rotate-key-pair.js

import Component from "@glimmer/component";
import { tracked } from "@glimmer/tracking";
import { action } from "@ember/object";
import { service } from "@ember/service";
import { ajax } from "discourse/lib/ajax";
import { extractError } from "discourse/lib/ajax-error";
import { saveDbIdentity } from "discourse/plugins/discourse-encrypt/lib/database";
import { getIdentity } from "discourse/plugins/discourse-encrypt/lib/discourse";
import {
  exportIdentity,
  exportKey,
  generateIdentity,
  importKey,
} from "discourse/plugins/discourse-encrypt/lib/protocol";

export default class RotateKeyPair extends Component {
  @service currentUser;
  @service appEvents;

  @tracked confirmation = "";
  @tracked loadingState;
  @tracked error;

  get label() {
    return this.loadingState
      ? `encrypt.rotate.loading_states.${this.loadingState}`
      : "encrypt.rotate.title";
  }

  get disabled() {
    return this.loadingState || this.currentUser.username !== this.confirmation;
  }

  @action
  async rotate() {
    this.loadingState = "fetching";
    this.error = null;

    try {
      const [data, oldIdentity, newIdentity] = await Promise.all([
        ajax("/encrypt/rotate"),
        getIdentity(),
        generateIdentity(),
      ]);
      this.loadingState = "rotating";

      // Don't rotate signatures because that will invalidate all previous
      // signatures.
      // When the old identity is v0, there's no keypair for signing, so don't
      // overwrite the new identity's signing keypair with nothing (undefined)
      if (oldIdentity.signPublic && oldIdentity.signPrivate) {
        newIdentity.signPublic = oldIdentity.signPublic;
        newIdentity.signPrivate = oldIdentity.signPrivate;
      }

      const topicKeys = {};

      await Promise.all(
        Object.entries(data.topic_keys).map(async ([topicId, topicKey]) => {
          const key = await importKey(topicKey, oldIdentity.encryptPrivate);
          topicKeys[topicId] = await exportKey(key, newIdentity.encryptPublic);
        })
      );

      const exportedIdentity = await exportIdentity(newIdentity);

      this.loadingState = "saving";
      await ajax("/encrypt/rotate", {
        type: "PUT",
        data: {
          public: exportedIdentity.public,
          keys: topicKeys,
        },
      });

      this.loadingState = "updating";
      await saveDbIdentity(newIdentity);

      this.loadingState = "finished";
      this.appEvents.trigger("encrypt:status-changed");
    } catch (error) {
      this.confirmation = "";
      this.loadingState = null;
      this.error = extractError(error);
    }
  }
}