@abtnode/blocklet-services 1.16.52-beta-20250928-042319-ff3f0e04 → 1.16.52-beta-20251002-030549-0f91dab2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/api/middlewares/launcher-login.js +3 -2
- package/api/routes/access-key.js +13 -1
- package/api/routes/csp-proxy.js +7 -7
- package/dist/assets/{AdapterDayjs-Ch1GqpK7.js → AdapterDayjs-CAaLcejt.js} +1 -1
- package/dist/assets/{Google-CZPwmMCG.js → Google-BMeng9mn.js} +2 -2
- package/dist/assets/{access-control-MtITiDMT.js → access-control-Cw0_MVFj.js} +1 -1
- package/dist/assets/{actions-CL4xTGOh.js → actions-DbBJOD0d.js} +1 -1
- package/dist/assets/{add-component-core-DT871JXs.js → add-component-core-B4fftW3o.js} +7 -7
- package/dist/assets/add-resource-CZfTjlD0.js +1 -0
- package/dist/assets/{addon-CAvqw8mm.js → addon-CBAld8jW.js} +2 -2
- package/dist/assets/{advanced-BeEKQmus.js → advanced-DPeAQM5T.js} +2 -2
- package/dist/assets/{aigne-DepLc7CZ.js → aigne-DD21HBlT.js} +1 -1
- package/dist/assets/api-BUbloWod.js +1 -0
- package/dist/assets/{appearance-CQM-3LPu.js → appearance-CwcRjBdx.js} +1 -1
- package/dist/assets/{ar-DrftSIv3.js → ar-7nBHeQPa.js} +1 -1
- package/dist/assets/{ar-DGfbWcRb.js → ar-DDKSNNIB.js} +2 -2
- package/dist/assets/{arrow-down.svg-VIKI4IBd.js → arrow-down.svg-B1ffj_Bi.js} +1 -1
- package/dist/assets/{audit-logs-B4nW0HQW.js → audit-logs-CIL7B8dX.js} +2 -2
- package/dist/assets/authorize-DPXeAf_q.js +1 -0
- package/dist/assets/{base-chart-BntWHeFy.js → base-chart-BbbiwJIa.js} +1 -1
- package/dist/assets/base32-CgLd9kUN.js +1 -0
- package/dist/assets/bind-account-Ci1GnBqL.js +1 -0
- package/dist/assets/{branding-DIltHBq0.js → branding-CGCnGFEE.js} +2 -2
- package/dist/assets/branding-IhXI5Wue.js +1 -0
- package/dist/assets/{branding-BxI7VSjI.js → branding-Y62inJ9A.js} +5 -5
- package/dist/assets/{bundle-avatar-BvwlMY-v.js → bundle-avatar-BrBIjq4r.js} +1 -1
- package/dist/assets/button-BG8yGG9e.js +1 -0
- package/dist/assets/{click-to-copy-Dqmzk5Lh.js → click-to-copy-CVHuu877.js} +1 -1
- package/dist/assets/{cloneDeep-sSKmkjV3.js → cloneDeep-E2Pxqpbv.js} +1 -1
- package/dist/assets/{collapse-GMtfQlRs.js → collapse-DhGi244c.js} +1 -1
- package/dist/assets/{complete-BiA0H-F-.js → complete-DNXvjWOj.js} +3 -3
- package/dist/assets/{component-CcDcQA4R.js → component-M75sOZuG.js} +3 -3
- package/dist/assets/{config-BDmrqxia.js → config-BASOtMEK.js} +7 -7
- package/dist/assets/{config-7aDpCy1J.js → config-BOttfQk3.js} +1 -1
- package/dist/assets/{config-CegNHv38.js → config-Bshk_mlq.js} +2 -2
- package/dist/assets/{config-navigation-DeVpCAhC.js → config-navigation-C_Stnyxb.js} +13 -13
- package/dist/assets/{config-space-D3NLSAOS.js → config-space-Bh_yLAj-.js} +1 -1
- package/dist/assets/confirm-LpOyjg-M.js +7 -0
- package/dist/assets/{connect-NiZcQvBT.js → connect-A31Nzurl.js} +1 -1
- package/dist/assets/{connect-3UzkXBvk.js → connect-DEe_baYC.js} +1 -1
- package/dist/assets/connect-to-Cco6-qou.js +1 -0
- package/dist/assets/{content-layout-DYZYIlLo.js → content-layout-CaGd-JXO.js} +1 -1
- package/dist/assets/createClass-BuhPvJV8.js +1 -0
- package/dist/assets/{dashboard-C_xJDuQY.js → dashboard-B757yKbJ.js} +3 -3
- package/dist/assets/{de-DGZI-Bsh.js → de-C5jW-Aco.js} +2 -2
- package/dist/assets/{de-CzR7Usym.js → de-Dn7PhTZq.js} +1 -1
- package/dist/assets/{delete-confirm-ZcwDcAcQ.js → delete-confirm-V3_sRk8l.js} +1 -1
- package/dist/assets/{did-address-CNnw4_bl.js → did-address-CeTjTMC4.js} +1 -1
- package/dist/assets/{domain-oUFlaLKy.js → domain-B9OATbrX.js} +1 -1
- package/dist/assets/{domain-action-card-t81ZH6IT.js → domain-action-card-D-_-tvd3.js} +2 -2
- package/dist/assets/domains-CHjbOYj6.js +1 -0
- package/dist/assets/{email-BfBsaQZc.js → email-BpimKMdd.js} +3 -3
- package/dist/assets/{empty-spinner-DCC7mgEb.js → empty-spinner-CkCqfxFX.js} +1 -1
- package/dist/assets/engine-DyhSNCpN.js +1 -0
- package/dist/assets/{es-BHI4ILsC.js → es-B_X5HHiA.js} +1 -1
- package/dist/assets/{es-CMwFpp7C.js → es-DnE5Se03.js} +2 -2
- package/dist/assets/{exchange-passport-DHCCHO-N.js → exchange-passport-XYv5fxqy.js} +1 -1
- package/dist/assets/{form-Csfi6zyX.js → form-CHueGgAz.js} +2 -2
- package/dist/assets/{form-text-input-xNlMjrH6.js → form-text-input-CqoNK3mi.js} +1 -1
- package/dist/assets/{form-wrapper-BCRhnWhi.js → form-wrapper-DNqXvSru.js} +1 -1
- package/dist/assets/{fr-BqKCXdV2.js → fr-BIAMVkwl.js} +1 -1
