altcha 2.2.2 → 2.2.4

package/dist_plugins/upload.umd.cjs

@@ -1,4 +1,4 @@
-(function(c,a){typeof exports=="object"&&typeof module<"u"?a(exports):typeof define=="function"&&define.amd?define(["exports"],a):(c=typeof globalThis<"u"?globalThis:c||self,a(c["[name]"]={}))})(this,function(c){"use strict";var ge=Object.defineProperty;var _=c=>{throw TypeError(c)};var we=(c,a,u)=>a in c?ge(c,a,{enumerable:!0,configurable:!0,writable:!0,value:u}):c[a]=u;var y=(c,a,u)=>we(c,typeof a!="symbol"?a+"":a,u),R=(c,a,u)=>a.has(c)||_("Cannot "+u);var E=(c,a,u)=>(R(c,a,"read from private field"),u?u.call(c):a.get(c)),P=(c,a,u)=>a.has(c)?_("Cannot add the same private member more than once"):a instanceof WeakSet?a.add(c):a.set(c,u);var h=(c,a,u)=>(R(c,a,"access private method"),u);var w,b,l,k,H,O,v,q,M,$,S,B,G,Y;const a={generateKey:u,exportKey:D,importKey:V,decrypt:X,encrypt:J};async function u(t=256){return crypto.subtle.generateKey({name:"AES-GCM",length:t},!0,["encrypt","decrypt"])}async function D(t){return new Uint8Array(await crypto.subtle.exportKey("raw",t))}async function V(t){return crypto.subtle.importKey("raw",t,{name:"AES-GCM"},!0,["encrypt","decrypt"])}async function J(t,i,e=16){const r=crypto.getRandomValues(new Uint8Array(e));return{encrypted:new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:r},t,i)),iv:r}}async function X(t,i,e){return new Uint8Array(await crypto.subtle.decrypt({name:"AES-GCM",iv:e},t,i))}function Q(t,i=!1){return i&&(t=t.replace(/_/g,"/").replace(/-/g,"+")+"=".repeat(3-(3+t.length)%4)),Uint8Array.from(atob(t),e=>e.charCodeAt(0))}function x(t,i=!1){const e=btoa(String.fromCharCode(...t));return i?e.replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""):e}function L(t,i=80){let e="";for(;t.length>0;)e+=t.slice(0,i)+`
-`,t=t.slice(i);return e}function C(t){return Q(t.split(/\r?\n/).filter(i=>!i.startsWith("-----")).join(""))}const m="RSA-OAEP",U="SHA-256",W=2048,Z=new Uint8Array([1,0,1]),ee={generateKeyPair:te,encrypt:ne,decrypt:re,exportPrivateKey:I,exportPrivateKeyPem:se,exportPublicKey:A,exportPublicKeyPem:ie,exportPublicKeyFromPrivateKey:ae,importPrivateKey:z,importPrivateKeyPem:oe,importPublicKey:T,importPublicKeyPem:N};async function te(){return crypto.subtle.generateKey({name:m,modulusLength:W,publicExponent:Z,hash:U},!0,["encrypt","decrypt"])}async function ne(t,i){return new Uint8Array(await crypto.subtle.encrypt({name:m},t,i))}async function re(t,i){return new Uint8Array(await crypto.subtle.decrypt({name:m},t,i))}async function A(t){return new Uint8Array(await crypto.subtle.exportKey("spki",t))}async function I(t){return new Uint8Array(await crypto.subtle.exportKey("pkcs8",t))}async function ie(t){return`-----BEGIN PUBLIC KEY-----
-`+L(x(await A(t)),64)+"-----END PUBLIC KEY-----"}async function se(t){return`-----BEGIN PRIVATE KEY-----
