mirror of https://github.com/nextcloud/server.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
315 lines
12 KiB
PHP
315 lines
12 KiB
PHP
<?php
|
|
/**
|
|
* ownCloud
|
|
*
|
|
* @author Bjoern Schiessle
|
|
* @copyright 2014 Bjoern Schiessle <schiessle@owncloud.com>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
* License as published by the Free Software Foundation; either
|
|
* version 3 of the License, or any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
require_once __DIR__ . '/../../../lib/base.php';
|
|
require_once __DIR__ . '/../lib/crypt.php';
|
|
require_once __DIR__ . '/../lib/keymanager.php';
|
|
require_once __DIR__ . '/../lib/stream.php';
|
|
require_once __DIR__ . '/../lib/util.php';
|
|
require_once __DIR__ . '/../appinfo/app.php';
|
|
require_once __DIR__ . '/util.php';
|
|
|
|
use OCA\Encryption;
|
|
|
|
/**
|
|
* Class Test_Encryption_Hooks
|
|
* this class provide basic hook app tests
|
|
*/
|
|
class Test_Encryption_Hooks extends \PHPUnit_Framework_TestCase {
|
|
|
|
const TEST_ENCRYPTION_HOOKS_USER1 = "test-encryption-hooks-user1";
|
|
const TEST_ENCRYPTION_HOOKS_USER2 = "test-encryption-hooks-user2";
|
|
|
|
/**
|
|
* @var \OC\Files\View
|
|
*/
|
|
public $user1View; // view on /data/user1/files
|
|
public $user2View; // view on /data/user2/files
|
|
public $rootView; // view on /data/user
|
|
public $data;
|
|
public $filename;
|
|
public $folder;
|
|
|
|
public static function setUpBeforeClass() {
|
|
// reset backend
|
|
\OC_User::clearBackends();
|
|
\OC_User::useBackend('database');
|
|
|
|
\OC_Hook::clear('OC_Filesystem');
|
|
\OC_Hook::clear('OC_User');
|
|
|
|
// clear share hooks
|
|
\OC_Hook::clear('OCP\\Share');
|
|
\OC::registerShareHooks();
|
|
\OCP\Util::connectHook('OC_Filesystem', 'setup', '\OC\Files\Storage\Shared', 'setup');
|
|
|
|
// Filesystem related hooks
|
|
\OCA\Encryption\Helper::registerFilesystemHooks();
|
|
|
|
// Sharing related hooks
|
|
\OCA\Encryption\Helper::registerShareHooks();
|
|
|
|
// clear and register proxies
|
|
\OC_FileProxy::clearProxies();
|
|
\OC_FileProxy::register(new OCA\Encryption\Proxy());
|
|
|
|
// create test user
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1, true);
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2, true);
|
|
}
|
|
|
|
function setUp() {
|
|
// set user id
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
\OC_User::setUserId(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
|
|
// init filesystem view
|
|
$this->user1View = new \OC\Files\View('/'. \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1 . '/files');
|
|
$this->user2View = new \OC\Files\View('/'. \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '/files');
|
|
$this->rootView = new \OC\Files\View('/');
|
|
|
|
// init short data
|
|
$this->data = 'hats';
|
|
$this->filename = 'enc_hooks_tests-' . uniqid() . '.txt';
|
|
$this->folder = 'enc_hooks_tests_folder-' . uniqid();
|
|
|
|
}
|
|
|
|
public static function tearDownAfterClass() {
|
|
// cleanup test user
|
|
\OC_User::deleteUser(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
\OC_User::deleteUser(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2);
|
|
}
|
|
|
|
function testDeleteHooks() {
|
|
|
|
// remember files_trashbin state
|
|
$stateFilesTrashbin = OC_App::isEnabled('files_trashbin');
|
|
|
|
// we want to tests with app files_trashbin disabled
|
|
\OC_App::disable('files_trashbin');
|
|
|
|
// make sure that the trash bin is disabled
|
|
$this->assertFalse(\OC_APP::isEnabled('files_trashbin'));
|
|
|
|
$this->user1View->file_put_contents($this->filename, $this->data);
|
|
|
|
// check if all keys are generated
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
|
|
\Test_Encryption_Util::logoutHelper();
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2);
|
|
\OC_User::setUserId(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2);
|
|
|
|
|
|
$this->user2View->file_put_contents($this->filename, $this->data);
|
|
|
|
// check if all keys are generated
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
|
|
// create a dummy file that we can delete something outside of data/user/files
|
|
// in this case no share or file keys should be deleted
|
|
$this->rootView->file_put_contents(self::TEST_ENCRYPTION_HOOKS_USER2 . "/" . $this->filename, $this->data);
|
|
|
|
// delete dummy file outside of data/user/files
|
|
$this->rootView->unlink(self::TEST_ENCRYPTION_HOOKS_USER2 . "/" . $this->filename);
|
|
|
|
// all keys should still exist
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
|
|
// delete the file in data/user/files
|
|
// now the correspondig share and file keys from user2 should be deleted
|
|
$this->user2View->unlink($this->filename);
|
|
|
|
// check if keys from user2 are really deleted
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
