/****************************************************************************** "Copyright (c) 2015-2015, Intel Corporation All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. " ******************************************************************************/ package com.intel.security; import java.io.File; import java.io.UnsupportedEncodingException; import org.apache.cordova.CordovaPlugin; import org.apache.cordova.CallbackContext; import org.json.JSONArray; import org.json.JSONException; import org.json.JSONObject; import android.content.res.AssetManager; import java.io.InputStream; import java.io.IOException; import android.content.Context; import android.provider.Settings; import org.xmlpull.v1.XmlPullParser; import org.xmlpull.v1.XmlPullParserException; public class Services extends CordovaPlugin { protected static final int CONFIG_ID_APP_PATH = 0x100 ; protected static final int CONFIG_ID_LOCAL_PATH= 0x101 ; protected static final int CONFIG_ID_APP_ID= 0x102 ; protected static final int CONFIG_ID_HARDWARE_ID= 0x103 ; protected static final int CONFIG_ID_OS_VERSION= 0x104 ; protected static final int CONFIG_ID_WHITELIST_ACCESS_MIN = 0xD000; protected static final int CONFIG_ID_WHITELIST_ACCESS_MAX = 0xDFFF; protected static final int CONFIG_ID_WHITELIST_SUBDOMAINS_MIN = 0xE000; protected static final int CONFIG_ID_WHITELIST_SUBDOMAINS_MAX = 0xEFFF; protected static final int CONFIG_ID_CACERT_MIN = 0xF000; protected static final int CONFIG_ID_CACERT_MAX = 0xFF00; protected native int SetClassPtrToJni(); protected native int globalInitStartJNI() ; protected native int globalInitEndJNI() ; protected native int globalSetConfigJNI( int jID, Object jData) ; static Context mContext = null ; private static Services instance = null; public static Services getInstance() { return instance; } private void SetSserviceContext() { instance = this ; } public Context GetSserviceContext() { return cordova.getActivity(); } // load .so file static { try { System.loadLibrary("SecurityServices"); } catch (UnsatisfiedLinkError e) { // if failed to load the .so file then exit the app System.exit(1); } } public void GlobalInitStart() throws ErrorCodeException{ int result = globalInitStartJNI() ; if (result != 0) { throw new ErrorCodeException(result); } } public void GlobalInitEnd() throws ErrorCodeException{ Context mContext=cordova.getActivity() ; int result = 0; result = globalSetConfigJNI(CONFIG_ID_LOCAL_PATH, (Object)(mContext.getFilesDir().toString())) ; if (result != 0) { throw new ErrorCodeException(result); } result = globalSetConfigJNI(CONFIG_ID_APP_PATH, (Object)mContext.getApplicationInfo().dataDir) ; if (result != 0) { throw new ErrorCodeException(result); } result = globalSetConfigJNI(CONFIG_ID_APP_ID, (Object)mContext.getPackageName() ) ; if (result != 0) { throw new ErrorCodeException(result); } result = globalSetConfigJNI(CONFIG_ID_HARDWARE_ID, (Object)Settings.Secure.getString(mContext.getContentResolver(),Settings.Secure.ANDROID_ID)) ; if (result != 0) { throw new ErrorCodeException(result); } result = globalSetConfigJNI(CONFIG_ID_OS_VERSION, (Object)( new Integer(android.os.Build.VERSION.SDK_INT))) ; if (result != 0) { throw new ErrorCodeException(result); } try { // whitelist int id = mContext.getResources().getIdentifier("config", "xml", mContext.getPackageName()); XmlPullParser xpp = mContext.getResources().getXml(id); int access_id = CONFIG_ID_WHITELIST_ACCESS_MIN; int subdomains_id = CONFIG_ID_WHITELIST_SUBDOMAINS_MIN; int eventType = xpp.getEventType(); while ((eventType != XmlPullParser.END_DOCUMENT) && (access_id <= CONFIG_ID_WHITELIST_ACCESS_MAX)) { if(eventType == XmlPullParser.START_TAG) { String origin = ""; String subdomains = ""; if (xpp.getName().equals("access")){ for (int i = 0; i < xpp.getAttributeCount(); i++){ if ( xpp.getAttributeName(i).equals("origin")) { origin = xpp.getAttributeValue(i); } else if (xpp.getAttributeName(i).equals("subdomains")) { subdomains = xpp.getAttributeValue(i); } } eventType = xpp.next(); if ((eventType == XmlPullParser.END_TAG) && (!origin.equals("")) ) { result = globalSetConfigJNI(access_id, (Object)origin ) ; if (result != 0) { throw new ErrorCodeException(result); } if (!subdomains.equals("")){ result = globalSetConfigJNI(subdomains_id, (Object)subdomains ) ; if (result != 0) { throw new ErrorCodeException(result); } } access_id++; subdomains_id++; } } } eventType = xpp.next(); } /* // CA-CERT AssetManager assetManager = mContext.getAssets(); String[] list = assetManager.list("cacerts"); int i = 0; for (String str : list) { InputStream input = assetManager.open("cacerts/"+str); int size = input.available(); byte[] buffer = new byte[size]; input.read(buffer); result = globalSetConfigJNI( CONFIG_ID_CACERT_MIN+i, (Object)buffer ) ; if (result != 0) { throw new ErrorCodeException(result); } i++ ; } */ } catch (XmlPullParserException e){ throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } catch (IOException e){ throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } catch (Exception e) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } result = globalInitEndJNI() ; if (result != 0) { throw new ErrorCodeException(result); } } @Override public boolean execute(final String action, final JSONArray args, final CallbackContext callbackContext) throws JSONException { try { if (SecureAPIEnum.IsGlobalInitAPI(action)) { // global init try { GlobalInitStart(); cordova.getThreadPool().execute(new Runnable() { public void run() { try { SetSserviceContext(); if (SetClassPtrToJni() == 0) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } GlobalInitEnd(); } catch (ErrorCodeException e){ callbackContext.error(e.getErrorCode()); } catch (OutOfMemoryError e){ callbackContext.error(ErrorCodeEnum.MEMORY_ALLOCATION_FAILURE.getValue()); } catch (Exception e) { callbackContext.error(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } } }); } catch (ErrorCodeException e){ callbackContext.error(e.getErrorCode()); return true; } catch (OutOfMemoryError e){ callbackContext.error(ErrorCodeEnum.MEMORY_ALLOCATION_FAILURE.getValue()); return true; } catch (Exception e) { callbackContext.error(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); return true; } } else { // API - use a working thread cordova.getThreadPool().execute(new Runnable() { public void run() { try { SetSserviceContext(); if (SetClassPtrToJni() == 0) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } SecureAPIEnum api = SecureAPIEnum.CreateSecureAPIEnum(action); switch (api) { // Secure Data case SECURE_DATA_CREATE_FROM_DATA: SecureDataCreateFromDataExecute(args, callbackContext); break; case SECURE_DATA_CREATE_FROM_SEALED_DATA: SecureDataCreateFromSealedDataExecute(args, callbackContext); break; case SECURE_DATA_CHANGE_EXTRA_KEY: SecureDataChangeExtraKeyExecute(args, callbackContext); break; case SECURE_DATA_GET_DATA_STRING: SecureDataGetDataExecute(args, callbackContext); break; case SECURE_DATA_GET_SEALED_DATA_STRING: SecureDataGetSealedDataExecute(args, callbackContext); break; case SECURE_DATA_GET_TAG_STRING: SecureDataGetTagExecute(args, callbackContext); break; case SECURE_DATA_GET_POLICY_STRING: SecureDataGetPolicyExecute(args, callbackContext); break; case SECURE_DATA_GET_OWNERS_STRING: SecureDataGetOwnersExecute(args, callbackContext); break; case SECURE_DATA_GET_CREATOR_STRING: SecureDataGetCreatorExecute(args, callbackContext); break; case SECURE_DATA_GET_WEB_OWNERS_STRING: GetTrustedWebDomains(args, callbackContext) ; break ; case SECURE_DATA_DESTROY_STRING: SecureDataDestroyExecute(args, callbackContext); break; // Secure Storage case SECURE_STORAGE_READ_STRING: SecureStorageReadExecute(args, callbackContext); break; case SECURE_STORAGE_WRITE_STRING: SecureStorageWriteExecute(args, callbackContext); break; case SECURE_STORAGE_DELETE_STRING: SecureStorageDeleteExecute(args, callbackContext); break; // Secure transport case SECURE_TRANSPORT_OPEN_STRING: SecureTransportOpenExcute(args, callbackContext); break; case SECURE_TRANSPORT_SET_URL_STRING: SecureTransportSetURLExcute(args, callbackContext); break; case SECURE_TRANSPORT_SET_METHOD_STRING: SecureTransportSetMethodExcute(args, callbackContext); break; case SECURE_TRANSPORT_SET_HEADERS_STRING: SecureTransportSetHeadersExcute(args, callbackContext); break; case