MEGA Web Client

MEGA provides robust cloud storage with convenient and powerful
always-on privacy. MEGA believes in your right to privacy and provides
you with the technology tools to protect it. We call it User
Controlled Encryption (UCE), and it happens automatically.

Secure Boot

secureboot.js loads all the resources from static content servers
and verifies its authenticity by checking the cryptographic hash.

Note: This is not the exact same secureboot.js as we have
online at https://mega.nz/secureboot.js. We have an automatic
process that generates secureboot.js with its cryptographic
hashes and all the versioned resource files
(file_X.js/file_X.html) as needed based on this repository
before prior to updating the live site.

During development it's essential that your set the following
localStorage parameters:

// Disables the cryptographic hash verification logic.
localStorage.dd = 1;

There are also various other localStorage parameters that are
useful during development:

// Enables vanilla console logging.
localStorage.d = 1;
// Enables full console logging via MegaLogger.
localStorage.minLogLevel = 0;
// Allows you to disable the context menu in the FM for element inspection.
localStorage.contextmenu = 1;

Local webclient setup instructions for Ubuntu (for MEGAchat see INSTALL.md)

1. Install Apache2:

sudo apt-get install apache2

2. Create a new virtual host configuration file and edit it:

sudo nano /etc/apache2/sites-available/webclient.conf

3. Add the following and save the file:

<VirtualHost *:80>
    ServerName webclient.local
    ServerAdmin webmaster@webclient.local
    DocumentRoot /var/www/html/webclient.local
    ErrorLog /var/log/apache2/webclient.local.error.log
    CustomLog /var/log/apache2/webclient.local.access.log combined
    LogLevel warn

    <Directory "/var/www/html/webclient.local">
        AllowOverride All
    </Directory>
</VirtualHost>

4. Enable the config, also the rewrite and headers modules:

sudo a2ensite webclient.conf
sudo a2enmod rewrite

5. Edit the hosts file:

sudo nano /etc/hosts

6. Add the following and save the file:

127.0.0.1       webclient.local

7. Restart the web server:

sudo systemctl restart apache2

8. Clone the repository:

cd /var/www/html/
git clone git@code.developers.mega.co.nz:web/webclient.git webclient.local

9. Set permissions:

sudo chgrp -R www-data /var/www/html/
sudo chown -R <your-username> /var/www/html/

10. Pull language files:

/var/www/html/webclient.local/scripts/lang.sh

11. Visit http://webclient.local in your browser.

Directories

• js/ -- contains all generic JavaScript files
• html/ -- contains all generic HTML files
• js/html/ contains all JavaScript files that belong to the
  specific HTML file of the parent folder
• js/vendor/ -- contains all JavaScript files from external developers
• cmaps/ -- contains all Character mapping files for Pdf preview's Adobe font

Our JavaScript Files

• secureboot.js -- loads all the resources from static content
  servers and verifies its authenticity by checking the cryptographic
  hash
• decrypter.js -- the decrypter which is used as a web worker to
  decrypt data while downloading
• encrypter.js -- the encrypter which is used as a web worker to
  encrypt data while uploading
• pdf.worker.js -- worker for PDF Reader in JavaScript, this is a fork, compare the changes
• worker.sfuClient.bundle.js -- worker for MEGA SFU client
  for audio/video calls
• js/avatar.js -- is used for avatar selection, cropping & scaling
  (all on the client side in the canvas)
• js/cleartemp.js -- contains clearIt() which is used to purge
  temp data from the FileSystem API (Chrome only)
• js/countries.js -- contains all the country names (we should
  translate these at some point)
• js/crypto.js -- contains all the cryptographic functions & API
  handlers
• js/download.js -- contains all the download logic
• js/filedrag.js -- event handlers for the upload buttons,
  file&folder-drag&drop event handling for upload init.
• js/filetypes.js -- contains all the supported file types based
  on the file extension to match icons
• js/fm.js -- file manager core file, contains mainly file manager
  UI & dialog UI logic
• js/functions.js -- contains some generic functions that are used
  throughout the site
• js/keygen.js -- for cryptographic public/private key pair
  creation
• js/mDB.js -- providers the local database abstraction layer for
  caching of meta-data in IndexedDB
• js/mega.js -- MegaData class which does most of the data
  handling (but also some FM UI interaction)
• js/mouse.js -- captures mouse events for entropy collection
• js/notify.js -- contains the notifications logic
• js/thumbnail.js -- client side canvas based thumbnail creation
  (because thumbnails are encrypted, too)
• js/upload.js -- contains all the upload logic
• js/account.js -- contains the user creation & login logic
• js/zip.js -- JavaScript implementation to create ZIP archives of
  multiple files on the client side

Vendor JavaScript Files

• aesasm.js -- general-purpose cryptographic library
• rsaasm.js -- general-purpose cryptographic library
• sjcl.js -- Stanford Javascript Crypto Library.
  This is a modified version with some minor changes, see c211e4ce and de5c3dce

See js/vendor/README.md for more.