Šepot — end-to-end encrypted messenger
Initial public release. Anonymous on-device identity (no phone number, e-mail, or password), Signal-protocol cryptography (X3DH + PQXDH, Double Ratchet, sealed sender) via libsignal, a metadata-minimizing relay, group chats, disappearing messages, encrypted local storage, optional Tor transport, and a UI localized into Czech, English, German, Russian, and Italian. Monorepo: Flutter client (app/), Rust relay + wire types (rust/), protobuf definitions (proto/), self-host deploy (deploy/). Licensed under AGPL-3.0 with an app-store distribution exception (§7).
This commit is contained in:
Julius Joska
@@ -0,0 +1,297 @@
|
||||
/// Ověření kontaktu — safety number.
|
||||
///
|
||||
/// Obě strany vidí STEJNÝCH 60 číslic (libsignal Fingerprint, menší
|
||||
/// polovina první). Ověření: naskenovat QR protistrany (libsignal
|
||||
/// porovná klíče křížem) nebo přečíst číslice jiným kanálem a potvrdit
|
||||
/// ručně. Shoda → kontakt „ověřen"; neshoda → varování před MITM.
|
||||
library;
|
||||
|
||||
import 'dart:convert';
|
||||
import 'dart:typed_data';
|
||||
|
||||
import 'package:flutter/material.dart';
|
||||
import 'package:flutter_riverpod/flutter_riverpod.dart';
|
||||
import 'package:mobile_scanner/mobile_scanner.dart';
|
||||
import 'package:qr_flutter/qr_flutter.dart';
|
||||
import 'package:sepot/core/crypto/safety_number.dart';
|
||||
import 'package:sepot/core/l10n/l10n.dart';
|
||||
import 'package:sepot/core/theme/app_theme.dart';
|
||||
import 'package:sepot/models/contact.dart';
|
||||
import 'package:sepot/providers/contacts_provider.dart';
|
||||
import 'package:sepot/providers/identity_provider.dart';
|
||||
import 'package:sepot/providers/storage_provider.dart';
|
||||
|
||||
/// Prefix QR obsahu — odlišuje ověřovací QR od kontaktního `sepot://add/`.
|
||||
const _verifyQrPrefix = 'sepot-verify:';
|
||||
|
||||
class ContactVerifyScreen extends ConsumerStatefulWidget {
|
||||
const ContactVerifyScreen({super.key, required this.contactId});
|
||||
|
||||
final String contactId;
|
||||
|
||||
@override
|
||||
ConsumerState<ContactVerifyScreen> createState() =>
|
||||
_ContactVerifyScreenState();
|
||||
}
|
||||
|
||||
class _ContactVerifyScreenState extends ConsumerState<ContactVerifyScreen> {
|
||||
SafetyNumber? _number;
|
||||
String? _numberForKey; // cache per identity klíč kontaktu
|
||||
|
||||
SafetyNumber? _safetyNumber(Contact contact, Uint8List localKey) {
|
||||
final keyId = contact.publicIdentity.fingerprint.display;
|
||||
if (_number == null || _numberForKey != keyId) {
|
||||
_number = SafetyNumber.compute(
|
||||
localIdentityKey: localKey,
|
||||
remoteIdentityKey: contact.publicIdentity.identityKey,
|
||||
);
|
||||
_numberForKey = keyId;
|
||||
}
|
||||
return _number;
|
||||
}
|
||||
|
||||
Future<void> _setVerified(Contact contact, bool verified) async {
|
||||
contact.verified = verified;
|
||||
await ref.read(storageProvider).saveContact(contact);
|
||||
