| /* |
| * Copyright (C) 2010 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package com.android.settings.password; |
| |
| import static com.android.settings.Utils.SETTINGS_PACKAGE_NAME; |
| |
| import android.annotation.Nullable; |
| import android.app.Activity; |
| import android.app.KeyguardManager; |
| import android.app.admin.DevicePolicyManager; |
| import android.content.Intent; |
| import android.content.IntentSender; |
| import android.os.Bundle; |
| import android.os.UserManager; |
| |
| import androidx.annotation.VisibleForTesting; |
| import androidx.fragment.app.Fragment; |
| |
| import com.android.internal.widget.LockPatternUtils; |
| import com.android.settings.SetupWizardUtils; |
| import com.android.settings.Utils; |
| import com.android.settings.core.SubSettingLauncher; |
| |
| import com.google.android.setupcompat.util.WizardManagerHelper; |
| |
| public final class ChooseLockSettingsHelper { |
| |
| public static final String EXTRA_KEY_TYPE = "type"; |
| public static final String EXTRA_KEY_PASSWORD = "password"; |
| public static final String EXTRA_KEY_RETURN_CREDENTIALS = "return_credentials"; |
| public static final String EXTRA_KEY_HAS_CHALLENGE = "has_challenge"; |
| public static final String EXTRA_KEY_CHALLENGE = "challenge"; |
| public static final String EXTRA_KEY_CHALLENGE_TOKEN = "hw_auth_token"; |
| public static final String EXTRA_KEY_FOR_FINGERPRINT = "for_fingerprint"; |
| public static final String EXTRA_KEY_FOR_FACE = "for_face"; |
| public static final String EXTRA_KEY_FOR_CHANGE_CRED_REQUIRED_FOR_BOOT = "for_cred_req_boot"; |
| public static final String EXTRA_KEY_FOREGROUND_ONLY = "foreground_only"; |
| |
| /** |
| * When EXTRA_KEY_UNIFICATION_PROFILE_CREDENTIAL and EXTRA_KEY_UNIFICATION_PROFILE_ID are |
| * provided to ChooseLockGeneric as fragment arguments {@link SubSettingLauncher#setArguments}, |
| * at the end of the password change flow, the supplied profile user |
| * (EXTRA_KEY_UNIFICATION_PROFILE_ID) will be unified to its parent. The current profile |
| * password is supplied by EXTRA_KEY_UNIFICATION_PROFILE_CREDENTIAL. |
| */ |
| public static final String EXTRA_KEY_UNIFICATION_PROFILE_ID = "unification_profile_id"; |
| public static final String EXTRA_KEY_UNIFICATION_PROFILE_CREDENTIAL = |
| "unification_profile_credential"; |
| |
| /** |
| * Intent extra for passing the requested min password complexity to later steps in the set new |
| * screen lock flow. |
| */ |
| public static final String EXTRA_KEY_REQUESTED_MIN_COMPLEXITY = "requested_min_complexity"; |
| |
| /** |
| * Intent extra for passing the label of the calling app to later steps in the set new screen |
| * lock flow. |
| */ |
| public static final String EXTRA_KEY_CALLER_APP_NAME = "caller_app_name"; |
| |
| /** |
| * Intent extra indicating that the calling app is an admin, such as a Device Adimn, Device |
| * Owner, or Profile Owner. |
| */ |
| public static final String EXTRA_KEY_IS_CALLING_APP_ADMIN = "is_calling_app_admin"; |
| |
| /** |
| * When invoked via {@link ConfirmLockPassword.InternalActivity}, this flag |
| * controls if we relax the enforcement of |
| * {@link Utils#enforceSameOwner(android.content.Context, int)}. |
| */ |
| public static final String EXTRA_ALLOW_ANY_USER = "allow_any_user"; |
| |
| @VisibleForTesting LockPatternUtils mLockPatternUtils; |
| private Activity mActivity; |
| private Fragment mFragment; |
| |
| public ChooseLockSettingsHelper(Activity activity) { |
| mActivity = activity; |
| mLockPatternUtils = new LockPatternUtils(activity); |
| } |
| |
| public ChooseLockSettingsHelper(Activity activity, Fragment fragment) { |
| this(activity); |
| mFragment = fragment; |
| } |
| |
| public LockPatternUtils utils() { |
| return mLockPatternUtils; |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivity(int request, CharSequence title) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| null /* header */, |
| null /* description */, |
| false /* returnCredentials */, |
| false /* external */, |
| false /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param returnCredentials if true, put credentials into intent. Note that if this is true, |
| * this can only be called internally. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivity(int request, CharSequence title, boolean returnCredentials) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| null /* header */, |
