@andrewcaires/api 3.0.10 → 3.0.11

package/dist/index.cjs.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.10
+ * @andrewcaires/api v3.0.11
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),d=require("crypto-js"),a=require("mime-types"),l=require("multer"),u=require("path");function c(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var d=e.length-1;d>=0;d--)(o=e[d])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function p(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{a(s.next(e))}catch(e){n(e)}}function d(e){try{a(s.throw(e))}catch(e){n(e)}}function a(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,d)}a((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=t.parseMs(process.env.API_SLEEP_AUTH||"2s"),m.API_SLEEP_FORGOT=t.parseMs(process.env.API_SLEEP_FORGOT||"5s"),m.API_SLEEP_REGISTRY=t.parseMs(process.env.API_SLEEP_REGISTRY||"5s"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=t.parseMs(process.env.API_TOKEN_LIFETIME||"1d"),m.API_TOKEN_RENEW=t.parseMs(process.env.API_TOKEN_RENEW||"1d"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const v=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class R extends s.Model{}R.init({secret:s.DataTypes.STRING,logout:s.DataTypes.DATE,useragent:s.DataTypes.STRING},{sequelize:v,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class A extends s.Model{}A.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:v,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:v,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:v,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:v,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:v,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class I extends s.Model{}I.init({},{sequelize:v,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),I.removeAttribute("id");class E extends s.Model{}E.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:v,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),E.removeAttribute("id");class w extends s.Model{}w.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:v,modelName:m.API_TABLE_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class T extends s.Model{}var x;T.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:v,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),f.hasMany(R),R.belongsTo(f),f.hasMany(A),A.belongsTo(f),O.hasMany(_),_.belongsTo(O),P.hasMany(_),_.belongsTo(P),f.hasMany(I),I.belongsTo(f),O.hasMany(I),I.belongsTo(O),exports.LogsColor=void 0,(x=exports.LogsColor||(exports.LogsColor={})).ERROR="",x.INFO="",x.NONE="",x.SUCCESS="",x.WARNING="";class S{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield S.writeRaw(exports.LogsColor.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield S.writeRaw(exports.LogsColor.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield S.writeRaw(exports.LogsColor.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield S.writeRaw(exports.LogsColor.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield S.writeRaw(exports.LogsColor.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&S.writeConsole(e,t,r),v&&(yield w.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const b=e=>n.existsSync(e)?n.readFileSync(e):void 0,C={http:b(m.API_HTTP_CRT),token:b(m.API_TOKEN_CRT)},q={http:b(m.API_HTTP_KEY),token:b(m.API_TOKEN_KEY)};class j{static create(e){return y(this,void 0,void 0,(function*(){if(!q.token)return{error:"Key not found"};const{id:r}=e,s=t.uuidv4(),o=yield R.create({secret:s,userId:r}).catch(j.error);return o?{auth:o,token:i.sign({id:r,secret:s},q.token,{algorithm:"RS256",expiresIn:m.API_TOKEN_LIFETIME+"ms"})}:{error:"Internal Server Error"}}))}static destroy(e){return y(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){S.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static renew(e){return y(this,void 0,void 0,(function*(){if(!q.token)return{error:"Key not found"};const{error:r,decode:s}=j.verify(e,m.API_TOKEN_RENEW/1e3);if(r)return{error:r};if(s){const{id:e,secret:r}=s;if(e&&r){const s=yield f.findOne({where:{id:e,state:!0}}).catch(j.error);if(s){const o=yield R.findOne({where:{secret:r,userId:s.id}}).catch(j.error);if(o&&!o.logout)return o.secret=t.uuidv4(),yield o.save().catch(j.error),{auth:o,token:i.sign({id:e,secret:o.secret},q.token,{algorithm:"RS256",expiresIn:m.API_TOKEN_LIFETIME+"ms"})}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=j.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield f.findOne({where:{id:e,state:!0}}).catch(j.error);if(r){const e=yield R.findOne({where:{secret:t,userId:r.id}}).catch(j.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!C.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,C.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:C.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:q.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){S.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){S.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield v.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield j.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class M{static all(){return y(this,void 0,void 0,(function*(){const e=yield E.findAll().catch(M.