From dfd0ebcfc55c7aa8eedc9b3f669a83f83a9c846a Mon Sep 17 00:00:00 2001 From: InstalZDLL Date: Sun, 15 Mar 2026 00:30:53 +0100 Subject: [PATCH] feat: add Timestamp PDF tool with RFC 3161 support MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add document timestamping to the Secure PDF section using RFC 3161 protocol. Users can select from preset TSA servers (DigiCert, Sectigo, SSL.com, Entrust, FreeTSA) or enter a custom TSA URL. No personal certificate is required — only a cryptographic hash is sent to the server. Key changes: - Timestamp PDF page with TSA server selector, FAQ and SEO structured data - timestampPdf() function with CORS proxy URL resolution - TimestampNode for the workflow engine - Tool entry in Secure PDF category + homepage i18n - Built-in CORS proxy middleware for dev/preview - Translations for all 16 languages Tested with DigiCert, Sectigo and Entrust TSA servers. Timestamps are verifiable in Adobe Acrobat (ETSI.RFC3161 SubFilter). --- .env.development | 2 + public/locales/ar/tools.json | 9 + public/locales/be/tools.json | 9 + public/locales/da/tools.json | 11 +- public/locales/de/tools.json | 9 + public/locales/en/tools.json | 9 + public/locales/es/tools.json | 9 + public/locales/fr/tools.json | 9 + public/locales/id/tools.json | 9 + public/locales/it/tools.json | 9 + public/locales/nl/tools.json | 9 + public/locales/pt/tools.json | 9 + public/locales/sv/tools.json | 9 + public/locales/tr/tools.json | 9 + public/locales/vi/tools.json | 9 + public/locales/zh-TW/tools.json | 9 + public/locales/zh/tools.json | 9 + src/js/config/timestamp-tsa.ts | 14 + src/js/config/tools.ts | 7 + src/js/logic/digital-sign-pdf.ts | 70 +++- src/js/logic/timestamp-pdf-page.ts | 257 +++++++++++++ src/js/main.ts | 1 + src/js/workflow/nodes/registry.ts | 8 + src/js/workflow/nodes/timestamp-node.ts | 60 +++ src/pages/timestamp-pdf.html | 492 ++++++++++++++++++++++++ vite.config.ts | 81 +++- 26 files changed, 1127 insertions(+), 11 deletions(-) create mode 100644 .env.development create mode 100644 src/js/config/timestamp-tsa.ts create mode 100644 src/js/logic/timestamp-pdf-page.ts create mode 100644 src/js/workflow/nodes/timestamp-node.ts create mode 100644 src/pages/timestamp-pdf.html diff --git a/.env.development b/.env.development new file mode 100644 index 0000000..f152305 --- /dev/null +++ b/.env.development @@ -0,0 +1,2 @@ +# Dev-only: route TSA/certificate requests through the built-in Vite CORS proxy +VITE_CORS_PROXY_URL=/cors-proxy diff --git a/public/locales/ar/tools.json b/public/locales/ar/tools.json index 10ec041..3ece746 100644 --- a/public/locales/ar/tools.json +++ b/public/locales/ar/tools.json @@ -593,6 +593,15 @@ "pageTitle": "التحقق من توقيع PDF - التحقق من التوقيعات الرقمية | BentoPDF", "subtitle": "التحقق من التوقيعات الرقمية في ملفات PDF. تحقق من صلاحية الشهادة، واعرض تفاصيل الموقّع، وتأكد من سلامة المستند. تتم جميع المعالجة في متصفحك." }, + "timestampPdf": { + "name": "ختم PDF بالوقت", + "pageTitle": "ختم PDF بالوقت مجاناً - ختم RFC 3161 | BentoPDF", + "subtitle": "أضف ختماً زمنياً RFC 3161 إلى ملف PDF باستخدام خادم TSA موثوق. يثبت أن مستندك كان موجوداً في وقت محدد. لا يتطلب شهادة.", + "tsaSectionTitle": "خادم الختم الزمني (TSA)", + "selectTsa": "اختر خادم TSA", + "applyTimestamp": "تطبيق الختم الزمني", + "successMessage": "تم ختم PDF بالوقت بنجاح! يمكن التحقق من الختم في Adobe Acrobat وقارئات PDF الأخرى." + }, "emailToPdf": { "name": "بريد إلكتروني إلى PDF", "subtitle": "تحويل ملفات البريد الإلكتروني (EML، MSG) إلى تنسيق PDF. يدعم تصديرات Outlook وتنسيقات البريد القياسية.", diff --git a/public/locales/be/tools.json b/public/locales/be/tools.json index 2d959f1..ed8e820 100644 --- a/public/locales/be/tools.json +++ b/public/locales/be/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Праверыць подпіс PDF - Верыфікацыя лічбавых подпісаў | BentoPDF", "subtitle": "Праверыць лічбавыя подпісы ў PDF. Праверыць сапраўднасць сертыфіката, паглядзець дэталі падпісанта і пацвердзіць надзейнасць дакумента. Уся апрацоўка адбываецца ў вашым браўзеры." }, + "timestampPdf": { + "name": "Пазначыць PDF часам", + "pageTitle": "Часовая пазнака PDF бясплатна - RFC 3161 | BentoPDF", + "subtitle": "Дадайце часовую пазнаку RFC 3161 да PDF праз давераны сервер TSA. Даказвае, што ваш дакумент існаваў у пэўны момант часу. Сертыфікат не патрабуецца.", + "tsaSectionTitle": "Сервер часовых пазнак (TSA)", + "selectTsa": "Абраць сервер TSA", + "applyTimestamp": "Прымяніць часовую пазнаку", + "successMessage": "PDF паспяхова пазначаны часам! Пазнаку можна праверыць у Adobe Acrobat і іншых PDF-праглядчыках." + }, "emailToPdf": { "name": "Email у PDF", "subtitle": "Канвертаваць файлы email (EML, MSG) у PDF. Падтрымлівае экспарты Outlook і стандартныя email-фарматы.", diff --git a/public/locales/da/tools.json b/public/locales/da/tools.json index df4c677..2e46f2d 100644 --- a/public/locales/da/tools.json +++ b/public/locales/da/tools.json @@ -591,7 +591,16 @@ "validateSignaturePdf": { "name": "Validér PDF-signatur", "pageTitle": "Validér PDF-signatur - Verificér digitale signaturer | BentoPDF", - "subtitle": "Tjek digitale signaturer