passbolt-browser-extension 5.13.0 → 5.14.2

package/src/all/background_page/event/resourceEvents.js

@@ -13,7 +13,6 @@ import SetResourcesExpiryDateController from "../controller/resource/setResource
 import FindResourceDetailsController from "../controller/resource/findResourceDetailsController";
 import ResourceUpdateLocalStorageController from "../controller/resourceLocalStorage/resourceUpdateLocalStorageController";
 import FindAllIdsByIsSharedWithGroupController from "../controller/resource/findAllIdsByIsSharedWithGroupController";
-import FindAllByIdsForDisplayPermissionsController from "../controller/resource/findAllByIdsForDisplayPermissionsController";
 import MoveResourcesController from "../controller/move/moveResourcesController";
 import ResetResourceGridUserSettingController from "../controller/resourceGridSetting/resetResourceGridUserSettingController";
 import UpdateResourceLocalStorageByFolderParentIdController from "../controller/resource/updateResourceLocalStorageByFolderParentIdController";
@@ -63,10 +62,11 @@ const listen = function (worker, apiClientOptions, account) {
    * @param requestId {uuid} The request identifier
    * @param resourceDto {object} The resource meta data
    * @param plaintextDto {string|object} The plaintext data to encrypt
+   * @param permissionChanges {Array<object>} Optional permission changes applied after create
    */
-  worker.port.on("passbolt.resources.create", async (requestId, resourceDto, plaintextDto) => {
+  worker.port.on("passbolt.resources.create", async (requestId, resourceDto, plaintextDto, permissionChanges) => {
     const controller = new ResourceCreateController(worker, requestId, apiClientOptions, account);
-    await controller._exec(resourceDto, plaintextDto);
+    await controller._exec(resourceDto, plaintextDto, permissionChanges);
   });
 
   /*
@@ -88,10 +88,11 @@ const listen = function (worker, apiClientOptions, account) {
    * @param requestId {uuid} The request identifier
    * @param resource {array} The resource
    * @param plaintextDto {} The resource secret
+   * @param permissionChanges {Array<object>} Optional permission changes applied after the update
    */
-  worker.port.on("passbolt.resources.update", async (requestId, resourceDto, plaintextDto) => {
+  worker.port.on("passbolt.resources.update", async (requestId, resourceDto, plaintextDto, permissionChanges) => {
     const controller = new ResourceUpdateController(worker, requestId, apiClientOptions, account);
-    await controller._exec(resourceDto, plaintextDto);
+    await controller._exec(resourceDto, plaintextDto, permissionChanges);
   });
 
   /*
@@ -144,16 +145,6 @@ const listen = function (worker, apiClientOptions, account) {
     await controller._exec(passwordExpiryResourcesCollectionDto);
   });
 
-  /*
-   * Retrieve all resources by ids with their permissions.
-   * @listens passbolt.resources.find-all-by-ids-with-permissions
-   * @param {array} resourcesIds The ids of the resources to retrieve.
-   */
-  worker.port.on("passbolt.resources.find-all-by-ids-for-display-permissions", async (requestId, resourcesIds) => {
-    const controller = new FindAllByIdsForDisplayPermissionsController(worker, requestId, apiClientOptions, account);
-    await controller._exec(resourcesIds);
-  });
-
   /*
    * Moves the given resources to a new folder.
    *

package/src/all/background_page/event/resourceTypeEvents.js

@@ -19,8 +19,9 @@ import UpdateAllResourceTypesDeletedStatusController from "../controller/resourc
  * Listens the resource type events
  * @param {Worker} worker
  * @param {ApiClientOptions} apiClientOptions the api client options
+ * @param {AccountEntity} account The account
  */
-const listen = function (worker, apiClientOptions) {
+const listen = function (worker, apiClientOptions, account) {
   /*
    * Get the resource types from the local storage.
    *
@@ -28,7 +29,7 @@ const listen = function (worker, apiClientOptions) {
    * @param requestId {uuid} The request identifier
    */
   worker.port.on("passbolt.resource-type.get-or-find-all", async (requestId) => {
-    const controller = new GetResourceTypesController(worker, requestId, apiClientOptions);
+    const controller = new GetResourceTypesController(worker, requestId, apiClientOptions, account);
     await controller._exec();
   });
 
