src/command/base_remote_command.cpp

/*
 * Copyright (c) 2022 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#include "base_remote_command.h"

#include "accesstoken_log.h"
#include "data_validator.h"

namespace OHOS {
namespace Security {
namespace AccessToken {
namespace {
static constexpr OHOS::HiviewDFX::HiLogLabel LABEL = {LOG_CORE, SECURITY_DOMAIN_ACCESSTOKEN, "BaseRemoteCommand"};
}

void BaseRemoteCommand::FromRemoteProtocolJson(const nlohmann::json& jsonObject)
{
    if (jsonObject.find("commandName") != jsonObject.end() && jsonObject.at("commandName").is_string()) {
        remoteProtocol_.commandName = jsonObject.at("commandName").get<std::string>();
    }
    if (jsonObject.find("uniqueId") != jsonObject.end() && jsonObject.at("uniqueId").is_string()) {
        remoteProtocol_.uniqueId = jsonObject.at("uniqueId").get<std::string>();
    }
    if (jsonObject.find("requestVersion") != jsonObject.end() && jsonObject.at("requestVersion").is_number()) {
        remoteProtocol_.requestVersion = jsonObject.at("requestVersion").get<int32_t>();
    }
    if (jsonObject.find("srcDeviceId") != jsonObject.end() && jsonObject.at("srcDeviceId").is_string()) {
        remoteProtocol_.srcDeviceId = jsonObject.at("srcDeviceId").get<std::string>();
    }
    if (jsonObject.find("srcDeviceLevel") != jsonObject.end() && jsonObject.at("srcDeviceLevel").is_string()) {
        remoteProtocol_.srcDeviceLevel = jsonObject.at("srcDeviceLevel").get<std::string>();
    }
    if (jsonObject.find("dstDeviceId") != jsonObject.end() && jsonObject.at("dstDeviceId").is_string()) {
        remoteProtocol_.dstDeviceId = jsonObject.at("dstDeviceId").get<std::string>();
    }
    if (jsonObject.find("dstDeviceLevel") != jsonObject.end() && jsonObject.at("dstDeviceLevel").is_string()) {
        remoteProtocol_.dstDeviceLevel = jsonObject.at("dstDeviceLevel").get<std::string>();
    }
    if (jsonObject.find("statusCode") != jsonObject.end() && jsonObject.at("statusCode").is_number()) {
        remoteProtocol_.statusCode = jsonObject.at("statusCode").get<int32_t>();
    }
    if (jsonObject.find("message") != jsonObject.end() && jsonObject.at("message").is_string()) {
        remoteProtocol_.message = jsonObject.at("message").get<std::string>();
    }
    if (jsonObject.find("responseVersion") != jsonObject.end() && jsonObject.at("responseVersion").is_number()) {
        remoteProtocol_.responseVersion = jsonObject.at("responseVersion").get<int32_t>();
    }
    if (jsonObject.find("responseDeviceId") != jsonObject.end() && jsonObject.at("responseDeviceId").is_string()) {
        remoteProtocol_.responseDeviceId = jsonObject.at("responseDeviceId").get<std::string>();
    }
}

nlohmann::json BaseRemoteCommand::ToRemoteProtocolJson()
{
    nlohmann::json j;
    j["commandName"] = remoteProtocol_.commandName;
    j["uniqueId"] = remoteProtocol_.uniqueId;
    j["requestVersion"] = remoteProtocol_.requestVersion;
    j["srcDeviceId"] = remoteProtocol_.srcDeviceId;
    j["srcDeviceLevel"] = remoteProtocol_.srcDeviceLevel;
    j["dstDeviceId"] = remoteProtocol_.dstDeviceId;
    j["dstDeviceLevel"] = remoteProtocol_.dstDeviceLevel;
    j["statusCode"] = remoteProtocol_.statusCode;
    j["message"] = remoteProtocol_.message;
    j["responseVersion"] = remoteProtocol_.responseVersion;
    j["responseDeviceId"] = remoteProtocol_.responseDeviceId;
    return j;
}

nlohmann::json BaseRemoteCommand::ToNativeTokenInfoJson(const NativeTokenInfoForSync& tokenInfo)
{
    nlohmann::json permStatesJson;
    for (const auto& permState : tokenInfo.permStateList) {
        nlohmann::json permStateJson;
        ToPermStateJson(permStateJson, permState);
        permStatesJson.emplace_back(permStateJson);
    }

    nlohmann::json DcapsJson = nlohmann::json(tokenInfo.baseInfo.dcap);
    nlohmann::json NativeAclsJson = nlohmann::json(tokenInfo.baseInfo.nativeAcls);
    nlohmann::json nativeTokenJson = nlohmann::json {
        {"processName", tokenInfo.baseInfo.processName},
        {"apl", tokenInfo.baseInfo.apl},
        {"version", tokenInfo.baseInfo.ver},
        {"tokenId", tokenInfo.baseInfo.tokenID},
        {"tokenAttr", tokenInfo.baseInfo.tokenAttr},
        {"dcaps", DcapsJson},
        {"nativeAcls", NativeAclsJson},
        {"permState", permStatesJson},
    };
    return nativeTokenJson;
}

