#!/usr/bin/env python
import logging
import json
import socket
import requests
import sip
sip.setapi('QString', 2)
sip.setapi('QVariant', 2)
from PyQt4 import QtCore
from PyQt4 import QtGui
from leap.base.auth import LeapSRPRegister
from leap.base import checks as basechecks
from leap.base import exceptions as baseexceptions
from leap.crypto import certs
from leap.crypto import leapkeyring
from leap.eip import checks as eipchecks
from leap.eip import exceptions as eipexceptions
from leap.gui import mainwindow_rc
try:
from collections import OrderedDict
except ImportError:
# We must be in 2.6
from leap.util.dicts import OrderedDict
# XXX DEBUG
logging.basicConfig()
logger = logging.getLogger(__name__)
logger.setLevel(logging.DEBUG)
APP_LOGO = ':/images/leap-color-small.png'
ErrorLabelStyleSheet = """
QLabel { color: red;
font-weight: bold}
"""
class FirstRunWizard(QtGui.QWizard):
def __init__(
self, parent=None, providers=None,
success_cb=None, is_provider_setup=False,
is_previously_registered=False,
netchecker=basechecks.LeapNetworkChecker,
providercertchecker=eipchecks.ProviderCertChecker,
eipconfigchecker=eipchecks.EIPConfigChecker):
super(FirstRunWizard, self).__init__(
parent,
QtCore.Qt.WindowStaysOnTopHint)
# XXX hardcoded for tests
#if not providers:
#providers = ('springbok',)
self.providers = providers
# success callback
self.success_cb = success_cb
# is provider setup?
self.is_provider_setup = is_provider_setup
# previously registered
# if True, jumps to LogIn page.
self.is_previously_registered = is_previously_registered
# Checkers
self.netchecker = netchecker
self.providercertchecker = providercertchecker
self.eipconfigchecker = eipconfigchecker
self.providerconfig = None
# FIXME add param for previously_registered
# should start at login page.
pages_dict = OrderedDict((
# (name, WizardPage)
('intro', IntroPage),
('providerselection',
SelectProviderPage),
('login', LogInPage),
('providerinfo', ProviderInfoPage),
('providersetup', ProviderSetupPage),
('signup', RegisterUserPage),
('connecting', ConnectingPage),
('lastpage', LastPage)
))
self.add_pages_from_dict(pages_dict)
self.setPixmap(
QtGui.QWizard.BannerPixmap,
QtGui.QPixmap(':/images/banner.png'))
self.setPixmap(
QtGui.QWizard.BackgroundPixmap,
QtGui.QPixmap(':/images/background.png'))
self.setWindowTitle("First Run Wizard")
# TODO: set style for MAC / windows ...
#self.setWizardStyle()
def add_pages_from_dict(self, pages_dict):
"""
@param pages_dict: the dictionary with pages, where
values are a tuple of InstanceofWizardPage, kwargs.
@type pages_dict: dict
"""
for name, page in pages_dict.items():
# XXX check for is_previously registered
# and skip adding the signup branch if so
self.addPage(page())
self.pages_dict = pages_dict
def get_page_index(self, page_name):
"""
returns the index of the given page
@param page_name: the name of the desired page
@type page_name: str
@rparam: index of page in wizard
@rtype: int
"""
return self.pages_dict.keys().index(page_name)
def set_providerconfig(self, providerconfig):
self.providerconfig = providerconfig
def setWindowFlags(self, flags):
logger.debug('setting window flags')
QtGui.QWizard.setWindowFlags(self, flags)
def focusOutEvent(self, event):
# needed ?
self.setFocus(True)
self.activateWindow()
self.raise_()
self.show()
def accept(self):
"""
final step in the wizard.
gather the info, update settings
and call the success callback.
