Tovi Jaeschke-Rogers
4 years ago
17 changed files with 1294 additions and 104 deletions
Split View
Diff Options
-
+107 -0Backend/Api/Auth/Login.go
-
+79 -0Backend/Api/Auth/Session.go
-
+38 -16Backend/Api/Auth/Signup.go
-
+1 -1Backend/Api/Routes.go
-
+2 -2Backend/Models/Users.go
-
+2 -1mobile/android/app/src/main/AndroidManifest.xml
-
+0 -75mobile/lib/authentication/unauthenticated_landing.dart
-
+2 -2mobile/lib/main.dart
-
+138 -0mobile/lib/utils/encryption/aes_helper.dart
-
+257 -0mobile/lib/utils/encryption/rsa_key_helper.dart
-
+22 -0mobile/lib/utils/storage/encryption_keys.dart
-
+217 -0mobile/lib/views/authentication/login.dart
-
+74 -5mobile/lib/views/authentication/signup.dart
-
+85 -0mobile/lib/views/authentication/unauthenticated_landing.dart
-
+112 -0mobile/lib/views/main/conversations_list.dart
-
+154 -1mobile/pubspec.lock
-
+4 -1mobile/pubspec.yaml
+ 107
- 0
Backend/Api/Auth/Login.go
View File
| @ -0,0 +1,107 @@ | |||
| package Auth | |||
| import ( | |||
| "encoding/json" | |||
| "net/http" | |||
| "time" | |||
| "git.tovijaeschke.xyz/tovi/Envelope/Backend/Database" | |||
| "git.tovijaeschke.xyz/tovi/Envelope/Backend/Models" | |||
| "github.com/gofrs/uuid" | |||
| ) | |||
| type Credentials struct { | |||
| Username string `json:"username"` | |||
| Password string `json:"password"` | |||
| } | |||
| type loginResponse struct { | |||
| Status string `json:"status"` | |||
| Message string `json:"message"` | |||
| AsymmetricPublicKey string `json:"asymmetric_public_key"` | |||
| AsymmetricPrivateKey string `json:"asymmetric_private_key"` | |||
| } | |||
| func makeLoginResponse(w http.ResponseWriter, code int, message, pubKey, privKey string) { | |||
| var ( | |||
| status string = "error" | |||
| returnJson []byte | |||
| err error | |||
| ) | |||
| if code > 200 && code < 300 { | |||
| status = "success" | |||
| } | |||
| returnJson, err = json.MarshalIndent(loginResponse{ | |||
| Status: status, | |||
| Message: message, | |||
| AsymmetricPublicKey: pubKey, | |||
| AsymmetricPrivateKey: privKey, | |||
| }, "", " ") | |||
| if err != nil { | |||
| http.Error(w, "Error", http.StatusInternalServerError) | |||
| w.WriteHeader(http.StatusInternalServerError) | |||
| return | |||
| } | |||
| // Return updated json | |||
| w.WriteHeader(code) | |||
| w.Write(returnJson) | |||
| } | |||
| func Login(w http.ResponseWriter, r *http.Request) { | |||
| var ( | |||
| creds Credentials | |||
| userData Models.User | |||
| sessionToken uuid.UUID | |||
| expiresAt time.Time | |||
| err error | |||
| ) | |||
| err = json.NewDecoder(r.Body).Decode(&creds) | |||
| if err != nil { | |||
| makeLoginResponse(w, http.StatusInternalServerError, "An error occurred", "", "") | |||
| return | |||
| } | |||
| userData, err = Database.GetUserByUsername(creds.Username) | |||
| if err != nil { | |||
| makeLoginResponse(w, http.StatusUnauthorized, "An error occurred", "", "") | |||
| return | |||
| } | |||
| if !CheckPasswordHash(creds.Password, userData.Password) { | |||
| makeLoginResponse(w, http.StatusUnauthorized, "An error occurred", "", "") | |||
| return | |||
| } | |||
| sessionToken, err = uuid.NewV4() | |||
| if err != nil { | |||
| makeLoginResponse(w, http.StatusInternalServerError, "An error occurred", "", "") | |||
| return | |||
| } | |||
| expiresAt = time.Now().Add(1 * time.Hour) | |||
| Sessions[sessionToken.String()] = Session{ | |||
| UserID: userData.ID.String(), | |||
| Username: userData.Username, | |||
| Expiry: expiresAt, | |||
| } | |||
| http.SetCookie(w, &http.Cookie{ | |||
| Name: "session_token", | |||
| Value: sessionToken.String(), | |||
| Expires: expiresAt, | |||
| }) | |||
| makeLoginResponse( | |||
| w, | |||
| http.StatusOK, | |||
| "Successfully logged in", | |||
| userData.AsymmetricPublicKey, | |||
| userData.AsymmetricPrivateKey, | |||
| ) | |||
| } | |||
+ 79
- 0
Backend/Api/Auth/Session.go
View File
| @ -0,0 +1,79 @@ | |||
| package Auth | |||
| import ( | |||
| "errors" | |||
| "net/http" | |||
| "time" | |||
| "git.tovijaeschke.xyz/tovi/Envelope/Backend/Database" | |||
| "git.tovijaeschke.xyz/tovi/Envelope/Backend/Models" | |||
| ) | |||
| var ( | |||
| Sessions = map[string]Session{} | |||
| ) | |||
| type Session struct { | |||
| UserID string | |||
| Username string | |||
| Expiry time.Time | |||
| } | |||
| func (s Session) IsExpired() bool { | |||
| return s.Expiry.Before(time.Now()) | |||
| } | |||
| func CheckCookie(r *http.Request) (Session, error) { | |||
| var ( | |||
| c *http.Cookie | |||
