Registration recovery passwords store and manager

service/src/main/java/org/whispersystems/textsecuregcm/WhisperServerService.java

@@ -197,6 +197,8 @@ import org.whispersystems.textsecuregcm.storage.PubSubManager;
 import org.whispersystems.textsecuregcm.storage.PushChallengeDynamoDb;
 import org.whispersystems.textsecuregcm.storage.PushFeedbackProcessor;
 import org.whispersystems.textsecuregcm.storage.RedeemedReceiptsManager;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswords;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswordsManager;
 import org.whispersystems.textsecuregcm.storage.RemoteConfigs;
 import org.whispersystems.textsecuregcm.storage.RemoteConfigsManager;
 import org.whispersystems.textsecuregcm.storage.ReportMessageDynamoDb;
@@ -368,6 +370,12 @@ public class WhisperServerService extends Application<WhisperServerConfiguration
         config.getDynamoDbTables().getPendingAccounts().getTableName());
     VerificationCodeStore pendingDevices = new VerificationCodeStore(dynamoDbClient,
         config.getDynamoDbTables().getPendingDevices().getTableName());
+    RegistrationRecoveryPasswords registrationRecoveryPasswords = new RegistrationRecoveryPasswords(
+        config.getDynamoDbTables().getRegistrationRecovery().getTableName(),
+        config.getDynamoDbTables().getRegistrationRecovery().getExpiration(),
+        dynamoDbClient,
+        dynamoDbAsyncClient
+    );
 
     reactor.util.Metrics.MicrometerConfiguration.useRegistry(Metrics.globalRegistry);
     Schedulers.enableMetrics();
@@ -464,6 +472,7 @@ public class WhisperServerService extends Application<WhisperServerConfiguration
     dynamicConfigurationManager.start();
 
     ExperimentEnrollmentManager experimentEnrollmentManager = new ExperimentEnrollmentManager(dynamicConfigurationManager);
+    RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager = new RegistrationRecoveryPasswordsManager(registrationRecoveryPasswords);
 
     RegistrationServiceClient  registrationServiceClient  = new RegistrationServiceClient(config.getRegistrationServiceConfiguration().getHost(), config.getRegistrationServiceConfiguration().getPort(), config.getRegistrationServiceConfiguration().getApiKey(), config.getRegistrationServiceConfiguration().getRegistrationCaCertificate(), registrationCallbackExecutor);
     SecureBackupClient         secureBackupClient         = new SecureBackupClient(backupCredentialsGenerator, backupServiceExecutor, config.getSecureBackupServiceConfiguration());
@@ -485,7 +494,7 @@ public class WhisperServerService extends Application<WhisperServerConfiguration
     AccountsManager accountsManager = new AccountsManager(accounts, phoneNumberIdentifiers, cacheCluster,
         deletedAccountsManager, directoryQueue, keys, messagesManager, profilesManager,
         pendingAccountsManager, secureStorageClient, secureBackupClient, clientPresenceManager,
-        experimentEnrollmentManager, clock);
+        experimentEnrollmentManager, registrationRecoveryPasswordsManager, clock);
     RemoteConfigsManager       remoteConfigsManager       = new RemoteConfigsManager(remoteConfigs);
     DispatchManager            dispatchManager            = new DispatchManager(pubSubClientFactory, Optional.empty());
     PubSubManager              pubSubManager              = new PubSubManager(pubsubClient, dispatchManager);
@@ -664,7 +673,7 @@ public class WhisperServerService extends Application<WhisperServerConfiguration
     environment.jersey().register(
         new AccountController(pendingAccountsManager, accountsManager, rateLimiters,
             registrationServiceClient, dynamicConfigurationManager, turnTokenGenerator, config.getTestDevices(),
-            captchaChecker, pushNotificationManager, changeNumberManager, backupCredentialsGenerator,
+            captchaChecker, pushNotificationManager, changeNumberManager, registrationRecoveryPasswordsManager, backupCredentialsGenerator,
             clientPresenceManager, clock));
 
     environment.jersey().register(new KeysController(rateLimiters, keys, accountsManager));

service/src/main/java/org/whispersystems/textsecuregcm/configuration/DynamoDbTables.java

