+
+
+{/if}
diff --git a/src/lib/components/Modal.svelte b/src/lib/components/Modal.svelte
new file mode 100644
index 0000000..5da23b2
--- /dev/null
+++ b/src/lib/components/Modal.svelte
@@ -0,0 +1,38 @@
+
+
+{#if isOpen}
+
+
+
+
+
+
+ e.stopPropagation()}
+ class="flex max-h-[70vh] min-h-[30vh] rounded-t-2xl bg-white px-4"
+ transition:fly={{ y: 100, duration: 200 }}
+ >
+ {@render children?.()}
+
+
+
+
+
+{/if}
diff --git a/src/lib/components/TopBar.svelte b/src/lib/components/TopBar.svelte
new file mode 100644
index 0000000..6691feb
--- /dev/null
+++ b/src/lib/components/TopBar.svelte
@@ -0,0 +1,31 @@
+
+
+
+
+ e.stopPropagation()} class="rounded-2xl bg-white p-4">
+ {@render children?.()}
+
+
+
+ {#if title}
+
diff --git a/src/lib/components/buttons/Button.svelte b/src/lib/components/buttons/Button.svelte
new file mode 100644
index 0000000..692d4a1
--- /dev/null
+++ b/src/lib/components/buttons/Button.svelte
@@ -0,0 +1,37 @@
+
+
+
diff --git a/src/lib/components/buttons/EntryButton.svelte b/src/lib/components/buttons/EntryButton.svelte
new file mode 100644
index 0000000..ed455aa
--- /dev/null
+++ b/src/lib/components/buttons/EntryButton.svelte
@@ -0,0 +1,30 @@
+
+
+
diff --git a/src/lib/components/buttons/FloatingButton.svelte b/src/lib/components/buttons/FloatingButton.svelte
new file mode 100644
index 0000000..51870c7
--- /dev/null
+++ b/src/lib/components/buttons/FloatingButton.svelte
@@ -0,0 +1,36 @@
+
+
+{title}
+ {/if} +
+ {#if children}
+ {@render children?.()}
+ {/if}
+
+
+
diff --git a/src/lib/components/buttons/TextButton.svelte b/src/lib/components/buttons/TextButton.svelte
new file mode 100644
index 0000000..c7688a5
--- /dev/null
+++ b/src/lib/components/buttons/TextButton.svelte
@@ -0,0 +1,23 @@
+
+
+
diff --git a/src/lib/components/buttons/index.ts b/src/lib/components/buttons/index.ts
new file mode 100644
index 0000000..1765400
--- /dev/null
+++ b/src/lib/components/buttons/index.ts
@@ -0,0 +1,4 @@
+export { default as Button } from "./Button.svelte";
+export { default as EntryButton } from "./EntryButton.svelte";
+export { default as FloatingButton } from "./FloatingButton.svelte";
+export { default as TextButton } from "./TextButton.svelte";
diff --git a/src/lib/components/divs/AdaptiveDiv.svelte b/src/lib/components/divs/AdaptiveDiv.svelte
new file mode 100644
index 0000000..ee845cc
--- /dev/null
+++ b/src/lib/components/divs/AdaptiveDiv.svelte
@@ -0,0 +1,7 @@
+
+
+
+
+
+
+
+
+
+
+
+
+ {@render children?.()}
+
diff --git a/src/lib/components/divs/BottomDiv.svelte b/src/lib/components/divs/BottomDiv.svelte
new file mode 100644
index 0000000..8a10a99
--- /dev/null
+++ b/src/lib/components/divs/BottomDiv.svelte
@@ -0,0 +1,7 @@
+
+
+
+ {@render children?.()}
+
diff --git a/src/lib/components/divs/TitleDiv.svelte b/src/lib/components/divs/TitleDiv.svelte
new file mode 100644
index 0000000..e622e6e
--- /dev/null
+++ b/src/lib/components/divs/TitleDiv.svelte
@@ -0,0 +1,20 @@
+
+
+
+
diff --git a/src/lib/components/divs/index.ts b/src/lib/components/divs/index.ts
new file mode 100644
index 0000000..7bd6a34
--- /dev/null
+++ b/src/lib/components/divs/index.ts
@@ -0,0 +1,3 @@
+export { default as AdaptiveDiv } from "./AdaptiveDiv.svelte";
+export { default as BottomDiv } from "./BottomDiv.svelte";
+export { default as TitleDiv } from "./TitleDiv.svelte";
diff --git a/src/lib/components/index.ts b/src/lib/components/index.ts
new file mode 100644
index 0000000..536f01f
--- /dev/null
+++ b/src/lib/components/index.ts
@@ -0,0 +1,3 @@