"""
provider = self.field('provider_domain')
username = self.field('userName')
#password = self.field('userPassword')
remember_pass = self.field('rememberPassword')
logger.debug('chosen provider: %s', provider)
logger.debug('username: %s', username)
logger.debug('remember password: %s', remember_pass)
super(FirstRunWizard, self).accept()
settings = QtCore.QSettings()
settings.setValue("FirstRunWizardDone", True)
settings.setValue(
"eip_%s_username" % provider,
username)
settings.setValue("%s_remember_pass" % provider, remember_pass)
seed = self.get_random_str(10)
settings.setValue("%s_seed" % provider, seed)
# Commenting out for 0.2.0 release
# since we did not fix #744 on time.
#leapkeyring.leap_set_password(username, password, seed=seed)
logger.debug('First Run Wizard Done.')
cb = self.success_cb
if cb and callable(cb):
self.success_cb()
def get_provider_by_index(self):
provider = self.field('provider_index')
return self.providers[provider]
def get_random_str(self, n):
from string import (ascii_uppercase, ascii_lowercase, digits)
from random import choice
return ''.join(choice(
ascii_uppercase +
ascii_lowercase +
digits) for x in range(n))
class IntroPage(QtGui.QWizardPage):
def __init__(self, parent=None):
super(IntroPage, self).__init__(parent)
self.setTitle("First run wizard.")
#self.setPixmap(
#QtGui.QWizard.WatermarkPixmap,
#QtGui.QPixmap(':/images/watermark1.png'))
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
label = QtGui.QLabel(
"Now we will guide you through "
"some configuration that is needed before you "
"can connect for the first time.
"
"If you ever need to modify these options again, "
"you can find the wizard in the 'Settings' menu from the "
"main window.
"
"Do you want to sign up for a new account, or log "
"in with an already existing username?
")
label.setWordWrap(True)
radiobuttonGroup = QtGui.QGroupBox()
self.sign_up = QtGui.QRadioButton(
"Sign up for a new account.")
self.sign_up.setChecked(True)
self.log_in = QtGui.QRadioButton(
"Log In with my credentials.")
radiobLayout = QtGui.QVBoxLayout()
radiobLayout.addWidget(self.sign_up)
radiobLayout.addWidget(self.log_in)
radiobuttonGroup.setLayout(radiobLayout)
layout = QtGui.QVBoxLayout()
layout.addWidget(label)
layout.addWidget(radiobuttonGroup)
self.setLayout(layout)
self.registerField('is_signup', self.sign_up)
def validatePage(self):
return True
def nextId(self):
"""
returns next id
in a non-linear wizard
"""
if self.sign_up.isChecked():
next_ = 'providerselection'
if self.log_in.isChecked():
next_ = 'login'
wizard = self.wizard()
return wizard.get_page_index(next_)
class SelectProviderPage(QtGui.QWizardPage):
def __init__(self, parent=None, providers=None):
super(SelectProviderPage, self).__init__(parent)
self.setTitle("Enter Provider")
self.setSubTitle(
"Please enter the domain of the provider you want "
"to use for your connection."
)
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
self.did_cert_check = False
providerNameLabel = QtGui.QLabel("h&ttps://")
# note that we expect the bare domain name
# we will add the scheme later
providerNameEdit = QtGui.QLineEdit()
providerNameEdit.cursorPositionChanged.connect(
self.reset_validation_status)
providerNameLabel.setBuddy(providerNameEdit)
# add regex validator
providerDomainRe = QtCore.QRegExp(r"^[a-z\d_-.]+$")
providerNameEdit.setValidator(
QtGui.QRegExpValidator(providerDomainRe, self))
self.providerNameEdit = providerNameEdit
# Eventually we will seed a list of
# well known providers here.
#providercombo = QtGui.QComboBox()
#if providers:
#for provider in providers:
#providercombo.addItem(provider)
#providerNameSelect = providercombo
self.registerField('provider_domain*', self.providerNameEdit)
#self.registerField('provider_name_index', providerNameSelect)
validationMsg = QtGui.QLabel("")
validationMsg.setStyleSheet(ErrorLabelStyleSheet)
self.validationMsg = validationMsg
# cert info
# this is used in the callback
# for the checkbox changes.
# tricky, since the first time came
# from the exception message.
# should get string from exception too!
self.bad_cert_status = "Server certificate could not be verified."
self.certInfo = QtGui.QLabel("")
self.certInfo.setWordWrap(True)
self.certWarning = QtGui.QLabel("")
self.trustProviderCertCheckBox = QtGui.QCheckBox(
"&Trust this provider certificate.")
