| /_____||_| |_| |_| |
| |
\---------------------------------------------------------------------*/
-/** \file zypp/media/CredentialManager.h
+/** \file zypp/media/CredentialManager.cc
*
*/
#include <iostream>
+#include <fstream>
+#include "zypp/ZConfig.h"
#include "zypp/base/Function.h"
#include "zypp/base/Logger.h"
+#include "zypp/base/Easy.h"
+#include "zypp/PathInfo.h"
#include "zypp/media/CredentialFileReader.h"
#include "zypp/media/CredentialManager.h"
+#define USER_CREDENTIALS_FILE ".zypp/credentials.cat"
+
using namespace std;
//////////////////////////////////////////////////////////////////////
-namespace zypp
+namespace zypp
{ ////////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////////
namespace media
{ ////////////////////////////////////////////////////////////////////
+ //////////////////////////////////////////////////////////////////////
+ //
+ // CLASS NAME : AuthDataComparator
+ //
+ //////////////////////////////////////////////////////////////////////
+
+ bool AuthDataComparator::operator()( const AuthData_Ptr & lhs, const AuthData_Ptr & rhs ) const
+ {
+ static const url::ViewOption vopt = url::ViewOption::DEFAULTS
+ - url::ViewOption::WITH_USERNAME
+ - url::ViewOption::WITH_PASSWORD
+ - url::ViewOption::WITH_QUERY_STR;
+ // std::less semantic!
+ int cmp = lhs->url().asString(vopt).compare( rhs->url().asString(vopt) );
+ if ( ! cmp )
+ cmp = lhs->username().compare( rhs->username() );
+ return( cmp < 0 );
+ }
//////////////////////////////////////////////////////////////////////
//
- // CLASS NAME : CredManagerOptions
+ // CLASS NAME : CredManagerOptions
//
//////////////////////////////////////////////////////////////////////
CredManagerOptions::CredManagerOptions(const Pathname & rootdir)
- : globalCredFilePath(rootdir / "/etc/zypp/credentials")
+ : globalCredFilePath(rootdir / ZConfig::instance().credentialsGlobalFile())
+ , customCredFileDir(rootdir / ZConfig::instance().credentialsGlobalDir())
{
char * homedir = getenv("HOME");
if (homedir)
- userCredFilePath = rootdir / homedir / ".zypp/credentials";
+ userCredFilePath = rootdir / homedir / USER_CREDENTIALS_FILE;
}
//////////////////////////////////////////////////////////////////////
//
- // CLASS NAME : CredentialManager::Impl
+ // CLASS NAME : CredentialManager::Impl
//
struct CredentialManager::Impl
{
~Impl()
{}
-
+ void init_globalCredentials();
+ void init_userCredentials();
+
bool processCredentials(AuthData_Ptr & cred);
- AuthData_Ptr getCred(const Url & url);
+ AuthData_Ptr getCred(const Url & url) const;
+ AuthData_Ptr getCredFromFile(const Pathname & file);
+ void saveGlobalCredentials();
+ void saveUserCredentials();
+
CredManagerOptions _options;
CredentialSet _credsGlobal;
CredentialSet _credsUser;
CredentialSet _credsTmp;
+
+ bool _globalDirty;
+ bool _userDirty;
};
//////////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////////
//
- // CLASS NAME : CredentialManager::Impl
+ // CLASS NAME : CredentialManager::Impl
//
//////////////////////////////////////////////////////////////////////
CredentialManager::Impl::Impl(const CredManagerOptions & options)
: _options(options)
+ , _globalDirty(false)
+ , _userDirty(false)
{
- CredentialFileReader(
- _options.globalCredFilePath,
- bind(&Impl::processCredentials, this, _1));
+ init_globalCredentials();
+ init_userCredentials();
+ }
+
+
+ void CredentialManager::Impl::init_globalCredentials()
+ {
+ if (_options.globalCredFilePath.empty())
+ DBG << "global cred file not known";
+ else if (PathInfo(_options.globalCredFilePath).isExist())
+ {
+ /* list<Pathname> entries;
+ if (filesystem::readdir(entries, _options.globalCredFilePath, false) != 0)
