Compare commits

..

No commits in common. "e4fae236233f4e65196573a2033eb1a7ea292f2f" and "d349fb832829f83e5407a850cfa54fa4fac4542a" have entirely different histories.

22 changed files with 298 additions and 582 deletions

View File

@ -23,76 +23,22 @@ export default {
data: function(){ data: function(){
return { return {
// loggedIn: // loggedIn:
fetchingInProgress: false, //Prevent start getting token while fetch is in progress
blockUntilNextRequest: false //If token was just renewed, don't fetch more until next request
} }
}, },
//Axios response interceptor
// - Gets new session tokens from server and uses them in app
beforeCreate: function(){ beforeCreate: function(){
//Before all requests going out
axios.interceptors.request.use(
(config) => {
//Enable token fetching after another request is made
if(this.blockUntilNextRequest){
this.fetchingInProgress = false
this.blockUntilNextRequest = false
}
return config
},
(error) => {
return Promise.reject(error)
}
)
// Add a response interceptor, token can be renewed on every response
axios.interceptors.response.use(
(response) => {
if(typeof response.headers.remaininguses !== 'undefined'){
// console.log(response.headers.remaininguses)
//Look at remaining uses of token, if its less than five, request a new one
if(response.headers.remaininguses < 10 && !this.fetchingInProgress && !this.blockUntilNextRequest){
this.fetchingInProgress = true
const currentToken = localStorage.getItem('loginToken')
this.$io.emit('renew_session_token', currentToken)
}
}
return response
},
(error) => {
return Promise.reject(error)
}
)
//Puts token into state on page load //Puts token into state on page load
let token = localStorage.getItem('loginToken') let token = localStorage.getItem('loginToken')
let username = localStorage.getItem('username') let username = localStorage.getItem('username')
// // const socket = io({ path:'/socket' });
if(token && token.length > 0){ const socket = this.$io
socket.on('connect', () => {
//setup username display this.$store.commit('setSocketIoSocket', socket.id)
this.$store.commit('setUsername', username)
//Set session token on every request if set
axios.defaults.headers.common['authorizationtoken'] = token
//Setup websockets into vue instance
const socket = this.$io
socket.on('connect', () => {
//Put user into personal event room for live note updates, etc
this.$io.emit('user_connect', token)
})
}
this.$io.emit('user_connect', token)
})
//Detect if user is on a mobile browser and set a flag in store //Detect if user is on a mobile browser and set a flag in store
this.$store.commit('detectIsUserOnMobile') this.$store.commit('detectIsUserOnMobile')
@ -103,6 +49,11 @@ export default {
this.$store.commit('toggleNightMode', themeNumber) this.$store.commit('toggleNightMode', themeNumber)
} }
//Put user data into global store on load
if(token){
this.$store.commit('setLoginToken', {token, username})
}
}, },
mounted: function(){ mounted: function(){
@ -112,17 +63,6 @@ export default {
this.$store.dispatch('fetchAndUpdateUserTotals') this.$store.dispatch('fetchAndUpdateUserTotals')
}) })
this.$io.on('recievend_new_token', newToken => {
// console.log('Got a new token')
axios.defaults.headers.common['authorizationtoken'] = newToken
localStorage.setItem('loginToken', newToken)
//Disable getting new tokens until next request
this.blockUntilNextRequest = true
})
}, },
computed: { computed: {
loggedIn () { loggedIn () {

View File

@ -17,10 +17,6 @@
:root { :root {
--main-accent: #16ab39;
/*theme colors */
--body_bg_color: #f5f6f7; --body_bg_color: #f5f6f7;
--small_element_bg_color: #fff; --small_element_bg_color: #fff;
--text_color: #3d3d3d; --text_color: #3d3d3d;

View File

@ -248,7 +248,7 @@
<div v-on:click="reloadPage" class="version-display" v-if="version != 0" > <div v-on:click="reloadPage" class="version-display">
<i :class="`${getVersionIcon()} icon`"></i> {{ version }} <i :class="`${getVersionIcon()} icon`"></i> {{ version }}
</div> </div>
@ -267,7 +267,7 @@
}, },
data: function(){ data: function(){
return { return {
version: '0', version: '2.3.4',
username: '', username: '',
collapsed: false, collapsed: false,
mobile: false, mobile: false,
@ -277,7 +277,6 @@
} }
}, },
beforeCreate: function(){ beforeCreate: function(){
}, },
mounted: function(){ mounted: function(){
this.mobile = this.$store.getters.getIsUserOnMobile this.mobile = this.$store.getters.getIsUserOnMobile
@ -289,7 +288,6 @@
if(this.loggedIn){ if(this.loggedIn){
this.$store.dispatch('fetchAndUpdateUserTotals') this.$store.dispatch('fetchAndUpdateUserTotals')
this.version = localStorage.getItem('currentVersion')
} }
}, },
@ -349,12 +347,9 @@
.catch(error => { this.$bus.$emit('notification', 'Failed to create note') }) .catch(error => { this.$bus.$emit('notification', 'Failed to create note') })
}, },
destroyLoginToken() { destroyLoginToken() {
axios.post('/api/user/logout') this.$bus.$emit('notification', 'Logged Out')
setTimeout(() => { this.$store.commit('destroyLoginToken')
this.$bus.$emit('notification', 'Logged Out') this.$router.push('/')
this.$store.commit('destroyLoginToken')
this.$router.push('/')
}, 200)
}, },
toggleNightMode(){ toggleNightMode(){
this.$store.commit('toggleNightMode') this.$store.commit('toggleNightMode')

View File

@ -98,15 +98,13 @@
//Login user if we have a valid token //Login user if we have a valid token
if(data && data.token && data.token.length > 0){ if(data && data.token && data.token.length > 0){
//Set username to local session
this.$store.commit('setUsername', this.username)
const token = data.token const token = data.token
const username = this.username
this.$store.commit('setLoginToken', {token, username})
//Setup socket io after user logs in //Setup socket io after user logs in
axios.defaults.headers.common['authorizationtoken'] = token
this.$io.emit('user_connect', token) this.$io.emit('user_connect', token)
localStorage.setItem('loginToken', token)
//Redirect user to notes section after login //Redirect user to notes section after login
this.$router.push('/notes') this.$router.push('/notes')
@ -115,7 +113,7 @@
register(){ register(){
if( this.username.length == 0 || this.password.length == 0 ){ if( this.username.length == 0 || this.password.length == 0 ){
this.$bus.$emit('notification', 'Unable to Sign Up - Username and Password Required') this.$bus.$emit('notification', 'Username and Password Required')
return return
} }
@ -123,19 +121,19 @@
.then(({data}) => { .then(({data}) => {
if(data == false){ if(data == false){
this.$bus.$emit('notification', 'Unable to Sign Up - Username already in use') this.$bus.$emit('notification', 'Username already in use')
} }
this.finalizeLogin(data) this.finalizeLogin(data)
}) })
.catch(error => { .catch(error => {
this.$bus.$emit('notification', 'Unable to Sign Up - Username already in use') this.$bus.$emit('notification', 'Username already in use')
}) })
}, },
login(){ login(){
if( this.username.length == 0 || this.password.length == 0 ){ if( this.username.length == 0 || this.password.length == 0 ){
this.$bus.$emit('notification', 'Unable to Login - Username and Password Required') this.$bus.$emit('notification', 'Username and Password Required')
return return
} }
@ -143,13 +141,13 @@
.then(({data}) => { .then(({data}) => {
if(data == false){ if(data == false){
this.$bus.$emit('notification', 'Unable to Login - Incorrect Username or Password') this.$bus.$emit('notification', 'Incorrect Username or Password')
} }
this.finalizeLogin(data) this.finalizeLogin(data)
}) })
.catch(error => { .catch(error => {
this.$bus.$emit('notification', 'Unable to Login - Incorrect Username or Password') this.$bus.$emit('notification', 'Incorrect Username or Password')
}) })
} }
} }

