@brftech/filex-core 0.24.0 → 0.25.0

package/src/lib/shareTtl.ts

@@ -0,0 +1,91 @@
+// The server caps how long a new share link may live (`share_max_ttl_days` in
+// /api/capabilities, set by the admin under Protection; default 7 days). The
+// dialogs read it so they only OFFER expiries the server will honour — a
+// "30 days" option that quietly becomes 7 days is a lie on the screen, and a
+// "Never" option that becomes a week is a worse one.
+//
+// One helper for every surface: the Share / Permissions panel, the standalone
+// share dialog, the desktop app and the embeds all render the same choices
+// from the same rule. A surface that clamps differently would mean the same
+// product behaves two ways.
+
+export interface ExpiryOption {
+  /** Days; 0 = never. */
+  v: number;
+  l: string;
+}
+
+/** The stock expiry choices before the ceiling is applied (days; 0 = never). */
+export const STOCK_EXPIRY_DAYS = [0, 1, 7, 30];
+
+/**
+ * clampExpiryOptions returns the options a dialog may show under a ceiling
+ * of `maxDays` (0/undefined = no ceiling → every option as is). Options past
+ * the ceiling and "never" are dropped; the ceiling itself is added as the
+ * longest choice when the stock list does not already contain it.
+ */
+export function clampExpiryOptions(
+  days: number[],
+  maxDays: number | undefined,
+  label: (days: number) => string,
+): ExpiryOption[] {
+  const max = maxDays && maxDays > 0 ? Math.floor(maxDays) : 0;
+  let list = max ? days.filter((d) => d > 0 && d <= max) : days.slice();
+  if (max && !list.includes(max)) list.push(max);
+  list = Array.from(new Set(list)).sort((a, b) => (a === 0 ? -1 : b === 0 ? 1 : a - b));
+  return list.map((d) => ({ v: d, l: label(d) }));
+}
+
+/**
+ * defaultExpiryDays is what a fresh dialog preselects: the ceiling when there
+ * is one (the server would apply it anyway — showing it up front is honest),
+ * otherwise "never".
+ */
+export function defaultExpiryDays(maxDays: number | undefined): number {
+  return maxDays && maxDays > 0 ? Math.floor(maxDays) : 0;
+}
+
+/**
+ * clampExpiryDate pulls a free-form expiry (datetime input) under the ceiling.
+ * Returns the ISO string to send, or null for "never" when there is no
+ * ceiling. `now` is injectable for tests.
+ */
+export function clampExpiryDate(
+  chosen: Date | null,
+  maxDays: number | undefined,
+  now: Date = new Date(),
+): { iso: string | null; clamped: boolean } {
+  const max = maxDays && maxDays > 0 ? Math.floor(maxDays) : 0;
+  if (!max) return { iso: chosen ? chosen.toISOString() : null, clamped: false };
+  const limit = new Date(now.getTime() + max * 86400000);
+  if (!chosen || chosen.getTime() > limit.getTime()) return { iso: limit.toISOString(), clamped: true };
+  return { iso: chosen.toISOString(), clamped: false };
+}
+
+/** Value for a `<input type="datetime-local" max=…>` under the ceiling (local time, minute precision). */
+export function expiryInputMax(maxDays: number | undefined, now: Date = new Date()): string | undefined {
+  const max = maxDays && maxDays > 0 ? Math.floor(maxDays) : 0;
+  if (!max) return undefined;
+  const limit = new Date(now.getTime() + max * 86400000);
+  const pad = (n: number) => String(n).padStart(2, '0');
+  return `${limit.getFullYear()}-${pad(limit.getMonth() + 1)}-${pad(limit.getDate())}T${pad(limit.getHours())}:${pad(limit.getMinutes())}`;
+}
+
+/** "Valid until 30 Aug 2026, 14:05" / "Does not expire" from the server's `expires_at`. */
+export function validUntilLine(expiresAt: string | null | undefined, locale: 'tr' | 'en'): string {
+  if (!expiresAt) return locale === 'tr' ? 'Bu bağlantının süresi yoktur.' : 'This link does not expire.';
+  const d = new Date(expiresAt);
+  const when = Number.isNaN(d.getTime())
+    ? expiresAt
+    : d.toLocaleString(locale === 'tr' ? 'tr-TR' : 'en-GB', { dateStyle: 'medium', timeStyle: 'short' });
+  return locale === 'tr' ? `Bu bağlantı ${when} tarihine kadar geçerli.` : `This link is valid until ${when}.`;
+}
+
+/** The hint under an expiry control: what the server will allow at most. */
+export function ttlCeilingHint(maxDays: number | undefined, locale: 'tr' | 'en'): string {
+  const max = maxDays && maxDays > 0 ? Math.floor(maxDays) : 0;
+  if (!max) return '';
+  return locale === 'tr'
+    ? `Bağlantılar en fazla ${max} gün geçerli olabilir (sunucu ayarı).`
+    : `Links can be valid for at most ${max} day${max === 1 ? '' : 's'} (server setting).`;
+}

