Use runtime-dir Unix sockets for local gRPC

internal/browserbridge/bridge.go

@@ -2,22 +2,26 @@ package browserbridge
 
 import (
 	"context"
+	"crypto/sha256"
+	"encoding/base64"
 	"encoding/binary"
 	"encoding/json"
 	"fmt"
 	"io"
 	"os"
 	"path/filepath"
+	"runtime"
 	"strings"
 
+	"git.julianfamily.org/keepassgo/internal/grpcaddr"
 	keepassgov1 "git.julianfamily.org/keepassgo/proto/keepassgo/v1"
 )
 
 const (
-	NativeHostName       = "org.keepassgo.browser"
-	DefaultGRPCAddress   = "127.0.0.1:47777"
-	defaultFirefoxID     = "browser@keepassgo.invalid"
+	NativeHostName       = "com.keepassgo.browser"
+	defaultFirefoxID     = "browser@keepassgo.com"
 	maxNativeMessageSize = 1024 * 1024
+	chromiumIDBytes      = 16
 )
 
 type Request struct {
@@ -136,7 +140,7 @@ func (r Request) Connection() (Connection, error) {
 		BearerToken: strings.TrimSpace(r.BearerToken),
 	}
 	if conn.GRPCAddress == "" {
-		conn.GRPCAddress = DefaultGRPCAddress
+		conn.GRPCAddress = grpcaddr.Default(runtime.GOOS)
 	}
 	if conn.BearerToken == "" {
 		return Connection{}, fmt.Errorf("browser bridge bearer token is required")
@@ -277,6 +281,31 @@ func Manifest(browser Browser, binaryPath, extensionID string) (NativeHostManife
 	}
 }
 
+func ChromiumExtensionIDFromManifestKey(raw string) (string, error) {
+	normalized := strings.TrimSpace(raw)
+	normalized = strings.ReplaceAll(normalized, "-----BEGIN PUBLIC KEY-----", "")
+	normalized = strings.ReplaceAll(normalized, "-----END PUBLIC KEY-----", "")
+	normalized = strings.ReplaceAll(normalized, "\n", "")
+	normalized = strings.ReplaceAll(normalized, "\r", "")
+	normalized = strings.ReplaceAll(normalized, "\t", "")
+	normalized = strings.ReplaceAll(normalized, " ", "")
+	if normalized == "" {
+		return "", fmt.Errorf("chromium extension key is required")
+	}
+	publicKeyDER, err := base64.StdEncoding.DecodeString(normalized)
+	if err != nil {
+		return "", fmt.Errorf("decode chromium extension key: %w", err)
+	}
+	hash := sha256.Sum256(publicKeyDER)
+	var builder strings.Builder
+	builder.Grow(chromiumIDBytes * 2)
+	for _, b := range hash[:chromiumIDBytes] {
+		builder.WriteByte('a' + ((b >> 4) & 0x0f))
+		builder.WriteByte('a' + (b & 0x0f))
+	}
+	return builder.String(), nil
+}
+
 func DefaultManifestPath(browser Browser) (string, error) {
 	home, err := os.UserHomeDir()
 	if err != nil {