Releases: HemmeligOrg/Hemmelig.app
The Attachment
The main focus of this release is to enable users to upload an image. This requires the users to sign in. Email is required.
Other is if the secret is a base64 encoded string, it will detect this within the frontend, and add a button to convert it to plain text.
The Unlockable
This release will create a more secure storing of secrets. It requires a unique key that is part of the URL in order to unlock the secret. From the README:
You enter https://hemmelig.app, write your sensitive information, expire time, optional password, and click create a secret link. You share the secret link. The receiver of the link opens it, writes the optional password, and retrieves the sensitive information. When a secret link is created, it gets its unique encryption key that is not saved to the database and only will be part of the URL. This means NO ONE can decrypt your secret without the hash(SECRET_MASTER_KEY + YOUR_UNIQUE_ENCRYPTION_KEY), and access to the Redis instance.
The Safari Flaw
Solves a bug with safari that the header was 1000px in height
The Helmet
- fastify-helmet
- Polishing
The Manifest typo release
v1.3.1 Update manifest images url
The UX
The Account
Add account, and authorization functionality. By creating an account you get basic auth credentials for the API calls.
Awkward Fix
f0b4770 (HEAD -> main, secret/main, origin/main) HEAD@{0}: commit: Fix password error if body do not exist
Continuous Improvement
5c4e457 (HEAD -> main) HEAD@{0}: commit: Make it possible to get the ID if there is no password
53e0770 HEAD@{1}: commit: Inject configuration straight from the server
006b4ea HEAD@{2}: revert: Revert "Remove additional burn secret code"
509f130 HEAD@{3}: commit: Use nyan cat as mocha reporter
d2463e8 HEAD@{4}: reset: moving to HEAD~1
06d63a5 HEAD@{5}: commit: Add initial tests
d2463e8 HEAD@{6}: commit: Add initial tests
24b39d1 HEAD@{7}: commit: Add health endpoint which checks if redis is running #14
50dde4c HEAD@{8}: commit: Set the salt rounds to 8 for better performance
4db86db HEAD@{9}: commit: Remove additional burn secret code
0c732ea HEAD@{10}: commit: Remove route styling for the text area
93ef146 HEAD@{11}: commit: Implement id exist endpoint #16
d4fe860 HEAD@{12}: commit: Implement bcrypt password identification