Spaces:
Sleeping
Sleeping
Delete SecretSwap
Browse files- SecretSwap/dockerfile +0 -23
- SecretSwap/exchanges.json +0 -0
- SecretSwap/package.json +0 -13
- SecretSwap/public/style.css +0 -93
- SecretSwap/server.js +0 -169
- SecretSwap/users.json +0 -0
SecretSwap/dockerfile
DELETED
|
@@ -1,23 +0,0 @@
|
|
| 1 |
-
|
| 2 |
-
|
| 3 |
-
# Secret Swap – Docker image
|
| 4 |
-
# Uses lightweight Alpine Node base
|
| 5 |
-
|
| 6 |
-
FROM node:20-alpine
|
| 7 |
-
|
| 8 |
-
# Create app directory
|
| 9 |
-
WORKDIR /app
|
| 10 |
-
|
| 11 |
-
# Install production dependencies
|
| 12 |
-
COPY package*.json ./
|
| 13 |
-
RUN npm ci --omit=dev
|
| 14 |
-
|
| 15 |
-
# Copy source
|
| 16 |
-
COPY . .
|
| 17 |
-
|
| 18 |
-
# Hugging Face exposes its own $PORT; default to 7860 for local runs
|
| 19 |
-
ENV PORT=${PORT:-7860}
|
| 20 |
-
EXPOSE 7860
|
| 21 |
-
|
| 22 |
-
# Launch the server
|
| 23 |
-
CMD ["node", "server.js"]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
SecretSwap/exchanges.json
DELETED
|
File without changes
|
SecretSwap/package.json
DELETED
|
@@ -1,13 +0,0 @@
|
|
| 1 |
-
{
|
| 2 |
-
"name": "secret-swap",
|
| 3 |
-
"version": "1.0.0",
|
| 4 |
-
"type": "module",
|
| 5 |
-
"description": "Ultra‑light secret exchange web app",
|
| 6 |
-
"main": "server.js",
|
| 7 |
-
"scripts": {
|
| 8 |
-
"start": "node server.js"
|
| 9 |
-
},
|
| 10 |
-
"dependencies": {
|
| 11 |
-
"express": "^4.18.2"
|
| 12 |
-
}
|
| 13 |
-
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
SecretSwap/public/style.css
DELETED
|
@@ -1,93 +0,0 @@
|
|
| 1 |
-
|
| 2 |
-
|
| 3 |
-
/* ===== Secret Swap minimalist styling ===== */
|
| 4 |
-
|
| 5 |
-
*,
|
| 6 |
-
*::before,
|
| 7 |
-
*::after {
|
| 8 |
-
box-sizing: border-box;
|
| 9 |
-
}
|
| 10 |
-
|
| 11 |
-
body {
|
| 12 |
-
font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,
|
| 13 |
-
Helvetica, Arial, sans-serif;
|
| 14 |
-
margin: 2rem;
|
| 15 |
-
background: #f9f9fb;
|
| 16 |
-
color: #333;
|
| 17 |
-
line-height: 1.5;
|
| 18 |
-
}
|
| 19 |
-
|
| 20 |
-
h1,
|
| 21 |
-
h2 {
|
| 22 |
-
margin-top: 0;
|
| 23 |
-
color: #111;
|
| 24 |
-
}
|
| 25 |
-
|
| 26 |
-
.container {
|
| 27 |
-
max-width: 640px;
|
| 28 |
-
margin: 0 auto;
|
| 29 |
-
}
|
| 30 |
-
|
| 31 |
-
form {
|
| 32 |
-
margin-top: 1rem;
|
| 33 |
-
}
|
| 34 |
-
|
| 35 |
-
label {
|
| 36 |
-
display: block;
|
| 37 |
-
margin-bottom: 0.75rem;
|
| 38 |
-
font-weight: 600;
|
| 39 |
-
}
|
| 40 |
-
|
| 41 |
-
input[type="text"],
|
| 42 |
-
input[type="password"] {
|
| 43 |
-
width: 100%;
|
| 44 |
-
padding: 0.45rem 0.6rem;
|
| 45 |
-
border: 1px solid #ccc;
|
| 46 |
-
border-radius: 4px;
|
| 47 |
-
font-size: 1rem;
|
| 48 |
-
}
|
| 49 |
-
|
| 50 |
-
button {
|
| 51 |
-
padding: 0.55rem 1.1rem;
|
| 52 |
-
border: none;
|
| 53 |
-
border-radius: 4px;
|
| 54 |
-
background: #1e88e5;
|
| 55 |
-
color: #fff;
|
| 56 |
-
font-size: 1rem;
|
| 57 |
-
cursor: pointer;
|
| 58 |
-
transition: background 0.18s ease-in-out;
|
| 59 |
-
}
|
| 60 |
-
|
| 61 |
-
button:hover {
|
| 62 |
-
background: #1565c0;
|
| 63 |
-
}
|
| 64 |
-