| sessionToken string | |||
| userSession Session | |||
| exists bool | |||
| err error | |||
| ) | |||
| c, err = r.Cookie("session_token") | |||
| if err != nil { | |||
| return userSession, err | |||
| } | |||
| sessionToken = c.Value | |||
| // We then get the session from our session map | |||
| userSession, exists = Sessions[sessionToken] | |||
| if !exists { | |||
| return userSession, errors.New("Cookie not found") | |||
| } | |||
| // If the session is present, but has expired, we can delete the session, and return | |||
| // an unauthorized status | |||
| if userSession.IsExpired() { | |||
| delete(Sessions, sessionToken) | |||
| return userSession, errors.New("Cookie expired") | |||
| } | |||
| return userSession, nil | |||
| } | |||
| func CheckCookieCurrentUser(w http.ResponseWriter, r *http.Request) (Models.User, error) { | |||
| var ( | |||
| userSession Session | |||
| userData Models.User | |||
| err error | |||
| ) | |||
| userSession, err = CheckCookie(r) | |||
| if err != nil { | |||
| return userData, err | |||
| } | |||
| userData, err = Database.GetUserById(userSession.UserID) | |||
| if err != nil { | |||
| return userData, err | |||
| } | |||
| if userData.ID.String() != userSession.UserID { | |||
| return userData, errors.New("Is not current user") | |||
| } | |||
| return userData, nil | |||
| } | |||
+ 38
- 16
Backend/Api/Auth/Signup.go
View File
+ 1
- 1
Backend/Api/Routes.go
View File
+ 2
- 2
Backend/Models/Users.go
View File
+ 2
- 1
mobile/android/app/src/main/AndroidManifest.xml
View File
+ 0
- 75
mobile/lib/authentication/unauthenticated_landing.dart
View File
| @ -1,75 +0,0 @@ | |||
| import 'package:flutter/material.dart'; | |||
| import 'package:font_awesome_flutter/font_awesome_flutter.dart'; | |||
| import './signup.dart'; | |||
| class UnauthenticatedLandingWidget extends StatefulWidget { | |||
| const UnauthenticatedLandingWidget({Key? key}) : super(key: key); | |||
| @override | |||
| State<UnauthenticatedLandingWidget> createState() => _UnauthenticatedLandingWidgetState(); | |||
| } | |||
| class _UnauthenticatedLandingWidgetState extends State<UnauthenticatedLandingWidget> { | |||
| @override | |||
| Widget build(BuildContext context) { | |||
| final ButtonStyle buttonStyle = ElevatedButton.styleFrom( | |||
| primary: Colors.white, | |||
| onPrimary: Colors.cyan, | |||
| minimumSize: const Size.fromHeight(50), | |||
| padding: const EdgeInsets.symmetric(horizontal: 10, vertical: 10), | |||
| textStyle: const TextStyle( | |||
| fontSize: 20, | |||
| fontWeight: FontWeight.bold, | |||
| color: Colors.red, | |||
| ), | |||
| ); | |||
| return Center( | |||
| child: Column( | |||
| mainAxisAlignment: MainAxisAlignment.center, | |||
| crossAxisAlignment: CrossAxisAlignment.center, | |||
| children: <Widget>[ | |||
| Center( | |||
| child: Row( | |||
| mainAxisAlignment: MainAxisAlignment.center, | |||
| crossAxisAlignment: CrossAxisAlignment.center, | |||
| children: const [ | |||
| FaIcon(FontAwesomeIcons.envelope, color: Colors.white, size: 40), | |||
| SizedBox(width: 15), | |||
| Text('Envelope', style: TextStyle(fontSize: 40, color: Colors.white),) | |||
| ] | |||
| ), | |||
| ), | |||
| const SizedBox(height: 10), | |||
| Padding( | |||
| padding: const EdgeInsets.all(15), | |||
| child: Column ( | |||
| children: [ | |||
| ElevatedButton( | |||
| child: const Text('Login'), | |||
| onPressed: loginButton, | |||
| style: buttonStyle, | |||
| ), | |||
| const SizedBox(height: 20), | |||
| ElevatedButton( | |||
| child: const Text('Sign Up'), | |||
| onPressed: () => { | |||
| Navigator.push( | |||
| context, | |||
| MaterialPageRoute(builder: (context) => const Signup()), | |||
| ), | |||
| }, | |||
| style: buttonStyle, | |||
| ), | |||
| ] | |||
| ), | |||
| ), | |||
| ], | |||
| ), | |||
| ); | |||
| } | |||
| } | |||
| void loginButton() { | |||
| } | |||
+ 2
- 2
mobile/lib/main.dart
View File
+ 138
- 0
mobile/lib/utils/encryption/aes_helper.dart
View File
| @ -0,0 +1,138 @@ | |||
| import 'dart:convert'; | |||
| import 'dart:typed_data'; | |||
| import "package:pointycastle/export.dart"; | |||
| Uint8List createUint8ListFromString(String s) { | |||
| var ret = Uint8List(s.length); | |||
| for (var i = 0; i < s.length; i++) { | |||
| ret[i] = s.codeUnitAt(i); | |||
| } | |||
| return ret; | |||
| } | |||
| // AES key size | |||
| const keySize = 32; // 32 byte key for AES-256 | |||
| const iterationCount = 1000; | |||
| class AesHelper { | |||
| static const cbcMode = 'CBC'; | |||
