@unwanted/matrix-sdk-mini 34.12.0 → 34.13.0

package/src/rendezvous/RendezvousChannel.ts

@@ -1,48 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import { RendezvousCode, RendezvousIntent, RendezvousFailureReason } from "./index.ts";
-
-export interface RendezvousChannel<T> {
-    /**
-     * @returns the checksum/confirmation digits to be shown to the user
-     */
-    connect(): Promise<string>;
-
-    /**
-     * Send a payload via the channel.
-     * @param data - payload to send
-     */
-    send(data: T): Promise<void>;
-
-    /**
-     * Receive a payload from the channel.
-     * @returns the received payload
-     */
-    receive(): Promise<Partial<T> | undefined>;
-
-    /**
-     * Close the channel and clear up any resources.
-     */
-    close(): Promise<void>;
-
-    /**
-     * @returns a representation of the channel that can be encoded in a QR or similar
-     */
-    generateCode(intent: RendezvousIntent): Promise<RendezvousCode>;
-
-    cancel(reason: RendezvousFailureReason): Promise<void>;
-}

package/src/rendezvous/RendezvousCode.ts

@@ -1,25 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import { RendezvousTransportDetails, RendezvousIntent } from "./index.ts";
-
-export interface RendezvousCode {
-    intent: RendezvousIntent;
-    rendezvous?: {
-        transport: RendezvousTransportDetails;
-        algorithm: string;
-    };
-}

package/src/rendezvous/RendezvousError.ts

@@ -1,26 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import { RendezvousFailureReason } from "./index.ts";
-
-export class RendezvousError extends Error {
-    public constructor(
-        message: string,
-        public readonly code: RendezvousFailureReason,
-    ) {
-        super(message);
-    }
-}

package/src/rendezvous/RendezvousFailureReason.ts

@@ -1,49 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-export type RendezvousFailureListener = (reason: RendezvousFailureReason) => void;
-
-export type RendezvousFailureReason = MSC4108FailureReason | ClientRendezvousFailureReason;
-
-export enum MSC4108FailureReason {
-    AuthorizationExpired = "authorization_expired",
-    DeviceAlreadyExists = "device_already_exists",
-    DeviceNotFound = "device_not_found",
-    UnexpectedMessageReceived = "unexpected_message_received",
-    UnsupportedProtocol = "unsupported_protocol",
-    UserCancelled = "user_cancelled",
-}
-
-export enum ClientRendezvousFailureReason {
-    /** The sign in request has expired */
-    Expired = "expired",
-    /** The homeserver is lacking support for the required features */
-    HomeserverLacksSupport = "homeserver_lacks_support",
-    /** The secure channel verification failed meaning that it might be compromised */
-    InsecureChannelDetected = "insecure_channel_detected",
-    /** An invalid/incompatible QR code was scanned */
-    InvalidCode = "invalid_code",
-    /** The other device is not signed in */
-    OtherDeviceNotSignedIn = "other_device_not_signed_in",
-    /** The other device is already signed in */
-    OtherDeviceAlreadySignedIn = "other_device_already_signed_in",
-    /** Other */
-    Unknown = "unknown",
-    /** The user declined the sign in request */
-    UserDeclined = "user_declined",
-    /** The rendezvous request is missing an ETag header */
-    ETagMissing = "etag_missing",
-}

package/src/rendezvous/RendezvousIntent.ts

@@ -1,20 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-export enum RendezvousIntent {
-    LOGIN_ON_NEW_DEVICE = "login.start",
-    RECIPROCATE_LOGIN_ON_EXISTING_DEVICE = "login.reciprocate",
-}

package/src/rendezvous/RendezvousTransport.ts

@@ -1,58 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import { RendezvousFailureListener, RendezvousFailureReason } from "./index.ts";
-
-export interface RendezvousTransportDetails {
-    type: string;
-}
-
-/**
- * Interface representing a generic rendezvous transport.
- */
-export interface RendezvousTransport<T> {
-    /**
-     * Ready state of the transport. This is set to true when the transport is ready to be used.
-     */
-    readonly ready: boolean;
-
-    /**
-     * Listener for cancellation events. This is called when the rendezvous is cancelled or fails.
-     */
-    onFailure?: RendezvousFailureListener;
-
-    /**
-     * @returns the transport details that can be encoded in a QR or similar
-     */
-    details(): Promise<RendezvousTransportDetails>;
-
-    /**
-     * Send data via the transport.
-     * @param data - the data itself
-     */
-    send(data: T): Promise<void>;
-
-    /**
-     * Receive data from the transport.
-     */
-    receive(): Promise<Partial<T> | undefined>;
-
-    /**
-     * Cancel the rendezvous. This will call `onCancelled()` if it is set.
-     * @param reason - the reason for the cancellation/failure
-     */
-    cancel(reason: RendezvousFailureReason): Promise<void>;
-}

