4 Commits

Include renames

Author	SHA1	Message	Date
nmemmertandClaude Sonnet 4.6	515bef4fc9	feat: password unlock screen on refresh instead of full logout ... On page reload, tokens persist but crypto keys are lost (by design). Now shows a password-only unlock screen instead of the full login form, so users don't need to re-enter their email after a refresh. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-31 09:42:04 -04:00
nmemmertandClaude Sonnet 4.6	7351f9048a	fix: replace X25519 with ECDH P-256 for Electron compatibility ... X25519 Web Crypto support is not available in Electron's Chromium build despite being in Chrome 113+. P-256 ECDH is universally supported across all browsers and Electron versions with equivalent security. - Replace { name: 'X25519' } with { name: 'ECDH', namedCurve: 'P-256' } throughout the keypair generation, sealing, and opening functions - Wire format updated: ephemeral pub key grows from 32 to 65 bytes (uncompressed P-256 point: 0x04 || x || y) - Existing accounts with X25519 keys must re-register Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-28 11:41:11 -04:00
nmemmertandClaude Sonnet 4.6	46f0a4b71e	feat: X25519 ECDH sealed-box E2E encryption, zero-knowledge key exchange ... - Replace libsodium with pure Web Crypto X25519 ECDH for key exchange - Sealed-box pattern: ephemeral keypair + HKDF + AES-256-GCM for each recipient - Store encrypted conversation key per-user so each party decrypts with their own private key - PBKDF2-derived master key wraps X25519 private key (pkcs8) server-side for cross-device login - Fix health endpoint ordering so it never hits auth middleware (401 bug) - Fix postgres port exposure in docker-compose for backend connectivity - Fix DrivePage react-query v5 onSuccess → useEffect migration - Fix MessagesPage: use <Link> instead of <a href> to avoid page reload losing in-memory keys - Fix formatDistanceToNow crash on WebSocket messages lacking sent_at (add fallback + null guard) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-28 10:10:40 -04:00
nmemmertandClaude Sonnet 4.6	937bf8ad2d	Initial CloudLink scaffold: E2E encrypted PWA with messaging and cloud drive ... - Zero-knowledge architecture: all encryption/decryption client-side via Web Crypto API - AES-GCM 256 for messages, files, and key wrapping; PBKDF2 for password-based key derivation - Node.js/TypeScript backend: JWT auth with refresh rotation, argon2id passwords, TOTP 2FA - PostgreSQL schema: encrypted blobs only, server never stores plaintext - Real-time messaging via WebSocket relay (server routes ciphertext, cannot read it) - Encrypted file upload/download with per-file keys wrapped by user master key - React PWA frontend: Vite + Tailwind + service worker for offline support - Docker Compose: postgres + backend + frontend + nginx with TLS Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-08-28 09:41:18 -04:00