ChooseLockGeneric.java revision 47f1cd4325e839dd33273a451fa052e83789e483
1abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn/* 2abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * Copyright (C) 2010 The Android Open Source Project 3abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * 4abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * Licensed under the Apache License, Version 2.0 (the "License"); 5abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * you may not use this file except in compliance with the License. 6abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * You may obtain a copy of the License at 7abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * 8abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * http://www.apache.org/licenses/LICENSE-2.0 9abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * 10abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * Unless required by applicable law or agreed to in writing, software 11abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * distributed under the License is distributed on an "AS IS" BASIS, 12abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * See the License for the specific language governing permissions and 14abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn * limitations under the License. 15abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn */ 16abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn 17abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackbornpackage com.android.settings; 18abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn 1917e9e1933055b207473b488595b2887bfcaea32eJim Millerimport android.app.Activity; 205541a86efe5f26956e54de49c4a59bf1dab79a78Jim Millerimport android.app.PendingIntent; 214037c7f27c849a1ada0980ad881636fc940a0b85Dianne Hackbornimport android.app.admin.DevicePolicyManager; 22abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackbornimport android.content.Context; 23abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackbornimport android.content.Intent; 24abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackbornimport android.os.Bundle; 25bbb4afa19f75694c585506b0c091372d60e07ca7Jim Millerimport android.preference.Preference; 26bbb4afa19f75694c585506b0c091372d60e07ca7Jim Millerimport android.preference.PreferenceActivity; 27bbb4afa19f75694c585506b0c091372d60e07ca7Jim Millerimport android.preference.PreferenceScreen; 28d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstromimport android.security.KeyStore; 29cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasaniimport android.view.LayoutInflater; 30cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasaniimport android.view.View; 31cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasaniimport android.view.ViewGroup; 32cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasaniimport android.widget.ListView; 33bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 346465054995f8470e52ecaf68ea9508a28f8a5363Gilles Debunneimport com.android.internal.widget.LockPatternUtils; 356465054995f8470e52ecaf68ea9508a28f8a5363Gilles Debunne 3694c05482240f743daa8c8698a241d1d0dfe2404cSteven Rossimport libcore.util.MutableBoolean; 3794c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross 38bbb4afa19f75694c585506b0c091372d60e07ca7Jim Millerpublic class ChooseLockGeneric extends PreferenceActivity { 39abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn 40abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn @Override 4117e9e1933055b207473b488595b2887bfcaea32eJim Miller public Intent getIntent() { 4217e9e1933055b207473b488595b2887bfcaea32eJim Miller Intent modIntent = new Intent(super.getIntent()); 4317e9e1933055b207473b488595b2887bfcaea32eJim Miller modIntent.putExtra(EXTRA_SHOW_FRAGMENT, ChooseLockGenericFragment.class.getName()); 4417e9e1933055b207473b488595b2887bfcaea32eJim Miller modIntent.putExtra(EXTRA_NO_HEADERS, true); 4517e9e1933055b207473b488595b2887bfcaea32eJim Miller return modIntent; 4617e9e1933055b207473b488595b2887bfcaea32eJim Miller } 47bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 4817e9e1933055b207473b488595b2887bfcaea32eJim Miller public static class ChooseLockGenericFragment extends SettingsPreferenceFragment { 4917e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final int MIN_PASSWORD_LENGTH = 4; 505bae8739ea55702ec38df13550dd3f32137a9935Danielle Millett private static final String KEY_UNLOCK_BACKUP_INFO = "unlock_backup_info"; 5117e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String KEY_UNLOCK_SET_OFF = "unlock_set_off"; 5217e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String KEY_UNLOCK_SET_NONE = "unlock_set_none"; 535541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller private static final String KEY_UNLOCK_SET_BIOMETRIC_WEAK = "unlock_set_biometric_weak"; 5417e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String KEY_UNLOCK_SET_PIN = "unlock_set_pin"; 5517e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String KEY_UNLOCK_SET_PASSWORD = "unlock_set_password"; 5617e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String KEY_UNLOCK_SET_PATTERN = "unlock_set_pattern"; 5717e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final int CONFIRM_EXISTING_REQUEST = 100; 5831dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross private static final int FALLBACK_REQUEST = 101; 5917e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String PASSWORD_CONFIRMED = "password_confirmed"; 6017e9e1933055b207473b488595b2887bfcaea32eJim Miller private static final String CONFIRM_CREDENTIALS = "confirm_credentials"; 6147f1cd4325e839dd33273a451fa052e83789e483Jim Miller private static final String WAITING_FOR_CONFIRMATION = "waiting_for_confirmation"; 62d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom public static final String MINIMUM_QUALITY_KEY = "minimum_quality"; 6317e9e1933055b207473b488595b2887bfcaea32eJim Miller 6480412e70db62d64777cd3399a9afc6fafae6f0a4Danielle Millett private static final boolean ALWAY_SHOW_TUTORIAL = true; 6580412e70db62d64777cd3399a9afc6fafae6f0a4Danielle Millett 6617e9e1933055b207473b488595b2887bfcaea32eJim Miller private ChooseLockSettingsHelper mChooseLockSettingsHelper; 6717e9e1933055b207473b488595b2887bfcaea32eJim Miller private DevicePolicyManager mDPM; 68d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom private KeyStore mKeyStore; 6917e9e1933055b207473b488595b2887bfcaea32eJim Miller private boolean mPasswordConfirmed = false; 7047f1cd4325e839dd33273a451fa052e83789e483Jim Miller private boolean mWaitingForConfirmation = false; 7117e9e1933055b207473b488595b2887bfcaea32eJim Miller 7217e9e1933055b207473b488595b2887bfcaea32eJim Miller @Override 7317e9e1933055b207473b488595b2887bfcaea32eJim Miller public void onCreate(Bundle savedInstanceState) { 7417e9e1933055b207473b488595b2887bfcaea32eJim Miller super.onCreate(savedInstanceState); 7517e9e1933055b207473b488595b2887bfcaea32eJim Miller 7617e9e1933055b207473b488595b2887bfcaea32eJim Miller mDPM = (DevicePolicyManager) getSystemService(Context.DEVICE_POLICY_SERVICE); 77d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom mKeyStore = KeyStore.getInstance(); 7817e9e1933055b207473b488595b2887bfcaea32eJim Miller mChooseLockSettingsHelper = new ChooseLockSettingsHelper(this.getActivity()); 7917e9e1933055b207473b488595b2887bfcaea32eJim Miller 80c474a88c2de30ea93ae03221b70e6365bb7f5f34Danielle Millett // Defaults to needing to confirm credentials 81c474a88c2de30ea93ae03221b70e6365bb7f5f34Danielle Millett final boolean confirmCredentials = getActivity().getIntent() 82c474a88c2de30ea93ae03221b70e6365bb7f5f34Danielle Millett .getBooleanExtra(CONFIRM_CREDENTIALS, true); 83c474a88c2de30ea93ae03221b70e6365bb7f5f34Danielle Millett mPasswordConfirmed = !confirmCredentials; 84c474a88c2de30ea93ae03221b70e6365bb7f5f34Danielle Millett 8517e9e1933055b207473b488595b2887bfcaea32eJim Miller if (savedInstanceState != null) { 8617e9e1933055b207473b488595b2887bfcaea32eJim Miller mPasswordConfirmed = savedInstanceState.getBoolean(PASSWORD_CONFIRMED); 8747f1cd4325e839dd33273a451fa052e83789e483Jim Miller mWaitingForConfirmation = savedInstanceState.getBoolean(WAITING_FOR_CONFIRMATION); 8817e9e1933055b207473b488595b2887bfcaea32eJim Miller } 89bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 9047f1cd4325e839dd33273a451fa052e83789e483Jim Miller if (mPasswordConfirmed) { 9147f1cd4325e839dd33273a451fa052e83789e483Jim Miller updatePreferencesOrFinish(); 9247f1cd4325e839dd33273a451fa052e83789e483Jim Miller } else if (!mWaitingForConfirmation) { 936370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler ChooseLockSettingsHelper helper = 946370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler new ChooseLockSettingsHelper(this.getActivity(), this); 9517e9e1933055b207473b488595b2887bfcaea32eJim Miller if (!helper.launchConfirmationActivity(CONFIRM_EXISTING_REQUEST, null, null)) { 9617e9e1933055b207473b488595b2887bfcaea32eJim Miller mPasswordConfirmed = true; // no password set, so no need to confirm 9717e9e1933055b207473b488595b2887bfcaea32eJim Miller updatePreferencesOrFinish(); 9847f1cd4325e839dd33273a451fa052e83789e483Jim Miller } else { 9947f1cd4325e839dd33273a451fa052e83789e483Jim Miller mWaitingForConfirmation = true; 10017e9e1933055b207473b488595b2887bfcaea32eJim Miller } 101bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 102bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 103bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 10447f1cd4325e839dd33273a451fa052e83789e483Jim Miller 10547f1cd4325e839dd33273a451fa052e83789e483Jim Miller 10617e9e1933055b207473b488595b2887bfcaea32eJim Miller @Override 10717e9e1933055b207473b488595b2887bfcaea32eJim Miller public boolean onPreferenceTreeClick(PreferenceScreen preferenceScreen, 10817e9e1933055b207473b488595b2887bfcaea32eJim Miller Preference preference) { 10917e9e1933055b207473b488595b2887bfcaea32eJim Miller final String key = preference.getKey(); 11017e9e1933055b207473b488595b2887bfcaea32eJim Miller boolean handled = true; 11117e9e1933055b207473b488595b2887bfcaea32eJim Miller if (KEY_UNLOCK_SET_OFF.equals(key)) { 1126370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler updateUnlockMethodAndFinish( 1136370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler DevicePolicyManager.PASSWORD_QUALITY_UNSPECIFIED, true); 11417e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_NONE.equals(key)) { 1156370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler updateUnlockMethodAndFinish( 1166370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler DevicePolicyManager.PASSWORD_QUALITY_UNSPECIFIED, false); 1175541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } else if (KEY_UNLOCK_SET_BIOMETRIC_WEAK.equals(key)) { 1185541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller updateUnlockMethodAndFinish( 1195541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller DevicePolicyManager.PASSWORD_QUALITY_BIOMETRIC_WEAK, false); 1205541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller }else if (KEY_UNLOCK_SET_PATTERN.equals(key)) { 1216370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler updateUnlockMethodAndFinish( 1226370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler DevicePolicyManager.PASSWORD_QUALITY_SOMETHING, false); 12317e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_PIN.equals(key)) { 1246370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler updateUnlockMethodAndFinish( 1256370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler DevicePolicyManager.PASSWORD_QUALITY_NUMERIC, false); 12617e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_PASSWORD.equals(key)) { 1276370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler updateUnlockMethodAndFinish( 1286370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler DevicePolicyManager.PASSWORD_QUALITY_ALPHABETIC, false); 12917e9e1933055b207473b488595b2887bfcaea32eJim Miller } else { 13017e9e1933055b207473b488595b2887bfcaea32eJim Miller handled = false; 13117e9e1933055b207473b488595b2887bfcaea32eJim Miller } 13217e9e1933055b207473b488595b2887bfcaea32eJim Miller return handled; 133bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 134bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 13517e9e1933055b207473b488595b2887bfcaea32eJim Miller @Override 136cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani public View onCreateView(LayoutInflater inflater, ViewGroup container, 137cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani Bundle savedInstanceState) { 138cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani View v = super.onCreateView(inflater, container, savedInstanceState); 139cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani final boolean onlyShowFallback = getActivity().getIntent() 140cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani .getBooleanExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, false); 141cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani if (onlyShowFallback) { 142cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani View header = v.inflate(getActivity(), 143cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani R.layout.weak_biometric_fallback_header, null); 144cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani ((ListView) v.findViewById(android.R.id.list)).addHeaderView(header, null, false); 145cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani } 146cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani 147cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani return v; 148cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani } 149cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani 150cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani @Override 15117e9e1933055b207473b488595b2887bfcaea32eJim Miller public void onActivityResult(int requestCode, int resultCode, Intent data) { 15217e9e1933055b207473b488595b2887bfcaea32eJim Miller