Merge pull request #53 from BeamFi/dev

Improve security using Web Crypto API to encrypt / decrypt meeting id and password in query params
BeamFi · Mar 29, 2023 · 2ff2aec · 2ff2aec
2 parents 4f83060 + 17780c6
commit 2ff2aec
Show file tree

Hide file tree

Showing 8 changed files with 1,482 additions and 1,320 deletions.
diff --git a/.env.development b/.env.development
@@ -3,4 +3,5 @@ NEXT_PUBLIC_II_CANISTER=http://localhost:8000/?canisterId=wxns6-qiaaa-aaaaa-aaaq
 NEXT_PUBLIC_ENABLE_SPLITFEE=false
 NEXT_PUBLIC_MEETING_HOST=http://localhost:3001
 NEXT_PUBLIC_ENABLE_MEETING=true
+NEXT_PUBLIC_WEB_CRYPTO_KEY="s0WfD8cXQvzRB+Ztst60NteNwjWrJVyKyJpYyhUZ5ig="
 DFX_NETWORK=local
diff --git a/.env.iclocal b/.env.iclocal
@@ -3,4 +3,5 @@ NEXT_PUBLIC_II_CANISTER=http://localhost:8000/?canisterId=wxns6-qiaaa-aaaaa-aaaq
 NEXT_PUBLIC_ENABLE_SPLITFEE=false
 NEXT_PUBLIC_MEETING_HOST=http://localhost:3001
 NEXT_PUBLIC_ENABLE_MEETING=true
+NEXT_PUBLIC_WEB_CRYPTO_KEY="s0WfD8cXQvzRB+Ztst60NteNwjWrJVyKyJpYyhUZ5ig="
 DFX_NETWORK=local
diff --git a/.github/workflows/firebase-hosting-dev.yml b/.github/workflows/firebase-hosting-dev.yml
@@ -11,6 +11,8 @@ jobs:
       - uses: actions/checkout@v3
       - run: corepack enable && corepack prepare pnpm@latest --activate
       - run: ./scripts/setup-ui-dev.sh && pnpm install && pnpm run build
+        env:
+          NEXT_PUBLIC_WEB_CRYPTO_KEY: ${{ secrets.NEXT_PUBLIC_WEB_CRYPTO_KEY }}
       - uses: FirebaseExtended/action-hosting-deploy@v0
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"

diff --git a/.github/workflows/firebase-hosting-prod.yml b/.github/workflows/firebase-hosting-prod.yml
@@ -9,6 +9,8 @@ jobs:
       - uses: actions/checkout@v3
       - run: corepack enable && corepack prepare pnpm@latest --activate
       - run: ./scripts/setup-ui-prod.sh && pnpm install && pnpm run build
+        env:
+          NEXT_PUBLIC_WEB_CRYPTO_KEY: ${{ secrets.NEXT_PUBLIC_WEB_CRYPTO_KEY }}
       - uses: FirebaseExtended/action-hosting-deploy@v0
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"