simple support for nip07

2025-12-17 09:54:19 +01:00 · 2024-09-04 19:22:38 +08:00
parent 666c546d93
commit 633a29cd79
20 changed files with 1078 additions and 111 deletions
--- a/lib/component/webview/webview_component.dart
+++ b/lib/component/webview/webview_component.dart
@@ -1,6 +1,19 @@
+import 'dart:collection';
+import 'dart:convert';
+
+import 'package:flutter/foundation.dart';
 import 'package:flutter/material.dart';
 import 'package:flutter_inappwebview/flutter_inappwebview.dart';
+import 'package:nostr_sdk/event.dart';
+import 'package:nostr_sdk/utils/string_util.dart';
 import 'package:nowser/component/webview/web_info.dart';
+import 'package:nowser/const/app_type.dart';
+import 'package:nowser/const/auth_type.dart';
+import 'package:nowser/main.dart';
+import 'package:nowser/util/permission_check_mixin.dart';
+
+import '../../const/auth_result.dart';
+import '../../data/app.dart';

 class WebViewComponent extends StatefulWidget {
  WebInfo webInfo;
@@ -21,23 +34,479 @@ class WebViewComponent extends StatefulWidget {
  }
 }

-class _WebViewComponent extends State<WebViewComponent> {
+class _WebViewComponent extends State<WebViewComponent>
+    with PermissionCheckMixin {
  InAppWebViewController? webViewController;

+  late ContextMenu contextMenu;
+  InAppWebViewSettings settings = InAppWebViewSettings(
+      isInspectable: kDebugMode,
+      mediaPlaybackRequiresUserGesture: false,
+      allowsInlineMediaPlayback: true,
+      iframeAllow: "camera; microphone",
+      iframeAllowFullscreen: true);
+
+  PullToRefreshController? pullToRefreshController;
+
+  double progress = 0;
+
+  @override
+  void initState() {
+    super.initState();
+
+    contextMenu = ContextMenu(
+        menuItems: [
+          ContextMenuItem(
+              id: 1,
+              title: "Special",
+              action: () async {
+                print("Menu item Special clicked!");
+                print(await webViewController?.getSelectedText());
+                await webViewController?.clearFocus();
+              })
+        ],
+        settings: ContextMenuSettings(hideDefaultSystemContextMenuItems: false),
+        onCreateContextMenu: (hitTestResult) async {
+          print("onCreateContextMenu");
+          print(hitTestResult.extra);
+          print(await webViewController?.getSelectedText());
+        },
+        onHideContextMenu: () {
+          print("onHideContextMenu");
+        },
+        onContextMenuActionItemClicked: (contextMenuItemClicked) async {
+          var id = contextMenuItemClicked.id;
+          print("onContextMenuActionItemClicked: " +
+              id.toString() +
+              " " +
+              contextMenuItemClicked.title);
+        });
+
+    pullToRefreshController = kIsWeb ||
+            ![TargetPlatform.iOS, TargetPlatform.android]
+                .contains(defaultTargetPlatform)
+        ? null
+        : PullToRefreshController(
+            settings: PullToRefreshSettings(
+              color: Colors.blue,
+            ),
+            onRefresh: () async {
+              if (defaultTargetPlatform == TargetPlatform.android) {
+                webViewController?.reload();
+              } else if (defaultTargetPlatform == TargetPlatform.iOS ||
+                  defaultTargetPlatform == TargetPlatform.macOS) {
+                webViewController?.loadUrl(
+                    urlRequest:
+                        URLRequest(url: await webViewController?.getUrl()));
+              }
+            },
+          );
+  }
+
  @override
  Widget build(BuildContext context) {
    return Container(
-      child: InAppWebView(
-        initialUrlRequest: URLRequest(url: WebUri(widget.webInfo.url)),
-        onWebViewCreated: (controller) async {
-          webViewController = controller;
-          // initJSHandle(controller);
-          widget.onWebViewCreated(widget.webInfo, controller);
-        },
-        onTitleChanged: (controller, title) {
-          widget.onTitleChanged(widget.webInfo, controller, title);
-        },
+      child: Stack(
+        children: [
+          InAppWebView(
+            initialUrlRequest: URLRequest(url: WebUri(widget.webInfo.url)),
+            initialUserScripts: UnmodifiableListView<UserScript>([]),
+            initialSettings: settings,
+            contextMenu: contextMenu,
+            pullToRefreshController: pullToRefreshController,
+            onWebViewCreated: (controller) async {
+              webViewController = controller;