super.onActivityResult(requestCode, resultCode, data); 15347f1cd4325e839dd33273a451fa052e83789e483Jim Miller mWaitingForConfirmation = false; 15417e9e1933055b207473b488595b2887bfcaea32eJim Miller if (requestCode == CONFIRM_EXISTING_REQUEST && resultCode == Activity.RESULT_OK) { 15517e9e1933055b207473b488595b2887bfcaea32eJim Miller mPasswordConfirmed = true; 15617e9e1933055b207473b488595b2887bfcaea32eJim Miller updatePreferencesOrFinish(); 15731dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross } else if(requestCode == FALLBACK_REQUEST) { 15831dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross mChooseLockSettingsHelper.utils().deleteTempGallery(); 15931dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross getActivity().setResult(resultCode); 16031dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross finish(); 16117e9e1933055b207473b488595b2887bfcaea32eJim Miller } else { 16217e9e1933055b207473b488595b2887bfcaea32eJim Miller getActivity().setResult(Activity.RESULT_CANCELED); 16317e9e1933055b207473b488595b2887bfcaea32eJim Miller finish(); 16417e9e1933055b207473b488595b2887bfcaea32eJim Miller } 165bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 166bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 16717e9e1933055b207473b488595b2887bfcaea32eJim Miller @Override 16817e9e1933055b207473b488595b2887bfcaea32eJim Miller public void onSaveInstanceState(Bundle outState) { 16917e9e1933055b207473b488595b2887bfcaea32eJim Miller super.onSaveInstanceState(outState); 17017e9e1933055b207473b488595b2887bfcaea32eJim Miller // Saved so we don't force user to re-enter their password if configuration changes 17117e9e1933055b207473b488595b2887bfcaea32eJim Miller outState.putBoolean(PASSWORD_CONFIRMED, mPasswordConfirmed); 17247f1cd4325e839dd33273a451fa052e83789e483Jim Miller outState.putBoolean(WAITING_FOR_CONFIRMATION, mWaitingForConfirmation); 17317e9e1933055b207473b488595b2887bfcaea32eJim Miller } 174bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 17517e9e1933055b207473b488595b2887bfcaea32eJim Miller private void updatePreferencesOrFinish() { 1765541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller Intent intent = getActivity().getIntent(); 1775541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller int quality = intent.getIntExtra(LockPatternUtils.PASSWORD_TYPE_KEY, -1); 17817e9e1933055b207473b488595b2887bfcaea32eJim Miller if (quality == -1) { 1796370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler // If caller didn't specify password quality, show UI and allow the user to choose. 1805541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller quality = intent.getIntExtra(MINIMUM_QUALITY_KEY, -1); 18194c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross MutableBoolean allowBiometric = new MutableBoolean(false); 18294c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross quality = upgradeQuality(quality, allowBiometric); 18317e9e1933055b207473b488595b2887bfcaea32eJim Miller final PreferenceScreen prefScreen = getPreferenceScreen(); 18417e9e1933055b207473b488595b2887bfcaea32eJim Miller if (prefScreen != null) { 18517e9e1933055b207473b488595b2887bfcaea32eJim Miller prefScreen.removeAll(); 18617e9e1933055b207473b488595b2887bfcaea32eJim Miller } 18717e9e1933055b207473b488595b2887bfcaea32eJim Miller addPreferencesFromResource(R.xml.security_settings_picker); 18894c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross disableUnusablePreferences(quality, allowBiometric); 18917e9e1933055b207473b488595b2887bfcaea32eJim Miller } else { 19017e9e1933055b207473b488595b2887bfcaea32eJim Miller updateUnlockMethodAndFinish(quality, false); 191bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 192abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn } 193bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 19494c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross /** increases the quality if necessary, and returns whether biometric is allowed */ 19594c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross private int upgradeQuality(int quality, MutableBoolean allowBiometric) { 196d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom quality = upgradeQualityForDPM(quality); 197d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom quality = upgradeQualityForKeyStore(quality); 19894c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross int encryptionQuality = upgradeQualityForEncryption(quality); 19994c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross if (encryptionQuality > quality) { 20094c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross //The first case checks whether biometric is allowed, prior to the user making 