Add preference for work account

Author: fynngodau

play-services-auth-workaccount/core/src/main/kotlin/com/google/android/gms/auth/account/authenticator/WorkAccountAuthenticator.kt

@@ -19,6 +19,7 @@ import org.microg.gms.auth.AuthConstants
 import org.microg.gms.common.PackageUtils
 import org.microg.gms.auth.AuthRequest
 import org.microg.gms.auth.AuthResponse
+import org.microg.gms.auth.workaccount.WorkProfileSettings
 import java.io.IOException
 import kotlin.jvm.Throws
 
@@ -38,7 +39,14 @@ class WorkAccountAuthenticator(val context: Context) : AbstractAccountAuthentica
         requiredFeatures: Array<out String>?,
         options: Bundle
     ): Bundle? {
-        if (
+
+        if (!WorkProfileSettings(context).allowCreateWorkAccount) {
+            return Bundle().apply {
+                putInt(AccountManager.KEY_ERROR_CODE, AccountManager.ERROR_CODE_UNSUPPORTED_OPERATION)
+                putString(AccountManager.KEY_ERROR_MESSAGE, context.getString(R.string.auth_work_authenticator_disabled_error)
+                )
+            }
+        } else if (
             !options.containsKey(KEY_ACCOUNT_CREATION_TOKEN)
             || options.getString(KEY_ACCOUNT_CREATION_TOKEN) == null
             || options.getInt(AccountManager.KEY_CALLER_UID) != android.os.Process.myUid()) {

play-services-auth-workaccount/core/src/main/kotlin/org/microg/gms/auth/workaccount/WorkAccountSettings.kt

@@ -0,0 +1,23 @@
+package org.microg.gms.auth.workaccount
+
+import android.content.ContentValues
+import android.content.Context
+import android.database.Cursor
+import org.microg.gms.settings.SettingsContract
+
+class WorkProfileSettings(private val context: Context) {
+    private fun <T> getSettings(vararg projection: String, f: (Cursor) -> T): T =
+        SettingsContract.getSettings(
+            context,
+            SettingsContract.WorkProfile.getContentUri(context),
+            projection,
+            f
+        )
+
+    private fun setSettings(v: ContentValues.() -> Unit) =
+        SettingsContract.setSettings(context, SettingsContract.WorkProfile.getContentUri(context), v)
+
+    var allowCreateWorkAccount: Boolean
+        get() = getSettings(SettingsContract.WorkProfile.CREATE_WORK_ACCOUNT) { c -> c.getInt(0) != 0 }
+        set(value) = setSettings { put(SettingsContract.WorkProfile.CREATE_WORK_ACCOUNT, value) }
+}

play-services-auth-workaccount/core/src/main/kotlin/org/microg/gms/auth/workaccount/WorkProfileSettings.kt

@@ -7,5 +7,6 @@
 
     <string name="auth_work_authenticator_label">Managed Google for Work account</string>
     <string name="auth_work_authenticator_add_manual_error">This type of account is created automatically by your profile administrator if needed.</string>
+    <string name="auth_work_authenticator_disabled_error">Creating a work account is disabled in microG settings.</string>
 
 </resources>

play-services-auth-workaccount/core/src/main/res/values/strings.xml

@@ -277,6 +277,18 @@ object SettingsContract {
         )
     }
 
+    object WorkProfile {
+        const val ID = "emm" // Enterprise Mobility Management
+        fun getContentUri(context: Context) = Uri.withAppendedPath(getAuthorityUri(context), ID)
+        fun getContentType(context: Context) = "vnd.android.cursor.item/vnd.${getAuthority(context)}.$ID"
+
+        const val CREATE_WORK_ACCOUNT = "emm_allow_provision"
+
+        val PROJECTION = arrayOf(
+            CREATE_WORK_ACCOUNT
+        )
+    }
+
     private fun <T> withoutCallingIdentity(f: () -> T): T {
         val identity = Binder.clearCallingIdentity()
         try {

play-services-base/core/src/main/kotlin/org/microg/gms/settings/SettingsContract.kt

@@ -26,6 +26,7 @@ import org.microg.gms.settings.SettingsContract.Location
 import org.microg.gms.settings.SettingsContract.Profile
 import org.microg.gms.settings.SettingsContract.SafetyNet
 import org.microg.gms.settings.SettingsContract.Vending
+import org.microg.gms.settings.SettingsContract.WorkProfile
 import org.microg.gms.settings.SettingsContract.getAuthority
 import java.io.File
 
@@ -82,6 +83,7 @@ class SettingsProvider : ContentProvider() {
         Profile.ID -> queryProfile(projection ?: Profile.PROJECTION)
         Location.ID -> queryLocation(projection ?: Location.PROJECTION)
         Vending.ID -> queryVending(projection ?: Vending.PROJECTION)
+        WorkProfile.ID -> queryWorkProfile(projection ?: WorkProfile.PROJECTION)
         else -> null
     }
 
@@ -103,6 +105,7 @@ class SettingsProvider : ContentProvider() {
             Profile.ID -> updateProfile(values)
             Location.ID -> updateLocation(values)
             Vending.ID -> updateVending(values)
+            WorkProfile.ID -> updateWorkProfile(values)
             else -> return 0
         }
         return 1
@@ -377,6 +380,25 @@ class SettingsProvider : ContentProvider() {
         editor.apply()
     }
 
+    private fun queryWorkProfile(p: Array<out String>): Cursor = MatrixCursor(p).addRow(p) { key ->
+        when (key) {
+            WorkProfile.CREATE_WORK_ACCOUNT -> getSettingsBoolean(key, false)
+            else -> throw IllegalArgumentException("Unknown key: $key")
+        }
+    }
+
+    private fun updateWorkProfile(values: ContentValues) {
+        if (values.size() == 0) return
+        val editor = preferences.edit()
+        values.valueSet().forEach { (key, value) ->
+            when (key) {
+                WorkProfile.CREATE_WORK_ACCOUNT -> editor.putBoolean(key, value as Boolean)
+                else -> throw IllegalArgumentException("Unknown key: $key")
+            }
+        }
+        editor.apply()
+    }
+
     private fun MatrixCursor.addRow(
         p: Array<out String>,
         valueGetter: (String) -> Any?