-`+L(x(await I(t)),64)+"-----END PRIVATE KEY-----"}async function T(t){return crypto.subtle.importKey("spki",t,{name:m,hash:U},!0,["encrypt"])}async function N(t){return T(C(t))}async function z(t){return crypto.subtle.importKey("pkcs8",t,{name:m,hash:U},!0,["decrypt"])}async function oe(t){return z(C(t))}async function ae(t){const i=await crypto.subtle.exportKey("jwk",t);delete i.d,delete i.dp,delete i.dq,delete i.q,delete i.qi,i.key_ops=["encrypt"];const e=await crypto.subtle.importKey("jwk",i,{name:m,hash:U},!0,["encrypt"]);return A(e)}const ce=new Uint8Array([1,0,1]),le=256,pe=16;async function ue(t,i,e={}){const{aesIVLength:r=pe,aesKeyLength:n=le}=e,o=await a.generateKey(n),{encrypted:p,iv:s}=await a.encrypt(o,i,r),d=await ee.encrypt(t,await a.exportKey(o));return new Uint8Array([...ce,...new Uint8Array([d.length]),...new Uint8Array([s.length]),...d,...s,...p])}class F{constructor(i){this.context=i}static register(i){typeof globalThis.altchaPlugins!="object"&&(globalThis.altchaPlugins=[]),globalThis.altchaPlugins.includes(i)||globalThis.altchaPlugins.push(i)}destroy(){}onErrorChange(i){}onStateChange(i){}}y(F,"pluginName");class K extends F{constructor(e){super(e);P(this,l);y(this,"pendingFiles",[]);y(this,"uploadHandles",[]);y(this,"elForm");P(this,w,h(this,l,M).bind(this));P(this,b,h(this,l,$).bind(this));this.elForm=this.context.el.closest("form"),this.elForm&&(this.elForm.addEventListener("change",E(this,w)),this.elForm.addEventListener("submit",E(this,b),{capture:!0}))}addFile(e,r){this.pendingFiles.find(([n,o])=>n===e&&o===r)||this.pendingFiles.push([e,r])}destroy(){this.elForm&&(this.elForm.removeEventListener("change",E(this,w)),this.elForm.removeEventListener("submit",E(this,b)))}async uploadPendingFiles(){var r;const e=async()=>{const n=this.pendingFiles[0];if(n&&await h(this,l,S).call(this,h(this,l,H).call(this,n)),this.pendingFiles.length)return e()};try{await e()}catch(n){return this.context.log("upload failed",n),this.context.dispatch("uploaderror",{error:n}),!1}this.pendingFiles.length===0&&(h(this,l,k).call(this),(r=this.elForm)==null||r.requestSubmit())}}w=new WeakMap,b=new WeakMap,l=new WeakSet,k=function(){var r,n,o;const e=this.uploadHandles.reduce((p,s)=>(p[s.fieldName]||(p[s.fieldName]=[]),s.fileId&&p[s.fieldName].push(s.fileId),p),{});for(const p in e){const s=document.createElement("input");s.name=p,s.type="hidden",s.value=e[p].join(","),(n=(r=this.elForm)==null?void 0:r.querySelector(`[name="${p}"]`))==null||n.setAttribute("disabled","disabled"),(o=this.elForm)==null||o.appendChild(s)}},H=function(e){const r=this.pendingFiles.findIndex(([o,p])=>o===e[0]&&p===e[1]);if(r<0)throw new Error("Cannot create upload handle.");const n=new de(e[0],e[1]);return this.uploadHandles.push(n),this.pendingFiles.splice(r,1),h(this,l,O).call(this,n),h(this,l,v).call(this),n},O=function(e){this.context.dispatch("upload",{handle:e})},v=function(){const e=this.pendingFiles.reduce((n,[o,p])=>n+p.size,0)+this.uploadHandles.reduce((n,{uploadSize:o})=>n+o,0),r=this.uploadHandles.reduce((n,{loaded:o})=>n+o,0);this.context.dispatch("uploadprogress",{bytesLoaded:r,bytesTotal:e,pendingFiles:this.pendingFiles,uploadHandles:this.uploadHandles})},q=function(){if(this.elForm){const e=this.elForm.getAttribute("action"),r=this.elForm.getAttribute("data-upload-url");if(r)return r;const n=new URL(e||location.origin);return n.pathname=n.pathname+"/file",n.toString()}return null},M=function(e){const r=e.target;if(r&&r.type==="file"){const n=r.files;if(n!=null&&n.length)for(const o of n)this.addFile(r.name,o)}},$=function(e){const r=e.target;r!