Added Have I been pawned support

This commit is contained in:
M66B 2024-04-26 07:58:45 +02:00
parent a0098357a8
commit 6f399b39ad
6 changed files with 222 additions and 0 deletions

View File

@ -215,6 +215,7 @@ android {
buildConfigField "String", "OPENAI_PRIVACY", "\"https://openai.com/policies/privacy-policy\""
buildConfigField "String", "GEMINI_ENDPOINT", "\"https://generativelanguage.googleapis.com/v1beta/\""
buildConfigField "String", "GEMINI_PRIVACY", "\"https://support.google.com/gemini/answer/13594961\""
buildConfigField "String", "PAWNED_ENDPOINT", "\"https://api.pwnedpasswords.com/\""
buildConfigField "String", "FDROID", "\"https://f-droid.org/packages/%s/\""
}
large {
@ -239,6 +240,7 @@ android {
buildConfigField "String", "OPENAI_PRIVACY", "\"https://openai.com/policies/privacy-policy\""
buildConfigField "String", "GEMINI_ENDPOINT", "\"https://generativelanguage.googleapis.com/v1beta/\""
buildConfigField "String", "GEMINI_PRIVACY", "\"https://support.google.com/gemini/answer/13594961\""
buildConfigField "String", "PAWNED_ENDPOINT", "\"https://api.pwnedpasswords.com/\""
buildConfigField "String", "FDROID", "\"https://f-droid.org/packages/%s/\""
}
fdroid {
@ -272,6 +274,7 @@ android {
buildConfigField "String", "OPENAI_PRIVACY", "\"https://openai.com/policies/privacy-policy\""
buildConfigField "String", "GEMINI_ENDPOINT", "\"https://generativelanguage.googleapis.com/v1beta/\""
buildConfigField "String", "GEMINI_PRIVACY", "\"https://support.google.com/gemini/answer/13594961\""
buildConfigField "String", "PAWNED_ENDPOINT", "\"https://api.pwnedpasswords.com/\""
buildConfigField "String", "FDROID", "\"https://f-droid.org/packages/%s/\""
}
play {
@ -297,6 +300,7 @@ android {
buildConfigField "String", "OPENAI_PRIVACY", "\"\""
buildConfigField "String", "GEMINI_ENDPOINT", "\"\""
buildConfigField "String", "GEMINI_PRIVACY", "\"\""
buildConfigField "String", "PAWNED_ENDPOINT", "\"\""
buildConfigField "String", "FDROID", "\"\""
getIsDefault().set(true)
}
@ -323,6 +327,7 @@ android {
buildConfigField "String", "OPENAI_PRIVACY", "\"\""
buildConfigField "String", "GEMINI_ENDPOINT", "\"\""
buildConfigField "String", "GEMINI_PRIVACY", "\"\""
buildConfigField "String", "PAWNED_ENDPOINT", "\"\""
buildConfigField "String", "FDROID", "\"\""
}
}