View File

@ -165,25 +165,12 @@
<!-- Squire Box --> <!-- Squire Box -->
<div id="squire-id" class="squire-box" ref="squirebox" placeholder="Note Text"></div> <div id="squire-id" class="squire-box" ref="squirebox" placeholder="Note Text"></div>
<!-- <div v-if="caretShow" class="artificial-caret" :style="{ 'top':caretTop+'px', 'left':caretLeft+'px' }"></div> -->
</div> </div>
</div> </div>
<!-- little tags on the side -->
<div class="note-mini-tag-area" :class="{ 'size-down':sizeDown }">
<span v-for="tag in allTags" class="subtle-tag active-mini-tag" v-if="isTagOnNote(tag.id)" v-on:click="removeTag(tag.id)">
<i class="tag icon"></i>
{{ tag.text }}
</span>
<span v-else class="subtle-tag" v-on:click="addTag(tag.text)">
<i class="plus icon"></i>
{{ tag.text }}
</span>
<span class="subtle-tag" v-on:click="$router.push(`/notes/open/${noteid}/menu/tags`)">
<i class="plus icon"></i><i class="green tags icon"></i>Add Tag
</span>
</div>
<!-- color picker --> <!-- color picker -->
<color-tooltip <color-tooltip
v-if="colorpicker" v-if="colorpicker"
@ -200,7 +187,7 @@
/> />
</side-slide-menu> </side-slide-menu>
<side-slide-menu v-if="tags" v-on:close="tags = false; fetchNoteTags()" name="tags" :style-object="styleObject"> <side-slide-menu v-if="tags" v-on:close="tags = false" name="tags" :style-object="styleObject">
<div class="ui basic segment"> <div class="ui basic segment">
<note-tag-edit :noteId="noteid" :key="'tags-for-note-'+noteid"/> <note-tag-edit :noteId="noteid" :key="'tags-for-note-'+noteid"/>
</div> </div>
@ -259,10 +246,10 @@
<!-- Show side shades if user is on desktop only --> <!-- Show side shades if user is on desktop only -->
<div class="full-focus-shade shade1" <div class="full-focus-shade shade1"
:class="{ 'slide-out-left':sizeDown }" :class="{ 'slide-out-left':(sizeDown == true) }"
v-on:click="close()"></div> v-on:click="close()"></div>
<div class="full-focus-shade shade2" <div class="full-focus-shade shade2"
:class="{ 'slide-out-right':sizeDown }" :class="{ 'slide-out-right':(sizeDown == true) }"
v-on:click="close()"></div> v-on:click="close()"></div>
</div> </div>
@ -340,13 +327,13 @@
diffTextTimeout: null, diffTextTimeout: null,
diffsApplied: null, diffsApplied: null,
//Fake Caret position and visibility
caretShow: false,
caretLeft: null,
caretTop: null,
//Used to restore caret position //Used to restore caret position
lastRange: null, lastRange: null,
startOffset: 0, startOffset: 0,
//Tag Display
allTags: [],
noteTags: [],
} }
}, },
watch: { watch: {
@ -462,77 +449,6 @@
}, totalTime + 40) }, totalTime + 40)
}, },
removeTag(tagId){
this.allTags = []
let entryId = 0
//Find fucking note tag for removal
this.noteTags.forEach(noteTag => {
if(noteTag['tagId'] == tagId){
entryId = noteTag['entryId']
}
})
let postData = {
'tagId':entryId,
'noteId':this.noteid
}
axios.post('/api/tag/removefromnote', postData)
.then(response => {
this.fetchNoteTags()
})
.catch(error => { this.$bus.$emit('notification', 'Failed to Remove Tag') })
},
addTag(tagText){
this.allTags = []
let postData = {
'tagText':tagText,
'noteId':this.noteid
}
axios.post('/api/tag/addtonote', postData)
.then(response => {
this.fetchNoteTags()
})
.catch(error => { this.$bus.$emit('notification', 'Failed to Add Tag') })
},
fetchNoteTags(){
axios.post('/api/tag/get', {'noteId': this.noteid})
.then(({data}) => {
this.allTags = data.allTags
this.noteTags = data.noteTagIds
//Stick used tags at top.
if(this.noteTags.length > 0){
let frontTags = []
for (var i = this.allTags.length - 1; i >= 0; i--) {
this.noteTags.forEach(noteTag => {
if(this.allTags[i]['id'] == noteTag['tagId']){
frontTags.push(this.allTags[i])
this.allTags.splice(i,1)
}
})
}
this.allTags.unshift(...frontTags)
}
})
},
isTagOnNote(id){
for (let i = 0; i < this.noteTags.length; i++) {
const current = this.noteTags[i]
if(current && current['tagId'] == id){
return true
}
}
return false
},
initSquire(){ initSquire(){
//Set up squire and load note text //Set up squire and load note text
@ -542,8 +458,8 @@
if(!this.$store.getters.getIsUserOnMobile){ if(!this.$store.getters.getIsUserOnMobile){
this.editor.focus() this.editor.focus()
this.editor.moveCursorToEnd() this.editor.moveCursorToEnd()
this.caretShow = true
this.fetchNoteTags() //Don't load tags on mobile this.moveArtificialCaret()
} }
@ -558,6 +474,9 @@
this.lastRange = e.range this.lastRange = e.range
this.startOffset = parseInt(e.range.startOffset) this.startOffset = parseInt(e.range.startOffset)
return return
// const rect = e.range.getBoundingClientRect()
// this.moveArtificialCaret(rect)
}) })
//Change button states on editor when element is active //Change button states on editor when element is active
@ -613,7 +532,14 @@
}) })
this.editor.addEventListener('keydown', event => { this.editor.addEventListener('keydown', event => {
setTimeout(() => {
if(event.keyCode == 32){
this.caretLeft += 3
}
if(event.keyCode == 8){
// this.caretLeft -= 3
}
}, 10)
}) })
//Bind event handlers //Bind event handlers
@ -624,10 +550,29 @@
//Show and hide additional toolbars //Show and hide additional toolbars
this.editor.addEventListener('focus', e => { this.editor.addEventListener('focus', e => {
// this.caretShow = true
}) })
this.editor.addEventListener('blur', e => { this.editor.addEventListener('blur', e => {
// this.caretShow = false
}) })
}, },
moveArtificialCaret(rect = null){
//Lets not use the artificial caret for now
return
//If rect isn't present, grab by selection
if(!rect || rect.left == 0){ //Left should always be greater than 0, because of a margin
rect = this.editor.getCursorPosition()
//Another way to get range
// window.getSelection().getRangeAt(0)
}
const textArea = document.getElementById('text-box-container').getBoundingClientRect()
this.caretLeft = (rect.left - textArea.left - 1)
this.caretTop = (rect.top - textArea.top - 1 )
},
openEditAttachment(){ openEditAttachment(){
this.$router.push('/attachments/note/'+this.currentNoteId) this.$router.push('/attachments/note/'+this.currentNoteId)
@ -817,7 +762,7 @@
// clearTimeout(this.editDebounce) // clearTimeout(this.editDebounce)
if(this.statusText == 'saving'){ if(this.statusText == 'saving'){
return resolve(true) return reject(false)
} }
//Don't save note if its hash doesn't change //Don't save note if its hash doesn't change
@ -1050,60 +995,26 @@
margin: 45px 0 45px 0; margin: 45px 0 45px 0;
position: relative; position: relative;
} }
.artificial-caret {
position: absolute;
top: 0;
left: 0;
height: 21px;
width: 1.5px;
margin: 0 0;
/*opacity: 0.3;*/
background-color: rgb(33, 186, 69);
animation: blinker 1.1s ease-in-out infinite;
}
/* .artificial-caret:after {
content: '';
width: 3px;
height: 3px;
margin: 0 0 0 -1px;
display: block;
background-color: rgb(33, 186, 69);
.note-mini-tag-area { }*/
position: fixed;
width: 120px;
left: calc(15% - 125px);
top: 46px;
bottom: 0;
height: calc(100vh - 55px);
z-index: 1000;
overflow-y: scroll;
scrollbar-width: none;
scrollbar-color: transparent transparent;
}
.note-mini-tag-area {
scrollbar-width: auto;
scrollbar-color: inherit inherit;
}
.subtle-tag {
display: inline-block;
width: 100%;
padding: 1px 1px 1px 5px;
margin: 0 0 0;
border: 1px solid transparent;
border-right: none;
border-radius: 3px;
background-color: transparent;
white-space: nowrap;
overflow: hidden;
text-overflow: ellipsis;
transition: color ease 0.3s, background ease 0.3s;
font-size: 11px;
cursor: pointer;
opacity: 0;
text-transform:capitalize;
}
.note-mini-tag-area:hover .subtle-tag {
opacity: 1;
}
.note-mini-tag-area:hover .active-mini-tag {
background-color: var(--main-accent);
color: white;
}
.note-mini-tag-area:hover .subtle-tag:not(.active-mini-tag) {
border-right: none;
color: var(--text_color);
background-color: var(--body_bg_color);
opacity: 1;
}
.active-mini-tag {
opacity: 0.7;
background-color: var(--small_element_bg_color);
color: var(--text_color)
}
@keyframes blinker { @keyframes blinker {
50% { 50% {