+export { default as BottomSheet } from "./BottomSheet.svelte";
+export { default as Modal } from "./Modal.svelte";
+export { default as TopBar } from "./TopBar.svelte";
diff --git a/src/lib/components/inputs/TextInput.svelte b/src/lib/components/inputs/TextInput.svelte
new file mode 100644
index 0000000..61f42ad
--- /dev/null
+++ b/src/lib/components/inputs/TextInput.svelte
@@ -0,0 +1,35 @@
+
+
+
+ {#if Icon}
+
+ {@render children?.()}
+
+
+
+
+
+
+
diff --git a/src/lib/components/inputs/index.ts b/src/lib/components/inputs/index.ts
new file mode 100644
index 0000000..c2c534d
--- /dev/null
+++ b/src/lib/components/inputs/index.ts
@@ -0,0 +1 @@
+export { default as TextInput } from "./TextInput.svelte";
diff --git a/src/lib/hooks/callApi.ts b/src/lib/hooks/callApi.ts
new file mode 100644
index 0000000..c08b97d
--- /dev/null
+++ b/src/lib/hooks/callApi.ts
@@ -0,0 +1,35 @@
+export const refreshToken = async (fetchInternal = fetch) => {
+ return await fetchInternal("/api/auth/refreshToken", { method: "POST" });
+};
+
+const callApi = async (input: RequestInfo, init?: RequestInit, fetchInternal = fetch) => {
+ let res = await fetchInternal(input, init);
+ if (res.status === 401) {
+ res = await refreshToken();
+ if (!res.ok) {
+ return res;
+ }
+ res = await fetchInternal(input, init);
+ }
+ return res;
+};
+
+export const callGetApi = async (input: RequestInfo, fetchInternal?: typeof fetch) => {
+ return await callApi(input, undefined, fetchInternal);
+};
+
+export const callPostApi = async
+ {@render children()}
+
+
+
+ 환영합니다!
+서비스를 이용하려면 로그인을 해야해요.
+
+
+
+
+ 승인을 기다리고 있어요.
++ 회원님의 다른 디바이스에서 이 디바이스의 데이터 접근을 승인해야 서비스를 이용할 수 있어요. +
+
+
+
+
+ 암호 키 지문
++ {#if !fingerprint} + 지문 생성하는 중... + {:else} + {#await fingerprint} + 지문 생성하는 중... + {:then fingerprint} + {fingerprint} + {/await} + {/if} +
+
+ 암호 키 지문은 디바이스마다 다르게 생성돼요.
+ 지문이 일치하는지 확인 후 승인해 주세요.
+
+
diff --git a/src/routes/(fullscreen)/file/[id]/+page.ts b/src/routes/(fullscreen)/file/[id]/+page.ts
new file mode 100644
index 0000000..45c696e
--- /dev/null
+++ b/src/routes/(fullscreen)/file/[id]/+page.ts
@@ -0,0 +1,17 @@
+import { error } from "@sveltejs/kit";
+import { z } from "zod";
+import type { PageLoad } from "./$types";
+
+export const ssr = false; // Because of heic2any
+
+export const load: PageLoad = async ({ params }) => {
+ const zodRes = z
+ .object({
+ id: z.coerce.number().int().positive(),
+ })
+ .safeParse(params);
+ if (!zodRes.success) error(404, "Not found");
+ const { id } = zodRes.data;
+
+ return { id };
+};
diff --git a/src/routes/(fullscreen)/file/[id]/service.ts b/src/routes/(fullscreen)/file/[id]/service.ts
new file mode 100644
index 0000000..fc97c3e
--- /dev/null
+++ b/src/routes/(fullscreen)/file/[id]/service.ts
@@ -0,0 +1,31 @@
+import { decryptData } from "$lib/modules/crypto";
+
+export const requestFileDownload = (
+ fileId: number,
+ fileEncryptedIv: string,
+ dataKey: CryptoKey,
+) => {
+ return new Promise
+ {#snippet viewerLoading(message: string)}
+ 
+ {:else}
+ {@render viewerLoading("이미지를 불러오고 있어요.")}
+ {/if}
+ {:else if contentType === "video"}
+ {#if contentUrl}
+
+
+ {:else}
+ {@render viewerLoading("비디오를 불러오고 있어요.")}
+ {/if}
+ {/if}
+
+
+
+ {/snippet}
+
+ {#if $info && contentType === "image"}
+ {#if contentUrl}
+ {message}
+
+
+암호 키를 파일로 내보낼까요?
+
+
+ + 모든 디바이스의 암호 키가 유실되면, 서버에 저장된 데이터를 영원히 복호화할 수 없게 돼요. +
+만약의 상황을 위해 암호 키를 파일로 내보낼 수 있어요.
+
+
+
+
+
+
+ 암호 키 파일을 저장하셨나요?
++ 암호 키 파일은 유출 방지를 위해 이 화면에서만 저장할 수 있어요. 파일이 잘 저장되었는지 다시 + 한 번 확인해 주세요. +
+
+
+
+
+
+
+
+
+ 내보내지 않고 계속할까요?
+암호 키 파일은 유출 방지를 위해 이 화면에서만 저장할 수 있어요.
