annotate easyhg.py @ 444:66ec8b2ee946

Provide auth key and file information to easyhg extension
author Chris Cannam
date Tue, 28 Jun 2011 15:59:13 +0100
parents b616c9c6cfd2
children ff6252986354
rev   line source
Chris@427 1 # -*- coding: utf-8 -*-
Chris@427 2 #
Chris@427 3 # EasyMercurial
Chris@427 4 #
Chris@427 5 # Based on hgExplorer by Jari Korhonen
Chris@427 6 # Copyright (c) 2010 Jari Korhonen
Chris@427 7 # Copyright (c) 2010 Chris Cannam
Chris@427 8 # Copyright (c) 2010 Queen Mary, University of London
Chris@427 9 #
Chris@427 10 # This program is free software; you can redistribute it and/or
Chris@427 11 # modify it under the terms of the GNU General Public License as
Chris@427 12 # published by the Free Software Foundation; either version 2 of the
Chris@427 13 # License, or (at your option) any later version. See the file
Chris@427 14 # COPYING included with this distribution for more information.
Chris@427 15
Chris@438 16 import sys, os, stat, urllib, urllib2, urlparse
Chris@427 17
Chris@438 18 from mercurial.i18n import _
Chris@433 19 from mercurial import ui, util, error
Chris@427 20 try:
Chris@427 21 from mercurial.url import passwordmgr
Chris@427 22 except:
Chris@427 23 from mercurial.httprepo import passwordmgr
Chris@427 24
Chris@427 25 # The value assigned here may be modified during installation, by
Chris@427 26 # replacing its default value with another one. We can't compare
Chris@427 27 # against its default value, because then the comparison text would
Chris@427 28 # get modified as well. So, compare using prefix only.
Chris@427 29 #
Chris@427 30 easyhg_import_path = 'NO_EASYHG_IMPORT_PATH'
Chris@427 31 if not easyhg_import_path.startswith('NO_'):
Chris@427 32 # We have an installation path: append it twice, once with
Chris@427 33 # the Python version suffixed
Chris@440 34 version_suffix = 'Py%d.%d' % (sys.version_info[0], sys.version_info[1])
Chris@427 35 sys.path.append(easyhg_import_path + "/" + version_suffix)
Chris@427 36 sys.path.append(easyhg_import_path)
Chris@427 37
Chris@427 38 # Try to load the PyQt4 module that we need. If this fails, we should
Chris@427 39 # bail out later (in uisetup), because if we bail out now, Mercurial
Chris@427 40 # will just continue without us and report success. The invoking
Chris@427 41 # application needs to be able to discover whether the module load
Chris@427 42 # succeeded or not, so we need to ensure that Mercurial itself returns
Chris@427 43 # failure if it didn't.
Chris@427 44 #
Chris@427 45 easyhg_pyqt_ok = True
Chris@427 46 try:
Chris@427 47 from PyQt4 import Qt, QtGui
Chris@427 48 except ImportError:
Chris@427 49 easyhg_pyqt_ok = False
Chris@427 50 easyhg_qtapp = None
Chris@427 51
Chris@440 52 # These imports are optional, we just can't use the authfile (i.e.
Chris@438 53 # "remember this password") feature without them
Chris@438 54 #
Chris@437 55 easyhg_authfile_imports_ok = True
Chris@437 56 try:
Chris@437 57 from Crypto.Cipher import AES
Chris@437 58 import ConfigParser # Mercurial version won't write files
Chris@437 59 import base64
Chris@437 60 except ImportError:
Chris@437 61 easyhg_authfile_imports_ok = False
Chris@433 62
Chris@431 63
Chris@439 64 def encrypt_salted(text, key):
Chris@439 65 salt = os.urandom(8)
Chris@439 66 text = '%d.%s.%s' % (len(text), base64.b64encode(salt), text)
Chris@431 67 text += (16 - len(text) % 16) * ' '
Chris@431 68 cipher = AES.new(key)
Chris@431 69 return base64.b64encode(cipher.encrypt(text))
Chris@431 70
Chris@439 71 def decrypt_salted(ctext, key):
Chris@431 72 cipher = AES.new(key)
Chris@431 73 text = cipher.decrypt(base64.b64decode(ctext))
Chris@431 74 (tlen, d, text) = text.partition('.')
Chris@439 75 (salt, d, text) = text.partition('.')