self.trustProviderCertCheckBox.stateChanged.connect(
self.onTrustCheckChanged)
layout = QtGui.QGridLayout()
layout.addWidget(validationMsg, 0, 2)
layout.addWidget(providerNameLabel, 1, 1)
layout.addWidget(providerNameEdit, 1, 2)
# XXX get a groupbox or something....
certinfoGroup = QtGui.QGroupBox("Certificate validation")
certinfoLayout = QtGui.QVBoxLayout()
certinfoLayout.addWidget(self.certInfo)
certinfoLayout.addWidget(self.certWarning)
certinfoLayout.addWidget(self.trustProviderCertCheckBox)
certinfoGroup.setLayout(certinfoLayout)
layout.addWidget(certinfoGroup, 4, 1, 4, 2)
self.certinfoGroup = certinfoGroup
self.certinfoGroup.hide()
#layout.addWidget(self.certInfo, 4, 1, 4, 2)
#layout.addWidget(self.certWarning, 6, 1, 6, 2)
#layout.addWidget(
#self.trustProviderCertCheckBox,
#8, 1, 8, 2)
#self.trustProviderCertCheckBox.hide()
self.setLayout(layout)
def is_insecure_cert_trusted(self):
return self.trustProviderCertCheckBox.isChecked()
def onTrustCheckChanged(self, state):
checked = False
if state == 2:
checked = True
if checked:
self.reset_validation_status()
else:
self.set_validation_status(self.bad_cert_status)
# trigger signal to redraw next button
self.completeChanged.emit()
def reset_validation_status(self):
"""
empty the validation msg
"""
self.validationMsg.setText('')
def set_validation_status(self, status):
self.validationMsg.setText(status)
def add_cert_info(self, certinfo):
self.certWarning.setText(
"Do you want to trust this provider certificate?")
self.certInfo.setText(
'SHA-256 fingerprint: %s
' % certinfo)
self.certInfo.setWordWrap(True)
self.certinfoGroup.show()
# pagewizard methods
def isComplete(self):
if not self.did_cert_check:
return True
if self.is_insecure_cert_trusted():
return True
return False
def initializePage(self):
self.certinfoGroup.hide()
def validatePage(self):
wizard = self.wizard()
netchecker = wizard.netchecker()
providercertchecker = wizard.providercertchecker()
eipconfigchecker = wizard.eipconfigchecker()
domain = self.providerNameEdit.text()
# try name resolution
try:
netchecker.check_name_resolution(
domain)
except baseexceptions.LeapException as exc:
self.set_validation_status(exc.usermessage)
return False
# try https connection
try:
providercertchecker.is_https_working(
"https://%s" % domain,
verify=True)
except eipexceptions.HttpsBadCertError as exc:
if self.trustProviderCertCheckBox.isChecked():
pass
else:
self.set_validation_status(exc.usermessage)
fingerprint = certs.get_cert_fingerprint(
domain=domain, sep=" ")
self.add_cert_info(fingerprint)
self.did_cert_check = True
self.completeChanged.emit()
return False
except baseexceptions.LeapException as exc:
self.set_validation_status(exc.usermessage)
return False
# try download provider info...
eipconfigchecker.fetch_definition(domain=domain)
wizard.set_providerconfig(
eipconfigchecker.defaultprovider.config)
# all ok, go on...
return True
def nextId(self):
wizard = self.wizard()
if not wizard:
return
return wizard.get_page_index('providerinfo')
class ProviderInfoPage(QtGui.QWizardPage):
def __init__(self, parent=None):
super(ProviderInfoPage, self).__init__(parent)
self.setTitle("Provider Info")
self.setSubTitle("Available information about chosen provider.")
