passbolt-browser-extension 3.0.6 → 4.6.2

package/src/all/background_page/model/key.js

@@ -1,337 +0,0 @@
-/**
- * Key model.
- *
- * Provides validation methods for a key.
- * Was created initially to validate the key config before its generation.
- *
- * @copyright (c) 2017 Passbolt SARL
- * @licence GNU Affero General Public License http://www.gnu.org/licenses/agpl-3.0.en.html
- */
-// var Validator = require('../vendors/validator');
-var __ = require('../sdk/l10n').get;
-
-/**
- * The class that deals with keys.
- */
-var Key = function () {
-  // Key data.
-  this._key = {
-    algorithm: '',
-    length: '',
-    comment: '',
-    ownerName: '',
-    ownerEmail: '',
-    userId: '',
-    passphrase: ''
-  };
-};
-
-/**
- * Validate key fields individually.
- * @param field {string} The name of the field to validate
- * @param value {string} The value of the field to validate
- * @returns {boolean}
- * @throw Error if the field is not valid
- * @private
- */
-Key.prototype.__validate = function (field, value) {
-  switch (field) {
-    case 'algorithm':
-      if (typeof value === 'undefined' || value === '') {
-        throw new Error(__('The key algorithm cannot be empty'));
-      }
-      var supportedAlgorithms = [
-        "RSA-DSA"
-      ];
-      if (supportedAlgorithms.indexOf(value) == -1) {
-        throw new Error(__('The key algorithm selected is not supported'));
-      }
-      break;
-    case 'length' :
-      if (typeof value === 'undefined' || value === '') {
-        throw new Error(__('The length cannot be empty'));
-      }
-      var supportedLength = [
-        "2048"
-      ];
-      if (supportedLength.indexOf(value) == -1) {
-        throw new Error(__('The key length selected is not supported'));
-      }
-      break;
-    case 'comment' :
-      // We accept everything except ().
-      if (Validator.matches(value, /[()]/)) {
-        throw new Error(__('The comment contains invalid characters : ()'));
-      }
-      break;
-    case 'ownerName' :
-      if (typeof value === 'undefined' || value === '') {
-        throw new Error(__('The owner name cannot be empty'));
-      }
-      if (!Validator.isUtf8(value)) {
-        throw new Error(__('The full name should contain only UTF8 characters'));
-      }
-      break;
-    case 'ownerEmail' :
-      if (!Validator.isEmail(value)) {
-        throw new Error(__('The owner email should be a valid email'));
-      }
-      break;
-    case 'userId' :
-      if (!Validator.matches(value, /^[0-9A-Za-z\u00C0-\u017F\-' ]+ (\(\[0-9A-Za-z\u00C0-\u017F\-' ]+\)? (<[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}>){1})$/i)) {
-        throw new Error(__('The userId should follow a correct format ' + value));
-      }
-      break;
-    case 'passphrase' :
-      if (!Validator.isLength(value, 8)) {
-        throw new Error(__('The passphrase should be at least 8 characters'));
-      }
-      break;
-    default :
-      throw new Error(__('No validation defined for field: ' + field));
-      break;
-  }
-  return true;
-};
-
-/**
- * Validate the key settings.
- * @param key {array} The key to validate
- * @param fields {array} The names of the fields to validate
- * @returns {array} The key in case of success
- * @throw Error if the key is not valid
- */
-Key.prototype.validate = function (key, fields) {
-  if (fields == undefined) {
-    fields = ['ownerName', 'ownerEmail', 'userId', 'passphrase', 'comment'];
-  }
-
-  var errors = [];
-  for (var i in fields) {
-    var fieldName = fields[i];
-    try {
-      this.__validate(fieldName, key[fieldName]);
-    } catch (e) {
-      var fieldError = {};
-      fieldError[fieldName] = e.message;
-      errors.push(fieldError);
-    }
-  }
-
-  if (errors.length > 0) {
-    // Return exception with details in validationErrors.
-    var e = new Error(__('key could not be validated'));
-    // Add validation errors to the error object.
-    e.validationErrors = errors;
-    throw e;
-  }
-
-  return key;
-};
-
-/**
- * Set the key settings.
