* Copyright (C) 2021-2025 Huawei Device Co., Ltd.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "device_auth.h"
#include "alg_loader.h"
#include "callback_manager.h"
#include "channel_manager.h"
#include "common_defs.h"
#include "ext_plugin_manager.h"
#include "group_data_manager.h"
#include "operation_data_manager.h"
#include "dev_auth_module_manager.h"
#include "dev_session_mgr.h"
#include "group_manager.h"
#include "group_operation_common.h"
#include "hc_dev_info.h"
#include "hc_init_protection.h"
#include "hc_log.h"
#include "hc_time.h"
#include "hisysevent_common.h"
#include "hitrace_adapter.h"
#include "json_utils.h"
#include "key_manager.h"
#include "os_account_adapter.h"
#include "plugin_adapter.h"
#include "pseudonym_manager.h"
#include "task_manager.h"
#include "performance_dumper.h"
#include "identity_manager.h"
#include "group_auth_manager.h"
#include "account_task_manager.h"
#include "device_auth_common.h"
#include "identity_service.h"
#include "cred_session_util.h"
#include "credential_data_manager.h"
#include "identity_service_defines.h"
#include "cache_common_event_handler.h"
#include "mini_session_manager.h"
#include "huks_adapter.h"
#include "alg_defs.h"
static GroupAuthManager *g_groupAuthManager = NULL;
static DeviceGroupManager *g_groupManagerInstance = NULL;
static AccountVerifier *g_accountVerifierInstance = NULL;
static LightAccountVerifier *g_lightAccountVerifierInstance = NULL;
static CredManager *g_credManager = NULL;
static CredAuthManager *g_credAuthManager = NULL;
#define RETURN_IF_INIT_FAILED(res, initFunc, cleanFlag) \
do { \
if (((res) = (initFunc)()) != HC_SUCCESS) { \
LOGE("[End]: [Service]: " #initFunc "Failed"); \
CleanAllModules((cleanFlag)); \
return (res); \
} \
} while (0)
#define CLEAN_NONE 0
#define CLEAN_CRED 1
#define CLEAN_MODULE 2
#define CLEAN_CALLBACK 3
#define CLEAN_GROUP_MANAGER 4
#define CLEAN_IDENTITY_SERVICE 5
#define CLEAN_ALL 6
#define CLEAN_LIGHT_SESSION_MANAGER 7
#define CLEAN_DEVSESSION 8
#define CLEAN_TASK_MANAGER 9
#define CLEAN_OPERATION_DATA_MANAGER 10
#define RETURN_RANDOM_LEN 16
#define RETURN_KEY_LEN 32
static int32_t AddOriginDataForPlugin(CJson *receivedMsg, const uint8_t *data, uint32_t dataLen)
{
if ((receivedMsg == NULL) || (data == NULL)) {
LOGE("Invalid params");
return HC_ERR_INVALID_PARAMS;
}
char *dataStr = NULL;
int32_t res = GenerateStringFromData(data, dataLen, &dataStr);
if (res != HC_SUCCESS) {
LOGE("Failed to generate string from data!");
return res;
}
res = AddStringToJson(receivedMsg, FIELD_PLUGIN_EXT_DATA, dataStr);
HcFree(dataStr);
return res;
}
static int32_t BuildClientAuthContext(int32_t osAccountId, int64_t requestId, const char *appId, CJson *context,
char **returnPeerUdid)
{
char *peerUdid = GetPeerUdidFromJson(osAccountId, context);
if (peerUdid != NULL) {
(void)DeepCopyString(peerUdid, returnPeerUdid);
if (AddStringToJson(context, FIELD_PEER_UDID, peerUdid) != HC_SUCCESS) {
LOGE("add peerUdid to client auth context fail.");
HcFree(peerUdid);
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(context, FIELD_PEER_CONN_DEVICE_ID, peerUdid) != HC_SUCCESS) {
LOGE("add peerConnDeviceId to client auth context fail.");
HcFree(peerUdid);
return HC_ERR_JSON_ADD;
}
PRINT_SENSITIVE_DATA("PeerUdid", peerUdid);
HcFree(peerUdid);
}
if (AddBoolToJson(context, FIELD_IS_BIND, false) != HC_SUCCESS) {
LOGE("add isBind to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddBoolToJson(context, FIELD_IS_CLIENT, true) != HC_SUCCESS) {
LOGE("add isClient to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(context, FIELD_OS_ACCOUNT_ID, osAccountId) != HC_SUCCESS) {
LOGE("add osAccountId to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddInt64StringToJson(context, FIELD_REQUEST_ID, requestId) != HC_SUCCESS) {
LOGE("add request id to client auth context fail.");
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(context, FIELD_APP_ID, appId) != HC_SUCCESS) {
LOGE("add app id to client auth context fail.");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(context, FIELD_OPERATION_CODE, AUTH_FORM_ACCOUNT_UNRELATED) != HC_SUCCESS) {
LOGE("add operation code to client auth context fail.");
return HC_ERR_JSON_ADD;
}
return AddChannelInfoToContext(SERVICE_CHANNEL, DEFAULT_CHANNEL_ID, context);
}
static int32_t BuildP2PBindContext(CJson *context)
{
int32_t acquireType = -1;
if (GetIntFromJson(context, FIELD_ACQURIED_TYPE, &acquireType) != HC_SUCCESS) {
LOGE("Failed to get acquireType from reqJsonStr!");
return HC_ERR_JSON_FAIL;
}
if ((acquireType == P2P_BIND) && AddBoolToJson(context, FIELD_IS_DIRECT_AUTH, true) != HC_SUCCESS) {
LOGE("add isDirectAuth to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(context, FIELD_OPERATION_CODE, acquireType) != HC_SUCCESS) {
LOGE("add opCode to context fail.");
return HC_ERR_JSON_ADD;
}
const char *serviceType = GetStringFromJson(context, FIELD_SERVICE_TYPE);
if (serviceType == NULL) {
if ((acquireType == P2P_BIND) &&
AddStringToJson(context, FIELD_SERVICE_TYPE, DEFAULT_SERVICE_TYPE) != HC_SUCCESS) {
LOGE("add serviceType to context fail.");
return HC_ERR_JSON_ADD;
}
}
return HC_SUCCESS;
}
static int32_t AuthDeviceInner(int32_t osAccountId, int64_t authReqId, const char *authParams,
const DeviceAuthCallback *gaCallback, char **returnPeerUdid)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
ADD_PERFORM_DATA(authReqId, false, true, HcGetCurTimeInMillis());
osAccountId = DevAuthGetRealOsAccountLocalId(osAccountId);
LOGI("Begin AuthDevice. [ReqId]: %" LOG_PUB PRId64 ", [OsAccountId]: %" LOG_PUB "d", authReqId, osAccountId);
if ((authParams == NULL) || (osAccountId == INVALID_OS_ACCOUNT) || (gaCallback == NULL)) {
LOGE("The input auth params is invalid!");
return HC_ERR_INVALID_PARAMS;
}
if (!CheckIsForegroundOsAccountId(osAccountId)) {
LOGE("This access is not from the foreground user, rejected it.");
return HC_ERR_CROSS_USER_ACCESS;
}
if (!IsOsAccountUnlocked(osAccountId)) {
LOGE("Os account is not unlocked!");
return HC_ERR_OS_ACCOUNT_NOT_UNLOCKED;
}
CJson *context = CreateJsonFromString(authParams);
if (context == NULL) {
LOGE("Failed to create json from auth params!");
return HC_ERR_JSON_FAIL;
}
const char *appId = GetStringFromJson(context, FIELD_SERVICE_PKG_NAME);
if (appId == NULL) {
LOGE("get servicePkgName from context fail.");
FreeJson(context);
return HC_ERR_JSON_GET;
}
int32_t res = BuildClientAuthContext(osAccountId, authReqId, appId, context, returnPeerUdid);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
DEV_AUTH_REPORT_UE_CALL_EVENT_BY_PARAMS(osAccountId, authParams, appId, AUTH_DEV_EVENT);
SessionInitParams params = { context, *gaCallback };
res = OpenDevSession(authReqId, appId, ¶ms);
FreeJson(context);
if (res != HC_SUCCESS) {
LOGE("OpenDevSession fail. [Res]: %" LOG_PUB "d", res);
return res;
}
return PushStartSessionTask(authReqId);
}
static int32_t AuthDevice(int32_t osAccountId, int64_t authReqId, const char *authParams,
const DeviceAuthCallback *gaCallback)
{
ReportBehaviorBeginEvent(false, true, authReqId);
char *peerUdid = NULL;
int32_t res = AuthDeviceInner(osAccountId, authReqId, authParams, gaCallback, &peerUdid);
ReportBehaviorBeginResultEvent(false, true, authReqId, peerUdid, res);
if (peerUdid != NULL) {
HcFree(peerUdid);
}
return res;
}
static int32_t AddDeviceIdToJson(CJson *context, const char *peerUdid)
{
char *deviceId = NULL;
if (DeepCopyString(peerUdid, &deviceId) != HC_SUCCESS) {
LOGE("Failed to copy peerUdid!");
return HC_ERR_ALLOC_MEMORY;
}
if (AddStringToJson(context, FIELD_PEER_UDID, deviceId) != HC_SUCCESS) {
LOGE("add peerUdid to context fail.");
HcFree(deviceId);
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(context, FIELD_PEER_CONN_DEVICE_ID, deviceId) != HC_SUCCESS) {
