@actual-app/sync-server 26.5.0 → 26.5.2

package/build/migrations/1719409568000-multiuser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"1719409568000-multiuser.d.ts","sourceRoot":"","sources":["../../migrations/1719409568000-multiuser.js"],"names":[],"mappings":"AAEA,eAAO,MAAM,EAAE,qBA+Cd,CAAC;AAEF,eAAO,MAAM,IAAI,qBA8DhB,CAAC"}
+{"version":3,"file":"1719409568000-multiuser.d.ts","sourceRoot":"","sources":["../../migrations/1719409568000-multiuser.js"],"names":[],"mappings":"AAIA,eAAO,MAAM,EAAE,qBA+Cd,CAAC;AAEF,eAAO,MAAM,IAAI,qBA8DhB,CAAC"}

package/build/migrations/1719409568000-multiuser.js

@@ -1,3 +1,4 @@
+import { v4 as uuidv4 } from 'uuid';
 import { getAccountDb } from '../src/account-db.js';
 export const up = async function () {
     const accountDb = getAccountDb();
@@ -31,7 +32,7 @@ export const up = async function () {
     ALTER TABLE sessions
         ADD COLUMN auth_method TEXT;
         `);
-        const userId = crypto.randomUUID();
+        const userId = uuidv4();
         accountDb.mutate('INSERT INTO users (id, user_name, display_name, enabled, owner, role) VALUES (?, ?, ?, 1, 1, ?)', [userId, '', '', 'ADMIN']);
         accountDb.mutate('UPDATE sessions SET user_id = ?, expires_at = ?, auth_method = ? WHERE auth_method IS NULL', [userId, -1, 'password']);
     });

package/build/src/accounts/openid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../src/accounts/openid.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wBAAsB,eAAe,CAAC,eAAe,EAAE,eAAe;;;;GAgDrE;AA0BD,wBAAsB,oBAAoB,CACxC,SAAS,KAAA,EACT,sBAAsB,SAAK;;;;;;GAyE5B;AAED,wBAAsB,uBAAuB,CAAC,IAAI,KAAA;;;;;;GAmKjD;AAED,wBAAgB,iBAAiB,QAchC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,IAAI,MAAM,CAsBzE"}
+{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../src/accounts/openid.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wBAAsB,eAAe,CAAC,eAAe,EAAE,eAAe;;;;GAgDrE;AA0BD,wBAAsB,oBAAoB,CACxC,SAAS,KAAA,EACT,sBAAsB,SAAK;;;;;;GAyE5B;AAED,wBAAsB,uBAAuB,CAAC,IAAI,KAAA;;;;;;GAmKjD;AAED,wBAAgB,iBAAiB,QAchC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,IAAI,MAAM,CAsBzE"}

package/build/src/accounts/openid.js

@@ -1,5 +1,6 @@
 // @ts-strict-ignore
 import { custom, generators, Issuer } from 'openid-client';
+import { v4 as uuidv4 } from 'uuid';
 import { clearExpiredSessions, getAccountDb, listLoginMethods, } from '../account-db.js';
 import { config } from '../load-config.js';
 import { getUserByUsername, transferAllFilesFromUser, } from '../services/user-service.js';
@@ -187,7 +188,7 @@ export async function loginWithOpenIdFinalize(body) {
                 if (!existingUser &&
                     (countUsersWithUserName === 0 ||
                         config.get('userCreationMode') === 'login')) {
-                    userId = crypto.randomUUID();
+                    userId = uuidv4();
                     accountDb.mutate('INSERT INTO users (id, user_name, display_name, enabled, owner, role) VALUES (?, ?, ?, 1, ?, ?)', [
                         userId,
                         identity,
@@ -228,7 +229,7 @@ export async function loginWithOpenIdFinalize(body) {
                 throw error; // Re-throw other unexpected errors
             }
         }
-        const token = crypto.randomUUID();
+        const token = uuidv4();
         let expiration;
         if (config.get('token_expiration') === 'openid-provider') {
             expiration = tokenSet.expires_at ?? TOKEN_EXPIRATION_NEVER;

