Add support for AuthEvent

This solves GH-20049, it’s an alternative to GH-20140.
The analysis is a bit different. It builds on [my comment in the other issue](#20139 (comment)), and the fact that they are *separate* things.

To recap, it is possible to have a document plain text but have attachments encrypted.
In that case, instead of prompting upfront, PDFs can prompt later with `/AuthEvent /EFOpen`.
The default is `/AuthEvent /DocOpen`. Which is typical. So `/AuthEvent` is uncommon.

So, separate things:
* encrypted attachments (regardless of `/AuthEvent`) (GH-20139)
* `/AuthEvent /EFOpen` (regardless of whether there are attachments) (this issue/PR)

This PR stops prompting for a password on doc open if there is an `/AuthEvent /EFOpen`.
It also does not list delayed encrypted attachments in the sidebar. It does that to prevent an infinite loading screen in a known case but also so that there is a place marked in the code where future logic, after GH-20139, can support lazily decrypting attachments.

Author: wooorm

src/core/catalog.js

@@ -1054,7 +1054,16 @@ class Catalog {
     const obj = this.#catDict.get("Names");
     let attachments = null;
 
-    if (obj instanceof Dict && obj.has("EmbeddedFiles")) {
+    if (
+      obj instanceof Dict &&
+      obj.has("EmbeddedFiles") &&
+      // Note: decrypting attachments is not supported regardless.
+      // If it was, then `decryptOnAttachmentOpen` would signal whether to do
+      // so lazily.
+      // As it stands, we can at least avoid users getting to an infinite loader
+      // in the case of `decryptOnAttachmentOpen`.
+      !this.xref.decryptOnAttachmentOpen
+    ) {
       const nameTree = new NameTree(obj.getRaw("EmbeddedFiles"), this.xref);
       for (const [key, value] of nameTree.getAll()) {
         const fs = new FileSpec(value);

src/core/xref.js

@@ -43,6 +43,7 @@ class XRef {
     this._newPersistentRefNum = null;
     this._newTemporaryRefNum = null;
     this._persistentRefsCache = null;
+    this.decryptOnAttachmentOpen = false;
   }
 
   getNewPersistentRef(obj) {
@@ -117,18 +118,26 @@ class XRef {
       warn(`XRef.parse - Invalid "Encrypt" reference: "${ex}".`);
     }
     if (encrypt instanceof Dict) {
-      const ids = trailerDict.get("ID");
-      const fileId = ids?.length ? ids[0] : "";
-      // The 'Encrypt' dictionary itself should not be encrypted, and by
-      // setting `suppressEncryption` we can prevent an infinite loop inside
-      // of `XRef_fetchUncompressed` if the dictionary contains indirect
-      // objects (fixes issue7665.pdf).
-      encrypt.suppressEncryption = true;
-      this.encrypt = new CipherTransformFactory(
-        encrypt,
-        fileId,
-        this.pdfManager.password
-      );
+      // Note: decrypting attachments is not supported regardless.
+      // But it is at least possible to honour `/AuthEvent /EFOpen` by not asking
+      // for a password on document open.
+      this.decryptOnAttachmentOpen =
+        encrypt.get("CF")?.get("StdCF")?.get("AuthEvent")?.name === "EFOpen";
+
+      if (!this.decryptOnAttachmentOpen) {
+        const ids = trailerDict.get("ID");
+        const fileId = ids?.length ? ids[0] : "";
+        // The 'Encrypt' dictionary itself should not be encrypted, and by
+        // setting `suppressEncryption` we can prevent an infinite loop inside
+        // of `XRef_fetchUncompressed` if the dictionary contains indirect
+        // objects (fixes issue7665.pdf).
+        encrypt.suppressEncryption = true;
+        this.encrypt = new CipherTransformFactory(
+          encrypt,
+          fileId,
+          this.pdfManager.password
+        );
+      }
     }
 
     // Get the root dictionary (catalog) object, and do some basic validation.

test/pdfs/.gitignore

@@ -385,6 +385,7 @@
 !bug1020226.pdf
 !issue9534_reduced.pdf
 !attachment.pdf
+!issue20049.pdf
 !basicapi.pdf
 !issue15590.pdf
 !issue15594_reduced.pdf

test/pdfs/issue20049.pdf

@@ -5524,6 +5524,13 @@
     "rounds": 1,
     "type": "eq"
   },
+  {
+    "id": "issue20049",
+    "file": "pdfs/issue20049.pdf",
+    "md5": "1cdfde56be6b070e0c18aafc487d92ff",
+    "rounds": 1,
+    "type": "eq"
+  },
   {
     "id": "issue8117",
     "file": "pdfs/issue8117.pdf",

test/test_manifest.json

@@ -888,6 +888,20 @@ describe("api", function () {
       await loadingTask.destroy();
     });
 
+    it("should not prompt for password if `/AuthEvent /EFOpen`", async function () {
+      const loadingTask = getDocument(buildGetDocumentParams("issue20049.pdf"));
+      expect(loadingTask instanceof PDFDocumentLoadingTask).toEqual(true);
+      let called = false;
+
+      loadingTask.onPassword = function () {
+        called = true;
+      };
+
+      const pdfDocument = await loadingTask.promise;
+      expect(pdfDocument.numPages).toBeGreaterThan(0);
+      expect(called).toBe(false);
+    });
+
     it("Doesn't iterate over all empty slots in the xref entries (bug 1980958)", async function () {
       if (isNodeJS) {
         pending("Worker is not supported in Node.js.");