- * @param key {array} The key to set
- * @return {bool} true if successful
- */
-Key.prototype.set = function (key) {
-
-  if (typeof key === 'undefined') {
-    throw new Error(__('The key cannot be empty'));
-  }
-
-  this.setOwnerName(key.ownerName);
-  this.setOwnerEmail(key.ownerEmail);
-  this.setAlgorithm(key.algorithm);
-  this.setComment(key.comment);
-  this.setLength(key.length);
-
-  // Handle userId.
-  if (key.userId != undefined || key.userId == '') {
-    this.setUserId(key.userId);
-  }
-
-  return true;
-};
-
-/**
- * Set a length for the key.
- * @param length {string} The key length
- * @throw Error when length is not a supported one
- */
-Key.prototype.setLength = function (length) {
-  this.__validate('length', length);
-  this._key.length = length;
-  return this._key;
-};
-
-/**
- * Set an algorithm for the key.
- * @param algorithm {string} The key algorithm
- * @throw Error when algorithm is not a supported one
- */
-Key.prototype.setAlgorithm = function (algorithm) {
-  this.__validate('algorithm', algorithm);
-  this._key.algorithm = algorithm;
-  return this._key;
-};
-
-/**
- * Set a comment for the key.
- * @param comment {string} The key comment
- * @throw Error when comment is not a supported one
- */
-Key.prototype.setComment = function (comment) {
-  this.__validate('comment', comment);
-  this._key.comment = comment;
-  return this._key;
-};
-
-
-/**
- * Set a user id for the key.
- * @param userId {string} The key user id
- * @throw Error when the user id is not valid
- */
-Key.prototype.setUserId = function (userId) {
-  this.__validate('userId', userId);
-  this._key.userId = userId;
-  return this._key;
-};
-
-/**
- * Set an owner name for the key.
- * @param ownerName {string} The key owner name
- * @throw Error when owner name is not valid
- */
-Key.prototype.setOwnerName = function (ownerName) {
-  this.__validate('ownerName', ownerName);
-  this._key.ownerName = ownerName;
-  return this._key;
-};
-
-/**
- * Set an owner email for the key.
- * @param ownerEmail {string} The key owner email
- * @throw Error when the owner email is not valid
- */
-Key.prototype.setOwnerEmail = function (ownerEmail) {
-  this.__validate('ownerEmail', ownerEmail);
-  this._key.ownerEmail = ownerEmail;
-  return this._key;
-};
-
-/**
- * Set a passphrase for the key.
- * @param passphrase {string} The key passphrase
- * @throw Error when passphrase is not valid
- */
-Key.prototype.setPassphrase = function (passphrase) {
-  this.__validate('passphrase', passphrase);
-  this._key.passphrase = passphrase;
-  return this._key;
-};
-
-/**
- * Get the key settings.
- * @param fields {array} (optional) An array of key settings, if not provided
- *  return all the key settings
- * @returns {array}
- */
-Key.prototype.get = function (fields) {
-  var key = {};
-
-  var keyDefaultFields = [
-    "userId",
-    "length",
-    "algorithm",
-    "comment",
-    "passphrase"
-  ];
-
-  if (fields == undefined) {
-    fields = keyDefaultFields;
-  }
-
-  for (var i in fields) {
-    var varName = fields[i];
-    key[varName] = this._key[varName];
-  }
-
-  return key;
-};
-
-/**
- * Get the key length.
- * @return {string}
- */
-Key.prototype.getLength = function () {
-  return this._key.length;
-};
-
-/**
- * Get the key algorithm.
- * @return {string}
- */
-Key.prototype.getAlgorithm = function () {
-  return this._key.algorithm;
-};
-
-/**
- * Get the key comment.
- * @return {string}
- */
-Key.prototype.getComment = function () {
-  return this._key.comment;
-};
-
-/**
- * Get the key user id.
- * @return {string}
- */
-Key.prototype.getUserId = function () {
-  if (this._key.userId == undefined || this._key.userId == '') {
-    this._key.userId = this.buildUserId();
-  }
-  return this._key.userId;
-};
-
-/**
- * Get the key owner name.
- * @return {string}
- */
-Key.prototype.getOwnerName = function () {
-  return this._key.ownerName;
-};
-
-/**
- * Get the key owner email.