// but user1 keys should still exist
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
if ($stateFilesTrashbin) {
|
|
OC_App::enable('files_trashbin');
|
|
}
|
|
else {
|
|
OC_App::disable('files_trashbin');
|
|
}
|
|
}
|
|
|
|
function testDeleteHooksForSharedFiles() {
|
|
|
|
\Test_Encryption_Util::logoutHelper();
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
\OC_User::setUserId(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
|
|
// remember files_trashbin state
|
|
$stateFilesTrashbin = OC_App::isEnabled('files_trashbin');
|
|
|
|
// we want to tests with app files_trashbin disabled
|
|
\OC_App::disable('files_trashbin');
|
|
|
|
// make sure that the trash bin is disabled
|
|
$this->assertFalse(\OC_APP::isEnabled('files_trashbin'));
|
|
|
|
$this->user1View->file_put_contents($this->filename, $this->data);
|
|
|
|
// check if all keys are generated
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
// get the file info from previous created file
|
|
$fileInfo = $this->user1View->getFileInfo($this->filename);
|
|
|
|
// check if we have a valid file info
|
|
$this->assertTrue($fileInfo instanceof \OC\Files\FileInfo);
|
|
|
|
// share the file with user2
|
|
\OCP\Share::shareItem('file', $fileInfo['fileid'], \OCP\Share::SHARE_TYPE_USER, self::TEST_ENCRYPTION_HOOKS_USER2, OCP\PERMISSION_ALL);
|
|
|
|
// check if new share key exists
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
|
|
\Test_Encryption_Util::logoutHelper();
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2);
|
|
\OC_User::setUserId(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2);
|
|
|
|
// user2 update the shared file
|
|
$this->user2View->file_put_contents($this->filename, $this->data);
|
|
|
|
// keys should be stored at user1s dir, not in user2s
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER2 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
// delete the Shared file from user1 in data/user2/files/Shared
|
|
$result = $this->user2View->unlink($this->filename);
|
|
|
|
$this->assertTrue($result);
|
|
|
|
// now keys from user1s home should be gone
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . \Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER2 . '.shareKey'));
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/' . $this->filename . '.key'));
|
|
|
|
// cleanup
|
|
|
|
\Test_Encryption_Util::logoutHelper();
|
|
\Test_Encryption_Util::loginHelper(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
\OC_User::setUserId(\Test_Encryption_Hooks::TEST_ENCRYPTION_HOOKS_USER1);
|
|
|
|
if ($stateFilesTrashbin) {
|
|
OC_App::enable('files_trashbin');
|
|
}
|
|
else {
|
|
OC_App::disable('files_trashbin');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* test rename operation
|
|
*/
|
|
function testRenameHook() {
|
|
|
|
// save file with content
|
|
$cryptedFile = file_put_contents('crypt:///' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->filename, $this->data);
|
|
|
|
// test that data was successfully written
|
|
$this->assertTrue(is_int($cryptedFile));
|
|
|
|
// check if keys exists
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . self::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/'
|
|
. $this->filename . '.key'));
|
|
|
|
// make subfolder
|
|
$this->rootView->mkdir('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->folder);
|
|
|
|
$this->assertTrue($this->rootView->is_dir('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->folder));
|
|
|
|
// move the file out of the shared folder
|
|
$root = $this->rootView->getRoot();
|
|
$this->rootView->chroot('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/');
|
|
$this->rootView->rename($this->filename, '/' . $this->folder . '/' . $this->filename);
|
|
$this->rootView->chroot($root);
|
|
|
|
$this->assertFalse($this->rootView->file_exists('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->filename));
|
|
$this->assertTrue($this->rootView->file_exists('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->folder . '/' . $this->filename));
|
|
|
|
// keys should be renamed too
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/'
|
|
. $this->filename . '.' . self::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertFalse($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/'
|
|
. $this->filename . '.key'));
|
|
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/share-keys/' . $this->folder . '/'
|
|
. $this->filename . '.' . self::TEST_ENCRYPTION_HOOKS_USER1 . '.shareKey'));
|
|
$this->assertTrue($this->rootView->file_exists(
|
|
'/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files_encryption/keyfiles/' . $this->folder . '/'
|
|
. $this->filename . '.key'));
|
|
|
|
// cleanup
|
|
$this->rootView->unlink('/' . self::TEST_ENCRYPTION_HOOKS_USER1 . '/files/' . $this->folder);
|
|
}
|
|
|
|
}
|