Devlog 13

Device manager is pretty much ready to go to production from API pov (there are some things that I still need to code tho), from last devlog I integrated it with Auth microservice, with each login / session refreshment it’s checked if given device is blocked, if so, Mossy will refuse to provide user new tokens.

PS: look at those green tests (so cool)!

Hello there!

From last devlog I’ve managed to add some features for this new Device Trust Microservice.

• Right now device can be blocked by another device (it will stop this device from access to account)
• Nonce challenge is working and has really good test coverage (this whole microservice does too) thanks to TDD
• I’ve finished implementing controllers & their tests

It might look like TDD is slowing me down, but my code is getting really mature (each scenario is prepared). For whole process of developing this MS I didn’t opened insomnia even once - and that’s cool, because running tests without running whole MS (and it’s dependencies) is much faster.

See ya!

Hello everyone,

For last 10 hours I’ve made major progress on Mossy development.

• First of all my custom JWKS system got replaced by Spring Boot OAuth2 Resource Server Starter (looong name isn’t it?), it’ll make future maintance & coding much easier. In futher I’m going to migrate it to use Authorization Server Starter to achive full OAuth2 compatibility.
• Also I’ve been learning how TDD works, and for last 4 hours I’ve been using it during coding, it makes life so much easier!
• I’m currently working on new feature - Device Manager, it’s really huge feature (I need to refactor existing Device MS), but it’s really exciting, it’ll show you what devices are added to your account & analyze risk of each login (based on your common IP & MAC & OS & some more) it requires me to change old Device Microservice domain to just key-sync. Also I’ll create 2 new microservices - one called Device Trust (I’m working on it currently), it’ll tell my Authentication system to allow login or not (before cryptography was just for key-sync) by using challenge - client’ll receive randomly generated nonce and it’ll have to sign it with it’s key. Then if everything is alright it’ll ask Risk Engine if it should send user an alert or not (in future it might require MFA from client detected as higher risk)

This is my biggest project ever
Stay tuned!

Mossy now supports ssh public keys as well

• Refactored actions in frontend code to achive cleaner code
• Added validation of ssh keys

Mossy now supports SSH keys!

• Old Add Password form got removed, and replaced by new, cleaner one.
• Also I’m on my way to refactor code, and make lifting of Mossy’s extension UI.
• Support for public keys, and other SSH specific features will be introduce later, right now, only private key is supported

Notes system is ready and works like a charm, I had minor problem with JPA while implementing it (Cascade.ALL) fixed issue. Notes are encrypted with vault encryption key, so it’s suitable for sensitive data. Next up I’ll implement usage history!

Now, I’m working on implementing notes for passwords, backend is already ready, and frontend logic is half-way there, probably I’ll finish everything tommorow. Also I’ve made major refactor in vault request handlers logic by creating AbstractVaultRequestHandler to keep boilerplate-code in one place.

Mossy’s search engine works like a charm!

Currently, I’m working on a search engine for Mossy using Fuse.js. There are still a few things to implement, such as the UI for query search, and some bugs in the tag search logic to fix.

I’ve finaly finished system of managing tags! I really like how it turned out. Next up I’ll work on searching and filtering passwords!

Whole tag system is ready on backend, currently I’m working on integrating frontend with API in nice way. stay tuned !!!

I’ve created vault <—> backend communication for adding, assigning, and getting tags. Also adding logic is ready on frontend. Whole system ’ll be ready by tommorow 😱

Currently, I’m writing tag management system, that will include CRUD on tags, searching for passwords with tags. Adding tags already works! Also I’ve made really nice roadmap of Mossy Development!