@@ -51,7 +52,7 @@ const listen = function (worker, apiClientOptions) {
    * @param resourceTypesCollectionDto {Array} the collection to update
    */
   worker.port.on("passbolt.resource-types.update-all-deleted-status", async (requestId, resourceTypesCollectionDto) => {
-    const controller = new UpdateAllResourceTypesDeletedStatusController(worker, requestId, apiClientOptions);
+    const controller = new UpdateAllResourceTypesDeletedStatusController(worker, requestId, apiClientOptions, account);
     await controller._exec(resourceTypesCollectionDto);
   });
 };

package/src/all/background_page/event/setupEvents.js

@@ -22,7 +22,7 @@ import DownloadRecoveryKitController from "../controller/setup/downloadRecoverKi
 import CompleteSetupController from "../controller/setup/completeSetupController";
 import ValidatePrivateGpgKeySetupController from "../controller/crypto/validatePrivateGpgKeySetupController";
 import SetSetupLocaleController from "../controller/setup/setSetupLocaleController";
-import GetOrganizationSettingsController from "../controller/organizationSettings/getOrganizationSettingsController";
+import GetOrFindSiteSettingsController from "../controller/siteSettings/getOrFindSiteSettingsController";
 import GenerateSetupKeyPairController from "../controller/setup/generateSetupKeyPairController";
 import GetAndInitSetupLocaleController from "../controller/setup/getAndInitSetupLocaleController";
 import IsExtensionFirstInstallController from "../controller/extension/isExtensionFirstInstallController";
@@ -47,9 +47,9 @@ const listen = function (worker, apiClientOptions, account) {
     await controller._exec();
   });
 
-  worker.port.on("passbolt.organization-settings.get", async (requestId) => {
-    const controller = new GetOrganizationSettingsController(worker, requestId, apiClientOptions);
-    await controller._exec();
+  worker.port.on("passbolt.site-settings.get-or-find", async (requestId, refreshCache = true) => {
+    const controller = new GetOrFindSiteSettingsController(worker, requestId, apiClientOptions, account);
+    await controller._exec(refreshCache);
   });
 
   worker.port.on("passbolt.setup.start", async (requestId) => {

package/src/all/background_page/event/siteSettingsEvents.js

@@ -0,0 +1,29 @@
+/**
+ * Passbolt ~ Open source password manager for teams
+ * Copyright (c) Passbolt SARL (https://www.passbolt.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE.txt
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) Passbolt SARL (https://www.passbolt.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.passbolt.com Passbolt(tm)
+ * @since         3.2.0
+ */
+import GetOrFindSiteSettingsController from "../controller/siteSettings/getOrFindSiteSettingsController";
+
+const listen = function (worker, apiClientOptions, account) {
+  /*
+   * Return cached site settings or fetch from the API. Same `refreshCache` semantics as the
+   * legacy `passbolt.organization-settings.get` event.
+   * @listens passbolt.site-settings.get-or-find
+   * @param {string} requestId
+   * @param {boolean} [refreshCache=true]
+   */
+  worker.port.on("passbolt.site-settings.get-or-find", async (requestId, refreshCache = true) => {
+    const controller = new GetOrFindSiteSettingsController(worker, requestId, apiClientOptions, account);
+    await controller._exec(refreshCache);
+  });
+};
+export const SiteSettingsEvents = { listen };

