#!/usr/bin/python

# ------------------------------------------------------------

# opensecurity package file

#

# Autor: X-Net Services GmbH <office@x-net.at>

#

# Copyright 2013-2014 X-Net and AIT Austrian Institute of Technology

#

#

#     X-Net Technologies GmbH

#     Elisabethstrasse 1

#     4020 Linz

#     AUSTRIA

#     https://www.x-net.at

#

#     AIT Austrian Institute of Technology

#     Donau City Strasse 1

#     1220 Wien

#     AUSTRIA

#     http://www.ait.ac.at

#

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

#    http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

# ------------------------------------------------------------

import subprocess

import web

import netifaces

import os

import sys

import base64

#import logging

opensecurity_urls = (

    '/password',                'os_password',

    '/init',                    'os_init'

)

#__LOG = logging.getLogger("passwordreceiver")

class os_password:

    # delete the key file in a secure way (will not working on ssd's :/ ,but ram only vm -> should be ok)

    def deleteKeyfile(self, keyfilepath):

        filesize = os.path.getsize(keyfilepath)

        keyfile = open (keyfilepath, "w+")

        for i in range (0, 10):

            keyfile.seek(0)

            keyfile.write(os.urandom(filesize))

            keyfile.flush()

        keyfile.close()

        os.remove(keyfilepath)

    def GET(self, settings):

        return self.POST(settings)

    def POST(self, settings):

        # pick the arguments

        args = web.input()

        if not "password" in args:

            raise web.badrequest()

        if "keyfile" in args:

            keyfile = open (settings["keyfilepath"], "w+")

            keyfile.write(base64.b64decode(args["keyfile"]))

            keyfile.close()

            command = [settings["script"], settings["device"], settings["mountpoint"], args["password"], settings["keyfilepath"]]

        else:

            command = [settings["script"], settings["device"], settings["mountpoint"], args["password"]]

        process = subprocess.Popen( command, stdout=subprocess.PIPE, stderr=subprocess.PIPE )

        retval = process.wait()

        ( stdout, stderr ) = process.communicate()

        if "keyfile" in args:

            self.deleteKeyfile(settings["keyfilepath"])

        if (retval != 0):

            raise web.badrequest(stderr)

        return "Success: Encrypted Stick is mounted"

class os_init:

    # delete the key file in a secure way (will not working on ssd's :/ ,but ram only vm -> should be ok)

    def deleteKeyfile(self, keyfilepath):

        filesize = os.path.getsize(keyfilepath)

        keyfile = open (keyfilepath, "w+")

        for i in range (0, 10):

            keyfile.seek(0)

            keyfile.write(os.urandom(filesize))

            keyfile.flush()

        keyfile.close()

        os.remove(keyfilepath)

    def runPreInitScript(self, preinitscript, device):

        #__LOG.debug("Start preinit Script")

        command = [preinitscript, device]

        process = subprocess.Popen( command, stdout=subprocess.PIPE, stderr=subprocess.PIPE )

        retval = process.wait()

        ( stdout, stderr ) = process.communicate()

        #__LOG.debug("preinit done result: %s" %(retval,))

        if (retval != 0):

            raise web.badrequest(stderr)

    def runPostInitScript(self, postinitscript):

        #__LOG.debug("Start postinit Script")

        command = [postinitscript]

        process = subprocess.Popen( command, stdout=subprocess.PIPE, stderr=subprocess.PIPE )

        retval = process.wait()

        ( stdout, stderr ) = process.communicate()

        #__LOG.debug("postinit done result: %s" %(retval,))

        if (retval != 0):

            raise web.badrequest(stderr)

    def GET(self, settings):

        return self.POST(settings)

    def POST(self, settings):

        # pick the arguments

        args = web.input()

        if not "password" in args:

            raise web.badrequest()

        # Do the preinit stuff

        self.runPreInitScript(settings["preinitscript"], settings["device"])

        if "keyfile" in args:

            keyfile = open (settings["keyfilepath"], "w+")

            keyfile.write(base64.b64decode(args["keyfile"]))

            keyfile.close()

            command = [settings["script"], settings["device"], settings["mountpoint"], args["password"], settings["keyfilepath"]]

        else:

            command = [settings["script"], settings["device"], settings["mountpoint"], args["password"]]

        #__LOG.debug("Start init script")

        process = subprocess.Popen( command, stdout=subprocess.PIPE, stderr=subprocess.PIPE )

        retval = process.wait()

        ( stdout, stderr ) = process.communicate()

        if "keyfile" in args:

            self.deleteKeyfile(settings["keyfilepath"])

        #__LOG.debug("init done result: %s" %(retval,))

        if (retval != 0):

            raise web.badrequest(stderr)

        # Do the postinit stuff

        self.runPostInitScript(settings["postinitscript"])

        return "Success: Stick is initialized and mounted"

class MyRestListener(web.application):

    def __init__(self, mapping=(), fvars={}, autoreload=None, script=None, device=None, mountpoint=None, tries=None, keyfilepath=None, preinitscript=None, postinitscript=None):

        web.application.__init__(self, mapping, fvars, autoreload)

        self.device = device

        self.mountpoint = mountpoint

        self.script = script

        self.tries = tries

        self.keyfilepath = keyfilepath

        self.preinitscript = preinitscript

        self.postinitscript = postinitscript

    def run(self, interface, port, *middleware):

        func = self.wsgifunc(*middleware)

        ifaceip = netifaces.ifaddresses(interface)[2][0]["addr"]

        return web.httpserver.runsimple(func, (ifaceip, port))

    def handle(self):

        fn, args = self._match(self.mapping, web.ctx.path)

        args.append({"script": self.script, "device": self.device, "mountpoint": self.mountpoint, "tries": self.tries, "keyfilepath": self.keyfilepath, "preinitscript": self.preinitscript, "postinitscript": self.postinitscript})

        return self._delegate(fn, self.fvars, args)