package/src/locales/en.ts

@@ -61,6 +61,8 @@ export const en: Record<string, string> = {
   'modal.share.max_downloads': 'Download limit',
   'modal.share.create': 'Share',
   'modal.share.cancel': 'Cancel',
+  'modal.share.close': 'Close',
+  'modal.share.limit_applied': '(server limit applied)',
   'modal.share.copy': 'Copy',
   'modal.share.url_copied': 'Link copied',
   'modal.share.pin_copied': 'PIN copied',

package/src/locales/tr.ts

@@ -61,6 +61,8 @@ export const tr: Record<string, string> = {
   'modal.share.max_downloads': 'İndirme limiti',
   'modal.share.create': 'Paylaş',
   'modal.share.cancel': 'Vazgeç',
+  'modal.share.close': 'Kapat',
+  'modal.share.limit_applied': '(sunucu sınırı uygulandı)',
   'modal.share.copy': 'Kopyala',
   'modal.share.url_copied': 'Link kopyalandı',
   'modal.share.pin_copied': 'PIN kopyalandı',

package/src/modals/PermissionsModal.vue

@@ -4,10 +4,11 @@
 // from the explorer's unified "Paylaş / İzinler" action. The layout is a fixed
 // header/tabs with a single scrollable body so the popup never grows into one
 // long scroll. Styling uses the SFC's --fe-* theme variables (light/dark).
-import { ref, onMounted, onBeforeUnmount, computed } from 'vue';
+import { ref, onMounted, onBeforeUnmount, computed, watch } from 'vue';
 import type { FileApi, Grant, UserSuggestion } from '../composables/useFileApi';
 import type { ShareInfo } from '../types/FileNode';
 import { shareCliCommand } from '../lib/shareCli';
+import { STOCK_EXPIRY_DAYS, clampExpiryOptions, defaultExpiryDays, ttlCeilingHint, validUntilLine } from '../lib/shareTtl';
 
 const props = defineProps<{
   api: FileApi;
@@ -15,6 +16,9 @@ const props = defineProps<{
   isDir?: boolean; // folder → grants cascade; file → no `/…` inheritance hint
   size?: number; // bytes, for the share-mail body (files only)
   locale?: 'tr' | 'en';
+  /** Server ceiling on a new link's life in days (capabilities.share_max_ttl_days).
+   *  undefined/0 = no ceiling. The expiry choices are derived from it. */
+  shareMaxTtlDays?: number;
 }>();
 const emit = defineEmits<{ (e: 'close'): void }>();
 
@@ -66,8 +70,8 @@ function levelLabel(v: string): string {
 const shares = ref<ShareInfo[]>([]);
 const shareBusy = ref(false);
 const sharePwd = ref(false);
-const shareExpiry = ref(0); // days; 0 = never
-const shareResult = ref<{ url: string; pin?: string | null } | null>(null);
+const shareExpiry = ref(defaultExpiryDays(props.shareMaxTtlDays)); // days; 0 = never
+const shareResult = ref<{ url: string; pin?: string | null; expiresAt?: string | null; clamped?: boolean } | null>(null);
 const shareErr = ref('');
 const copied = ref('');
 // prefilled recipient when the owner chose "share link" for a no-account email
@@ -75,12 +79,25 @@ const shareMailTo = ref('');
 const shareMailBusy = ref(false);
 const shareMailNotice = ref('');
 
