mirror of
https://github.com/the-djmaze/snappymail.git
synced 2024-09-21 08:05:56 +08:00
466 lines
13 KiB
JavaScript
466 lines
13 KiB
JavaScript
import ko from 'ko';
|
|
|
|
import { Capa } from 'Common/Enums';
|
|
import { doc, createElement, Settings } from 'Common/Globals';
|
|
import { openPgpJs, openPgpWorkerJs } from 'Common/Links';
|
|
import { isArray, arrayLength } from 'Common/Utils';
|
|
import { delegateRunOnDestroy } from 'Common/UtilsUser';
|
|
|
|
import { showScreenPopup } from 'Knoin/Knoin';
|
|
|
|
import { MessageOpenPgpPopupView } from 'View/Popup/MessageOpenPgp';
|
|
|
|
import { EmailModel } from 'Model/Email';
|
|
import { OpenPgpKeyModel } from 'Model/OpenPgpKey';
|
|
|
|
import Remote from 'Remote/User/Fetch';
|
|
|
|
const
|
|
findKeyByHex = (keys, hash) =>
|
|
keys.find(item => item && (hash === item.id || item.ids.includes(hash)));
|
|
|
|
export const PgpUserStore = new class {
|
|
constructor() {
|
|
/**
|
|
* PECL gnupg / PEAR Crypt_GPG
|
|
* [ {email, can_encrypt, can_sign}, ... ]
|
|
*/
|
|
this.gnupgKeyring;
|
|
this.gnupgKeys = ko.observableArray();
|
|
|
|
// OpenPGP.js
|
|
this.openpgpKeyring = null;
|
|
this.openpgpPublicKeys = ko.observableArray();
|
|
this.openpgpPrivateKeys = ko.observableArray();
|
|
|
|
// https://mailvelope.github.io/mailvelope/Keyring.html
|
|
this.mailvelopeKeyring = null;
|
|
}
|
|
|
|
init() {
|
|
if (Settings.capa(Capa.OpenPGP) && window.crypto && crypto.getRandomValues) {
|
|
const script = createElement('script', {src:openPgpJs()});
|
|
script.onload = () => {
|
|
if (window.Worker) {
|
|
try {
|
|
openpgp.initWorker({ path: openPgpWorkerJs() });
|
|
} catch (e) {
|
|
console.error(e);
|
|
}
|
|
}
|
|
this.loadKeyrings();
|
|
};
|
|
script.onerror = () => {
|
|
this.loadKeyrings();
|
|
console.error(script.src);
|
|
}
|
|
doc.head.append(script);
|
|
} else {
|
|
this.loadKeyrings();
|
|
}
|
|
}
|
|
|
|
loadKeyrings(identifier) {
|
|
if (window.mailvelope) {
|
|
var fn = keyring => {
|
|
this.mailvelopeKeyring = keyring;
|
|
console.log('mailvelope ready');
|
|
};
|
|
mailvelope.getKeyring().then(fn, err => {
|
|
if (identifier) {
|
|
// attempt to create a new keyring for this app/user
|
|
mailvelope.createKeyring(identifier).then(fn, err => console.error(err));
|
|
} else {
|
|
console.error(err);
|
|
}
|
|
});
|
|
addEventListener('mailvelope-disconnect', event => {
|
|
alert('Mailvelope is updated to version ' + event.detail.version + '. Reload page');
|
|
}, false);
|
|
} else {
|
|
addEventListener('mailvelope', () => this.loadKeyrings(identifier));
|
|
}
|
|
|
|
if (openpgp) {
|
|
this.openpgpKeyring = new openpgp.Keyring();
|
|
this.reloadOpenPgpKeys();
|
|
}
|
|
|
|
if (Settings.capa(Capa.GnuPG)) {
|
|
this.gnupgKeyring = null;
|
|
this.gnupgKeys([]);
|
|
Remote.request('GnupgGetKeys',
|
|
(iError, oData) => {
|
|
if (oData && oData.Result) {
|
|
this.gnupgKeyring = oData.Result;
|
|
this.gnupgKeys(Object.values(oData.Result));
|
|
console.log('gnupg ready');
|
|
}
|
|
}
|
|
);
|
|
}
|
|
}
|
|
|
|
reloadOpenPgpKeys() {
|
|
if (this.openpgpKeyring) {
|
|
const publicKeys = [],
|
|
privateKeys = [],
|
|
email = new EmailModel();
|
|
|
|
this.openpgpKeyring.getAllKeys().forEach(oItem => {
|
|
if (oItem && oItem.primaryKey) {
|
|
const aEmails = [],
|
|
aUsers = [],
|
|
primaryUser = oItem.getPrimaryUser(),
|
|
user =
|
|
primaryUser && primaryUser.user
|
|
? primaryUser.user.userId.userid
|
|
: oItem.users && oItem.users[0]
|
|
