Update app.py

app.py

@@ -163,7 +163,7 @@ def index():
 
 @app.route("/api/store", methods=["POST"])
 def store():
-    """Store encrypted secret with enhanced features"""
+    """Store encrypted secret with enhanced features - MODIFIED FOR FRONTEND FILE ENCRYPTION"""
     try:
         form = request.form
         data = form.get("data")
@@ -177,33 +177,10 @@ def store():
         delay_seconds = int(form.get("delay_seconds", 0))
         theme = form.get("theme", "default")
         password_hint = form.get("password_hint", "")
+        has_file = form.get("has_file", "false").lower() == "true"  # NEW: File flag from frontend
         
-        # Handle file upload
-        file_data = None
-        file_type = None
-        file_name = None
-        
-        if 'file' in request.files:
-            file = request.files['file']
-            if file and file.filename:
-                # Check file size
-                file.seek(0, os.SEEK_END)
-                file_size = file.tell()
-                file.seek(0)
-                
-                if file_size > MAX_FILE_SIZE:
-                    return jsonify({"error": f"File too large. Max size: {MAX_FILE_SIZE/1024/1024:.1f}MB"}), 400
-                
-                # Process file
-                file_name = secure_filename(file.filename)
-                file_type = get_file_type(file_name)
-                
-                if file_type == 'unknown':
-                    return jsonify({"error": "File type not supported"}), 400
-                
-                # Read and encode file
-                file_content = file.read()
-                file_data = base64.b64encode(file_content).decode('utf-8')
+        # REMOVED: File upload handling (no longer needed)
+        # The frontend now encrypts files into the data field
         
         # Generate IDs
         secret_id = str(uuid.uuid4())
@@ -213,17 +190,15 @@ def store():
         while short_id in SHORT_LINKS:
             short_id = generate_short_id()
         
-        # Store secret
+        # Store secret - SIMPLIFIED STRUCTURE
         SECRETS[secret_id] = {
-            "data": data,
-            "file_data": file_data,
-            "file_type": file_type,
-            "file_name": file_name,
+            "data": data,  # Now contains encrypted message + file data
             "expire_at": time.time() + ttl,
             "view_once": view_once,
             "delay_seconds": delay_seconds,
             "theme": theme,
             "password_hint": password_hint,
+            "has_file": has_file,  # NEW: Flag to indicate if encrypted data contains file
             "created_at": time.time(),
             "creator_ip": get_client_ip(request),
             "access_count": 0
@@ -243,7 +218,7 @@ def store():
             "short_url": f"{base_url}/s/{short_id}",
             "qr_code": qr_code,
             "expires_at": SECRETS[secret_id]["expire_at"],
-            "has_file": file_data is not None
+            "has_file": has_file  # Return the file flag
         })
         
     except Exception as e:
@@ -251,7 +226,7 @@ def store():
 
 @app.route("/api/fetch/<secret_id>")
 def fetch(secret_id):
-    """Fetch and decrypt secret with analytics - MODIFIED TO HANDLE verify_only"""
+    """Fetch and decrypt secret with analytics - SIMPLIFIED FOR FRONTEND DECRYPTION"""
     try:
         # Check if it's a short link
         if secret_id in SHORT_LINKS:
@@ -272,7 +247,7 @@ def fetch(secret_id):
                     del SHORT_LINKS[short_id]
             return jsonify({"error": "Secret has expired"}), 410
         
-        # CHECK FOR verify_only PARAMETER
+        # Check for verify_only parameter
         verify_only = request.args.get('verify_only', 'false').lower() == 'true'
         
         # Only record access and increment count if NOT verify_only
@@ -283,21 +258,16 @@ def fetch(secret_id):
             # Increment access count
             secret["access_count"] += 1
         
-        # Prepare response
+        # SIMPLIFIED RESPONSE - No separate file handling
         response = {
-            "data": secret["data"],
+            "data": secret["data"],  # Encrypted data (contains message + file)
             "theme": secret.get("theme", "default"),
             "delay_seconds": secret.get("delay_seconds", 0),
             "password_hint": secret.get("password_hint", ""),
+            "has_file": secret.get("has_file", False),  # File flag for frontend
             "access_count": secret["access_count"]
         }
         
-        # Include file data if present
-        if secret.get("file_data"):
-            response["file_data"] = secret["file_data"]
-            response["file_type"] = secret.get("file_type", "unknown")
-            response["file_name"] = secret.get("file_name", "unknown")
-        
         # Handle view-once deletion (only if not verify_only)
         if secret["view_once"] and not verify_only:
             # Delete the secret
@@ -355,7 +325,7 @@ def get_analytics(secret_id):
 
 @app.route("/api/secrets")
 def list_secrets():
-    """List all active secrets (for dashboard)"""
+    """List all active secrets (for dashboard) - UPDATED FOR FRONTEND FILE ENCRYPTION"""
     try:
         current_time = time.time()
         active_secrets = []
@@ -375,11 +345,10 @@ def list_secrets():
                     "created_at": secret["created_at"],
                     "expires_at": secret["expire_at"],
                     "view_once": secret["view_once"],
-                    "has_file": secret.get("file_data") is not None,
-                    "file_type": secret.get("file_type"),
+                    "has_file": secret.get("has_file", False),  # UPDATED: Use file flag
                     "theme": secret.get("theme", "default"),
                     "access_count": secret.get("access_count", 0),
-                    "preview": secret["data"][:100] + "..." if len(secret["data"]) > 100 else secret["data"]
+                    "preview": "Encrypted data"  # UPDATED: Can't preview encrypted data
                 })
         
         return jsonify({
@@ -457,18 +426,16 @@ def get_qr_code(secret_id):
     except Exception as e:
         return jsonify({"error": str(e)}), 500
 
+# 5. UPDATE THE STATS ENDPOINT
 @app.route("/api/stats")
 def get_stats():
-    """Get overall statistics"""
+    """Get overall statistics - UPDATED FOR FRONTEND FILE ENCRYPTION"""
     try:
         total_secrets = len(SECRETS)
         total_accesses = sum(len(analytics) for analytics in ANALYTICS.values())
         
-        # Count by file type
-        file_types = {}
-        for secret in SECRETS.values():
-            file_type = secret.get("file_type", "text")
-            file_types[file_type] = file_types.get(file_type, 0) + 1
+        # Count secrets with files
+        secrets_with_files = sum(1 for secret in SECRETS.values() if secret.get("has_file", False))
         
         # Count by theme
         themes = {}
@@ -479,7 +446,7 @@ def get_stats():
         return jsonify({
             "total_secrets": total_secrets,
             "total_accesses": total_accesses,
-            "file_types": file_types,
+            "secrets_with_files": secrets_with_files,  # UPDATED: File count
             "themes": themes,
             "active_short_links": len(SHORT_LINKS)
         })
@@ -532,6 +499,7 @@ if __name__ == "__main__":
     print("🔐 Sharelock Backend Starting...")
     print("📊 Features enabled:")
     print("   ✅ End-to-end encryption")
+    print("   ✅ Frontend file encryption")
     print("   ✅ File uploads (5MB max)")
     print("   ✅ QR code generation")
     print("   ✅ Analytics tracking")