- * @return {string}
- */
-Key.prototype.getOwnerEmail = function () {
-  return this._key.ownerEmail;
-};
-
-/**
- * Get the key passphrase.
- * @return {string}
- */
-Key.prototype.getPassphrase = function () {
-  return this._key.passphrase;
-};
-
-/**
- * Build userId from name email and comment, following GPG standard.
- * @returns {*} False if owner name or owner email missing else the user id
- *  as following : OwnerName (Comment) <OwnerEmail>
- */
-Key.prototype.buildUserId = function () {
-  if (this._key.ownerName == undefined || this._key.ownerEmail == undefined) {
-    return false;
-  }
-  const comment = this._key.comment != undefined && this._key.comment != '' ? ` (${this._key.comment})` : '';
-  return `${this._key.ownerName}${comment} <${this._key.ownerEmail}>`;
-};
-
-// Exports the Key object.
-exports.Key = Key;

package/src/all/background_page/model/openpgp/OpenpgpModel.js

@@ -1,73 +0,0 @@
-/**
- * Passbolt ~ Open source password manager for teams
- * Copyright (c) Passbolt SA (https://www.passbolt.com)
- *
- * Licensed under GNU Affero General Public License version 3 of the or any later version.
- * For full copyright and license information, please see the LICENSE.txt
- * Redistributions of files must retain the above copyright notice.
- *
- * @copyright     Copyright (c) Passbolt SA (https://www.passbolt.com)
- * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
- * @link          https://www.passbolt.com Passbolt(tm)
- */
-// const {OpenpgpkeyEntity} = require("../entity/gpgkey/local/localGpgkeyEntity");
-
-class OpenpgpModel {
-  /**
-   * Constructor
-   *
-   * @param {ApiClientOptions} apiClientOptions
-   * @public
-   */
-  constructor(apiClientOptions) {
-
-  }
-  //
-  // /**
-  //  * Generate a key
-  //  * @param {OpenpgpkeyEntity} openpgpkeyEntity The openpgp entity
-  //  * @returns {Promise<OpenpgpkeyEntity>} The opengpg entity populated with the generated key
-  //  * @throws {Error} if options are invalid or the operation failed for an unexpected reason
-  //  */
-  // async generateKey(openpgpkeyEntity) {
-  //   const openpgpKey = await openpgp.generateKey({
-  //     rsaBits: openpgpkeyEntity.rsaBits,
-  //     userIds: [openpgpkeyEntity.userId],
-  //     passphrase: openpgpkeyEntity.passphrase
-  //   });
-  //   const openpgpkeyDto = {
-  //     ...(await this.parseOpenpgpkey(openpgpKey.key)).toDto(),
-  //     ...openpgpkeyEntity.toDto()
-  //   };
-  //
-  //   return new OpenpgpkeyEntity(openpgpkeyDto);
-  // }
-
-  // @todo maybe useful for retrieving the server key and test the imported gpg key
-  async parseArmoredKey(armoredKey) {
-    let openpgpKey = await openpgp.key.readArmored(armoredKey);
-    if (openpgpKey.err) {
-      throw new Error(openpgpKey.err[0].message);
-    }
-    return this.parseOpenpgpkey(openpgpKey.keys[0]);
-  }
-
-  async parseOpenpgpkey(openpgpKey) {
-    // extract the user id
-    const userId = openpgpKey.getUserIds()[0];
-    // extract the key id
-    let keyId = openpgpKey.primaryKey.getKeyId().toHex();
-    keyId = keyId.substring(keyId.length - 8);
-    // extract the secret armored key
-    const secretArmoredKey = openpgpKey.armor()
-    // extract the public armored key
-    const publicArmoredKey = openpgpKey.toPublic().armor();
-    // extract rsa bits
-    const rsaBits = openpgpKey.primaryKey.getAlgorithmInfo().bits;
-
-    const openpgpkeyDto = {userId, keyId, secretArmoredKey, publicArmoredKey, rsaBits};
-    return new OpenpgpkeyEntity(openpgpkeyDto);
-  }
-}
-
-exports.OpenpgpModel = OpenpgpModel;

package/src/all/background_page/model/share.js

@@ -1,171 +0,0 @@
-/**
- * Passbolt ~ Open source password manager for teams
- * Copyright (c) Passbolt SARL (https://www.passbolt.com)
- *
- * Licensed under GNU Affero General Public License version 3 of the or any later version.