| static const cfbMode = 'CFB'; | |||
| static Uint8List deriveKey(dynamic password, | |||
| {String salt = '', | |||
| int iterationCount = iterationCount, | |||
| int derivedKeyLength = keySize}) { | |||
| if (password == null || password.isEmpty) { | |||
| throw ArgumentError('password must not be empty'); | |||
| } | |||
| if (password is String) { | |||
| password = createUint8ListFromString(password); | |||
| } | |||
| Uint8List saltBytes = createUint8ListFromString(salt); | |||
| Pbkdf2Parameters params = Pbkdf2Parameters(saltBytes, iterationCount, derivedKeyLength); | |||
| KeyDerivator keyDerivator = PBKDF2KeyDerivator(HMac(SHA256Digest(), 64)); | |||
| keyDerivator.init(params); | |||
| return keyDerivator.process(password); | |||
| } | |||
| static Uint8List pad(Uint8List src, int blockSize) { | |||
| var pad = PKCS7Padding(); | |||
| pad.init(null); | |||
| int padLength = blockSize - (src.length % blockSize); | |||
| var out = Uint8List(src.length + padLength)..setAll(0, src); | |||
| pad.addPadding(out, src.length); | |||
| return out; | |||
| } | |||
| static Uint8List unpad(Uint8List src) { | |||
| var pad = PKCS7Padding(); | |||
| pad.init(null); | |||
| int padLength = pad.padCount(src); | |||
| int len = src.length - padLength; | |||
| return Uint8List(len)..setRange(0, len, src); | |||
| } | |||
| static String aesEncrypt(String password, Uint8List plaintext, | |||
| {String mode = cbcMode}) { | |||
| Uint8List derivedKey = deriveKey(password); | |||
| KeyParameter keyParam = KeyParameter(derivedKey); | |||
| BlockCipher aes = AESEngine(); | |||
| var rnd = FortunaRandom(); | |||
| rnd.seed(keyParam); | |||
| Uint8List iv = rnd.nextBytes(aes.blockSize); | |||
| BlockCipher cipher; | |||
| ParametersWithIV params = ParametersWithIV(keyParam, iv); | |||
| switch (mode) { | |||
| case cbcMode: | |||
| cipher = CBCBlockCipher(aes); | |||
| break; | |||
| case cfbMode: | |||
| cipher = CFBBlockCipher(aes, aes.blockSize); | |||
| break; | |||
| default: | |||
| throw ArgumentError('incorrect value of the "mode" parameter'); | |||
| } | |||
| cipher.init(true, params); | |||
| Uint8List paddedText = pad(plaintext, aes.blockSize); | |||
| Uint8List cipherBytes = _processBlocks(cipher, paddedText); | |||
| Uint8List cipherIvBytes = Uint8List(cipherBytes.length + iv.length) | |||
| ..setAll(0, iv) | |||
| ..setAll(iv.length, cipherBytes); | |||
| return base64.encode(cipherIvBytes); | |||
| } | |||
| static String aesDecrypt(String password, Uint8List ciphertext, | |||
| {String mode = cbcMode}) { | |||
| Uint8List derivedKey = deriveKey(password); | |||
| KeyParameter keyParam = KeyParameter(derivedKey); | |||
| BlockCipher aes = AESEngine(); | |||
| Uint8List iv = Uint8List(aes.blockSize) | |||
| ..setRange(0, aes.blockSize, ciphertext); | |||
| BlockCipher cipher; | |||
| ParametersWithIV params = ParametersWithIV(keyParam, iv); | |||
| switch (mode) { | |||
| case cbcMode: | |||
| cipher = CBCBlockCipher(aes); | |||
| break; | |||
| case cfbMode: | |||
| cipher = CFBBlockCipher(aes, aes.blockSize); | |||
| break; | |||
| default: | |||
| throw ArgumentError('incorrect value of the "mode" parameter'); | |||
| } | |||
| cipher.init(false, params); | |||
| int cipherLen = ciphertext.length - aes.blockSize; | |||
| Uint8List cipherBytes = Uint8List(cipherLen) | |||
| ..setRange(0, cipherLen, ciphertext, aes.blockSize); | |||
| Uint8List paddedText = _processBlocks(cipher, cipherBytes); | |||
| Uint8List textBytes = unpad(paddedText); | |||
| return String.fromCharCodes(textBytes); | |||
| } | |||
| static Uint8List _processBlocks(BlockCipher cipher, Uint8List inp) { | |||
| var out = Uint8List(inp.lengthInBytes); | |||
| for (var offset = 0; offset < inp.lengthInBytes;) { | |||
| var len = cipher.processBlock(inp, offset, out, offset); | |||
| offset += len; | |||
| } | |||
| return out; | |||
| } | |||
| } | |||
+ 257
- 0
mobile/lib/utils/encryption/rsa_key_helper.dart
View File
| @ -0,0 +1,257 @@ | |||
| import 'dart:convert'; | |||
| import 'dart:math'; | |||
| import 'dart:typed_data'; | |||
| import 'package:pointycastle/src/platform_check/platform_check.dart'; | |||
| import "package:pointycastle/export.dart"; | |||
| import "package:asn1lib/asn1lib.dart"; | |||
| /* | |||
| var rsaKeyHelper = RsaKeyHelper(); | |||
| var keyPair = rsaKeyHelper.generateRSAkeyPair(); | |||
| var rsaPub = keyPair.publicKey; | |||
| var rsaPriv = keyPair.privateKey; | |||
| var cipherText = rsaKeyHelper.rsaEncrypt(rsaPub, Uint8List.fromList('Test Data'.codeUnits)); | |||