ref.invalidate(contactsProvider);
|
||||
}
|
||||
|
||||
Future<void> _scanAndCompare(Contact contact, SafetyNumber mine) async {
|
||||
final scanned = await Navigator.of(context).push<String>(
|
||||
MaterialPageRoute(builder: (_) => const _VerifyScanScreen()),
|
||||
);
|
||||
if (scanned == null || !mounted) return;
|
||||
|
||||
var match = false;
|
||||
if (scanned.startsWith(_verifyQrPrefix)) {
|
||||
try {
|
||||
final theirs = Uint8List.fromList(
|
||||
base64Decode(scanned.substring(_verifyQrPrefix.length)));
|
||||
match = SafetyNumber.compare(mine.scannable, theirs);
|
||||
} on FormatException {
|
||||
match = false;
|
||||
}
|
||||
}
|
||||
|
||||
if (match) {
|
||||
await _setVerified(contact, true);
|
||||
}
|
||||
if (!mounted) return;
|
||||
await showDialog<void>(
|
||||
context: context,
|
||||
builder: (ctx) => AlertDialog(
|
||||
icon: Icon(
|
||||
match ? Icons.verified : Icons.gpp_bad_outlined,
|
||||
color: match ? SepotColors.sage : SepotColors.error,
|
||||
size: 40,
|
||||
),
|
||||
title: Text(
|
||||
match ? ctx.l10n.verifyVerified : ctx.l10n.verifyMismatchTitle),
|
||||
content: Text(
|
||||
match
|
||||
? ctx.l10n.verifyMatchBody(contact.displayName)
|
||||
: ctx.l10n.verifyMismatchBody,
|
||||
),
|
||||
actions: [
|
||||
TextButton(
|
||||
onPressed: () => Navigator.of(ctx).pop(),
|
||||
child: Text(ctx.l10n.commonUnderstood),
|
||||
),
|
||||
],
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
Future<void> _confirmManual(Contact contact) async {
|
||||
final confirmed = await showDialog<bool>(
|
||||
context: context,
|
||||
builder: (ctx) => AlertDialog(
|
||||
title: Text(ctx.l10n.verifyManualConfirmTitle),
|
||||
content: Text(ctx.l10n.verifyManualConfirmBody),
|
||||
actions: [
|
||||
TextButton(
|
||||
onPressed: () => Navigator.of(ctx).pop(false),
|
||||
child: Text(ctx.l10n.commonCancel),
|
||||
),
|
||||
FilledButton(
|
||||
onPressed: () => Navigator.of(ctx).pop(true),
|
||||
child: Text(ctx.l10n.verifyManualConfirmAction),
|
||||
),
|
||||
],
|
||||
),
|
||||
);
|
||||
if (confirmed == true) await _setVerified(contact, true);
|
||||
}
|
||||
|
||||
@override
|
||||
Widget build(BuildContext context) {
|
||||
final contact = ref
|
||||
.watch(contactsProvider)
|
||||
.valueOrNull
|
||||
?.where((c) => c.id == widget.contactId)
|
||||
.firstOrNull;
|
||||
final identity = ref.watch(identityProvider).valueOrNull;
|
||||
|
||||
if (contact == null || identity == null) {
|
||||
return Scaffold(
|
||||
appBar: AppBar(title: Text(context.l10n.verifyTitle)),
|
||||
body: const Center(
|
||||
child: CircularProgressIndicator(color: SepotColors.ember),
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
final number = _safetyNumber(contact, identity.identityPublicKey)!;
|
||||
final qrData = '$_verifyQrPrefix${base64Encode(number.scannable)}';
|
||||
|
||||
return Scaffold(
|
||||
appBar: AppBar(title: Text(context.l10n.verifyTitle)),
|
||||
body: SingleChildScrollView(
|
||||
padding: const EdgeInsets.all(24),
|
||||
