- Zero-knowledge architecture: all encryption/decryption client-side via Web Crypto API - AES-GCM 256 for messages, files, and key wrapping; PBKDF2 for password-based key derivation - Node.js/TypeScript backend: JWT auth with refresh rotation, argon2id passwords, TOTP 2FA - PostgreSQL schema: encrypted blobs only, server never stores plaintext - Real-time messaging via WebSocket relay (server routes ciphertext, cannot read it) - Encrypted file upload/download with per-file keys wrapped by user master key - React PWA frontend: Vite + Tailwind + service worker for offline support - Docker Compose: postgres + backend + frontend + nginx with TLS Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
40 lines
923 B
JSON
40 lines
923 B
JSON
{
|
|
"name": "cloudlink-backend",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "tsx watch src/index.ts",
|
|
"build": "tsc",
|
|
"start": "node dist/index.js"
|
|
},
|
|
"dependencies": {
|
|
"argon2": "^0.41.1",
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^16.4.5",
|
|
"express": "^4.19.2",
|
|
"express-rate-limit": "^7.3.1",
|
|
"helmet": "^7.1.0",
|
|
"jsonwebtoken": "^9.0.2",
|
|
"multer": "^1.4.5-lts.1",
|
|
"otplib": "^12.0.1",
|
|
"pg": "^8.12.0",
|
|
"qrcode": "^1.5.4",
|
|
"uuid": "^10.0.0",
|
|
"ws": "^8.18.0",
|
|
"zod": "^3.23.8"
|
|
},
|
|
"devDependencies": {
|
|
"@types/cors": "^2.8.17",
|
|
"@types/express": "^4.17.21",
|
|
"@types/jsonwebtoken": "^9.0.6",
|
|
"@types/multer": "^1.4.11",
|
|
"@types/node": "^20.14.11",
|
|
"@types/pg": "^8.11.6",
|
|
"@types/qrcode": "^1.5.5",
|
|
"@types/uuid": "^10.0.0",
|
|
"@types/ws": "^8.5.11",
|
|
"tsx": "^4.16.2",
|
|
"typescript": "^5.5.3"
|
|
}
|
|
}
|