From d89b325294201d95498ae9d08f102e12ac2f2876 Mon Sep 17 00:00:00 2001 From: Rose Hogenson Date: Sun, 5 Oct 2025 18:00:06 -0700 Subject: Implement a "magic wormhole" file-sharing solution --- internal/api/api.go | 70 --- internal/api/errorcode_string.go | 29 -- internal/cryptoutil/cryptoutil.go | 139 ------ internal/cryptoutil/cryptoutil_test.go | 159 ------- internal/cryptoutil/oae2.go | 297 ------------- roseh.moe.go | 756 +++++---------------------------- static/htmx-ext-sse.js | 8 + static/htmx.min.js | 1 + templates/index.html.template | 1 + templates/wormhole-send.html.template | 14 + templates/wormhole.html.template | 19 + tools/finditers/finditers.go | 53 --- tools/hashpw/hashpw.go | 31 -- tools/notes/notes.go | 351 --------------- 14 files changed, 138 insertions(+), 1790 deletions(-) delete mode 100644 internal/api/api.go delete mode 100644 internal/api/errorcode_string.go delete mode 100644 internal/cryptoutil/cryptoutil.go delete mode 100644 internal/cryptoutil/cryptoutil_test.go delete mode 100644 internal/cryptoutil/oae2.go create mode 100644 static/htmx-ext-sse.js create mode 100644 static/htmx.min.js create mode 100644 templates/wormhole-send.html.template create mode 100644 templates/wormhole.html.template delete mode 100644 tools/finditers/finditers.go delete mode 100644 tools/hashpw/hashpw.go delete mode 100644 tools/notes/notes.go diff --git a/internal/api/api.go b/internal/api/api.go deleted file mode 100644 index 6c9ab3a..0000000 --- a/internal/api/api.go +++ /dev/null @@ -1,70 +0,0 @@ -// Package api contains type definitions for the gob API. -package api - -import "encoding/gob" - -type ErrorCode int - -//go:generate go tool stringer -type=ErrorCode -const ( - Ok ErrorCode = iota - Unauthenticated // missing credentials - PermissionDenied // invalid credentials, or login required - BadRequest // incorrect request format (try gob) - InvalidArgument // one or more arguments was invalid - NotFound // requested resource was not found - Internal // server encountered an unexpected error -) - -func (c ErrorCode) Error() string { - return c.String() -} - -type Response struct { - Status ErrorCode - Err string - Ok any -} - -type LoginResponse struct { - Token string -} - -type ListNotesRequest struct{} - -type ListNotesResponse struct { - Notes []string -} - -type CreateNoteRequest struct { - ContinuationToken []byte - FileName string - Chunk []byte - More bool -} - -type CreateNoteResponse struct { - Name string - ContinuationToken []byte -} - -type ReadNoteRequest struct { - Note string -} - -type ReadNoteResponseStream struct { - FileName string - Chunk []byte -} - -type DeleteNoteRequest struct{} - -type DeleteNoteResponse struct{} - -func init() { - gob.Register(&LoginResponse{}) - gob.Register(&ListNotesResponse{}) - gob.Register(&CreateNoteResponse{}) - gob.Register(&ReadNoteResponseStream{}) - gob.Register(&DeleteNoteResponse{}) -} diff --git a/internal/api/errorcode_string.go b/internal/api/errorcode_string.go deleted file mode 100644 index 5ff2ff0..0000000 --- a/internal/api/errorcode_string.go +++ /dev/null @@ -1,29 +0,0 @@ -// Code generated by "stringer -type=ErrorCode"; DO NOT EDIT. - -package api - -import "strconv" - -func _() { - // An "invalid array index" compiler error signifies that the constant values have changed. - // Re-run the stringer command to generate them again. - var x [1]struct{} - _ = x[Ok-0] - _ = x[Unauthenticated-1] - _ = x[PermissionDenied-2] - _ = x[BadRequest-3] - _ = x[InvalidArgument-4] - _ = x[NotFound-5] - _ = x[Internal-6] -} - -const _ErrorCode_name = "OkUnauthenticatedPermissionDeniedBadRequestInvalidArgumentNotFoundInternal" - -var _ErrorCode_index = [...]uint8{0, 2, 17, 33, 43, 58, 66, 74} - -func (i ErrorCode) String() string { - if i < 0 || i >= ErrorCode(len(_ErrorCode_index)-1) { - return "ErrorCode(" + strconv.FormatInt(int64(i), 10) + ")" - } - return _ErrorCode_name[_ErrorCode_index[i]:_ErrorCode_index[i+1]] -} diff --git a/internal/cryptoutil/cryptoutil.go b/internal/cryptoutil/cryptoutil.go deleted file mode 100644 index 0429b02..0000000 --- a/internal/cryptoutil/cryptoutil.go +++ /dev/null @@ -1,139 +0,0 @@ -// Package cryptoutil contains friendly wrappers around the algorithms from the -// standard library's crypto package. -package cryptoutil - -import ( - "crypto/hkdf" - "crypto/hmac" - "crypto/pbkdf2" - "crypto/rand" - "crypto/sha512" - "crypto/subtle" - "encoding/binary" - "encoding/hex" - "errors" - "io" -) - -const ( - defaultIterations = 4718580 // from cmd/finditers - - oneSaltSize = 64 - hashSize = 64 - certSize = sha512.Size -) - -// SaltSize is the expected salt length for HashIter. -const SaltSize = 2 * oneSaltSize - -// A PasswordHash must be PasswordHashSize bytes. -const PasswordHashSize = SaltSize + hashSize - -// A PasswordHash is derived from the user's password and can be passed to -// CheckPassword to verify if two passwords match. A PasswordHash must be -// PasswordHashSize bytes. -type PasswordHash []byte - -func (h PasswordHash) String() string { return hex.EncodeToString(h) } - -// A RawKey is generated from a password hash and can be used to derive further -// key material. -type RawKey struct { - key []byte -} - -// An HMACKey must be HMACKeySize bytes. -const HMACKeySize = sha512.BlockSize - -// An HMAC key can be used to symmetrically sign and verify messages -// using HMAC-SHA512. An HMACKey must be HMACKeyLen bytes. -type HMACKey []byte - -// A SignedMessage is a message that has been cryptographically signed -// with HMAC-SHA512. -type SignedMessage []byte - -// An EncryptedMessage is encrypted with AES-256-CTR-HMAC-SHA512. -type EncryptedMessage []byte - -// HashIter runs PBKDF2-SHA512 for iter iterations. Useful for benchmarking. The -// salt must be SaltSize bytes. -func HashIter(password string, salt []byte, iter int) ([]byte, error) { - return pbkdf2.Key(sha512.New, password, salt, iter, sha512.Size) -} - -func hashWithSalt(password string, salt []byte) (RawKey, []byte, error) { - hash, err := HashIter(password, salt[:oneSaltSize], defaultIterations) - if err != nil { - return RawKey{}, nil, err - } - key, err := hkdf.Extract(sha512.New, hash, salt[oneSaltSize:]) - if err != nil { - return RawKey{}, nil, err - } - pwHash, err := hkdf.Expand(sha512.New, key, "pwhash", hashSize) - if err != nil { - return RawKey{}, nil, err - } - return RawKey{key}, pwHash, nil -} - -// Hash hashes a user password using PBKDF2-SHA512. -func Hash(password string) (PasswordHash, error) { - salt := make([]byte, SaltSize, SaltSize+hashSize) - rand.Read(salt) - _, pwHash, err := hashWithSalt(password, salt) - if err != nil { - return nil, err - } - return append(salt, pwHash...), nil -} - -// CheckPassword verifies password against a PasswordHash and returns an -// EncryptionKey derived from the password if successful. -func (h PasswordHash) CheckPassword(password string) (RawKey, error) { - salt, expectedHash := h[:SaltSize], h[SaltSize:] - key, pwHash, err := hashWithSalt(password, salt) - if err != nil { - return RawKey{}, err - } - if subtle.ConstantTimeCompare(pwHash, expectedHash) == 0 { - return RawKey{}, errors.New("incorrect password") - } - return key, nil -} - -func (k HMACKey) mac(out, msg []byte, info string) []byte { - mac := hmac.New(sha512.New, k) - buf := make([]byte, 0, binary.MaxVarintLen64) - mac.Write(binary.AppendUvarint(buf, uint64(len(info)))) - io.WriteString(mac, info) - mac.Write(msg) - return mac.Sum(out) -} - -// Sign generates an HMAC-SHA512 signature and appends it to msg. The info and -// additionalData are also authenticated, but are not included in the returned -// signed message. -func (k HMACKey) Sign(msg []byte, info string) SignedMessage { - return k.mac(msg, msg, info) -} - -// Verify checks whether the given message has a valid signature, and returns -// the raw message if it does. The additionalData must match the data passed -// to Sign. -func (k HMACKey) Verify(msg SignedMessage, info string) ([]byte, bool) { - if len(msg) < certSize { - return nil, false - } - msg, sig := msg[:len(msg)-certSize], msg[len(msg)-certSize:] - if !hmac.Equal(sig, k.mac(nil, msg, info)) { - return nil, false - } - return msg, true -} - -// EncryptionKey derives an EncryptionKey. -func (k RawKey) EncryptionKey() (EncryptionKey, error) { - return hkdf.Expand(sha512.New, k.key, "encrypt", sha512.Size) -} diff --git a/internal/cryptoutil/cryptoutil_test.go b/internal/cryptoutil/cryptoutil_test.go deleted file mode 100644 index 059a9e1..0000000 --- a/internal/cryptoutil/cryptoutil_test.go +++ /dev/null @@ -1,159 +0,0 @@ -package cryptoutil - -import ( - "bytes" - "encoding/hex" - "io" - "testing" -) - -func mustHex(t testing.TB, s string) []byte { - t.Helper() - bytes, err := hex.DecodeString(s) - if err != nil { - t.Fatalf("Bad hex %q: %s", s, err) - } - return bytes -} - -func TestPassword(t *testing.T) { - const password = "eclair scroll gliding sled shining removed ascend android cheer confetti" - hash, err := Hash(password) - if err != nil { - t.Fatalf("Hash(%q) failed: %s", password, err) - } - _, err = hash.CheckPassword(password) - if err != nil { - t.Errorf("%x.CheckPassword(%q) failed: %s", hash, password, err) - } -} - -func TestSignature(t *testing.T) { - key := HMACKey(mustHex(t, "669e06ec457778b9a8133edb0a87ea82c6b141ffbbc63c038da96258175eb35c")) - msg := []byte("test message") - signedMsg := key.Sign(msg, "info") - got, ok := key.Verify(signedMsg, "info") - if !ok { - t.Fatalf("Verify(%x) rejected the message", signedMsg) - } - if !bytes.Equal(got, msg) { - t.Errorf("Verify(%x) = %x, want %x", signedMsg, got, msg) - } -} - -func TestEncrypt(t *testing.T) { - key := EncryptionKey(mustHex(t, "b6de26860e0a39aa134732e58055c06ba028675453f73a6912bc932e58d5743d0e423217f06487d3e96a59980301fcc97dfcc4c6b19765f2947de3c33ab7ef9e")) - for _, tc := range []struct { - desc string - msg []byte - }{{ - desc: "empty", - msg: nil, - }, { - desc: "short", - msg: []byte("test message"), - }, { - desc: "long", - msg: func() []byte { - msg := make([]byte, 1024*1024) - for i := range msg { - msg[i] = byte(i) - } - return msg - }(), - }} { - t.Run(tc.desc, func(t *testing.T) { - encryptedMsg := new(bytes.Buffer) - w := key.NewWriter(encryptedMsg, WithAdditionalData([]byte("additional data"))) - if _, err := w.Write(tc.msg); err != nil { - t.Fatalf("EncryptingWriter.Write(%q) failed: %s", tc.msg, err) - } - if err := w.Close(); err != nil { - t.Fatalf("EncryptingWriter.Close() failed: %s", err) - } - got, err := io.ReadAll(key.NewReader(bytes.NewReader(encryptedMsg.Bytes()), WithAdditionalData([]byte("additional data")))) - if err != nil { - t.Fatalf("DecryptingReader.Read(%x) failed: %s", encryptedMsg, err) - } - if !bytes.Equal(got, tc.msg) { - t.Errorf("DecryptingReader.Read(%x) = %x, want %x", encryptedMsg, got, tc.msg) - } - }) - } -} - -func TestDeriveKey(t *testing.T) { - const password = "automaker moisture botch tubular kelp rinse rule giggly donated stock" - hash, err := Hash(password) - if err != nil { - t.Fatalf("Hash(%q) failed: %s", password, err) - } - rawKey, err := hash.CheckPassword(password) - if err != nil { - t.Fatalf("%x.CheckPassword(%q) failed: %s", hash, password, err) - } - key, err := rawKey.EncryptionKey() - if err != nil { - t.Fatalf("EncryptionKey() failed: %s", err) - } - msg := []byte("test message") - encryptedMsg := new(bytes.Buffer) - w := key.NewWriter(encryptedMsg, WithAdditionalData([]byte("additional data"))) - if _, err := w.Write(msg); err != nil { - t.Fatalf("EncryptingWriter.Write(%q) failed: %s", msg, err) - } - if err := w.Close(); err != nil { - t.Fatalf("EncryptingWriter.Close() failed: %s", err) - } - got, err := io.ReadAll(key.NewReader(encryptedMsg, WithAdditionalData([]byte("additional data")))) - if err != nil { - t.Fatalf("DecryptingReader.Read(%x) failed: %s", encryptedMsg, err) - } - if !bytes.Equal(got, msg) { - t.Errorf("DecryptingReader.Read(%x) = %x, want %x", encryptedMsg, got, msg) - } -} - -func BenchmarkEncrypt(b *testing.B) { - key := EncryptionKey(mustHex(b, "b6de26860e0a39aa134732e58055c06ba028675453f73a6912bc932e58d5743d0e423217f06487d3e96a59980301fcc97dfcc4c6b19765f2947de3c33ab7ef9e")) - msg := make([]byte, 1024*1024) - for i := range msg { - msg[i] = byte(i) - } - encryptedMsg := bytes.NewBuffer(make([]byte, 0, 35+len(msg)+16*(len(msg)+defaultOpts.segmentSize-1)/defaultOpts.segmentSize /* ?? */)) - additionalData := []byte("additional data") - for b.Loop() { - w := key.NewWriter(encryptedMsg, WithAdditionalData(additionalData)) - if _, err := w.Write(msg); err != nil { - b.Fatal(err) - } - if err := w.Close(); err != nil { - b.Fatal(err) - } - encryptedMsg.Reset() - } -} - -func BenchmarkDecrypt(b *testing.B) { - key := EncryptionKey(mustHex(b, "b6de26860e0a39aa134732e58055c06ba028675453f73a6912bc932e58d5743d0e423217f06487d3e96a59980301fcc97dfcc4c6b19765f2947de3c33ab7ef9e")) - msg := make([]byte, 1024*1024) - for i := range msg { - msg[i] = byte(i) - } - encryptedMsg := new(bytes.Buffer) - additionalData := []byte("additional data") - w := key.NewWriter(encryptedMsg, WithAdditionalData(additionalData)) - if _, err := w.Write(msg); err != nil { - b.Fatal(err) - } - if err := w.Close(); err != nil { - b.Fatal(err) - } - decryptedMsg := make([]byte, len(msg)) - for b.Loop() { - r := key.NewReader(bytes.NewReader(encryptedMsg.Bytes()), WithAdditionalData(additionalData)) - if _, err := io.ReadFull(r, decryptedMsg); err != nil { - b.Fatal(err) - } - } -} diff --git a/internal/cryptoutil/oae2.go b/internal/cryptoutil/oae2.go deleted file mode 100644 index bc8f53e..0000000 --- a/internal/cryptoutil/oae2.go +++ /dev/null @@ -1,297 +0,0 @@ -package cryptoutil - -import ( - "bufio" - "bytes" - "crypto/aes" - "crypto/cipher" - "crypto/hkdf" - "crypto/rand" - "crypto/sha512" - "encoding/binary" - "errors" - "io" -) - -// Online Authenticated Encryption from https://eprint.iacr.org/2015/189.pdf - -const ( - aeadOverhead = 16 - aesKeySize = 32 - noncePrefixSize = 3 - gcmNonceSize = 12 - headerSize = aesKeySize + noncePrefixSize -) - -// An EncryptionKey is used for encrypting and decrypting data. A key can be any -// length, but at least 64 bytes would be recommended. -type EncryptionKey []byte - -type oae2 struct { - key EncryptionKey - additionalData []byte - - aead cipher.AEAD - i int64 - noncePrefix [noncePrefixSize]byte -} - -func (o *oae2) initialize(header []byte) error { - o.i = 1 - copy(o.noncePrefix[:], header[aesKeySize:]) - derivedKey, err := hkdf.Key(sha512.New, o.key, header[:aesKeySize], "", aesKeySize) - if err != nil { - return err - } - block, err := aes.NewCipher(derivedKey) - if err != nil { - return err - } - o.aead, err = cipher.NewGCM(block) - return err -} - -func (o *oae2) nonce(nonce []byte, lastBlock bool) error { - copy(nonce, o.noncePrefix[:]) - if o.i < 0 { - return errors.New("counter overflowed (64 bits??)") - } - binary.BigEndian.PutUint64(nonce[noncePrefixSize:], uint64(o.i)) - if lastBlock { - nonce[gcmNonceSize-1] = 1 - } - return nil -} - -func (o *oae2) encryptBlock(out, block []byte, lastBlock bool) ([]byte, error) { - nonce := make([]byte, gcmNonceSize) - if err := o.nonce(nonce, lastBlock); err != nil { - return nil, err - } - encrypted := o.aead.Seal(out, nonce, block, o.additionalData) - o.i++ - o.additionalData = nil - return encrypted, nil -} - -func (o *oae2) decryptBlock(out, block []byte, lastBlock bool) ([]byte, error) { - nonce := make([]byte, gcmNonceSize) - if err := o.nonce(nonce, lastBlock); err != nil { - return nil, err - } - decrypted, err := o.aead.Open(out, nonce, block, o.additionalData) - if err != nil { - return nil, err - } - o.i++ - o.additionalData = nil - return decrypted, nil -} - -// An EncryptingWriter encrypts data in segments using the STREAM construction -// described in https://eprint.iacr.org/2015/189.pdf. The writer buffers data up -// to the segment size, so it's important to call Close to flush the -// final segment. -type EncryptingWriter struct { - w io.Writer - oae2 oae2 - segmentSize int - - initialized bool - err error - buf []byte -} - -type opts struct { - additionalData []byte - segmentSize int -} - -var defaultOpts = opts{segmentSize: 192*1024 - 1 - aeadOverhead} - -type Option func(*opts) - -func WithAdditionalData(ad []byte) Option { - return func(opts *opts) { - opts.additionalData = ad - } -} - -func WithSegmentSize(segmentSize int) Option { - return func(opts *opts) { - opts.segmentSize = segmentSize - } -} - -// NewWriter returns a new EncryptingWriter that writes to w. The additionalData -// will be authenticated with the first segment, but is not written to w. The -// same additional data must be provided when decrypting. -func (k EncryptionKey) NewWriter(w io.Writer, options ...Option) *EncryptingWriter { - opts := defaultOpts - for _, o := range options { - o(&opts) - } - return &EncryptingWriter{ - w: w, - oae2: oae2{ - key: k, - additionalData: opts.additionalData, - }, - segmentSize: opts.segmentSize, - } -} - -func (w *EncryptingWriter) initialize() error { - w.initialized = true - w.buf = make([]byte, 0, w.segmentSize+aeadOverhead) - header := make([]byte, headerSize) - rand.Read(header) - if w.err = w.oae2.initialize(header); w.err != nil { - return w.err - } - _, w.err = w.w.Write(header) - return w.err -} - -func (w *EncryptingWriter) writeBuf() error { - var encrypted []byte - if encrypted, w.err = w.oae2.encryptBlock(w.buf[:0], w.buf, false); w.err != nil { - return w.err - } - if _, w.err = w.w.Write(encrypted); w.err != nil { - return w.err - } - w.buf = w.buf[:0] - return nil -} - -func (w *EncryptingWriter) Write(buf []byte) (int, error) { - if !w.initialized { - if err := w.initialize(); err != nil { - return 0, err - } - } - if w.err != nil { - return 0, w.err - } - r := bytes.NewReader(buf) - nn := 0 - for r.Len() > 0 { - if len(w.buf) == w.segmentSize { - if err := w.writeBuf(); err != nil { - return nn, err - } - } - n, _ := r.Read(w.buf[len(w.buf):w.segmentSize]) - w.buf = w.buf[:len(w.buf)+n] - nn += n - } - return nn, nil -} - -var errClosed = errors.New("closed") - -// Close encrypts writes the final segment. It does not close the -// underlying writer. -func (w *EncryptingWriter) Close() error { - if !w.initialized { - if err := w.initialize(); err != nil { - return err - } - } - if w.err == errClosed { - return nil - } - if w.err != nil { - return w.err - } - var encrypted []byte - if encrypted, w.err = w.oae2.encryptBlock(w.buf[:0], w.buf, true); w.err != nil { - return w.err - } - if _, w.err = w.w.Write(encrypted); w.err != nil { - return w.err - } - w.err = errClosed - return nil -} - -// A DecryptingReader decrypts data using the STREAM construction. -type DecryptingReader struct { - r *bufio.Reader - oae2 oae2 - segmentSize int - - initialized bool - buf bytes.Buffer -} - -// NewReader returns a new DecryptingWriter that decrypts data from r. The -// additionaData must be the same that was provided when encrypting. -func (k EncryptionKey) NewReader(r io.Reader, options ...Option) *DecryptingReader { - opts := defaultOpts - for _, o := range options { - o(&opts) - } - return &DecryptingReader{ - r: bufio.NewReaderSize(r, headerSize), - oae2: oae2{ - key: k, - additionalData: opts.additionalData, - }, - segmentSize: opts.segmentSize, - } -} - -func (r *DecryptingReader) initialize() error { - header, err := r.r.Peek(headerSize) - if err != nil { - return err - } - if err := r.oae2.initialize(header); err != nil { - return err - } - r.r.Discard(len(header)) - r.buf = *bytes.NewBuffer(make([]byte, 0, r.segmentSize+aeadOverhead)) - r.initialized = true - return nil -} - -func (r *DecryptingReader) fillBuf() error { - r.buf.Reset() - buf := r.buf.AvailableBuffer() - buf = buf[:cap(buf)] - n, err := io.ReadFull(r.r, buf) - if n == 0 { - if err == io.ErrUnexpectedEOF { - return io.EOF - } - return err - } - buf = buf[:n] - if n > 0 { - // Peek one extra byte to check if this is the last segment - _, readErr := r.r.Peek(1) - result, err := r.oae2.decryptBlock(buf[:0], buf, readErr == io.EOF) - if err != nil { - return err - } - r.buf.Write(result) - } - return nil -} - -func (r *DecryptingReader) Read(buf []byte) (int, error) { - if !r.initialized { - if err := r.initialize(); err != nil { - return 0, err - } - } - if r.buf.Len() == 0 { - if err := r.fillBuf(); err != nil { - return 0, err - } - } - n, _ := r.buf.Read(buf) - return n, nil -} diff --git a/roseh.moe.go b/roseh.moe.go index 8c7e176..e9d0750 100644 --- a/roseh.moe.go +++ b/roseh.moe.go @@ -1,77 +1,29 @@ package main import ( - "bufio" - "bytes" "crypto/rand" - "crypto/subtle" "embed" - "encoding/base64" "encoding/binary" - "encoding/gob" - "encoding/hex" - "errors" "flag" "fmt" "html/template" "io" "log" "net/http" - "net/url" - "os" - "path/filepath" - "strconv" "strings" "sync" "time" - - "gitlab.com/rhogenson/roseh.moe/internal/api" - "gitlab.com/rhogenson/roseh.moe/internal/cryptoutil" ) var ( port = flag.Int("port", 42069, "port to listen on") secretsFile = flag.String("secrets", "secrets", "path to the secrets file") notepadDir = flag.String("notepad", "notepad", "directory to save user notes") + selfURL = flag.String("self-url", "http://localhost:42069", "base URL of the server") serverStartTime = time.Now() ) -var ( - notepadPassword cryptoutil.PasswordHash - secretKey cryptoutil.HMACKey - - encryptionKeyMu sync.Mutex - encryptionKey cryptoutil.EncryptionKey -) - -func loadSecrets() error { - secrets, err := os.ReadFile(*secretsFile) - if err != nil { - return err - } - for _, line := range bytes.Split(bytes.TrimSuffix(secrets, []byte("\n")), []byte("\n")) { - if pw, ok := bytes.CutPrefix(line, []byte("notepad-password=")); ok { - if hex.DecodedLen(len(pw)) != cryptoutil.PasswordHashSize { - return fmt.Errorf("invalid PBKDF2-SHA256 hash") - } - notepadPassword = make(cryptoutil.PasswordHash, hex.DecodedLen(len(pw))) - if _, err := hex.Decode(notepadPassword, pw); err != nil { - return err - } - } else if key, ok := bytes.CutPrefix(line, []byte("secret-key=")); ok { - if hex.DecodedLen(len(key)) != cryptoutil.HMACKeySize { - return fmt.Errorf("invalid HMAC-SHA256 key") - } - secretKey = make(cryptoutil.HMACKey, hex.DecodedLen(len(key))) - if _, err := hex.Decode(secretKey, key); err != nil { - return err - } - } - } - return nil -} - var ( //go:embed