LOGE("add peerConnDeviceId to context fail.");
HcFree(deviceId);
return HC_ERR_JSON_ADD;
}
HcFree(deviceId);
return HC_SUCCESS;
}
static int32_t BuildServerAuthContext(int64_t requestId, int32_t opCode, const char *appId, CJson *context,
char **returnPeerUdid)
{
int32_t res = CheckConfirmationExist(context);
if (res != HC_SUCCESS) {
return res;
}
res = AddOsAccountIdToContextIfValid(context);
if (res != HC_SUCCESS) {
return res;
}
int32_t osAccountId = ANY_OS_ACCOUNT;
(void)GetIntFromJson(context, FIELD_OS_ACCOUNT_ID, &osAccountId);
char *peerUdid = GetPeerUdidFromJson(osAccountId, context);
if (peerUdid == NULL) {
LOGE("Failed to get peer udid from json!");
return HC_ERR_JSON_GET;
}
(void)DeepCopyString(peerUdid, returnPeerUdid);
PRINT_SENSITIVE_DATA("PeerUdid", peerUdid);
if (AddDeviceIdToJson(context, peerUdid) != HC_SUCCESS) {
LOGE("add deviceId to server auth context failed.");
HcFree(peerUdid);
return HC_ERR_JSON_ADD;
}
HcFree(peerUdid);
if (AddBoolToJson(context, FIELD_IS_BIND, false) != HC_SUCCESS) {
LOGE("add isBind to server auth context failed.");
return HC_ERR_JSON_ADD;
}
if (AddBoolToJson(context, FIELD_IS_CLIENT, false) != HC_SUCCESS) {
LOGE("add isClient to server auth context failed.");
return HC_ERR_JSON_ADD;
}
if (AddInt64StringToJson(context, FIELD_REQUEST_ID, requestId) != HC_SUCCESS) {
LOGE("add requestId to server auth context failed.");
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(context, FIELD_APP_ID, appId) != HC_SUCCESS) {
LOGE("add appId to server auth context failed.");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(context, FIELD_OPERATION_CODE, opCode) != HC_SUCCESS) {
LOGE("add opCode to server auth context failed.");
return HC_ERR_JSON_ADD;
}
return AddChannelInfoToContext(SERVICE_CHANNEL, DEFAULT_CHANNEL_ID, context);
}
static int32_t BuildServerP2PAuthContext(int64_t requestId, int32_t opCode, const char *appId, CJson *context)
{
int32_t res = CheckConfirmationExist(context);
if (res != HC_SUCCESS) {
return res;
}
res = AddOsAccountIdToContextIfValid(context);
if (res != HC_SUCCESS) {
return res;
}
const char *peerUdid = GetStringFromJson(context, FIELD_PEER_CONN_DEVICE_ID);
const char *pinCode = GetStringFromJson(context, FIELD_PIN_CODE);
if (peerUdid == NULL && pinCode == NULL) {
LOGE("need peerConnDeviceId or pinCode!");
return HC_ERR_JSON_GET;
}
if (peerUdid != NULL) {
PRINT_SENSITIVE_DATA("PeerUdid", peerUdid);
if (AddDeviceIdToJson(context, peerUdid) != HC_SUCCESS) {
LOGE("add deviceId to context fail.");
return HC_ERR_JSON_ADD;
}
}
if (AddBoolToJson(context, FIELD_IS_SINGLE_CRED, true) != HC_SUCCESS) {
LOGE("add isSingleCred to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddBoolToJson(context, FIELD_IS_BIND, false) != HC_SUCCESS) {
LOGE("add isBind to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddBoolToJson(context, FIELD_IS_CLIENT, false) != HC_SUCCESS) {
LOGE("add isClient to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(context, FIELD_APP_ID, appId) != HC_SUCCESS) {
LOGE("add appId to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddInt64StringToJson(context, FIELD_REQUEST_ID, requestId) != HC_SUCCESS) {
LOGE("add requestId to context fail.");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(context, FIELD_OPERATION_CODE, opCode) != HC_SUCCESS) {
LOGE("add opCode to context fail.");
return HC_ERR_JSON_ADD;
}
return AddChannelInfoToContext(SERVICE_CHANNEL, DEFAULT_CHANNEL_ID, context);
}
static int32_t OpenServerAuthSession(int64_t requestId, const CJson *receivedMsg, const DeviceAuthCallback *callback,
char **returnPeerUdid)
{
int32_t opCode = AUTH_FORM_ACCOUNT_UNRELATED;
if (GetIntFromJson(receivedMsg, FIELD_AUTH_FORM, &opCode) != HC_SUCCESS) {
if (GetIntFromJson(receivedMsg, FIELD_OP_CODE, &opCode) != HC_SUCCESS) {
LOGW("Use default opCode.");
opCode = AUTH_FORM_INVALID_TYPE;
}
}
char *returnDataStr = ProcessRequestCallback(requestId, opCode, NULL, callback);
if (returnDataStr == NULL) {
LOGE("The OnRequest callback failed!");
return HC_ERR_REQ_REJECTED;
}
CJson *context = CreateJsonFromString(returnDataStr);
FreeJsonString(returnDataStr);
if (context == NULL) {
LOGE("Failed to create server auth context json from returnDataStr!");
return HC_ERR_JSON_FAIL;
}
const char *appId = GetStringFromJson(context, FIELD_SERVICE_PKG_NAME);
if (appId == NULL) {
LOGE("get appId from context fail.");
FreeJson(context);
return HC_ERR_JSON_GET;
}
int32_t res = BuildServerAuthContext(requestId, opCode, appId, context, returnPeerUdid);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
SessionInitParams params = { context, *callback };
res = OpenDevSession(requestId, appId, ¶ms);
FreeJson(context);
return res;
}
static int32_t OpenServerAuthSessionForP2P(
int64_t requestId, const CJson *receivedMsg, const DeviceAuthCallback *callback)
{
int32_t opCode = P2P_BIND;
if (GetIntFromJson(receivedMsg, FIELD_OP_CODE, &opCode) != HC_SUCCESS) {
opCode = P2P_BIND;
LOGW("use default opCode.");
}
char *returnDataStr = ProcessRequestCallback(requestId, opCode, NULL, callback);
if (returnDataStr == NULL) {
LOGE("The OnRequest callback is fail!");
return HC_ERR_REQ_REJECTED;
}
CJson *context = CreateJsonFromString(returnDataStr);
FreeJsonString(returnDataStr);
if (context == NULL) {
LOGE("Failed to create server auth context from string!");
return HC_ERR_JSON_FAIL;
}
if (AddBoolToJson(context, FIELD_IS_DIRECT_AUTH, true) != HC_SUCCESS) {
LOGE("Failed to add isDirectAuth to context!");
FreeJson(context);
return HC_ERR_JSON_ADD;
}
const char *pkgName = GetStringFromJson(context, FIELD_SERVICE_PKG_NAME);
if (pkgName == NULL && AddStringToJson(context, FIELD_SERVICE_PKG_NAME, DEFAULT_PACKAGE_NAME) != HC_SUCCESS) {
LOGE("Failed to add default package name to server auth context!");
FreeJson(context);
return HC_ERR_JSON_ADD;
}
const char *serviceType = GetStringFromJson(context, FIELD_SERVICE_TYPE);
if (serviceType == NULL && AddStringToJson(context, FIELD_SERVICE_TYPE, DEFAULT_SERVICE_TYPE) != HC_SUCCESS) {
LOGE("Failed to add default package name to server auth context!");
FreeJson(context);
return HC_ERR_JSON_ADD;
}
const char *appId = pkgName != NULL ? pkgName : DEFAULT_PACKAGE_NAME;
int32_t res = BuildServerP2PAuthContext(requestId, opCode, appId, context);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
SessionInitParams params = { context, *callback };
res = OpenDevSession(requestId, appId, ¶ms);
FreeJson(context);
return res;
}
static int32_t ProcessDataInner(int64_t authReqId, const uint8_t *data, uint32_t dataLen,
const DeviceAuthCallback *gaCallback, char **returnPeerUdid)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
if (!IsSessionExist(authReqId)) {
ADD_PERFORM_DATA(authReqId, false, false, HcGetCurTimeInMillis());
} else {
UPDATE_PERFORM_DATA_BY_SELF_INDEX(authReqId, HcGetCurTimeInMillis());
}
LOGI("[GA] Begin ProcessData. [DataLen]: %" LOG_PUB "u, [ReqId]: %" LOG_PUB PRId64, dataLen, authReqId);
if ((data == NULL) || (dataLen > MAX_DATA_BUFFER_SIZE)) {
LOGE("Invalid input for ProcessData!");
return HC_ERR_INVALID_PARAMS;
}
CJson *receivedMsg = NULL;
int32_t res = CreateJsonFromData(data, dataLen, &receivedMsg);
if (res != HC_SUCCESS) {
LOGE("Failed to create json from data!");
return res;
}
if (!IsSessionExist(authReqId)) {
res = OpenServerAuthSession(authReqId, receivedMsg, gaCallback, returnPeerUdid);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
}
if (HasAccountPlugin()) {
res = AddOriginDataForPlugin(receivedMsg, data, dataLen);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
}
res = PushProcSessionTask(authReqId, receivedMsg);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
return HC_SUCCESS;
}
static int32_t ProcessData(int64_t authReqId, const uint8_t *data, uint32_t dataLen,
