internal: incomplete vault systems behind feature flag (#2340)

packages/services/src/Domain/Contacts/UseCase/ValidateItemSigner.ts

@@ -0,0 +1,122 @@
+import { ItemManagerInterface } from './../../Item/ItemManagerInterface'
+import { doesPayloadRequireSigning } from '@standardnotes/encryption/src/Domain/Operator/004/V004AlgorithmHelpers'
+import { DecryptedItemInterface, PayloadSource } from '@standardnotes/models'
+import { ValidateItemSignerResult } from './ValidateItemSignerResult'
+import { FindTrustedContactUseCase } from './FindTrustedContact'
+
+export class ValidateItemSignerUseCase {
+  private findContactUseCase = new FindTrustedContactUseCase(this.items)
+
+  constructor(private items: ItemManagerInterface) {}
+
+  execute(item: DecryptedItemInterface): ValidateItemSignerResult {
+    const uuidOfLastEditor = item.last_edited_by_uuid
+    if (uuidOfLastEditor) {
+      return this.validateSignatureWithLastEditedByUuid(item, uuidOfLastEditor)
+    } else {
+      return this.validateSignatureWithNoLastEditedByUuid(item)
+    }
+  }
+
+  private isItemLocallyCreatedAndDoesNotRequireSignature(item: DecryptedItemInterface): boolean {
+    return item.payload.source === PayloadSource.Constructor
+  }
+
+  private isItemResutOfRemoteSaveAndDoesNotRequireSignature(item: DecryptedItemInterface): boolean {
+    return item.payload.source === PayloadSource.RemoteSaved
+  }
+
+  private validateSignatureWithLastEditedByUuid(
+    item: DecryptedItemInterface,
+    uuidOfLastEditor: string,
+  ): ValidateItemSignerResult {
+    const requiresSignature = doesPayloadRequireSigning(item)
+
+    const trustedContact = this.findContactUseCase.execute({ userUuid: uuidOfLastEditor })
+    if (!trustedContact) {
+      if (requiresSignature) {
+        return 'no'
+      } else {
+        return 'not-applicable'
+      }
+    }
+
+    if (!item.signatureData) {
+      if (
+        this.isItemLocallyCreatedAndDoesNotRequireSignature(item) ||
+        this.isItemResutOfRemoteSaveAndDoesNotRequireSignature(item)
+      ) {
+        return 'not-applicable'
+      }
+      if (requiresSignature) {
+        return 'no'
+      }
+      return 'not-applicable'
+    }
+
+    const signatureData = item.signatureData
+    if (!signatureData.result) {
+      if (signatureData.required) {
+        return 'no'
+      }
+      return 'not-applicable'
+    }
+
+    const signatureResult = signatureData.result
+
+    if (!signatureResult.passes) {
+      return 'no'
+    }
+
+    const signerPublicKey = signatureResult.publicKey
+
+    if (trustedContact.isSigningKeyTrusted(signerPublicKey)) {
+      return 'yes'
+    }
+
+    return 'no'
+  }
+
+  private validateSignatureWithNoLastEditedByUuid(item: DecryptedItemInterface): ValidateItemSignerResult {
+    const requiresSignature = doesPayloadRequireSigning(item)
+
+    if (!item.signatureData) {
+      if (
+        this.isItemLocallyCreatedAndDoesNotRequireSignature(item) ||
+        this.isItemResutOfRemoteSaveAndDoesNotRequireSignature(item)
+      ) {
+        return 'not-applicable'
+      }
+
+      if (requiresSignature) {
+        return 'no'
+      }
+
+      return 'not-applicable'
+    }
+
+    const signatureData = item.signatureData
+    if (!signatureData.result) {
+      if (signatureData.required) {
+        return 'no'
+      }
+      return 'not-applicable'
+    }
+
+    const signatureResult = signatureData.result
+
+    if (!signatureResult.passes) {
+      return 'no'
+    }
+
+    const signerPublicKey = signatureResult.publicKey
+
+    const trustedContact = this.findContactUseCase.execute({ signingPublicKey: signerPublicKey })
+
+    if (trustedContact) {
+      return 'yes'
+    }
+
+    return 'no'
+  }
+}