1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
# -*- coding: utf-8 -*-
# _secrets/storage.py
# Copyright (C) 2016 LEAP
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
import json
import six.moves.urllib.parse as urlparse
from hashlib import sha256
from leap.soledad.common import SHARED_DB_NAME
from leap.soledad.common.log import getLogger
from leap.soledad.client.shared_db import SoledadSharedDatabase
from leap.soledad.client._document import Document
from leap.soledad.client._secrets.util import emit, UserDataMixin
logger = getLogger(__name__)
class SecretsStorage(UserDataMixin):
def __init__(self, soledad):
self._soledad = soledad
self._shared_db = self._soledad.shared_db or self._init_shared_db()
self.__remote_doc = None
@property
def _creds(self):
uuid = self._soledad.uuid
token = self._soledad.token
return {'token': {'uuid': uuid, 'token': token}}
#
# local storage
#
def load_local(self):
path = self._soledad.secrets_path
logger.info("trying to load secrets from disk: %s" % path)
try:
with open(path, 'r') as f:
encrypted = json.loads(f.read())
logger.info("secrets loaded successfully from disk")
return encrypted
except IOError:
logger.warn("secrets not found in disk")
return None
def save_local(self, encrypted):
path = self._soledad.secrets_path
json_data = json.dumps(encrypted)
with open(path, 'w') as f:
f.write(json_data)
#
# remote storage
#
def _init_shared_db(self):
if not self._soledad.server_url:
return None
url = urlparse.urljoin(self._soledad.server_url, SHARED_DB_NAME)
creds = self._creds
db = SoledadSharedDatabase.open_database(url, creds)
return db
def _remote_doc_id(self):
passphrase = self._soledad.passphrase.encode('utf8')
uuid = self._soledad.uuid
text = '%s%s' % (passphrase, uuid)
digest = sha256(text).hexdigest()
return digest
@property
def _remote_doc(self):
if not self.__remote_doc and self._shared_db:
doc = self._get_remote_doc()
self.__remote_doc = doc
return self.__remote_doc
@emit('downloading')
def _get_remote_doc(self):
logger.info('trying to load secrets from server...')
doc = self._shared_db.get_doc(self._remote_doc_id())
if doc:
logger.info('secrets loaded successfully from server')
else:
logger.warn('secrets not found in server')
return doc
def load_remote(self):
doc = self._remote_doc
if not doc:
return None
encrypted = doc.content
return encrypted
@emit('uploading')
def save_remote(self, encrypted):
doc = self._remote_doc
if not doc:
doc = Document(doc_id=self._remote_doc_id())
doc.content = encrypted
db = self._shared_db
if not db:
logger.warn('no shared db found')
return
db.put_doc(doc)
|
