Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Disable slash commands for encrypted rooms #32548

Merged
merged 13 commits into from
Jun 19, 2024

Conversation

yash-rajpal
Copy link
Member

@yash-rajpal yash-rajpal commented Jun 3, 2024

Proposed changes (including videos or screenshots)

Currently, several apps and bots don’t work properly in E2EE rooms
So, it is needed to make clear to users that it is not possible to use apps and slash commands if E2EE is enabled in the room.

Issue(s)

Steps to test or reproduce

Further comments

E2EE-24

@yash-rajpal yash-rajpal requested a review from a team as a code owner June 3, 2024 20:08
Copy link
Contributor

dionisio-bot bot commented Jun 3, 2024

Looks like this PR is ready to merge! 🎉
If you have any trouble, please check the PR guidelines

Copy link

changeset-bot bot commented Jun 3, 2024

🦋 Changeset detected

Latest commit: 220a40c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 34 packages
Name Type
@rocket.chat/i18n Patch
@rocket.chat/meteor Patch
@rocket.chat/mock-providers Patch
@rocket.chat/ui-contexts Patch
@rocket.chat/web-ui-registration Patch
@rocket.chat/fuselage-ui-kit Patch
@rocket.chat/ui-client Patch
@rocket.chat/gazzodown Patch
@rocket.chat/livechat Patch
@rocket.chat/ui-avatar Patch
@rocket.chat/ui-video-conf Patch
@rocket.chat/uikit-playground Patch
@rocket.chat/ddp-streamer Patch
@rocket.chat/omnichannel-transcript Patch
@rocket.chat/core-typings Patch
@rocket.chat/rest-typings Patch
@rocket.chat/apps Patch
@rocket.chat/core-services Patch
@rocket.chat/cron Patch
@rocket.chat/model-typings Patch
@rocket.chat/account-service Patch
@rocket.chat/authorization-service Patch
@rocket.chat/presence-service Patch
@rocket.chat/queue-worker Patch
@rocket.chat/stream-hub-service Patch
@rocket.chat/api-client Patch
@rocket.chat/license Patch
@rocket.chat/omnichannel-services Patch
@rocket.chat/pdf-worker Patch
@rocket.chat/presence Patch
rocketchat-services Patch
@rocket.chat/ddp-client Patch
@rocket.chat/models Patch
@rocket.chat/instance-status Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Copy link

codecov bot commented Jun 3, 2024

Codecov Report

Attention: Patch coverage is 87.50000% with 2 lines in your changes missing coverage. Please review.

Project coverage is 55.13%. Comparing base (c5edd04) to head (220a40c).

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##           develop   #32548      +/-   ##
===========================================
+ Coverage    55.02%   55.13%   +0.10%     
===========================================
  Files         2390     2394       +4     
  Lines        53126    53186      +60     
  Branches     10933    10945      +12     
===========================================
+ Hits         29234    29322      +88     
+ Misses       21312    21271      -41     
- Partials      2580     2593      +13     
Flag Coverage Δ
e2e 53.48% <87.50%> (+0.19%) ⬆️
unit 72.15% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@geekgonecrazy
Copy link
Contributor

geekgonecrazy commented Jun 5, 2024

Slash commands are executed client side aren't they? Won't some still work just the output not encrypted?

@yash-rajpal
Copy link
Member Author

You are right @geekgonecrazy but in latest versions we introduced a new setting and behavior that un-encrypted messages won't be allowed in encrypted rooms.

Also, currently we have no way of knowing which apps and slash-commands won't work with encrypted messages and channels, so we decided to block all apps and slashcommands.

@yash-rajpal yash-rajpal changed the title chore: Disable slash commands for encrypted rooms feat: Disable slash commands for encrypted rooms Jun 5, 2024
@hugocostadev
Copy link
Contributor

hugocostadev commented Jun 7, 2024

I also think that we need to revisit this, maybe encrypt messages sent by apps/bots if the settings that allow unencrypted messages is enabled

Copy link
Contributor

@hugocostadev hugocostadev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Allow bots and apps if the "Unencrypted messages in encrypted rooms" is enabled

@yash-rajpal
Copy link
Member Author

yash-rajpal commented Jun 10, 2024

I also think that we need to revisit this, maybe encrypt messages sent by apps/bots if the settings that allow unencrypted messages is enabled

I don't think that is something possible with current architecture.

Copy link
Contributor

@hugocostadev hugocostadev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, but it's missing tests too 🫣

Copy link
Contributor

@hugocostadev hugocostadev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Slash commands are not working in not encrypted channels/DMs

image

apps/meteor/tests/e2e/e2e-encryption.spec.ts Outdated Show resolved Hide resolved
apps/meteor/tests/e2e/e2e-encryption.spec.ts Outdated Show resolved Hide resolved
hugocostadev
hugocostadev previously approved these changes Jun 12, 2024
@milton-rucks milton-rucks added this to the 6.10 milestone Jun 17, 2024
@milton-rucks milton-rucks added the stat: QA assured Means it has been tested and approved by a company insider label Jun 18, 2024
@yash-rajpal yash-rajpal added the stat: ready to merge PR tested and approved waiting for merge label Jun 19, 2024
@kodiakhq kodiakhq bot merged commit ee43f2c into develop Jun 19, 2024
40 of 48 checks passed
@kodiakhq kodiakhq bot deleted the e2e-disable-slash-commands branch June 19, 2024 19:46
This was referenced Jun 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
stat: QA assured Means it has been tested and approved by a company insider stat: ready to merge PR tested and approved waiting for merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants