Initial commit

lib/utils/sign_in_flows/calc_redirect_url.dart

@@ -0,0 +1,30 @@
+// SPDX-FileCopyrightText: 2019-Present Christian Kußowski
+// SPDX-FileCopyrightText: 2019-Present Contributors to FluffyChat
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+import 'package:tatchat/config/app_config.dart';
+import 'package:tatchat/utils/platform_infos.dart';
+import 'package:flutter/foundation.dart';
+import 'package:universal_html/html.dart' as html;
+
+(Uri redirectUrl, String urlScheme) calcRedirectUrl({
+  bool withAuthHtmlPath = false,
+}) {
+  var redirectUrl = kIsWeb
+      ? Uri.parse(html.window.location.href.split('#').first.split('?').first)
+      : (PlatformInfos.isMobile || PlatformInfos.isMacOS)
+      ? Uri.parse('${AppConfig.appSsoUrlScheme.toLowerCase()}:/login')
+      : Uri.parse('http://localhost:3001/login');
+
+  if (kIsWeb && withAuthHtmlPath) {
+    redirectUrl = redirectUrl.resolveUri(Uri(pathSegments: ['auth.html']));
+  }
+
+  final urlScheme =
+      (PlatformInfos.isMobile || PlatformInfos.isWeb || PlatformInfos.isMacOS)
+      ? redirectUrl.scheme
+      : 'http://localhost:3001';
+
+  return (redirectUrl, urlScheme);
+}

lib/utils/sign_in_flows/check_homeserver.dart

@@ -0,0 +1,104 @@
+// SPDX-FileCopyrightText: 2019-Present Christian Kußowski
+// SPDX-FileCopyrightText: 2019-Present Contributors to FluffyChat
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+import 'package:tatchat/config/setting_keys.dart';
+import 'package:tatchat/l10n/l10n.dart';
+import 'package:tatchat/pages/sign_in/view_model/model/public_homeserver_data.dart';
+import 'package:tatchat/utils/localized_exception_extension.dart';
+import 'package:tatchat/utils/platform_infos.dart';
+import 'package:tatchat/utils/sign_in_flows/oidc_login.dart';
+import 'package:tatchat/utils/sign_in_flows/sso_login.dart';
+import 'package:tatchat/widgets/adaptive_dialogs/show_ok_cancel_alert_dialog.dart';
+import 'package:tatchat/widgets/matrix.dart';
+import 'package:flutter/foundation.dart';
+import 'package:go_router/go_router.dart';
+import 'package:material_ui/material_ui.dart';
+import 'package:matrix/matrix.dart';
+import 'package:url_launcher/url_launcher_string.dart';
+
+Future<void> connectToHomeserverFlow(
+  PublicHomeserverData homeserverData,
+  BuildContext context,
+  void Function(AsyncSnapshot<bool>) setState,
+  bool signUp,
+) async {
+  setState(AsyncSnapshot.waiting());
+  try {
+    final homeserverInput = homeserverData.name!;
+    var homeserver = Uri.parse(homeserverInput);
+    if (homeserver.scheme.isEmpty) {
+      homeserver = Uri.https(homeserverInput, '');
+    }
+    final l10n = L10n.of(context);
+    final client = await Matrix.of(context).getLoginClient();
+    final (_, _, loginFlows, authMetadata) = await client.checkHomeserver(
+      homeserver,
+      fetchAuthMetadata: true,
+    );
+
+    final regLink = homeserverData.regLink;
+    final supportsSso = loginFlows.any((flow) => flow.type == 'm.login.sso');
+
+    if ((kIsWeb || PlatformInfos.isLinux) &&
+        (supportsSso || authMetadata != null || (signUp && regLink != null))) {
+      if (!context.mounted) return;
+      final consent = await showOkCancelAlertDialog(
+        context: context,
+        title: l10n.appWantsToUseForLogin(homeserverInput),
+        message: l10n.appWantsToUseForLoginDescription,
+        okLabel: l10n.continueText,
+      );
+      if (consent != OkCancelResult.ok) return;
+      if (!context.mounted) return;
+    }
+    if (!context.mounted) return;
+
+    if (authMetadata != null && AppSettings.enableMatrixNativeOIDC.value) {
+      await oidcLoginFlow(client, context, signUp);
+    } else if (supportsSso) {
+      await ssoLoginFlow(client, context, signUp, loginFlows);
+    } else {
+      final segments = GoRouter.of(context)
+          .routeInformationProvider
+          .value
+          .uri
+          .pathSegments;
+      final location =
+          segments.length >= 3 &&
+              segments[0] == 'rooms' &&
+              segments[1] == 'settings'
+          ? '/rooms/settings/addaccount'
+          : '/home';
+      if (signUp && regLink != null) {
+        await launchUrlString(regLink);
+        if (!context.mounted) return;
+      }
+      context.go(
+        '$location/${signUp && regLink == null ? 'register' : 'login'}',
+        extra: client,
+      );
+      setState(AsyncSnapshot.withData(ConnectionState.done, true));
+      return;
+    }
+
+    await AppSettings.defaultHomeserver.setItem(homeserverInput);
+
+    if (context.mounted) {
+      setState(AsyncSnapshot.withData(ConnectionState.done, true));
+      context.go('/backup');
+    }
+  } catch (e, s) {
+    Logs().w('Unable to login', e, s);
+    setState(AsyncSnapshot.withError(ConnectionState.done, e, s));
+    if (!context.mounted) return;
+    ScaffoldMessenger.of(context).showSnackBar(
+      SnackBar(
+        content: Text(
+          e.toLocalizedString(context, ExceptionContext.checkHomeserver),
+        ),
+      ),
+    );
+  }
+}