package/src/all/background_page/event/userEvents.js

@@ -15,6 +15,7 @@ import AvatarUpdateEntity from "../model/entity/avatar/update/avatarUpdateEntity
 import UpdateUserLocalStorageController from "../controller/user/updateUserLocalStorageController";
 import GetOrFindLoggedInUserController from "../controller/user/getOrFindLoggedInUserController";
 import GetOrFindUsersController from "../controller/user/getOrFindUsersController";
+import GetOrFindAllUsersController from "../controller/user/getOrFindAllUsersController";
 import UpdateUserController from "../controller/user/updateUserController";
 import DeleteDryRunUserController from "../controller/user/deleteDryRunUserController";
 import DeleteUserController from "../controller/user/deleteUserController";
@@ -38,13 +39,8 @@ const listen = function (worker, apiClientOptions, account) {
    * @param requestId {uuid} The request identifier
    */
   worker.port.on("passbolt.users.get-all", async (requestId) => {
-    try {
-      const userModel = new UserModel(apiClientOptions, account);
-      const users = await userModel.getOrFindAll();
-      worker.port.emit(requestId, "SUCCESS", users);
-    } catch (error) {
-      worker.port.emit(requestId, "ERROR", error);
-    }
+    const controller = new GetOrFindAllUsersController(worker, requestId, apiClientOptions, account);
+    await controller._exec();
   });
 
   /*
@@ -158,7 +154,7 @@ const listen = function (worker, apiClientOptions, account) {
    * @param newPassphrase {string} The new passphrase
    */
   worker.port.on("passbolt.user.update-private-key", async (requestId, oldPassphrase, newPassphrase) => {
-    const controller = new UpdatePrivateKeyController(worker, requestId, apiClientOptions);
+    const controller = new UpdatePrivateKeyController(worker, requestId, apiClientOptions, account);
     await controller._exec(oldPassphrase, newPassphrase);
   });
 

package/src/all/background_page/index.js

@@ -8,13 +8,8 @@ import PortManager from "./sdk/port/portManager";
 import SystemRequirementService from "./service/systemRequirementService/systemRequirementService";
 import OnExtensionInstalledController from "./controller/extension/onExtensionInstalledController";
 import TabService from "./service/tab/tabService";
-import User from "./model/user";
-import Log from "./model/log";
 import OnExtensionUpdateAvailableService from "./service/extension/onExtensionUpdateAvailableService";
-import CheckAuthStatusService from "./service/auth/checkAuthStatusService";
 import GlobalAlarmService from "./service/alarm/globalAlarmService";
-import PostLoginService from "./service/auth/postLoginService";
-import PostLogoutService from "./service/auth/postLogoutService";
 import OnStartUpService from "./service/extension/onStartUpService";
 import ToolbarService from "./service/toolbar/toolbarService";
 
@@ -23,38 +18,6 @@ const main = async () => {
    * Load all system requirement
    */
   await SystemRequirementService.get();
-
-  // When the extension is updated and the user is still connected, an event needs to be sent
-  checkAndProcessIfUserAuthenticated();
-};
-
-/**
- * Check and process event if the user is authenticated
- * @return {Promise<void>}
- */
-const checkAndProcessIfUserAuthenticated = async () => {
-  const user = User.getInstance();
-  // Check if user is valid
-  if (!user.isValid()) {
-    return;
-  }
-
-  let authStatus;
-  try {
-    const checkAuthStatusService = new CheckAuthStatusService();
-    authStatus = await checkAuthStatusService.checkAuthStatus(true);
-  } catch (error) {
-    console.error(error);
-    // Service is unavailable, do nothing...
-    Log.write({ level: "debug", message: "The Service is unavailable to check if the user is authenticated" });
-    return;
-  }
-
-  if (authStatus.isAuthenticated) {
-    PostLoginService.exec();
-  } else {
-    PostLogoutService.exec();
-  }
 };
 
 main();

