Files
Link-Log/webextension/popup.js
T
olaf 342d8a069a
Build LinkLog Development Image / development-image (push) Successful in 9s
plugin updated to use the refresh flow and security tightened
2026-08-26 17:23:05 +02:00

356 lines
11 KiB
JavaScript

// Copyright © 2026 Olaf Kolkman
// SPDX-License-Identifier: GPL-3.0-or-later
const statusEl = document.getElementById('status');
const form = document.getElementById('link-form');
const titleInput = document.getElementById('title');
const urlInput = document.getElementById('url');
const commentInput = document.getElementById('comment');
const openSettingsButton = document.getElementById('open-settings');
const existingTags = document.getElementById('existing-tags');
const newTagsInput = document.getElementById('new-tags');
const feedLink = document.getElementById('feed-link');
const authWarning = document.getElementById('auth-warning');
const warningSettingsButton = document.getElementById('warning-settings');
const authSession = document.getElementById('auth-session');
const t = window.linklogI18n;
function normalizeBackendOrigin(backendUrl) {
try {
const url = new URL(backendUrl);
if (!['http:', 'https:'].includes(url.protocol)) {
return null;
}
return url.origin;
} catch (error) {
return null;
}
}
async function ensureExactBackendPermission(backendUrl) {
const origin = normalizeBackendOrigin(backendUrl);
if (!origin) {
return false;
}
try {
const hasPermission = await browser.permissions.contains({ origins: [`${origin}/*`] });
if (hasPermission) {
return true;
}
return await browser.permissions.request({ origins: [`${origin}/*`] });
} catch (error) {
return false;
}
}
function setStatus(message, isError = false) {
statusEl.textContent = message;
statusEl.classList.remove('hidden');
statusEl.classList.toggle('error', isError);
statusEl.classList.toggle('success', !isError);
}
async function getSettings() {
const [localSettings, sessionSettings] = await Promise.all([
browser.storage.local.get(['backendUrl']),
browser.storage.session.get(['accessToken', 'refreshToken', 'tokenExpiresAt', 'deviceId']),
]);
return {
backendUrl: localSettings.backendUrl || '',
deviceId: sessionSettings.deviceId || '',
accessToken: sessionSettings.accessToken || '',
refreshToken: sessionSettings.refreshToken || '',
tokenExpiresAt: sessionSettings.tokenExpiresAt || '',
};
}
async function persistSession(session) {
await browser.storage.local.set({
backendUrl: session.backendUrl || '',
});
await browser.storage.session.set({
accessToken: session.accessToken || '',
refreshToken: session.refreshToken || '',
tokenExpiresAt: session.tokenExpiresAt || '',
deviceId: session.deviceId || '',
});
}
async function clearSession() {
await Promise.all([
browser.storage.local.remove(['accessToken', 'tokenType', 'tokenExpiresAt', 'refreshToken', 'deviceId']),
browser.storage.session.remove(['accessToken', 'refreshToken', 'tokenExpiresAt', 'deviceId']),
]);
}
async function refreshAccessToken() {
const settings = await getSettings();
if (!settings.backendUrl || !settings.refreshToken || !settings.deviceId) {
return null;
}
try {
const response = await fetch(`${settings.backendUrl}/api/auth/refresh`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
refresh_token: settings.refreshToken,
device_id: settings.deviceId,
}),
});
if (!response.ok) {
await clearSession();
return null;
}
const data = await response.json();
const refreshed = {
...settings,
accessToken: data.access_token,
refreshToken: data.refresh_token,
tokenExpiresAt: data.expires_at,
deviceId: data.device_id || settings.deviceId,
};
await persistSession(refreshed);
return refreshed;
} catch (error) {
return null;
}
}
async function validateSession(settings) {
if (!settings.backendUrl || !settings.accessToken) return null;
if (!(await ensureExactBackendPermission(settings.backendUrl))) {
await clearSession();
return null;
}
try {
const response = await fetch(`${settings.backendUrl}/api/auth/me`, {
headers: {'Authorization': `Bearer ${settings.accessToken}`},
});
if (!response.ok) {
if (response.status === 401) {
const refreshed = await refreshAccessToken();
if (refreshed && refreshed.accessToken) {
const retry = await fetch(`${refreshed.backendUrl}/api/auth/me`, {
headers: {'Authorization': `Bearer ${refreshed.accessToken}`},
});
if (retry.ok) {
return await retry.json();
}
}
}
await clearSession();
return null;
}
return await response.json();
} catch (error) {
return null;
}
}
function showSignedOutState() {
form.classList.add('hidden');
authSession.hidden = true;
authSession.classList.add('hidden');
authWarning.hidden = false;
authWarning.classList.remove('hidden');
}
function showSignedInState(user, backendUrl) {
authWarning.hidden = true;
authWarning.classList.add('hidden');
authSession.textContent = t('loggedInAt', [user.username || user.email, backendUrl]);
authSession.hidden = false;
authSession.classList.remove('hidden');
form.classList.remove('hidden');
}
function showSavedState(message) {
document.querySelector('header').classList.add('hidden');
