Function try_decrypt_with_auth_token

src/decrypt.rs:202–219

(
    esk: &SymKeyEncryptedSessionKey,
    conn: &mut rusqlite::Connection,
    self_fingerprint: &str,
)

}

fn try_decrypt_with_auth_token(
    esk: &SymKeyEncryptedSessionKey,
    conn: &mut rusqlite::Connection,
    self_fingerprint: &str,
) -> Result<Option<PlainSessionKey>> {
    // ORDER BY id DESC to query the most-recently saved tokens are returned first.
    // This improves performance when Bob scans a QR code that was just created.
    let mut stmt = conn.prepare("SELECT token FROM tokens WHERE namespc=? ORDER BY id DESC")?;
    let mut rows = stmt.query((Namespace::Auth,))?;
    while let Some(row) = rows.next()? {
        let token: String = row.get(0)?;
        let shared_secret = format!("securejoin/{self_fingerprint}/{token}");
        if let Ok(psk) = decrypt_session_key_with_password(esk, &Password::from(shared_secret)) {
            return Ok(Some(psk));
        }
    }
    Ok(None)
}

/// Returns Ok(()) if we want to try symmetrically decrypting the message,
/// and Err with a reason if symmetric decryption should not be tried.