package/src/all/background_page/model/entity/account/abstractAccountEntity.js

@@ -10,7 +10,7 @@
  * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
  * @link          https://www.passbolt.com Passbolt(tm)
  */
-import Entity from "passbolt-styleguide/src/shared/models/entity/abstract/entity";
+import EntityV2 from "passbolt-styleguide/src/shared/models/entity/abstract/entityV2";
 import ProfileEntity from "passbolt-styleguide/src/shared/models/entity/profile/profileEntity";
 import UserEntity from "../user/userEntity";
 import SecurityTokenEntity from "../securityToken/securityTokenEntity";
@@ -24,7 +24,7 @@ const FINGERPRINT_MAX_LENGTH = 40;
 
 const UUID_PASSBOLT_NAMESPACE = "d5447ca1-950f-459d-8b20-86ddfdd0f922";
 
-class AbstractAccountEntity extends Entity {
+class AbstractAccountEntity extends EntityV2 {
   /**
    * @inheritDoc
    */

package/src/all/background_page/model/entity/account/accountAccountRecoveryEntity.js

@@ -26,19 +26,13 @@ class AccountAccountRecoveryEntity extends AbstractAccountEntity {
    * @param {boolean} [options.validateUsername=true] Validate the username
    */
   constructor(accountAccountRecoveryDto, options = {}) {
-    AccountAccountRecoveryEntity.marshal(accountAccountRecoveryDto);
-
     // Should the username be validated.
     const isUsernameValidated = options?.validateUsername !== false;
+    if (!isUsernameValidated) {
+      options.schema = AccountAccountRecoveryEntity.getSchema(isUsernameValidated);
+    }
 
-    super(
-      EntitySchema.validate(
-        AccountAccountRecoveryEntity.ENTITY_NAME,
-        accountAccountRecoveryDto,
-        AccountAccountRecoveryEntity.getSchema(isUsernameValidated),
-      ),
-      options,
-    );
+    super(accountAccountRecoveryDto, options);
 
     this.isUsernameValidated = isUsernameValidated;
 
@@ -52,14 +46,10 @@ class AccountAccountRecoveryEntity extends AbstractAccountEntity {
   }
 
   /**
-   * Marshal the dto
-   * @param {Object} accountAccountRecoveryDto account account recovery DTO
-   * @return {Object}
+   * @inheritDoc
    */
-  static marshal(accountAccountRecoveryDto) {
-    Object.assign(accountAccountRecoveryDto, {
-      type: AccountAccountRecoveryEntity.TYPE_ACCOUNT_ACCOUNT_RECOVERY,
-    });
+  marshall() {
+    this._props.type = AccountAccountRecoveryEntity.TYPE_ACCOUNT_ACCOUNT_RECOVERY;
   }
 
   /**

package/src/all/background_page/model/entity/account/accountEntity.js

@@ -12,7 +12,6 @@
  */
 
 import AbstractAccountEntity from "./abstractAccountEntity";
-import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 import RoleEntity from "passbolt-styleguide/src/shared/models/entity/role/roleEntity";
 
 const ENTITY_NAME = "Account";
@@ -26,28 +25,22 @@ class AccountEntity extends AbstractAccountEntity {
    * @param {boolean} [options.validateUsername=true] Validate the username
    */
   constructor(accountDto, options = {}) {
-    AccountEntity.marshal(accountDto);
-
     // Should the username be validated.
     const isUsernameValidated = options?.validateUsername !== false;
+    if (!isUsernameValidated) {
+      options.schema = AccountEntity.getSchema(isUsernameValidated);
+    }
 
-    super(
-      EntitySchema.validate(AccountEntity.ENTITY_NAME, accountDto, AccountEntity.getSchema(isUsernameValidated)),
-      options,
-    );
+    super(accountDto, options);
 
     this.isUsernameValidated = isUsernameValidated;
   }
 
   /**
-   * Marshal the dto
-   * @param {Object} accountDto account DTO
-   * @return {Object}
+   * @inheritDoc
    */
-  static marshal(accountDto) {
-    Object.assign(accountDto, {
-      type: AccountEntity.TYPE_ACCOUNT,
-    });
+  marshall() {
+    this._props.type = AccountEntity.TYPE_ACCOUNT;
   }
 
