jaredandClaude Opus 4.8
726cefb5ab
Several localStorage caches held decrypted message content or user PII and survived a normal logout, leaving residue on a shared device (the search index was already wiped; these were not): - cinny_scheduled_messages_v1 - decrypted IContent.body of pending sends - cinny_recent_searches_v1 - search query text - cinny_recent_forward_targets_v1 - recent forward contact/room graph - cinny_recent_gifs_v1 / cinny_recent_stickers_v1 - media the user sent - navToActivePath<userId> - per-space last-visited room paths - (plus the translation cache added earlier) Add a clear function per module and a single auditable clearPlaintextCaches() aggregator, called from both logout paths (logoutClient + the server-forced SessionLoggedOut handler) alongside the existing session/search-index wipes. Unit-tested. Deliberately NOT cleared (documented in the aggregator): unsent composer drafts and the presence status message (preserved by product decision N98); SDK sync/crypto store + io.lotus.* account data (reminders/bookmarks/notes), already wiped by mx.clearStores(); low-sensitivity UI/metadata residue. The forward-targets/gifs/stickers/nav-path additions and the accurate "not covered" documentation address findings from two review passes. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
56 lines
1.7 KiB
TypeScript
56 lines
1.7 KiB
TypeScript
import { atom } from 'jotai';
|
|
import { atomWithStorage, createJSONStorage } from 'jotai/utils';
|
|
import { IContent } from 'matrix-js-sdk';
|
|
|
|
export type ScheduledMessage = {
|
|
delayId: string;
|
|
roomId: string;
|
|
content: IContent;
|
|
sendAt: number; // Unix timestamp ms
|
|
};
|
|
|
|
const STORAGE_KEY = 'cinny_scheduled_messages_v1';
|
|
|
|
// Internal atom persists as a plain Record (JSON-serializable).
|
|
const internalAtom = atomWithStorage<Record<string, ScheduledMessage[]>>(
|
|
STORAGE_KEY,
|
|
{},
|
|
createJSONStorage(() => localStorage),
|
|
);
|
|
|
|
/**
|
|
* Global atom: Map<roomId, ScheduledMessage[]>
|
|
* Stores all locally-tracked scheduled messages across rooms.
|
|
* MSC4140 has no list endpoint, so we track them ourselves.
|
|
* Backed by localStorage so scheduled messages survive page refreshes.
|
|
*/
|
|
export const scheduledMessagesAtom = atom(
|
|
(get): Map<string, ScheduledMessage[]> => new Map(Object.entries(get(internalAtom))),
|
|
(
|
|
_get,
|
|
set,
|
|
updater:
|
|
| Map<string, ScheduledMessage[]>
|
|
| ((prev: Map<string, ScheduledMessage[]>) => Map<string, ScheduledMessage[]>),
|
|
) => {
|
|
set(internalAtom, (prevObj) => {
|
|
const prevMap = new Map(Object.entries(prevObj));
|
|
const nextMap = typeof updater === 'function' ? updater(prevMap) : updater;
|
|
return Object.fromEntries(nextMap.entries());
|
|
});
|
|
},
|
|
);
|
|
|
|
/**
|
|
* Wipe persisted scheduled messages. Called on logout — the stored content is
|
|
* decrypted message plaintext (the E2EE `body`), so it must not survive a
|
|
* session on a shared device.
|
|
*/
|
|
export const clearScheduledMessages = (): void => {
|
|
try {
|
|
localStorage.removeItem(STORAGE_KEY);
|
|
} catch {
|
|
/* localStorage unavailable — nothing to clear */
|
|
}
|
|
};
|