[feat] add HarmonyOS mobile trusted device authentication

apps/harmony/native/mobile_session.cpp

@@ -4,6 +4,7 @@
 #include "key_mapping.h"
 #include <app_version.h>
 #include <mobile_controller_protocol.h>
+#include <mobile_device_trust.h>
 #include <mobile_file_transfer_session.h>
 #include <mobile_video_timing.h>
 #include <display_stream_id.h>
@@ -146,7 +147,9 @@ class MobileSession {
         auto info = MakeHostInformation("CrossDesk HarmonyOS Mobile", {}, true, s->version_, HostPlatform::HarmonyOS);
         info.i.supports_video_codec_status = true;
         info.preferred_display_resolutions = s->preferred_display_resolutions_;
-        s->Send(info); FreeRemoteAction(info);
+        const auto message = mobile_controller::DeviceTrustIdentity::Advertise(info.to_json());
+        MiniRtcSendReliableDataFrame(s->controller_, message.data(), message.size(), kControlStream);
+        FreeRemoteAction(info);
         RemoteAction audio{}; audio.type = audio_capture; audio.a = !s->muted_; s->Send(audio);
         s->audio_.Start();
       } else if (status >= MiniRtcConnectionDisconnected) s->Disconnect("");
@@ -183,6 +186,13 @@ class MobileSession {
       else if (name == kClipboardStream && bytes.size() <= kMaxClipboardBytes)
         s->Event({{"type", "clipboard"}, {"text", bytes}}, true);
       else if (name == kControlStream) {
+        if (s->trust_) {
+          if (auto proof = s->trust_->ChallengeResponse(bytes, s->login_.substr(0, s->login_.find('@')),
+                  "CrossDesk HarmonyOS Mobile")) {
+            if (!proof->empty()) MiniRtcSendReliableDataFrame(s->controller_, proof->data(), proof->size(), kControlStream);
+            return;
+          }
+        }
         RemoteAction action{};
         if (action.from_json(bytes)) {
           const auto value = json::parse(action.to_json()); FreeRemoteAction(action);
@@ -248,11 +258,13 @@ class MobileSession {
     Disconnect(""); online_=false;
     if (identity_) MiniRtcDestroyPeer(&identity_);
     ++session_; login_.clear(); signal_status_=-1;
+    trust_.reset();
   }
   void Execute(const json& v) {
     const auto op=v.at("op").get<std::string>();
     if (op=="start") {
       Stop(); session_=v.at("session").get<uint64_t>();
+      trust_=std::make_unique<mobile_controller::DeviceTrustIdentity>(v.at("trustKey").get_ref<const std::string&>());
       server_=v.at("server").get<std::string>(); port_=v.at("port").get<int>();
       logs_=v.at("logs").get<std::string>(); login_=v.value("identity",""); version_=v.value("version","0.1.0");
       const auto roots=v.at("certificates").get<std::string>(); directory_=v.at("directory").get<std::string>();
@@ -408,6 +420,7 @@ class MobileSession {
   MiniRtcPeerPtr* controller_=nullptr;
   std::unique_ptr<Context> identity_context_,control_context_;
   std::unique_ptr<mobile_controller::FileTransferSession> files_;
+  std::unique_ptr<mobile_controller::DeviceTrustIdentity> trust_;
   std::string server_,logs_,login_,controller_login_,remote_,directory_,preview_directory_,preview_path_,version_;
   std::vector<DisplayResolutionPreference> preferred_display_resolutions_;
   int port_=9099,signal_status_=-1;
@@ -432,4 +445,10 @@ void MobileCommand(const std::string& text) {
 }
 std::string MobilePoll() { std::lock_guard lock(mobile_mutex); return mobile?mobile->Poll():"[]"; }
 void MobileShutdown() { std::lock_guard lock(mobile_mutex); mobile.reset(); }
+std::string MobileGenerateTrustKey() { return mobile_controller::DeviceTrustIdentity::GeneratePrivateKey(); }
+std::string MobileTrustInfo(const std::string& seed, const std::string& device_id) {
+  mobile_controller::DeviceTrustIdentity trust(seed);
+  return json{{"pairing", trust.PairingInfo(device_id.substr(0, device_id.find('@')), "CrossDesk HarmonyOS Mobile")},
+              {"fingerprint", trust.Fingerprint()}}.dump();
+}
 }

apps/harmony/native/mobile_session.h

@@ -16,6 +16,8 @@ namespace crossdesk::harmony {
 __attribute__((visibility("default"))) void MobileCommand(const std::string& json);
 __attribute__((visibility("default"))) std::string MobilePoll();
 __attribute__((visibility("default"))) void MobileShutdown();
+__attribute__((visibility("default"))) std::string MobileGenerateTrustKey();
+__attribute__((visibility("default"))) std::string MobileTrustInfo(const std::string& seed, const std::string& device_id);
 }
 
 #endif

apps/harmony/native/xmake.lua

@@ -5,13 +5,15 @@ add_rules("mode.release", "mode.debug")
 set_policy("package.precompiled", false)
 add_cxflags("-fPIC")
 includes("../../../deps/submodules/minirtc")
+add_requires("openssl3 3.3.2", {system = false, configs = {shared = false}})
 
 target("crossdesk_harmony_mobile")
     set_kind("shared")
     set_default(false)
     add_deps("minirtc")
-    add_packages("nlohmann_json", "libyuv")
+    add_packages("nlohmann_json", "libyuv", "openssl3")
     add_files("mobile_session.cpp", "media.cpp", "audio.cpp", "../../../libs/wire/src/remote_action.cpp", "../../../libs/wire/src/file_transfer.cpp", "../../../libs/wire/src/app_version.cpp")
+    add_files("../../../libs/controller/src/mobile_device_trust.cpp")
     -- Export only the bridge API; bundled static dependencies are internal.
     add_cxflags("-fvisibility=hidden", "-fvisibility-inlines-hidden")
     add_shflags("-Wl,--exclude-libs,ALL", {force = true})