   /**

package/src/all/background_page/model/entity/account/accountKitEntity.js

@@ -12,7 +12,6 @@
  */
 
 import AbstractAccountEntity from "./abstractAccountEntity";
-import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 
 const ENTITY_NAME = "AccountKit";
 const PGP_KEY_MAX_LENGTH = 50000;
@@ -23,7 +22,7 @@ class AccountKitEntity extends AbstractAccountEntity {
    * @inheritDoc
    */
   constructor(accountDto, options = {}) {
-    super(EntitySchema.validate(AccountKitEntity.ENTITY_NAME, accountDto, AccountKitEntity.getSchema()), options);
+    super(accountDto, options);
   }
 
   /**

package/src/all/background_page/model/entity/account/accountRecoverEntity.js

@@ -14,7 +14,6 @@
 import UserEntity from "../user/userEntity";
 import AbstractAccountEntity from "./abstractAccountEntity";
 import AuthenticationTokenEntity from "../authenticationToken/authenticationTokenEntity";
-import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 import AccountRecoveryUserSettingEntity from "passbolt-styleguide/src/shared/models/entity/accountRecovery/accountRecoveryUserSettingEntity";
 
 const ENTITY_NAME = "AccountRecover";
@@ -25,12 +24,7 @@ class AccountRecoverEntity extends AbstractAccountEntity {
    * @inheritDoc
    */
   constructor(accountRecoverDto, options = {}) {
-    AccountRecoverEntity.marshal(accountRecoverDto);
-
-    super(
-      EntitySchema.validate(AccountRecoverEntity.ENTITY_NAME, accountRecoverDto, AccountRecoverEntity.getSchema()),
-      options,
-    );
+    super(accountRecoverDto, options);
 
     // Recover account associations.
     if (this._props.account_recovery_user_setting) {
@@ -47,14 +41,10 @@ class AccountRecoverEntity extends AbstractAccountEntity {
   }
 
   /**
-   * Marshal the dto
-   * @param {Object} accountRecoverDto account recover DTO
-   * @return {Object}
+   * @inheritDoc
    */
-  static marshal(accountRecoverDto) {
-    Object.assign(accountRecoverDto, {
-      type: AccountRecoverEntity.TYPE_ACCOUNT_RECOVER,
-    });
+  marshall() {
+    this._props.type = AccountRecoverEntity.TYPE_ACCOUNT_RECOVER;
   }
 
   /**

package/src/all/background_page/model/entity/account/accountSetupEntity.js

@@ -15,7 +15,6 @@
 import UserEntity from "../user/userEntity";
 import AbstractAccountEntity from "./abstractAccountEntity";
 import AuthenticationTokenEntity from "../authenticationToken/authenticationTokenEntity";
-import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 import AccountRecoveryUserSettingEntity from "passbolt-styleguide/src/shared/models/entity/accountRecovery/accountRecoveryUserSettingEntity";
 
 const ENTITY_NAME = "AccountSetup";
@@ -26,12 +25,7 @@ class AccountSetupEntity extends AbstractAccountEntity {
    * @inheritDoc
    */
   constructor(accountSetupDto, options = {}) {
-    AccountSetupEntity.marshal(accountSetupDto);
-
-    super(
-      EntitySchema.validate(AccountSetupEntity.ENTITY_NAME, accountSetupDto, AccountSetupEntity.getSchema()),
-      options,
-    );
+    super(accountSetupDto, options);
 
     // Setup account associations.
     if (this._props.account_recovery_user_setting) {
@@ -48,14 +42,10 @@ class AccountSetupEntity extends AbstractAccountEntity {
   }
 