Chris@431 76 return text[0:int(tlen)]
Chris@431 77
Chris@427 78 # from mercurial_keyring by Marcin Kasperski
Chris@427 79 def canonical_url(authuri):
Chris@427 80 parsed_url = urlparse.urlparse(authuri)
Chris@427 81 return "%s://%s%s" % (parsed_url.scheme, parsed_url.netloc,
Chris@427 82 parsed_url.path)
Chris@427 83
Chris@436 84 def load_config(pcfg, pfile):
Chris@434 85 fp = None
Chris@434 86 try:
Chris@434 87 fp = open(pfile)
Chris@434 88 except:
Chris@440 89 return
Chris@440 90 pcfg.readfp(fp)
Chris@440 91 fp.close()
Chris@434 92
Chris@444 93 def save_config(ui, pcfg, pfile):
Chris@434 94 ofp = None
Chris@434 95 try:
Chris@434 96 ofp = open(pfile, 'w')
Chris@434 97 except:
Chris@444 98 ui.write("failed to open authfile %s for writing\n" % pfile)
Chris@434 99 raise
Chris@434 100 try:
Chris@438 101 #!!! Windows equivalent?
Chris@438 102 os.fchmod(ofp.fileno(), stat.S_IRUSR | stat.S_IWUSR)
Chris@434 103 except:
Chris@434 104 ofp.close()
Chris@444 105 ui.write("failed to set permissions on authfile %s\n" % pfile)
Chris@434 106 raise
Chris@434 107 pcfg.write(ofp)
Chris@434 108 ofp.close()
Chris@434 109
Chris@436 110 def get_from_config(pcfg, sect, key):
Chris@436 111 data = None
Chris@436 112 try:
Chris@436 113 data = pcfg.get(sect, key)
Chris@436 114 except (ConfigParser.NoOptionError, ConfigParser.NoSectionError):
Chris@436 115 pass
Chris@436 116 return data
Chris@436 117
Chris@436 118 def get_boolean_from_config(pcfg, sect, key, deflt):
Chris@436 119 data = deflt
Chris@436 120 try:
Chris@436 121 data = pcfg.getboolean(sect, key)
Chris@436 122 except (ConfigParser.NoOptionError, ConfigParser.NoSectionError):
Chris@436 123 pass
Chris@436 124 return data
Chris@436 125
Chris@436 126 def set_to_config(pcfg, sect, key, data):
Chris@436 127 if not pcfg.has_section(sect):
Chris@436 128 pcfg.add_section(sect)
Chris@436 129 pcfg.set(sect, key, data)
Chris@436 130
Chris@438 131 def remote_key(uri, user):
Chris@440 132 # generate a "safe-for-config-file" key representing uri+user
Chris@440 133 # tuple (n.b. trailing = on base64 is not safe)
Chris@438 134 return base64.b64encode('%s@@%s' % (uri, user)).replace('=', '_')
Chris@438 135
Chris@440 136
Chris@440 137 def uisetup(ui):
Chris@440 138 if not easyhg_pyqt_ok:
Chris@440 139 raise util.Abort(_('Failed to load PyQt4 module required by easyhg.py'))
Chris@440 140 global easyhg_qtapp
Chris@440 141 easyhg_qtapp = QtGui.QApplication([])
Chris@440 142
Chris@440 143 def monkeypatch_method(cls):
Chris@440 144 def decorator(func):
Chris@440 145 setattr(cls, func.__name__, func)
Chris@440 146 return func
Chris@440 147 return decorator
Chris@440 148
Chris@440 149 orig_find = passwordmgr.find_user_password
Chris@440 150
Chris@427 151 @monkeypatch_method(passwordmgr)
Chris@427 152 def find_user_password(self, realm, authuri):
Chris@427 153
Chris@427 154 if not self.ui.interactive():
Chris@427 155 return orig_find(self, realm, authuri)
Chris@427 156 if not easyhg_pyqt_ok:
Chris@427 157 return orig_find(self, realm, authuri)
Chris@427 158
Chris@427 159 authinfo = urllib2.HTTPPasswordMgrWithDefaultRealm.find_user_password(
Chris@427 160 self, realm, authuri)
Chris@427 161 user, passwd = authinfo
Chris@427 162
Chris@427 163 if user and passwd:
Chris@427 164 return orig_find(self, realm, authuri)
Chris@427 165
Chris@440 166 # self.ui.write("want username and/or password for %s\n" % authuri)
Chris@427 167
Chris@440 168 short_uri = canonical_url(authuri)
Chris@427 169
Chris@440 170 authkey = self.ui.config('easyhg', 'authkey')
Chris@440 171 authfile = self.ui.config('easyhg', 'authfile')
Chris@440 172 use_authfile = (easyhg_authfile_imports_ok and authkey and authfile)
