Developer Builds One-Time Secret Sharing App Using AdonisJS 6
A new open-source project for secure short message and file sharing with browser-side encryption and self-destructing links.
Stock photo for illustration only, not from the actual event
- Built OTI project to master AdonisJS 6 and browser encryption
- Messages are encrypted client-side; server stores only ciphertexts
- Latest update adds a confirmation button to block accidental chat previews
- Features include password protection, expiry countdown, and QR sharing
A software developer has introduced a compact open-source project named OTI, designed as a straightforward tool for sharing text messages or tiny text files via a link that can be accessed only once. The initiative started as an effort to gain hands-on experience with AdonisJS 6 and browser-based encryption mechanisms while leaving a practical utility for fellow developers.
Regarding the technical workflow, messages undergo encryption directly inside the browser. Consequently, the backend server retains exclusively encrypted data, while the private key remains securely tied within the sharing link itself.
The most recent update introduces a mandatory confirmation step prior to revealing a secret, stopping chat applications from accidentally consuming the link via automatic URL previews. The secret is permanently purged right after the initial genuine view. Additional capabilities include a creator receipt page, QR code sharing, support for encrypted .txt files up to 100 KB, password protection, and an active expiry countdown timer.
Stock photo for illustration only, not from the actual event
Under the hood, the application relies on AdonisJS 6, TypeScript, MySQL, Redis, Edge, and Vite, with the entire codebase released under the MIT license. The creator noted leveraging an AI coding assistant for segments of implementation, code review, formatting, and documentation, while retaining full personal control over the architecture, final choices, code reviews, and testing.
One-time secret sharing tools solve a critical security gap in engineering workflows, such as transmitting temporary passwords, API secrets, or sensitive credentials without leaving permanent traces in chat logs or server databases. Implementing client-side encryption ensures zero-knowledge architecture on the server side, meaning even a database breach will not expose plain-text secrets without the decryption key stored in the URL fragment.
Despite its utility, the creator issued a caveat that OTI is a lightweight project and has not undergone a professional security audit, expressing hope that it remains helpful to community members.
Source: Dev.to
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment