mirror of
https://github.com/the-djmaze/snappymail.git
synced 2026-11-02 18:38:48 +03:00
323 lines
10 KiB
PHP
323 lines
10 KiB
PHP
<?php
|
|
|
|
namespace OCA\SnappyMail\Util;
|
|
|
|
use RainLoop\Enumerations\SignMeType;
|
|
|
|
class SnappyMailResponse extends \OCP\AppFramework\Http\Response
|
|
{
|
|
public function render(): string
|
|
{
|
|
$data = '';
|
|
$i = \ob_get_level();
|
|
while ($i--) {
|
|
$data .= \ob_get_clean();
|
|
}
|
|
return $data;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Nextcloud 34+
|
|
* @CarlSchwan 2026-03-10
|
|
* refactor: remove long deprecated IServerContainer methods
|
|
*
|
|
* https://github.com/nextcloud/server/commit/39c14c383b698467711a2de09870d7c032d92f63
|
|
*/
|
|
|
|
class SnappyMailHelper
|
|
{
|
|
public static $server;
|
|
|
|
public static function getServerContainer(): object
|
|
{
|
|
return static::$server || \OC::$server;
|
|
}
|
|
|
|
public static function getConfig(): object
|
|
{
|
|
return \method_exists(\OC::$server, 'getConfig')
|
|
? \OC::$server->getConfig()
|
|
// Nextcloud 34+
|
|
: \OCP\Server::get(\OCP\IConfig::class);
|
|
}
|
|
|
|
public static function getAppConfigValue(string $key, mixed $default = null): object
|
|
{
|
|
return (\method_exists(\OC::$server, 'getConfig')
|
|
? \OC::$server->getConfig()
|
|
// Nextcloud 34+
|
|
: \OCP\Server::get(\OCP\IAppConfig::class)
|
|
)->getAppValue('snappymail', $key, $default);
|
|
}
|
|
|
|
public static function getNavigationManager(): object
|
|
{
|
|
return \method_exists(\OC::$server, 'getNavigationManager')
|
|
? \OC::$server->getNavigationManager()
|
|
// Nextcloud 32+
|
|
: \OCP\Server::get(\OCP\INavigationManager::class);
|
|
}
|
|
|
|
public static function getSystemConfigValue(string $key, mixed $default = null): mixed
|
|
{
|
|
return \method_exists(\OC::$server, 'getSystemConfig')
|
|
? \OC::$server->getSystemConfig()->getValue($key, $default)
|
|
// Nextcloud 34+
|
|
: \OCP\Server::get(\OCP\IConfig::class)->getSystemValue($key, $default);
|
|
}
|
|
|
|
public static function getUID(): mixed
|
|
{
|
|
return static::getUser()?->getUID();
|
|
}
|
|
|
|
public static function getUser(): object
|
|
{
|
|
return static::getUserSession()->getUser();
|
|
}
|
|
|
|
public static function getUserSession(): object
|
|
{
|
|
return (\method_exists(\OC::$server, 'getUserSession')
|
|
? \OC::$server->getUserSession()
|
|
// Nextcloud 34+
|
|
: \OCP\Server::get(\OCP\IUserSession::class)
|
|
);
|
|
}
|
|
|
|
public static function getSession(): object
|
|
{
|
|
return (\method_exists(\OC::$server, 'getSession')
|
|
? \OC::$server->getSession()
|
|
// Nextcloud 34+
|
|
: \OCP\Server::get(\OCP\ISession::class)
|
|
);
|
|
}
|
|
|
|
public static function getSessionValue(string $key): mixed
|
|
{
|
|
return static::getSession()->get($key);
|
|
}
|
|
|
|
public static function setSessionValue(string $key, mixed $value): void
|
|
{
|
|
if (\method_exists(\OC::$server, 'getSession')) {
|
|
\OC::$server->getSession()[$key] = $value;
|
|
} else {
|
|
// Nextcloud 34+
|
|
\OCP\Server::get(\OCP\ISession::class)->set($key, $value);
|
|
}
|
|
}
|
|
|
|
public static function loadApp(): void
|
|
{
|
|
if (\class_exists('RainLoop\\Api')) {
|
|
return;
|
|
}
|
|
|
|
// Nextcloud the default spl_autoload_register() not working
|
|
\spl_autoload_register(function($sClassName){
|
|
$file = SNAPPYMAIL_LIBRARIES_PATH . \strtolower(\strtr($sClassName, '\\', DIRECTORY_SEPARATOR)) . '.php';
|
|
if (\is_file($file)) {
|
|
include_once $file;
|
|
}
|
|
});
|
|
|
|
$_ENV['SNAPPYMAIL_INCLUDE_AS_API'] = true;
|
|
|
|
// define('APP_VERSION', '0.0.0');
|
|
// define('APP_INDEX_ROOT_PATH', __DIR__ . DIRECTORY_SEPARATOR);