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield E.destroy({where:{key:e}}).catch(M.error))||0)>0}))}static error(e){S.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield E.findOne({where:{key:e}}).catch(M.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield E.findOrCreate({where:{key:e}}).catch(M.error))||[];r&&(r.value=t,yield r.save().catch(M.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield P.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:I,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{S.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const F=e.parameterFactory((({req:e})=>e.auth)),L=e.parameterFactory((({req:e})=>t.toArray(e.files))),B=e.parameterFactory((({req:e})=>e.user)),G=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?G(e,r):s};class k extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:d,user:a}=yield j.user(s);d?e.Responses.error(t,d):i&&a?(o&&(i.useragent=o),r.auth=i,r.user=a,yield i.save(),n()):e.Responses.error(t,"Internal Server Error")}))}error(e){S.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,d=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,G(i,a.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),c=l({storage:d,fileFilter(e,r,s){var o;return y(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),p=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;c.array(g,p)(s,r,(t=>t?e.Responses.error(r,t.message):o()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:d}=yield t.Validation.object(n).parse().validateAsync(s.body);i?e.Responses.validation(r,i):(s.body=d,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}c([p(0,e.Res()),p(1,e.Req()),p(2,e.Headers(m.API_TOKEN_HEADER)),p(3,e.Headers("user-agent")),p(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],k.prototype,"auth",null),c([p(0,e.Res()),p(1,B()),p(2,e.Next()),p(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,f,Function,String]),g("design:returntype",Promise)],k.prototype,"permission",null),c([p(0,e.Res()),p(1,B()),p(2,e.Next()),p(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,f,Function,String]),g("design:returntype",Promise)],k.prototype,"read",null),c([p(0,e.Res()),p(1,e.Req()),p(2,e.Next()),p(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],k.prototype,"upload",null),c([p(0,e.Res()),p(1,e.Req()),p(2,e.Next()),p(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],k.prototype,"validation",null),c([p(0,e.Res()),p(1,B()),p(2,e.Next()),p(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,f,Function,String]),g("design:returntype",Promise)],k.prototype,"write",null),exports.AuthController=class extends k{login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:a}=s.body,l=yield f.findOne({where:{username:i,password:d.SHA256(a).toString(),state:!0}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),void e.Responses.notfound(r,"Username not found");const{auth:u,error:c,token:p}=yield j.create(l);return c?(n.emit("auth.failure",{req:s}),void e.Responses.error(r,c)):u&&p?(u.useragent=o,yield u.save().catch(this.error),this.emit("auth.login",{auth:u,req:s,user:l}),void e.Responses.data(r,{token:p})):(n.emit("auth.failure",{req:s}),void e.Responses.error(r,"Internal Server Error"))}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){if(yield j.destroy(s))return n.emit("auth.logout",{auth:s,req:r,user:o}),void e.Responses.success(t,"Disconcerted");e.Responses.unauthorized(t,"Access denied")}))}renew(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:d,token:a}=yield j.renew(s);if(!d)return i?(i.useragent=o,yield i.save().catch(this.error),n.emit("auth.renew",{auth:i,req:r}),void e.Responses.data(t,{token:a})):void e.Responses.error(t,"Internal Server Error");e.Responses.error(t,d)}))}update(t,r,s,o){return y(this,void 0,void 0,(function*(){if(o){if(yield f.scope("password").findOne({where:{id:o.id,password:s,state:!0}}).catch(this.error)){r.newPassword&&(r.password=d.SHA256(r.newPassword).toString()),delete r.newPassword,delete r.oldPassword;const[s]=(yield f.update(r,{where:{id:o.id}}).catch(this.error))||[];return s?void e.Responses.success(t,"OK"):void e.Responses.success(t,"Record not changed")}e.Responses.error(t,"Record not changed")}else e.Responses.error(t,"Internal Server Error")}))}user(t,r,s,o){return y(this,void 0,void 0,(function*(){r.useragent=o,yield r.save().catch(this.error);const n=yield N.all(s);n?e.Responses.data(t,Object.assign(Object.assign({},s.toJSON()),{permissions:n.map((e=>e.name))})):e.Responses.error(t,"Internal Server Error")}))}},c([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),p(0,e.Res()),p(1,e.Req()),p(2,e.Headers("user-agent")),p(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),c([e.Get("/logout"),e.Middleware("auth"),p(0,e.Res()),p(1,e.Req()),p(2,F()),p(3,B()),p(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,R,f,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),c([e.Post("/renew"),e.Middleware("validation",{token:t.Validation.string().required()}),p(0,e.Res()),p(1,e.Req()),p(2,e.Body("token")),p(3,e.Headers("user-agent")),p(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"renew",null),c([e.Post("/update"),e.Middleware("auth"),e.Middleware("validation",{name:t.Validation.string().empty(),newPassword:t.Validation.string().min(5).empty().filter(""),oldPassword:t.Validation.string().min(5).empty().filter(""),avatar:t.Validation.string().empty()}),p(0,e.Res()),p(1,e.Body()),p(2,e.Body("oldPassword")),p(3,B()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,f]),g("design:returntype",Promise)],exports.AuthController.prototype,"update",null),c([e.Get(),e.Middleware("auth"),p(0,e.Res()),p(1,F()),p(2,B()),p(3,e.Headers("user-agent")),g("design:type",Function),g("design:paramtypes",[Object,R,f,String]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=c([e.Controller("/auth"),e.Extends(k)],exports.AuthController),exports.ForgotController=class