nmode's Git Repositories - signal-cli/blob - lib/src/main/java/org/asamk/signal/manager/internal/RegistrationManagerImpl.java

   1 /*
   2   Copyright (C) 2015-2022 AsamK and contributors
   3
   4   This program is free software: you can redistribute it and/or modify
   5   it under the terms of the GNU General Public License as published by
   6   the Free Software Foundation, either version 3 of the License, or
   7   (at your option) any later version.
   8
   9   This program is distributed in the hope that it will be useful,
  10   but WITHOUT ANY WARRANTY; without even the implied warranty of
  11   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12   GNU General Public License for more details.
  13
  14   You should have received a copy of the GNU General Public License
  15   along with this program.  If not, see <http://www.gnu.org/licenses/>.
  16  */
  17 package org.asamk.signal.manager.internal;
  18
  19 import org.asamk.signal.manager.Manager;
  20 import org.asamk.signal.manager.RegistrationManager;
  21 import org.asamk.signal.manager.api.CaptchaRequiredException;
  22 import org.asamk.signal.manager.api.IncorrectPinException;
  23 import org.asamk.signal.manager.api.NonNormalizedPhoneNumberException;
  24 import org.asamk.signal.manager.api.PinLockedException;
  25 import org.asamk.signal.manager.api.RateLimitException;
  26 import org.asamk.signal.manager.api.UpdateProfile;
  27 import org.asamk.signal.manager.config.ServiceConfig;
  28 import org.asamk.signal.manager.config.ServiceEnvironmentConfig;
  29 import org.asamk.signal.manager.helper.AccountFileUpdater;
  30 import org.asamk.signal.manager.helper.PinHelper;
  31 import org.asamk.signal.manager.storage.SignalAccount;
  32 import org.asamk.signal.manager.util.KeyUtils;
  33 import org.asamk.signal.manager.util.NumberVerificationUtils;
  34 import org.asamk.signal.manager.util.Utils;
  35 import org.signal.libsignal.usernames.BaseUsernameException;
  36 import org.slf4j.Logger;
  37 import org.slf4j.LoggerFactory;
  38 import org.whispersystems.signalservice.api.SignalServiceAccountManager;
  39 import org.whispersystems.signalservice.api.account.PreKeyCollection;
  40 import org.whispersystems.signalservice.api.groupsv2.ClientZkOperations;
  41 import org.whispersystems.signalservice.api.groupsv2.GroupsV2Operations;
  42 import org.whispersystems.signalservice.api.push.ServiceId.ACI;
  43 import org.whispersystems.signalservice.api.push.ServiceId.PNI;
  44 import org.whispersystems.signalservice.api.push.ServiceIdType;
  45 import org.whispersystems.signalservice.api.push.SignalServiceAddress;
  46 import org.whispersystems.signalservice.api.push.exceptions.AlreadyVerifiedException;
  47 import org.whispersystems.signalservice.api.push.exceptions.DeprecatedVersionException;
  48 import org.whispersystems.signalservice.internal.push.VerifyAccountResponse;
  49 import org.whispersystems.signalservice.internal.util.DynamicCredentialsProvider;
  50
  51 import java.io.IOException;
  52 import java.util.function.Consumer;
  53
  54 public class RegistrationManagerImpl implements RegistrationManager {
  55
  56     private static final Logger logger = LoggerFactory.getLogger(RegistrationManagerImpl.class);
  57
  58     private SignalAccount account;
  59     private final PathConfig pathConfig;
  60     private final ServiceEnvironmentConfig serviceEnvironmentConfig;
  61     private final String userAgent;
  62     private final Consumer<Manager> newManagerListener;
  63
  64     private final SignalServiceAccountManager accountManager;
  65     private final PinHelper pinHelper;
  66     private final AccountFileUpdater accountFileUpdater;
  67
  68     public RegistrationManagerImpl(
  69             SignalAccount account,
  70             PathConfig pathConfig,
  71             ServiceEnvironmentConfig serviceEnvironmentConfig,
  72             String userAgent,
  73             Consumer<Manager> newManagerListener,
  74             AccountFileUpdater accountFileUpdater
  75     ) {
  76         this.account = account;
  77         this.pathConfig = pathConfig;
  78         this.accountFileUpdater = accountFileUpdater;
  79         this.serviceEnvironmentConfig = serviceEnvironmentConfig;
  80         this.userAgent = userAgent;
  81         this.newManagerListener = newManagerListener;
  82
  83         GroupsV2Operations groupsV2Operations;
  84         try {
