import 'dart:convert'; import 'dart:io' as io; import 'dart:typed_data'; import 'package:collection/collection.dart'; import 'package:flutter/foundation.dart'; import 'package:flutter_secure_storage/flutter_secure_storage.dart'; import 'package:flutter_sodium/flutter_sodium.dart'; import 'package:logging/logging.dart'; import 'package:path_provider/path_provider.dart'; import 'package:photos/models/key_attributes.dart'; import 'package:photos/models/key_gen_result.dart'; import 'package:photos/models/private_key_attributes.dart'; import 'package:photos/services/sync_service.dart'; import 'package:shared_preferences/shared_preferences.dart'; import 'package:photos/utils/crypto_util.dart'; class Configuration { Configuration._privateConstructor(); static final Configuration instance = Configuration._privateConstructor(); static final _logger = Logger("Configuration"); static const endpointKey = "endpoint"; static const userIDKey = "user_id"; static const emailKey = "email"; static const nameKey = "name"; static const tokenKey = "token"; static const hasOptedForE2EKey = "has_opted_for_e2e_encryption"; static const foldersToBackUpKey = "folders_to_back_up"; static const keyKey = "key"; static const secretKeyKey = "secret_key"; static const keyAttributesKey = "key_attributes"; static const keyShouldBackupOverMobileData = "should_backup_over_mobile_data"; SharedPreferences _preferences; FlutterSecureStorage _secureStorage; String _key; String _cachedToken; String _secretKey; String _documentsDirectory; String _tempDirectory; Future init() async { _preferences = await SharedPreferences.getInstance(); _secureStorage = FlutterSecureStorage(); _documentsDirectory = (await getApplicationDocumentsDirectory()).path; _tempDirectory = _documentsDirectory + "/temp/"; final tempDirectory = new io.Directory(_tempDirectory); try { if (tempDirectory.existsSync()) { tempDirectory.deleteSync(recursive: true); } } catch (e) { _logger.warning(e); } tempDirectory.createSync(recursive: true); _key = await _secureStorage.read(key: keyKey); _secretKey = await _secureStorage.read(key: secretKeyKey); } Future generateKey(String password) async { // Create a master key final key = CryptoUtil.generateKey(); // Derive a key from the password that will be used to encrypt and // decrypt the master key final kekSalt = CryptoUtil.getSaltToDeriveKey(); final kek = CryptoUtil.deriveKey(utf8.encode(password), kekSalt); // Encrypt the key with this derived key final encryptedKeyData = CryptoUtil.encryptSync(key, kek); // Hash the password so that its correctness can be compared later final kekHash = await CryptoUtil.hash(kek); // Generate a public-private keypair and encrypt the latter final keyPair = await CryptoUtil.generateKeyPair(); final encryptedSecretKeyData = CryptoUtil.encryptSync(keyPair.sk, key); final attributes = KeyAttributes( Sodium.bin2base64(kekSalt), kekHash, Sodium.bin2base64(encryptedKeyData.encryptedData), Sodium.bin2base64(encryptedKeyData.nonce), Sodium.bin2base64(keyPair.pk), Sodium.bin2base64(encryptedSecretKeyData.encryptedData), Sodium.bin2base64(encryptedSecretKeyData.nonce), ); final privateAttributes = PrivateKeyAttributes( Sodium.bin2base64(key), Sodium.bin2base64(keyPair.sk)); return KeyGenResult(attributes, privateAttributes); } Future decryptAndSaveKey( String password, KeyAttributes attributes) async { final kek = CryptoUtil.deriveKey( utf8.encode(password), Sodium.base642bin(attributes.kekSalt)); bool correctPassword = await CryptoUtil.verifyHash(kek, attributes.kekHash); if (!correctPassword) { throw Exception("Incorrect password"); } final key = CryptoUtil.decryptSync( Sodium.base642bin(attributes.encryptedKey), kek, Sodium.base642bin(attributes.keyDecryptionNonce)); final