[Feature Request] Easy to sync with back end server about hive

[simc]

Hi,
Do want to backup a box or do you want to decrypt and use the data on the server?

Every encrypted entry also contains an IV without that, the entry cannot be decrypted.

What would putRaw() and getRaw() do exactly? And what would getRaw() return for other objects?

[leedstyh]

Hi,

I wanna backup the whole box, incrementally. Say I have 10 items total in the box now, after changing one item (box.put('myDog', dog)), I sync it to the server right away. Or one item changed on the server, I need to sync the changed one to the client app.

I wanna encrypt the user data both on client app and server, and since Hive already encrypt data, I think reuse it is a good idea.

So what transferred between client app and server is NOT dog, but the dog after encrypted. I'm not sure but I assume it's a String("xxxooo") stored on the storage after dog encrypted.

Future<String> box.getRaw("myDog") returns that String("xxxooo") and I sync this String("xxxooo") to the server.

Future<void> putRaw("myDog", "xxxooo from server") save the change from the server directly.

Sorry that I'm not good at English.

[simc]

Okay I understand... The problem is that Hive stores objects as Uint8List when running in the vm. In the browser, only non primitive and encrypted values are stored as Uint8List. I don't know what getRaw() should return. A string is impossible because of the IV.

I think the best way is to transfer the data unencrypted over HTTPS and handle encryption on the server (maybe even with another Hive ;).

You would have to sync the value, the IV and the encryption key otherwise.

Edit: You can implement your sync logic using watch()

[leedstyh]

I got it. But encrypt and decrypt both on client and server will waste too much CPU :(

I can encrypt the data to a string by myself, and save this string in hive(box.put("myDog", "encrypted string")). And I register a TypeAdapter say LongString for it in case the encrypted string is too long.

Do you think it is a good idea?

[simc]

Sure you can do that but unless you change the data very often I would not worry about CPU usage. The AES algorithm Hive uses is quite fast.

[leedstyh]

Thanks @leisim I'll double think how to design my app

[ThinkDigitalSoftware]

Won't transferring it unencrypted leave you vulnerable for mitm attacks?

[adriancmurray]

@ThinkDigitalSoftware this is why @leisim specified transferring over HTTPS to encrypt over the channels. The encryption here is so those who have direct access to the data can not read it (such as us developers) unless trusted.

[ThinkDigitalSoftware]

Oh that makes sense.

[jamesdixon]

@adriancmurray what approach did you end up taking? looking to rebuild my app and it definitely needs to be offline-first so im exploring options for persistence, including hive.