package/build/src/accounts/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/accounts/password.js"],"names":[],"mappings":"AAcA,wBAAgB,iBAAiB,CAAC,QAAQ,KAAA;;;;EAiBzC;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,KAAA;;;;;;EA4EzC;AAED,wBAAgB,cAAc,CAAC,WAAW,KAAA;;;;EAYzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,KAAA,WAsBrC"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../src/accounts/password.js"],"names":[],"mappings":"AAeA,wBAAgB,iBAAiB,CAAC,QAAQ,KAAA;;;;EAiBzC;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,KAAA;;;;;;EA4EzC;AAED,wBAAgB,cAAc,CAAC,WAAW,KAAA;;;;EAYzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,KAAA,WAsBrC"}

package/build/src/accounts/password.js

@@ -1,4 +1,5 @@
 import * as bcrypt from 'bcrypt';
+import { v4 as uuidv4 } from 'uuid';
 import { clearExpiredSessions, getAccountDb } from '../account-db.js';
 import { config } from '../load-config.js';
 import { TOKEN_EXPIRATION_NEVER } from '../util/validate-user.js';
@@ -37,11 +38,11 @@ export function loginWithPassword(password) {
         return { error: 'invalid-password' };
     }
     const sessionRow = accountDb.first('SELECT * FROM sessions WHERE auth_method = ?', ['password']);
-    const token = sessionRow ? sessionRow.token : crypto.randomUUID();
+    const token = sessionRow ? sessionRow.token : uuidv4();
     const { totalOfUsers } = accountDb.first('SELECT count(*) as totalOfUsers FROM users');
     let userId = null;
     if (totalOfUsers === 0) {
-        userId = crypto.randomUUID();
+        userId = uuidv4();
         accountDb.mutate('INSERT INTO users (id, user_name, display_name, enabled, owner, role) VALUES (?, ?, ?, 1, 1, ?)', [userId, '', '', 'ADMIN']);
     }
     else {

package/build/src/app-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-account.d.ts","sourceRoot":"","sources":["../../src/app-account.js"],"names":[],"mappings":"AAmBA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAMtB,QAAA,MAAM,eAAe,sDAMnB,CAAC;AAEH,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"app-account.d.ts","sourceRoot":"","sources":["../../src/app-account.js"],"names":[],"mappings":"AAmBA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAMtB,QAAA,MAAM,eAAe,sDAOnB,CAAC;AAEH,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,eAAe,EAAE,CAAC"}

package/build/src/app-account.js

@@ -15,6 +15,7 @@ const authRateLimiter = rateLimit({
     max: 5, // 5 attempts per window
     legacyHeaders: false,
     standardHeaders: true,
+    skipSuccessfulRequests: true,
     message: { status: 'error', reason: 'too-many-requests' },
 });
 export { app as handlers, authRateLimiter };

package/build/src/app-account.test.js

@@ -1,4 +1,5 @@
 import request from 'supertest';
+import { v4 as uuidv4 } from 'uuid';
 import { getAccountDb, getLoginMethod, getServerPrefs } from './account-db.js';
 import { bootstrapPassword } from './accounts/password.js';
 import { handlers as app, authRateLimiter } from './app-account.js';
@@ -15,7 +16,7 @@ const deleteUser = userId => {
 const createSession = (userId, sessionToken, authMethod = null) => {
     getAccountDb().mutate('INSERT INTO sessions (token, user_id, expires_at, auth_method) VALUES (?, ?, ?, ?)', [sessionToken, userId, Math.floor(Date.now() / 1000) + 60 * 60, authMethod]);
 };
-const generateSessionToken = () => `token-${crypto.randomUUID()}`;
+const generateSessionToken = () => `token-${uuidv4()}`;
 const clearServerPrefs = () => {
     getAccountDb().mutate('DELETE FROM server_prefs');
 };
@@ -64,8 +65,8 @@ describe('auth rate limiting', () => {
 describe('/change-password', () => {
     let adminUserId, basicUserId, adminPasswordToken, adminOpenidToken, basicPasswordToken;
     beforeEach(() => {
-        adminUserId = crypto.randomUUID();
-        basicUserId = crypto.randomUUID();
+        adminUserId = uuidv4();
+        basicUserId = uuidv4();
         adminPasswordToken = generateSessionToken();
         adminOpenidToken = generateSessionToken();
         basicPasswordToken = generateSessionToken();
@@ -193,8 +194,8 @@ describe('/server-prefs', () => {
     describe('POST /server-prefs', () => {
         let adminUserId, basicUserId, adminSessionToken, basicSessionToken;
         beforeEach(() => {
-            adminUserId = crypto.randomUUID();
-            basicUserId = crypto.randomUUID();
+            adminUserId = uuidv4();
+            basicUserId = uuidv4();
             adminSessionToken = generateSessionToken();
             basicSessionToken = generateSessionToken();
             createUser(adminUserId, 'admin', ADMIN_ROLE);