- package/dist/assets/{fr-eKsI9Vcp.js → fr-BpXortYf.js} +2 -2
- package/dist/assets/{fuel-CUlDLjak.js → fuel-CfnN-Pjf.js} +1 -1
- package/dist/assets/gen-access-key-ku3cDonU.js +1 -0
- package/dist/assets/gen-simple-access-key-EujuCaoZ.js +1 -0
- package/dist/assets/get-safe-url-CbJcsvAc.js +1 -0
- package/dist/assets/{hi-DlvVN0mm.js → hi-4-0lpKbp.js} +1 -1
- package/dist/assets/{hi-C0JqybmN.js → hi-CeUu25BW.js} +1 -1
- package/dist/assets/{home-BwyzLr74.js → home-CSzo40aP.js} +1 -1
- package/dist/assets/{id-DHF6PX-M.js → id-BugYMmLN.js} +2 -2
- package/dist/assets/{id-YNynvxGd.js → id-Dw1-p0GY.js} +1 -1
- package/dist/assets/iframe-eYdxV3eX.js +1 -0
- package/dist/assets/{index-kiLQKwVa.js → index-3xeMR-Qg.js} +1 -1
- package/dist/assets/{index-Ck6n4b0a.js → index-6IwthDxj.js} +1 -1
- package/dist/assets/index-82gv-l2w.js +283 -0
- package/dist/assets/{index-CfHItWba.js → index-B0JZLMkR.js} +4 -4
- package/dist/assets/index-BA8N8sek.js +150 -0
- package/dist/assets/{index-uH_9YgA0.js → index-BC0KaiLK.js} +1 -1
- package/dist/assets/index-BFZ5LKID.js +62 -0
- package/dist/assets/{index-gcYTlYEZ.js → index-BVRSxJRS.js} +1 -1
- package/dist/assets/{index-B06oP6vd.js → index-BjcHj49D.js} +1 -1
- package/dist/assets/index-Br6A9_4o.js +124 -0
- package/dist/assets/{index-CJWwSLdB.js → index-C-QPG4ba.js} +19 -19
- package/dist/assets/index-C0n4exuY.js +1 -0
- package/dist/assets/index-COFNyzYu.js +29 -0
- package/dist/assets/index-CX0nBp11.js +1 -0
- package/dist/assets/index-C_YGTMJ4.js +1 -0
- package/dist/assets/index-CjATIX5e.js +1039 -0
- package/dist/assets/{index-D7zqBJdA.js → index-CmkQ05MW.js} +12 -12
- package/dist/assets/{index-DS-40ZVK.js → index-Cs6DTc99.js} +5 -5
- package/dist/assets/index-Cza28Ou-.js +7 -0
- package/dist/assets/{index-Cn5TXl_L.js → index-D04UESXe.js} +1 -1
- package/dist/assets/{index-CKpQd8db.js → index-DOo8QRm-.js} +14 -14
- package/dist/assets/{index-v50gyNUL.js → index-DRhj0EDS.js} +9 -9
- package/dist/assets/{index-DH4W6unN.js → index-DZkt7K0r.js} +1 -1
- package/dist/assets/{index-DzI9kX_C.js → index-DbXxI_D0.js} +1 -1
- package/dist/assets/index-Dn2eai8S.js +113 -0
- package/dist/assets/{index-DO9UDa6G.js → index-Dr9NaKfR.js} +1 -1
- package/dist/assets/{index-D-puzkw-.js → index-DxuK3aPg.js} +1 -1
- package/dist/assets/{index-BPJUfDZY.js → index-IN8OKZ_V.js} +2 -2
- package/dist/assets/index-ZXxjnrfz.js +55 -0
- package/dist/assets/{index-BwMsFaIR.js → index-ZYd4RNU_.js} +1 -1
- package/dist/assets/{index-BUiG3mKw.js → index-iIT2_Y_I.js} +1 -1
- package/dist/assets/{invitation-GzoS6QSS.js → invitation-Bud5mQS8.js} +2 -2
- package/dist/assets/{invite-DDdJj6co.js → invite-BnTsj399.js} +1 -1
- package/dist/assets/{isURL-CCV0esLR.js → isURL-BkRG9xZw.js} +2 -2
- package/dist/assets/{issue-passport-PUK3HiX7.js → issue-passport-sL6P-Jy0.js} +1 -1
- package/dist/assets/{item-DAL9Dho-.js → item-CZxO50cp.js} +1 -1
- package/dist/assets/{ja-DEmGhfzG.js → ja-C6gbn0J8.js} +1 -1
- package/dist/assets/{ja-c-6MaUg1.js → ja-DaREJWmX.js} +2 -2
- package/dist/assets/{ko-CTFi4Ndk.js → ko-DGXdpX64.js} +2 -2
- package/dist/assets/{ko-CfYoSPs0.js → ko-av2FKXII.js} +1 -1
- package/dist/assets/{landing-page-CL9L_8lE.js → landing-page-Co0EA4cx.js} +1 -1
- package/dist/assets/{launch-result-message-DN12F68Q.js → launch-result-message-B0--4ubW.js} +1 -1
- package/dist/assets/{layout-CWE2T-JY.js → layout-CiBZwE8j.js} +1 -1
- package/dist/assets/list-CgUqi7mZ.js +2 -0
- package/dist/assets/list-CoRNWpJL.js +103 -0
- package/dist/assets/{list-header-CoFZp82R.js → list-header-DlrmpNef.js} +1 -1
- package/dist/assets/localization-DAfm9MKy.js +1 -0
- package/dist/assets/{log-CH5xMfwF.js → log-BLtV-mr3.js} +1 -1
- package/dist/assets/logger-CsgnUk8i.js +1 -0
- package/dist/assets/login-0UJlN7iP.js +1 -0
- package/dist/assets/{login-oauth-callback-yy8oOs-S.js → login-oauth-callback-BhX1vXuH.js} +1 -1
- package/dist/assets/{logo-uploader-BbYoAyD-.js → logo-uploader-x03Hv0sw.js} +2 -2
- package/dist/assets/{lost-passport-CnWY_gqA.js → lost-passport-DuQjRy5y.js} +2 -2
- package/dist/assets/{observability-oDc3dKFA.js → observability-3BjnzXRV.js} +1 -1
- package/dist/assets/{omit-C2ouGG7F.js → omit-r-0RLWOV.js} +1 -1
- package/dist/assets/{open-window-2gqXwgFW.js → open-window-C2521tBf.js} +1 -1
- package/dist/assets/{over-due-invoice-payment-D2yclQzx.js → over-due-invoice-payment-CeMW933U.js} +1 -1