=null&&r.hasAttribute("data-code-challenge-form")||this.pendingFiles.length&&(e.preventDefault(),e.stopPropagation(),this.uploadPendingFiles())},S=async function(e,r){const n=h(this,l,q).call(this);if(!n)throw new Error("Upload url not specified.");const o={"content-type":"application/json"};r&&(o.authorization="Altcha payload="+r);const p=await fetch(n,{body:JSON.stringify({name:e.file.name||"file",size:e.file.size,type:e.file.type||"application/octet-stream"}),credentials:"include",headers:o,method:"POST"});if(p.status===401)return h(this,l,B).call(this,p,e);if(p.status!==200)throw new Error(`Unexpected server response ${p.status}.`);const s=await p.json();let d=e.file;if(s.encrypted&&s.encryptionPublicKey){const f=await N(s.encryptionPublicKey),ye=await new Response(new ReadableStream({async start(j){const he=e.file.stream().getReader();for(;;){const{done:fe,value:me}=await he.read();if(fe)break;j.enqueue(me)}j.close()}})).arrayBuffer();d=await ue(f,new Uint8Array(ye))}return e.uploadSize=d instanceof Uint8Array?d.byteLength:e.file.size,await h(this,l,Y).call(this,s.uploadUrl,e,d,{"content-type":e.file.type||"application/octet-stream"}),s.finalizeUrl&&await h(this,l,G).call(this,s.finalizeUrl,e.uploadSize),e.fileId=s.fileId,e.resolve({encrypted:s.encrypted,fileId:s.fileId}),e.promise},B=async function(e,r){var n;try{const o=e.headers.get("www-authenticate"),p=(n=o==null?void 0:o.match(/challenge=(.*),/))==null?void 0:n[1];if(!p)throw new Error("Unable to retrieve altcha challenge from www-authenticate header.");const s=JSON.parse(p);if(s&&"challenge"in s){const{solution:d}=await this.context.solve(s);if(d&&"number"in d)return h(this,l,S).call(this,r,btoa(JSON.stringify({...s,number:d.number})));throw new Error("Invalid challenge solution.")}}catch(o){throw this.context.log(o),new Error("Unable to solve altcha challenge for upload.")}},G=async function(e,r){const n=await fetch(e,{body:JSON.stringify({uploadedBytes:r}),headers:{"content-type":"application/json"},method:"POST"});if(n.status>204)throw new Error(`Unexpected server response ${n.status}.`);return!0},Y=async function(e,r,n,o={}){var p;return e=new URL(e,((p=this.elForm)==null?void 0:p.getAttribute("action"))||location.origin).toString(),new Promise((s,d)=>{const f=new XMLHttpRequest;r.controller.signal.addEventListener("abort",()=>{f.abort()}),f.upload.addEventListener("progress",g=>{r.setProgress(g.loaded),h(this,l,v).call(this)}),f.addEventListener("error",g=>{d(new Error("Upload failed."))}),f.addEventListener("load",()=>{f.status>=400?d(new Error(`Server responded with ${f.status}`)):s(void 0)}),f.open("PUT",e);for(const g in o)f.setRequestHeader(g,o[g]);f.send(n)})},y(K,"pluginName","upload");class de{constructor(i,e){y(this,"controller",new AbortController);y(this,"promise");y(this,"fileId");y(this,"loaded",0);y(this,"progress",0);y(this,"uploadSize",0);y(this,"resolve");y(this,"reject");this.fieldName=i,this.file=e,this.uploadSize=this.file.size,this.promise=new Promise((r,n)=>{this.resolve=r,this.reject=n})}abort(){this.controller.abort()}setProgress(i){this.loaded=i,this.progress=this.file.size&&i?Math.min(1,i/this.file.size):0}}F.register(K),c.PluginUpload=K,Object.defineProperty(c,Symbol.toStringTag,{value:"Module"})});
