J. Ryan Stinnett
09bd91a588
Enforce logger module via lint rules
...
This adds lint rules (and fixes various errors) to ensure we use the `logger`
intermediary module, rather than accessing the console directly.
2020-10-01 14:28:24 +01:00
David Baker
7c1f3e4519
Make getStoredDevice calls sync
2020-04-29 11:50:18 +01:00
Bruno Windels
f814a96eac
update comments
2020-04-16 14:30:51 +02:00
Bruno Windels
218aa423c3
implement qr code reciprocate for self-verif with untrusted MSK
2020-04-16 13:01:46 +02:00
Bruno Windels
43eae4929b
remove ts annotations as I don't want to convert the whole file now
2020-04-02 13:31:17 +02:00
Bruno Windels
6144962c24
cancel with m.user code when user doesn't reciprocate
2020-04-02 12:53:52 +02:00
Bruno Windels
ed210a4fb1
Use static constructor that can be async (as looking up device is async)
...
Also fix static methods not to use this
2020-04-01 19:00:57 +02:00
Bruno Windels
c2a0504980
update comments
2020-04-01 18:23:34 +02:00
Bruno Windels
b6708871d3
fix olmlib import
2020-04-01 18:23:34 +02:00
Bruno Windels
275ea6aacb
spec recommends 11 random bytes for shared secret
2020-04-01 18:23:34 +02:00
Bruno Windels
2c7ea0606b
move shared secret to QRCodeData
2020-04-01 18:23:34 +02:00
Bruno Windels
d7a7100912
reuse keys from qr code data to sign
...
so we don't sign the wrong keys if a malicious HS admin
forged a cross-sign identity reset
2020-04-01 18:23:34 +02:00
Bruno Windels
2c54b8d77e
ask the user if the other user scanned the QR code
2020-04-01 18:23:34 +02:00
Bruno Windels
b30f278e03
checking the userid isn't a thing anymore AFAIK
2020-04-01 18:23:34 +02:00
Bruno Windels
b642030a34
keep a copy of the master/device key and mode, for use in reciprocate
2020-04-01 18:23:34 +02:00
Bruno Windels
725976d472
Add QR code buffer generation to VerificationRequest (from react-sdk)
...
Doing this so later we can keep the other user master signing key on it
so we can make sure we cross-sign that one once we decide to sign.
2020-04-01 18:23:34 +02:00
Bruno Windels
76c4875088
fix targetDevice renaming
2020-02-18 11:23:04 +01:00
Bruno Windels
429a4e3526
fix lint
2020-02-10 17:21:22 +01:00
Travis Ralston
f39518ef93
Unreviewed crypto verification for self
2020-02-01 10:49:32 +00:00
Travis Ralston
3645764f9a
Appease the linter
2020-01-30 11:15:25 +00:00
Travis Ralston
769bfeb10f
Verify all the things
2020-01-30 11:10:25 +00:00
Travis Ralston
5fbaa9cfa7
Fix verification of the master key
2020-01-29 18:06:25 +00:00
Travis Ralston
92f6ec918b
Appease the linter
2020-01-29 15:06:13 +00:00
Travis Ralston
c45b38cece
Actually do the verification
2020-01-29 14:56:28 +00:00
Travis Ralston
0d7aee2c36
Misc cleanup
2020-01-29 14:52:04 +00:00
Travis Ralston
be345a523f
Fix verification flow
2020-01-29 14:43:37 +00:00
Travis Ralston
f689142806
Define NAME as a property higher up
2020-01-29 10:52:26 +00:00
Travis Ralston
fd563bda6a
Remove irrelevant verification flows for QR codes
...
You can't actually get at these through our verification framework - they scan/show steps are pre-verification framework.
2020-01-29 09:26:29 +00:00
Travis Ralston
419693023f
Add untested reciprocate function
2020-01-27 11:41:52 -07:00
Travis Ralston
83241ac17d
Update QR code handling for new URL
...
This doesn't have any meaningful change on the process, just makes it more in line with what we do.
2020-01-27 06:59:04 -07:00
Travis Ralston
f3a10a8166
Appease the linter's line length limit
2019-12-17 15:27:17 -07:00
Travis Ralston
d3ce0cb82f
Convert src to ES6
...
The bulk of this is just export/import changes, though there's a couple pieces to highlight:
* We no longer use default exports. This is because it's discouraged by the JS community, though not in any official capacity.
* We now use `polyfillSuper` for some prototype inheritance because the tests, and sometimes webpack, break on "cannot call EncryptionAlgorithm without 'new'". It's very much a workaround, and definitely not needed when we use real classes.
There is some import shuffling to help keep the imports clean - this was done by my IDE.
2019-12-17 15:14:22 -07:00
Hubert Chathi
244e1b84f7
Initial implementation of key verification
2019-01-23 13:34:25 -05:00