SECURE_TRANSPORT_SEND_REQUEST_STRING: SecureTransportSendRequestExcute(args, callbackContext); break; case SECURE_TRANSPORT_ABORT_STRING: SecureTransportAbortExcute(args, callbackContext); break; case SECURE_TRANSPORT_DESTROY_STRING: SecureTransportDestroyExcute(args, callbackContext); break; }; } catch (ErrorCodeException e){ callbackContext.error(e.getErrorCode()); } catch (JSONException e){ callbackContext.error(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } catch (OutOfMemoryError e){ callbackContext.error(ErrorCodeEnum.MEMORY_ALLOCATION_FAILURE.getValue()); } catch (Exception e) { callbackContext.error(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } } }); } } catch (ErrorCodeException e){ // the action is not supported return false; } return true; } protected void SecureDataCreateFromDataExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException, UnsupportedEncodingException { if (args.length() != 11) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String dataStr = args.getString(0); String tagStr = args.getString(1); long extraKey = args.getLong(2); int appAccessControl = args.getInt(3); int deviceLocality = args.getInt(4); int sensitivityLevel = args.getInt(5); int noStore = args.getInt(6); int noRead = args.getInt(7); long creator = args.getLong(8); JSONArray ownersUIDJSONArray = args.getJSONArray(9); String webDomains = args.getString(10); SecureData sData = new SecureData(); long instanceID = sData.CreateFromDataAPI(dataStr, tagStr, extraKey, appAccessControl, deviceLocality, sensitivityLevel, noStore, noRead, creator, ownersUIDJSONArray, webDomains); // trying to clean plain text from memory dataStr = null; //args = null; callbackContext.success(Long.toString(instanceID)); } protected void SecureDataCreateFromSealedDataExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 2) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String sealedDataStr = args.getString(0); long extraKey = args.getLong(1); SecureData sData = new SecureData(); long instanceID = sData.CreateFromSealedDataAPI(sealedDataStr, extraKey); callbackContext.success(Long.toString(instanceID)); } protected void SecureDataChangeExtraKeyExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 2) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); long extraKeyInstanceID = args.getLong(1); SecureData sData = new SecureData(); sData.ChangeExtraKeyAPI(instanceID, extraKeyInstanceID); callbackContext.success(); } protected void SecureDataGetDataExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException, UnsupportedEncodingException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); String retStr = sData.GetDataAPI(instanceID); callbackContext.success(retStr); } protected void SecureDataGetSealedDataExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); String retStr = sData.GetSealedDataAPI(instanceID); callbackContext.success(retStr); } protected void SecureDataGetTagExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException, UnsupportedEncodingException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); String retStr = sData.GetTagAPI(instanceID); callbackContext.success(retStr); } protected void SecureDataGetPolicyExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); JSONObject jObj = sData.GetDataPolicyAPI(instanceID); callbackContext.success(jObj); } protected void SecureDataGetOwnersExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); JSONArray jObj = sData.GetOwnersAPI(instanceID); callbackContext.success(jObj); } protected void SecureDataGetCreatorExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); long creator = sData.GetCreatorAPI(instanceID); callbackContext.success(Long.toString(creator)); } // protected void SecureDataGetTrustedWebDomainsListSize(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { // // if (args.length() != 1) { // throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); // } // long instanceID = args.getLong(0); // SecureData sData = new SecureData(); // int wdListSize = sData.GetTrustedWebDomainsListLengthAPI(instanceID); // callbackContext.success(Int.toString(wdListSize)); // } protected