+ ZYPP_THROW(Exception("failed to read directory"));
+
+ for_(it, entries.begin(), entries.end())*/
+
+ CredentialFileReader(_options.globalCredFilePath,
+ bind(&Impl::processCredentials, this, _1));
+ }
+ else
+ DBG << "global cred file does not exist";
+
_credsGlobal = _credsTmp; _credsTmp.clear();
DBG << "Got " << _credsGlobal.size() << " global records." << endl;
+ }
+
- if (!_options.userCredFilePath.empty())
+ void CredentialManager::Impl::init_userCredentials()
+ {
+ if (_options.userCredFilePath.empty())
+ DBG << "user cred file not known";
+ else if (PathInfo(_options.userCredFilePath).isExist())
{
- CredentialFileReader(
- _options.userCredFilePath,
+ /* list<Pathname> entries;
+ if (filesystem::readdir(entries, _options.userCredFilePath, false ) != 0)
+ ZYPP_THROW(Exception("failed to read directory"));
+
+ for_(it, entries.begin(), entries.end())*/
+ CredentialFileReader(_options.userCredFilePath,
bind(&Impl::processCredentials, this, _1));
- _credsUser = _credsTmp; _credsTmp.clear();
- DBG << "Got " << _credsUser.size() << " user records." << endl;
}
+ else
+ DBG << "user cred file does not exist" << endl;
+
+ _credsUser = _credsTmp; _credsTmp.clear();
+ DBG << "Got " << _credsUser.size() << " user records." << endl;
}
return true;
}
+
static AuthData_Ptr findIn(const CredentialManager::CredentialSet & set,
const Url & url,
url::ViewOption vopt)
{
+ const string & username = url.getUsername();
for(CredentialManager::CredentialIterator it = set.begin(); it != set.end(); ++it)
{
- if (url.asString(vopt) == (*it)->url().asString(vopt))
- return *it;
+ // this ignores url params - not sure if it is good or bad...
+ if (url.asString(vopt).find((*it)->url().asString(vopt)) == 0)
+ {
+ if (username.empty() || username == (*it)->username())
+ return *it;
+ }
}
-
+
return AuthData_Ptr();
}
- AuthData_Ptr CredentialManager::Impl::getCred(const Url & url)
+ AuthData_Ptr CredentialManager::Impl::getCred(const Url & url) const
{
AuthData_Ptr result;
// default url::ViewOption will take care of that.
// operator==(Url,Url) compares the whole Url
- // if the wanted URL does not contain username, ignore that, too
url::ViewOption vopt;
- if (url.getUsername().empty())
- vopt = vopt - url::ViewOption::WITH_USERNAME;
+ vopt = vopt
+ - url::ViewOption::WITH_USERNAME
+ - url::ViewOption::WITH_PASSWORD
+ - url::ViewOption::WITH_QUERY_STR;
// search in global credentials
result = findIn(_credsGlobal, url, vopt);
}
+ AuthData_Ptr CredentialManager::Impl::getCredFromFile(const Pathname & file)
+ {
+ AuthData_Ptr result;
+
+ Pathname credfile;
+ if (file.absolute())
+ // get from that file
+ credfile = file;
+ else
+ // get from /etc/zypp/credentials.d, delete the leading path
+ credfile = _options.customCredFileDir / file.basename();
+
+ CredentialFileReader(credfile, bind(&Impl::processCredentials, this, _1));
+ if (_credsTmp.empty())
+ WAR << file << " does not contain valid credentials or is not readable." << endl;
+ else
+ {
+ result = *_credsTmp.begin();
+ _credsTmp.clear();
+ }
+
+ return result;
+ }
+
+ static int save_creds_in_file(
+ const CredentialManager::CredentialSet creds,
+ const Pathname & file,
+ const mode_t mode)
+ {
+ int ret = 0;
+ filesystem::assert_dir(file.dirname());
+
+ std::ofstream fs(file.c_str());
+ if (!fs)
+ ret = 1;
+
+ for_(it, creds.begin(), creds.end())
+ {
+ (*it)->dumpAsIniOn(fs);
+ fs << endl;
+ }
+ fs.close();
+
+ filesystem::chmod(file, mode);
+
+ return ret;
+ }
+
+ void CredentialManager::Impl::saveGlobalCredentials()
+ {
+ save_creds_in_file(_credsGlobal, _options.globalCredFilePath, 0640);
+ }
+
+ void CredentialManager::Impl::saveUserCredentials()
+ {
+ save_creds_in_file(_credsUser, _options.userCredFilePath, 0600);