- package/dist/assets/{overview-B4sE3XPK.js → overview-C-11gh2u.js} +2 -2
- package/dist/assets/{page-header-8LlFejLk.js → page-header-DP0csqkR.js} +1 -1
- package/dist/assets/passport-item-CBQOM3AQ.js +1 -0
- package/dist/assets/{permission-CSIyJtvw.js → permission-BeuMG3nG.js} +1 -1
- package/dist/assets/{playground-Dk2enS21.js → playground-BEhnKrD-.js} +1 -1
- package/dist/assets/preferences-DvVN_OF0.js +1 -0
- package/dist/assets/profile-embed-BdpgwY58.js +1 -0
- package/dist/assets/{pt-DTd68aWZ.js → pt-C5SxM_jO.js} +1 -1
- package/dist/assets/{pt-QkdDdQuw.js → pt-CIqefLTL.js} +1 -1
- package/dist/assets/publish-resource-CERp8nCz.js +1 -0
- package/dist/assets/{react-beautiful-dnd.esm-DPZZJVHP.js → react-beautiful-dnd.esm-9QLg1KOC.js} +1 -1
- package/dist/assets/{react-stripe.esm-DXXjh9xE.js → react-stripe.esm-DWiCVD55.js} +1 -1
- package/dist/assets/{required-B2SKELXR.js → required-BUAaYcMZ.js} +1 -1
- package/dist/assets/{ru-swMH4bvc.js → ru-B4h3WudR.js} +1 -1
- package/dist/assets/{ru-BHPYrefb.js → ru-BWd-_jpY.js} +1 -1
- package/dist/assets/runtime-CC0b3IOS.js +1 -0
- package/dist/assets/sanitize-mRppk1lK.js +2 -0
- package/dist/assets/sdk-Dfotb8VE.js +1 -0
- package/dist/assets/{section-CndbjVtx.js → section-CCfmWVdK.js} +1 -1
- package/dist/assets/{security-g0CzShNx.js → security-DAv6SG0v.js} +3 -3
- package/dist/assets/session-p360wpOR.js +1 -0
- package/dist/assets/{setup-D_impIE6.js → setup-CWKcr-SA.js} +1 -1
- package/dist/assets/{shorten-label-Cbu8wo9m.js → shorten-label-DAXPWCI6.js} +1 -1
- package/dist/assets/{simple-select-BqhbnnqN.js → simple-select-BHPmFba3.js} +1 -1
- package/dist/assets/{spaces-p4zKSeyp.js → spaces-DdStEDKL.js} +1 -1
- package/dist/assets/{start-BD7Kr8U-.js → start-gQWc3jOT.js} +1 -1
- package/dist/assets/{starting-progress-C6OFR0oi.js → starting-progress-CxdsmebW.js} +1 -1
- package/dist/assets/status-jCRFV0de.js +1 -0
- package/dist/assets/{step-actions-RYL0A520.js → step-actions-DV76BAlD.js} +1 -1
- package/dist/assets/{studio-Bp-XDrgR.js → studio-D9ArZgZT.js} +1 -1
- package/dist/assets/{switch-control-XooTt-i6.js → switch-control-Bs2D4JNi.js} +1 -1
- package/dist/assets/{table-tips-CgCabdgD.js → table-tips-B1dFVdej.js} +1 -1
- package/dist/assets/team-CxJqHuEA.js +146 -0
- package/dist/assets/{th-DuqieD90.js → th-BjttL5p9.js} +1 -1
- package/dist/assets/{th-Bk3GO_e5.js → th-CRUlNqtq.js} +1 -1
- package/dist/assets/traffic-BuZd517Z.js +1 -0
- package/dist/assets/{transfer-Z_9W88aQ.js → transfer-Dh7kcNdX.js} +1 -1
- package/dist/assets/{unsubscribe-B07Ogw5q.js → unsubscribe-DzDiAt1Q.js} +1 -1
- package/dist/assets/{use-app-logo-D_gO-Dio.js → use-app-logo-BiGG8tCg.js} +1 -1
- package/dist/assets/{use-mobile-CQ7Tw4aD.js → use-mobile-BW9mTiYC.js} +1 -1
- package/dist/assets/{use-mobile-D93Bk2Ru.js → use-mobile-B_fpUHD7.js} +1 -1
- package/dist/assets/{use-server-logo-BJM5bxfh.js → use-server-logo-R848M-JH.js} +1 -1
- package/dist/assets/{use-window-close-toR_SRTv.js → use-window-close-Dk0lXOqo.js} +1 -1
- package/dist/assets/{useAsync-CNAYLnLm.js → useAsync-DkQHu4t4.js} +1 -1
- package/dist/assets/{useAsync-DZevTxbv.js → useAsync-DoI7Qt9M.js} +1 -1
- package/dist/assets/{useAsyncRetry-6TjWJyO6.js → useAsyncRetry-DNTidBXG.js} +1 -1
- package/dist/assets/useLocalStorage-BzRs3x-K.js +1 -0
- package/dist/assets/user-center-Gvk90n3A.js +126 -0
- package/dist/assets/{user-follower-DWn8bXG-.js → user-follower-D7rNbdJC.js} +1 -1
- package/dist/assets/user-sessions-BXusVv21.js +1 -0
- package/dist/assets/{util-Bravn321.js → util-BKRDkFNf.js} +1 -1
- package/dist/assets/{util-BYg7Nb7Z.js → util-DQbvJ9cJ.js} +1 -1
- package/dist/assets/{vendor-arcblock-DEa0A9MF.js → vendor-arcblock-BhtOu00C.js} +144 -141
- package/dist/assets/vendor-hooks-BtDnIwBH.js +7 -0
- package/dist/assets/{vendor-mui-core-CmD-NPnl.js → vendor-mui-core-BIZOanxj.js} +18 -18
- package/dist/assets/{vendor-mui-x--K2rEM1j.js → vendor-mui-x-DWX99wt-.js} +1 -1
- package/dist/assets/vendor-utils-CVwaKsP9.js +213 -0
- package/dist/assets/{vendor-ux-pYOhjQLA.js → vendor-ux-Cfhaj-oj.js} +13 -13
- package/dist/assets/{vi-xPRidQ_j.js → vi-5AzowaJ4.js} +1 -1
- package/dist/assets/{vi-42QzvOuM.js → vi-C-IhikR1.js} +1 -1
- package/dist/assets/{wait-connect-CgBXxzyb.js → wait-connect-CPHamZhf.js} +1 -1