+
+
+
+
+
+
+ 암호 키 생성하기
+회원님의 디바이스 간의 안전한 데이터 동기화를 위해 암호 키를 생성해야 해요.
+
+
+
+
+ 왜 암호 키가 필요한가요?
+
+ {#each orders as { title, description }, i}
+
+
+
diff --git a/src/routes/(fullscreen)/key/generate/service.ts b/src/routes/(fullscreen)/key/generate/service.ts
new file mode 100644
index 0000000..b63da21
--- /dev/null
+++ b/src/routes/(fullscreen)/key/generate/service.ts
@@ -0,0 +1,36 @@
+import {
+ generateEncryptionKeyPair,
+ generateSigningKeyPair,
+ exportRSAKeyToBase64,
+ makeRSAKeyNonextractable,
+ generateMasterKey,
+ wrapMasterKey,
+} from "$lib/modules/crypto";
+import { clientKeyStore } from "$lib/stores";
+
+export const generateClientKeys = async () => {
+ const { encryptKey, decryptKey } = await generateEncryptionKeyPair();
+ const { signKey, verifyKey } = await generateSigningKeyPair();
+
+ clientKeyStore.set({
+ encryptKey,
+ decryptKey: await makeRSAKeyNonextractable(decryptKey),
+ signKey: await makeRSAKeyNonextractable(signKey),
+ verifyKey,
+ });
+
+ return {
+ encryptKey,
+ encryptKeyBase64: await exportRSAKeyToBase64(encryptKey),
+ decryptKeyBase64: await exportRSAKeyToBase64(decryptKey),
+ signKeyBase64: await exportRSAKeyToBase64(signKey),
+ verifyKeyBase64: await exportRSAKeyToBase64(verifyKey),
+ };
+};
+
+export const generateInitialMasterKey = async (encryptKey: CryptoKey) => {
+ const { masterKey } = await generateMasterKey();
+ return {
+ masterKeyWrapped: await wrapMasterKey(masterKey, encryptKey),
+ };
+};
diff --git a/src/routes/(main)/+layout.svelte b/src/routes/(main)/+layout.svelte
new file mode 100644
index 0000000..09cbb3c
--- /dev/null
+++ b/src/routes/(main)/+layout.svelte
@@ -0,0 +1,15 @@
+
+
+
+
+ + {order} +
+ {#if !isLast} + + {/if} +
+
++ {title} +
++ {#if description} + {description} + {/if} +
+
+
diff --git a/src/routes/(main)/BottomBar.svelte b/src/routes/(main)/BottomBar.svelte
new file mode 100644
index 0000000..db42bd2
--- /dev/null
+++ b/src/routes/(main)/BottomBar.svelte
@@ -0,0 +1,38 @@
+
+
+
+
+ {@render children()}
+
+
+
+
+
+
diff --git a/src/routes/(main)/category/+page.svelte b/src/routes/(main)/category/+page.svelte
new file mode 100644
index 0000000..73d68b7
--- /dev/null
+++ b/src/routes/(main)/category/+page.svelte
@@ -0,0 +1,3 @@
+
+ {#each pages as { path, label, icon: Icon }}
+ {@const textColor = !page.url.pathname.startsWith(path) ? "text-gray-600" : ""}
+
+ {/each}
+
+
+
diff --git a/src/routes/(main)/directory/[[id]]/+page.svelte b/src/routes/(main)/directory/[[id]]/+page.svelte
new file mode 100644
index 0000000..f7fc3d4
--- /dev/null
+++ b/src/routes/(main)/directory/[[id]]/+page.svelte
@@ -0,0 +1,132 @@
+
+
+아직 개발 중이에요.
+
+ {#if data.id !== "root"}
+
+
+
+ {#key $info}
+ goto(`/${type}/${id}`)}
+ onEntryMenuClick={(entry) => {
+ selectedEntry = entry;
+ isDirectoryEntryMenuBottomSheetOpen = true;
+ }}
+ />
+ {/key}
+
+ {/if}
+
+
+
+
+
+
+
+
+ 폴더 만들기
+
+
+ 파일 업로드
+새 폴더
+
+
+
+
+
+
+
+
+ {/if}
+
+
+ + {#if type === "directory"} + '{nameShort}' 폴더를 삭제할까요? + {:else} + '{nameShort}' 파일을 삭제할까요? + {/if} +
+
+ {#if type === "directory"}
+ 삭제한 폴더는 복구할 수 없어요.
+ 폴더 안의 모든 파일과 폴더도 함께 삭제돼요.
+ {:else}
+ 삭제한 파일은 복구할 수 없어요.