templates/404.html.template notFoundString string @@ -137,660 +89,142 @@ func favicon(w http.ResponseWriter, r *http.Request) { serveStaticFile(w, r, "static/favicon.ico") } -type authToken struct { - Issued time.Time -} - -func makeToken() (string, error) { - buf := new(bytes.Buffer) - if err := gob.NewEncoder(buf).Encode(authToken{Issued: time.Now()}); err != nil { - return "", err - } - return base64.RawStdEncoding.EncodeToString(secretKey.Sign(buf.Bytes(), "auth")), nil -} - -func checkToken(token string) bool { - authCookie, err := base64.RawStdEncoding.DecodeString(token) - if err != nil { - return false - } - msg, ok := secretKey.Verify(authCookie, "auth") - if !ok { - return false - } - var t authToken - if err := gob.NewDecoder(bytes.NewReader(msg)).Decode(&t); err != nil { - return false - } - return time.Since(t.Issued) < cookieExpiration -} - -const cookieExpiration = 180 * 24 * time.Hour - -func attachCookie(w http.ResponseWriter) error { - token, err := makeToken() - if err != nil { - return err - } - http.SetCookie(w, &http.Cookie{ - Name: "auth", - Value: token, - Path: "/", - Expires: time.Now().Add(cookieExpiration), - Secure: true, - HttpOnly: true, - SameSite: http.SameSiteStrictMode, - Partitioned: true, - }) - return nil -} - -func cookieAuth(w http.ResponseWriter, r *http.Request) (string, bool) { - const csrfTokenLen = 32 - - cookie, err := r.Cookie("auth") - if err != nil { - return "", false - } - if !checkToken(cookie.Value) { - return "", false - } - attachCookie(w) - - if csrfToken, err := r.Cookie("csrf-token"); err == nil { - return csrfToken.Value, true - } - - buf := make([]byte, csrfTokenLen) - rand.Read(buf) - csrfToken := base64.RawStdEncoding.EncodeToString(buf) - http.SetCookie(w, &http.Cookie{ - Name: "csrf-token", - Value: csrfToken, - Path: "/", - Secure: true, - HttpOnly: true, - SameSite: http.SameSiteStrictMode, - Partitioned: true, - }) - return csrfToken, true -} - -func setEncryptionKey(rawKey cryptoutil.RawKey) error { - encryptionKeyMu.Lock() - currentKey := encryptionKey - encryptionKeyMu.Unlock() - if currentKey != nil { - return nil - } - key, err := rawKey.EncryptionKey() - if err != nil { - return err - } - encryptionKeyMu.Lock() - if encryptionKey == nil { - encryptionKey = key - } - encryptionKeyMu.Unlock() - return nil -} - -var ( - //go:embed templates/login.html.template - loginString string - loginTemplate = template.Must(template.Must(outlineTemplate.Clone()).New("body").Parse(loginString)).Lookup("outline") -) - -type loginTemplateArgs struct { - Error bool - Redirect string -} - -func executeLoginTemplate(w io.Writer, redirect string) { - if err := loginTemplate.Execute(w, loginTemplateArgs{Redirect: base64.RawURLEncoding.EncodeToString(secretKey.Sign([]byte(redirect), "redirect"))}); err != nil { - log.Printf("Warning: login: %s", err) - } -} - -func login(w http.ResponseWriter, r *http.Request) { - rawKey, err := notepadPassword.CheckPassword(r.FormValue("password")) - if err != nil { - if err := loginTemplate.Execute(w, loginTemplateArgs{Error: true, Redirect: r.FormValue("redirect")}); err != nil { - log.Printf("Warning: login: %s", err) - } - return - } - if err := setEncryptionKey(rawKey); err != nil { - http.Error(w, fmt.Sprintf("Error: %s", err), http.StatusInternalServerError) - return - } - attachCookie(w) - redirect := "/" - if b, err := base64.RawURLEncoding.DecodeString(r.FormValue("redirect")); err == nil { - if r, ok := secretKey.Verify(b, "redirect"); ok { - redirect = string(r) - } - } - http.Redirect(w, r, redirect, http.StatusSeeOther) -} - -func readNotepad(key cryptoutil.EncryptionKey) (string, error) { - f, err := os.Open(*notepadDir + "/notepad") - if err != nil { - return "", err - } - defer f.Close() - notepad, err := io.ReadAll(key.NewReader(f, cryptoutil.WithAdditionalData([]byte("notepad")))) - if err != nil { - return "", err - } - return string(notepad), nil -} - -var ( - //go:embed templates/note.html.template - notepadString string - notepadTemplate = template.Must(template.Must(outlineTemplate.Clone()).New("body").Parse(notepadString)).Lookup("outline") -) - -type notepadTemplateArgs struct { - Content string - CSRFToken string -} - -func notepad(w http.ResponseWriter, r *http.Request) { - csrfToken, ok := cookieAuth(w, r) - if !ok { - executeLoginTemplate(w, "/notepad") - return - } - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - executeLoginTemplate(w, "/notepad") - return - } - currentContent, err := readNotepad(key) - if err != nil { - currentContent = fmt.Sprintf("Error reading notepad file: %s", err) - } - if err := notepadTemplate.Execute(w, notepadTemplateArgs{Content: currentContent, CSRFToken: csrfToken}); err != nil { - log.Printf("Warning: notepad: %s", err) - } -} - -func saveNote(w http.ResponseWriter, r *http.Request) error { - if csrfToken, err := r.Cookie("csrf-token"); err != nil || subtle.ConstantTimeCompare([]byte(csrfToken.Value), []byte(r.FormValue("csrf-token"))) == 0 { - return fmt.Errorf("bad CSRF token") - } - if _, ok := cookieAuth(w, r); !ok { - return fmt.Errorf("not logged in") - } - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - return errors.New("not logged in") - } - f, err := os.CreateTemp(*notepadDir, "notepad") - if err != nil { - return err - } - defer f.Close() - encryptingWriter := key.NewWriter(f, cryptoutil.WithAdditionalData([]byte("notepad"))) - if _, err := encryptingWriter.Write([]byte(r.FormValue("content"))); err != nil { - os.Remove(f.Name()) - return err - } - if err := encryptingWriter.Close(); err != nil { - os.Remove(f.Name()) - return err - } - if err := f.Close(); err != nil { - os.Remove(f.Name()) - return err - } - return os.Rename(f.Name(), *notepadDir+"/notepad") -} - -func autosave(w http.ResponseWriter, r *http.Request) { - msg := "Saved ✓" - if err := saveNote(w, r); err != nil { - msg = fmt.Sprintf("Failed to save: %s", err) - } - if err := notepadTemplate.ExecuteTemplate(w, "saveIndicator", msg); err != nil { - log.Printf("Warning: autosave: %s", err) - } -} - -func writeGob(w io.Writer, resp any) { - if err := gob.NewEncoder(w).Encode(&api.Response{Ok: resp}); err != nil { - log.Printf("Warning: write gob response: %s", err) - } -} - -func gobError(w io.Writer, err error) { - var code api.ErrorCode - if !errors.As(err, &code) { - code = api.Internal - } - if err := gob.NewEncoder(w).Encode(&api.Response{Status: code, Err: err.Error()}); err != nil { - log.Printf("Warning: write gob response: %s", err) - } -} - -func apiLogin(w http.ResponseWriter, r *http.Request) { - w.Header().Set("Content-Type", "application/gob") - rawKey, err := notepadPassword.CheckPassword(r.Header.Get("Roseh-Password")) - if err != nil { - gobError(w, fmt.Errorf("%w: incorrect password", api.PermissionDenied)) - return - } - if err := setEncryptionKey(rawKey); err != nil { - gobError(w, err) - return - } - token, err := makeToken() - if err != nil { - gobError(w, err) - return - } - writeGob(w, &api.LoginResponse{Token: token}) -} - -type encoder struct { - enc *gob.Encoder -} - -func (e *encoder) send(resp any) error { - return e.enc.Encode(&api.Response{Ok: resp}) -} - -func listNotes(req *api.ListNotesRequest) (*api.ListNotesResponse, error) { - notes, err := os.ReadDir(*notepadDir + "/notes") - if err != nil { - return nil, err - } - names := make([]string, len(notes)) - for i, note := range notes { - names[i] = note.Name() - } - return &api.ListNotesResponse{Notes: names}, nil -} - -func dumpFile(w io.Writer, key cryptoutil.EncryptionKey, name string) error { - f, err := os.Open(name) - if err != nil { - return err - } - defer f.Close() - _, err = io.Copy(w, key.NewReader(f, cryptoutil.WithAdditionalData([]byte("chunks/"+filepath.Base(name))))) - return err -} - -func chunkName(prefix string, i int64) string { - return fmt.Sprintf("%s%013s", prefix, strconv.FormatUint(uint64(i), 36)) -} - var ( //go:embed wordlist.txt wordListString string wordList = strings.Split(strings.TrimSuffix(wordListString, "\n"), "\n") + + //go:embed templates/wormhole.html.template + wormholeTemplateString string + wormholeTemplate = template.Must(template.Must(outlineTemplate.Clone()).New("body").Parse(wormholeTemplateString)).Lookup("outline") ) -func newNoteName() (*os.File, error) { - for n := 1; ; n++ { - buf := make([]byte, 2*n) - rand.Read(buf) - words := make([]string, n) - for i := range words { - words[i] = wordList[binary.NativeEndian.Uint16(buf[2*i:])&0x1fff] - } - name := strings.Join(words, "-") - var err error - f, err := os.OpenFile(*notepadDir+"/notes/"+name, os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0600) - if err != nil { - if errors.Is(err, os.ErrExist) { - continue - } - return nil, fmt.Errorf("create note: create note file: %s", err) - } - return f, nil - } +type wormholeTemplateArgs struct { + Self string + Hole string } -func createNote(req *api.CreateNoteRequest) (*api.CreateNoteResponse, error) { - type continuationToken struct { - Prefix string - I int64 - } - - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - return nil, fmt.Errorf("%w: need login", api.PermissionDenied) - } - - var contToken continuationToken - if len(req.ContinuationToken) > 0 { - msg, ok := secretKey.Verify(req.ContinuationToken, "continuation-token") - if !ok { - return nil, fmt.Errorf("%w: invalid continuation token", api.InvalidArgument) - } - if err := gob.NewDecoder(bytes.NewReader(msg)).Decode(&contToken); err != nil { - return nil, fmt.Errorf("bad continuation token") - } - } else { - token := make([]byte, 64) - rand.Read(token) - contToken.Prefix = base64.RawURLEncoding.EncodeToString(token) - contToken.I = 0 - } - - if req.More { - if err := os.MkdirAll(*notepadDir+"/chunks", 0700); err != nil { - return nil, err - } - name := chunkName(contToken.Prefix, contToken.I) - f, err := os.OpenFile(*notepadDir+"/chunks/"+name, os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0600) - if err != nil { - if errors.Is(err, os.ErrExist) { - return nil, fmt.Errorf("%w: continuation token expired", api.InvalidArgument) - } - return nil, err - } - defer f.Close() - if contToken.I > 0 { - _, err := os.Stat(*notepadDir + "/chunks/" + chunkName(contToken.Prefix, 0)) - if err != nil { - if errors.Is(err, os.ErrNotExist) { - return nil, fmt.Errorf("%w: continuation token expired", api.InvalidArgument) - } - return nil, err - } - } - encryptingWriter := key.NewWriter(f, cryptoutil.WithAdditionalData([]byte("chunks/"+name))) - if contToken.I == 0 { - if _, err := encryptingWriter.Write(binary.AppendVarint(nil, int64(len(req.FileName)))); err != nil { - return nil, err - } - if _, err := io.WriteString(encryptingWriter, req.FileName); err != nil { - return nil, err - } - } - if _, err := encryptingWriter.Write(req.Chunk); err != nil { - return nil, err - } - if err := encryptingWriter.Close(); err != nil { - return nil, err - } - if err := f.Close(); err != nil { - return nil, err - } - contToken.I++ - buf := new(bytes.Buffer) - if err := gob.NewEncoder(buf).Encode(contToken); err != nil { - return nil, err - } - return &api.CreateNoteResponse{ContinuationToken: secretKey.Sign(buf.Bytes(), "continuation-token")}, nil - } - if