@capgo/cordova-updater 8.1.1

package/src/ios/BundleInfo.swift

@@ -0,0 +1,185 @@
+/*
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/.
+ */
+
+import Foundation
+
+@objc public class BundleInfo: NSObject, Decodable, Encodable {
+    // swiftlint:disable identifier_name
+    public static let ID_BUILTIN: String = "builtin"
+    public static let VERSION_UNKNOWN: String = "unknown"
+    public static let DOWNLOADED_BUILTIN: String = "1970-01-01T00:00:00.000Z"
+    // swiftlint:enable identifier_name
+
+    private let downloaded: String
+    private let id: String
+    private let version: String
+    private let checksum: String
+    private let status: BundleStatus
+    private let link: String?
+    private let comment: String?
+
+    convenience init(
+        id: String, version: String, status: BundleStatus, downloaded: Date,
+        checksum: String, link: String? = nil, comment: String? = nil
+    ) {
+        self.init(
+            id: id, version: version, status: status,
+            downloaded: downloaded.iso8601withFractionalSeconds,
+            checksum: checksum, link: link, comment: comment)
+    }
+
+    init(
+        id: String, version: String, status: BundleStatus,
+        downloaded: String = BundleInfo.DOWNLOADED_BUILTIN, checksum: String,
+        link: String? = nil, comment: String? = nil
+    ) {
+        self.downloaded = downloaded.trim()
+        self.id = id
+        self.version = version
+        self.checksum = checksum
+        self.status = status
+        self.link = link
+        self.comment = comment
+    }
+
+    enum CodingKeys: String, CodingKey {
+        case downloaded, id, version, status, checksum, link, comment
+    }
+
+    public func isBuiltin() -> Bool {
+        return BundleInfo.ID_BUILTIN == self.id
+    }
+
+    public func isUnknown() -> Bool {
+        return BundleInfo.VERSION_UNKNOWN == self.id
+    }
+
+    public func isErrorStatus() -> Bool {
+        return BundleStatus.ERROR == self.status
+    }
+
+    public func isDeleted() -> Bool {
+        return BundleStatus.DELETED == self.status
+    }
+
+    public func isDeleting() -> Bool {
+        return BundleStatus.DELETING == self.status
+    }
+
+    public func isDownloading() -> Bool {
+        return BundleStatus.DOWNLOADING == self.status
+    }
+
+    public func isDownloaded() -> Bool {
+        return !self.isBuiltin() && self.downloaded != "" &&
+            self.downloaded != BundleInfo.DOWNLOADED_BUILTIN && !self.isDeleted() && !self.isDeleting()
+    }
+
+    public func getDownloaded() -> String {
+        return self.isBuiltin() ? BundleInfo.DOWNLOADED_BUILTIN : self.downloaded
+    }
+
+    public func getChecksum() -> String {
+        return self.isBuiltin() ? "" : self.checksum
+    }
+
+    public func setChecksum(checksum: String) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: self.version, status: self.status,
+            downloaded: self.downloaded, checksum: checksum,
+            link: self.link, comment: self.comment)
+    }
+
+    public func setDownloaded(downloaded: Date) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: self.version, status: self.status,
+            downloaded: downloaded, checksum: self.checksum,
+            link: self.link, comment: self.comment)
+    }
+
+    public func getId() -> String {
+        return self.isBuiltin() ? BundleInfo.ID_BUILTIN : self.id
+    }
+
+    public func setId(id: String) -> BundleInfo {
+        return BundleInfo(
+            id: id, version: self.version, status: self.status,
+            downloaded: self.downloaded, checksum: self.checksum,
+            link: self.link, comment: self.comment)
+    }
+
+    public func getVersionName() -> String {
+        return self.version.isEmpty ? BundleInfo.ID_BUILTIN : self.version
+    }
+
+    public func setVersionName(version: String) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: version, status: self.status,
+            downloaded: self.downloaded, checksum: self.checksum,
+            link: self.link, comment: self.comment)
+    }
+
+    public func getStatus() -> String {
+        return self.isBuiltin() ?
+            BundleStatus.SUCCESS.storedValue : self.status.storedValue
+    }
+
+    public func setStatus(status: String) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: self.version,
+            status: BundleStatus(storedValue: status)!,
+            downloaded: self.downloaded, checksum: self.checksum,
+            link: self.link, comment: self.comment)
+    }
+
+    public func getLink() -> String? {
+        return self.link
+    }
+
+    public func setLink(link: String?) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: self.version, status: self.status,
+            downloaded: self.downloaded, checksum: self.checksum,
+            link: link, comment: self.comment)
+    }
+
+    public func getComment() -> String? {
+        return self.comment
+    }
+
+    public func setComment(comment: String?) -> BundleInfo {
+        return BundleInfo(
+            id: self.id, version: self.version, status: self.status,
+            downloaded: self.downloaded, checksum: self.checksum,
+            link: self.link, comment: comment)
+    }
+
+    public func toJSON() -> [String: String] {
+        var result: [String: String] = [
+            "id": self.getId(),
+            "version": self.getVersionName(),
+            "downloaded": self.getDownloaded(),
+            "checksum": self.getChecksum(),
+            "status": self.getStatus()
+        ]
+        if let link = self.link {
+            result["link"] = link
+        }
+        if let comment = self.comment {
+            result["comment"] = comment
+        }
+        return result
+    }
+
+    public static func == (lhs: BundleInfo, rhs: BundleInfo) -> Bool {
+        return lhs.getVersionName() == rhs.getVersionName()
+    }
+
+    public func toString() -> String {
+        // swiftlint:disable:next line_length
+        return "{ \"id\": \"\(self.getId())\", \"version\": \"\(self.getVersionName())\", \"downloaded\": \"\(self.getDownloaded())\", \"checksum\": \"\(self.getChecksum())\", \"status\": \"\(self.getStatus())\"}"
+    }
+}

