Skip to content

feat(chat): harden secure chat frontend v1 - #68

Merged
creativaPoeta merged 38 commits into
dev2from
qc-secure-chat-hardening-local
Jul 22, 2026
Merged

feat(chat): harden secure chat frontend v1#68
creativaPoeta merged 38 commits into
dev2from
qc-secure-chat-hardening-local

Conversation

@creativaPoeta

Copy link
Copy Markdown
Contributor

Summary

Frontend hardening for secure_dm_v1 direct messages:

  • removes private-key localStorage fallback and keeps secure device state in IndexedDB
  • adds identity pinning and a fingerprint verification dialog
  • refreshes signed prekeys and replenishes one-time prekeys
  • sends encrypted text and encrypted media in secure chats
  • decrypts secure media client-side before preview/download
  • adds secure device management in settings
  • redacts secure chat foreground notifications
  • blocks plaintext reactions for secure chats
  • adds secure media crypto smoke coverage

Validation

  • npm.cmd run type-check
  • npm.cmd run test:e2ee-media

Rollout Notes

Keep this as a draft until the backend PR is reviewed with it.

Backend must be deployed first with:

  • E2EE endpoints
  • DB migration
  • both old and new Netlify origins temporarily allowed

@netlify

netlify Bot commented May 27, 2026

Copy link
Copy Markdown

Deploy Preview for qiew-code-dev2 ready!

Name Link
🔨 Latest commit ce74484
🔍 Latest deploy log https://app.netlify.com/projects/qiew-code-dev2/deploys/6a195e76471a9000087220fc
😎 Deploy Preview https://deploy-preview-68--qiew-code-dev2.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented May 27, 2026

Copy link
Copy Markdown

Deploy Preview for qc-dev2 ready!

Name Link
🔨 Latest commit ce74484
🔍 Latest deploy log https://app.netlify.com/projects/qc-dev2/deploys/6a195e76c7bb080008d98a22
😎 Deploy Preview https://deploy-preview-68--qc-dev2.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@creativaPoeta creativaPoeta changed the title Qc secure chat hardening local harden secure chat frontend v1 May 27, 2026
@netlify

netlify Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploy Preview for qiew-code-dev2 ready!

Name Link
🔨 Latest commit b49cd57
🔍 Latest deploy log https://app.netlify.com/projects/qiew-code-dev2/deploys/6a611ee735ee1b0008c6c1a4
😎 Deploy Preview https://deploy-preview-68--qiew-code-dev2.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploy Preview for qc-dev2 ready!

Name Link
🔨 Latest commit b49cd57
🔍 Latest deploy log https://app.netlify.com/projects/qc-dev2/deploys/6a611ee71f67bd0007ae1cc8
😎 Deploy Preview https://deploy-preview-68--qc-dev2.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

LinzMatt added 3 commits July 20, 2026 21:03
…ing-local

# Conflicts:
#	components/chat/chat-header.tsx
#	components/chat/chat-page-clean.tsx
#	components/chat/conversation-list-layout.tsx
#	components/chat/options-dropdown.tsx
#	components/chat/start-chart-modal.tsx
@creativaPoeta
creativaPoeta marked this pull request as ready for review July 22, 2026 19:34
@creativaPoeta creativaPoeta changed the title harden secure chat frontend v1 feat(chat): harden secure chat frontend v1 Jul 22, 2026
@creativaPoeta
creativaPoeta merged commit a04b9c6 into dev2 Jul 22, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants