From 692973e9f5d294937c5d31bd8dc3f9658ea88fb9 Mon Sep 17 00:00:00 2001
From: Cell <1024@lruihao.cn>
Date: Sun, 22 May 2022 13:13:27 +0800
Subject: [PATCH] :construction: Feat: add content encryption crude demo (#123)

---
 exampleSite/content/tests/encrypt-content.md | 49 ++++++++++++++++++++
 layouts/partials/single/decrypt-form.html    | 32 +++++++++++++
 layouts/posts/single.html                    | 28 +++++++++--
 3 files changed, 105 insertions(+), 4 deletions(-)
 create mode 100644 exampleSite/content/tests/encrypt-content.md
 create mode 100644 layouts/partials/single/decrypt-form.html

diff --git a/exampleSite/content/tests/encrypt-content.md b/exampleSite/content/tests/encrypt-content.md
new file mode 100644
index 00000000..f919c8a6
--- /dev/null
+++ b/exampleSite/content/tests/encrypt-content.md
@@ -0,0 +1,49 @@
+---
+title: "Encrypt Test"
+date: 2022-05-21T22:31:22+08:00
+description: "Test for encrypting content"
+type: 'posts'
+draft: true
+password: 1212
+message: password is 1212
+
+tags:
+- Test
+- Encrypt
+categories:
+- Test
+
+menu:
+  main:
+    title: "Test for encrypting content"
+    parent: "tests"
+    pre: "<i class='fa-solid fa-vial fa-fw fa-sm'></i>"
+---
+
+I was shy, so I hid.
+
+<!-- emoji render error -->
+
+## Shortcodes in encrypted Content
+
+{{< version 0.2.8 >}}
+
+`script` is a shortcode to insert custom **:(fa-brands fa-js fa-fw): Javascript** in your post.
+
+{{< admonition >}}
+The script content can be guaranteed to be executed in order after all third-party libraries are loaded. So you are free to use third-party libraries.
+{{< /admonition >}}
+
+Example `script` input:
+
+```go-html-template
+{{</* script */>}}
+console.log('Hello FixIt!');
+{{</* /script */>}}
+```
+
+You can see the output in the console of the developer tool.
+
+{{< script >}}
+console.log('Hello FixIt!');
+{{< /script >}}
\ No newline at end of file
diff --git a/layouts/partials/single/decrypt-form.html b/layouts/partials/single/decrypt-form.html
new file mode 100644
index 00000000..674b9dc4
--- /dev/null
+++ b/layouts/partials/single/decrypt-form.html
@@ -0,0 +1,32 @@
+<div class="text-center" style="margin-top: 1rem;">
+  <input type="password" id="fixit-encrypt-gate" placeholder="{{ .Message }}">
+</div>
+
+<!-- Temporary attempt -->
+<script type="text/javascript">
+  document.querySelector('#fixit-encrypt-gate')?.addEventListener('keydown', function(e) {
+    if (e.code === 'Enter') {
+      e.preventDefault();
+      const $content = document.querySelector('#content');
+      const password = $content.getAttribute('data-password');
+      const base64EncodeContent = $content.getAttribute('data-content');
+      // TODO 密码正则验证，只允许数字和字母 (maybe)
+      const input = this.value.trim()
+      const saltLen = input.length % 2 ? input.length : input.length + 1;
+      // TODO 仅测试解密流程，md5 和 sha256 实现后，此处移除 明文密码
+      const inputMd5 = input === '1212' ? 'a01610228fe998f515a72dd730294d87' : 'md5_feature_todo';
+      const inputSha256 = 'cbfad02f9ed2a8d1e08d8f74f5303e9eb93637d47f82ab6f1c15871cf8dd0481';
+      if (inputMd5 !== password) {
+        return console.log('password error')
+      }
+      console.log('password passed')
+      const base64DecodeContent = atob(base64EncodeContent.replace(inputSha256.slice(saltLen), ''));
+      // TODO 记住解密状态
+      this.classList.add('d-none')
+      const $decryptedContent = document.createElement('div');
+      $decryptedContent.innerHTML = base64DecodeContent;
+      $decryptedContent.className = 'decrypted-ontent';
+      $content.insertAdjacentElement('afterbegin', $decryptedContent);
+    }
+  })
+</script>
\ No newline at end of file
diff --git a/layouts/posts/single.html b/layouts/posts/single.html
index 770d321b..2b041565 100644
--- a/layouts/posts/single.html
+++ b/layouts/posts/single.html
@@ -129,10 +129,30 @@
     {{- end -}}
 
     {{- /* Content */ -}}
-    <div class="content" id="content">
-      {{- /* Expiration Reminder */ -}}
-      {{- partial "single/expiration-reminder.html" . -}}
-      {{- dict "Content" .Content "Ruby" $params.ruby "Fraction" $params.fraction "Fontawesome" $params.fontawesome | partial "function/content.html" | safeHTML -}}
+    {{- $content := dict "Content" .Content "Ruby" $params.ruby "Fraction" $params.fraction "Fontawesome" $params.fontawesome | partial "function/content.html" | safeHTML -}}
+    {{- if $params.password -}}
+      {{- $saltLen := strings.RuneCount (trim $params.password "") -}}
+      {{- $saltLen = cond (eq (mod $saltLen 2) 0) (add $saltLen 1) $saltLen -}}
+      {{- $base64EncodeContent := $content | base64Encode -}}
+      {{- $content = printf "%v%v%v"
+        (substr $base64EncodeContent 0 $saltLen)
+        (substr (sha256 $params.password) $saltLen)
+        (substr $base64EncodeContent $saltLen)
+      -}}
+    {{- end -}}
+    <div
+      class="content"
+      id="content"
+      {{ with $params.password }}data-password="{{ md5 $params.password }}"{{ end }}
+      {{ with $params.password }}data-content="{{ $content }}"{{ end }}
+    >
+      {{- if not $params.password -}}
+        {{- /* Expiration Reminder */ -}}
+        {{- partial "single/expiration-reminder.html" . -}}
+        {{- $content -}}
+      {{- else -}}
+        {{- partial "single/decrypt-form.html" $params -}}
+      {{- end -}}
     </div>
 
     {{- /* Footer */ -}}