View File

@ -31,8 +31,13 @@ import android.content.SharedPreferences;
import android.graphics.Canvas;
import android.graphics.Color;
import android.graphics.Rect;
import android.graphics.Typeface;
import android.graphics.drawable.Drawable;
import android.os.Bundle;
import android.text.SpannableStringBuilder;
import android.text.TextUtils;
import android.text.style.ForegroundColorSpan;
import android.text.style.StyleSpan;
import android.view.LayoutInflater;
import android.view.Menu;
import android.view.MenuInflater;
@ -40,6 +45,7 @@ import android.view.MenuItem;
import android.view.View;
import android.view.ViewGroup;
import android.widget.Button;
import android.widget.ProgressBar;
import android.widget.TextView;
import android.widget.Toast;
@ -368,6 +374,7 @@ public class FragmentAccounts extends FragmentBase {
menu.findItem(R.id.menu_show_folders).setVisible(!settings);
menu.findItem(R.id.menu_theme).setVisible(!settings);
menu.findItem(R.id.menu_force_sync).setVisible(!settings);
menu.findItem(R.id.menu_pwned).setVisible(settings && !TextUtils.isEmpty(BuildConfig.PAWNED_ENDPOINT));
super.onPrepareOptionsMenu(menu);
}
@ -399,6 +406,9 @@ public class FragmentAccounts extends FragmentBase {
} else if (itemId == R.id.menu_force_sync) {
onMenuForceSync();
return true;
} else if (itemId == R.id.menu_pwned) {
onMenuPwned();
return true;
}
return super.onOptionsItemSelected(item);
}
@ -475,6 +485,74 @@ public class FragmentAccounts extends FragmentBase {
ToastEx.makeText(getContext(), R.string.title_executing, Toast.LENGTH_LONG).show();
}
private void onMenuPwned() {
final Context context = getContext();
final View dview = LayoutInflater.from(context).inflate(R.layout.dialog_pwned, null);
final TextView tvPwned = dview.findViewById(R.id.tvPwned);
final ProgressBar pbWait = dview.findViewById(R.id.pbWait);
final Group grpReady = dview.findViewById(R.id.grpReady);
pbWait.setVisibility(View.VISIBLE);
grpReady.setVisibility(View.GONE);
new AlertDialog.Builder(context)
.setView(dview)
.setPositiveButton(android.R.string.ok, new DialogInterface.OnClickListener() {
@Override
public void onClick(DialogInterface dialog, int which) {
// Do nothing
}
})
.show();
new SimpleTask<SpannableStringBuilder>() {
@Override
protected void onPostExecute(Bundle args) {
pbWait.setVisibility(View.GONE);
}
@Override
protected SpannableStringBuilder onExecute(Context context, Bundle args) throws Throwable {
SpannableStringBuilder ssb = new SpannableStringBuilder();
final int colorError = Helper.resolveColor(context, androidx.appcompat.R.attr.colorError);
final int colorVerified = Helper.resolveColor(context, R.attr.colorVerified);
DB db = DB.getInstance(context);
List<EntityAccount> accounts = db.account().getAccounts();
if (accounts != null)
for (EntityAccount account : accounts)
if (account.auth_type == AUTH_TYPE_PASSWORD && !TextUtils.isEmpty(account.password)) {
Integer count = HaveIBeenPwned.check(account.password, context);
boolean pwned = (count != null && count != 0);
ssb.append(account.name).append(": ");
int start = ssb.length();
ssb.append(pwned ? "PWNED!" : "OK");
if (pwned) {
ssb.setSpan(new ForegroundColorSpan(colorError), start, ssb.length(), 0);
ssb.setSpan(new StyleSpan(Typeface.BOLD), start, ssb.length(), 0);
} else
ssb.setSpan(new ForegroundColorSpan(colorVerified), start, ssb.length(), 0);
ssb.append('\n');
}
return ssb;
}
@Override
protected void onExecuted(Bundle args, SpannableStringBuilder ssb) {
tvPwned.setText(ssb);
grpReady.setVisibility(View.VISIBLE);
}
@Override
protected void onException(Bundle args, Throwable ex) {
tvPwned.setText(Log.formatThrowable(ex));
grpReady.setVisibility(View.VISIBLE);
}
}.execute(this, new Bundle(), "pwned");
}
@Override
public void onActivityResult(int requestCode, int resultCode, @Nullable Intent data) {
super.onActivityResult(requestCode, resultCode, data);