const DeviceAuthCallback *gaCallback)
{
bool isSessionExist = IsSessionExist(authReqId);
if (!isSessionExist) {
ReportBehaviorBeginEvent(false, false, authReqId);
}
char *peerUdid = NULL;
int32_t res = ProcessDataInner(authReqId, data, dataLen, gaCallback, &peerUdid);
if (!isSessionExist) {
ReportBehaviorBeginResultEvent(false, false, authReqId, peerUdid, res);
}
if (peerUdid != NULL) {
HcFree(peerUdid);
}
return res;
}
static int32_t OpenServerCredSession(int64_t requestId, const CJson *receivedMsg, const DeviceAuthCallback *callback,
char **returnPeerUdid)
{
int32_t opCode = AUTH_FORM_ACCOUNT_UNRELATED;
if (GetIntFromJson(receivedMsg, FIELD_AUTH_FORM, &opCode) != HC_SUCCESS) {
if (GetIntFromJson(receivedMsg, FIELD_OP_CODE, &opCode) != HC_SUCCESS) {
opCode = AUTH_FORM_INVALID_TYPE;
LOGW("use default opCode.");
}
}
char *returnDataStr = ProcessRequestCallback(requestId, opCode, NULL, callback);
if (returnDataStr == NULL) {
LOGE("The OnRequest callback is fail!");
return HC_ERR_REQ_REJECTED;
}
CJson *context = CreateJsonFromString(returnDataStr);
FreeJsonString(returnDataStr);
if (context == NULL) {
LOGE("Failed to create context from string!");
return HC_ERR_JSON_FAIL;
}
if (AddIntToJson(context, FIELD_OPERATION_CODE, opCode) != HC_SUCCESS) {
LOGE("add opCode to context fail.");
FreeJson(context);
return HC_ERR_JSON_ADD;
}
const char *appId = NULL;
int32_t res = BuildServerCredContext(requestId, context, returnPeerUdid, &appId);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
SessionInitParams params = { context, *callback };
res = OpenDevSession(requestId, appId, ¶ms);
FreeJson(context);
return res;
}
static void ISPrintOperation(int32_t osAccountId)
{
char operationRecord[DEFAULT_RECENT_OPERATION_CNT * DEFAULT_RECORD_OPERATION_SIZE + 1] = { 0 };
char commonEventRecord[DEFAULT_COMMON_EVENT_CNT * DEFAULT_RECORD_OPERATION_SIZE + 1] = { 0 };
(void)GetOperationDataRecently(osAccountId, OPERATION_IDENTITY_SERVICE, operationRecord,
DEFAULT_RECENT_OPERATION_CNT * DEFAULT_RECORD_OPERATION_SIZE, DEFAULT_RECENT_OPERATION_CNT);
(void)GetOperationDataRecently(osAccountId, OPERATION_COMMON_EVENT, commonEventRecord,
DEFAULT_COMMON_EVENT_CNT * DEFAULT_RECORD_OPERATION_SIZE, DEFAULT_COMMON_EVENT_CNT);
LOGI("Recent IS operation : %" LOG_PUB "s\n, Recent event : %" LOG_PUB "s", operationRecord, commonEventRecord);
}
static int32_t AuthCredentialInner(int32_t osAccountId, int64_t authReqId, const char *authParams,
const DeviceAuthCallback *caCallback, char **returnPeerUdid)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
ADD_PERFORM_DATA(authReqId, false, true, HcGetCurTimeInMillis());
LOGI("Begin AuthCredential. [ReqId]: %" LOG_PUB PRId64 ", [OsAccountId]: %" LOG_PUB "d", authReqId, osAccountId);
if (authParams == NULL || osAccountId == INVALID_OS_ACCOUNT || caCallback == NULL ||
returnPeerUdid == NULL) {
LOGE("The input auth cred params is invalid!");
return HC_ERR_INVALID_PARAMS;
}
if (!CheckIsForegroundOsAccountId(osAccountId)) {
LOGE("This access is not from the foreground user, rejected it.");
return HC_ERR_CROSS_USER_ACCESS;
}
if (!IsOsAccountUnlocked(osAccountId)) {
LOGE("Os account is not unlocked! Please unlock it first.");
return HC_ERR_OS_ACCOUNT_NOT_UNLOCKED;
}
CJson *context = CreateJsonFromString(authParams);
if (context == NULL) {
LOGE("Failed to create json from string!");
return HC_ERR_JSON_FAIL;
}
const char *appId = NULL;
int32_t res = BuildClientCredContext(osAccountId, authReqId, context, &appId);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
SessionInitParams params = { context, *caCallback };
res = OpenDevSession(authReqId, appId, ¶ms);
FreeJson(context);
if (res != HC_SUCCESS) {
LOGE("OpenDevSession fail. [Res]: %" LOG_PUB "d", res);
ISPrintOperation(osAccountId);
return res;
}
return PushStartSessionTask(authReqId);
}
int32_t AuthCredential(int32_t osAccountId, int64_t authReqId, const char *authParams,
const DeviceAuthCallback *caCallback)
{
char *peerUdid = NULL;
int32_t res = AuthCredentialInner(osAccountId, authReqId, authParams, caCallback, &peerUdid);
if (peerUdid != NULL) {
HcFree(peerUdid);
}
return res;
}
static int32_t ProcessCredDataInner(int64_t authReqId, const uint8_t *data, uint32_t dataLen,
const DeviceAuthCallback *caCallback, char **returnPeerUdid)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
if (!IsSessionExist(authReqId)) {
ADD_PERFORM_DATA(authReqId, false, false, HcGetCurTimeInMillis());
} else {
UPDATE_PERFORM_DATA_BY_SELF_INDEX(authReqId, HcGetCurTimeInMillis());
}
LOGI("[GA] Begin ProcessCredData. [DataLen]: %" LOG_PUB "u, [ReqId]: %" LOG_PUB PRId64, dataLen, authReqId);
if ((data == NULL) || (dataLen > MAX_DATA_BUFFER_SIZE)) {
LOGE("Invalid input for ProcessCredData!");
return HC_ERR_INVALID_PARAMS;
}
CJson *receivedMsg = NULL;
int32_t res = CreateJsonFromData(data, dataLen, &receivedMsg);
if (res != HC_SUCCESS) {
LOGE("Failed to create json from data!");
return res;
}
if (!IsSessionExist(authReqId)) {
res = OpenServerCredSession(authReqId, receivedMsg, caCallback, returnPeerUdid);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
}
if (HasAccountPlugin()) {
res = AddOriginDataForPlugin(receivedMsg, data, dataLen);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
LOGE("AddOriginDataForPlugin occurred error!");
return res;
}
}
res = PushProcSessionTask(authReqId, receivedMsg);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
return HC_SUCCESS;
}
static int32_t ProcessCredData(int64_t authReqId, const uint8_t *data, uint32_t dataLen,
const DeviceAuthCallback *caCallback)
{
char *peerUdid = NULL;
int32_t res = ProcessCredDataInner(authReqId, data, dataLen, caCallback, &peerUdid);
if (peerUdid != NULL) {
HcFree(peerUdid);
}
return res;
}
static void CancelRequest(int64_t requestId, const char *appId)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(requestId);
DEV_AUTH_REPORT_UE_CALL_EVENT_BY_PARAMS(DEFAULT_OS_ACCOUNT, NULL, appId, CANCEL_REQUEST_EVENT);
if (appId == NULL) {
LOGE("Invalid app id!");
return;
}
LOGI("cancel request. [AppId]: %" LOG_PUB "s, [ReqId]: %" LOG_PUB PRId64, appId, requestId);
CancelDevSession(requestId, appId);
}
static int32_t GetRealInfo(int32_t osAccountId, const char *pseudonymId, char **realInfo)
{
if (pseudonymId == NULL || realInfo == NULL) {
LOGE("Invalid params!");
return HC_ERR_INVALID_PARAMS;
}
PseudonymManager *pseudonymInstance = GetPseudonymInstance();
if (pseudonymInstance == NULL) {
LOGE("not support privacy enhancement!");
return HC_ERR_NOT_SUPPORT;
}
return pseudonymInstance->getRealInfo(osAccountId, pseudonymId, realInfo);
}
static int32_t GetPseudonymId(int32_t osAccountId, const char *indexKey, char **pseudonymId)
{
if (indexKey == NULL || pseudonymId == NULL) {
LOGE("Invalid params!");
return HC_ERR_INVALID_PARAMS;
}
PseudonymManager *pseudonymInstance = GetPseudonymInstance();
if (pseudonymInstance == NULL) {
LOGE("not support privacy enhancement!");
return HC_ERR_NOT_SUPPORT;
}
return pseudonymInstance->getPseudonymId(osAccountId, indexKey, pseudonymId);
}
#ifdef DEV_AUTH_HIVIEW_ENABLE
static void ReportCredentialInfo(const char *reqJsonStr, DevAuthCallEvent *eventData)
{
CJson *reqJson = CreateJsonFromString(reqJsonStr);
if (reqJson == NULL) {
return;
}
CJson *operationInfo = CreateJson();
if (operationInfo == NULL) {
FreeJson(reqJson);
return;
}
int32_t peerOsAccountId = DEFAULT_OS_ACCOUNT;
(void)GetIntFromJson(reqJson, FIELD_OS_ACCOUNT_ID, &(eventData->osAccountId));
(void)GetIntFromJson(reqJson, FIELD_PEER_OS_ACCOUNT_ID, &(peerOsAccountId));
(void)AddIntToJson(operationInfo, FIELD_PEER_OS_ACCOUNT_ID, peerOsAccountId);
const char *deviceId = GetStringFromJson(reqJson, FIELD_DEVICE_ID);
char anonymous[DEFAULT_ANONYMOUS_LEN + 1] = { 0 };