+ }
+
+
//////////////////////////////////////////////////////////////////////
//
- // CLASS NAME : CredentialManager
+ // CLASS NAME : CredentialManager
//
//////////////////////////////////////////////////////////////////////
: _pimpl(new Impl(opts))
{}
+
AuthData_Ptr CredentialManager::getCred(const Url & url)
- { return _pimpl->getCred(url); }
+ {
+ string credfile = url.getQueryParam("credentials");
+ if (credfile.empty())
+ return _pimpl->getCred(url);
+ return _pimpl->getCredFromFile(credfile);
+ }
+
+ AuthData_Ptr CredentialManager::getCredFromFile(const Pathname & file)
+ { return _pimpl->getCredFromFile(file); }
+
+
+ void CredentialManager::addCred(const AuthData & cred)
+ {
+ Pathname credfile = cred.url().getQueryParam("credentials");
+ if (credfile.empty())
+ //! \todo ask user where to store these creds. saving to user creds for now
+ addUserCred(cred);
+ else
+ saveInFile(cred, credfile);
+ }
+
+
+ void CredentialManager::addGlobalCred(const AuthData & cred)
+ {
+ AuthData_Ptr c_ptr;
+ c_ptr.reset(new AuthData(cred)); // FIX for child classes if needed
+ pair<CredentialIterator, bool> ret = _pimpl->_credsGlobal.insert(c_ptr);
+ if (ret.second)
+ _pimpl->_globalDirty = true;
+ else if ((*ret.first)->password() != cred.password())
+ {
+ _pimpl->_credsGlobal.erase(ret.first);
+ _pimpl->_credsGlobal.insert(c_ptr);
+ _pimpl->_globalDirty = true;
+ }
+ }
+
+
+ void CredentialManager::addUserCred(const AuthData & cred)
+ {
+ AuthData_Ptr c_ptr;
+ c_ptr.reset(new AuthData(cred)); // FIX for child classes if needed
+ pair<CredentialIterator, bool> ret = _pimpl->_credsUser.insert(c_ptr);
+ if (ret.second)
+ _pimpl->_userDirty = true;
+ else if ((*ret.first)->password() != cred.password())
+ {
+ _pimpl->_credsUser.erase(ret.first);
+ _pimpl->_credsUser.insert(c_ptr);
+ _pimpl->_userDirty = true;
+ }
+ }
+
+
+ void CredentialManager::save()
+ {
+ if (_pimpl->_globalDirty)
+ _pimpl->saveGlobalCredentials();
+ if (_pimpl->_userDirty)
+ _pimpl->saveUserCredentials();
+ _pimpl->_globalDirty = false;
+ _pimpl->_userDirty = false;
+ }
- void CredentialManager::save(const AuthData & cred, bool global)
- { global ? saveInGlobal(cred) : saveInUser(cred); }
void CredentialManager::saveInGlobal(const AuthData & cred)
{
- //! \todo
+ addGlobalCred(cred);
+ save();
}
+
void CredentialManager::saveInUser(const AuthData & cred)
{
- //! \todo
+ addUserCred(cred);
+ save();
+ }
+
+
+ void CredentialManager::saveInFile(const AuthData & cred, const Pathname & credFile)
+ {
+ AuthData_Ptr c_ptr;
+ c_ptr.reset(new AuthData(cred)); // FIX for child classes if needed
+ c_ptr->setUrl(Url()); // don't save url in custom creds file
+ CredentialManager::CredentialSet creds;
+ creds.insert(c_ptr);
+
+ int ret;
+ if (credFile.absolute())
+ ret = save_creds_in_file(creds, credFile, 0640);
+ else
+ ret = save_creds_in_file(
+ creds, _pimpl->_options.customCredFileDir / credFile, 0600);
+
+ if (!ret)
+ {
+ //! \todo figure out the reason(?), call back to user
+ ERR << "error saving the credentials" << endl;
+ }
}
- void saveIn(const AuthData &, const Pathname & credFile)
+
+ void CredentialManager::clearAll(bool global)
{
- //! \todo
+ if (global)
+ {
+ if (!filesystem::unlink(_pimpl->_options.globalCredFilePath))
+ ERR << "could not delete user credentials file "
+ << _pimpl->_options.globalCredFilePath << endl;
+ _pimpl->_credsUser.clear();
+ }
+ else
+ {
+ if (!filesystem::unlink(_pimpl->_options.userCredFilePath))
+ ERR << "could not delete global credentials file"
+ << _pimpl->_options.userCredFilePath << endl;
+ _pimpl->_credsGlobal.clear();
+ }
}
projects / platform / upstream / libzypp.git / blobdiff