child: Column(
|
||||
crossAxisAlignment: CrossAxisAlignment.stretch,
|
||||
children: [
|
||||
if (contact.verified)
|
||||
Container(
|
||||
padding:
|
||||
const EdgeInsets.symmetric(horizontal: 16, vertical: 10),
|
||||
margin: const EdgeInsets.only(bottom: 20),
|
||||
decoration: BoxDecoration(
|
||||
color: SepotColors.sage.withValues(alpha: 0.12),
|
||||
borderRadius: BorderRadius.circular(12),
|
||||
),
|
||||
child: Row(
|
||||
mainAxisAlignment: MainAxisAlignment.center,
|
||||
children: [
|
||||
const Icon(Icons.verified,
|
||||
color: SepotColors.sage, size: 18),
|
||||
const SizedBox(width: 8),
|
||||
Text(context.l10n.verifyContactVerifiedBanner,
|
||||
style: const TextStyle(color: SepotColors.sage)),
|
||||
],
|
||||
),
|
||||
),
|
||||
Text(
|
||||
context.l10n.verifyIntro(contact.displayName),
|
||||
style: const TextStyle(
|
||||
color: SepotColors.textSecondary, height: 1.4),
|
||||
),
|
||||
const SizedBox(height: 24),
|
||||
Center(
|
||||
child: Container(
|
||||
padding: const EdgeInsets.all(16),
|
||||
decoration: BoxDecoration(
|
||||
color: Colors.white,
|
||||
borderRadius: BorderRadius.circular(16),
|
||||
),
|
||||
child: QrImageView(
|
||||
data: qrData,
|
||||
size: 180,
|
||||
backgroundColor: Colors.white,
|
||||
),
|
||||
),
|
||||
),
|
||||
const SizedBox(height: 24),
|
||||
// 60 číslic ve 12 blocích po 5 (4 řádky × 3 sloupce)
|
||||
Container(
|
||||
padding: const EdgeInsets.all(16),
|
||||
decoration: BoxDecoration(
|
||||
color: SepotColors.surfaceVariant,
|
||||
borderRadius: BorderRadius.circular(16),
|
||||
),
|
||||
child: Column(
|
||||
children: [
|
||||
for (var row = 0; row < 4; row++)
|
||||
Padding(
|
||||
padding: EdgeInsets.only(bottom: row < 3 ? 10 : 0),
|
||||
child: Row(
|
||||
mainAxisAlignment: MainAxisAlignment.spaceEvenly,
|
||||
children: [
|
||||
for (var col = 0; col < 3; col++)
|
||||
Text(
|
||||
number.groups[row * 3 + col],
|
||||
style: SepotTheme.cryptoText.copyWith(
|
||||
fontSize: 17,
|
||||
letterSpacing: 1.5,
|
||||
),
|
||||
),
|
||||
],
|
||||
),
|
||||
),
|
||||
],
|
||||
),
|
||||
),
|
||||
const SizedBox(height: 24),
|
||||
FilledButton.icon(
|
||||
onPressed: () => _scanAndCompare(contact, number),
|
||||
icon: const Icon(Icons.qr_code_scanner_rounded),
|
||||
label: Text(context.l10n.verifyScanButton),
|
||||
),
|
||||
const SizedBox(height: 12),
|
||||
OutlinedButton.icon(
|
||||
onPressed: () => _confirmManual(contact),
|
||||
icon: const Icon(Icons.checklist_rounded),
|
||||
label: Text(context.l10n.verifyManualButton),
|
||||
),
|
||||
if (contact.verified) ...[
|
||||
const SizedBox(height: 12),
|
||||
TextButton(
|
||||
onPressed: () => _setVerified(contact, false),
|
||||
child: Text(
|
||||
context.l10n.verifyUnverifyButton,
|
||||
style: const TextStyle(color: SepotColors.textMuted),
|
||||
),
|
||||
),
|
||||
],
|
||||
],
|
||||
),
|
||||
),
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
/// Minimalistický skener jen pro ověřovací QR — vrací syrový obsah kódu.
