MasterPassword/platform-independent/cli-c/cli/mpw-cli.c

#define _GNU_SOURCE

#include <stdio.h>
#include <unistd.h>
#include <pwd.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#if defined(READLINE)
#include <readline/readline.h>
#elif defined(EDITLINE)
#include <histedit.h>
#endif

#include "mpw-algorithm.h"
#include "mpw-util.h"

#define MP_env_fullname     "MP_FULLNAME"
#define MP_env_sitetype     "MP_SITETYPE"
#define MP_env_sitecounter  "MP_SITECOUNTER"
#define MP_env_algorithm    "MP_ALGORITHM"

static void usage() {

    fprintf( stderr, "Usage: mpw [-u name] [-t type] [-c counter] [-a algorithm] [-V variant] [-C context] [-v|-q] [-h] site\n\n" );
    fprintf( stderr, "    -u name      Specify the full name of the user.\n"
            "                 Defaults to %s in env or prompts.\n\n", MP_env_fullname );
    fprintf( stderr, "    -t type      Specify the password's template.\n"
            "                 Defaults to %s in env or 'long' for password, 'name' for login.\n"
            "                     x, max, maximum | 20 characters, contains symbols.\n"
            "                     l, long         | Copy-friendly, 14 characters, contains symbols.\n"
            "                     m, med, medium  | Copy-friendly, 8 characters, contains symbols.\n"
            "                     b, basic        | 8 characters, no symbols.\n"
            "                     s, short        | Copy-friendly, 4 characters, no symbols.\n"
            "                     i, pin          | 4 numbers.\n"
            "                     n, name         | 9 letter name.\n"
            "                     p, phrase       | 20 character sentence.\n\n", MP_env_sitetype );
    fprintf( stderr, "    -c counter   The value of the counter.\n"
            "                 Defaults to %s in env or 1.\n\n", MP_env_sitecounter );
    fprintf( stderr, "    -a version   The algorithm version to use.\n"
            "                 Defaults to %s in env or %d.\n\n", MP_env_algorithm, MPAlgorithmVersionCurrent );
    fprintf( stderr, "    -V variant   The kind of content to generate.\n"
            "                 Defaults to 'password'.\n"
            "                     p, password | The password to log in with.\n"
            "                     l, login    | The username to log in as.\n"
            "                     a, answer   | The answer to a security question.\n\n" );
    fprintf( stderr, "    -C context   A variant-specific context.\n"
            "                 Defaults to empty.\n"
            "                  -V p, password | Doesn't currently use a context.\n"
            "                  -V l, login    | Doesn't currently use a context.\n"
            "                  -V a, answer   | Empty for a universal site answer or\n"
            "                                 | the most significant word(s) of the question.\n\n" );
    fprintf( stderr, "    -v           Increase output verbosity (can be repeated).\n\n" );
    fprintf( stderr, "    -q           Decrease output verbosity (can be repeated).\n\n" );
    fprintf( stderr, "    ENVIRONMENT\n\n"
            "        %-14s | The full name of the user (see -u).\n"
            "        %-14s | The default password template (see -t).\n"
            "        %-14s | The default counter value (see -c).\n"
            "        %-14s | The default algorithm version (see -a).\n\n",
            MP_env_fullname, MP_env_sitetype, MP_env_sitecounter, MP_env_algorithm );
    exit( 0 );
}

static char *homedir(const char *filename) {

    char *homedir = NULL;
    struct passwd *passwd = getpwuid( getuid() );
    if (passwd)
        homedir = passwd->pw_dir;
    if (!homedir)
        homedir = getenv( "HOME" );
    if (!homedir)
        homedir = getcwd( NULL, 0 );

    char *homefile = NULL;
    asprintf( &homefile, "%s/%s", homedir, filename );
    return homefile;
}

static char *getline_prompt(const char *prompt) {

    char *buf = NULL;
    size_t bufSize = 0;
    ssize_t lineSize;
    fprintf( stderr, "%s", prompt );
    fprintf( stderr, " " );
    if ((lineSize = getline( &buf, &bufSize, stdin )) <= 1) {
        free( buf );
        return NULL;
    }
    buf[lineSize - 1] = 0;
    return buf;
}

int main(int argc, char *const argv[]) {

    // Read the environment.
    const char *fullName = NULL;
    const char *masterPassword = NULL;
    const char *siteName = NULL;
    MPSiteType siteType = MPSiteTypeGeneratedLong;
    const char *siteTypeString = getenv( MP_env_sitetype );
    MPSiteVariant siteVariant = MPSiteVariantPassword;
    const char *siteVariantString = NULL;
    const char *siteContextString = NULL;
    uint32_t siteCounter = 1;
    const char *siteCounterString = getenv( MP_env_sitecounter );
    MPAlgorithmVersion algorithmVersion = MPAlgorithmVersionCurrent;
    const char *algorithmVersionString = getenv( MP_env_algorithm );
    if (algorithmVersionString && strlen( algorithmVersionString ))
        if (sscanf( algorithmVersionString, "%u", &algorithmVersion ) != 1)
            ftl( "Invalid %s: %s\n", MP_env_algorithm, algorithmVersionString );

    // Read the options.
    for (int opt; (opt = getopt( argc, argv, "u:P:t:c:V:a:C:vqh" )) != -1;)
        switch (opt) {
            case 'u':
                fullName = strdup( optarg );
                break;
            case 'P':
                // Do not use this.  Passing your master password via the command-line
                // is insecure.  This is here for non-interactive testing purposes only.
                masterPassword = strcpy( malloc( strlen( optarg ) + 1 ), optarg );
                break;
            case 't':
                siteTypeString = optarg;
                break;
            case 'c':
                siteCounterString = optarg;
                break;
            case 'V':
                siteVariantString = optarg;
                break;
            case 'a':
                if (sscanf( optarg, "%u", &algorithmVersion ) != 1)
                    ftl( "Not a version: %s\n", optarg );
                break;
            case 'C':
                siteContextString = optarg;
                break;
            case 'v':
                ++mpw_verbosity;
                break;
            case 'q':
                --mpw_verbosity;
                break;
            case 'h':
                usage();
                break;
            case '?':
                switch (optopt) {
                    case 'u':
                        ftl( "Missing full name to option: -%c\n", optopt );
                        break;
                    case 't':
                        ftl( "Missing type name to option: -%c\n", optopt );
                        break;
                    case 'c':
                        ftl( "Missing counter value to option: -%c\n", optopt );
                        break;
                    default:
                        ftl( "Unknown option: -%c\n", optopt );
                }
            default:
                ftl("Unexpected option: %c", opt);
        }
    if (optind < argc)
        siteName = strdup( argv[optind] );

    // Convert and validate input.
    if (!fullName && (fullName = getenv( MP_env_fullname )))
        fullName = strdup( fullName );
    if (!fullName && !(fullName = getline_prompt( "Your full name:" )))
        ftl( "Missing full name.\n" );
    if (!siteName && !(siteName = getline_prompt( "Site name:" )))
        ftl( "Missing site name.\n" );
    if (siteCounterString)
        siteCounter = (uint32_t)atol( siteCounterString );
    if (siteCounter < 1)
        ftl( "Invalid site counter: %d\n", siteCounter );
    if (siteVariantString)
        siteVariant = mpw_variantWithName( siteVariantString );
    if (siteVariant == MPSiteVariantLogin)
        siteType = MPSiteTypeGeneratedName;
    if (siteVariant == MPSiteVariantAnswer)
        siteType = MPSiteTypeGeneratedPhrase;
    if (siteTypeString)
        siteType = mpw_typeWithName( siteTypeString );
    trc( "algorithmVersion: %u\n", algorithmVersion );

    // Read the master password.
    char *mpwConfigPath = homedir( ".mpw" );
    if (!mpwConfigPath)
        ftl( "Couldn't resolve path for configuration file: %d\n", errno );
    trc( "mpwConfigPath: %s\n", mpwConfigPath );
    FILE *mpwConfig = fopen( mpwConfigPath, "r" );
    free( mpwConfigPath );
    if (mpwConfig) {
        char *line = NULL;
        size_t linecap = 0;
        while (getline( &line, &linecap, mpwConfig ) > 0) {
            char *lineData = line;
            if (strcmp( strsep( &lineData, ":" ), fullName ) == 0) {
                masterPassword = strcpy( malloc( strlen( lineData ) ), strsep( &lineData, "\n" ) );
                break;
            }
        }
        mpw_free( line, linecap );
    }
    while (!masterPassword || !strlen(masterPassword))
        masterPassword = getpass( "Your master password: " );

    // Summarize operation.
    const char *identicon = mpw_identicon( fullName, masterPassword );
    if (!identicon) {
        err( "Couldn't determine identicon.\n" );
    } else {
        fprintf( stderr, "%s's password for %s:\n[ %s ]: ", fullName, siteName, identicon );
        mpw_free_string( identicon );
    }

    // Output the password.
    const uint8_t *masterKey = mpw_masterKeyForUser(
            fullName, masterPassword, algorithmVersion );
    mpw_free_string( masterPassword );
    mpw_free_string( fullName );
    if (!masterKey)
        ftl( "Couldn't derive master key." );

    const char *sitePassword = mpw_passwordForSite(
            masterKey, siteName, siteType, siteCounter, siteVariant, siteContextString, algorithmVersion );
    mpw_free( masterKey, MP_dkLen );
    mpw_free_string( siteName );
    if (!sitePassword)
        ftl( "Couldn't derive site password." );

    fprintf( stdout, "%s\n", sitePassword );
    mpw_free_string( sitePassword );

    return 0;
}