-const expiryOptions = [
-  { v: 0, l: L('Süresiz', 'Never') },
-  { v: 1, l: L('1 gün', '1 day') },
-  { v: 7, l: L('7 gün', '7 days') },
-  { v: 30, l: L('30 gün', '30 days') },
-];
+// ⚠ Derived from the server's ceiling, never a fixed list: offering "30 days"
+// on a server that keeps links for 7 would show a choice that is not one.
+// The same helper drives every surface (see lib/shareTtl.ts).
+function expiryLabel(days: number): string {
+  if (days === 0) return L('Süresiz', 'Never');
+  return tr.value ? `${days} gün` : `${days} day${days === 1 ? '' : 's'}`;
+}
+const expiryOptions = computed(() => clampExpiryOptions(STOCK_EXPIRY_DAYS, props.shareMaxTtlDays, expiryLabel));
+const ttlHint = computed(() => ttlCeilingHint(props.shareMaxTtlDays, tr.value ? 'tr' : 'en'));
+watch(
+  () => props.shareMaxTtlDays,
+  () => {
+    // The ceiling can arrive after mount (capabilities load async): snap a
+    // selection the server would not honour back to what it will.
+    const allowed = expiryOptions.value.map((o) => o.v);
+    if (!allowed.includes(shareExpiry.value)) shareExpiry.value = defaultExpiryDays(props.shareMaxTtlDays);
+    if (!allowed.includes(dropExpiry.value)) dropExpiry.value = defaultExpiryDays(props.shareMaxTtlDays);
+  },
+);
 
 // ⚠ The download cap lived in the old standalone ShareModal and was left
 // behind when this panel took over link creation — the server has honoured
@@ -117,7 +134,7 @@ const shareCli = computed(() =>
 
 // ── file-drop (public upload link) state ──
 const dropPwd = ref(false);
-const dropExpiry = ref(0); // days; 0 = never
+const dropExpiry = ref(defaultExpiryDays(props.shareMaxTtlDays)); // days; 0 = never
 const dropShowAdv = ref(false);
 const dropMaxFiles = ref<string>('');
 const dropMaxSizeMB = ref<string>('');
@@ -125,7 +142,7 @@ const dropAllowedExt = ref<string>('');
 const dropAskName = ref(true);
 const dropBusy = ref(false);
 const dropErr = ref('');
-const dropResult = ref<{ url: string; pin?: string | null } | null>(null);
+const dropResult = ref<{ url: string; pin?: string | null; expiresAt?: string | null; clamped?: boolean } | null>(null);
 const dropMailTo = ref('');
 const dropMailBusy = ref(false);
 const dropMailNotice = ref('');
@@ -328,7 +345,12 @@ async function createLink() {
       // null says it explicitly and keeps the payload honest.
       max_downloads: shareMaxDl.value || null,
     });
-    shareResult.value = { url: r.share.url, pin: r.share.password_pin ?? null };
+    shareResult.value = {
+      url: r.share.url,
+      pin: r.share.password_pin ?? null,
+      expiresAt: r.share.expires_at ?? null,
+      clamped: !!r.share.expiry_clamped,
+    };
     await reloadShares();
   } catch (e) {
     shareErr.value = e instanceof Error ? e.message : String(e);
@@ -392,7 +414,12 @@ async function createDropLink() {
       expires_at: dropExpiresAtISO(),
       drop_settings,
     });
-    dropResult.value = { url: r.share.url, pin: r.share.password_pin ?? null };
+    dropResult.value = {
+      url: r.share.url,
+      pin: r.share.password_pin ?? null,
+      expiresAt: r.share.expires_at ?? null,
+      clamped: !!r.share.expiry_clamped,
+    };
   } catch (e) {
     dropErr.value = e instanceof Error ? e.message : String(e);
   } finally {
@@ -464,6 +491,11 @@ function expiryLine(days: number): string {
   if (days > 0) return L(`Bu bağlantı ${days} gün geçerlidir.`, `This link is valid for ${days} day(s).`);
   return L('Bu bağlantının süresi yoktur.', 'This link does not expire.');
 }
+// What the server actually stored — shown under a fresh link so the real
+// expiry is visible even when the server shortened the request.
+function validUntil(r: { expiresAt?: string | null } | null): string {
+  return validUntilLine(r?.expiresAt ?? null, tr.value ? 'tr' : 'en');
+}
 
