1 /*
2 * Copyright (c) 2022-2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "js_uri_perm_mgr.h"
17
18 #include "ability_business_error.h"
19 #include "ability_manager_errors.h"
20 #include "ability_runtime_error_util.h"
21 #include "hilog_tag_wrapper.h"
22 #include "ipc_skeleton.h"
23 #include "js_error_utils.h"
24 #include "napi_common_util.h"
25 #include "parameters.h"
26 #include "tokenid_kit.h"
27 #include "uri.h"
28 #include "uri_permission_manager_client.h"
29
30 namespace OHOS {
31 namespace AbilityRuntime {
32 namespace {
33 constexpr int32_t ERR_OK = 0;
34 constexpr int32_t argCountFour = 4;
35 constexpr int32_t argCountThree = 3;
36 constexpr int32_t argCountTwo = 2;
37
38 struct UriPermissionParam {
39 std::string uriStr;
40 int32_t flag = 0;
41 std::string bundleName;
42 int32_t appIndex = 0;
43 bool hasAppIndex = false;
44 };
45
ResolveGrantUriPermissionTask(napi_env env,NapiAsyncTask & task,int32_t errCode)46 static void ResolveGrantUriPermissionTask(napi_env env, NapiAsyncTask &task, int32_t errCode)
47 {
48 TAG_LOGI(AAFwkTag::URIPERMMGR, "ResolveGrantUriPermissionTask");
49 if (errCode == ERR_OK) {
50 task.ResolveWithNoError(env, CreateJsNumber(env, 0));
51 return;
52 }
53 if (errCode == AAFwk::CHECK_PERMISSION_FAILED || errCode == AAFwk::ERR_CODE_INVALID_URI_FLAG ||
54 errCode == AAFwk::ERR_CODE_INVALID_URI_TYPE || errCode == AAFwk::ERR_CODE_GRANT_URI_PERMISSION) {
55 task.Reject(env, CreateJsErrorByNativeErr(env, errCode, "ohos.permission.PROXY_AUTHORIZATION_URI"));
56 return;
57 }
58 task.Reject(env, CreateJsError(env, AbilityErrorCode::ERROR_CODE_INNER));
59 return;
60 }
61
ResolveGrantUriPermissionWithAppIndexTask(napi_env env,NapiAsyncTask & task,int32_t errCode)62 static void ResolveGrantUriPermissionWithAppIndexTask(napi_env env, NapiAsyncTask &task, int32_t errCode)
63 {
64 TAG_LOGI(AAFwkTag::URIPERMMGR, "ResolveGrantUriPermissionWithAppIndexTask");
65 if (errCode == ERR_OK) {
66 task.ResolveWithNoError(env, CreateJsUndefined(env));
67 return;
68 }
69 if (errCode == AAFwk::CHECK_PERMISSION_FAILED || errCode == AAFwk::ERR_CODE_INVALID_URI_FLAG ||
70 errCode == AAFwk::ERR_CODE_INVALID_URI_TYPE || errCode == AAFwk::ERR_CODE_GRANT_URI_PERMISSION ||
71 errCode == AAFwk::ERR_GET_TARGET_BUNDLE_INFO_FAILED) {
72 task.Reject(env, CreateJsErrorByNativeErr(env, errCode, "ohos.permission.PROXY_AUTHORIZATION_URI"));
73 return;
74 }
75 task.Reject(env, CreateJsError(env, AbilityErrorCode::ERROR_CODE_INNER));
76 return;
77 }
78
ResolveRevokeUriPermissionTask(napi_env env,NapiAsyncTask & task,int32_t errCode)79 static void ResolveRevokeUriPermissionTask(napi_env env, NapiAsyncTask &task, int32_t errCode)
80 {
81 TAG_LOGI(AAFwkTag::URIPERMMGR, "ResolveRevokeUriPermissionTask");
82 if (errCode == ERR_OK) {
83 task.ResolveWithNoError(env, CreateJsUndefined(env));
84 return;
85 }
86 if (errCode == AAFwk::ERR_CODE_INVALID_URI_TYPE || errCode == AAFwk::ERR_CODE_GRANT_URI_PERMISSION) {
87 task.Reject(env, CreateJsErrorByNativeErr(env, errCode));
