From 71d942ffaed2f927a35762aed5daf96c7494632d Mon Sep 17 00:00:00 2001
From: Randall Winkhart <idgr@tutanota.com>
Date: Tue, 4 Oct 2022 21:08:11 -0400
Subject: [PATCH] Initial quick-unlock whitelist implementation

Former-commit-id: 0ec410451bf7799bd1c603e8ebc25401efe2850b [formerly 5f7074e04e64368cca4db1cbec130c6c085e9fd2]
Former-commit-id: ce55288649a10ef7cb20ad2dc1c815a13d263988
---
 bin/sshyp.py | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/bin/sshyp.py b/bin/sshyp.py
index 39129d4..1c0110f 100755
--- a/bin/sshyp.py
+++ b/bin/sshyp.py
@@ -221,6 +221,7 @@ def tweak():  # runs configuration wizard
     if _device_type.lower() == 's':
         open(path.expanduser('~/.config/sshyp/sshyp-device'), 'w').write('s')
         Path(path.expanduser('~/.config/sshyp/deleted')).mkdir(0o700, parents=True, exist_ok=True)
+        Path(path.expanduser('~/.config/sshyp/whitelist')).mkdir(0o700, parents=True, exist_ok=True)
         print(f"\n\u001b[4;1mmake sure the ssh service is running and properly configured\u001b[0m\n"
               f"{_divider}configuration complete\n")
         s_exit(0)
@@ -475,6 +476,39 @@ def sync():  # calls sshync to sync changes to the user's server
     sshync.run_profile(path.expanduser('~/.config/sshyp/sshyp.sshync'))
 
 
+def whitelist_list():  # shows the quick-unlock whitelist status of device ids
+    _whitelisted_ids = listdir(path.expanduser('~/.config/sshyp/whitelist'))
+    _device_ids = listdir(path.expanduser('~/.config/sshyp/devices'))
+    print('\u001b[1mquick-unlock whitelisted device ids:\u001b[0m')
+    for _id in _whitelisted_ids:
+        print(_id)
+    print('\n\u001b[1mother registered device ids:\u001b[0m')
+    for _id in _device_ids:
+        if _id not in _whitelisted_ids:
+            print(_id)
+    print()
+
+
+def whitelist_manage():  # adds or removes quick-unlock whitelisted device ids
+    if len(argument_list) == 3:
+        whitelist_list()
+        _device_id = input()
+    else:
+        _argument_split = argument.split(' ')
+        del _argument_split[:1]
+        _device_id = ' '.join(_argument_split)
+
+    if argument_list[2] == 'add':
+        if _device_id in listdir(path.expanduser('~/.config/sshyp/devices')):
+            open(path.expanduser(f"~/.config/sshyp/whitelist/{_device_id}"), 'w').write('')
+        else:
+            print(f"\n\u001b[38;5;9merror: device id ({_device_id}) is not registered\u001b[0m\n")
+            s_exit(1)
+
+    elif Path(path.expanduser(f"~/.config/sshyp/whitelist/{_device_id}")).is_file():
+        remove(path.expanduser(f"~/.config/sshyp/whitelist/{_device_id}"))
+
+
 def add_entry():  # adds a new entry
     _shm_folder, _shm_entry = None, None  # sets base-line values to avoid errors
     if len(argument_list) < 4:
@@ -729,6 +763,10 @@ if __name__ == "__main__":
         elif argument_list[1] == 'whitelist' and device_type == 's':
             if len(argument_list) == 2:
                 print_info()
+            elif argument_list[2] == 'list' or argument_list[2] == '-l':
+                whitelist_list()
+            elif argument_list[2] == 'add' or argument_list[2] == 'delete' or argument_list == 'del':
+                whitelist_manage()
         elif argument_list[1] == 'add':
             if len(argument_list) == 2:
                 print_info()