* feat: add shared server password to server setup * feat: allow editing the sever * refactor: changed password -> secret, styling and tests * e2e: draft e2e tests * chore: lint fix * feat: also send preauth secret header when using native share * fix: removed unused server database migration credentials are being stored in the keychain * i18n: added missing english translations * test(e2e): simplified connection tests * test(e2e): rework * refactor: remove setBearerToken * chore: restore migrations the way it was * chore: reverted file to original state * chore: removed unneeded test and renamed password to secret * chore: function version * chore: updated forms i18n keys * chore: remove if from test * chore: unneeded variable * fix: add missing key on object list * refactor: swift keychain access to retrieve all credentials in one call * revert: edit server screen * refactor: credentials use getGenericCredential * fix: objc code calling old method * fix: added scroll to login screen * chore: variable names * fix: avoid inline styles * fix: Improved appVersion positioning * Update app/screens/server/form.tsx Co-authored-by: Matthew Birtch <mattbirtch@gmail.com> * feat: show error message on 403 * Revert "feat: show error message on 403" This reverts commit f41630c767e10211adf1885321ceefd8a0931e32. --------- Co-authored-by: Matthew Birtch <mattbirtch@gmail.com>
437 lines
16 KiB
TypeScript
437 lines
16 KiB
TypeScript
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
import {type ClientHeaders, getOrCreateWebSocketClient, type WebSocketClientInterface, WebSocketReadyState} from '@mattermost/react-native-network-client';
|
|
import {Platform} from 'react-native';
|
|
|
|
import * as ClientConstants from '@client/rest/constants';
|
|
import {WebsocketEvents} from '@constants';
|
|
import DatabaseManager from '@database/manager';
|
|
import {getConfigValue} from '@queries/servers/system';
|
|
import {hasReliableWebsocket} from '@utils/config';
|
|
import {toMilliseconds} from '@utils/datetime';
|
|
import {logDebug, logError, logInfo, logWarning} from '@utils/log';
|
|
|
|
const MAX_WEBSOCKET_FAILS = 7;
|
|
const WEBSOCKET_TIMEOUT = toMilliseconds({seconds: 30});
|
|
const MIN_WEBSOCKET_RETRY_TIME = toMilliseconds({seconds: 3});
|
|
const MAX_WEBSOCKET_RETRY_TIME = toMilliseconds({minutes: 5});
|
|
const PING_INTERVAL = toMilliseconds({seconds: 30});
|
|
const DEFAULT_OPTIONS = {
|
|
forceConnection: true,
|
|
};
|
|
const TLS_HANDSHARE_ERROR = 1015;
|
|
|
|
export default class WebSocketClient {
|
|
private conn?: WebSocketClientInterface;
|
|
private connectionTimeout: NodeJS.Timeout | undefined;
|
|
private connectionId = '';
|
|
private token: string;
|
|
private preauthSecret?: string;
|
|
private stop = false;
|
|
private url = '';
|
|
private serverUrl: string;
|
|
private connectFailCount = 0;
|
|
|
|
private pingInterval: NodeJS.Timeout | undefined;
|
|
private waitingForPong: boolean = false;
|
|
|
|
// The first time we connect to a server (on init or login)
|
|
// we do the sync out of the websocket lifecycle.
|
|
// This is used to avoid calling twice to the sync logic.
|
|
private shouldSkipSync = false;
|
|
|
|
// responseSequence is the number to track a response sent
|
|
// via the websocket. A response will always have the same sequence number
|
|
// as the request.
|
|
private responseSequence = 1;
|
|
|
|
// serverSequence is the incrementing sequence number from the
|
|
// server-sent event stream.
