Make trust level feed entries private

Encrypting entries related to trust level

Author: adgohar

android/tinySSB/app/src/main/assets/web/prod/contacts.js

@@ -220,7 +220,12 @@ function show_contact_details(id) {
 function changeTrustLevel(contactID, value) {
     console.log("Supposed to set contact " + contactID + "'s Trust Level to " + value);
     let ch = tremola.chats[recps2nm([myId])];
-    let tips = JSON.stringify(ch.timeline.get_tips())
+    let tips = JSON.stringify([])
+
+    if (typeof ch.timeline.get_tips === 'function') {
+        tips = JSON.stringify(ch.timeline.get_tips())
+    }
+
     console.log("Tips: " + JSON.stringify(tips))
     backend("contacts:setTrust " + contactID + " " + value + " " + tips);
 }

android/tinySSB/app/src/main/assets/web/tremola.js

@@ -550,38 +550,6 @@ function b2f_new_event(e) { // incoming SSB log event: we get map with three ent
     }
 
     if (e.public) {
-        if (e.public[0] == 'TRT' && e.header.fid == myId) {
-            ch = tremola.chats[recps2nm([myId])];
-
-            load_chat_list();
-            if (!(ch.timeline instanceof Timeline))
-                ch.timeline = Timeline.fromJSON(ch.timeline)
-
-            // console.log("new post 1 ", ch)
-            if (!(e.header.ref in ch.posts)) { // new post
-                var a = e.public;
-                var p = {
-                    "key": e.header.ref, "from": e.header.fid, "body": "Set contact: " + a[2] + "'s trust level to " + a[3],
-                    "when": a[4] * 1000, "prev": a[1]
-                };
-                // console.log("new post 2 ", JSON.stringify(p))
-                // console.log("time: ", a[3])
-                ch["posts"][e.header.ref] = p;
-                // console.log(`chat add tips ${a[1]}`)
-                ch.timeline.add(e.header.ref, a[1])
-                if (ch["touched"] < e.header.tst)
-                    ch["touched"] = e.header.tst
-                if (curr_scenario == "posts" && curr_chat == conv_name) {
-                    load_chat(conv_name); // reload all messages (not very efficient ...)
-                    ch.lastRead = Object.keys(ch.posts).length; // Date.now();
-                }
-                set_chats_badge(conv_name)
-            } else {
-                console.log(`post ${e.header.ref} known already?`)
-            }
-            // if (curr_scenario == "chats") // the updated conversation could bubble up
-            load_chat_list();
-        }
         if (e.public[0] == 'TAV') { // text and voice
             // console.log("new post 0 ", tremola)
             var conv_name = "ALL";
@@ -654,6 +622,38 @@ function b2f_new_event(e) { // incoming SSB log event: we get map with three ent
     if (e.confid) {
         var a = e.confid;
         var rcpts = null;
+        if (e.confid[0] == 'TRT') {
+            ch = tremola.chats[recps2nm([myId])];
+
+            load_chat_list();
+            if (!(ch.timeline instanceof Timeline))
+                ch.timeline = Timeline.fromJSON(ch.timeline)
+
+            // console.log("new post 1 ", ch)
+            if (!(e.header.ref in ch.posts)) { // new post
+                var a = e.confid;
+                var p = {
+                    "key": e.header.ref, "from": e.header.fid, "body": "Set contact: " + a[2] + "'s trust level to " + a[3],
+                    "when": a[4] * 1000, "prev": a[1]
+                };
+                // console.log("new post 2 ", JSON.stringify(p))
+                // console.log("time: ", a[3])
+                ch["posts"][e.header.ref] = p;
+                // console.log(`chat add tips ${a[1]}`)
+                ch.timeline.add(e.header.ref, a[1])
+                if (ch["touched"] < e.header.tst)
+                    ch["touched"] = e.header.tst
+                if (curr_scenario == "posts" && curr_chat == conv_name) {
+                    load_chat(conv_name); // reload all messages (not very efficient ...)
+                    ch.lastRead = Object.keys(ch.posts).length; // Date.now();
+                }
+                set_chats_badge(conv_name)
+            } else {
+                console.log(`post ${e.header.ref} known already?`)
+            }
+            // if (curr_scenario == "chats") // the updated conversation could bubble up
+            load_chat_list();
+        }
         if (a[0] == 'TAV')
             rcpts = a[5];
         else if (a[0] == 'DLV' || a[0] == 'ACK')

android/tinySSB/app/src/main/java/nz/scuttlebutt/tremolavossbol/WebAppInterface.kt