if (GetAnonymousString(deviceId, anonymous, DEFAULT_ANONYMOUS_LEN, false) == HC_SUCCESS) {
(void)AddStringToJson(operationInfo, FIELD_DEVICE_ID, anonymous);
}
char *operationInfoStr = PackJsonToString(operationInfo);
eventData->extInfo = operationInfoStr;
DEV_AUTH_REPORT_CALL_EVENT(*eventData);
FreeJsonString(operationInfoStr);
FreeJson(operationInfo);
FreeJson(reqJson);
eventData->extInfo = NULL;
}
#endif
static void ReportCredentialEvent(int32_t errorCode, int32_t operationCode, const char *reqJsonStr)
{
#ifdef DEV_AUTH_HIVIEW_ENABLE
DevAuthCallEvent eventData;
switch (operationCode) {
case CRED_OP_QUERY:
eventData.processCode = PROCESS_DIRECT_QUERY_CREDENTIAL;
eventData.funcName = DIRECT_QUERY_CREDENTIAL;
break;
case CRED_OP_CREATE:
eventData.processCode = PROCESS_DIRECT_GENERATE_CREDENTIAL;
eventData.funcName = DIRECT_GENERATE_CREDENTIAL;
break;
case CRED_OP_IMPORT:
eventData.processCode = PROCESS_DIRECT_IMPORT_CREDENTIAL;
eventData.funcName = DIRECT_IMPORT_CREDENTIAL;
break;
case CRED_OP_DELETE:
eventData.processCode = PROCESS_DIRECT_DELETE_CREDENTIAL;
eventData.funcName = DIRECT_DELETE_CREDENTIAL;
break;
default:
return;
}
if (errorCode != HC_SUCCESS) {
DEV_AUTH_REPORT_FAULT_EVENT_WITH_ERR_CODE(eventData.funcName, eventData.processCode, errorCode);
}
eventData.appId = DEFAULT_APPID;
eventData.osAccountId = DEFAULT_OS_ACCOUNT;
eventData.callResult = errorCode;
eventData.credType = DEFAULT_CRED_TYPE;
eventData.groupType = DEFAULT_GROUP_TYPE;
eventData.executionTime = DEFAULT_EXECUTION_TIME;
eventData.extInfo = NULL;
ReportCredentialInfo(reqJsonStr, &eventData);
#endif
(void)errorCode;
(void)operationCode;
(void)reqJsonStr;
}
DEVICE_AUTH_API_PUBLIC int32_t ProcessCredential(int32_t operationCode, const char *reqJsonStr, char **returnData)
{
if (reqJsonStr == NULL || returnData == NULL) {
LOGE("Invalid params!");
return HC_ERR_INVALID_PARAMS;
}
const CredentialOperator *credOperator = GetCredentialOperator();
if (credOperator == NULL) {
LOGE("credOperator is null!");
return HC_ERR_NOT_SUPPORT;
}
int32_t res = HC_ERR_UNSUPPORTED_OPCODE;
switch (operationCode) {
case CRED_OP_QUERY:
res = credOperator->queryCredential(reqJsonStr, returnData);
break;
case CRED_OP_CREATE:
res = credOperator->genarateCredential(reqJsonStr, returnData);
break;
case CRED_OP_IMPORT:
res = credOperator->importCredential(reqJsonStr, returnData);
break;
case CRED_OP_DELETE:
res = credOperator->deleteCredential(reqJsonStr, returnData);
break;
default:
LOGE("invalid opCode: %" LOG_PUB "d", operationCode);
break;
}
ReportCredentialEvent(res, operationCode, reqJsonStr);
return res;
}
DEVICE_AUTH_API_PUBLIC int32_t ProcessAuthDevice(
int64_t authReqId, const char *authParams, const DeviceAuthCallback *callback)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
LOGI("[DA] Begin ProcessAuthDevice [ReqId]: %" LOG_PUB PRId64, authReqId);
if (authParams == NULL || HcStrlen(authParams) > MAX_DATA_BUFFER_SIZE) {
LOGE("Invalid input for ProcessData!");
return HC_ERR_INVALID_PARAMS;
}
CJson *json = CreateJsonFromString(authParams);
if (json == NULL) {
LOGE("Failed to create json from string!");
return HC_ERR_JSON_FAIL;
}
const char *data = GetStringFromJson(json, "data");
if (data == NULL) {
LOGE("Failed to get received data from parameter!");
FreeJson(json);
return HC_ERR_INVALID_PARAMS;
}
CJson *receivedMsg = CreateJsonFromString(data);
FreeJson(json);
if (receivedMsg == NULL) {
LOGE("Failed to create json from string!");
return HC_ERR_JSON_FAIL;
}
int32_t res;
if (!IsSessionExist(authReqId)) {
res = OpenServerAuthSessionForP2P(authReqId, receivedMsg, callback);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
}
res = PushProcSessionTask(authReqId, receivedMsg);
if (res != HC_SUCCESS) {
FreeJson(receivedMsg);
return res;
}
return HC_SUCCESS;
}
DEVICE_AUTH_API_PUBLIC int32_t StartAuthDevice(
int64_t authReqId, const char *authParams, const DeviceAuthCallback *callback)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(authReqId);
LOGI("StartAuthDevice. [ReqId]:%" LOG_PUB PRId64, authReqId);
if ((authParams == NULL) || (callback == NULL) || HcStrlen(authParams) > MAX_DATA_BUFFER_SIZE) {
LOGE("The input auth params is invalid!");
return HC_ERR_INVALID_PARAMS;
}
CJson *context = CreateJsonFromString(authParams);
if (context == NULL) {
LOGE("Failed to create json from string!");
return HC_ERR_JSON_FAIL;
}
int32_t osAccountId = INVALID_OS_ACCOUNT;
if (GetIntFromJson(context, FIELD_OS_ACCOUNT_ID, &osAccountId) != HC_SUCCESS) {
LOGE("Failed to get osAccountId from json!");
FreeJson(context);
return HC_ERR_JSON_FAIL;
}
osAccountId = DevAuthGetRealOsAccountLocalId(osAccountId);
if (osAccountId == INVALID_OS_ACCOUNT) {
FreeJson(context);
return HC_ERR_INVALID_PARAMS;
}
if (!CheckIsForegroundOsAccountId(osAccountId)) {
FreeJson(context);
LOGE("This access is not from the foreground user, rejected it.");
return HC_ERR_CROSS_USER_ACCESS;
}
int32_t res = BuildClientAuthContext(osAccountId, authReqId, DEFAULT_PACKAGE_NAME, context, NULL);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
res = BuildP2PBindContext(context);
if (res != HC_SUCCESS) {
FreeJson(context);
return res;
}
SessionInitParams params = { context, *callback };
res = OpenDevSession(authReqId, DEFAULT_PACKAGE_NAME, ¶ms);
FreeJson(context);
if (res != HC_SUCCESS) {
LOGE("OpenDevSession fail. [Res]: %" LOG_PUB "d", res);
return res;
}
return PushStartSessionTask(authReqId);
}
DEVICE_AUTH_API_PUBLIC int32_t CancelAuthRequest(int64_t requestId, const char *authParams)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(requestId);
if (authParams == NULL || HcStrlen(authParams) > MAX_DATA_BUFFER_SIZE) {
LOGE("Invalid authParams!");
return HC_ERR_INVALID_PARAMS;
}
LOGI("cancel request. [ReqId]: %" LOG_PUB PRId64, requestId);
CancelDevSession(requestId, DEFAULT_PACKAGE_NAME);
return HC_SUCCESS;
}
static int32_t AllocGmAndGa(void)
{
if (g_groupManagerInstance == NULL) {
g_groupManagerInstance = (DeviceGroupManager *)HcMalloc(sizeof(DeviceGroupManager), 0);
if (g_groupManagerInstance == NULL) {
LOGE("Failed to allocate groupManager Instance memory!");
return HC_ERR_ALLOC_MEMORY;
}
}
if (g_groupAuthManager == NULL) {
g_groupAuthManager = (GroupAuthManager *)HcMalloc(sizeof(GroupAuthManager), 0);
if (g_groupAuthManager == NULL) {
LOGE("Failed to allocate groupAuth Instance memory!");
HcFree(g_groupManagerInstance);
g_groupManagerInstance = NULL;
return HC_ERR_ALLOC_MEMORY;
}
}
if (g_accountVerifierInstance == NULL) {
g_accountVerifierInstance = (AccountVerifier *)HcMalloc(sizeof(AccountVerifier), 0);
if (g_accountVerifierInstance == NULL) {
LOGE("Failed to allocate accountVerifier Instance memory!");
HcFree(g_groupManagerInstance);
g_groupManagerInstance = NULL;
HcFree(g_groupAuthManager);
g_groupAuthManager = NULL;
return HC_ERR_ALLOC_MEMORY;
}
}
if (g_lightAccountVerifierInstance == NULL) {
g_lightAccountVerifierInstance = (LightAccountVerifier *)HcMalloc(sizeof(LightAccountVerifier), 0);
if (g_lightAccountVerifierInstance == NULL) {
LOGE("Failed to allocate lightAccountVerifier Instance memory!");
HcFree(g_groupManagerInstance);
g_groupManagerInstance = NULL;
HcFree(g_groupAuthManager);
g_groupAuthManager = NULL;
HcFree(g_accountVerifierInstance);
g_accountVerifierInstance = NULL;
return HC_ERR_ALLOC_MEMORY;
}
}
return HC_SUCCESS;
}
static void DestroyGmAndGa(void)
{
if (g_groupAuthManager != NULL) {
HcFree(g_groupAuthManager);
g_groupAuthManager = NULL;
}
if (g_groupManagerInstance != NULL) {
HcFree(g_groupManagerInstance);
g_groupManagerInstance = NULL;
}
if (g_accountVerifierInstance != NULL) {
HcFree(g_accountVerifierInstance);
g_accountVerifierInstance = NULL;
}
if (g_lightAccountVerifierInstance != NULL) {
HcFree(g_lightAccountVerifierInstance);