View File

@ -0,0 +1,69 @@
package eu.faircode.email;
/*
This file is part of FairEmail.
FairEmail is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
FairEmail is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with FairEmail. If not, see <http://www.gnu.org/licenses/>.
Copyright 2018-2024 by Marcel Bokhorst (M66B)
*/
import android.content.Context;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.net.URL;
import java.security.NoSuchAlgorithmException;
import javax.net.ssl.HttpsURLConnection;
public class HaveIBeenPwned {
// https://haveibeenpwned.com/API/v3
private final static int FETCH_TIMEOUT = 15 * 1000; // milliseconds
static Integer check(String password, Context context) throws NoSuchAlgorithmException, IOException {
String hashed = Helper.sha1(password.getBytes());
String range = hashed.substring(0, 5);
String rest = hashed.substring(5);
URL url = new URL(BuildConfig.PAWNED_ENDPOINT + "range/" + range);
Log.i("GET " + url);
HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
connection.setRequestMethod("GET");
connection.setReadTimeout(FETCH_TIMEOUT);
connection.setConnectTimeout(FETCH_TIMEOUT);
ConnectionHelper.setUserAgent(context, connection);
connection.connect();
try {
int status = connection.getResponseCode();
if (status != HttpsURLConnection.HTTP_OK)
throw new IOException("Error " + status + ": " + connection.getResponseMessage());
String line;
BufferedReader br = new BufferedReader(new InputStreamReader(connection.getInputStream()));
while ((line = br.readLine()) != null) {
String[] parts = line.split(":");
if (parts.length == 2 && rest.equalsIgnoreCase(parts[0]))
return Helper.parseInt(parts[1]);
}
} finally {
connection.disconnect();
}
return null;
}
}

View File

@ -0,0 +1,64 @@
<?xml version="1.0" encoding="utf-8"?>
<androidx.constraintlayout.widget.ConstraintLayout xmlns:android="http://schemas.android.com/apk/res/android"
xmlns:app="http://schemas.android.com/apk/res-auto"
xmlns:tools="http://schemas.android.com/tools"
android:layout_width="match_parent"
android:layout_height="wrap_content"
android:padding="24dp"
tools:context="eu.faircode.email.ActivitySetup">
<TextView
android:id="@+id/tvCaption"
android:layout_width="wrap_content"
android:layout_height="wrap_content"
android:drawableStart="@drawable/twotone_security_24"
android:drawablePadding="6dp"
android:text="@string/title_pawned"
android:textAppearance="@style/TextAppearance.AppCompat.Large"
app:layout_constraintStart_toStartOf="parent"
app:layout_constraintTop_toTopOf="parent" />
<ScrollView
android:id="@+id/scroll"
android:layout_width="0dp"
android:layout_height="wrap_content"
android:layout_marginTop="24dp"
android:orientation="vertical"
android:scrollbarStyle="outsideOverlay"
app:layout_constraintEnd_toEndOf="parent"
app:layout_constraintStart_toStartOf="parent"
app:layout_constraintTop_toBottomOf="@id/tvCaption">
<androidx.constraintlayout.widget.ConstraintLayout
android:layout_width="match_parent"
android:layout_height="wrap_content">
<TextView
android:id="@+id/tvPwned"
android:layout_width="0dp"
android:layout_height="wrap_content"
android:text="Pwned"
android:textAppearance="@style/TextAppearance.AppCompat.Small"
app:layout_constraintEnd_toEndOf="parent"
app:layout_constraintStart_toStartOf="parent"
app:layout_constraintTop_toTopOf="parent" />
</androidx.constraintlayout.widget.ConstraintLayout>
</ScrollView>
<eu.faircode.email.ContentLoadingProgressBar
android:id="@+id/pbWait"
style="@style/Base.Widget.AppCompat.ProgressBar"
android:layout_width="wrap_content"
android:layout_height="wrap_content"
android:layout_marginTop="24dp"
android:indeterminate="true"
app:layout_constraintEnd_toEndOf="parent"
app:layout_constraintStart_toStartOf="parent"
app:layout_constraintTop_toBottomOf="@+id/scroll" />
<androidx.constraintlayout.widget.Group
android:id="@+id/grpReady"
android:layout_width="0dp"
android:layout_height="0dp"
app:constraint_referenced_ids="scroll" />
</androidx.constraintlayout.widget.ConstraintLayout>

View File

@ -52,5 +52,10 @@
android:id="@+id/menu_force_sync"
android:title="@string/title_force_sync"
app:showAsAction="never" />
<item
android:id="@+id/menu_pwned"
android:title="@string/title_pawned"
app:showAsAction="never" />
</group>
</menu>

View File

@ -1961,6 +1961,7 @@
<string name="title_view_thread">View conversation</string>
<string name="title_force_sync">Force sync</string>
<string name="title_force_send">Force send</string>
<string name="title_pawned" translatable="false">Have I been pwned?</string>
<string name="title_language_all">All</string>