   /**
-   * Marshal the dto
-   * @param {Object} accountSetupDto account setup DTO
-   * @return {Object}
+   * @inheritDoc
    */
-  static marshal(accountSetupDto) {
-    Object.assign(accountSetupDto, {
-      type: AccountSetupEntity.TYPE_ACCOUNT_SETUP,
-    });
+  marshall() {
+    this._props.type = AccountSetupEntity.TYPE_ACCOUNT_SETUP;
   }
 
   /**

package/src/all/background_page/model/entity/account/accountTemporaryEntity.js

@@ -13,7 +13,6 @@
  */
 
 import AbstractAccountEntity from "./abstractAccountEntity";
-import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 import AccountAccountRecoveryEntity from "./accountAccountRecoveryEntity";
 import AccountSetupEntity from "./accountSetupEntity";
 import AccountRecoverEntity from "./accountRecoverEntity";
@@ -26,10 +25,8 @@ class AccountTemporaryEntity extends AbstractAccountEntity {
   /**
    * @inheritDoc
    */
-  constructor(AccountEntityDto) {
-    super(
-      EntitySchema.validate(AccountTemporaryEntity.ENTITY_NAME, AccountEntityDto, AccountTemporaryEntity.getSchema()),
-    );
+  constructor(accountEntityDto, options = {}) {
+    super(accountEntityDto, options);
 
     // Associations
     if (this._props.account) {

package/src/all/background_page/model/entity/gpgkey/generate/generateGpgKeyPairOptionsEntity.test.js

@@ -15,9 +15,8 @@
 import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
 import EntityValidationError from "passbolt-styleguide/src/shared/models/entity/abstract/entityValidationError";
 import * as assertEntityProperty from "passbolt-styleguide/test/assert/assertEntityProperty";
-import OrganizationSettingsModel from "../../../organizationSettings/organizationSettingsModel";
-import OrganizationSettingsEntity from "../../organizationSettings/organizationSettingsEntity";
-import { customEmailValidationProOrganizationSettings } from "../../organizationSettings/organizationSettingsEntity.test.data";
+import SiteSettingsEntity from "passbolt-styleguide/src/shared/models/entity/siteSettings/siteSettingsEntity";
+import { customEmailValidationProSiteSettings } from "passbolt-styleguide/src/shared/models/entity/siteSettings/siteSettingsEntity.test.data";
 import GenerateGpgKeyPairOptionsEntity from "./generateGpgKeyPairOptionsEntity";
 import { defaultDto, minimalDto } from "./generateGpgKeyPairOptionsEntity.test.data";
 import {
@@ -25,6 +24,7 @@ import {
   rsaUserKeyPoliciesSettingsDto,
 } from "passbolt-styleguide/src/shared/models/entity/userKeyPolicies/UserKeyPoliciesSettingsEntity.test.data";
 import UserKeyPoliciesSettingsEntity from "passbolt-styleguide/src/shared/models/entity/userKeyPolicies/UserKeyPoliciesSettingsEntity";
+import SiteSettingsRuntimeCache from "../../../../service/siteSettings/siteSettingsRuntimeCache";
 
 beforeEach(() => {
   jest.useFakeTimers(); //avoid slight nano seconds shift in test when comparing dates that makes test failing while they shouldn't
@@ -147,8 +147,8 @@ describe("GenerateGpgKeyPairOptionsEntity", () => {
 
     it("allows non-standard email if custom validation is configured", () => {
       expect.assertions(1);
-      const organizationSettings = customEmailValidationProOrganizationSettings();
-      OrganizationSettingsModel.set(new OrganizationSettingsEntity(organizationSettings));
+      const organizationSettings = customEmailValidationProSiteSettings();
+      SiteSettingsRuntimeCache.set(new SiteSettingsEntity(organizationSettings));
       const dto = defaultDto({ email: "ada@passbolt.c" });
       const entity = new GenerateGpgKeyPairOptionsEntity(dto);
       expect(entity.email).toEqual("ada@passbolt.c");

package/src/all/background_page/model/entity/localStorage/localStorageMetadataEntity.js