88 return;
89 }
90 task.Reject(env, CreateJsError(env, AbilityErrorCode::ERROR_CODE_INNER));
91 return;
92 }
93
ResolveRevokeUriPermissionWithAppIndexTask(napi_env env,NapiAsyncTask & task,int32_t errCode)94 static void ResolveRevokeUriPermissionWithAppIndexTask(napi_env env, NapiAsyncTask &task, int32_t errCode)
95 {
96 TAG_LOGI(AAFwkTag::URIPERMMGR, "ResolveRevokeUriPermissionWithAppIndexTask");
97 if (errCode == ERR_OK) {
98 task.ResolveWithNoError(env, CreateJsUndefined(env));
99 return;
100 }
101 if (errCode == AAFwk::ERR_CODE_INVALID_URI_TYPE || errCode == AAFwk::ERR_CODE_GRANT_URI_PERMISSION ||
102 errCode == AAFwk::ERR_GET_TARGET_BUNDLE_INFO_FAILED) {
103 task.Reject(env, CreateJsErrorByNativeErr(env, errCode));
104 return;
105 }
106 task.Reject(env, CreateJsError(env, AbilityErrorCode::ERROR_CODE_INNER));
107 return;
108 }
109
ParseGrantUriPermissionParams(napi_env env,NapiCallbackInfo & info,UriPermissionParam & param)110 static bool ParseGrantUriPermissionParams(napi_env env, NapiCallbackInfo &info, UriPermissionParam ¶m)
111 {
112 // only support 3 or 4 params
113 if (info.argc != argCountThree && info.argc != argCountFour) {
114 TAG_LOGE(AAFwkTag::URIPERMMGR, "param number invalid");
115 ThrowTooFewParametersError(env);
116 return false;
117 }
118 if (!OHOS::AppExecFwk::UnwrapStringFromJS2(env, info.argv[0], param.uriStr)) {
119 TAG_LOGE(AAFwkTag::URIPERMMGR, "invalid uriStr");
120 ThrowInvalidParamError(env, "Parse param uri failed, uri must be string.");
121 return false;
122 }
123 if (!OHOS::AppExecFwk::UnwrapInt32FromJS2(env, info.argv[1], param.flag)) {
124 TAG_LOGE(AAFwkTag::URIPERMMGR, "flag invalid.");
125 ThrowInvalidParamError(env, "Parse param flag failed, flag must be number.");
126 return false;
127 }
128 if (!OHOS::AppExecFwk::UnwrapStringFromJS2(env, info.argv[argCountTwo], param.bundleName)) {
129 TAG_LOGE(AAFwkTag::URIPERMMGR, "targetBundleName invalid");
130 ThrowInvalidParamError(env, "Parse param targetBundleName failed, targetBundleName must be string.");
131 return false;
132 }
133 if (info.argc == argCountFour) {
134 if (CheckTypeForNapiValue(env, info.argv[argCountThree], napi_function)) {
135 return true;
136 }
137 if (!CheckTypeForNapiValue(env, info.argv[argCountThree], napi_number) ||
138 !OHOS::AppExecFwk::UnwrapInt32FromJS2(env, info.argv[argCountThree], param.appIndex)) {
139 TAG_LOGE(AAFwkTag::URIPERMMGR, "appIndex invalid");
140 ThrowInvalidParamError(env, "Parse param appCloneIndex failed, appCloneIndex must be number.");
141 return false;
142 }
143 if (param.appIndex < 0) {
144 ThrowInvalidParamError(env, "Param appCloneIndex is invalid, the value less than 0.");
145 return false;
146 }
147 param.hasAppIndex = true;
148 }
149 return true;
150 }
151
ParseRevokeUriPermissionParams(napi_env env,NapiCallbackInfo & info,UriPermissionParam & param)152 static bool ParseRevokeUriPermissionParams(napi_env env, NapiCallbackInfo &info, UriPermissionParam ¶m)
153 {
154 // only support 2 or 3 params