void BaseRemoteCommand::ToPermStateJson(nlohmann::json& permStateJson, const PermissionStateFull& state)
{
    if (state.resDeviceID.size() != state.grantStatus.size() || state.resDeviceID.size() != state.grantFlags.size()) {
        ACCESSTOKEN_LOG_DEBUG(LABEL, "state grant config size is invalid");
        return;
    }
    nlohmann::json permConfigsJson;
    uint32_t size = state.resDeviceID.size();
    for (uint32_t i = 0; i < size; i++) {
        nlohmann::json permConfigJson = nlohmann::json {
            {"resDeviceID", state.resDeviceID[i]},
            {"grantStatus", state.grantStatus[i]},
            {"grantFlags", state.grantFlags[i]},
        };
        permConfigsJson.emplace_back(permConfigJson);
    }

    permStateJson["permissionName"] = state.permissionName;
    permStateJson["isGeneral"] = state.isGeneral;
    permStateJson["grantConfig"] = permConfigsJson;
}

nlohmann::json BaseRemoteCommand::ToHapTokenInfosJson(const HapTokenInfoForSync& tokenInfo)
{
    nlohmann::json permStatesJson;
    for (const auto& permState : tokenInfo.permStateList) {
        nlohmann::json permStateJson;
        ToPermStateJson(permStateJson, permState);
        permStatesJson.emplace_back(permStateJson);
    }

    nlohmann::json hapTokensJson = nlohmann::json {
        {"version", tokenInfo.baseInfo.ver},
        {"tokenID", tokenInfo.baseInfo.tokenID},
        {"tokenAttr", tokenInfo.baseInfo.tokenAttr},
        {"userID", tokenInfo.baseInfo.userID},
        {"bundleName", tokenInfo.baseInfo.bundleName},
        {"instIndex", tokenInfo.baseInfo.instIndex},
        {"dlpType", tokenInfo.baseInfo.dlpType},
        {"appID", tokenInfo.baseInfo.appID},
        {"deviceID", tokenInfo.baseInfo.deviceID},
        {"apl", tokenInfo.baseInfo.apl},
        {"permState", permStatesJson}
    };
    return hapTokensJson;
}

void BaseRemoteCommand::FromHapTokenBasicInfoJson(const nlohmann::json& hapTokenJson,
    HapTokenInfo& hapTokenBasicInfo)
{
    if (hapTokenJson.find("version") != hapTokenJson.end() && hapTokenJson.at("version").is_number()) {
        hapTokenJson.at("version").get_to(hapTokenBasicInfo.ver);
    }
    if (hapTokenJson.find("tokenID") != hapTokenJson.end() && hapTokenJson.at("tokenID").is_number()) {
        hapTokenJson.at("tokenID").get_to(hapTokenBasicInfo.tokenID);
    }
    if (hapTokenJson.find("tokenAttr") != hapTokenJson.end() && hapTokenJson.at("tokenAttr").is_number()) {
        hapTokenJson.at("tokenAttr").get_to(hapTokenBasicInfo.tokenAttr);
    }
    if (hapTokenJson.find("userID") != hapTokenJson.end() && hapTokenJson.at("userID").is_number()) {
        hapTokenJson.at("userID").get_to(hapTokenBasicInfo.userID);
    }
    if (hapTokenJson.find("bundleName") != hapTokenJson.end() && hapTokenJson.at("bundleName").is_string()) {
        hapTokenJson.at("bundleName").get_to(hapTokenBasicInfo.bundleName);
    }
    if (hapTokenJson.find("instIndex") != hapTokenJson.end() && hapTokenJson.at("instIndex").is_number()) {
        hapTokenJson.at("instIndex").get_to(hapTokenBasicInfo.instIndex);
    }
    if (hapTokenJson.find("dlpType") != hapTokenJson.end() && hapTokenJson.at("dlpType").is_number()) {
        hapTokenJson.at("dlpType").get_to(hapTokenBasicInfo.dlpType);
    }
    if (hapTokenJson.find("appID") != hapTokenJson.end() && hapTokenJson.at("appID").is_string()) {
        hapTokenJson.at("appID").get_to(hapTokenBasicInfo.appID);
    }
    if (hapTokenJson.find("deviceID") != hapTokenJson.end() && hapTokenJson.at("deviceID").is_string()) {
        hapTokenJson.at("deviceID").get_to(hapTokenBasicInfo.deviceID);
    }
    if (hapTokenJson.find("apl") != hapTokenJson.end() && hapTokenJson.at("apl").is_number()) {
        int apl = hapTokenJson.at("apl").get<int>();
        if (DataValidator::IsAplNumValid(apl)) {
            hapTokenBasicInfo.apl = static_cast<ATokenAplEnum>(apl);
        }
    }
}