@@ -485,10 +485,31 @@ class WebAppInterface(val act: MainActivity, val webView: WebView) {
         Bipf.list_append(lst, tst)
         Bipf.list_append(lst, Bipf.mkNone()) //placeholder for voice
 
-        val body = Bipf.encode(lst)
-        if (body != null) {
-            act.tinyNode.publish_public_content(body)
+        //encrypt the entry such that only I can read it
+        val recps = Bipf.mkList()
+        val keys: MutableList<ByteArray> = mutableListOf()
+        val me = act.idStore.identity.toRef()
+        Bipf.list_append(recps, Bipf.mkString(me))
+        keys.add(me.deRef())
+        Bipf.list_append(lst, recps)
+
+        val body_clear = Bipf.encode(lst)
+        val encrypted = body_clear!!.let { act.idStore.identity.encryptPrivateMessage(it, keys) }
+
+        val body_encr = Bipf.encode(Bipf.mkBytes(encrypted))
+
+        //test if entry can be decrypted
+        val clear = encrypted?.let { act.idStore.identity.decryptPrivateMessage(it) }
+        if (clear != null) {
+            val clearList = Bipf.decode(clear)
+            if (clearList != null) {
+                val clearJson = Bipf.bipf_list2JSON(clearList)
+                Log.d("trust_contact", clearJson.toString())
+            }
         }
+
+        if (body_encr != null)
+            act.tinyNode.publish_public_content(body_encr)
         reloadContactsTrustLevel()
     }
 
@@ -501,11 +522,23 @@ class WebAppInterface(val act: MainActivity, val webView: WebView) {
             if (lastSeq != null) {
                 for (i in lastSeq downTo 1) {
                     var entry = userFeed.read_content(lastSeq)
-                    val entryType = entry?.let { getFromEntry(it, 0) }
+                    //decode the entry using Bipf decode
+                    val decodedEntry = entry?.let { Bipf.decode(it) }
+                    Log.d("decodedEntry", decodedEntry.toString())
+
+                    //get bytes from the decoded entry
+                    val entryBytes = decodedEntry?.let {it.getBytes()}
+                    Log.d("entryBytes", entryBytes.toString())
+
+                    //decrypt the bytes to get the clear text
+                    val clear = entryBytes?.let { act.idStore.identity.decryptPrivateMessage(it) }
+                    Log.d("clear", clear.toString())
+
+                    val entryType = clear?.let { getFromEntry(it, 0) }
                     if (entryType == "TRT") {
-                        if (entry is ByteArray) {
-                            val contactID = getFromEntry(entry, 2)
-                            val trustLevel = getFromEntry(entry, 3)
+                        if (clear is ByteArray) {
+                            val contactID = getFromEntry(clear, 2)
+                            val trustLevel = getFromEntry(clear, 3)
                             if (contactID != null && trustLevel != null) {
                                 contactsTrustLevel[contactID.toString()] = trustLevel.toString().toInt()
                             }
@@ -663,6 +696,8 @@ class WebAppInterface(val act: MainActivity, val webView: WebView) {
                     hdr.put("fid", "@" + fid.toBase64() + ".ed25519")
                     hdr.put("ref", mid.toBase64())
                     hdr.put("seq", seq)
+                    Log.d("decrypted log entry", hdr.toString())
+                    Log.d("decrypted log entry", param.toString())
                     return "{header:${hdr.toString()}, confid:${param.toString()}}"
                 }
             }