Initial commit

OpenHaystack/OpenHaystack/ReportsFetcher/ReportsFetcher.h

@@ -0,0 +1,61 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+#import <Foundation/Foundation.h>
+//https://github.com/Matchstic/ReProvision/issues/96#issuecomment-551928795
+#import <Security/Security.h>
+
+NS_ASSUME_NONNULL_BEGIN
+
+@interface AKAppleIDSession : NSObject
+- (id)_pairedDeviceAnisetteController;
+- (id)_nativeAnisetteController;
+- (void)_handleURLResponse:(id)arg1 forRequest:(id)arg2 withCompletion:(id)arg3;
+- (void)_generateAppleIDHeadersForSessionTask:(id)arg1 withCompletion:(id)arg2;
+- (id)_generateAppleIDHeadersForRequest:(id)arg1 error:(id)arg2;
+- (id)_genericAppleIDHeadersDictionaryForRequest:(id)arg1;
+- (void)handleResponse:(id)arg1 forRequest:(id)arg2 shouldRetry:(char *)arg3;
+- (id)appleIDHeadersForRequest:(id)arg1;
+- (void)URLSession:(id)arg1 task:(id)arg2 getAppleIDHeadersForResponse:(id)arg3 completionHandler:(id)arg4;
+- (id)relevantHTTPStatusCodes;
+- (id)copyWithZone:(struct _NSZone *)arg1;
+- (void)encodeWithCoder:(id)arg1;
+- (id)initWithCoder:(id)arg1;
+- (id)initWithIdentifier:(id)arg1;
+- (id)init;
+
+@end
+
+@interface AKDevice
++ (AKDevice *)currentDevice;
+- (NSString *)uniqueDeviceIdentifier;
+- (NSString *)serialNumber;
+- (NSString *)serverFriendlyDescription;
+@end
+
+
+
+@interface ReportsFetcher : NSObject
+
+/// WARNING: Runs synchronous network request. Please run this in a background thread.
+/// Query location reports for an array of public key hashes (ids)
+/// @param publicKeys Array of hashed public keys (in Base64)
+/// @param date Start date
+/// @param duration Duration checked
+/// @param searchPartyToken Search Party token
+/// @param completion Called when finished
+- (void) queryForHashes:(NSArray *)publicKeys startDate: (NSDate *) date duration: (double) duration searchPartyToken:(nonnull NSData *)searchPartyToken completion: (void (^)(NSData* _Nullable)) completion;
+
+/// Fetches the search party token from the macOS Keychain. Returns null if it fails 
+- (NSData * _Nullable) fetchSearchpartyToken;
+
+/// Get AnisetteData from AuthKit or return an empty dictionary
+- (NSDictionary *_Nonnull) anisetteDataDictionary;
+
+@end
+
+NS_ASSUME_NONNULL_END