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
displayName = QtGui.QLabel("")
description = QtGui.QLabel("")
enrollment_policy = QtGui.QLabel("")
# XXX set stylesheet...
# prettify a little bit.
# bigger fonts and so on...
self.displayName = displayName
self.description = description
self.enrollment_policy = enrollment_policy
layout = QtGui.QGridLayout()
layout.addWidget(displayName, 0, 1)
layout.addWidget(description, 1, 1)
layout.addWidget(enrollment_policy, 2, 1)
self.setLayout(layout)
def initializePage(self):
# XXX get multilingual objects
# directly from the config object
lang = "en"
pconfig = self.wizard().providerconfig
dn = pconfig.get('display_name')
display_name = dn[lang] if dn else ''
self.displayName.setText(
"%s" % display_name)
desc = pconfig.get('description')
description_text = desc[lang] if desc else ''
self.description.setText(
"%s" % description_text)
enroll = pconfig.get('enrollment_policy')
if enroll:
self.enrollment_policy.setText(
'enrollment policy: %s' % enroll)
def nextId(self):
wizard = self.wizard()
if not wizard:
return
return wizard.get_page_index('providersetup')
class ProviderSetupPage(QtGui.QWizardPage):
def __init__(self, parent=None):
super(ProviderSetupPage, self).__init__(parent)
self.setTitle("Provider Setup")
self.setSubTitle("Setting up provider.")
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
self.status = QtGui.QLabel("")
self.progress = QtGui.QProgressBar()
self.progress.setMaximum(100)
self.progress.hide()
layout = QtGui.QGridLayout()
layout.addWidget(self.status, 0, 1)
layout.addWidget(self.progress, 5, 1)
self.setLayout(layout)
def set_status(self, status):
self.status.setText(status)
self.status.setWordWrap(True)
def fetch_and_validate(self):
# Fake... till you make it...
import time
domain = self.field('provider_domain')
wizard = self.wizard()
pconfig = wizard.providerconfig
pCertChecker = wizard.providercertchecker
certchecker = pCertChecker(domain=domain)
self.set_status('Fetching CA certificate')
self.progress.setValue(30)
ca_cert_uri = pconfig.get('ca_cert_uri').geturl()
# XXX check scheme == "https"
# XXX passing verify == False because
# we have trusted right before.
# We should check it's the same domain!!!
# (Check with the trusted fingerprints dict
# or something smart)
certchecker.download_ca_cert(
uri=ca_cert_uri,
verify=False)
self.set_status('Checking CA fingerprint')
self.progress.setValue(66)
ca_cert_fingerprint = pconfig.get('ca_cert_fingerprint', None)
# XXX get fingerprint dict (types)
sha256_fpr = ca_cert_fingerprint.split('=')[1]
validate_fpr = certchecker.check_ca_cert_fingerprint(
fingerprint=sha256_fpr)
time.sleep(0.5)
if not validate_fpr:
# XXX update validationMsg
# should catch exception
return False
self.set_status('Validating api certificate')
self.progress.setValue(90)
api_uri = pconfig.get('api_uri', None)
try:
api_cert_verified = certchecker.verify_api_https(api_uri)
except requests.exceptions.SSLError as exc:
logger.error('BUG #638. %s' % exc.message)
# XXX RAISE! See #638
# bypassing until the hostname is fixed.
# We probably should raise yet-another-warning
# here saying user that the hostname "XX.XX.XX.XX' does not
# match 'foo.bar.baz'
api_cert_verified = True
if not api_cert_verified:
# XXX update validationMsg
# should catch exception
return False
time.sleep(0.5)
#ca_cert_path = checker.ca_cert_path
self.progress.setValue(100)
time.sleep(0.2)
# pagewizard methods
def initializePage(self):
self.set_status(
'We are going to contact the provider to get '
'the certificates that will be used to stablish '
'a secure connection.
Click next to continue.')
self.progress.setValue(0)
self.progress.hide()
def validatePage(self):
self.progress.show()
self.fetch_and_validate()
return True
def nextId(self):
wizard = self.wizard()
if not wizard:
return
is_signup = self.field('is_signup')
if is_signup is True:
next_ = 'signup'
if is_signup is False:
next_ = 'connecting'
return wizard.get_page_index(next_)
class UserFormMixIn(object):
def reset_validation_status(self):
"""
empty the validation msg
"""
self.validationMsg.setText('')
def set_status_validating(self):
"""
set validation msg to 'registering...'
"""
# XXX this is NOT WORKING.
# My guess is that, even if we are using
# signals to trigger this, it does
# not show until the validate function
# returns.
# I guess it is because there is no delay...
logger.debug('registering........')
self.validationMsg.setText('registering...')