? oItem.users[0].userId.userid
|
|
: '';
|
|
|
|
if (oItem.users) {
|
|
oItem.users.forEach(item => {
|
|
if (item.userId) {
|
|
email.clear();
|
|
email.parse(item.userId.userid);
|
|
if (email.validate()) {
|
|
aEmails.push(email.email);
|
|
aUsers.push(item.userId.userid);
|
|
}
|
|
}
|
|
});
|
|
}
|
|
|
|
if (aEmails.length) {
|
|
(oItem.isPrivate() ? privateKeys : publicKeys).push(
|
|
new OpenPgpKeyModel(
|
|
oItem.primaryKey.getFingerprint(),
|
|
oItem.primaryKey
|
|
.getKeyId()
|
|
.toHex()
|
|
.toLowerCase(),
|
|
oItem.getKeyIds()
|
|
.map(item => (item && item.toHex ? item.toHex() : null))
|
|
.validUnique(),
|
|
aUsers,
|
|
aEmails,
|
|
oItem.isPrivate(),
|
|
oItem.armor(),
|
|
user
|
|
)
|
|
);
|
|
}
|
|
}
|
|
});
|
|
|
|
delegateRunOnDestroy(this.openpgpPublicKeys());
|
|
this.openpgpPublicKeys(publicKeys);
|
|
|
|
delegateRunOnDestroy(this.openpgpPrivateKeys());
|
|
this.openpgpPrivateKeys(privateKeys);
|
|
|
|
console.log('openpgp.js ready');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @returns {boolean}
|
|
*/
|
|
isSupported() {
|
|
return !!(window.openpgp || window.mailvelope);
|
|
}
|
|
|
|
gnupgImportKey(key, callback) {
|
|
if (Settings.capa(Capa.GnuPG)) {
|
|
Remote.request('GnupgImportKey',
|
|
(iError, oData) => {
|
|
if (oData && oData.Result) {
|
|
// this.gnupgKeyring = oData.Result;
|
|
}
|
|
callback && callback(iError, oData);
|
|
}, {
|
|
Key: key
|
|
}
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Checks if verifying/encrypting a message is possible with given email addresses.
|
|
* Returns the first library that can.
|
|
*/
|
|
async hasPublicKeyForEmails(recipients, all) {
|
|
const count = recipients.length;
|
|
if (count) {
|
|
let length = this.gnupgKeyring && recipients.filter(email =>
|
|
this.gnupgKeyring[email] && this.gnupgKeyring[email].can_encrypt).length;
|
|
if (length && (!all || length === count)) {
|
|
return 'gnupg';
|
|
}
|
|
|
|
length = this.openpgpKeyring && recipients.filter(email =>
|
|
this.openpgpKeyring.publicKeys.getForAddress(email).length
|
|
).length;
|
|
if (openpgp && (!all || openpgp === count)) {
|
|
return 'openpgp';
|
|
}
|
|
|
|
let mailvelope = this.mailvelopeKeyring && await this.mailvelopeKeyring.validKeyForAddress(recipients)
|
|
/*.then(LookupResult => Object.entries(LookupResult))*/;
|
|
mailvelope = Object.entries(mailvelope);
|
|
if (mailvelope && mailvelope.length
|
|
&& (all ? (mailvelope.filter(([, value]) => value).length === count) : mailvelope.find(([, value]) => value))
|
|
) {
|
|
return 'mailvelope';
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Checks if signing a message is possible with given email address.
|
|
* Returns the first library that can.
|
|
*/
|
|
async hasPrivateKeyFor(email, sign) {
|
|
if (this.gnupgKeyring && this.gnupgKeyring[email] && this.gnupgKeyring[email][sign?'can_sign':'can_decrypt']) {
|
|
return 'gnupg';
|
|
}
|
|
|
|
if (this.openpgpKeyring && this.openpgpKeyring.privateKeys.getForAddress(email).length) {
|
|
return 'openpgp';
|
|
}
|
|
|
|
let keyring = this.mailvelopeKeyring;
|
|
if (keyring) {
|
|
/**
|
|
* Mailvelope can't find by email, so we must get the fingerprint and use that instead
|
|
*/
|
|
let keys = await keyring.validKeyForAddress([email]);
|
|
if (keys && keys[email] && await keyring.hasPrivateKey(keys[email].keys[0].fingerprint)) {
|
|
return 'mailvelope';
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Checks if signing a message is possible with given email address.
