Parse-sdk-js: Encrypt Current User - LocalStorage

[macarthuror]

Hello guys :vulcan_salute:,

Right now I’m trying to encrypt the data which is storage in the browser and I’m using secure-ls , actually is working fine but only is encrypting the ping data not the Current User.

Do you have any idea of how to do it ?

Thanks and have a good day.

BTW. This is the code I’m using

import SecureLS from 'secure-ls'
const ls = new SecureLS({ isCompression: false })

Parse.enableLocalDatastore()
Parse.setLocalDatastoreController({
  fromPinWithName: name => ls.get(name),
  pinWithName: (name, objects) => ls.set(name, objects),
  unPinWithName: name => ls.remove(name),
  getAllContents: () => ls.getAllKeys(),
  clear: () => ls.removeAll()
})

I wrote it before in the community forum but no one shows up 😅

[dplewis]

Sorry for the late reply. That secure-ls trick looks cool.

The currentUser isn't stored in the localDatastore.

This is the line you are looking for.

[dplewis]

If you want you could do the same for setting the StorageController

Feel free to do a PR.

[macarthuror]

Hello @dplewis 🖖
Sorry for not answering before and thanks for the line I was looking for.

Sure let me try it. 👌😁

[dplewis]

I would like to add SecureLS to the SDK but I’m skeptical. StorageController is swappable so we could have that option.

@acinader @davimacedo Thoughts?

[acinader]

Off the cuff, just documenting it on the readme and maybe the js sdk guide how to use it would be a decent first step?

alternatively, we could make an argument to initialize or a single call to use it wheen Parse SDK is initialized?

[dplewis]

I figure it could be the same as setAsyncStorage for React-Native.

Secure LS has browser support issues i.e Microsoft Edge (insert rant here). I can open a PR for this and we can move the conversation there. @macarthuror what do you think?

[macarthuror]

@acinader I'm gonna documented it in the Readme. Thanks.

@dplewis I like it, also I think we can use other solutions to improve the security without using other repo.

BTW @davimacedo suggest trying with CoreManager.setStorageController()

[dplewis]

I'm going to close this as users can add their own storage implementation if needed.