View File

@ -32,7 +32,7 @@
class="big-text"><p>{{ note.title }}</p></span> class="big-text"><p>{{ note.title }}</p></span>
<!-- Sub text display --> <!-- Sub text display -->
<span v-if="note.subtext.length > 0" <span v-if="note.subtext.length > 0 && !isShowingSearchResults()"
class="small-text" class="small-text"
v-html="note.subtext"></span> v-html="note.subtext"></span>
@ -49,6 +49,15 @@
</span> </span>
</span> </span>
<!-- Display highlights from solr results -->
<span v-if="note.note_highlights.length > 0" class="term-usage">
<span
class="usage-row"
v-for="highlight in note.note_highlights"
:class="{ 'big-text':(highlight <= 100), 'small-text-title':(highlight >= 100) }"
v-html="cleanHighlight(highlight)"></span>
</span>
</div> </div>
<div v-if="titleView" class="single-line-text" @click="cardClicked"> <div v-if="titleView" class="single-line-text" @click="cardClicked">
@ -170,6 +179,12 @@
return updated return updated
}, },
isShowingSearchResults(){
if(this.note.note_highlights.length > 0 || this.note.attachment_highlights.length > 0 || this.note.tag_highlights.length > 0){
return true
}
return false
},
splitTags(text){ splitTags(text){
return text.split(',') return text.split(',')
}, },

View File

@ -8,12 +8,8 @@
<div class="ui grid" v-if="shareUsername == null"> <div class="ui grid" v-if="shareUsername == null">
<div v-if="!isNoteShared" class="sixteen wide column"> <div v-if="!isNoteShared" class="sixteen wide column">
<div class="ui button" v-on:click="makeShared()">Enable Sharing</div> <div class="ui button" v-on:click="makeShared()">Enable Shared</div>
<ul> <p>Shared notes are different and junk.</p>
<li>Shared notes can be read and edited by you and all shared users.</li>
<li>Shared notes can only be shared by the creator of the note.</li>
</ul>
</div> </div>
<div v-if="isNoteShared" class="sixteen wide column"> <div v-if="isNoteShared" class="sixteen wide column">
@ -21,10 +17,14 @@
<div class="ui button" v-on:click="removeShared()">Remove Shared</div> <div class="ui button" v-on:click="removeShared()">Remove Shared</div>
<div class="ui button" v-on:click="getSharedUrl()">Get Shareable URL</div> <div class="ui button" v-on:click="getSharedUrl()">Get Shareable URL</div>
</div>
<div class="sixteen wide column" v-if="isNoteShared && sharedUrl.length > 0"> <div v-if="sharedUrl.length > 0">
<p>Public Link - this link can be disabled by turning off sharing</p> <a target="_blank" :href="sharedUrl">{{ sharedUrl }}</a>
<a target="_blank" :href="sharedUrl">{{ sharedUrl }}</a> <div class="ui input">
<input type="text" v-model="sharedUrl">
</div>
</div>
</div> </div>
</div> </div>