OpenHaystack/OpenHaystack/ReportsFetcher/ReportsFetcher.m

@@ -0,0 +1,179 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+#import "ReportsFetcher.h"
+#import <Security/Security.h>
+
+#import <Accounts/Accounts.h>
+
+#if ACCESSORY
+#import "OpenHaystack-Swift.h"
+#else
+#import "OfflineFinder-Swift.h"
+#endif
+
+@implementation ReportsFetcher
+
+- (NSData * _Nullable) fetchSearchpartyToken {
+    NSDictionary *query = @{
+        (NSString*) kSecClass : (NSString*) kSecClassGenericPassword,
+        (NSString*) kSecAttrService: @"com.apple.account.AppleAccount.search-party-token",
+        (NSString*) kSecMatchLimit: (id) kSecMatchLimitOne,
+        (NSString*) kSecReturnData: @true
+    };
+    
+    CFTypeRef item;
+    OSStatus status = SecItemCopyMatching((__bridge CFDictionaryRef) query, &item);
+    
+    if (status == errSecSuccess) {
+        NSData *securityToken = (__bridge NSData *)(item);
+        
+        NSLog(@"Fetched token %@", [[NSString alloc] initWithData:securityToken encoding:NSUTF8StringEncoding]);
+        
+        if (securityToken.length == 0) {
+            return [self fetchSearchpartyTokenFromAccounts];
+        }
+        
+        return securityToken;
+    }
+
+    
+    return [self fetchSearchpartyTokenFromAccounts];; 
+}
+
+- (NSData * _Nullable) fetchSearchpartyTokenFromAccounts {
+    ACAccountStore *accountStore = [[ACAccountStore alloc] init];
+    ACAccountType *accountType = [accountStore accountTypeWithAccountTypeIdentifier:@"com.apple.account.AppleAccount"];
+    
+    NSArray *appleAccounts = [accountStore accountsWithAccountType:accountType];
+    
+    if (appleAccounts == nil && appleAccounts.count > 0) {return nil;}
+    
+    ACAccount *iCloudAccount = appleAccounts[0];
+    ACAccountCredential *iCloudCredentials = iCloudAccount.credential;
+    
+    if ([iCloudCredentials respondsToSelector:NSSelectorFromString(@"credentialItems")]) {
+        NSDictionary* credentialItems = [iCloudCredentials performSelector:NSSelectorFromString(@"credentialItems")];
+        NSString *searchPartyToken = credentialItems[@"search-party-token"];
+        NSData *tokenData = [searchPartyToken dataUsingEncoding:NSASCIIStringEncoding];
+        return tokenData;
+    }
+
+    return nil;
+}
+
+- (NSString *) fetchAppleAccountId {
+    NSDictionary *query = @{
+        (NSString*) kSecClass : (NSString*) kSecClassGenericPassword,
+        (NSString*) kSecAttrService: @"iCloud",
+        (NSString*) kSecMatchLimit: (id) kSecMatchLimitOne,
+        (NSString*) kSecReturnAttributes: @true
+    };
+    
+    CFTypeRef item;
+    OSStatus status = SecItemCopyMatching((__bridge CFDictionaryRef) query, &item);
+    
+    if (status == errSecSuccess) {
+        NSDictionary *itemDict = (__bridge NSDictionary *)(item);
+        
+        NSString *accountId = itemDict[(NSString *) kSecAttrAccount];
+         
+        return accountId;
+    }
+    
+    return nil;
+}
+
+- (NSString *) basicAuthForAppleID: (NSString *) appleId andToken: (NSData*) token {
+    NSString * tokenString = [[NSString alloc] initWithData:token encoding:NSUTF8StringEncoding];
+    NSString * authText = [NSString stringWithFormat:@"%@:%@", appleId, tokenString];
+    NSString * base64Auth = [[authText dataUsingEncoding:NSUTF8StringEncoding] base64EncodedStringWithOptions:0];
+    NSString *auth = [NSString stringWithFormat:@"Basic %@", base64Auth];
+    
+    return auth;
+}
+
+- (NSDictionary *) anisetteDataDictionary {
+    #if AUTHKIT
+    NSMutableURLRequest* req = [[NSMutableURLRequest alloc] initWithURL:[[NSURL alloc] initWithString:@"https://gateway.icloud.com/acsnservice/fetch"]];
+    [req setHTTPMethod:@"POST"];
+    
+    AKAppleIDSession* session = [[NSClassFromString(@"AKAppleIDSession") alloc] initWithIdentifier:@"com.apple.gs.xcode.auth"];
+    NSDictionary *appleHeadersDict = [session appleIDHeadersForRequest:req];
+    
+    return appleHeadersDict;
+    #endif
+    
+    return [NSDictionary new];
+}
+
+- (void) fetchAnisetteData:(void (^)(NSDictionary* _Nullable)) completion {
+    // Use the AltStore mail plugin
+    [[AnisetteDataManager shared] requestAnisetteDataObjc:^(NSDictionary * _Nullable dict) {
+        completion(dict);
+    }];
+}
+
+- (void) queryForHashes:(NSArray *)publicKeys startDate: (NSDate *) date duration: (double) duration searchPartyToken:(nonnull NSData *)searchPartyToken completion: (void (^)(NSData* _Nullable)) completion {
+    
+    // calculate the timestamps for the defined duration
+    long long startDate = [date timeIntervalSince1970] * 1000;
+    long long endDate = ([date timeIntervalSince1970] + duration) * 1000.0;
+    
+    NSLog(@"Requesting data for %@", publicKeys);
+    NSDictionary * query = @{
+        @"search": @[
+                @{
+                    @"endDate": [NSString stringWithFormat:@"%lli", endDate],
+                    @"ids": publicKeys,
+                    @"startDate": [NSString stringWithFormat:@"%lli", startDate]
+                }
+        ]
+    };
+    NSData *httpBody = [NSJSONSerialization dataWithJSONObject:query options:0 error:nil];
+        
+    NSLog(@"Query : %@",query);
+    NSString *authKey = @"authorization";
+    NSData *securityToken = searchPartyToken;
+    NSString *appleId = [self fetchAppleAccountId];
+    NSString *authValue = [self basicAuthForAppleID:appleId andToken:securityToken];
+    
+    [self fetchAnisetteData:^(NSDictionary * _Nullable dict) {
+        if (dict == nil) {
+            completion(nil);
+            return;
+        }
+        
+        NSMutableURLRequest* req = [[NSMutableURLRequest alloc] initWithURL:[[NSURL alloc] initWithString:@"https://gateway.icloud.com/acsnservice/fetch"]];
+        
+        [req setHTTPMethod:@"POST"];
+        [req setValue:@"application/json" forHTTPHeaderField:@"Content-Type"];
+        [req setValue:@"application/json" forHTTPHeaderField:@"Accept"];
+        [req setValue:authValue forHTTPHeaderField:authKey];
+        
+        
+        NSDictionary *appleHeadersDict = dict;
+        for(id key in appleHeadersDict)
+            [req setValue:[appleHeadersDict objectForKey:key] forHTTPHeaderField:key];
+        
+        NSLog(@"Headers:\n%@",req.allHTTPHeaderFields);
+        
+        [req setHTTPBody:httpBody];
+        
+        NSURLResponse * response;
+        NSError * error = nil;
+        NSData * data = [NSURLConnection sendSynchronousRequest:req returningResponse:&response error:&error];
+        
+        if (error) {
+            NSLog(@"Error during request: \n\n%@", error);
+        }
+        
+        completion(data);
+    }];
+}
+
+@end