package/src/rendezvous/channels/MSC4108SecureChannel.ts

@@ -1,270 +0,0 @@
-/*
-Copyright 2024 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-import {
-    Curve25519PublicKey,
-    Ecies,
-    EstablishedEcies,
-    QrCodeData,
-    QrCodeMode,
-} from "@matrix-org/matrix-sdk-crypto-wasm";
-
-import {
-    ClientRendezvousFailureReason,
-    MSC4108FailureReason,
-    MSC4108Payload,
-    RendezvousError,
-    RendezvousFailureListener,
-} from "../index.ts";
-import { MSC4108RendezvousSession } from "../transports/MSC4108RendezvousSession.ts";
-import { logger } from "../../logger.ts";
-
-/**
- * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
- * secure rendezvous session protocol.
- * @experimental Note that this is UNSTABLE and may have breaking changes without notice.
- * Imports @matrix-org/matrix-sdk-crypto-wasm so should be async-imported to avoid bundling the WASM into the main bundle.
- */
-export class MSC4108SecureChannel {
-    private readonly secureChannel: Ecies;
-    private establishedChannel?: EstablishedEcies;
-    private connected = false;
-
-    public constructor(
-        private rendezvousSession: MSC4108RendezvousSession,
-        private theirPublicKey?: Curve25519PublicKey,
-        public onFailure?: RendezvousFailureListener,
-    ) {
-        this.secureChannel = new Ecies();
-    }
-
-    /**
-     * Generate a QR code for the current session.
-     * @param mode the mode to generate the QR code in, either `Login` or `Reciprocate`.
-     * @param serverName the name of the homeserver to connect to, as defined by server discovery in the spec, required for `Reciprocate` mode.
-     */
-    public async generateCode(mode: QrCodeMode.Login): Promise<Uint8Array>;
-    public async generateCode(mode: QrCodeMode.Reciprocate, serverName: string): Promise<Uint8Array>;
-    public async generateCode(mode: QrCodeMode, serverName?: string): Promise<Uint8Array> {
-        const { url } = this.rendezvousSession;
-
-        if (!url) {
-            throw new Error("No rendezvous session URL");
-        }
-
-        return new QrCodeData(
-            this.secureChannel.public_key(),
-            url,
-            mode === QrCodeMode.Reciprocate ? serverName : undefined,
-        ).toBytes();
-    }
-
-    /**
-     * Returns the check code for the secure channel or undefined if not generated yet.
-     */
-    public getCheckCode(): string | undefined {
-        const x = this.establishedChannel?.check_code();
-
-        if (!x) {
-            return undefined;
-        }
-        return Array.from(x.as_bytes())
-            .map((b) => `${b % 10}`)
-            .join("");
-    }
-
-    /**
-     * Connects and establishes a secure channel with the other device.
-     */
-    public async connect(): Promise<void> {
-        if (this.connected) {
-            throw new Error("Channel already connected");
-        }
-
-        if (this.theirPublicKey) {
-            // We are the scanning device
-            const result = this.secureChannel.establish_outbound_channel(
-                this.theirPublicKey,
-                "MATRIX_QR_CODE_LOGIN_INITIATE",
-            );
-            this.establishedChannel = result.channel;
-
-            /*
-             Secure Channel step 4. Device S sends the initial message
-
-             Nonce := 0
-             SH := ECDH(Ss, Gp)
-             EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
-             TaggedCiphertext := ChaCha20Poly1305_Encrypt(EncKey, Nonce, "MATRIX_QR_CODE_LOGIN_INITIATE")
-             Nonce := Nonce + 2
-             LoginInitiateMessage := UnpaddedBase64(TaggedCiphertext) || "|" || UnpaddedBase64(Sp)
-             */
-            {
-                logger.info("Sending LoginInitiateMessage");
-                await this.rendezvousSession.send(result.initial_message);
-            }
-
-            /*
-            Secure Channel step 6. Verification by Device S
-
-            Nonce_G := 1
-            (TaggedCiphertext, Sp) := Unpack(Message)
-            Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_G, TaggedCiphertext)
-            Nonce_G := Nonce_G + 2
-
-            unless Plaintext == "MATRIX_QR_CODE_LOGIN_OK":
-                FAIL
-             */
-            {
-                logger.info("Waiting for LoginOkMessage");
-                const ciphertext = await this.rendezvousSession.receive();
-
-                if (!ciphertext) {
-                    throw new RendezvousError(
-                        "No response from other device",
-                        MSC4108FailureReason.UnexpectedMessageReceived,
-                    );
-                }
-                const candidateLoginOkMessage = await this.decrypt(ciphertext);
-
-                if (candidateLoginOkMessage !== "MATRIX_QR_CODE_LOGIN_OK") {
-                    throw new RendezvousError(
-                        "Invalid response from other device",