| print(cipherText); | |||
| var plainText = rsaKeyHelper.rsaDecrypt(rsaPriv, cipherText); | |||
| print(String.fromCharCodes(plainText)); | |||
| */ | |||
| List<int> decodePEM(String pem) { | |||
| var startsWith = [ | |||
| "-----BEGIN PUBLIC KEY-----", | |||
| "-----BEGIN PRIVATE KEY-----", | |||
| "-----BEGIN PGP PUBLIC KEY BLOCK-----\r\nVersion: React-Native-OpenPGP.js 0.1\r\nComment: http://openpgpjs.org\r\n\r\n", | |||
| "-----BEGIN PGP PRIVATE KEY BLOCK-----\r\nVersion: React-Native-OpenPGP.js 0.1\r\nComment: http://openpgpjs.org\r\n\r\n", | |||
| ]; | |||
| var endsWith = [ | |||
| "-----END PUBLIC KEY-----", | |||
| "-----END PRIVATE KEY-----", | |||
| "-----END PGP PUBLIC KEY BLOCK-----", | |||
| "-----END PGP PRIVATE KEY BLOCK-----", | |||
| ]; | |||
| bool isOpenPgp = pem.contains('BEGIN PGP'); | |||
| for (var s in startsWith) { | |||
| if (pem.startsWith(s)) { | |||
| pem = pem.substring(s.length); | |||
| } | |||
| } | |||
| for (var s in endsWith) { | |||
| if (pem.endsWith(s)) { | |||
| pem = pem.substring(0, pem.length - s.length); | |||
| } | |||
| } | |||
| if (isOpenPgp) { | |||
| var index = pem.indexOf('\r\n'); | |||
| pem = pem.substring(0, index); | |||
| } | |||
| pem = pem.replaceAll('\n', ''); | |||
| pem = pem.replaceAll('\r', ''); | |||
| return base64.decode(pem); | |||
| } | |||
| class RsaKeyHelper { | |||
| // Generate secure random sequence for seed | |||
| SecureRandom secureRandom() { | |||
| var secureRandom = FortunaRandom(); | |||
| var random = Random.secure(); | |||
| List<int> seeds = []; | |||
| for (int i = 0; i < 32; i++) { | |||
| seeds.add(random.nextInt(255)); | |||
| } | |||
| secureRandom.seed(KeyParameter(Uint8List.fromList(seeds))); | |||
| return secureRandom; | |||
| } | |||
| // Generate RSA key pair | |||
| AsymmetricKeyPair<RSAPublicKey, RSAPrivateKey> generateRSAkeyPair({int bitLength = 2048}) { | |||
| var secureRandom = this.secureRandom(); | |||
| // final keyGen = KeyGenerator('RSA'); // Get using registry | |||
| final keyGen = RSAKeyGenerator(); | |||
| keyGen.init(ParametersWithRandom( | |||
| RSAKeyGeneratorParameters(BigInt.parse('65537'), bitLength, 64), | |||
| secureRandom)); | |||
| // Use the generator | |||
| final pair = keyGen.generateKeyPair(); | |||
| // Cast the generated key pair into the RSA key types | |||
| final myPublic = pair.publicKey as RSAPublicKey; | |||
| final myPrivate = pair.privateKey as RSAPrivateKey; | |||
| return AsymmetricKeyPair<RSAPublicKey, RSAPrivateKey>(myPublic, myPrivate); | |||
| } | |||
| // Encrypt data using RSA key | |||
| Uint8List rsaEncrypt(RSAPublicKey myPublic, Uint8List dataToEncrypt) { | |||
| final encryptor = OAEPEncoding(RSAEngine()) | |||
| ..init(true, PublicKeyParameter<RSAPublicKey>(myPublic)); // true=encrypt | |||
| return _processInBlocks(encryptor, dataToEncrypt); | |||
| } | |||
| // Decrypt data using RSA key | |||
| Uint8List rsaDecrypt(RSAPrivateKey myPrivate, Uint8List cipherText) { | |||
| final decryptor = OAEPEncoding(RSAEngine()) | |||
| ..init(false, PrivateKeyParameter<RSAPrivateKey>(myPrivate)); // false=decrypt | |||
| return _processInBlocks(decryptor, cipherText); | |||
| } | |||
| // Process blocks after encryption/descryption | |||
| Uint8List _processInBlocks(AsymmetricBlockCipher engine, Uint8List input) { | |||
| final numBlocks = input.length ~/ engine.inputBlockSize + | |||
| ((input.length % engine.inputBlockSize != 0) ? 1 : 0); | |||
| final output = Uint8List(numBlocks * engine.outputBlockSize); | |||
| var inputOffset = 0; | |||
| var outputOffset = 0; | |||
| while (inputOffset < input.length) { | |||
| final chunkSize = (inputOffset + engine.inputBlockSize <= input.length) | |||
| ? engine.inputBlockSize | |||
| : input.length - inputOffset; | |||
| outputOffset += engine.processBlock( | |||
| input, inputOffset, chunkSize, output, outputOffset); | |||
| inputOffset += chunkSize; | |||
| } | |||
| return (output.length == outputOffset) | |||
| ? output | |||
| : output.sublist(0, outputOffset); | |||
| } | |||
| // Encode RSA public key to pem format | |||
| static encodePublicKeyToPem(RSAPublicKey publicKey) { | |||
| var algorithmSeq = ASN1Sequence(); | |||
| var algorithmAsn1Obj = ASN1Object.fromBytes(Uint8List.fromList([0x6, 0x9, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0xd, 0x1, 0x1, 0x1])); | |||
| var paramsAsn1Obj = ASN1Object.fromBytes(Uint8List.fromList([0x5, 0x0])); | |||
| algorithmSeq.add(algorithmAsn1Obj); | |||