 // Text + title for a download-share link, mirroring shareMailText().
 function shareBody(): { title: string; text: string } {
@@ -651,7 +683,7 @@ async function nativeShare(body: { title: string; text: string }) {
               </label>
               <label class="fx-perm-field">
                 <span class="fx-perm-muted">{{ L('Süre', 'Expiry') }}</span>
-                <select v-model.number="shareExpiry" class="fx-perm-sel fx-perm-sel--sm">
+                <select v-model.number="shareExpiry" class="fx-perm-sel fx-perm-sel--sm" data-testid="share-expiry">
                   <option v-for="o in expiryOptions" :key="o.v" :value="o.v">{{ o.l }}</option>
                 </select>
               </label>
@@ -662,6 +694,7 @@ async function nativeShare(body: { title: string; text: string }) {
                 </select>
               </label>
             </div>
+            <p v-if="ttlHint" class="fx-perm-hint fx-perm-ttlhint" data-testid="share-ttl-hint">{{ ttlHint }}</p>
             <button class="fx-perm-btn fx-perm-btn--primary fx-perm-create" :disabled="shareBusy" @click="createLink">
               {{ L('Bağlantı oluştur', 'Create link') }}
             </button>
@@ -675,6 +708,10 @@ async function nativeShare(body: { title: string; text: string }) {
                   {{ copied === 'new' ? L('Kopyalandı ✓', 'Copied ✓') : L('Kopyala', 'Copy') }}
                 </button>
               </div>
+              <div class="fx-perm-muted fx-perm-validuntil" data-testid="share-valid-until">
+                {{ validUntil(shareResult) }}
+                <span v-if="shareResult.clamped">{{ L('(sunucu sınırı uygulandı)', '(server limit applied)') }}</span>
+              </div>
               <div v-if="shareResult.pin" class="fx-perm-pin">
                 <span>PIN: <code>{{ shareResult.pin }}</code></span>
                 <button class="fx-perm-btn fx-perm-btn--sm" @click="copy(shareResult.pin, 'sharepin')">
@@ -740,11 +777,12 @@ async function nativeShare(body: { title: string; text: string }) {
               </label>
               <label class="fx-perm-field">
                 <span class="fx-perm-muted">{{ L('Süre', 'Expiry') }}</span>
-                <select v-model.number="dropExpiry" class="fx-perm-sel fx-perm-sel--sm">
+                <select v-model.number="dropExpiry" class="fx-perm-sel fx-perm-sel--sm" data-testid="drop-expiry">
                   <option v-for="o in expiryOptions" :key="o.v" :value="o.v">{{ o.l }}</option>
                 </select>
               </label>
             </div>
+            <p v-if="ttlHint" class="fx-perm-hint fx-perm-ttlhint">{{ ttlHint }}</p>
             <button class="fx-perm-btn fx-perm-btn--primary fx-perm-create" :disabled="dropBusy" @click="createDropLink">
               {{ L('Bağlantı oluştur', 'Create link') }}
             </button>
@@ -780,6 +818,10 @@ async function nativeShare(body: { title: string; text: string }) {
                   {{ copied === 'drop' ? L('Kopyalandı ✓', 'Copied ✓') : L('Kopyala', 'Copy') }}
                 </button>
               </div>
+              <div class="fx-perm-muted fx-perm-validuntil">
+                {{ validUntil(dropResult) }}
+                <span v-if="dropResult.clamped">{{ L('(sunucu sınırı uygulandı)', '(server limit applied)') }}</span>
+              </div>
               <div v-if="dropResult.pin" class="fx-perm-pin">
                 <span>PIN: <code>{{ dropResult.pin }}</code></span>
                 <button class="fx-perm-btn fx-perm-btn--sm" @click="copy(dropResult.pin, 'droppin')">
@@ -966,6 +1008,8 @@ async function nativeShare(body: { title: string; text: string }) {
 .fx-perm-mailrow { display: flex; gap: 8px; margin-top: 10px; }
 .fx-perm-mailrow .fx-perm-input { flex: 1; }
 .fx-perm-hint { font-size: 13px; color: var(--fe-text-muted); margin: 10px 0 0; }
+.fx-perm-ttlhint { margin: 4px 0 8px; }
+.fx-perm-validuntil { margin: 4px 0 6px; }
 /* native "Paylaş" button — sits under the mail row, full width */
 .fx-perm-sharebtn { display: flex; width: 100%; align-items: center; justify-content: center; gap: 6px; margin-top: 8px; }
 

package/src/modals/ShareModal.vue

@@ -4,12 +4,15 @@ import type { LocaleCode } from '../types/ExplorerConfig';
 import type { ShareInfo } from '../types/FileNode';
 import { useLocale } from '../composables/useLocale';
 import { shareCliCommand } from '../lib/shareCli';
+import { clampExpiryDate, expiryInputMax, ttlCeilingHint, validUntilLine } from '../lib/shareTtl';
 import Modal from './Modal.vue';
 
 const props = defineProps<{
   open: boolean;
   locale: LocaleCode;
   share?: (ShareInfo & { url: string; filename?: string }) | null;
+  /** Server ceiling on a new link's life in days (0/undefined = none). */
+  shareMaxTtlDays?: number;
 }>();
 
 const emit = defineEmits<{
@@ -35,10 +38,21 @@ watch(() => props.open, (v) => {
   }
 });
 
