cf247d207f
- Add single-admin login with SQLite3 user storage - First-run setup wizard for admin account creation - Account management page for password changes - Optional HTTPS with auto-generated self-signed certificates - Configurable via STEGASOO_AUTH_ENABLED, STEGASOO_HTTPS_ENABLED env vars - UI improvements: larger QR previews, consistent panel styling - Update docker-compose.yml with auth config and persistent volumes - Update all documentation for v4.0.2 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
518 lines
26 KiB
HTML
518 lines
26 KiB
HTML
{% extends "base.html" %}
|
||
|
||
{% block title %}Decode Message - Stegasoo{% endblock %}
|
||
|
||
{% block content %}
|
||
<style>
|
||
/* Glowing passphrase input */
|
||
.passphrase-input {
|
||
background: rgba(30, 40, 50, 0.8) !important;
|
||
border: 2px solid rgba(99, 179, 237, 0.3) !important;
|
||
color: #63b3ed !important;
|
||
font-family: 'Courier New', monospace;
|
||
font-size: 1.1rem;
|
||
letter-spacing: 0.5px;
|
||
padding: 12px 16px;
|
||
transition: border-color 0.3s ease, box-shadow 0.3s ease, background 0.3s ease;
|
||
}
|
||
|
||
.passphrase-input:focus {
|
||
border-color: rgba(99, 179, 237, 0.8) !important;
|
||
box-shadow: 0 0 20px rgba(99, 179, 237, 0.4), 0 0 40px rgba(99, 179, 237, 0.2) !important;
|
||
background: rgba(30, 40, 50, 0.95) !important;
|
||
}
|
||
|
||
.passphrase-input::placeholder {
|
||
color: rgba(99, 179, 237, 0.4);
|
||
}
|
||
|
||
/* Glowing PIN input */
|
||
.pin-input-container .form-control {
|
||
background: rgba(30, 40, 50, 0.8) !important;
|
||
border: 2px solid rgba(246, 173, 85, 0.3) !important;
|
||
color: #f6ad55 !important;
|
||
font-family: 'Courier New', monospace;
|
||
font-size: 1.2rem;
|
||
letter-spacing: 3px;
|
||
text-align: center;
|
||
transition: all 0.3s ease;
|
||
}
|
||
|
||
.pin-input-container .form-control:focus {
|
||
border-color: rgba(246, 173, 85, 0.8) !important;
|
||
box-shadow: 0 0 20px rgba(246, 173, 85, 0.4), 0 0 40px rgba(246, 173, 85, 0.2) !important;
|
||
background: rgba(30, 40, 50, 0.95) !important;
|
||
}
|
||
|
||
.pin-input-container .form-control::placeholder {
|
||
color: rgba(246, 173, 85, 0.4);
|
||
letter-spacing: 1px;
|
||
}
|
||
|
||
/* QR Crop Animation */
|
||
.qr-crop-container {
|
||
position: relative;
|
||
overflow: hidden;
|
||
border-radius: 8px;
|
||
background: rgba(0, 0, 0, 0.3);
|
||
}
|
||
|
||
.qr-crop-container img {
|
||
display: block;
|
||
max-height: 180px;
|
||
max-width: 180px;
|
||
width: auto;
|
||
margin: 0 auto;
|
||
transition: all 0.6s cubic-bezier(0.4, 0, 0.2, 1);
|
||
}
|
||
|
||
.qr-crop-container .qr-original {
|
||
opacity: 1;
|
||
}
|
||
|
||
.qr-crop-container .qr-cropped {
|
||
position: absolute;
|
||
top: 50%;
|
||
left: 50%;
|
||
transform: translate(-50%, -50%) scale(0.3);