- package/dist/assets/{wizard-BEs2v6uI.js → wizard-DXT-RVCl.js} +1 -1
- package/dist/assets/{wizard-components-5FNqoPRf.js → wizard-components-CkjeNOkS.js} +3 -3
- package/dist/assets/wrap-locale-DQUa7V1E.js +1 -0
- package/dist/assets/{zh-Blu7Gys0.js → zh-1ARDBzTp.js} +1 -1
- package/dist/assets/{zh-NsxeedJj.js → zh-BQXiLbg6.js} +1 -1
- package/dist/assets/{zh-C-k4DKK-.js → zh-CWvcoHsp.js} +2 -2
- package/dist/assets/{zh-tw-BLENKI0o.js → zh-tw-DAvBOrfW.js} +1 -1
- package/dist/assets/{zh-tw-Dxa4oubT.js → zh-tw-D_73qm-O.js} +2 -2
- package/dist/index.html +6 -6
- package/dist/service-worker.js +1 -1
- package/package.json +50 -50
- package/dist/assets/add-resource-BnQPv53-.js +0 -1
- package/dist/assets/api-sewNv0AE.js +0 -1
- package/dist/assets/authorize-DtR2q4pL.js +0 -1
- package/dist/assets/base32-dGIGRTeZ.js +0 -1
- package/dist/assets/bind-account-DKu95GI-.js +0 -1
- package/dist/assets/branding-DI8S4rKX.js +0 -1
- package/dist/assets/button-D5GaRQPz.js +0 -1
- package/dist/assets/confirm-BbY8YGyk.js +0 -7
- package/dist/assets/connect-to-QQ3T-HpF.js +0 -1
- package/dist/assets/createClass-CDs8uNCX.js +0 -1
- package/dist/assets/domains-CMbykSQm.js +0 -1
- package/dist/assets/engine-BNoG81bE.js +0 -1
- package/dist/assets/gen-access-key-C3uuo9SI.js +0 -1
- package/dist/assets/gen-simple-access-key-CX90y0zh.js +0 -1
- package/dist/assets/get-safe-url-DKg8JLr1.js +0 -1
- package/dist/assets/hdkey-BgsbeAhG.js +0 -62
- package/dist/assets/iframe-SCM7rlz3.js +0 -1
- package/dist/assets/index-BJbNz5vx.js +0 -1027
- package/dist/assets/index-BWAu1pEw.js +0 -1
- package/dist/assets/index-CB__aq5L.js +0 -7
- package/dist/assets/index-CKOznUni.js +0 -110
- package/dist/assets/index-CNvRrWdA.js +0 -1
- package/dist/assets/index-DTU7_GN0.js +0 -124
- package/dist/assets/index-Qx6e57-u.js +0 -55
- package/dist/assets/index-VARWquqH.js +0 -1
- package/dist/assets/index-c7w7Lgaw.js +0 -113
- package/dist/assets/index-g5_ozUJZ.js +0 -30
- package/dist/assets/index-sQzZNoGx.js +0 -271
- package/dist/assets/list-B1IF52f7.js +0 -103
- package/dist/assets/list-DNkyeHs7.js +0 -4
- package/dist/assets/localization-DWmiu7jH.js +0 -1
- package/dist/assets/logger-Cror7fb1.js +0 -1
- package/dist/assets/login-C0H7ScpD.js +0 -1
- package/dist/assets/passport-item-CK1Zj4rm.js +0 -1
- package/dist/assets/preferences-BBghzBy7.js +0 -1
- package/dist/assets/profile-embed-B2uhPkoV.js +0 -1
- package/dist/assets/publish-resource-DhuBgzO7.js +0 -1
- package/dist/assets/runtime-B3mVl8w2.js +0 -1
- package/dist/assets/sanitize-BwaMGjTb.js +0 -2
- package/dist/assets/sdk-B4j47QQf.js +0 -1
- package/dist/assets/session-m3orzHBa.js +0 -1
- package/dist/assets/status-D1-G3QED.js +0 -1
- package/dist/assets/team-B-jk7E5_.js +0 -146
- package/dist/assets/traffic-CInL395-.js +0 -1
- package/dist/assets/useLocalStorage-CiLfInVV.js +0 -1
- package/dist/assets/user-center-DzijYiyQ.js +0 -126
- package/dist/assets/user-sessions-CuXtk29w.js +0 -1
- package/dist/assets/vendor-hooks-DLNZ8kxG.js +0 -7
- package/dist/assets/vendor-utils-DQK0pEML.js +0 -213
- package/dist/assets/wrap-locale-B5OsZl6Q.js +0 -1
|
@@ -12,9 +12,10 @@ const logger = require('../libs/logger')('blocklet-services:launcher-login');
|
|
|
12
12
|
const doLauncherLogin = async (req, token, blocklet, node, options) => {
|
|
13
13
|
const decoded = JWT.decode(token);
|
|
14
14
|
const info = await req.getNodeInfo();
|
|
15
|
+
const owner = await node.getOwner({ teamDid: blocklet.appPid });
|
|
15
16
|
|
|
16
17
|
const isSameLauncher = isSameDid(decoded.iss, info.registerInfo?.appId);
|
|
17
|
-
const isSameOwner = isSameDid(decoded.oid,
|
|
18
|
+
const isSameOwner = isSameDid(decoded.oid, owner?.did);
|
|
18
19
|
const isSameLauncherSessionId = decoded.lid === blocklet.controller.launcherSessionId;
|
|
19
20
|
const isSameBlocklet = [blocklet.appDid, blocklet.appPid].includes(decoded.aid);
|
|
20
21
|
|
|
@@ -24,7 +25,7 @@ const doLauncherLogin = async (req, token, blocklet, node, options) => {
|
|
|
24
25
|
isSameLauncherSessionId,
|
|
25
26
|
isSameBlocklet,
|
|
26
27
|
decoded,
|
|
27
|
-
owner
|
|
28
|
+
owner,
|
|
28
29
|
launcher: info.registerInfo,
|
|
29
30
|
controller: blocklet.controller,
|
|
30
31
|
appDids: [blocklet.appDid, blocklet.appPid],
|
package/api/routes/access-key.js
CHANGED
|
@@ -3,7 +3,9 @@ const { WELLKNOWN_SERVICE_PATH_PREFIX } = require('@abtnode/constant');