@@ -62,6 +62,7 @@ public class DynamoDbTables {
   private final Table reportMessage;
   private final Table reservedUsernames;
   private final Table subscriptions;
+  private final TableWithExpiration registrationRecovery;
 
   public DynamoDbTables(
       @JsonProperty("accounts") final AccountsTableConfiguration accounts,
@@ -79,7 +80,8 @@ public class DynamoDbTables {
       @JsonProperty("remoteConfig") final Table remoteConfig,
       @JsonProperty("reportMessage") final Table reportMessage,
       @JsonProperty("reservedUsernames") final Table reservedUsernames,
-      @JsonProperty("subscriptions") final Table subscriptions) {
+      @JsonProperty("subscriptions") final Table subscriptions,
+      @JsonProperty("registrationRecovery") final TableWithExpiration registrationRecovery) {
 
     this.accounts = accounts;
     this.deletedAccounts = deletedAccounts;
@@ -97,6 +99,7 @@ public class DynamoDbTables {
     this.reportMessage = reportMessage;
     this.reservedUsernames = reservedUsernames;
     this.subscriptions = subscriptions;
+    this.registrationRecovery = registrationRecovery;
   }
 
   @NotNull
@@ -194,4 +197,10 @@ public class DynamoDbTables {
   public Table getSubscriptions() {
     return subscriptions;
   }
+
+  @NotNull
+  @Valid
+  public TableWithExpiration getRegistrationRecovery() {
+    return registrationRecovery;
+  }
 }

service/src/main/java/org/whispersystems/textsecuregcm/controllers/AccountController.java

@@ -85,8 +85,8 @@ import org.whispersystems.textsecuregcm.entities.RegistrationLockFailure;
 import org.whispersystems.textsecuregcm.entities.ReserveUsernameHashRequest;
 import org.whispersystems.textsecuregcm.entities.ReserveUsernameHashResponse;
 import org.whispersystems.textsecuregcm.entities.StaleDevices;
-import org.whispersystems.textsecuregcm.limits.RateLimitedByIp;
 import org.whispersystems.textsecuregcm.entities.UsernameHashResponse;
+import org.whispersystems.textsecuregcm.limits.RateLimitedByIp;
 import org.whispersystems.textsecuregcm.limits.RateLimiter;
 import org.whispersystems.textsecuregcm.limits.RateLimiters;
 import org.whispersystems.textsecuregcm.metrics.UserAgentTagUtil;
@@ -102,6 +102,7 @@ import org.whispersystems.textsecuregcm.storage.AccountsManager;
 import org.whispersystems.textsecuregcm.storage.ChangeNumberManager;
 import org.whispersystems.textsecuregcm.storage.Device;
 import org.whispersystems.textsecuregcm.storage.DynamicConfigurationManager;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswordsManager;
 import org.whispersystems.textsecuregcm.storage.StoredVerificationCodeManager;
 import org.whispersystems.textsecuregcm.storage.UsernameHashNotAvailableException;
 import org.whispersystems.textsecuregcm.storage.UsernameReservationNotFoundException;
@@ -163,7 +164,7 @@ public class AccountController {
   private final CaptchaChecker                     captchaChecker;
   private final PushNotificationManager            pushNotificationManager;
   private final ExternalServiceCredentialsGenerator backupServiceCredentialsGenerator;
-
+  private final RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager;
   private final ChangeNumberManager changeNumberManager;
   private final Clock clock;
 
@@ -183,6 +184,7 @@ public class AccountController {
       CaptchaChecker captchaChecker,
       PushNotificationManager pushNotificationManager,
       ChangeNumberManager changeNumberManager,
+      RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager,
       ExternalServiceCredentialsGenerator backupServiceCredentialsGenerator,
       ClientPresenceManager clientPresenceManager,
       Clock clock
@@ -199,6 +201,7 @@ public class AccountController {
     this.backupServiceCredentialsGenerator = backupServiceCredentialsGenerator;
     this.changeNumberManager = changeNumberManager;
     this.clientPresenceManager = clientPresenceManager;
+    this.registrationRecoveryPasswordsManager = registrationRecoveryPasswordsManager;
     this.clock = clock;
   }
 