+// The picker is capped at the server's ceiling and the value is clamped once
+// more on submit — the server clamps too, but asking for a date it will
+// refuse is how the user ends up with a link that says one thing and does
+// another.
+const expiryMax = computed(() => expiryInputMax(props.shareMaxTtlDays));
+const ttlHint = computed(() => ttlCeilingHint(props.shareMaxTtlDays, props.locale === 'tr' ? 'tr' : 'en'));
+const validUntil = computed(() =>
+  props.share ? validUntilLine(props.share.expires_at ?? null, props.locale === 'tr' ? 'tr' : 'en') : '',
+);
+
 function submit() {
+  const chosen = expiresAt.value ? new Date(expiresAt.value) : null;
   emit('submit', {
     password: usePin.value,
-    expires_at: expiresAt.value ? new Date(expiresAt.value).toISOString() : null,
+    expires_at: clampExpiryDate(chosen, props.shareMaxTtlDays).iso,
     max_downloads: maxDownloads.value ? Number(maxDownloads.value) : null,
   });
 }
@@ -70,7 +84,8 @@ const cliCommand = computed(() =>
         </label>
         <label class="fe-form__row fe-form__row--stack">
           <span>{{ t('modal.share.expires') }}</span>
-          <input v-model="expiresAt" type="datetime-local" class="fe-input" />
+          <input v-model="expiresAt" type="datetime-local" class="fe-input" :max="expiryMax" />
+          <small v-if="ttlHint" class="fe-form__hint">{{ ttlHint }}</small>
         </label>
         <label class="fe-form__row fe-form__row--stack">
           <span>{{ t('modal.share.max_downloads') }}</span>
@@ -80,6 +95,9 @@ const cliCommand = computed(() =>
     </template>
     <template v-else>
       <div class="fe-share-result">
+        <div class="fe-share-result__row fe-share-result__row--note">
+          <small>{{ validUntil }}<template v-if="share.expiry_clamped"> {{ t('modal.share.limit_applied') }}</template></small>
+        </div>
         <div class="fe-share-result__row">
           <label>Link</label>
           <div class="fe-share-result__copy">
@@ -111,7 +129,7 @@ const cliCommand = computed(() =>
     </template>
     <template #actions>
       <button type="button" class="fe-btn" @click="emit('close')">
-        {{ share ? 'Kapat' : t('modal.share.cancel') }}
+        {{ share ? t('modal.share.close') : t('modal.share.cancel') }}
       </button>
       <button v-if="!share" type="button" class="fe-btn fe-btn--primary" @click="submit">
         {{ t('modal.share.create') }}

package/src/styles/base.css

@@ -1128,6 +1128,8 @@ filex-explorer {
   flex-direction: column;
   align-items: stretch;
 }
+.fe-form__hint { font-size: 12px; color: var(--fe-text-muted); }
+.fe-share-result__row--note small { color: var(--fe-text-muted); }
 .fe-form__error {
   color: var(--fe-danger);
   font-size: 12px;

package/src/types/FileNode.ts

@@ -54,6 +54,9 @@ export interface ShareInfo {
   url: string;
   password_pin?: string | null;
   expires_at?: string | null;
+  /** True when the server shortened (or set) the expiry to honour its
+   *  max-TTL setting — the UI then shows the real date, not the request. */
+  expiry_clamped?: boolean;
   max_downloads?: number | null;
   downloads?: number;
   created_at?: string;
@@ -82,6 +85,9 @@ export interface Capabilities {
   convert_url?: string | null;
   max_chunk_mb?: number;
   upload_limit_mb?: number;
+  /** Longest life a new share link may be given, in days (0 = no ceiling).
+   *  Read by the share dialogs so they offer only expiries the server keeps. */
+  share_max_ttl_days?: number;
   external?: {
     onlyoffice?: ExternalServiceStatus;
     drawio?: ExternalServiceStatus;