|
||
opacity: 0;
|
||
max-height: 160px;
|
||
min-width: 140px;
|
||
min-height: 140px;
|
||
object-fit: contain;
|
||
}
|
||
|
||
.qr-crop-container.scan-complete .qr-original {
|
||
opacity: 0;
|
||
transform: scale(1.1);
|
||
filter: blur(4px);
|
||
}
|
||
|
||
.qr-crop-container.scan-complete .qr-cropped {
|
||
opacity: 1;
|
||
transform: translate(-50%, -50%) scale(1);
|
||
}
|
||
|
||
.qr-crop-container .crop-badge {
|
||
position: absolute;
|
||
bottom: 4px;
|
||
right: 4px;
|
||
font-size: 0.65rem;
|
||
opacity: 0;
|
||
transition: opacity 0.3s ease 0.4s;
|
||
}
|
||
|
||
.qr-crop-container.scan-complete .crop-badge {
|
||
opacity: 1;
|
||
}
|
||
</style>
|
||
|
||
<div class="row justify-content-center">
|
||
<div class="col-lg-8">
|
||
<div class="card">
|
||
<div class="card-header">
|
||
<h5 class="mb-0"><i class="bi bi-unlock-fill me-2"></i>Decode Secret Message or File</h5>
|
||
</div>
|
||
<div class="card-body">
|
||
{% if decoded_message %}
|
||
<!-- Text Message Result -->
|
||
<div class="alert alert-success">
|
||
<h6><i class="bi bi-check-circle me-2"></i>Message Decrypted Successfully!</h6>
|
||
</div>
|
||
|
||
<label class="form-label text-muted">Decoded Message:</label>
|
||
<div class="alert-message p-3 rounded bg-dark border border-secondary mb-2" id="decodedContent" style="white-space: pre-wrap;">{{ decoded_message }}</div>
|
||
<div class="d-flex justify-content-end mb-3">
|
||
<button class="btn btn-sm btn-outline-light" onclick="navigator.clipboard.writeText(document.getElementById('decodedContent').innerText).then(() => { this.innerHTML = '<i class=\'bi bi-check\'></i> Copied!'; setTimeout(() => this.innerHTML = '<i class=\'bi bi-clipboard\'></i> Copy', 2000); }).catch(() => alert('Failed to copy'))">
|
||
<i class="bi bi-clipboard"></i> Copy
|
||
</button>
|
||
</div>
|
||
|
||
<a href="/decode" class="btn btn-outline-light w-100">
|
||
<i class="bi bi-arrow-repeat me-2"></i>Decode Another
|
||
</a>
|
||
|
||
{% elif decoded_file %}
|
||
<!-- File Result -->
|
||
<div class="alert alert-success">
|
||
<h6><i class="bi bi-check-circle me-2"></i>File Decrypted Successfully!</h6>
|
||
</div>
|
||
|
||
<div class="text-center mb-4">
|
||
<i class="bi bi-file-earmark-check text-success" style="font-size: 4rem;"></i>
|
||
<h5 class="mt-3">{{ filename }}</h5>
|
||
<p class="text-muted mb-1">{{ file_size }}</p>
|
||
{% if mime_type %}
|
||
<small class="text-muted">Type: {{ mime_type }}</small>
|
||
{% endif %}
|
||
</div>
|
||
|
||
<a href="{{ url_for('decode_download', file_id=file_id) }}" class="btn btn-primary btn-lg w-100 mb-3">
|
||
<i class="bi bi-download me-2"></i>Download File
|
||
</a>
|
||
|
||
<div class="alert alert-warning small">
|
||
<i class="bi bi-clock me-1"></i>
|
||
<strong>File expires in 5 minutes.</strong> Download now.