document.querySelector('.extension-footer').classList.add('hidden');
authSession.hidden = true;
authSession.classList.add('hidden');
authWarning.hidden = true;
authWarning.classList.add('hidden');
form.classList.add('hidden');
statusEl.textContent = message;
statusEl.classList.remove('hidden', 'error');
statusEl.classList.add('success');
}
async function updateFeedLink() {
const settings = await getSettings();
if (!settings.backendUrl || !settings.accessToken) return;
const username = await browser.storage.local.get(['username']);
try {
const backend = new URL(settings.backendUrl);
feedLink.href = `${backend.origin}/${encodeURIComponent(username.username || settings.deviceId || 'user')}/`;
feedLink.classList.remove('hidden');
} catch (error) {
feedLink.classList.add('hidden');
}
}
async function loadExistingTags() {
const settings = await getSettings();
if (!settings.backendUrl || !settings.accessToken) {
showSignedOutState();
return;
}
const user = await validateSession(settings);
if (!user) {
showSignedOutState();
return;
}
showSignedInState(user, settings.backendUrl);
const response = await fetch(`${settings.backendUrl}/api/tags`, {
headers: {'Authorization': `Bearer ${settings.accessToken}`},
});
if (!response.ok) {
if (response.status === 401) {
showSignedOutState();
return;
}
existingTags.textContent = t('loadTagsFailed');
return;
}
const tags = await response.json();
existingTags.replaceChildren(...tags.map((tag) => {
const label = document.createElement('label');
const checkbox = document.createElement('input');
checkbox.type = 'checkbox';
checkbox.value = tag;
label.append(checkbox, document.createTextNode(` ${tag}`));
return label;
}));
}
function getTags() {
const selected = [...existingTags.querySelectorAll('input:checked')].map((input) => input.value);
const newTags = newTagsInput.value.split(',').map((tag) => tag.trim()).filter((tag) => tag.startsWith('#'));
return [...new Set([...selected, ...newTags])].slice(0, 10);
}
function removeKnownTrackingParams(urlString) {
try {
const url = new URL(urlString);
const known = new Set([
'utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'utm_id', 'utm_name', 'gclid', 'fbclid', 'dclid', 'msclkid'
]);
for (const key of known) {
url.searchParams.delete(key);
}
return url.toString();
} catch (error) {
return urlString;
}
}
async function populateCurrentTab() {
const [tab] = await browser.tabs.query({ active: true, currentWindow: true });
if (!tab) return;
titleInput.value = tab.title || '';
urlInput.value = tab.url || '';
}
async function checkExistingLink() {
const settings = await getSettings();
if (!settings.backendUrl || !settings.accessToken || !titleInput.value || !urlInput.value) return;
try {
const response = await fetch(`${settings.backendUrl}/api/links/check?${new URLSearchParams({
title: titleInput.value,
url: removeKnownTrackingParams(urlInput.value),
})}`, {
headers: {'Authorization': `Bearer ${settings.accessToken}`},
});
if (response.ok && (await response.json()).exists) {
setStatus(t('duplicateLinkWarning'), true);
}
} catch (error) {
// Duplicate checking is advisory; submission remains available.
}
}
async function handleSubmit(event) {
event.preventDefault();
setStatus(t('submitting'), false);
const settings = await getSettings();
const token = settings.accessToken;
const backendUrl = settings.backendUrl;
if (!backendUrl || !(await ensureExactBackendPermission(backendUrl))) {
setStatus(t('configureAndLogIn'), true);
browser.runtime.openOptionsPage();
return;
}
if (!token || !backendUrl) {
setStatus(t('configureAndLogIn'), true);
browser.runtime.openOptionsPage();
return;
}
if (!await validateSession(settings)) {
showSignedOutState();
setStatus(t('sessionExpired'), true);
browser.runtime.openOptionsPage();
return;
}
try {
const response = await fetch(`${backendUrl}/api/links`, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'Authorization': `Bearer ${token}`,
},
body: JSON.stringify({
title: titleInput.value,
url: removeKnownTrackingParams(urlInput.value),
comment: commentInput.value,
timestamp: new Date().toISOString(),
tags: getTags(),
})
});
if (response.status === 401) {
showSignedOutState();
setStatus(t('sessionExpired'), true);
browser.runtime.openOptionsPage();
return;
}
if (!response.ok) {
throw new Error(t('submissionFailed'));
}
const result = await response.json();
const saveMessage = result.duplicate ? t('linkAlreadyExists') : t('linkSaved', backendUrl);
if (result.plugin_errors?.length) {
const errors = result.plugin_errors.map((error) => `${error.plugin}: ${error.reason}`).join(' ');
showSavedState(`${saveMessage} ${t('publishingErrors', errors)}`);
return;
}
showSavedState(saveMessage);
} catch (error) {
setStatus(t('submissionFailedConnection'), true);
}
}
openSettingsButton.addEventListener('click', () => browser.runtime.openOptionsPage());
warningSettingsButton.addEventListener('click', () => browser.runtime.openOptionsPage());
form.addEventListener('submit', handleSubmit);
populateCurrentTab().then(checkExistingLink);
loadExistingTags();
updateFeedLink();