extends k{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield f.findOne({where:{username:o}}).catch(this.error);if(!n)return void e.Responses.notfound(r,"User not found");const i=t.uniqueID(),d=Date.now()+6e4*m.API_TOKEN_LIFETIME,a=yield A.create({token:i,timestamp:d,state:!0,userId:n.id});this.emit("forgot",{forgot:a,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);n?(n.state=!1,yield n.save().catch(this.error),n.user.password=d.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield A.findOne({where:{token:e,state:!0},include:[{model:f,required:!0}]}).catch(this.error)}))}},c([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),c([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),c([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=c([e.Controller("/forgot"),e.Extends(k)],exports.ForgotController),exports.ModelController=class extends k{add(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=yield this.model().create(Object.assign(Object.assign({},t.body),o||{}),s||{}).catch(this.error);if(n){const t=this.key();return e.Responses.data(r,{[t]:n.getDataValue(t)}),n}e.Responses.error(r,"Internal Server Error")}))}all(r,o,n,i){var d,a,l,u,c;return y(this,void 0,void 0,(function*(){const p=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(d=r.query.limit)||void 0===d?void 0:d.toString();y&&(g.limit=parseInt(y));const m=null===(a=r.query.offset)||void 0===a?void 0:a.toString();m&&(g.offset=parseInt(m));const h=Object.keys(p.getAttributes()),v=[],R=null===(l=r.query.asc)||void 0===l?void 0:l.toString();R&&R.length&&R.split(",").forEach((e=>{h.indexOf(e)>=0&&v.push([e,"ASC"])}));const A=null===(u=r.query.desc)||void 0===u?void 0:u.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&v.push([e,"DESC"])})),v.length&&(g.order=v);const O=[],_=t.isArray(g.attributes)?g.attributes:h,P=null===(c=r.query.search)||void 0===c?void 0:c.toString();_.forEach((e=>{var o;if(t.isString(e)&&(P&&P.length&&O.push({[e]:{[s.Op.like]:`%${P}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const f=(yield p.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error))||0,I=yield p.findAll(g).catch(this.error);if(I)return e.Responses.data(o,{count:f,records:i?yield i(I):I}),I;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const o=this.key(),{[o]:n}=t.params;if(!n)return e.Responses.error(r,"Internal Server Error"),0;const i=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[o]:n})})).catch(this.error);return i?(e.Responses.success(r,"OK"),i):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?S.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=this.key(),{[n]:i}=t.params,d=yield this.model().findOne(Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[n]:i})})).catch(this.error);if(d)return e.Responses.data(r,o?yield o(d):d.toJSON()),d;null!==d?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=this.key(),{[n]:i}=t.params,[d]=(yield this.model().update(Object.assign(Object.assign({},t.body),o||{}),Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[n]:i})})).catch(this.error))||[];return d?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=c([e.Extends(k)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},c([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),p(0,e.Req()),p(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),c([e.Get(),e.Middleware("auth"),e.Middleware("read"),p(0,e.Req()),p(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),c([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),p(0,e.Req()),p(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),c([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),p(0,e.Req()),p(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),c([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),p(0,e.Req()),p(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),c([p(0,e.Req()),p(1,e.Res()),p(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),c([p(0,e.Req()),p(1,e.Res()),p(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=c([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupsController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupsController=c([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupsController),exports.GroupsRoutesController=class extends exports.ModelController{model(){return _}recordAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:P,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield P.