|
|
* Returns the first library that can.
|
|
*/
|
|
async hasKeyForSigning(email) {
|
|
return await this.hasPrivateKeyFor(email, 1);
|
|
}
|
|
|
|
/**
|
|
* Checks if decrypting a message is possible with given email address.
|
|
* Returns the first library that can.
|
|
*/
|
|
async hasKeyForDecrypting(email) {
|
|
return await this.hasPrivateKeyFor(email, 0);
|
|
}
|
|
|
|
/**
|
|
* OpenPGP.js
|
|
*/
|
|
|
|
/**
|
|
* @param {OpenPgpKeyModel} openPgpKeyToRemove
|
|
* @returns {void}
|
|
*/
|
|
deleteKey(openPgpKeyToRemove) {
|
|
const openpgpKeyring = this.openpgpKeyring;
|
|
if (openPgpKeyToRemove && openPgpKeyToRemove.deleteAccess() && openpgpKeyring) {
|
|
let items = [
|
|
this.openpgpPrivateKeys.find(key => openPgpKeyToRemove === key),
|
|
this.openpgpPublicKeys.find(key => openPgpKeyToRemove === key)
|
|
];
|
|
if (items[0]) {
|
|
this.openpgpPrivateKeys.remove(items[0]);
|
|
openpgpKeyring.privateKeys.removeForId(items[0].guid);
|
|
delegateRunOnDestroy(items[0]);
|
|
}
|
|
if (items[1]) {
|
|
this.openpgpPublicKeys.remove(items[1]);
|
|
openpgpKeyring.publicKeys.removeForId(items[1].guid);
|
|
delegateRunOnDestroy(items[1]);
|
|
}
|
|
if (items[0] || items[1]) {
|
|
openpgpKeyring.store();
|
|
}
|
|
// this.reloadOpenPgpKeys();
|
|
}
|
|
}
|
|
|
|
decryptMessage(message, recipients, fCallback) {
|
|
if (message && message.getEncryptionKeyIds) {
|
|
// findPrivateKeysByEncryptionKeyIds
|
|
const encryptionKeyIds = message.getEncryptionKeyIds();
|
|
let privateKeys = isArray(encryptionKeyIds)
|
|
? encryptionKeyIds.map(id => {
|
|
// openpgpKeyring.publicKeys.getForId(id.toHex())
|
|
// openpgpKeyring.privateKeys.getForId(id.toHex())
|
|
const key = id && id.toHex ? findKeyByHex(this.openpgpPrivateKeys, id.toHex()) : null;
|
|
return key ? [key] : [null];
|
|
}).flat().filter(v => v)
|
|
: [];
|
|
if (!privateKeys.length && arrayLength(recipients)) {
|
|
privateKeys = recipients.map(sEmail =>
|
|
(sEmail
|
|
? this.openpgpPrivateKeys.filter(item => item && item.emails.includes(sEmail)) : 0)
|
|
|| [null]
|
|
).flat().validUnique(key => key.id);
|
|
}
|
|
|
|
if (privateKeys && privateKeys.length) {
|
|
showScreenPopup(MessageOpenPgpPopupView, [
|
|
(decryptedKey) => {
|
|
if (decryptedKey) {
|
|
message.decrypt(decryptedKey).then(
|
|
(decryptedMessage) => {
|
|
let privateKey = null;
|
|
if (decryptedMessage) {
|
|
privateKey = findKeyByHex(this.openpgpPrivateKeys, decryptedKey.primaryKey.keyid.toHex());
|
|
if (privateKey) {
|
|
this.verifyMessage(decryptedMessage, (oValidKey, aSigningKeyIds) => {
|
|
fCallback(privateKey, decryptedMessage, oValidKey || null, aSigningKeyIds || null);
|
|
});
|
|
} else {
|
|
fCallback(privateKey, decryptedMessage);
|
|
}
|
|
} else {
|
|
fCallback(privateKey, decryptedMessage);
|
|
}
|
|
},
|
|
() => {
|
|
fCallback(null, null);
|
|
}
|
|
);
|
|
} else {
|
|
fCallback(null, null);
|
|
}
|
|
},
|
|
privateKeys
|
|
]);
|
|
|
|
return false;
|
|
}
|
|
}
|
|
|
|
fCallback(null, null);
|
|
|
|
return false;
|
|
}
|
|
|
|
verifyMessage(message, fCallback) {
|
|
if (message && message.getSigningKeyIds) {
|
|
const signingKeyIds = message.getSigningKeyIds();
|
|
if (signingKeyIds && signingKeyIds.length) {
|
|
// findPublicKeysBySigningKeyIds
|
|
const publicKeys = signingKeyIds.map(id => {
|
|
const key = id && id.toHex ? findKeyByHex(this.openpgpPublicKeys, id.toHex()) : null;
|
|
return key ? key.getNativeKeys() : [null];
|
|
}).flat().filter(v => v);
|
|
if (publicKeys && publicKeys.length) {
|
|
try {
|
|
const result = message.verify(publicKeys),
|
|
valid = (isArray(result) ? result : []).find(item => item && item.valid && item.keyid);
|
|
|
|
if (valid && valid.keyid && valid.keyid && valid.keyid.toHex) {
|
|
fCallback(findKeyByHex(this.openpgpPublicKeys, valid.keyid.toHex()));
|
|
return true;
|
|
}
|
|
} catch (e) {
|
|
console.log(e);
|
|
}
|
|
}
|
|
|
|
fCallback(null, signingKeyIds);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
fCallback(null);
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Creates an iframe to display the decrypted content of the encrypted mail.