  85             groupsV2Operations = new GroupsV2Operations(ClientZkOperations.create(serviceEnvironmentConfig.signalServiceConfiguration()),
  86                     ServiceConfig.GROUP_MAX_SIZE);
  87         } catch (Throwable ignored) {
  88             groupsV2Operations = null;
  89         }
  90         this.accountManager = new SignalServiceAccountManager(serviceEnvironmentConfig.signalServiceConfiguration(),
  91                 new DynamicCredentialsProvider(
  92                         // Using empty UUID, because registering doesn't work otherwise
  93                         null, null, account.getNumber(), account.getPassword(), SignalServiceAddress.DEFAULT_DEVICE_ID),
  94                 userAgent,
  95                 groupsV2Operations,
  96                 ServiceConfig.AUTOMATIC_NETWORK_RETRY);
  97         final var secureValueRecoveryV2 = accountManager.getSecureValueRecoveryV2(serviceEnvironmentConfig.svr2Mrenclave());
  98         this.pinHelper = new PinHelper(secureValueRecoveryV2);
  99     }
 100
 101     @Override
 102     public void register(
 103             boolean voiceVerification, String captcha
 104     ) throws IOException, CaptchaRequiredException, NonNormalizedPhoneNumberException, RateLimitException {
 105         if (account.isRegistered()
 106                 && account.getServiceEnvironment() != null
 107                 && account.getServiceEnvironment() != serviceEnvironmentConfig.type()) {
 108             throw new IOException("Account is registered in another environment: " + account.getServiceEnvironment());
 109         }
 110
 111         try {
 112             if (account.getAci() != null && attemptReactivateAccount()) {
 113                 return;
 114             }
 115
 116             String sessionId = NumberVerificationUtils.handleVerificationSession(accountManager,
 117                     account.getSessionId(account.getNumber()),
 118                     id -> account.setSessionId(account.getNumber(), id),
 119                     voiceVerification,
 120                     captcha);
 121             NumberVerificationUtils.requestVerificationCode(accountManager, sessionId, voiceVerification);
 122         } catch (DeprecatedVersionException e) {
 123             logger.debug("Signal-Server returned deprecated version exception", e);
 124             throw e;
 125         }
 126     }
 127
 128     @Override
 129     public void verifyAccount(
 130             String verificationCode, String pin
 131     ) throws IOException, PinLockedException, IncorrectPinException {
 132         if (account.isRegistered()) {
 133             throw new IOException("Account is already registered");
 134         }
 135
 136         if (account.getPniIdentityKeyPair() == null) {
 137             account.setPniIdentityKeyPair(KeyUtils.generateIdentityKeyPair());
 138         }
 139
 140         final var aciPreKeys = generatePreKeysForType(ServiceIdType.ACI);
 141         final var pniPreKeys = generatePreKeysForType(ServiceIdType.PNI);
 142         final var result = NumberVerificationUtils.verifyNumber(account.getSessionId(account.getNumber()),
 143                 verificationCode,
 144                 pin,
 145                 pinHelper,
 146                 (sessionId1, verificationCode1, registrationLock) -> verifyAccountWithCode(sessionId1,
 147                         verificationCode1,
 148                         registrationLock,
 149                         aciPreKeys,
 150                         pniPreKeys));
 151         final var response = result.first();
 152         final var masterKey = result.second();
 153         if (masterKey == null) {
 154             pin = null;
 155         }
 156
 157         //accountManager.setGcmId(Optional.of(GoogleCloudMessaging.getInstance(this).register(REGISTRATION_ID)));
 158         final var aci = ACI.parseOrThrow(response.getUuid());
 159         final var pni = PNI.parseOrThrow(response.getPni());
 160         account.finishRegistration(aci, pni, masterKey, pin, aciPreKeys, pniPreKeys);
 161         accountFileUpdater.updateAccountIdentifiers(account.getNumber(), aci);
 162
 163         ManagerImpl m = null;
 164         try {
 165             m = new ManagerImpl(account, pathConfig, accountFileUpdater, serviceEnvironmentConfig, userAgent);
 166             account = null;
 167
 168             m.refreshPreKeys();
 169             if (response.isStorageCapable()) {
 170                 m.retrieveRemoteStorage();