20194c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross //their selection from the list 20294c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross if (allowBiometric != null) { 20394c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross allowBiometric.value = quality <= 20494c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross DevicePolicyManager.PASSWORD_QUALITY_BIOMETRIC_WEAK; 20594c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross } else if (quality == DevicePolicyManager.PASSWORD_QUALITY_BIOMETRIC_WEAK) { 20694c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross //When the user has selected biometric we shouldn't change that due to 20794c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross //encryption 20894c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross return quality; 20994c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross } 21094c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross } 21194c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross return encryptionQuality; 212d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 213d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom 214d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom private int upgradeQualityForDPM(int quality) { 215d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom // Compare min allowed password quality 216d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom int minQuality = mDPM.getPasswordQuality(null); 217d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom if (quality < minQuality) { 218d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom quality = minQuality; 219d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 220d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom return quality; 221d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 222d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom 2236370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler /** 2246370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * Mix in "encryption minimums" to any given quality value. This prevents users 2256370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * from downgrading the pattern/pin/password to a level below the minimums. 2266370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * 2276370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * ASSUMPTION: Setting quality is sufficient (e.g. minimum lengths will be set 2286370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * appropriately.) 2296370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler */ 2306370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler private int upgradeQualityForEncryption(int quality) { 2316370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler int encryptionStatus = mDPM.getStorageEncryptionStatus(); 2326370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler boolean encrypted = (encryptionStatus == DevicePolicyManager.ENCRYPTION_STATUS_ACTIVE) 2336370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler || (encryptionStatus == DevicePolicyManager.ENCRYPTION_STATUS_ACTIVATING); 2346370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler if (encrypted) { 235d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom if (quality < CryptKeeperSettings.MIN_PASSWORD_QUALITY) { 236d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom quality = CryptKeeperSettings.MIN_PASSWORD_QUALITY; 237d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 238d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 239d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom return quality; 240d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom } 241d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom 242d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom private int upgradeQualityForKeyStore(int quality) { 243d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom if (!mKeyStore.isEmpty()) { 244d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom if (quality < CredentialStorage.MIN_PASSWORD_QUALITY) { 245d4023b7cca11e33e84df39dee9e9a737efab47c2Brian Carlstrom quality = CredentialStorage.MIN_PASSWORD_QUALITY; 2466370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler } 2476370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler } 2486370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler return quality; 2496370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler } 2506370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler 25117e9e1933055b207473b488595b2887bfcaea32eJim Miller /*** 25217e9e1933055b207473b488595b2887bfcaea32eJim Miller * Disables preferences that are less secure than required quality. 