initial commit

.gitignore

+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+
+# User-specific files
+*.rsuser
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Mono auto generated files
+mono_crash.*
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+[Ww][Ii][Nn]32/
+[Aa][Rr][Mm]/
+[Aa][Rr][Mm]64/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+[Ll]ogs/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# ASP.NET Scaffolding
+ScaffoldingReadMe.txt
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_h.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*_wpftmp.csproj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Coverlet is a free, cross platform Code Coverage Tool
+coverage*[.json, .xml, .info]
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# NuGet Symbol Packages
+*.snupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+*.appxbundle
+*.appxupload
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!?*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+*- [Bb]ackup.rdl
+*- [Bb]ackup ([0-9]).rdl
+*- [Bb]ackup ([0-9][0-9]).rdl
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# CodeRush personal settings
+.cr/personal
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+# BeatPulse healthcheck temp database
+healthchecksdb
+
+# Backup folder for Package Reference Convert tool in Visual Studio 2017
+MigrationBackup/
+
+# Ionide (cross platform F# VS Code tools) working folder
+.ionide/

Hash.cs

+using System;
+using System.Collections.Generic;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace sunrise_launcher
+{
+    public static class Hashing
+    {
+        public static HashAlgorithm GetHashAlgorithm(ManifestFile file)
+        {
+            if (!string.IsNullOrWhiteSpace(file.Sha256))
+            {
+                return SHA256.Create();
+            }
+            if (!string.IsNullOrWhiteSpace(file.MD5))
+            {
+                return MD5.Create();
+            }
+            Console.WriteLine("missing checksum for file '{0}'", file.Path);
+            return null;
+        }
+
+        public static bool VerifyChecksum(byte[] bytes, ManifestFile file)
+        {
+            var checksum = ByteArrayToHex(bytes);
+            if (!string.IsNullOrWhiteSpace(file.Sha256))
+            {
+                return checksum == file.Sha256;
+            }
+            if (!string.IsNullOrWhiteSpace(file.MD5))
+            {
+                return checksum == file.MD5;
+            }
+            return false;
+        }
+
+        public static string ByteArrayToHex(byte[] bytes)
+        {
+            char[] c = new char[bytes.Length * 2];
+            byte b;
+            for (int i = 0; i < bytes.Length; ++i)
+            {
+                b = ((byte)(bytes[i] >> 4));
+                c[i * 2] = (char)(b > 9 ? b + 0x57 : b + 0x30);
+                b = ((byte)(bytes[i] & 0xF));
+                c[i * 2 + 1] = (char)(b > 9 ? b + 0x57 : b + 0x30);
+            }
+            return new string(c);
+        }
+    }
+}

IManifest.cs

+using System;
+using System.Collections.Generic;
+using System.Text;
+
+namespace sunrise_launcher
+{
+    public interface IManifest
+    {
+        public ManifestMetadata GetMetadata();
+
+        public IEnumerable<ManifestFile> GetFiles();
+
+        public int Count();
+    }
+}