|
|
private serverSequence = 0;
|
|
|
|
// Callbacks
|
|
private eventCallback?: Function;
|
|
private firstConnectCallback?: () => void;
|
|
private missedEventsCallback?: () => void;
|
|
private reconnectCallback?: () => void;
|
|
private reliableReconnectCallback?: () => void;
|
|
private errorCallback?: Function;
|
|
private closeCallback?: (connectFailCount: number) => void;
|
|
private connectingCallback?: () => void;
|
|
|
|
constructor(serverUrl: string, token: string, preauthSecret?: string) {
|
|
this.token = token;
|
|
this.serverUrl = serverUrl;
|
|
this.preauthSecret = preauthSecret;
|
|
}
|
|
|
|
public async initialize(opts = {}, shouldSkipSync = false) {
|
|
const {forceConnection} = Object.assign({}, DEFAULT_OPTIONS, opts);
|
|
|
|
if (forceConnection) {
|
|
this.stop = false;
|
|
}
|
|
|
|
if (this.conn && this.conn.readyState !== WebSocketReadyState.CLOSED) {
|
|
return;
|
|
}
|
|
|
|
const database = DatabaseManager.serverDatabases[this.serverUrl]?.database;
|
|
if (!database) {
|
|
return;
|
|
}
|
|
|
|
const [websocketUrl, version, reliableWebsocketConfig] = await Promise.all([
|
|
getConfigValue(database, 'WebsocketURL'),
|
|
getConfigValue(database, 'Version'),
|
|
getConfigValue(database, 'EnableReliableWebSockets'),
|
|
]);
|
|
const connectionUrl = (websocketUrl || this.serverUrl) + '/api/v4/websocket';
|
|
|
|
if (this.connectingCallback) {
|
|
this.connectingCallback();
|
|
}
|
|
|
|
const regex = /^(?:https?|wss?):(?:\/\/)?[^/]*/;
|
|
const captured = (regex).exec(connectionUrl);
|
|
|
|
let origin;
|
|
if (captured) {
|
|
origin = captured[0];
|
|
} else {
|
|
// If we're unable to set the origin header, the websocket won't connect, but the URL is likely malformed anyway
|
|
const errorMessage = 'websocket failed to parse origin from ' + connectionUrl;
|
|
logWarning(errorMessage);
|
|
return;
|
|
}
|
|
|
|
this.url = connectionUrl;
|
|
|
|
const reliableWebSockets = hasReliableWebsocket(version, reliableWebsocketConfig);
|
|
if (reliableWebSockets) {
|
|
// Add connection id, and last_sequence_number to the query param.
|
|
// We cannot also send it as part of the auth_challenge, because the session cookie is already sent with the request.
|
|
this.url = `${connectionUrl}?connection_id=${this.connectionId}&sequence_number=${this.serverSequence}`;
|
|
}
|
|
|
|
// Manually changing protocol since getOrCreateWebsocketClient does not accept http/s
|
|
if (this.url.startsWith('https:')) {
|
|
this.url = 'wss:' + this.url.substring('https:'.length);
|
|
}
|
|
|
|
if (this.url.startsWith('http:')) {
|
|
this.url = 'ws:' + this.url.substring('http:'.length);
|
|
}
|
|
|
|
if (this.connectFailCount === 0) {
|
|
logInfo('websocket connecting to ' + this.url);
|
|
}
|
|
|
|
this.shouldSkipSync = shouldSkipSync;
|
|
|
|
try {
|
|
const headers: ClientHeaders = {origin};
|
|
if (Platform.OS === 'android') {
|
|
// Required to properly handled the reliableWebsocket reconnection
|
|
// iOS is using he underlying cookieJar
|
|
headers.Authorization = `Bearer ${this.token}`;
|
|
}
|
|
|
|
// Add shared password header if available
|
|
if (this.preauthSecret) {
|
|
headers[ClientConstants.HEADER_X_MATTERMOST_PREAUTH_SECRET] = this.preauthSecret;
|
|
logDebug('WebSocket: Added shared password header for', this.serverUrl);
|
|
}
|
|
|
|
const {client} = await getOrCreateWebSocketClient(this.url, {headers, timeoutInterval: WEBSOCKET_TIMEOUT});
|
|
|
|
// Check again if the client is the same, to avoid race conditions
|
|
if (this.conn === client) {
|
|
// In case turning on/off Wi-fi on Samsung devices
|
|
// the websocket will call onClose then onError then initialize again with readyState CLOSED, we need to open it again
|
|
if (this.conn.readyState === WebSocketReadyState.CLOSED) {
|
|
clearTimeout(this.connectionTimeout);
|
|
clearInterval(this.pingInterval);
|
|
this.conn.open();
|
|
}
|
|
return;
|
|
}
|
|
this.conn = client;
|
|
} catch (error) {
|
|
return;
|
|
}
|
|
|
|
this.conn!.onOpen(() => {
|
|
clearTimeout(this.connectionTimeout);
|
|
clearInterval(this.pingInterval);
|
|
|
|
// No need to reset sequence number here.
