Some societies — particularly in Latin America, Eastern Europe, and East Asia — still
distribute and ingest CWR via plain FTP or FTPS rather than SFTP or HTTPS portals.
ASTRO supports both: FTPS explicit (AUTH TLS) on port 21 and{' '}
FTPS implicit on port 990, plus plain FTP for
legacy partners. Cleartext FTP is flagged as a security warning on every transfer.
Encryption: passwords are stored as enc:AES256:<hex> — never as plaintext. Typing a new password re-encrypts on save. The current encrypted blob remains opaque even when "show" is toggled unless you provide a new plaintext.
{/* RIGHT: remote folder browser, scoped to the directories above */}
REMOTE BROWSER · {form.host}
{filesLoading && OPENING DATA CHANNEL…}
Pick a directory tab to LIST its contents over the data channel.
Listings reflect the configured remote paths above — edit them and the
browser follows.
)}
{files && (
<>
{files.dir} · {files.items.length} entries
{files.items.length === 0 && (
(empty)
)}
{files.items.map((f, i) => (
{f.name}
{formatBytes(f.size)}
{f.ts}
))}
)}
{/* Test result strip */}
{test && (
LAST TEST
{test.ok && !test.warning && CONNECTED · {test.latencyMs}MS}
{test.ok && test.warning && {test.warning.replace('_',' ')}}
{!test.ok && {test.error}}
{test.msg}{new Date(test.ts).toLocaleTimeString()}
)}
);
}
// ─── Form primitives ─────────────────────────────────────────────
function FormGrid({ children }) {
return
{children}
;
}
function Field({ label, hint, wide, children }) {
return (
);
}
function Select({ value, onChange, options }) {
return (
);
}
function Toggle({ on, onChange, onLabel = 'on', offLabel = 'off' }) {
return (
);
}
function formatBytes(n) {
if (n < 1024) return n + ' B';
if (n < 1024 * 1024) return (n / 1024).toFixed(1) + ' KB';
return (n / (1024 * 1024)).toFixed(1) + ' MB';
}
// ─── Security audit panel ──────────────────────────────────────
function SecurityAudit({ societies, tests }) {
const findings = useMemo(() => {
const out = [];
societies.forEach(({ code, cfg, cred }) => {
const ftp = cred?.ftp || cred?.ftps;
if (cfg.primary === 'FTP') {
out.push({ code, severity: 'high', kind: 'CLEARTEXT_FTP',
msg: 'Plain FTP transmits credentials and data unencrypted. Recommend migrating to FTPS or SFTP.' });
}
if (cfg.primary === 'FTPS' && ftp && ftp.tlsVerify === false) {
out.push({ code, severity: 'medium', kind: 'TLS_VERIFY_DISABLED',
msg: 'TLS certificate verification is disabled. Vulnerable to man-in-the-middle attack.' });
}
if (ftp && !ftp.passive) {
out.push({ code, severity: 'low', kind: 'ACTIVE_MODE',
msg: 'Active mode enabled. Most production NATs and firewalls require passive mode.' });
}
if ((cfg.primary === 'FTP' || cfg.primary === 'FTPS') && !cfg.fallback) {
out.push({ code, severity: 'low', kind: 'NO_FALLBACK',
msg: 'No fallback transport configured. Connection failures will block delivery.' });
}
if (cfg.primary === 'FTPS' && ftp && !ftp.fingerprint) {
out.push({ code, severity: 'low', kind: 'NO_PINNING',
msg: 'Server certificate fingerprint not pinned. Trust falls back to system CA store.' });
}
});
return out;
}, [societies]);
if (findings.length === 0) return null;
const sevColor = { high: '#a32a18', medium: '#a35418', low: 'var(--ink-3)' };
return (
SECURITY AUDIT · {findings.length} FINDINGS
Static review of FTP / FTPS configuration. Findings reflect protocol-level risk, not the
state of any in-flight transfer. Resolve high-severity issues before going live.
ASTRO behavior: all FTP/FTPS submissions wrap into the same submission queue
as SFTP and PORTAL — events flow through QUEUED → UPLOADING → UPLOADED → ACK_PENDING → ACKED.
Cleartext FTP transfers add a CLEARTEXT_FTP audit-log entry with severity HIGH on every
successful upload. Failed TLS handshakes promote the configured fallback transport before
giving up.