Etebase makes building end-to-end encrypted applications easy by taking care of the encryption and its related challenges. That's why you would rarely if ever see any mention of encryption of the API. Everything is taken care of by Etebase.
When working with Etebase you will mostly be working with
Item objects, and sometimes with
Revision items. These are the basic building blocks of every Etebase application.
Client and server responsibilities
Etebase is end-to-end encrypted so the server has no access to user data. This means that most of the operations are done on the client, and the server is just there to store the data and assist the clients. Which is why the documentation focuses on client side APIs.
To ensure the safety of user data, all of the operations should be run on client devices and in client-side applications. This includes
login and every other operation.
Almost all of the data in Etebase is stored in items. Items, like the rest of Etebase are encrypted and signed to make sure no one can read or tamper with the data. Items must reside inside collections and don't live on their own.
Items can represent and hold whatever kind of data and be organised in whatever structure that suits your needs, including: key-value stores, files and directories (pointing to other items). You can think of them as almost equivalent to inodes.
Items have two different areas where data is stored, one for metadata and one for the actual content.
The metadata of items consists of the following fields (all are optional). You can additionally extend the type to include whatever fields you would like.
The type of the item. It's useful if you have multiple types of information inside the same collection. E.g. if you are building a note-taking app you may use
note for notes and
attachment for image attachments.
An optional name for the item. If this item needs a user visible name, this is the place for it. This can be used, for example, for filenames.
When this item was last modified in milliseconds since epoch.
A user visible description for this collection, to better explain to the user what this collection is for.
A hash prefixed HTML-like color description that follows the following format:
#RRGGBBAA. For example:
The content of the item can be whatever you want. Internally it's treated like a blob of data. In most cases you will just store your raw data here, but in some cases, such as when representing an hierarchical structure (such as directories), it's better to conform to the standard Etebase way of doing it.
Collections are a collection of items. Like items, they also have their own metadata and content, and are also encrypted and signed. Unlike items, they have an immutable type, and an associated sync token (
stoken) which indicates whether the collection or its items have changed.
In addition to the above, collections can also be shared with other users and have associated access control. If you think of items as the equivalent of inodes, then collections are the equivalent of filesystems.
Most applications will only use one collection type and only one or a potentially few collections.
Collection types are immutable and are set when an item is created. They describe the type of data that's within the collection, and enable more efficient handling of different data types.
They are in lower case and use a dotted notation, prefixed with a unique developer prefix followed with the rest of the type name. For example, if your developer name is Cyberdyne, example types could be:
cyberdyne.calendar or really, whatever you want.
In addition to creating your own types, you can also use existing types as long as you follow their specifications.
Not sure what you should use? Just use your developer name, e.g.
Collections can be used interchangeably with items so they use the same
ItemMetadata type. This means that all of the fields here are the same as for items, with the exception of
name which unlike for items, should be set for collections.
A user visible name for this collection. In some cases this name will be shown to the user, for example if it represents a calendar, the name could be
Holiday. Though a descriptive name is still useful even if it doesn't have a user-facing role.
The content of the collection can be whatever you want. Internally it's treated like a blob of data. In most cases you will just store your raw data here, but in some cases, such as when representing an hierarchical structure (such as directories), it's better to conform to the standard Etebase way of doing it.
Sync token (
The collection also has an addition read-only field called
stoken. It changes every time a collection or its items have changed, and can be used to efficiently fetch only changed entries, or to enforce collection-wide integrity.
You won't often be interacting with revisions directly, but it's still good to know they are there. Essentially, every time you change a collection or an item a new revision is created. Each revision is a snapshot of the collection or item at that point in time so you can easily view and rollback changes.
This is very useful if you would like to offer a change history to your users, or even if you just want to make sure your data is never lost, even if you make a mistake.