|
||
</div>
|
||
|
||
<a href="/decode" class="btn btn-outline-light w-100">
|
||
<i class="bi bi-arrow-repeat me-2"></i>Decode Another
|
||
</a>
|
||
|
||
{% else %}
|
||
<!-- Decode Form -->
|
||
<form method="POST" enctype="multipart/form-data" id="decodeForm">
|
||
<div class="row">
|
||
<div class="col-md-6 mb-3">
|
||
<label class="form-label">
|
||
<i class="bi bi-image me-1"></i> Reference Photo
|
||
</label>
|
||
<div class="drop-zone scan-container" id="refDropZone">
|
||
<input type="file" name="reference_photo" accept="image/*" required>
|
||
<div class="drop-zone-label">
|
||
<i class="bi bi-cloud-arrow-up fs-3 d-block mb-2 text-muted"></i>
|
||
<span class="text-muted">Drop image or click to browse</span>
|
||
</div>
|
||
<img class="drop-zone-preview d-none" id="refPreview">
|
||
<!-- Scan overlay elements -->
|
||
<div class="scan-overlay">
|
||
<div class="scan-grid"></div>
|
||
<div class="scan-line"></div>
|
||
</div>
|
||
<!-- Corner brackets (shown after scan) -->
|
||
<div class="scan-corners">
|
||
<div class="scan-corner tl"></div>
|
||
<div class="scan-corner tr"></div>
|
||
<div class="scan-corner bl"></div>
|
||
<div class="scan-corner br"></div>
|
||
</div>
|
||
<!-- Data panel (shown after scan) -->
|
||
<div class="scan-data-panel">
|
||
<div class="scan-data-filename">
|
||
<i class="bi bi-check-circle-fill"></i>
|
||
<span id="refFileName">image.jpg</span>
|
||
</div>
|
||
<div class="scan-data-row">
|
||
<span class="scan-status-badge">Hash Acquired</span>
|
||
<span class="scan-data-value" id="refFileSize">--</span>
|
||
</div>
|
||
<div class="scan-hash-preview" id="refHashPreview">SHA256: ················</div>
|
||
</div>
|
||
</div>
|
||
<div class="form-text">
|
||
The same reference photo used for encoding
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-md-6 mb-3">
|
||
<label class="form-label">
|
||
<i class="bi bi-file-earmark-image me-1"></i> Stego Image
|
||
</label>
|
||
<div class="drop-zone pixel-container" id="stegoDropZone">
|
||
<input type="file" name="stego_image" accept="image/*" required>
|
||
<div class="drop-zone-label">
|
||
<i class="bi bi-cloud-arrow-up fs-3 d-block mb-2 text-muted"></i>
|
||
<span class="text-muted">Drop image or click to browse</span>
|
||
</div>
|
||
<img class="drop-zone-preview d-none" id="stegoPreview">
|
||
<!-- Pixel blocks overlay - populated by JS -->
|
||
<div class="pixel-blocks"></div>
|
||
<!-- Pixel scan line -->
|
||
<div class="pixel-scan-line"></div>
|
||
<!-- Corner brackets -->
|
||
<div class="pixel-corners">
|
||
<div class="pixel-corner tl"></div>
|
||
<div class="pixel-corner tr"></div>
|
||
<div class="pixel-corner bl"></div>
|
||
<div class="pixel-corner br"></div>
|
||
</div>
|
||
<!-- Data panel -->
|
||
<div class="pixel-data-panel">
|
||
<div class="pixel-data-filename">
|
||
<i class="bi bi-check-circle-fill"></i>
|
||
<span id="stegoFileName">image.png</span>
|
||
</div>
|
||
<div class="pixel-data-row">
|
||
<span class="pixel-status-badge">Stego Loaded</span>
|
||
<span class="pixel-data-value" id="stegoFileSize">--</span>
|
||
</div>
|
||
<div class="pixel-dimensions" id="stegoDims">-- × -- px</div>
|
||
</div>
|
||
</div>
|
||
<div class="form-text">
|
||
The image containing the hidden message/file
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="mb-3">
|
||
<label class="form-label">
|
||
<i class="bi bi-chat-quote me-1"></i> Passphrase
|
||
</label>
|
||
<input type="text" name="passphrase" id="passphraseInput" class="form-control passphrase-input"
|
||
