* Copyright (c) 2022-2023 Huawei Device Co., Ltd.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "enroll_context.h"
#include "hisysevent_adapter.h"
#include "iam_check.h"
#include "iam_logger.h"
#include "iam_para2str.h"
#include "resource_node_utils.h"
#include "schedule_node.h"
#include "schedule_node_callback.h"
#define LOG_TAG "USER_AUTH_SA"
#define LOG_FILE_ID LOG_FILE_ENROLL_CONTEXT
namespace OHOS {
namespace UserIam {
namespace UserAuth {
EnrollContext::EnrollContext(uint64_t contextId, std::shared_ptr<Enrollment> enroll,
std::shared_ptr<ContextCallback> callback, bool needSubscribeAppState)
: BaseContext("Enroll", contextId, callback, needSubscribeAppState),
enroll_(enroll)
{
}
ContextType EnrollContext::GetContextType() const
{
return CONTEXT_ENROLL;
}
uint32_t EnrollContext::GetTokenId() const
{
IF_FALSE_LOGE_AND_RETURN_VAL(enroll_ != nullptr, 0);
return enroll_->GetAccessTokenId();
}
int32_t EnrollContext::GetUserId() const
{
IF_FALSE_LOGE_AND_RETURN_VAL(enroll_ != nullptr, INVALID_USER_ID);
return enroll_->GetUserId();
}
bool EnrollContext::OnStart()
{
IAM_LOGI("%{public}s start", GetDescription());
IF_FALSE_LOGE_AND_RETURN_VAL(enroll_ != nullptr, false);
std::vector<std::shared_ptr<ScheduleNode>> scheduleList = {};
bool startRet = enroll_->Start(scheduleList, shared_from_this());
if (!startRet) {
IAM_LOGE("%{public}s enroll start fail", GetDescription());
SetLatestError(enroll_->GetLatestError());
return startRet;
}
SetScheduleList(scheduleList);
IF_FALSE_LOGE_AND_RETURN_VAL(scheduleList.size() == 1, false);
IF_FALSE_LOGE_AND_RETURN_VAL(scheduleList[0] != nullptr, false);
bool startScheduleRet = scheduleList[0]->StartSchedule();
IF_FALSE_LOGE_AND_RETURN_VAL(startScheduleRet, false);
IAM_LOGI("%{public}s Schedule:%{public}s Type:%{public}d success", GetDescription(),
GET_MASKED_STRING(scheduleList[0]->GetScheduleId()).c_str(), scheduleList[0]->GetAuthType());
return true;
}
void EnrollContext::OnResult(int32_t resultCode, const std::shared_ptr<Attributes> &scheduleResultAttr)
{
IAM_LOGI("%{public}s receive result code %{public}d", GetDescription(), resultCode);
uint64_t credentialId = 0;
std::shared_ptr<UpdatePinParamInterface> pinInfo;
std::optional<uint64_t> secUserId = std::nullopt;
bool updateRet = UpdateScheduleResult(scheduleResultAttr, credentialId, pinInfo, secUserId);
if (!updateRet) {
HILOG_COMM_ERROR("%{public}s update schedule result fail, result: %{public}d",
GetDescription(), updateRet);
if (resultCode == SUCCESS) {
resultCode = GetLatestError();
}
}
InvokeResultCallback(resultCode, credentialId, pinInfo, secUserId);
IAM_LOGI("%{public}s on result %{public}d finish", GetDescription(), resultCode);
}
bool EnrollContext::OnStop()
{
IAM_LOGI("%{public}s start", GetDescription());
auto scheduleList = GetScheduleList();
if (scheduleList.size() == 1 && scheduleList[0] != nullptr) {
scheduleList[0]->StopSchedule();
}
IF_FALSE_LOGE_AND_RETURN_VAL(enroll_ != nullptr, false);
bool cancelRet = enroll_->Cancel();
if (!cancelRet) {
HILOG_COMM_ERROR("%{public}s enroll stop fail, result: %{public}d", GetDescription(), cancelRet);
SetLatestError(enroll_->GetLatestError());
return cancelRet;
}
return true;
