Pass XDG_ACTIVATION_TOKEN to apps launched via `launch_app_env` #3703

tarek-y-ismail · 2024-12-18T17:54:05Z

No description provided.

src/server/frontend_wayland/xdg_activation_v1.cpp

AlanGriffiths

Drilling into the frontend implementation from the Server abstraction is placing logic in the wrong place, fragile when that implementation changes, and probably won't work.

We first need to break out the token issue & validation logic from xdg-activation so that it can meet the new requirements. (With this scenario there is no "requester" to check still has focus)

src/server/symbols.map

AlanGriffiths · 2024-12-19T10:20:19Z

src/server/server.cpp

@@ -16,6 +16,7 @@

 #include "mir/server.h"

+#include "frontend_wayland/xdg_activation_v1.h"


This looks like a wrong approach.

We shouldn't be exposing the whole (or, probably, any) of xdg-activation to the server code:

it is pointless to "pretend" to be a client requesting a token, as the pretend client will not have focus when the token is invoked;

this code shouldn't care when xdg-activation-v2 or xdg-activation (stable) comes along

A better approach would be to have a token issue/validation API used by both the launch code and the activation protocol

src/miral/launch_app.h

src/server/server.cpp

src/include/server/mir/shell/token_authority.h

src/server/frontend_wayland/xdg_activation_v1.cpp

tarek-y-ismail · 2024-12-19T18:04:38Z

src/server/server.cpp

+{
+    if (auto const config = self->server_config)
+    {
+        return config->the_token_authority()->issue_token({});


Not sure if this is better or I should add an overload with no parameters

src/include/server/mir/shell/token_authority.h

src/server/frontend_wayland/xdg_activation_v1.cpp

src/server/frontend_wayland/xdg_activation_v1.h

src/server/symbols.map

AlanGriffiths

Looks like a better architecture. But I've not yet looked closely enough to decide how tokens supplied via launch_app_env() will be handled by xdg-activation

src/include/server/mir/shell/token_authority.h

src/server/symbols.map

RAOF

Broadly, I think the TokenAuthority is kinda half way there. It's not actually an authority - code can't use it to check if a Token is valid, and that's tracked separately by XdgActivationV1. This is also why there's spooky action-at-a-distance in XdgActivationV1::invalidate_*() - you're maintaining a second list of valid tokens, mutating XdgActivationV1::pending_tokens by calling token_authority->revoke_token(...).

I think this would be simpler if:
a) The TokenAuthority was the... authority for whether a token was valid or not, and
b) Token was treated more as an opaque... token, rather than immediately decaying into a std::string and all the interfaces taking that.

src/miral/launch_app.cpp

src/server/frontend_wayland/xdg_activation_v1.cpp

src/include/server/mir/shell/token_authority.h

RAOF

Yeah, that's cleaner. On further thought, I'm not sure we sensibly can decouple XdgActivation and the TokenAuthority further.

src/miral/launch_app.cpp

Closes #2586. Adds a new constructor to `FloatingWindowManagerPolicy` to control focus stealing prevention. This in a nutshell stops new windows from being focused and raised. When used with xdg-activation-v1, this improves security as external actors can't just steal focus by opening a new window (in addition to the niceties xdg-activation-v1 adds to usability). TODO: - [ ] ~Fix window offsetting. This is built off the position of the focused window, so all windows after the second one open in the same (x,y) position.~ Split off to #3695 - [ ] ~Fix windows closing in the order of opening instead of front to back. see #3693 (comment) Moved to #3694 - [ ] ~Make sure Xwayland applications work properly. My focus has been on Wayland applications so far.~ Xwayland doesn't seem to support xdg-activation at the moment? - [x] Alt + tab predictably broken :/ Have to focus other applications before they work with alt + tab - [x] Decorations are not pushed behind the focused window - [ ] ~Need some way to focus applications launched via Mir (Ctrl-Alt+t/T for example)~ Will be in its own PR (#3703)

tarek-y-ismail · 2025-01-22T08:02:31Z

TIL that github's conflict editor merges (there's probably a rebase option that I missed)

