.gitignore

@@ -4,7 +4,3 @@ elm-stuff
 repl-temp-*
 # VScode settings
 .vscode/
-
-# Elm output
-index.html
-elm.js

src/Internal/Api/LoginWithUsernameAndPassword/Api.elm

@@ -190,7 +190,6 @@ loginWithUsernameAndPasswordV1 { username, password } =
                             , refresh = out.refreshToken
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -232,7 +231,6 @@ loginWithUsernameAndPasswordV2 { deviceId, initialDeviceDisplayName, username, p
                             , refresh = Nothing
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -284,7 +282,6 @@ loginWithUsernameAndPasswordV3 { deviceId, initialDeviceDisplayName, username, p
                             , refresh = Nothing
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -336,7 +333,6 @@ loginWithUsernameAndPasswordV4 { deviceId, initialDeviceDisplayName, username, p
                             , refresh = Nothing
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -392,7 +388,6 @@ loginWithUsernameAndPasswordV5 { deviceId, initialDeviceDisplayName, username, p
                             , refresh = Nothing
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -449,7 +444,6 @@ loginWithUsernameAndPasswordV6 { deviceId, enableRefreshToken, initialDeviceDisp
                             , refresh = out.refreshToken
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , out.user
                             |> Maybe.map (V.SetUser >> E.ContentUpdate)
                             |> E.Optional
@@ -506,7 +500,6 @@ loginWithUsernameAndPasswordV7 { deviceId, enableRefreshToken, initialDeviceDisp
                             , refresh = out.refreshToken
                             , value = out.accessToken
                             }
-                        , E.RemovePasswordIfNecessary
                         , E.ContentUpdate (V.SetUser out.user)
                         , out.wellKnown
                             |> Maybe.map (.homeserver >> .baseUrl)

src/Internal/Config/Default.elm

@@ -1,7 +1,6 @@
 module Internal.Config.Default exposing
     ( currentVersion, deviceName
     , syncTime
-    , removePasswordOnLogin
     )
 
 {-| This module hosts all default settings and configurations that the Vault
@@ -17,11 +16,6 @@ will assume until overriden by the user.
 
 @docs syncTime
 
-
-## Security
-
-@docs removePasswordOnLogin
-
 -}
 
 
@@ -58,13 +52,3 @@ The value is in miliseconds, so it is set at 30,000.
 syncTime : Int
 syncTime =
     30 * 1000
-
-
-{-| Once the Matrix API has logged in successfully, it does not need to remember
-the user's password. However, to keep the Vault logged in automatically, one may
-choose to remember the password in order to get a new access token when an old
-access token has expired.
--}
-removePasswordOnLogin : Bool
-removePasswordOnLogin =
-    True

src/Internal/Config/Text.elm

@@ -321,7 +321,6 @@ fields :
     , settings :
         { currentVersion : Desc
         , deviceName : Desc
-        , removePasswordOnLogin : Desc
         , syncTime : Desc
         }
     , timeline :
@@ -502,9 +501,6 @@ fields =
         , deviceName =
             [ "Indicates the device name that is communicated to the Matrix API."
             ]
-        , removePasswordOnLogin =
-            [ "Remove the password as soon as a valid access token has been received."
-            ]
         , syncTime =
             [ "Indicates the frequency in miliseconds with which the Elm SDK should long-poll the /sync endpoint."
             ]

src/Internal/Values/Envelope.elm

@@ -78,7 +78,6 @@ type EnvelopeUpdate a
     | More (List (EnvelopeUpdate a))
     | Optional (Maybe (EnvelopeUpdate a))
     | RemoveAccessToken String
-    | RemovePasswordIfNecessary
     | SetAccessToken AccessToken
     | SetBaseUrl String
     | SetDeviceId String
@@ -312,13 +311,6 @@ update updateContent eu ({ context } as data) =
         RemoveAccessToken token ->
             { data | context = { context | accessTokens = Hashdict.removeKey token context.accessTokens } }
 
-        RemovePasswordIfNecessary ->
-            if data.settings.removePasswordOnLogin then
-                { data | context = { context | password = Nothing } }
-
-            else
-                data
-
         SetAccessToken a ->
             { data | context = { context | accessTokens = Hashdict.insert a context.accessTokens } }
 

src/Internal/Values/Settings.elm

@@ -35,7 +35,6 @@ behave under the user's preferred settings.
 type alias Settings =
     { currentVersion : String
     , deviceName : String
-    , removePasswordOnLogin : Bool
     , syncTime : Int
     }
 