g_lightAccountVerifierInstance = NULL;
}
}
static int32_t AllocCredentialMgr(void)
{
if (g_credManager == NULL) {
g_credManager = (CredManager *)HcMalloc(sizeof(CredManager), 0);
if (g_credManager == NULL) {
LOGE("Failed to allocate g_credManager Instance memory!");
return HC_ERR_ALLOC_MEMORY;
}
}
return HC_SUCCESS;
}
static void DestroyCredentialMgr(void)
{
if (g_credManager != NULL) {
HcFree(g_credManager);
g_credManager = NULL;
}
}
static int32_t AllocCa(void)
{
if (g_credAuthManager == NULL) {
g_credAuthManager = (CredAuthManager *)HcMalloc(sizeof(CredAuthManager), 0);
if (g_credAuthManager == NULL) {
LOGE("Failed to allocate groupManager Instance memory!");
return HC_ERR_ALLOC_MEMORY;
}
}
return HC_SUCCESS;
}
static void DestroyCa(void)
{
if (g_credAuthManager != NULL) {
HcFree(g_credAuthManager);
g_credAuthManager = NULL;
}
}
static void CleanAllModules(int32_t type)
{
typedef struct {
int32_t cleanType;
void (*cleanFunc)(void);
} CleanOperation;
CleanOperation cleanOps[] = {
{ CLEAN_ALL, DestroyTaskManager },
{ CLEAN_DEVSESSION, DestroyDevSessionManager },
{ CLEAN_IDENTITY_SERVICE, DestroyIdentityService },
{ CLEAN_GROUP_MANAGER, DestroyGroupManager },
{ CLEAN_OPERATION_DATA_MANAGER, DestroyOperationDataManager },
{ CLEAN_CALLBACK, DestroyCallbackManager },
{ CLEAN_MODULE, DestroyModules },
{ CLEAN_CRED, DestroyCredMgr }
};
bool startClean = false;
size_t cleanOpsCount = sizeof(cleanOps) / sizeof(cleanOps[0]);
for (size_t i = 0; i < cleanOpsCount; i++) {
if (type == cleanOps[i].cleanType) {
startClean = true;
}
if (startClean) {
cleanOps[i].cleanFunc();
}
}
}
static int32_t InitAllModules(void)
{
int32_t res = GetLoaderInstance()->initAlg();
if (res != HC_SUCCESS) {
LOGE("[End]: [Service]: Failed to init algorithm module!");
return res;
}
RETURN_IF_INIT_FAILED(res, InitCredMgr, CLEAN_NONE);
RETURN_IF_INIT_FAILED(res, InitModules, CLEAN_CRED);
RETURN_IF_INIT_FAILED(res, InitCallbackManager, CLEAN_MODULE);
RETURN_IF_INIT_FAILED(res, InitOperationDataManager, CLEAN_CALLBACK);
RETURN_IF_INIT_FAILED(res, InitGroupManager, CLEAN_OPERATION_DATA_MANAGER);
RETURN_IF_INIT_FAILED(res, InitIdentityService, CLEAN_GROUP_MANAGER);
RETURN_IF_INIT_FAILED(res, InitDevSessionManager, CLEAN_IDENTITY_SERVICE);
(void)InitGroupAuthManager();
RETURN_IF_INIT_FAILED(res, InitTaskManager, CLEAN_DEVSESSION);
RETURN_IF_INIT_FAILED(res, InitLightSessionManager, CLEAN_ALL);
return res;
}
static void InitPseudonymModule(void)
{
PseudonymManager *manager = GetPseudonymInstance();
if (manager == NULL) {
LOGE("Pseudonym manager is null!");
return;
}
manager->loadPseudonymData();
}
DEVICE_AUTH_API_PUBLIC int InitDeviceAuthService(void)
{
LOGI("[Service]: Start to init device auth service!");
if (CheckInit() == FINISH_INIT) {
LOGI("[End]: [Service]: Device auth service is running!");
return HC_SUCCESS;
}
int32_t res = AllocGmAndGa();
if (res != HC_SUCCESS) {
return res;
}
res = AllocCa();
if (res != HC_SUCCESS) {
DestroyGmAndGa();
return res;
}
res = AllocCredentialMgr();
if (res != HC_SUCCESS) {
DestroyCa();
DestroyGmAndGa();
return res;
}
InitOsAccountAdapter();
res = InitAllModules();
if (res != HC_SUCCESS) {
DestroyCredentialMgr();
DestroyCa();
DestroyGmAndGa();
return res;
}
INIT_PERFORMANCE_DUMPER();
InitPseudonymModule();
InitAccountTaskManager();
SetInitStatus();
HandleCacheCommonEvent();
LOGI("[End]: [Service]: Init device auth service successfully!");
return HC_SUCCESS;
}
DEVICE_AUTH_API_PUBLIC void DestroyDeviceAuthService(void)
{
LOGI("[Service]: Start to destroy device auth service!");
if (CheckDestroy() == FINISH_DESTROY) {
LOGI("[End]: [Service]: The service has not been initialized!");
return;
}
DestroyOperationDataManager();
DestroyLightSessionManager();
DestroyTaskManager();
DestroyDevSessionManager();
DestroyIdentityService();
DestroyGroupManager();
DestroyGmAndGa();
DestroyAccountTaskManager();
DestroyCa();
DestroyCredentialMgr();
DestroyModules();
DestroyCredMgr();
DestroyChannelManager();
DestroyCallbackManager();
DESTROY_PERFORMANCE_DUMPER();
DestroyPseudonymManager();
DestroyOsAccountAdapter();
SetDeInitStatus();
LOGI("[End]: [Service]: Destroy device auth service successfully!");
}
DEVICE_AUTH_API_PUBLIC const DeviceGroupManager *GetGmInstance(void)
{
if (g_groupManagerInstance == NULL) {
LOGE("Service not init.");
return NULL;
}
g_groupManagerInstance->regCallback = RegCallbackImpl;
g_groupManagerInstance->unRegCallback = UnRegCallbackImpl;
g_groupManagerInstance->regDataChangeListener = RegListenerImpl;
g_groupManagerInstance->unRegDataChangeListener = UnRegListenerImpl;
g_groupManagerInstance->createGroup = CreateGroupImpl;
g_groupManagerInstance->deleteGroup = DeleteGroupImpl;
g_groupManagerInstance->addMemberToGroup = AddMemberToGroupImpl;
g_groupManagerInstance->deleteMemberFromGroup = DeleteMemberFromGroupImpl;
g_groupManagerInstance->addMultiMembersToGroup = AddMultiMembersToGroupImpl;
g_groupManagerInstance->delMultiMembersFromGroup = DelMultiMembersFromGroupImpl;
g_groupManagerInstance->processData = ProcessBindDataImpl;
g_groupManagerInstance->getRegisterInfo = GetRegisterInfoImpl;
g_groupManagerInstance->checkAccessToGroup = CheckAccessToGroupImpl;
g_groupManagerInstance->getPkInfoList = GetPkInfoListImpl;
g_groupManagerInstance->getGroupInfoById = GetGroupInfoByIdImpl;
g_groupManagerInstance->getGroupInfo = GetGroupInfoImpl;
g_groupManagerInstance->getJoinedGroups = GetJoinedGroupsImpl;
g_groupManagerInstance->getRelatedGroups = GetRelatedGroupsImpl;
g_groupManagerInstance->getDeviceInfoById = GetDeviceInfoByIdImpl;
g_groupManagerInstance->getTrustedDevices = GetTrustedDevicesImpl;
g_groupManagerInstance->isDeviceInGroup = IsDeviceInGroupImpl;
g_groupManagerInstance->cancelRequest = CancelRequest;
g_groupManagerInstance->destroyInfo = DestroyInfoImpl;
return g_groupManagerInstance;
}
DEVICE_AUTH_API_PUBLIC const GroupAuthManager *GetGaInstance(void)
{
if (g_groupAuthManager == NULL) {
LOGE("Service not init.");
return NULL;
}
g_groupAuthManager->processData = ProcessData;
g_groupAuthManager->authDevice = AuthDevice;
g_groupAuthManager->cancelRequest = CancelRequest;
g_groupAuthManager->getRealInfo = GetRealInfo;
g_groupAuthManager->getPseudonymId = GetPseudonymId;
return g_groupAuthManager;
}
static int32_t GetSharedKeyFromOutJson(const CJson *out, DataBuff *returnSharedKey)
{
int sharedKeyLen = 0;
if (GetIntFromJson(out, FIELD_ACCOUNT_SHARED_KEY_LEN, &sharedKeyLen) != HC_SUCCESS) {
LOGE("Failed to get shared key len!");
return HC_ERR_JSON_GET;
}
uint8_t *sharedKeyVal = (uint8_t *)HcMalloc(sharedKeyLen, 0);
if (sharedKeyVal == NULL) {
LOGE("Failed to alloc shared key!");
return HC_ERR_ALLOC_MEMORY;
}
if (GetByteFromJson(out, FIELD_ACCOUNT_SHARED_KEY_VAL, sharedKeyVal, sharedKeyLen) != HC_SUCCESS) {
LOGE("Failed to get shared key val!");
HcFree(sharedKeyVal);
return HC_ERR_JSON_GET;
}
returnSharedKey->data = sharedKeyVal;
returnSharedKey->length = sharedKeyLen;
return HC_SUCCESS;
}
static int32_t GetRandomFromOutJson(const CJson *out, DataBuff *returnRandom)
{
int randomLen = 0;
if (GetIntFromJson(out, FIELD_ACCOUNT_RANDOM_LEN, &randomLen) != HC_SUCCESS) {
LOGE("Failed to get random len!");
return HC_ERR_JSON_GET;
}
uint8_t *randomVal = (uint8_t *)HcMalloc(randomLen, 0);
if (randomVal == NULL) {
LOGE("Failed to alloc random!");
return HC_ERR_ALLOC_MEMORY;
}
if (GetByteFromJson(out, FIELD_ACCOUNT_RANDOM_VAL, randomVal, randomLen) != HC_SUCCESS) {
LOGE("Failed to get random val!");
HcFree(randomVal);
return HC_ERR_JSON_GET;
}
returnRandom->data = randomVal;
returnRandom->length = randomLen;
return HC_SUCCESS;
}
static void DestroyDataBuff(DataBuff *data)
{
if (data == NULL || data->data == NULL) {
return;
}
HcFree(data->data);
data->data = NULL;
data->length = 0;
}
