05/19 Enhance codes
This commit is contained in:
+61
-48
@@ -471,8 +471,8 @@ const Vault = (() => {
|
||||
_sortOrder === "folder"
|
||||
? Object.keys(groups).sort()
|
||||
: ["(No folder)", ..._folders.map((f) => f.name)].filter(
|
||||
(k) => groups[k],
|
||||
);
|
||||
(k) => groups[k],
|
||||
);
|
||||
Object.keys(groups).forEach((k) => {
|
||||
if (!keys.includes(k)) keys.push(k);
|
||||
});
|
||||
@@ -540,7 +540,7 @@ const Vault = (() => {
|
||||
case "card":
|
||||
subText = item.plain.card_number
|
||||
? "•••• " +
|
||||
String(item.plain.card_number).replace(/\s/g, "").slice(-4)
|
||||
String(item.plain.card_number).replace(/\s/g, "").slice(-4)
|
||||
: "";
|
||||
break;
|
||||
case "bank":
|
||||
@@ -920,9 +920,9 @@ const Vault = (() => {
|
||||
0,
|
||||
Math.round(
|
||||
100 -
|
||||
(weak.length / total) * 40 -
|
||||
(reused.length / total) * 30 -
|
||||
(old.length / total) * 15,
|
||||
(weak.length / total) * 40 -
|
||||
(reused.length / total) * 30 -
|
||||
(old.length / total) * 15,
|
||||
),
|
||||
);
|
||||
const cls =
|
||||
@@ -943,24 +943,22 @@ const Vault = (() => {
|
||||
</div>`;
|
||||
|
||||
sectionsEl.innerHTML = "";
|
||||
const makeSection = (title, icon, items, desc) => {
|
||||
const makeSection = (title, icon, items, desc, renderItem) => {
|
||||
if (!items.length) return;
|
||||
const sec = document.createElement("div");
|
||||
sec.className = "sec-section";
|
||||
const defaultRender = (i) => `<li class="sec-item">
|
||||
<span class="sec-item-name">${escHtml(i.name)}</span>
|
||||
<span class="sec-item-sub">${escHtml(i.plain?.username || "")}</span>
|
||||
<button class="btn-secondary btn-sm" data-sec-edit="${i.id}">Edit</button>
|
||||
</li>`;
|
||||
const renderFn = renderItem || defaultRender;
|
||||
sec.innerHTML = `
|
||||
<div class="sec-section-header"><span class="sec-section-icon">${icon}</span>
|
||||
<div><div class="sec-section-title">${title} (${items.length})</div><div class="sec-section-desc">${desc}</div></div>
|
||||
</div>
|
||||
<ul class="sec-item-list">
|
||||
${items
|
||||
.map(
|
||||
(i) => `<li class="sec-item">
|
||||
<span class="sec-item-name">${escHtml(i.name)}</span>
|
||||
<span class="sec-item-sub">${escHtml(i.plain?.username || "")}</span>
|
||||
<button class="btn-secondary btn-sm" data-sec-edit="${i.id}">Edit</button>
|
||||
</li>`,
|
||||
)
|
||||
.join("")}
|
||||
${items.map(renderFn).join("")}
|
||||
</ul>`;
|
||||
sec.querySelectorAll("[data-sec-edit]").forEach((btn) => {
|
||||
btn.addEventListener("click", () => {
|
||||
@@ -995,6 +993,20 @@ const Vault = (() => {
|
||||
"🕐",
|
||||
old,
|
||||
"Weak or reused passwords not changed in over 180 days.",
|
||||
(i) => {
|
||||
const ref = i.plain?.password_changed_at || i.created_at;
|
||||
const daysAgo = ref
|
||||
? Math.floor((Date.now() - new Date(ref).getTime()) / 86400000)
|
||||
: null;
|
||||
const ageLabel = daysAgo !== null
|
||||
? `Last changed ${daysAgo} day${daysAgo !== 1 ? "s" : ""} ago`
|
||||
: "Age unknown";
|
||||
return `<li class="sec-item">
|
||||
<span class="sec-item-name">${escHtml(i.name)}</span>
|
||||
<span class="sec-item-sub">${escHtml(ageLabel)}</span>
|
||||
<button class="btn-secondary btn-sm" data-sec-edit="${i.id}">Edit</button>
|
||||
</li>`;
|
||||
},
|
||||
);
|
||||
|
||||
// ── Missing 2FA warning ──────────────────────────────────────────────────
|
||||
@@ -1060,16 +1072,16 @@ const Vault = (() => {
|
||||
</div>
|
||||
<ul class="sec-item-list">
|
||||
${breached
|
||||
.map((i) => {
|
||||
const count =
|
||||
hibpResults.find((r) => r.item.id === i.id)?.count || 0;