25317e9e1933055b207473b488595b2887bfcaea32eJim Miller * 25417e9e1933055b207473b488595b2887bfcaea32eJim Miller * @param quality the requested quality. 25517e9e1933055b207473b488595b2887bfcaea32eJim Miller */ 25694c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross private void disableUnusablePreferences(final int quality, MutableBoolean allowBiometric) { 257cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani final PreferenceScreen entries = getPreferenceScreen(); 2585541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller final boolean onlyShowFallback = getActivity().getIntent() 2595541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller .getBooleanExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, false); 2600fb158a685d753682afdcffb0b783be8e38e0f2bDanielle Millett final boolean weakBiometricAvailable = 2610fb158a685d753682afdcffb0b783be8e38e0f2bDanielle Millett mChooseLockSettingsHelper.utils().isBiometricWeakInstalled(); 262cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani for (int i = entries.getPreferenceCount() - 1; i >= 0; --i) { 263cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani Preference pref = entries.getPreference(i); 26417e9e1933055b207473b488595b2887bfcaea32eJim Miller if (pref instanceof PreferenceScreen) { 26517e9e1933055b207473b488595b2887bfcaea32eJim Miller final String key = ((PreferenceScreen) pref).getKey(); 26617e9e1933055b207473b488595b2887bfcaea32eJim Miller boolean enabled = true; 2675541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller boolean visible = true; 268cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani if (KEY_UNLOCK_SET_OFF.equals(key)) { 26917e9e1933055b207473b488595b2887bfcaea32eJim Miller enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_UNSPECIFIED; 27017e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_NONE.equals(key)) { 27117e9e1933055b207473b488595b2887bfcaea32eJim Miller enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_UNSPECIFIED; 2725541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } else if (KEY_UNLOCK_SET_BIOMETRIC_WEAK.equals(key)) { 27394c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_BIOMETRIC_WEAK || 27494c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross allowBiometric.value; 2755541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller visible = weakBiometricAvailable; // If not available, then don't show it. 27617e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_PATTERN.equals(key)) { 27717e9e1933055b207473b488595b2887bfcaea32eJim Miller enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_SOMETHING; 27817e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_PIN.equals(key)) { 27917e9e1933055b207473b488595b2887bfcaea32eJim Miller enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_NUMERIC; 28017e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (KEY_UNLOCK_SET_PASSWORD.equals(key)) { 28117e9e1933055b207473b488595b2887bfcaea32eJim Miller enabled = quality <= DevicePolicyManager.PASSWORD_QUALITY_COMPLEX; 28217e9e1933055b207473b488595b2887bfcaea32eJim Miller } 2835541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller if (!visible || (onlyShowFallback && !allowedForFallback(key))) { 284cf26bb2dcc83803678bcd37bb58b677209ffb3fcAmith Yamasani entries.removePreference(pref); 2855541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } else if (!enabled) { 28617e9e1933055b207473b488595b2887bfcaea32eJim Miller pref.setSummary(R.string.unlock_set_unlock_disabled_summary); 28717e9e1933055b207473b488595b2887bfcaea32eJim Miller pref.setEnabled(false); 28817e9e1933055b207473b488595b2887bfcaea32eJim Miller } 289bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 290bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 291bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller } 292bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 29317e9e1933055b207473b488595b2887bfcaea32eJim Miller /** 2945541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller * Check whether the key is allowed for fallback (e.g. bio sensor). Returns true if it's 2955541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller * supported as a backup. 