|
|
|
3
3
|
const { SERVER_ROLES } = require('@abtnode/constant');
|
|
4
4
|
const { encrypt } = require('@abtnode/util/lib/security');
|
|
5
5
|
const { CustomError } = require('@blocklet/error');
|
|
6
|
+
const uniq = require('lodash/uniq');
|
|
6
7
|
|
|
8
|
+
const logger = require('../libs/logger')();
|
|
7
9
|
const ensureBlocklet = require('../middlewares/ensure-blocklet');
|
|
8
10
|
const checkUser = require('../middlewares/check-user');
|
|
9
11
|
|
|
@@ -14,13 +16,23 @@ module.exports = {
|
|
|
14
16
|
init(server, node) {
|
|
15
17
|
server.post(`${prefixApi}/authorize`, checkUser, ensureBlocklet(), async (req, res) => {
|
|
16
18
|
const teamDid = req.get('x-blocklet-did');
|
|
19
|
+
const requiredRoles = (req.body?.requiredRoles || '').split(',') || [];
|
|
20
|
+
|
|
21
|
+
let passport;
|
|
22
|
+
if (requiredRoles.length > 0) {
|
|
23
|
+
const user = await node.getUser({ teamDid, user: { did: req.user.did } });
|
|
24
|
+
const passports = uniq([...(user.passports || []).map((x) => x.role), 'guest'].flat());
|
|
25
|
+
const filters = requiredRoles.filter((role) => passports.includes(role));
|
|
26
|
+
passport = filters?.length > 0 ? filters[0] : null;
|
|
27
|
+
logger.info('authorize passport', { requiredRoles, passports, passport });
|
|
28
|
+
}
|
|
17
29
|
|
|
18
30
|
const { accessKeyId, accessKeySecret, expireAt } = await node.createAccessKey(
|
|
19
31
|
{
|
|
20
32
|
teamDid,
|
|
21
33
|
remark: req.body.source,
|
|
22
34
|
createdVia: 'connect',
|
|
23
|
-
passport: (req.user?.role || '').replace('blocklet-', '') || SERVER_ROLES.GUEST,
|
|
35
|
+
passport: passport || (req.user?.role || '').replace('blocklet-', '') || SERVER_ROLES.GUEST,
|
|
24
36
|
authType: 'simple',
|
|
25
37
|
},
|
|
26
38
|
{ user: req.user }
|
package/api/routes/csp-proxy.js
CHANGED
|
@@ -55,31 +55,31 @@ module.exports = {
|
|
|
55
55
|
const { url } = req.query;
|
|
56
56
|
|
|
57
57
|
if (!url) {
|
|
58
|
-
res.status(400).send('Invalid parameter');
|
|
58
|
+
res.status(400).send('Invalid parameter: empty');
|
|
59
59
|
return;
|
|
60
60
|
}
|
|
61
61
|
|
|
62
62
|
if (!isUrl(url)) {
|
|
63
|
-
res.status(400).send('Invalid parameter');
|
|
63
|
+
res.status(400).send('Invalid parameter: invalid');
|
|
64
64
|
return;
|
|
65
65
|
}
|
|
66
66
|
|
|
67
67
|
// 检查referer来源
|
|
68
68
|
if (!checkReferer(req)) {
|
|
69
|
-
res.status(403).send('Invalid parameter');
|
|
69
|
+
res.status(403).send('Invalid parameter: referer');
|
|
70
70
|
return;
|
|
71
71
|
}
|
|
72
72
|
|
|
73
73
|
try {
|
|
74
74
|
const tmp = new URL(url);
|
|
75
75
|
if (tmp.protocol !== 'https:') {
|
|
76
|
-
res.status(400).send('Invalid parameter');
|
|
76
|
+
res.status(400).send('Invalid parameter: protocol');
|
|
77
77
|
return;
|
|
78
78
|
}
|
|
79
79
|
|
|
80
80
|
// 检查是否为内网地址,防止SSRF攻击
|
|
81
81
|
if (!(await isAllowedURL(url))) {
|
|
82
|
-
res.status(400).send('Invalid parameter');
|
|
82
|
+
res.status(400).send('Invalid parameter: internal');
|
|
83
83
|
return;
|
|
84
84
|
}
|
|
85
85
|
|
|
@@ -102,7 +102,7 @@ module.exports = {
|
|
|
102
102
|
if (!isAllowedContentType(contentType)) {
|
|
103
103
|
// 立即销毁stream并返回错误,避免继续下载
|
|
104
104
|
response.data.destroy();
|
|
105
|
-
res.status(400).send('Invalid parameter');
|
|
105
|
+
res.status(400).send('Invalid parameter: content-type');
|
|
106
106
|
return;
|
|
107
107
|
}
|
|
108
108
|
|
|
@@ -172,7 +172,7 @@ module.exports = {
|
|
|
172
172
|
} else if (error.response && error.response.status) {
|
|
173
173
|
res.status(error.response.status).send(`Remote server error: ${error.response.status}`);
|
|
174
174
|
} else {
|
|
175
|
-
res.status(400).send('Invalid parameter');
|
|
175
|
+
res.status(400).send('Invalid parameter: error');
|
|
176
176
|
}
|
|
177
177
|
}
|
|
178
178
|
});
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
import{_ as lt}from"./vendor-mui-core-
|
|
1
|
+