@@ -0,0 +1,49 @@
+/**
+ * Passbolt ~ Open source password manager for teams
+ * Copyright (c) Passbolt SA (https://www.passbolt.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE.txt
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) Passbolt SA (https://www.passbolt.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.passbolt.com Passbolt(tm)
+ * @since         5.13.0
+ */
+import EntityV2 from "passbolt-styleguide/src/shared/models/entity/abstract/entityV2";
+
+class LocalStorageMetadataEntity extends EntityV2 {
+  /**
+   * Get local storage metadata entity schema
+   * @returns {object} schema
+   */
+  static getSchema() {
+    return {
+      type: "object",
+      required: ["last_updated"],
+      properties: {
+        last_updated: {
+          type: "string",
+          format: "date-time",
+        },
+      },
+    };
+  }
+
+  /*
+   * ==================================================
+   * Dynamic properties getters
+   * ==================================================
+   */
+
+  /**
+   * Get the last updated date
+   * @returns {string}
+   */
+  get lastUpdated() {
+    return this._props.last_updated;
+  }
+}
+
+export default LocalStorageMetadataEntity;

package/src/all/background_page/model/entity/localStorage/localStorageMetadataEntity.test.data.js

@@ -0,0 +1,23 @@
+/**
+ * Passbolt ~ Open source password manager for teams
+ * Copyright (c) Passbolt SA (https://www.passbolt.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE.txt
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) Passbolt SA (https://www.passbolt.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.passbolt.com Passbolt(tm)
+ * @since         5.13.0
+ */
+
+/**
+ * Build default local storage metadata.
+ * @param {object} [data={}] Data to override
+ * @returns {object}
+ */
+export const defaultLocalStorageMetadataDto = (data = {}) => ({
+  last_updated: "2026-06-06T14:59:11+00:00",
+  ...data,
+});

package/src/all/background_page/model/entity/localStorage/localStorageMetadataEntity.test.js

@@ -0,0 +1,51 @@
+/**
+ * Passbolt ~ Open source password manager for teams
+ * Copyright (c) Passbolt SA (https://www.passbolt.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE.txt
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) Passbolt SA (https://www.passbolt.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.passbolt.com Passbolt(tm)
+ * @since         5.13.0
+ */
+
+import EntitySchema from "passbolt-styleguide/src/shared/models/entity/abstract/entitySchema";
+import * as assertEntityProperty from "passbolt-styleguide/test/assert/assertEntityProperty";
+import LocalStorageMetadataEntity from "./localStorageMetadataEntity";
+import { defaultLocalStorageMetadataDto } from "./localStorageMetadataEntity.test.data";
+
+describe("LocalStorageMetadata", () => {
+  describe("::getSchema", () => {
+    it("schema must validate", () => {
+      EntitySchema.validateSchema(LocalStorageMetadataEntity.name, LocalStorageMetadataEntity.getSchema());
+    });
+
+    it("validates last_updated property", () => {
+      assertEntityProperty.string(LocalStorageMetadataEntity, "last_updated");
+      assertEntityProperty.dateTime(LocalStorageMetadataEntity, "last_updated");
+      assertEntityProperty.required(LocalStorageMetadataEntity, "last_updated");
+    });
+  });
+
+  describe("::constructor", () => {
+    it("constructor works if valid DTO is provided", () => {
+      expect.assertions(1);
+      const dto = defaultLocalStorageMetadataDto();
+      const entity = new LocalStorageMetadataEntity(dto);
+
+      expect(entity._props.last_updated).toStrictEqual(dto.last_updated);
+    });
+  });
+
+  describe("::last_updated", () => {
+    it("get last_updated property value", () => {
+      expect.assertions(1);
+      const last_updated = "2024-10-05T12:10:00+00:00";
+      const entity = new LocalStorageMetadataEntity(defaultLocalStorageMetadataDto({ last_updated }));
+      expect(entity.lastUpdated).toStrictEqual(last_updated);
+    });
+  });
+});