5.1.0

API

API v5.1.0 — Symmetric, OTP.

Added endpoint POST /symmetric: encrypts and decrypts text using AES symmetric encryption. Supports aes-256-gcm (default), aes-256-cbc, and aes-128-gcm algorithms. Key derivation uses scryptSync with a random 16-byte salt. The encrypted output is a self-contained base64 blob carrying the salt, IV, authentication tag (GCM), and ciphertext.
Added endpoint POST /otp: generates and verifies one-time passwords following RFC 4226 (HOTP) and RFC 6238 (TOTP). Compatible with Google Authenticator and Aegis. Supports sha1, sha256, and sha512 algorithms, 6 or 8 digit codes, and 15/30/60 second periods. Pass a counter for deterministic HOTP mode; omit it for time-based TOTP. Verification applies a ±1 period tolerance window and returns a drift field.
Fixed version checks in DELETE and PATCH route handlers that were incorrectly rejecting v5 and later versions.
Corrected alphabetical ordering in versions.ts, post.ts, and get.ts.
Added section separators (// ─── Section ───) in chart.ts; added blank lines between private functions in chart.ts.
Reformatted validateBarLine and validatePieDonut for readability (one check per line, grouped by concern).
Standardized error message casing: all messages now start with an uppercase letter (v4 and v5).