using System; using System.Collections.Generic; using System.IO; using System.Linq; using System.Net; using System.Threading; using System.Threading.Tasks; using MediaBrowser.Common.Configuration; using MediaBrowser.Common.Net; using MediaBrowser.Common.Security; using MediaBrowser.Controller; using MediaBrowser.Model.Cryptography; using MediaBrowser.Model.Entities; using MediaBrowser.Model.IO; using Microsoft.Extensions.Logging; using MediaBrowser.Model.Net; using MediaBrowser.Model.Serialization; namespace Emby.Server.Implementations.Security { /// /// Class PluginSecurityManager /// public class PluginSecurityManager : ISecurityManager { private const string MBValidateUrl = "https://mb3admin.local/admin/service/registration/validate"; private const string AppstoreRegUrl = /*MbAdmin.HttpsUrl*/ "https://mb3admin.local/admin/service/appstore/register"; public async Task IsSupporter() { var result = await GetRegistrationStatusInternal("MBSupporter", false, _appHost.ApplicationVersion.ToString(), CancellationToken.None).ConfigureAwait(false); return result.IsRegistered; } private MBLicenseFile _licenseFile; private MBLicenseFile LicenseFile => _licenseFile ?? (_licenseFile = new MBLicenseFile(_appPaths, _fileSystem, _cryptographyProvider)); private readonly IHttpClient _httpClient; private readonly IJsonSerializer _jsonSerializer; private readonly IServerApplicationHost _appHost; private readonly ILogger _logger; private readonly IApplicationPaths _appPaths; private readonly IFileSystem _fileSystem; private readonly ICryptoProvider _cryptographyProvider; /// /// Initializes a new instance of the class. /// public PluginSecurityManager(IServerApplicationHost appHost, IHttpClient httpClient, IJsonSerializer jsonSerializer, IApplicationPaths appPaths, ILoggerFactory loggerFactory, IFileSystem fileSystem, ICryptoProvider cryptographyProvider) { if (httpClient == null) { throw new ArgumentNullException(nameof(httpClient)); } _appHost = appHost; _httpClient = httpClient; _jsonSerializer = jsonSerializer; _appPaths = appPaths; _fileSystem = fileSystem; _cryptographyProvider = cryptographyProvider; _logger = loggerFactory.CreateLogger("SecurityManager"); } /// /// Gets the registration status. /// This overload supports existing plug-ins. /// public Task GetRegistrationStatus(string feature) { return GetRegistrationStatusInternal(feature, false, null, CancellationToken.None); } /// /// Gets or sets the supporter key. /// /// The supporter key. public string SupporterKey { get => LicenseFile.RegKey; set => throw new Exception("Please call UpdateSupporterKey"); } public async Task UpdateSupporterKey(string newValue) { if (newValue != null) { newValue = newValue.Trim(); } if (!string.Equals(newValue, LicenseFile.RegKey, StringComparison.Ordinal)) { LicenseFile.RegKey = newValue; LicenseFile.Save(); // Reset this await GetRegistrationStatusInternal("MBSupporter", true, _appHost.ApplicationVersion.ToString(), CancellationToken.None).ConfigureAwait(false); } } /// /// Register an app store sale with our back-end. It will validate the transaction with the store /// and then register the proper feature and then fill in the supporter key on success. /// /// Json parameters to send to admin server public async Task RegisterAppStoreSale(string parameters) { var options = new HttpRequestOptions() { Url = AppstoreRegUrl, CancellationToken = CancellationToken.None, BufferContent = false }; options.RequestHeaders.Add("X-Emby-Token", _appHost.SystemId); options.RequestContent = parameters; options.RequestContentType = "application/json"; try { using (var response = await _httpClient.Post(options).ConfigureAwait(false)) { var reg = await _jsonSerializer.DeserializeFromStreamAsync(response.Content).ConfigureAwait(false); if (reg == null) { var msg = "Result from appstore registration was null."; _logger.LogError(msg); throw new ArgumentException(msg); } if (!string.IsNullOrEmpty(reg.key)) { await UpdateSupporterKey(reg.key).ConfigureAwait(false); } } } catch (ArgumentException) { SaveAppStoreInfo(parameters); throw; } catch (HttpException ex) { _logger.LogError(ex, "Error registering appstore purchase {parameters}", parameters ?? "NO PARMS SENT"); throw new Exception("Error registering store sale"); } catch (Exception ex) { _logger.LogError(ex, "Error registering appstore purchase {parameters}", parameters ?? "NO PARMS SENT"); SaveAppStoreInfo(parameters); //TODO - could create a re-try routine on start-up if this file is there. For now we can handle manually. throw new Exception("Error registering store sale"); } } private void SaveAppStoreInfo(string info) { // Save all transaction information to a file try { _fileSystem.WriteAllText(Path.Combine(_appPaths.ProgramDataPath, "apptrans-error.txt"), info); } catch (IOException) { } } private SemaphoreSlim _regCheckLock = new SemaphoreSlim(1, 1); private async Task GetRegistrationStatusInternal(string feature, bool forceCallToServer, string version, CancellationToken cancellationToken) { await _regCheckLock.WaitAsync(cancellationToken).ConfigureAwait(false); try { var record = new MBRegistrationRecord { IsRegistered = true, RegChecked = true, TrialVersion = false, IsValid = true, RegError = false }; return record; } finally { _regCheckLock.Release(); } } private bool IsInTrial(DateTime expirationDate, bool regChecked, bool isRegistered) { //don't set this until we've successfully obtained exp date if (!regChecked) { return false; } var isInTrial = expirationDate > DateTime.UtcNow; return isInTrial && !isRegistered; } } }