qr-secure-send 1.4.0 → 1.5.0

package/index.html

@@ -124,6 +124,7 @@
   <header>
     <h1>QR Secure Send</h1>
     <p>Encrypt and transfer secrets via QR code</p>
+    <p style="font-size:0.7rem;color:#484f58;margin-top:0.2rem">v1.5.0</p>
   </header>
 
   <div class="tabs">
@@ -168,7 +169,9 @@
       <div class="btn-row">
         <button class="primary" id="scan-btn">Start Camera</button>
         <button class="secondary" id="stop-btn" style="display:none">Stop</button>
+        <button class="primary" id="decrypt-btn" style="display:none">Decrypt</button>
       </div>
+      <div id="link-notice" class="info" style="display:none">Encrypted data received via link. Enter the passphrase and click Decrypt.</div>
       <div id="recv-error" class="error"></div>
       <div id="compat-warning" class="warning" style="display:none"></div>
     </div>
@@ -356,7 +359,7 @@
     // -- QR matrix construction --
 
     const ALIGNMENT_POSITIONS = [
-      null,[],[], [6,22],[6,26],[6,30],[6,34],
+      null,[],[6,18], [6,22],[6,26],[6,30],[6,34],
       [6,22,38],[6,24,42],[6,26,46],[6,28,50],[6,30,54],[6,32,58],
       [6,34,62],[6,26,46,66],[6,26,48,70],[6,26,50,74],[6,30,54,78],
       [6,30,56,82],[6,30,58,86],[6,34,62,90],[6,28,50,72,94],
@@ -621,15 +624,15 @@
       ];
       for (let i = 0; i < 15; i++) {
         const [r, c] = positions1[i];
-        matrix[r][c] = ((bits >> (14 - i)) & 1) ? 1 : 2;
+        matrix[r][c] = ((bits >> i) & 1) ? 1 : 2;
       }
 
-      // Bottom-left and top-right
+      // Bottom-left and top-right (opposite bit order from first copy)
       for (let i = 0; i < 7; i++) {
-        matrix[size - 1 - i][8] = ((bits >> i) & 1) ? 1 : 2;
+        matrix[size - 1 - i][8] = ((bits >> (14 - i)) & 1) ? 1 : 2;
       }
       for (let i = 7; i < 15; i++) {
-        matrix[8][size - 15 + i] = ((bits >> i) & 1) ? 1 : 2;
+        matrix[8][size - 15 + i] = ((bits >> (14 - i)) & 1) ? 1 : 2;
       }
     }
 
@@ -905,6 +908,22 @@
   }
 
 
+  // =========================================================================
+  // PAYLOAD HELPERS
+  // =========================================================================
+
+  const GH_PAGES_URL = "https://degenddy.github.io/qr-secure-send/";
+
+  // Extract the base64 encrypted data from either raw "QRSEC:..." or a URL with "#QRSEC:..."
+  function extractPayload(text) {
+    if (text.startsWith("QRSEC:")) return text.slice(6);
+    try {
+      const hash = new URL(text).hash;
+      if (hash.startsWith("#QRSEC:")) return hash.slice(7);
+    } catch (_) {}
+    return null;
+  }
+
   // =========================================================================
   // UI LOGIC
   // =========================================================================
@@ -950,10 +969,10 @@
 
     try {
       const encrypted = await encryptSecret(secret, passphrase);
-      const payload = "QRSEC:" + encrypted;
+      const payload = GH_PAGES_URL + "#QRSEC:" + encrypted;
 
       if (payload.length > 2953) {
-        errEl.textContent = "Secret is too long for a QR code. Keep it under ~2000 characters.";
+        errEl.textContent = "Secret is too long for a QR code. Keep it under ~1950 characters.";
         return;
       }
 
@@ -991,12 +1010,13 @@
     const started = await QRScan.start(
       region,
       async (decodedText) => {
-        if (!decodedText.startsWith("QRSEC:")) {
+        const encrypted = extractPayload(decodedText);
+        if (!encrypted) {
           errEl.textContent = "Not a QR Secure Send code.";
           return false; // keep scanning
         }
         try {
-          const secret = await decryptSecret(decodedText.slice(6), passphrase);
+          const secret = await decryptSecret(encrypted, passphrase);
           document.getElementById("recv-value").textContent = secret;
           resultBox.style.display = "block";
           errEl.textContent = "";
@@ -1028,6 +1048,41 @@
     document.getElementById("stop-btn").style.display = "none";
   });
 
+  // Decrypt button (for link-based flow)
+  document.getElementById("decrypt-btn").addEventListener("click", async () => {
+    const passphrase = document.getElementById("recv-passphrase").value;
+    const errEl = document.getElementById("recv-error");
+    const resultBox = document.getElementById("recv-result");
+    errEl.textContent = "";
+    resultBox.style.display = "none";
+
+    if (!passphrase) { errEl.textContent = "Enter the decryption passphrase first."; return; }
+
+    const hashData = location.hash.startsWith("#QRSEC:") ? location.hash.slice(7) : null;
+    if (!hashData) { errEl.textContent = "No encrypted data found in URL."; return; }
+
+    try {
+      const secret = await decryptSecret(hashData, passphrase);
+      document.getElementById("recv-value").textContent = secret;
+      resultBox.style.display = "block";
+    } catch (e) {
+      errEl.textContent = "Decryption failed. Wrong passphrase?";
+    }
+  });
+
+  // Check URL hash for incoming encrypted data (link-based receive flow)
+  if (location.hash.startsWith("#QRSEC:")) {
+    // Switch to receive tab
+    document.querySelectorAll(".tab-btn").forEach(b => b.classList.remove("active"));
+    document.querySelectorAll(".panel").forEach(p => p.classList.remove("active"));
+    document.querySelector('[data-tab="receive"]').classList.add("active");
+    document.getElementById("receive").classList.add("active");
+    // Show decrypt button instead of camera controls
+    document.getElementById("scan-btn").style.display = "none";
+    document.getElementById("decrypt-btn").style.display = "inline-block";
+    document.getElementById("link-notice").style.display = "block";
+  }
+
   // Copy to clipboard
   document.getElementById("copy-btn").addEventListener("click", async () => {
     const value = document.getElementById("recv-value").textContent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qr-secure-send",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Encrypt and transfer secrets via QR code",
   "keywords": ["qr", "qrcode", "encryption", "password", "secure", "transfer"],
   "author": "",