explewd/wisp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5 Commits 1 Branch 0 Tags
266f9708e32eb0a1cf833c174c53427269410c98
Commit Graph
5 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
explewdandClaude Sonnet 5 266f9708e3 Implement scoped upload invites
Docker / build-and-push (push) Successful in 3m9s
Details 
Adds a second, narrower credential type alongside UPLOAD_PASSWORD: an
admin (ADMIN_PASSWORD-gated, /admin) can mint time-boxed, use-limited,
independently revocable invite links (?invite=<token>) that skip the
password screen for one-off sharing without handing out the master
password. Invite consumption is an atomic check-and-increment to avoid
a race on single-use invites; admin surface 503s (not boot failure)
when ADMIN_PASSWORD is unset.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-12 19:29:46 +02:00
explewdandClaude Sonnet 5 0b62776282 Add proposal: scoped upload invites (bypass the shared password) 
Design doc for a second, narrower credential type alongside
UPLOAD_PASSWORD — time-boxed, use-limited, revocable invite links that
skip the password gate entirely. Self-contained for a fresh agent to
implement: covers the data model, the atomic single-use consumption
race, why invite tokens belong in a query param (not the URL fragment,
unlike the download decryption key), and points at npm-statuspage's
just-built admin-panel pattern as the template for the admin gate.

Not implemented — design stage.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-12 19:00:16 +02:00
explewd 121dbe81f1 Add a hash-based password bypass link
Docker / build-and-push (push) Successful in 3m8s
Details 
The upload password gate can now be skipped with a bookmarkable
#psst=<sha256-hash> fragment instead of typing the password each time.
The server accepts either the plaintext password (X-Upload-Password) or
its SHA-256 hash (X-Upload-Password-Hash), compared timing-safely. The
client computes the hash locally after a normal password entry, so the
bypass link never contains the real password — only a one-way digest of
it, kept out of the URL query string (and thus server logs) by living in
the fragment, same as the decryption key.
 2026-07-09 19:48:56 +02:00
explewd 22619ebd11 Implement wisp: async encrypted single-retrieval file drop
Docker / build-and-push (push) Successful in 3m33s
Details 
Client-side libsodium encryption with the key in the URL fragment, an
Express/SQLite server holding ciphertext until a confirm-token round trip
proves successful decrypt (avoiding the delete-on-first-byte race), TTL
sweep for unclaimed drops, and a password-gated upload UI styled to match
flit. Dockerized to match the project family's conventions, with a named
volume so the DB/blobs survive redeploys, and a Gitea Actions workflow to
build and push the image.
 2026-07-09 19:14:54 +02:00
Fredrik JohanssonandClaude Sonnet 5 8fd73155bd Initial design: async single-retrieval encrypted file drop 
README covers the pitch and how this differs from flit (synchronous,
zero server storage) and zipline (persistent hosting). IMPLEMENTATION
covers the crypto scheme (key-in-fragment, same primitives as
flit/waste-go), storage shape, and the deletion-race problem —
delete-on-first-byte-served is the wrong default (see Firefox Send's
history with this exact bug); confirm-then-delete with a TTL backstop
is the fix.

No code yet — design stage.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-09 17:58:17 +02:00