| algorithmSeq.add(paramsAsn1Obj); | |||
| var publicKeySeq = ASN1Sequence(); | |||
| publicKeySeq.add(ASN1Integer(publicKey.modulus!)); | |||
| publicKeySeq.add(ASN1Integer(publicKey.exponent!)); | |||
| var publicKeySeqBitString = ASN1BitString(Uint8List.fromList(publicKeySeq.encodedBytes)); | |||
| var topLevelSeq = ASN1Sequence(); | |||
| topLevelSeq.add(algorithmSeq); | |||
| topLevelSeq.add(publicKeySeqBitString); | |||
| var dataBase64 = base64.encode(topLevelSeq.encodedBytes); | |||
| return """-----BEGIN PUBLIC KEY-----\r\n$dataBase64\r\n-----END PUBLIC KEY-----"""; | |||
| } | |||
| // Parse public key PEM file | |||
| static parsePublicKeyFromPem(pemString) { | |||
| List<int> publicKeyDER = decodePEM(pemString); | |||
| var asn1Parser = ASN1Parser(Uint8List.fromList(publicKeyDER)); | |||
| var topLevelSeq = asn1Parser.nextObject() as ASN1Sequence; | |||
| var publicKeyBitString = topLevelSeq.elements[1]; | |||
| var publicKeyAsn = ASN1Parser(publicKeyBitString.contentBytes()!, relaxedParsing: true); | |||
| var publicKeySeq = publicKeyAsn.nextObject() as ASN1Sequence; | |||
| var modulus = publicKeySeq.elements[0] as ASN1Integer; | |||
| var exponent = publicKeySeq.elements[1] as ASN1Integer; | |||
| RSAPublicKey rsaPublicKey = RSAPublicKey( | |||
| modulus.valueAsBigInteger!, | |||
| exponent.valueAsBigInteger! | |||
| ); | |||
| return rsaPublicKey; | |||
| } | |||
| // Encode RSA private key to pem format | |||
| static encodePrivateKeyToPem(RSAPrivateKey privateKey) { | |||
| var version = ASN1Integer(BigInt.from(0)); | |||
| var algorithmSeq = ASN1Sequence(); | |||
| var algorithmAsn1Obj = ASN1Object.fromBytes(Uint8List.fromList([0x6, 0x9, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0xd, 0x1, 0x1, 0x1])); | |||
| var paramsAsn1Obj = ASN1Object.fromBytes(Uint8List.fromList([0x5, 0x0])); | |||
| algorithmSeq.add(algorithmAsn1Obj); | |||
| algorithmSeq.add(paramsAsn1Obj); | |||
| var privateKeySeq = ASN1Sequence(); | |||
| var modulus = ASN1Integer(privateKey.n!); | |||
| var publicExponent = ASN1Integer(BigInt.parse('65537')); | |||
| var privateExponent = ASN1Integer(privateKey.privateExponent!); | |||
| var p = ASN1Integer(privateKey.p!); | |||
| var q = ASN1Integer(privateKey.q!); | |||
| var dP = privateKey.privateExponent! % (privateKey.p! - BigInt.from(1)); | |||
| var exp1 = ASN1Integer(dP); | |||
| var dQ = privateKey.privateExponent! % (privateKey.q! - BigInt.from(1)); | |||
| var exp2 = ASN1Integer(dQ); | |||
| var iQ = privateKey.q?.modInverse(privateKey.p!); | |||
| var co = ASN1Integer(iQ!); | |||
| privateKeySeq.add(version); | |||
| privateKeySeq.add(modulus); | |||
| privateKeySeq.add(publicExponent); | |||
| privateKeySeq.add(privateExponent); | |||
| privateKeySeq.add(p); | |||
| privateKeySeq.add(q); | |||
| privateKeySeq.add(exp1); | |||
| privateKeySeq.add(exp2); | |||
| privateKeySeq.add(co); | |||
| var publicKeySeqOctetString = ASN1OctetString(Uint8List.fromList(privateKeySeq.encodedBytes)); | |||
| var topLevelSeq = ASN1Sequence(); | |||
| topLevelSeq.add(version); | |||
| topLevelSeq.add(algorithmSeq); | |||
| topLevelSeq.add(publicKeySeqOctetString); | |||
| var dataBase64 = base64.encode(topLevelSeq.encodedBytes); | |||
| return """-----BEGIN PRIVATE KEY-----\r\n$dataBase64\r\n-----END PRIVATE KEY-----"""; | |||
| } | |||
| static parsePrivateKeyFromPem(pemString) { | |||
| List<int> privateKeyDER = decodePEM(pemString); | |||
| var asn1Parser = ASN1Parser(Uint8List.fromList(privateKeyDER)); | |||
| var topLevelSeq = asn1Parser.nextObject() as ASN1Sequence; | |||
| var version = topLevelSeq.elements[0]; | |||
| var algorithm = topLevelSeq.elements[1]; | |||
| var privateKey = topLevelSeq.elements[2]; | |||
| asn1Parser = ASN1Parser(privateKey.contentBytes()!); | |||
| var pkSeq = asn1Parser.nextObject() as ASN1Sequence; | |||
| version = pkSeq.elements[0]; | |||
| var modulus = pkSeq.elements[1] as ASN1Integer; | |||
| //var publicExponent = pkSeq.elements[2] as ASN1Integer; | |||
| var privateExponent = pkSeq.elements[3] as ASN1Integer; | |||
| var p = pkSeq.elements[4] as ASN1Integer; | |||
| var q = pkSeq.elements[5] as ASN1Integer; | |||
| var exp1 = pkSeq.elements[6] as ASN1Integer; | |||
| var exp2 = pkSeq.elements[7] as ASN1Integer; | |||
| var co = pkSeq.elements[8] as ASN1Integer; | |||
| RSAPrivateKey rsaPrivateKey = RSAPrivateKey( | |||
| modulus.valueAsBigInteger!, | |||
| privateExponent.valueAsBigInteger!, | |||
| p.valueAsBigInteger, | |||
| q.valueAsBigInteger | |||
