6 files changed, 173 insertions, 31 deletions

diff --git a/packages/shared/src/index.ts b/packages/shared/src/index.ts
index fa3fbfd..f7c5bcf 100644
--- a/packages/shared/src/index.ts
+++ b/packages/shared/src/index.ts
@@ -30,6 +30,9 @@ export { ServiceAction } from './schemas/ServiceAction';
 
 export { ThemeSource } from './schemas/ThemeSource';
 
+export type { CertificateSnapshotIn } from './stores/Certificate';
+export { default as Certificate } from './stores/Certificate';
+
 export type {
   GlobalSettingsSnapshotIn,
   GlobalSettingsSnapshotOut,
@@ -61,6 +64,9 @@ export {
   defineServiceSettingsModel,
 } from './stores/ServiceSettingsBase';
 
+export type { ServiceStateSnapshotIn } from './stores/ServiceState';
+export { default as ServiceState } from './stores/ServiceState';
+
 export type {
   SharedStoreListener,
   SharedStoreSnapshotIn,
diff --git a/packages/shared/src/schemas/ServiceAction.ts b/packages/shared/src/schemas/ServiceAction.ts
index a4a7049..8961bfe 100644
--- a/packages/shared/src/schemas/ServiceAction.ts
+++ b/packages/shared/src/schemas/ServiceAction.ts
@@ -42,6 +42,10 @@ export const ServiceAction = /* @__PURE__ */ (() =>
       action: z.literal('go'),
       url: z.string(),
     }),
+    z.object({
+      action: z.literal('temporarily-trust-current-certificate'),
+      fingerprint: z.string(),
+    }),
   ]))();
 
 /*
diff --git a/packages/shared/src/stores/Certificate.ts b/packages/shared/src/stores/Certificate.ts
new file mode 100644
index 0000000..8b2d007
--- /dev/null
+++ b/packages/shared/src/stores/Certificate.ts
@@ -0,0 +1,54 @@
+/*
+ * Copyright (C)  2022 Kristóf Marussy <kristof@marussy.com>
+ *
+ * This file is part of Sophie.
+ *
+ * Sophie is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+import { IAnyModelType, Instance, SnapshotIn, types } from 'mobx-state-tree';
+
+const CertificatePrincipal = /* @__PURE__ */ (() =>
+  types.model('CertificatePrincipal', {
+    commonName: types.string,
+    organizations: types.array(types.string),
+    organizationUnits: types.array(types.string),
+    locality: types.string,
+    state: types.string,
+    country: types.string,
+  }))();
+
+const Certificate = /* @__PURE__ */ (() =>
+  types.model('Certificate', {
+    data: types.string,
+    issuer: CertificatePrincipal,
+    issuerName: types.string,
+    issuerCert: types.maybe(types.late((): IAnyModelType => Certificate)),
+    subjectName: types.string,
+    serialNumber: types.string,
+    validStart: types.number,
+    validExpiry: types.number,
+    fingerprint: types.string,
+  }))();
+
+/*
+  eslint-disable-next-line @typescript-eslint/no-redeclare --
+  Intentionally naming the type the same as the store definition.
+*/
+interface Certificate extends Instance<typeof Certificate> {}
+
+export default Certificate;
+
+export interface CertificateSnapshotIn extends SnapshotIn<typeof Certificate> {}
diff --git a/packages/shared/src/stores/Profile.ts b/packages/shared/src/stores/Profile.ts
index 49c5195..611ca6f 100644
--- a/packages/shared/src/stores/Profile.ts
+++ b/packages/shared/src/stores/Profile.ts
@@ -20,13 +20,26 @@
 
 import { Instance, types } from 'mobx-state-tree';
 
+import Certificate, { CertificateSnapshotIn } from './Certificate';
 import ProfileSettings from './ProfileSettings';
 
 const Profile = /* @__PURE__ */ (() =>
-  types.model('Profile', {
-    id: types.identifier,
-    settings: ProfileSettings,
-  }))();
+  types
+    .model('Profile', {
+      id: types.identifier,
+      settings: ProfileSettings,
+      temporarilyTrustedCertificates: types.array(Certificate),
+    })
+    .views((self) => ({
+      isCertificateTemporarilyTrusted(
+        certificate: CertificateSnapshotIn,
+      ): boolean {
+        return self.temporarilyTrustedCertificates.some(
+          (trustedCertificate) =>
+            trustedCertificate.fingerprint === certificate.fingerprint,
+        );
+      },
+    })))();
 