i dine PDF’er. Verificér certifikater, se underskriverdetaljer og bekræft dokumentintegritet." + "subtitle": "Tjek digitale signaturer i dine PDF'er. Verificér certifikater, se underskriverdetaljer og bekræft dokumentintegritet." + }, + "timestampPdf": { + "name": "Tidsstempl PDF", + "pageTitle": "Tidsstempl PDF gratis online - RFC 3161 dokumenttidsstempel | BentoPDF", + "subtitle": "Tilføj et RFC 3161 tidsstempel til din PDF via en betroet TSA-server. Beviser at dit dokument eksisterede på et bestemt tidspunkt. Intet certifikat påkrævet.", + "tsaSectionTitle": "Tidsstempelserver (TSA)", + "selectTsa": "Vælg en TSA-server", + "applyTimestamp": "Anvend tidsstempel", + "successMessage": "PDF tidsstemplet med succes! Tidsstemplet kan verificeres i Adobe Acrobat og andre PDF-læsere." }, "emailToPdf": { "name": "Email til PDF", diff --git a/public/locales/de/tools.json b/public/locales/de/tools.json index b818605..870226c 100644 --- a/public/locales/de/tools.json +++ b/public/locales/de/tools.json @@ -593,6 +593,15 @@ "pageTitle": "PDF-Signatur überprüfen - Digitale Signaturen verifizieren | BentoPDF", "subtitle": "Überprüfen Sie digitale Signaturen in Ihren PDF-Dateien. Prüfen Sie die Zertifikatsgültigkeit, sehen Sie Unterzeichnerdetails und bestätigen Sie die Dokumentenintegrität. Die gesamte Verarbeitung erfolgt in Ihrem Browser." }, + "timestampPdf": { + "name": "PDF mit Zeitstempel versehen", + "pageTitle": "PDF-Zeitstempel online kostenlos - RFC 3161 Dokumentenzeitstempel | BentoPDF", + "subtitle": "Fügen Sie Ihrem PDF einen RFC 3161-Zeitstempel über einen vertrauenswürdigen Zeitstempelserver (TSA) hinzu. Beweist, dass Ihr Dokument zu einem bestimmten Zeitpunkt existierte. Kein Zertifikat erforderlich.", + "tsaSectionTitle": "Zeitstempelserver (TSA)", + "selectTsa": "TSA-Server auswählen", + "applyTimestamp": "Zeitstempel anwenden", + "successMessage": "PDF erfolgreich mit Zeitstempel versehen! Der Zeitstempel kann in Adobe Acrobat und anderen PDF-Readern überprüft werden." + }, "emailToPdf": { "name": "E-Mail zu PDF", "subtitle": "E-Mail-Dateien (EML, MSG) in PDF-Format konvertieren. Unterstützt Outlook-Exporte und Standard-E-Mail-Formate.", diff --git a/public/locales/en/tools.json b/public/locales/en/tools.json index f9d3785..4601f3a 100644 --- a/public/locales/en/tools.json +++ b/public/locales/en/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Validate PDF Signature - Verify Digital Signatures | BentoPDF", "subtitle": "Verify digital signatures in your PDF files. Check certificate validity, view signer details, and confirm document integrity. All processing happens in your browser." }, + "timestampPdf": { + "name": "Timestamp PDF", + "pageTitle": "Timestamp PDF Online Free - RFC 3161 Document Timestamp | BentoPDF", + "subtitle": "Add an RFC 3161 document timestamp to your PDF using a trusted Time Stamp Authority (TSA) server. Proves your document existed at a specific point in time. No certificate required.", + "tsaSectionTitle": "Timestamp Server (TSA)", + "selectTsa": "Select a TSA server", + "applyTimestamp": "Apply Timestamp", + "successMessage": "PDF timestamped successfully! The timestamp can be verified in Adobe Acrobat and other PDF readers." + }, "emailToPdf": { "name": "Email to PDF", "subtitle": "Convert email files (EML, MSG) to PDF format. Supports Outlook exports and standard email formats.", diff --git a/public/locales/es/tools.json b/public/locales/es/tools.json index bd4671d..e38d27a 100644 --- a/public/locales/es/tools.json +++ b/public/locales/es/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Validar Firma PDF - Verificar Firmas Digitales | BentoPDF", "subtitle": "Verifica firmas digitales en tus archivos PDF. Comprueba la validez del certificado, ve los detalles del firmante y confirma la integridad del documento." }, + "timestampPdf": { + "name": "Sellar PDF con marca de tiempo", + "pageTitle": "Marca de tiempo PDF gratis - Sello RFC 3161 | BentoPDF", + "subtitle": "Añade una marca de tiempo RFC 3161 a tu PDF mediante un servidor TSA de confianza. Demuestra que tu documento existía en un momento específico. No se requiere certificado.", + "tsaSectionTitle": "Servidor de marca de tiempo (TSA)", + "selectTsa": "Seleccionar un servidor TSA", + "applyTimestamp": "Aplicar marca de tiempo", + "successMessage": "¡PDF sellado con marca de tiempo! La marca puede verificarse en Adobe Acrobat y otros lectores PDF." + }, "emailToPdf": { "name": "Email a PDF", "subtitle": "Convierte archivos de correo (EML, MSG) a formato PDF. Soporta exportaciones de Outlook y formatos de correo estándar.", diff --git a/public/locales/fr/tools.json b/public/locales/fr/tools.json index f03d44c..31ff776 100644 --- a/public/locales/fr/tools.json +++ b/public/locales/fr/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Valider la signature PDF - Vérifier les signatures numériques | BentoPDF", "subtitle": "Vérifier les signatures numériques de vos fichiers PDF. Contrôlez la validité du certificat, consultez les informations du signataire et confirmez l’intégrité du document. Tout le traitement s’effectue dans votre