package/src/ios/BundleStatus.swift

@@ -0,0 +1,127 @@
+/*
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/.
+ */
+
+import Foundation
+
+struct LocalizedString: ExpressibleByStringLiteral, Equatable {
+
+    let value: String
+
+    init(key: String) {
+        self.value = NSLocalizedString(key, comment: "")
+    }
+    init(localized: String) {
+        self.value = localized
+    }
+    init(stringLiteral val: String) {
+        self.init(key: val)
+    }
+    init(extendedGraphemeClusterLiteral val: String) {
+        self.init(key: val)
+    }
+    init(unicodeScalarLiteral val: String) {
+        self.init(key: val)
+    }
+}
+
+func == (lhs: LocalizedString, rhs: LocalizedString) -> Bool {
+    return lhs.value == rhs.value
+}
+
+enum BundleStatus: LocalizedString, CaseIterable, Decodable, Encodable {
+    case SUCCESS = "success"
+    case ERROR = "error"
+    case PENDING  = "pending"
+    case DELETED  = "deleted"
+    case DELETING = "deleting"
+    case DOWNLOADING  = "downloading"
+
+    var storedValue: String {
+        switch self {
+        case .SUCCESS:
+            return "success"
+        case .ERROR:
+            return "error"
+        case .PENDING:
+            return "pending"
+        case .DELETED:
+            return "deleted"
+        case .DELETING:
+            return "deleting"
+        case .DOWNLOADING:
+            return "downloading"
+        }
+    }
+
+    var localizedString: String {
+        return self.rawValue.value
+    }
+
+    init?(localizedString: String) {
+        let normalized = localizedString.trimmingCharacters(in: .whitespacesAndNewlines)
+        guard let status = BundleStatus.allCases.first(where: { $0.localizedString == normalized }) else {
+            return nil
+        }
+        self = status
+    }
+
+    init?(storedValue: String) {
+        guard let status = BundleStatus.fromStoredValue(storedValue) else {
+            return nil
+        }
+        self = status
+    }
+
+    private static func fromStoredValue(_ value: String) -> BundleStatus? {
+        let normalized = value.trimmingCharacters(in: .whitespacesAndNewlines)
+        if let status = BundleStatus(localizedString: normalized) {
+            return status
+        }
+
+        let storedValue = normalized.lowercased()
+        return BundleStatus.allCases.first(where: { $0.storedValue == storedValue })
+    }
+
+    init(from decoder: Decoder) throws {
+        if let container = try? decoder.singleValueContainer(),
+           let value = try? container.decode(String.self),
+           let status = BundleStatus.fromStoredValue(value) {
+            self = status
+            return
+        }
+
+        if let container = try? decoder.container(keyedBy: DynamicCodingKey.self),
+           let key = container.allKeys.first,
+           let status = BundleStatus.fromStoredValue(key.stringValue) {
+            self = status
+            return
+        }
+
+        throw DecodingError.dataCorrupted(
+            DecodingError.Context(codingPath: decoder.codingPath, debugDescription: "Invalid bundle status")
+        )
+    }
+
+    func encode(to encoder: Encoder) throws {
+        var container = encoder.singleValueContainer()
+        try container.encode(self.storedValue)
+    }
+}
+
+private struct DynamicCodingKey: CodingKey {
+    var stringValue: String
+    var intValue: Int?
+
+    init?(stringValue: String) {
+        self.stringValue = stringValue
+        self.intValue = nil
+    }
+
+    init?(intValue: Int) {
+        self.stringValue = String(intValue)
+        self.intValue = intValue
+    }
+}

package/src/ios/CapgoRawRsa.swift

@@ -0,0 +1,36 @@
+/*
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/.
+ */
+
+import Foundation
+import Security
+import os.log
+
+/// Isolated raw RSA primitives for Capgo v2 checksum/session-key recovery.
+/// SonarCloud automatic analysis has no Swift // NOSONAR; swift:S5542 is ignored
+/// via `.sonarcloud.properties` multicriteria because `.rsaEncryptionRaw` is
+/// intentional wire compatibility with Node `privateEncrypt` / `publicDecrypt`.
+enum CapgoRawRsa {
+    private static let log = OSLog(subsystem: "app.capgo.cordova.updater", category: "RSA")
+
+    static func supportsCapgoRecovery(key: SecKey) -> Bool {
+        SecKeyGetBlockSize(key) == 256
+            && SecKeyIsAlgorithmSupported(key, .encrypt, .rsaEncryptionRaw) // NOSONAR intentional raw RSA for Node privateEncrypt / Capgo checksum recovery
+    }
+
+    static func recoverSignatureBlock(key: SecKey, data: Data) -> Data? {
+        var error: Unmanaged<CFError>?
+        guard let recovered = SecKeyCreateEncryptedData(key, .rsaEncryptionRaw, data as CFData, &error) as Data? else { // NOSONAR intentional raw RSA for Node privateEncrypt / Capgo checksum recovery
+            os_log(
+                "RSA raw recovery failed: %{public}@",
+                log: log,
+                type: .error,
+                String(describing: error?.takeRetainedValue())
+            )
+            return nil
+        }
+        return recovered
+    }
+}