feat: database encryption using sqlcipher

mifosng-android/build.gradle

@@ -135,6 +135,9 @@ dependencies {
     apt "com.github.Raizlabs.DBFlow:dbflow-processor:$rootProject.raizLabsDBFlow"
     compile "com.github.Raizlabs.DBFlow:dbflow-core:$rootProject.raizLabsDBFlow"
     compile "com.github.Raizlabs.DBFlow:dbflow:$rootProject.raizLabsDBFlow"
+    // sql-cipher database encryption
+    releaseCompile "com.github.Raizlabs.DBFlow:dbflow-sqlcipher:$rootProject.raizLabsDBFlow@aar"
+    releaseCompile "net.zetetic:android-database-sqlcipher:3.5.1"
 
     // App's Support dependencies, including test
     compile "com.android.support:appcompat-v7:$rootProject.supportLibraryVersion"
@@ -167,16 +170,17 @@ dependencies {
     compile "com.squareup.retrofit2:converter-scalars:$rootProject.retrofitVersionLatest"
     compile "com.squareup.retrofit2:adapter-rxjava:$rootProject.retrofitVersionLatest"
     compile "com.squareup.okhttp3:okhttp:$rootProject.okHttp3Version"
-    compile "com.squareup.okhttp3:logging-interceptor:$rootProject.okHttp3Version"
+    debugCompile "com.squareup.okhttp3:logging-interceptor:$rootProject.okHttp3Version"
     compile "com.jakewharton.fliptables:fliptables:$rootProject.flipTableVersion"
 
     compile 'javax.annotation:jsr250-api:1.0@jar'
 
     compile 'io.reactivex:rxandroid:1.1.0'
     compile 'io.reactivex:rxjava:1.1.4'
 
-    compile 'com.facebook.stetho:stetho:1.3.1'
-    compile 'com.facebook.stetho:stetho-okhttp3:1.3.1'
+    //facebook Stetho for Debugging with SQLite Database
+    debugCompile 'com.facebook.stetho:stetho:1.3.1'
+    debugCompile 'com.facebook.stetho:stetho-okhttp3:1.3.1'
 
 
     compile 'com.joanzapata.iconify:android-iconify-material:2.1.1' // (v2.0.0)

mifosng-android/src/main/java/com/mifos/App.java → mifosng-android/src/debug/java/com/mifos/App.java

@@ -54,8 +54,9 @@ public void onCreate() {
         Fabric.with(this, new Crashlytics());
 
         Iconify.with(new MaterialModule());
-        //Initializing the DBFlow and SQL Cipher Encryption
+        //Initializing the DBFlow
         FlowManager.init(new FlowConfig.Builder(this).build());
+
         Stetho.initializeWithDefaults(this);
     }
 

mifosng-android/src/release/java/com/mifos/App.java

@@ -0,0 +1,93 @@
+/*
+ * This project is licensed under the open source MPL V2.
+ * See https://github.com/openMF/android-client/blob/master/LICENSE.md
+ */
+
+package com.mifos;
+
+import android.app.Application;
+import android.content.Context;
+import android.graphics.Typeface;
+
+import com.crashlytics.android.Crashlytics;
+import com.joanzapata.iconify.Iconify;
+import com.joanzapata.iconify.fonts.MaterialModule;
+import com.mifos.api.local.MifosDatabase;
+import com.mifos.api.local.MifosSQLCipherHelper;
+import com.mifos.mifosxdroid.injection.component.ApplicationComponent;
+import com.mifos.mifosxdroid.injection.component.DaggerApplicationComponent;
+import com.mifos.mifosxdroid.injection.module.ApplicationModule;
+import com.raizlabs.android.dbflow.config.DatabaseConfig;
+import com.raizlabs.android.dbflow.config.DatabaseDefinition;
+import com.raizlabs.android.dbflow.config.FlowConfig;
+import com.raizlabs.android.dbflow.config.FlowManager;
+import com.raizlabs.android.dbflow.structure.database.DatabaseHelperListener;
+import com.raizlabs.android.dbflow.structure.database.OpenHelper;
+
+import java.util.HashMap;
+import java.util.Map;
+
+import io.fabric.sdk.android.Fabric;
+
+/**
+ * Created by ishankhanna on 13/03/15.
+ */
+public class App extends Application {
+
+    public static final Map<Integer, Typeface> typefaceManager = new HashMap<>();
+
+    private static App instance;
+
+    ApplicationComponent mApplicationComponent;
+
+    public static Context getContext() {
+        return instance;
+    }
+
+    public static App getInstance() {
+        return instance;
+    }
+
+    public static App get(Context context) {
+        return (App) context.getApplicationContext();
+    }
+
+    @Override
+    public void onCreate() {
+        super.onCreate();
+        instance = this;
+        Fabric.with(this, new Crashlytics());
+
+        Iconify.with(new MaterialModule());
+        //Initializing the DBFlow and SQL Cipher Encryption
+        FlowManager.init(new FlowConfig.Builder(this)
+                .addDatabaseConfig(
+                        new DatabaseConfig.Builder(MifosDatabase.class)
+                                .openHelper(new DatabaseConfig.OpenHelperCreator() {
+                                    @Override
+                                    public OpenHelper createHelper(
+                                            DatabaseDefinition databaseDefinition,
+                                            DatabaseHelperListener helperListener) {
+                                        return new MifosSQLCipherHelper(
+                                                databaseDefinition, helperListener);
+                                    }
+                                })
+                                .build())
+                .build());
+    }
+
+    public ApplicationComponent getComponent() {
+        if (mApplicationComponent == null) {
+            mApplicationComponent = DaggerApplicationComponent.builder()
+                    .applicationModule(new ApplicationModule(this))
+                    .build();
+        }
+        return mApplicationComponent;
+    }
+
+    // Needed to replace the component with a test specific one
+    public void setComponent(ApplicationComponent applicationComponent) {
+        mApplicationComponent = applicationComponent;
+    }
+
+}