navigateur." }, + "timestampPdf": { + "name": "Horodater un PDF", + "pageTitle": "Horodatage PDF en ligne gratuit - Horodatage RFC 3161 | BentoPDF", + "subtitle": "Ajoutez un horodatage RFC 3161 à votre PDF via un serveur d'horodatage (TSA) de confiance. Prouve que votre document existait à un moment précis. Aucun certificat requis.", + "tsaSectionTitle": "Serveur d'horodatage (TSA)", + "selectTsa": "Sélectionner un serveur TSA", + "applyTimestamp": "Appliquer l'horodatage", + "successMessage": "PDF horodaté avec succès ! L'horodatage peut être vérifié dans Adobe Acrobat et d'autres lecteurs PDF." + }, "emailToPdf": { "name": "Email vers PDF", "subtitle": "Convertir des fichiers email (EML, MSG) au format PDF. Prend en charge les exports Outlook et les formats email standards.", diff --git a/public/locales/id/tools.json b/public/locales/id/tools.json index bf548a7..5636ec5 100644 --- a/public/locales/id/tools.json +++ b/public/locales/id/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Validasi Tanda Tangan PDF - Verifikasi Tanda Tangan Digital | BentoPDF", "subtitle": "Verifikasi tanda tangan digital di file PDF Anda. Periksa validitas sertifikat, lihat detail penandatangan, dan konfirmasi integritas dokumen. Semua pemrosesan terjadi di browser Anda." }, + "timestampPdf": { + "name": "Stempel Waktu PDF", + "pageTitle": "Stempel Waktu PDF Gratis Online - RFC 3161 | BentoPDF", + "subtitle": "Tambahkan stempel waktu RFC 3161 ke PDF Anda menggunakan server TSA tepercaya. Membuktikan dokumen Anda ada pada waktu tertentu. Tidak memerlukan sertifikat.", + "tsaSectionTitle": "Server Stempel Waktu (TSA)", + "selectTsa": "Pilih server TSA", + "applyTimestamp": "Terapkan Stempel Waktu", + "successMessage": "PDF berhasil diberi stempel waktu! Stempel waktu dapat diverifikasi di Adobe Acrobat dan pembaca PDF lainnya." + }, "emailToPdf": { "name": "Email ke PDF", "subtitle": "Konversi file email (EML, MSG) ke format PDF. Mendukung ekspor Outlook dan format email standar.", diff --git a/public/locales/it/tools.json b/public/locales/it/tools.json index 0945292..b65965b 100644 --- a/public/locales/it/tools.json +++ b/public/locales/it/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Verifica firma PDF - Controlla firme digitali | BentoPDF", "subtitle": "Verifica le firme digitali nei tuoi PDF. Controlla la validità del certificato, visualizza i dati del firmatario e conferma l'integrità del documento. Tutto avviene nel tuo browser." }, + "timestampPdf": { + "name": "Marca temporale PDF", + "pageTitle": "Marca temporale PDF gratuita online - RFC 3161 | BentoPDF", + "subtitle": "Aggiungi una marca temporale RFC 3161 al tuo PDF tramite un server TSA affidabile. Dimostra che il tuo documento esisteva in un momento specifico. Nessun certificato richiesto.", + "tsaSectionTitle": "Server marca temporale (TSA)", + "selectTsa": "Seleziona un server TSA", + "applyTimestamp": "Applica marca temporale", + "successMessage": "PDF marcato temporalmente con successo! La marca può essere verificata in Adobe Acrobat e altri lettori PDF." + }, "emailToPdf": { "name": "Email in PDF", "subtitle": "Converti file email (EML, MSG) in formato PDF. Supporta esportazioni Outlook e formati email standard.", diff --git a/public/locales/nl/tools.json b/public/locales/nl/tools.json index 40a1630..314cc27 100644 --- a/public/locales/nl/tools.json +++ b/public/locales/nl/tools.json @@ -593,6 +593,15 @@ "pageTitle": "PDF-handtekening valideren - Digitale handtekeningen verifiëren | BentoPDF", "subtitle": "Digitale handtekeningen in een PDF-bestanden verifiëren. Controleer de geldigheid van het certificaat, bekijk de gegevens van de ondertekenaar en bevestig de integriteit van het document. Alle verwerking gebeurt binnen jouw browser." }, + "timestampPdf": { + "name": "PDF tijdstempelen", + "pageTitle": "PDF tijdstempel gratis online - RFC 3161 documenttijdstempel | BentoPDF", + "subtitle": "Voeg een RFC 3161 tijdstempel toe aan je PDF via een vertrouwde TSA-server. Bewijst dat je document op een specifiek moment bestond. Geen certificaat vereist.", + "tsaSectionTitle": "Tijdstempelserver (TSA)", + "selectTsa": "Selecteer een TSA-server", + "applyTimestamp": "Tijdstempel toepassen", + "successMessage": "PDF succesvol voorzien van tijdstempel! Het tijdstempel kan worden geverifieerd in Adobe Acrobat en andere PDF-lezers." + }, "emailToPdf": { "name": "E-mail naar PDF", "subtitle": "Converteer e-mailbestanden (EML, MSG) naar PDF-formaat. Ondersteunt Outlook-exports en standaard e-mailformaten.", diff --git a/public/locales/pt/tools.json b/public/locales/pt/tools.json index 24eaafe..a71f37e 100644 --- a/public/locales/pt/tools.json +++ b/public/locales/pt/tools.json @@ -607,6 +607,15 @@ "pageTitle": "Validar Assinatura PDF - Verificar Assinaturas Digitais | BentoPDF", "subtitle": "Verifique assinaturas digitais em seus arquivos PDF. Verifique a validade do certificado e a integridade do documento." }, + "timestampPdf": { + "name": "Carimbo de tempo PDF", + "pageTitle": "Carimbo de tempo PDF grátis online - RFC 3161 | BentoPDF", + "subtitle": "Adicione um carimbo de tempo