155 if (info.argc != argCountThree && info.argc != argCountTwo) {
156 TAG_LOGE(AAFwkTag::URIPERMMGR, "Invalid args");
157 ThrowTooFewParametersError(env);
158 return false;
159 }
160 if (!OHOS::AppExecFwk::UnwrapStringFromJS2(env, info.argv[0], param.uriStr)) {
161 TAG_LOGE(AAFwkTag::URIPERMMGR, "invalid uriStr");
162 ThrowInvalidParamError(env, "Parse param uri failed, uri must be string.");
163 return false;
164 }
165 if (!OHOS::AppExecFwk::UnwrapStringFromJS2(env, info.argv[1], param.bundleName)) {
166 TAG_LOGE(AAFwkTag::URIPERMMGR, "bundleName invalid");
167 ThrowInvalidParamError(env, "Parse param bundleName failed, bundleName must be string.");
168 return false;
169 }
170 if (info.argc == argCountThree) {
171 if (CheckTypeForNapiValue(env, info.argv[argCountTwo], napi_function)) {
172 return true;
173 }
174 if (!CheckTypeForNapiValue(env, info.argv[argCountTwo], napi_number) ||
175 !OHOS::AppExecFwk::UnwrapInt32FromJS2(env, info.argv[argCountTwo], param.appIndex)) {
176 TAG_LOGE(AAFwkTag::URIPERMMGR, "appCloneIndex invalid");
177 ThrowInvalidParamError(env, "Parse param appCloneIndex failed, appCloneIndex must be number.");
178 return false;
179 }
180 if (param.appIndex < 0) {
181 ThrowInvalidParamError(env, "Param appCloneIndex is invalid, the value less than 0.");
182 return false;
183 }
184 param.hasAppIndex = true;
185 }
186 return true;
187 }
188 }
189 class JsUriPermMgr {
190 public:
191 JsUriPermMgr() = default;
192 ~JsUriPermMgr() = default;
193
Finalizer(napi_env env,void * data,void * hint)194 static void Finalizer(napi_env env, void* data, void* hint)
195 {
196 TAG_LOGI(AAFwkTag::URIPERMMGR, "call");
197 std::unique_ptr<JsUriPermMgr>(static_cast<JsUriPermMgr*>(data));
198 }
199
GrantUriPermission(napi_env env,napi_callback_info info)200 static napi_value GrantUriPermission(napi_env env, napi_callback_info info)
201 {
202 GET_NAPI_INFO_AND_CALL(env, info, JsUriPermMgr, OnGrantUriPermission);
203 }
204
RevokeUriPermission(napi_env env,napi_callback_info info)205 static napi_value RevokeUriPermission(napi_env env, napi_callback_info info)
206 {
207 GET_NAPI_INFO_AND_CALL(env, info, JsUriPermMgr, OnRevokeUriPermission);
208 }
209
210 private:
OnGrantUriPermission(napi_env env,NapiCallbackInfo & info)211 napi_value OnGrantUriPermission(napi_env env, NapiCallbackInfo& info)
212 {
213 TAG_LOGD(AAFwkTag::URIPERMMGR, "start");
214 UriPermissionParam param;
215 if (!ParseGrantUriPermissionParams(env, info, param)) {
216 return CreateJsUndefined(env);
217 }
218 auto selfToken = IPCSkeleton::GetSelfTokenID();
219 if (!Security::AccessToken::TokenIdKit::IsSystemAppByFullTokenID(selfToken)) {
220 TAG_LOGE(AAFwkTag::URIPERMMGR, "app not system-app");
221 ThrowError(env, AbilityErrorCode::ERROR_CODE_NOT_SYSTEM_APP);
222 return CreateJsUndefined(env);
223 }
224 NapiAsyncTask::CompleteCallback complete =
225 [param](napi_env env, NapiAsyncTask& task, int32_t status) {
226 Uri uri(param.uriStr);
227 int errCode = AAFwk::UriPermissionManagerClient::GetInstance().GrantUriPermission(uri,