+(function(p,l){typeof exports=="object"&&typeof module<"u"?l(exports):typeof define=="function"&&define.amd?define(["exports"],l):(p=typeof globalThis<"u"?globalThis:p||self,l(p["[name]"]={}))})(this,function(p){"use strict";const l={generateKey:F,exportKey:K,importKey:v,decrypt:x,encrypt:S};async function F(n=256){return crypto.subtle.generateKey({name:"AES-GCM",length:n},!0,["encrypt","decrypt"])}async function K(n){return new Uint8Array(await crypto.subtle.exportKey("raw",n))}async function v(n){return crypto.subtle.importKey("raw",n,{name:"AES-GCM"},!0,["encrypt","decrypt"])}async function S(n,e,t=16){const r=crypto.getRandomValues(new Uint8Array(t));return{encrypted:new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:r},n,e)),iv:r}}async function x(n,e,t){return new Uint8Array(await crypto.subtle.decrypt({name:"AES-GCM",iv:t},n,e))}function L(n,e=!1){return e&&(n=n.replace(/_/g,"/").replace(/-/g,"+")+"=".repeat(3-(3+n.length)%4)),Uint8Array.from(atob(n),t=>t.charCodeAt(0))}function h(n,e=!1){const t=btoa(String.fromCharCode(...n));return e?t.replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""):t}function f(n,e=80){let t="";for(;n.length>0;)t+=n.slice(0,e)+`
+`,n=n.slice(e);return t}function m(n){return L(n.split(/\r?\n/).filter(e=>!e.startsWith("-----")).join(""))}const u="RSA-OAEP",d="SHA-256",C=2048,I=new Uint8Array([1,0,1]),T={generateKeyPair:N,encrypt:z,decrypt:j,exportPrivateKey:g,exportPrivateKeyPem:R,exportPublicKey:y,exportPublicKeyPem:_,exportPublicKeyFromPrivateKey:H,importPrivateKey:E,importPrivateKeyPem:k,importPublicKey:w,importPublicKeyPem:b};async function N(){return crypto.subtle.generateKey({name:u,modulusLength:C,publicExponent:I,hash:d},!0,["encrypt","decrypt"])}async function z(n,e){return new Uint8Array(await crypto.subtle.encrypt({name:u},n,e))}async function j(n,e){return new Uint8Array(await crypto.subtle.decrypt({name:u},n,e))}async function y(n){return new Uint8Array(await crypto.subtle.exportKey("spki",n))}async function g(n){return new Uint8Array(await crypto.subtle.exportKey("pkcs8",n))}async function _(n){return`-----BEGIN PUBLIC KEY-----
+`+f(h(await y(n)),64)+"-----END PUBLIC KEY-----"}async function R(n){return`-----BEGIN PRIVATE KEY-----
+`+f(h(await g(n)),64)+"-----END PRIVATE KEY-----"}async function w(n){return crypto.subtle.importKey("spki",n,{name:u,hash:d},!0,["encrypt"])}async function b(n){return w(m(n))}async function E(n){return crypto.subtle.importKey("pkcs8",n,{name:u,hash:d},!0,["decrypt"])}async function k(n){return E(m(n))}async function H(n){const e=await crypto.subtle.exportKey("jwk",n);delete e.d,delete e.dp,delete e.dq,delete e.q,delete e.qi,e.key_ops=["encrypt"];const t=await crypto.subtle.importKey("jwk",e,{name:u,hash:d},!0,["encrypt"]);return y(t)}const O=new Uint8Array([1,0,1]),q=256,M=16;async function $(n,e,t={}){const{aesIVLength:r=M,aesKeyLength:i=q}=t,s=await l.generateKey(i),{encrypted:o,iv:a}=await l.encrypt(s,e,r),c=await T.encrypt(n,await l.exportKey(s));return new Uint8Array([...O,...new Uint8Array([c.length]),...new Uint8Array([a.length]),...c,...a,...o])}class P{constructor(e){this.context=e}static pluginName;static register(e){typeof globalThis.altchaPlugins!