This is an end-to-end encrypted HIPAA-compliant demo chat app for Firebase that is using [Virgil Security](https://virgilsecurity.com)'s [E3Kit JavaScript SDK](https://github.com/VirgilSecurity/virgil-e3kit-js). The demo allows you to register users and back up their private keys, create peer-to-peer channels and send end-to-end encrypted messages.
4 |
5 | You can reuse this sample in your projects to protect user data, documents, images using Virgil's end-to-end encryption [HIPAA whitepaper](https://virgilsecurity.com/wp-content/uploads/2018/07/Firebase-HIPAA-Chat-Whitepaper-Virgil-Security.pdf).
6 |
7 | After you set up the demo with the all credentials required in the instructions below you can run a chat for chatting:
8 |
9 | 
10 |
11 | > The demo is using E3Kit v2.3.3.
12 |
13 | ## Prerequisites
14 |
15 | * [Node v10](https://nodejs.org/en/download) or newer
16 | * [npm](https://www.npmjs.com/get-npm) or [yarn](https://yarnpkg.com/)
17 |
18 | ## Set up and run demo
19 |
20 | ### Clone JavaScript project
21 |
22 | ```bash
23 | git clone https://github.com/VirgilSecurity/demo-firebase-js
24 | cd demo-firebase-js
25 | ```
26 |
27 | ### Connect your Virgil and Firebase accounts
28 |
29 | To connect your Virgil and Firebase accounts, you need to deploy a Firebase function that gives out Virgil JWT tokens for your authenticated users.
30 |
31 | To deploy the function, head over to our GitHub repo and follow the instructions in README:
32 |
33 | * **[Firebase function deployment instructions](https://github.com/VirgilSecurity/e3kit-firebase-func)**
34 |
35 | #### Configure Authentication
36 |
37 | At Firebase dashboard, select the **Authentication** panel and then click the **Sign In Method** tab. Choose the **E-mail** authentication method and click **Done**, then follow instructions and click **Save**.
38 |
39 | 
40 |
41 |
42 | #### Configure Cloud Firestore
43 |
44 | Set up a Firestore database for the sample apps:
45 | 1. Select the **Cloud Firestore** panel
46 | 2. Click **Create database** under Firestore
47 | 3. Choose **Start in test mode** and click **Enable**
48 |
49 | Once the database is created, click on the **Rules** tab, click **Edit rules** and paste:
50 | ```
51 | service cloud.firestore {
52 | match /databases/{database}/documents {
53 | match /{document=**} {
54 | allow read, write: if request.auth.uid != null;
55 | }
56 | }
57 | }
58 | ```
59 | Now click **PUBLISH**.
60 |
61 | 
62 |
63 |
64 | > You only need to do this once - if you had already done it earlier, you don't need to do it again.
65 |
66 | ### Add your Firebase project config to app
67 |
68 | 1. Go to the Firebase console -> your project's page in Firebase console, click the **gear icon** -> **Project settings**
69 | 
70 |
71 |
72 | 2. Click **Add app** and choose **" Add Firebase to your web app"**
73 | 
74 |
75 |
76 | 3. Copy **only this part** to the clipboard:
77 | ```
78 | var firebaseConfig = {
79 | apiKey: "...",
80 | authDomain: "...",
81 | databaseURL: "...",
82 | projectId: "...",
83 | storageBucket: "...",
84 | messagingSenderId: "..."
85 | };
86 | ```
87 |
88 | 
89 |
90 |
91 |
92 | 4. **Replace the copied block** in your `src/firebase.ts` file.
93 |
94 | 
95 |
96 |
97 | ### Build and run
98 |
99 | * **Update dependencies, build & run**
100 | ```
101 | npm install
102 | npm run start
103 | ```
104 |
105 | > In case you receive a message like `warning found n vulnerabilities` printed in the console after running the `npm install`, there is a potential security vulnerability in one of the demo's dependencies. Don't worry, this is a normal occurrence and in the majority of cases it is fixed by updating the packages. To install any updates, run the command `npm audit fix`. If some of the vulnerabilities persist after the update, check the results of the `npm audit` to see a detailed report. The report includes instructions on how to act on this information.
106 |
107 | ## Explore demo
108 |
109 | 1. **Browse to http://localhost:1234**. You will see a register/login form; you can use any e-mail and password to sign up a test user.
110 |
111 | 
112 |
113 | 2. Start a **second incognito or browser window** to have 2 chat apps running with 2 different users. Sign up one more user.
114 |
115 | 
116 |
117 | 3. Click the "New Channel" to create a channel between the 2 users.
118 |
119 | 
120 |
121 |
122 | Now you can start sending encrypted messages between them.
123 |
124 |
125 |
126 | > Remember, the app deletes messages right after delivery (it's a HIPAA requirement to meet the conduit exception). If you want to see encrypted messages in your Firestore database, run only 1 browser instance, send a message to your chat partner and check Firestore DB's contents before opening the other user's app to receive the message. If you don't want to implement this behavior in your own app, you can remove it from this sample [here](https://github.com/VirgilSecurity/demo-firebase-js/blob/d263f0ddd4f92f51ee2a925cdffd32a19a0387ae/src/models/MessageListModel.ts#L34).
127 |
128 | ## License
129 |
130 | This library is released under the [3-clause BSD License](LICENSE).
131 |
132 | ## Support
133 | Our developer support team is here to help you. Find out more information on our [Help Center](https://help.virgilsecurity.com/).
134 |
135 | You can find us on [Twitter](https://twitter.com/VirgilSecurity) or send us email support@VirgilSecurity.com.
136 |
137 | Also, get extra help from our support team on [Slack](https://virgilsecurity.com/join-community).
138 |
--------------------------------------------------------------------------------
/images/add-app.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/add-app.png
--------------------------------------------------------------------------------
/images/alice-bob-chatting.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/alice-bob-chatting.png
--------------------------------------------------------------------------------
/images/database-firebase.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/database-firebase.png
--------------------------------------------------------------------------------
/images/find-users.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/find-users.png
--------------------------------------------------------------------------------
/images/firebaseconf.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/firebaseconf.png
--------------------------------------------------------------------------------
/images/firebaseсonfig.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/firebaseсonfig.png
--------------------------------------------------------------------------------
/images/open-two-windows.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/open-two-windows.png
--------------------------------------------------------------------------------
/images/project-settings.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/project-settings.png
--------------------------------------------------------------------------------
/images/sign-in-firebase.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/sign-in-firebase.png
--------------------------------------------------------------------------------
/images/sign-up.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/VirgilSecurity/demo-firebase-js/f0bc57fb20bf583cedd456ee635a57db3149cadd/images/sign-up.png
--------------------------------------------------------------------------------
/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "demo-firebase-js",
3 | "version": "2.4.0",
4 | "description": "Virgil Security Firebase JS Demo",
5 | "author": "Virgil Security Inc. Make sure that you added config with your parameters to 14 | firebase.ts file
15 |Also you need change 16 | FIREBASE_FUNCTION_URL variable in src/models/UserModel.ts file
17 | You can find instructions 18 | here 19 |