+ {/if}
+
+
+
+
+
+ {#each subDirectoryInfos as subDirectory}
+
+{:else}
+
+
+{/if}
diff --git a/src/routes/(main)/directory/[[id]]/DirectoryEntries/File.svelte b/src/routes/(main)/directory/[[id]]/DirectoryEntries/File.svelte
new file mode 100644
index 0000000..c9ef1d8
--- /dev/null
+++ b/src/routes/(main)/directory/[[id]]/DirectoryEntries/File.svelte
@@ -0,0 +1,63 @@
+
+
+{#if $info}
+
+
+
+{/if}
+
+
diff --git a/src/routes/(main)/directory/[[id]]/DirectoryEntries/SubDirectory.svelte b/src/routes/(main)/directory/[[id]]/DirectoryEntries/SubDirectory.svelte
new file mode 100644
index 0000000..3ff6d9a
--- /dev/null
+++ b/src/routes/(main)/directory/[[id]]/DirectoryEntries/SubDirectory.svelte
@@ -0,0 +1,65 @@
+
+
+{#if $info}
+
+
+
+{/if}
+
+
diff --git a/src/routes/(main)/directory/[[id]]/DirectoryEntries/index.ts b/src/routes/(main)/directory/[[id]]/DirectoryEntries/index.ts
new file mode 100644
index 0000000..72ab278
--- /dev/null
+++ b/src/routes/(main)/directory/[[id]]/DirectoryEntries/index.ts
@@ -0,0 +1,2 @@
+export { default } from "./DirectoryEntries.svelte";
+export * from "./service";
diff --git a/src/routes/(main)/directory/[[id]]/DirectoryEntries/service.ts b/src/routes/(main)/directory/[[id]]/DirectoryEntries/service.ts
new file mode 100644
index 0000000..2ad5941
--- /dev/null
+++ b/src/routes/(main)/directory/[[id]]/DirectoryEntries/service.ts
@@ -0,0 +1,30 @@
+import { get, type Writable } from "svelte/store";
+import type { DirectoryInfo, FileInfo } from "$lib/stores";
+
+export enum SortBy {
+ NAME_ASC,
+ NAME_DESC,
+}
+
+type SortFunc = (a: DirectoryInfo | FileInfo | null, b: DirectoryInfo | FileInfo | null) => number;
+
+const sortByNameAsc: SortFunc = (a, b) => {
+ if (a && b) return a.name!.localeCompare(b.name!);
+ return 0;
+};
+
+const sortByNameDesc: SortFunc = (a, b) => -sortByNameAsc(a, b);
+
+export const sortEntries = 폴더가 비어 있어요.
+
+ {#if selectedEntry}
+ {@const { type, name } = selectedEntry}
+
+
+
+
+
+
+
+
+ {/if}
+
+ {#if type === "directory"}
+
+ + {name} +
+
+
+ 이름 바꾸기
+
+
+ 삭제하기
+이름 바꾸기
+
+
+
+
+
+
+
+
diff --git a/src/routes/(main)/home/+page.svelte b/src/routes/(main)/home/+page.svelte
new file mode 100644
index 0000000..73d68b7
--- /dev/null
+++ b/src/routes/(main)/home/+page.svelte
@@ -0,0 +1,3 @@
+아직 개발 중이에요.
+
+
diff --git a/src/routes/(main)/menu/+page.svelte b/src/routes/(main)/menu/+page.svelte
new file mode 100644
index 0000000..73d68b7
--- /dev/null
+++ b/src/routes/(main)/menu/+page.svelte
@@ -0,0 +1,3 @@
+아직 개발 중이에요.
+
+
diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte
index 3fa208a..d682821 100644
--- a/src/routes/+layout.svelte
+++ b/src/routes/+layout.svelte
@@ -1,6 +1,27 @@
{@render children()}
diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
deleted file mode 100644
index cc88df0..0000000
--- a/src/routes/+page.svelte
+++ /dev/null
@@ -1,2 +0,0 @@
-아직 개발 중이에요.