Chris@440 173 if authfile:
Chris@440 174 authfile = os.path.expanduser(authfile)
Chris@440 175 authdata = None
Chris@427 176
Chris@427 177 dialog = QtGui.QDialog()
Chris@427 178 layout = QtGui.QGridLayout()
Chris@427 179 dialog.setLayout(layout)
Chris@427 180
Chris@440 181 layout.addWidget(QtGui.QLabel(_('<h3>Login required</h3><p>Please provide your login details for the repository at<br><code>%s</code>:') % short_uri), 0, 0, 1, 2)
Chris@427 182
Chris@440 183 user_field = QtGui.QLineEdit()
Chris@427 184 if user:
Chris@440 185 user_field.setText(user)
Chris@427 186 layout.addWidget(QtGui.QLabel(_('User:')), 1, 0)
Chris@440 187 layout.addWidget(user_field, 1, 1)
Chris@427 188
Chris@440 189 passwd_field = QtGui.QLineEdit()
Chris@440 190 passwd_field.setEchoMode(QtGui.QLineEdit.Password)
Chris@427 191 if passwd:
Chris@440 192 passwd_field.setText(passwd)
Chris@427 193 layout.addWidget(QtGui.QLabel(_('Password:')), 2, 0)
Chris@440 194 layout.addWidget(passwd_field, 2, 1)
Chris@427 195
Chris@440 196 user_field.connect(user_field, Qt.SIGNAL("textChanged(QString)"),
Chris@440 197 passwd_field, Qt.SLOT("clear()"))
Chris@435 198
Chris@440 199 remember_field = None
Chris@440 200 remember = False
Chris@440 201 authconfig = None
Chris@433 202
Chris@436 203 if use_authfile:
Chris@440 204 authconfig = ConfigParser.RawConfigParser()
Chris@440 205 load_config(authconfig, authfile)
Chris@440 206 remember = get_boolean_from_config(authconfig, 'preferences',
Chris@440 207 'remember', False)
Chris@440 208 authdata = get_from_config(authconfig, 'auth',
Chris@440 209 remote_key(short_uri, user))
Chris@440 210 if authdata:
Chris@440 211 cachedpwd = decrypt_salted(authdata, authkey)
Chris@440 212 passwd_field.setText(cachedpwd)
Chris@440 213 remember_field = QtGui.QCheckBox()
Chris@440 214 remember_field.setChecked(remember)
Chris@444 215 remember_field.setText(_('Remember passwords while EasyMercurial is running'))
Chris@440 216 layout.addWidget(remember_field, 3, 1)
Chris@431 217
Chris@427 218 bb = QtGui.QDialogButtonBox()
Chris@427 219 ok = bb.addButton(bb.Ok)
Chris@427 220 cancel = bb.addButton(bb.Cancel)
Chris@427 221 cancel.setDefault(False)
Chris@427 222 cancel.setAutoDefault(False)
Chris@427 223 ok.setDefault(True)
Chris@427 224 bb.connect(ok, Qt.SIGNAL("clicked()"), dialog, Qt.SLOT("accept()"))
Chris@427 225 bb.connect(cancel, Qt.SIGNAL("clicked()"), dialog, Qt.SLOT("reject()"))
Chris@431 226 layout.addWidget(bb, 4, 0, 1, 2)
Chris@427 227
Chris@428 228 dialog.setWindowTitle(_('EasyMercurial: Login'))
Chris@427 229 dialog.show()
Chris@428 230
Chris@428 231 if not user:
Chris@440 232 user_field.setFocus(True)
Chris@428 233 elif not passwd:
Chris@440 234 passwd_field.setFocus(True)
Chris@428 235
Chris@427 236 dialog.raise_()
Chris@427 237 ok = dialog.exec_()
Chris@436 238 if not ok:
Chris@436 239 raise util.Abort(_('password entry cancelled'))
Chris@431 240
Chris@440 241 user = user_field.text()
Chris@440 242 passwd = passwd_field.text()
Chris@432 243
Chris@436 244 if use_authfile:
Chris@440 245 remember = remember_field.isChecked()
Chris@440 246 set_to_config(authconfig, 'preferences', 'remember', remember)
Chris@438 247 if user:
Chris@440 248 if passwd and remember:
Chris@440 249 authdata = encrypt_salted(passwd, authkey)
Chris@440 250 set_to_config(authconfig, 'auth', remote_key(short_uri, user), authdata)
Chris@438 251 else:
Chris@440 252 set_to_config(authconfig, 'auth', remote_key(short_uri, user), '')
Chris@444 253 save_config(self.ui, authconfig, authfile)
Chris@433 254
Chris@436 255 self.add_password(realm, authuri, user, passwd)
Chris@427 256 return (user, passwd)
Chris@427 257
Chris@427 258