="object"&&(globalThis.altchaPlugins=[]),globalThis.altchaPlugins.includes(e)||globalThis.altchaPlugins.push(e)}destroy(){}onErrorChange(e){}onStateChange(e){}}class U extends P{static pluginName="upload";pendingFiles=[];uploadHandles=[];elForm;#e=this.#c.bind(this);#t=this.#l.bind(this);constructor(e){super(e),this.elForm=this.context.el.closest("form"),this.elForm&&(this.elForm.addEventListener("change",this.#e),this.elForm.addEventListener("submit",this.#t,{capture:!0}))}addFile(e,t){this.pendingFiles.find(([r,i])=>r===e&&i===t)||this.pendingFiles.push([e,t])}destroy(){this.elForm&&(this.elForm.removeEventListener("change",this.#e),this.elForm.removeEventListener("submit",this.#t))}async uploadPendingFiles(){const e=async()=>{const t=this.pendingFiles[0];if(t&&await this.#r(this.#s(t)),this.pendingFiles.length)return e()};try{await e()}catch(t){return this.context.log("upload failed",t),this.context.dispatch("uploaderror",{error:t}),!1}this.pendingFiles.length===0&&(this.#i(),this.elForm?.requestSubmit())}#i(){const e=this.uploadHandles.reduce((t,r)=>(t[r.fieldName]||(t[r.fieldName]=[]),r.fileId&&t[r.fieldName].push(r.fileId),t),{});for(const t in e){const r=document.createElement("input");r.name=t,r.type="hidden",r.value=e[t].join(","),this.elForm?.querySelector(`[name="${t}"]`)?.setAttribute("disabled","disabled"),this.elForm?.appendChild(r)}}#s(e){const t=this.pendingFiles.findIndex(([i,s])=>i===e[0]&&s===e[1]);if(t<0)throw new Error("Cannot create upload handle.");const r=new B(e[0],e[1]);return this.uploadHandles.push(r),this.pendingFiles.splice(t,1),this.#o(r),this.#n(),r}#o(e){this.context.dispatch("upload",{handle:e})}#n(){const e=this.pendingFiles.reduce((r,[i,s])=>r+s.size,0)+this.uploadHandles.reduce((r,{uploadSize:i})=>r+i,0),t=this.uploadHandles.reduce((r,{loaded:i})=>r+i,0);this.context.dispatch("uploadprogress",{bytesLoaded:t,bytesTotal:e,pendingFiles:this.pendingFiles,uploadHandles:this.uploadHandles})}#a(){if(this.elForm){const e=this.elForm.getAttribute("action"),t=this.elForm.getAttribute("data-upload-url");if(t)return t;const r=new URL(e||location.origin);return r.pathname=r.pathname+"/file",r.toString()}return null}#c(e){const t=e.target;if(t&&t.type==="file"){const r=t.files;if(r?.length)for(const i of r)this.addFile(t.name,i)}}#l(e){e.target?.hasAttribute("data-code-challenge-form")||this.pendingFiles.length&&(e.preventDefault(),e.stopPropagation(),this.uploadPendingFiles())}async#r(e,t){const r=this.#a();if(!r)throw new Error("Upload url not specified.");const i={"content-type":"application/json"};t&&(i.authorization="Altcha payload="+t);const s=await fetch(r,{body:JSON.stringify({name:e.file.name||"file",size:e.file.size,type:e.file.type||"application/octet-stream"}),credentials:"include",headers:i,method:"POST"});if(s.status===401)return this.#p(s,e);if(s.status!==200)throw new Error(`Unexpected server response ${s.status}.`);const o=await s.json();let a=e.file;if(o.encrypted&&o.encryptionPublicKey){const c=await b(o.encryptionPublicKey),G=await new Response(new ReadableStream({async start(A){const Y=e.file.stream().getReader();for(;;){const{done:D,value:V}=await Y.read();if(D)break;A.enqueue(V)}A.close()}})).arrayBuffer();a=await $(c,new Uint8Array(G))}return e.uploadSize=a instanceof Uint8Array?a.byteLength:e.file.size,await this.