From 55291b155efae831c30c49c24ab6105816f0c3a7 Mon Sep 17 00:00:00 2001
From: Juliet <m@juli.ee>
Date: Sat, 28 Feb 2026 07:13:01 +0100
Subject: [PATCH] /info endpoint

---
 public/view.html   | 12 +++++-------
 src/routes/file.ts | 38 ++++++++++++++++++++++++++++----------
 2 files changed, 33 insertions(+), 17 deletions(-)

diff --git a/public/view.html b/public/view.html
index 8dc2700..d830857 100644
--- a/public/view.html
+++ b/public/view.html
@@ -19,7 +19,7 @@
         >
       </h1>
 
-      <!-- Metadata card (shown after HEAD) -->
+      <!-- Metadata card (shown after /info) -->
       <div id="meta" class="hidden">
         <div class="font-mono text-base mb-1" id="meta-name"></div>
         <div class="flex gap-3 text-muted text-xs mb-1">
@@ -262,16 +262,14 @@
 
         const key = await importKey(keyEncoded);
 
-        // HEAD — get metadata without fetching or burning the file
-        const headRes = await fetch(`/api/file/${id}`, { method: "HEAD" });
-        if (!headRes.ok) {
+        // /info — get metadata without fetching or burning the file
+        const infoRes = await fetch(`/api/file/${id}/info`);
+        if (!infoRes.ok) {
           errorEl.textContent = "File not found or expired.";
           return;
         }
 
-        const burnAfterRead = headRes.headers.get("X-Burn-After-Read") === "1";
-        const expiresAt = parseInt(headRes.headers.get("X-Expires-At") || "0");
-        const size = parseInt(headRes.headers.get("Content-Length") || "0");
+        const { burnAfterRead, expiresAt, size } = await infoRes.json();
 
         metaName.textContent = "Encrypted file";
         metaSize.textContent = formatBytes(size);
diff --git a/src/routes/file.ts b/src/routes/file.ts
index aebfa13..7a04b76 100644
--- a/src/routes/file.ts
+++ b/src/routes/file.ts
@@ -2,7 +2,12 @@ import { Hono } from "hono";
 import { createFile, getFile, peekFile, unlinkFile } from "../db.ts";
 import { config } from "../config.ts";
 
-const DURATION_UNITS: Record<string, number> = { s: 1, m: 60, h: 3600, d: 86400 };
+const DURATION_UNITS: Record<string, number> = {
+  s: 1,
+  m: 60,
+  h: 3600,
+  d: 86400,
+};
 
 function parseDuration(s: string): number | undefined {
   const n = parseInt(s);
@@ -61,10 +66,27 @@ file.post("/", async (c) => {
   return c.json({ id, deleteToken });
 });
 
-file.on(["HEAD", "GET"], "/:id", (c) => {
+file.get("/:id/info", (c) => {
   const id = c.req.param("id");
-  const isHead = c.req.method === "HEAD";
-  const row = isHead ? peekFile(id) : getFile(id);
+  const row = peekFile(id);
+
+  if (!row) {
+    return c.json({ error: "File not found or expired" }, 404);
+  }
+
+  const bunFile = Bun.file(`${FILES_DIR}/${id}`);
+
+  return c.json({
+    id,
+    expiresAt: row.expires_at,
+    burnAfterRead: row.burn_after_read === 1,
+    size: bunFile.size,
+  });
+});
+
+file.get("/:id", (c) => {
+  const id = c.req.param("id");
+  const row = getFile(id);
 
   if (!row) {
     return c.json({ error: "File not found or expired" }, 404);
@@ -76,17 +98,13 @@ file.on(["HEAD", "GET"], "/:id", (c) => {
   const headers = new Headers({
     "Content-Type": "application/octet-stream",
     "Content-Length": String(bunFile.size),
-    "X-Expires-At": String(row.expires_at),
-    "X-Burn-After-Read": row.burn_after_read ? "1" : "0",
   });
 
-  const response = new Response(bunFile, { headers });
-
-  if (!isHead && row.burn_after_read) {
+  if (row.burn_after_read) {
     setTimeout(() => unlinkFile(id), 0);
   }
 
-  return response;
+  return new Response(bunFile, { headers });
 });
 
 export default file;
-- 
2.51.2