void BaseRemoteCommand::FromPermStateListJson(const nlohmann::json& hapTokenJson,
    std::vector<PermissionStateFull>& permStateList)
{
    if (hapTokenJson.find("permState") != hapTokenJson.end()
        && hapTokenJson.at("permState").is_array()
        && !hapTokenJson.at("permState").empty()) {
        nlohmann::json permissionsJson = hapTokenJson.at("permState").get<nlohmann::json>();
        for (const auto& permissionJson : permissionsJson) {
            PermissionStateFull permission;
            if (permissionJson.find("permissionName") == permissionJson.end() ||
                !permissionJson.at("permissionName").is_string() ||
                permissionJson.find("isGeneral") == permissionJson.end() ||
                !permissionJson.at("isGeneral").is_boolean() ||
                permissionJson.find("grantConfig") == permissionJson.end() ||
                !permissionJson.at("grantConfig").is_array() ||
                permissionJson.at("grantConfig").empty()) {
                continue;
            }
            permissionJson.at("permissionName").get_to(permission.permissionName);
            permissionJson.at("isGeneral").get_to(permission.isGeneral);
            nlohmann::json grantConfigsJson = permissionJson.at("grantConfig").get<nlohmann::json>();
            for (const auto& grantConfigJson :grantConfigsJson) {
                if (grantConfigJson.find("resDeviceID") == grantConfigJson.end() ||
                    !grantConfigJson.at("resDeviceID").is_string() ||
                    grantConfigJson.find("grantStatus") == grantConfigJson.end() ||
                    !grantConfigJson.at("grantStatus").is_number() ||
                    grantConfigJson.find("grantFlags") == grantConfigJson.end() ||
                    !grantConfigJson.at("grantFlags").is_number()) {
                    continue;
                }
                std::string deviceID;
                grantConfigJson.at("resDeviceID").get_to(deviceID);
                int grantStatus;
                grantConfigJson.at("grantStatus").get_to(grantStatus);
                int grantFlags;
                grantConfigJson.at("grantFlags").get_to(grantFlags);
                permission.resDeviceID.emplace_back(deviceID);
                permission.grantStatus.emplace_back(grantStatus);
                permission.grantFlags.emplace_back(grantFlags);
            }
            permStateList.emplace_back(permission);
        }
    }
}

void BaseRemoteCommand::FromHapTokenInfoJson(const nlohmann::json& hapTokenJson,
    HapTokenInfoForSync& hapTokenInfo)
{
    FromHapTokenBasicInfoJson(hapTokenJson, hapTokenInfo.baseInfo);
    if (hapTokenInfo.baseInfo.tokenID == 0) {
        ACCESSTOKEN_LOG_ERROR(LABEL, "Hap token basic info is error.");
        return;
    }
    FromPermStateListJson(hapTokenJson, hapTokenInfo.permStateList);
}

void BaseRemoteCommand::FromNativeTokenInfoJson(const nlohmann::json& nativeTokenJson,
    NativeTokenInfoForSync& nativeTokenInfo)
{
    if (nativeTokenJson.find("processName") != nativeTokenJson.end() && nativeTokenJson.at("processName").is_string()) {
        nativeTokenInfo.baseInfo.processName = nativeTokenJson.at("processName").get<std::string>();
    }
    if (nativeTokenJson.find("apl") != nativeTokenJson.end() && nativeTokenJson.at("apl").is_number()) {
        int apl = nativeTokenJson.at("apl").get<int>();
        if (DataValidator::IsAplNumValid(apl)) {
            nativeTokenInfo.baseInfo.apl = static_cast<ATokenAplEnum>(apl);
        }
    }
    if (nativeTokenJson.find("version") != nativeTokenJson.end() && nativeTokenJson.at("version").is_number()) {
        nativeTokenInfo.baseInfo.ver = (unsigned)nativeTokenJson.at("version").get<int32_t>();
    }
    if (nativeTokenJson.find("tokenId") != nativeTokenJson.end() && nativeTokenJson.at("tokenId").is_number()) {
        nativeTokenInfo.baseInfo.tokenID = (unsigned)nativeTokenJson.at("tokenId").get<int32_t>();
    }
    if (nativeTokenJson.find("tokenAttr") != nativeTokenJson.end() && nativeTokenJson.at("tokenAttr").is_number()) {
        nativeTokenInfo.baseInfo.tokenAttr = (unsigned)nativeTokenJson.at("tokenAttr").get<int32_t>();
    }
    if (nativeTokenJson.find("dcaps") != nativeTokenJson.end() && nativeTokenJson.at("dcaps").is_array()
        && !nativeTokenJson.at("dcaps").empty() && (nativeTokenJson.at("dcaps"))[0].is_string()) {
        nativeTokenInfo.baseInfo.dcap = nativeTokenJson.at("dcaps").get<std::vector<std::string>>();
    }
    if (nativeTokenJson.find("nativeAcls") != nativeTokenJson.end() && nativeTokenJson.at("nativeAcls").is_array()
        && !nativeTokenJson.at("nativeAcls").empty() && (nativeTokenJson.at("nativeAcls"))[0].is_string()) {
        nativeTokenInfo.baseInfo.nativeAcls = nativeTokenJson.at("nativeAcls").get<std::vector<std::string>>();
    }

    FromPermStateListJson(nativeTokenJson, nativeTokenInfo.permStateList);
}
}  // namespace AccessToken
}  // namespace Security
}  // namespace OHOS