@@ -214,11 +217,12 @@ public class AccountController {
       CaptchaChecker captchaChecker,
       PushNotificationManager pushNotificationManager,
       ChangeNumberManager changeNumberManager,
+      RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager,
       ExternalServiceCredentialsGenerator backupServiceCredentialsGenerator
   ) {
     this(pendingAccounts, accounts, rateLimiters,
         registrationServiceClient, dynamicConfigurationManager, turnTokenGenerator, testDevices, captchaChecker,
-        pushNotificationManager, changeNumberManager,
+        pushNotificationManager, changeNumberManager, registrationRecoveryPasswordsManager,
         backupServiceCredentialsGenerator, null, Clock.systemUTC());
   }
 
@@ -645,13 +649,14 @@ public class AccountController {
   @Consumes(MediaType.APPLICATION_JSON)
   @Produces(MediaType.APPLICATION_JSON)
   @ChangesDeviceEnabledState
-  public void setAccountAttributes(@Auth DisabledPermittedAuthenticatedAccount disabledPermittedAuth,
+  public void setAccountAttributes(
+      @Auth DisabledPermittedAuthenticatedAccount disabledPermittedAuth,
       @HeaderParam(HeaderUtils.X_SIGNAL_AGENT) String userAgent,
       @NotNull @Valid AccountAttributes attributes) {
-    Account account = disabledPermittedAuth.getAccount();
-    long deviceId = disabledPermittedAuth.getAuthenticatedDevice().getId();
+    final Account account = disabledPermittedAuth.getAccount();
+    final long deviceId = disabledPermittedAuth.getAuthenticatedDevice().getId();
 
-    accounts.update(account, a -> {
+    final Account updatedAccount = accounts.update(account, a -> {
       a.getDevice(deviceId).ifPresent(d -> {
         d.setFetchesMessages(attributes.getFetchesMessages());
         d.setName(attributes.getName());
@@ -667,6 +672,10 @@ public class AccountController {
       a.setUnrestrictedUnidentifiedAccess(attributes.isUnrestrictedUnidentifiedAccess());
       a.setDiscoverableByPhoneNumber(attributes.isDiscoverableByPhoneNumber());
     });
+
+    // if registration recovery password was sent to us, store it (or refresh its expiration)
+    attributes.recoveryPassword().ifPresent(registrationRecoveryPassword ->
+        registrationRecoveryPasswordsManager.storeForCurrentNumber(updatedAccount.getNumber(), registrationRecoveryPassword));
   }
 
   @GET

service/src/main/java/org/whispersystems/textsecuregcm/entities/AccountAttributes.java

@@ -1,16 +1,19 @@
 /*
- * Copyright 2013-2020 Signal Messenger, LLC
+ * Copyright 2013 Signal Messenger, LLC
  * SPDX-License-Identifier: AGPL-3.0-only
  */
 package org.whispersystems.textsecuregcm.entities;
 
 import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
 import com.google.common.annotations.VisibleForTesting;
+import java.util.Optional;
+import java.util.OptionalInt;
 import javax.annotation.Nullable;
 import javax.validation.constraints.Size;
 import org.whispersystems.textsecuregcm.storage.Device.DeviceCapabilities;
+import org.whispersystems.textsecuregcm.util.ByteArrayAdapter;
 import org.whispersystems.textsecuregcm.util.ExactlySize;
-import java.util.OptionalInt;
 
 public class AccountAttributes {
 
@@ -20,7 +23,6 @@ public class AccountAttributes {
   @JsonProperty
   private int registrationId;
 
-  @Nullable
   @JsonProperty("pniRegistrationId")
   private Integer phoneNumberIdentityRegistrationId;
 