err := os.MkdirAll(*notepadDir+"/notes", 0700); err != nil { - return nil, err - } - finalNote, err := newNoteName() - if err != nil { - return nil, err - } - defer finalNote.Close() - writer := key.NewWriter(finalNote, cryptoutil.WithAdditionalData([]byte("notes/"+filepath.Base(finalNote.Name())))) - for i := range contToken.I { - if err := dumpFile(writer, key, *notepadDir+"/chunks/"+chunkName(contToken.Prefix, i)); err != nil { - return nil, err - } - } - if _, err := writer.Write(req.Chunk); err != nil { - return nil, err - } - if err := writer.Close(); err != nil { - return nil, err - } - if err := finalNote.Close(); err != nil { - return nil, err +func wormhole(w http.ResponseWriter, r *http.Request) { + buf := make([]byte, 20) + rand.Read(buf) + words := make([]string, 10) + for i := range words { + words[i] = wordList[binary.NativeEndian.Uint16(buf[2*i:])&0x1fff] } - for i := range contToken.I { - if err := os.Remove(*notepadDir + "/chunks/" + chunkName(contToken.Prefix, i)); err != nil { - log.Printf("Warning: createNote: failed to delete chunk: %s", err) - } + if err := wormholeTemplate.Execute(w, wormholeTemplateArgs{Self: *selfURL, Hole: strings.Join(words, "-")}); err != nil { + log.Printf("Warning: wormhole: %s", err) } - return &api.CreateNoteResponse{Name: filepath.Base(finalNote.Name())}, nil } -type readNoteResponseWriter struct { - fileName string - stream *encoder +type wormholeConn struct { + done chan struct{} + w http.ResponseWriter } -func (w *readNoteResponseWriter) Write(buf []byte) (int, error) { - if err := w.stream.send(&api.ReadNoteResponseStream{FileName: w.fileName, Chunk: buf}); err != nil { - return 0, err - } - w.fileName = "" - return len(buf), nil -} +var wormholeConnsMu sync.Mutex +var wormholeConns = make(map[string]*wormholeConn) -func readNote(stream *encoder, req *api.ReadNoteRequest) error { - f, err := os.OpenInRoot(*notepadDir+"/notes", req.Note) - if err != nil { - if errors.Is(err, os.ErrNotExist) { - return fmt.Errorf("%w: note %q", api.NotFound, req.Note) - } - return err - } - defer f.Close() - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - return fmt.Errorf("%w: need login", api.PermissionDenied) - } - reader := bufio.NewReader(key.NewReader(f, cryptoutil.WithAdditionalData([]byte("notes/"+req.Note)))) - nameLen, err := binary.ReadVarint(reader) - if err != nil { - return err - } - fileName := make([]byte, nameLen) - if _, err := io.ReadFull(reader, fileName); err != nil { - return err - } - _, err = io.Copy(&readNoteResponseWriter{fileName: string(fileName), stream: stream}, reader) - return err -} +var wormholeNotifyMu sync.Mutex +var wormholeNotify = make(map[string]chan struct{}) -func tokenAuth(w http.ResponseWriter, r *http.Request) bool { - token := r.Header.Get("Roseh-Token") - if token == "" { - gobError(w, api.Unauthenticated) - return false - } - if !checkToken(token) { - gobError(w, fmt.Errorf("%w: bad token", api.PermissionDenied)) - return false +func wormholeSend(w http.ResponseWriter, r *http.Request) { + reader, err := r.MultipartReader() + if err != nil { + http.Error(w, "not a multipart/form-data request", http.StatusBadRequest) + return } - return true -} - -func gobReqRespMiddleware[Request, Response any](next func(*Request) (*Response, error)) http.HandlerFunc { - return func(w http.ResponseWriter, r *http.Request) { - w.Header().Set("Content-Type", "application/gob") - if !tokenAuth(w, r) { - return - } - req := new(Request) - if err := gob.NewDecoder(r.Body).Decode(req); err != nil { - gobError(w, fmt.Errorf("%w: read body: %s", api.BadRequest, err)) - return - } - resp, err := next(req) + for { + part, err := reader.NextPart() if err != nil { - gobError(w, err) + break + } + if part.FormName() != "file" { + continue + } + hole := r.PathValue("hole") + wormholeConnsMu.Lock() + conn := wormholeConns[hole] + delete(wormholeConns, hole) + wormholeConnsMu.Unlock() + if conn == nil { + http.Error(w, "no such connection", http.StatusBadRequest) return } - writeGob(w, resp) - } -} - -func gobRespStreamMiddleware[Request any](next func(*encoder, *Request) error) http.HandlerFunc { - return func(w http.ResponseWriter, r *http.Request) { - w.Header().Set("Content-Type", "application/gob") - if !tokenAuth(w, r) { + defer close(conn.done) + conn.w.Header().Set("Content-Disposition", "attachment; filename*=UTF-8''"+part.FileName()) + if _, err := io.Copy(conn.w, part); err != nil { + http.Error(w, fmt.Sprintf("Error during copy: %s", err), http.StatusServiceUnavailable) return } - req := new(Request) - if err := gob.NewDecoder(r.Body).Decode(req); err != nil { - gobError(w, fmt.Errorf("%w: read body: %s", api.BadRequest, err)) - return - } - gobEncoder := gob.NewEncoder(w) - if err := next(&encoder{gobEncoder}, req); err != nil { - gobError(w, err) - return - } - } -} - -var ( - //go:embed templates/upload.html.template - uploadTemplateString string - uploadTemplate = template.Must(template.Must(outlineTemplate.Clone()).New("body").Parse(uploadTemplateString)).Lookup("outline") -) - -type uploadTemplateArgs struct { - CSRFToken string -} - -func uploadPage(w http.ResponseWriter, r *http.Request) { - csrfToken, ok := cookieAuth(w, r) - if !ok { - executeLoginTemplate(w, "/upload") - return - } - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - executeLoginTemplate(w, "/upload") + fmt.Fprintf(w, "uploaded!") return } - if err := uploadTemplate.Execute(w, uploadTemplateArgs{CSRFToken: csrfToken}); err != nil { - log.Printf("Warning: upload: %s", err) - } + http.Error(w, "file not found", http.StatusBadRequest) } -func uploadNote(w http.ResponseWriter, r *http.Request) { - if csrfToken, err := r.Cookie("csrf-token"); err != nil || subtle.ConstantTimeCompare([]byte(csrfToken.Value), []byte(r.FormValue("csrf-token"))) == 0 { - http.Error(w, "bad CSRF token", http.StatusForbidden) - return +func wormholeRecv(w http.ResponseWriter, r *http.Request) { + ctx := r.Context() + hole := r.PathValue("hole") + conn := &wormholeConn{ + done: make(chan struct{}), + w: w, } - if _, ok := cookieAuth(w, r); !ok { - executeLoginTemplate(w, "/upload") + wormholeConnsMu.Lock() + wormholeConns[hole] = conn + wormholeConnsMu.Unlock() + defer func() { + wormholeConnsMu.Lock() + delete(wormholeConns, hole) + wormholeConnsMu.Unlock() + }() + wormholeNotifyMu.Lock() + notify := wormholeNotify[hole] + wormholeNotifyMu.Unlock() + if notify == nil { + http.Error(w, "no such connection", http.StatusBadRequest) return } - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - executeLoginTemplate(w, "/upload") + select { + case notify <- struct{}{}: + default: + http.Error(w, "connection not ready", http.StatusBadRequest) return } - noteFile, err := newNoteName() - if err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - defer noteFile.Close() - contentReader, metadata, err := r.FormFile("content") - if err != nil { - http.Error(w, err.Error(), http.StatusBadRequest) - return - } - writer := key.NewWriter(noteFile, cryptoutil.WithAdditionalData([]byte("notes/"+filepath.Base(noteFile.Name())))) - if _, err := writer.Write(binary.AppendVarint(nil, int64(len(metadata.Filename)))); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - if _, err := io.WriteString(writer, metadata.Filename); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - if _, err := io.Copy(writer, contentReader); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - if err := writer.Close(); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - if err := noteFile.Close(); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return + select { + case <-ctx.Done(): + case <-conn.done: } - fmt.Fprintf(w, "upload! pog\n%s", filepath.Base(noteFile.Name())) } -func readNoteContent(w http.ResponseWriter, r *http.Request) { - if _, ok := cookieAuth(w, r); !ok { - executeLoginTemplate(w, "/note/"+r.PathValue("note")) +func wormholeReady(w http.ResponseWriter, r *http.Request) { + ctx := r.Context() + hole := r.PathValue("hole") + notify := make(chan struct{}) + wormholeNotifyMu.Lock() + wormholeNotify[hole] = notify + wormholeNotifyMu.Unlock() + defer func() { + wormholeNotifyMu.Lock() + delete(wormholeNotify, hole) + wormholeNotifyMu.Unlock() + }() + w.Header().Set("Content-Type", "text/event-stream") + select { + case <-ctx.Done(): return + case <-notify: } - f, err := os.OpenInRoot(*notepadDir+"/notes", r.PathValue("note")) - if err != nil { - notFound(w, r) - return - } - defer f.Close() - encryptionKeyMu.Lock() - key := encryptionKey - encryptionKeyMu.Unlock() - if key == nil { - executeLoginTemplate(w, "/note/"+r.PathValue("note")) - return - } - reader := bufio.NewReader(key.NewReader(f, cryptoutil.WithAdditionalData([]byte("notes/"+r.PathValue("note"))))) - nameLen, err := binary.ReadVarint(reader) - if err != nil { - http.Error(w, "invalid file", http.StatusInternalServerError) - return - } - fileName := make([]byte, nameLen) - if _, err := io.ReadFull(reader, fileName); err != nil { - http.Error(w, err.Error(), http.StatusInternalServerError) - return - } - w.Header().Set("Content-Disposition", "attachment; filename*=UTF-8''"+url.QueryEscape(string(fileName))) - io.Copy(w, reader) + fmt.Fprintf(w, "event: ready\ndata:\n\n") } func main() { flag.Parse() - if err := loadSecrets(); err != nil { - fmt.Fprintln(os.Stderr, err) - os.Exit(1) - } - http.HandleFunc("GET /pong", pong) - http.HandleFunc("POST /login", login) - http.HandleFunc("GET /notepad", notepad) - http.HandleFunc("POST /notepad/autosave", autosave) - http.HandleFunc("GET /upload", uploadPage) - http.HandleFunc("POST /upload", uploadNote) - http.HandleFunc("GET /notes/{note}", readNoteContent) - http.HandleFunc("POST /api/login", apiLogin) - http.HandleFunc("GET /api/list-notes", gobReqRespMiddleware(listNotes)) - http.HandleFunc("POST /api/create-note", gobReqRespMiddleware(createNote)) - http.HandleFunc("GET /api/read-note", gobRespStreamMiddleware(readNote)) + http.HandleFunc("GET /wormhole", wormhole) + http.HandleFunc("POST /wormhole/{hole}", wormholeSend) + http.HandleFunc("GET /wormhole/{hole}", wormholeRecv) + http.HandleFunc("GET /wormhole/{hole}/ready", wormholeReady) http.HandleFunc("GET /static/", static) http.HandleFunc("GET /favicon.ico", favicon) http.HandleFunc("GET /{$}", index) diff --git a/static/htmx-ext-sse.js b/static/htmx-ext-sse.js new file mode 100644 index 0000000..6d087ec --- /dev/null +++ b/static/htmx-ext-sse.js @@ -0,0 +1,8 @@ +/** + * Minified by jsDelivr using Terser v5.37.0. + * Original file: /npm/htmx-ext-sse@2.2.2/sse.js + * + * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files + */ +!function(){var e;function t(e){return new EventSource(e,{withCredentials:!0})}function n(t){if(e.getAttributeValue(t,"sse-swap")){if(null==(u=e.getClosestMatch(t,i)))return null;for(var n=e.getInternalData(u).sseEventSource,r=e.getAttributeValue(t,"sse-swap").split(","),o=0;o0){const e=t.querySelectorAll("[sse-swap], [data-sse-swap], [hx-trigger], [data-hx-trigger]");for(let t=0;t=0)){return r}else{return null}}if(o&&(o==="*"||o.split(" ").indexOf(n)>=0)){return"unset"}}return r}function ne(t,n){let r=null;q(t,function(e){return!!(r=o(t,ce(e),n))});if(r!