// NIP-98 HTTP Auth header (kind 27235): the signature covers the exact URL, // method and body hash, so a captured header is useless anywhere else. Its // own module — every build needs it (registrar calls), but only some builds // need the login/backup machinery around it in nostr-login.js. import { hex } from '@scure/base'; import { sha256 } from '@noble/hashes/sha256'; export async function nip98Header(signer, url, method, bodyText) { const tags = [['u', url], ['method', method.toUpperCase()]]; if (bodyText) tags.push(['payload', hex.encode(sha256(new TextEncoder().encode(bodyText)))]); const evt = await signer.signEvent({ kind: 27235, created_at: Math.floor(Date.now() / 1000), tags, content: '', }); return 'Nostr ' + btoa(JSON.stringify(evt)); } e='85f5e1c26472176dfd846bbd410e6796598e240f'/> coinos ui — legacy coinos.io web app (SvelteKit)coinos
aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/upload.js
blob: 099e2f301fad1d1a1b3368908e02b66fc2fbfb20 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
export const upload = async (file, type, progress, token) => {
	let url = `/api/upload/${type}`;
	let formData = new FormData();
	formData.append('file', file);

	return new Promise((resolve, reject) => {
		let ajax = new XMLHttpRequest();
		ajax.addEventListener('load', () => {
			if (ajax.readyState === ajax.DONE) {
				if (ajax.status === 200) resolve(ajax.response);
				else reject(new Error(`Upload failed: ${ajax.response}`));
			}
		});
		ajax.upload.addEventListener('progress', progress, false);
		ajax.open('POST', url);
		ajax.setRequestHeader('Authorization', `Bearer ${token}`);
		ajax.send(formData);
	});
};