fix(app): accept incoming calls, restore from recovery phrase, duress session isolation, message loss

Calls: `call` was missing from the known content types, so every offer was acknowledged and dropped; the call screen column now fills the width (the avatar jumped left after hang-up); a ring started from a push ends after 12 s when no offer arrives; STUN fallback when no TURN credentials. Registration: X-Sepot-Identity-Proof lets a new device reclaim an existing identity; retry backs off from 30 s to 10 min and exposes a conflict flag. Prekeys: PrekeysLow triggers a batch of 50 one-time prekeys via POST /v1/keys; the signed prekey rotates weekly, the Kyber prekey monthly. Messaging: crypto operations run serially (concurrent encrypts derived the same message key); stop() waits for in-flight deliveries (auto-lock between decrypt and persist lost messages); disappearing-message cleanup no longer overwrites fresh messages; a push wake-up reconnects stale connections; the outbox carries polls and mentions; length limits on wire input. Storage: a duress session never exposes the real identity or phrase, does not start networking and cannot touch the keystore; deleting data in a duress session leaves the real account alone; PIN guessing is throttled (5 misses, then 30 s doubling up to 15 min); the duress blob shares the salt so unlock time does not reveal which PIN was entered; iOS keychain items are this-device only; biometrics are biometric-only; screen security defaults to on and is applied after unlock; tapjacking filter in MainActivity. Tests: content types, shared-salt unwrap, duress isolation.
2026-10-09 14:02:33 +02:00
parent 8b452a5593
commit e3a2378c34
33 changed files with 1055 additions and 162 deletions
@@ -0,0 +1,20 @@
+import 'package:flutter_test/flutter_test.dart';
+import 'package:sepot/core/services/messaging_service.dart';
+
+/// Přijímací cesta zahazuje obsah neznámého typu (ACK + drop, protože po
+/// upgradu už nejde dešifrovat znovu). Každý typ, který appka sama posílá,
+/// proto MUSÍ být v množině známých typů. V 1.2.0 tu chyběl `call` — každá
+/// nabídka hovoru se tiše zahodila a hovory nešly přijmout.
+void main() {
+  test('všechny odesílané typy obsahu umí přijímací cesta zpracovat', () {
+    const sent = {
+      'txt', 'att', 'rx', 'edit', 'del', 'dlv', 'rr', 'typ', 'vote', 'call',
+      'ginv', 'gleave', 'gmeta', 'gop', 'gsync',
+    };
+    expect(MessagingService.knownContentTypes, containsAll(sent));
+  });
+
+  test('signalizace hovoru je známý typ', () {
+    expect(MessagingService.knownContentTypes, contains('call'));
+  });
+}
@@ -0,0 +1,49 @@
+import 'dart:typed_data';
+
+import 'package:flutter_test/flutter_test.dart';
+import 'package:sepot/core/crypto/dek_wrap.dart';
+
+/// Skutečný a nátlakový blob se sdílenou solí se zkouší jednou derivací:
+/// který PIN padl, nejde poznat z času odemčení.
+void main() {
+  final real = Uint8List.fromList(List.generate(32, (i) => i));
+  final decoy = Uint8List.fromList(List.generate(32, (i) => 255 - i));
+  // Nejslabší povolené parametry — test nemá čekat na 64 MiB derivaci.
+  const m = DekWrap.floorMemoryKiB;
+  const t = DekWrap.floorIterations;
+
+  test('sdílená sůl: oba PINy se najdou, špatný PIN padne', () async {
+    final wReal = await DekWrap.wrap(
+        dek: real, pin: '111111', memoryKiB: m, iterations: t);
+    final salt = DekWrap.saltOf(wReal);
+    final wDecoy = await DekWrap.wrap(
+        dek: decoy, pin: '222222', memoryKiB: m, iterations: t, salt: salt);
+    expect(DekWrap.saltOf(wDecoy), salt);
+
+    final (i1, d1) = await DekWrap.unwrapFirstMatching(
+        wrapped: [wReal, wDecoy], pin: '111111');
+    expect(i1, 0);
+    expect(d1, real);
+
+    final (i2, d2) = await DekWrap.unwrapFirstMatching(
+        wrapped: [wReal, wDecoy], pin: '222222');
+    expect(i2, 1);
+    expect(d2, decoy);
+
+    await expectLater(
+      DekWrap.unwrapFirstMatching(wrapped: [wReal, wDecoy], pin: '333333'),
+      throwsA(isA<WrongPinException>()),
+    );
+  });
+
+  test('různé soli (starší instalace) fungují dál', () async {
+    final wReal = await DekWrap.wrap(
+        dek: real, pin: '111111', memoryKiB: m, iterations: t);
+    final wDecoy = await DekWrap.wrap(
+        dek: decoy, pin: '222222', memoryKiB: m, iterations: t);
+    final (i, d) = await DekWrap.unwrapFirstMatching(
+        wrapped: [wReal, wDecoy], pin: '222222');
+    expect(i, 1);
+    expect(d, decoy);
+  });
+}
@@ -0,0 +1,86 @@
+// Argon2id (64 MiB) ×6 pod zátěží celé sady: víc než výchozích 30 s.