+              initJSHandle(controller);
+              widget.onWebViewCreated(widget.webInfo, controller);
+            },
+            onTitleChanged: (controller, title) {
+              widget.onTitleChanged(widget.webInfo, controller, title);
+            },
+            onLoadStart: (controller, url) async {},
+            onPermissionRequest: (controller, request) async {
+              return PermissionResponse(
+                  resources: request.resources,
+                  action: PermissionResponseAction.GRANT);
+            },
+            shouldOverrideUrlLoading: (controller, navigationAction) async {
+              // var uri = navigationAction.request.url!;
+              // if (uri.scheme == "lightning" &&
+              //     StringUtil.isNotBlank(uri.path)) {
+              //   var result =
+              //       await NIP07Dialog.show(context, NIP07Methods.lightning);
+              //   if (result == true) {
+              //     await LightningUtil.goToPay(context, uri.path);
+              //   }
+              //   return NavigationActionPolicy.CANCEL;
+              // }
+
+              // if (uri.scheme == "nostr+walletconnect") {
+              //   webViewProvider.closeAndReturn(uri.toString());
+              //   return NavigationActionPolicy.CANCEL;
+              // }
+
+              // if (![
+              //   "http",
+              //   "https",
+              //   "file",
+              //   "chrome",
+              //   "data",
+              //   "javascript",
+              //   "about"
+              // ].contains(uri.scheme)) {
+              //   if (await canLaunchUrl(uri)) {
+              //     // Launch the App
+              //     await launchUrl(
+              //       uri,
+              //     );
+              //     // and cancel the request
+              //     return NavigationActionPolicy.CANCEL;
+              //   }
+              // }
+
+              return NavigationActionPolicy.ALLOW;
+            },
+            onLoadStop: (controller, url) async {
+              pullToRefreshController?.endRefreshing();
+              addInitScript(controller);
+            },
+            onReceivedError: (controller, request, error) {
+              pullToRefreshController?.endRefreshing();
+            },
+            onProgressChanged: (controller, progress) {
+              if (progress == 100) {
+                pullToRefreshController?.endRefreshing();
+              }
+              setState(() {
+                this.progress = progress / 100;
+              });
+            },
+            onUpdateVisitedHistory: (controller, url, isReload) {},
+            onConsoleMessage: (controller, consoleMessage) {
+              print(consoleMessage);
+            },
+          ),
+          progress < 1.0
+              ? LinearProgressIndicator(value: progress)
+              : Container(),
+        ],
      ),
    );
  }
+
+  Future<void> nip07Reject(String resultId, String contnet) async {
+    var script = "window.nostr.reject(\"$resultId\", \"${contnet}\");";
+    await webViewController!.evaluateJavascript(source: script);
+  }
+
+  void initJSHandle(InAppWebViewController controller) {
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_getPublicKey",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_getPublicKey $jsMsg");
+        var jsonObj = jsonDecode(jsMsg);
+        var resultId = jsonObj["resultId"];
+
+        String? code = await getCode();
+        if (code == null) {
+          return;
+        }
+
+        checkPermission(context, AppType.WEB, code, AuthType.GET_PUBLIC_KEY,
+            () {
+          nip07Reject(resultId, "Forbid");
+        }, (app, signer) {
+          var pubkey = app.pubkey;
+          var script = "window.nostr.callback(\"$resultId\", \"$pubkey\");";
+          controller.evaluateJavascript(source: script);
+        });
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_signEvent",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_signEvent $jsMsg");
+        var jsonObj = jsonDecode(jsMsg);
+        var resultId = jsonObj["resultId"];
+        var content = jsonObj["msg"];
+
+        String? code = await getCode();
+        if (code == null) {
+          return;
+        }
+
+        try {
+          var eventObj = jsonDecode(content);
+          var eventKind = eventObj["kind"];
+          if (eventKind is int) {
+            checkPermission(context, AppType.WEB, code, AuthType.SIGN_EVENT,
