Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Secure backend socket.io from other applications that can access localhost i.e. browser #1940

Merged
merged 35 commits into from
Nov 9, 2023
Merged

Secure backend socket.io from other applications that can access localhost i.e. browser #1940

Show file tree
Hide file tree
Changes from 16 commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
3dbbae3
secure socket IO connection with token and origin, transform token fr…
Kacper-RF Oct 9, 2023
8913c3d
add JWT
Kacper-RF Oct 10, 2023
a02a23e
not throw error on missing auth token
Kacper-RF Oct 10, 2023
85f69b5
send 401 to unauthorized user
Kacper-RF Oct 10, 2023
7701605
generate random secret
Kacper-RF Oct 11, 2023
6ade751
use basic auth instead of JWT
Kacper-RF Oct 11, 2023
8276fef
auth tests
Kacper-RF Oct 11, 2023
7f0af19
WIP: secure sockets mobile
vinkabuki Oct 12, 2023
22cc0e8
fix:lint
Kacper-RF Oct 13, 2023
c0153f0
Pass socketioSecret to backend
vinkabuki Oct 16, 2023
4cb88c2
Add authorization headers to socketio android notifications client
vinkabuki Oct 16, 2023
32b564a
Merge branch 'bug/114' of github.com:TryQuiet/quiet into bug/114
vinkabuki Oct 16, 2023
8f476a2
Secure socketIO connection on iOS
vinkabuki Oct 17, 2023
140801b
Use random string for securing socketIO pn iOS
vinkabuki Oct 17, 2023
3eaf916
Extend lastKnownPort to lastKnownSocketIOData on android
vinkabuki Oct 18, 2023
f9fafbd
Handle socketIOSecret for iOS lifecycle event
vinkabuki Oct 18, 2023
bedc2e3
Code quality fixes
vinkabuki Oct 18, 2023
c1132ce
Create Utils class on iOS and move relevant methods there
vinkabuki Oct 19, 2023
47199f5
feat: getRandomValues and concept for validating options on backend
Kacper-RF Oct 26, 2023
2cba36d
fix: generating secret
Kacper-RF Oct 27, 2023
6d8131d
feat: use IPC and Redux store for transfering socketIOSecret
Kacper-RF Oct 27, 2023
130469a
test: add socketIOSecret selector test
Kacper-RF Oct 27, 2023
426c52b
test: add startConnectionSaga test
Kacper-RF Oct 27, 2023
d758341
Use secure random for socketio secret
vinkabuki Oct 30, 2023
96b97db
fix: use secure crypto for ios socketio secret
vinkabuki Oct 30, 2023
9caf372
fix: add Utils file to the project
siepra Oct 30, 2023
6107fd6
Merge branch 'master' into bug/114
Kacper-RF Oct 31, 2023
15885fe
Merge branch 'bug/114' of github.com:TryQuiet/quiet into bug/114
Kacper-RF Oct 31, 2023
23bf54d
fix: check pkijs
Kacper-RF Nov 2, 2023
7444d0a
fix: revert changes with pkijs
Kacper-RF Nov 2, 2023
cae556a
fix:change order
Kacper-RF Nov 2, 2023
dcfbeea
fix: generate secret after setEngine
Kacper-RF Nov 2, 2023
1c2bbd0
fix: backwards test for prod versions
Kacper-RF Nov 2, 2023
f0ccff7
fix: remove peculiar/webcrypto from common
Kacper-RF Nov 2, 2023
6b0e9d9
fix: file name
Kacper-RF Nov 8, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/check-visual-regression.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:
- name: "Print OS"
run: echo ${{ matrix.os }}

- uses: actions/checkout@v2
- uses: actions/checkout@v4
with:
fetch-depth: 0 # Required to retrieve git history

Expand Down
Loading
Loading