Update app.py

app.py

@@ -33,7 +33,7 @@ ALLOWED_EXTENSIONS = {
 }
 
 def get_file_type(filename):
-    """Determine file type based on extension"""
+    """Determine file type based on extension - NO CHANGES NEEDED"""
     if not filename:
         return 'unknown'
     
@@ -163,7 +163,7 @@ def index():
 
 @app.route("/api/store", methods=["POST"])
 def store():
-    """Store encrypted secret with enhanced features"""
+    """Store encrypted secret with enhanced encrypted file support"""
     try:
         form = request.form
         data = form.get("data")
@@ -178,32 +178,23 @@ def store():
         theme = form.get("theme", "default")
         password_hint = form.get("password_hint", "")
         
-        # Handle file upload
-        file_data = None
-        file_type = None
-        file_name = None
-        
-        if 'file' in request.files:
-            file = request.files['file']
-            if file and file.filename:
-                # Check file size
-                file.seek(0, os.SEEK_END)
-                file_size = file.tell()
-                file.seek(0)
-                
-                if file_size > MAX_FILE_SIZE:
-                    return jsonify({"error": f"File too large. Max size: {MAX_FILE_SIZE/1024/1024:.1f}MB"}), 400
-                
-                # Process file
-                file_name = secure_filename(file.filename)
-                file_type = get_file_type(file_name)
-                
-                if file_type == 'unknown':
-                    return jsonify({"error": "File type not supported"}), 400
-                
-                # Read and encode file
-                file_content = file.read()
-                file_data = base64.b64encode(file_content).decode('utf-8')
+        # Handle ENCRYPTED file data from frontend
+        encrypted_file = form.get("encrypted_file")  # NEW: Get encrypted file data
+        file_name = form.get("file_name")            # NEW: Get file name
+        file_type = form.get("file_type")            # NEW: Get file type
+        file_size = form.get("file_size")            # NEW: Get original file size
+        
+        # REMOVE the old file handling code that processed raw files
+        # No need to handle 'file' in request.files anymore since frontend sends encrypted data
+        
+        # Validate encrypted file data if present
+        if encrypted_file:
+            if not file_name or not file_type:
+                return jsonify({"error": "File name and type required for encrypted files"}), 400
+            
+            # Optional: Validate file size (encrypted data will be larger due to base64 encoding)
+            if file_size and int(file_size) > MAX_FILE_SIZE:
+                return jsonify({"error": f"File too large. Max size: {MAX_FILE_SIZE/1024/1024:.1f}MB"}), 400
         
         # Generate IDs
         secret_id = str(uuid.uuid4())
@@ -213,12 +204,13 @@ def store():
         while short_id in SHORT_LINKS:
             short_id = generate_short_id()
         
-        # Store secret
+        # Store secret with encrypted file data
         SECRETS[secret_id] = {
             "data": data,
-            "file_data": file_data,
-            "file_type": file_type,
-            "file_name": file_name,
+            "encrypted_file": encrypted_file,        # NEW: Store encrypted file data
+            "file_name": file_name,                  # NEW: Store file name
+            "file_type": file_type,                  # NEW: Store file type
+            "file_size": file_size,                  # NEW: Store original file size
             "expire_at": time.time() + ttl,
             "view_once": view_once,
             "delay_seconds": delay_seconds,
@@ -243,7 +235,7 @@ def store():
             "short_url": f"{base_url}/s/{short_id}",
             "qr_code": qr_code,
             "expires_at": SECRETS[secret_id]["expire_at"],
-            "has_file": file_data is not None
+            "has_file": encrypted_file is not None  # MODIFIED: Check encrypted_file instead
         })
         
     except Exception as e:
@@ -251,7 +243,7 @@ def store():
 
 @app.route("/api/fetch/<secret_id>")
 def fetch(secret_id):
-    """Fetch and decrypt secret with analytics - MODIFIED TO HANDLE verify_only"""
+    """Fetch encrypted secret with encrypted file data"""
     try:
         # Check if it's a short link
         if secret_id in SHORT_LINKS:
@@ -272,7 +264,7 @@ def fetch(secret_id):
                     del SHORT_LINKS[short_id]
             return jsonify({"error": "Secret has expired"}), 410
         
-        # CHECK FOR verify_only PARAMETER
+        # Check for verify_only parameter
         verify_only = request.args.get('verify_only', 'false').lower() == 'true'
         
