/nselib/mobileme.lua

local http = require "http"
local json = require "json"
local package = require "package"
local stdnse = require "stdnse"
local table = require "table"
_ENV = stdnse.module("mobileme", stdnse.seeall)

---
-- A MobileMe web service client that allows discovering Apple devices
-- using the "find my iPhone" functionality. 
-- 
-- @author "Patrik Karlsson <patrik@cqure.net>"
--

MobileMe = {
	
	-- headers used in all requests
	headers = { 
		["Content-Type"] = "application/json; charset=utf-8",
    	["X-Apple-Find-Api-Ver"] = "2.0",
    	["X-Apple-Authscheme"] = "UserIdGuest",
    	["X-Apple-Realm-Support"] = "1.0",
    	["User-Agent"] = "Find iPhone/1.3 MeKit (iPad: iPhone OS/4.2.1)",
    	["X-Client-Name"] = "iPad",
    	["X-Client-UUID"] = "0cf3dc501ff812adb0b202baed4f37274b210853",
    	["Accept-Language"] = "en-us",
    	["Connection"] = "keep-alive"
	},
	
	-- Creates a MobileMe instance
	-- @param username string containing the Apple ID username
	-- @param password string containing the Apple ID password
	-- @return o new instance of MobileMe
	new = function(self, username, password)
		local o = {
			host = "fmipmobile.icloud.com",
			port = 443,
			username = username,
			password = password
		}
		setmetatable(o, self)
		self.__index = self
		return o
	end,
	
	-- Sends a message to an iOS device
	-- @param devid string containing the device id to which the message should
	--        be sent
	-- @param subject string containing the messsage subject
	-- @param message string containing the message body
	-- @param alarm boolean true if alarm should be sounded, false if not
	-- @return status true on success, false on failure
	-- @return err string containing the error message (if status is false)
	sendMessage = function(self, devid, subject, message, alarm)
		local data = '{"clientContext":{"appName":"FindMyiPhone","appVersion":"1.3","buildVersion":"145","deviceUDID":"0000000000000000000000000000000000000000","inactiveTime":5911,"osVersion":"3.2","productType":"iPad1,1","selectedDevice":"%s","shouldLocate":false},"device":"%s","serverContext":{"callbackIntervalInMS":3000,"clientId":"0000000000000000000000000000000000000000","deviceLoadStatus":"203","hasDevices":true,"lastSessionExtensionTime":null,"maxDeviceLoadTime":60000,"maxLocatingTime":90000,"preferredLanguage":"en","prefsUpdateTime":1276872996660,"sessionLifespan":900000,"timezone":{"currentOffset":-25200000,"previousOffset":-28800000,"previousTransition":1268560799999,"tzCurrentName":"Pacific Daylight Time","tzName":"America/Los_Angeles"},"validRegion":true},"sound":%s,"subject":"%s","text":"%s"}'
		data = data:format(devid, devid, tostring(alarm), subject, message)

		local url = ("/fmipservice/device/%s/sendMessage"):format(self.username)
	    local auth = { username = self.username, password = self.password }

		local response = http.post(self.host, self.port, url, { header = self.headers, auth = auth, timeout = 10000 }, nil, data)
		
		if ( response.status == 200 ) then
			local status, resp = json.parse(response.body)
			if ( not(status) ) then
				stdnse.print_debug(2, "Failed to parse JSON response from server")
				return false, "Failed to parse JSON response from server"
			end
			
			if ( resp.statusCode ~= "200" ) then
				stdnse.print_debug(2, "Failed to send message to server")
				return false, "Failed to send message to server"
			end
		end
		return true
	end,
	