static int32_t ConstructClientInJson(CJson *in, const char *peerPkWithSig, const char *serviceId)
{
if (AddStringToJson(in, FIELD_ACCOUNT_PEER_PK_WITH_SIG, peerPkWithSig) != HC_SUCCESS) {
LOGE("Failed to add peer pk to json!");
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(in, FIELD_ACCOUNT_SERVICE_ID, serviceId) != HC_SUCCESS) {
LOGE("Failed to add serviceId to json!");
return HC_ERR_JSON_ADD;
}
return HC_SUCCESS;
}
static int32_t GetClientSharedKey(const char *peerPkWithSig, const char *serviceId, DataBuff *returnSharedKey,
DataBuff *returnRandom)
{
if (peerPkWithSig == NULL || serviceId == NULL || returnSharedKey == NULL || returnRandom == NULL) {
LOGE("Invalid params!");
return HC_ERR_INVALID_PARAMS;
}
CJson *in = CreateJson();
if (in == NULL) {
LOGE("Failed to create in json!");
return HC_ERR_JSON_CREATE;
}
int32_t res = ConstructClientInJson(in, peerPkWithSig, serviceId);
if (res != HC_SUCCESS) {
FreeJson(in);
return res;
}
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
FreeJson(in);
return HC_ERR_JSON_CREATE;
}
res = ExecuteAccountAuthCmd(DEFAULT_OS_ACCOUNT, ACCOUNT_GET_CLIENT_SHARED_KEY, in, out);
FreeJson(in);
if (res != HC_SUCCESS) {
LOGE("Failed to get client shared key!");
FreeJson(out);
return res;
}
res = GetSharedKeyFromOutJson(out, returnSharedKey);
if (res != HC_SUCCESS) {
LOGE("Failed to get shared key from out json!");
FreeJson(out);
return res;
}
res = GetRandomFromOutJson(out, returnRandom);
FreeJson(out);
if (res != HC_SUCCESS) {
LOGE("Failed to get random from out json!");
DestroyDataBuff(returnSharedKey);
}
return res;
}
static int32_t ConstructServerInJson(CJson *in, const char *peerPkWithSig, const char *serviceId,
const DataBuff *random)
{
if (AddStringToJson(in, FIELD_ACCOUNT_PEER_PK_WITH_SIG, peerPkWithSig) != HC_SUCCESS) {
LOGE("Failed to add peer pk to json!");
return HC_ERR_JSON_ADD;
}
if (AddStringToJson(in, FIELD_ACCOUNT_SERVICE_ID, serviceId) != HC_SUCCESS) {
LOGE("Failed to add serviceId to json!");
return HC_ERR_JSON_ADD;
}
if (AddByteToJson(in, FIELD_ACCOUNT_RANDOM_VAL, random->data, random->length) != HC_SUCCESS) {
LOGE("Failed to add random val to json!");
return HC_ERR_JSON_ADD;
}
if (AddIntToJson(in, FIELD_ACCOUNT_RANDOM_LEN, random->length) != HC_SUCCESS) {
LOGE("Failed to add random len to json!");
return HC_ERR_JSON_ADD;
}
return HC_SUCCESS;
}
static int32_t GetServerSharedKey(const char *peerPkWithSig, const char *serviceId, const DataBuff *random,
DataBuff *returnSharedKey)
{
if (peerPkWithSig == NULL || serviceId == NULL || random == NULL || random->data == NULL ||
returnSharedKey == NULL) {
LOGE("Invalid params!");
return HC_ERR_INVALID_PARAMS;
}
CJson *in = CreateJson();
if (in == NULL) {
LOGE("Failed to create in json!");
return HC_ERR_JSON_CREATE;
}
int32_t res = ConstructServerInJson(in, peerPkWithSig, serviceId, random);
if (res != HC_SUCCESS) {
FreeJson(in);
return res;
}
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
FreeJson(in);
return HC_ERR_JSON_CREATE;
}
res = ExecuteAccountAuthCmd(DEFAULT_OS_ACCOUNT, ACCOUNT_GET_SERVER_SHARED_KEY, in, out);
FreeJson(in);
if (res != HC_SUCCESS) {
LOGE("Failed to get server shared key!");
FreeJson(out);
return res;
}
res = GetSharedKeyFromOutJson(out, returnSharedKey);
FreeJson(out);
if (res != HC_SUCCESS) {
LOGE("Failed to get shared key from out json!");
}
return res;
}
static int32_t GetRandomValFromOutJson(const CJson *out, DataBuff *returnRandom)
{
uint8_t *randomVal = (uint8_t *)HcMalloc(RETURN_RANDOM_LEN, 0);
if (randomVal == NULL) {
LOGE("Failed to alloc random!");
return HC_ERR_ALLOC_MEMORY;
}
if (GetByteFromJson(out, FIELD_ACCOUNT_RANDOM_VAL, randomVal, RETURN_RANDOM_LEN) != HC_SUCCESS) {
LOGE("Failed to get random val!");
HcFree(randomVal);
return HC_ERR_JSON_GET;
}
returnRandom->data = randomVal;
returnRandom->length = RETURN_RANDOM_LEN;
return HC_SUCCESS;
}
static int32_t GetPeerRandomValFromOutJson(const CJson *out, DataBuff *returnRandom)
{
uint8_t *randomVal = (uint8_t *)HcMalloc(RETURN_RANDOM_LEN, 0);
if (randomVal == NULL) {
LOGE("Failed to alloc random!");
return HC_ERR_ALLOC_MEMORY;
}
if (GetByteFromJson(out, FIELD_PEER_ACCOUNT_RANDOM_VAL, randomVal, RETURN_RANDOM_LEN) != HC_SUCCESS) {
LOGE("Failed to get random val!");
HcFree(randomVal);
return HC_ERR_JSON_GET;
}
returnRandom->data = randomVal;
returnRandom->length = RETURN_RANDOM_LEN;
return HC_SUCCESS;
}
static int32_t LightAuthVerifySign(int32_t osAccountId, CJson *msg, CJson *out)
{
int32_t res = ExecuteAccountAuthCmd(osAccountId, LIGHT_ACCOUNT_AUTH_VERIFY_SIGN, msg, out);
if (res != HC_SUCCESS) {
LOGE("Verify sign failed");
}
return res;
}
static int32_t StartLightAccountAuthInner(int32_t osAccountId, int64_t requestId, const char *serviceId,
const DeviceAuthCallback *laCallBack, CJson *out)
{
DataBuff clientRandom = { 0 };
int32_t res = GetRandomValFromOutJson(out, &clientRandom);
if (res != HC_SUCCESS) {
LOGE("Failed to get random!");
return res;
}
LightSessionInitParams params = {
.requestId = requestId,
.osAccountId = osAccountId,
.serviceId = serviceId,
.randomBuff = clientRandom,
.opCode = AUTH_FORM_LIGHT_AUTH,
.callback = laCallBack
};
res = AddLightSession(¶ms);
if (res != HC_SUCCESS) {
LOGE("Failed to AddLightSession!");
DestroyDataBuff(&clientRandom);
return res;
}
char *returnMsg = PackJsonToString(out);
if (returnMsg == NULL) {
LOGE("pack out to string failed!");
DestroyDataBuff(&clientRandom);
return HC_ERR_JSON_FAIL;
}
ProcessTransmitCallback(requestId, (uint8_t *)returnMsg, HcStrlen(returnMsg) + 1, laCallBack);
DestroyDataBuff(&clientRandom);
FreeJsonString(returnMsg);
return res;
}
static int32_t StartLightAccountAuth(int32_t osAccountId, int64_t requestId, const char *serviceId,
const DeviceAuthCallback *laCallBack)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(requestId);
LOGI("StartLightAccountAuth. [ReqId]:%" LOG_PUB PRId64, requestId);
if ((serviceId == NULL) || (laCallBack == NULL) || HcStrlen(serviceId) > MAX_DATA_BUFFER_SIZE) {
LOGE("The input auth params is invalid!");
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, HC_ERR_INVALID_PARAMS, NULL, laCallBack);
return HC_ERR_INVALID_PARAMS;
}
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, HC_ERR_JSON_CREATE, NULL, laCallBack);
return HC_ERR_JSON_CREATE;
}
int32_t res = ExecuteAccountAuthCmd(osAccountId, LIGHT_ACCOUNT_AUTH_START, NULL, out);
if (res != HC_SUCCESS) {
LOGE("Failed to start auth!");
FreeJson(out);
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, res, NULL, laCallBack);
return res;
}
res = StartLightAccountAuthInner(osAccountId, requestId, serviceId, laCallBack, out);
if (res != HC_SUCCESS) {
LOGE("Failed to start auth inner!");
FreeJson(out);
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, res, NULL, laCallBack);
return res;
}
FreeJson(out);
return res;
}
static int32_t ConstructSaltInner(DataBuff randomClientBuff, DataBuff randomServerBuff,
uint8_t *hkdfSalt, uint32_t hkdfSaltLen)
{
LOGI("ConstructSaltInner start");
if (memcpy_s(hkdfSalt, hkdfSaltLen, randomClientBuff.data, randomClientBuff.length) != EOK) {
LOGE("Copy randClient failed.");
return HC_ERR_MEMORY_COPY;
}
if (memcpy_s(hkdfSalt + RETURN_RANDOM_LEN, hkdfSaltLen - RETURN_RANDOM_LEN,
randomServerBuff.data, randomServerBuff.length) != EOK) {
LOGE("Copy randomServer failed.");
return HC_ERR_MEMORY_COPY;
}
return HC_SUCCESS;
}
static int32_t GetRandomVal(CJson *out, uint8_t *randomVal, bool isClient, DataBuff *randomBuff)
{
if (isClient) {
randomBuff->data = randomVal;
randomBuff->length = RETURN_RANDOM_LEN;
} else {
(void)randomVal;
int32_t res = GetRandomValFromOutJson(out, randomBuff);
if (res != HC_SUCCESS) {
LOGE("Failed to get randomval");
return res;
}
}
return HC_SUCCESS;
}
