threema

This gem provides access to the Threema Gateway API.

Installation

Add this line to your application's Gemfile:

gem 'threema'

And then execute:

$ bundle

Or install it yourself as:

$ gem install threema

Make sure that your operating system has libsodium installed. See here: https://github.com/RubyCrypto/rbnacl/wiki/Installing-libsodium

Usage

Account creation

First of all make sure you have an account registered for the Threema Gateway. Use the sign up form.

To use the End To End encryption you have to register an additional custom Threema ID. If you have no key pair (private and public) yet you can create one via:

require 'threema'

pair = Threema::E2e::Key.generate_pair

p Threema::E2e::Key.encode(pair[:public])
#=> "public:b3d84e5b2c849ef47315fbfacec3452f9149bf73aa0ded8d2e1ac69be021ea0d"

p Threema::E2e::Key.encode(pair[:private])
#=> "private:e20f700ffbe67d59b14310bb65432148b823ea9fb32f8cb21164fe02240cd002"

ATTENTION: These are your identification. If you lose or publish your private key you lose your identitiy and have major problem. So keep your private key secure under all circumstances! Don't push it to a git repository or any other public place.

It is important to use the corresponding private key for the public key you have used to register your custom Threema ID.

To receive Threema Gateway messages you need a valid HTTPS callback endpoint which Threema will call on incomming messages. Taken from the documentation:

Callback results and retry

If the connection to your callback URL fails or your callback does not return an HTTP 200 status, the API will retry 3 more times in intervals of 5 minutes. If all attempts fail, the message is discarded.

So make sure your endpoint is valid and accessable! The received payload can be handled via the gem. This is described down below in the receiving block.

After the registration process is completed and Threema activated your custom Threema ID you now should have the following credentials:

• API Identity (Custom Threema ID like e.g. *YOURAPP1)
• API Secret (gained from https://gateway.threema.ch/de/id/*YOURAPP1)
• Private Key (the one created above)

Gem

First of all create a threema instance with the gained credentials (above) via:

require 'threema'

threema = Threema.new(
  api_identity: api_identity,
  api_secret:   api_secret,
  private_key:  private_key
)

However it's recommended to use environmental variables for this. So something like this will work:

# api_identity is stored in ENV['THREEMARB_API_IDENTITY']
# api_secret is stored in ENV['THREEMARB_API_SECRET']
# private_key is stored in ENV['THREEMARB_PRIVATE']
require 'threema'

threema = Threema.new()

If you want, you can configure static certificate pinning like this:

require 'threema'

threema = Threema.new
threema.client.configure do |config|
  # Threema API fingerprint as of 2021-02-27
  fingerprint = '42b1038e72f00c8c4dad78a3ebdc6d7a50c5ef288da9019b9171e4d675c08a17'

  # See: http://stackoverflow.com/a/22108461
  config.use_ssl = true

  config.verify_mode = OpenSSL::SSL::VERIFY_PEER

  config.verify_callback = lambda do |preverify_ok, cert_store|
    return false unless preverify_ok

    end_cert = cert_store.chain[0]
    return true unless end_cert.to_der == cert_store.current_cert.to_der

    remote_fingerprint = OpenSSL::Digest::SHA256.hexdigest(end_cert.to_der)
    remote_fingerprint == fingerprint
  end
end

Sending

With this gem you can send simple (unencrypted!) or end to end encrypted messages.

Simple

Send simple (unencrypted!) messages via:

# Threema ID
threema.send(
  type: :simple,
  threema_id:   receiver_threema_id,
  text: hello_world,
)

# Phone
threema.send(
  type:  :simple,
  phone: '41791234567',
  text:  hello_world,
)

# Email
threema.send(
  type:  :simple,
  email: '[email protected]',
  text:  hello_world,
)

Text

Send (e2e encrypted) text messages via:

threema.send(
  type: :text,
  threema_id:   receiver_threema_id,
  text: hello_world,
)

Image

Send (e2e encrypted) image messages via:

# via path to file
threema.send(
  type: :image,
  threema_id:   receiver_threema_id,
  image: '/path/to/image.png',
)

# with bytestring
threema.send(
  type: :image,
  threema_id:   receiver_threema_id,
  image: 'imagecontent'.b,
)

File

Send (e2e encrypted) file messages via:

# via path to file
threema.send(
  type: :file,
  threema_id:   receiver_threema_id,
  file: '/path/to/file.txt',
)

# with bytestring
threema.send(
  type: :file,
  threema_id:   receiver_threema_id,
  file: 'filecontent'.b,
)

# with thumbnail path
threema.send(
  type:      :file,
  threema_id:        receiver_threema_id,
  file:      '/path/to/file.txt',
  thumbnail: '/path/to/thumbnail.png',
)

# with thumbnail bytestring
threema.send(
  type:      :file,
  threema_id:        receiver_threema_id,
  file:      '/path/to/file.txt',
  thumbnail: 'thumbnailcontent'.b,
)

Receiving

With this gem you can receive end to end encrypted messages. To decrypt a received payload that was send to your HTTPS callback endpoint you can call the threema instance like this:

message = threema.receive(
  payload: payload,
)

message will then be an instance of one of the following classes:

• Threema::Receive::Text
• Threema::Receive::Image
• Threema::Receive::File

You can access the message content via message.content which will contain either a text or bytestring, depending on the message type. File messages also have a message.mime_type.

Development

After checking out the repo, run bundle to install dependencies. Then, run rake spec to run the tests. Make sure to not reduce the test coverage.

To install this gem onto your local machine, run bundle exec rake install. To release a new version, update the version number in version.rb, and then run bundle exec rake release, which will create a git tag for the version, push git commits and tags, and push the .gem file to rubygems.org.

Contributing

Bug reports and pull requests are welcome on GitHub at https://github.com/thorsteneckel/threema.

License

The gem is available as open source under the terms of the MIT License.