+Welcome to SvelteKit
-Visit svelte.dev/docs/kit to read the documentation
diff --git a/src/routes/+server.ts b/src/routes/+server.ts new file mode 100644 index 0000000..e02bb98 --- /dev/null +++ b/src/routes/+server.ts @@ -0,0 +1,6 @@ +import { redirect } from "@sveltejs/kit"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = () => { + redirect(302, "/home"); +}; diff --git a/src/routes/api/auth/login/+server.ts b/src/routes/api/auth/login/+server.ts new file mode 100644 index 0000000..479f561 --- /dev/null +++ b/src/routes/api/auth/login/+server.ts @@ -0,0 +1,25 @@ +import { error, text } from "@sveltejs/kit"; +import env from "$lib/server/loadenv"; +import { loginRequest } from "$lib/server/schemas"; +import { login } from "$lib/server/services/auth"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies }) => { + const zodRes = loginRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { email, password } = zodRes.data; + + const { accessToken, refreshToken } = await login(email, password); + cookies.set("accessToken", accessToken, { + path: "/", + maxAge: env.jwt.accessExp / 1000, + sameSite: "strict", + }); + cookies.set("refreshToken", refreshToken, { + path: "/api/auth", + maxAge: env.jwt.refreshExp / 1000, + sameSite: "strict", + }); + + return text("Logged in", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/auth/logout/+server.ts b/src/routes/api/auth/logout/+server.ts new file mode 100644 index 0000000..f9f0ea6 --- /dev/null +++ b/src/routes/api/auth/logout/+server.ts @@ -0,0 +1,14 @@ +import { error, text } from "@sveltejs/kit"; +import { logout } from "$lib/server/services/auth"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ cookies }) => { + const token = cookies.get("refreshToken"); + if (!token) error(401, "Refresh token not found"); + + await logout(token); + cookies.delete("accessToken", { path: "/" }); + cookies.delete("refreshToken", { path: "/api/auth" }); + + return text("Logged out", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/auth/refreshToken/+server.ts b/src/routes/api/auth/refreshToken/+server.ts new file mode 100644 index 0000000..374fd8c --- /dev/null +++ b/src/routes/api/auth/refreshToken/+server.ts @@ -0,0 +1,23 @@ +import { error, text } from "@sveltejs/kit"; +import env from "$lib/server/loadenv"; +import { refreshToken as doRefreshToken } from "$lib/server/services/auth"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ cookies }) => { + const token = cookies.get("refreshToken"); + if (!token) error(401, "Refresh token not found"); + + const { accessToken, refreshToken } = await doRefreshToken(token); + cookies.set("accessToken", accessToken, { + path: "/", + maxAge: env.jwt.accessExp / 1000, + sameSite: "strict", + }); + cookies.set("refreshToken", refreshToken, { + path: "/api/auth", + maxAge: env.jwt.refreshExp / 1000, + sameSite: "strict", + }); + + return text("Token refreshed", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/auth/upgradeToken/+server.ts b/src/routes/api/auth/upgradeToken/+server.ts new file mode 100644 index 0000000..cb09582 --- /dev/null +++ b/src/routes/api/auth/upgradeToken/+server.ts @@ -0,0 +1,25 @@ +import { error, json } from "@sveltejs/kit"; +import { + tokenUpgradeRequest, + tokenUpgradeResponse, + type TokenUpgradeResponse, +} from "$lib/server/schemas"; +import { createTokenUpgradeChallenge } from "$lib/server/services/auth"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, getClientAddress }) => { + const token = cookies.get("refreshToken"); + if (!token) error(401, "Refresh token not found"); + + const zodRes = tokenUpgradeRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { encPubKey, sigPubKey } = zodRes.data; + + const { challenge } = await createTokenUpgradeChallenge( + token, + getClientAddress(), + encPubKey, + sigPubKey, + ); + return json(tokenUpgradeResponse.parse({ challenge } satisfies TokenUpgradeResponse)); +}; diff --git a/src/routes/api/auth/upgradeToken/verify/+server.ts b/src/routes/api/auth/upgradeToken/verify/+server.ts new file mode 100644 index 0000000..eb78286 --- /dev/null +++ b/src/routes/api/auth/upgradeToken/verify/+server.ts @@ -0,0 +1,33 @@ +import { error, text } from "@sveltejs/kit"; +import env from "$lib/server/loadenv"; +import { tokenUpgradeVerifyRequest } from "$lib/server/schemas"; +import { upgradeToken } from "$lib/server/services/auth"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, getClientAddress }) => { + const token = cookies.get("refreshToken"); + if (!token) error(401, "Refresh token not found"); + + const zodRes = tokenUpgradeVerifyRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { answer, answerSig } = zodRes.data; + + const { accessToken, refreshToken } = await upgradeToken( + token, + getClientAddress(), + answer, + answerSig, + ); + cookies.set("accessToken", accessToken, { + path: "/", + maxAge: env.jwt.accessExp / 1000, + sameSite: "strict", + }); + cookies.set("refreshToken", refreshToken, { + path: "/api/auth", + maxAge: env.jwt.refreshExp / 1000, + sameSite: "strict", + }); + + return text("Token upgraded", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/client/list/+server.ts b/src/routes/api/client/list/+server.ts new file mode 100644 