|
||||
class _VerifyScanScreen extends StatefulWidget {
|
||||
const _VerifyScanScreen();
|
||||
|
||||
@override
|
||||
State<_VerifyScanScreen> createState() => _VerifyScanScreenState();
|
||||
}
|
||||
|
||||
class _VerifyScanScreenState extends State<_VerifyScanScreen> {
|
||||
final _controller = MobileScannerController(
|
||||
detectionSpeed: DetectionSpeed.normal,
|
||||
facing: CameraFacing.back,
|
||||
);
|
||||
bool _done = false;
|
||||
|
||||
@override
|
||||
void dispose() {
|
||||
_controller.dispose();
|
||||
super.dispose();
|
||||
}
|
||||
|
||||
void _onDetect(BarcodeCapture capture) {
|
||||
if (_done) return;
|
||||
final raw = capture.barcodes.firstOrNull?.rawValue;
|
||||
if (raw == null) return;
|
||||
_done = true;
|
||||
Navigator.of(context).pop(raw);
|
||||
}
|
||||
|
||||
@override
|
||||
Widget build(BuildContext context) {
|
||||
return Scaffold(
|
||||
appBar: AppBar(
|
||||
title: Text(context.l10n.verifyScanScreenTitle),
|
||||
actions: [
|
||||
IconButton(
|
||||
icon: const Icon(Icons.flash_on),
|
||||
onPressed: () => _controller.toggleTorch(),
|
||||
),
|
||||
],
|
||||
),
|
||||
body: MobileScanner(controller: _controller, onDetect: _onDetect),
|
||||
);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,323 @@
|
||||
import 'package:flutter/material.dart';
|
||||
import 'package:flutter_riverpod/flutter_riverpod.dart';
|
||||
import 'package:go_router/go_router.dart';
|
||||
import 'package:sepot/core/l10n/error_messages.dart';
|
||||
import 'package:sepot/core/l10n/l10n.dart';
|
||||
import 'package:sepot/core/theme/app_theme.dart';
|
||||
import 'package:sepot/models/identity.dart';
|
||||
import 'package:sepot/providers/contacts_provider.dart';
|
||||
import 'package:sepot/widgets/avatar.dart';
|
||||
|
||||
/// Obrazovka kontaktů
|
||||
class ContactsScreen extends ConsumerStatefulWidget {
|
||||
const ContactsScreen({super.key});
|
||||
|
||||
@override
|
||||
ConsumerState<ContactsScreen> createState() => _ContactsScreenState();
|
||||
}
|
||||
|
||||
class _ContactsScreenState extends ConsumerState<ContactsScreen> {
|
||||
final _searchController = TextEditingController();
|
||||
String _searchQuery = '';
|
||||
|
||||
@override
|
||||
void dispose() {
|
||||
_searchController.dispose();
|
||||
super.dispose();
|
||||
}
|
||||
|
||||
@override
|
||||
Widget build(BuildContext context) {
|
||||
final contactsAsync = ref.watch(contactsProvider);
|
||||
|
||||
return Scaffold(
|
||||
appBar: AppBar(
|
||||
title: Text(context.l10n.contactsTitle),
|
||||
actions: [
|
||||
IconButton(
|
||||
icon: const Icon(Icons.group_add_outlined),
|
||||
onPressed: () => context.push('/create-group'),
|
||||
tooltip: context.l10n.groupsNewGroupTitle,
|
||||
),
|
||||
IconButton(
|
||||
icon: const Icon(Icons.qr_code_scanner_rounded),
|
||||
onPressed: () => context.push('/qr-scan'),
|
||||
tooltip: context.l10n.qrScanTitle,
|
||||
),
|
||||
IconButton(
|
||||
icon: const Icon(Icons.person_add_outlined),
|
||||
onPressed: () => _showAddContactDialog(context),
|
||||
tooltip: context.l10n.contactsAddContact,
|
||||
),
|
||||
],
|
||||
),
|
||||
body: Column(
|
||||
children: [
|
||||
// Vyhledávání
|
||||
Padding(
|
||||
padding: const EdgeInsets.all(16),
|
||||
child: TextField(
|
||||
controller: _searchController,
|
||||
decoration: InputDecoration(
|
||||
hintText: context.l10n.contactsSearchHint,
|
||||
prefixIcon: const Icon(Icons.search, color: SepotColors.textMuted),
|
||||
border: OutlineInputBorder(
|
||||
borderRadius: BorderRadius.circular(12),
|
||||
