1 files changed, 50 insertions, 5 deletions

diff --git a/packages/shared/src/stores/ServiceBase.ts b/packages/shared/src/stores/ServiceBase.ts
index a19f59e..0e4be97 100644
--- a/packages/shared/src/stores/ServiceBase.ts
+++ b/packages/shared/src/stores/ServiceBase.ts
@@ -25,6 +25,14 @@ import type Profile from './Profile';
 import ServiceSettingsBase from './ServiceSettingsBase';
 import ServiceState from './ServiceState';
 
+export enum SecurityLabelKind {
+  Empty = 'empty',
+  SecureConnection = 'secureConnection',
+  NotSecureConnection = 'notSecureConnection',
+  CertificateError = 'certificateError',
+  InvalidURL = 'invalidURL',
+}
+
 export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
   return types
     .model('Service', {
@@ -48,6 +56,38 @@ export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
       get crashed(): boolean {
         return self.state.type === 'crashed';
       },
+      isCertificateTemporarilyTrusted(
+        certificate: CertificateSnapshotIn,
+      ): boolean {
+        return (
+          self.settings.profile as Profile
+        ).isCertificateTemporarilyTrusted(certificate);
+      },
+      get securityLabel(): SecurityLabelKind {
+        const {
+          state: { type: stateType },
+          currentUrl,
+        } = self;
+        if (stateType === 'certificateError') {
+          return SecurityLabelKind.CertificateError;
+        }
+        if (currentUrl === undefined || currentUrl === '') {
+          return SecurityLabelKind.Empty;
+        }
+        try {
+          const parsedUrl = new URL(currentUrl);
+          switch (parsedUrl.protocol) {
+            case 'https:':
+              return SecurityLabelKind.SecureConnection;
+            case 'http:':
+              return SecurityLabelKind.NotSecureConnection;
+            default:
+              return SecurityLabelKind.InvalidURL;
+          }
+        } catch {
+          return SecurityLabelKind.InvalidURL;
+        }
+      },
     }))
     .views((self) => ({
       get hasError(): boolean {
@@ -57,12 +97,17 @@ export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
           self.state.type === 'certificateError'
         );
       },
-      isCertificateTemporarilyTrusted(
-        certificate: CertificateSnapshotIn,
-      ): boolean {
+      get hasSecurityLabelWarning(): boolean {
+        const { securityLabel } = self;
         return (
-          self.settings.profile as Profile
-        ).isCertificateTemporarilyTrusted(certificate);
+          securityLabel !== SecurityLabelKind.Empty &&
+          securityLabel !== SecurityLabelKind.SecureConnection
+        );
+      },
+    }))
+    .views((self) => ({
+      get alwaysShowLocationBar(): boolean {
+        return self.hasError || self.hasSecurityLabelWarning;
       },
     }));
 }