index 0000000..5354ece --- /dev/null +++ b/src/routes/api/client/list/+server.ts @@ -0,0 +1,15 @@ +import { error, json } from "@sveltejs/kit"; +import { authenticate } from "$lib/server/modules/auth"; +import { clientListResponse, type ClientListResponse } from "$lib/server/schemas"; +import { getUserClientList } from "$lib/server/services/client"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies }) => { + const { userId, clientId } = authenticate(cookies); + if (!clientId) { + error(403, "Forbidden"); + } + + const { userClients } = await getUserClientList(userId); + return json(clientListResponse.parse({ clients: userClients } satisfies ClientListResponse)); +}; diff --git a/src/routes/api/client/register/+server.ts b/src/routes/api/client/register/+server.ts new file mode 100644 index 0000000..0a6e5a0 --- /dev/null +++ b/src/routes/api/client/register/+server.ts @@ -0,0 +1,23 @@ +import { error, json } from "@sveltejs/kit"; +import { authenticate } from "$lib/server/modules/auth"; +import { + clientRegisterRequest, + clientRegisterResponse, + type ClientRegisterResponse, +} from "$lib/server/schemas"; +import { registerUserClient } from "$lib/server/services/client"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, getClientAddress }) => { + const { userId, clientId } = authenticate(cookies); + if (clientId) { + error(403, "Forbidden"); + } + + const zodRes = clientRegisterRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { encPubKey, sigPubKey } = zodRes.data; + + const { challenge } = await registerUserClient(userId, getClientAddress(), encPubKey, sigPubKey); + return json(clientRegisterResponse.parse({ challenge } satisfies ClientRegisterResponse)); +}; diff --git a/src/routes/api/client/register/verify/+server.ts b/src/routes/api/client/register/verify/+server.ts new file mode 100644 index 0000000..e48b454 --- /dev/null +++ b/src/routes/api/client/register/verify/+server.ts @@ -0,0 +1,19 @@ +import { error, text } from "@sveltejs/kit"; +import { authenticate } from "$lib/server/modules/auth"; +import { clientRegisterVerifyRequest } from "$lib/server/schemas"; +import { verifyUserClient } from "$lib/server/services/client"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, getClientAddress }) => { + const { userId, clientId } = authenticate(cookies); + if (clientId) { + error(403, "Forbidden"); + } + + const zodRes = clientRegisterVerifyRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { answer, answerSig } = zodRes.data; + + await verifyUserClient(userId, getClientAddress(), answer, answerSig); + return text("Client verified", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/client/status/+server.ts b/src/routes/api/client/status/+server.ts new file mode 100644 index 0000000..a1e9cd8 --- /dev/null +++ b/src/routes/api/client/status/+server.ts @@ -0,0 +1,21 @@ +import { error, json } from "@sveltejs/kit"; +import { authenticate } from "$lib/server/modules/auth"; +import { clientStatusResponse, type ClientStatusResponse } from "$lib/server/schemas"; +import { getUserClientStatus } from "$lib/server/services/client"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies }) => { + const { userId, clientId } = authenticate(cookies); + if (!clientId) { + error(403, "Forbidden"); + } + + const { state, isInitialMekNeeded } = await getUserClientStatus(userId, clientId); + return json( + clientStatusResponse.parse({ + id: clientId, + state, + isInitialMekNeeded, + } satisfies ClientStatusResponse), + ); +}; diff --git a/src/routes/api/directory/[id]/+server.ts b/src/routes/api/directory/[id]/+server.ts new file mode 100644 index 0000000..7cd1d09 --- /dev/null +++ b/src/routes/api/directory/[id]/+server.ts @@ -0,0 +1,34 @@ +import { error, json } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { directoryInfoResponse, type DirectoryInfoResponse } from "$lib/server/schemas"; +import { getDirectoryInformation } from "$lib/server/services/directory"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = z + .object({ + id: z.union([z.enum(["root"]), z.coerce.number().int().positive()]), + }) + .safeParse(params); + if (!zodRes.success) error(400, "Invalid path parameters"); + const { id } = zodRes.data; + + const { metadata, directories, files } = await getDirectoryInformation(userId, id); + return json( + directoryInfoResponse.parse({ + metadata: metadata && { + createdAt: metadata.createdAt.toISOString(), + mekVersion: metadata.mekVersion, + dek: metadata.encDek, + dekVersion: metadata.dekVersion.toISOString(), + name: metadata.encName.ciphertext, + nameIv: metadata.encName.iv, + }, + subDirectories: directories, + files, + } satisfies DirectoryInfoResponse), + ); +}; diff --git a/src/routes/api/directory/[id]/delete/+server.ts b/src/routes/api/directory/[id]/delete/+server.ts new file mode 100644 index 0000000..c7777df --- /dev/null +++ b/src/routes/api/directory/[id]/delete/+server.ts @@ -0,0 +1,20 @@ +import { error, text } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { deleteDirectory } from "$lib/server/services/directory"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!zodRes.success) error(400, "Invalid path parameters"); + const { id } = zodRes.data; + + await