@@ -44,11 +46,22 @@ public class AccountAttributes {
   @JsonProperty
   private boolean discoverableByPhoneNumber = true;
 
-  public AccountAttributes() {}
+  @JsonProperty
+  @Nullable
+  @JsonDeserialize(using = ByteArrayAdapter.Deserializing.class)
+  private byte[] recoveryPassword = null;
+
+  public AccountAttributes() {
+  }
 
   @VisibleForTesting
-  public AccountAttributes(boolean fetchesMessages, int registrationId, String name, String registrationLock,
-      boolean discoverableByPhoneNumber, final DeviceCapabilities capabilities) {
+  public AccountAttributes(
+      final boolean fetchesMessages,
+      final int registrationId,
+      final String name,
+      final String registrationLock,
+      final boolean discoverableByPhoneNumber,
+      final DeviceCapabilities capabilities) {
     this.fetchesMessages = fetchesMessages;
     this.registrationId = registrationId;
     this.name = name;
@@ -93,8 +106,19 @@ public class AccountAttributes {
     return discoverableByPhoneNumber;
   }
 
+  public Optional<byte[]> recoveryPassword() {
+    return Optional.ofNullable(recoveryPassword);
+  }
+
   @VisibleForTesting
-  public void setUnidentifiedAccessKey(final byte[] unidentifiedAccessKey) {
+  public AccountAttributes withUnidentifiedAccessKey(final byte[] unidentifiedAccessKey) {
     this.unidentifiedAccessKey = unidentifiedAccessKey;
+    return this;
+  }
+
+  @VisibleForTesting
+  public AccountAttributes withRecoveryPassword(final byte[] recoveryPassword) {
+    this.recoveryPassword = recoveryPassword;
+    return this;
   }
 }

service/src/main/java/org/whispersystems/textsecuregcm/storage/AccountsManager.java

@@ -6,6 +6,7 @@ package org.whispersystems.textsecuregcm.storage;
 
 
 import static com.codahale.metrics.MetricRegistry.name;
+import static java.util.Objects.requireNonNull;
 
 import com.codahale.metrics.MetricRegistry;
 import com.codahale.metrics.SharedMetricRegistries;
@@ -26,7 +27,6 @@ import java.util.Base64;
 import java.util.Collections;
 import java.util.List;
 import java.util.Map;
-import java.util.Objects;
 import java.util.Optional;
 import java.util.UUID;
 import java.util.concurrent.CompletableFuture;
@@ -93,6 +93,7 @@ public class AccountsManager {
   private final SecureBackupClient secureBackupClient;
   private final ClientPresenceManager clientPresenceManager;
   private final ExperimentEnrollmentManager experimentEnrollmentManager;
+  private final RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager;
   private final Clock clock;
 
   private static final ObjectMapper mapper = SystemMapper.getMapper();
@@ -135,6 +136,7 @@ public class AccountsManager {
       final SecureBackupClient secureBackupClient,
       final ClientPresenceManager clientPresenceManager,
       final ExperimentEnrollmentManager experimentEnrollmentManager,
+      final RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager,
       final Clock clock) {
     this.accounts = accounts;
     this.phoneNumberIdentifiers = phoneNumberIdentifiers;
@@ -149,7 +151,8 @@ public class AccountsManager {
     this.secureBackupClient  = secureBackupClient;
     this.clientPresenceManager = clientPresenceManager;
     this.experimentEnrollmentManager = experimentEnrollmentManager;
-    this.clock = Objects.requireNonNull(clock);
+    this.registrationRecoveryPasswordsManager = requireNonNull(registrationRecoveryPasswordsManager);
+    this.clock = requireNonNull(clock);
   }
 
   public Account create(final String number,
@@ -230,6 +233,9 @@ public class AccountsManager {
           // The newly-created account has explicitly opted out of discoverability
           directoryQueue.deleteAccount(account);
         }
+
+        accountAttributes.recoveryPassword().ifPresent(registrationRecoveryPassword ->
+            registrationRecoveryPasswordsManager.storeForCurrentNumber(account.getNumber(), registrationRecoveryPassword));
       });
 
