/* Copyright 2018, 2019 New Vector Ltd Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ import React from 'react'; import sdk from '../../../../index'; import MatrixClientPeg from '../../../../MatrixClientPeg'; import { scorePassword } from '../../../../utils/PasswordScorer'; import FileSaver from 'file-saver'; import { _t } from '../../../../languageHandler'; const PHASE_PASSPHRASE = 0; const PHASE_PASSPHRASE_CONFIRM = 1; const PHASE_SHOWKEY = 2; const PHASE_KEEPITSAFE = 3; const PHASE_BACKINGUP = 4; const PHASE_DONE = 5; const PHASE_OPTOUT_CONFIRM = 6; const PASSWORD_MIN_SCORE = 4; // So secure, many characters, much complex, wow, etc, etc. const PASSPHRASE_FEEDBACK_DELAY = 500; // How long after keystroke to offer passphrase feedback, ms. // XXX: copied from ShareDialog: factor out into utils function selectText(target) { const range = document.createRange(); range.selectNodeContents(target); const selection = window.getSelection(); selection.removeAllRanges(); selection.addRange(range); } /** * Walks the user through the process of creating an e2e key backup * on the server. */ export default React.createClass({ getInitialState: function() { return { phase: PHASE_PASSPHRASE, passPhrase: '', passPhraseConfirm: '', copied: false, downloaded: false, zxcvbnResult: null, setPassPhrase: false, }; }, componentWillMount: function() { this._recoveryKeyNode = null; this._keyBackupInfo = null; this._setZxcvbnResultTimeout = null; }, componentWillUnmount: function() { if (this._setZxcvbnResultTimeout !== null) { clearTimeout(this._setZxcvbnResultTimeout); } }, _collectRecoveryKeyNode: function(n) { this._recoveryKeyNode = n; }, _onCopyClick: function() { selectText(this._recoveryKeyNode); const successful = document.execCommand('copy'); if (successful) { this.setState({ copied: true, phase: PHASE_KEEPITSAFE, }); } }, _onDownloadClick: function() { const blob = new Blob([this._keyBackupInfo.recovery_key], { type: 'text/plain;charset=us-ascii', }); FileSaver.saveAs(blob, 'recovery-key.txt'); this.setState({ downloaded: true, phase: PHASE_KEEPITSAFE, }); }, _createBackup: async function() { this.setState({ phase: PHASE_BACKINGUP, error: null, }); let info; try { info = await MatrixClientPeg.get().createKeyBackupVersion( this._keyBackupInfo, ); await MatrixClientPeg.get().scheduleAllGroupSessionsForBackup(); this.setState({ phase: PHASE_DONE, }); } catch (e) { console.log("Error creating key backup", e); // TODO: If creating a version succeeds, but backup fails, should we // delete the version, disable backup, or do nothing? If we just // disable without deleting, we'll enable on next app reload since // it is trusted. if (info) { MatrixClientPeg.get().deleteKeyBackupVersion(info.version); } this.setState({ error: e, }); } }, _onCancel: function() { this.props.onFinished(false); }, _onDone: function() { this.props.onFinished(true); }, _onOptOutClick: function() { this.setState({phase: PHASE_OPTOUT_CONFIRM}); }, _onSetUpClick: function() { this.setState({phase: PHASE_PASSPHRASE}); }, _onSkipPassPhraseClick: async function() { this._keyBackupInfo = await MatrixClientPeg.get().prepareKeyBackupVersion(); this.setState({ copied: false, downloaded: false, phase: PHASE_SHOWKEY, }); }, _onPassPhraseNextClick: function() { this.setState({phase: PHASE_PASSPHRASE_CONFIRM}); }, _onPassPhraseKeyPress: async function(e) { if (e.key === 'Enter') { // If we're waiting for the timeout before updating the result at this point, // skip ahead and do it now, otherwise we'll deny the attempt to proceed // even if the user entered a valid passphrase if (this._setZxcvbnResultTimeout !== null) { clearTimeout(this._setZxcvbnResultTimeout); this._setZxcvbnResultTimeout = null; await new Promise((resolve) => { this.setState({ zxcvbnResult: scorePassword(this.state.passPhrase), }, resolve); }); } if (this._passPhraseIsValid()) { this._onPassPhraseNextClick(); } } }, _onPassPhraseConfirmNextClick: async function() { this._keyBackupInfo = await MatrixClientPeg.get().prepareKeyBackupVersion(this.state.passPhrase); this.setState({ setPassPhrase: true, copied: false, downloaded: false, phase: PHASE_SHOWKEY, }); }, _onPassPhraseConfirmKeyPress: function(e) { if (e.key === 'Enter' && this.state.passPhrase === this.state.passPhraseConfirm) { this._onPassPhraseConfirmNextClick(); } }, _onSetAgainClick: function() { this.setState({ passPhrase: '', passPhraseConfirm: '', phase: PHASE_PASSPHRASE, zxcvbnResult: null, }); }, _onKeepItSafeBackClick: function() { this.setState({ phase: PHASE_SHOWKEY, }); }, _onPassPhraseChange: function(e) { this.setState({ passPhrase: e.target.value, }); if (this._setZxcvbnResultTimeout !== null) { clearTimeout(this._setZxcvbnResultTimeout); } this._setZxcvbnResultTimeout = setTimeout(() => { this._setZxcvbnResultTimeout = null; this.setState({ // precompute this and keep it in state: zxcvbn is fast but // we use it in a couple of different places so no point recomputing // it unnecessarily. zxcvbnResult: scorePassword(this.state.passPhrase), }); }, PASSPHRASE_FEEDBACK_DELAY); }, _onPassPhraseConfirmChange: function(e) { this.setState({ passPhraseConfirm: e.target.value, }); }, _passPhraseIsValid: function() { return this.state.zxcvbnResult && this.state.zxcvbnResult.score >= PASSWORD_MIN_SCORE; }, _renderPhasePassPhrase: function() { const DialogButtons = sdk.getComponent('views.elements.DialogButtons'); let strengthMeter; let helpText; if (this.state.zxcvbnResult) { if (this.state.zxcvbnResult.score >= PASSWORD_MIN_SCORE) { helpText = _t("Great! This passphrase looks strong enough."); } else { const suggestions = []; for (let i = 0; i < this.state.zxcvbnResult.feedback.suggestions.length; ++i) { suggestions.push(
{_t( "Warning: you should only set up key backup from a trusted computer.", {}, { b: sub => {sub} }, )}
{_t( "We'll store an encrypted copy of your keys on our server. " + "Protect your backup with a passphrase to keep it secure.", )}
{_t("For maximum security, this should be different from your account password.")}
{_t( "Please enter your passphrase a second time to confirm.", )}
{_t( "Your recovery key is a safety net - you can use it to restore " + "access to your encrypted messages if you forget your passphrase.", )}
{_t( "Keep your recovery key somewhere very secure, like a password manager (or a safe)", )}
{bodyText}
{this._keyBackupInfo.recovery_key}
{_t( "Your keys are being backed up (the first backup could take a few minutes).", )}
{_t("Unable to create key backup")}