keepassxc/src/browser/BrowserAction.h

/*
 *  Copyright (C) 2023 KeePassXC Team <team@keepassxc.org>
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#ifndef KEEPASSXC_BROWSERACTION_H
#define KEEPASSXC_BROWSERACTION_H

#include "BrowserMessageBuilder.h"
#include "BrowserService.h"

#include <QJsonArray>
#include <QJsonObject>
#include <QString>

class QLocalSocket;

struct BrowserRequest
{
    QString hash;
    QString nonce;
    QString incrementedNonce;
    QJsonObject decrypted;

    inline bool isEmpty() const
    {
        return decrypted.isEmpty();
    }

    inline QJsonArray getArray(const QString& param) const
    {
        return decrypted.value(param).toArray();
    }

    inline bool getBool(const QString& param) const
    {
        return decrypted.value(param).toBool();
    }

    inline QJsonObject getObject(const QString& param) const
    {
        return decrypted.value(param).toObject();
    }

    inline QString getString(const QString& param) const
    {
        return decrypted.value(param).toString();
    }
};

class BrowserAction
{
public:
    explicit BrowserAction() = default;
    ~BrowserAction() = default;

    QJsonObject processClientMessage(QLocalSocket* socket, const QJsonObject& json);

private:
    QJsonObject handleAction(QLocalSocket* socket, const QJsonObject& json);
    QJsonObject handleChangePublicKeys(const QJsonObject& json, const QString& action);
    QJsonObject handleGetDatabaseHash(const QJsonObject& json, const QString& action);
    QJsonObject handleAssociate(const QJsonObject& json, const QString& action);
    QJsonObject handleTestAssociate(const QJsonObject& json, const QString& action);
    QJsonObject handleGetLogins(const QJsonObject& json, const QString& action);
    QJsonObject handleGeneratePassword(QLocalSocket* socket, const QJsonObject& json, const QString& action);
    QJsonObject handleSetLogin(const QJsonObject& json, const QString& action);
    QJsonObject handleLockDatabase(const QJsonObject& json, const QString& action);
    QJsonObject handleGetDatabaseGroups(const QJsonObject& json, const QString& action);
    QJsonObject handleGetDatabaseEntries(const QJsonObject& json, const QString& action);
    QJsonObject handleCreateNewGroup(const QJsonObject& json, const QString& action);
    QJsonObject handleGetTotp(const QJsonObject& json, const QString& action);
    QJsonObject handleDeleteEntry(const QJsonObject& json, const QString& action);
    QJsonObject handleGlobalAutoType(const QJsonObject& json, const QString& action);
#ifdef WITH_XC_BROWSER_PASSKEYS
    QJsonObject handlePasskeysGet(const QJsonObject& json, const QString& action);
    QJsonObject handlePasskeysRegister(const QJsonObject& json, const QString& action);
#endif

private:
    QJsonObject buildResponse(const QString& action, const QString& nonce, const Parameters& params = {});
    QJsonObject getErrorReply(const QString& action, const int errorCode) const;
    QJsonObject decryptMessage(const QString& message, const QString& nonce);
    BrowserRequest decodeRequest(const QJsonObject& json);
    StringPairList getConnectionKeys(const BrowserRequest& browserRequest);

private:
    static const int MaxUrlLength;

    QString m_clientPublicKey;
    QString m_publicKey;
    QString m_secretKey;
    bool m_associated = false;

    friend class TestBrowser;
};

#endif // KEEPASSXC_BROWSERACTION_H