       return account;
@@ -451,12 +457,7 @@ public class AccountsManager {
 
   public Account updateDeviceAuthentication(final Account account, final Device device, final SaltedTokenHash credentials) {
     Preconditions.checkArgument(credentials.getVersion() == SaltedTokenHash.CURRENT_VERSION);
-    return updateDevice(account, device.getId(), new Consumer<Device>() {
-      @Override
-      public void accept(final Device device) {
-        device.setAuthTokenHash(credentials);
-      }
-    });
+    return updateDevice(account, device.getId(), device1 -> device1.setAuthTokenHash(credentials));
   }
 
   /**
@@ -662,6 +663,7 @@ public class AccountsManager {
     keys.delete(account.getPhoneNumberIdentifier());
     messagesManager.clear(account.getUuid());
     messagesManager.clear(account.getPhoneNumberIdentifier());
+    registrationRecoveryPasswordsManager.removeForNumber(account.getNumber());
 
     deleteStorageServiceDataFuture.join();
     deleteBackupServiceDataFuture.join();

service/src/main/java/org/whispersystems/textsecuregcm/storage/RegistrationRecoveryPasswords.java

@@ -0,0 +1,101 @@
+/*
+ * Copyright 2023 Signal Messenger, LLC
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+package org.whispersystems.textsecuregcm.storage;
+
+import static java.util.Objects.requireNonNull;
+
+import java.time.Clock;
+import java.time.Duration;
+import java.util.Map;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import org.whispersystems.textsecuregcm.auth.SaltedTokenHash;
+import org.whispersystems.textsecuregcm.util.AttributeValues;
+import org.whispersystems.textsecuregcm.util.Util;
+import software.amazon.awssdk.services.dynamodb.DynamoDbAsyncClient;
+import software.amazon.awssdk.services.dynamodb.DynamoDbClient;
+import software.amazon.awssdk.services.dynamodb.model.AttributeValue;
+import software.amazon.awssdk.services.dynamodb.model.DeleteItemRequest;
+import software.amazon.awssdk.services.dynamodb.model.GetItemRequest;
+import software.amazon.awssdk.services.dynamodb.model.PutItemRequest;
+
+public class RegistrationRecoveryPasswords extends AbstractDynamoDbStore {
+
+  static final String KEY_E164 = "P";
+  static final String ATTR_EXP = "E";
+  static final String ATTR_SALT = "S";
+  static final String ATTR_HASH = "H";
+
+  private final String tableName;
+
+  private final Duration expiration;
+
+  private final DynamoDbAsyncClient asyncClient;
+
+  private final Clock clock;
+
+  public RegistrationRecoveryPasswords(
+      final String tableName,
+      final Duration expiration,
+      final DynamoDbClient dynamoDbClient,
+      final DynamoDbAsyncClient asyncClient) {
+    this(tableName, expiration, dynamoDbClient, asyncClient, Clock.systemUTC());
+  }
+
+  RegistrationRecoveryPasswords(
+      final String tableName,
+      final Duration expiration,
+      final DynamoDbClient dynamoDbClient,
+      final DynamoDbAsyncClient asyncClient,
+      final Clock clock) {
+    super(dynamoDbClient);
+    this.tableName = requireNonNull(tableName);
+    this.expiration = requireNonNull(expiration);
+    this.asyncClient = requireNonNull(asyncClient);
+    this.clock = requireNonNull(clock);
+  }
+
+  public CompletableFuture<Optional<SaltedTokenHash>> lookup(final String number) {
+    return asyncClient.getItem(GetItemRequest.builder()
+        .tableName(tableName)
+        .key(Map.of(
+            KEY_E164, AttributeValues.fromString(number)))
+        .build())
+        .thenApply(getItemResponse -> {
+          final Map<String, AttributeValue> item = getItemResponse.item();
+          if (item == null || !item.containsKey(ATTR_SALT) || !item.containsKey(ATTR_HASH)) {
+            return Optional.empty();
+          }
+          final String salt = item.get(ATTR_SALT).s();
+          final String hash = item.get(ATTR_HASH).s();
+          return Optional.of(new SaltedTokenHash(hash, salt));
+        });
+  }
+
+  public CompletableFuture<Void> addOrReplace(final String number, final SaltedTokenHash data) {
+    return asyncClient.putItem(PutItemRequest.builder()
+            .tableName(tableName)
+            .item(Map.of(
+                KEY_E164, AttributeValues.fromString(number),
+                ATTR_EXP, AttributeValues.fromLong(expirationSeconds()),
+                ATTR_SALT, AttributeValues.fromString(data.salt()),
+                ATTR_HASH, AttributeValues.fromString(data.hash())))
+            .build())
+        .thenRun(Util.NOOP);
+  }
+
+  public CompletableFuture<Void> removeEntry(final String number) {
+    return asyncClient.deleteItem(DeleteItemRequest.builder()
+            .tableName(tableName)
+            .key(Map.of(KEY_E164, AttributeValues.fromString(number)))
+            .build())
+        .thenRun(Util.NOOP);
+  }
+
+  private long expirationSeconds() {
+    return clock.instant().plus(expiration).getEpochSecond();
+  }
+}