placeholder="e.g., correct horse battery staple" required>
|
||
<div class="form-text">
|
||
The passphrase used during encoding (typically 4 words)
|
||
</div>
|
||
</div>
|
||
|
||
<hr class="my-4">
|
||
|
||
<h6 class="text-muted mb-3">
|
||
SECURITY FACTORS
|
||
<span class="text-warning small">(provide same factors used during encoding)</span>
|
||
</h6>
|
||
|
||
<div class="mb-3">
|
||
<div class="security-box">
|
||
<label class="form-label">
|
||
<i class="bi bi-file-earmark-lock me-1"></i> RSA Key
|
||
</label>
|
||
|
||
<!-- RSA Input Method Toggle -->
|
||
<div class="btn-group w-100 mb-2" role="group">
|
||
<input type="radio" class="btn-check" name="rsa_input_method" id="rsaMethodFile" value="file" checked>
|
||
<label class="btn btn-outline-secondary btn-sm" for="rsaMethodFile">
|
||
<i class="bi bi-file-earmark me-1"></i>.pem File
|
||
</label>
|
||
|
||
<input type="radio" class="btn-check" name="rsa_input_method" id="rsaMethodQr" value="qr">
|
||
<label class="btn btn-outline-secondary btn-sm" for="rsaMethodQr">
|
||
<i class="bi bi-qr-code me-1"></i>QR Code
|
||
</label>
|
||
</div>
|
||
|
||
<!-- .pem File Input -->
|
||
<div id="rsaFileSection">
|
||
<input type="file" name="rsa_key" class="form-control form-control-sm" id="rsaKeyInput" accept=".pem,.key,application/x-pem-file">
|
||
</div>
|
||
|
||
<!-- QR Code Input -->
|
||
<div id="rsaQrSection" class="d-none">
|
||
<div class="drop-zone p-3" id="qrDropZone">
|
||
<input type="file" name="rsa_key_qr" accept="image/*" id="rsaKeyQrInput">
|
||
<div class="drop-zone-label text-center">
|
||
<i class="bi bi-qr-code-scan fs-4 d-block text-muted mb-1"></i>
|
||
<span class="text-muted small">Drop QR image or click to browse</span>
|
||
</div>
|
||
<!-- Crop animation container -->
|
||
<div class="qr-scan-container qr-crop-container d-none" id="qrCropContainer">
|
||
<img class="qr-original" id="qrOriginal" alt="Original">
|
||
<img class="qr-cropped" id="qrCropped" alt="Cropped QR">
|
||
<!-- Data panel -->
|
||
<div class="qr-data-panel">
|
||
<div class="qr-data-filename">
|
||
<i class="bi bi-check-circle-fill"></i>
|
||
<span>RSA Key loaded</span>
|
||
</div>
|
||
<div class="qr-data-row">
|
||
<span class="qr-status-badge">RSA Key</span>
|
||
<span class="qr-data-value">--</span>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- Key Password (always visible) -->
|
||
<div class="input-group input-group-sm mt-2">
|
||
<input type="password" name="rsa_password" class="form-control" id="rsaPasswordInput" placeholder="Key password (if encrypted)">
|
||
<button class="btn btn-outline-secondary" type="button" data-toggle-password="rsaPasswordInput">
|
||
<i class="bi bi-eye"></i>
|
||
</button>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- PIN + Channel Row -->
|
||
<div class="row">
|
||
<div class="col-md-6 mb-3">
|
||
<div class="security-box h-100">
|
||
<label class="form-label"><i class="bi bi-123 me-1"></i> PIN</label>
|
||
<div class="input-group pin-input-container">
|
||
<input type="password" name="pin" class="form-control" id="pinInput" placeholder="••••••" maxlength="9">
|
||
<button class="btn btn-outline-secondary" type="button" data-toggle-password="pinInput">
|
||
<i class="bi bi-eye"></i>
|
||
</button>
|
||
</div>
|
||
<div class="form-text">If PIN was used during encoding</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="col-md-6 mb-3">
|
||
<div class="security-box h-100">
|
||
<label class="form-label">
|
||
<i class="bi bi-broadcast me-1"></i> Channel
|
||
<span class="badge bg-info ms-1">v4.0</span>
|
||