# need to call update somehow???
# XXX refactor set_status_foo
def set_status_invalid_username(self):
"""
set validation msg to
not available user
"""
self.validationMsg.setText('Username not available.')
def set_status_server_500(self):
"""
set validation msg to
internal server error
"""
self.validationMsg.setText("Error during registration (500)")
def set_status_timeout(self):
"""
set validation msg to
timeout
"""
self.validationMsg.setText("Error connecting to provider (timeout)")
def set_status_connerror(self):
"""
set validation msg to
connection refused
"""
self.validationMsg.setText(
"Error connecting to provider "
"(connection error)")
def set_status_unknown_error(self):
"""
set validation msg to
unknown error
"""
self.validationMsg.setText("Error during sign up")
class LogInPage(QtGui.QWizardPage, UserFormMixIn):
def __init__(self, parent=None):
super(LogInPage, self).__init__(parent)
self.setTitle("Log In")
self.setSubTitle("Log in with your credentials.")
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
userNameLabel = QtGui.QLabel("User &name:")
userNameLineEdit = QtGui.QLineEdit()
userNameLineEdit.cursorPositionChanged.connect(
self.reset_validation_status)
userNameLabel.setBuddy(userNameLineEdit)
# add regex validator
usernameRe = QtCore.QRegExp(r"^[A-Za-z\d_]+$")
userNameLineEdit.setValidator(
QtGui.QRegExpValidator(usernameRe, self))
self.userNameLineEdit = userNameLineEdit
userPasswordLabel = QtGui.QLabel("&Password:")
self.userPasswordLineEdit = QtGui.QLineEdit()
self.userPasswordLineEdit.setEchoMode(
QtGui.QLineEdit.Password)
userPasswordLabel.setBuddy(self.userPasswordLineEdit)
self.registerField('log_in_userName*', self.userNameLineEdit)
self.registerField('log_in_userPassword*', self.userPasswordLineEdit)
layout = QtGui.QGridLayout()
layout.setColumnMinimumWidth(0, 20)
validationMsg = QtGui.QLabel("")
validationMsg.setStyleSheet(ErrorLabelStyleSheet)
self.validationMsg = validationMsg
layout.addWidget(validationMsg, 0, 3)
layout.addWidget(userNameLabel, 1, 0)
layout.addWidget(self.userNameLineEdit, 1, 3)
layout.addWidget(userPasswordLabel, 2, 0)
layout.addWidget(self.userPasswordLineEdit, 2, 3)
self.setLayout(layout)
def nextId(self):
wizard = self.wizard()
if not wizard:
return
if wizard.is_provider_setup is True:
next_ = 'connecting'
if wizard.is_provider_setup is False:
next_ = 'providersetup'
return wizard.get_page_index(next_)
class RegisterUserPage(QtGui.QWizardPage, UserFormMixIn):
setSigningUpStatus = QtCore.pyqtSignal([])
def __init__(self, parent=None):
super(RegisterUserPage, self).__init__(parent)
# bind wizard page signals
self.setSigningUpStatus.connect(
self.set_status_validating)
self.setTitle("Sign Up")
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
userNameLabel = QtGui.QLabel("User &name:")
userNameLineEdit = QtGui.QLineEdit()
userNameLineEdit.cursorPositionChanged.connect(
self.reset_validation_status)
userNameLabel.setBuddy(userNameLineEdit)
# add regex validator
usernameRe = QtCore.QRegExp(r"^[A-Za-z\d_]+$")
userNameLineEdit.setValidator(
QtGui.QRegExpValidator(usernameRe, self))
self.userNameLineEdit = userNameLineEdit
userPasswordLabel = QtGui.QLabel("&Password:")
self.userPasswordLineEdit = QtGui.QLineEdit()
self.userPasswordLineEdit.setEchoMode(
QtGui.QLineEdit.Password)
userPasswordLabel.setBuddy(self.userPasswordLineEdit)
rememberPasswordCheckBox = QtGui.QCheckBox(
"&Remember username and password.")