deleteDirectory(userId, id); + return text("Directory deleted", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/directory/[id]/rename/+server.ts b/src/routes/api/directory/[id]/rename/+server.ts new file mode 100644 index 0000000..c951a9c --- /dev/null +++ b/src/routes/api/directory/[id]/rename/+server.ts @@ -0,0 +1,25 @@ +import { error, text } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { directoryRenameRequest } from "$lib/server/schemas"; +import { renameDirectory } from "$lib/server/services/directory"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const paramsZodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!paramsZodRes.success) error(400, "Invalid path parameters"); + const { id } = paramsZodRes.data; + + const bodyZodRes = directoryRenameRequest.safeParse(await request.json()); + if (!bodyZodRes.success) error(400, "Invalid request body"); + const { dekVersion, name, nameIv } = bodyZodRes.data; + + await renameDirectory(userId, id, new Date(dekVersion), name, nameIv); + return text("Directory renamed", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/directory/create/+server.ts b/src/routes/api/directory/create/+server.ts new file mode 100644 index 0000000..b31d15f --- /dev/null +++ b/src/routes/api/directory/create/+server.ts @@ -0,0 +1,24 @@ +import { error, text } from "@sveltejs/kit"; +import { authorize } from "$lib/server/modules/auth"; +import { directoryCreateRequest } from "$lib/server/schemas"; +import { createDirectory } from "$lib/server/services/directory"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = directoryCreateRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { parentId, mekVersion, dek, dekVersion, name, nameIv } = zodRes.data; + + await createDirectory({ + userId, + parentId, + mekVersion, + encDek: dek, + dekVersion: new Date(dekVersion), + encName: name, + encNameIv: nameIv, + }); + return text("Directory created", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/file/[id]/+server.ts b/src/routes/api/file/[id]/+server.ts new file mode 100644 index 0000000..ceb8a0f --- /dev/null +++ b/src/routes/api/file/[id]/+server.ts @@ -0,0 +1,33 @@ +import { error, json } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { fileInfoResponse, type FileInfoResponse } from "$lib/server/schemas"; +import { getFileInformation } from "$lib/server/services/file"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!zodRes.success) error(400, "Invalid path parameters"); + const { id } = zodRes.data; + + const { createdAt, mekVersion, encDek, dekVersion, contentType, encContentIv, encName } = + await getFileInformation(userId, id); + return json( + fileInfoResponse.parse({ + createdAt: createdAt.toISOString(), + mekVersion, + dek: encDek, + dekVersion: dekVersion.toISOString(), + contentType: contentType, + contentIv: encContentIv, + name: encName.ciphertext, + nameIv: encName.iv, + } satisfies FileInfoResponse), + ); +}; diff --git a/src/routes/api/file/[id]/delete/+server.ts b/src/routes/api/file/[id]/delete/+server.ts new file mode 100644 index 0000000..4cbf733 --- /dev/null +++ b/src/routes/api/file/[id]/delete/+server.ts @@ -0,0 +1,20 @@ +import { error, text } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { deleteFile } from "$lib/server/services/file"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!zodRes.success) error(400, "Invalid path parameters"); + const { id } = zodRes.data; + + await deleteFile(userId, id); + return text("File deleted", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/file/[id]/download/+server.ts b/src/routes/api/file/[id]/download/+server.ts new file mode 100644 index 0000000..42b832f --- /dev/null +++ b/src/routes/api/file/[id]/download/+server.ts @@ -0,0 +1,25 @@ +import { error } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { getFileStream } from "$lib/server/services/file"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const zodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!zodRes.success) error(400, "Invalid path parameters"); + const { id } = zodRes.data; + + const { encContentStream, encContentSize } = await getFileStream(userId, id); + return new Response(encContentStream, { + headers: { + "Content-Type": "application/octet-stream", + "Content-Length": encContentSize.toString(), + }, + }); +}; diff --git a/src/routes/api/file/[id]/rename/+server.ts b/src/routes/api/file/[id]/rename/+server.ts new file mode 100644 index 0000000..46fd4b3 --- /dev/null +++ b/src/routes/api/file/[id]/rename/+server.ts @@ -0,0 +1,25 @@ +import { error, text } from "@sveltejs/kit"; +import { z } from "zod"; +import { authorize } from "$lib/server/modules/auth"; +import { fileRenameRequest } from "$lib/server/schemas"; +import { renameFile } from "$lib/server/services/file"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies, params }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const paramsZodRes = z + .object({ + id: z.coerce.number().int().positive(), + }) + .safeParse(params); + if (!paramsZodRes.success) error(400, "Invalid path parameters"); + const { id } = paramsZodRes.data; + + const bodyZodRes = fileRenameRequest.safeParse(await request.json()); + if (!bodyZodRes.success) error(400, "Invalid request