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}e.Responses.success(r,"OK")}else t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},c([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),p(0,e.Res()),p(1,e.Req()),p(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordAll",null),c([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),p(0,e.Res()),p(1,e.Params("id")),p(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordSet",null),exports.GroupsRoutesController=c([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupsRoutesController),exports.LogsController=class extends exports.ModelController{model(){return w}recordAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},c([e.Get(),e.Middleware("auth"),e.Middleware("read"),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"recordAll",null),exports.LogsController=c([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController),exports.RegisterController=class extends k{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield T.findOne({where:{token:r,state:!0},include:[{model:f,required:!0}]}).catch(this.error);s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield f.findOne({where:{username:n}}).catch(this.error);if(s)return void e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return void e.Responses.error(r,"Internal Server Error");const i=yield f.create(Object.assign(Object.assign({},o),{state:!1}));this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},c([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),p(0,e.Res()),p(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),c([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),p(0,e.Res()),p(1,e.Req()),p(2,e.Body()),p(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=c([e.Controller("/register"),e.Extends(k)],exports.RegisterController),exports.RoutesController=class extends exports.CrudController{model(){return P}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RoutesController=c([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RoutesController),exports.SetupController=class extends k{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield f.count())){const e={description:"",state:!0},r=yield f.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield I.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield P.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield P.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}e.Responses.success(r,"OK")}))}},c([e.Get(),p(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=c([e.Controller("/setup"),e.Extends(k)],exports.SetupController),exports.UsersController=class extends exports.ModelController{model(){return f}recordAdd(e,t,r){this.add(r,e,{},{password:d.SHA256(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(t,r,s,o){s&&s.id.toString()!=o?this.del(r,t):e.Responses.error(t,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:d.SHA256(t).toString()}:{})}},c([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}),p(0,e.Res()),p(1,e.Body("password")),p(2,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,String,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordAdd",null),c([e.Get(),e.Middleware("auth"),e.Middleware("read"),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordAll",null),c([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),p(0,e.Res()),p(1,e.Req()),p(2,B()),p(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,f,String]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordDel",null),c([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),p(0,e.Res()),p(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordGet",null),c([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),p(0,e.Res()),p(1,e.Body("password")),p(2,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,String,Object]),g("design:returntype",void 0)],exports.UsersController.prototype,"recordSet",null),exports.UsersController=c([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersController),exports.UsersGroupsController=class extends exports.ModelController{model(){return I}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield f.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield I.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield I.create({userId:n.id,groupId:o[t]}))}e.Responses.success(r,"OK")}else t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},c([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),p(0,e.Res()),p(1,e.Req()),p(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UsersGroupsController.prototype,"recordAll",null),c([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),p(0,e.Res()),p(1,e.Params("id")),p(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UsersGroupsController.prototype,"recordSet",null),exports.UsersGroupsController=c([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersGroupsController),exports.Application=D,exports.Auth=R,exports.Config=M,exports.Configs=E,exports.ControllerBase=k,exports.Database=h,exports.Env=m,exports.Forgot=A,exports.Group=O,exports.GroupRoute=_,exports.Log=w,exports.Logs=S,exports.Permission=N,exports.Registry=T,exports.ReqAuth=F,exports.ReqFiles=L,exports.ReqUser=B,exports.Route=P,exports.Token=j,exports.User=f,exports.UserGroup=I,exports.crt=C,exports.key=q,exports.sequelize=v;
