chore: migrate encrypt to cryptography and upgrade objectbox #2961
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## Breaking Changes - Replace `encrypt` package (archived June 2025) with `cryptography` ^2.7.0 - Upgrade `objectbox` from 4.0.3 to ^5.0.3 ## Migration Details ### Encryption Migration - `cryptography` package requires async encryption/decryption operations - Added `ServerPayload.fromJsonAsync()` for encrypted payload handling - Updated all payload consumers (action_handler, method_channel_service) to await async factory - Maintained `ServerPayload.fromJson()` for backward compatibility with non-encrypted payloads - Socket service callback updated to handle async decryption ### ObjectBox Upgrade - Regenerated objectbox model and generated files for v5.0.3 compatibility - No schema changes required ## Validation ✅ flutter pub get - dependencies resolve cleanly ✅ flutter analyze - 0 errors (only pre-existing warnings) ✅ build_runner build - successful (10 outputs) Fixes encrypted payload handling for users with guidAuthKey configured.
Member
|
#2959 switches to |
There was a problem hiding this comment.
Pull request overview
This pull request migrates the project from the archived encrypt package to the actively maintained cryptography package, and upgrades objectbox from version 4.0.3 to ^5.0.3. The migration requires making encryption/decryption operations async, which cascades to multiple call sites throughout the codebase.
- Package Migration: Replaces
encrypt: ^5.0.3withcryptography: ^2.7.0due to the original package being archived - ObjectBox Upgrade: Updates from pinned version 4.0.3 to ^5.0.3, removing the Windows compatibility restriction
- Async Refactoring: Converts
encryptAESCryptoJSanddecryptAESCryptoJSfunctions to async, updating all dependent code paths
Reviewed changes
Copilot reviewed 11 out of 13 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| pubspec.yaml | Updated encrypt to cryptography and objectbox to ^5.0.3 |
| pubspec.lock | Updated dependency versions including major upgrades to analyzer, build, and related packages |
| lib/utils/crypto_utils.dart | Refactored encryption/decryption functions to use cryptography package APIs with async operations |
| lib/database/global/server_payload.dart | Added fromJsonAsync static factory method to handle encrypted payloads asynchronously |
| lib/services/network/socket_service.dart | Updated to use async decryption in socket message handler |
| lib/services/backend/java_dart_interop/method_channel_service.dart | Migrated all payload parsing to use fromJsonAsync for consistency |
| lib/services/backend/action_handler.dart | Updated event handlers to use async payload processing |
| lib/objectbox.g.dart | Regenerated ObjectBox bindings for version 5.0.3 with improved formatting |
| iOS/macOS Flutter config files | Added CocoaPods configuration includes |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Contributor
Author
Oh let me know when this is done there is other modernization I was working on that was blocked by the older encryption lib |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
encryptpackage to actively maintainedcryptographypackageobjectboxfrom 4.0.3 to ^5.0.3Changes
encrypt: ^5.0.3→cryptography: ^2.7.0objectbox: 4.0.3→objectbox: ^5.0.3ServerPayload.fromJsonAsync()static factory for encrypted payloadsWhy
The
encryptpackage is archived and no longer maintained. Thecryptographypackage is actively maintained and provides modern encryption APIs.Testing
flutter analyze: 0 errors (451 pre-existing warnings/infos)flutter pub get: Dependencies resolve cleanly