import{_ as lt}from"./vendor-mui-core-BIZOanxj.js";import{d as c}from"./vendor-hooks-BtDnIwBH.js";import{g as G}from"./vendor-react-Dvs43sk9.js";import{a4 as yt}from"./vendor-ux-Cfhaj-oj.js";var b={exports:{}},pt=b.exports,rt;function Mt(){return rt||(rt=1,function(Y,z){(function(m,t){Y.exports=t()})(pt,function(){var m="week",t="year";return function(e,i,a){var r=i.prototype;r.week=function(s){if(s===void 0&&(s=null),s!==null)return this.add(7*(s-this.week()),"day");var u=this.$locale().yearStart||1;if(this.month()===11&&this.date()>25){var h=a(this).startOf(t).add(1,t).date(u),l=a(this).endOf(m);if(h.isBefore(l))return 1}var O=a(this).startOf(t).date(u).startOf(m).subtract(1,"millisecond"),$=this.diff(O,m,!0);return $<0?a(this).startOf("week").week():Math.ceil($)},r.weeks=function(s){return s===void 0&&(s=null),this.week(s)}}})}(b)),b.exports}var Tt=Mt();const gt=G(Tt);var I={exports:{}},Dt=I.exports,st;function wt(){return st||(st=1,function(Y,z){(function(m,t){Y.exports=t()})(Dt,function(){var m={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},t=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|Q|YYYY|YY?|ww?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,e=/\d/,i=/\d\d/,a=/\d\d?/,r=/\d*[^-_:/,()\s\d]+/,s={},u=function(n){return(n=+n)+(n>68?1900:2e3)},h=function(n){return function(o){this[n]=+o}},l=[/[+-]\d\d:?(\d\d)?|Z/,function(n){(this.zone||(this.zone={})).offset=function(o){if(!o||o==="Z")return 0;var f=o.match(/([+-]|\d\d)/g),d=60*f[1]+(+f[2]||0);return d===0?0:f[0]==="+"?-d:d}(n)}],O=function(n){var o=s[n];return o&&(o.indexOf?o:o.s.concat(o.f))},$=function(n,o){var f,d=s.meridiem;if(d){for(var T=1;T<=24;T+=1)if(n.indexOf(d(T,0,o))>-1){f=T>12;break}}else f=n===(o?"pm":"PM");return f},ot={A:[r,function(n){this.afternoon=$(n,!1)}],a:[r,function(n){this.afternoon=$(n,!0)}],Q:[e,function(n){this.month=3*(n-1)+1}],S:[e,function(n){this.milliseconds=100*+n}],SS:[i,function(n){this.milliseconds=10*+n}],SSS:[/\d{3}/,function(n){this.milliseconds=+n}],s:[a,h("seconds")],ss:[a,h("seconds")],m:[a,h("minutes")],mm:[a,h("minutes")],H:[a,h("hours")],h:[a,h("hours")],HH:[a,h("hours")],hh:[a,h("hours")],D:[a,h("day")],DD:[i,h("day")],Do:[r,function(n){var o=s.ordinal,f=n.match(/\d+/);if(this.day=f[0],o)for(var d=1;d<=31;d+=1)o(d).replace(/\[|\]/g,"")===n&&(this.day=d)}],w:[a,h("week")],ww:[i,h("week")],M:[a,h("month")],MM:[i,h("month")],MMM:[r,function(n){var o=O("months"),f=(O("monthsShort")||o.map(function(d){return d.slice(0,3)})).indexOf(n)+1;if(f<1)throw new Error;this.month=f%12||f}],MMMM:[r,function(n){var o=O("months").indexOf(n)+1;if(o<1)throw new Error;this.month=o%12||o}],Y:[/[+-]?\d+/,h("year")],YY:[i,function(n){this.year=u(n)}],YYYY:[/\d{4}/,h("year")],Z:l,ZZ:l};function ht(n){var o,f;o=n,f=s&&s.formats;for(var d=(n=o.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,function(C,x,M){var p=M&&M.toUpperCase();return x||f[M]||m[M]||f[p].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,function(k,L,j){return L||j.slice(1)})})).match(t),T=d.length,g=0;g<T;g+=1){var U=d[g],S=ot[U],D=S&&S[0],w=S&&S[1];d[g]=w?{regex:D,parser:w}:U.replace(/^\[|\]$/g,"")}return function(C){for(var x={},M=0,p=0;M<T;M+=1){var k=d[M];if(typeof k=="string")p+=k.length;else{var L=k.regex,j=k.parser,A=C.slice(p),v=L.exec(A)[0];j.call(x,v),C=C.replace(v,"")}}return function(P){var F=P.afternoon;if(F!==void 0){var y=P.hours;F?y<12&&(P.hours+=12):y===12&&(P.hours=0),delete P.afternoon}}(x),x}}return function(n,o,f){f.p.customParseFormat=!0,n&&n.parseTwoDigitYear&&(u=n.parseTwoDigitYear);var d=o.prototype,T=d.parse;d.parse=function(g){var U=g.date,S=g.utc,D=g.args;this.$u=S;var w=D[1];if(typeof w=="string"){var C=D[2]===!0,x=D[3]===!0,M=C||x,p=D[2];x&&(p=D[2]),s=this.$locale(),!C&&p&&(s=f.Ls[p]),this.$d=function(A,v,P,F){try{if(["x","X"].indexOf(v)>-1)return new Date((v==="X"?1e3:1)*A);var y=ht(v)(A),Z=y.year,W=y.month,ut=y.day,ft=y.hours,dt=y.minutes,ct=y.seconds,mt=y.milliseconds,tt=y.zone,et=y.week,N=new Date,_=ut||(Z||W?1:N.getDate()),q=Z||N.getFullYear(),H=0;Z&&!W||(H=W>0?W-1:N.getMonth());var B,R=ft||0,Q=dt||0,X=ct||0,J=mt||0;return tt?new Date(Date.UTC(q,H,_,R,Q,X,J+60*tt.offset*1e3)):P?new Date(Date.UTC(q,H,_,R,Q,X,J)):(B=new Date(q,H,_,R,Q,X,J),et&&(B=F(B).week(et).toDate()),B)}catch{return new Date("")}}(U,w,S,f),this.init(),p&&p!==!0&&(this.$L=this.locale(p).$L),M&&U!=this.format(w)&&(this.$d=new Date("")),s={}}else if(w instanceof Array)for(var k=w.length,L=1;L<=k;L+=1){D[1]=w[L-1];var j=f.apply(this,D);if(j.isValid()){this.$d=j.$d,this.$L=j.$L,this.init();break}L===k&&(this.