2965541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller * 2975541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller * @param key 2985541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller * @return true if allowed 2995541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller */ 3005541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller private boolean allowedForFallback(String key) { 3015bae8739ea55702ec38df13550dd3f32137a9935Danielle Millett return KEY_UNLOCK_BACKUP_INFO.equals(key) || 3025bae8739ea55702ec38df13550dd3f32137a9935Danielle Millett KEY_UNLOCK_SET_PATTERN.equals(key) || KEY_UNLOCK_SET_PIN.equals(key); 3035541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } 3045541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller 305487b16f3400b62b79f8108ca669cc3e937c69defDanielle Millett private Intent getBiometricSensorIntent() { 3065541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller Intent fallBackIntent = new Intent().setClass(getActivity(), ChooseLockGeneric.class); 3075541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller fallBackIntent.putExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, true); 3085541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller fallBackIntent.putExtra(CONFIRM_CREDENTIALS, false); 309940407eb6aac05a513d2f7d0626df9519be3a83cDanielle Millett fallBackIntent.putExtra(EXTRA_SHOW_FRAGMENT_TITLE, 310940407eb6aac05a513d2f7d0626df9519be3a83cDanielle Millett R.string.backup_lock_settings_picker_title); 3115541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller 31280412e70db62d64777cd3399a9afc6fafae6f0a4Danielle Millett boolean showTutorial = ALWAY_SHOW_TUTORIAL || 31380412e70db62d64777cd3399a9afc6fafae6f0a4Danielle Millett !mChooseLockSettingsHelper.utils().isBiometricWeakEverChosen(); 314c82ba86375fc3c58bd9ee572f73d336693d62b11Danielle Millett Intent intent = new Intent(); 315487b16f3400b62b79f8108ca669cc3e937c69defDanielle Millett intent.setClassName("com.android.facelock", "com.android.facelock.SetupIntro"); 316487b16f3400b62b79f8108ca669cc3e937c69defDanielle Millett intent.putExtra("showTutorial", showTutorial); 3175541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller PendingIntent pending = PendingIntent.getActivity(getActivity(), 0, fallBackIntent, 0); 3185541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller intent.putExtra("PendingIntent", pending); 3195541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller return intent; 3205541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } 3215541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller 3225541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller /** 32317e9e1933055b207473b488595b2887bfcaea32eJim Miller * Invokes an activity to change the user's pattern, password or PIN based on given quality 32417e9e1933055b207473b488595b2887bfcaea32eJim Miller * and minimum quality specified by DevicePolicyManager. If quality is 32517e9e1933055b207473b488595b2887bfcaea32eJim Miller * {@link DevicePolicyManager#PASSWORD_QUALITY_UNSPECIFIED}, password is cleared. 32617e9e1933055b207473b488595b2887bfcaea32eJim Miller * 3276370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler * @param quality the desired quality. Ignored if DevicePolicyManager requires more security 32817e9e1933055b207473b488595b2887bfcaea32eJim Miller * @param disabled whether or not to show LockScreen at all. Only meaningful when quality is 32917e9e1933055b207473b488595b2887bfcaea32eJim Miller * {@link DevicePolicyManager#PASSWORD_QUALITY_UNSPECIFIED} 33017e9e1933055b207473b488595b2887bfcaea32eJim Miller */ 33117e9e1933055b207473b488595b2887bfcaea32eJim Miller void updateUnlockMethodAndFinish(int quality, boolean disabled) { 3326370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler // Sanity check. We should never get here without confirming user's existing password. 33317e9e1933055b207473b488595b2887bfcaea32eJim Miller if (!mPasswordConfirmed) { 3346370c87a6b98abfc6badb31070a60f84b3f528b3Andy Stadler throw new IllegalStateException("Tried to update password without confirming it"); 33517e9e1933055b207473b488595b2887bfcaea32eJim Miller } 336bbb4afa19f75694c585506b0c091372d60e07ca7Jim Miller 3375541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller final boolean isFallback = getActivity().getIntent() 3385541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller .getBooleanExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, false); 3395541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller 34094c05482240f743daa8c8698a241d1d0dfe2404cSteven Ross quality = upgradeQuality(quality, null); 341c620ba41ce20e683aad3d124b3866cadaddcc87dSteven Ross 34217e9e1933055b207473b488595b2887bfcaea32eJim Miller if (quality >= DevicePolicyManager.PASSWORD_QUALITY_NUMERIC) { 34317e9e1933055b207473b488595b2887bfcaea32eJim Miller int minLength = mDPM.getPasswordMinimumLength(null); 34417e9e1933055b207473b488595b2887bfcaea32eJim Miller if (minLength < MIN_PASSWORD_LENGTH) { 34517e9e1933055b207473b488595b2887bfcaea32eJim Miller minLength = MIN_PASSWORD_LENGTH; 