}
bool EnrollContext::UpdateScheduleResult(const std::shared_ptr<Attributes> &scheduleResultAttr,
uint64_t &credentialId, std::shared_ptr<UpdatePinParamInterface> &pinInfo, std::optional<uint64_t> &secUserId)
{
IAM_LOGI("%{public}s start", GetDescription());
IF_FALSE_LOGE_AND_RETURN_VAL(enroll_ != nullptr, false);
IF_FALSE_LOGE_AND_RETURN_VAL(scheduleResultAttr != nullptr, false);
std::vector<uint8_t> scheduleResult;
bool getResultCodeRet = scheduleResultAttr->GetUint8ArrayValue(Attributes::ATTR_RESULT, scheduleResult);
IF_FALSE_LOGE_AND_RETURN_VAL(getResultCodeRet == true, false);
std::shared_ptr<CredentialInfoInterface> infoToDel;
bool updateRet = enroll_->Update(scheduleResult, credentialId, infoToDel, pinInfo, secUserId);
if (!updateRet) {
HILOG_COMM_ERROR("%{public}s enroll update fail, result: %{public}d", GetDescription(), updateRet);
SetLatestError(enroll_->GetLatestError());
return updateRet;
}
if (infoToDel == nullptr) {
IAM_LOGI("no credential to delete");
} else {
if (infoToDel->GetAuthType() != PIN) {
std::vector<std::shared_ptr<CredentialInfoInterface>> credInfos = {infoToDel};
int32_t ret = ResourceNodeUtils::NotifyExecutorToDeleteTemplates(credInfos, "DeleteForUpdate");
if (ret != SUCCESS) {
IAM_LOGE("failed to delete executor info, error code : %{public}d", ret);
}
}
}
return true;
}
void EnrollContext::InvokeResultCallback(int32_t resultCode, const uint64_t credentialId,
const std::shared_ptr<UpdatePinParamInterface> &pinInfo, std::optional<uint64_t> &secUserId) const
{
HILOG_COMM_INFO("%{public}s invoke result callback, res: %{public}d, credentialId: %{public}s",
GetDescription(), resultCode, Common::GetMaskedString(credentialId).c_str());
IF_FALSE_LOGE_AND_RETURN(callback_ != nullptr);
Attributes finalResult;
if (secUserId.has_value()) {
IAM_LOGI("%{public}s get sec user id has value", GetDescription());
bool setSecUserIdRet = finalResult.SetUint64Value(Attributes::ATTR_SEC_USER_ID, secUserId.value());
IF_FALSE_LOGE_AND_RETURN(setSecUserIdRet == true);
}
bool setCredIdRet = finalResult.SetUint64Value(Attributes::ATTR_CREDENTIAL_ID, credentialId);
IF_FALSE_LOGE_AND_RETURN(setCredIdRet == true);
if (pinInfo != nullptr) {
bool setOldCredId = finalResult.SetUint64Value(Attributes::ATTR_OLD_CREDENTIAL_ID,
pinInfo->GetOldCredentialId());
IF_FALSE_LOGE_AND_RETURN(setOldCredId == true);
std::vector<uint8_t> rootSecret = pinInfo->GetRootSecret();
if (rootSecret.size() != 0) {
bool setRootSecret = finalResult.SetUint8ArrayValue(Attributes::ATTR_ROOT_SECRET, rootSecret);
IF_FALSE_LOGE_AND_RETURN(setRootSecret == true);
}
std::vector<uint8_t> oldRootSecret = pinInfo->GetOldRootSecret();
if (oldRootSecret.size() != 0) {
bool setRet = finalResult.SetUint8ArrayValue(Attributes::ATTR_OLD_ROOT_SECRET, oldRootSecret);
IF_FALSE_LOGE_AND_RETURN(setRet == true);
}
std::vector<uint8_t> authToken = pinInfo->GetAuthToken();
if (authToken.size() != 0) {
bool setAuthToken = finalResult.SetUint8ArrayValue(Attributes::ATTR_AUTH_TOKEN, authToken);
IF_FALSE_LOGE_AND_RETURN(setAuthToken == true);
}
}
callback_->OnResult(resultCode, finalResult);
IAM_LOGI("%{public}s invoke result callback success", GetDescription());
}
}
}
}