AlanGriffiths

/usr/bin/ld: unable to find version dependency `MIR_SERVER_INTERNAL_2.19'
/usr/bin/ld: duplicate version tag `MIR_SERVER_INTERNAL_2.20'
collect2: error: ld returned 1 exit status

src/server/symbols.map is ill formed

AlanGriffiths · 2025-01-22T10:19:43Z

(With the symbols.map fixed)

From Gnome:

miral-app --focus-stealing-prevention true
Ctrl-Alt-X to launch xterm
Ctrl-Alt-Shift-T to launch gnome-terminal

Expect: gnome-terminal gets focus and raised
Actual: xterm remains on top with focus

tarek-y-ismail · 2025-01-22T11:42:41Z

Hopefully both issues should be fixed now (facepalm). I'm not very sure about the symbol stuff. I should really spend some time to understand it

I recommend testing with firefox and kgx. gnome-terminal doesn't seem to request activation.

Edit: To save you some frustration, here's a list of apps that request activation and others that don't:

Applications that request activation:

kgx
firefox
nautilus
baobab

Applications that DO NOT request activation:

gnome-terminal
qterminal
weston-terminal
bomber
qtcreator (seems to request activation with random tokens for dropdowns?)
glmark2-wayland
kate
pluma
audacity

AlanGriffiths

I think this is the usecase the PR is intended to address:

From Gnome:
1. `miral-app --focus-stealing-prevention true`

2. `Ctrl-Alt-X` to launch `xterm`

3. `Ctrl-Alt-Shift-T` to launch `gnome-terminal`
Expect: gnome-terminal gets focus and raised
Actual: xterm remains on top with focus

Same with:

miral-app --focus-stealing-prevention true --shell-terminal-emulator=xfce4-terminal
miral-app --focus-stealing-prevention true --shell-terminal-emulator=qterminal

So it isn't just gnome-terminal being weird

AlanGriffiths · 2025-01-22T11:52:36Z

Applications that DO NOT request activation:
* gnome-terminal

gnome terminal does request activation:

[2025-01-22 11:46:17.010620] < - ERROR - > mirserver: XdgActivationV1::activate invalid token: gnome-shell/CLion/962086-6-Octopull-Framework16_TIME194122238

But that's not the token in XDG_ACTIVATION_TOKEN

tarek-y-ismail · 2025-01-22T12:23:30Z

gnome terminal does request activation

That's very weird, it doesn't seem to do so when launched via miral-terminal. But then again, gnome-terminal has been a massive headache so far

But that's not the token in XDG_ACTIVATION_TOKEN

I have no idea why gnome-terminal is trying to doxx you, I'm not even sure how it put that as the activation token.

AlanGriffiths

Nitpicking

src/include/server/mir/shell/token_authority.h

src/miral/external_client.cpp

src/server/shell/token_authority.cpp

src/miral/x11_support.cpp

src/include/server/mir/shell/token_authority.h

src/server/shell/token_authority.cpp

src/include/server/mir/shell/token_authority.h

AlanGriffiths · 2025-01-23T11:12:00Z

Also

  New Symbols 🟢🟢🟢
    mir::shell::TokenAuthority::get_bogus_token*;

It now keeps track of the active session and prevents unfocused applications from requesting tokens

Ordered includes and made pointers const

Refactored the parameters of `launch_app_env` to use `std::optional` instead of `mir::optional_value`

This fixes terminals failing to activate themselves due to the key listener immediately revoking their token in response to the terminal launch shortcut being pressed.

