This changes allows to password protect shares. It works by: * Allowing to optionally pass a password when creating a share * If set, the password + salt that is configured via a new flag will be hashed via bcrypt and the hash stored together with the rest of the share * Additionally, a random 96 byte long token gets generated and stored as part of the share * When the backend retrieves an unauthenticated request for a share that has authentication configured, it will return a http 401 * The frontend detects this and will show a login prompt * The actual download links are protected via an url arg that contains the previously generated token. This allows us to avoid buffering the download in the browser and allows pasting the link without breaking it
175 lines
4.9 KiB
Vue
175 lines
4.9 KiB
Vue
<template>
|
|
<div class="card floating share__promt__card" id="share">
|
|
<div class="card-title">
|
|
<h2>{{ $t('buttons.share') }}</h2>
|
|
</div>
|
|
|
|
<div class="card-content">
|
|
<ul>
|
|
|
|
<li v-for="link in links" :key="link.hash">
|
|
<a :href="buildLink(link.hash)" target="_blank">
|
|
<template v-if="link.expire !== 0">{{ humanTime(link.expire) }}</template>
|
|
<template v-else>{{ $t('permanent') }}</template>
|
|
</a>
|
|
|
|
<button class="action"
|
|
@click="deleteLink($event, link)"
|
|
:aria-label="$t('buttons.delete')"
|
|
:title="$t('buttons.delete')"><i class="material-icons">delete</i></button>
|
|
|
|
<button class="action copy-clipboard"
|
|
:data-clipboard-text="buildLink(link.hash)"
|
|
:aria-label="$t('buttons.copyToClipboard')"
|
|
:title="$t('buttons.copyToClipboard')"><i class="material-icons">content_paste</i></button>
|
|
</li>
|
|
|
|
<li v-if="!hasPermanent">
|
|
<div>
|
|
<input type="password" :placeholder="$t('prompts.optionalPassword')" v-model="passwordPermalink">
|
|
<a @click="getPermalink" :aria-label="$t('buttons.permalink')">{{ $t('buttons.permalink') }}</a>
|
|
</div>
|
|
</li>
|
|
|
|
<li>
|
|
<input v-focus
|
|
type="number"
|
|
max="2147483647"
|
|
min="0"
|
|
@keyup.enter="submit"
|
|
v-model.trim="time">
|
|
<select v-model="unit" :aria-label="$t('time.unit')">
|
|
<option value="seconds">{{ $t('time.seconds') }}</option>
|
|
<option value="minutes">{{ $t('time.minutes') }}</option>
|
|
<option value="hours">{{ $t('time.hours') }}</option>
|
|
<option value="days">{{ $t('time.days') }}</option>
|
|
</select>
|
|
<input type="password" :placeholder="$t('prompts.optionalPassword')" v-model="password">
|
|
<button class="action"
|
|
@click="submit"
|
|
:aria-label="$t('buttons.create')"
|
|
:title="$t('buttons.create')"><i class="material-icons">add</i></button>
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
|
|
<div class="card-action">
|
|
<button class="button button--flat"
|
|
@click="$store.commit('closeHovers')"
|
|
:aria-label="$t('buttons.close')"
|
|
:title="$t('buttons.close')">{{ $t('buttons.close') }}</button>
|
|
</div>
|
|
</div>
|
|
</template>
|
|
|
|
<script>
|
|
import { mapState, mapGetters } from 'vuex'
|
|
import { share as api } from '@/api'
|
|
import { baseURL } from '@/utils/constants'
|
|
import moment from 'moment'
|
|
import Clipboard from 'clipboard'
|
|
|
|
export default {
|
|
name: 'share',
|
|
data: function () {
|
|
return {
|
|
time: '',
|
|
unit: 'hours',
|
|
hasPermanent: false,
|
|
links: [],
|
|
clip: null,
|
|
password: '',
|
|
passwordPermalink: ''
|
|
}
|
|
},
|
|
computed: {
|
|
...mapState([ 'req', 'selected', 'selectedCount' ]),
|
|
...mapGetters([ 'isListing' ]),
|
|
url () {
|
|
if (!this.isListing) {
|
|
return this.$route.path
|
|
}
|
|
|
|
if (this.selectedCount === 0 || this.selectedCount > 1) {
|
|
// This shouldn't happen.
|
|
return
|
|
}
|
|
|
|
return this.req.items[this.selected[0]].url
|
|
}
|
|
},
|
|
async beforeMount () {
|
|
try {
|
|
const links = await api.get(this.url)
|
|
this.links = links
|
|
this.sort()
|
|
|
|
for (let link of this.links) {
|
|
if (link.expire === 0) {
|
|
this.hasPermanent = true
|
|
break
|
|
}
|
|
}
|
|
} catch (e) {
|
|
this.$showError(e)
|
|
}
|
|
},
|
|
mounted () {
|
|
this.clip = new Clipboard('.copy-clipboard')
|
|
this.clip.on('success', () => {
|
|
this.$showSuccess(this.$t('success.linkCopied'))
|
|
})
|
|
},
|
|
beforeDestroy () {
|
|
this.clip.destroy()
|
|
},
|
|
methods: {
|
|
submit: async function () {
|
|
if (!this.time) return
|
|
|
|
try {
|
|
const res = await api.create(this.url, this.password, this.time, this.unit)
|
|
this.links.push(res)
|
|
this.sort()
|
|
} catch (e) {
|
|
this.$showError(e)
|
|
}
|
|
},
|
|
getPermalink: async function () {
|
|
try {
|
|
const res = await api.create(this.url, this.passwordPermalink)
|
|
this.links.push(res)
|
|
this.sort()
|
|
this.hasPermanent = true
|
|
} catch (e) {
|
|
this.$showError(e)
|
|
}
|
|
},
|
|
deleteLink: async function (event, link) {
|
|
event.preventDefault()
|
|
try {
|
|
await api.remove(link.hash)
|
|
if (link.expire === 0) this.hasPermanent = false
|
|
this.links = this.links.filter(item => item.hash !== link.hash)
|
|
} catch (e) {
|
|
this.$showError(e)
|
|
}
|
|
},
|
|
humanTime (time) {
|
|
return moment(time * 1000).fromNow()
|
|
},
|
|
buildLink (hash) {
|
|
return `${window.location.origin}${baseURL}/share/${hash}`
|
|
},
|
|
sort () {
|
|
this.links = this.links.sort((a, b) => {
|
|
if (a.expire === 0) return -1
|
|
if (b.expire === 0) return 1
|
|
return new Date(a.expire) - new Date(b.expire)
|
|
})
|
|
}
|
|
}
|
|
}
|
|
</script>
|
|
|