View File

@ -3,27 +3,19 @@
<div class="ui grid"> <div class="ui grid">
<div class="sixteen wide column"> <div class="sixteen wide column">
<div class="ui text container"> <div class="ui text container">
<div class="ui raised segment">
<h2 class="ui dividing header"> <h2 class="ui dividing header">
<i class="green question circle outline icon"></i>
Help Help
</h2> </h2>
<p v-if="$store.getters.totals && $store.getters.totals['activeSessions'] > 0">
Logged in user has {{ $store.getters.totals['activeSessions'] }} active sessions.
</p>
<!-- Content copied from note --> <!-- Content copied from note -->
<!-- https://www.solidscribe.com/#/notes/open/552 --> <!-- https://www.solidscribe.com/#/notes/open/552 -->
<p><b>Only Note Text is Encrypted</b><br></p><blockquote><p>Only you can read your notes. Encryption is the transformation of data into a form unreadable by anyone without the password. Its purpose is to ensure privacy by keeping the information hidden from anyone for whom it is not intended, even those who can see the encrypted data. Even if every note in the database was leaked, nothing would be readable. If the government asked for your notes, it would all be gibberish. <br></p></blockquote><p><br></p><p><b>Some Data is not encrypted</b><br></p><blockquote><p>Everything isn't encrypted, to keep up ease of use. Files, Tags and Attachments are not encrypted.<br></p></blockquote><p><br></p><p><b>Searching is somewhat limited</b><br></p><blockquote><p>Since every note is encrypted, searching is limited. To maintain security, only single words can be searched. Your search index is private and Encrypted.<br></p></blockquote><p><br></p><p><b>The Scrat</b><b></b><b>ch Pad</b><b></b><br></p><blockquote><p>The Scratch Pad was designed to allow rapid input to a single note. Rather than junking up all your notes with random links, numbers or haikus, you can put them all in one place. <br></p><ul><li>All data pushed to the quick note can still be edited like a normal note.<br></li><li>Creating a new quick note will not erase your old <br></li></ul></blockquote><p><br></p><p><b>Flux Theme</b><br></p><blockquote><p>Flux theme limits the amount of blue emitted by your screen. Most things turn sepia and a filter is applied to images to make them more sepia. Less blue light at night is supposed to be helpful for falling asleep.<br></p><p>Here is some good research on the topic: <a href="https://justgetflux.com/research.html">https://justgetflux.com/research.html</a><br></p></blockquote><p><br></p><p><b>Text Editor Keyboard Shor</b><b>tcuts</b><br></p><blockquote><p>Number List - CTRL + SHIFT + 9<br></p><p>Todo List - CTRL + SHIFT + 8<br></p><p>Underline CTRL + u<br></p><p>Bold - CTRL + b<br></p><p>Quote - CRTL + i<br></p><p>Indent - CTL + ]<br></p><p>Outdent - CRTL + [<br></p><p>Undo - CTRL + z<br></p><p>Redo - CTRL + y<br></p></blockquote><p><br></p><p><b>Shared Notes and Security</b><br></p><blockquote><p>Shared notes still respect privacy but use a different security scheme. Instead of encrypting the note with your password, a shared password is created. This note then uses <a href="https://en.wikipedia.org/wiki/Public-key_cryptography">public-key cryptography</a> to share the note with other users, while still making it unreadable to anyone else. <br></p><ul><li>You can revoke any users access to a shared note at any time.<br></li><li>Notes you share can not be shared by other people.<br></li><li>If you turn off sharing, all users lose access and the note is reverted to the default security scheme.<br></li></ul></blockquote><p><b>Public Links for shared notes</b><br></p><blockquote><p>It is possible to generate a public URL for shared notes. This is a huge security risk and exposes the Encryption Key for the note. The encryption key to a shared note can easily be changed by turning off sharing, then turning it back on. <br></p><p><br></p></blockquote><p><b>Links in notes</b><br></p><blockquote><p>Links put into notes are automatically scraped. This means the data from the link will be scanned to get an image and some text from the website to help make that link more accessible in the future. You can edit the text of scarped links and any time and search for it later. <br></p></blockquote><p><br></p><p><b>Files in notes</b><br></p><blockquote><p>Files can be uploaded to notes. If its an image, the picture will be put into the note.<br></p><p>Images added to notes will have text scanned, so it can be searched (This isn't super accurate so don't rely to heavily on it.) The text can be updated at any time.<br></p></blockquote><p><br></p><p><b>Deleting notes</b><br></p><blockquote><p>When<b> </b>notes are deleted, none of the files related to the note are deleted. <br></p></blockquote><p><br></p><p><b>Daily Backups</b><br></p><blockquote><p>All notes are backed up, every night, at midnight. If there is data loss, it can be restored from a backup. If you experience some sort of cataclysmic data loss please contact the system administrator for a copy of your data or a restoration procedure. <br></p></blockquote><p><br></p> <p><b>Only Note Text is Encrypted</b><br></p><p>Only you can read your notes. Encryption is the transformation of data into a form unreadable by anyone without the password. Its purpose is to ensure privacy by keeping the information hidden from anyone for whom it is not intended, even those who can see the encrypted data. Even if every note in the database was leaked, nothing would be readable. If the government asked for your notes, it would all be gibberish. <br></p><p><br></p><p><b>Some Data is not encrypted</b><br></p><p>Everything isn't encrypted, to keep up ease of use. Files, Tags and Attachments are not encrypted.<br></p><p><br></p><p><b>Searching is somewhat limited</b><br></p><p>Since every note is encrypted, searching is limited. To maintain security, only single words can be searched. Your search index is private and Encrypted.<br></p><p><br></p><p><b>The Scrat</b><b></b><b>ch Pad</b><b></b><br></p><p>The Scratch Pad was designed to allow rapid input to a single note. Rather than junking up all your notes with random links, numbers or haikus, you can put them all in one place. <br></p><ul><li>All data pushed to the quick note can still be edited like a normal note.<br></li><li>Creating a new quick note will not erase your old <br></li></ul><p><br></p><p><b>Flux Theme</b><br></p><p>Flux theme limits the amount of blue emitted by your screen. Most things turn sepia and a filter is applied to images to make them more sepia. Less blue light at night is supposed to be helpful for falling asleep.<br></p><p>Here is some good research on the topic: <a href="https://justgetflux.com/research.html">https://justgetflux.com/research.html</a><br></p><p><br></p><p><b>Keyboard Shor</b><b></b><b>tcuts</b><br></p><p>Number List - CTRL + SHIFT + 9<br></p><p>Todo List - CTRL + SHIFT + 8<br></p><p>Underline CTRL + u<br></p><p>Bold - CTRL + b<br></p><p>Quote - CRTL + i<br></p><p>Indent - CTL + ]<br></p><p>Outdent - CRTL + [<br></p><p>Undo - CTRL + z<br></p><p>Redo - CTRL + y<br></p><p><br></p><p><b>Links in notes</b><br></p><p>Links put into notes are automatically scraped. This means the data from the link will be scanned to get an image and some text from the website to help make that link more accessible in the future. You can edit the text of scarped links and any time and search for it later. <br></p><p><br></p><p><b>Files in notes</b><br></p><p>Files can be uploaded to notes. If its an image, the picture will be put into the note.<br></p><p>Images added to notes will have text scanned, so it can be searched (This isn't super accurate so don't rely to heavily on it.) The text can be updated at any time.<br></p><p><br></p><p><b>Deleting notes</b><br></p><p>When<b> </b>notes are deleted, none of the files related to the note are deleted. <br></p><p><br></p><p><b>Daily Backups</b><br></p><p>All notes are backed up, every night, at midnight. If there is data loss, it can be restored from a backup. If you experience some sort of cataclysmic data loss please contact the system administrator for a copy of your data or a restoration procedure. <br></p>
<!-- content copied from note --> <!-- content copied from note -->
</div> </div>
</div> </div>
</div>
</div> </div>
</div> </div>
</template> </template>