+                eventKind: eventKind, () {
+              nip07Reject(resultId, "Forbid");
+            }, (app, signer) async {
+              var tags = eventObj["tags"];
+              Event? event = Event(app.pubkey!, eventObj["kind"], tags ?? [],
+                  eventObj["content"]);
+              event = await signer.signEvent(event);
+              if (event == null) {
+                return;
+              }
+
+              var eventResultStr = jsonEncode(event.toJson());
+              // TODO this method to handle " may be error
+              eventResultStr = eventResultStr.replaceAll("\"", "\\\"");
+              var script =
+                  "window.nostr.callback(\"$resultId\", JSON.parse(\"$eventResultStr\"));";
+              webViewController!.evaluateJavascript(source: script);
+            });
+          }
+        } catch (e) {
+          nip07Reject(resultId, "Sign fail");
+        }
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_getRelays",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_getRelays $jsMsg");
+        var jsonObj = jsonDecode(jsMsg);
+        var resultId = jsonObj["resultId"];
+
+        String? code = await getCode();
+        if (code == null) {
+          return;
+        }
+
+        checkPermission(context, AppType.WEB, code, AuthType.GET_RELAYS, () {
+          nip07Reject(resultId, "Forbid");
+        }, (app, signer) {
+          // TODO handle getRelays
+          // var app = appProvider.getApp(AppType.WEB, code);
+          // if (app != null) {
+          //   var relayMaps = {};
+          //   var relayAddrs = relayProvider.relayAddrs;
+          //   for (var relayAddr in relayAddrs) {
+          //     relayMaps[relayAddr] = {"read": true, "write": true};
+          //   }
+          //   var resultStr = jsonEncode(relayMaps);
+          //   resultStr = resultStr.replaceAll("\"", "\\\"");
+          //   var script =
+          //       "window.nostr.callback(\"$resultId\", JSON.parse(\"$resultStr\"));";
+          //   webViewController!.evaluateJavascript(source: script);
+          // }
+        });
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_nip04_encrypt",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_nip04_encrypt $jsMsg");
+        var jsonObj = jsonDecode(jsMsg);
+        var resultId = jsonObj["resultId"];
+        var msg = jsonObj["msg"];
+        if (msg != null && msg is Map) {
+          var pubkey = msg["pubkey"];
+          var plaintext = msg["plaintext"];
+
+          String? code = await getCode();
+          if (code == null) {
+            return;
+          }
+
+          checkPermission(context, AppType.WEB, code, AuthType.NIP04_ENCRYPT,
+              () {
+            nip07Reject(resultId, "Forbid");
+          }, (app, signer) async {
+            var resultStr = await signer.encrypt(pubkey, plaintext);
+            if (StringUtil.isBlank(resultStr)) {
+              return;
+            }
+            var script =
+                "window.nostr.callback(\"$resultId\", \"$resultStr\");";
+            webViewController!.evaluateJavascript(source: script);
+          });
+        }
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_nip04_decrypt",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_nip04_decrypt $jsMsg");
+        var jsonObj = jsonDecode(jsMsg.message);
+        var resultId = jsonObj["resultId"];
+        var msg = jsonObj["msg"];
+        if (msg != null && msg is Map) {
+          var pubkey = msg["pubkey"];
+          var ciphertext = msg["ciphertext"];
+
+          String? code = await getCode();
+          if (code == null) {
+            return;
+          }
+
+          checkPermission(context, AppType.WEB, code, AuthType.NIP04_DECRYPT,
+              () {
+            nip07Reject(resultId, "Forbid");
+          }, (app, signer) async {
+            var app = appProvider.getApp(AppType.WEB, code);
+            if (app != null) {
+              var resultStr = await signer.decrypt(pubkey, ciphertext);
+              if (StringUtil.isBlank(resultStr)) {
+                return;
+              }
+              var script =
+                  "window.nostr.callback(\"$resultId\", \"$resultStr\");";
+              webViewController!.evaluateJavascript(source: script);
+            }
+          });
+        }
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_nip44_encrypt",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_nip04_encrypt $jsMsg");