borderSide: const BorderSide(color: SepotColors.border),
|
||||
),
|
||||
),
|
||||
onChanged: (v) => setState(() => _searchQuery = v.toLowerCase()),
|
||||
),
|
||||
),
|
||||
// Sdílet vlastní QR
|
||||
_buildShareCard(context),
|
||||
const Divider(height: 1),
|
||||
// Seznam kontaktů
|
||||
Expanded(
|
||||
child: contactsAsync.when(
|
||||
data: (contacts) {
|
||||
final filtered = contacts.where((c) {
|
||||
if (_searchQuery.isEmpty) return true;
|
||||
return c.displayName.toLowerCase().contains(_searchQuery) ||
|
||||
c.sepotId.toLowerCase().contains(_searchQuery);
|
||||
}).toList();
|
||||
|
||||
if (filtered.isEmpty) {
|
||||
return Center(
|
||||
child: Column(
|
||||
mainAxisAlignment: MainAxisAlignment.center,
|
||||
children: [
|
||||
const Icon(
|
||||
Icons.people_outline,
|
||||
size: 48,
|
||||
color: SepotColors.textMuted,
|
||||
),
|
||||
const SizedBox(height: 16),
|
||||
Text(
|
||||
_searchQuery.isEmpty
|
||||
? context.l10n.contactsEmpty
|
||||
: context.l10n.contactsNoResults,
|
||||
style: const TextStyle(
|
||||
fontFamily: kFontSans,
|
||||
fontSize: 16,
|
||||
color: SepotColors.textSecondary,
|
||||
),
|
||||
),
|
||||
],
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
return ListView.builder(
|
||||
itemCount: filtered.length,
|
||||
itemBuilder: (context, index) {
|
||||
final contact = filtered[index];
|
||||
final displayName = contact.displayName.isEmpty
|
||||
? context.l10n.commonUnknownContact
|
||||
: contact.displayName;
|
||||
return ListTile(
|
||||
leading: SepotAvatar(name: displayName),
|
||||
title: Text(
|
||||
displayName,
|
||||
style: const TextStyle(fontWeight: FontWeight.w500),
|
||||
),
|
||||
subtitle: Row(
|
||||
children: [
|
||||
Text(
|
||||
contact.sepotId,
|
||||
style: SepotTheme.cryptoText.copyWith(fontSize: 11),
|
||||
),
|
||||
if (contact.verified) ...[
|
||||
const SizedBox(width: 8),
|
||||
const Icon(
|
||||
Icons.verified,
|
||||
size: 14,
|
||||
color: SepotColors.ember,
|
||||
),
|
||||
],
|
||||
],
|
||||
),
|
||||
trailing: const Icon(
|
||||
Icons.chat_bubble_outline,
|
||||
color: SepotColors.textMuted,
|
||||
),
|
||||
onTap: () {
|
||||
context.push('/conversation/${contact.publicIdentity.id}');
|
||||
},
|
||||
onLongPress: () =>
|
||||
_showContactOptions(context, contact.id),
|
||||
);
|
||||
},
|
||||
);
|
||||
},
|
||||
loading: () => const Center(
|
||||
child: CircularProgressIndicator(color: SepotColors.ember),
|
||||
),
|
||||
error: (e, _) =>
|
||||
Center(child: Text(describeError(context.l10n, e))),
|
||||
),
|
||||
),
|
||||
],
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
Widget _buildShareCard(BuildContext context) {
|
||||
return InkWell(
|
||||
onTap: () => context.push('/qr-share'),
|
||||
child: Padding(
|
||||
padding: const EdgeInsets.symmetric(horizontal: 16, vertical: 12),
|
||||
child: Row(
|
||||
children: [
|
||||
const CircleAvatar(
|
||||
radius: 24,
|
||||
backgroundColor: SepotColors.surfaceVariant,
|
||||
child: Icon(
|
||||
Icons.qr_code_rounded,
|
||||
color: SepotColors.ember,
|
||||
),
|
||||
),
|
||||
const SizedBox(width: 16),
|
||||
Expanded(
|
||||
child: Column(
|
||||
crossAxisAlignment: CrossAxisAlignment.start,
|
||||
children: [
|
||||
Text(
|
||||
context.l10n.contactsShareCardTitle,
|
||||
style: const TextStyle(
|
||||
fontSize: 15,
|
||||
fontWeight: FontWeight.w600,
|
||||
color: SepotColors.textPrimary,
|
||||
),
|
||||
),
|
||||
Text(
|
||||
context.l10n.contactsShareCardSubtitle,
|
||||
style: const TextStyle(
|
||||
fontSize: 13,
|
||||
color: SepotColors.textSecondary,
