Skip to content

Resolve "Encrypt REPOSE data before transmission"

Noel Simmel requested to merge 310-encrypt-repose-data-before-transmission into main

Closes #310 (closed)

How to test:

  1. Serve Repose variant: ng s @rcc/app -c=repose --ssl
  2. When open the app, a modal will pop up with a mock respondent ID and passphrase. Accept.
  3. Go to the Repose page through the sidebar. There you will see your user data in JSON format.
  4. Click "Send data" and wait for the confirmation toast
  5. Download the file from Nextcloud via this link: https://psyshare.bihealth.org/s/MdGLzpHwpCa9EX9
  6. Go to the app settings (Settings -> REPOSE) to find your passphrase
  7. Try unzipping the file with the passphrase and see if the file contents match the data in step 3

Note: The file is encrypted with AES. The standard zip service for Windows can't handle AES, I'm using WinRAR. I believe for Unix 7zip or openssl should work.

Edited by Noel Simmel

Merge request reports