Add encryption key cleanup on logout
- Clear master encryption key when user logs out - Ensures WiFi passwords cannot be decrypted after logout - Improves security by removing cryptographic material - Complements existing WiFi password clearing on logout 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
parent
f8f195845d
commit
a1264631c0
@ -212,7 +212,7 @@ class ApiService {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// Clear WiFi passwords from SecureStore
|
// Clear WiFi passwords and encryption key from SecureStore
|
||||||
try {
|
try {
|
||||||
await wifiPasswordStore.clearAllWiFiPasswords();
|
await wifiPasswordStore.clearAllWiFiPasswords();
|
||||||
} catch (error) {
|
} catch (error) {
|
||||||
@ -220,6 +220,15 @@ class ApiService {
|
|||||||
// Continue with logout even if cleanup fails
|
// Continue with logout even if cleanup fails
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Clear encryption key
|
||||||
|
try {
|
||||||
|
const { clearEncryptionKey } = await import('./encryption');
|
||||||
|
await clearEncryptionKey();
|
||||||
|
} catch (error) {
|
||||||
|
console.error('[API] Encryption key cleanup failed during logout:', error);
|
||||||
|
// Continue with logout even if cleanup fails
|
||||||
|
}
|
||||||
|
|
||||||
// Clear WellNuo API auth data
|
// Clear WellNuo API auth data
|
||||||
await SecureStore.deleteItemAsync('accessToken');
|
await SecureStore.deleteItemAsync('accessToken');
|
||||||
await SecureStore.deleteItemAsync('userId');
|
await SecureStore.deleteItemAsync('userId');
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user