DM_OK;
}
bool AppManager::GetBundleManagerProxy(sptr<AppExecFwk::IBundleMgr> &bundleManager)
{
sptr<ISystemAbilityManager> systemAbilityManager =
SystemAbilityManagerClient::GetInstance().GetSystemAbilityManager();
if (systemAbilityManager == nullptr) {
LOGE("Failed to get system ability mgr.");
return false;
}
sptr<IRemoteObject> remoteObject =
systemAbilityManager->GetSystemAbility(BUNDLE_MGR_SERVICE_SYS_ABILITY_ID);
if (remoteObject == nullptr) {
LOGE("Failed to get bundle manager service.");
return false;
}
bundleManager = iface_cast<AppExecFwk::IBundleMgr>(remoteObject);
if (bundleManager == nullptr) {
LOGE("bundleManager is nullptr");
return false;
}
return true;
}
bool AppManager::IsSystemSA()
{
AccessTokenID tokenCaller = IPCSkeleton::GetCallingTokenID();
if (tokenCaller == 0) {
LOGE("GetCallingTokenID error.");
return false;
}
ATokenTypeEnum tokenTypeFlag = AccessTokenKit::GetTokenTypeFlag(tokenCaller);
if (tokenTypeFlag == ATokenTypeEnum::TOKEN_NATIVE) {
return true;
}
return false;
}
DM_EXPORT bool AppManager::IsSystemApp()
{
uint64_t fullTokenId = IPCSkeleton::GetCallingFullTokenID();
return OHOS::Security::AccessToken::TokenIdKit::IsSystemAppByFullTokenID(fullTokenId);
}
DM_EXPORT int32_t AppManager::GetCallerName(bool isSystemSA, std::string &callerName)
{
AccessTokenID tokenCaller = IPCSkeleton::GetCallingTokenID();
if (tokenCaller == 0) {
LOGE("GetCallingTokenID error.");
return ERR_DM_FAILED;
}
LOGI("tokenCaller ID == %{public}s", GetAnonyInt32(tokenCaller).c_str());
ATokenTypeEnum tokenTypeFlag = AccessTokenKit::GetTokenTypeFlag(tokenCaller);
if (tokenTypeFlag == ATokenTypeEnum::TOKEN_HAP) {
isSystemSA = false;
HapTokenInfo tokenInfo;
if (AccessTokenKit::GetHapTokenInfo(tokenCaller, tokenInfo) != EOK) {
LOGE("GetHapTokenInfo failed.");
return ERR_DM_FAILED;
}
callerName = std::move(tokenInfo.bundleName);
} else if (tokenTypeFlag == ATokenTypeEnum::TOKEN_NATIVE) {
isSystemSA = true;
NativeTokenInfo tokenInfo;
if (AccessTokenKit::GetNativeTokenInfo(tokenCaller, tokenInfo) != EOK) {
LOGE("GetNativeTokenInfo failed.");
return ERR_DM_FAILED;
}
callerName = std::move(tokenInfo.processName);
} else {
LOGE("unsupported process.");
return ERR_DM_FAILED;
}
return DM_OK;
}
DM_EXPORT int32_t AppManager::GetBundleNameByTokenId(int64_t tokenId, std::string &bundleName)
{
if (tokenId < 0) {
LOGE("error.");
return ERR_DM_FAILED;
}
AccessTokenID tokenIdTemp = static_cast<AccessTokenID>(tokenId);
ATokenTypeEnum tokenTypeFlag = AccessTokenKit::GetTokenTypeFlag(tokenIdTemp);
if (tokenTypeFlag == ATokenTypeEnum::TOKEN_HAP) {
HapTokenInfo tokenInfo;
if (AccessTokenKit::GetHapTokenInfo(tokenIdTemp, tokenInfo) != EOK) {
LOGE("GetHapTokenInfo failed.");
return ERR_DM_FAILED;
}
bundleName = std::move(tokenInfo.bundleName);
} else if (tokenTypeFlag == ATokenTypeEnum::TOKEN_NATIVE) {
NativeTokenInfo tokenInfo;
if (AccessTokenKit::GetNativeTokenInfo(tokenIdTemp, tokenInfo) != EOK) {
LOGE("GetNativeTokenInfo failed.");
return ERR_DM_FAILED;
}
bundleName = std::move(tokenInfo.processName);
} else {
LOGE("unsupported process.");
return ERR_DM_FAILED;
}
return DM_OK;
}
DM_EXPORT int32_t AppManager::GetNativeTokenIdByName(std::string &processName,
int64_t &tokenId)
{
AccessTokenID nativeTokenId = AccessTokenKit::GetNativeTokenId(processName);
if (nativeTokenId == INVALID_TOKENID) {
LOGE("GetNativeTokenId failed.");
return ERR_DM_FAILED;
}
if (AccessTokenKit::GetTokenTypeFlag(nativeTokenId) != ATokenTypeEnum::TOKEN_NATIVE) {
LOGE("nativeTokenId is not SA.");
return ERR_DM_FAILED;
}
tokenId = static_cast<int64_t>(nativeTokenId);
return DM_OK;
}
DM_EXPORT int32_t AppManager::GetHapTokenIdByName(int32_t userId,
std::string &bundleName, int32_t instIndex, int64_t &tokenId)
{
