mirror of
https://github.com/bitwarden/browser
synced 2025-12-15 15:53:27 +00:00
c02723d6a6
* Use UserKeys in biometric state * Remove global clear todo. Answer is never * User UserKeys in crypto state * Clear userkey on both lock and logout via User Key Definitions * Use UserKeyDefinitions in environment service * Rely on userKeyDefinition to clear org keys * Rely on userKeyDefinition to clear provider keys * Rely on userKeyDefinition to clear user keys * Rely on userKeyDefinitions to clear user asym key pair
47 lines
1.8 KiB
TypeScript
47 lines
1.8 KiB
TypeScript
import { ProviderId } from "../../../types/guid";
|
|
import { ProviderKey } from "../../../types/key";
|
|
import { EncryptService } from "../../abstractions/encrypt.service";
|
|
import { EncString, EncryptedString } from "../../models/domain/enc-string";
|
|
import { SymmetricCryptoKey } from "../../models/domain/symmetric-crypto-key";
|
|
import { CRYPTO_DISK, DeriveDefinition, UserKeyDefinition } from "../../state";
|
|
import { CryptoService } from "../crypto.service";
|
|
|
|
export const USER_ENCRYPTED_PROVIDER_KEYS = UserKeyDefinition.record<EncryptedString, ProviderId>(
|
|
CRYPTO_DISK,
|
|
"providerKeys",
|
|
{
|
|
deserializer: (obj) => obj,
|
|
clearOn: ["logout"],
|
|
},
|
|
);
|
|
|
|
export const USER_PROVIDER_KEYS = DeriveDefinition.from<
|
|
Record<ProviderId, EncryptedString>,
|
|
Record<ProviderId, ProviderKey>,
|
|
{ encryptService: EncryptService; cryptoService: CryptoService } // TODO: This should depend on an active user private key observable directly
|
|
>(USER_ENCRYPTED_PROVIDER_KEYS, {
|
|
deserializer: (obj) => {
|
|
const result: Record<ProviderId, ProviderKey> = {};
|
|
for (const providerId of Object.keys(obj ?? {}) as ProviderId[]) {
|
|
result[providerId] = SymmetricCryptoKey.fromJSON(obj[providerId]) as ProviderKey;
|
|
}
|
|
return result;
|
|
},
|
|
derive: async (from, { encryptService, cryptoService }) => {
|
|
const result: Record<ProviderId, ProviderKey> = {};
|
|
for (const providerId of Object.keys(from ?? {}) as ProviderId[]) {
|
|
if (result[providerId] != null) {
|
|
continue;
|
|
}
|
|
const encrypted = new EncString(from[providerId]);
|
|
const privateKey = await cryptoService.getPrivateKey();
|
|
const decrypted = await encryptService.rsaDecrypt(encrypted, privateKey);
|
|
const providerKey = new SymmetricCryptoKey(decrypted) as ProviderKey;
|
|
|
|
result[providerId] = providerKey;
|
|
}
|
|
|
|
return result;
|
|
},
|
|
});
|