deepvault
v1.0.1
Published
Safely store data in the browser with AES encryption
Downloads
139
Maintainers
Readme
DEEPVAULT - DOCUMENTATION
WHAT IS IT?
DeepVault allows you to safely store data in the browser with AES encryption.
MOTIVATION
Storing data in the browser is very convenient, but not secure. It can be fixed by only storing it in an internal volatile state that gets erased once the user closes the app or refreshes the page. This technique offers a good level of security but necessitate to repeat api calls to retrieve the same data each time a user launches your app.
Thanks to DeepVault, you can now directly encrypt sensitive data (geolocation, email, etc.), in your browser and access it with a cryptographic key as if you were using good old local storage.
features:
- Save, read, update and delete encrypted data in the browser.
- Supports Typescript.
- No dependencies.
- Extra-light package.
HOW DOES IT WORK?
Vaults file
- Create a
vaults.js
file (the name and the extension doesn't matter). - Create as many instances of DeepVault as you want and export them.
- Each instance is dedicated to a single dataset.
import DeepVault from "deepvault";
export const userVault = new DeepVault("user");
export const cashVault = new DeepVault("cash");
Save data
import { userVault } from "./vaults";
const onLogin = async (form) => {
try {
const user = await login(form)
await userVault.encryptAndSaveData(user)
return saveUserInGlobalState(user)
}
catch(err){
throw new Error(err)
}
Read data
import { userVault } from "./vaults";
const getUser = async () => {
try {
const user = await userVault.getDecryptedData()
if (user) return saveUserInGlobalState(user)
return null
}
catch(err){
throw new Error(err)
}
Update data
import { userVault } from "./vaults";
const updateUser = async (user) => {
try {
await userVault.updateData(user)
return saveUserInGlobalState(user)
}
catch(err){
throw new Error(err)
}
Delete data
import { userVault } from "./vaults";
const logout = async () => {
try {
await userVault.deleteData()
return clearGlobalState()
}
catch(err){
throw new Error(err)
}
The dummy functions
saveUserInGlobalState()
andclearGlobalState()
are not part of DeepVault. You should implement them yourself. If you use React, Redux or Zustand will work fine.
Methods
DeepVault offers you 6 methods:
| |Type |Role |
|----------------|-------------------------------|-----------------------------|
|decryptData |(data: string) => Promise<any>
|Decrypt data. |
|deleteData |() => void
|Delete data. |
|encryptAndSaveData |(data: any) => void
|Encrypt and save data|
|getEncryptedData |() => string
|Get data without decrypting it. Useful to check the existence of an item without any need to access its information.|
|getDecryptedData |() => Promise<any>
|Get decrypted data.|
|updateData |(data: any) => Promise<string>
|Update an item already encrypted and saved. This method will replace the former data with the new one.|
CONTRIBUTING
Feel free to send your pull requests or to raise issues on the github repository.
SECURITY
Albeit DeepVault should bring a good level of security to the persistent data stored in your users' browsers, it may not be immune to all attacks. Please weight up the pros and cons and design your app carefully.
You can learn more about Advanced Encryption Standard and Galois Counter Mode here:
- https://en.wikipedia.org/wiki/Galois/Counter_Mode
- https://fr.wikipedia.org/wiki/Advanced_Encryption_Standard
CREDITS
DoneDeal0
Logo made by throwaway icons from the Noun Project