body"); + const { dekVersion, name, nameIv } = bodyZodRes.data; + + await renameFile(userId, id, new Date(dekVersion), name, nameIv); + return text("File renamed", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/file/upload/+server.ts b/src/routes/api/file/upload/+server.ts new file mode 100644 index 0000000..2de4c9a --- /dev/null +++ b/src/routes/api/file/upload/+server.ts @@ -0,0 +1,37 @@ +import { error, text } from "@sveltejs/kit"; +import { authorize } from "$lib/server/modules/auth"; +import { fileUploadRequest } from "$lib/server/schemas"; +import { uploadFile } from "$lib/server/services/file"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies }) => { + const { userId } = await authorize(cookies, "activeClient"); + + const form = await request.formData(); + const metadata = form.get("metadata"); + const content = form.get("content"); + if (typeof metadata !== "string" || !(content instanceof File)) { + error(400, "Invalid request body"); + } + + const zodRes = fileUploadRequest.safeParse(JSON.parse(metadata)); + if (!zodRes.success) error(400, "Invalid request body"); + const { parentId, mekVersion, dek, dekVersion, contentType, contentIv, name, nameIv } = + zodRes.data; + + await uploadFile( + { + userId, + parentId, + mekVersion, + encDek: dek, + dekVersion: new Date(dekVersion), + contentType, + encContentIv: contentIv, + encName: name, + encNameIv: nameIv, + }, + content.stream(), + ); + return text("File uploaded", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/src/routes/api/mek/list/+server.ts b/src/routes/api/mek/list/+server.ts new file mode 100644 index 0000000..ccb9fa3 --- /dev/null +++ b/src/routes/api/mek/list/+server.ts @@ -0,0 +1,20 @@ +import { json } from "@sveltejs/kit"; +import { authorize } from "$lib/server/modules/auth"; +import { masterKeyListResponse, type MasterKeyListResponse } from "$lib/server/schemas"; +import { getClientMekList } from "$lib/server/services/mek"; +import type { RequestHandler } from "./$types"; + +export const GET: RequestHandler = async ({ cookies }) => { + const { userId, clientId } = await authorize(cookies, "activeClient"); + const { encMeks } = await getClientMekList(userId, clientId); + return json( + masterKeyListResponse.parse({ + meks: encMeks.map(({ version, state, encMek, encMekSig }) => ({ + version, + state, + mek: encMek, + mekSig: encMekSig, + })), + } satisfies MasterKeyListResponse), + ); +}; diff --git a/src/routes/api/mek/register/initial/+server.ts b/src/routes/api/mek/register/initial/+server.ts new file mode 100644 index 0000000..ba959fb --- /dev/null +++ b/src/routes/api/mek/register/initial/+server.ts @@ -0,0 +1,19 @@ +import { error, text } from "@sveltejs/kit"; +import { authenticate } from "$lib/server/modules/auth"; +import { initialMasterKeyRegisterRequest } from "$lib/server/schemas"; +import { registerInitialActiveMek } from "$lib/server/services/mek"; +import type { RequestHandler } from "./$types"; + +export const POST: RequestHandler = async ({ request, cookies }) => { + const { userId, clientId } = authenticate(cookies); + if (!clientId) { + error(403, "Forbidden"); + } + + const zodRes = initialMasterKeyRegisterRequest.safeParse(await request.json()); + if (!zodRes.success) error(400, "Invalid request body"); + const { mek, mekSig } = zodRes.data; + + await registerInitialActiveMek(userId, clientId, mek, mekSig); + return text("MEK registered", { headers: { "Content-Type": "text/plain" } }); +}; diff --git a/tailwind.config.ts b/tailwind.config.ts index 9d75afa..e8c5803 100644 --- a/tailwind.config.ts +++ b/tailwind.config.ts @@ -4,7 +4,53 @@ export default { content: ["./src/**/*.{html,js,svelte,ts}"], theme: { - extend: {}, + extend: { + colors: { + primary: { + "000": "#FFF5F5", + 100: "#FFE3E3", + 200: "#FFC9C9", + 300: "#FFA8A8", + 400: "#FF8787", + 500: "#FF6B6B", + 600: "#FA5252", + 700: "#F03E3E", + 800: "#E03131", + 900: "#C92A2A", + }, + gray: { + "000": "#F8F9FA", + 100: "#F1F3F5", + 200: "#E9ECEF", + 300: "#DEE2E6", + 400: "#CED4DA", + 500: "#ADB5BD", + 600: "#868E96", + 700: "#495057", + 800: "#343A40", + 900: "#212529", + }, + }, + fontFamily: { + sans: [ + '"Pretendard Variable"', + "Pretendard", + "-apple-system", + "BlinkMacSystemFont", + "system-ui", + "Roboto", + '"Helvetica Neue"', + '"Segoe UI"', + '"Apple SD Gothic Neo"', + '"Noto Sans KR"', + '"Malgun Gothic"', + '"Apple Color Emoji"', + '"Segoe UI Emoji"', + '"Segoe UI Symbol"', + "sans-serif", + ], + }, + }, }, plugins: [], diff --git a/tsconfig.json b/tsconfig.json index f4d0a0e..33a6652 100644 --- a/tsconfig.json +++ b/tsconfig.json @@ -9,6 +9,7 @@ "skipLibCheck": true, "sourceMap": true, "strict": true, + "noUncheckedIndexedAccess": true, "moduleResolution": "bundler" } // Path aliases are handled by https://svelte.dev/docs/kit/configuration#alias diff --git a/vite.config.ts b/vite.config.ts index 80864b9..1e576b9 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -1,6 +1,12 @@ import { sveltekit } from "@sveltejs/kit/vite"; +import Icons from "unplugin-icons/vite"; import { defineConfig } from "vite"; export default defineConfig({ - plugins: [sveltekit()], + plugins: [ + sveltekit(), + Icons({ + compiler: "svelte", + }), + ], });