View File

@ -10,11 +10,10 @@
-webkit-animation: fadeorama 16s ease infinite; -webkit-animation: fadeorama 16s ease infinite;
-moz-animation: fadeorama 16s ease infinite; -moz-animation: fadeorama 16s ease infinite;
animation: fadeorama 16s ease infinite; animation: fadeorama 16s ease infinite;
height: 350px;
} }
.logo-display { .logo-display {
width: 140px; width: 50%;
height: auto; max-width: 450px;
} }
.lightly-padded { .lightly-padded {
margin-top: 10px; margin-top: 10px;
@ -113,10 +112,10 @@
<img loading="lazy" width="10%" src="/api/static/assets/marketing/void.svg" alt=""> <img loading="lazy" width="10%" src="/api/static/assets/marketing/void.svg" alt="">
</div> </div>
<!-- <div class="one wide large screen only column"></div> --> <div class="one wide large screen only column"></div>
<!-- desktop column - large screen only --> <!-- desktop column - large screen only -->
<div class="sixteen wide middle aligned center aligned column"> <div class="seven wide middle aligned left aligned column">
<h2 class="massive-text"> <h2 class="massive-text">
<img class="logo-display" loading="lazy" src="/api/static/assets/logo.svg" alt="Solid Scribe Logo"> <img class="logo-display" loading="lazy" src="/api/static/assets/logo.svg" alt="Solid Scribe Logo">
@ -130,9 +129,9 @@
</div> </div>
<!-- <div class="eight wide middle aligned left aligned column"> <div class="eight wide middle aligned left aligned column">
<img loading="lazy" width="90%" src="/api/static/assets/marketing/notebook.svg" alt="The Venus fly laptop about to capture another victim"> <img loading="lazy" width="90%" src="/api/static/assets/marketing/notebook.svg" alt="The Venus fly laptop about to capture another victim">
</div> --> </div>
</div> </div>
@ -342,6 +341,12 @@ export default {
}, },
beforeMount(){ beforeMount(){
//Don't change hero banner on mobile
if(!this.$store.getters.getIsUserOnMobile){
let windowHeight = window.innerHeight
this.height = windowHeight - (windowHeight * 0.18)
}
}, },
methods: { methods: {
showRealInformation(){ showRealInformation(){

View File

@ -117,7 +117,7 @@
:data="note" :data="note"
:title-view="titleView" :title-view="titleView"
:currently-open="(activeNoteId1 == note.id || activeNoteId2 == note.id)" :currently-open="(activeNoteId1 == note.id || activeNoteId2 == note.id)"
:key="note.id + note.color + '-' +note.title.length + '-' +note.subtext.length + '-' + note.tag_count + note.updated" :key="note.id + note.color + note.note_highlights.length + note.attachment_highlights.length + ' -' + note.tag_highlights.length + '-' +note.title.length + '-' +note.subtext.length + '-' + note.tag_count + note.updated"
/> />
</div> </div>
</div> </div>
@ -509,7 +509,7 @@
//Don't move notes that were not changed //Don't move notes that were not changed
if(note.updated == newNote.updated){ if(note.updated == newNote.updated){
// return return
} }
//go through each prop and update it with new values //go through each prop and update it with new values

View File

@ -6,16 +6,30 @@ Vue.use(Vuex);
export default new Vuex.Store({ export default new Vuex.Store({
state: { state: {
token: null,
username: null, username: null,
nightMode: false, nightMode: false,
isUserOnMobile: false, isUserOnMobile: false,
isNoteSettingsOpen: false, //Little note settings pane
socket: null,
userTotals: null, userTotals: null,
}, },
mutations: { mutations: {
setUsername(state, username){ setLoginToken(state, userData){
const username = userData.username
const token = userData.token
localStorage.removeItem('loginToken') //We only want one login token per computer
localStorage.setItem('loginToken', token)
localStorage.removeItem('username') //We only want one login token per computer localStorage.removeItem('username') //We only want one login token per computer
localStorage.setItem('username', username) localStorage.setItem('username', username)
//Set default token to axios, every request will have header
axios.defaults.headers.common['authorizationtoken'] = token
state.token = token
state.username = username state.username = username
}, },
destroyLoginToken(state){ destroyLoginToken(state){
@ -23,8 +37,8 @@ export default new Vuex.Store({
//Remove login token from local storage and from headers //Remove login token from local storage and from headers
localStorage.removeItem('loginToken') localStorage.removeItem('loginToken')
localStorage.removeItem('username') localStorage.removeItem('username')
localStorage.removeItem('currentVersion')
delete axios.defaults.headers.common['authorizationtoken'] delete axios.defaults.headers.common['authorizationtoken']
state.token = null
state.username = null state.username = null
}, },
toggleNightMode(state, pastTheme){ toggleNightMode(state, pastTheme){
@ -111,20 +125,6 @@ export default new Vuex.Store({
//Save all the totals for the user //Save all the totals for the user
state.userTotals = totalsObject state.userTotals = totalsObject
//Set computer version from server
const currentVersion = localStorage.getItem('currentVersion')
if(currentVersion == null){
localStorage.setItem('currentVersion', totalsObject.currentVersion)
return
}
//If version is already set and it doesn't match the server, reload app
if(currentVersion != totalsObject.currentVersion){
localStorage.setItem('currentVersion', totalsObject.currentVersion)
location.reload(true)
}
// console.log('-------------') // console.log('-------------')
// Object.keys(totalsObject).forEach( key => { // Object.keys(totalsObject).forEach( key => {
// console.log(key + ' -- ' + totalsObject[key]) // console.log(key + ' -- ' + totalsObject[key])
@ -135,8 +135,11 @@ export default new Vuex.Store({
getUsername: state => { getUsername: state => {
return state.username return state.username
}, },
getLoginToken: state => {
return state.token
},
getLoggedIn: state => { getLoggedIn: state => {
let weIn = (state.username && state.username.length > 0) let weIn = (state.token !== null && state.token != undefined && state.token.length > 0)
return weIn return weIn
}, },
getIsNightMode: state => { getIsNightMode: state => {

38
configs/nginx/default Normal file
View File

@ -0,0 +1,38 @@
##
#
# This is just a mock config file, describing what is needed to run the app
# The app currently only needs two paths / and /api
#
##
#
# This is needed to define any ports the app may use from node
#
upstream expressapp {
server 127.0.0.1:3000;
keepalive 8;
}
server {
#
# Needed to server up static, compiled JS files and index.html
#
location / {
autoindex on;
}
#
# define the api route to connect to the backend and serve up static files
#
location /api {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_pass http://expressapp;
proxy_redirect off;
}
}

25
package-lock.json generated
View File

@ -4,6 +4,11 @@
"lockfileVersion": 1, "lockfileVersion": 1,
"requires": true, "requires": true,
"dependencies": { "dependencies": {
"@log4js-node/log4js-api": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/@log4js-node/log4js-api/-/log4js-api-1.0.2.tgz",
"integrity": "sha1-eoFD+zPwd98+V53Kfxj+p0oC7Is="
},
"@types/node": { "@types/node": {
"version": "12.6.8", "version": "12.6.8",
"resolved": "https://registry.npmjs.org/@types/node/-/node-12.6.8.tgz", "resolved": "https://registry.npmjs.org/@types/node/-/node-12.6.8.tgz",
@ -1204,6 +1209,11 @@
"resolved": "https://registry.npmjs.org/nocache/-/nocache-2.1.0.tgz", "resolved": "https://registry.npmjs.org/nocache/-/nocache-2.1.0.tgz",
"integrity": "sha512-0L9FvHG3nfnnmaEQPjT9xhfN4ISk0A8/2j4M37Np4mcDesJjHgEUfgPhdCyZuFI954tjokaIj/A3NdpFNdEh4Q==" "integrity": "sha512-0L9FvHG3nfnnmaEQPjT9xhfN4ISk0A8/2j4M37Np4mcDesJjHgEUfgPhdCyZuFI954tjokaIj/A3NdpFNdEh4Q=="
}, },
"node-fetch": {
"version": "2.6.0",
"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz",
"integrity": "sha1-5jNFY4bUqlWGP2dqerDaqP3ssP0="
},
"node-tesseract-ocr": { "node-tesseract-ocr": {
"version": "1.0.0", "version": "1.0.0",
"resolved": "https://registry.npmjs.org/node-tesseract-ocr/-/node-tesseract-ocr-1.0.0.tgz", "resolved": "https://registry.npmjs.org/node-tesseract-ocr/-/node-tesseract-ocr-1.0.0.tgz",
@ -1582,6 +1592,16 @@
} }
} }
}, },
"solr-node": {
"version": "1.2.1",
"resolved": "https://registry.npmjs.org/solr-node/-/solr-node-1.2.1.tgz",
"integrity": "sha1-vZkXswJRp+N+fg2+nBtZnzl4zwY=",
"requires": {
"@log4js-node/log4js-api": "^1.0.2",
"node-fetch": "^2.3.0",
"underscore": "^1.8.3"
}
},
"sqlstring": { "sqlstring": {
"version": "2.3.1", "version": "2.3.1",
"resolved": "https://registry.npmjs.org/sqlstring/-/sqlstring-2.3.1.tgz", "resolved": "https://registry.npmjs.org/sqlstring/-/sqlstring-2.3.1.tgz",
@ -1694,6 +1714,11 @@
"resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz", "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
"integrity": "sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c=" "integrity": "sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c="
}, },
"underscore": {
"version": "1.9.1",
"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz",
"integrity": "sha1-BtzjSg5op7q8KbNluOdLiSUgOWE="
},
"unpipe": { "unpipe": {
"version": "1.0.0", "version": "1.0.0",
"resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",