|
| 65 |
-
a {
|
| 66 |
-
color: #1e88e5;
|
| 67 |
-
text-decoration: none;
|
| 68 |
-
}
|
| 69 |
-
|
| 70 |
-
a:hover {
|
| 71 |
-
text-decoration: underline;
|
| 72 |
-
}
|
| 73 |
-
|
| 74 |
-
ul {
|
| 75 |
-
padding-left: 1.25rem;
|
| 76 |
-
}
|
| 77 |
-
|
| 78 |
-
li {
|
| 79 |
-
margin-bottom: 0.35rem;
|
| 80 |
-
}
|
| 81 |
-
|
| 82 |
-
.message {
|
| 83 |
-
padding: 0.85rem 1rem;
|
| 84 |
-
border: 1px solid #1e88e5;
|
| 85 |
-
background: #e3f2fd;
|
| 86 |
-
border-radius: 4px;
|
| 87 |
-
margin: 1rem 0;
|
| 88 |
-
}
|
| 89 |
-
|
| 90 |
-
.error {
|
| 91 |
-
border-color: #e53935;
|
| 92 |
-
background: #ffebee;
|
| 93 |
-
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
SecretSwap/server.js
DELETED
|
@@ -1,169 +0,0 @@
|
|
| 1 |
-
/* Secret-Swap – minimal Express server with flat-file storage */
|
| 2 |
-
import express from 'express';
|
| 3 |
-
import fs from 'fs';
|
| 4 |
-
import path from 'path';
|
| 5 |
-
import crypto from 'crypto';
|
| 6 |
-
import { fileURLToPath } from 'url';
|
| 7 |
-
|
| 8 |
-
const __filename = fileURLToPath(import.meta.url);
|
| 9 |
-
const __dirname = path.dirname(__filename);
|
| 10 |
-
|
| 11 |
-
const USERS_FILE = path.join(__dirname, 'users.json');
|
| 12 |
-
const EXCH_FILE = path.join(__dirname, 'exchanges.json');
|
| 13 |
-
const PORT = process.env.PORT || 3000;
|
| 14 |
-
|
| 15 |
-
/* ---------- helpers ---------- */
|
| 16 |
-
const readJSON = (f, d = {}) => (fs.existsSync(f) ? JSON.parse(fs.readFileSync(f)) : d);
|
| 17 |
-
const writeJSON = (f, o) => fs.writeFileSync(f, JSON.stringify(o, null, 2));
|
| 18 |
-
|
| 19 |
-
const sessions = new Map(); // token → username
|
| 20 |
-
const genToken = () => crypto.randomUUID();
|
| 21 |
-
|
| 22 |
-
function hashPass(pw, salt = crypto.randomBytes(16).toString('hex')) {
|
| 23 |
-
const hash = crypto.scryptSync(pw, salt, 64).toString('hex');
|
| 24 |
-
return `${salt}:${hash}`;
|
| 25 |
-
}
|
| 26 |
-
function checkPass(pw, stored) {
|
| 27 |
-
const [salt, ref] = stored.split(':');
|
| 28 |
-
const hash = crypto.scryptSync(pw, salt, 64).toString('hex');
|
| 29 |
-
return crypto.timingSafeEqual(Buffer.from(hash, 'hex'), Buffer.from(ref, 'hex'));
|
| 30 |
-
}
|
| 31 |
-
|
| 32 |
-
/* ---------- tiny templating ---------- */
|
| 33 |
-
const page = (title, body) => `<!DOCTYPE html><html><head><meta charset=utf-8><title>${title}</title><link rel="stylesheet" href="/style.css"></head><body><h1>${title}</h1>${body}</body></html>`;
|
| 34 |
-
const input = (n,l,t='text') => `<label>${l}: <input type="${t}" name="${n}" required></label><br>`;
|
| 35 |
-
|
| 36 |
-
/* ---------- app ---------- */
|
| 37 |
-
const app = express();
|
| 38 |
-
app.use(express.urlencoded({extended:true}));
|
| 39 |
-
app.use(express.static(path.join(__dirname,'public')));
|
| 40 |
-
|
| 41 |
-
app.use((req, _res, next) => {
|
| 42 |
-
const token = (req.headers.cookie||'').split(';').map(c=>c.trim().split('='))[0]?.[1];
|
| 43 |
-
req.user = sessions.get(token);
|
| 44 |
-
req.token = token;
|
| 45 |
-
next();
|
| 46 |
-
});
|
| 47 |
