Mohamed Boudra
6aff4b3f10
Implements E2EE for relay connections only, keeping direct connections and CLI plaintext. The relay acts as a dumb byte forwarder with no access to decrypted messages. Key changes: - Daemon keypair persistence in $PASEO_HOME/daemon-keypair.json - Encrypted relay transport using ECDH P-256 + AES-256-GCM - Client-side E2EE using daemon's public key from pairing offer - WebCrypto compatibility for React Native
63 lines
1.5 KiB
TypeScript
63 lines
1.5 KiB
TypeScript
import { useEffect, useMemo } from "react";
|
|
import { AppState } from "react-native";
|
|
import { DaemonClient } from "@server/client/daemon-client";
|
|
import { createTauriWebSocketTransportFactory } from "@/utils/tauri-daemon-transport";
|
|
|
|
function runDaemonRequest(label: string, promise: Promise<unknown>): void {
|
|
void promise.catch((error) => {
|
|
console.warn(`[DaemonClient] ${label} failed`, error);
|
|
});
|
|
}
|
|
|
|
type DaemonClientOptions = {
|
|
daemonPublicKeyB64?: string;
|
|
};
|
|
|
|
export function useDaemonClient(
|
|
url: string,
|
|
options: DaemonClientOptions = {}
|
|
): DaemonClient {
|
|
const client = useMemo(
|
|
() => {
|
|
const tauriTransportFactory = createTauriWebSocketTransportFactory();
|
|
return new DaemonClient({
|
|
url,
|
|
suppressSendErrors: true,
|
|
...(tauriTransportFactory
|
|
? { transportFactory: tauriTransportFactory }
|
|
: {}),
|
|
e2ee: options.daemonPublicKeyB64
|
|
? {
|
|
enabled: true,
|
|
daemonPublicKeyB64: options.daemonPublicKeyB64,
|
|
}
|
|
: undefined,
|
|
});
|
|
},
|
|
[options.daemonPublicKeyB64, url]
|
|
);
|
|
|
|
useEffect(() => {
|
|
runDaemonRequest("connect", client.connect());
|
|
|
|
return () => {
|
|
runDaemonRequest("close", client.close());
|
|
};
|
|
}, [client]);
|
|
|
|
useEffect(() => {
|
|
const subscription = AppState.addEventListener("change", (nextState) => {
|
|
if (nextState !== "active") {
|
|
return;
|
|
}
|
|
client.ensureConnected();
|
|
});
|
|
|
|
return () => {
|
|
subscription.remove();
|
|
};
|
|
}, [client]);
|
|
|
|
return client;
|
|
}
|