@W-16171409: [Android] Add QR Code Login Support in MSDK

libs/SalesforceSDK/src/com/salesforce/androidsdk/app/SalesforceSDKManager.kt

@@ -258,6 +258,10 @@ open class SalesforceSDKManager protected constructor(
             field = value
         }
 
+    /** Indicates if login via QR Code and UI bridge API is enabled */
+    @set:Synchronized
+    open var isQrCodeLoginEnabled = false
+
     /** Indicates if logout is in progress */
     var isLoggingOut = false
         private set
@@ -1557,6 +1561,7 @@ open class SalesforceSDKManager protected constructor(
         open fun getInstance() = INSTANCE ?: throw RuntimeException("Apps must call SalesforceSDKManager.init() first.")
 
         /** Allow Kotlin subclasses to set themselves as the instance. */
+        @Suppress("unused")
         @JvmSynthetic
         fun setInstance(subclass: SalesforceSDKManager) {
             INSTANCE = subclass

libs/SalesforceSDK/src/com/salesforce/androidsdk/ui/LoginActivity.kt

@@ -116,6 +116,8 @@ import com.salesforce.androidsdk.util.UriFragmentParser.parse
 import kotlinx.coroutines.CoroutineScope
 import kotlinx.coroutines.Dispatchers.IO
 import kotlinx.coroutines.launch
+import org.json.JSONObject
+import java.net.URLDecoder
 import com.salesforce.androidsdk.R.layout.sf__login as sf__login_layout
 import com.salesforce.androidsdk.R.menu.sf__login as sf__login_menu
 
@@ -149,6 +151,9 @@ open class LoginActivity : AppCompatActivity(), OAuthWebviewHelperEvents {
 
         val salesforceSDKManager = SalesforceSDKManager.getInstance()
 
+        // Determine if the activity was created from a deep link intent with QR code log in via UI bridge API parameters.
+        val isDeepLinkedQrCodeLogin = isDeepLinkedQrCodeLogin(intent)
+
         accountAuthenticatorResponse = intent.getParcelableExtra<AccountAuthenticatorResponse?>(
             KEY_ACCOUNT_AUTHENTICATOR_RESPONSE
         )?.apply {
@@ -164,14 +169,19 @@ open class LoginActivity : AppCompatActivity(), OAuthWebviewHelperEvents {
 
         salesforceSDKManager.setViewNavigationVisibility(this)
 
-        // Get login options from the intent's extras
-        val loginOptions = fromBundleWithSafeLoginUrl(intent.extras)
+        // Determine login options for QR code login or the app's usual login.
+        val loginOptions = when {
+            isDeepLinkedQrCodeLogin -> salesforceSDKManager.loginOptions
+            else -> fromBundleWithSafeLoginUrl(intent.extras)
+        }
 
         // Protect against screenshots
         window.setFlags(FLAG_SECURE, FLAG_SECURE)
 
-        // Fetch authentication configuration if required
-        salesforceSDKManager.fetchAuthenticationConfiguration()
+        // Fetch authentication configuration except for QR code login.
+        if (!isDeepLinkedQrCodeLogin) {
+            salesforceSDKManager.fetchAuthenticationConfiguration()
+        }
 
         // Setup content view
         setContentView(sf__login_layout)
@@ -214,7 +224,13 @@ open class LoginActivity : AppCompatActivity(), OAuthWebviewHelperEvents {
             LoginActivityCreateComplete,
             this
         )
-        certAuthOrLogin()
+
+        // Prompt user with log in page or log in via other configurations such as QR code.
+        when {
+            isDeepLinkedQrCodeLogin -> loginFromQrCode("?" + intent.data?.query)
+            else -> certAuthOrLogin()
+        }
+
         if (!receiverRegistered) {
             authConfigReceiver = AuthConfigReceiver().also { changeServerReceiver ->
                 registerReceiver(
@@ -345,9 +361,9 @@ open class LoginActivity : AppCompatActivity(), OAuthWebviewHelperEvents {
         wasBackgrounded = false
     }
 