<a href="/about#channel-keys" class="text-muted ms-1" title="Learn about channels"><i class="bi bi-info-circle"></i></a>
|
||
</label>
|
||
|
||
<select class="form-select" name="channel_key" id="channelSelectDec">
|
||
<option value="auto" selected>Auto{% if channel_configured %} (Server Key){% endif %}</option>
|
||
<option value="none">Public</option>
|
||
<option value="custom">Custom</option>
|
||
</select>
|
||
|
||
<!-- Server channel indicator (compact) -->
|
||
{% if channel_configured %}
|
||
<div class="small text-success mt-2">
|
||
<i class="bi bi-shield-lock me-1"></i>
|
||
Server: <code>{{ channel_fingerprint[:4] }}-••••-···-••••-{{ channel_fingerprint[-4:] }}</code>
|
||
</div>
|
||
{% endif %}
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- Custom Channel Key Input (shown when Custom selected) -->
|
||
<div class="mb-4 d-none" id="channelCustomInputDec">
|
||
<div class="security-box">
|
||
<label class="form-label"><i class="bi bi-key me-1"></i> Custom Channel Key</label>
|
||
<div class="input-group">
|
||
<input type="text" name="channel_key_custom" class="form-control font-monospace"
|
||
placeholder="XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX"
|
||
pattern="[A-Za-z0-9]{4}(-[A-Za-z0-9]{4}){7}"
|
||
id="channelKeyInputDec">
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- ================================================================
|
||
ADVANCED OPTIONS (v3.0) - Extraction Mode
|
||
================================================================ -->
|
||
<div class="mb-4">
|
||
<a class="btn btn-sm btn-outline-secondary w-100" data-bs-toggle="collapse" href="#advancedOptionsDec" role="button" aria-expanded="false">
|
||
<i class="bi bi-gear me-1"></i> Advanced Options
|
||
<i class="bi bi-chevron-down ms-1" id="advancedChevronDec"></i>
|
||
</a>
|
||
|
||
<div class="collapse" id="advancedOptionsDec">
|
||
<div class="card card-body mt-2 bg-dark border-secondary">
|
||
|
||
<!-- Extraction Mode Selection -->
|
||
<div class="mb-0">
|
||
<label class="form-label">
|
||
<i class="bi bi-cpu me-1"></i> Extraction Mode
|
||
<span class="badge bg-info ms-1">v3.0</span>
|
||
</label>
|
||
|
||
<div class="d-flex gap-2">
|
||
<!-- Auto Mode -->
|
||
<label class="mode-btn flex-fill active" id="autoModeCard" for="modeAuto">
|
||
<input class="form-check-input" type="radio" name="embed_mode" id="modeAuto" value="auto" checked>
|
||
<i class="bi bi-magic text-success"></i>
|
||
<span class="ms-2"><strong>Auto</strong> <span class="text-muted d-none d-sm-inline">· Try both</span></span>
|
||
</label>
|
||
|
||
<!-- LSB Mode -->
|
||
<label class="mode-btn flex-fill" id="lsbModeCardDec" for="modeLsbDec">
|
||
<input class="form-check-input" type="radio" name="embed_mode" id="modeLsbDec" value="lsb">
|
||
<i class="bi bi-grid-3x3-gap text-primary"></i>
|
||
<span class="ms-2"><strong>LSB</strong> <span class="text-muted d-none d-sm-inline">· Spatial</span></span>
|
||
</label>
|
||
|
||
<!-- DCT Mode -->
|
||
<label class="mode-btn flex-fill {% if not has_dct %}opacity-50{% endif %}" id="dctModeCardDec" for="modeDctDec">
|
||
<input class="form-check-input" type="radio" name="embed_mode" id="modeDctDec" value="dct" {% if not has_dct %}disabled{% endif %}>
|
||
<i class="bi bi-soundwave text-warning"></i>
|
||
<span class="ms-2"><strong>DCT</strong> <span class="text-muted d-none d-sm-inline">· Frequency</span></span>
|
||
</label>
|
||
</div>
|
||
|
||
<div class="form-text mt-2">
|
||
<i class="bi bi-lightbulb me-1"></i>
|
||
<strong>Auto</strong> tries LSB first, then DCT.