#d(o.uploadUrl,e,a,{"content-type":e.file.type||"application/octet-stream"}),o.finalizeUrl&&await this.#u(o.finalizeUrl,e.uploadSize),e.fileId=o.fileId,e.resolve({encrypted:o.encrypted,fileId:o.fileId}),e.promise}async#p(e,t){try{const i=e.headers.get("www-authenticate")?.match(/challenge=(.*),/)?.[1];if(!i)throw new Error("Unable to retrieve altcha challenge from www-authenticate header.");const s=JSON.parse(i);if(s&&"challenge"in s){const{solution:o}=await this.context.solve(s);if(o&&"number"in o)return this.#r(t,btoa(JSON.stringify({...s,number:o.number})));throw new Error("Invalid challenge solution.")}}catch(r){throw this.context.log(r),new Error("Unable to solve altcha challenge for upload.")}}async#u(e,t){const r=await fetch(e,{body:JSON.stringify({uploadedBytes:t}),headers:{"content-type":"application/json"},method:"POST"});if(r.status>204)throw new Error(`Unexpected server response ${r.status}.`);return!0}async#d(e,t,r,i={}){return e=new URL(e,this.elForm?.getAttribute("action")||location.origin).toString(),new Promise((s,o)=>{const a=new XMLHttpRequest;t.controller.signal.addEventListener("abort",()=>{a.abort()}),a.upload.addEventListener("progress",c=>{t.setProgress(c.loaded),this.#n()}),a.addEventListener("error",c=>{o(new Error("Upload failed."))}),a.addEventListener("load",()=>{a.status>=400?o(new Error(`Server responded with ${a.status}`)):s(void 0)}),a.open("PUT",e);for(const c in i)a.setRequestHeader(c,i[c]);a.send(r)})}}class B{constructor(e,t){this.fieldName=e,this.file=t,this.uploadSize=this.file.size,this.promise=new Promise((r,i)=>{this.resolve=r,this.reject=i})}controller=new AbortController;promise;fileId;loaded=0;progress=0;uploadSize=0;resolve;reject;abort(){this.controller.abort()}setProgress(e){this.loaded=e,this.progress=this.file.size&&e?Math.min(1,e/this.file.size):0}}P.register(U),p.PluginUpload=U,Object.defineProperty(p,Symbol.toStringTag,{value:"Module"})});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "altcha",
   "description": "Privacy-first CAPTCHA widget, compliant with global regulations (GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL) and WCAG accessible. No tracking, self-verifying.",
-  "version": "2.2.2",
+  "version": "2.2.4",
   "license": "MIT",
   "author": {
     "name": "Daniel Regeci",
@@ -96,11 +96,11 @@
     "prepare": "husky"
   },
   "devDependencies": {
-    "@sveltejs/vite-plugin-svelte": "^5.0.3",
+    "@sveltejs/vite-plugin-svelte": "^6.2.1",
     "@tsconfig/svelte": "^5.0.4",
     "@types/csso": "^5.0.4",
     "@types/node": "^20.16.3",
-    "@types/react": "^19.0.12",
+    "@types/react": "^19.1.14",
     "csso": "^5.0.5",
     "husky": "^9.1.5",
     "prettier": "3.2.5",
@@ -112,7 +112,7 @@
     "testcafe": "^3.7.2",
     "tslib": "^2.7.0",
     "typescript": "^5.5.4",
-    "vite": "^6.3.5",
+    "vite": "^7.1.7",
     "vite-plugin-string": "^1.2.3",
     "vitest": "^3.0.8"
   },
@@ -121,5 +121,8 @@
   },
   "optionalDependencies": {
     "@rollup/rollup-linux-x64-gnu": "4.18.0"
+  },
+  "overrides": {
+    "tmp": "0.2.5"
   }
 }