|
|
if (!reliableWebSockets) {
|
|
this.serverSequence = 0;
|
|
}
|
|
|
|
if (this.token) {
|
|
// we check for the platform as a workaround until we fix on the server that further authentications
|
|
// are ignored
|
|
this.sendMessage('authentication_challenge', {token: this.token});
|
|
}
|
|
|
|
if (this.shouldSkipSync) {
|
|
logInfo('websocket connected to', this.url);
|
|
this.firstConnectCallback?.();
|
|
} else {
|
|
logInfo('websocket re-established connection to', this.url);
|
|
if (!reliableWebSockets && this.reconnectCallback) {
|
|
this.reconnectCallback();
|
|
} else if (reliableWebSockets) {
|
|
// If a sync is needed, it is handled when receiving the HELLO websocket message
|
|
this.reliableReconnectCallback?.();
|
|
if (this.serverSequence && this.missedEventsCallback) {
|
|
this.missedEventsCallback();
|
|
}
|
|
}
|
|
}
|
|
|
|
// Send a ping immediately to test the socket
|
|
this.waitingForPong = true;
|
|
this.ping();
|
|
|
|
// And every 30 seconds after, checking to ensure
|
|
// we're getting responses from the server
|
|
this.pingInterval = setInterval(
|
|
() => {
|
|
if (!this.waitingForPong) {
|
|
this.waitingForPong = true;
|
|
this.ping();
|
|
return;
|
|
}
|
|
|
|
// We are not calling this.close() because we need to auto-restart.
|
|
this.responseSequence = 1;
|
|
clearInterval(this.pingInterval);
|
|
this.conn?.close();
|
|
},
|
|
PING_INTERVAL,
|
|
);
|
|
|
|
this.connectFailCount = 0;
|
|
});
|
|
|
|
this.conn!.onClose((ev) => {
|
|
clearTimeout(this.connectionTimeout);
|
|
clearInterval(this.pingInterval);
|
|
|
|
this.conn = undefined;
|
|
this.responseSequence = 1;
|
|
|
|
// We skip the sync on first connect, since we are syncing along
|
|
// the init logic. If the connection closes at any point after that,
|
|
// we don't want to skip the sync. If we keep the same connection and
|
|
// reliable websockets are enabled this won't trigger a new sync.
|
|
this.shouldSkipSync = false;
|
|
|
|
if (ev.message && typeof ev.message === 'object' && 'code' in ev.message && ev.message.code === TLS_HANDSHARE_ERROR) {
|
|
logDebug('websocket did not connect', this.url, ev.message.reason);
|
|
this.closeCallback?.(this.connectFailCount);
|
|
return;
|
|
}
|
|
|
|
if (this.connectFailCount === 0) {
|
|
logInfo('websocket closed', this.url);
|
|
}
|
|
|
|
this.connectFailCount++;
|
|
|
|
if (this.closeCallback) {
|
|
this.closeCallback(this.connectFailCount);
|
|
}
|
|
|
|
if (this.stop) {
|
|
return;
|
|
}
|
|
|
|
let retryTime = MIN_WEBSOCKET_RETRY_TIME;
|
|
|
|
// If we've failed a bunch of connections then start backing off
|
|
if (this.connectFailCount > MAX_WEBSOCKET_FAILS) {
|
|
retryTime = Math.min(MIN_WEBSOCKET_RETRY_TIME * this.connectFailCount, MAX_WEBSOCKET_RETRY_TIME);
|
|
}
|
|
|
|
this.connectionTimeout = setTimeout(
|
|
() => {
|
|
if (this.stop) {
|
|
clearTimeout(this.connectionTimeout);
|
|
return;
|
|
}
|
|
this.initialize(opts);
|
|
},
|
|
retryTime,
|
|
);
|
|
});
|
|
|
|
this.conn!.onError((evt: any) => {
|
|
if (evt.url === this.url) {
|
|
if (this.connectFailCount <= 1) {
|
|
logError('websocket error', this.url);
|
|
logError('WEBSOCKET ERROR EVENT', evt);
|
|
}
|
|
|
|
if (this.errorCallback) {
|
|
this.errorCallback(evt);
|
|
}
|
|
}
|
|
});
|
|
|
|
this.conn!.onMessage((evt: any) => {
|
|
const msg = evt.message;
|
|
|
|
// This indicates a reply to a websocket request.
|
|
// We ignore sequence number validation of message responses
|
|
// and only focus on the purely server side event stream.
|
|
if (msg.seq_reply) {
|
|
if (msg.error) {
|
|
logWarning(msg);
|
|
}
|
|
if (msg.data?.text === WebsocketEvents.PONG) {
|
|
this.waitingForPong = false;
|
|
}
|
|
} else if (this.eventCallback) {
|
|
if (reliableWebSockets) {
|
|
// We check the hello packet, which is always the first packet in a stream.
|
|
if (msg.event === WebsocketEvents.HELLO) {
|
|
logInfo(this.url, 'got connection id ', msg.data.connection_id);
|
|
|
|
// If we already have a connectionId present, and server sends a different one,
|
|
// that means it's either a long timeout, or server restart, or sequence number is not found.
|
|
// If the server is not available the first time we try to connect, we won't have a connection id
|
|
// but still we need to sync.