| null /* description */, |
| returnCredentials /* returnCredentials */, |
| false /* external */, |
| false /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param returnCredentials if true, put credentials into intent. Note that if this is true, |
| * this can only be called internally. |
| * @param userId The userId for whom the lock should be confirmed. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivity(int request, CharSequence title, |
| boolean returnCredentials, int userId) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| null /* header */, |
| null /* description */, |
| returnCredentials /* returnCredentials */, |
| false /* external */, |
| false /* hasChallenge */, |
| 0 /* challenge */, |
| Utils.enforceSameOwner(mActivity, userId) /* userId */, |
| false /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param header header of the confirmation screen; shown as large text |
| * @param description description of the confirmation screen |
| * @param returnCredentials if true, put credentials into intent. Note that if this is true, |
| * this can only be called internally. |
| * @param external specifies whether this activity is launched externally, meaning that it will |
| * get a dark theme, allow fingerprint authentication and it will forward |
| * activity result. |
| * @param foregroundOnly if the confirmation activity should be finished if it loses foreground. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| boolean returnCredentials, boolean external, boolean foregroundOnly) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| returnCredentials /* returnCredentials */, |
| external /* external */, |
| false /* hasChallenge */, |
| 0 /* challenge */, |
| Utils.getCredentialOwnerUserId(mActivity) /* userId */, |
| foregroundOnly /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param header header of the confirmation screen; shown as large text |
| * @param description description of the confirmation screen |
| * @param returnCredentials if true, put credentials into intent. Note that if this is true, |
| * this can only be called internally. |
| * @param external specifies whether this activity is launched externally, meaning that it will |
| * get a dark theme, allow fingerprint authentication and it will forward |
| * activity result. |
| * @param userId The userId for whom the lock should be confirmed. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| boolean returnCredentials, boolean external, int userId) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| returnCredentials /* returnCredentials */, |
| external /* external */, |
| false /* hasChallenge */, |
| 0 /* challenge */, |
| Utils.enforceSameOwner(mActivity, userId) /* userId */, |
| false /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param header header of the confirmation screen; shown as large text |
| * @param description description of the confirmation screen |
| * @param challenge a challenge to be verified against the device credential. |
| * @param foregroundOnly if the confirmation activity should be finished if it loses foreground. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| long challenge, boolean foregroundOnly) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| true /* returnCredentials */, |
| false /* external */, |
| true /* hasChallenge */, |
| challenge /* challenge */, |
| Utils.getCredentialOwnerUserId(mActivity) /* userId */, |
| foregroundOnly /* foregroundOnly */); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param header header of the confirmation screen; shown as large text |
| * @param description description of the confirmation screen |
| * @param challenge a challenge to be verified against the device credential. |
| * @param userId The userId for whom the lock should be confirmed. |
| * @param foregroundOnly if the confirmation activity should be finished if it loses foreground. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| long challenge, int userId, boolean foregroundOnly) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| true /* returnCredentials */, |
| false /* external */, |
| true /* hasChallenge */, |
| challenge /* challenge */, |
| Utils.enforceSameOwner(mActivity, userId) /* userId */, |
| foregroundOnly); |
| } |
| |
| /** |
| * If a pattern, password or PIN exists, prompt the user before allowing them to change it. |
| * |