- * For full copyright and license information, please see the LICENSE.txt
- * Redistributions of files must retain the above copyright notice.
- *
- * @copyright     Copyright (c) Passbolt SARL (https://www.passbolt.com)
- * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
- * @link          https://www.passbolt.com Passbolt(tm)
- * @since         2.4.0
- */
-const {Crypto} = require('../model/crypto');
-const {ShareService} = require('../service/share');
-
-class Share {}
-
-/**
- * Search aros to share resources with.
- * @param {string} keywords The string to search
- * @return {array}
- */
-Share.searchAros = async function (keywords) {
-  return ShareService.searchAros(keywords);
-};
-
-/**
- * Search users that could be granted to access a given resource.
- *
- * @param resourceId {string} The resource to search for
- * @param keywords {string} The string to search
- * @deprecated since v2.4.0 will be removed in v3.0
- * replaced by the Share.searchAros
- * @returns {array}
- */
-Share.searchResourceAros = function(resourceId, keywords) {
-  return ShareService.searchResourceAros(resourceId, keywords);
-};
-
-/**
- * Bulk share multiple resources.
- * @param {array} resources The resources to share
- * @param {array} changes The permissions changes to apply
- * @param privateKey {openpgp.key.Key} The decrypted private key to use to decrypt the message.
- * @param {function} progressCallback Notify the user with this callback
- */
-Share.bulkShareResources = async function(resources, changes, privateKey, progressCallback) {
-  const resourcesChanges = bulkShareAggregateChanges(resources, changes);
-  const resourcesNewUsers = await bulkShareSimulate(resources, resourcesChanges, progressCallback);
-  const resourcesSecrets = await bulkShareEncrypt(resources, resourcesNewUsers, privateKey, progressCallback);
-
-  for (const resourceId in resourcesChanges) {
-    if (resourcesChanges.hasOwnProperty(resourceId)) {
-      const resource = resources.find(resource => resource.id === resourceId);
-      const permissions = resourcesChanges[resourceId];
-      let secrets = resourcesSecrets[resourceId] || [];
-      progressCallback(`Sharing password ${resource.name}`);
-      await ShareService.shareResource(resourceId, {permissions, secrets});
-    }
-  }
-};
-
-/**
- * Bulk share multiple resources.
- * @param {FoldersCollection} foldersCollection
- * @param {PermissionChangesCollection} changesCollection
- * @param {FolderModel} folderModel
- * @param {function} progressCallback Notify the user with this callback
- */
-Share.bulkShareFolders = async function(foldersCollection, changesCollection, folderModel, progressCallback) {
-  for (const folderEntity of foldersCollection) {
-    let permissions = changesCollection.filterByAcoForeignKey(folderEntity.id);
-    if (permissions && permissions.length) {
-      await progressCallback(`Updating folder ${folderEntity.name} permissions`);
-      await folderModel.share(folderEntity, permissions, false);
-    }
-  }
-  await folderModel.updateLocalStorage();
-};
-
-/**
- * Aggregate the changes by Acos.
- * @param {array} acos The resources to share
- * @param {array} changes The changes to apply
- * @return {object}
- */
-const bulkShareAggregateChanges = function(acos, changes) {
-  if (!acos || !Array.isArray(acos) || !acos.length) {
-    throw new TypeError('bulkShareAggregateChanges expect an array of ACOs');
-  }
-  if (!changes || !Array.isArray(changes) || !changes.length) {
-    throw new TypeError('bulkShareAggregateChanges expect an array of changes');
-  }
-
-  const acosChanges = {};
-  acos.forEach(aco => {
-    const acoChanges = changes.filter(change => change.aco_foreign_key === aco.id);
-    if (acoChanges.length) {
-      acosChanges[aco.id] = acoChanges
-    }
-  });
-
-  return acosChanges;
-};
-
-/**
- * Simulate the changes to apply to the resources
- * @param {array} resources
- * @param {object} resourcesChanges The changes aggregated by resource
- * @param {function} progressCallback Notify the user with this callback
- * @returns {object}
- */
-const bulkShareSimulate = async function(resources, resourcesChanges, progressCallback) {
-  const usersToEncryptFor = {};
-
-  for (const resourceId in resourcesChanges) {
-    const resource = resources.find(resource => resource.id === resourceId);
-    progressCallback(`Validating share operation for ${resource.name}`);
-    const simulateResult = await ShareService.simulateShareResource(resourceId, resourcesChanges[resourceId]);
-    const simulateAddedUsers = simulateResult.changes.added;
-    if (simulateAddedUsers.length) {
-      usersToEncryptFor[resourceId] = simulateAddedUsers.reduce((carry, user) => [...carry, user.User.id], []);
-    }
-  }
-
-  return usersToEncryptFor;
-};
-
-/**
- * Encrypt the resources secrets for all the new users
- * @param {array} resources The resources to share
- * @param {object} resourcesNewUsers The list of new users to share the resources aggregated by resource
- * @param privateKey {openpgp.key.Key} The decrypted private key to use to decrypt the message.
- * @param {function} progressCallback Notify the user with this callback
- * @returns {object} A list of secrets as expected by the passbolt API
- * [
- *  {
- *    resource_id: UUID,
- *    user_id: UUID,
- *    data: string
- *  }
- * ]
- */
-const bulkShareEncrypt = async function(resources, resourcesNewUsers, privateKey, progressCallback) {
-  const crypto = new Crypto();
-  const secrets = {};
-
-  for (const resourceId in resourcesNewUsers) {
-    const resource = resources.find(resource => resource.id === resourceId);
-    const originalArmored = resource.secrets[0].data;
-    const users = resourcesNewUsers[resourceId];
-    progressCallback(`Encrypting for ${resource.name}`);
-    if (users && users.length) {
-      const message = await crypto.decryptWithKey(originalArmored, privateKey);
-      const encryptAllData = users.reduce((carry, userId) => [...carry, {userId, message}], []);
-      const result = await crypto.encryptAll(encryptAllData, privateKey);
-      secrets[resourceId] = result.map((armored, i) => {
-        return {
-          resource_id: resourceId,
-          user_id: users[i],
-          data: armored
-        }
-      });
-    }
-  }
-
-  return secrets;
-};
-
-exports.Share = Share;

package/src/all/background_page/model/siteSettings.js

@@ -1,80 +0,0 @@
-/**
- * Site Settings model.
- *
- * @copyright (c) 2018 Passbolt SARL
- * @licence GNU Affero General Public License http://www.gnu.org/licenses/agpl-3.0.en.html
- */
-
-/**
- * The class that deals with users settings
- */
-var SiteSettings = function (domain) {
-  this.domain = domain;
-  this._settings = null;
-};
-
-/**
- * Try to get the site settings from object cache, config or remotely
- * @returns {Promise}
- */
-SiteSettings.prototype.get = async function() {
-  if (this._settings === null) {
-    this._settings = await this.getRemote();
-  }
-  return this._settings
-};
-
-/**
- * Return remember me options
- * @returns {Promise}
- */
-SiteSettings.prototype.getRememberMeOptions = function() {
-  return new Promise( (resolve, reject) => {
-    this.get().then(function (data) {
-      if (data === undefined || data.passbolt === undefined || data.passbolt.plugins === undefined
-        || data.passbolt.plugins.rememberMe === undefined || data.passbolt.plugins.rememberMe.options === undefined) {
-        resolve(null);
-      } else {
-        resolve(data.passbolt.plugins.rememberMe.options);
-      }
-    })
-  });
-};
-
-/**
- * Get remote settings
- * @return {Promise}
- */
-SiteSettings.prototype.getRemote = async function () {
-  const url = this.domain + '/settings.json?api-version=v2';
-  return new Promise( function(resolve, reject) {
-    fetch(
-      url, {
-        method: 'GET',
-        credentials: 'include',
-        headers: {
-          'Accept': 'application/json',
-          'Content-Type': 'application/json'
-        }
-      })
-      .then(function (response) {
-        if (response.ok) {
-          return response.json();
-        } else {
-          return null;
-        }
-      })
-      .then(function (json) {
-          let response = { 'body' : {} };
-          if (json !== null) {
-            response = json.body;
-          }
-          resolve(response);
-      })
-      .catch(function (error) {
-        reject(error);
-      })
-  });
-};
-
-exports.SiteSettings = SiteSettings;