Skip to content
The Threema Web application.
Branch: master
Clone or download
lgrahl Fix handle signaling connection state changes before handover (#803)
This fixes UI issues that occurred when the SaltyRTC task kicked in
but the connection died during handover.
Latest commit 4165f31 May 20, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci CI: Install git before checkout (#786) Apr 9, 2019
.licenses Switch from Emojione to Twemoji Jan 23, 2019
dist Switch from Browserify to Webpack (#790) Apr 18, 2019
docker CI: Re-schedule weekly builds Feb 28, 2019
docs Update Docker docs, add badge to README Feb 28, 2019
public Add "device unreachable" dialog and improve welcome page May 9, 2019
src Fix handle signaling connection state changes before handover (#803) May 20, 2019
tests Switch from Browserify to Webpack (#790) Apr 18, 2019
tools Use relative paths for emoji category icons (#743) Jan 29, 2019
troubleshoot Introduce linting for SASS/CSS (#525) Feb 4, 2019
.dockerignore Automatically publish Docker image (#764) Feb 28, 2019
.editorconfig Switch from Browserify to Webpack (#790) Apr 18, 2019
.gitignore Switch from Browserify to Webpack (#790) Apr 18, 2019
.sass-lint.yml Introduce linting for SASS/CSS (#525) Feb 4, 2019
CHANGELOG.md Fix typo in changelog (#781) Mar 25, 2019
CONTRIBUTING.md Add CONTRIBUTING.md Feb 21, 2017
Dockerfile Docker: Add support for configuration variables Feb 27, 2019
ISSUE_TEMPLATE.md Change sort order in issue template (#805) May 16, 2019
LICENSE-3RD-PARTY.txt Switch from Browserify to Webpack (#790) Apr 18, 2019
LICENSE.txt Release v1.0.1 Feb 15, 2017
README.md Add beta testing note to readme (#796) May 8, 2019
RELEASING.md Automatically publish Docker image (#764) Feb 28, 2019
TRANSLATING.md Document new translation workflow (#664) Nov 6, 2018
gather-licenses.sh Switch from Browserify to Webpack (#790) Apr 18, 2019
index.html Switch from Browserify to Webpack (#790) Apr 18, 2019
karma.conf.js Switch from Browserify to Webpack (#790) Apr 18, 2019
package-lock.json Switch from Browserify to Webpack (#790) Apr 18, 2019
package.json Switch from Browserify to Webpack (#790) Apr 18, 2019
tsconfig.json Release v1.0.1 Feb 15, 2017
tslint.json TSLint: Allow leading underscores in variable names May 2, 2018
webpack.common.js Switch from Browserify to Webpack (#790) Apr 18, 2019
webpack.dev.js Switch from Browserify to Webpack (#790) Apr 18, 2019
webpack.prod.js Switch from Browserify to Webpack (#790) Apr 18, 2019
webpack.tests.js Switch from Browserify to Webpack (#790) Apr 18, 2019

README.md

Threema Web

Build status License Docker Image

Threema Web is a web client for Threema, a privacy-focussed end-to-end encrypted mobile messenger hosted and developed in Switzerland. With Threema Web, you can use Threema on your Desktop without compromising security.

https://web.threema.ch/

Screenshot

Threema Web establishes a connection between Desktop and mobile device using WebRTC (Android) or encrypted WebSockets (iOS). Signaling and data is end-to-end encrypted with SaltyRTC.

For more information, see the Threema Cryptography Whitepaper.

Bug Reports and Feature Requests

If you find a bug in Threema Web or want to request a new feature, feel free to open an issue on GitHub. Please make sure that your bug report or feature request hasn't already been filed by using the search function.

Express your personal opinion regarding priority by reacting with 👍 in a particular issue, such as this one. We will factor this in when scheduling what to do next.

Beta Testing

We may occasionally deploy experimental branches on https://web-beta.threema.ch which you are encouraged to test. If you encounter problems, please open an issue and include the experiment's version number (e.g. 1.2.3-experiment-beta4).

Translating

If you want to help translating Threema Web to your language, please check out TRANSLATING.md!

Protocol

The protocol used to communicate between the Threema app and Threema Web is documented here.

Development

Threema Web is written using TypeScript and AngularJS 1. Dependencies are managed with npm. You currently need Node.js 8 or later to build Threema Web. (Note that Node.js is only a build dependency, the result is plain old client-side JavaScript.)

Install development dependencies:

npm install

Run the dev server:

npm run devserver

Then open the URL in your browser:

firefox http://localhost:9966

(Note that this setup should not be used in production. To run Threema Web on a server, please follow the instructions at docs/self_hosting.md.)

Testing

To run unit tests:

npm run build:unittests
firefox tests/testsuite.html

To run UI tests:

npm run test:ui <browser>

For example:

npm run test:ui firefox
npm run test:ui chrome

You can also filter the test cases:

npm run test:ui firefox emoji

To run linting checks:

npm run lint

You can also install a pre-push hook to do the linting:

echo -e '#!/bin/sh\nnpm run lint' > .git/hooks/pre-push
chmod +x .git/hooks/pre-push

Configuration

The configuration of Threema Web can be tweaked in src/config.ts:

General

  • SELF_HOSTED: Set this to true if this instance of Threema Web isn't being hosted on web.threema.ch.
  • PREV_PROTOCOL_LAST_VERSION: When the Threema Web protocol version changes, this can be set to the last version of Threema Web that supported the previous protocol version. If set to something different than null, a message will be shown to the user if reconnecting fails.

SaltyRTC

  • SALTYRTC_HOST: Set this to the hostname of the SaltyRTC server that you want to use. If set to null, the hostname will be constructed based on the SALTYRTC_HOST_PREFIX and the SALTYRTC_HOST_SUFFIX values.
  • SALTYRTC_PORT: The port of the SaltyRTC server to be used.
  • SALTYRTC_SERVER_KEY: The public permanent key of the SaltyRTC server. Set this value to null if your server does not provide a public permanent key, or if you don't want to verify it.

ICE

  • ICE_SERVERS: Configuration object for the WebRTC STUN and ICE servers.

Push

  • PUSH_URL: The server URL used to deliver push notifications to the app.

Self Hosting

For instructions on how to host your own version of Threema Web, please refer to docs/self_hosting.md.

Contributing

Contributions to Threema Web are welcome! Please open a pull request with your proposed changes.

Security

Every Threema Web release will be tagged. The git tags are cryptographically signed using the following PGP key:

pub   rsa4096 2016-09-06 [SC] [expires: 2026-09-04]
      E7AD D991 4E26 0E8B 35DF  B506 65FD E935 573A CDA6
uid           Threema Signing Key <dev@threema.ch>

The public key can be found on Keybase.

If you discover a security issue in the Threema Web, please follow responsible disclosure and report it directly to Threema instead of opening an issue on Github. You can find the security e-mail as well as the PGP public key at https://threema.ch/en/contact.

License

Threema Web license:

Threema Web.

Copyright © 2016-2019 Threema GmbH (https://threema.ch/).

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as
published by the Free Software Foundation, either version 3 of the
License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.

For third party library licenses, see LICENSE-3RD-PARTY.txt.

You can’t perform that action at this time.