         # Only record access and increment count if NOT verify_only
@@ -292,11 +284,12 @@ def fetch(secret_id):
             "access_count": secret["access_count"]
         }
         
-        # Include file data if present
-        if secret.get("file_data"):
-            response["file_data"] = secret["file_data"]
-            response["file_type"] = secret.get("file_type", "unknown")
+        # Include ENCRYPTED file data if present
+        if secret.get("encrypted_file"):
+            response["encrypted_file"] = secret["encrypted_file"]  # MODIFIED: Return encrypted file
             response["file_name"] = secret.get("file_name", "unknown")
+            response["file_type"] = secret.get("file_type", "unknown")
+            response["file_size"] = secret.get("file_size")
         
         # Handle view-once deletion (only if not verify_only)
         if secret["view_once"] and not verify_only:
@@ -355,7 +348,7 @@ def get_analytics(secret_id):
 
 @app.route("/api/secrets")
 def list_secrets():
-    """List all active secrets (for dashboard)"""
+    """List all active secrets with encrypted file info"""
     try:
         current_time = time.time()
         active_secrets = []
@@ -375,8 +368,10 @@ def list_secrets():
                     "created_at": secret["created_at"],
                     "expires_at": secret["expire_at"],
                     "view_once": secret["view_once"],
-                    "has_file": secret.get("file_data") is not None,
-                    "file_type": secret.get("file_type"),
+                    "has_file": secret.get("encrypted_file") is not None,  # MODIFIED: Check encrypted_file
+                    "file_name": secret.get("file_name"),                   # NEW: Include file name
+                    "file_type": secret.get("file_type"),                   # MODIFIED: File type from metadata
+                    "file_size": secret.get("file_size"),                   # NEW: Include file size
                     "theme": secret.get("theme", "default"),
                     "access_count": secret.get("access_count", 0),
                     "preview": secret["data"][:100] + "..." if len(secret["data"]) > 100 else secret["data"]
@@ -459,16 +454,19 @@ def get_qr_code(secret_id):
 
 @app.route("/api/stats")
 def get_stats():
-    """Get overall statistics"""
+    """Get overall statistics with encrypted file info"""
     try:
         total_secrets = len(SECRETS)
         total_accesses = sum(len(analytics) for analytics in ANALYTICS.values())
         
-        # Count by file type
+        # Count by file type (now from metadata, not actual files)
         file_types = {}
         for secret in SECRETS.values():
-            file_type = secret.get("file_type", "text")
-            file_types[file_type] = file_types.get(file_type, 0) + 1
+            if secret.get("encrypted_file"):  # MODIFIED: Check for encrypted_file
+                file_type = secret.get("file_type", "unknown")
+                file_types[file_type] = file_types.get(file_type, 0) + 1
+            else:
+                file_types["text"] = file_types.get("text", 0) + 1
         
         # Count by theme
         themes = {}
@@ -481,7 +479,8 @@ def get_stats():
             "total_accesses": total_accesses,
             "file_types": file_types,
             "themes": themes,
-            "active_short_links": len(SHORT_LINKS)
+            "active_short_links": len(SHORT_LINKS),
+            "encrypted_files": sum(1 for secret in SECRETS.values() if secret.get("encrypted_file"))  # NEW
         })
         
     except Exception as e:
@@ -531,8 +530,8 @@ def internal_error(error):
 if __name__ == "__main__":
     print("🔐 Sharelock Backend Starting...")
     print("📊 Features enabled:")
-    print("   ✅ End-to-end encryption")
-    print("   ✅ File uploads (5MB max)")
+    print("   ✅ End-to-end encryption (messages + files)")  # MODIFIED
+    print("   ✅ Client-side file encryption (5MB max)")     # MODIFIED
     print("   ✅ QR code generation")
     print("   ✅ Analytics tracking")
     print("   ✅ Short URLs")
@@ -540,6 +539,7 @@ if __name__ == "__main__":
     print("   ✅ Multiple themes")
     print("   ✅ Password hints")
     print("   ✅ verify_only parameter support")
+    print("   🔒 Files never stored unencrypted on server")  # NEW
     print("🚀 Server running on http://0.0.0.0:7860")
     
     app.run(host="0.0.0.0", port=7860, debug=True)