secretKey = CryptoUtil.decryptSync( Sodium.base642bin(attributes.encryptedSecretKey), key, Sodium.base642bin(attributes.secretKeyDecryptionNonce)); await setKey(Sodium.bin2base64(key)); await setSecretKey(Sodium.bin2base64(secretKey)); } String getHttpEndpoint() { if (kDebugMode) { return "http://192.168.1.111:8080"; } return "https://api.ente.io"; } Future setEndpoint(String endpoint) async { await _preferences.setString(endpointKey, endpoint); } String getToken() { if (_cachedToken == null) { _cachedToken = _preferences.getString(tokenKey); } return _cachedToken; } Future setToken(String token) async { _cachedToken = token; await _preferences.setString(tokenKey, token); } String getEmail() { return _preferences.getString(emailKey); } Future setEmail(String email) async { await _preferences.setString(emailKey, email); } String getName() { return _preferences.getString(nameKey); } Future setName(String name) async { await _preferences.setString(nameKey, name); } int getUserID() { return _preferences.getInt(userIDKey); } Future setUserID(int userID) async { await _preferences.setInt(userIDKey, userID); } Future setOptInForE2E(bool hasOptedForE2E) async { await _preferences.setBool(hasOptedForE2EKey, hasOptedForE2E); } bool hasOptedForE2E() { return true; // return _preferences.getBool(hasOptedForE2EKey); } Set getPathsToBackUp() { if (_preferences.containsKey(foldersToBackUpKey)) { return _preferences.getStringList(foldersToBackUpKey).toSet(); } else { final foldersToBackUp = Set(); foldersToBackUp.add("Camera"); foldersToBackUp.add("Recents"); foldersToBackUp.add("DCIM"); foldersToBackUp.add("Download"); foldersToBackUp.add("Downloads"); foldersToBackUp.add("Screenshot"); foldersToBackUp.add("Screenshots"); foldersToBackUp.add("Selfies"); foldersToBackUp.add("Portrait"); return foldersToBackUp; } } Future setPathsToBackUp(Set folders) async { bool shouldSync = !listEquals(getPathsToBackUp().toList(), folders.toList()); await _preferences.setStringList(foldersToBackUpKey, folders.toList()); if (shouldSync) { SyncService.instance.sync(); } } Future addPathToFoldersToBeBackedUp(String path) async { final currentPaths = getPathsToBackUp(); currentPaths.add(path); return setPathsToBackUp(currentPaths); } Future setKeyAttributes(KeyAttributes attributes) async { await _preferences.setString( keyAttributesKey, attributes == null ? null : attributes.toJson()); } KeyAttributes getKeyAttributes() { final jsonValue = _preferences.getString(keyAttributesKey); if (jsonValue == null) { return null; } else { return KeyAttributes.fromJson(jsonValue); } } Future setKey(String key) async { _key = key; if (key == null) { await _secureStorage.delete(key: keyKey); } else { await _secureStorage.write(key: keyKey, value: key); } } Future setSecretKey(String secretKey) async { _secretKey = secretKey; if (secretKey == null) { await _secureStorage.delete(key: secretKeyKey); } else { await _secureStorage.write(key: secretKeyKey, value: secretKey); } } Uint8List getKey() { return _key == null ? null : Sodium.base642bin(_key); } Uint8List getSecretKey() { return _secretKey == null ? null : Sodium.base642bin(_secretKey); } String getDocumentsDirectory() { return _documentsDirectory; } // Caution: This directory is cleared on app start String getTempDirectory() { return _tempDirectory; } bool hasConfiguredAccount() { return getToken() != null && _key != null; } bool shouldBackupOverMobileData() { if (_preferences.containsKey(keyShouldBackupOverMobileData)) { return _preferences.getBool(keyShouldBackupOverMobileData); } else { return false; } } Future setBackupOverMobileData(bool value) async { await _preferences.setBool(keyShouldBackupOverMobileData, value); if (value) { SyncService.instance.sync(); } } }