byGalax
eb8f9857ff
Backup / restore flow: - deviceBackup.ts: v2 format wrapping userId + deviceId + privateKey in an encrypted JSON payload so restore can re-seed localStorage, vault, and reattach to the existing server-side device row without provisioning a new one (conv-key bundles stay valid, no "awaiting key" state) - shared/auth: restoreDeviceFromServerRecord — verifies session.user.id matches the backup's userId, confirms the server device row still exists, then writes the private key into the local secret store - BackupExportDialog — passphrase + confirm, generates portable string, copy + download .txt - DeviceRestore — textarea + passphrase → seeds vault + writes deviceId cache, treats this install as the original device - DevicePage now has tabs "Neu einrichten" / "Backup wiederherstellen" - BackupPromptBanner — post-registration nudge, reads sessionStorage signal from fresh provisions and persists "never-ask-again" in localStorage so it stops nagging - SettingsPage backup section: uses the new dialog; removes the dangerous in-place key import (restore now lives in the device flow) Username casing: - Migration 20260420000002 drops lower() from the handle_new_user trigger and widens the regex to [A-Za-z0-9_]. profiles.username is citext so uniqueness + lookups stay case-insensitive regardless of stored casing - Shared auth: trim() only, no toLowerCase on signup/lookups/search. ilike handles CI anyway and citext makes client normalisation redundant - AuthPage regex + input preserve case, FriendsPage search preserves case - i18n (de+en): updated username_hint / username_invalid / ERR_USERNAME_INVALID to reflect the new rule Quick wins: - React Router v7 future flags (v7_startTransition + v7_relativeSplatPath) set on BrowserRouter — silences the upgrade warning - appUpdates.checkForUpdate: swallow benign network/fetch/"could not fetch valid release JSON" cases silently instead of console spam - osNotify: persist an "asked" marker in localStorage so the permission prompt only fires once per install (OS already persists the answer, but the plugin re-queries loudly otherwise)
74 lines
2.2 KiB
TypeScript
74 lines
2.2 KiB
TypeScript
import {
|
|
deviceIdStorageKey,
|
|
listOwnDevices,
|
|
loadDevicePrivateKey,
|
|
provisionNewDevice,
|
|
touchDeviceLastSeen,
|
|
type DeviceRecord,
|
|
} from '@chat-app/shared/auth';
|
|
import type { DevicePlatform } from '@chat-app/shared/supabase';
|
|
|
|
import { devLocalSecretStore } from './secretStore';
|
|
import { supabase } from './supabase';
|
|
|
|
export function detectDesktopPlatform(): DevicePlatform {
|
|
const ua =
|
|
typeof navigator !== 'undefined' && typeof navigator.userAgent === 'string'
|
|
? navigator.userAgent.toLowerCase()
|
|
: '';
|
|
if (ua.includes('mac')) return 'macos';
|
|
if (ua.includes('win')) return 'windows';
|
|
return 'linux';
|
|
}
|
|
|
|
export function readLocalDeviceId(userId: string): string | null {
|
|
return window.localStorage.getItem(deviceIdStorageKey(userId));
|
|
}
|
|
|
|
export function writeLocalDeviceId(userId: string, deviceId: string): void {
|
|
window.localStorage.setItem(deviceIdStorageKey(userId), deviceId);
|
|
}
|
|
|
|
export function clearLocalDeviceId(userId: string): void {
|
|
window.localStorage.removeItem(deviceIdStorageKey(userId));
|
|
}
|
|
|
|
// Look up the current install's device record. Returns null when either:
|
|
// - no device id is cached locally, or
|
|
// - the cached id was deleted server-side (e.g. wiped from Studio).
|
|
// In both cases the UI should prompt the user to register a fresh device.
|
|
export async function findExistingDevice(userId: string): Promise<DeviceRecord | null> {
|
|
const cachedId = readLocalDeviceId(userId);
|
|
if (!cachedId) return null;
|
|
|
|
const all = await listOwnDevices(supabase);
|
|
const hit = all.find((d) => d.id === cachedId) ?? null;
|
|
if (!hit) return null;
|
|
|
|
const priv = await loadDevicePrivateKey(devLocalSecretStore, userId, hit.id);
|
|
if (!priv) {
|
|
// Server row exists but we lost the private key locally — treat as fresh install.
|
|
return null;
|
|
}
|
|
|
|
void touchDeviceLastSeen(supabase, hit.id).catch(() => {
|
|
/* non-fatal */
|
|
});
|
|
return hit;
|
|
}
|
|
|
|
export async function registerCurrentDevice(params: {
|
|
userId: string;
|
|
name: string;
|
|
}): Promise<DeviceRecord> {
|
|
const device = await provisionNewDevice({
|
|
client: supabase,
|
|
secretStore: devLocalSecretStore,
|
|
userId: params.userId,
|
|
name: params.name,
|
|
platform: detectDesktopPlatform(),
|
|
});
|
|
writeLocalDeviceId(params.userId, device.id);
|
|
return device;
|
|
}
|