static int32_t ConstructSalt(CJson *out, uint8_t *randomVal, Uint8Buff *hkdfSaltBuf, bool isClient)
{
DataBuff randomBuff = { 0 };
int32_t res = GetRandomVal(out, randomVal, isClient, &randomBuff);
if (res != HC_SUCCESS) {
LOGE("Failed to get random val");
return res;
}
DataBuff peerRandomBuff = { 0 };
res = GetPeerRandomValFromOutJson(out, &peerRandomBuff);
if (res != HC_SUCCESS) {
LOGE("Failed to get peer random val!");
if (!isClient) {
DestroyDataBuff(&randomBuff);
}
DestroyDataBuff(&peerRandomBuff);
return res;
}
uint32_t hkdfSaltLen = RETURN_RANDOM_LEN + RETURN_RANDOM_LEN;
uint8_t *hkdfSalt = (uint8_t *)HcMalloc(hkdfSaltLen, 0);
if (hkdfSalt == NULL) {
LOGE("Failed to alloc hkdfSalt");
if (!isClient) {
DestroyDataBuff(&randomBuff);
}
DestroyDataBuff(&peerRandomBuff);
return HC_ERR_ALLOC_MEMORY;
}
if (isClient) {
res = ConstructSaltInner(randomBuff, peerRandomBuff, hkdfSalt, hkdfSaltLen);
} else {
res = ConstructSaltInner(peerRandomBuff, randomBuff, hkdfSalt, hkdfSaltLen);
}
if (res != HC_SUCCESS) {
LOGE("ConstructSaltInner failed!");
if (!isClient) {
DestroyDataBuff(&randomBuff);
}
DestroyDataBuff(&peerRandomBuff);
HcFree(hkdfSalt);
return res;
}
hkdfSaltBuf->val = hkdfSalt;
hkdfSaltBuf->length = hkdfSaltLen;
if (!isClient) {
DestroyDataBuff(&randomBuff);
}
DestroyDataBuff(&peerRandomBuff);
return res;
}
static int32_t GetUserIdAndPeerUserId(CJson *out, const char **userIdStr, const char **peerUserIdStr)
{
*userIdStr = GetStringFromJson(out, FIELD_USER_ID);
if (*userIdStr == NULL) {
LOGE("get userIdStr from out fail.");
return HC_ERR_JSON_GET;
}
*peerUserIdStr = GetStringFromJson(out, FIELD_PEER_USER_ID);
if (*peerUserIdStr == NULL) {
LOGE("get peer userIdStr from out fail.");
return HC_ERR_JSON_GET;
}
return HC_SUCCESS;
}
static int32_t CopyUserIdsToKeyInfo(uint8_t *keyInfo, uint32_t keyInfoLen,
const char *clientUserIdStr, const char *serverUserIdStr)
{
if (memcpy_s(keyInfo, keyInfoLen, clientUserIdStr, (uint32_t)HcStrlen(clientUserIdStr)) != EOK) {
LOGE("Copy client userIdStr failed.");
return HC_ERR_MEMORY_COPY;
}
if (memcpy_s(keyInfo + (uint32_t)HcStrlen(clientUserIdStr), keyInfoLen - (uint32_t)HcStrlen(clientUserIdStr),
serverUserIdStr, (uint32_t)HcStrlen(serverUserIdStr)) != EOK) {
LOGE("Copy server userIdStr failed.");
return HC_ERR_MEMORY_COPY;
}
return HC_SUCCESS;
}
static int32_t ConstructKeyInfo(CJson *out, const char *serviceId, Uint8Buff *keyInfoBuf, bool isClient)
{
const char *userIdStr = NULL;
const char *peerUserIdStr = NULL;
int32_t res = GetUserIdAndPeerUserId(out, &userIdStr, &peerUserIdStr);
if (res != HC_SUCCESS) {
LOGE("GetUserIdAndPeerUserId failed!");
return res;
}
uint32_t serviceIdLen = (uint32_t)HcStrlen(serviceId);
uint32_t keyInfoLen = (uint32_t)HcStrlen(userIdStr) + (uint32_t)HcStrlen(peerUserIdStr) + serviceIdLen;
uint8_t *keyInfo = (uint8_t *)HcMalloc(keyInfoLen, 0);
if (keyInfo == NULL) {
LOGE("Failed to alloc keyInfo");
return HC_ERR_ALLOC_MEMORY;
}
if (isClient) {
res = CopyUserIdsToKeyInfo(keyInfo, keyInfoLen, userIdStr, peerUserIdStr);
if (res != HC_SUCCESS) {
LOGE("CopyUserIdsToKeyInfo failed!");
HcFree(keyInfo);
return res;
}
} else {
res = CopyUserIdsToKeyInfo(keyInfo, keyInfoLen, peerUserIdStr, userIdStr);
if (res != HC_SUCCESS) {
LOGE("CopyUserIdsToKeyInfo failed!");
HcFree(keyInfo);
return res;
}
}
if (memcpy_s(keyInfo + (uint32_t)HcStrlen(userIdStr) + (uint32_t)HcStrlen(peerUserIdStr),
keyInfoLen - (uint32_t)HcStrlen(userIdStr) - (uint32_t)HcStrlen(peerUserIdStr),
serviceId, serviceIdLen) != EOK) {
LOGE("Copy serviceId failed.");
HcFree(keyInfo);
return HC_ERR_MEMORY_COPY;
}
keyInfoBuf->val = keyInfo;
keyInfoBuf->length = keyInfoLen;
return HC_SUCCESS;
}
static int32_t ComputeHkdfKeyInner(int32_t osAccountId, CJson *out,
Uint8Buff hkdfSaltBuf, Uint8Buff keyInfoBuf, Uint8Buff *returnKeyBuf)
{
LOGI("ComputeHkdfKeyInner start");
DataBuff sharedKey = {0};
int32_t res = GetSharedKeyFromOutJson(out, &sharedKey);
if (res != HC_SUCCESS) {
LOGE("get sharedkey failed!");
return res;
}
KeyParams keyParam = {
.keyBuff = {sharedKey.data, sharedKey.length, false},
.isDeStorage = false,
.osAccountId = osAccountId
};
uint8_t *returnKey = (uint8_t *)HcMalloc(RETURN_KEY_LEN, 0);
if (returnKey == NULL) {
LOGE("Failed to alloc returnKey");
DestroyDataBuff(&sharedKey);
return HC_ERR_ALLOC_MEMORY;
}
returnKeyBuf->val = returnKey;
returnKeyBuf->length = RETURN_KEY_LEN;
res = GetLoaderInstance()->computeHkdf(&keyParam, &hkdfSaltBuf, &keyInfoBuf, returnKeyBuf);
if (res != HC_SUCCESS) {
LOGE("computeHkdf failed!");
DestroyDataBuff(&sharedKey);
HcFree(returnKey);
return res;
}
DestroyDataBuff(&sharedKey);
return res;
}
static int32_t ComputeHkdfKeyClient(int32_t osAccountId, CJson *out, uint8_t *randomVal,
const char *serviceId, Uint8Buff *returnKeyBuf)
{
Uint8Buff hkdfSaltBuf = {0};
int32_t res = ConstructSalt(out, randomVal, &hkdfSaltBuf, true);
if (res != HC_SUCCESS) {
LOGE("ConstructSalt failed!");
return res;
}
Uint8Buff keyInfoBuf = {0};
res = ConstructKeyInfo(out, serviceId, &keyInfoBuf, true);
if (res != HC_SUCCESS) {
LOGE("ConstructKeyInfo failed!");
HcFree(hkdfSaltBuf.val);
return res;
}
res = ComputeHkdfKeyInner(osAccountId, out, hkdfSaltBuf, keyInfoBuf, returnKeyBuf);
HcFree(hkdfSaltBuf.val);
HcFree(keyInfoBuf.val);
if (res != HC_SUCCESS) {
LOGE("ComputeHkdfKeyInner failed!");
return res;
}
return res;
}
static int32_t ComputeHkdfKeyServer(int32_t osAccountId, CJson *out, uint8_t *randomVal,
const char *serviceId, Uint8Buff *returnKeyBuf)
{
Uint8Buff hkdfSaltBuf = {0};
int32_t res = ConstructSalt(out, randomVal, &hkdfSaltBuf, false);
if (res != HC_SUCCESS) {
LOGE("ConstructSalt failed!");
return res;
}
Uint8Buff keyInfoBuf = {0};
res = ConstructKeyInfo(out, serviceId, &keyInfoBuf, false);
if (res != HC_SUCCESS) {
LOGE("ConstructKeyInfo failed!");
HcFree(hkdfSaltBuf.val);
return res;
}
res = ComputeHkdfKeyInner(osAccountId, out, hkdfSaltBuf, keyInfoBuf, returnKeyBuf);
if (res != HC_SUCCESS) {
LOGE("ComputeHkdfKeyInner failed!");
HcFree(hkdfSaltBuf.val);
HcFree(keyInfoBuf.val);
return res;
}
HcFree(hkdfSaltBuf.val);
HcFree(keyInfoBuf.val);
return res;
}
static int32_t LightAuthOnFinish(int64_t requestId, CJson *out, const DeviceAuthCallback *laCallBack)
{
CJson *outData = CreateJson();
if (outData == NULL) {
LOGE("Create outData failed!");
return HC_ERR_JSON_CREATE;
}
const char *peerUserIdStr = GetStringFromJson(out, FIELD_PEER_USER_ID);
if (peerUserIdStr == NULL) {
LOGE("get peerUserIdStr from out failed!");
FreeJson(outData);
return HC_ERR_JSON_GET;
}
int32_t res = AddStringToJson(outData, FIELD_PEER_USER_ID, peerUserIdStr);
if (res != HC_SUCCESS) {
LOGE("add peer userid failed!");
FreeJson(outData);
return res;
}
char *returnFinishData = PackJsonToString(outData);
if (returnFinishData == NULL) {
LOGE("PackJsonToString failed!");
FreeJson(outData);
return HC_ERR_JSON_FAIL;
}
int32_t opCode = AUTH_FORM_LIGHT_AUTH;
ProcessFinishCallback(requestId, opCode, returnFinishData, laCallBack);
FreeJsonString(returnFinishData);
FreeJson(outData);
return HC_SUCCESS;
}
static void DestroyLightSessionReturnData(LightSessionReturnData *lightSessionReturnData)
{
if (lightSessionReturnData == NULL) {
return;
}
if (lightSessionReturnData->serviceId != NULL) {
HcFree(lightSessionReturnData->serviceId);
}
if (lightSessionReturnData->randomVal != NULL) {
HcFree(lightSessionReturnData->randomVal);
}
HcFree(lightSessionReturnData);
return;
}
static int32_t ProcessLightAccountAuthClient(int64_t requestId, int32_t osAccountId, CJson *msg,
const DeviceAuthCallback *laCallBack, const LightSessionReturnData *lightSessionReturnData)
{
LOGI("ProcessLightAccountAuthClient start!");
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
return HC_ERR_JSON_CREATE;
}