|
|
// include APP_INDEX_ROOT_PATH.'snappymail/v/'.APP_VERSION.'/include.php';
|
|
// define('APP_DATA_FOLDER_PATH', \rtrim(\trim(static::getSystemConfigValue('datadirectory', '')), '\\/').'/appdata_snappymail/');
|
|
|
|
$app_dir = \dirname(\dirname(__DIR__)) . '/app';
|
|
require_once $app_dir . '/index.php';
|
|
}
|
|
|
|
public static function startApp(bool $handle = false): void
|
|
{
|
|
static::loadApp();
|
|
|
|
$oConfig = \RainLoop\Api::Config();
|
|
|
|
if (false !== \stripos(\php_sapi_name(), 'cli')) {
|
|
return;
|
|
}
|
|
|
|
try {
|
|
$oActions = \RainLoop\Api::Actions();
|
|
if (isset($_GET[$oConfig->Get('security', 'admin_panel_key', 'admin')])) {
|
|
if ($oConfig->Get('security', 'allow_admin_panel', true)
|
|
&& \OC_User::isAdminUser(static::getUID())
|
|
&& !$oActions->IsAdminLoggined(false)
|
|
) {
|
|
$sRand = \MailSo\Base\Utils::Sha1Rand();
|
|
if ($oActions->Cacher(null, true)->Set(\RainLoop\KeyPathHelper::SessionAdminKey($sRand), \time())) {
|
|
$sToken = \RainLoop\Utils::EncodeKeyValuesQ(array('token', $sRand));
|
|
// $oActions->setAdminAuthToken($sToken);
|
|
\SnappyMail\Cookies::set('smadmin', $sToken);
|
|
}
|
|
}
|
|
} else {
|
|
$doLogin = !$oActions->getMainAccountFromToken(false);
|
|
$aCredentials = static::getLoginCredentials();
|
|
/*
|
|
// NC25+ workaround for Impersonate plugin
|
|
// https://github.com/the-djmaze/snappymail/issues/561#issuecomment-1301317723
|
|
// https://github.com/nextcloud/server/issues/34935#issuecomment-1302145157
|
|
require \OC::$SERVERROOT . '/version.php';
|
|
// \OC\SystemConfig
|
|
// file_get_contents(\OC::$SERVERROOT . 'config/config.php');
|
|
// $CONFIG['version']
|
|
if (24 < $OC_Version[0]) {
|
|
$ocSession = static::getSession();
|
|
$ocSession->reopen();
|
|
if (!$doLogin && $ocSession['snappymail-uid'] && $ocSession['snappymail-uid'] != $aCredentials[0]) {
|
|
// UID changed, Impersonate plugin probably active
|
|
$oActions->Logout(true);
|
|
$doLogin = true;
|
|
}
|
|
$ocSession->set('snappymail-uid', $aCredentials[0]);
|
|
}
|
|
*/
|
|
if ($doLogin && $aCredentials[1] && $aCredentials[2]) {
|
|
$isOIDC = \str_starts_with($aCredentials[2], 'oidc_login|');
|
|
try {
|
|
$oAccount = $oActions->LoginProcess($aCredentials[1], $aCredentials[2]);
|
|
if (!$isOIDC && $oAccount
|
|
&& $oConfig->Get('login', 'sign_me_auto', SignMeType::DefaultOff->value) === SignMeType::DefaultOn->value
|
|
) {
|
|
$oActions->SetSignMeToken($oAccount);
|
|
}
|
|
} catch (\Throwable $e) {
|
|
// Login failure, reset password to prevent more attempts
|
|
if (!$isOIDC) {
|
|
$sUID = static::getUID();
|
|
static::setSessionValue('snappymail-passphrase', '');
|
|
static::getConfig()->setUserValue($sUID, 'snappymail', 'passphrase', '');
|
|
\SnappyMail\Log::error('Nextcloud', $e->getMessage());
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($handle) {
|
|
\header_remove('Content-Security-Policy');
|
|
\RainLoop\Service::Handle();
|
|
// https://github.com/the-djmaze/snappymail/issues/1069
|
|
exit;
|
|
// return new SnappyMailResponse();
|
|
}
|
|
} catch (\Throwable $e) {
|
|
// Ignore login failure
|
|
}
|
|
}
|
|
|
|
// Check if OpenID Connect (OIDC) is enabled and used for login
|
|
// https://apps.nextcloud.com/apps/oidc_login
|
|
public static function isOIDCLogin(): bool
|
|
{
|
|
if (static::getAppConfigValue('snappymail-autologin-oidc', false)) {
|
|
// Check if the OIDC Login app is enabled
|
|
if (\OC::$server->getAppManager()->isEnabledForUser('oidc_login')) {
|
|
// Check if session is an OIDC Login
|
|
$ocSession = static::getSession();
|
|
if ($ocSession->get('is_oidc')) {
|
|
// IToken->getPassword() ???