-    public override fun onSaveInstanceState(bundle: Bundle) {
-        super.onSaveInstanceState(bundle)
-        webviewHelper?.saveState(bundle)
+    public override fun onSaveInstanceState(outState: Bundle) {
+        super.onSaveInstanceState(outState)
+        webviewHelper?.saveState(outState)
     }
 
     override fun onKeyDown(keyCode: Int, event: KeyEvent) =
@@ -654,9 +670,144 @@ open class LoginActivity : AppCompatActivity(), OAuthWebviewHelperEvents {
 
     open fun onBioAuthClick(view: View?) = presentBiometric()
 
+    // region QR Code Login Via UI Bridge API Public Implementation
+
+    /**
+     * Automatically log in with a UI Bridge API login QR code.
+     * @param loginQrCodeContent The login QR code content.  This should be
+     * either a URL or URL query containing the UI Bridge API JSON parameter.
+     * The UI Bridge API JSON parameter should contain URL-encoded JSON with two
+     * values:
+     * - frontdoor_bridge_url
+     * - pkce_code_verifier
+     *
+     * If pkce_code_verifier is not specified then the user agent flow is used
+     * @return Boolean true if a log in attempt is possible using the provided QR
+     * code content, false otherwise
+     */
+    fun loginFromQrCode(
+        loginQrCodeContent: String?
+    ) = uiBridgeApiParametersFromLoginQrCodeContent(
+        loginQrCodeContent
+    )?.let { uiBridgeApiParameters ->
+        loginWithFrontdoorBridgeUrl(
+            uiBridgeApiParameters.frontdoorBridgeUrl,
+            uiBridgeApiParameters.pkceCodeVerifier
+        )
+        true
+    } ?: false
+
+    /**
+     * Automatically log in with a UI Bridge API front door bridge URL and PKCE
+     * code verifier.
+     * @param frontdoorBridgeUrl The UI Bridge API front door bridge URL
+     * @param pkceCodeVerifier The PKCE code verifier
+     */
+    @Suppress("MemberVisibilityCanBePrivate")
+    fun loginWithFrontdoorBridgeUrl(
+        frontdoorBridgeUrl: String,
+        pkceCodeVerifier: String
+    ) = webviewHelper?.loginWithFrontdoorBridgeUrl(frontdoorBridgeUrl, pkceCodeVerifier)
+
+    // endregion
+    // region QR Code Login Via UI Bridge API Private Implementation
+
+    /**
+     * Determines if QR code login is enabled for the provided intent.
+     * @param intent The intent to determine QR code login enablement for
+     * @return Boolean true if QR code login is enabled for the the intent or
+     * false otherwise
+     */
+    private fun isDeepLinkedQrCodeLogin(
+        intent: Intent
+    ) = SalesforceSDKManager.getInstance().isQrCodeLoginEnabled
+            && intent.data?.path?.contains(LOGIN_QR_PATH) == true
+
+    /**
+     * Parses UI Bridge API parameters from the provided login QR code content.
+     * @param loginQrCodeContent The login QR code content string
+     * @return UiBridgeApiParameters: The UI Bridge API parameters or null if the QR code
+     * content cannot provide them for any reason
+     */
+    private fun uiBridgeApiParametersFromLoginQrCodeContent(
+        loginQrCodeContent: String?
+    ) = loginQrCodeContent?.let { loginQrCodeContentUnwrapped ->
+        uiBridgeApiJsonFromQrCodeContent(loginQrCodeContentUnwrapped)?.let { uiBridgeApiJson ->
+            uiBridgeApiParametersFromUiBridgeApiJson(uiBridgeApiJson)
+        }
+    }
+
+    /**
+     * Parses UI Bridge API parameters JSON from the provided string, which may
+     * be formatted to match either QR code content provided by the intent or
+     * the app's QR code library.
+     *
+     * 1. From intent (external QR reader): ?bridgeJson={...}
+     * 2. From the app's QR reader: ?bridgeJson=%7B...%7D
+     *
+     * @param qrCodeContent The QR code content string
+     * @return String: The UI Bridge API parameter JSON or null if the string
+     * cannot provide the JSON for any reason
+     */
+    private fun uiBridgeApiJsonFromQrCodeContent(
+        qrCodeContent: String
+    ) = qrCodeBridgeJsonRegexExternal.find(qrCodeContent)?.groups?.get(1)?.value
+        ?: qrCodeBridgeJsonRegexInternal.find(qrCodeContent)?.groups?.get(1)?.value?.let {
+            URLDecoder.decode(it, "UTF-8")
+        }
+
+    /**
+     * Creates UI Bridge API parameters from the provided JSON string.
+     * @param uiBridgeApiParameterJsonString The UI Bridge API parameters JSON
+     * string
+     * @return The UI Bridge API parameters
+     */
+    private fun uiBridgeApiParametersFromUiBridgeApiJson(
+        uiBridgeApiParameterJsonString: String
+    ) = JSONObject(uiBridgeApiParameterJsonString).let { uiBridgeApiParameterJson ->
+        UiBridgeApiParameters(
+            uiBridgeApiParameterJson.getString(FRONTDOOR_BRIDGE_URL_KEY),
+            uiBridgeApiParameterJson.optString(PKCE_CODE_VERIFIER_KEY, "")
+        )
+    }
+
+    /**
+     * A data class representing UI Bridge API parameters provided by a login QR
+     * code.
+     */
+    private data class UiBridgeApiParameters(
+
+        /** The front door bridge URL provided by the login QR code */
+        val frontdoorBridgeUrl: String,
+
+        /** The PKCE code verifier provided by the login QR code */
+        val pkceCodeVerifier: String
+    )
+
+    // endregion
+
     companion object {
         const val PICK_SERVER_REQUEST_CODE = 10
         private const val SETUP_REQUEST_CODE = 72
         private const val TAG = "LoginActivity"
+
+        // region QR Code Login Via UI Bridge API Constants
+
+        /** The QR code login intent path */
+        const val LOGIN_QR_PATH = "/login/qr"
+
+        /** The login QR code's UI Bridge API parameter's JSON frontdoor bridge URL key */
+        const val FRONTDOOR_BRIDGE_URL_KEY = "frontdoor_bridge_url"
+
+        /** The login QR code's UI Bridge API parameter's JSON PKCE code verifier key */
+        const val PKCE_CODE_VERIFIER_KEY = "pkce_code_verifier"
+
+        /** A regular expression to extract the UI Bridge API parameter JSON from the intent's login QR code content */
+        val qrCodeBridgeJsonRegexExternal by lazy { """\?bridgeJson=(\{.*\})""".toRegex() }
+
+        /** A regular expression to extract the UI Bridge API parameter JSON from the app's login QR code content */
+        val qrCodeBridgeJsonRegexInternal by lazy { """\?bridgeJson=(%7B.*%7D)""".toRegex() }
+
+        // endregion
     }
 }