=="unset"){return r}}function h(e,t){return e instanceof Element&&e.matches(t)}function A(e){const t=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i;const n=t.exec(e);if(n){return n[1].toLowerCase()}else{return""}}function L(e){const t=new DOMParser;return t.parseFromString(e,"text/html")}function N(e,t){while(t.childNodes.length>0){e.append(t.childNodes[0])}}function r(e){const t=te().createElement("script");ie(e.attributes,function(e){t.setAttribute(e.name,e.value)});t.textContent=e.textContent;t.async=false;if(Q.config.inlineScriptNonce){t.nonce=Q.config.inlineScriptNonce}return t}function i(e){return e.matches("script")&&(e.type==="text/javascript"||e.type==="module"||e.type==="")}function I(e){Array.from(e.querySelectorAll("script")).forEach(e=>{if(i(e)){const t=r(e);const n=e.parentNode;try{n.insertBefore(t,e)}catch(e){R(e)}finally{e.remove()}}})}function P(e){const t=e.replace(/]*)?>[\s\S]*?<\/head>/i,"");const n=A(t);let r;if(n==="html"){r=new DocumentFragment;const i=L(e);N(r,i.body);r.title=i.title}else if(n==="body"){r=new DocumentFragment;const i=L(t);N(r,i.body);r.title=i.title}else{const i=L('");r=i.querySelector("template").content;r.title=i.title;var o=r.querySelector("title");if(o&&o.parentNode===r){o.remove();r.title=o.innerText}}if(r){if(Q.config.allowScriptTags){I(r)}else{r.querySelectorAll("script").forEach(e=>e.remove())}}return r}function re(e){if(e){e()}}function t(e,t){return Object.prototype.toString.call(e)==="[object "+t+"]"}function D(e){return typeof e==="function"}function k(e){return t(e,"Object")}function oe(e){const t="htmx-internal-data";let n=e[t];if(!n){n=e[t]={}}return n}function F(t){const n=[];if(t){for(let e=0;e=0}function se(e){return e.getRootNode({composed:true})===document}function X(e){return e.trim().split(/\s+/)}function le(e,t){for(const n in t){if(t.hasOwnProperty(n)){e[n]=t[n]}}return e}function v(e){try{return JSON.parse(e)}catch(e){R(e);return null}}function B(){const e="htmx:sessionStorageTest";try{sessionStorage.setItem(e,e);sessionStorage.removeItem(e);return true}catch(e){return false}}function U(e){const t=new URL(e,"http://x");if(t){e=t.pathname+t.search}if(e!="/"){e=e.replace(/\/+$/,"")}return e}function e(e){return On(te().body,function(){return eval(e)})}function V(t){const e=Q.on("htmx:load",function(e){t(e.detail.elt)});return e}function j(){Q.logger=function(e,t,n){if(console){console.log(t,e,n)}}}function $(){Q.logger=null}function f(e,t){if(typeof e!=="string"){return e.querySelector(t)}else{return f(te(),e)}}function x(e,t){if(typeof e!=="string"){return e.querySelectorAll(t)}else{return x(te(),e)}}function b(){return window}function _(e,t){e=w(e);if(t){b().setTimeout(function(){_(e);e=null},t)}else{u(e).removeChild(e)}}function ce(e){return e instanceof Element?e:null}function z(e){return e instanceof HTMLElement?e:null}function J(e){return typeof e==="string"?e:null}function p(e){return e instanceof Element||e instanceof Document||e instanceof DocumentFragment?e:null}function K(e,t,n){e=ce(w(e));if(!e){return}if(n){b().setTimeout(function(){K(e,t);e=null},n)}else{e.classList&&e.classList.add(t)}}function G(e,t,n){let r=ce(w(e));if(!r){return}if(n){b().setTimeout(function(){G(r,t);r=null},n)}else{if(r.classList){r.classList.remove(t);if(r.classList.length===0){r.removeAttribute("class")}}}}function W(e,t){e=w(e);e.classList.toggle(t)}function Z(e,t){e=w(e);ie(e.parentElement.children,function(e){G(e,t)});K(ce(e),t)}function g(e,t){e=ce(w(e));if(e){return e.closest(t)}return null}function l(e,t){return e.substring(0,t.length)===t}function Y(e,t){return e.substring(e.length-t.length)===t}function pe(e){const t=e.trim();if(l(t,"<")&&Y(t,"/>")){return t.substring(1,t.length-2)}else{return t}}function m(t,r,n){if(r.indexOf("global ")===0){return m(t,r.slice(7),true)}t=w(t);const o=[];{let t=0;let n=0;for(let e=0;e"){t--}}if(n0){const r=pe(o.shift());let e;if(r.indexOf("closest ")===0){e=g(ce(t),pe(r.slice(8)))}else if(r.indexOf("find ")===0){e=f(p(t),pe(r.slice(5)))}else if(r==="next"||r==="nextElementSibling"){e=ce(t).nextElementSibling}else if(r.indexOf("next ")===0){e=ge(t,pe(r.slice(5)),!!n)}else if(r==="previous"||r==="previousElementSibling"){e=ce(t).previousElementSibling}else if(r.indexOf("previous ")===0){e=me(t,pe(r.slice(9)),!!n)}else if(r==="document"){e=document}else if(r==="window"){e=window}else if(r==="body"){e=document.body}else if(r==="root"){e=y(t,!!n)}else if(r==="host"){e=t.getRootNode().host}else{s.push(r)}if(e){i.push(e)}}if(s.length>0){const e=s.join(",");const c=p(y(t,!!n));i.push(...F(c.querySelectorAll(e)))}return i}var ge=function(t,e,n){const r=p(y(t,n)).querySelectorAll(e);for(let e=0;e=0;e--){const o=r[e];if(o.compareDocumentPosition(t)===Node.DOCUMENT_POSITION_FOLLOWING){return o}}};function ue(e,t){if(typeof e!=="string"){return m(e,t)[0]}else{return m(te().body,e)[0]}}function w(e,t){if(typeof e==="string"){return f(p(t)||document,e)}else{return e}}function ye(e,t,n,r){if(D(t)){return{target:te().body,event:J(e),listener:t,options:n}}else{return{target:w(e),event:J(t),listener:n,options:r}}}function xe(t,n,r,o){Gn(function(){const e=ye(t,n,r,o);e.target.addEventListener(e.event,e.listener,e.options)});const e=D(n);return e?n:r}function be(t,n,r){Gn(function(){const e=ye(t,n,r);e.target.removeEventListener(e.event,e.listener)});return D(n)?n:r}const ve=te().createElement("output");function we(t,n){const e=ne(t,n);if(e){if(e==="this"){return[Se(t,n)]}else{const r=m(t,e);const o=/(^|,)(\s*)inherit(\s*)($|,)/.test(e);if(o){const i=ce(q(t,function(e){return e!==t&&s(ce(e),n)}));if(i){r.push(...we(i,n))}}if(r.length===0){R('The selector "'+e+'" on '+n+" returned no matches!");return[ve]}else{return r}}}}function Se(e,t){return ce(q(e,function(e){return a(ce(e),t)!=null}))}function Ee(e){const t=ne(e,"hx-target");if(t){if(t==="this"){return Se(e,"hx-target")}else{return ue(e,t)}}else{const n=oe(e);if(n.boosted){return te().body}else{return e}}}function Ce(e){return Q.config.attributesToSettle.includes(e)}function Oe(t,n){ie(Array.from(t.attributes),function(e){if(!n.hasAttribute(e.name)&&Ce(e.name)){t.removeAttribute(e.name)}});ie(n.attributes,function(e){if(Ce(e.name)){t.setAttribute(e.name,e.value)}})}function Re(t,e){const n=Jn(e);for(let e=0;e0){s=e.substring(0,e.indexOf(":"));n=e.substring(e.indexOf(":")+1)}else{s=e}o.removeAttribute("hx-swap-oob");o.removeAttribute("data-hx-swap-oob");const r=m(t,n,false);if(r.length){ie(r,function(e){let t;const n=o.cloneNode(true);t=te().createDocumentFragment();t.appendChild(n);if(!Re(s,e)){t=p(n)}const r={shouldSwap:true,target:e,fragment:t};if(!ae(e,"htmx:oobBeforeSwap",r))return;e=r.target;if(r.shouldSwap){qe(t);$e(s,e,e,t,i);Te()}ie(i.elts,function(e){ae(e,"htmx:oobAfterSwap",r)})});o.parentNode.removeChild(o)}else{o.parentNode.removeChild(o);fe(te().body,"htmx:oobErrorNoTarget",{content:o})}return e}function Te(){const e=f("#--htmx-preserve-pantry--");if(e){for(const t of[...e.children]){const n=f("#"+t.id);n.parentNode.moveBefore(t,n);n.remove()}e.remove()}}function qe(e){ie(x(e,"[hx-preserve], [data-hx-preserve]"),function(e){const t=a(e,"id");const n=te().getElementById(t);if(n!=null){if(e.moveBefore){let e=f("#--htmx-preserve-pantry--");if(e==null){te().body.insertAdjacentHTML("afterend","
");e=f("#--htmx-preserve-pantry--")}e.moveBefore(n,null)}else{e.parentNode.replaceChild(n,e)}}})}function Ae(l,e,c){ie(e.querySelectorAll("[id]"),function(t){const n=ee(t,"id");if(n&&n.length>0){const r=n.replace("'","\\'");const o=t.tagName.replace(":","\\:");const e=p(l);const i=e&&e.querySelector(o+"[id='"+r+"']");if(i&&i!==e){const s=t.cloneNode();Oe(t,i);c.tasks.push(function(){Oe(t,s)})}}})}function Le(e){return function(){G(e,Q.config.addedClass);Mt(ce(e));Ne(p(e));ae(e,"htmx:load")}}function Ne(e){const t="[autofocus]";const n=z(h(e,t)?e:e.querySelector(t));if(n!=null){n.focus()}}function c(e,t,n,r){Ae(e,n,r);while(n.childNodes.length>0){const o=n.firstChild;K(ce(o),Q.config.addedClass);e.insertBefore(o,t);if(o.nodeType!==Node.TEXT_NODE&&o.nodeType!==Node.COMMENT_NODE){r.tasks.push(Le(o))}}}function Ie(e,t){let n=0;while(n0}function ze(h,d,p,g){if(!g){g={}}let m=null;let n=null;let e=function(){re(g.beforeSwapCallback);h=w(h);const r=g.contextElement?y(g.contextElement,false):te();const e=document.activeElement;let t={};t={elt:e,start:e?e.selectionStart:null,end:e?e.selectionEnd:null};const o=Sn(h);if(p.swapStyle==="textContent"){h.textContent=d}else{let n=P(d);o.title=g.title||n.title;if(g.historyRequest){n=n.querySelector("[hx-history-elt],[data-hx-history-elt]")||n}if(g.selectOOB){const i=g.selectOOB.split(",");for(let t=0;t0){b().setTimeout(n,p.settleDelay)}else{n()}};let t=Q.config.globalViewTransitions;if(p.hasOwnProperty("transition")){t=p.transition}const r=g.contextElement||te();if(t&&ae(r,"htmx:beforeTransition",g.eventInfo)&&typeof Promise!=="undefined"&&document.startViewTransition){const o=new Promise(function(e,t){m=e;n=t});const i=e;e=function(){document.startViewTransition(function(){i();return o})}}try{if(p?.swapDelay&&p.swapDelay>0){b().setTimeout(e,p.swapDelay)}else{e()}}catch(e){fe(r,"htmx:swapError",g.eventInfo);re(n);throw e}}function Je(e,t,n){const r=e.getResponseHeader(t);if(r.indexOf("{")===0){const o=v(r);for(const i in o){if(o.hasOwnProperty(i)){let e=o[i];if(k(e)){n=e.target!==undefined?e.target:n}else{e={value:e}}ae(n,i,e)}}}else{const s=r.split(",");for(let e=0;e0){const s=o[0];if(s==="]"){e--;if(e===0){if(n===null){t=t+"true"}o.shift();t+=")})";try{const l=On(r,function(){return Function(t)()},function(){return true});l.source=t;return l}catch(e){fe(te().body,"htmx:syntax:error",{error:e,source:t});return null}}}else if(s==="["){e++}if(tt(s,n,i)){t+="(("+i+"."+s+") ? ("+i+"."+s+") : (window."+s+"))"}else{t=t+s}n=o.shift()}}}function O(e,t){let n="";while(e.length>0&&!t.test(e[0])){n+=e.shift()}return n}function rt(e){let t;if(e.length>0&&Ye.test(e[0])){e.shift();t=O(e,Qe).trim();e.shift()}else{t=O(e,E)}return t}const ot="input, textarea, select";function it(e,t,n){const r=[];const o=et(t);do{O(o,C);const l=o.length;const c=O(o,/[,\[\s]/);if(c!==""){if(c==="every"){const u={trigger:"every"};O(o,C);u.pollInterval=d(O(o,/[,\[\s]/));O(o,C);var i=nt(e,o,"event");if(i){u.eventFilter=i}r.push(u)}else{const f={trigger:c};var i=nt(e,o,"event");if(i){f.eventFilter=i}O(o,C);while(o.length>0&&o[0]!==","){const a=o.shift();if(a==="changed"){f.changed=true}else if(a==="once"){f.once=true}else if(a==="consume"){f.consume=true}else if(a==="delay"&&o[0]===":"){o.shift();f.delay=d(O(o,E))}else if(a==="from"&&o[0]===":"){o.shift();if(Ye.test(o[0])){var s=rt(o)}else{var s=O(o,E);if(s==="closest"||s==="find"||s==="next"||s==="previous"){o.shift();const h=rt(o);if(h.length>0){s+=" "+h}}}f.from=s}else if(a==="target"&&o[0]===":"){o.shift();f.target=rt(o)}else if(a==="throttle"&&o[0]===":"){o.shift();f.throttle=d(O(o,E))}else if(a==="queue"&&o[0]===":"){o.shift();f.queue=O(o,E)}else if(a==="root"&&o[0]===":"){o.shift();f[a]=rt(o)}else if(a==="threshold"&&o[0]===":"){o.shift();f[a]=O(o,E)}else{fe(e,"htmx:syntax:error",{token:o.shift()})}O(o,C)}r.push(f)}}if(o.length===l){fe(e,"htmx:syntax:error",{token:o.shift()})}O(o,C)}while(o[0]===","&&o.shift());if(n){n[t]=r}return r}function st(e){const t=a(e,"hx-trigger");let n=[];if(t){const r=Q.config.triggerSpecsCache;n=r&&r[t]||it(e,t,r)}if(n.length>0){return n}else if(h(e,"form")){return[{trigger:"submit"}]}else if(h(e,'input[type="button"], input[type="submit"]')){return[{trigger:"click"}]}else if(h(e,ot)){return[{trigger:"change"}]}else{return[{trigger:"click"}]}}function lt(e){oe(e).cancelled=true}function ct(e,t,n){const r=oe(e);r.timeout=b().setTimeout(function(){if(se(e)&&r.cancelled!