package/build/src/app-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-admin.d.ts","sourceRoot":"","sources":["../../src/app-admin.js"],"names":[],"mappings":"AAWA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAKtB,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"app-admin.d.ts","sourceRoot":"","sources":["../../src/app-admin.js"],"names":[],"mappings":"AAYA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAKtB,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/build/src/app-admin.js

@@ -1,4 +1,5 @@
 import express from 'express';
+import { v4 as uuidv4 } from 'uuid';
 import { isAdmin } from './account-db.js';
 import * as UserService from './services/user-service.js';
 import { errorMiddleware, requestLoggerMiddleware, validateSessionMiddleware, } from './util/middlewares.js';
@@ -61,7 +62,7 @@ app.post('/users', validateSessionMiddleware, async (req, res) => {
         });
         return;
     }
-    const userId = crypto.randomUUID();
+    const userId = uuidv4();
     UserService.insertUser(userId, userName, displayName || null, enabled ? 1 : 0);
     res.status(200).send({ status: 'ok', data: { id: userId } });
 });

package/build/src/app-admin.test.js

@@ -1,4 +1,5 @@
 import request from 'supertest';
+import { v4 as uuidv4 } from 'uuid';
 import { getAccountDb } from './account-db.js';
 import { handlers as app } from './app-admin.js';
 const ADMIN_ROLE = 'ADMIN';
@@ -14,12 +15,12 @@ const deleteUser = userId => {
 const createSession = (userId, sessionToken) => {
     getAccountDb().mutate('INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)', [sessionToken, userId, Date.now() + 1000 * 60 * 60]);
 };
-const generateSessionToken = () => `token-${crypto.randomUUID()}`;
+const generateSessionToken = () => `token-${uuidv4()}`;
 describe('/admin', () => {
     describe('/owner-created', () => {
         it('should return 200 and true if an owner user is created', async () => {
             const sessionToken = generateSessionToken();
-            const adminId = crypto.randomUUID();
+            const adminId = uuidv4();
             createUser(adminId, 'admin', ADMIN_ROLE, 1);
             createSession(adminId, sessionToken);
             const res = await request(app)
@@ -33,8 +34,8 @@ describe('/admin', () => {
         describe('GET /users', () => {
             let sessionUserId, testUserId, sessionToken;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
-                testUserId = crypto.randomUUID();
+                sessionUserId = uuidv4();
+                testUserId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);
@@ -57,7 +58,7 @@ describe('/admin', () => {
             let createdUserId;
             let duplicateUserId;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
+                sessionUserId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);
@@ -115,8 +116,8 @@ describe('/admin', () => {
         describe('PATCH /users', () => {
             let sessionUserId, testUserId, sessionToken;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
-                testUserId = crypto.randomUUID();
+                sessionUserId = uuidv4();
+                testUserId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);
@@ -162,8 +163,8 @@ describe('/admin', () => {
         describe('POST /users/delete-all', () => {
             let sessionUserId, testUserId, sessionToken;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
-                testUserId = crypto.randomUUID();
+                sessionUserId = uuidv4();
+                testUserId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);
@@ -203,9 +204,9 @@ describe('/admin', () => {
         describe('POST /access', () => {
             let sessionUserId, testUserId, fileId, sessionToken;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
-                testUserId = crypto.randomUUID();
-                fileId = crypto.randomUUID();
+                sessionUserId = uuidv4();
+                testUserId = uuidv4();
+                fileId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);
@@ -253,9 +254,9 @@ describe('/admin', () => {
         describe('DELETE /access', () => {
             let sessionUserId, testUserId, fileId, sessionToken;
             beforeEach(() => {
-                sessionUserId = crypto.randomUUID();
-                testUserId = crypto.randomUUID();
-                fileId = crypto.randomUUID();
+                sessionUserId = uuidv4();
+                testUserId = uuidv4();
+                fileId = uuidv4();
                 sessionToken = generateSessionToken();
                 createUser(sessionUserId, 'sessionUser', ADMIN_ROLE);
                 createSession(sessionUserId, sessionToken);

