2 * Copyright (c) 2012-2014 Apple Inc. All Rights Reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
25 #ifndef _SECURITY_SOSCLOUDCIRCLESERVER_H_
26 #define _SECURITY_SOSCLOUDCIRCLESERVER_H_
28 #include <Security/SecureObjectSync/SOSCloudCircle.h>
29 #include <Security/SecureObjectSync/SOSAccount.h>
35 // MARK: Server versions of our SPI
37 bool SOSCCTryUserCredentials_Server(CFStringRef user_label
, CFDataRef user_password
, CFErrorRef
*error
);
38 bool SOSCCSetUserCredentials_Server(CFStringRef user_label
, CFDataRef user_password
, CFErrorRef
*error
);
39 bool SOSCCSetUserCredentialsAndDSID_Server(CFStringRef user_label
, CFDataRef user_password
, CFStringRef dsid
, CFErrorRef
*error
);
41 bool SOSCCCanAuthenticate_Server(CFErrorRef
*error
);
42 bool SOSCCPurgeUserCredentials_Server(CFErrorRef
*error
);
44 SOSCCStatus
SOSCCThisDeviceIsInCircle_Server(CFErrorRef
*error
);
45 bool SOSCCRequestToJoinCircle_Server(CFErrorRef
* error
);
46 bool SOSCCRequestToJoinCircleAfterRestore_Server(CFErrorRef
* error
);
47 CFStringRef
SOSCCRequestDeviceID_Server(CFErrorRef
*error
);
48 bool SOSCCSetDeviceID_Server(CFStringRef IDS
, CFErrorRef
*error
);
49 HandleIDSMessageReason
SOSCCHandleIDSMessage_Server(CFDictionaryRef messageDict
, CFErrorRef
* error
);
51 bool SOSCCIDSServiceRegistrationTest_Server(CFStringRef message
, CFErrorRef
*error
);
52 bool SOSCCIDSPingTest_Server(CFStringRef message
, CFErrorRef
*error
);
53 bool SOSCCIDSDeviceIDIsAvailableTest_Server(CFErrorRef
*error
);
55 bool SOSCCRemoveThisDeviceFromCircle_Server(CFErrorRef
* error
);
56 bool SOSCCLoggedOutOfAccount_Server(CFErrorRef
*error
);
57 bool SOSCCBailFromCircle_Server(uint64_t limit_in_seconds
, CFErrorRef
* error
);
58 bool SOSCCRequestEnsureFreshParameters_Server(CFErrorRef
* error
);
61 bool SOSCCApplyToARing_Server(CFStringRef ringName
, CFErrorRef
*error
);
62 bool SOSCCWithdrawlFromARing_Server(CFStringRef ringName
, CFErrorRef
*error
);
63 SOSRingStatus
SOSCCRingStatus_Server(CFStringRef ringName
, CFErrorRef
*error
);
64 CFStringRef
SOSCCGetAllTheRings_Server(CFErrorRef
*error
);
65 bool SOSCCEnableRing_Server(CFStringRef ringName
, CFErrorRef
*error
);
68 CFArrayRef
SOSCCCopyGenerationPeerInfo_Server(CFErrorRef
* error
);
69 CFArrayRef
SOSCCCopyApplicantPeerInfo_Server(CFErrorRef
* error
);
70 CFArrayRef
SOSCCCopyValidPeerPeerInfo_Server(CFErrorRef
* error
);
71 bool SOSCCValidateUserPublic_Server(CFErrorRef
* error
);
73 CFArrayRef
SOSCCCopyNotValidPeerPeerInfo_Server(CFErrorRef
* error
);
74 CFArrayRef
SOSCCCopyRetirementPeerInfo_Server(CFErrorRef
* error
);
75 bool SOSCCRejectApplicants_Server(CFArrayRef applicants
, CFErrorRef
* error
);
76 bool SOSCCAcceptApplicants_Server(CFArrayRef applicants
, CFErrorRef
* error
);
78 SOSPeerInfoRef
SOSCCCopyMyPeerInfo_Server(CFErrorRef
* error
);
79 CFArrayRef
