|
|
@@ -0,0 +1,175 @@
|
|
|
+package org.cryptomator.ui.controllers;
|
|
|
+
|
|
|
+import java.io.IOException;
|
|
|
+import java.io.InputStream;
|
|
|
+import java.io.OutputStream;
|
|
|
+import java.net.URL;
|
|
|
+import java.nio.file.Files;
|
|
|
+import java.nio.file.Path;
|
|
|
+import java.nio.file.StandardCopyOption;
|
|
|
+import java.nio.file.StandardOpenOption;
|
|
|
+import java.util.ResourceBundle;
|
|
|
+
|
|
|
+import javafx.application.Platform;
|
|
|
+import javafx.beans.value.ObservableValue;
|
|
|
+import javafx.event.ActionEvent;
|
|
|
+import javafx.fxml.FXML;
|
|
|
+import javafx.fxml.Initializable;
|
|
|
+import javafx.scene.control.Button;
|
|
|
+import javafx.scene.control.Label;
|
|
|
+
|
|
|
+import org.cryptomator.crypto.exceptions.DecryptFailedException;
|
|
|
+import org.cryptomator.crypto.exceptions.UnsupportedKeyLengthException;
|
|
|
+import org.cryptomator.crypto.exceptions.WrongPasswordException;
|
|
|
+import org.cryptomator.ui.controls.SecPasswordField;
|
|
|
+import org.cryptomator.ui.model.Vault;
|
|
|
+import org.slf4j.Logger;
|
|
|
+import org.slf4j.LoggerFactory;
|
|
|
+
|
|
|
+import com.google.inject.Inject;
|
|
|
+
|
|
|
+public class ChangePasswordController implements Initializable {
|
|
|
+
|
|
|
+ private static final Logger LOG = LoggerFactory.getLogger(ChangePasswordController.class);
|
|
|
+
|
|
|
+ private ResourceBundle rb;
|
|
|
+ private ChangePasswordListener listener;
|
|
|
+ private Vault vault;
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private SecPasswordField oldPasswordField;
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private SecPasswordField newPasswordField;
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private SecPasswordField retypePasswordField;
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private Button changePasswordButton;
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private Label messageLabel;
|
|
|
+
|
|
|
+ @Inject
|
|
|
+ public ChangePasswordController() {
|
|
|
+ super();
|
|
|
+ }
|
|
|
+
|
|
|
+ @Override
|
|
|
+ public void initialize(URL location, ResourceBundle rb) {
|
|
|
+ this.rb = rb;
|
|
|
+
|
|
|
+ oldPasswordField.textProperty().addListener(this::passwordFieldsDidChange);
|
|
|
+ newPasswordField.textProperty().addListener(this::passwordFieldsDidChange);
|
|
|
+ retypePasswordField.textProperty().addListener(this::passwordFieldsDidChange);
|
|
|
+ }
|
|
|
+
|
|
|
+ // ****************************************
|
|
|
+ // Password fields
|
|
|
+ // ****************************************
|
|
|
+
|
|
|
+ private void passwordFieldsDidChange(ObservableValue<? extends String> property, String oldValue, String newValue) {
|
|
|
+ boolean oldPasswordIsEmpty = oldPasswordField.getText().isEmpty();
|
|
|
+ boolean newPasswordIsEmpty = newPasswordField.getText().isEmpty();
|
|
|
+ boolean passwordsAreEqual = newPasswordField.getText().equals(retypePasswordField.getText());
|
|
|
+ changePasswordButton.setDisable(oldPasswordIsEmpty || newPasswordIsEmpty || !passwordsAreEqual);
|
|
|
+ }
|
|
|
+
|
|
|
+ // ****************************************
|
|
|
+ // Change password button
|
|
|
+ // ****************************************
|
|
|
+
|
|
|
+ @FXML
|
|
|
+ private void didClickChangePasswordButton(ActionEvent event) {
|
|
|
+ final Path masterKeyPath = vault.getPath().resolve(Vault.VAULT_MASTERKEY_FILE);
|
|
|
+ final Path masterKeyBackupPath = vault.getPath().resolve(Vault.VAULT_MASTERKEY_BACKUP_FILE);
|
|
|
+
|
|
|
+ // decrypt with old password:
|
|
|
+ final CharSequence oldPassword = oldPasswordField.getCharacters();
|
|
|
