f6d7552b58
* Add allowed DNS list for killswitch * Windows killswitch strict mode backend part * Killswitch strict mode for Linux and MacOS * Windows fixes * feature: Add Kill Switch settings page with strict mode option * fix windows build after merge * Refresh killswitch mode when it toggled * Use HLM to store strictMode flag * Some Linux updates * feat: Enhance VerticalRadioButton with improved styling and disabled states * Refresh killSwitch state update * Fix build * refactor: Modularize header components * Change kill switch radio button styling * Fix strict kill switch mode handling * Refactor: Replace HeaderType with new Types for headers in QML pages * Remove deprecated HeaderType QML component * Refresh strict mode killswitch after global toggle change * Implement model, controller and UI for killswitch dns exceptions * Connect backend part and UI * Change label text to DNS exceptions * Remove HeaderType from PageSettingsApiDevices * Some pretty fixes * Fix problem with definition sequence of PageSettingsKillSwitchExceptions.pml elements * Add exclusion method for Windows firewall * Change ubuntu version in deploy script * Update ubuntu version in GH actions * Add confirmation popup for strict killswitch mode * Add qt standard path for build script * Add method to killswitch for expanding strickt mode exceptions list and fix allowTrafficTo() for Windows. Also Added cache in KillSwitch class for exceptions * Add insertion of gateway address to strict killswitch exceptions * Review fixes * buildfix and naming --------- Co-authored-by: aiamnezia <ai@amnezia.org>
59 lines
1.6 KiB
C++
59 lines
1.6 KiB
C++
#ifndef SECUREQSETTINGS_H
|
|
#define SECUREQSETTINGS_H
|
|
|
|
#include <QMutex>
|
|
#include <QMutexLocker>
|
|
#include <QObject>
|
|
#include <QSettings>
|
|
|
|
#include "../client/3rd/qtkeychain/qtkeychain/keychain.h"
|
|
|
|
class SecureQSettings : public QObject
|
|
{
|
|
Q_OBJECT
|
|
|
|
public:
|
|
explicit SecureQSettings(const QString &organization, const QString &application = QString(),
|
|
QObject *parent = nullptr);
|
|
|
|
Q_INVOKABLE QVariant value(const QString &key, const QVariant &defaultValue = QVariant()) const;
|
|
Q_INVOKABLE void setValue(const QString &key, const QVariant &value);
|
|
void remove(const QString &key);
|
|
void sync();
|
|
|
|
QByteArray backupAppConfig() const;
|
|
bool restoreAppConfig(const QByteArray &json);
|
|
|
|
QByteArray encryptText(const QByteArray &value) const;
|
|
QByteArray decryptText(const QByteArray &ba) const;
|
|
|
|
bool encryptionRequired() const;
|
|
|
|
QByteArray getEncKey() const;
|
|
QByteArray getEncIv() const;
|
|
|
|
static QByteArray getSecTag(const QString &tag);
|
|
static void setSecTag(const QString &tag, const QByteArray &data);
|
|
|
|
void clearSettings();
|
|
|
|
private:
|
|
QSettings m_settings;
|
|
|
|
mutable QHash<QString, QVariant> m_cache;
|
|
|
|
QStringList encryptedKeys; // encode only key listed here
|
|
// only this fields need for backup
|
|
QStringList m_fieldsToBackup = {
|
|
"Conf/", "Servers/",
|
|
};
|
|
|
|
mutable QByteArray m_key;
|
|
mutable QByteArray m_iv;
|
|
|
|
const QByteArray magicString { "EncData" }; // Magic keyword used for mark encrypted QByteArray
|
|
|
|
mutable QMutex mutex;
|
|
};
|
|
|
|
#endif // SECUREQSETTINGS_H
|