SOSCCCopyEngineState_Server(CFErrorRef
* error
);
81 CFArrayRef
SOSCCCopyPeerPeerInfo_Server(CFErrorRef
* error
);
82 CFArrayRef
SOSCCCopyConcurringPeerPeerInfo_Server(CFErrorRef
* error
);
84 bool SOSCCAccountSetToNew_Server(CFErrorRef
*error
);
85 bool SOSCCResetToOffering_Server(CFErrorRef
* error
);
86 bool SOSCCResetToEmpty_Server(CFErrorRef
* error
);
88 SOSViewResultCode
SOSCCView_Server(CFStringRef view
, SOSViewActionCode action
, CFErrorRef
*error
);
89 bool SOSCCViewSet_Server(CFSetRef enabledView
, CFSetRef disabledViews
);
91 SOSSecurityPropertyResultCode
SOSCCSecurityProperty_Server(CFStringRef property
, SOSSecurityPropertyActionCode action
, CFErrorRef
*error
);
93 CFStringRef
SOSCCCopyIncompatibilityInfo_Server(CFErrorRef
* error
);
94 enum DepartureReason
SOSCCGetLastDepartureReason_Server(CFErrorRef
* error
);
95 bool SOSCCSetLastDepartureReason_Server(enum DepartureReason reason
, CFErrorRef
*error
);
96 bool SOSCCSetHSA2AutoAcceptInfo_Server(CFDataRef pubKey
, CFErrorRef
*error
);
98 bool SOSCCProcessEnsurePeerRegistration_Server(CFErrorRef
* error
);
99 SyncWithAllPeersReason
SOSCCProcessSyncWithAllPeers_Server(CFErrorRef
* error
);
101 SOSPeerInfoRef
SOSCCSetNewPublicBackupKey_Server(CFDataRef newPublicBackup
, CFErrorRef
*error
);
102 bool SOSCCRegisterSingleRecoverySecret_Server(CFDataRef backupSlice
, bool includeV0
, CFErrorRef
*error
);
104 bool SOSCCWaitForInitialSync_Server(CFErrorRef
*);
105 CFArrayRef
SOSCCCopyYetToSyncViewsList_Server(CFErrorRef
*);
110 // MARK: Internal kicks.
112 CF_RETURNS_RETAINED CFArrayRef
SOSCCHandleUpdateMessage(CFDictionaryRef updates
);
113 void sync_the_last_data_to_kvs(SOSAccountRef account
);
116 // Expected to be called when the data source changes.
117 void SOSCCSyncWithAllPeers(void);
118 void SOSCCAddSyncablePeerBlock(CFStringRef ds_name
, SOSAccountSyncablePeersBlock changeBlock
);
119 dispatch_queue_t
SOSCCGetAccountQueue(void);
122 // MARK: Internal access to local account for tests.
124 typedef SOSDataSourceFactoryRef (^SOSCCAccountDataSourceFactoryBlock
)();
126 SOSAccountRef
SOSKeychainAccountGetSharedAccount(void);
127 bool SOSKeychainAccountSetFactoryForAccount(SOSCCAccountDataSourceFactoryBlock factory
);
130 // MARK: Internal SPIs for testing
132 CFStringRef
CopyOSVersion(void);
136 // MARK: Testing operations, dangerous to call in normal operation.
138 bool SOSKeychainSaveAccountDataAndPurge(CFErrorRef
*error
);
141 // MARK: Constants for where we store persistent information in the keychain
144 extern CFStringRef kSOSInternalAccessGroup
;
146 extern CFStringRef kSOSAccountLabel
;
147 extern CFStringRef kSOSPeerDataLabel
;
149 CFDataRef
SOSItemCopy(CFStringRef label
, CFErrorRef
* error
);
150 bool SOSItemUpdateOrAdd(CFStringRef label
, CFStringRef accessibility
, CFDataRef data
, CFErrorRef
*error
);