| * @param title title of the confirmation screen; shown in the action bar |
| * @param header header of the confirmation screen; shown as large text |
| * @param description description of the confirmation screen |
| * @param external specifies whether this activity is launched externally, meaning that it will |
| * get a dark theme, allow fingerprint authentication and it will forward |
| * activity result. |
| * @param challenge a challenge to be verified against the device credential. |
| * @param userId The userId for whom the lock should be confirmed. |
| * @return true if one exists and we launched an activity to confirm it |
| * @see Activity#onActivityResult(int, int, android.content.Intent) |
| */ |
| public boolean launchConfirmationActivityWithExternalAndChallenge(int request, |
| @Nullable CharSequence title, @Nullable CharSequence header, |
| @Nullable CharSequence description, boolean external, long challenge, int userId) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| false /* returnCredentials */, |
| external /* external */, |
| true /* hasChallenge */, |
| challenge /* challenge */, |
| Utils.enforceSameOwner(mActivity, userId) /* userId */, |
| false /* foregroundOnly */); |
| } |
| |
| /** |
| * Variant that allows you to prompt for credentials of any user, including |
| * those which aren't associated with the current user. As an example, this |
| * is useful when unlocking the storage for secondary users. |
| */ |
| public boolean launchConfirmationActivityForAnyUser(int request, |
| @Nullable CharSequence title, @Nullable CharSequence header, |
| @Nullable CharSequence description, int userId) { |
| final Bundle extras = new Bundle(); |
| extras.putBoolean(EXTRA_ALLOW_ANY_USER, true); |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| false /* returnCredentials */, |
| false /* external */, |
| true /* hasChallenge */, |
| 0 /* challenge */, |
| userId /* userId */, |
| extras /* extras */); |
| } |
| |
| private boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| boolean returnCredentials, boolean external, boolean hasChallenge, |
| long challenge, int userId, boolean foregroundOnly) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| returnCredentials /* returnCredentials */, |
| external /* external */, |
| hasChallenge /* hasChallenge */, |
| challenge /* challenge */, |
| userId /* userId */, |
| null /* alternateButton */, |
| null /* extras */, |
| foregroundOnly /* foregroundOnly */); |
| } |
| |
| private boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| boolean returnCredentials, boolean external, boolean hasChallenge, |
| long challenge, int userId, Bundle extras) { |
| return launchConfirmationActivity( |
| request /* request */, |
| title /* title */, |
| header /* header */, |
| description /* description */, |
| returnCredentials /* returnCredentials */, |
| external /* external */, |
| hasChallenge /* hasChallenge */, |
| challenge /* challenge */, |
| userId /* userId */, |
| null /* alternateButton */, |
| extras /* extras */, |
| false /* foregroundOnly */); |
| } |
| |
| public boolean launchFrpConfirmationActivity(int request, @Nullable CharSequence header, |
| @Nullable CharSequence description, @Nullable CharSequence alternateButton) { |
| return launchConfirmationActivity( |
| request /* request */, |
| null /* title */, |
| header /* header */, |
| description /* description */, |
| false /* returnCredentials */, |
| true /* external */, |
| false /* hasChallenge */, |
| 0 /* challenge */, |
| LockPatternUtils.USER_FRP /* userId */, |
| alternateButton /* alternateButton */, |
| null /* extras */, |
| false /* foregroundOnly */); |
| } |
| |
| private boolean launchConfirmationActivity(int request, @Nullable CharSequence title, |
| @Nullable CharSequence header, @Nullable CharSequence description, |
| boolean returnCredentials, boolean external, boolean hasChallenge, |
| long challenge, int userId, @Nullable CharSequence alternateButton, Bundle extras, |
| boolean foregroundOnly) { |
| final int effectiveUserId = UserManager.get(mActivity).getCredentialOwnerProfile(userId); |
| boolean launched = false; |
| |
| switch (mLockPatternUtils.getKeyguardStoredPasswordQuality(effectiveUserId)) { |
| case DevicePolicyManager.PASSWORD_QUALITY_SOMETHING: |
| launched = launchConfirmationActivity(request, title, header, description, |
| returnCredentials || hasChallenge |
