[devices] public key support

Author: capcom6

go.mod

@@ -3,7 +3,7 @@ module github.com/android-sms-gateway/web-dashboard
 go 1.25.7
 
 require (
-	github.com/android-sms-gateway/client-go v1.14.4
+	github.com/android-sms-gateway/client-go v1.14.5-0.20260812072721-ef4aef654a3f
 	github.com/go-core-fx/cachefx v0.0.3
 	github.com/go-core-fx/config v0.1.0
 	github.com/go-core-fx/fiberfx v0.6.0

internal/server/docs/docs.go

@@ -807,11 +807,17 @@ const docTemplate = `{
                 "isOnline": {
                     "type": "boolean"
                 },
+                "keyVersion": {
+                    "type": "integer"
+                },
                 "lastSeen": {
                     "type": "string"
                 },
                 "name": {
                     "type": "string"
+                },
+                "publicKey": {
+                    "type": "string"
                 }
             }
         },
@@ -1209,7 +1215,7 @@ const docTemplate = `{
                 "phoneNumber": {
                     "description": "Phone number or first 16 symbols of SHA256 hash",
                     "type": "string",
-                    "maxLength": 128,
+                    "maxLength": 512,
                     "minLength": 1,
                     "example": "79990001234"
                 },

internal/server/handlers/devices.go

@@ -42,11 +42,13 @@ func (h *DevicesHandler) Register(r fiber.Router) {
 }
 
 type deviceListItem struct {
-	ID        string    `json:"id"`
-	Name      string    `json:"name"`
-	LastSeen  time.Time `json:"lastSeen"`
-	IsOnline  bool      `json:"isOnline"`
-	CreatedAt time.Time `json:"createdAt"`
+	ID         string    `json:"id"`
+	Name       string    `json:"name"`
+	LastSeen   time.Time `json:"lastSeen"`
+	IsOnline   bool      `json:"isOnline"`
+	CreatedAt  time.Time `json:"createdAt"`
+	PublicKey  *string   `json:"publicKey,omitempty"`
+	KeyVersion *int      `json:"keyVersion,omitempty"`
 }
 
 // ListDevices returns registered devices.
@@ -74,11 +76,13 @@ func (h *DevicesHandler) list(c *fiber.Ctx) error {
 	items := make([]deviceListItem, len(devices))
 	for i, d := range devices {
 		items[i] = deviceListItem{
-			ID:        d.ID,
-			Name:      d.Name,
-			LastSeen:  d.LastSeen,
-			IsOnline:  d.DeletedAt == nil && time.Since(d.LastSeen) < dashboard.DeviceOnlineIn,
-			CreatedAt: d.CreatedAt,
+			ID:         d.ID,
+			Name:       d.Name,
+			PublicKey:  d.PublicKey,
+			KeyVersion: d.KeyVersion,
+			LastSeen:   d.LastSeen,
+			IsOnline:   d.DeletedAt == nil && time.Since(d.LastSeen) < dashboard.DeviceOnlineIn,
+			CreatedAt:  d.CreatedAt,
 		}
 	}
 

web/src/lib/types.ts

@@ -44,6 +44,10 @@ export interface Device {
 	lastSeen: string;
 	isOnline: boolean;
 	createdAt: string;
+	/** Base64 X.509 SPKI DER of the E2E public key; absent when E2E is not configured. */
+	publicKey?: string | null;
+	/** Key rotation version; present only with publicKey. */
+	keyVersion?: number | null;
 }
 
 export interface MessageListItem {

web/src/routes/devices/+page.svelte

@@ -1,6 +1,6 @@
 <script lang="ts">
 	import { onMount } from 'svelte';
-	import { listDevices, deleteDevice } from '$lib/api';
+	import { listDevices, deleteDevice, getSettings } from '$lib/api';
 	import { Button } from '$lib/components/ui/button/index.js';
 	import { Badge } from '$lib/components/ui/badge/index.js';
 	import { Skeleton } from '$lib/components/ui/skeleton/index.js';
@@ -12,6 +12,7 @@
 	let devices = $state<Device[]>([]);
 	let loading = $state(true);
 	let error = $state('');
+	let passphraseEnabled = $state(false);
 
 	onMount(load);
 
@@ -25,6 +26,22 @@
 		} finally {
 			loading = false;
 		}
+		// Account-wide passphrase encryption is not per-device; used to label
+		// devices without an E2E key. Failure must not break the listing.
+		try {
+			const settings = await getSettings();
+			passphraseEnabled = Boolean(settings?.encryption?.passphrase);
+		} catch {
+			passphraseEnabled = false;
+		}
+	}
+
+	type EncryptionType = 'e2e' | 'passphrase' | 'none';
+
+	function encryptionType(d: Device): EncryptionType {
+		if (d.publicKey) return 'e2e';
+		if (passphraseEnabled) return 'passphrase';
+		return 'none';
 	}
 
 	let deleting = $state<string | null>(null);
@@ -87,6 +104,7 @@
 					<Th>Name</Th>
 					<Th>ID</Th>
 					<Th>Status</Th>
+					<Th>Encryption</Th>
 					<Th>Last Seen</Th>
 					<Th></Th>
 				</Tr>
@@ -103,7 +121,22 @@
 								<Badge variant="outline">Offline</Badge>
 							{/if}
 						</Td>
-						<Td class="whitespace-nowrap text-muted-foreground">{timeAgo(d.lastSeen)}</Td>
+						<Td>
+						{#if encryptionType(d) === 'e2e'}
+							<span class="inline-flex items-center gap-1.5" title="End-to-end encryption enabled">
+								<span class="inline-block h-2 w-2 rounded-full bg-emerald-500" aria-hidden="true"></span>
+								<Badge variant="secondary">E2E</Badge>
+								{#if d.keyVersion != null}
+									<span class="font-mono text-xs text-muted-foreground">v{d.keyVersion}</span>
+								{/if}
+							</span>
+						{:else if encryptionType(d) === 'passphrase'}
+							<Badge variant="secondary">Passphrase</Badge>
+						{:else}
+							<Badge variant="outline">None</Badge>
+						{/if}
+					</Td>
+					<Td class="whitespace-nowrap text-muted-foreground">{timeAgo(d.lastSeen)}</Td>
 						<Td>
 							<Button
 								variant="destructive"