summaryrefslogtreecommitdiff
path: root/src/leap/gui/firstrun/regvalidation.py
blob: e85c2ac6fb855784e7b5bdee5a696ed91cfe660a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
"""
Provider Setup Validation Page,
used in First Run Wizard
"""
# XXX This page is called regvalidation
# but it's implementing functionality in the former
# connect page.
# We should remame it to connect again, when we integrate
# the login branch of the wizard.

import logging
import json
import socket

from PyQt4 import QtGui

import requests

from leap.gui.progress import ValidationPage
from leap.util.web import get_https_domain_and_port

from leap.base import auth
from leap.gui.constants import APP_LOGO, pause_for_user

logger = logging.getLogger(__name__)


class RegisterUserValidationPage(ValidationPage):

    def __init__(self, parent=None):
        super(RegisterUserValidationPage, self).__init__(parent)
        is_signup = self.field("is_signup")
        self.is_signup = is_signup

        if is_signup:
            title = "User Creation"
            subtitle = "Registering account with provider."
        else:
            title = "Connecting..."
            # XXX uh... really?
            subtitle = "Checking connection with provider."

        self.setTitle(title)
        self.setSubTitle(subtitle)

        self.setPixmap(
            QtGui.QWizard.LogoPixmap,
            QtGui.QPixmap(APP_LOGO))

    def _do_checks(self, update_signal=None):
        """
        executes actual checks in a separate thread

        we initialize the srp protocol register
        and try to register user.
        """
        wizard = self.wizard()
        full_domain = self.field('provider_domain')
        domain, port = get_https_domain_and_port(full_domain)

        # FIXME #BUG 638 FIXME FIXME FIXME
        verify = False  # !!!!!!!!!!!!!!!!
        # FIXME #BUG 638 FIXME FIXME FIXME

        ###########################################
        # Set Credentials.
        # username and password are in different fields
        # if they were stored in log_in or sign_up pages.
        is_signup = self.is_signup

        unamek_base = 'userName'
        passwk_base = 'userPassword'
        unamek = 'login_%s' % unamek_base if not is_signup else unamek_base
        passwk = 'login_%s' % passwk_base if not is_signup else passwk_base

        username = self.field(unamek)
        password = self.field(passwk)
        credentials = username, password

        eipconfigchecker = wizard.eipconfigchecker()
        pCertChecker = wizard.providercertchecker(
            domain=full_domain)

        ###########################################
        # only if from signup
        if is_signup:
            signup = auth.LeapSRPRegister(
                schema="https",
                provider=full_domain,
                verify=verify)

        update_signal.emit("head_sentinel", 0)

        ##################################################
        # 1) register user
        ##################################################
        # only if from signup.

        if is_signup:

            step = "register"
            update_signal.emit("checking availability", 20)
            update_signal.emit("registering with provider", 40)
            logger.debug('registering user')

            try:
                ok, req = signup.register_user(
                    username, password)

            except socket.timeout:
                self.set_error(
                    step,
                    "Error connecting to provider (timeout)")
                pause_for_user()
                return False

            except requests.exceptions.ConnectionError as exc:
                logger.error(exc.message)
                self.set_error(
                    step,
                    "Error connecting to provider "
                    "(connection error)")
                # XXX we should signal a BAD step
                pause_for_user()
                update_signal.emit("connection error!", 50)
                pause_for_user()
                return False

            # XXX check for != OK instead???

            if req.status_code in (404, 500):
                self.set_error(
                    step,
                    "Error during registration (%s)" % req.status_code)
                pause_for_user()
                return False

            validation_msgs = json.loads(req.content)
            errors = validation_msgs.get('errors', None)
            logger.debug('validation errors: %s' % validation_msgs)

            if errors and errors.get('login', None):
                # XXX this sometimes catch the blank username
                # but we're not allowing that (soon)
                self.set_error(
                    step,
                    'Username not available.')
                pause_for_user()
                return False

            pause_for_user()

        ##################################################
        # 2) fetching eip service config
        ##################################################

        step = "fetch_eipconf"
        fetching_eipconf_msg = "Fetching eip service configuration"
        update_signal.emit(fetching_eipconf_msg, 60)
        try:
            eipconfigchecker.fetch_eip_service_config(
                domain=full_domain)

        # XXX get specific exception
        except:
            self.set_error(
                step,
                'Could not download eip config.')
            pause_for_user()
            return False
        pause_for_user()

        ##################################################
        # 3) getting client certificate
        ##################################################
        # XXX maybe only do this if we come from signup
        step = "fetch_eipcert"
        fetching_clientcert_msg = "Fetching eip certificate"
        update_signal.emit(fetching_clientcert_msg, 80)

        try:
            pCertChecker.download_new_client_cert(
                credentials=credentials,
                verify=verify)

        except auth.SRPAuthenticationError as exc:
            self.set_error(
                step,
                "Authentication error: %s" % exc.message)
            return False

        pause_for_user()

        ################
        # end !
        ################

        update_signal.emit("end_sentinel", 100)
        pause_for_user()

        # here we go! :)
        self.run_eip_checks_for_provider_and_connect(domain)

    def run_eip_checks_for_provider_and_connect(self, domain):
        wizard = self.wizard()
        conductor = wizard.conductor
        start_eip_signal = getattr(
            wizard,
            'start_eipconnection_signal', None)

        if conductor:
            conductor.set_provider_domain(domain)
            conductor.run_checks()
            self.conductor = conductor
            errors = self.eip_error_check()
            if not errors and start_eip_signal:
                start_eip_signal.emit()

        else:
            logger.warning(
                "No conductor found. This means that "
                "probably the wizard has been launched "
                "in an stand-alone way.")

    def eip_error_check(self):
        """
        a version of the main app error checker,
        but integrated within the connecting page of the wizard.
        consumes the conductor error queue.
        pops errors, and add those to the wizard page
        """
        logger.debug('eip error check from connecting page')
        errq = self.conductor.error_queue
        # XXX missing!

    def _do_validation(self):
        """
        called after _do_checks has finished
        (connected to checker thread finished signal)
        """
        prevpage = "signup" if self.is_signup else "login"

        wizard = self.wizard()
        if self.errors:
            logger.debug('going back with errors')
            logger.error(self.errors)
            name, first_error = self.pop_first_error()
            wizard.set_validation_error(
                prevpage,
                first_error)
            self.go_back()
        else:
            logger.debug('going next')
            # check if this "next" interferes
            # with the eip signal.
            self.go_next()

    def nextId(self):
        wizard = self.wizard()
        if not wizard:
            return
        return wizard.get_page_index('lastpage')