	-- Updates location information for all devices controlled by the Apple ID
	-- @return status true on success, false on failure
	-- @return json parsed json table or string containing an error message on
	--         failure
	update = function(self)

	    local auth = {
			username = self.username,
			password = self.password
		}

		local url = ("/fmipservice/device/%s/initClient"):format(self.username)
		local data= '{"clientContext":{"appName":"FindMyiPhone","appVersion":"1.3","buildVersion":"145","deviceUDID":"0000000000000000000000000000000000000000","inactiveTime":2147483647,"osVersion":"4.2.1","personID":0,"productType":"iPad1,1"}}'

		local retries = 2

		local response
		repeat
			response = http.post(self.host, self.port, url, { header = self.headers, auth = auth }, nil, data)
			if ( response.header["x-apple-mme-host"] ) then
				self.host = response.header["x-apple-mme-host"]
			end
			
			if ( response.status == 401 ) then
				return false, "Authentication failed"
			elseif ( response.status ~= 200 and response.status ~= 330 ) then
				return false, "An unexpected error occured"
			end
			
			retries = retries - 1
		until ( 200 == response.status or 0 == retries)

		if ( response.status ~= 200 ) then
			return false, "Received unexpected response from server"
		end
		
		local status, parsed_json = json.parse(response.body)

		if ( not(status) or parsed_json.statusCode ~= "200" ) then
			return false, "Failed to parse JSON response from server"
		end

		-- cache the parsed_json.content as devices
		self.devices = parsed_json.content

		return true, parsed_json
	end,
	
	-- Get's a list of devices
	-- @return devices table containing a list of devices
	getDevices = function(self)
		if ( not(self.devices) ) then
			self:update()
		end
		return self.devices
	end
}


Helper = {

	
	-- Creates a Helper instance
	-- @param username string containing the Apple ID username
	-- @param password string containing the Apple ID password
	-- @return o new instance of Helper
	new = function(self, username, password)
		local o = {
			mm = MobileMe:new(username, password)
		}
		setmetatable(o, self)
		self.__index = self
		o.mm:update()
		return o
	end,
	
	-- Get's the geolocation from each device
	--
	-- @return status true on success, false on failure
	-- @return result table containing a table of device locations
	--         the table is indexed based on the name of the device and
	--         contains a location table with the following fields:
	--         * <code>longitude</code> - the GPS longitude
	--         * <code>latitude</code>  - the GPS latitude
	--         * <code>accuracy</code>  - the location accuracy
	--         * <code>timestamp</code> - the time the location was acquired
	--         * <code>postype</code>   - the position type (GPS or WiFi)
	--         * <code>finished</code>  - 
	--         or string containing an error message on failure
	getLocation = function(self)
		-- do 3 tries, with a 5 second timeout to allow the location to update
		-- there are two attributes, locationFinished and isLocating that seem
		-- to be good candidates to monitor, but so far, I haven't had any
		-- success with that.
		local tries, timeout = 3, 5
		local result = {}
		
		repeat
			local status, response = self.mm:update()
			
			if ( not(status) or not(response) ) then
				return false, "Failed to retrieve response from server"
			end
			for _, device in ipairs(response.content) do
				if ( device.location ) then
					result[device.name] = {
						longitude = device.location.longitude,
						latitude = device.location.latitude,
						accuracy = device.location.horizontalAccuracy,
						timestamp = device.location.timeStamp,
						postype   = device.location.positionType,
						finished = device.location.locationFinished,
					}
				end
			end
			tries = tries - 1
			if ( tries > 0 ) then
				stdnse.sleep(timeout)
			end
		until( tries == 0 )
		return true, result
	end,
	
	-- Gets a list of names and ids of devices associated with the Apple ID
	-- @return status true on success, false on failure
	-- @return table of devices containing the following fields:
	--         <code>name</code> and <code>id</code>
	getDevices = function(self)
		local devices = {}
		for _, dev in ipairs(self.mm:getDevices()) do
			table.insert(devices, { name = dev.name, id = dev.id })
		end
		return true, devices
	end,
	
	-- Send a message to an iOS Device
	--
	-- @param devid string containing the device id to which the message should
	--        be sent
	-- @param subject string containing the messsage subject
	-- @param message string containing the message body
	-- @param alarm boolean true if alarm should be sounded, false if not
	-- @return status true on success, false on failure
	-- @return err string containing the error message (if status is false)
	sendMessage = function(self, ...)
		return self.mm:sendMessage(...)
	end
	
}

return _ENV;