34617e9e1933055b207473b488595b2887bfcaea32eJim Miller } 34717e9e1933055b207473b488595b2887bfcaea32eJim Miller final int maxLength = mDPM.getPasswordMaximumLength(quality); 34817e9e1933055b207473b488595b2887bfcaea32eJim Miller Intent intent = new Intent().setClass(getActivity(), ChooseLockPassword.class); 34917e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra(LockPatternUtils.PASSWORD_TYPE_KEY, quality); 35017e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra(ChooseLockPassword.PASSWORD_MIN_KEY, minLength); 35117e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra(ChooseLockPassword.PASSWORD_MAX_KEY, maxLength); 35217e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra(CONFIRM_CREDENTIALS, false); 3535541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller intent.putExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, 3545541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller isFallback); 35531dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross if(isFallback) { 35631dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross startActivityForResult(intent, FALLBACK_REQUEST); 35731dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross return; 3587caac4c19daf79a9220231a60ed1b8231968a619Steven Ross } else { 35931dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross intent.addFlags(Intent.FLAG_ACTIVITY_FORWARD_RESULT); 36031dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross startActivity(intent); 36131dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross } 36217e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (quality == DevicePolicyManager.PASSWORD_QUALITY_SOMETHING) { 36317e9e1933055b207473b488595b2887bfcaea32eJim Miller boolean showTutorial = !mChooseLockSettingsHelper.utils().isPatternEverChosen(); 36417e9e1933055b207473b488595b2887bfcaea32eJim Miller Intent intent = new Intent(); 36517e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.setClass(getActivity(), showTutorial 36617e9e1933055b207473b488595b2887bfcaea32eJim Miller ? ChooseLockPatternTutorial.class 36717e9e1933055b207473b488595b2887bfcaea32eJim Miller : ChooseLockPattern.class); 36817e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra("key_lock_method", "pattern"); 36917e9e1933055b207473b488595b2887bfcaea32eJim Miller intent.putExtra(CONFIRM_CREDENTIALS, false); 3705541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller intent.putExtra(LockPatternUtils.LOCKSCREEN_BIOMETRIC_WEAK_FALLBACK, 3715541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller isFallback); 37231dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross if(isFallback) { 37331dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross startActivityForResult(intent, FALLBACK_REQUEST); 37431dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross return; 3757caac4c19daf79a9220231a60ed1b8231968a619Steven Ross } else { 37631dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross intent.addFlags(Intent.FLAG_ACTIVITY_FORWARD_RESULT); 37731dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross startActivity(intent); 37831dac17c4b0b49b4968b42b2af6f0799a0508a2fSteven Ross } 3795541a86efe5f26956e54de49c4a59bf1dab79a78Jim Miller } else if (quality == DevicePolicyManager.PASSWORD_QUALITY_BIOMETRIC_WEAK) { 380487b16f3400b62b79f8108ca669cc3e937c69defDanielle Millett Intent intent = getBiometricSensorIntent(); 38117e9e1933055b207473b488595b2887bfcaea32eJim Miller startActivity(intent); 38217e9e1933055b207473b488595b2887bfcaea32eJim Miller } else if (quality == DevicePolicyManager.PASSWORD_QUALITY_UNSPECIFIED) { 383c620ba41ce20e683aad3d124b3866cadaddcc87dSteven Ross mChooseLockSettingsHelper.utils().clearLock(false); 38417e9e1933055b207473b488595b2887bfcaea32eJim Miller mChooseLockSettingsHelper.utils().setLockScreenDisabled(disabled); 38517e9e1933055b207473b488595b2887bfcaea32eJim Miller getActivity().setResult(Activity.RESULT_OK); 38617e9e1933055b207473b488595b2887bfcaea32eJim Miller } 38717e9e1933055b207473b488595b2887bfcaea32eJim Miller finish(); 388abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn } 389b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani 390b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani @Override 391b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani protected int getHelpResource() { 392b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani return R.string.help_url_choose_lockscreen; 393b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani } 394b0b37ae21c172491bc170659b5f429601858ddc1Amith Yamasani 395abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn } 396abc3dc64cf61c9f5c28b6f2640b221d63cb86a0aDianne Hackborn} 397