lib/utils/sign_in_flows/oidc_login.dart

@@ -0,0 +1,92 @@
+// SPDX-FileCopyrightText: 2019-Present Christian Kußowski
+// SPDX-FileCopyrightText: 2019-Present Contributors to FluffyChat
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+import 'dart:convert';
+
+import 'package:tatchat/config/setting_keys.dart';
+import 'package:tatchat/utils/matrix_sdk_extensions/oidc_session_json_extension.dart';
+import 'package:tatchat/utils/platform_infos.dart';
+import 'package:tatchat/utils/sign_in_flows/calc_redirect_url.dart';
+import 'package:flutter/foundation.dart';
+import 'package:flutter_web_auth_2/flutter_web_auth_2.dart';
+import 'package:material_ui/material_ui.dart';
+import 'package:matrix/matrix.dart';
+import 'package:shared_preferences/shared_preferences.dart';
+
+Future<void> oidcLoginFlow(
+  Client client,
+  BuildContext context,
+  bool signUp,
+) async {
+  Logs().i('Starting Matrix Native OIDC Flow...');
+
+  final (redirectUrl, urlScheme) = calcRedirectUrl();
+
+  final clientUri = Uri.parse(AppSettings.website.value);
+  final supportWebPlatform =
+      kIsWeb &&
+      kReleaseMode &&
+      redirectUrl.scheme == 'https' &&
+      redirectUrl.host.contains(clientUri.host);
+  if (kIsWeb && !supportWebPlatform) {
+    Logs().w(
+      'OIDC Application Type web is not supported. Using native now. Please use this instance not in production!',
+    );
+  }
+
+  final oidcClientData = await client.registerOidcClient(
+    redirectUris: [redirectUrl],
+    applicationType: supportWebPlatform
+        ? OidcApplicationType.web
+        : OidcApplicationType.native,
+    clientInformation: OidcClientInformation(
+      clientName: AppSettings.applicationName.value,
+      clientUri: clientUri,
+      logoUri: Uri.parse(AppSettings.logoUrl.value),
+      tosUri: Uri.parse(AppSettings.tos.value),
+      policyUri: Uri.parse(AppSettings.privacyPolicy.value),
+    ),
+  );
+
+  final session = await client.initOidcLoginSession(
+    oidcClientData: oidcClientData,
+    redirectUri: redirectUrl,
+    prompt: signUp ? 'create' : null,
+  );
+
+  if (!context.mounted) return;
+
+  if (kIsWeb) {
+    final store = await SharedPreferences.getInstance();
+    store.setString(
+      OidcSessionJsonExtension.homeserverStoreKey,
+      client.homeserver!.toString(),
+    );
+    store.setString(
+      OidcSessionJsonExtension.storeKey,
+      jsonEncode(session.toJson()),
+    );
+  }
+
+  final returnUrlString = await FlutterWebAuth2.authenticate(
+    url: session.authenticationUri.toString(),
+    callbackUrlScheme: urlScheme,
+    options: FlutterWebAuth2Options(
+      useWebview: PlatformInfos.isMobile,
+      windowName: '_self',
+    ),
+  );
+  if (kIsWeb) return; // On Web we return at intro page when app starts again!
+
+  final returnUrl = Uri.parse(returnUrlString);
+  final queryParameters = returnUrl.fragment.isNotEmpty
+      ? Uri.parse(returnUrl.fragment).queryParameters
+      : returnUrl.queryParameters;
+
+  final code = queryParameters['code'] as String;
+  final state = queryParameters['state'] as String;
+
+  await client.oidcLogin(session: session, code: code, state: state);
+}