|
|
// Then we do the sync calls, and reset sequence number to 0.
|
|
if (this.connectionId !== msg.data.connection_id) {
|
|
if (this.connectionId) {
|
|
logInfo(this.url, 'got a new connection due to long timeout, or server restart, or sequence number is not found');
|
|
} else {
|
|
logInfo(this.url, 'got the expected new connection id');
|
|
}
|
|
if (!this.shouldSkipSync) {
|
|
this.reconnectCallback?.();
|
|
}
|
|
this.serverSequence = 0;
|
|
}
|
|
|
|
// If it's a fresh connection, we have to set the connectionId regardless.
|
|
// And if it's an existing connection, setting it again is harmless, and keeps the code simple.
|
|
this.connectionId = msg.data.connection_id;
|
|
}
|
|
|
|
// Now we check for sequence number, and if it does not match,
|
|
// we just disconnect and reconnect.
|
|
if (msg.seq !== this.serverSequence) {
|
|
logInfo(this.url, 'missed websocket event, act_seq=' + msg.seq + ' exp_seq=' + this.serverSequence);
|
|
this.connectionId = ''; // There was some problem with the sequence number, so we reset the connection
|
|
this.close(false); // Will auto-reconnect after MIN_WEBSOCKET_RETRY_TIME.
|
|
return;
|
|
}
|
|
} else if (msg.seq !== this.serverSequence) {
|
|
logInfo(this.url, 'missed websocket event, act_seq=' + msg.seq + ' exp_seq=' + this.serverSequence);
|
|
this.reconnectCallback?.();
|
|
}
|
|
|
|
this.serverSequence = msg.seq + 1;
|
|
this.eventCallback(msg);
|
|
}
|
|
});
|
|
|
|
this.conn.open();
|
|
}
|
|
|
|
public setConnectingCallback(callback: () => void) {
|
|
this.connectingCallback = callback;
|
|
}
|
|
|
|
public setEventCallback(callback: Function) {
|
|
this.eventCallback = callback;
|
|
}
|
|
|
|
public setFirstConnectCallback(callback: () => void) {
|
|
this.firstConnectCallback = callback;
|
|
}
|
|
|
|
public setMissedEventsCallback(callback: () => void) {
|
|
this.missedEventsCallback = callback;
|
|
}
|
|
|
|
public setReconnectCallback(callback: () => void) {
|
|
this.reconnectCallback = callback;
|
|
}
|
|
|
|
public setReliableReconnectCallback(callback: () => void) {
|
|
this.reliableReconnectCallback = callback;
|
|
}
|
|
|
|
public setErrorCallback(callback: Function) {
|
|
this.errorCallback = callback;
|
|
}
|
|
|
|
public setCloseCallback(callback: (connectFailCount: number) => void) {
|
|
this.closeCallback = callback;
|
|
}
|
|
|
|
public close(stop = false) {
|
|
this.stop = stop;
|
|
this.connectFailCount = 0;
|
|
this.responseSequence = 1;
|
|
clearTimeout(this.connectionTimeout);
|
|
clearInterval(this.pingInterval);
|
|
this.conn?.close();
|
|
}
|
|
|
|
public invalidate() {
|
|
clearTimeout(this.connectionTimeout);
|
|
clearInterval(this.pingInterval);
|
|
this.conn?.invalidate();
|
|
this.conn = undefined;
|
|
}
|
|
|
|
private ping() {
|
|
const msg = {
|
|
action: WebsocketEvents.PING,
|
|
seq: this.responseSequence++,
|
|
};
|
|
|
|
if (this.conn && this.conn.readyState === WebSocketReadyState.OPEN) {
|
|
this.conn.send(JSON.stringify(msg));
|
|
}
|
|
}
|
|
|
|
private sendMessage(action: string, data: any) {
|
|
const msg = {
|
|
action,
|
|
seq: this.responseSequence++,
|
|
data,
|
|
};
|
|
|
|
if (this.conn && this.conn.readyState === WebSocketReadyState.OPEN) {
|
|
this.conn.send(JSON.stringify(msg));
|
|
}
|
|
}
|
|
|
|
public sendUserTypingEvent(channelId: string, parentId?: string) {
|
|
this.sendMessage('user_typing', {
|
|
channel_id: channelId,
|
|
parent_id: parentId,
|
|
});
|
|
}
|
|
|
|
public isConnected(): boolean {
|
|
return this.conn?.readyState === WebSocketReadyState.OPEN;
|
|
}
|
|
|
|
public getConnectionId(): string {
|
|
return this.connectionId;
|
|
}
|
|
|
|
public getServerSequence(): number {
|
|
return this.serverSequence;
|
|
}
|
|
}
|