$d=new Date(""))}else T.call(this,g)}}})}(I)),I.exports}var Yt=wt();const Ot=G(Yt);var E={exports:{}},xt=E.exports,nt;function kt(){return nt||(nt=1,function(Y,z){(function(m,t){Y.exports=t()})(xt,function(){return function(m,t,e){t.prototype.isBetween=function(i,a,r,s){var u=e(i),h=e(a),l=(s=s||"()")[0]==="(",O=s[1]===")";return(l?this.isAfter(u,r):!this.isBefore(u,r))&&(O?this.isBefore(h,r):!this.isAfter(h,r))||(l?this.isBefore(u,r):!this.isAfter(u,r))&&(O?this.isAfter(h,r):!this.isBefore(h,r))}}})}(E)),E.exports}var Lt=kt();const zt=G(Lt);var V={exports:{}},St=V.exports,it;function Ct(){return it||(it=1,function(Y,z){(function(m,t){Y.exports=t()})(St,function(){return function(m,t){var e=t.prototype,i=e.format;e.format=function(a){var r=this,s=this.$locale();if(!this.isValid())return i.bind(this)(a);var u=this.$utils(),h=(a||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,function(l){switch(l){case"Q":return Math.ceil((r.$M+1)/3);case"Do":return s.ordinal(r.$D);case"gggg":return r.weekYear();case"GGGG":return r.isoWeekYear();case"wo":return s.ordinal(r.week(),"W");case"w":case"ww":return u.s(r.week(),l==="w"?1:2,"0");case"W":case"WW":return u.s(r.isoWeek(),l==="W"?1:2,"0");case"k":case"kk":return u.s(String(r.$H===0?24:r.$H),l==="k"?1:2,"0");case"X":return Math.floor(r.$d.getTime()/1e3);case"x":return r.$d.getTime();case"z":return"["+r.offsetName()+"]";case"zzz":return"["+r.offsetName("long")+"]";default:return l}});return i.bind(this)(h)}}})}(V)),V.exports}var jt=Ct();const Pt=G(jt);c.extend(yt);c.extend(gt);c.extend(zt);c.extend(Pt);const vt={YY:"year",YYYY:{sectionType:"year",contentType:"digit",maxLength:4},M:{sectionType:"month",contentType:"digit",maxLength:2},MM:"month",MMM:{sectionType:"month",contentType:"letter"},MMMM:{sectionType:"month",contentType:"letter"},D:{sectionType:"day",contentType:"digit",maxLength:2},DD:"day",Do:{sectionType:"day",contentType:"digit-with-letter"},d:{sectionType:"weekDay",contentType:"digit",maxLength:2},dd:{sectionType:"weekDay",contentType:"letter"},ddd:{sectionType:"weekDay",contentType:"letter"},dddd:{sectionType:"weekDay",contentType:"letter"},A:"meridiem",a:"meridiem",H:{sectionType:"hours",contentType:"digit",maxLength:2},HH:"hours",h:{sectionType:"hours",contentType:"digit",maxLength:2},hh:"hours",m:{sectionType:"minutes",contentType:"digit",maxLength:2},mm:"minutes",s:{sectionType:"seconds",contentType:"digit",maxLength:2},ss:"seconds"},$t={year:"YYYY",month:"MMMM",monthShort:"MMM",dayOfMonth:"D",dayOfMonthFull:"Do",weekday:"dddd",weekdayShort:"dd",hours24h:"HH",hours12h:"hh",meridiem:"A",minutes:"mm",seconds:"ss",fullDate:"ll",keyboardDate:"L",shortDate:"MMM D",normalDate:"D MMMM",normalDateWithWeekday:"ddd, MMM D",fullTime12h:"hh:mm A",fullTime24h:"HH:mm",keyboardDateTime12h:"L hh:mm A",keyboardDateTime24h:"L HH:mm"},K=["Missing UTC plugin","To be able to use UTC or timezones, you have to enable the `utc` plugin","Find more information on https://mui.com/x/react-date-pickers/timezone/#day-js-and-utc"].join(`
|
|
2
2
|
`),at=["Missing timezone plugin","To be able to use timezones, you have to enable both the `utc` and the `timezone` plugin","Find more information on https://mui.com/x/react-date-pickers/timezone/#day-js-and-timezone"].join(`
|
|
3
3
|
`);class Bt{constructor({locale:z,formats:m}={}){this.isMUIAdapter=!0,this.isTimezoneCompatible=!0,this.lib="dayjs",this.locale=void 0,this.formats=void 0,this.escapedCharacters={start:"[",end:"]"},this.formatTokenMap=vt,this.setLocaleToValue=t=>{const e=this.getCurrentLocaleCode();return e===t.locale()?t:t.locale(e)},this.hasUTCPlugin=()=>typeof c.utc<"u",this.hasTimezonePlugin=()=>typeof c.tz<"u",this.isSame=(t,e,i)=>{const a=this.setTimezone(e,this.getTimezone(t));return t.format(i)===a.format(i)},this.cleanTimezone=t=>{switch(t){case"default":return;case"system":return c.tz.guess();default:return t}},this.createSystemDate=t=>{let e;if(this.hasUTCPlugin()&&this.hasTimezonePlugin()){const i=c.tz.guess();i==="UTC"?e=c(t):e=c.tz(t,i)}else e=c(t);return this.setLocaleToValue(e)},this.createUTCDate=t=>{if(!this.hasUTCPlugin())throw new Error(K);return this.setLocaleToValue(c.utc(t))},this.createTZDate=(t,e)=>{if(!this.hasUTCPlugin())throw new Error(K);if(!this.hasTimezonePlugin())throw new Error(at);const i=t!==void 0&&!t.endsWith("Z");return this.setLocaleToValue(c(t).tz(this.cleanTimezone(e),i))},this.getLocaleFormats=()=>{const t=c.Ls,e=this.locale||"en";let i=t[e];return i===void 0&&(i=t.en),i.formats},this.adjustOffset=t=>{if(!this.hasTimezonePlugin())return t;const e=this.getTimezone(t);if(e!