From 04225c44aa2a441a1e45506dbe2ac5463cfdc9a7 Mon Sep 17 00:00:00 2001
From: Silas <me@silentsilas.com>
Date: Mon, 29 Nov 2021 20:51:17 -0500
Subject: [PATCH] implement encryption of secret text

---
 assets/js/pages/JustPage.tsx | 58 +++++++++++++++++++++++++++++++++++-
 assets/tsconfig.json         |  3 +-
 2 files changed, 59 insertions(+), 2 deletions(-)

diff --git a/assets/js/pages/JustPage.tsx b/assets/js/pages/JustPage.tsx
index 6364a9d..4fd5c75 100644
--- a/assets/js/pages/JustPage.tsx
+++ b/assets/js/pages/JustPage.tsx
@@ -1,11 +1,13 @@
 import React, { useState } from "react";
 
 import { ProgressIndicator, Header2, Button, IconArrow, Label, FileInput, TextArea, CenteredContainer, Spacer, TextAlignWrapper, GlobalStyle } from '@intended/intended-ui';
+import HexMix from "../utils/hexmix";
 
 const JustPage = () => {
   const [secretInput, setSecretInput] = useState("");
   const [fileInput, setFileInput] = useState<File | null>(null);
   const [fileName, setFileName] = useState("");
+  const [encryptedSecret, setEncryptedSecret] = useState("");
 
   const handleChange = (e: React.ChangeEvent<HTMLTextAreaElement>) => {
     setSecretInput(e.target.value);
@@ -17,6 +19,59 @@ const JustPage = () => {
     setFileName(file.name);
   };
 
+  const postContents = async () => {
+    if (!window.crypto.subtle) {
+      alert('Browser does not support SubtleCrypto');
+      return;
+    }
+
+    const key = await window.crypto.subtle.generateKey(
+      {
+        name: 'AES-GCM',
+        length: 256
+      },
+      true,
+      ['encrypt', 'decrypt']
+    );
+    const encoded = HexMix.stringToArrayBuffer(secretInput);
+    const iv = window.crypto.getRandomValues(new Uint8Array(16));
+    const exported = await window.crypto.subtle.exportKey('raw', key);
+    const encrypted = await window.crypto.subtle.encrypt(
+      {
+        name: 'AES-GCM',
+        iv
+      },
+      key,
+      encoded
+    );
+
+    // encrypted will be sent to lumen backend
+    HexMix.arrayBufferToString(encrypted, (result: string) => {
+      setEncryptedSecret(result);
+    });
+
+    const keyHex = HexMix.uint8ToHex(new Uint8Array(exported));
+    const ivHex = HexMix.uint8ToHex(iv);
+
+    const formData = new FormData();
+    const blobData = new Blob([encrypted]);
+
+    formData.append('blob', blobData);
+    formData.append('filetype', 'text/plain');
+    formData.append('filename', 'secret.txt');
+
+    try {
+      await fetch(`${window.location.origin}/just`, { 
+        body: formData,
+        method: "POST"
+      });
+      const url = `${window.location.origin}/just/for#${keyHex}.${ivHex}`;
+      window.location.href = url
+    } catch (err: any) {
+      alert(err.message);
+    }
+  };
+
   return (
     <React.StrictMode>
       <GlobalStyle />
@@ -39,12 +94,13 @@ const JustPage = () => {
           </TextAlignWrapper>
           <Spacer space="1.6rem" />
           <FileInput id="fileInput" value={fileName} handleFile={handleFile} />
+          { encryptedSecret ? "" : encryptedSecret }
           { fileInput ? "" : ""}
           <Spacer space="4rem" />
           <div
             style={{ display: "flex", justifyContent: "flex-end", width: "100%" }}
           >
-            <Button variant="secondary" onClick={() => window.location.href = "/just/for"}>
+            <Button variant="secondary" onClick={postContents}>
               <IconArrow arrowDirection="right" />
             </Button>
           </div>
diff --git a/assets/tsconfig.json b/assets/tsconfig.json
index f41642a..55f0b15 100644
--- a/assets/tsconfig.json
+++ b/assets/tsconfig.json
@@ -10,7 +10,8 @@
     "esModuleInterop": true,
     "forceConsistentCasingInFileNames": true,
     "noUnusedLocals": true,
-    "noUnusedParameters": true
+    "noUnusedParameters": true,
+    "lib": ["es2015", "dom"]
   },
   "exclude": [
     "/node_modules/**/*",