|
|
* The iframe will be injected into the container identified by selector.
|
|
*/
|
|
/*
|
|
mailvelope.createDisplayContainer(selector, armored, this.mailvelopeKeyring, {senderAddress:''}).then(status => {
|
|
if (status.error && status.error.message) {
|
|
return error_handler(status.error);
|
|
}
|
|
|
|
ref.hide_message(msgid);
|
|
$(selector).children().not('iframe').hide();
|
|
$(ref.gui_objects.messagebody).addClass('mailvelope');
|
|
|
|
// on success we can remove encrypted part from the attachments list
|
|
if (ref.env.pgp_mime_part)
|
|
$('#attach' + ref.env.pgp_mime_part).remove();
|
|
|
|
setTimeout(function() { $(window).resize(); }, 10);
|
|
}, error_handler);
|
|
*/
|
|
/**
|
|
* Creates an iframe with an editor for a new encrypted mail.
|
|
* The iframe will be injected into the container identified by selector.
|
|
* https://mailvelope.github.io/mailvelope/Editor.html
|
|
*/
|
|
/*
|
|
mailvelope.createEditorContainer(selector, this.mailvelopeKeyring, {
|
|
quota: 20480, // mail content (text + attachments) limit in kilobytes (default: 20480)
|
|
signMsg: false, // if true then the mail will be signed (default: false)
|
|
armoredDraft: '', // Ascii Armored PGP Text Block
|
|
a PGP message, signed and encrypted with the default key of the user, will be used to restore a draft in the editor
|
|
The armoredDraft parameter can't be combined with the parameters: predefinedText, quotedMail... parameters, keepAttachments
|
|
predefinedText: '', // text that will be added to the editor
|
|
quotedMail: '', // Ascii Armored PGP Text Block mail that should be quoted
|
|
quotedMailIndent: true, // if true the quoted mail will be indented (default: true)
|
|
quotedMailHeader: '', // header to be added before the quoted mail
|
|
keepAttachments: false, // add attachments of quotedMail to editor (default: false)
|
|
}).then(editor => {
|
|
editor.editorId;
|
|
}, error_handler)
|
|
*/
|
|
|
|
/**
|
|
* Creates an iframe to display the keyring settings.
|
|
* The iframe will be injected into the container identified by selector.
|
|
*/
|
|
/*
|
|
mailvelope.createSettingsContainer(selector [, keyring], options)
|
|
*/
|
|
|
|
/**
|
|
* Returns headers that should be added to an outgoing email.
|
|
* So far this is only the autocrypt header.
|
|
*/
|
|
/*
|
|
this.mailvelopeKeyring.additionalHeadersForOutgoingEmail(headers)
|
|
*/
|
|
|
|
/*
|
|
this.mailvelopeKeyring.addSyncHandler(syncHandlerObj)
|
|
*/
|
|
/*
|
|
this.mailvelopeKeyring.createKeyGenContainer(selector, {
|
|
// userIds: [],
|
|
keySize: 4096
|
|
})
|
|
*/
|
|
|
|
/*
|
|
exportOwnPublicKey(emailAddr).then(<AsciiArmored, Error>)
|
|
|
|
this.mailvelopeKeyring.hasPrivateKey(fingerprint)
|
|
|
|
this.mailvelopeKeyring.importPublicKey(armored)
|
|
*/
|
|
|
|
};
|