=="UTC"){const i=t.tz(this.cleanTimezone(e),!0);if(i.$offset===(t.$offset??0))return t;t.$offset=i.$offset}return t},this.date=(t,e="default")=>t===null?null:e==="UTC"?this.createUTCDate(t):e==="system"||e==="default"&&!this.hasTimezonePlugin()?this.createSystemDate(t):this.createTZDate(t,e),this.getInvalidDate=()=>c(new Date("Invalid date")),this.getTimezone=t=>{if(this.hasTimezonePlugin()){const e=t.$x?.$timezone;if(e)return e}return this.hasUTCPlugin()&&t.isUTC()?"UTC":"system"},this.setTimezone=(t,e)=>{if(this.getTimezone(t)===e)return t;if(e==="UTC"){if(!this.hasUTCPlugin())throw new Error(K);return t.utc()}if(e==="system")return t.local();if(!this.hasTimezonePlugin()){if(e==="default")return t;throw new Error(at)}return this.setLocaleToValue(c.tz(t,this.cleanTimezone(e)))},this.toJsDate=t=>t.toDate(),this.parse=(t,e)=>t===""?null:c(t,e,this.locale,!0),this.getCurrentLocaleCode=()=>this.locale||"en",this.is12HourCycleInCurrentLocale=()=>/A|a/.test(this.getLocaleFormats().LT||""),this.expandFormat=t=>{const e=this.getLocaleFormats(),i=a=>a.replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(r,s,u)=>s||u.slice(1));return t.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(a,r,s)=>{const u=s&&s.toUpperCase();return r||e[s]||i(e[u])})},this.isValid=t=>t==null?!1:t.isValid(),this.format=(t,e)=>this.formatByString(t,this.formats[e]),this.formatByString=(t,e)=>this.setLocaleToValue(t).format(e),this.formatNumber=t=>t,this.isEqual=(t,e)=>t===null&&e===null?!0:t===null||e===null?!1:t.toDate().getTime()===e.toDate().getTime(),this.isSameYear=(t,e)=>this.isSame(t,e,"YYYY"),this.isSameMonth=(t,e)=>this.isSame(t,e,"YYYY-MM"),this.isSameDay=(t,e)=>this.isSame(t,e,"YYYY-MM-DD"),this.isSameHour=(t,e)=>t.isSame(e,"hour"),this.isAfter=(t,e)=>t>e,this.isAfterYear=(t,e)=>this.hasUTCPlugin()?!this.isSameYear(t,e)&&t.utc()>e.utc():t.isAfter(e,"year"),this.isAfterDay=(t,e)=>this.hasUTCPlugin()?!this.isSameDay(t,e)&&t.utc()>e.utc():t.isAfter(e,"day"),this.isBefore=(t,e)=>t<e,this.isBeforeYear=(t,e)=>this.hasUTCPlugin()?!this.isSameYear(t,e)&&t.utc()<e.utc():t.isBefore(e,"year"),this.isBeforeDay=(t,e)=>this.hasUTCPlugin()?!this.isSameDay(t,e)&&t.utc()<e.utc():t.isBefore(e,"day"),this.isWithinRange=(t,[e,i])=>t>=e&&t<=i,this.startOfYear=t=>this.adjustOffset(t.startOf("year")),this.startOfMonth=t=>this.adjustOffset(t.startOf("month")),this.startOfWeek=t=>this.adjustOffset(this.setLocaleToValue(t).startOf("week")),this.startOfDay=t=>this.adjustOffset(t.startOf("day")),this.endOfYear=t=>this.adjustOffset(t.endOf("year")),this.endOfMonth=t=>this.adjustOffset(t.endOf("month")),this.endOfWeek=t=>this.adjustOffset(this.setLocaleToValue(t).endOf("week")),this.endOfDay=t=>this.adjustOffset(t.endOf("day")),this.addYears=(t,e)=>this.adjustOffset(t.add(e,"year")),this.addMonths=(t,e)=>this.adjustOffset(t.add(e,"month")),this.addWeeks=(t,e)=>this.adjustOffset(t.add(e,"week")),this.addDays=(t,e)=>this.adjustOffset(t.add(e,"day")),this.addHours=(t,e)=>this.adjustOffset(t.add(e,"hour")),this.addMinutes=(t,e)=>this.adjustOffset(t.add(e,"minute")),this.addSeconds=(t,e)=>this.adjustOffset(t.add(e,"second")),this.getYear=t=>t.year(),this.getMonth=t=>t.month(),this.getDate=t=>t.date(),this.getHours=t=>t.hour(),this.getMinutes=t=>t.minute(),this.getSeconds=t=>t.second(),this.getMilliseconds=t=>t.millisecond(),this.setYear=(t,e)=>this.adjustOffset(t.set("year",e)),this.setMonth=(t,e)=>this.adjustOffset(t.set("month",e)),this.setDate=(t,e)=>this.adjustOffset(t.set("date",e)),this.setHours=(t,e)=>this.adjustOffset(t.set("hour",e)),this.setMinutes=(t,e)=>this.adjustOffset(t.set("minute",e)),this.setSeconds=(t,e)=>this.adjustOffset(t.set("second",e)),this.setMilliseconds=(t,e)=>this.adjustOffset(t.set("millisecond",e)),this.getDaysInMonth=t=>t.daysInMonth(),this.getWeekArray=t=>{const e=this.startOfWeek(this.startOfMonth(t)),i=this.endOfWeek(this.endOfMonth(t));let a=0,r=e;const s=[];for(;r<i;){const u=Math.floor(a/7);s[u]=s[u]||[],s[u].push(r),r=this.addDays(r,1),a+=1}return s},this.getWeekNumber=t=>t.week(),this.getYearRange=([t,e])=>{const i=this.startOfYear(t),a=this.endOfYear(e),r=[];let s=i;for(;this.isBefore(s,a);)r.push(s),s=this.addYears(s,1);return r},this.locale=z,this.formats=lt({},$t,m),c.extend(Ot)}getDayOfWeek(z){return z.day()+1}}export{Bt as A};
|