View File

@ -23,7 +23,8 @@
"node-tesseract-ocr": "^1.0.0", "node-tesseract-ocr": "^1.0.0",
"request": "^2.88.0", "request": "^2.88.0",
"request-promise": "^4.2.4", "request-promise": "^4.2.4",
"socket.io": "^2.3.0" "socket.io": "^2.3.0",
"solr-node": "^1.2.1"
}, },
"_moduleAliases": { "_moduleAliases": {
"@root": ".", "@root": ".",

View File

@ -1,151 +1,25 @@
const db = require('@config/database') var jwt = require('jsonwebtoken');
const jwt = require('jsonwebtoken')
const cs = require('@helpers/CryptoString')
let Auth = {} let Auth = {}
const tokenSecretKey = process.env.JSON_KEY const tokenSecretKey = process.env.JSON_KEY
Auth.createToken = (userId, masterKey, pastId = null, pastCreatedDate = null) => { Auth.createToken = (userId, masterKey) => {
const signedData = {'id':userId, 'date':Date.now(), 'masterKey':masterKey}
const token = jwt.sign(signedData, tokenSecretKey)
return token
}
Auth.decodeToken = (token) => {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
jwt.verify(token, tokenSecretKey, function(err, decoded){
const created = pastCreatedDate ? pastCreatedDate : Math.floor(+new Date/1000) if(err || decoded.id == undefined){
const userHash = cs.hash(String(userId)).toString('base64') reject('Bad Token')
return
//Encrypt Master Password and save it to the server }
const sessionId = pastId ? pastId : cs.createSmallSalt().slice(0,9) //Use existing session id //Pass back decoded token
const salt = cs.createSmallSalt() resolve(decoded)
const tempPass = cs.createSmallSalt() return
const encryptedMasterPass = cs.encrypt(tempPass, salt, masterKey) });
//Deactivate all other session keys, they delete after 30 seconds
db.promise().query('UPDATE user_active_session SET active = 0 WHERE session_id = ?', [sessionId])
.then((r,f) => {
return db.promise().query(
'INSERT INTO user_active_session (salt, encrypted_master_password, created, uses, user_hash, session_id) VALUES (?,?,?,?,?,?)',
[salt, encryptedMasterPass, created, 40, userHash, sessionId])
})
.then((r,f) => {
const sessionNum = r[0].insertId
//Required Data for JWT payload
const tokenPayload = {userId, tempPass, sessionNum}
//Return token
const token = jwt.sign(tokenPayload, tokenSecretKey)
return resolve(token)
})
})
}
Auth.decodeToken = (token, request = null) => {
return new Promise((resolve, reject) => {
let decodedToken = null
//Delete all tokens older than 20 days before continuing or inacive and older than 1 minute
const now = (Math.floor((+new Date)/1000))
const twentyDays = (Math.floor((+new Date)/1000)) - (86400 * 20)
const thirtySeconds = (Math.floor((+new Date)/1000)) - (30)
//Decode Json web token
jwt.verify(token, tokenSecretKey, function(err, decoded){
if(err || decoded.tempPass == undefined || decoded.tempPass.length < 5){
throw new Error('Bad Token')
}
decodedToken = decoded
db.promise().query('DELETE from user_active_session WHERE (created < ?) OR (active = false AND last_used < ?)', [twentyDays, thirtySeconds])
.then((r,f) => {
//Lookup session data in database
db.promise().query('SELECT * FROM user_active_session WHERE id = ? LIMIT 1', [decodedToken.sessionNum])
.then((r,f) => {
if(r == undefined || r[0].length == 0){
throw new Error('Active Session not found for token')
}
const row = r[0][0]
// console.log(decodedToken.sessionNum + ' uses -> ' + row.uses)
if(row.uses <= 0){
throw new Error('Token is used up')
}
//Decrypt master key from lookup
const masterKey = cs.decrypt(decodedToken.tempPass, row.salt, row.encrypted_master_password)
if(masterKey == null){
// console.log('Deleting invalid session')
Auth.terminateSession(row.session_id)
throw new Error ('Unable to decrypt password for session')
}
//Async update DB counts and disable session if needed
db.promise().query('UPDATE user_active_session SET uses = uses -1, last_used = ? WHERE id = ? LIMIT 1', [now, decodedToken.sessionNum])
.then((r,f) => {
let userData = {
'userId': decodedToken.userId,
'masterKey': masterKey,
'sessionId': row.session_id,
'created': row.created,
'remainingUses':(row.uses--),
'active': row.active
}
//Return token Data
return resolve(userData)
})
})
.catch(error => {
//Token errors result in having sessions deleted
// console.log('-- Auth Token Error --')
// console.log(error)
reject(error)
})
})
})
})
}
Auth.terminateSession = (sessionId) => {
return db.promise().query('DELETE from user_active_session WHERE session_id = ?', [sessionId])
}
Auth.deletAllLoginKeys = (userId) => {
const userHash = cs.hash(String(userId)).toString('base64')
return db.promise().query('DELETE FROM user_active_session WHERE user_hash = ?', [userHash])
}
Auth.test = () => {
const testUserId = 22
const testPass = cs.createSmallSalt()
Auth.createToken(testUserId, testPass)
.then(token => {
console.log('Test: Create JWT -> Pass')
return Auth.decodeToken(token)
})
.then(userData => {
console.log('Test: Decrypted key Match -> ' + (testPass == userData.masterKey))
return Auth.deletAllLoginKeys(testUserId)
})
.then(results => {
console.log('Test: Remove user Json Web Tokens - Pass')
}) })
} }