lib/utils/sign_in_flows/sso_login.dart

@@ -0,0 +1,74 @@
+// SPDX-FileCopyrightText: 2019-Present Christian Kußowski
+// SPDX-FileCopyrightText: 2019-Present Contributors to FluffyChat
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+import 'package:tatchat/l10n/l10n.dart';
+import 'package:tatchat/utils/platform_infos.dart';
+import 'package:tatchat/utils/sign_in_flows/calc_redirect_url.dart';
+import 'package:tatchat/widgets/adaptive_dialogs/show_modal_action_popup.dart';
+import 'package:flutter_web_auth_2/flutter_web_auth_2.dart';
+import 'package:material_ui/material_ui.dart';
+import 'package:matrix/matrix.dart';
+
+Future<void> ssoLoginFlow(
+  Client client,
+  BuildContext context,
+  bool signUp,
+  List<LoginFlow> loginFlows,
+) async {
+  final (redirectUrl, urlScheme) = calcRedirectUrl(withAuthHtmlPath: true);
+
+  Logs().i('Starting legacy SSO Flow with redirect URL', redirectUrl);
+
+  final ssoProviders =
+      (loginFlows
+                  .firstWhere((flow) => flow.type == 'm.login.sso')
+                  .additionalProperties['identity_providers']
+              as List?)
+          ?.map(
+            (json) => (
+              name: json['name'] as String,
+              id: json['id'] as String,
+              brand: json['brand'] as String?,
+              icon: json['icon'] as String?,
+            ),
+          )
+          .toList();
+
+  final provider = ssoProviders == null
+      ? null
+      : await showModalActionPopup(
+          context: context,
+          title: L10n.of(context).logInTo(client.homeserver!.host),
+          actions: ssoProviders
+              .map(
+                (provider) =>
+                    AdaptiveModalAction(label: provider.name, value: provider),
+              )
+              .toList(),
+        );
+
+  final url = client.homeserver!.replace(
+    path:
+        '/_matrix/client/v3/login/sso/redirect${provider == null ? '' : '/${provider.id}'}',
+    queryParameters: {
+      'redirectUrl': redirectUrl.toString(),
+      'action': signUp ? 'register' : 'login',
+    },
+  );
+
+  final result = await FlutterWebAuth2.authenticate(
+    url: url.toString(),
+    callbackUrlScheme: urlScheme,
+    options: FlutterWebAuth2Options(useWebview: PlatformInfos.isMobile),
+  );
+  final token = Uri.parse(result).queryParameters['loginToken'];
+  if (token?.isEmpty ?? false) return;
+
+  await client.login(
+    LoginType.mLoginToken,
+    token: token,
+    initialDeviceDisplayName: PlatformInfos.appDisplayName,
+  );
+}