rememberPasswordCheckBox.setChecked(True)
self.registerField('userName*', self.userNameLineEdit)
self.registerField('userPassword*', self.userPasswordLineEdit)
self.registerField('rememberPassword', rememberPasswordCheckBox)
layout = QtGui.QGridLayout()
layout.setColumnMinimumWidth(0, 20)
validationMsg = QtGui.QLabel("")
validationMsg.setStyleSheet(ErrorLabelStyleSheet)
self.validationMsg = validationMsg
layout.addWidget(validationMsg, 0, 3)
layout.addWidget(userNameLabel, 1, 0)
layout.addWidget(self.userNameLineEdit, 1, 3)
layout.addWidget(userPasswordLabel, 2, 0)
layout.addWidget(self.userPasswordLineEdit, 2, 3)
layout.addWidget(rememberPasswordCheckBox, 3, 3, 3, 4)
self.setLayout(layout)
# overwritten methods
def initializePage(self):
"""
inits wizard page
"""
provider = self.field('provider_domain')
self.setSubTitle(
"Register a new user with provider %s." %
provider)
self.validationMsg.setText('')
def validatePage(self):
"""
validation
we initialize the srp protocol register
and try to register user. if error
returned we write validation error msg
above the form.
"""
# the slot for this signal is not doing
# what's expected. Investigate why,
# right now we're not giving any feedback
# to the user re. what's going on. The only
# thing I can see as a workaround is setting
# a low timeout.
self.setSigningUpStatus.emit()
username = self.userNameLineEdit.text()
password = self.userPasswordLineEdit.text()
# XXX TODO -- remove debug info
# XXX get from provider info
# XXX enforce https
# and pass a verify value
signup = LeapSRPRegister(
schema="http",
provider="springbok",
# debug -----
#provider="localhost",
#register_path="timeout",
#port=8000
)
try:
ok, req = signup.register_user(username, password)
except socket.timeout:
self.set_status_timeout()
return False
except requests.exceptions.ConnectionError as exc:
logger.error(exc)
self.set_status_connerror()
return False
if ok:
return True
# something went wrong.
# not registered, let's catch what.
# get timeout
# ...
if req.status_code == 500:
self.set_status_server_500()
return False
validation_msgs = json.loads(req.content)
logger.debug('validation errors: %s' % validation_msgs)
errors = validation_msgs.get('errors', None)
if errors and errors.get('login', None):
# XXX this sometimes catch the blank username
# but we're not allowing that (soon)
self.set_status_invalid_username()
else:
self.set_status_unknown_error()
return False
def nextId(self):
wizard = self.wizard()
if not wizard:
return
return wizard.get_page_index('connecting')
class GlobalEIPSettings(QtGui.QWizardPage):
"""
not in use right now
"""
def __init__(self, parent=None):
super(GlobalEIPSettings, self).__init__(parent)
class ConnectingPage(QtGui.QWizardPage):
def __init__(self, parent=None):
super(ConnectingPage, self).__init__(parent)
self.setTitle("Connecting")
self.setSubTitle('Connecting to provider.')
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
class LastPage(QtGui.QWizardPage):
def __init__(self, parent=None):
super(LastPage, self).__init__(parent)
self.setTitle("Ready to go!")
self.setPixmap(
QtGui.QWizard.LogoPixmap,
QtGui.QPixmap(APP_LOGO))
#self.setPixmap(
#QtGui.QWizard.WatermarkPixmap,
#QtGui.QPixmap(':/images/watermark2.png'))
self.label = QtGui.QLabel()
self.label.setWordWrap(True)
layout = QtGui.QVBoxLayout()
layout.addWidget(self.label)
self.setLayout(layout)
def initializePage(self):
finishText = self.wizard().buttonText(
QtGui.QWizard.FinishButton)
finishText = finishText.replace('&', '')
self.label.setText(
"Click '%s' to end the wizard and start "
"encrypting your connection." % finishText)
if __name__ == '__main__':
# standalone test
import sys
import logging
logging.basicConfig()
logger = logging.getLogger()
logger.setLevel(logging.DEBUG)
app = QtGui.QApplication(sys.argv)
wizard = FirstRunWizard(providers=('springbok',))
wizard.show()
sys.exit(app.exec_())