RFC 3161 ao seu PDF usando um servidor TSA confiável. Prova que o seu documento existia num momento específico. Sem necessidade de certificado.", + "tsaSectionTitle": "Servidor de carimbo de tempo (TSA)", + "selectTsa": "Selecionar um servidor TSA", + "applyTimestamp": "Aplicar carimbo de tempo", + "successMessage": "PDF carimbado com sucesso! O carimbo pode ser verificado no Adobe Acrobat e noutros leitores de PDF." + }, "pdfToWord": { "name": "PDF para Word", "subtitle": "Converter arquivos PDF em documentos Word editáveis." diff --git a/public/locales/sv/tools.json b/public/locales/sv/tools.json index 2f02976..8411af4 100644 --- a/public/locales/sv/tools.json +++ b/public/locales/sv/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Validera PDF-signatur - Verifiera digitala signaturer | BentoPDF", "subtitle": "Verifiera digitala signaturer i dina PDF-filer. Kontrollera certifikatgiltighet, visa signerardetaljer och bekräfta dokumentintegritet. All bearbetning sker i din webbläsare." }, + "timestampPdf": { + "name": "Tidsstämpla PDF", + "pageTitle": "Tidsstämpla PDF gratis online - RFC 3161 dokumenttidsstämpel | BentoPDF", + "subtitle": "Lägg till en RFC 3161 tidsstämpel till din PDF via en betrodd TSA-server. Bevisar att ditt dokument existerade vid en specifik tidpunkt. Inget certifikat krävs.", + "tsaSectionTitle": "Tidsstämpelserver (TSA)", + "selectTsa": "Välj en TSA-server", + "applyTimestamp": "Tillämpa tidsstämpel", + "successMessage": "PDF tidsstämplad! Tidsstämpeln kan verifieras i Adobe Acrobat och andra PDF-läsare." + }, "emailToPdf": { "name": "E-post till PDF", "subtitle": "Konvertera e-postfiler (EML, MSG) till PDF-format. Stöder Outlook-exporter och standard e-postformat.", diff --git a/public/locales/tr/tools.json b/public/locales/tr/tools.json index a1f2eee..177e876 100644 --- a/public/locales/tr/tools.json +++ b/public/locales/tr/tools.json @@ -607,6 +607,15 @@ "pageTitle": "Validate PDF Signature - Verify Digital Signatures | BentoPDF", "subtitle": "Verify digital signatures in your PDF files. Check certificate validity, view signer details, and confirm document integrity. All processing happens in your browser." }, + "timestampPdf": { + "name": "PDF Zaman Damgası", + "pageTitle": "PDF Zaman Damgası Ücretsiz - RFC 3161 Belge Zaman Damgası | BentoPDF", + "subtitle": "Güvenilir bir TSA sunucusu aracılığıyla PDF'nize RFC 3161 zaman damgası ekleyin. Belgenizin belirli bir zamanda var olduğunu kanıtlar. Sertifika gerekmez.", + "tsaSectionTitle": "Zaman Damgası Sunucusu (TSA)", + "selectTsa": "Bir TSA sunucusu seçin", + "applyTimestamp": "Zaman Damgası Uygula", + "successMessage": "PDF başarıyla zaman damgalandı! Zaman damgası Adobe Acrobat ve diğer PDF okuyucularda doğrulanabilir." + }, "pdfToWord": { "name": "PDF'den Word'e", "subtitle": "PDF dosyalarını düzenlenebilir Word belgelerine dönüştürün." diff --git a/public/locales/vi/tools.json b/public/locales/vi/tools.json index 088bbc5..1c23437 100644 --- a/public/locales/vi/tools.json +++ b/public/locales/vi/tools.json @@ -593,6 +593,15 @@ "pageTitle": "Xác minh chữ ký PDF - Xác thực chữ ký số | BentoPDF", "subtitle": "Xác minh chữ ký số trong tệp PDF của bạn. Kiểm tra hiệu lực chứng chỉ, xem thông tin người ký và xác nhận tính toàn vẹn tài liệu. Tất cả xử lý diễn ra trong trình duyệt của bạn." }, + "timestampPdf": { + "name": "Đóng dấu thời gian PDF", + "pageTitle": "Đóng dấu thời gian PDF miễn phí - RFC 3161 | BentoPDF", + "subtitle": "Thêm dấu thời gian RFC 3161 vào PDF của bạn thông qua máy chủ TSA đáng tin cậy. Chứng minh tài liệu của bạn tồn tại tại một thời điểm cụ thể. Không cần chứng chỉ.", + "tsaSectionTitle": "Máy chủ dấu thời gian (TSA)", + "selectTsa": "Chọn máy chủ TSA", + "applyTimestamp": "Áp dụng dấu thời gian", + "successMessage": "PDF đã được đóng dấu thời gian thành công! Dấu thời gian có thể được xác minh trong Adobe Acrobat và các trình đọc PDF khác." + }, "emailToPdf": { "name": "Email sang PDF", "subtitle": "Chuyển đổi tệp email (EML, MSG) sang định dạng PDF. Hỗ trợ xuất Outlook và định dạng email tiêu chuẩn.", diff --git a/public/locales/zh-TW/tools.json b/public/locales/zh-TW/tools.json index 1cfb7e6..7a1142d 100644 --- a/public/locales/zh-TW/tools.json +++ b/public/locales/zh-TW/tools.json @@ -607,6 +607,15 @@ "pageTitle": "Validate PDF Signature - Verify Digital Signatures | BentoPDF", "subtitle": "Verify digital signatures in your PDF files. Check certificate validity, view signer details, and confirm document integrity. All processing happens in your browser." }, + "timestampPdf": { + "name": "PDF 時間戳記", + "pageTitle": "免費線上 PDF 時間戳記 - RFC 3161 文件時間戳記 | BentoPDF", + "subtitle": "透過可信賴的 TSA 伺服器為您的 PDF 新增 RFC 3161 時間戳記。證明您的文件在特定時間點存在。無需憑證。", + "tsaSectionTitle": "時間戳記伺服器 (TSA)", + "selectTsa": "選擇 TSA 伺服器", + "applyTimestamp": "套用時間戳記", + "successMessage": "PDF 時間戳記新增成功！時間戳記可在 Adobe Acrobat 和其他 PDF 閱讀器中驗證。" + }, "pdfToWord": { "name": "PDF 轉 Word", "subtitle": "將 PDF 檔案轉換為可編輯的 Word 文件。" diff --git a/public/locales/zh/tools.json b/public/locales/zh/tools.json index adefe6a..bb58a94 100644 --- a/public/locales/zh/tools.json +++ b/public/locales/zh/tools.json @@ -593,6 +593,15 @@ "pageTitle": "验证 PDF 签名 - 验证数字签名 | BentoPDF", "subtitle": "验证您的 PDF 文件中的数字签名。检查证书有效性、查看签名者详情并确认文档完整性。所有处理都在您的浏览器中进行。" }, + "timestampPdf": { + "name": "PDF 时间戳", + "pageTitle": "免费在线 PDF 时间戳 - RFC 3161 文档时间戳 | BentoPDF", + "subtitle": "通过可信的 TSA 服务器为您的 PDF 添加 RFC 3161 时间戳。证明您的文档在特定时间点存在。无需证书。", + "tsaSectionTitle": "时间戳服务器 (TSA)", + "selectTsa": "选择 TSA 服务器", + "applyTimestamp": "应用时间戳", + "successMessage": "PDF 时间戳添加成功！时间戳可在 Adobe Acrobat 和其他 PDF 阅读器中验证。" + }, "emailToPdf": { "name": "邮件转 PDF", "subtitle": "将电子邮件文件 (EML, MSG) 转换为 PDF 格式。支持 Outlook 导出和标准邮件格式。", diff --git a/src/js/config/timestamp-tsa.ts b/src/js/config/timestamp-tsa.ts new file mode 100644 index 0000000..253cb47 --- /dev/null +++ b/src/js/config/timestamp-tsa.ts @@ -0,0 +1,14 @@ +export interface TimestampTsaPreset { + label: string; + url: string; +} + +// Some TSA providers only expose HTTP endpoints. RFC 3161 timestamp tokens are +// signed at the application layer, so integrity does not depend solely on TLS. +export const TIMESTAMP_TSA_PRESETS: TimestampTsaPreset[] = [ + { label: 'DigiCert', url: 'http://timestamp.digicert.com' }, + { label: 'Sectigo', url: 'http://timestamp.sectigo.com' }, + { label: 'SSL.com', url: 'http://ts.ssl.com' }, + { label: 'FreeTSA', url: 'https://freetsa.org/tsr' }, + { label: 'MeSign', url: 'http://tsa.mesign.com' }, +]; diff --git a/src/js/config/tools.ts b/src/js/config/tools.ts index 0772dd5..26ebfb4 100644 --- a/src/js/config/tools.ts +++ b/src/js/config/tools.ts @@ -785,6 +785,13 @@ const baseCategories = [ icon: 'ph-seal-check', subtitle: 'Verify digital signatures and view certificate details.', }, + { + href: import.meta.env.BASE_URL + 'timestamp-pdf.html', + name: 'Timestamp PDF', + icon: 'ph-clock', + subtitle: + 'Add an RFC 3161 document timestamp using a trusted TSA server.', + }, ], }, ]; diff --git a/src/js/logic/digital-sign-pdf.ts b/src/js/logic/digital-sign-pdf.ts index 37bc989..bacfba1 100644 --- a/src/js/logic/digital-sign-pdf.ts +++ b/src/js/logic/digital-sign-pdf.ts @@ -153,6 +153,20 @@ async function generateProxySignature( .join(''); } +async function buildCorsProxyUrl(url: string): Promise { + let proxyUrl = `${CORS_PROXY_URL}?url=${encodeURIComponent(url)}`; + + if (!CORS_PROXY_SECRET) { + return proxyUrl; + } + + const timestamp = Date.now(); + const signature = await generateProxySignature(url, timestamp); + proxyUrl += `&t=${timestamp}&sig=${signature}`; + + return proxyUrl; +} + /** * Custom fetch wrapper that routes external certificate requests through a CORS proxy. * The zgapdfsigner library tries to fetch issuer certificates from URLs embedded in the @@ -192,20 +206,30 @@ function createCorsAwareFetch(): { url.includes('caIssuers')) && !url.startsWith(window.location.origin); - if (isExternalCertificateUrl && CORS_PROXY_URL) { - let proxyUrl = `${CORS_PROXY_URL}?url=${encodeURIComponent(url)}`; + const isTsaRequest = + (init?.headers && + typeof init.headers === 'object' && + 'Content-Type' in init.headers && + (init.headers as Record)['Content-Type'] === + 'application/timestamp-query') || + url.includes('timestamp') || + url.includes('/tsa') || + url.includes('/tsr') || + url.includes('/ts01') || + url.includes('RFC3161'); + const shouldProxy = + (isExternalCertificateUrl || isTsaRequest) && + !url.startsWith(window.location.origin); + + if (shouldProxy && CORS_PROXY_URL) { + const proxyUrl = await buildCorsProxyUrl(url); if (CORS_PROXY_SECRET) { - const timestamp = Date.now(); - const signature = await generateProxySignature(url, timestamp); - proxyUrl += `&t=${timestamp}&sig=${signature}`; console.log( - `[CORS Proxy] Routing signed certificate request through proxy: ${url}` + `[CORS Proxy] Routing signed request through proxy: ${url}` ); } else { - console.log( - `[CORS Proxy] Routing certificate request through proxy: ${url}` - ); + console.log(`[CORS Proxy] Routing request through proxy: ${url}`); } return originalFetch(proxyUrl, init); @@ -302,6 +326,34 @@ export async function signPdf( } } +export async function timestampPdf( + pdfBytes: Uint8Array, + tsaUrl: string +): Promise { + let effectiveUrl = tsaUrl; + + if (CORS_PROXY_URL) { + effectiveUrl = await buildCorsProxyUrl(tsaUrl); + + if (CORS_PROXY_SECRET) { + console.log( + `[Timestamp] Routing signed TSA request through proxy: ${tsaUrl}` + ); + } else { + console.log(`[Timestamp] Routing TSA request through proxy: ${tsaUrl}`); + } + } + + const signOptions: SignOption = { + signdate: { url: effectiveUrl }, + }; + + const signer = new PdfSigner(signOptions); + + const timestampedPdfBytes = await signer.sign(pdfBytes); + return new Uint8Array(timestampedPdfBytes); +} + export function getCertificateInfo(certificate: forge.pki.Certificate): { subject: string; issuer: string; diff --git a/src/js/logic/timestamp-pdf-page.ts b/src/js/logic/timestamp-pdf-page.ts new file mode 100644 index 0000000..6793300 --- /dev/null +++ b/src/js/logic/timestamp-pdf-page.ts @@ -0,0 +1,257 @@ +import { createIcons, icons } from 'lucide'; +import { showAlert, showLoader, hideLoader } from '../ui.js'; +import { + readFileAsArrayBuffer, + formatBytes, + downloadFile, + getPDFDocument, +} from '../utils/helpers.js'; +import { TIMESTAMP_TSA_PRESETS } from '../config/timestamp-tsa.js'; +import { timestampPdf } from './digital-sign-pdf.js'; + +interface TimestampState { + pdfFile: File | null; + pdfBytes: Uint8Array | null; +} + +const state: TimestampState = { + pdfFile: null, + pdfBytes: null, +}; + +function getElement(id: string): T | null { + return document.getElementById(id) as T | null; +} + +function resetState(): void { + state.pdfFile = null; + state.pdfBytes = null; + + const fileDisplayArea = getElement('file-display-area'); + if (fileDisplayArea) fileDisplayArea.innerHTML = ''; + + const fileInput = getElement('file-input'); + if (fileInput) fileInput.value = ''; + + const tsaSection = getElement('tsa-section'); + if (tsaSection) tsaSection.classList.add('hidden'); + + updateProcessButton(); +} + +function initializePage(): void { + createIcons({ icons }); + + const fileInput = getElement('file-input'); + const dropZone = getElement('drop-zone'); + const processBtn = getElement('process-btn'); + const backBtn = getElement('back-to-tools'); + const tsaPreset = getElement('tsa-preset'); + + populateTsaPresets(tsaPreset); + + if (fileInput) { + fileInput.addEventListener('change', handlePdfUpload); + fileInput.addEventListener('click', () => { + fileInput.value = ''; + }); + } + + if (dropZone) { + dropZone.addEventListener('dragover', (e) => { + e.preventDefault(); + dropZone.classList.add('bg-gray-700'); + }); + + dropZone.addEventListener('dragleave', () => { + dropZone.classList.remove('bg-gray-700'); + }); + + dropZone.addEventListener('drop', (e) => { + e.preventDefault(); + dropZone.classList.remove('bg-gray-700'); + const droppedFiles = e.dataTransfer?.files; + if (droppedFiles && droppedFiles.length > 0) { + handlePdfFile(droppedFiles[0]); + } + }); + } + + if (processBtn) { + processBtn.addEventListener('click', processTimestamp); + } + + if (backBtn) { + backBtn.addEventListener('click', () => { + window.location.href = import.meta.env.BASE_URL; + }); + } +} + +function populateTsaPresets(tsaPreset: HTMLSelectElement | null): void { + if (!tsaPreset) return; + + tsaPreset.replaceChildren(); + + for (const preset of TIMESTAMP_TSA_PRESETS) { + const option = document.createElement('option'); + option.value = preset.url; + option.textContent = preset.label; + tsaPreset.append(option); + } +} + +function handlePdfUpload(e: Event): void { + const input = e.target as HTMLInputElement; + if (input.files && input.files.length > 0) { + handlePdfFile(input.files[0]); + } +} + +async function handlePdfFile(file: File): Promise { + if ( + file.type !== 'application/pdf' && + !file.name.toLowerCase().endsWith('.pdf') + ) { + showAlert('Invalid File', 'Please select a PDF file.'); + return; + } + + state.pdfFile = file; + state.pdfBytes = new Uint8Array( + (await readFileAsArrayBuffer(file)) as ArrayBuffer + ); + + updatePdfDisplay(); + showTsaSection(); + updateProcessButton(); +} + +async function updatePdfDisplay(): Promise { + const fileDisplayArea = getElement('file-display-area'); + + if (!fileDisplayArea || !state.pdfFile) return; + + fileDisplayArea.innerHTML = ''; + + const fileDiv = document.createElement('div'); + fileDiv.className = + 'flex items-center justify-between bg-gray-700 p-3 rounded-lg'; + + const infoContainer = document.createElement('div'); + infoContainer.className = 'flex flex-col flex-1 min-w-0'; + + const nameSpan = document.createElement('div'); + nameSpan.className = 'truncate font-medium text-gray-200 text-sm mb-1'; + nameSpan.textContent = state.pdfFile.name; + + const metaSpan = document.createElement('div'); + metaSpan.className = 'text-xs text-gray-400'; + metaSpan.textContent = `${formatBytes(state.pdfFile.size)} • Loading pages...`; + + infoContainer.append(nameSpan, metaSpan); + + const removeBtn = document.createElement('button'); + removeBtn.className = 'ml-4 text-red-400 hover:text-red-300 flex-shrink-0'; + removeBtn.innerHTML = ''; + removeBtn.onclick = () => { + state.pdfFile = null; + state.pdfBytes = null; + fileDisplayArea.innerHTML = ''; + hideTsaSection(); + updateProcessButton(); + }; + + fileDiv.append(infoContainer, removeBtn); + fileDisplayArea.appendChild(fileDiv); + createIcons({ icons }); + + try { + if (state.pdfBytes) { + const pdfDoc = await getPDFDocument({ + data: state.pdfBytes.slice(), + }).promise; + metaSpan.textContent = `${formatBytes(state.pdfFile.size)} • ${pdfDoc.numPages} pages`; + } + } catch (error) { + console.error('Error loading PDF:', error); + metaSpan.textContent = `${formatBytes(state.pdfFile.size)}`; + } +} + +function showTsaSection(): void { + const tsaSection = getElement('tsa-section'); + if (tsaSection) { + tsaSection.classList.remove('hidden'); + } +} + +function hideTsaSection(): void { + const tsaSection = getElement('tsa-section'); + if (tsaSection) { + tsaSection.classList.add('hidden'); + } +} + +function updateProcessButton(): void { + const processBtn = getElement('process-btn'); + if (!processBtn) return; + + if (state.pdfBytes) { + processBtn.classList.remove('hidden'); + processBtn.disabled = false; + } else { + processBtn.classList.add('hidden'); + processBtn.disabled = true; + } +} + +function getTsaUrl(): string | null { + const tsaPreset = getElement('tsa-preset'); + if (!tsaPreset) return null; + + return tsaPreset.value; +} + +async function processTimestamp(): Promise { + if (!state.pdfBytes || !state.pdfFile) { + showAlert('No File', 'Please upload a PDF file first.'); + return; + } + + const tsaUrl = getTsaUrl(); + if (!tsaUrl) return; + + showLoader('Applying timestamp...'); + + try { + const timestampedBytes = await timestampPdf(state.pdfBytes, tsaUrl); + + const outputFilename = state.pdfFile.name.replace( + /\.pdf$/i, + '_timestamped.pdf' + ); + const blob = new Blob([new Uint8Array(timestampedBytes)], { + type: 'application/pdf', + }); + downloadFile(blob, outputFilename); + + showAlert( + 'Success', + 'PDF timestamped successfully! The timestamp can be verified in Adobe Acrobat and other PDF readers.' + ); + + resetState(); + } catch (error) { + console.error('Timestamp error:', error); + const message = error instanceof Error ? error.message : 'Unknown error'; + showAlert( + 'Timestamp Failed', + `Failed to timestamp PDF: ${message}\n\nPlease try a different TSA server or check your internet connection.` + ); + } finally { + hideLoader(); + } +} + +document.addEventListener('DOMContentLoaded', initializePage); diff --git a/src/js/main.ts b/src/js/main.ts index 8474670..74b3c09 100644 --- a/src/js/main.ts +++ b/src/js/main.ts @@ -214,6 +214,7 @@ const init = async () => { 'Deskew PDF': 'tools:deskewPdf', 'Digital Signature': 'tools:digitalSignPdf', 'Validate Signature': 'tools:validateSignaturePdf', + 'Timestamp PDF': 'tools:timestampPdf', 'Scanner Effect': 'tools:scannerEffect', 'Adjust Colors': 'tools:adjustColors', 'Markdown to PDF': 'tools:markdownToPdf', diff --git a/src/js/workflow/nodes/registry.ts b/src/js/workflow/nodes/registry.ts index 2520b16..2fdfa67 100644 --- a/src/js/workflow/nodes/registry.ts +++ b/src/js/workflow/nodes/registry.ts @@ -35,6 +35,7 @@ import { SanitizeNode } from './sanitize-node'; import { EncryptNode } from './encrypt-node'; import { DecryptNode } from './decrypt-node'; import { DigitalSignNode } from './digital-sign-node'; +import { TimestampNode } from './timestamp-node'; import { RedactNode } from './redact-node'; import { RepairNode } from './repair-node'; import { PdfToTextNode } from './pdf-to-text-node'; @@ -509,6 +510,13 @@ export const nodeRegistry: Record = { description: 'Apply a digital signature to PDF', factory: () => new DigitalSignNode(), }, + TimestampNode: { + label: 'Timestamp', + category: 'Secure PDF', + icon: 'ph-clock', + description: 'Add an RFC 3161 document timestamp', + factory: () => new TimestampNode(), + }, RedactNode: { label: 'Redact', category: 'Secure PDF', diff --git a/src/js/workflow/nodes/timestamp-node.ts b/src/js/workflow/nodes/timestamp-node.ts new file mode 100644 index 0000000..e77e870 --- /dev/null +++ b/src/js/workflow/nodes/timestamp-node.ts @@ -0,0 +1,60 @@ +import { ClassicPreset } from 'rete'; +import { BaseWorkflowNode } from './base-node'; +import { pdfSocket } from '../sockets'; +import type { SocketData } from '../types'; +import { requirePdfInput, processBatch } from '../types'; +import { PDFDocument } from 'pdf-lib'; +import { TIMESTAMP_TSA_PRESETS } from '../../config/timestamp-tsa.js'; +import { timestampPdf } from '../../logic/digital-sign-pdf.js'; + +export class TimestampNode extends BaseWorkflowNode { + readonly category = 'Secure PDF' as const; + readonly icon = 'ph-clock'; + readonly description = 'Add an RFC 3161 document timestamp'; + + constructor() { + super('Timestamp'); + this.addInput('pdf', new ClassicPreset.Input(pdfSocket, 'PDF')); + this.addOutput( + 'pdf', + new ClassicPreset.Output(pdfSocket, 'Timestamped PDF') + ); + this.addControl( + 'tsaUrl', + new ClassicPreset.InputControl('text', { + initial: TIMESTAMP_TSA_PRESETS[0].url, + }) + ); + } + + getTsaPresets(): { label: string; url: string }[] { + return TIMESTAMP_TSA_PRESETS; + } + + async data( + inputs: Record + ): Promise> { + const pdfInputs = requirePdfInput(inputs, 'Timestamp'); + + const tsaUrlCtrl = this.controls['tsaUrl'] as + | ClassicPreset.InputControl<'text'> + | undefined; + const tsaUrl = tsaUrlCtrl?.value || TIMESTAMP_TSA_PRESETS[0].url; + + return { + pdf: await processBatch(pdfInputs, async (input) => { + const timestampedBytes = await timestampPdf(input.bytes, tsaUrl); + + const bytes = new Uint8Array(timestampedBytes); + const document = await PDFDocument.load(bytes); + + return { + type: 'pdf', + document, + bytes, + filename: input.filename.replace(/\.pdf$/i, '_timestamped.pdf'), + }; + }), + }; + } +} diff --git a/src/pages/timestamp-pdf.html b/src/pages/timestamp-pdf.html new file mode 100644 index 0000000..13446c0 --- /dev/null +++ b/src/pages/timestamp-pdf.html @@ -0,0 +1,492 @@ + + + + + + + + Timestamp PDF Online Free - RFC 3161 Document Timestamp | BentoPDF + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + {{> navbar }} + +
+
+ + +