mifosng-android/src/release/java/com/mifos/api/MifosOkHttpClient.java

@@ -0,0 +1,79 @@
+package com.mifos.api;
+
+import java.security.cert.CertificateException;
+import java.security.cert.X509Certificate;
+import java.util.concurrent.TimeUnit;
+
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLSession;
+import javax.net.ssl.SSLSocketFactory;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.X509TrustManager;
+
+import okhttp3.OkHttpClient;
+
+/**
+ * Created by Rajan Maurya on 16/06/16.
+ */
+public class MifosOkHttpClient {
+
+
+    public OkHttpClient getMifosOkHttpClient() {
+
+        OkHttpClient.Builder builder = new OkHttpClient.Builder();
+
+        try {
+            // Create a trust manager that does not validate certificate chains
+            TrustManager[] trustAllCerts = {
+                    new X509TrustManager() {
+                        @Override
+                        public void checkClientTrusted(
+                                X509Certificate[] chain,
+                                String authType) throws CertificateException {
+                        }
+
+                        @Override
+                        public void checkServerTrusted(
+                                X509Certificate[] chain,
+                                String authType) throws CertificateException {
+                        }
+
+                        @Override
+                        public X509Certificate[] getAcceptedIssuers() {
+                            return new X509Certificate[0];
+                        }
+                    }
+            };
+
+            // Install the all-trusting trust manager
+            SSLContext sslContext = SSLContext.getInstance("SSL");
+            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
+            // Create an ssl socket factory with our all-trusting manager
+            SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
+
+            //Set SSL certificate to OkHttpClient Builder
+
+            builder.sslSocketFactory(sslSocketFactory);
+
+            builder.hostnameVerifier(new HostnameVerifier() {
+                @Override
+                public boolean verify(String hostname, SSLSession session) {
+                    return true;
+                }
+            });
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+
+        //Setting Timeout 30 Seconds
+        builder.connectTimeout(60, TimeUnit.SECONDS);
+        builder.readTimeout(60, TimeUnit.SECONDS);
+
+        //Interceptor :> Full Body Logger and ApiRequest Header
+        builder.addInterceptor(new MifosInterceptor());
+
+        return builder.build();
+
+    }
+}

mifosng-android/src/release/java/com/mifos/api/local/MifosSQLCipherHelper.java

@@ -0,0 +1,18 @@
+package com.mifos.api.local;
+
+import com.raizlabs.android.dbflow.config.DatabaseDefinition;
+import com.raizlabs.android.dbflow.structure.database.DatabaseHelperListener;
+import com.raizlabs.dbflow.android.sqlcipher.SQLCipherOpenHelper;
+
+public class MifosSQLCipherHelper extends SQLCipherOpenHelper {
+
+    public MifosSQLCipherHelper(DatabaseDefinition databaseDefinition,
+                                DatabaseHelperListener listener) {
+        super(databaseDefinition, listener);
+    }
+
+    @Override
+    protected String getCipherSecret() {
+        return "dbflow-rules";
+    }
+}