pypush-plus-plus/demo.py

import json
import logging
import os
import threading
import time
from base64 import b64decode, b64encode
from getpass import getpass
from cryptography import x509
import datetime

from rich.logging import RichHandler

import apns
import ids
import imessage

import trio
import argparse

from exceptions import *

logging.basicConfig(
    level=logging.NOTSET, format="%(message)s", datefmt="[%X]", handlers=[RichHandler()]
)

# Set sane log levels
logging.getLogger("urllib3").setLevel(logging.WARNING)
logging.getLogger("py.warnings").setLevel(logging.ERROR)  # Ignore warnings from urllib3
logging.getLogger("asyncio").setLevel(logging.WARNING)
logging.getLogger("jelly").setLevel(logging.INFO)
logging.getLogger("nac").setLevel(logging.INFO)
logging.getLogger("apns").setLevel(logging.INFO)
logging.getLogger("albert").setLevel(logging.INFO)
logging.getLogger("ids").setLevel(logging.INFO)
logging.getLogger("bags").setLevel(logging.INFO)
logging.getLogger("imessage").setLevel(logging.INFO)

logging.captureWarnings(True)

# Try and load config.json
try:
    with open("config.json", "r") as f:
        CONFIG = json.load(f)
except FileNotFoundError:
    CONFIG = {}

def safe_b64decode(s):
    try:
        return b64decode(s)
    except:
        return None
    
def safe_config():
    with open("config.json", "w") as f:
        json.dump(CONFIG, f, indent=4)

def get_not_valid_after_timestamp(cert_data):
    try:
        cert = x509.load_pem_x509_certificate(cert_data.encode('utf-8'))
        return cert.not_valid_after
    except Exception as e:
        return None  # Return None in case of an error

expiration = None

async def main(args: argparse.Namespace):

    global expiration

    # Load any existing push credentials
    token = CONFIG.get("push", {}).get("token")
    token = b64decode(token) if token is not None else b""

    push_creds = apns.PushCredentials(
        CONFIG.get("push", {}).get("key", ""), CONFIG.get("push", {}).get("cert", ""), token)
    
    def register(conn, users):
        import emulated.nac
        vd = emulated.nac.generate_validation_data()
        vd = b64encode(vd).decode()
        users = ids.register(conn, users, vd, args.client_data or args.reg_notify)
        return users
    
    async def reregister(conn: apns.APNSConnection, users: list[ids.IDSUser]) -> datetime.datetime:
        register(conn, users)

        CONFIG["users"] = []

        expiration = None
        # Format time as HH:MM:SS PM/AM EST/EDT (X minutes from now)
        expire_msg = lambda expiration: f"Number registration is valid until {str(expiration.astimezone().strftime('%x %I:%M:%S %p %Z'))} ({str(int((expiration - datetime.datetime.now(datetime.timezone.utc)).total_seconds()/60))} minutes from now)"
        email_user = None
        email_addr = None # For HACK below

        for user in users:
            # Clear the config and re-save everything to match the new registration
            CONFIG["users"].append({
                "id": user.user_id,
                "auth_key": user.auth_keypair.key,
                "auth_cert": user.auth_keypair.cert,
                "encryption_key": user.encryption_identity.encryption_key if user.encryption_identity is not None else None,
                "signing_key": user.encryption_identity.signing_key if user.encryption_identity is not None else None,
                "id_cert": user.id_cert,
                "handles": user.handles,
            })

            # If this is a phone number user, then it's got the be the one we just linked
            # so pull out the expiration date from the certificate
            if "P:" in str(user.user_id):
                # There is not really a good reason to try/catch here: If we couldn't reregister, just crash (very unlikely we can recover)
                cert = x509.load_pem_x509_certificate(user.id_cert.encode('utf-8'))
                expiration = cert.not_valid_after 
                # Make it a UTC aware timezone, for reasons
                expiration = expiration.replace(tzinfo=datetime.timezone.utc)
                logging.info(expire_msg(expiration))

            else:
                email_user = user
                for n in range(len(user.handles)):
                    # HACK: Just pick the first email address they have to avoid picking the linked phone number
                    # TODO: Properly fix this, so that the linked phone number is not in the Apple ID user's list of handles
                    if "mailto:" in str(user.handles[n]):
                        email_addr = user.handles[n]

        # Save the config to disk
        safe_config()

        # Send the notification iMessage (if enabled)
        if args.reg_notify:
            im = imessage.iMessageUser(conn, email_user)
            im.current_handle = email_addr # HACK: See above
            await im.send(imessage.iMessage.create(im, expire_msg(expiration), [email_addr]))

        return expiration

    async with apns.APNSConnection.start(push_creds) as conn:
        # Save the push credentials to the config
        CONFIG["push"] = {
            "token": b64encode(conn.credentials.token).decode(),
            "key": conn.credentials.private_key,
            "cert": conn.credentials.cert,
        }
        safe_config()

        # Activate the connection
        await conn.set_state(1)
        await conn.filter(["com.apple.madrid"])

        # If the user wants a phone number, we need to register it WITH an Apple ID, then register the Apple ID again
        # otherwise we encounter issues for some reason
        
        users = []
        if "id" in CONFIG:
            logging.debug("Restoring old-style identity...")