-                        ClientRendezvousFailureReason.InsecureChannelDetected,
-                    );
-                }
-
-                // Step 6 is now complete. We trust the channel
-            }
-        } else {
-            /*
-            Secure Channel step 5. Device G confirms
-
-            Nonce_S := 0
-            (TaggedCiphertext, Sp) := Unpack(LoginInitiateMessage)
-            SH := ECDH(Gs, Sp)
-            EncKey := HKDF_SHA256(SH, "MATRIX_QR_CODE_LOGIN|" || Gp || "|" || Sp, 0, 32)
-            Plaintext := ChaCha20Poly1305_Decrypt(EncKey, Nonce_S, TaggedCiphertext)
-            Nonce_S := Nonce_S + 2
-             */
-            // wait for the other side to send us their public key
-            logger.info("Waiting for LoginInitiateMessage");
-            const loginInitiateMessage = await this.rendezvousSession.receive();
-            if (!loginInitiateMessage) {
-                throw new Error("No response from other device");
-            }
-
-            const { channel, message: candidateLoginInitiateMessage } =
-                this.secureChannel.establish_inbound_channel(loginInitiateMessage);
-            this.establishedChannel = channel;
-
-            if (candidateLoginInitiateMessage !== "MATRIX_QR_CODE_LOGIN_INITIATE") {
-                throw new RendezvousError(
-                    "Invalid response from other device",
-                    ClientRendezvousFailureReason.InsecureChannelDetected,
-                );
-            }
-            logger.info("LoginInitiateMessage received");
-
-            logger.info("Sending LoginOkMessage");
-            const loginOkMessage = await this.encrypt("MATRIX_QR_CODE_LOGIN_OK");
-            await this.rendezvousSession.send(loginOkMessage);
-
-            // Step 5 is complete. We don't yet trust the channel
-
-            // next step will be for the user to confirm the check code on the other device
-        }
-
-        this.connected = true;
-    }
-
-    private async decrypt(ciphertext: string): Promise<string> {
-        if (!this.establishedChannel) {
-            throw new Error("Channel closed");
-        }
-
-        return this.establishedChannel.decrypt(ciphertext);
-    }
-
-    private async encrypt(plaintext: string): Promise<string> {
-        if (!this.establishedChannel) {
-            throw new Error("Channel closed");
-        }
-
-        return this.establishedChannel.encrypt(plaintext);
-    }
-
-    /**
-     * Sends a payload securely to the other device.
-     * @param payload the payload to encrypt and send
-     */
-    public async secureSend<T extends MSC4108Payload>(payload: T): Promise<void> {
-        if (!this.connected) {
-            throw new Error("Channel closed");
-        }
-
-        const stringifiedPayload = JSON.stringify(payload);
-        logger.debug(`=> {"type": ${JSON.stringify(payload.type)}, ...}`);
-
-        await this.rendezvousSession.send(await this.encrypt(stringifiedPayload));
-    }
-
-    /**
-     * Receives an encrypted payload from the other device and decrypts it.
-     */
-    public async secureReceive<T extends MSC4108Payload>(): Promise<Partial<T> | undefined> {
-        if (!this.establishedChannel) {
-            throw new Error("Channel closed");
-        }
-
-        const ciphertext = await this.rendezvousSession.receive();
-        if (!ciphertext) {
-            return undefined;
-        }
-        const plaintext = await this.decrypt(ciphertext);
-        const json = JSON.parse(plaintext);
-
-        logger.debug(`<= {"type": ${JSON.stringify(json.type)}, ...}`);
-        return json as Partial<T> | undefined;
-    }
-
-    /**
-     * Closes the secure channel.
-     */
-    public async close(): Promise<void> {
-        await this.rendezvousSession.close();
-    }
-
-    /**
-     * Cancels the secure channel.
-     * @param reason the reason for the cancellation
-     */
-    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {
-        try {
-            await this.rendezvousSession.cancel(reason);
-            this.onFailure?.(reason);
-        } finally {
-            await this.close();
-        }
-    }
-
-    /**
-     * Returns whether the rendezvous session has been cancelled.
-     */
-    public get cancelled(): boolean {
-        return this.rendezvousSession.cancelled;
-    }
-}

package/src/rendezvous/channels/index.ts

@@ -1,17 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-export * from "./MSC4108SecureChannel.ts";

package/src/rendezvous/index.ts

@@ -1,25 +0,0 @@
-/*
-Copyright 2022 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-export * from "./MSC4108SignInWithQR.ts";
-export type * from "./RendezvousChannel.ts";
-export type * from "./RendezvousCode.ts";
-export * from "./RendezvousError.ts";
-export * from "./RendezvousFailureReason.ts";
-export * from "./RendezvousIntent.ts";
-export type * from "./RendezvousTransport.ts";
-export * from "./transports/index.ts";
-export * from "./channels/index.ts";