package/build/src/app-gocardless/services/gocardless-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gocardless-service.d.ts","sourceRoot":"","sources":["../../../../src/app-gocardless/services/gocardless-service.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,OAAO,EACP,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,WAAW,EACZ,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,8BAA8B,EAC9B,WAAW,EACX,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAsB9E,eAAO,MAAM,qBAAqB,UAAW,OAAO,KAAG,KAwBtD,CAAC;AAEF,eAAO,MAAM,iBAAiB;IAC5B,YAAY,QAAM,OAAO;IAMzB,QAAQ,QAAY,OAAO,CAAC,IAAI,CAAC;IAmBjC,oBAAoB,kBACH,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAcvB,0BAA0B,kBACT,uBAAuB,KACrC,OAAO,CAAC;QACT,WAAW,EAAE,WAAW,CAAC;QACzB,QAAQ,EAAE,wBAAwB,EAAE,CAAC;KACtC,CAAC;IAmCF,0BAA0B,kBACT,uBAAuB,aAC3B,mBAAmB,aACnB,MAAM,WACR,MAAM,KACd,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,aAAa,EAAE,uBAAuB,CAAC;QACvC,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE;YACZ,MAAM,EAAE,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,WAAW,EAAE,CAAC;YACvB,GAAG,EAAE,2BAA2B,EAAE,CAAC;SACpC,CAAC;KACH,CAAC;IAmCF,yBAAyB,kBACR,uBAAuB,aAC3B,mBAAmB,aACnB,MAAM,WACR,MAAM,KACd,OAAO,CAAC;QACT,aAAa,EAAE,uBAAuB,CAAC;QACvC,YAAY,EAAE;YACZ,MAAM,EAAE,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,WAAW,EAAE,CAAC;YACvB,GAAG,EAAE,2BAA2B,EAAE,CAAC;SACpC,CAAC;KACH,CAAC;IA0CF,iBAAiB,6BAGd,uBAAuB,KAAG,OAAO,CAAC;QACnC,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,uBAAuB,CAAC;KACxC,CAAC;IA8CF,iBAAiB,kBACA,uBAAuB,KACrC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAK/C,cAAc,kBACG,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAOvB,kBAAkB,cACL,mBAAmB,KAC7B,OAAO,CAAC,eAAe,CAAC;IAqB3B,kBAAkB,cACL,mBAAmB,KAC7B,OAAO,CAAC,yBAAyB,CAAC;IAGrC,eAAe,YAAkB,MAAM,KAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAGhE,cAAc,kBACG,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAGvB,+BAA+B,gCAG5B;QACD,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5B,YAAY,EAAE,WAAW,EAAE,CAAC;KAC7B,KAAG,OAAO,CAAC,8BAA8B,EAAE,CAAC;IAkB7C,eAAe,sDAKZ,qBAAqB,KAAG,OAAO,CAAC,uBAAuB,CAAC;IAoB3D,WAAW,cAAoB,mBAAmB,KAAG,OAAO,CAAC,WAAW,CAAC;CAE1E,CAAC;AAGF,eAAO,MAAM,MAAM;IACjB,WAAW,cAAoB,mBAAmB,KAAG,OAAO,CAAC,WAAW,CAAC;IAEzE,eAAe,qCAIZ;QACD,SAAS,EAAE,mBAAmB,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAG,OAAO,CAAC,uBAAuB,CAAC;IAMpC,eAAe,YAAkB,MAAM,KAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEhE,kBAAkB,kBACD,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAEvB,UAAU,cACG,mBAAmB,KAC7B,OAAO,CAAC,sBAAsB,CAAC;IAElC,WAAW,cACE,mBAAmB,KAC7B,OAAO,CAAC,yBAAyB,CAAC;IAErC,kBAAkB,kBACD,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAEvB,iBAAiB,kBACA,uBAAuB,KACrC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAE/C,WAAW,gJAUR;QACD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,uBAAuB,CAAC;QACvC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAAC;QACpC,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAAC;QACnC,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,gBAAgB,EAAE,OAAO,CAAC;KAC3B,KAAG,OAAO,CAAC,WAAW,CAAC;IAYxB,aAAa,QAAY,OAAO,CAAC,aAAa,CAAC;IAE/C,aAAa,sBAEV;QACD,YAAY,EAAE,MAAM,CAAC;KACtB,KAAG,OAAO,CAAC,aAAa,CAAC;CAE3B,CAAC"}
