mirror of
https://github.com/vector-im/element-web.git
synced 2024-11-26 18:38:41 +08:00
f28f1d998f
* Add labs option to exclude unverified devices Add a labs option which will, when set, switch into the "invisible crypto" mode of refusing to send keys to, or decrypt messages from, devices that have not been signed by their owner. * DecryptionFailureBody: better error messages Improve the error messages shown for messages from insecure devices. * playwright: factor out `createSecondBotDevice` utility * Playwright test for messages from insecure devices * fixup! DecryptionFailureBody: better error messages Use compound colour tokens, and add a background colour. * fixup! DecryptionFailureBody: better error messages Use compound spacing tokens
57 lines
2.0 KiB
TypeScript
57 lines
2.0 KiB
TypeScript
/*
|
|
Copyright 2024 New Vector Ltd.
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only OR GPL-3.0-only
|
|
Please see LICENSE files in the repository root for full details.
|
|
*/
|
|
|
|
import { expect, test } from "../../element-web-test";
|
|
import { autoJoin, createSecondBotDevice, createSharedRoomWithUser, verify } from "./utils";
|
|
import { bootstrapCrossSigningForClient } from "../../pages/client.ts";
|
|
|
|
/** Tests for the "invisible crypto" behaviour -- i.e., when the "exclude insecure devices" setting is enabled */
|
|
test.describe("Invisible cryptography", () => {
|
|
test.use({
|
|
displayName: "Alice",
|
|
botCreateOpts: { displayName: "Bob" },
|
|
labsFlags: ["feature_exclude_insecure_devices"],
|
|
});
|
|
|
|
test("Messages fail to decrypt when sender is previously verified", async ({
|
|
page,
|
|
bot: bob,
|
|
user: aliceCredentials,
|
|
app,
|
|
homeserver,
|
|
}) => {
|
|
await app.client.bootstrapCrossSigning(aliceCredentials);
|
|
await autoJoin(bob);
|
|
|
|
// create an encrypted room
|
|
const testRoomId = await createSharedRoomWithUser(app, bob.credentials.userId, {
|
|
name: "TestRoom",
|
|
initial_state: [
|
|
{
|
|
type: "m.room.encryption",
|
|
state_key: "",
|
|
content: {
|
|
algorithm: "m.megolm.v1.aes-sha2",
|
|
},
|
|
},
|
|
],
|
|
});
|
|
|
|
// Verify Bob
|
|
await verify(app, bob);
|
|
|
|
// Bob logs in a new device and resets cross-signing
|
|
const bobSecondDevice = await createSecondBotDevice(page, homeserver, bob);
|
|
await bootstrapCrossSigningForClient(await bobSecondDevice.prepareClient(), bob.credentials, true);
|
|
|
|
/* should show an error for a message from a previously verified device */
|
|
await bobSecondDevice.sendMessage(testRoomId, "test encrypted from user that was previously verified");
|
|
const lastTile = page.locator(".mx_EventTile_last");
|
|
await expect(lastTile).toContainText("Verified identity has changed");
|
|
});
|
|
});
|