+ try (final InputStream masterKeyInputStream = Files.newInputStream(masterKeyPath, StandardOpenOption.READ)) {
|
|
|
+ vault.getCryptor().decryptMasterKey(masterKeyInputStream, oldPassword);
|
|
|
+ Files.copy(masterKeyPath, masterKeyBackupPath, StandardCopyOption.REPLACE_EXISTING);
|
|
|
+ } catch (DecryptFailedException | IOException ex) {
|
|
|
+ messageLabel.setText(rb.getString("changePassword.errorMessage.decryptionFailed"));
|
|
|
+ LOG.error("Decryption failed for technical reasons.", ex);
|
|
|
+ newPasswordField.swipe();
|
|
|
+ retypePasswordField.swipe();
|
|
|
+ return;
|
|
|
+ } catch (WrongPasswordException e) {
|
|
|
+ messageLabel.setText(rb.getString("changePassword.errorMessage.wrongPassword"));
|
|
|
+ newPasswordField.swipe();
|
|
|
+ retypePasswordField.swipe();
|
|
|
+ Platform.runLater(oldPasswordField::requestFocus);
|
|
|
+ return;
|
|
|
+ } catch (UnsupportedKeyLengthException ex) {
|
|
|
+ messageLabel.setText(rb.getString("changePassword.errorMessage.unsupportedKeyLengthInstallJCE"));
|
|
|
+ LOG.warn("Unsupported Key-Length. Please install Oracle Java Cryptography Extension (JCE).", ex);
|
|
|
+ newPasswordField.swipe();
|
|
|
+ retypePasswordField.swipe();
|
|
|
+ return;
|
|
|
+ } finally {
|
|
|
+ oldPasswordField.swipe();
|
|
|
+ }
|
|
|
+
|
|
|
+ // when we reach this line, decryption was successful.
|
|
|
+
|
|
|
+ // encrypt with new password:
|
|
|
+ final CharSequence newPassword = newPasswordField.getCharacters();
|
|
|
+ try (final OutputStream masterKeyOutputStream = Files.newOutputStream(masterKeyPath, StandardOpenOption.WRITE, StandardOpenOption.TRUNCATE_EXISTING, StandardOpenOption.SYNC)) {
|
|
|
+ vault.getCryptor().encryptMasterKey(masterKeyOutputStream, newPassword);
|
|
|
+ messageLabel.setText(rb.getString("changePassword.infoMessage.success"));
|
|
|
+ Platform.runLater(this::didChangePassword);
|
|
|
+ // At this point the backup is still using the old password.
|
|
|
+ // It will be changed as soon as the user unlocks the vault the next time.
|
|
|
+ // This way he can still restore the old password, if he doesn't remember the new one.
|
|
|
+ } catch (IOException ex) {
|
|
|
+ LOG.error("Re-encryption failed for technical reasons. Restoring Backup.", ex);
|
|
|
+ this.restoreBackupQuietly();
|
|
|
+ } finally {
|
|
|
+ newPasswordField.swipe();
|
|
|
+ retypePasswordField.swipe();
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ private void restoreBackupQuietly() {
|
|
|
+ final Path masterKeyPath = vault.getPath().resolve(Vault.VAULT_MASTERKEY_FILE);
|
|
|
+ final Path masterKeyBackupPath = vault.getPath().resolve(Vault.VAULT_MASTERKEY_BACKUP_FILE);
|
|
|
+ try {
|
|
|
+ Files.copy(masterKeyBackupPath, masterKeyPath, StandardCopyOption.REPLACE_EXISTING);
|
|
|
+ } catch (IOException ex) {
|
|
|
+ LOG.error("Restoring Backup failed.", ex);
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ private void didChangePassword() {
|
|
|
+ if (listener != null) {
|
|
|
+ listener.didChangePassword(this);
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /* Getter/Setter */
|
|
|
+
|
|
|
+ public Vault getVault() {
|
|
|
+ return vault;
|
|
|
+ }
|
|
|
+
|
|
|
+ public void setVault(Vault vault) {
|
|
|
+ this.vault = vault;
|
|
|
+ }
|
|
|
+
|
|
|
+ public ChangePasswordListener getListener() {
|
|
|
+ return listener;
|
|
|
+ }
|
|
|
+
|
|
|
+ public void setListener(ChangePasswordListener listener) {
|
|
|
+ this.listener = listener;
|
|
|
+ }
|
|
|
+
|
|
|
+ /* callback */
|
|
|
+
|
|
|
+ interface ChangePasswordListener {
|
|
|
+ void didChangePassword(ChangePasswordController ctrl);
|
|
|
+ }
|
|
|
+
|
|
|
+}
|
Sebastian Stenzel