|
||||
return `<li class="sec-item">
|
||||
.map((i) => {
|
||||
const count =
|
||||
hibpResults.find((r) => r.item.id === i.id)?.count || 0;
|
||||
return `<li class="sec-item">
|
||||
<span class="sec-item-name">${escHtml(i.name)}</span>
|
||||
<span class="sec-item-sub">${escHtml(i.plain?.username || "")} — seen ${count.toLocaleString()} time${count !== 1 ? "s" : ""} in breaches</span>
|
||||
<button class="btn-secondary btn-sm" data-sec-edit="${i.id}">Change</button>
|
||||
</li>`;
|
||||
})
|
||||
.join("")}
|
||||
})
|
||||
.join("")}
|
||||
</ul>`;
|
||||
hibpSection.querySelectorAll("[data-sec-edit]").forEach((btn) => {
|
||||
btn.addEventListener("click", () => {
|
||||
@@ -1423,6 +1435,9 @@ const Vault = (() => {
|
||||
payload = _importRows;
|
||||
} else {
|
||||
// Plaintext CSV rows — encrypt each one now.
|
||||
// Use the import timestamp as password_changed_at — best available
|
||||
// approximation since CSV exports don't carry a change date.
|
||||
const importedAt = new Date().toISOString();
|
||||
payload = await Promise.all(
|
||||
_importRows.map(async (row) => {
|
||||
const plain = {
|
||||
@@ -1430,6 +1445,7 @@ const Vault = (() => {
|
||||
username: row.username || "",
|
||||
password: row.password,
|
||||
notes: row.notes || "",
|
||||
password_changed_at: importedAt,
|
||||
};
|
||||
const { enc_data, iv } = await Crypto.encryptItem(
|
||||
vaultKey,
|
||||
@@ -1607,8 +1623,7 @@ const Vault = (() => {
|
||||
<span class="share-name">${escHtml(s.item_name)}</span>
|
||||
<span class="share-meta">From ${escHtml(s.owner_email)}</span>
|
||||
</div>
|
||||
${
|
||||
!s.accepted
|
||||
${!s.accepted
|
||||
? `<button class="btn-primary btn-sm" data-accept="${s.id}">Accept</button>`
|
||||
: `<button class="btn-secondary btn-sm"
|
||||
data-view-share="${s.id}"
|
||||
@@ -1619,7 +1634,7 @@ const Vault = (() => {
|
||||
data-iv-name="${escHtml(s.iv_name || "")}"
|
||||
data-name="${escHtml(s.item_name)}"
|
||||
data-type="${escHtml(s.item_type || "")}">View</button>`
|
||||
}
|
||||
}
|
||||
</li>`,
|
||||
)
|
||||
.join("");
|
||||
@@ -2155,10 +2170,9 @@ const Vault = (() => {
|
||||
<span class="em-vault-chevron">▸</span>
|
||||
</button>
|
||||
<div class="em-vault-item-body hidden" id="em-vault-body-${idx}">
|
||||
${
|
||||
hasFields
|
||||
? '<div class="detail-body em-detail-body"></div>'
|
||||
: '<p class="vault-empty">Could not decrypt this item.</p>'
|
||||
${hasFields
|
||||
? '<div class="detail-body em-detail-body"></div>'
|
||||
: '<p class="vault-empty">Could not decrypt this item.</p>'
|
||||
}
|
||||
</div>
|
||||
</li>`;
|
||||
@@ -2487,8 +2501,8 @@ const Vault = (() => {
|
||||
const typeLabel = transports.includes("internal")
|
||||
? "📱 Device"
|
||||
: transports.some((t) => ["usb", "nfc", "ble", "smart-card"].includes(t))
|
||||
? "🔑 Security key"
|
||||
: "🔑 Passkey";
|
||||
? "🔑 Security key"
|
||||
: "🔑 Passkey";
|
||||
return `<div class="passkey-item" data-cred-id="${c.id}">
|
||||
<div class="passkey-info">
|
||||
<span class="passkey-name">${escHtml(c.name)}</span>
|
||||
@@ -2751,16 +2765,15 @@ const Vault = (() => {
|
||||
<h3 style="margin:0 0 8px;font-size:16px;color:#111827;">
|
||||
${isFirstTime ? "🔐 MFA enabled — save your backup codes" : "🔐 New backup codes"}
|
||||
</h3>
|
||||
${
|
||||
isFirstTime
|
||||
? `<p style="font-size:13px;color:#374151;margin-bottom:12px;">
|
||||
${isFirstTime
|
||||
? `<p style="font-size:13px;color:#374151;margin-bottom:12px;">
|
||||
These codes let you sign in if you lose access to your authenticator app.
