passepartout-apple/Passepartout/Tunnel/PacketTunnelProvider.swift

115 lines
3.8 KiB
Swift

//
// PacketTunnelProvider.swift
// Passepartout
//
// Created by Davide De Rosa on 2/24/24.
// Copyright (c) 2024 Davide De Rosa. All rights reserved.
//
// https://github.com/passepartoutvpn
//
// This file is part of Passepartout.
//
// Passepartout is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Passepartout is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Passepartout. If not, see <http://www.gnu.org/licenses/>.
//
import CommonLibrary
@preconcurrency import NetworkExtension
import PassepartoutKit
final class PacketTunnelProvider: NEPacketTunnelProvider, @unchecked Sendable {
private var fwd: NEPTPForwarder?
override func startTunnel(options: [String: NSObject]? = nil) async throws {
PassepartoutConfiguration.shared.configureLogging(
to: BundleConfiguration.urlForTunnelLog,
parameters: Constants.shared.log,
logsPrivateData: UserDefaults.appGroup.bool(forKey: AppPreference.logsPrivateData.key)
)
do {
fwd = try await NEPTPForwarder(
provider: self,
decoder: Registry.sharedProtocolCoder,
registry: .shared,
environment: .shared
)
try await checkEligibility(of: fwd!.profile, environment: .shared)
try await fwd?.startTunnel(options: options)
} catch {
pp_log(.app, .fault, "Unable to start tunnel: \(error)")
PassepartoutConfiguration.shared.flushLog()
throw error
}
}
override func stopTunnel(with reason: NEProviderStopReason) async {
await fwd?.stopTunnel(with: reason)
fwd = nil
PassepartoutConfiguration.shared.flushLog()
}
override func cancelTunnelWithError(_ error: (any Error)?) {
PassepartoutConfiguration.shared.flushLog()
super.cancelTunnelWithError(error)
}
override func handleAppMessage(_ messageData: Data) async -> Data? {
await fwd?.handleAppMessage(messageData)
}
override func wake() {
fwd?.wake()
}
override func sleep() async {
await fwd?.sleep()
}
}
// MARK: - Eligibility
@MainActor
private extension PacketTunnelProvider {
var iapManager: IAPManager {
.sharedForTunnel
}
var isEligibleForPlatform: Bool {
#if os(tvOS)
iapManager.isEligible(for: .appleTV)
#else
true
#endif
}
func isEligibleForProviders(_ profile: Profile) -> Bool {
profile.firstProviderModuleWithMetadata == nil || iapManager.isEligible(for: .providers)
}
func checkEligibility(of profile: Profile, environment: TunnelEnvironment) async throws {
await iapManager.reloadReceipt()
guard isEligibleForPlatform else {
let error = PassepartoutError(.App.ineligibleProfile)
environment.setEnvironmentValue(error.code, forKey: TunnelEnvironmentKeys.lastErrorCode)
pp_log(.app, .fault, "Profile is ineligible for this platform")
throw error
}
guard isEligibleForProviders(profile) else {
let error = PassepartoutError(.App.ineligibleProfile)
environment.setEnvironmentValue(error.code, forKey: TunnelEnvironmentKeys.lastErrorCode)
pp_log(.app, .fault, "Profile is ineligible for providers")
throw error
}
}
}