==true){if(!pt(n,e,Bt("hx:poll:trigger",{triggerSpec:n,target:e}))){t(e)}ct(e,t,n)}},n.pollInterval)}function ut(e){return location.hostname===e.hostname&&ee(e,"href")&&ee(e,"href").indexOf("#")!==0}function ft(e){return g(e,Q.config.disableSelector)}function at(t,n,e){if(t instanceof HTMLAnchorElement&&ut(t)&&(t.target===""||t.target==="_self")||t.tagName==="FORM"&&String(ee(t,"method")).toLowerCase()!=="dialog"){n.boosted=true;let r,o;if(t.tagName==="A"){r="get";o=ee(t,"href")}else{const i=ee(t,"method");r=i?i.toLowerCase():"get";o=ee(t,"action");if(o==null||o===""){o=location.href}if(r==="get"&&o.includes("?")){o=o.replace(/\?[^#]+/,"")}}e.forEach(function(e){gt(t,function(e,t){const n=ce(e);if(ft(n)){S(n);return}he(r,o,n,t)},n,e,true)})}}function ht(e,t){if(e.type==="submit"&&t.tagName==="FORM"){return true}else if(e.type==="click"){const n=t.closest('input[type="submit"], button');if(n&&n.form&&n.type==="submit"){return true}const r=t.closest("a");const o=/^#.+/;if(r&&r.href&&!o.test(r.getAttribute("href"))){return true}}return false}function dt(e,t){return oe(e).boosted&&e instanceof HTMLAnchorElement&&t.type==="click"&&(t.ctrlKey||t.metaKey)}function pt(e,t,n){const r=e.eventFilter;if(r){try{return r.call(t,n)!==true}catch(e){const o=r.source;fe(te().body,"htmx:eventFilter:error",{error:e,source:o});return true}}return false}function gt(l,c,e,u,f){const a=oe(l);let t;if(u.from){t=m(l,u.from)}else{t=[l]}if(u.changed){if(!("lastValue"in a)){a.lastValue=new WeakMap}t.forEach(function(e){if(!a.lastValue.has(u)){a.lastValue.set(u,new WeakMap)}a.lastValue.get(u).set(e,e.value)})}ie(t,function(i){const s=function(e){if(!se(l)){i.removeEventListener(u.trigger,s);return}if(dt(l,e)){return}if(f||ht(e,i)){e.preventDefault()}if(pt(u,l,e)){return}const t=oe(e);t.triggerSpec=u;if(t.handledFor==null){t.handledFor=[]}if(t.handledFor.indexOf(l)<0){t.handledFor.push(l);if(u.consume){e.stopPropagation()}if(u.target&&e.target){if(!h(ce(e.target),u.target)){return}}if(u.once){if(a.triggeredOnce){return}else{a.triggeredOnce=true}}if(u.changed){const n=e.target;const r=n.value;const o=a.lastValue.get(u);if(o.has(n)&&o.get(n)===r){return}o.set(n,r)}if(a.delayed){clearTimeout(a.delayed)}if(a.throttle){return}if(u.throttle>0){if(!a.throttle){ae(l,"htmx:trigger");c(l,e);a.throttle=b().setTimeout(function(){a.throttle=null},u.throttle)}}else if(u.delay>0){a.delayed=b().setTimeout(function(){ae(l,"htmx:trigger");c(l,e)},u.delay)}else{ae(l,"htmx:trigger");c(l,e)}}};if(e.listenerInfos==null){e.listenerInfos=[]}e.listenerInfos.push({trigger:u.trigger,listener:s,on:i});i.addEventListener(u.trigger,s)})}let mt=false;let yt=null;function xt(){if(!yt){yt=function(){mt=true};window.addEventListener("scroll",yt);window.addEventListener("resize",yt);setInterval(function(){if(mt){mt=false;ie(te().querySelectorAll("[hx-trigger*='revealed'],[data-hx-trigger*='revealed']"),function(e){bt(e)})}},200)}}function bt(e){if(!s(e,"data-hx-revealed")&&M(e)){e.setAttribute("data-hx-revealed","true");const t=oe(e);if(t.initHash){ae(e,"revealed")}else{e.addEventListener("htmx:afterProcessNode",function(){ae(e,"revealed")},{once:true})}}}function vt(e,t,n,r){const o=function(){if(!n.loaded){n.loaded=true;ae(e,"htmx:trigger");t(e)}};if(r>0){b().setTimeout(o,r)}else{o()}}function wt(t,n,e){let i=false;ie(de,function(r){if(s(t,"hx-"+r)){const o=a(t,"hx-"+r);i=true;n.path=o;n.verb=r;e.forEach(function(e){St(t,e,n,function(e,t){const n=ce(e);if(ft(n)){S(n);return}he(r,o,n,t)})})}});return i}function St(r,e,t,n){if(e.trigger==="revealed"){xt();gt(r,n,t,e);bt(ce(r))}else if(e.trigger==="intersect"){const o={};if(e.root){o.root=ue(r,e.root)}if(e.threshold){o.threshold=parseFloat(e.threshold)}const i=new IntersectionObserver(function(t){for(let e=0;e0){t.polling=true;ct(ce(r),n,e)}else{gt(r,n,t,e)}}function Et(e){const t=ce(e);if(!t){return false}const n=t.attributes;for(let e=0;e", "+e).join(""));return o}else{return[]}}function Tt(e){const t=At(e.target);const n=Nt(e);if(n){n.lastButtonClicked=t}}function qt(e){const t=Nt(e);if(t){t.lastButtonClicked=null}}function At(e){return g(ce(e),"button, input[type='submit']")}function Lt(e){return e.form||g(e,"form")}function Nt(e){const t=At(e.target);if(!t){return}const n=Lt(t);if(!n){return}return oe(n)}function It(e){e.addEventListener("click",Tt);e.addEventListener("focusin",Tt);e.addEventListener("focusout",qt)}function Pt(t,e,n){const r=oe(t);if(!Array.isArray(r.onHandlers)){r.onHandlers=[]}let o;const i=function(e){On(t,function(){if(ft(t)){return}if(!o){o=new Function("event",n)}o.call(t,e)})};t.addEventListener(e,i);r.onHandlers.push({event:e,listener:i})}function Dt(t){De(t);for(let e=0;eQ.config.historyCacheSize){i.shift()}while(i.length>0){try{sessionStorage.setItem("htmx-history-cache",JSON.stringify(i));break}catch(e){fe(te().body,"htmx:historyCacheError",{cause:e,cache:i});i.shift()}}}function Jt(t){if(!B()){return null}t=U(t);const n=v(sessionStorage.getItem("htmx-history-cache"))||[];for(let e=0;e=200&&this.status<400){r.response=this.response;ae(te().body,"htmx:historyCacheMissLoad",r);ze(r.historyElt,r.response,n,{contextElement:r.historyElt,historyRequest:true});$t(r.path);ae(te().body,"htmx:historyRestore",{path:e,cacheMiss:true,serverResponse:r.response})}else{fe(te().body,"htmx:historyCacheMissLoadError",r)}};if(ae(te().body,"htmx:historyCacheMiss",r)){t.send()}}function en(e){Gt();e=e||location.pathname+location.search;const t=Jt(e);if(t){const n={swapStyle:"innerHTML",swapDelay:0,settleDelay:0,scroll:t.scroll};const r={path:e,item:t,historyElt:_t(),swapSpec:n};if(ae(te().body,"htmx:historyCacheHit",r)){ze(r.historyElt,t.content,n,{contextElement:r.historyElt,title:t.title});$t(r.path);ae(te().body,"htmx:historyRestore",r)}}else{if(Q.config.refreshOnHistoryMiss){Q.location.reload(true)}else{Qt(e)}}}function tn(e){let t=we(e,"hx-indicator");if(t==null){t=[e]}ie(t,function(e){const t=oe(e);t.requestCount=(t.requestCount||0)+1;e.classList.add.call(e.classList,Q.config.requestClass)});return t}function nn(e){let t=we(e,"hx-disabled-elt");if(t==null){t=[]}ie(t,function(e){const t=oe(e);t.requestCount=(t.requestCount||0)+1;e.setAttribute("disabled","");e.setAttribute("data-disabled-by-htmx","")});return t}function rn(e,t){ie(e.concat(t),function(e){const t=oe(e);t.requestCount=(t.requestCount||1)-1});ie(e,function(e){const t=oe(e);if(t.requestCount===0){e.classList.remove.call(e.classList,Q.config.requestClass)}});ie(t,function(e){const t=oe(e);if(t.requestCount===0){e.removeAttribute("disabled");e.removeAttribute("data-disabled-by-htmx")}})}function on(t,n){for(let e=0;en.indexOf(e)<0)}else{e=e.filter(e=>e!==n)}r.delete(t);ie(e,e=>r.append(t,e))}}function un(e){if(e instanceof HTMLSelectElement&&e.multiple){return F(e.querySelectorAll("option:checked")).map(function(e){return e.value})}if(e instanceof HTMLInputElement&&e.files){return F(e.files)}return e.value}function fn(t,n,r,e,o){if(e==null||on(t,e)){return}else{t.push(e)}if(sn(e)){const i=ee(e,"name");ln(i,un(e),n);if(o){an(e,r)}}if(e instanceof HTMLFormElement){ie(e.elements,function(e){if(t.indexOf(e)>=0){cn(e.name,un(e),n)}else{t.push(e)}if(o){an(e,r)}});new FormData(e).forEach(function(e,t){if(e instanceof File&&e.name===""){return}ln(t,e,n)})}}function an(e,t){const n=e;if(n.willValidate){ae(n,"htmx:validation:validate");if(!n.checkValidity()){if(ae(n,"htmx:validation:failed",{message:n.validationMessage,validity:n.validity})&&!t.length&&Q.config.reportValidityOfForms){n.reportValidity()}t.push({elt:n,message:n.validationMessage,validity:n.validity})}}}function hn(n,e){for(const t of e.keys()){n.delete(t)}e.forEach(function(e,t){n.append(t,e)});return n}function dn(e,t){const n=[];const r=new FormData;const o=new FormData;const i=[];const s=oe(e);if(s.lastButtonClicked&&!se(s.lastButtonClicked)){s.lastButtonClicked=null}let l=e instanceof HTMLFormElement&&e.noValidate!==true||a(e,"hx-validate")==="true";if(s.lastButtonClicked){l=l&&s.lastButtonClicked.formNoValidate!==true}if(t!=="get"){fn(n,o,i,Lt(e),l)}fn(n,r,i,e,l);if(s.lastButtonClicked||e.tagName==="BUTTON"||e.tagName==="INPUT"&&ee(e,"type")==="submit"){const u=s.lastButtonClicked||e;const f=ee(u,"name");ln(f,u.value,o)}const c=we(e,"hx-include");ie(c,function(e){fn(n,r,i,ce(e),l);if(!h(e,"form")){ie(p(e).querySelectorAll(ot),function(e){fn(n,r,i,e,l)})}});hn(r,o);return{errors:i,formData:r,values:kn(r)}}function pn(e,t,n){if(e!==""){e+="&"}if(String(n)==="[object Object]"){n=JSON.stringify(n)}const r=encodeURIComponent(n);e+=encodeURIComponent(t)+"="+r;return e}function gn(e){e=Pn(e);let n="";e.forEach(function(e,t){n=pn(n,t,e)});return n}function mn(e,t,n){const r={"HX-Request":"true","HX-Trigger":ee(e,"id"),"HX-Trigger-Name":ee(e,"name"),"HX-Target":a(t,"id"),"HX-Current-URL":location.href};Cn(e,"hx-headers",false,r);if(n!==undefined){r["HX-Prompt"]=n}if(oe(e).boosted){r["HX-Boosted"]="true"}return r}function yn(n,e){const t=ne(e,"hx-params");if(t){if(t==="none"){return new FormData}else if(t==="*"){return n}else if(t.indexOf("not ")===0){ie(t.slice(4).split(","),function(e){e=e.trim();n.delete(e)});return n}else{const r=new FormData;ie(t.split(","),function(t){t=t.trim();if(n.has(t)){n.getAll(t).forEach(function(e){r.append(t,e)})}});return r}}else{return n}}function xn(e){return!!ee(e,"href")&&ee(e,"href").indexOf("#")>=0}function bn(e,t){const n=t||ne(e,"hx-swap");const r={swapStyle:oe(e).boosted?"innerHTML":Q.config.defaultSwapStyle,swapDelay:Q.config.defaultSwapDelay,settleDelay:Q.config.defaultSettleDelay};if(Q.config.scrollIntoViewOnBoost&&oe(e).boosted&&!xn(e)){r.show="top"}if(n){const s=X(n);if(s.length>0){for(let e=0;e0?o.join(":"):null;r.scroll=u;r.scrollTarget=i}else if(l.indexOf("show:")===0){const f=l.slice(5);var o=f.split(":");const a=o.pop();var i=o.length>0?o.join(":"):null;r.show=a;r.showTarget=i}else if(l.indexOf("focus-scroll:")===0){const h=l.slice("focus-scroll:".length);r.focusScroll=h=="true"}else if(e==0){r.swapStyle=l}else{R("Unknown modifier in hx-swap: "+l)}}}}return r}function vn(e){return ne(e,"hx-encoding")==="multipart/form-data"||h(e,"form")&&ee(e,"enctype")==="multipart/form-data"}function wn(t,n,r){let o=null;Vt(n,function(e){if(o==null){o=e.encodeParameters(t,r,n)}});if(o!