|
||||
<strong>Save them now — they will not be shown again.</strong>
|
||||
</p>`
|
||||
: `<p style="font-size:13px;color:#374151;margin-bottom:12px;">
|
||||
: `<p style="font-size:13px;color:#374151;margin-bottom:12px;">
|
||||
Your previous codes have been invalidated. Save these new codes securely.
|
||||
</p>`
|
||||
}
|
||||
}
|
||||
<div style="background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;padding:12px;display:flex;flex-wrap:wrap;gap:6px;margin-bottom:16px;">
|
||||
${codesHtml}
|
||||
</div>
|
||||
@@ -3269,14 +3282,14 @@ const Vault = (() => {
|
||||
const pool = !_activeFilter
|
||||
? _items
|
||||
: _activeFilter.type === "itemType"
|
||||
? _items.filter((i) => i.item_type === _activeFilter.value)
|
||||
: _activeFilter.type === "folder"
|
||||
? _items.filter((i) => i.folder_id === _activeFilter.value)
|
||||
: _activeFilter.type === "tag"
|
||||
? _items.filter((i) =>
|
||||
(i.plain?.tags || []).includes(_activeFilter.value),
|
||||
)
|
||||
: _items;
|
||||
? _items.filter((i) => i.item_type === _activeFilter.value)
|
||||
: _activeFilter.type === "folder"
|
||||
? _items.filter((i) => i.folder_id === _activeFilter.value)
|
||||
: _activeFilter.type === "tag"
|
||||
? _items.filter((i) =>
|
||||
(i.plain?.tags || []).includes(_activeFilter.value),
|
||||
)
|
||||
: _items;
|
||||
renderItemList(
|
||||
pool.filter(
|
||||
(item) =>
|
||||
@@ -3427,7 +3440,7 @@ const Vault = (() => {
|
||||
if (
|
||||
(mode === "add" &&
|
||||
(document.getElementById("field-type").value || "password") ===
|
||||
"password") ||
|
||||
"password") ||
|
||||
(mode === "edit" && (item?.item_type || "password") === "password")
|
||||
) {
|
||||
initPasswordFieldEnhancements();
|
||||
@@ -3684,7 +3697,7 @@ const Vault = (() => {
|
||||
"X-CSRFToken": csrfToken(),
|
||||
},
|
||||
body: JSON.stringify({ refresh_token: refreshToken }),
|
||||
}).catch(() => {});
|
||||
}).catch(() => { });
|
||||
VaultSession.clear();
|
||||
SharingSession.clear();
|
||||
sessionStorage.removeItem("access_token");
|
||||
@@ -3789,11 +3802,11 @@ const Vault = (() => {
|
||||
// Auto-clear clipboard after 30 seconds — industry-standard hygiene.
|
||||
if (_clipboardClearTimer) clearTimeout(_clipboardClearTimer);
|
||||
_clipboardClearTimer = setTimeout(() => {
|
||||
navigator.clipboard.writeText("").catch(() => {});
|
||||
navigator.clipboard.writeText("").catch(() => { });
|
||||
_clipboardClearTimer = null;
|
||||
}, 30_000);
|
||||
})
|
||||
.catch(() => {});
|
||||
.catch(() => { });
|
||||
}
|
||||
|
||||
function escHtml(str) {
|
||||
|
||||
Reference in New Issue
Block a user