int32_t res = ExecuteAccountAuthCmd(osAccountId, LIGHT_ACCOUNT_AUTH_PROCESS_CLIENT, msg, out);
if (res != HC_SUCCESS) {
LOGE("get key failed!");
FreeJson(out);
return res;
}
Uint8Buff returnKeyBuf = {0};
res = ComputeHkdfKeyClient(osAccountId, out, lightSessionReturnData->randomVal,
lightSessionReturnData->serviceId, &returnKeyBuf);
if (res != HC_SUCCESS) {
LOGE("aComputeHkdfKeyClient failed!");
FreeJson(out);
return res;
}
ProcessSessionKeyCallback(requestId, (const uint8_t *)returnKeyBuf.val, returnKeyBuf.length, laCallBack);
res = LightAuthOnFinish(requestId, out, laCallBack);
if (res != HC_SUCCESS) {
LOGE("LightAuthOnFinish failed!");
FreeJson(out);
HcFree(returnKeyBuf.val);
return res;
}
FreeJson(out);
HcFree(returnKeyBuf.val);
return res;
}
static int32_t LightAuthOnTransmit(int64_t requestId, CJson *out, const DeviceAuthCallback *laCallBack)
{
CJson *outMsg = GetObjFromJson(out, FIELD_LIGHT_ACCOUNT_MSG);
if (outMsg == NULL) {
LOGE("Get outMsg from json failed!");
return HC_ERR_JSON_GET;
}
char *returnMsg = PackJsonToString(outMsg);
if (returnMsg == NULL) {
LOGE("pack returnMsg to string failed");
return HC_ERR_JSON_FAIL;
}
if (!ProcessTransmitCallback(requestId, (uint8_t *)returnMsg, HcStrlen(returnMsg) + 1, laCallBack)) {
LOGE("ProcessTransmitCallback failed");
FreeJsonString(returnMsg);
return HC_ERR_TRANSMIT_FAIL;
}
FreeJsonString(returnMsg);
return HC_SUCCESS;
}
static int32_t ProcessLightAccountAuthServer(int64_t requestId, int32_t osAccountId,
CJson *msg, const DeviceAuthCallback *laCallBack, const char *returnDataStr)
{
LOGI("ProcessLightAccountAuthServer start!");
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
return HC_ERR_JSON_CREATE;
}
int32_t res = ExecuteAccountAuthCmd(osAccountId, LIGHT_ACCOUNT_AUTH_PROCESS_SERVER, msg, out);
if (res != HC_SUCCESS) {
LOGE("get key failed!");
FreeJson(out);
return res;
}
CJson *returnDataJson = CreateJsonFromString(returnDataStr);
if (returnDataJson == NULL) {
LOGE("Failed to create json from returnDataStr");
FreeJson(out);
return HC_ERR_JSON_FAIL;
}
const char *serviceId = GetStringFromJson(returnDataJson, FIELD_APP_ID);
if (serviceId == NULL) {
LOGE("Failed to get serviceId");
FreeJson(out);
FreeJson(returnDataJson);
return HC_ERR_JSON_FAIL;
}
Uint8Buff returnKeyBuf = { 0 };
res = ComputeHkdfKeyServer(osAccountId, out, NULL, serviceId, &returnKeyBuf);
FreeJson(returnDataJson);
if (res != HC_SUCCESS) {
LOGE("ComputeHkdfKeyServer failed!");
FreeJson(out);
return res;
}
ProcessSessionKeyCallback(requestId, (const uint8_t *)returnKeyBuf.val, returnKeyBuf.length, laCallBack);
HcFree(returnKeyBuf.val);
res = LightAuthOnTransmit(requestId, out, laCallBack);
if (res != HC_SUCCESS) {
LOGE("LightAuthOnTransmit failed!");
FreeJson(out);
return res;
}
res = LightAuthOnFinish(requestId, out, laCallBack);
FreeJson(out);
if (res != HC_SUCCESS) {
LOGE("LightAuthOnTransmit failed!");
return res;
}
return res;
}
static int32_t ProcessLightAccountAuthInner(int32_t osAccountId, int64_t requestId,
CJson *msg, CJson *out, const DeviceAuthCallback *laCallBack)
{
LightSessionReturnData *lightSessionReturnData =
(LightSessionReturnData *)HcMalloc(sizeof(LightSessionReturnData), 0);
if (lightSessionReturnData == NULL) {
LOGE("Failed to alloc lightSessionReturnData");
return HC_ERR_ALLOC_MEMORY;
}
int32_t res = QueryLightSession(requestId, osAccountId, &lightSessionReturnData->randomVal,
&lightSessionReturnData->randomLen, &lightSessionReturnData->serviceId);
if (res == HC_SUCCESS) {
res = ProcessLightAccountAuthClient(requestId, osAccountId, msg, laCallBack, lightSessionReturnData);
DestroyLightSessionReturnData(lightSessionReturnData);
if (res != HC_SUCCESS) {
LOGE("ProcessLightAccountAuthClient failed");
DeleteLightSession(requestId, osAccountId);
return res;
}
res = DeleteLightSession(requestId, osAccountId);
if (res != HC_SUCCESS) {
LOGE("DeleteLightSession failed");
return res;
}
} else {
DestroyLightSessionReturnData(lightSessionReturnData);
char *reqParames = PackJsonToString(out);
if (reqParames == NULL) {
LOGE("pack out to string failed");
return HC_ERR_JSON_FAIL;
}
int32_t opCode = AUTH_FORM_LIGHT_AUTH;
char *returnDataStr = ProcessRequestCallback(requestId, opCode, reqParames, laCallBack);
FreeJsonString(reqParames);
if (returnDataStr == NULL) {
LOGE("Onrequest callback is fail");
return HC_ERR_REQ_REJECTED;
}
res = ProcessLightAccountAuthServer(requestId, osAccountId, msg, laCallBack, returnDataStr);
FreeJsonString(returnDataStr);
if (res != HC_SUCCESS) {
LOGE("ProcessLightAccountAuthServer failed");
return res;
}
}
return res;
}
static int32_t ProcessLightAccountAuth(int32_t osAccountId, int64_t requestId,
DataBuff *inMsg, const DeviceAuthCallback *laCallBack)
{
SET_LOG_MODE_AND_ERR_TRACE(TRACE_MODE, true);
SET_TRACE_ID(requestId);
CJson *out = CreateJson();
if (out == NULL) {
LOGE("Failed to create out json!");
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, HC_ERR_JSON_CREATE, NULL, laCallBack);
return HC_ERR_JSON_CREATE;
}
CJson *msg = CreateJsonFromString((const char*)inMsg->data);
if (msg == NULL) {
LOGE("Failed to CreateJsonFromString");
FreeJson(out);
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, HC_ERR_JSON_CREATE, NULL, laCallBack);
return HC_ERR_JSON_CREATE;
}
int32_t res = LightAuthVerifySign(osAccountId, msg, out);
if (res != HC_SUCCESS) {
LOGE("LightAuthVerifySign failed");
FreeJson(out);
FreeJson(msg);
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, res, NULL, laCallBack);
return res;
}
res = ProcessLightAccountAuthInner(osAccountId, requestId, msg, out, laCallBack);
if (res != HC_SUCCESS) {
LOGE("ProcessLightAccountAuthInner failed");
FreeJson(out);
FreeJson(msg);
ProcessErrorCallback(requestId, AUTH_FORM_LIGHT_AUTH, res, NULL, laCallBack);
return res;
}
FreeJson(out);
FreeJson(msg);
return HC_SUCCESS;
}
DEVICE_AUTH_API_PUBLIC const AccountVerifier *GetAccountVerifierInstance(void)
{
if (g_accountVerifierInstance == NULL) {
LOGE("Account verifier instance not init!");
return NULL;
}
g_accountVerifierInstance->getClientSharedKey = GetClientSharedKey;
g_accountVerifierInstance->getServerSharedKey = GetServerSharedKey;
g_accountVerifierInstance->destroyDataBuff = DestroyDataBuff;
return g_accountVerifierInstance;
}
DEVICE_AUTH_API_PUBLIC const LightAccountVerifier *GetLightAccountVerifierInstance(void)
{
if (g_lightAccountVerifierInstance == NULL) {
LOGE("Light account verifier instance not init!");
return NULL;
}
g_lightAccountVerifierInstance->startLightAccountAuth = StartLightAccountAuth;
g_lightAccountVerifierInstance->processLightAccountAuth = ProcessLightAccountAuth;
return g_lightAccountVerifierInstance;
}
DEVICE_AUTH_API_PUBLIC const CredManager *GetCredMgrInstance(void)
{
if (g_credManager == NULL) {
LOGE("Service not init");
return NULL;
}
g_credManager->addCredential = AddCredential;
g_credManager->exportCredential = ExportCredential;
g_credManager->queryCredentialByParams = QueryCredentialByParams;
g_credManager->queryCredInfoByCredId = QueryCredInfoByCredId;
g_credManager->deleteCredential = DeleteCredential;
g_credManager->updateCredInfo = UpdateCredInfo;
g_credManager->agreeCredential = AgreeCredential;
g_credManager->registerChangeListener = RegisterChangeListener;
g_credManager->unregisterChangeListener = UnregisterChangeListener;
g_credManager->deleteCredByParams = DeleteCredByParams;
g_credManager->batchUpdateCredentials = BatchUpdateCredentials;
g_credManager->destroyInfo = DestroyInfo;
return g_credManager;
}
DEVICE_AUTH_API_PUBLIC const CredAuthManager *GetCredAuthInstance(void)
{
if (g_credAuthManager == NULL) {
LOGE("Service not init.");
return NULL;
}
g_credAuthManager->processCredData = ProcessCredData;
g_credAuthManager->authCredential = AuthCredential;
return g_credAuthManager;
}