=null){return o}else{if(vn(n)){return hn(new FormData,Pn(r))}else{return gn(r)}}}function Sn(e){return{tasks:[],elts:[e]}}function En(e,t){const n=e[0];const r=e[e.length-1];if(t.scroll){var o=null;if(t.scrollTarget){o=ce(ue(n,t.scrollTarget))}if(t.scroll==="top"&&(n||o)){o=o||n;o.scrollTop=0}if(t.scroll==="bottom"&&(r||o)){o=o||r;o.scrollTop=o.scrollHeight}if(typeof t.scroll==="number"){b().setTimeout(function(){window.scrollTo(0,t.scroll)},0)}}if(t.show){var o=null;if(t.showTarget){let e=t.showTarget;if(t.showTarget==="window"){e="body"}o=ce(ue(n,e))}if(t.show==="top"&&(n||o)){o=o||n;o.scrollIntoView({block:"start",behavior:Q.config.scrollBehavior})}if(t.show==="bottom"&&(r||o)){o=o||r;o.scrollIntoView({block:"end",behavior:Q.config.scrollBehavior})}}}function Cn(r,e,o,i,s){if(i==null){i={}}if(r==null){return i}const l=a(r,e);if(l){let e=l.trim();let t=o;if(e==="unset"){return null}if(e.indexOf("javascript:")===0){e=e.slice(11);t=true}else if(e.indexOf("js:")===0){e=e.slice(3);t=true}if(e.indexOf("{")!==0){e="{"+e+"}"}let n;if(t){n=On(r,function(){if(s){return Function("event","return ("+e+")").call(r,s)}else{return Function("return ("+e+")").call(r)}},{})}else{n=v(e)}for(const c in n){if(n.hasOwnProperty(c)){if(i[c]==null){i[c]=n[c]}}}}return Cn(ce(u(r)),e,o,i,s)}function On(e,t,n){if(Q.config.allowEval){return t()}else{fe(e,"htmx:evalDisallowedError");return n}}function Rn(e,t,n){return Cn(e,"hx-vars",true,n,t)}function Hn(e,t,n){return Cn(e,"hx-vals",false,n,t)}function Tn(e,t){return le(Rn(e,t),Hn(e,t))}function qn(t,n,r){if(r!==null){try{t.setRequestHeader(n,r)}catch(e){t.setRequestHeader(n,encodeURIComponent(r));t.setRequestHeader(n+"-URI-AutoEncoded","true")}}}function An(t){if(t.responseURL){try{const e=new URL(t.responseURL);return e.pathname+e.search}catch(e){fe(te().body,"htmx:badResponseUrl",{url:t.responseURL})}}}function H(e,t){return t.test(e.getAllResponseHeaders())}function Ln(t,n,r){t=t.toLowerCase();if(r){if(r instanceof Element||typeof r==="string"){return he(t,n,null,null,{targetOverride:w(r)||ve,returnPromise:true})}else{let e=w(r.target);if(r.target&&!e||r.source&&!e&&!w(r.source)){e=ve}return he(t,n,w(r.source),r.event,{handler:r.handler,headers:r.headers,values:r.values,targetOverride:e,swapOverride:r.swap,select:r.select,returnPromise:true})}}else{return he(t,n,null,null,{returnPromise:true})}}function Nn(e){const t=[];while(e){t.push(e);e=e.parentElement}return t}function In(e,t,n){const r=new URL(t,location.protocol!=="about:"?location.href:window.origin);const o=location.protocol!=="about:"?location.origin:window.origin;const i=o===r.origin;if(Q.config.selfRequestsOnly){if(!i){return false}}return ae(e,"htmx:validateUrl",le({url:r,sameHost:i},n))}function Pn(e){if(e instanceof FormData)return e;const t=new FormData;for(const n in e){if(e.hasOwnProperty(n)){if(e[n]&&typeof e[n].forEach==="function"){e[n].forEach(function(e){t.append(n,e)})}else if(typeof e[n]==="object"&&!(e[n]instanceof Blob)){t.append(n,JSON.stringify(e[n]))}else{t.append(n,e[n])}}}return t}function Dn(r,o,e){return new Proxy(e,{get:function(t,e){if(typeof e==="number")return t[e];if(e==="length")return t.length;if(e==="push"){return function(e){t.push(e);r.append(o,e)}}if(typeof t[e]==="function"){return function(){t[e].apply(t,arguments);r.delete(o);t.forEach(function(e){r.append(o,e)})}}if(t[e]&&t[e].length===1){return t[e][0]}else{return t[e]}},set:function(e,t,n){e[t]=n;r.delete(o);e.forEach(function(e){r.append(o,e)});return true}})}function kn(o){return new Proxy(o,{get:function(e,t){if(typeof t==="symbol"){const r=Reflect.get(e,t);if(typeof r==="function"){return function(){return r.apply(o,arguments)}}else{return r}}if(t==="toJSON"){return()=>Object.fromEntries(o)}if(t in e){if(typeof e[t]==="function"){return function(){return o[t].apply(o,arguments)}}}const n=o.getAll(t);if(n.length===0){return undefined}else if(n.length===1){return n[0]}else{return Dn(e,t,n)}},set:function(t,n,e){if(typeof n!=="string"){return false}t.delete(n);if(e&&typeof e.forEach==="function"){e.forEach(function(e){t.append(n,e)})}else if(typeof e==="object"&&!(e instanceof Blob)){t.append(n,JSON.stringify(e))}else{t.append(n,e)}return true},deleteProperty:function(e,t){if(typeof t==="string"){e.delete(t)}return true},ownKeys:function(e){return Reflect.ownKeys(Object.fromEntries(e))},getOwnPropertyDescriptor:function(e,t){return Reflect.getOwnPropertyDescriptor(Object.fromEntries(e),t)}})}function he(t,n,r,o,i,k){let s=null;let l=null;i=i!=null?i:{};if(i.returnPromise&&typeof Promise!=="undefined"){var e=new Promise(function(e,t){s=e;l=t})}if(r==null){r=te().body}const F=i.handler||Vn;const M=i.select||null;if(!se(r)){re(s);return e}const c=i.targetOverride||ce(Ee(r));if(c==null||c==ve){fe(r,"htmx:targetError",{target:ne(r,"hx-target")});re(l);return e}let u=oe(r);const f=u.lastButtonClicked;if(f){const A=ee(f,"formaction");if(A!=null){n=A}const L=ee(f,"formmethod");if(L!=null){if(de.includes(L.toLowerCase())){t=L}else{re(s);return e}}}const a=ne(r,"hx-confirm");if(k===undefined){const K=function(e){return he(t,n,r,o,i,!!e)};const G={target:c,elt:r,path:n,verb:t,triggeringEvent:o,etc:i,issueRequest:K,question:a};if(ae(r,"htmx:confirm",G)===false){re(s);return e}}let h=r;let d=ne(r,"hx-sync");let p=null;let X=false;if(d){const N=d.split(":");const I=N[0].trim();if(I==="this"){h=Se(r,"hx-sync")}else{h=ce(ue(r,I))}d=(N[1]||"drop").trim();u=oe(h);if(d==="drop"&&u.xhr&&u.abortable!==true){re(s);return e}else if(d==="abort"){if(u.xhr){re(s);return e}else{X=true}}else if(d==="replace"){ae(h,"htmx:abort")}else if(d.indexOf("queue")===0){const W=d.split(" ");p=(W[1]||"last").trim()}}if(u.xhr){if(u.abortable){ae(h,"htmx:abort")}else{if(p==null){if(o){const P=oe(o);if(P&&P.triggerSpec&&P.triggerSpec.queue){p=P.triggerSpec.queue}}if(p==null){p="last"}}if(u.queuedRequests==null){u.queuedRequests=[]}if(p==="first"&&u.queuedRequests.length===0){u.queuedRequests.push(function(){he(t,n,r,o,i)})}else if(p==="all"){u.queuedRequests.push(function(){he(t,n,r,o,i)})}else if(p==="last"){u.queuedRequests=[];u.queuedRequests.push(function(){he(t,n,r,o,i)})}re(s);return e}}const g=new XMLHttpRequest;u.xhr=g;u.abortable=X;const m=function(){u.xhr=null;u.abortable=false;if(u.queuedRequests!=null&&u.queuedRequests.length>0){const e=u.queuedRequests.shift();e()}};const B=ne(r,"hx-prompt");if(B){var y=prompt(B);if(y===null||!ae(r,"htmx:prompt",{prompt:y,target:c})){re(s);m();return e}}if(a&&!k){if(!confirm(a)){re(s);m();return e}}let x=mn(r,c,y);if(t!=="get"&&!vn(r)){x["Content-Type"]="application/x-www-form-urlencoded"}if(i.headers){x=le(x,i.headers)}const U=dn(r,t);let b=U.errors;const V=U.formData;if(i.values){hn(V,Pn(i.values))}const j=Pn(Tn(r,o));const v=hn(V,j);let w=yn(v,r);if(Q.config.getCacheBusterParam&&t==="get"){w.set("org.htmx.cache-buster",ee(c,"id")||"true")}if(n==null||n===""){n=location.href}const S=Cn(r,"hx-request");const $=oe(r).boosted;let E=Q.config.methodsThatUseUrlParams.indexOf(t)>=0;const C={boosted:$,useUrlParams:E,formData:w,parameters:kn(w),unfilteredFormData:v,unfilteredParameters:kn(v),headers:x,elt:r,target:c,verb:t,errors:b,withCredentials:i.credentials||S.credentials||Q.config.withCredentials,timeout:i.timeout||S.timeout||Q.config.timeout,path:n,triggeringEvent:o};if(!ae(r,"htmx:configRequest",C)){re(s);m();return e}n=C.path;t=C.verb;x=C.headers;w=Pn(C.parameters);b=C.errors;E=C.useUrlParams;if(b&&b.length>0){ae(r,"htmx:validation:halted",C);re(s);m();return e}const _=n.split("#");const z=_[0];const O=_[1];let R=n;if(E){R=z;const Z=!w.keys().next().done;if(Z){if(R.indexOf("?")<0){R+="?"}else{R+="&"}R+=gn(w);if(O){R+="#"+O}}}if(!In(r,R,C)){fe(r,"htmx:invalidPath",C);re(l);m();return e}g.open(t.toUpperCase(),R,true);g.overrideMimeType("text/html");g.withCredentials=C.withCredentials;g.timeout=C.timeout;if(S.noHeaders){}else{for(const D in x){if(x.hasOwnProperty(D)){const Y=x[D];qn(g,D,Y)}}}const H={xhr:g,target:c,requestConfig:C,etc:i,boosted:$,select:M,pathInfo:{requestPath:n,finalRequestPath:R,responsePath:null,anchor:O}};g.onload=function(){try{const t=Nn(r);H.pathInfo.responsePath=An(g);F(r,H);if(H.keepIndicators!==true){rn(T,q)}ae(r,"htmx:afterRequest",H);ae(r,"htmx:afterOnLoad",H);if(!se(r)){let e=null;while(t.length>0&&e==null){const n=t.shift();if(se(n)){e=n}}if(e){ae(e,"htmx:afterRequest",H);ae(e,"htmx:afterOnLoad",H)}}re(s)}catch(e){fe(r,"htmx:onLoadError",le({error:e},H));throw e}finally{m()}};g.onerror=function(){rn(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:sendError",H);re(l);m()};g.onabort=function(){rn(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:sendAbort",H);re(l);m()};g.ontimeout=function(){rn(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:timeout",H);re(l);m()};if(!ae(r,"htmx:beforeRequest",H)){re(s);m();return e}var T=tn(r);var q=nn(r);ie(["loadstart","loadend","progress","abort"],function(t){ie([g,g.upload],function(e){e.addEventListener(t,function(e){ae(r,"htmx:xhr:"+t,{lengthComputable:e.lengthComputable,loaded:e.loaded,total:e.total})})})});ae(r,"htmx:beforeSend",H);const J=E?null:wn(g,r,w);g.send(J);return e}function Fn(e,t){const n=t.xhr;let r=null;let o=null;if(H(n,/HX-Push:/i)){r=n.getResponseHeader("HX-Push");o="push"}else if(H(n,/HX-Push-Url:/i)){r=n.getResponseHeader("HX-Push-Url");o="push"}else if(H(n,/HX-Replace-Url:/i)){r=n.getResponseHeader("HX-Replace-Url");o="replace"}if(r){if(r==="false"){return{}}else{return{type:o,path:r}}}const i=t.pathInfo.finalRequestPath;const s=t.pathInfo.responsePath;const l=ne(e,"hx-push-url");const c=ne(e,"hx-replace-url");const u=oe(e).boosted;let f=null;let a=null;if(l){f="push";a=l}else if(c){f="replace";a=c}else if(u){f="push";a=s||i}if(a){if(a==="false"){return{}}if(a==="true"){a=s||i}if(t.pathInfo.anchor&&a.indexOf("#")===-1){a=a+"#"+t.pathInfo.anchor}return{type:f,path:a}}else{return{}}}function Mn(e,t){var n=new RegExp(e.code);return n.test(t.toString(10))}function Xn(e){for(var t=0;t`+`.${t}{opacity:0;visibility: hidden} `+`.${n} .${t}, .${n}.${t}{opacity:1;visibility: visible;transition: opacity 200ms ease-in}`+"")}}function Zn(){const e=te().querySelector('meta[name="htmx-config"]');if(e){return v(e.content)}else{return null}}function Yn(){const e=Zn();if(e){Q.config=le(Q.config,e)}}Gn(function(){Yn();Wn();let e=te().body;Mt(e);const t=te().querySelectorAll("[hx-trigger='restored'],[data-hx-trigger='restored']");e.addEventListener("htmx:abort",function(e){const t=e.target;const n=oe(t);if(n&&n.xhr){n.xhr.abort()}});const n=window.onpopstate?window.onpopstate.bind(window):null;window.onpopstate=function(e){if(e.state&&e.state.htmx){en();ie(t,function(e){ae(e,"htmx:restored",{document:te(),triggerEvent:ae})})}else{if(n){n(e)}}};b().setTimeout(function(){ae(e,"htmx:load",{});e=null},0)});return Q}(); \ No newline at end of file diff --git a/templates/index.html.template b/templates/index.html.template index 3dcf4a7..750f559 100644 --- a/templates/index.html.template +++ b/templates/index.html.template @@ -9,5 +9,6 @@ A dragon loli +

Magic wormhole

Games? (Warning: loud)

diff --git a/templates/wormhole-send.html.template b/templates/wormhole-send.html.template new file mode 100644 index 0000000..5b06c5f --- /dev/null +++ b/templates/wormhole-send.html.template @@ -0,0 +1,14 @@ +{{define "head"}} + + + Wormhole +{{end}} + +
+ +
diff --git a/templates/wormhole.html.template b/templates/wormhole.html.template new file mode 100644 index 0000000..4d67a98 --- /dev/null +++ b/templates/wormhole.html.template @@ -0,0 +1,19 @@ +{{define "head"}} + + + Wormhole +{{end}} + +