+        var jsonObj = jsonDecode(jsMsg);
+        var resultId = jsonObj["resultId"];
+        var msg = jsonObj["msg"];
+        if (msg != null && msg is Map) {
+          var pubkey = msg["pubkey"];
+          var plaintext = msg["plaintext"];
+
+          String? code = await getCode();
+          if (code == null) {
+            return;
+          }
+
+          checkPermission(context, AppType.WEB, code, AuthType.NIP44_ENCRYPT,
+              () {
+            nip07Reject(resultId, "Forbid");
+          }, (app, signer) async {
+            var resultStr = await signer.nip44Encrypt(pubkey, plaintext);
+            if (StringUtil.isBlank(resultStr)) {
+              return;
+            }
+            var script =
+                "window.nostr.callback(\"$resultId\", \"$resultStr\");";
+            webViewController!.evaluateJavascript(source: script);
+          });
+        }
+      },
+    );
+    controller.addJavaScriptHandler(
+      handlerName: "Nowser_JS_nip44_decrypt",
+      callback: (jsMsgs) async {
+        var jsMsg = jsMsgs[0];
+        // print("Nowser_JS_nip04_decrypt $jsMsg");
+        var jsonObj = jsonDecode(jsMsg.message);
+        var resultId = jsonObj["resultId"];
+        var msg = jsonObj["msg"];
+        if (msg != null && msg is Map) {
+          var pubkey = msg["pubkey"];
+          var ciphertext = msg["ciphertext"];
+
+          String? code = await getCode();
+          if (code == null) {
+            return;
+          }
+
+          checkPermission(context, AppType.WEB, code, AuthType.NIP44_DECRYPT,
+              () {
+            nip07Reject(resultId, "Forbid");
+          }, (app, signer) async {
+            var resultStr = await signer.nip44Decrypt(pubkey, ciphertext);
+            if (StringUtil.isBlank(resultStr)) {
+              return;
+            }
+            var script =
+                "window.nostr.callback(\"$resultId\", \"$resultStr\");";
+            webViewController!.evaluateJavascript(source: script);
+          });
+        }
+      },
+    );
+  }
+
+  void addInitScript(InAppWebViewController controller) {
+    controller.evaluateJavascript(source: """
+window.nostr = {
+_call(channel, message) {
+    return new Promise((resolve, reject) => {
+        var resultId = "callbackResult_" + Math.floor(Math.random() * 100000000);
+        var arg = {"resultId": resultId};
+        if (message) {
+            arg["msg"] = message;
+        }
+        var argStr = JSON.stringify(arg);
+        window.flutter_inappwebview
+                      .callHandler(channel, argStr);
+        window.nostr._requests[resultId] = {resolve, reject}
+    });
+},
+_requests: {},
+callback(resultId, message) {
+    window.nostr._requests[resultId].resolve(message);
+},
+reject(resultId, message) {
+    window.nostr._requests[resultId].reject(message);
+},
+async getPublicKey() {
+    return window.nostr._call("Nowser_JS_getPublicKey");
+},
+async signEvent(event) {
+    return window.nostr._call("Nowser_JS_signEvent", JSON.stringify(event));
+},
+async getRelays() {
+    return window.nostr._call("Nowser_JS_getRelays");
+},
+nip04: {
+  async encrypt(pubkey, plaintext) {
+    return window.nostr._call("Nowser_JS_nip04_encrypt", {"pubkey": pubkey, "plaintext": plaintext});
+  },
+  async decrypt(pubkey, ciphertext) {
+      return window.nostr._call("Nowser_JS_nip04_decrypt", {"pubkey": pubkey, "ciphertext": ciphertext});
+  },
+},
+nip44: {
+  async encrypt(pubkey, plaintext) {
+    return window.nostr._call("Nowser_JS_nip44_encrypt", {"pubkey": pubkey, "plaintext": plaintext});
+  },
+  async decrypt(pubkey, ciphertext) {
+      return window.nostr._call("Nowser_JS_nip44_decrypt", {"pubkey": pubkey, "ciphertext": ciphertext});
+  },
+},
+};
+""");
+  }
+
+  Future<String?> getCode() async {
+    if (webViewController != null) {
+      var url = await webViewController!.getUrl();
+      if (url != null) {
+        return url.host;
+      }
+    }
+
+    return null;
+  }
+
+  @override
+  Future<App> getApp(int appType, String code) async {
+    String? name;
+    String? image;
+    if (webViewController != null) {
+      name = await webViewController!.getTitle();
+
+      var favicons = await webViewController!.getFavicons();
+      if (favicons.isNotEmpty) {
+        image = favicons.first.url.toString();
+      }
+    }
+    return App(appType: appType, code: code, name: name, image: image);
+  }
 }