 /*
   eslint-disable-next-line @typescript-eslint/no-redeclare --
diff --git a/packages/shared/src/stores/ServiceBase.ts b/packages/shared/src/stores/ServiceBase.ts
index 4a17bc5..c69f339 100644
--- a/packages/shared/src/stores/ServiceBase.ts
+++ b/packages/shared/src/stores/ServiceBase.ts
@@ -20,7 +20,10 @@
 
 import { IAnyModelType, Instance, types } from 'mobx-state-tree';
 
+import type { CertificateSnapshotIn } from './Certificate';
+import type Profile from './Profile';
 import ServiceSettingsBase from './ServiceSettingsBase';
+import ServiceState from './ServiceState';
 
 export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
   return types
@@ -31,30 +34,7 @@ export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
       canGoBack: false,
       canGoForward: false,
       title: types.maybe(types.string),
-      state: types.optional(
-        types.union(
-          types.model({
-            type: types.literal('initializing'),
-          }),
-          types.model({
-            type: types.literal('loading'),
-          }),
-          types.model({
-            type: types.literal('loaded'),
-          }),
-          types.model({
-            type: types.literal('failed'),
-            errorCode: types.integer,
-            errorDesc: types.string,
-          }),
-          types.model({
-            type: types.literal('crashed'),
-            reason: types.string,
-            exitCode: types.integer,
-          }),
-        ),
-        { type: 'initializing' },
-      ),
+      state: ServiceState,
       directMessageCount: 0,
       indirectMessageCount: 0,
     })
@@ -64,12 +44,25 @@ export function defineServiceModel<TS extends IAnyModelType>(settings: TS) {
           self.state.type === 'initializing' || self.state.type === 'loading'
         );
       },
-      get failed(): boolean {
-        return self.state.type === 'failed';
-      },
       get crashed(): boolean {
         return self.state.type === 'crashed';
       },
+    }))
+    .views((self) => ({
+      get hasError(): boolean {
+        return (
+          self.crashed ||
+          self.state.type === 'failed' ||
+          self.state.type === 'certificateError'
+        );
+      },
+      isCertificateTemporarilyTrusted(
+        certificate: CertificateSnapshotIn,
+      ): boolean {
+        return (
+          self.settings.profile as Profile
+        ).isCertificateTemporarilyTrusted(certificate);
+      },
     }));
 }
 
diff --git a/packages/shared/src/stores/ServiceState.ts b/packages/shared/src/stores/ServiceState.ts
new file mode 100644
index 0000000..ad49321
--- /dev/null
+++ b/packages/shared/src/stores/ServiceState.ts
@@ -0,0 +1,72 @@
+/*
+ * Copyright (C)  2022 Kristóf Marussy <kristof@marussy.com>
+ *
+ * This file is part of Sophie.
+ *
+ * Sophie is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+import { Instance, SnapshotIn, types } from 'mobx-state-tree';
+
+import Certificate from './Certificate';
+
+const ServiceState = /* @__PURE__ */ (() =>
+  types.optional(
+    types.union(
+      types.model('ServiceInitializingState', {
+        type: types.literal('initializing'),
+      }),
+      types.model('ServiceLoadingState', {
+        type: types.literal('loading'),
+      }),
+      types.model('ServiceLoadedState', {
+        type: types.literal('loaded'),
+      }),
+      types.model('ServiceFailedState', {
+        type: types.literal('failed'),
+        errorCode: types.integer,
+        errorDesc: types.string,
+      }),
+      types.model('ServiceCertificateErrorState', {
+        type: types.literal('certificateError'),
+        errorCode: types.string,
+        certificate: Certificate,
+        trust: types.optional(
+          types.union(
+            types.literal('pending'),
+            types.literal('rejected'),
+            types.literal('accepted'),
+          ),
+          'pending',
+        ),
+      }),
+      types.model({
+        type: types.literal('crashed'),
+        reason: types.string,
+        exitCode: types.integer,
+      }),
+    ),
+    { type: 'initializing' },
+  ))();
+
+/*
+  eslint-disable-next-line @typescript-eslint/no-redeclare --
+  Intentionally naming the type the same as the store definition.
+*/
+type ServiceState = Instance<typeof ServiceState>;
+
+export default ServiceState;
+
+export type ServiceStateSnapshotIn = SnapshotIn<typeof ServiceState>;