Andreas Reinhold / reiniandClaude Opus 5
504971ad7f
Uploaders no longer have to make up a share password. With "Password protect" on, the upload page has Generate and Copy under the field, and the page the upload leads to offers the password once more beside the link: masked, with the same copy button at the end of the field as the link's. The password also derives the share's encryption key and only its hash is stored, so a lost one means files nobody can open. - PasswordGeneratorService draws from Random\Randomizer's secure engine. Characters are drawn uniformly and redrawn until every chosen set appears; passphrases come from EFF's large word list (CC BY 3.0 US, credited in the README), without its four hyphenated words. - Admin settings gain a "Share Passwords" card: mode (off, on request, prefilled as protection is switched on), kind (characters: length 12–64, the sets, look-alikes left out; passphrase: 4–10 words and a separator), and an example with its estimated entropy that follows the form before saving. Fields the chosen mode or kind hides are excluded from validation and keep their saved value. The default is on request, 20 letters and numbers without look-alikes. - FileUploader flashes the password encrypted with the share's token; ShareCreated shows it only when the token matches, so a reload or any other visitor sees nothing. Crypt covers installs without SESSION_ENCRYPT, which the Docker setup does not set. - The symbol set leaves out what chat apps turn into formatting and what breaks inside quotes, so a pasted password arrives unchanged. - app.css imports group.css for <x-group>; .ai/rules/views.md records that <x-group> drops data-test and other attributes. - Tests cover the generator, the admin card's saving, validation and example, prefill and generate on the upload page, the flash, and in Chromium Generate and Copy on the upload page and the masked copy on the share page. The admin settings page now has six headed sections. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
98 lines
5.0 KiB
PHP
98 lines
5.0 KiB
PHP
<x-pane class="share-column">
|
|
<x-stack gap="space400">
|
|
<x-stack align="center" gap="space200">
|
|
{{-- The link is ready: a check on an Expressive shape that settles in (share-ready, app.css). --}}
|
|
<div class="share-check">
|
|
<x-shape name="soft-burst" class="share-check-shape" />
|
|
<x-icon name="check" size="48" class="share-check-icon" />
|
|
</div>
|
|
|
|
<x-stack align="center" gap="space50">
|
|
<h1 class="md-type-headline-md md-text-center">{{ __('Share Created!') }}</h1>
|
|
<p class="md-type-body-lg md-ink-variant md-text-center">{{ __('Your files are ready to share') }}</p>
|
|
</x-stack>
|
|
</x-stack>
|
|
|
|
<x-stack gap="space200">
|
|
{{-- Besides the link: a QR code in a dialog, saved as a PNG in the browser, and the device's
|
|
share sheet where there is one (resources/js/share-created.js). Both carry the link only. --}}
|
|
<x-stack
|
|
gap="space100"
|
|
x-data="shareActions({
|
|
url: {{ \Illuminate\Support\Js::from($shareUrl) }},
|
|
title: {{ \Illuminate\Support\Js::from($siteTitle) }},
|
|
filename: {{ \Illuminate\Support\Js::from('share-'.$share->token.'.png') }},
|
|
messages: {{ \Illuminate\Support\Js::from(['shareFailed' => __('The share sheet could not open.'), 'downloadFailed' => __('The QR code could not be saved.')]) }},
|
|
})"
|
|
data-test="share-actions"
|
|
>
|
|
<x-input
|
|
:label="__('Share Link')"
|
|
:value="$shareUrl"
|
|
readonly
|
|
copyable
|
|
mono
|
|
icon="link"
|
|
data-test="share-link"
|
|
/>
|
|
|
|
{{-- Only on the visit the upload redirects to: the password is flashed once (FileUploader::createShare).
|
|
Masked, with the link's copy button at its end, so it is copied without reaching the screen. --}}
|
|
@if ($password)
|
|
<x-input
|
|
type="password"
|
|
:label="__('Password')"
|
|
:value="$password"
|
|
:hint="__('Available only this once. Send it separately from the link.')"
|
|
readonly
|
|
copyable
|
|
icon="key"
|
|
autocomplete="off"
|
|
data-test="share-password"
|
|
/>
|
|
@endif
|
|
|
|
<x-row gap="space100" wrap>
|
|
<x-button :label="__('Show QR code')" icon="qr_code_2" variant="tonal" x-on:click="open = true" data-test="show-qr-code" />
|
|
|
|
<span x-show="canShare" x-cloak>
|
|
<x-button :label="__('Share…')" icon="share" variant="tonal" x-on:click="share()" data-test="share-sheet" />
|
|
</span>
|
|
</x-row>
|
|
|
|
<x-modal fullscreen :title="__('Scan to open the share')" data-test="qr-code-dialog">
|
|
<x-stack gap="space200">
|
|
{{-- The quiet zone is baked into the SVG (App\Services\QrCodeService), white in
|
|
either theme so a scanner keeps its contrast; the container adds no colour. --}}
|
|
<div data-qr-code class="share-qr">{!! $qrCodeSvg !!}</div>
|
|
|
|
@if ($share->isPasswordProtected())
|
|
<x-alert color="info" icon="lock" :title="__('Recipients also need the password.')" />
|
|
@endif
|
|
</x-stack>
|
|
|
|
<x-slot:actions>
|
|
<x-button :label="__('Close')" x-on:click="close()" />
|
|
<x-button :label="__('Download')" icon="download" variant="tonal" x-on:click="downloadQrCode($el.closest('dialog').querySelector('[data-qr-code] svg'))" data-test="download-qr-code" />
|
|
</x-slot:actions>
|
|
</x-modal>
|
|
</x-stack>
|
|
|
|
<x-grid :columns="2" gap="space200">
|
|
<x-stat :title="__('Files')" :value="$share->files->count()" icon="description" />
|
|
<x-stat :title="__('Total Size')" :value="Number::fileSize($share->total_size)" icon="hard_drive" />
|
|
<x-stat :title="__('Expires')" :value="$share->expires_at ? $share->expires_at->diffForHumans() : __('Never')" icon="schedule" />
|
|
<x-stat :title="__('Max Downloads')" :value="$share->max_downloads ?? __('Unlimited')" icon="download" />
|
|
</x-grid>
|
|
|
|
@if ($share->isPasswordProtected())
|
|
<x-alert color="info" icon="lock" :title="__('This share is password protected')" />
|
|
@endif
|
|
|
|
<x-row justify="end">
|
|
<x-button :label="__('Upload More')" :link="route('upload')" icon="add" variant="tonal" />
|
|
</x-row>
|
|
</x-stack>
|
|
</x-stack>
|
|
</x-pane>
|