1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
//
// Copyright Aliaksei Levin (levlam@telegram.org), Arseny Smirnov (arseny30@gmail.com) 2014-2024
//
// Distributed under the Boost Software License, Version 1.0. (See accompanying
// file LICENSE_1_0.txt or copy at http://www.boost.org/LICENSE_1_0.txt)
//
#include "td/telegram/net/NetQueryVerifier.h"
#include "td/telegram/Global.h"
#include "td/telegram/net/NetQueryDispatcher.h"
#include "td/telegram/Td.h"
#include "td/telegram/td_api.h"
#include "td/telegram/telegram_api.h"
#include "td/utils/base64.h"
#include "td/utils/common.h"
#include "td/utils/logging.h"
#include "td/utils/misc.h"
#include "td/utils/Slice.h"
#include "td/utils/Status.h"
#include "td/utils/Storer.h"
#include "td/utils/utf8.h"
#include <tuple>
namespace td {
void NetQueryVerifier::verify(NetQueryPtr query, string nonce) {
CHECK(query->is_ready());
CHECK(query->is_error());
int64 cloud_project_number = 0;
auto status = [&] {
if (!check_utf8(nonce)) {
return Status::Error(400, "Invalid encoding");
}
#if TD_ANDROID
string cloud_project_number_str;
std::tie(cloud_project_number_str, nonce) = split(nonce, '_');
TRY_RESULT_ASSIGN(cloud_project_number, to_integer_safe<int64>(cloud_project_number_str));
TRY_RESULT_ASSIGN(nonce, hex_decode(nonce));
nonce = base64url_encode(nonce);
#endif
return Status::OK();
}();
if (status.is_error()) {
LOG(ERROR) << "Receive " << status;
query->set_error(Status::Error(400, "Invalid verification nonce"));
G()->net_query_dispatcher().dispatch(std::move(query));
return;
}
auto query_id = next_query_id_++;
queries_.emplace(query_id, std::make_pair(std::move(query), nonce));
send_closure(
G()->td(), &Td::send_update,
td_api::make_object<td_api::updateApplicationVerificationRequired>(query_id, nonce, cloud_project_number));
}
void NetQueryVerifier::set_verification_token(int64 query_id, string &&token, Promise<Unit> &&promise) {
auto it = queries_.find(query_id);
if (it == queries_.end()) {
return promise.set_error(Status::Error(400, "Verification not found"));
}
auto query = std::move(it->second.first);
auto nonce = std::move(it->second.second);
queries_.erase(it);
promise.set_value(Unit());
if (token.empty()) {
query->set_error(Status::Error(400, "VERIFICATION_FAILED"));
} else {
#if TD_ANDROID
telegram_api::invokeWithGooglePlayIntegrityPrefix prefix(nonce, token);
#else
telegram_api::invokeWithApnsSecretPrefix prefix(nonce, token);
#endif
auto storer = DefaultStorer<telegram_api::Function>(prefix);
string prefix_str(storer.size(), '\0');
auto real_size = storer.store(MutableSlice(prefix_str).ubegin());
CHECK(real_size == prefix_str.size());
query->add_verification_prefix(prefix_str);
query->resend();
}
G()->net_query_dispatcher().dispatch(std::move(query));
}
void NetQueryVerifier::tear_down() {
for (auto &it : queries_) {
it.second.first->set_error(Global::request_aborted_error());
G()->net_query_dispatcher().dispatch(std::move(it.second.first));
}
queries_.clear();
parent_.reset();
}
} // namespace td
|