AlanGriffiths

Behaves a bit better now. :)

src/server/frontend_wayland/xdg_activation_v1.cpp

src/server/shell/token_authority.cpp

Remove log statements to not flood logs Return a proper bogus UUID to prevent clients from knowing which tokens are valid and which are not

tarek-y-ismail self-assigned this Dec 18, 2024

tarek-y-ismail commented Dec 18, 2024

View reviewed changes

src/server/frontend_wayland/xdg_activation_v1.cpp Outdated Show resolved Hide resolved

tarek-y-ismail mentioned this pull request Dec 18, 2024

Add focus stealing prevention to MinimalWindowManager #3693

Merged

6 tasks

tarek-y-ismail requested a review from mattkae December 18, 2024 17:57

AlanGriffiths requested changes Dec 19, 2024

View reviewed changes

tarek-y-ismail commented Dec 19, 2024

View reviewed changes

src/include/server/mir/shell/token_authority.h Show resolved Hide resolved

tarek-y-ismail commented Dec 19, 2024

View reviewed changes

src/include/server/mir/shell/token_authority.h Outdated Show resolved Hide resolved

tarek-y-ismail commented Dec 19, 2024

View reviewed changes

src/server/frontend_wayland/xdg_activation_v1.cpp Outdated Show resolved Hide resolved

tarek-y-ismail commented Dec 19, 2024

View reviewed changes

src/include/server/mir/shell/token_authority.h Outdated Show resolved Hide resolved

tarek-y-ismail commented Dec 19, 2024

View reviewed changes

src/server/frontend_wayland/xdg_activation_v1.cpp Outdated Show resolved Hide resolved

tarek-y-ismail force-pushed the pass-xdg-activation-token-when-launching-apps branch from 852ccf5 to 6994bc1 Compare December 20, 2024 13:28

tarek-y-ismail commented Dec 20, 2024

View reviewed changes

src/server/frontend_wayland/xdg_activation_v1.h Outdated Show resolved Hide resolved

tarek-y-ismail commented Dec 20, 2024

View reviewed changes

src/server/symbols.map Outdated Show resolved Hide resolved

tarek-y-ismail marked this pull request as ready for review December 20, 2024 14:02

tarek-y-ismail requested a review from a team as a code owner December 20, 2024 14:02

tarek-y-ismail requested a review from AlanGriffiths December 20, 2024 14:54

AlanGriffiths requested changes Dec 20, 2024

View reviewed changes

src/include/server/mir/shell/token_authority.h Outdated Show resolved Hide resolved

src/server/symbols.map Show resolved Hide resolved

tarek-y-ismail requested a review from AlanGriffiths January 6, 2025 10:58

RAOF requested changes Jan 7, 2025

View reviewed changes

RAOF reviewed Jan 9, 2025

View reviewed changes

src/miral/launch_app.cpp Outdated Show resolved Hide resolved

tarek-y-ismail requested a review from RAOF January 9, 2025 08:22

AlanGriffiths requested changes Jan 22, 2025

View reviewed changes

tarek-y-ismail force-pushed the pass-xdg-activation-token-when-launching-apps branch from a96594e to 1d6a14f Compare January 22, 2025 10:50

AlanGriffiths requested changes Jan 22, 2025

View reviewed changes

AlanGriffiths requested changes Jan 23, 2025

View reviewed changes

tarek-y-ismail force-pushed the pass-xdg-activation-token-when-launching-apps branch from 7a7a004 to ae68e02 Compare January 23, 2025 16:25

tarek-y-ismail added 5 commits January 23, 2025 18:28

Add TokenAuthority, expose it via Server::get_activation_token

84d9d8a

Modify XdgActivationV1 to use TokenAuthority

c1ca68f

Hook up SessionListener.

abf3192

It now keeps track of the active session and prevents unfocused applications from requesting tokens

Minor cleanups of xdg_activation.cpp

96f53bd

Ordered includes and made pointers const

Pass XDG_ACTIVATION_TOKEN and DESKTOP_STARTUP_ID to launched apps

d63b6e3

Refactored the parameters of `launch_app_env` to use `std::optional` instead of `mir::optional_value`

tarek-y-ismail force-pushed the pass-xdg-activation-token-when-launching-apps branch from ae68e02 to d63b6e3 Compare January 23, 2025 16:29

Ctrl+Alt+{t,T,x,X} now prevent other event filters from running.