|
||
{% if not has_dct %}
|
||
<span class="text-warning ms-2"><i class="bi bi-exclamation-triangle me-1"></i>DCT requires scipy</span>
|
||
{% endif %}
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<button type="submit" class="btn btn-primary btn-lg w-100" id="decodeBtn">
|
||
<i class="bi bi-unlock me-2"></i>Decode
|
||
</button>
|
||
</form>
|
||
|
||
{% endif %}
|
||
</div>
|
||
</div>
|
||
|
||
{% if not decoded_message and not decoded_file %}
|
||
<div class="card mt-4">
|
||
<div class="card-body">
|
||
<h6 class="text-muted mb-3"><i class="bi bi-question-circle me-2"></i>Troubleshooting</h6>
|
||
<ul class="list-unstyled text-muted small mb-0">
|
||
<li class="mb-2">
|
||
<i class="bi bi-check-circle-fill text-success me-1"></i>
|
||
Use the <strong>exact same reference photo</strong> file (byte-for-byte identical)
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-check-circle-fill text-success me-1"></i>
|
||
Enter the <strong>exact passphrase</strong> used during encoding (case-sensitive, spacing matters)
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-check-circle-fill text-success me-1"></i>
|
||
Provide the <strong>same security factors</strong> (PIN and/or RSA key) used during encoding
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-exclamation-triangle-fill text-warning me-1"></i>
|
||
Ensure the stego image hasn't been <strong>resized, cropped, or recompressed</strong>
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-exclamation-triangle-fill text-warning me-1"></i>
|
||
<strong>Format compatibility:</strong> v4.0 cannot decode messages from v3.1 or earlier (different format)
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-broadcast text-info me-1"></i>
|
||
<strong>Channel key:</strong> Use the same channel (Auto/Public/Custom) that was used during encoding
|
||
</li>
|
||
<li class="mb-2">
|
||
<i class="bi bi-info-circle-fill text-info me-1"></i>
|
||
If using an RSA key, verify the <strong>password is correct</strong> (if key is encrypted)
|
||
</li>
|
||
<li class="mb-0">
|
||
<i class="bi bi-info-circle-fill text-info me-1"></i>
|
||
If auto-detection fails, try specifying <strong>LSB or DCT mode</strong> in Advanced Options
|
||
</li>
|
||
</ul>
|
||
</div>
|
||
</div>
|
||
{% endif %}
|
||
</div>
|
||
</div>
|
||
{% endblock %}
|
||
|
||
{% block scripts %}
|
||
<script src="{{ url_for('static', filename='js/stegasoo.js') }}"></script>
|
||
<script>
|
||
// Extraction mode button active state toggle
|
||
const extractModeRadios = document.querySelectorAll('input[name="embed_mode"]');
|
||
const extractModeBtns = {
|
||
'auto': document.getElementById('autoModeCard'),
|
||
'lsb': document.getElementById('lsbModeCardDec'),
|
||
'dct': document.getElementById('dctModeCardDec')
|
||
};
|
||
|
||
extractModeRadios.forEach(radio => {
|
||
radio.addEventListener('change', () => {
|
||
Object.values(extractModeBtns).forEach(btn => btn?.classList.remove('active'));
|
||
extractModeBtns[radio.value]?.classList.add('active');
|
||
});
|
||
});
|
||
|
||
// Advanced options chevron
|
||
const advancedOptionsDec = document.getElementById('advancedOptionsDec');
|
||
advancedOptionsDec?.addEventListener('show.bs.collapse', () => {
|
||
document.getElementById('advancedChevronDec')?.classList.replace('bi-chevron-down', 'bi-chevron-up');
|
||
});
|
||
advancedOptionsDec?.addEventListener('hide.bs.collapse', () => {
|
||
document.getElementById('advancedChevronDec')?.classList.replace('bi-chevron-up', 'bi-chevron-down');
|
||
});
|
||
</script>
|
||
{% endblock %}
|