| ? ConfirmLockPattern.InternalActivity.class |
| : ConfirmLockPattern.class, returnCredentials, external, |
| hasChallenge, challenge, userId, alternateButton, extras, |
| foregroundOnly); |
| break; |
| case DevicePolicyManager.PASSWORD_QUALITY_NUMERIC: |
| case DevicePolicyManager.PASSWORD_QUALITY_NUMERIC_COMPLEX: |
| case DevicePolicyManager.PASSWORD_QUALITY_ALPHABETIC: |
| case DevicePolicyManager.PASSWORD_QUALITY_ALPHANUMERIC: |
| case DevicePolicyManager.PASSWORD_QUALITY_COMPLEX: |
| case DevicePolicyManager.PASSWORD_QUALITY_MANAGED: |
| launched = launchConfirmationActivity(request, title, header, description, |
| returnCredentials || hasChallenge |
| ? ConfirmLockPassword.InternalActivity.class |
| : ConfirmLockPassword.class, returnCredentials, external, |
| hasChallenge, challenge, userId, alternateButton, extras, |
| foregroundOnly); |
| break; |
| } |
| return launched; |
| } |
| |
| private boolean launchConfirmationActivity(int request, CharSequence title, CharSequence header, |
| CharSequence message, Class<?> activityClass, boolean returnCredentials, |
| boolean external, boolean hasChallenge, long challenge, |
| int userId, @Nullable CharSequence alternateButton, Bundle extras, |
| boolean foregroundOnly) { |
| final Intent intent = new Intent(); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.TITLE_TEXT, title); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.HEADER_TEXT, header); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.DETAILS_TEXT, message); |
| // TODO: Remove dark theme and show_cancel_button options since they are no longer used |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.DARK_THEME, false); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.SHOW_CANCEL_BUTTON, false); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.SHOW_WHEN_LOCKED, external); |
| intent.putExtra(ConfirmDeviceCredentialBaseFragment.USE_FADE_ANIMATION, external); |
| intent.putExtra(ChooseLockSettingsHelper.EXTRA_KEY_RETURN_CREDENTIALS, returnCredentials); |
| intent.putExtra(ChooseLockSettingsHelper.EXTRA_KEY_HAS_CHALLENGE, hasChallenge); |
| intent.putExtra(ChooseLockSettingsHelper.EXTRA_KEY_CHALLENGE, challenge); |
| intent.putExtra(Intent.EXTRA_USER_ID, userId); |
| intent.putExtra(KeyguardManager.EXTRA_ALTERNATE_BUTTON_LABEL, alternateButton); |
| intent.putExtra(ChooseLockSettingsHelper.EXTRA_KEY_FOREGROUND_ONLY, foregroundOnly); |
| if (extras != null) { |
| intent.putExtras(extras); |
| } |
| intent.setClassName(SETTINGS_PACKAGE_NAME, activityClass.getName()); |
| if (external) { |
| intent.addFlags(Intent.FLAG_ACTIVITY_FORWARD_RESULT); |
| if (mFragment != null) { |
| copyOptionalExtras(mFragment.getActivity().getIntent(), intent); |
| mFragment.startActivity(intent); |
| } else { |
| copyOptionalExtras(mActivity.getIntent(), intent); |
| mActivity.startActivity(intent); |
| } |
| } else { |
| if (mFragment != null) { |
| copyInternalExtras(mFragment.getActivity().getIntent(), intent); |
| mFragment.startActivityForResult(intent, request); |
| } else { |
| copyInternalExtras(mActivity.getIntent(), intent); |
| mActivity.startActivityForResult(intent, request); |
| } |
| } |
| return true; |
| } |
| |
| private void copyOptionalExtras(Intent inIntent, Intent outIntent) { |
| IntentSender intentSender = inIntent.getParcelableExtra(Intent.EXTRA_INTENT); |
| if (intentSender != null) { |
| outIntent.putExtra(Intent.EXTRA_INTENT, intentSender); |
| } |
| int taskId = inIntent.getIntExtra(Intent.EXTRA_TASK_ID, -1); |
| if (taskId != -1) { |
| outIntent.putExtra(Intent.EXTRA_TASK_ID, taskId); |
| } |
| // If we will launch another activity once credentials are confirmed, exclude from recents. |
| // This is a workaround to a framework bug where affinity is incorrect for activities |
| // that are started from a no display activity, as is ConfirmDeviceCredentialActivity. |
| // TODO: Remove once that bug is fixed. |
| if (intentSender != null || taskId != -1) { |
| outIntent.addFlags(Intent.FLAG_ACTIVITY_EXCLUDE_FROM_RECENTS); |
| outIntent.addFlags(Intent.FLAG_ACTIVITY_NO_HISTORY); |
| } |
| } |
| |
| private void copyInternalExtras(Intent inIntent, Intent outIntent) { |
| SetupWizardUtils.copySetupExtras(inIntent, outIntent); |
| String theme = inIntent.getStringExtra(WizardManagerHelper.EXTRA_THEME); |
| if (theme != null) { |
| outIntent.putExtra(WizardManagerHelper.EXTRA_THEME, theme); |
| } |
| } |
| } |