@@ -44,7 +43,7 @@ type alias Settings =
 -}
 coder : Json.Coder Settings
 coder =
-    Json.object4
+    Json.object3
         { name = Text.docs.settings.name
         , description = Text.docs.settings.description
         , init = Settings
@@ -67,21 +66,6 @@ coder =
             , defaultToString = identity
             }
         )
-        (Json.field.optional.withDefault
-            { fieldName = "removePasswordOnLogin"
-            , toField = .removePasswordOnLogin
-            , description = Text.fields.settings.removePasswordOnLogin
-            , coder = Json.bool
-            , default = Tuple.pair Default.removePasswordOnLogin []
-            , defaultToString =
-                \b ->
-                    if b then
-                        "true"
-
-                    else
-                        "false"
-            }
-        )
         (Json.field.optional.withDefault
             { fieldName = "syncTime"
             , toField = .syncTime
@@ -113,6 +97,5 @@ init : Settings
 init =
     { currentVersion = Default.currentVersion
     , deviceName = Default.deviceName
-    , removePasswordOnLogin = Default.removePasswordOnLogin
     , syncTime = Default.syncTime
     }

src/Internal/Values/Vault.elm

@@ -45,7 +45,7 @@ import Internal.Values.User as User exposing (User)
 type alias Vault =
     { accountData : Dict String Json.Value
     , rooms : Hashdict Room
-    , user : Maybe User
+    , user : User
     }
 
 
@@ -81,7 +81,7 @@ coder =
             , coder = Hashdict.coder .roomId Room.coder
             }
         )
-        (Json.field.optional.value
+        (Json.field.required
             { fieldName = "user"
             , toField = .user
             , description = Text.fields.vault.user
@@ -106,11 +106,11 @@ getAccountData key vault =
 
 {-| Initiate a new Vault type.
 -}
-init : Maybe User -> Vault
-init mUser =
+init : User -> Vault
+init user =
     { accountData = Dict.empty
     , rooms = Hashdict.empty .roomId
-    , user = mUser
+    , user = user
     }
 
 
@@ -156,4 +156,4 @@ update vu vault =
             setAccountData key value vault
 
         SetUser user ->
-            { vault | user = Just user }
+            { vault | user = user }

src/Matrix.elm

@@ -1,5 +1,5 @@
 module Matrix exposing
-    ( Vault, fromUserId, fromUsername
+    ( Vault, fromUserId
     , VaultUpdate, update
     , addAccessToken, sendMessageEvent
     )
@@ -19,7 +19,7 @@ support a monolithic public registry. (:
 
 ## Vault
 
-@docs Vault, fromUserId, fromUsername
+@docs Vault, fromUserId
 
 
 ## Keeping the Vault up-to-date
@@ -57,9 +57,6 @@ type alias VaultUpdate =
     Types.VaultUpdate
 
 
-{-| Adds a custom access token to the Vault. This can be done if no password is
-provided or known.
--}
 addAccessToken : String -> Vault -> Vault
 addAccessToken token (Vault vault) =
     Envelope.mapContext (\c -> { c | suggestedAccessToken = Just token }) vault
@@ -77,39 +74,16 @@ addAccessToken token (Vault vault) =
 
 -}
 fromUserId : String -> Maybe Vault
-fromUserId uid =
-    uid
-        |> User.fromString
-        |> Maybe.map
+fromUserId =
+    User.fromString
+        >> Maybe.map
             (\u ->
                 Envelope.init
                     { serverName = "https://" ++ User.domain u
-                    , content = Internal.init (Just u)
+                    , content = Internal.init u
                     }
-                    |> Envelope.mapContext (\c -> { c | username = Just uid })
             )
-        |> Maybe.map Vault
-
-
-{-| Using a username and an address, create a Vault.
-
-The username can either be the localpart or the full Matrix ID. For example,
-you can either insert `alice` or `@alice:example.org`.
-
--}
-fromUsername : { username : String, host : String, port_ : Maybe Int } -> Vault
-fromUsername { username, host, port_ } =
-    { serverName =
-        port_
-            |> Maybe.map String.fromInt
-            |> Maybe.map ((++) ":")
-            |> Maybe.withDefault ""
-            |> (++) host
-    , content = Internal.init (User.fromString username)
-    }
-        |> Envelope.init
-        |> Envelope.mapContext (\c -> { c | username = Just username })
-        |> Vault
+        >> Maybe.map Vault
 
 
 {-| Send a message event to a room.
@@ -120,25 +94,15 @@ exists and the user is able to send a message to, and instead just sends the
 request to the Matrix API.
 
