summaryrefslogtreecommitdiff
path: root/src/leap/bitmask/mail/imap/service/__init__.py
blob: 880ff238a601c02371705cb8f045da51ffb6305d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
# -*- coding: utf-8 -*-
# __init__.py
# Copyright (C) 2013-2015 LEAP
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
"""
IMAP Service Initialization.
"""
import os

from collections import defaultdict

from twisted.cred.portal import Portal, IRealm
from twisted.internet import defer
from twisted.internet import reactor
from twisted.internet.error import CannotListenError
from twisted.internet.protocol import ServerFactory
from twisted.logger import Logger
from twisted.mail.imap4 import IAccount
from zope.interface import implementer

from leap.common.events import emit_async, catalog
from leap.bitmask.mail.cred import LocalSoledadTokenChecker
from leap.bitmask.mail.imap.account import IMAPAccount
from leap.bitmask.mail.imap.server import LEAPIMAPServer

# TODO: leave only an implementor of IService in here

logger = Logger()

DO_MANHOLE = os.environ.get("LEAP_MAIL_MANHOLE", None)
if DO_MANHOLE:
    from leap.bitmask.mail.imap.service import manhole

# The default port in which imap service will run

IMAP_PORT = 1984

#
# Credentials Handling
#


@implementer(IRealm)
class LocalSoledadIMAPRealm(object):

    _encoding = 'utf-8'

    def __init__(self, soledad_sessions):
        """
        :param soledad_sessions: a dict-like object, containing instances
                                 of a Store (soledad instances), indexed by
                                 userid.
        """
        self._soledad_sessions = soledad_sessions

    def requestAvatar(self, avatarId, mind, *interfaces):
        if isinstance(avatarId, str):
            avatarId = avatarId.decode(self._encoding)

        def gotSoledad(soledad):
            for iface in interfaces:
                if iface is IAccount:
                    avatar = IMAPAccount(soledad, avatarId)
                    return (IAccount, avatar,
                            getattr(avatar, 'logout', lambda: None))
            raise NotImplementedError(self, interfaces)

        return self.lookupSoledadInstance(avatarId).addCallback(gotSoledad)

    def lookupSoledadInstance(self, userid):
        soledad = self._soledad_sessions[userid]
        # XXX this should return the instance after whenReady callback
        return defer.succeed(soledad)


class IMAPTokenChecker(LocalSoledadTokenChecker):
    """A credentials checker that will lookup a token for the IMAP service.
    For now it will be using the same identifier than SMTPTokenChecker"""

    service = 'mail_auth'


class LocalSoledadIMAPServer(LEAPIMAPServer):

    """
    An IMAP Server that authenticates against a LocalSoledad store.
    """

    def __init__(self, soledad_sessions, *args, **kw):

        LEAPIMAPServer.__init__(self, *args, **kw)

        realm = LocalSoledadIMAPRealm(soledad_sessions)
        portal = Portal(realm)
        checker = IMAPTokenChecker(soledad_sessions)
        self.checker = checker
        self.portal = portal
        portal.registerChecker(checker)


class LeapIMAPFactory(ServerFactory):

    """
    Factory for a IMAP4 server with soledad remote sync and gpg-decryption
    capabilities.
    """

    protocol = LocalSoledadIMAPServer

    def __init__(self, soledad_sessions):
        """
        Initializes the server factory.

        :param soledad_sessions: a dict-like object, containing instances
                                 of a Store (soledad instances), indexed by
                                 userid.
        """
        self._soledad_sessions = soledad_sessions
        self._connections = defaultdict()

    def buildProtocol(self, addr):
        """
        Return a protocol suitable for the job.

        :param addr: remote ip address
        :type addr:  str
        """
        # TODO should reject anything from addr != localhost,
        # just in case.
        logger.debug("Building protocol for connection %s" % addr)
        imapProtocol = self.protocol(self._soledad_sessions)
        self._connections[addr] = imapProtocol
        return imapProtocol

    def stopFactory(self):
        # say bye!
        for conn, proto in self._connections.items():
            logger.debug("Closing connections for %s" % conn)
            proto.close_server_connection()

    def doStop(self):
        """
        Stops imap service (fetcher, factory and port).
        """
        return ServerFactory.doStop(self)


def run_service(soledad_sessions, port=IMAP_PORT, factory=None):
    """
    Main entry point to run the service from the client.

    :param soledad_sessions: a dict-like object, containing instances
                             of a Store (soledad instances), indexed by userid.

    :returns: the port as returned by the reactor when starts listening, and
              the factory for the protocol.
    :rtype: tuple
    """
    if not factory:
        factory = LeapIMAPFactory(soledad_sessions)

    try:
        interface = "localhost"
        # don't bind just to localhost if we are running on docker since we
        # won't be able to access imap from the host
        if os.environ.get("LEAP_DOCKERIZED"):
            interface = ''

        # TODO use Endpoints !!!
        tport = reactor.listenTCP(port, factory,
                                  interface=interface)
    except CannotListenError:
        logger.error("IMAP Service failed to start: "
                     "cannot listen in port %s" % (port,))
    except Exception as exc:
        logger.error("Error launching IMAP service: %r" % (exc,))
    else:
        # all good.

        if DO_MANHOLE:
            # TODO get pass from env var.too.
            manhole_factory = manhole.getManholeFactory(
                {'f': factory,
                 'gm': factory.theAccount.getMailbox},
                "boss", "leap")
            # TODO  use Endpoints !!!
            reactor.listenTCP(manhole.MANHOLE_PORT, manhole_factory,
                              interface="127.0.0.1")
        logger.debug("IMAP4 Server is RUNNING in port  %s" % (port,))
        emit_async(catalog.IMAP_SERVICE_STARTED, str(port))

        # FIXME -- change service signature
        return tport, factory

    # not ok, signal error.
    emit_async(catalog.IMAP_SERVICE_FAILED_TO_START, str(port))