| ); | |||
| return rsaPrivateKey; | |||
| } | |||
| } | |||
+ 22
- 0
mobile/lib/utils/storage/encryption_keys.dart
View File
| @ -0,0 +1,22 @@ | |||
| import 'package:shared_preferences/shared_preferences.dart'; | |||
| import "package:pointycastle/export.dart"; | |||
| import '/utils/encryption/rsa_key_helper.dart'; | |||
| const rsaPrivateKeyName = 'rsaPrivateKey'; | |||
| void setPrivateKey(RSAPrivateKey key) async { | |||
| String keyPem = RsaKeyHelper.encodePrivateKeyToPem(key); | |||
| final prefs = await SharedPreferences.getInstance(); | |||
| prefs.setString(rsaPrivateKeyName, keyPem); | |||
| } | |||
| Future<RSAPrivateKey> getPrivateKey() async { | |||
| final prefs = await SharedPreferences.getInstance(); | |||
| String? keyPem = prefs.getString(rsaPrivateKeyName); | |||
| if (keyPem == null) { | |||
| throw Exception('No RSA private key set'); | |||
| } | |||
| return RsaKeyHelper.parsePrivateKeyFromPem(keyPem); | |||
| } | |||
+ 217
- 0
mobile/lib/views/authentication/login.dart
View File
| @ -0,0 +1,217 @@ | |||
| import 'dart:convert'; | |||
| import 'package:flutter/material.dart'; | |||
| import 'package:http/http.dart' as http; | |||
| import 'package:shared_preferences/shared_preferences.dart'; | |||
| import '/views/main/conversations_list.dart'; | |||
| import '/utils/encryption/rsa_key_helper.dart'; | |||
| import '/utils/encryption/aes_helper.dart'; | |||
| import '/utils/storage/encryption_keys.dart'; | |||
| class LoginResponse { | |||
| final String status; | |||
| final String message; | |||
| final String asymmetricPublicKey; | |||
| final String asymmetricPrivateKey; | |||
| const LoginResponse({ | |||
| required this.status, | |||
| required this.message, | |||
| required this.asymmetricPublicKey, | |||
| required this.asymmetricPrivateKey, | |||
| }); | |||
| factory LoginResponse.fromJson(Map<String, dynamic> json) { | |||
| return LoginResponse( | |||
| status: json['status'], | |||
| message: json['message'], | |||
| asymmetricPublicKey: json['asymmetric_public_key'], | |||
| asymmetricPrivateKey: json['asymmetric_private_key'], | |||
| ); | |||
| } | |||
| } | |||
| Future<LoginResponse> login(context, String username, String password) async { | |||
| final resp = await http.post( | |||
| Uri.parse('http://192.168.1.5:8080/api/v1/login'), | |||
| headers: <String, String>{ | |||
| 'Content-Type': 'application/json; charset=UTF-8', | |||
| }, | |||
| body: jsonEncode(<String, String>{ | |||
| 'username': username, | |||
| 'password': password, | |||
| }), | |||
| ); | |||
| LoginResponse response = LoginResponse.fromJson(jsonDecode(resp.body)); | |||
| if (resp.statusCode != 200) { | |||
| throw Exception(response.message); | |||
| } | |||
| var rsaPrivPem = AesHelper.aesDecrypt(password, base64.decode(response.asymmetricPrivateKey)); | |||
| var rsaPriv = RsaKeyHelper.parsePrivateKeyFromPem(rsaPrivPem); | |||
| setPrivateKey(rsaPriv); | |||
| final preferences = await SharedPreferences.getInstance(); | |||
| preferences.setBool('islogin', true); | |||
| return response; | |||
| } | |||
| class Login extends StatelessWidget { | |||
| const Login({Key? key}) : super(key: key); | |||
| static const String _title = 'Envelope'; | |||
| @override | |||
| Widget build(BuildContext context) { | |||
| return MaterialApp( | |||
| title: _title, | |||
| home: Scaffold( | |||
| backgroundColor: Colors.cyan, | |||
| appBar: AppBar( | |||
| title: null, | |||
| automaticallyImplyLeading: true, | |||
| //`true` if you want Flutter to automatically add Back Button when needed, | |||
| //or `false` if you want to force your own back button every where | |||
| leading: IconButton(icon: const Icon(Icons.arrow_back), | |||
| //onPressed:() => Navigator.pop(context, false), | |||
| onPressed:() => { | |||
| Navigator.pop(context) | |||
| } | |||
| ) | |||
| ), | |||
| body: const SafeArea( | |||
| child: LoginWidget(), | |||
| ) | |||
| ), | |||
| theme: ThemeData( | |||
| appBarTheme: const AppBarTheme( | |||
| backgroundColor: Colors.cyan, | |||
| elevation: 0, | |||
| ), | |||
| inputDecorationTheme: const InputDecorationTheme( | |||
| border: OutlineInputBorder(), | |||
| focusedBorder: OutlineInputBorder(), | |||
| labelStyle: TextStyle( | |||
| color: Colors.white, | |||
| fontSize: 30, | |||
| ), | |||
| filled: true, | |||
| fillColor: Colors.white, | |||
| ), | |||
| ), | |||
| ); | |||
| } | |||
| } | |||
| class LoginWidget extends StatefulWidget { | |||
| const LoginWidget({Key? key}) : super(key: key); | |||