View File

@ -31,9 +31,6 @@ CryptoString.encrypt = (password, salt64, rawText) => {
//Decrypt base64 string cipher text, //Decrypt base64 string cipher text,
CryptoString.decrypt = (password, salt64, cipherTextString) => { CryptoString.decrypt = (password, salt64, cipherTextString) => {
if(!password || !salt64 || !cipherTextString){ return '' }
if(password.length == 0 || salt64.length == 0 || cipherTextString == 0){ return '' }
let cipherText = Buffer.from(cipherTextString, 'base64') let cipherText = Buffer.from(cipherTextString, 'base64')
const salt = Buffer.from(salt64, 'base64') const salt = Buffer.from(salt64, 'base64')

View File

@ -69,7 +69,7 @@ ProcessText.deduceNoteTitle = (inTitle, inString) => {
//Remove inline styles that may be added by editor //Remove inline styles that may be added by editor
// inString = inString.replace(/style=".*?"/g,'') // inString = inString.replace(/style=".*?"/g,'')
// const tagFreeLength = ProcessText.removeHtml(inString).length const tagFreeLength = ProcessText.removeHtml(inString).length
// //
// Simplified attempt! // Simplified attempt!
@ -80,7 +80,7 @@ ProcessText.deduceNoteTitle = (inTitle, inString) => {
// if(tagFreeLength > 200){ // if(tagFreeLength > 200){
// sub += '... <i class="green caret down icon"></i>' // sub += '... <i class="green caret down icon"></i>'
// } // }
// inString += '</end>' inString += '</end>'
return {title, sub} return {title, sub}

View File

@ -50,37 +50,13 @@ io.on('connection', function(socket){
socket.on('user_connect', token => { socket.on('user_connect', token => {
Auth.decodeToken(token) Auth.decodeToken(token)
.then(userData => { .then(userData => {
socket.join(userData.userId) socket.join(userData.id)
}).catch(error => { }).catch(error => {
//Don't add user to room if they are not logged in //Don't add user to room if they are not logged in
// console.log(error) // console.log(error)
}) })
}) })
//Renew Session tokens when users request a new one
socket.on('renew_session_token', token => {
//Decode the token they currently have
Auth.decodeToken(token)
.then(userData => {
console.log('Is active -> ', userData.active)
if(userData.active == 1){
//Create a new one using credentials and session keys from current
Auth.createToken(userData.userId, userData.masterKey, userData.sessionId, userData.created)
.then(newToken => {
//Emit new token only to user on socket
socket.emit('recievend_new_token', newToken)
})
} else {
//Attempting to reactivate disabled session, kills it all
Auth.terminateSession(userData.sessionId)
}
})
})
socket.on('join_room', rawTextId => { socket.on('join_room', rawTextId => {
// Join user to rawtextid room when they enter // Join user to rawtextid room when they enter
socket.join(rawTextId) socket.join(rawTextId)
@ -102,7 +78,11 @@ io.on('connection', function(socket){
//Update users in room count //Update users in room count
io.to(rawTextId).emit('update_user_count', usersInRoom.length) io.to(rawTextId).emit('update_user_count', usersInRoom.length)
//Debugging text - prints out notes in limbo //Debugging text
console.log('Note diff object')
console.log(noteDiffs)
let noteDiffKeys = Object.keys(noteDiffs) let noteDiffKeys = Object.keys(noteDiffs)
let totalDiffs = 0 let totalDiffs = 0
noteDiffKeys.forEach(diffSetKey => { noteDiffKeys.forEach(diffSetKey => {
@ -110,11 +90,9 @@ io.on('connection', function(socket){
totalDiffs += noteDiffs[diffSetKey].length totalDiffs += noteDiffs[diffSetKey].length
} }
}) })
//Debugging Text
if(noteDiffKeys.length > 0){ console.log('Total notes in limbo -> ', noteDiffKeys.length)
console.log('Total notes in limbo -> ', noteDiffKeys.length) console.log('Total Diffs for all notes -> ', totalDiffs)
console.log('Total Diffs for all notes -> ', totalDiffs)
}
} }
}) })
@ -220,32 +198,21 @@ http.listen(3001, function(){
//Enable json body parsing in requests. Allows me to post data in ajax calls //Enable json body parsing in requests. Allows me to post data in ajax calls
app.use(express.json({limit: '5mb'})) app.use(express.json({limit: '5mb'}))
//Prefix defied by route in nginx config
const prefix = '/api'
//App Auth, all requests will come in with a token, decode the token and set global var //App Auth, all requests will come in with a token, decode the token and set global var
app.use(function(req, res, next){ app.use(function(req, res, next){
//Always null out master key, never allow it set from outside
req.headers.masterKey = null
req.headers.sessionId = null
//auth token set by axios in headers //auth token set by axios in headers
let token = req.headers.authorizationtoken let token = req.headers.authorizationtoken
if(token !== undefined && token.length > 0){ if(token && token != null && typeof token === 'string'){
Auth.decodeToken(token, req) Auth.decodeToken(token)
.then(userData => { .then(userData => {
req.headers.userId = userData.id //Update headers for the rest of the application
//Update headers for the rest of the application
req.headers.userId = userData.userId
req.headers.masterKey = userData.masterKey req.headers.masterKey = userData.masterKey
req.headers.sessionId = userData.sessionId
//Tell front end remaining uses on current token
res.set('remainingUses', userData.remainingUses)
next() next()
}) }).catch(error => {
.catch(error => {
console.log(error)
res.statusMessage = error //Throw 400 error if token is bad res.statusMessage = error //Throw 400 error if token is bad
res.status(400).end() res.status(400).end()
@ -257,12 +224,10 @@ app.use(function(req, res, next){
// Test Area // Test Area
const printResults = true const printResults = false
let UserTest = require('@models/User') let UserTest = require('@models/User')
let NoteTest = require('@models/Note') let NoteTest = require('@models/Note')
let AuthTest = require('@helpers/Auth') UserTest.keyPairTest('genMan12', '1', printResults)
Auth.test()
UserTest.keyPairTest('genMan15', '1', printResults)
.then( ({testUserId, masterKey}) => NoteTest.test(testUserId, masterKey, printResults)) .then( ({testUserId, masterKey}) => NoteTest.test(testUserId, masterKey, printResults))
.then( message => { .then( message => {
if(printResults) console.log(message) if(printResults) console.log(message)
@ -271,34 +236,34 @@ UserTest.keyPairTest('genMan15', '1', printResults)
//Test //Test
app.get('/api', (req, res) => res.send('Solidscribe API is up and running')) app.get(prefix, (req, res) => res.send('The api is running'))
//Serve up uploaded files //Serve up uploaded files
app.use('/api/static', express.static( __dirname+'/../staticFiles' )) app.use(prefix+'/static', express.static( __dirname+'/../staticFiles' ))
//Public routes //Public routes
var public = require('@routes/publicController') var public = require('@routes/publicController')
app.use('/api/public', public) app.use(prefix+'/public', public)
//user endpoint //user endpoint
var user = require('@routes/userController') var user = require('@routes/userController')
app.use('/api/user', user) app.use(prefix+'/user', user)
//notes endpoint //notes endpoint
var notes = require('@routes/noteController') var notes = require('@routes/noteController')
app.use('/api/note', notes) app.use(prefix+'/note', notes)
//tags endpoint //tags endpoint
var tags = require('@routes/tagController') var tags = require('@routes/tagController')
app.use('/api/tag', tags) app.use(prefix+'/tag', tags)
//notes endpoint //notes endpoint
var attachment = require('@routes/attachmentController') var attachment = require('@routes/attachmentController')
app.use('/api/attachment', attachment) app.use(prefix+'/attachment', attachment)
//quick notes endpoint //quick notes endpoint
var quickNote = require('@routes/quicknoteController') var quickNote = require('@routes/quicknoteController')
app.use('/api/quick-note', quickNote) app.use(prefix+'/quick-note', quickNote)
//Output running status //Output running status
app.listen(port, () => { app.listen(port, () => {

