Slave/client crypto #7

Merged
nobswebdev merged 5 commits from slave/client-crypto into master 2026-10-20 17:30:03 +00:00
5 Commits
Author SHA1 Message Date
nobswebdev 47361a83b9 add optional Argon2id password wrap for zk uploads.
Wrap the image DEK for password-protected batches, keep the URL fragment as a separate secret, and extend prepare/decrypt helpers with tests.
2026-10-20 18:31:33 +02:00
nobswebdev 4376ed7ff1 Expand Vitest coverage for shared frontend utils.
Cover Axios error message extraction, generic error fallbacks, ArrayBuffer views used by Web Crypto, and share URL builders.
2026-10-19 23:05:46 +02:00
nobswebdev afbd5e204c Add client-side ZK and hotlink upload crypto with Pinia store.
Encrypt image bytes in the browser, keep keys out of POST bodies (URL fragment or path secret), and POST ciphertext via typed upload API helpers.
2026-10-19 23:05:33 +02:00
nobswebdev 0238858c8b add frontend AES-GCM and base64 helpers with Vitest coverage. 2026-10-19 03:00:03 +02:00
nobswebdev f2987da2fe update upload validation to use shared AES-GCM size constants on the backend. 2026-10-19 02:59:52 +02:00