+
+ + +
+
+ +

2. Visit this URL {{.Self}}/wormhole/{{.Hole}}

diff --git a/tools/finditers/finditers.go b/tools/finditers/finditers.go deleted file mode 100644 index 746242b..0000000 --- a/tools/finditers/finditers.go +++ /dev/null @@ -1,53 +0,0 @@ -package main - -import ( - "fmt" - "math/rand/v2" - "os" - "sort" - "testing" - "time" - - "gitlab.com/rhogenson/roseh.moe/internal/cryptoutil" -) - -var ( - iterations int - - salt = func() []byte { - r := rand.New(new(rand.PCG)) - salt := make([]byte, cryptoutil.SaltSize) - for i := range salt { - salt[i] = byte(r.IntN(256)) - } - return salt - }() -) - -func BenchmarkHashIter(b *testing.B) { - const password = "oboe shortness ether ideology undesired fresh freezable catching mashing glimpse" - for b.Loop() { - cryptoutil.HashIter(password, salt, iterations) - } -} - -func run() error { - const targetDuration = 2 * time.Second - - for iterations = 8192; time.Duration(testing.Benchmark(BenchmarkHashIter).NsPerOp()) < targetDuration; iterations *= 2 { - } - lo := iterations / 2 - hi := iterations - fmt.Println(lo + sort.Search(hi-lo, func(i int) bool { - iterations = lo + i - return time.Duration(testing.Benchmark(BenchmarkHashIter).NsPerOp()) > targetDuration - })) - return nil -} - -func main() { - if err := run(); err != nil { - fmt.Fprintln(os.Stderr, err) - os.Exit(1) - } -} diff --git a/tools/hashpw/hashpw.go b/tools/hashpw/hashpw.go deleted file mode 100644 index 7705b31..0000000 --- a/tools/hashpw/hashpw.go +++ /dev/null @@ -1,31 +0,0 @@ -package main - -import ( - "fmt" - "os" - - "gitlab.com/rhogenson/roseh.moe/internal/cryptoutil" - "golang.org/x/term" -) - -func run() error { - fmt.Print("Enter password:") - password, err := term.ReadPassword(int(os.Stdin.Fd())) - fmt.Println() - if err != nil { - return err - } - hashedPassword, err := cryptoutil.Hash(string(password)) - if err != nil { - return err - } - fmt.Printf("notepad-password=%s\n", hashedPassword) - return nil -} - -func main() { - if err := run(); err != nil { - fmt.Fprintln(os.Stderr, err) - os.Exit(1) - } -} diff --git a/tools/notes/notes.go b/tools/notes/notes.go deleted file mode 100644 index 7714a89..0000000 --- a/tools/notes/notes.go +++ /dev/null @@ -1,351 +0,0 @@ -package main - -import ( - "bytes" - "context" - "encoding/gob" - "errors" - "flag" - "fmt" - "io" - "net/http" - "os" - "path/filepath" - "time" - - "github.com/google/subcommands" - "gitlab.com/rhogenson/roseh.moe/internal/api" - "golang.org/x/term" -) - -var serverURL = flag.String("url", "https://roseh.moe", "server url") - -const tokenCache = "/dev/shm/roseh.moe-upload-token" - -var errUnavailable = errors.New("unavailable") - -func readGobResp[Response any](req *http.Request) (*Response, error) { - httpResp, err := http.DefaultClient.Do(req) - if err != nil { - return nil, fmt.Errorf("%w: read gob response: http: %s", errUnavailable, err) - } - defer httpResp.Body.Close() - if httpResp.StatusCode != http.StatusOK { - body, _ := io.ReadAll(httpResp.Body) - return nil, fmt.Errorf("read gob response: error status: %s\n%s", httpResp.Status, body) - } - apiResp := new(api.Response) - if err := gob.NewDecoder(httpResp.Body).Decode(apiResp); err != nil { - return nil, fmt.Errorf("read gob response: decode response: %s", err) - } - if apiResp.Status != api.Ok { - return nil, fmt.Errorf("read gob response: api error: %s: %s", apiResp.Status, apiResp.Err) - } - resp, ok := apiResp.Ok.(*Response) - if !ok { - return nil, fmt.Errorf("read gob response: invalid response") - } - return resp, nil -} - -func login(ctx context.Context) (*api.LoginResponse, error) { - fmt.Fprint(os.Stderr, "Enter password:") - password, err := term.ReadPassword(int(os.Stdin.Fd())) - fmt.Fprintln(os.Stderr) - if err != nil { - return nil, err - } - req, err := http.NewRequestWithContext(ctx, "POST", *serverURL+"/api/login", nil) - if err != nil { - return nil, err - } - req.Header.Set("Roseh-Password", string(password)) - return readGobResp[api.LoginResponse](req) -} - -func loadToken(ctx context.Context) (string, error) { - token, err := os.ReadFile(tokenCache) - if err != nil { - if errors.Is(err, os.ErrNotExist) { - token, err := login(ctx) - if err != nil { - return "", err - } - os.WriteFile(tokenCache, []byte(token.Token), 0600) - return token.Token, nil - } - return "", err - } - return string(token), nil -} - -func gobReq(ctx context.Context, method, url string, req any) (*http.Request, error) { - buf := new(bytes.Buffer) - if err := gob.NewEncoder(buf).Encode(req); err != nil { - return nil, err - } - httpReq, err := http.NewRequestWithContext(ctx, method, url, buf) - if err != nil { - return nil, err - } - token, err := loadToken(ctx) - if err != nil { - return nil, err - } - httpReq.Header.Set("Roseh-Token", token) - return httpReq, nil -} - -func gobReqResp[Response any](ctx context.Context, method, url string, req any) (*Response, error) { - httpReq, err := gobReq(ctx, method, url, req) - if err != nil { - return nil, err - } - return readGobResp[Response](httpReq) -} - -func listNotes(ctx context.Context, req *api.ListNotesRequest) (*api.ListNotesResponse, error) { - return gobReqResp[api.ListNotesResponse](ctx, "GET", *serverURL+"/api/list-notes", req) -} - -func createNote(ctx context.Context, req *api.CreateNoteRequest) (*api.CreateNoteResponse, error) { - return gobReqResp[api.CreateNoteResponse](ctx, "POST", *serverURL+"/api/create-note", req) -} - -func readNote(ctx context.Context, req *api.ReadNoteRequest) (*gob.Decoder, func() error, error) { - httpReq, err := gobReq(ctx, "GET", *serverURL+"/api/read-note", req) - if err != nil { - return nil, nil, err - } - resp, err := http.DefaultClient.Do(httpReq) - if err != nil { - return nil, nil, err - } - if resp.StatusCode != http.StatusOK { - body, _ := io.ReadAll(resp.Body) - resp.Body.Close() - return nil, nil, fmt.Errorf("error status: %s\n%s", resp.Status, body) - } - return gob.NewDecoder(resp.Body), resp.Body.Close, nil -} - -type loginCommand struct{} - -func (*loginCommand) Name() string { - return "login" -} - -func (*loginCommand) Synopsis() string { - return "/api/login" -} - -func (*loginCommand) Usage() string { - return "makes a request to /api/login for debugging" -} - -func (*loginCommand) SetFlags(*flag.FlagSet) {} - -func (*loginCommand) login(ctx context.Context) error { - token, err := login(ctx) - if err != nil { - return err - } - return os.WriteFile(tokenCache, []byte(token.Token), 0600) -} - -func (c *loginCommand) Execute(ctx context.Context, _ *flag.FlagSet, _ ...any) subcommands.ExitStatus { - if err := c.login(ctx); err != nil { - fmt.Fprintln(os.Stderr, err) - return subcommands.ExitFailure - } - return subcommands.ExitSuccess -} - -type listCommand struct{} - -func (*listCommand) Name() string { - return "list" -} - -func (*listCommand) Synopsis() string { - return "list notes" -} - -func (*listCommand) Usage() string { - return "list all the notes" -} - -func (*listCommand) SetFlags(*flag.FlagSet) {} - -func (*listCommand) list(ctx context.Context) error { - resp, err := listNotes(ctx, &api.ListNotesRequest{}) - if err != nil { - return err - } - for _, note := range resp.Notes { - fmt.Println(note) - } - return nil -} - -func (c *listCommand) Execute(ctx context.Context, _ *flag.FlagSet, _ ...any) subcommands.ExitStatus { - if err := c.list(ctx); err != nil { - fmt.Fprintln(os.Stderr, err) - return subcommands.ExitFailure - } - return subcommands.ExitSuccess -} - -type newCommand struct{} - -func (*newCommand) Name() string { - return "new" -} - -func (*newCommand) Synopsis() string { - return "create note" -} - -func (*newCommand) Usage() string { - return "upload a new note" -} - -func (*newCommand) SetFlags(*flag.FlagSet) {} - -type createNoteRequestStreamWriter struct { - ctx context.Context - fileName string - continuationToken []byte -} - -func (w *createNoteRequestStreamWriter) Write(buf []byte) (int, error) { - var ( - resp *api.CreateNoteResponse - err error - ) - delay := time.Second - for i := 0; i < 3; i++ { - resp, err = createNote(w.ctx, &api.CreateNoteRequest{ - ContinuationToken: w.continuationToken, - FileName: w.fileName, - Chunk: buf, - More: true, - }) - if !errors.Is(err, errUnavailable) { - break - } - fmt.Fprintf(os.Stderr, "Warning: %s (retrying)\n", err) - select { - case <-time.After(delay): - case <-w.ctx.Done(): - return 0, w.ctx.Err() - } - delay *= 2 - } - if err != nil { - return 0, err - } - w.fileName = "" - w.continuationToken = resp.ContinuationToken - return len(buf), nil -} - -func (*newCommand) new(ctx context.Context, fileName string) error { - f, err := os.Open(fileName) - if err != nil { - return err - } - defer f.Close() - streamWriter := &createNoteRequestStreamWriter{ctx: ctx, fileName: filepath.Base(fileName)} - if _, err := io.Copy(streamWriter, f); err != nil { - return err - } - resp, err := createNote(ctx, &api.CreateNoteRequest{ContinuationToken: streamWriter.continuationToken}) - if err != nil { - return err - } - fmt.Println(resp.Name) - return nil -} - -func (c *newCommand) Execute(ctx context.Context, fs *flag.FlagSet, _ ...any) subcommands.ExitStatus { - args := fs.Args() - if len(args) != 1 { - fmt.Fprintln(os.Stderr, "usage error") - return subcommands.ExitUsageError - } - if err := c.new(ctx, args[0]); err != nil { - fmt.Fprintln(os.Stderr, err) - return subcommands.ExitFailure - } - return subcommands.ExitSuccess -} - -type readCommand struct{} - -func (*readCommand) Name() string { - return "read" -} - -func (*readCommand) Synopsis() string { - return "read a note" -} - -func (*readCommand) Usage() string { - return "read a note by name" -} - -func (*readCommand) SetFlags(*flag.FlagSet) {} - -func (*readCommand) read(ctx context.Context, key string) error { - decoder, close, err := readNote(ctx, &api.ReadNoteRequest{Note: key}) - if err != nil { - return err - } - defer close() - for { - apiResp := new(api.Response) - if err := decoder.Decode(apiResp); err != nil { - if errors.Is(err, io.EOF) { - break - } - return err - } - if apiResp.Status != api.Ok { - return fmt.Errorf("%s: %s", apiResp.Status, apiResp.Err) - } - resp, ok := apiResp.Ok.(*api.ReadNoteResponseStream) - if !ok { - return fmt.Errorf("invalid response") - } - fmt.Printf("%s", resp.Chunk) - } - return nil -} - -func (c *readCommand) Execute(ctx context.Context, fs *flag.FlagSet, _ ...any) subcommands.ExitStatus { - args := fs.Args() - if len(args) != 1 { - fmt.Fprintln(os.Stderr, "usage error") - return subcommands.ExitUsageError - } - if err := c.read(ctx, args[0]); err != nil { - fmt.Fprintln(os.Stderr, err) - return subcommands.ExitFailure - } - return subcommands.ExitSuccess -} - -func main() { - subcommands.ImportantFlag("url") - subcommands.Register(subcommands.HelpCommand(), "") - subcommands.Register(subcommands.FlagsCommand(), "") - subcommands.Register(subcommands.CommandsCommand(), "") - subcommands.Register(&loginCommand{}, "") - subcommands.Register(&listCommand{}, "") - subcommands.Register(&newCommand{}, "") - subcommands.Register(&readCommand{}, "") - - flag.Parse() - os.Exit(int(subcommands.Execute(context.Background()))) -} -- cgit v1.3.1