service/src/main/java/org/whispersystems/textsecuregcm/storage/RegistrationRecoveryPasswordsManager.java

@@ -0,0 +1,65 @@
+/*
+ * Copyright 2023 Signal Messenger, LLC
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+package org.whispersystems.textsecuregcm.storage;
+
+import static java.util.Objects.requireNonNull;
+
+import java.lang.invoke.MethodHandles;
+import java.util.HexFormat;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.whispersystems.textsecuregcm.auth.SaltedTokenHash;
+
+public class RegistrationRecoveryPasswordsManager {
+
+  private static final Logger logger = LoggerFactory.getLogger(MethodHandles.lookup().lookupClass());
+
+  private final RegistrationRecoveryPasswords registrationRecoveryPasswords;
+
+
+  public RegistrationRecoveryPasswordsManager(final RegistrationRecoveryPasswords registrationRecoveryPasswords) {
+    this.registrationRecoveryPasswords = requireNonNull(registrationRecoveryPasswords);
+  }
+
+  public CompletableFuture<Boolean> verify(final String number, final byte[] password) {
+    return registrationRecoveryPasswords.lookup(number)
+        .thenApply(maybeHash -> maybeHash.filter(hash -> hash.verify(bytesToString(password))))
+        .whenComplete((result, error) -> {
+          if (error != null) {
+            logger.warn("Failed to lookup Registration Recovery Password", error);
+          }
+        })
+        .thenApply(Optional::isPresent);
+  }
+
+  public CompletableFuture<Void> storeForCurrentNumber(final String number, final byte[] password) {
+    final String token = bytesToString(password);
+    final SaltedTokenHash tokenHash = SaltedTokenHash.generateFor(token);
+    return registrationRecoveryPasswords.addOrReplace(number, tokenHash)
+        .whenComplete((result, error) -> {
+          if (error != null) {
+            logger.warn("Failed to store Registration Recovery Password", error);
+          }
+        });
+  }
+
+  public CompletableFuture<Void> removeForNumber(final String number) {
+    // remove is a "fire-and-forget" operation,
+    // there is no action to be taken on its completion
+    return registrationRecoveryPasswords.removeEntry(number)
+        .whenComplete((ignored, error) -> {
+          if (error != null) {
+            logger.warn("Failed to remove Registration Recovery Password", error);
+          }
+        });
+  }
+
+  private static String bytesToString(final byte[] bytes) {
+    return HexFormat.of().formatHex(bytes);
+  }
+}