libs/SalesforceSDK/src/com/salesforce/androidsdk/ui/OAuthWebviewHelper.kt

@@ -148,7 +148,7 @@ import java.util.function.Consumer
  * @Deprecated This class will no longer be public starting in Mobile SDK 13.0.  It
  * is no longer necessary to extend or change LoginActivity's instance of this class
  * to support multi-factor authentication.  If there are other uses cases please
- * inform the team via Github or our Trailblazer community.  
+ * inform the team via Github or our Trailblazer community.
  */
 @Deprecated(
     "This class will no longer be public starting in Mobile SDK 13.0.",
@@ -661,7 +661,7 @@ open class OAuthWebviewHelper : KeyChainAliasCallback {
                     )
 
                     else -> when {
-                        instance.useWebServerAuthentication -> onWebServerFlowComplete(params["code"])
+                        codeVerifier?.isNotEmpty() == true -> onWebServerFlowComplete(params["code"])
                         else -> onAuthFlowComplete(TokenEndpointResponse(params))
                     }
                 }
@@ -1399,6 +1399,21 @@ open class OAuthWebviewHelper : KeyChainAliasCallback {
         }
     }
 
+    /**
+     * Automatically log in using the provided UI Bridge API parameters.
+     * @param frontdoorBridgeUrl The UI Bridge API front door bridge API
+     * @param pkceCodeVerifier The PKCE code verifier
+     */
+    fun loginWithFrontdoorBridgeUrl(
+        frontdoorBridgeUrl: String,
+        pkceCodeVerifier: String
+    ) {
+        val uri = URI(frontdoorBridgeUrl)
+        loginOptions.loginUrl = "${uri.scheme}://${uri.host}"
+        codeVerifier = pkceCodeVerifier
+        webView?.loadUrl(frontdoorBridgeUrl)
+    }
+
     companion object {
 
         /**