auto hapTokenId = AccessTokenKit::GetHapTokenID(userId, bundleName, instIndex);
if (hapTokenId == 0) {
LOGE("GetHapTokenId failed.");
return ERR_DM_FAILED;
}
tokenId = static_cast<int64_t>(hapTokenId);
return DM_OK;
}
DM_EXPORT int32_t AppManager::GetHapTokenIdByCloneBundleInfo(int32_t userId,
std::string &bundleName, int32_t appIndex, int64_t &tokenId)
{
if (appIndex <= 1) {
return GetHapTokenIdByName(userId, bundleName, 0, tokenId);
}
sptr<AppExecFwk::IBundleMgr> bundleManager = nullptr;
if (!GetBundleManagerProxy(bundleManager)) {
LOGE("get bundleManager failed.");
return ERR_DM_GET_BMS_FAILED;
}
if (bundleManager == nullptr) {
LOGE("bundleManager is nullptr.");
return ERR_DM_GET_BMS_FAILED;
}
AppExecFwk::BundleInfo bundleInfo;
int32_t flags = static_cast<int32_t>(AppExecFwk::GetBundleInfoFlag::GET_BUNDLE_INFO_DEFAULT) |
static_cast<int32_t>(AppExecFwk::GetBundleInfoFlag::GET_BUNDLE_INFO_WITH_APPLICATION);
int32_t ret = bundleManager->GetCloneBundleInfo(bundleName, flags, appIndex, bundleInfo, userId);
if (ret != ERR_OK) {
LOGE("GetCloneBundleInfo failed, ret %{public}d, bundleName %{public}s, appIndex %{public}d, userId %{public}d",
ret, GetAnonyString(bundleName).c_str(), appIndex, userId);
return ERR_DM_FAILED;
}
tokenId = static_cast<int64_t>(bundleInfo.applicationInfo.accessTokenId);
LOGI("GetHapTokenIdByCloneBundleInfo success, bundleName %{public}s, appIndex %{public}d, tokenId %{public}s",
GetAnonyString(bundleName).c_str(), appIndex, GetAnonyInt64(tokenId).c_str());
return DM_OK;
}
DM_EXPORT int32_t AppManager::GetCallerProcessName(std::string &processName)
{
AccessTokenID tokenCaller = IPCSkeleton::GetCallingTokenID();
if (tokenCaller == 0) {
LOGE("GetCallingTokenID error.");
return ERR_DM_FAILED;
}
ATokenTypeEnum tokenTypeFlag = AccessTokenKit::GetTokenTypeFlag(tokenCaller);
if (tokenTypeFlag == ATokenTypeEnum::TOKEN_HAP) {
HapTokenInfo tokenInfo;
if (AccessTokenKit::GetHapTokenInfo(tokenCaller, tokenInfo) != EOK) {
LOGE("GetHapTokenInfo failed.");
return ERR_DM_FAILED;
}
processName = std::move(tokenInfo.bundleName);
uint64_t fullTokenId = IPCSkeleton::GetCallingFullTokenID();
if (!OHOS::Security::AccessToken::TokenIdKit::IsSystemAppByFullTokenID(fullTokenId)) {
LOGE("%{public}s not system hap.", processName.c_str());
return ERR_DM_FAILED;
}
} else if (tokenTypeFlag == ATokenTypeEnum::TOKEN_NATIVE) {
NativeTokenInfo tokenInfo;
if (AccessTokenKit::GetNativeTokenInfo(tokenCaller, tokenInfo) != EOK) {
LOGE("GetNativeTokenInfo failed.");
return ERR_DM_FAILED;
}
processName = std::move(tokenInfo.processName);
} else {
LOGE("unsupported process.");
return ERR_DM_FAILED;
}
LOGI("Get process name: %{public}s success.", processName.c_str());
return DM_OK;
}
int32_t AppManager::GetTokenIdByBundleName(int32_t userId, std::string &bundleName, int64_t &tokenId)
{
int32_t ret = GetNativeTokenIdByName(bundleName, tokenId);
if (ret == DM_OK) {
return DM_OK;
}
ret = GetHapTokenIdByName(userId, bundleName, 0, tokenId);
if (ret != DM_OK) {
LOGE("get tokenId by bundleName failed %{public}s", GetAnonyString(bundleName).c_str());
}
return ret;
}
int32_t AppManager::GetBundleNameForSelf(std::string &bundleName)
{
sptr<AppExecFwk::IBundleMgr> bundleManager = nullptr;
if (!GetBundleManagerProxy(bundleManager)) {
LOGE("get bundleManager failed.");
return ERR_DM_GET_BMS_FAILED;
}
if (bundleManager == nullptr) {
LOGE("bundleManager is nullptr.");
return ERR_DM_GET_BMS_FAILED;
}
AppExecFwk::BundleInfo bundleInfo;
int32_t flags = static_cast<int32_t>(AppExecFwk::GetBundleInfoFlag::GET_BUNDLE_INFO_WITH_APPLICATION);
int32_t ret = static_cast<int32_t>(bundleManager->GetBundleInfoForSelf(flags, bundleInfo));
if (ret != ERR_OK) {
LOGE("ret=%{public}d.", ret);
return ERR_DM_GET_BUNDLE_NAME_FAILED;
}
bundleName = bundleInfo.name;
return DM_OK;
}
}
}