service/src/main/java/org/whispersystems/textsecuregcm/util/Util.java

@@ -1,5 +1,5 @@
 /*
- * Copyright 2013-2020 Signal Messenger, LLC
+ * Copyright 2013 Signal Messenger, LLC
  * SPDX-License-Identifier: AGPL-3.0-only
  */
 package org.whispersystems.textsecuregcm.util;
@@ -10,7 +10,6 @@ import com.google.i18n.phonenumbers.PhoneNumberUtil.PhoneNumberFormat;
 import com.google.i18n.phonenumbers.Phonenumber.PhoneNumber;
 import java.time.Clock;
 import java.time.Duration;
-import java.time.temporal.ChronoField;
 import java.util.Arrays;
 import java.util.Collection;
 import java.util.List;
@@ -29,6 +28,8 @@ public class Util {
 
   private static final PhoneNumberUtil PHONE_NUMBER_UTIL = PhoneNumberUtil.getInstance();
 
+  public static final Runnable NOOP = () -> {};
+
   /**
    * Checks that the given number is a valid, E164-normalized phone number.
    *

service/src/main/java/org/whispersystems/textsecuregcm/workers/AssignUsernameCommand.java

@@ -49,6 +49,8 @@ import org.whispersystems.textsecuregcm.storage.PhoneNumberIdentifiers;
 import org.whispersystems.textsecuregcm.storage.Profiles;
 import org.whispersystems.textsecuregcm.storage.ProfilesManager;
 import org.whispersystems.textsecuregcm.storage.ProhibitedUsernames;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswords;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswordsManager;
 import org.whispersystems.textsecuregcm.storage.ReportMessageDynamoDb;
 import org.whispersystems.textsecuregcm.storage.ReportMessageManager;
 import org.whispersystems.textsecuregcm.storage.StoredVerificationCodeManager;
@@ -144,6 +146,14 @@ public class AssignUsernameCommand extends EnvironmentCommand<WhisperServerConfi
         configuration.getDynamoDbTables().getDeletedAccounts().getNeedsReconciliationIndexName());
     VerificationCodeStore pendingAccounts = new VerificationCodeStore(dynamoDbClient,
         configuration.getDynamoDbTables().getPendingAccounts().getTableName());
+    RegistrationRecoveryPasswords registrationRecoveryPasswords = new RegistrationRecoveryPasswords(
+        configuration.getDynamoDbTables().getRegistrationRecovery().getTableName(),
+        configuration.getDynamoDbTables().getRegistrationRecovery().getExpiration(),
+        dynamoDbClient,
+        dynamoDbAsyncClient
+    );
+
+    RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager = new RegistrationRecoveryPasswordsManager(registrationRecoveryPasswords);
 
     Accounts accounts = new Accounts(
         dynamoDbClient,
@@ -198,7 +208,7 @@ public class AssignUsernameCommand extends EnvironmentCommand<WhisperServerConfi
     AccountsManager accountsManager = new AccountsManager(accounts, phoneNumberIdentifiers, cacheCluster,
         deletedAccountsManager, directoryQueue, keys, messagesManager, profilesManager,
         pendingAccountsManager, secureStorageClient, secureBackupClient, clientPresenceManager,
-        experimentEnrollmentManager, Clock.systemUTC());
+        experimentEnrollmentManager, registrationRecoveryPasswordsManager, Clock.systemUTC());
 
     final String usernameHash = namespace.getString("usernameHash");
     final UUID accountIdentifier = UUID.fromString(namespace.getString("aci"));

service/src/main/java/org/whispersystems/textsecuregcm/workers/DeleteUserCommand.java

