I am having troubles trying to encrypt and decrypt the values of local and session storage.
Thank you for your time and your help.
import { Injectable } from "@angular/core";
import { environment } from "../../../environments/environment";
import * as CryptoJS from 'crypto-js';
@Injectable({
providedIn: "root"
})
export class StorageService {
constructor() {}
// If the logged in user details are stored in local storage the user will stay logged in if they refresh
// the browser and also between browser sessions until they logout
// Para cambiar el tipo de storage a utilizar modificar el valor en el archivo de enviorment correspondiente
// los valores posibles son LOCALSTORAGE o SESSIONSTORAGE
encryptation(value: string, llave: string) {
return CryptoJS.AES.encrypt(value, llave);
}
decrypt(value: string, llave: string) {
return CryptoJS.AES.decrypt(value, llave);
}
llave: string = "prueba";
setItem(key: string, value: string): void {
value = this.encryptation(value, this.llave);
if (environment.storage === "SESSIONSTORAGE") {
console.log(key,value);
sessionStorage.setItem(key, value);
} else {
console.log(key,value);
localStorage.setItem(key, value);
}
}
getItem(key: string): string {
let value;
let value1 = sessionStorage.getItem(key);
let value2 = localStorage.getItem(key);
if (environment.storage === "SESSIONSTORAGE") {
value = this.decrypt(value1, this.llave);
console.log(value);
return value;
} else {
value = this.decrypt(value2, this.llave);
console.log(value);
return value;
}
}
key(index: number): string {
if (environment.storage === "SESSIONSTORAGE") {
return sessionStorage.key(index);
} else {
return localStorage.key(index);
}
}
removeItem(key: string): void {
if (environment.storage === "SESSIONSTORAGE") {
sessionStorage.removeItem(key);
} else {
localStorage.removeItem(key);
}
}
}
I need to encrypt the values of local and session storage, and decrypt when it’s necessary.
I do not know where it’s the failure.
Which one it’s the easiest way to achieve the encryption?
Advertisement
Answer
The error isn’t that informative, but basically, when decrypting a value with crypto-js
, it has a step where it converts string inputs to an “encrypted object” that contains e.g. the salt. If you pass a non-string to the decrypt function, crypto-js
assumes it’s already such an object. Therefore, if you pass null
, it will later on try to access (null).salt
and error.
This basically means your getItem
is trying to read a value that isn’t in the storage. Add proper null checks. E.g. if you try to access a value that is null
, return that immediately without trying to decrypt it.