Home | History | Annotate | Download | only in config 
      1 /*
      2  * Copyright (C) 2015 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 package android.security.net.config;
     18 
     19 import android.content.Context;
     20 import android.content.pm.ApplicationInfo;
     21 import android.util.Log;
     22 import android.util.Pair;
     23 
     24 import java.util.Set;
     25 
     26 /** @hide */
     27 public class ManifestConfigSource implements ConfigSource {
     28     private static final boolean DBG = true;
     29     private static final String LOG_TAG = "NetworkSecurityConfig";
     30 
     31     private final Object mLock = new Object();
     32     private final Context mContext;
     33     private final ApplicationInfo mApplicationInfo;
     34 
     35     private ConfigSource mConfigSource;
     36 
     37     public ManifestConfigSource(Context context) {
     38         mContext = context;
     39         // Cache the info because ApplicationInfo is mutable and apps do modify it :(
     40         mApplicationInfo = new ApplicationInfo(context.getApplicationInfo());
     41     }
     42 
     43     @Override
     44     public Set<Pair<Domain, NetworkSecurityConfig>> getPerDomainConfigs() {
     45         return getConfigSource().getPerDomainConfigs();
     46     }
     47 
     48     @Override
     49     public NetworkSecurityConfig getDefaultConfig() {
     50         return getConfigSource().getDefaultConfig();
     51     }
     52 
     53     private ConfigSource getConfigSource() {
     54         synchronized (mLock) {
     55             if (mConfigSource != null) {
     56                 return mConfigSource;
     57             }
     58             int configResource = mApplicationInfo.networkSecurityConfigRes;
     59             ConfigSource source;
     60             if (configResource != 0) {
     61                 boolean debugBuild =
     62                         (mApplicationInfo.flags & ApplicationInfo.FLAG_DEBUGGABLE) != 0;
     63                 if (DBG) {
     64                     Log.d(LOG_TAG, "Using Network Security Config from resource "
     65                             + mContext.getResources()
     66                                 .getResourceEntryName(configResource)
     67                             + " debugBuild: " + debugBuild);
     68                 }
     69                 source = new XmlConfigSource(mContext, configResource, mApplicationInfo);
     70             } else {
     71                 if (DBG) {
     72                     Log.d(LOG_TAG, "No Network Security Config specified, using platform default");
     73                 }
     74                 // the legacy FLAG_USES_CLEARTEXT_TRAFFIC is not supported for Ephemeral apps, they
     75                 // should use the network security config.
     76                 boolean usesCleartextTraffic =
     77                         (mApplicationInfo.flags & ApplicationInfo.FLAG_USES_CLEARTEXT_TRAFFIC) != 0
     78                         && mApplicationInfo.targetSandboxVersion < 2;
     79                 source = new DefaultConfigSource(usesCleartextTraffic, mApplicationInfo);
     80             }
     81             mConfigSource = source;
     82             return mConfigSource;
     83         }
     84     }
     85 
     86     private static final class DefaultConfigSource implements ConfigSource {
     87 
     88         private final NetworkSecurityConfig mDefaultConfig;
     89 
     90         DefaultConfigSource(boolean usesCleartextTraffic, ApplicationInfo info) {
     91             mDefaultConfig = NetworkSecurityConfig.getDefaultBuilder(info)
     92                     .setCleartextTrafficPermitted(usesCleartextTraffic)
     93                     .build();
     94         }
     95 
     96         @Override
     97         public NetworkSecurityConfig getDefaultConfig() {
     98             return mDefaultConfig;
     99         }
    100 
    101         @Override
    102         public Set<Pair<Domain, NetworkSecurityConfig>> getPerDomainConfigs() {
    103             return null;
    104         }
    105     }
    106 }
    107