+"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("express-session"),d=require("jsonwebtoken"),a=require("mime-types"),l=require("multer"),u=require("path"),c=require("crypto-js");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var d=e.length-1;d>=0;d--)(o=e[d])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function g(e,t){return function(r,s){t(r,s,e)}}function y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function h(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{a(s.next(e))}catch(e){n(e)}}function d(e){try{a(s.throw(e))}catch(e){n(e)}}function a(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,d)}a((s=s.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_DB_PREFIX=process.env.API_DB_PREFIX||"",m.API_DB_TIMEZONE=process.env.API_DB_TIMEZONE||"+00:00",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=t.parseMs(process.env.API_SLEEP_AUTH||"2s"),m.API_SLEEP_FORGOT=t.parseMs(process.env.API_SLEEP_FORGOT||"5s"),m.API_SLEEP_REGISTRY=t.parseMs(process.env.API_SLEEP_REGISTRY||"5s"),m.API_SESSION_NAME=process.env.API_SESSION_NAME||"session.id",m.API_SESSION_LIFETIME=t.parseMs(process.env.API_SESSION_LIFETIME||"1d"),m.API_SESSION_SECRET=process.env.API_SESSION_SECRET||"yoursecret",m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=t.parseMs(process.env.API_TOKEN_LIFETIME||"1d"),m.API_TOKEN_RENEW=t.parseMs(process.env.API_TOKEN_RENEW||"1d"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class v{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in v)return v[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}}const O=v.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class R extends s.Model{}R.init({secret:s.DataTypes.STRING,logout:s.DataTypes.DATE,useragent:s.DataTypes.STRING},{sequelize:O,modelName:m.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class A extends s.Model{}A.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:O,modelName:m.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:O,modelName:m.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:O,modelName:m.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:O,modelName:m.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:O,modelName:m.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class E extends s.Model{}E.init({},{sequelize:O,modelName:m.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),E.removeAttribute("id");class S extends s.Model{}S.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:O,modelName:m.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),S.removeAttribute("id");class w extends s.Model{}w.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:O,modelName:m.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class T extends s.Model{}T.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:O,modelName:m.API_DB_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});class x extends s.Model{}var b;x.init({session:s.DataTypes.STRING,json:s.DataTypes.TEXT,expired:s.DataTypes.BIGINT},{sequelize:O,modelName:m.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),x.removeAttribute("id"),f.hasMany(R),R.belongsTo(f),f.hasMany(A),A.belongsTo(f),I.hasMany(_),_.belongsTo(I),P.hasMany(_),_.belongsTo(P),f.hasMany(E),E.belongsTo(f),I.hasMany(E),E.belongsTo(I),exports.LogsColor=void 0,(b=exports.LogsColor||(exports.LogsColor={})).ERROR="",b.INFO="",b.NONE="",b.SUCCESS="",b.WARNING="";class C{static write(e,t,r){return h(this,void 0,void 0,(function*(){yield C.writeRaw(exports.LogsColor.NONE,"",e,t,r)}))}static error(e,t,r){return h(this,void 0,void 0,(function*(){yield C.writeRaw(exports.LogsColor.ERROR,"error",e,t,r)}))}static info(e,t,r){return h(this,void 0,void 0,(function*(){yield C.writeRaw(exports.LogsColor.INFO,"info",e,t,r)}))}static success(e,t,r){return h(this,void 0,void 0,(function*(){yield C.writeRaw(exports.LogsColor.ERROR,"success",e,t,r)}))}static warning(e,t,r){return h(this,void 0,void 0,(function*(){yield C.writeRaw(exports.LogsColor.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return h(this,void 0,void 0,(function*(){o&&C.writeConsole(e,t,r),O&&(yield w.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const D=e=>n.existsSync(e)?n.readFileSync(e):void 0,q={http:D(m.API_HTTP_CRT),token:D(m.API_TOKEN_CRT)},N={http:D(m.API_HTTP_KEY),token:D(m.API_TOKEN_KEY)};class j extends i.Store{constructor(){super(),this.all=e=>h(this,void 0,void 0,(function*(){e=e||t.noop;const r=yield x.findAll({attributes:["session"],where:{expired:{[s.Op.gte]:Date.now()}}}).catch((t=>(e(t),null)));r&&e(null,r.map((e=>e.session))),e()})),this.clear=e=>h(this,void 0,void 0,(function*(){yield x.destroy().catch(t.noop),e&&e()})),this.destroy=(e,r)=>h(this,void 0,void 0,(function*(){yield x.destroy({where:{session:e}}).catch(t.noop),r&&r()})),this.expired=()=>h(this,void 0,void 0,(function*(){yield x.destroy({where:{expired:{[s.Op.lt]:Date.now()}}}).catch(t.noop)})),this.get=(e,r)=>h(this,void 0,void 0,(function*(){r=r||t.noop;const o=yield x.findOne({where:{session:e,expired:{[s.Op.gte]:Date.now()}}}).catch((e=>(r(e),null)));if(o){const e=JSON.parse(o.