@@ -50,6 +50,8 @@ import org.whispersystems.textsecuregcm.storage.PhoneNumberIdentifiers;
 import org.whispersystems.textsecuregcm.storage.Profiles;
 import org.whispersystems.textsecuregcm.storage.ProfilesManager;
 import org.whispersystems.textsecuregcm.storage.ProhibitedUsernames;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswords;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswordsManager;
 import org.whispersystems.textsecuregcm.storage.ReportMessageDynamoDb;
 import org.whispersystems.textsecuregcm.storage.ReportMessageManager;
 import org.whispersystems.textsecuregcm.storage.StoredVerificationCodeManager;
@@ -143,6 +145,14 @@ public class DeleteUserCommand extends EnvironmentCommand<WhisperServerConfigura
           configuration.getDynamoDbTables().getDeletedAccounts().getNeedsReconciliationIndexName());
       VerificationCodeStore pendingAccounts = new VerificationCodeStore(dynamoDbClient,
           configuration.getDynamoDbTables().getPendingAccounts().getTableName());
+      RegistrationRecoveryPasswords registrationRecoveryPasswords = new RegistrationRecoveryPasswords(
+          configuration.getDynamoDbTables().getRegistrationRecovery().getTableName(),
+          configuration.getDynamoDbTables().getRegistrationRecovery().getExpiration(),
+          dynamoDbClient,
+          dynamoDbAsyncClient
+      );
+
+      RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager = new RegistrationRecoveryPasswordsManager(registrationRecoveryPasswords);
 
       Accounts accounts = new Accounts(
           dynamoDbClient,
@@ -197,7 +207,7 @@ public class DeleteUserCommand extends EnvironmentCommand<WhisperServerConfigura
       AccountsManager accountsManager = new AccountsManager(accounts, phoneNumberIdentifiers, cacheCluster,
           deletedAccountsManager, directoryQueue, keys, messagesManager, profilesManager,
           pendingAccountsManager, secureStorageClient, secureBackupClient, clientPresenceManager,
-          experimentEnrollmentManager, clock);
+          experimentEnrollmentManager, registrationRecoveryPasswordsManager, clock);
 
       for (String user : users) {
         Optional<Account> account = accountsManager.getByE164(user);

service/src/main/java/org/whispersystems/textsecuregcm/workers/SetUserDiscoverabilityCommand.java

@@ -48,6 +48,8 @@ import org.whispersystems.textsecuregcm.storage.PhoneNumberIdentifiers;
 import org.whispersystems.textsecuregcm.storage.Profiles;
 import org.whispersystems.textsecuregcm.storage.ProfilesManager;
 import org.whispersystems.textsecuregcm.storage.ProhibitedUsernames;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswords;
+import org.whispersystems.textsecuregcm.storage.RegistrationRecoveryPasswordsManager;
 import org.whispersystems.textsecuregcm.storage.ReportMessageDynamoDb;
 import org.whispersystems.textsecuregcm.storage.ReportMessageManager;
 import org.whispersystems.textsecuregcm.storage.StoredVerificationCodeManager;
@@ -146,6 +148,14 @@ public class SetUserDiscoverabilityCommand extends EnvironmentCommand<WhisperSer
           configuration.getDynamoDbTables().getDeletedAccounts().getNeedsReconciliationIndexName());
       VerificationCodeStore pendingAccounts = new VerificationCodeStore(dynamoDbClient,
           configuration.getDynamoDbTables().getPendingAccounts().getTableName());
+      RegistrationRecoveryPasswords registrationRecoveryPasswords = new RegistrationRecoveryPasswords(
+          configuration.getDynamoDbTables().getRegistrationRecovery().getTableName(),
+          configuration.getDynamoDbTables().getRegistrationRecovery().getExpiration(),
+          dynamoDbClient,
+          dynamoDbAsyncClient
+      );
+
+      RegistrationRecoveryPasswordsManager registrationRecoveryPasswordsManager = new RegistrationRecoveryPasswordsManager(registrationRecoveryPasswords);
 
       Accounts accounts = new Accounts(
           dynamoDbClient,
@@ -198,7 +208,7 @@ public class SetUserDiscoverabilityCommand extends EnvironmentCommand<WhisperSer
       AccountsManager accountsManager = new AccountsManager(accounts, phoneNumberIdentifiers, cacheCluster,
           deletedAccountsManager, directoryQueue, keys, messagesManager, profilesManager,
           pendingAccountsManager, secureStorageClient, secureBackupClient, clientPresenceManager,
-          experimentEnrollmentManager, clock);
+          experimentEnrollmentManager, registrationRecoveryPasswordsManager, clock);
 
       Optional<Account> maybeAccount;