Add encryption key cleanup on logout
- Clear master encryption key when user logs out - Ensures WiFi passwords cannot be decrypted after logout - Improves security by removing cryptographic material - Complements existing WiFi password clearing on logout 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
parent
f8f195845d
commit
a1264631c0
@ -212,7 +212,7 @@ class ApiService {
|
||||
}
|
||||
}
|
||||
|
||||
// Clear WiFi passwords from SecureStore
|
||||
// Clear WiFi passwords and encryption key from SecureStore
|
||||
try {
|
||||
await wifiPasswordStore.clearAllWiFiPasswords();
|
||||
} catch (error) {
|
||||
@ -220,6 +220,15 @@ class ApiService {
|
||||
// Continue with logout even if cleanup fails
|
||||
}
|
||||
|
||||
// Clear encryption key
|
||||
try {
|
||||
const { clearEncryptionKey } = await import('./encryption');
|
||||
await clearEncryptionKey();
|
||||
} catch (error) {
|
||||
console.error('[API] Encryption key cleanup failed during logout:', error);
|
||||
// Continue with logout even if cleanup fails
|
||||
}
|
||||
|
||||
// Clear WellNuo API auth data
|
||||
await SecureStore.deleteItemAsync('accessToken');
|
||||
await SecureStore.deleteItemAsync('userId');
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user