 171             }
 172             // Set an initial empty profile so user can be added to groups
 173             try {
 174                 m.updateProfile(UpdateProfile.newBuilder().build());
 175             } catch (NoClassDefFoundError e) {
 176                 logger.warn("Failed to set default profile: {}", e.getMessage());
 177             }
 178
 179             try {
 180                 m.refreshCurrentUsername();
 181             } catch (IOException | BaseUsernameException e) {
 182                 logger.warn("Failed to refresh current username", e);
 183             }
 184
 185             if (newManagerListener != null) {
 186                 newManagerListener.accept(m);
 187                 m = null;
 188             }
 189         } finally {
 190             if (m != null) {
 191                 m.close();
 192             }
 193         }
 194     }
 195
 196     @Override
 197     public void deleteLocalAccountData() throws IOException {
 198         account.deleteAccountData();
 199         accountFileUpdater.removeAccount();
 200         account = null;
 201     }
 202
 203     @Override
 204     public boolean isRegistered() {
 205         return account.isRegistered();
 206     }
 207
 208     private boolean attemptReactivateAccount() {
 209         try {
 210             final var accountManager = new SignalServiceAccountManager(serviceEnvironmentConfig.signalServiceConfiguration(),
 211                     account.getCredentialsProvider(),
 212                     userAgent,
 213                     null,
 214                     ServiceConfig.AUTOMATIC_NETWORK_RETRY);
 215             accountManager.setAccountAttributes(account.getAccountAttributes(null));
 216             account.setRegistered(true);
 217             logger.info("Reactivated existing account, verify is not necessary.");
 218             if (newManagerListener != null) {
 219                 final var m = new ManagerImpl(account,
 220                         pathConfig,
 221                         accountFileUpdater,
 222                         serviceEnvironmentConfig,
 223                         userAgent);
 224                 account = null;
 225                 newManagerListener.accept(m);
 226             }
 227             return true;
 228         } catch (IOException e) {
 229             logger.debug("Failed to reactivate account");
 230         }
 231         return false;
 232     }
 233
 234     private VerifyAccountResponse verifyAccountWithCode(
 235             final String sessionId,
 236             final String verificationCode,
 237             final String registrationLock,
 238             final PreKeyCollection aciPreKeys,
 239             final PreKeyCollection pniPreKeys
 240     ) throws IOException {
 241         try {
 242             Utils.handleResponseException(accountManager.verifyAccount(verificationCode, sessionId));
 243         } catch (AlreadyVerifiedException e) {
 244             // Already verified so can continue registering
 245         }
 246         return Utils.handleResponseException(accountManager.registerAccount(sessionId,
 247                 null,
 248                 account.getAccountAttributes(registrationLock),
 249                 aciPreKeys,
 250                 pniPreKeys,
 251                 null,
 252                 true));
 253     }
 254
 255     private PreKeyCollection generatePreKeysForType(ServiceIdType serviceIdType) {
 256         final var accountData = account.getAccountData(serviceIdType);
 257         final var keyPair = accountData.getIdentityKeyPair();
 258         final var preKeyMetadata = accountData.getPreKeyMetadata();
 259
 260         final var nextSignedPreKeyId = preKeyMetadata.getNextSignedPreKeyId();
 261         final var signedPreKey = KeyUtils.generateSignedPreKeyRecord(nextSignedPreKeyId, keyPair.getPrivateKey());
 262
 263         final var privateKey = keyPair.getPrivateKey();
 264         final var kyberPreKeyIdOffset = preKeyMetadata.getNextKyberPreKeyId();
 265         final var lastResortKyberPreKey = KeyUtils.generateKyberPreKeyRecord(kyberPreKeyIdOffset, privateKey);
 266
 267         return new PreKeyCollection(keyPair.getPublicKey(), signedPreKey, lastResortKyberPreKey);
 268     }
 269
 270     @Override
 271     public void close() {
 272         if (account != null) {
 273             account.close();
 274             account = null;
 275         }
 276     }
 277 }