fox-send/frontend/src/fileReceiver.js

const EventEmitter = require('events');
const { hexToArray } = require('./utils');

class FileReceiver extends EventEmitter {
  constructor() {
    super();
  }

  download() {
    return Promise.all([
      new Promise((resolve, reject) => {
        const xhr = new XMLHttpRequest();

        xhr.onprogress = event => {
          if (event.lengthComputable && event.target.status !== 404) {
            this.emit('progress', [event.loaded, event.total]);
          }
        };

        xhr.onload = function(event) {
          if (xhr.status === 404) {
            reject(
              new Error('The file has expired, or has already been deleted.')
            );
            return;
          }

          const blob = new Blob([this.response]);
          const fileReader = new FileReader();
          fileReader.onload = function() {
            const meta = JSON.parse(xhr.getResponseHeader('X-File-Metadata'));
            resolve({
              data: this.result,
              aad: meta.aad,
              filename: meta.filename,
              iv: meta.id
            });
          };

          fileReader.readAsArrayBuffer(blob);
        };

        xhr.open('get', '/assets' + location.pathname.slice(0, -1), true);
        xhr.responseType = 'blob';
        xhr.send();
      }),
      window.crypto.subtle.importKey(
        'jwk',
        {
          kty: 'oct',
          k: location.hash.slice(1),
          alg: 'A128GCM',
          ext: true
        },
        {
          name: 'AES-GCM'
        },
        true,
        ['encrypt', 'decrypt']
      )
    ]).then(([fdata, key]) => {
      this.emit('decrypting', true);
      return Promise.all([
        window.crypto.subtle.decrypt(
          {
            name: 'AES-GCM',
            iv: hexToArray(fdata.iv),
            additionalData: hexToArray(fdata.aad)
          },
          key,
          fdata.data
        ).then(decrypted => {
          this.emit('decrypting', false);
          return Promise.resolve(decrypted)
        }),
        fdata.filename,
        hexToArray(fdata.aad)
      ]);
    }).then(([decrypted, fname, proposedHash]) => {
      this.emit('hashing', true);
      return window.crypto.subtle.digest('SHA-256', decrypted).then(calculatedHash => {
        this.emit('hashing', false);
        const integrity = new Uint8Array(calculatedHash).toString() === proposedHash.toString();
        if (!integrity) {
          this.emit('unsafe', true)
          return Promise.reject();
        } else {
          this.emit('safe', true);
          return Promise.all([
            decrypted,
            decodeURIComponent(fname)
          ]);
        }
      })
    })
  }
}

module.exports = FileReceiver;