View File

@ -454,12 +454,9 @@ Note.update = (userId, noteId, noteText, noteTitle, color, pinned, archived, has
} }
let encryptedNoteText = '' let encryptedNoteText = ''
//Create encrypted snippet if its a long note //Create encrypted snippet
let snippet = '' const snippet = JSON.stringify([noteTitle, noteText.substring(0, 500)])
if(noteText.length > 500){ noteSnippet = cs.encrypt(masterKey, snippetSalt, snippet)
snippet = JSON.stringify([noteTitle, noteText.substring(0, 500)])
noteSnippet = cs.encrypt(masterKey, snippetSalt, snippet)
}
//Encrypt note text //Encrypt note text
const textObject = JSON.stringify([noteTitle, noteText]) const textObject = JSON.stringify([noteTitle, noteText])
@ -949,10 +946,8 @@ Note.search = (userId, searchQuery, searchTags, fastFilters, masterKey) => {
let searchParams = [userId] let searchParams = [userId]
let noteSearchQuery = ` let noteSearchQuery = `
SELECT note.id, SELECT note.id,
note.snippet as snippetText, note.snippet as snippet,
note.snippet_salt as snippetSalt, note.snippet_salt as salt,
note_raw_text.text as noteText,
note_raw_text.salt as noteSalt,
note_raw_text.updated as updated, note_raw_text.updated as updated,
opened, opened,
color, color,
@ -1097,39 +1092,26 @@ Note.search = (userId, searchQuery, searchTags, fastFilters, masterKey) => {
} }
//Only long notes have snippets, decipher it if present //Decrypt note text
let displayTitle = '' if(note.snippet && note.salt){
let displayText = '' const decipheredText = cs.decrypt(currentNoteKey, note.salt, note.snippet)
let encryptedText = note.noteText
let relatedSalt = note.noteSalt
//Default to note text, use snippet if set
if(note.snippetSalt && note.snippetText && note.snippetSalt.length > 0 && note.snippetText.length > 0){
encryptedText = note.snippetText
relatedSalt = note.snippetSalt
}
try {
const decipheredText = cs.decrypt(currentNoteKey, relatedSalt, encryptedText)
const textObject = JSON.parse(decipheredText) const textObject = JSON.parse(decipheredText)
if(textObject != null && textObject.length == 2){ if(textObject != null && textObject.length == 2){
if(textObject[0] && textObject[0] != null && textObject[0].length > 0){ note.title = textObject[0]
displayTitle = textObject[0] note.text = textObject[1]
}
if(textObject[1] && textObject[1] != null && textObject[1].length > 0){
displayText = textObject[1]
}
} }
} catch(err) {
console.log('Error opening note id -> ', note.id)
console.log(err)
} }
//Deduce note title
const textData = ProcessText.deduceNoteTitle(note.title, note.text)
note.title = textData.title
note.subtext = textData.sub
note.title = displayTitle //Remove these variables
note.subtext = ProcessText.stripDoubleBlankLines(displayText) note.note_highlights = []
note.attachment_highlights = []
note.tag_highlights = []
//Limit number of attachment thumbs to 4 //Limit number of attachment thumbs to 4
if(note.thumbs){ if(note.thumbs){
@ -1141,12 +1123,9 @@ Note.search = (userId, searchQuery, searchTags, fastFilters, masterKey) => {
} }
//Clear out note.text before sending it to front end, its being used in title and subtext //Clear out note.text before sending it to front end, its being used in title and subtext
delete note.snippetText delete note.snippet
delete note.snippetSalt delete note.salt
delete note.noteText
delete note.noteSalt
delete note.encrypted_share_password_key delete note.encrypted_share_password_key
delete note.text //Passed back as title and subtext
}) })

View File

@ -40,10 +40,9 @@ User.login = (username, password) => {
.then(({publicKey, privateKey}) => { .then(({publicKey, privateKey}) => {
//Passback a json web token //Passback a json web token
Auth.createToken(lookedUpUser.id, masterKey) const token = Auth.createToken(lookedUpUser.id, masterKey)
.then(token => { resolve({ token: token, userId:lookedUpUser.id })
return resolve({ token: token, userId:lookedUpUser.id })
})
}) })
}) })
@ -120,10 +119,7 @@ User.register = (username, password) => {
}) })
.then(({publicKey, privateKey}) => { .then(({publicKey, privateKey}) => {
return Auth.createToken(userId, newMasterKey) const token = Auth.createToken(userId, newMasterKey)
})
.then(token => {
return resolve({token, userId}) return resolve({token, userId})
}) })
.catch(console.log) .catch(console.log)
@ -143,7 +139,6 @@ User.getCounts = (userId) => {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
let countTotals = {} let countTotals = {}
const userHash = cs.hash(String(userId)).toString('base64')
db.promise().query( db.promise().query(
`SELECT `SELECT
@ -171,14 +166,6 @@ User.getCounts = (userId) => {
Object.assign(countTotals, rows[0][0]) //combine results Object.assign(countTotals, rows[0][0]) //combine results
return db.promise().query(
`SELECT count(id) as activeSessions FROM user_active_session WHERE user_hash = ?`, [userHash]
)
})
.then( (rows, fields) => {
Object.assign(countTotals, rows[0][0]) //combine results
return db.promise().query( return db.promise().query(
`SELECT `SELECT
SUM(attachment_type = 1) as linkFiles, SUM(attachment_type = 1) as linkFiles,
@ -198,20 +185,12 @@ User.getCounts = (userId) => {
countTotals[key] = count ? count : 0 countTotals[key] = count ? count : 0
}) })
countTotals['currentVersion'] = '3.0.0'
resolve(countTotals) resolve(countTotals)
}) })
}) })
} }
//Log out user by deleting login token for that active session
User.logout = (sessionId) => {
console.log('Terminate Session -> ', sessionId)
return db.promise().query('DELETE FROM user_active_session WHERE (session_id = ?)', [sessionId])
}
User.generateMasterKey = (userId, password) => { User.generateMasterKey = (userId, password) => {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {

View File

@ -136,4 +136,19 @@ router.post('/disableshare', function (req, res) {
}) })
//
// Testing Action
//
//Reindex all Note. Not a very good function, not public
router.get('/reindex5yu43prchuj903mrc', function (req, res) {
Note.migrateNoteTextToNewTable().then(status => {
return res.send(status)
})
})
module.exports = router module.exports = router

View File

@ -30,18 +30,6 @@ router.post('/login', function (req, res) {
res.send(false) res.send(false)
}) })
}) })
// Logout User
router.post('/logout', function (req, res) {
User.logout(req.headers.sessionId)
.then( returnData => {
res.send(true)
})
})
// Login User // Login User
router.post('/register', function (req, res) { router.post('/register', function (req, res) {