-
const needAuth = (req,res,next)=>req.user?next():res.redirect('/login');
|
| 48 |
-
|
| 49 |
-
/* ---------- auth ---------- */
|
| 50 |
-
app.get('/register', (req,res)=>res.send(page('Register',`
|
| 51 |
-
<form method=post action=/register>
|
| 52 |
-
${input('username','Username')}
|
| 53 |
-
${input('password','Password','password')}
|
| 54 |
-
<button>Register</button>
|
| 55 |
-
</form>
|
| 56 |
-
<p><a href=/login>Have an account? Login</a></p>`)));
|
| 57 |
-
|
| 58 |
-
app.post('/register',(req,res)=>{
|
| 59 |
-
const {username,password}=req.body;
|
| 60 |
-
const users=readJSON(USERS_FILE,{});
|
| 61 |
-
if(users[username])return res.send(page('Error','<p>User exists.</p>'));
|
| 62 |
-
users[username]=hashPass(password);
|
| 63 |
-
writeJSON(USERS_FILE,users);
|
| 64 |
-
res.redirect('/login');
|
| 65 |
-
});
|
| 66 |
-
|
| 67 |
-
app.get('/login',(req,res)=>res.send(page('Login',`
|
| 68 |
-
<form method=post action=/login>
|
| 69 |
-
${input('username','Username')}
|
| 70 |
-
${input('password','Password','password')}
|
| 71 |
-
<button>Login</button>
|
| 72 |
-
</form>
|
| 73 |
-
<p><a href=/register>No account? Register</a></p>`)));
|
| 74 |
-
|
| 75 |
-
app.post('/login',(req,res)=>{
|
| 76 |
-
const {username,password}=req.body;
|
| 77 |
-
const users=readJSON(USERS_FILE,{});
|
| 78 |
-
if(!users[username]||!checkPass(password,users[username]))
|
| 79 |
-
return res.send(page('Error','<p>Bad credentials.</p>'));
|
| 80 |
-
const token=genToken();
|
| 81 |
-
sessions.set(token,username);
|
| 82 |
-
res.setHeader('Set-Cookie',`token=${token}; HttpOnly; Path=/`);
|
| 83 |
-
res.redirect('/dashboard');
|
| 84 |
-
});
|
| 85 |
-
|
| 86 |
-
app.get('/logout',(req,res)=>{
|
| 87 |
-
if(req.token) sessions.delete(req.token);
|
| 88 |
-
res.setHeader('Set-Cookie','token=; Max-Age=0; Path=/');
|
| 89 |
-
res.redirect('/login');
|
| 90 |
-
});
|
| 91 |
-
|
| 92 |
-
/* ---------- dashboard ---------- */
|
| 93 |
-
app.get(['/','/dashboard'],needAuth,(req,res)=>{
|
| 94 |
-
const exchanges=readJSON(EXCH_FILE,{});
|
| 95 |
-
const list=Object.entries(exchanges)
|
| 96 |
-
.filter(([id,x])=>x.owner===req.user||x.partner===req.user)
|
| 97 |
-
.map(([id,x])=>{
|
| 98 |
-
const role = x.owner===req.user? 'owner':'partner';
|
| 99 |
-
return `<li>[${role}] “${x.secret}” → <a href=/respond/${id}>link</a>${x.responses.length?` (${x.responses.length} reply)`:' '}</li>`;
|
| 100 |
-
}).join('');
|
| 101 |
-
res.send(page('Dashboard',`
|
| 102 |
-
<p>Logged in as <strong>${req.user}</strong> | <a href=/logout>Logout</a></p>
|
| 103 |
-
<h2>Create new secret swap</h2>
|
| 104 |
-
<form method=post action=/create>
|
| 105 |
-
${input('partner','Partner username')}
|
| 106 |
-
${input('secret','Your secret')}
|
| 107 |
-
<button>Create & share</button>
|
| 108 |
-
</form>
|
| 109 |
-
<h2>Your swaps</h2>
|
| 110 |
-
<ul>${list||'<li>(none yet)</li>'}</ul>`));
|
| 111 |
-
});
|
| 112 |
-
|
| 113 |
-
/* ---------- create ---------- */
|
| 114 |
-
app.post('/create',needAuth,(req,res)=>{
|
| 115 |
-
