open-keychain/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/util/KeybaseKeyServer.java

/*
 * Copyright (C) 2012-2014 Dominik Schürmann <dominik@dominikschuermann.de>
 * Copyright (C) 2011-2014 Thialfihar <thi@thialfihar.org>
 * Copyright (C) 2011 Senecaso
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.sufficientlysecure.keychain.util;

import org.json.JSONArray;
import org.json.JSONException;
import org.json.JSONObject;
import org.sufficientlysecure.keychain.Constants;
import org.sufficientlysecure.keychain.ui.adapter.ImportKeysListEntry;

import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLEncoder;
import java.util.ArrayList;
import java.util.GregorianCalendar;
import java.util.TimeZone;
import java.util.WeakHashMap;

public class KeybaseKeyServer extends KeyServer {

    private WeakHashMap<String, String> mKeyCache = new WeakHashMap<String, String>();

    private static String readAll(InputStream in, String encoding) throws IOException {
        ByteArrayOutputStream raw = new ByteArrayOutputStream();

        byte buffer[] = new byte[1 << 16];
        int n = 0;
        while ((n = in.read(buffer)) != -1) {
            raw.write(buffer, 0, n);
        }

        if (encoding == null) {
            encoding = "utf8";
        }
        return raw.toString(encoding);
    }

    @Override
    public ArrayList<ImportKeysListEntry> search(String query) throws QueryException, TooManyResponses,
            InsufficientQuery {
        ArrayList<ImportKeysListEntry> results = new ArrayList<ImportKeysListEntry>();

        JSONObject fromQuery = getFromKeybase("_/api/1.0/user/autocomplete.json?q=", query);
        try {

            JSONArray matches = JWalk.getArray(fromQuery, "completions");
            for (int i = 0; i < matches.length(); i++) {
                JSONObject match = matches.getJSONObject(i);

                // only list them if they have a key
                if (JWalk.optObject(match, "components", "key_fingerprint") != null) {
                    results.add(makeEntry(match));
                }
            }
        } catch (Exception e) {
            throw new QueryException("Unexpected structure in keybase search result: " + e.getMessage());
        }

        return results;
    }

    private JSONObject getUser(String keybaseID) throws QueryException {
        try {
            return getFromKeybase("_/api/1.0/user/lookup.json?username=", keybaseID);
        } catch (Exception e) {
            String detail = "";
            if (keybaseID != null) {
                detail = ". Query was for user '" + keybaseID + "'";
            }
            throw new QueryException(e.getMessage() + detail);
        }
    }

    private ImportKeysListEntry makeEntry(JSONObject match) throws QueryException, JSONException {

        String keybaseID = JWalk.getString(match, "components", "username", "val");
        String key_fingerprint = JWalk.getString(match, "components", "key_fingerprint", "val");
        key_fingerprint = key_fingerprint.replace(" ", "").toUpperCase();
        match = getUser(keybaseID);

        final ImportKeysListEntry entry = new ImportKeysListEntry();

        entry.setBitStrength(4096);
        entry.setAlgorithm("RSA");
        entry.setKeyIdHex("0x" + key_fingerprint);

        final long creationDate = JWalk.getLong(match, "them", "public_keys", "primary", "ctime");
        final GregorianCalendar tmpGreg = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
        tmpGreg.setTimeInMillis(creationDate * 1000);
        entry.setDate(tmpGreg.getTime());
        entry.setRevoked(false);
        mKeyCache.put(keybaseID, JWalk.getString(match,"them", "public_keys", "primary", "bundle"));
        String name = JWalk.getString(match, "them", "profile", "full_name");
        ArrayList<String> userIds = new ArrayList<String>();
        userIds.add(name);
        userIds.add("keybase.io/" + keybaseID); // TODO: Maybe should be keybaseID@keybase.io ?
        entry.setUserIds(userIds);
        entry.setPrimaryUserId(name);
        return entry;
    }

    private JSONObject getFromKeybase(String path, String query) throws QueryException {
        try {
            String url = "https://keybase.io/" + path + URLEncoder.encode(query, "utf8");
            Log.d(Constants.TAG, "keybase query: " + url);

            URL realUrl = new URL(url);
            HttpURLConnection conn = (HttpURLConnection) realUrl.openConnection();
            conn.setConnectTimeout(5000); // TODO: Reasonable values for keybase
            conn.setReadTimeout(25000);
            conn.connect();
            int response = conn.getResponseCode();
            if (response >= 200 && response < 300) {
                String text = readAll(conn.getInputStream(), conn.getContentEncoding());
                try {
                    JSONObject json = new JSONObject(text);
                    if (JWalk.getInt(json, "status", "code") != 0) {
                        throw new QueryException("Keybase autocomplete search failed");
                    }
                    return json;
                } catch (JSONException e) {
                    throw new QueryException("Keybase.io query returned broken JSON");
                }
            } else {
                String message = readAll(conn.getErrorStream(), conn.getContentEncoding());
                throw new QueryException("Keybase.io query error (status=" + response +
                        "): " + message);
            }
        } catch (Exception e) {
            throw new QueryException("Keybase.io query error");
        }
    }

    @Override
    public String get(String id) throws QueryException {
        // id is like "keybase/username"
        String keybaseID = id.substring(id.indexOf('/') + 1);
        String key = mKeyCache.get(keybaseID);
        if (key == null) {
            try {
                JSONObject user = getUser(keybaseID);
                key = JWalk.getString(user, "them", "public_keys", "primary", "bundle");
            } catch (Exception e) {
                throw new QueryException(e.getMessage());
            }
        }
        return key;
    }

    @Override
    public void add(String armoredKey) throws AddKeyException {
        throw new AddKeyException();
    }
}