|
||||
),
|
||||
),
|
||||
],
|
||||
),
|
||||
),
|
||||
const Icon(Icons.chevron_right, color: SepotColors.textMuted),
|
||||
],
|
||||
),
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
void _showAddContactDialog(BuildContext context) {
|
||||
final idController = TextEditingController();
|
||||
|
||||
showDialog(
|
||||
context: context,
|
||||
builder: (ctx) => AlertDialog(
|
||||
title: Text(context.l10n.contactsAddContact),
|
||||
content: Column(
|
||||
mainAxisSize: MainAxisSize.min,
|
||||
children: [
|
||||
Text(
|
||||
context.l10n.contactsAddDialogPrompt,
|
||||
style: const TextStyle(
|
||||
fontSize: 14, color: SepotColors.textSecondary),
|
||||
),
|
||||
const SizedBox(height: 16),
|
||||
TextField(
|
||||
controller: idController,
|
||||
decoration: InputDecoration(
|
||||
hintText: context.l10n.contactsShareStringHint,
|
||||
prefixIcon: const Icon(Icons.link),
|
||||
),
|
||||
maxLines: 3,
|
||||
),
|
||||
],
|
||||
),
|
||||
actions: [
|
||||
TextButton(
|
||||
onPressed: () => Navigator.of(ctx).pop(),
|
||||
child: Text(context.l10n.commonCancel),
|
||||
),
|
||||
ElevatedButton(
|
||||
onPressed: () async {
|
||||
final shareString = idController.text.trim();
|
||||
if (shareString.isEmpty) return;
|
||||
|
||||
final identity = PublicIdentity.fromShareString(shareString);
|
||||
if (identity == null) {
|
||||
if (ctx.mounted) {
|
||||
ScaffoldMessenger.of(context).showSnackBar(
|
||||
SnackBar(
|
||||
content:
|
||||
Text(context.l10n.contactsInvalidShareString)),
|
||||
);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
try {
|
||||
await ref
|
||||
.read(contactsProvider.notifier)
|
||||
.addContact(identity);
|
||||
if (ctx.mounted) Navigator.of(ctx).pop();
|
||||
if (context.mounted) {
|
||||
ScaffoldMessenger.of(context).showSnackBar(
|
||||
SnackBar(
|
||||
content: Text(context.l10n.contactsAdded(
|
||||
identity.displayName.isEmpty
|
||||
? context.l10n.commonUnknownContact
|
||||
: identity.displayName)),
|
||||
),
|
||||
);
|
||||
}
|
||||
} catch (e) {
|
||||
if (context.mounted) {
|
||||
ScaffoldMessenger.of(context).showSnackBar(
|
||||
SnackBar(content: Text(describeError(context.l10n, e))),
|
||||
);
|
||||
}
|
||||
}
|
||||
},
|
||||
child: Text(context.l10n.commonAdd),
|
||||
),
|
||||
],
|
||||
),
|
||||
);
|
||||
}
|
||||
|
||||
void _showContactOptions(BuildContext context, String contactId) {
|
||||
showModalBottomSheet(
|
||||
context: context,
|
||||
backgroundColor: SepotColors.surface,
|
||||
shape: const RoundedRectangleBorder(
|
||||
borderRadius: BorderRadius.vertical(top: Radius.circular(24)),
|
||||
),
|
||||
builder: (ctx) => SafeArea(
|
||||
child: Column(
|
||||
mainAxisSize: MainAxisSize.min,
|
||||
children: [
|
||||
ListTile(
|
||||
leading: const Icon(Icons.verified_outlined, color: SepotColors.ember),
|
||||
title: Text(context.l10n.chatMenuVerifyContact),
|
||||
subtitle: Text(context.l10n.verifyContactSubtitle),
|
||||
onTap: () {
|
||||
Navigator.of(ctx).pop();
|
||||
// Skutečné ověření = safety number, ne slepé přepnutí flagu
|
||||
context.push('/verify/$contactId');
|
||||
},
|
||||
),
|
||||
ListTile(
|
||||
leading: const Icon(Icons.delete_outline, color: SepotColors.error),
|
||||
title: Text(context.l10n.contactsDeleteContact,
|
||||
style: const TextStyle(color: SepotColors.error)),
|
||||
onTap: () {
|
||||
ref.read(contactsProvider.notifier).removeContact(contactId);
|
||||
Navigator.of(ctx).pop();
|
||||
},
|
||||
),
|
||||
],
|
||||
),
|
||||
),
|
||||
);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user