const {secret,partner}=req.body;
|
| 116 |
-
const users=readJSON(USERS_FILE,{});
|
| 117 |
-
if(!users[partner]) return res.send(page('Error','<p>Partner username not found.</p>'));
|
| 118 |
-
const exchanges=readJSON(EXCH_FILE,{});
|
| 119 |
-
const id=crypto.randomUUID();
|
| 120 |
-
exchanges[id]={id,owner:req.user,partner,secret,responses:[]};
|
| 121 |
-
writeJSON(EXCH_FILE,exchanges);
|
| 122 |
-
const host=req.headers.host;
|
| 123 |
-
res.send(page('Swap created',`
|
| 124 |
-
<p>Send this link to <strong>${partner}</strong>:</p>
|
| 125 |
-
<p><a href=/respond/${id}>http://${host}/respond/${id}</a></p>
|
| 126 |
-
<p><a href=/dashboard>Return to dashboard</a></p>`));
|
| 127 |
-
});
|
| 128 |
-
|
| 129 |
-
/* ---------- respond ---------- */
|
| 130 |
-
app.get('/respond/:id',needAuth,(req,res)=>{
|
| 131 |
-
const ex=readJSON(EXCH_FILE,{})[req.params.id];
|
| 132 |
-
if(!ex) return res.send(page('Error','<p>Swap not found.</p>'));
|
| 133 |
-
if(req.user!==ex.partner && req.user!==ex.owner)
|
| 134 |
-
return res.send(page('Forbidden','<p>You are not part of this swap.</p>'));
|
| 135 |
-
if(req.user===ex.owner)
|
| 136 |
-
return res.redirect(`/view/${req.params.id}`);
|
| 137 |
-
const done=ex.responses.some(r=>r.from===req.user);
|
| 138 |
-
if(done) return res.redirect(`/view/${req.params.id}`);
|
| 139 |
-
res.send(page('Respond to secret',
|
| 140 |
-
`<p>Original secret will be revealed after you submit yours.</p>
|
| 141 |
-
<form method=post action=/respond/${req.params.id}>
|
| 142 |
-
${input('response','Your secret')}
|
| 143 |
-
<button>Submit</button>
|
| 144 |
-
</form>`));
|
| 145 |
-
});
|
| 146 |
-
|
| 147 |
-
app.post('/respond/:id',needAuth,(req,res)=>{
|
| 148 |
-
const data=readJSON(EXCH_FILE,{});
|
| 149 |
-
const ex=data[req.params.id];
|
| 150 |
-
if(!ex||req.user!==ex.partner) return res.send(page('Error','<p>Not allowed.</p>'));
|
| 151 |
-
ex.responses.push({from:req.user,secret:req.body.response});
|
| 152 |
-
writeJSON(EXCH_FILE,data);
|
| 153 |
-
res.send(page('Secret revealed',`<p>Original secret from ${ex.owner}: <strong>${ex.secret}</strong></p>
|
| 154 |
-
<p><a href=/dashboard>Back to dashboard</a></p>`));
|
| 155 |
-
});
|
| 156 |
-
|
| 157 |
-
/* ---------- view (owner) ---------- */
|
| 158 |
-
app.get('/view/:id',needAuth,(req,res)=>{
|
| 159 |
-
const ex=readJSON(EXCH_FILE,{})[req.params.id];
|
| 160 |
-
if(!ex||req.user!==ex.owner) return res.send(page('Error','<p>Not allowed.</p>'));
|
| 161 |
-
const list=ex.responses.map(r=>`<li>${r.from}: ${r.secret}</li>`).join('')||'<li>(no response yet)</li>';
|
| 162 |
-
res.send(page('Swap responses',`
|
| 163 |
-
<p>Your secret: <strong>${ex.secret}</strong></p>
|
| 164 |
-
<ul>${list}</ul>
|
| 165 |
-
<p><a href=/dashboard>Back to dashboard</a></p>`));
|
| 166 |
-
});
|
| 167 |
-
|
| 168 |
-
/* ---------- start ---------- */
|
| 169 |
-
app.listen(PORT,()=>console.log(`Secret-Swap listening on ${PORT}`));
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
SecretSwap/users.json
DELETED
|
File without changes
|