| @override | |||
| State<LoginWidget> createState() => _LoginWidgetState(); | |||
| } | |||
| class _LoginWidgetState extends State<LoginWidget> { | |||
| final _formKey = GlobalKey<FormState>(); | |||
| TextEditingController usernameController = TextEditingController(); | |||
| TextEditingController passwordController = TextEditingController(); | |||
| @override | |||
| Widget build(BuildContext context) { | |||
| const TextStyle _inputTextStyle = TextStyle(fontSize: 18, color: Colors.black); | |||
| final ButtonStyle _buttonStyle = ElevatedButton.styleFrom( | |||
| primary: Colors.white, | |||
| onPrimary: Colors.cyan, | |||
| minimumSize: const Size.fromHeight(50), | |||
| padding: const EdgeInsets.symmetric(horizontal: 10, vertical: 10), | |||
| textStyle: const TextStyle( | |||
| fontSize: 20, | |||
| fontWeight: FontWeight.bold, | |||
| color: Colors.red, | |||
| ), | |||
| ); | |||
| return Center( | |||
| child: Form( | |||
| key: _formKey, | |||
| child: Center( | |||
| child: Padding( | |||
| padding: const EdgeInsets.all(15), | |||
| child: Column( | |||
| mainAxisAlignment: MainAxisAlignment.center, | |||
| crossAxisAlignment: CrossAxisAlignment.center, | |||
| children: [ | |||
| const Text('Login', style: TextStyle(fontSize: 35, color: Colors.white),), | |||
| const SizedBox(height: 30), | |||
| TextFormField( | |||
| controller: usernameController, | |||
| decoration: const InputDecoration( | |||
| hintText: 'Username', | |||
| ), | |||
| style: _inputTextStyle, | |||
| // The validator receives the text that the user has entered. | |||
| validator: (value) { | |||
| if (value == null || value.isEmpty) { | |||
| return 'Create a username'; | |||
| } | |||
| return null; | |||
| }, | |||
| ), | |||
| const SizedBox(height: 5), | |||
| TextFormField( | |||
| controller: passwordController, | |||
| obscureText: true, | |||
| enableSuggestions: false, | |||
| autocorrect: false, | |||
| decoration: const InputDecoration( | |||
| hintText: 'Password', | |||
| ), | |||
| style: _inputTextStyle, | |||
| // The validator receives the text that the user has entered. | |||
| validator: (value) { | |||
| if (value == null || value.isEmpty) { | |||
| return 'Enter a password'; | |||
| } | |||
| return null; | |||
| }, | |||
| ), | |||
| const SizedBox(height: 5), | |||
| ElevatedButton( | |||
| style: _buttonStyle, | |||
| onPressed: () { | |||
| if (_formKey.currentState!.validate()) { | |||
| ScaffoldMessenger.of(context).showSnackBar( | |||
| const SnackBar(content: Text('Processing Data')), | |||
| ); | |||
| login( | |||
| context, | |||
| usernameController.text, | |||
| passwordController.text, | |||
| ).then((value) { | |||
| Navigator.of(context).popUntil((route) { | |||
| print(route.isFirst); | |||
| return route.isFirst; | |||
| }); | |||
| }).catchError((error) { | |||
| print(error); // TODO: Show error on interface | |||
| }); | |||
| } | |||
| }, | |||
| child: const Text('Submit'), | |||
| ), | |||
| ], | |||
| ) | |||
| ) | |||
| ) | |||
| ) | |||
| ); | |||
| } | |||
| } | |||
mobile/lib/authentication/signup.dart → mobile/lib/views/authentication/signup.dart
View File
+ 85
- 0
mobile/lib/views/authentication/unauthenticated_landing.dart
View File
| @ -0,0 +1,85 @@ | |||
| import 'package:flutter/material.dart'; | |||
| import 'package:font_awesome_flutter/font_awesome_flutter.dart'; | |||
| import './login.dart'; | |||
| import './signup.dart'; | |||
| class UnauthenticatedLandingWidget extends StatefulWidget { | |||
| const UnauthenticatedLandingWidget({Key? key}) : super(key: key); | |||
| @override | |||
| State<UnauthenticatedLandingWidget> createState() => _UnauthenticatedLandingWidgetState(); | |||
| } | |||
| class _UnauthenticatedLandingWidgetState extends State<UnauthenticatedLandingWidget> { | |||
| @override | |||
| Widget build(BuildContext context) { | |||
| final ButtonStyle buttonStyle = ElevatedButton.styleFrom( | |||
| primary: Colors.white, | |||
| onPrimary: Colors.cyan, | |||
| minimumSize: const Size.fromHeight(50), | |||
| padding: const EdgeInsets.symmetric(horizontal: 10, vertical: 10), | |||
| textStyle: const TextStyle( | |||
| fontSize: 20, | |||
| fontWeight: FontWeight.bold, | |||
| color: Colors.red, | |||
| ), | |||
| ); | |||
| return WillPopScope( | |||
| onWillPop: () async => false, | |||
| child: Scaffold( | |||
| backgroundColor: Colors.cyan, | |||
| body: SafeArea( | |||
| child: Center( | |||
| child: Column( | |||
| mainAxisAlignment: MainAxisAlignment.center, | |||