 -}
-sendMessageEvent :
-    { content : E.Value
-    , eventType : String
-    , roomId : String
-    , toMsg : VaultUpdate -> msg
-    , transactionId : String
-    , vault : Vault
-    }
-    -> Cmd msg
-sendMessageEvent data =
-    case data.vault of
-        Vault vault ->
-            Api.sendMessageEvent vault
-                { content = data.content
-                , eventType = data.eventType
-                , roomId = data.roomId
-                , toMsg = Types.VaultUpdate >> data.toMsg
-                , transactionId = data.transactionId
-                }
+sendMessageEvent : Vault -> { content : E.Value, eventType : String, roomId : String, toMsg : VaultUpdate -> msg, transactionId : String } -> Cmd msg
+sendMessageEvent (Vault vault) data =
+    Api.sendMessageEvent vault
+        { content = data.content
+        , eventType = data.eventType
+        , roomId = data.roomId
+        , toMsg = Types.VaultUpdate >> data.toMsg
+        , transactionId = data.transactionId
+        }
 
 
 {-| Using new VaultUpdate information, update the Vault accordingly.

src/Matrix/Settings.elm

@@ -2,8 +2,6 @@ module Matrix.Settings exposing
     ( setAccessToken, removeAccessToken
     , getDeviceName, setDeviceName
     , getSyncTime, setSyncTime
-    , setPassword
-    , removePassword, removePasswordOnLogin
     )
 
 {-| The Matrix Vault has lots of configurable variables that you rarely want to
@@ -52,39 +50,20 @@ The value is in miliseconds, so it is set at 30,000.
 
 @docs getSyncTime, setSyncTime
 
-
-## Password
-
-When a Vault wants to access the Matrix API, it needs an access token. This can
-either be provided directly, or the Vault can get one itself by using a password
-to log in.
-
-@docs setPassword
-
-For security reasons, it is not possible to read whatever password is stored in
-the Vault. An attacker with access to the memory might be able to find it,
-however, so the Vault offers ways to remove the password from memory.
-
-@docs removePassword, removePasswordOnLogin
-
 -}
 
 import Internal.Values.Envelope as Envelope
 import Types exposing (Vault(..))
 
 
-{-| Determine the device name.
+{-| Insert a suggested access token.
 -}
-getDeviceName : Vault -> String
-getDeviceName (Vault vault) =
-    Envelope.extractSettings .deviceName vault
-
-
-{-| Determine the sync timeout value.
--}
-getSyncTime : Vault -> Int
-getSyncTime (Vault vault) =
-    Envelope.extractSettings .syncTime vault
+setAccessToken : String -> Vault -> Vault
+setAccessToken token (Vault vault) =
+    vault
+        |> Envelope.mapContext
+            (\c -> { c | suggestedAccessToken = Just token })
+        |> Vault
 
 
 {-| Remove an access token that has been inserted using the
@@ -101,32 +80,11 @@ removeAccessToken (Vault vault) =
         |> Vault
 
 
-{-| Remove a password that is stored in the Matrix Vault.
+{-| Determine the device name.
 -}
-removePassword : Vault -> Vault
-removePassword (Vault vault) =
-    vault
-        |> Envelope.mapContext
-            (\c -> { c | password = Nothing })
-        |> Vault
-
-
-{-| Remove password from the Vault as soon as a valid access token has been
-received from the Matrix API.
--}
-removePasswordOnLogin : Bool -> Vault -> Vault
-removePasswordOnLogin b (Vault vault) =
-    Vault <| Envelope.mapSettings (\s -> { s | removePasswordOnLogin = b }) vault
-
-
-{-| Insert a suggested access token.
--}
-setAccessToken : String -> Vault -> Vault
-setAccessToken token (Vault vault) =
-    vault
-        |> Envelope.mapContext
-            (\c -> { c | suggestedAccessToken = Just token })
-        |> Vault
+getDeviceName : Vault -> String
+getDeviceName (Vault vault) =
+    Envelope.extractSettings .deviceName vault
 
 
 {-| Override the device name.
@@ -136,14 +94,11 @@ setDeviceName name (Vault vault) =
     Vault <| Envelope.mapSettings (\s -> { s | deviceName = name }) vault
 
 
-{-| Set a password for the given user.
+{-| Determine the sync timeout value.
 -}
-setPassword : String -> Vault -> Vault
-setPassword password (Vault vault) =
-    vault
-        |> Envelope.mapContext
-            (\c -> { c | password = Just password })
-        |> Vault
+getSyncTime : Vault -> Int
+getSyncTime (Vault vault) =
+    Envelope.extractSettings .syncTime vault
 
 
 {-| Override the sync timeout value.

tests/Test/Values/Vault.elm

@@ -19,4 +19,4 @@ vault =
             |> Fuzz.map Dict.fromList
         )
         (TestHashdict.fuzzer .roomId TestRoom.fuzzer)
-        (Fuzz.maybe TestUser.fuzzer)
+        TestUser.fuzzer