void GetTrustedWebDomains(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException, UnsupportedEncodingException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); String retStr = sData.GetTrustedWebDomainsAPI(instanceID); callbackContext.success(retStr); } protected void SecureDataDestroyExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureData sData = new SecureData(); sData.DestoryAPI(instanceID); callbackContext.success(); } protected void SecureStorageReadExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 3) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String id = args.getString(0); int storageType = args.getInt(1); long extraKey = args.getLong(2); SecureStorage sStorage = new SecureStorage(); long instanceID = sStorage.ReadAPI(id, storageType, extraKey); callbackContext.success(Long.toString(instanceID)); } protected void SecureStorageWriteExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 3) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String id = args.getString(0); int storageType = args.getInt(1); long instanceID = args.getLong(2); SecureStorage sStorage = new SecureStorage(); sStorage.WriteAPI(id, storageType, instanceID); callbackContext.success(); } protected void SecureStorageDeleteExecute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 2) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String id = args.getString(0); int storageType = args.getInt(1); SecureStorage sStorage = new SecureStorage(); sStorage.DeleteAPI(id, storageType); callbackContext.success(); } protected void SecureTransportOpenExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 4) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } String url = args.getString(0); int method = args.getInt(1); String serverKey = args.getString(2); int timeout = args.getInt(3); SecureTransport sTransport = new SecureTransport(); long instanceID = sTransport.OpenAPI(url, method, serverKey, timeout); callbackContext.success(Long.toString(instanceID)); } protected void SecureTransportSetURLExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 3) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); String url = args.getString(1); String serverKey = args.getString(2); SecureTransport sTransport = new SecureTransport(); sTransport.SetURLAPI(instanceID, url,serverKey); callbackContext.success(); } protected void SecureTransportSetMethodExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 2) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); int method = args.getInt(1); SecureTransport sTransport = new SecureTransport(); sTransport.SetMethodAPI(instanceID, method); callbackContext.success(); } protected void SecureTransportSetHeadersExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 2) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); String headers = args.getString(1); SecureTransport sTransport = new SecureTransport(); sTransport.SetHeadersAPI(instanceID, headers); callbackContext.success(); } protected void SecureTransportSendRequestExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException, UnsupportedEncodingException { if (args.length() != 4) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); String requestBody = args.getString(1); int requestFormat = args.getInt(2); String secureDataDescriptors = args.getString(3); SecureTransport sTransport = new SecureTransport(); JSONObject responseObject = sTransport.SendRequestAPI(instanceID, requestBody, requestFormat, secureDataDescriptors); callbackContext.success(responseObject); } protected void SecureTransportAbortExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureTransport sTransport = new SecureTransport(); sTransport.AbortAPI(instanceID); callbackContext.success(); } protected void SecureTransportDestroyExcute(final JSONArray args, final CallbackContext callbackContext) throws ErrorCodeException, JSONException { if (args.length() != 1) { throw new ErrorCodeException(ErrorCodeEnum.INTERNAL_ERROR_OCCURRED.getValue()); } long instanceID = args.getLong(0); SecureTransport sTransport = new SecureTransport(); sTransport.DestroyAPI(instanceID); callbackContext.success(); } }