2013-03-28 17:29:18 +00:00
|
|
|
<?php
|
2013-05-13 15:26:21 +00:00
|
|
|
|
2013-03-28 17:29:18 +00:00
|
|
|
/**
|
|
|
|
* Copyright (c) 2013, Sam Tuke <samtuke@owncloud.com>
|
|
|
|
* This file is licensed under the Affero General Public License version 3 or later.
|
|
|
|
* See the COPYING-README file.
|
|
|
|
*
|
2014-05-19 15:50:53 +00:00
|
|
|
* Script to handle admin settings for encrypted key recovery
|
2013-03-28 17:29:18 +00:00
|
|
|
*/
|
|
|
|
use OCA\Encryption;
|
|
|
|
|
|
|
|
\OCP\JSON::checkAdminUser();
|
2013-05-13 15:26:21 +00:00
|
|
|
\OCP\JSON::checkAppEnabled('files_encryption');
|
2013-03-28 17:29:18 +00:00
|
|
|
\OCP\JSON::callCheck();
|
|
|
|
|
2014-08-31 08:05:59 +00:00
|
|
|
$l = \OC::$server->getL10N('files_encryption');
|
2013-05-23 20:09:28 +00:00
|
|
|
|
2013-05-13 15:26:21 +00:00
|
|
|
$return = false;
|
2014-10-07 10:06:46 +00:00
|
|
|
$errorMessage = $l->t("Unknown error");
|
|
|
|
|
|
|
|
//check if both passwords are the same
|
|
|
|
if (empty($_POST['recoveryPassword'])) {
|
|
|
|
$errorMessage = $l->t('Missing recovery key password');
|
|
|
|
\OCP\JSON::error(array('data' => array('message' => $errorMessage)));
|
|
|
|
exit();
|
|
|
|
}
|
2013-05-13 15:26:21 +00:00
|
|
|
|
2014-10-07 10:06:46 +00:00
|
|
|
if (empty($_POST['confirmPassword'])) {
|
|
|
|
$errorMessage = $l->t('Please repeat the recovery key password');
|
|
|
|
\OCP\JSON::error(array('data' => array('message' => $errorMessage)));
|
|
|
|
exit();
|
|
|
|
}
|
|
|
|
|
|
|
|
if ($_POST['recoveryPassword'] !== $_POST['confirmPassword']) {
|
|
|
|
$errorMessage = $l->t('Repeated recovery key password does not match the provided recovery key password');
|
|
|
|
\OCP\JSON::error(array('data' => array('message' => $errorMessage)));
|
|
|
|
exit();
|
|
|
|
}
|
|
|
|
|
|
|
|
// Enable recoveryAdmin
|
2014-02-13 15:28:49 +00:00
|
|
|
$recoveryKeyId = \OC::$server->getAppConfig()->getValue('files_encryption', 'recoveryKeyId');
|
2013-03-28 17:29:18 +00:00
|
|
|
|
2013-05-29 21:11:30 +00:00
|
|
|
if (isset($_POST['adminEnableRecovery']) && $_POST['adminEnableRecovery'] === '1') {
|
2013-05-13 15:26:21 +00:00
|
|
|
|
2013-05-17 16:01:32 +00:00
|
|
|
$return = \OCA\Encryption\Helper::adminEnableRecovery($recoveryKeyId, $_POST['recoveryPassword']);
|
2013-05-29 18:27:12 +00:00
|
|
|
|
|
|
|
// Return success or failure
|
|
|
|
if ($return) {
|
2014-10-07 10:06:46 +00:00
|
|
|
$successMessage = $l->t('Recovery key successfully enabled');
|
2013-05-29 18:27:12 +00:00
|
|
|
} else {
|
2014-10-07 10:06:46 +00:00
|
|
|
$errorMessage = $l->t('Could not disable recovery key. Please check your recovery key password!');
|
2013-05-29 18:27:12 +00:00
|
|
|
}
|
2013-05-01 17:18:31 +00:00
|
|
|
|
|
|
|
// Disable recoveryAdmin
|
2013-05-13 15:26:21 +00:00
|
|
|
} elseif (
|
|
|
|
isset($_POST['adminEnableRecovery'])
|
2013-05-29 21:11:30 +00:00
|
|
|
&& '0' === $_POST['adminEnableRecovery']
|
2013-05-01 17:18:31 +00:00
|
|
|
) {
|
2013-05-17 16:01:32 +00:00
|
|
|
$return = \OCA\Encryption\Helper::adminDisableRecovery($_POST['recoveryPassword']);
|
2013-04-10 15:37:03 +00:00
|
|
|
|
2013-05-29 18:27:12 +00:00
|
|
|
if ($return) {
|
2014-10-07 10:06:46 +00:00
|
|
|
$successMessage = $l->t('Recovery key successfully disabled');
|
2013-05-29 18:27:12 +00:00
|
|
|
} else {
|
2014-10-07 10:06:46 +00:00
|
|
|
$errorMessage = $l->t('Could not disable recovery key. Please check your recovery key password!');
|
2013-05-29 18:27:12 +00:00
|
|
|
}
|
2013-05-22 16:01:18 +00:00
|
|
|
}
|
2013-05-29 18:27:12 +00:00
|
|
|
|
2014-10-07 10:06:46 +00:00
|
|
|
// Return success or failure
|
|
|
|
if ($return) {
|
|
|
|
\OCP\JSON::success(array('data' => array('message' => $successMessage)));
|
|
|
|
} else {
|
|
|
|
\OCP\JSON::error(array('data' => array('message' => $errorMessage)));
|
|
|
|
}
|