1 files changed, 136 insertions, 0 deletions
diff --git a/src/format/OpVaultReaderSections.cpp b/src/format/OpVaultReaderSections.cpp
new file mode 100644
index 000000000..68ad478d3
--- /dev/null
+++ b/src/format/OpVaultReaderSections.cpp
@@ -0,0 +1,136 @@
+/*
+ *  Copyright (C) 2019 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "OpData01.h"
+#include "OpVaultReader.h"
+
+#include "core/Group.h"
+#include "core/Tools.h"
+#include "crypto/CryptoHash.h"
+#include "crypto/SymmetricCipher.h"
+#include "totp/totp.h"
+
+#include <QDebug>
+#include <QJsonArray>
+#include <QJsonDocument>
+#include <QJsonObject>
+#include <QUrlQuery>
+#include <QUuid>
+
+void OpVaultReader::fillFromSection(Entry* entry, const QJsonObject& section)
+{
+    const auto uuid = entry->uuid();
+    const QString& sectionName = section["name"].toString();
+
+    if (!section.contains("fields")) {
+        auto sectionNameLC = sectionName.toLower();
+        auto sectionTitleLC = section["title"].toString("").toLower();
+        if (!(sectionNameLC == "linked items" && sectionTitleLC == "related items")) {
+            qWarning() << R"(Skipping "fields"-less Section in UUID ")" << uuid << "\": <<" << section << ">>";
+        }
+        return;
+    } else if (!section["fields"].isArray()) {
+        qWarning() << R"(Skipping non-Array "fields" in UUID ")" << uuid << "\"\n";
+        return;
+    }
+    QJsonArray sectionFields = section["fields"].toArray();
+    for (const QJsonValue sectionField : sectionFields) {
+        if (!sectionField.isObject()) {
+            qWarning() << R"(Skipping non-Object "fields" in UUID ")" << uuid << "\": << " << sectionField << ">>";
+            continue;
+        }
+        QJsonObject field = sectionField.toObject();
+        fillFromSectionField(entry, sectionName, field);
+    }
+}
+
+void OpVaultReader::fillFromSectionField(Entry* entry, const QString& sectionName, QJsonObject& field)
+{
+    if (!field.contains("v")) {
+        // for our purposes, we don't care if there isn't a value in the field
+        return;
+    }
+
+    // Ignore "a" and "inputTraits" fields, they don't apply to KPXC
+
+    auto attrName = resolveAttributeName(sectionName, field["n"].toString(), field["t"].toString());
+    auto attrValue = field.value("v").toVariant().toString();
+    auto kind = field["k"].toString();
+
+    if (attrName.startsWith("TOTP_")) {
+        if (attrValue.startsWith("otpauth://")) {
+            QUrlQuery query(attrValue);
+            // at least as of 1Password 7, they don't append the digits= and period= which totp.cpp requires
+            if (!query.hasQueryItem("digits")) {
+                query.addQueryItem("digits", QString("%1").arg(Totp::DEFAULT_DIGITS));
+            }
+            if (!query.hasQueryItem("period")) {
+                query.addQueryItem("period", QString("%1").arg(Totp::DEFAULT_STEP));
+            }
+            attrValue = query.toString(QUrl::FullyEncoded);
+        }
+        entry->attributes()->set(Totp::ATTRIBUTE_SETTINGS, attrValue, true);
+    } else if (attrName.startsWith("expir", Qt::CaseInsensitive)) {
+        QDateTime expiry;
+        if (kind == "date") {
+            expiry = QDateTime::fromTime_t(attrValue.toUInt(), Qt::UTC);
+        } else {
+            expiry = QDateTime::fromString(attrValue, "yyyyMM");
+            expiry.setTimeSpec(Qt::UTC);
+        }
+
+        if (expiry.isValid()) {
+            entry->setExpiryTime(expiry);
+            entry->setExpires(true);
+        }
+    } else {
+        if (kind == "date") {
+            auto date = QDateTime::fromTime_t(attrValue.toUInt(), Qt::UTC);
+            if (date.isValid()) {
+                attrValue = date.toString();
+            }
+        }
+
+        entry->attributes()->set(attrName, attrValue, (kind == "password" || kind == "concealed"));
+    }
+}
+
+QString OpVaultReader::resolveAttributeName(const QString& section, const QString& name, const QString& text)
+{
+    // Special case for TOTP
+    if (name.startsWith("TOTP_")) {
+        return name;
+    }
+
+    auto lowName = name.toLower();
+    auto lowText = text.toLower();
+    if (section.isEmpty()) {
+        // Empty section implies these are core attributes
+        // try to find username, password, url
+        if (lowName == "password" || lowText == "password") {
+            return EntryAttributes::PasswordKey;
+        } else if (lowName == "username" || lowText == "username") {
+            return EntryAttributes::UserNameKey;
+        } else if (lowName == "url" || lowText == "url" || lowName == "hostname" || lowText == "server"
+                   || lowName == "website") {
+            return EntryAttributes::URLKey;
+        }
+        return name;
+    }
+
+    return QString("%1_%2").arg(section, name);
+}