Manifest.cs

+using System;
+using System.Collections.Generic;
+using System.Text;
+using System.Text.Json.Serialization;
+using System.Linq;
+using System.IO;
+
+namespace sunrise_launcher
+{
+    public class ManifestMetadata
+    {
+        [JsonPropertyName("title")]
+        public string Title { get; set; }
+        [JsonPropertyName("hash")]
+        public string Hash { get; set; }
+        [JsonPropertyName("launch_path")]
+        public string LaunchPath { get; set; }
+        [JsonPropertyName("launch_env")]
+        public string LaunchEnv { get; set; }
+        [JsonPropertyName("launch_args")]
+        public string LaunchArgs { get; set; }
+
+        public bool Verify()
+        {
+            if (Path.IsPathFullyQualified(LaunchPath))
+            {
+                Console.WriteLine("launch path is fully qualified");
+                return false;
+            }
+
+            return true;
+        }
+    }
+
+    public class ManifestFile
+    {
+        [JsonPropertyName("path")]
+        public string Path { get; set; }
+        [JsonPropertyName("size")]
+        public long Size { get; set; }
+        [JsonPropertyName("sha256")]
+        public string Sha256 { get; set; }
+        [JsonPropertyName("md5")]
+        public string MD5 { get; set; }
+        [JsonPropertyName("sources")]
+        public List<FileSource> Sources { get; set; }
+
+        public bool Verify()
+        {
+            if (Path.Contains(".."))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: '..' in {0}", Path);
+                return false;
+            }
+                
+            if (Path.Contains("~"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: '~' in {0}", Path);
+                return false;
+            }
+
+            if (Path.Contains("$"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: '$' in {0}", Path);
+                return false;
+            }
+
+            if (Path.Contains("%"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: '%' in {0}", Path);
+                return false;
+            }
+
+            if (System.IO.Path.IsPathFullyQualified(Path))
+            {
+                Console.WriteLine("file path is fully qualified: {0}", Path);
+                return false;
+            }
+
+            if (Path.Contains("main.js"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: 'main.js' in {0}", Path);
+                return false;
+            }
+
+            if (Path.Contains("main.qml"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: 'main.qml' in {0}", Path);
+                return false;
+            }
+
+            if (Path.Contains("sunrise-launcher"))
+            {
+                Console.WriteLine("illegal sequence in manifest file path: 'sunrise-launcher' in {0}", Path);
+                return false;
+            }
+
+            return Sources.All(x => x.Verify());
+        }
+    }
+
+    public class FileSource
+    {
+        [JsonPropertyName("url")]
+        public string URL { get; set; }
+
+        public bool Verify()
+        {
+            if (URL.ToLower().Contains("file:"))
+            {
+                Console.WriteLine("illegal sequence in manifest source url: 'file:' in source {0}", URL);
+                return false;
+            }
+
+            return true;
+        }
+    }
+}

ManifestFactory.cs

+using System;
+using System.Collections.Generic;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace sunrise_launcher
+{
+    public interface IManifestFactory
+    {
+        public Task<IManifest> Get(Server server);
+    }
+
+    public class ManifestFactory : IManifestFactory
+    {
+        const string manifiesta_v1 = "manifiesta-v1";
+        const string tequila_xml = "tequila-xml";
+
+        public async Task<IManifest> Get(Server server)
+        {
+            var schema = getSchema(server.ManifestURL);
+            switch (schema)
+            {
+                case manifiesta_v1:
+                    return await Manifiesta.Get(server);
+                case tequila_xml:
+                    return await TequilaXML.Get(server);
+            }
+            return null;
+        }
+
+        private string getSchema(string manifesturl)
+        {
+            if (manifesturl.ToLower().EndsWith(".xml"))
+                return tequila_xml;
+            else
+                return manifiesta_v1; //todo; call endpoint for actual schema
+        }
+    }
+}

Manifiesta.cs

+using System;
+using System.Collections.Generic;
+using System.Net.Http;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Serialization;
+using System.Threading.Tasks;
+
+namespace sunrise_launcher
+{
+    public class Manifiesta : ManifestMetadata, IManifest
+    {
+        [JsonPropertyName("files")]
+        public List<ManifestFile> Files { get; set; }
+
+        public IEnumerable<ManifestFile> GetFiles()
+        {
+            return Files;
+        }
+
+        public int Count()
+        {
+            return Files.Count;
+        }
+
+        public ManifestMetadata GetMetadata()
+        {
+            return this;
+        }
+
+        private static HttpClient client = new HttpClient();
+        public static async Task<Manifiesta> Get(Server server)
+        {
+            try
+            {
+                var response = await client.GetAsync(server.ManifestURL);
+                if (response.IsSuccessStatusCode)
+                {
+                    var hash = SHA256.Create();
+                    using (var reader = await response.Content.ReadAsStreamAsync())
+                    using (var hashstream = new CryptoStream(reader, hash, CryptoStreamMode.Read))
+                    {
+                        var manifest = await JsonSerializer.DeserializeAsync<Manifiesta>(hashstream);
+                        manifest.Hash = Hashing.ByteArrayToHex(hash.Hash);
+                        return manifest;
+                    }
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.WriteLine("exception while retrieving manifest: {0}", ex.Message);
+            }
+            return null;
+        }
+    }
+}

Program.cs

+using Qml.Net;
+using Qml.Net.Runtimes;
+
+using System;
+using System.IO;