| crossAxisAlignment: CrossAxisAlignment.center, | |||
| children: <Widget>[ | |||
| Center( | |||
| child: Row( | |||
| mainAxisAlignment: MainAxisAlignment.center, | |||
| crossAxisAlignment: CrossAxisAlignment.center, | |||
| children: const [ | |||
| FaIcon(FontAwesomeIcons.envelope, color: Colors.white, size: 40), | |||
| SizedBox(width: 15), | |||
| Text('Envelope', style: TextStyle(fontSize: 40, color: Colors.white),) | |||
| ] | |||
| ), | |||
| ), | |||
| const SizedBox(height: 10), | |||
| Padding( | |||
| padding: const EdgeInsets.all(15), | |||
| child: Column ( | |||
| children: [ | |||
| ElevatedButton( | |||
| child: const Text('Login'), | |||
| onPressed: () => { | |||
| Navigator.of(context).push( | |||
| MaterialPageRoute(builder: (context) => const Login()), | |||
| ), | |||
| }, | |||
| style: buttonStyle, | |||
| ), | |||
| const SizedBox(height: 20), | |||
| ElevatedButton( | |||
| child: const Text('Sign Up'), | |||
| onPressed: () => { | |||
| Navigator.of(context).push( | |||
| MaterialPageRoute(builder: (context) => const Signup()), | |||
| ), | |||
| }, | |||
| style: buttonStyle, | |||
| ), | |||
| ] | |||
| ), | |||
| ), | |||
| ], | |||
| ), | |||
| ), | |||
| ), | |||
| ), | |||
| ); | |||
| } | |||
| } | |||
+ 112
- 0
mobile/lib/views/main/conversations_list.dart
View File
| @ -0,0 +1,112 @@ | |||
| import 'package:flutter/material.dart'; | |||
| import 'package:shared_preferences/shared_preferences.dart'; | |||
| import 'package:font_awesome_flutter/font_awesome_flutter.dart'; | |||
| import '/views/authentication/unauthenticated_landing.dart'; | |||
| class ConversationsList extends StatefulWidget { | |||
| const ConversationsList({Key? key}) : super(key: key); | |||
| @override | |||
| State<ConversationsList> createState() => _ConversationsListState(); | |||
| } | |||
| class _ConversationsListState extends State<ConversationsList> { | |||
| @override | |||
| void initState() { | |||
| checkLogin(); | |||
| super.initState(); | |||
| } | |||
| final _suggestions = <String>[]; | |||
| final _biggerFont = const TextStyle(fontSize: 18); | |||
| Future checkLogin() async { | |||
| SharedPreferences preferences = await SharedPreferences.getInstance(); | |||
| print(preferences.getBool('islogin')); | |||
| if (preferences.getBool('islogin') != true) { | |||
| setState(() { | |||
| Navigator.of(context).push(MaterialPageRoute( | |||
| builder: (context) => const UnauthenticatedLandingWidget(), | |||
| )); | |||
| }); | |||
| } | |||
| } | |||
| Widget list() { | |||
| if (_suggestions.isEmpty) { | |||
| return const Center( | |||
| child: Text('No Conversations'), | |||
| ); | |||
| } | |||
| return ListView.builder( | |||
| itemCount: _suggestions.length, | |||
| padding: const EdgeInsets.all(16.0), | |||
| itemBuilder: /*1*/ (context, i) { | |||
| //if (i >= _suggestions.length) { | |||
| // TODO: Check for more conversations here. Remove the itemCount to use this section | |||
| //_suggestions.addAll(generateWordPairs().take(10)); /*4*/ | |||
| //} | |||
| return Column( | |||
| children: [ | |||
| ListTile( | |||
| title: Text( | |||
| _suggestions[i], | |||
| style: _biggerFont, | |||
| ), | |||
| ), | |||
| const Divider(), | |||
| ] | |||
| ); | |||
| }, | |||
| ); | |||
| } | |||
| @override | |||
| Widget build(BuildContext context) { | |||
| return WillPopScope( | |||
| onWillPop: () async => false, | |||
| child: Scaffold( | |||
| appBar: AppBar( | |||
| title: Text('Envelope'), | |||
| actions: <Widget>[ | |||
| PopupMenuButton( | |||
| icon: const FaIcon(FontAwesomeIcons.ellipsisVertical, color: Colors.white, size: 40), | |||
| itemBuilder: (context) => [ | |||
| const PopupMenuItem<int>( | |||
| value: 0, | |||
| child: Text("Settings"), | |||
| ), | |||
| const PopupMenuItem<int>( | |||
| value: 1, | |||
| child: Text("Logout"), | |||
| ), | |||
| ], | |||
| onSelected: (item) => selectedMenuItem(context, item), | |||
| ), | |||
| ], | |||
| ), | |||
| body: list(), | |||
| ), | |||
| ); | |||
| } | |||
| void selectedMenuItem(BuildContext context, item) async { | |||
| switch (item) { | |||
| case 0: | |||
| print("Settings"); | |||
| break; | |||
| case 1: | |||
| SharedPreferences preferences = await SharedPreferences.getInstance(); | |||
| preferences.setBool('islogin', false); | |||
| Navigator.of(context).push(MaterialPageRoute( | |||
| builder: (context) => const UnauthenticatedLandingWidget(), | |||
| )); | |||
| break; | |||
| } | |||
| } | |||
| } | |||