+ Timestamp PDF +

+

+ Add an RFC 3161 document timestamp to your PDF using a trusted Time + Stamp Authority (TSA) server. Proves your document existed at a + specific point in time. No certificate required. +

+ +
+ +
+

+ Internet connection required +

+

+ Timestamping requires contacting the selected TSA server to obtain + a trusted timestamp token. +

+
+
+ +
+
+ +

+ Click to select a file + or drag and drop +

+

+ PDF Documents +

+

+ Your files never leave your device. +

+
+ +
+ +
+ + + + +
+
+ + + + + +
+

+ How It Works +

+
+
+
+ 1 +
+
+

Upload PDF

+

+ Select the PDF document you want to timestamp +

+
+
+
+
+ 2 +
+
+

+ Choose TSA Server +

+

Select one of the trusted TSA servers

+
+
+
+
+ 3 +
+
+

+ Timestamp & Download +

+

+ Apply the RFC 3161 timestamp and download your timestamped PDF +

+
+
+
+
+ +
+

+ Related PDF Tools +

+
+ +

Digital Signature

+

Sign with X.509 certificate

+ + +

Validate Signature

+

Verify digital signatures

+ + +

Encrypt PDF

+

Password protect your PDF

+ + +

Flatten PDF

+

Make annotations permanent

+ + +

Sanitize PDF

+

Remove hidden data

+ +
+
+ +
+

+ Frequently Asked Questions +

+
+
+ + What is a document timestamp? + + +

+ A document timestamp (RFC 3161) is a cryptographic proof that your + PDF existed at a specific point in time. A trusted Time Stamp + Authority (TSA) server signs a hash of your document along with the + current time, creating a tamper-evident timestamp embedded in the + PDF. +

+
+
+ + Do I need a certificate? + + +

+ No. Unlike a digital signature, a document timestamp does not + require a personal certificate. The TSA server provides the trusted + timestamp using its own certificate. +

+
+
+ + Is my document sent to the TSA server? + + +

+ No. Only a cryptographic hash (SHA-256) of your document is sent to + the TSA server. Your actual PDF content never leaves your browser. +

+
+
+ + Will the timestamp be valid in PDF readers? + + +

+ Yes. The tool creates a standard RFC 3161 document timestamp + (ETSI.RFC3161 SubFilter) that is recognized by Adobe Acrobat and + other major PDF viewers. +

+
+
+
+ + {{> footer }} + + + + + + + + + + + + + + + + diff --git a/vite.config.ts b/vite.config.ts index 5b1e410..d6fda0a 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -1,5 +1,7 @@ import { defineConfig, Plugin } from 'vitest/config'; import type { IncomingMessage, ServerResponse } from 'http'; +import http from 'http'; +import https from 'https'; import type { Connect } from 'vite'; import basicSsl from '@vitejs/plugin-basic-ssl'; import tailwindcss from '@tailwindcss/vite'; @@ -197,13 +199,89 @@ function createLanguageMiddleware(isDev: boolean): Connect.NextHandleFunction { }; } +function createCorsProxyMiddleware(): Connect.NextHandleFunction { + return ( + req: IncomingMessage, + res: ServerResponse, + next: Connect.NextFunction + ): void => { + if (!req.url?.startsWith('/cors-proxy')) return next(); + + if (req.method === 'OPTIONS') { + res.setHeader('Access-Control-Allow-Origin', req.headers.origin || '*'); + res.setHeader('Access-Control-Allow-Methods', 'GET,POST,OPTIONS'); + res.setHeader('Access-Control-Allow-Headers', 'Content-Type'); + res.statusCode = 204; + res.end(); + return; + } + + const parsed = new URL(req.url, 'http://localhost'); + const targetUrl = parsed.searchParams.get('url'); + if (!targetUrl) { + res.statusCode = 400; + res.end('Missing url parameter'); + return; + } + + console.log(`[CORS Proxy] ${req.method} ${targetUrl}`); + + const bodyChunks: Buffer[] = []; + req.on('data', (chunk: Buffer) => bodyChunks.push(chunk)); + req.on('end', () => { + const body = Buffer.concat(bodyChunks); + const target = new URL(targetUrl); + const transport = target.protocol === 'https:' ? https : http; + + const headers: Record = {}; + if (req.headers['content-type']) { + headers['Content-Type'] = req.headers['content-type'] as string; + } + if (body.length > 0) { + headers['Content-Length'] = String(body.length); + } + + const proxyReq = transport.request( + targetUrl, + { method: req.method || 'GET', headers }, + (proxyRes) => { + console.log( + `[CORS Proxy] Response: ${proxyRes.statusCode} from ${targetUrl}` + ); + res.setHeader( + 'Access-Control-Allow-Origin', + req.headers.origin || '*' + ); + res.setHeader('Access-Control-Allow-Methods', 'GET,POST,OPTIONS'); + res.setHeader('Access-Control-Allow-Headers', 'Content-Type'); + res.statusCode = proxyRes.statusCode || 200; + proxyRes.pipe(res); + } + ); + + proxyReq.on('error', (err) => { + console.error('[CORS Proxy] Error:', err.message); + res.statusCode = 502; + res.end(`Proxy error: ${err.message}`); + }); + + if (body.length > 0) { + proxyReq.write(body); + } + proxyReq.end(); + }); + }; +} + function languageRouterPlugin(): Plugin { return { name: 'language-router', configureServer(server) { + server.middlewares.use(createCorsProxyMiddleware()); server.middlewares.use(createLanguageMiddleware(true)); }, configurePreviewServer(server) { + server.middlewares.use(createCorsProxyMiddleware()); server.middlewares.use(createLanguageMiddleware(false)); }, }; @@ -309,7 +387,7 @@ export default defineConfig(() => { include: ['buffer', 'stream', 'util', 'zlib', 'process'], globals: { Buffer: true, - global: true, + global: false, process: true, }, }), @@ -551,6 +629,7 @@ export default defineConfig(() => { __dirname, 'src/pages/digital-sign-pdf.html' ), + 'timestamp-pdf': resolve(__dirname, 'src/pages/timestamp-pdf.html'), 'validate-signature-pdf': resolve( __dirname, 'src/pages/validate-signature-pdf.html'