|
|
if ($ocSession->get('oidc_access_token')) {
|
|
return true;
|
|
}
|
|
\SnappyMail\Log::debug('Nextcloud', 'OIDC access_token missing');
|
|
} else {
|
|
\SnappyMail\Log::debug('Nextcloud', 'No OIDC login');
|
|
}
|
|
} else {
|
|
\SnappyMail\Log::debug('Nextcloud', 'OIDC login disabled');
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
private static function getLoginCredentials(): array
|
|
{
|
|
$sUID = static::getUID();
|
|
$config = static::getConfig();
|
|
$ocSession = static::getSession();
|
|
|
|
// If the user has set credentials for SnappyMail in their personal settings,
|
|
// this has the first priority.
|
|
$sEmail = $config->getUserValue($sUID, 'snappymail', 'snappymail-email');
|
|
$sPassword = $config->getUserValue($sUID, 'snappymail', 'passphrase')
|
|
?: $config->getUserValue($sUID, 'snappymail', 'snappymail-password');
|
|
if ($sEmail && $sPassword) {
|
|
$sPassword = static::decodePassword($sPassword, \md5($sEmail));
|
|
if ($sPassword) {
|
|
return [$sUID, $sEmail, $sPassword];
|
|
} else {
|
|
\SnappyMail\Log::debug('Nextcloud', 'decodePassword failed for getUserValue');
|
|
}
|
|
}
|
|
|
|
// If the current user ID is identical to login ID (not valid when using account switching),
|
|
// this has the second priority.
|
|
if ($ocSession['snappymail-nc-uid'] == $sUID) {
|
|
|
|
// If OpenID Connect (OIDC) is enabled and used for login, use this.
|
|
if (static::isOIDCLogin()) {
|
|
$sEmail = $config->getUserValue($sUID, 'settings', 'email');
|
|
$pwd = new \SnappyMail\SensitiveString("oidc_login|{$sUID}");
|
|
return [$sUID, $sEmail, $pwd];
|
|
}
|
|
|
|
// Only use the user's password in the current session if they have
|
|
// enabled auto-login using Nextcloud username or email address.
|
|
$sEmail = '';
|
|
$sPassword = '';
|
|
if ($config->getAppValue('snappymail', 'snappymail-autologin', false)) {
|
|
$sEmail = $sUID;
|
|
$sPassword = $ocSession['snappymail-passphrase'];
|
|
} else if ($config->getAppValue('snappymail', 'snappymail-autologin-with-email', false)) {
|
|
$sEmail = $config->getUserValue($sUID, 'settings', 'email');
|
|
$sPassword = $ocSession['snappymail-passphrase'];
|
|
} else {
|
|
\SnappyMail\Log::debug('Nextcloud', 'snappymail-autologin is off');
|
|
}
|
|
if ($sPassword) {
|
|
return [$sUID, $sEmail, static::decodePassword($sPassword, $sUID)];
|
|
}
|
|
} else {
|
|
\SnappyMail\Log::debug('Nextcloud', "snappymail-nc-uid mismatch '{$ocSession['snappymail-nc-uid']}' != '{$sUID}'");
|
|
}
|
|
|
|
return [$sUID, '', ''];
|
|
}
|
|
|
|
public static function getAppUrl(): string
|
|
{
|
|
return \OC::$server->getURLGenerator()->linkToRoute('snappymail.page.appGet');
|
|
}
|
|
|
|
public static function normalizeUrl(string $sUrl): string
|
|
{
|
|
$sUrl = \rtrim(\trim($sUrl), '/\\');
|
|
if ('.php' !== \strtolower(\substr($sUrl, -4))) {
|
|
$sUrl .= '/';
|
|
}
|
|
|
|
return $sUrl;
|
|
}
|
|
|
|
public static function encodePassword(string $sPassword, string $sSalt): string
|
|
{
|
|
static::loadApp();
|
|
return \SnappyMail\Crypt::EncryptUrlSafe($sPassword, $sSalt);
|
|
}
|
|
|
|
public static function decodePassword(string $sPassword, string $sSalt): ?\SnappyMail\SensitiveString
|
|
{
|
|
static::loadApp();
|
|
$result = \SnappyMail\Crypt::DecryptUrlSafe($sPassword, $sSalt);
|
|
return $result ? new \SnappyMail\SensitiveString($result) : null;
|
|
}
|
|
}
|