+@Timeout(Duration(minutes: 3))
+library;
+
+import 'dart:io';
+
+import 'package:flutter_secure_storage/flutter_secure_storage.dart';
+import 'package:flutter_test/flutter_test.dart';
+import 'package:sepot/core/crypto/dek_wrap.dart';
+import 'package:sepot/core/crypto/sepot_crypto.dart';
+import 'package:sepot/core/storage/secure_storage.dart';
+import 'package:sepot/models/identity.dart';
+
+/// Nátlaková (decoy) relace musí být izolovaná od skutečného účtu:
+/// jiná identita, žádná fráze, „smazat" nesáhne na skutečná data,
+/// a zámek režim resetuje. Keystore je nahrazený mockem, DB jde do temp.
+/// Potřebuje nativní libsignal (LocalIdentity) a sqlcipher.
+void main() {
+  TestWidgetsFlutterBinding.ensureInitialized();
+  late Directory tmp;
+  late SecureStorageService storage;
+
+  setUpAll(() async => SepotCrypto.init());
+
+  setUp(() async {
+    FlutterSecureStorage.setMockInitialValues({});
+    tmp = Directory.systemTemp.createTempSync('sepot_decoy');
+    storage = SecureStorageService(dbPath: '${tmp.path}/app.db');
+    await storage.unlockWithoutPin();
+    await storage.saveIdentity(await LocalIdentity.create('Alice'));
+    await storage.saveSeedPhrase(List.filled(24, 'abandon'));
+    await storage.enablePin('111111');
+    await storage.enableDecoyPin('222222');
+    storage.lock();
+  });
+
+  tearDown(() {
+    storage.lock();
+    tmp.deleteSync(recursive: true);
+  });
+
+  test('decoy PIN otevře izolovanou relaci', () async {
+    await storage.unlockWithPin('222222');
+    expect(storage.isDecoyMode, isTrue);
+    expect(await storage.loadSeedPhrase(), isNull);
+    final shown = await storage.loadIdentity();
+    expect(shown, isNotNull);
+
+    storage.lock();
+    expect(storage.isDecoyMode, isFalse);
+    await storage.unlockWithPin('111111');
+    expect(storage.isDecoyMode, isFalse);
+    final real = await storage.loadIdentity();
+    expect(real!.id, isNot(shown!.id), reason: 'decoy ukazuje jinou identitu');
+    expect(await storage.loadSeedPhrase(), hasLength(24));
+  });
+
+  test('smazání v decoy relaci nechá skutečná data', () async {
+    await storage.unlockWithPin('222222');
+    await storage.deleteAll();
+    expect(File('${tmp.path}/app.db').existsSync(), isTrue);
+    expect(await storage.hasIdentity(), isTrue);
+    expect(await storage.hasPin(), isTrue);
+    await storage.unlockWithPin('111111');
+    expect(storage.isDecoyMode, isFalse);
+  });
+
+  test('změny keystore jsou v decoy relaci zakázané', () async {
+    await storage.unlockWithPin('222222');
+    expect(() => storage.enableBiometrics(), throwsStateError);
+    expect(() => storage.disablePin(), throwsStateError);
+    expect(
+        () => storage.changePin(oldPin: '222222', newPin: '333333'),
+        throwsStateError);
+  });
+
+  test('po pěti špatných PINech se zámek na čas zavře', () async {
+    for (var i = 0; i < 5; i++) {
+      await expectLater(storage.unlockWithPin('000000'),
+          throwsA(isA<WrongPinException>()));
+    }
+    expect(await storage.pinLockRemaining(), isNotNull);
+    await expectLater(storage.unlockWithPin('111111'),
+        throwsA(isA<PinLockedException>()));
+  });
+}