+{"version":3,"file":"gocardless-service.d.ts","sourceRoot":"","sources":["../../../../src/app-gocardless/services/gocardless-service.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EACV,OAAO,EACP,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,WAAW,EACZ,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,8BAA8B,EAC9B,WAAW,EACX,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAsB9E,eAAO,MAAM,qBAAqB,UAAW,OAAO,KAAG,KAwBtD,CAAC;AAEF,eAAO,MAAM,iBAAiB;IAC5B,YAAY,QAAM,OAAO;IAMzB,QAAQ,QAAY,OAAO,CAAC,IAAI,CAAC;IAmBjC,oBAAoB,kBACH,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAcvB,0BAA0B,kBACT,uBAAuB,KACrC,OAAO,CAAC;QACT,WAAW,EAAE,WAAW,CAAC;QACzB,QAAQ,EAAE,wBAAwB,EAAE,CAAC;KACtC,CAAC;IAmCF,0BAA0B,kBACT,uBAAuB,aAC3B,mBAAmB,aACnB,MAAM,WACR,MAAM,KACd,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,aAAa,EAAE,uBAAuB,CAAC;QACvC,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE;YACZ,MAAM,EAAE,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,WAAW,EAAE,CAAC;YACvB,GAAG,EAAE,2BAA2B,EAAE,CAAC;SACpC,CAAC;KACH,CAAC;IAmCF,yBAAyB,kBACR,uBAAuB,aAC3B,mBAAmB,aACnB,MAAM,WACR,MAAM,KACd,OAAO,CAAC;QACT,aAAa,EAAE,uBAAuB,CAAC;QACvC,YAAY,EAAE;YACZ,MAAM,EAAE,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,WAAW,EAAE,CAAC;YACvB,GAAG,EAAE,2BAA2B,EAAE,CAAC;SACpC,CAAC;KACH,CAAC;IA0CF,iBAAiB,6BAGd,uBAAuB,KAAG,OAAO,CAAC;QACnC,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,uBAAuB,CAAC;KACxC,CAAC;IA8CF,iBAAiB,kBACA,uBAAuB,KACrC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAK/C,cAAc,kBACG,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAOvB,kBAAkB,cACL,mBAAmB,KAC7B,OAAO,CAAC,eAAe,CAAC;IAqB3B,kBAAkB,cACL,mBAAmB,KAC7B,OAAO,CAAC,yBAAyB,CAAC;IAGrC,eAAe,YAAkB,MAAM,KAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAGhE,cAAc,kBACG,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAGvB,+BAA+B,gCAG5B;QACD,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5B,YAAY,EAAE,WAAW,EAAE,CAAC;KAC7B,KAAG,OAAO,CAAC,8BAA8B,EAAE,CAAC;IAkB7C,eAAe,sDAKZ,qBAAqB,KAAG,OAAO,CAAC,uBAAuB,CAAC;IAoB3D,WAAW,cAAoB,mBAAmB,KAAG,OAAO,CAAC,WAAW,CAAC;CAE1E,CAAC;AAGF,eAAO,MAAM,MAAM;IACjB,WAAW,cAAoB,mBAAmB,KAAG,OAAO,CAAC,WAAW,CAAC;IAEzE,eAAe,qCAIZ;QACD,SAAS,EAAE,mBAAmB,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAG,OAAO,CAAC,uBAAuB,CAAC;IAMpC,eAAe,YAAkB,MAAM,KAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEhE,kBAAkB,kBACD,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAEvB,UAAU,cACG,mBAAmB,KAC7B,OAAO,CAAC,sBAAsB,CAAC;IAElC,WAAW,cACE,mBAAmB,KAC7B,OAAO,CAAC,yBAAyB,CAAC;IAErC,kBAAkB,kBACD,uBAAuB,KACrC,OAAO,CAAC,WAAW,CAAC;IAEvB,iBAAiB,kBACA,uBAAuB,KACrC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAE/C,WAAW,gJAUR;QACD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,uBAAuB,CAAC;QACvC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAAC;QACpC,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAAC;QACnC,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,gBAAgB,EAAE,OAAO,CAAC;KAC3B,KAAG,OAAO,CAAC,WAAW,CAAC;IAYxB,aAAa,QAAY,OAAO,CAAC,aAAa,CAAC;IAE/C,aAAa,sBAEV;QACD,YAAY,EAAE,MAAM,CAAC;KACtB,KAAG,OAAO,CAAC,aAAa,CAAC;CAE3B,CAAC"}