6bf63b8

This fixes terminals failing to activate themselves due to the key listener immediately revoking their token in response to the terminal launch shortcut being pressed.

tarek-y-ismail requested a review from AlanGriffiths January 23, 2025 16:34

Ctrl+Alt+{t,T,x,X} now prevent other event filters from running. (#3726)

2f2c2b4

This fixes terminals failing to activate themselves due to the key listener immediately revoking their token in response to the terminal launch shortcut being pressed.

AlanGriffiths requested changes Jan 23, 2025

View reviewed changes

src/server/frontend_wayland/xdg_activation_v1.cpp Outdated Show resolved Hide resolved

src/server/frontend_wayland/xdg_activation_v1.cpp Outdated Show resolved Hide resolved

src/server/shell/token_authority.cpp Outdated Show resolved Hide resolved

PR feedback

f5ec4bd

Remove log statements to not flood logs Return a proper bogus UUID to prevent clients from knowing which tokens are valid and which are not

tarek-y-ismail requested a review from AlanGriffiths January 23, 2025 18:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Pass XDG_ACTIVATION_TOKEN to apps launched via `launch_app_env` #3703

Pass XDG_ACTIVATION_TOKEN to apps launched via `launch_app_env` #3703

tarek-y-ismail commented Dec 18, 2024

AlanGriffiths left a comment

AlanGriffiths Dec 19, 2024

tarek-y-ismail Dec 19, 2024

AlanGriffiths left a comment

RAOF left a comment

RAOF left a comment

tarek-y-ismail commented Jan 22, 2025

AlanGriffiths left a comment

AlanGriffiths commented Jan 22, 2025

tarek-y-ismail commented Jan 22, 2025 •

edited

Loading

AlanGriffiths left a comment

AlanGriffiths commented Jan 22, 2025

tarek-y-ismail commented Jan 22, 2025

AlanGriffiths left a comment

AlanGriffiths commented Jan 23, 2025

AlanGriffiths left a comment

		@@ -16,6 +16,7 @@

		#include "mir/server.h"

		#include "frontend_wayland/xdg_activation_v1.h"

Pass XDG_ACTIVATION_TOKEN to apps launched via launch_app_env #3703

Are you sure you want to change the base?

Pass XDG_ACTIVATION_TOKEN to apps launched via launch_app_env #3703

Conversation

tarek-y-ismail commented Dec 18, 2024

AlanGriffiths left a comment

Choose a reason for hiding this comment

AlanGriffiths Dec 19, 2024

Choose a reason for hiding this comment

tarek-y-ismail Dec 19, 2024

Choose a reason for hiding this comment

AlanGriffiths left a comment

Choose a reason for hiding this comment

RAOF left a comment

Choose a reason for hiding this comment

RAOF left a comment

Choose a reason for hiding this comment

tarek-y-ismail commented Jan 22, 2025

AlanGriffiths left a comment

Choose a reason for hiding this comment

AlanGriffiths commented Jan 22, 2025

tarek-y-ismail commented Jan 22, 2025 • edited Loading

AlanGriffiths left a comment

Choose a reason for hiding this comment

AlanGriffiths commented Jan 22, 2025

tarek-y-ismail commented Jan 22, 2025

AlanGriffiths left a comment

Choose a reason for hiding this comment

AlanGriffiths commented Jan 23, 2025

AlanGriffiths left a comment

Choose a reason for hiding this comment

Pass XDG_ACTIVATION_TOKEN to apps launched via `launch_app_env` #3703

Pass XDG_ACTIVATION_TOKEN to apps launched via `launch_app_env` #3703

tarek-y-ismail commented Jan 22, 2025 •

edited

Loading