            users.append(ids.IDSAppleUser(conn, CONFIG["auth"]["user_id"], ids._helpers.KeyPair(CONFIG["auth"]["key"], CONFIG["auth"]["cert"]),
                                    ids.identity.IDSIdentity(CONFIG["encryption"]["ec_key"], CONFIG["encryption"]["rsa_key"]), CONFIG["id"]["cert"],
                                    CONFIG["auth"]["handles"]))
        if "users" in CONFIG:
            logging.debug("Restoring new-style identity...")
            for user in CONFIG["users"]:
                users.append(ids.IDSUser(conn, user["id"], ids._helpers.KeyPair(user["auth_key"], user["auth_cert"]),
                                    ids.identity.IDSIdentity(user["signing_key"], user["encryption_key"]), user["id_cert"],
                                    user["handles"]))
        
        else:
            print("Would you like to register a phone number? (y/n)")
            if input("> ").lower() == "y":
                import sms_registration

                if "phone" in CONFIG:
                    phone_sig = b64decode(CONFIG["phone"].get("sig"))
                    phone_number = CONFIG["phone"].get("number")
                elif args.pdu is not None:
                    phone_number, phone_sig = sms_registration.parse_pdu(args.pdu, None)
                else:
                    if args.phone is None:
                        #raise GatewayConnectionError("You did not supply an IP address.")
                        # Prompt for IP address
                        print("Please enter the IP address of your phone.")
                        print("This should be displayed in the SMS registration helper app")
                        print("You must be on the same network as your phone.")
                        phone = input("> ")
                    else:
                        phone = args.phone
                    import sms_registration
                    phone_number, phone_sig = sms_registration.register(push_token=conn.credentials.token,
                                                                        no_parse=args.trigger_pdu, gateway=args.gateway,
                                                                        phone_ip=phone)
                    CONFIG["phone"] = {
                        "number": phone_number,
                        "sig": b64encode(phone_sig).decode(),
                    }
                    safe_config()

                users.append(ids.IDSPhoneUser.authenticate(conn, phone_number, phone_sig))

            print("Would you like sign in to your Apple ID (recommended)? (y/n)")
            if input("> ").lower() == "y":
                username = input("Username: ")
                password = input("Password: ")

                users.append(ids.IDSAppleUser.authenticate(conn, username, password))

            await reregister(conn, users)

        if args.daemon:
            wait_time_minutes = 5  # this is in minutes. 5 recommended

            expiration = await reregister(conn, users)

            while True:
                reregister_time = expiration - datetime.timedelta(minutes=wait_time_minutes)  # wait_time_minutes before expiration
                reregister_delta = (reregister_time - datetime.datetime.now(datetime.timezone.utc)).total_seconds()

                logging.info(f"Reregistering in {int(reregister_delta / 60)} minutes...")
                await trio.sleep(reregister_delta)

                logging.info("Reregistering...")
                expiration = await reregister(conn, users)

                logging.info("Reregistered!")

        if args.cronreg:
            reregister_within = 60 # Minutes, time where if expiration time is less than, rereg.
            for user in users:
                if "P:" in str(user.user_id):
                    logging.info(f'The user is: {user}')
                    cert = x509.load_pem_x509_certificate(user.id_cert.encode('utf-8'))
                    expiration = cert.not_valid_after
                    logging.info(f'Certificate expires on: {expiration}')
                    reregister_time = expiration - datetime.timedelta(minutes=reregister_within)
                    reregister_time = reregister_time.astimezone(datetime.timezone.utc)
                    logging.info(f'Reregistration will occur at: {reregister_time}')
                    reregister_delta = (reregister_time - datetime.datetime.now(datetime.timezone.utc)).total_seconds()
                    logging.info(f'The time between now and reregistration time is: {(reregister_delta / 3600):.2f} hours or {(reregister_delta / 86400):.2f} days')
                    if reregister_delta > 3600:
                        logging.info('Certificates expiration is greater than 60 minutes, quiting')
                    else:
                        logging.info('Certificate expires soon, reregistering now')
                        expiration = await reregister(conn, users)
                        logging.info('Reregistered')

        if args.reregister:
            await reregister(conn, users)

        print("Done!")

        if args.alive:
            logging.getLogger("apns").setLevel(logging.DEBUG)
            while True:
                await trio.sleep(20)

async def input_task(im: imessage.iMessageUser):
    while True:
        cmd = await trio.to_thread.run_sync(input, "> ", cancellable=True)
        if cmd != "":
            await im.send(imessage.iMessage.create(im, cmd, ["tel:+16106632676"]))

async def output_task(im: imessage.iMessageUser):
    while True:
        msg = await im.receive()
        print(str(msg))


if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("--reregister", action="store_true", help="Force re-registration")
    parser.add_argument("--reg-notify", action="store_true", help="Get iMessage after each registration")
    parser.add_argument("--alive", action="store_true", help="Keep the connection alive")
    parser.add_argument("--client-data", action="store_true", help="Publish client data (only necessary for actually sending/receiving messages)")
    parser.add_argument("--trigger-pdu", action="store_true", help="Trigger a REG-REQ")
    # String arg to override pdu
    parser.add_argument("--pdu", type=str, help="Override the PDU REG-RESP")
    parser.add_argument("--phone", type=str, help="Override the phone IP")
    parser.add_argument("--gateway", type=str, help="Override the gateway phone number")
    parser.add_argument("--daemon", action="store_true", help="Continuously reregister 5 minutes before the certificate expires")
    parser.add_argument("--cronreg", action="store_true", help="Reregister if less than 60 minutes from expiration")

    args = parser.parse_args()
    
    if args.pdu is not None and not args.pdu.startswith("REG-RESP"):
        raise InvalidResponseError("Received invalid REG-RESP PDU from Gateway Client.")

    trio.run(main, args)