package/build/src/app-gocardless/services/gocardless-service.js

@@ -1,3 +1,4 @@
+import { v4 as uuidv4 } from 'uuid';
 import { BankFactory, isSpecialContinuousAccessBank, } from '../bank-factory.js';
 import { AccessDeniedError, AccountNotLinkedToRequisition, GenericGoCardlessError, InvalidGoCardlessTokenError, InvalidInputDataError, NotFoundError, RateLimitError, RequisitionNotLinked, ResourceSuspended, ServiceError, UnknownError, } from '../errors.js';
 import { SecretName, secretsService } from '../../services/secrets-service.js';
@@ -146,7 +147,7 @@ export const goCardlessService = {
         const body = {
             redirectUrl: host + '/gocardless/link',
             institutionId,
-            referenceId: crypto.randomUUID(),
+            referenceId: uuidv4(),
             accessValidForDays: institution.max_access_valid_for_days,
             maxHistoricalDays: isSpecialContinuousAccessBank(institutionId)
                 ? 90

package/build/src/app-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-sync.d.ts","sourceRoot":"","sources":["../../src/app-sync.ts"],"names":[],"mappings":"AAoCA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAkBtB,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"app-sync.d.ts","sourceRoot":"","sources":["../../src/app-sync.ts"],"names":[],"mappings":"AAqCA,QAAA,MAAM,GAAG,6CAAY,CAAC;AAkBtB,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/build/src/app-sync.js

@@ -4,6 +4,7 @@ import fs from 'node:fs/promises';
 import { resolve } from 'node:path';
 import { SyncProtoBuf } from '@actual-app/crdt';
 import express from 'express';
+import { v4 as uuidv4 } from 'uuid';
 import { getAccountDb, isAdmin } from './account-db.js';
 import { FileNotFound } from './app-sync/errors.js';
 import { File, FilesService, FileUpdate, } from './app-sync/services/files-service.js';
@@ -32,7 +33,7 @@ function boolToInt(deleted) {
     return deleted ? 1 : 0;
 }
 function generateGroupId() {
-    const id = crypto.randomUUID();
+    const id = uuidv4();
     if (!isValidGroupId(id)) {
         throw new TypeError('UUID format no longer matches expected format');
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actual-app/sync-server",
-  "version": "26.5.0",
+  "version": "26.5.2",
   "description": "actual syncing server",
   "license": "MIT",
   "repository": {
@@ -85,7 +85,7 @@
   },
   "dependencies": {
     "@actual-app/crdt": "2.1.0",
-    "@actual-app/web": "26.5.0",
+    "@actual-app/web": "26.5.2",
     "bcrypt": "^6.0.0",
     "better-sqlite3": "^12.8.0",
     "convict": "^6.2.5",
@@ -99,6 +99,7 @@
     "migrate": "^2.1.0",
     "openid-client": "^5.7.1",
     "pluggy-sdk": "^0.83.0",
+    "uuid": "^13.0.0",
     "winston": "^3.19.0"
   },
   "devDependencies": {