/* Copyright 2024 New Vector Ltd. Copyright 2019, 2020 The Matrix.org Foundation C.I.C. Copyright 2018, 2019 New Vector Ltd SPDX-License-Identifier: AGPL-3.0-only OR GPL-3.0-only Please see LICENSE files in the repository root for full details. */ import React, { type JSX } from "react"; import { logger } from "matrix-js-sdk/src/logger"; import { MatrixClientPeg } from "../../../../MatrixClientPeg"; import { _t } from "../../../../languageHandler"; import { accessSecretStorage, withSecretStorageKeyCache } from "../../../../SecurityManager"; import Spinner from "../../../../components/views/elements/Spinner"; import BaseDialog from "../../../../components/views/dialogs/BaseDialog"; import DialogButtons from "../../../../components/views/elements/DialogButtons"; enum Phase { BackingUp = "backing_up", Done = "done", } interface IProps { onFinished(done?: boolean): void; } interface IState { phase: Phase; passPhrase: string; passPhraseValid: boolean; passPhraseConfirm: string; copied: boolean; downloaded: boolean; error?: boolean; } /** * Walks the user through the process of setting up e2e key backups to a new backup, and storing the decryption key in * SSSS. * * Uses {@link accessSecretStorage}, which means that if 4S is not already configured, it will be bootstrapped (which * involves displaying an {@link CreateSecretStorageDialog} so the user can enter a passphrase and/or download the 4S * key). */ export default class CreateKeyBackupDialog extends React.PureComponent { public constructor(props: IProps) { super(props); this.state = { phase: Phase.BackingUp, passPhrase: "", passPhraseValid: false, passPhraseConfirm: "", copied: false, downloaded: false, }; } public componentDidMount(): void { this.createBackup(); } private createBackup = async (): Promise => { this.setState({ error: undefined, }); const cli = MatrixClientPeg.safeGet(); try { // Check if 4S already set up const secretStorageAlreadySetup = await cli.secretStorage.hasKey(); if (!secretStorageAlreadySetup) { // bootstrap secret storage; that will also create a backup version await accessSecretStorage(async (): Promise => { // do nothing, all is now set up correctly }); } else { await withSecretStorageKeyCache(async () => { const crypto = cli.getCrypto(); if (!crypto) { throw new Error("End-to-end encryption is disabled - unable to create backup."); } // Before we reset the backup, let's make sure we can access secret storage, to // reduce the chance of us getting into a broken state where we have an outdated // secret in secret storage. // `SecretStorage.get` will ask the user to enter their passphrase/key if necessary; // it will then be cached for the actual backup reset operation. await cli.secretStorage.get("m.megolm_backup.v1"); // We now know we can store the new backup key in secret storage, so it is safe to // go ahead with the reset. await crypto.resetKeyBackup(); }); } this.setState({ phase: Phase.Done, }); } catch (e) { logger.error("Error creating key backup", e); // TODO: If creating a version succeeds, but backup fails, should we // delete the version, disable backup, or do nothing? If we just // disable without deleting, we'll enable on next app reload since // it is trusted. this.setState({ error: true, }); } }; private onCancel = (): void => { this.props.onFinished(false); }; private onDone = (): void => { this.props.onFinished(true); }; private renderBusyPhase(): JSX.Element { return (
); } private renderPhaseDone(): JSX.Element { return (

{_t("settings|key_backup|backup_in_progress")}

); } private titleForPhase(phase: Phase): string { switch (phase) { case Phase.BackingUp: return _t("settings|key_backup|backup_starting"); case Phase.Done: return _t("settings|key_backup|backup_success"); default: return _t("settings|key_backup|create_title"); } } public render(): React.ReactNode { let content; if (this.state.error) { content = (

{_t("settings|key_backup|cannot_create_backup")}

); } else { switch (this.state.phase) { case Phase.BackingUp: content = this.renderBusyPhase(); break; case Phase.Done: content = this.renderPhaseDone(); break; } } return (
{content}
); } }