228 param.flag, param.bundleName, param.appIndex);
229 TAG_LOGI(AAFwkTag::URIPERMMGR, "GrantUriPermission, errCode is %{public}d", errCode);
230 if (param.hasAppIndex) {
231 return ResolveGrantUriPermissionWithAppIndexTask(env, task, errCode);
232 }
233 return ResolveGrantUriPermissionTask(env, task, errCode);
234 };
235 napi_value lastParam = (info.argc == argCountFour && !param.hasAppIndex) ? info.argv[argCountThree] : nullptr;
236 napi_value result = nullptr;
237 NapiAsyncTask::ScheduleHighQos("JsUriPermMgr::OnGrantUriPermission",
238 env, CreateAsyncTaskWithLastParam(env, lastParam, nullptr, std::move(complete), &result));
239 return result;
240 }
241
OnRevokeUriPermission(napi_env env,NapiCallbackInfo & info)242 napi_value OnRevokeUriPermission(napi_env env, NapiCallbackInfo& info)
243 {
244 TAG_LOGD(AAFwkTag::URIPERMMGR, "start");
245 UriPermissionParam param;
246 if (!ParseRevokeUriPermissionParams(env, info, param)) {
247 return CreateJsUndefined(env);
248 }
249 auto selfToken = IPCSkeleton::GetSelfTokenID();
250 if (!Security::AccessToken::TokenIdKit::IsSystemAppByFullTokenID(selfToken)) {
251 TAG_LOGE(AAFwkTag::URIPERMMGR, "app not system-app");
252 ThrowError(env, AbilityErrorCode::ERROR_CODE_NOT_SYSTEM_APP);
253 return CreateJsUndefined(env);
254 }
255 NapiAsyncTask::CompleteCallback complete =
256 [param](napi_env env, NapiAsyncTask& task, int32_t status) {
257 Uri uri(param.uriStr);
258 auto errCode = AAFwk::UriPermissionManagerClient::GetInstance().RevokeUriPermissionManually(uri,
259 param.bundleName, param.appIndex);
260 TAG_LOGD(AAFwkTag::URIPERMMGR, "errCode: %{public}d", errCode);
261 if (param.hasAppIndex) {
262 return ResolveRevokeUriPermissionWithAppIndexTask(env, task, errCode);
263 }
264 return ResolveRevokeUriPermissionTask(env, task, errCode);
265 };
266 napi_value lastParam = (info.argc == argCountThree && !param.hasAppIndex) ? info.argv[argCountTwo] : nullptr;
267 napi_value result = nullptr;
268 NapiAsyncTask::ScheduleHighQos("JsUriPermMgr::OnRevokeUriPermission",
269 env, CreateAsyncTaskWithLastParam(env, lastParam, nullptr, std::move(complete), &result));
270 return result;
271 }
272 };
273
CreateJsUriPermMgr(napi_env env,napi_value exportObj)274 napi_value CreateJsUriPermMgr(napi_env env, napi_value exportObj)
275 {
276 TAG_LOGD(AAFwkTag::URIPERMMGR, "call");
277 if (env == nullptr || exportObj == nullptr) {
278 TAG_LOGI(AAFwkTag::URIPERMMGR, "Invalid param");
279 return nullptr;
280 }
281
282 std::unique_ptr<JsUriPermMgr> jsUriPermMgr = std::make_unique<JsUriPermMgr>();
283 napi_wrap(env, exportObj, jsUriPermMgr.release(), JsUriPermMgr::Finalizer, nullptr, nullptr);
284
285 const char *moduleName = "JsUriPermMgr";
286 BindNativeFunction(env, exportObj, "grantUriPermission", moduleName, JsUriPermMgr::GrantUriPermission);
287 BindNativeFunction(env, exportObj, "revokeUriPermission", moduleName, JsUriPermMgr::RevokeUriPermission);
288 return CreateJsUndefined(env);
289 }
290 } // namespace AbilityRuntime
291 } // namespace OHOS
292