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield o.destroy().catch(t.noop),void r(null)}r(null,e)}else r(null)})),this.length=e=>h(this,void 0,void 0,(function*(){e&&e(null,(yield x.count().catch(t.noop))||0)})),this.set=(e,r,s)=>h(this,void 0,void 0,(function*(){s=s||t.noop;const o=Date.now()+m.API_SESSION_LIFETIME,n=JSON.stringify(r),[i,d]=(yield x.findOrCreate({where:{session:e},defaults:{session:e,json:n,expired:o}}).catch(t.noop))||[];i&&(d||(i.json=n,i.expired=o,yield i.save().catch(t.noop))),s()})),this.loop=t.loop(this.expired,3e4),this.loop.start()}}class M{static create(e){return h(this,void 0,void 0,(function*(){if(!N.token)return{error:"Key not found"};const{id:r}=e,s=t.uuidv4(),o=yield R.create({secret:s,userId:r}).catch(M.error);if(!o)return{error:"Internal Server Error"};return{auth:o,token:d.sign({id:r,secret:s},N.token,M.options())}}))}static destroy(e){return h(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){C.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:m.API_TOKEN_LIFETIME+"ms"}}static renew(e){return h(this,void 0,void 0,(function*(){if(!N.token)return{error:"Key not found"};const{error:r,decode:s}=M.verify(e,m.API_TOKEN_RENEW/1e3);if(r)return{error:r};if(s){const{id:e,secret:r}=s;if(e&&r){const s=yield f.findOne({where:{id:e,state:!0}}).catch(M.error);if(s){const o=yield R.findOne({where:{secret:r,userId:s.id}}).catch(M.error);if(o&&!o.logout){o.secret=t.uuidv4(),yield o.save().catch(M.error);return{auth:o,token:d.sign({id:e,secret:o.secret},N.token,M.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return h(this,void 0,void 0,(function*(){const{error:t,decode:r}=M.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield f.findOne({where:{id:e,state:!0}}).catch(M.error);if(r){const e=yield R.findOne({where:{secret:t,userId:r.id}}).catch(M.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!q.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:d.verify(e,q.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class F extends e.Application{constructor(e){super(e,{cert:q.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:N.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC,session:{store:new j,name:m.API_SESSION_NAME,secret:m.API_SESSION_SECRET,cookie:{maxAge:m.API_SESSION_LIFETIME},genid:t.uuidv4}})}error(e,t){C.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){C.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return h(this,void 0,void 0,(function*(){yield O.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>h(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>h(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield M.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class B{static all(){return h(this,void 0,void 0,(function*(){const e=yield S.findAll().catch(B.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return h(this,void 0,void 0,(function*(){return((yield S.destroy({where:{key:e}}).catch(B.error))||0)>0}))}static error(e){C.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return h(this,void 0,void 0,(function*(){const t=yield S.findOne({where:{key:e}}).catch(B.error);return t&&t.value||""}))}static set(e,t){return h(this,void 0,void 0,(function*(){const[r]=(yield S.findOrCreate({where:{key:e}}).catch(B.error))||[];r&&(r.value=t,yield r.save().catch(B.error))}))}}const L=e.parameterFactory((({req:e})=>e.auth)),G=e.parameterFactory((({req:e})=>t.toArray(e.files))),k=e.parameterFactory((({req:e})=>e.user));class U{static all(e,t){return h(this,void 0,void 0,(function*(){return yield P.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:I,required:!0,where:{state:!0},include:[{model:E,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{C.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return h(this,void 0,void 0,(function*(){const t=yield U.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return h(this,void 0,void 0,(function*(){const r=yield U.all(e,{name:t});return!!r&&r.length>0}))}}class V extends t.EventEmitter{auth(t,r,s,o,n){return h(this,void 0,void 0,(function*(){const{auth:i,error:d,user:a}=yield M.user(s);d?e.Responses.error(r,d):i&&a?i.useragent==o?(t.auth=i,t.user=a,n()):e.Responses.error(r,"Invalid token"):e.Responses.error(r,"Internal Server Error")}))}session(e,r,s){return h(this,void 0,void 0,(function*(){r.auth&&r.user&&(r.useragent?r.useragent!=e&&r.regenerate(t.noop):(r.useragent=e,r.save(t.noop))),s()}))}error(e){C.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return h(this,void 0,void 0,(function*(){o?(yield U.is(o,s))?r():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(t,r,(s||this.name())+".read",e)}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,d=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>h(this,void 0,void 0,(function*(){return r(null,this.uploadFile(i,a.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),c=l({storage:d,fileFilter(e,r,s){var o;return h(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),p=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;c.array(g,p)(r,s,(t=>t?e.Responses.error(s,t.message):o()))}uploadFile(e,r){const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?this.uploadFile(e,r):s}validation(r,s,o,n){return h(this,void 0,void 0,(function*(){const{error:i,value:d}=yield t.Validation.object(n).parse().validateAsync(r.body);i?e.Responses.validation(s,i):(r.body=d,o())}))}write(e,t,r,s){return this.permission(e,t,(r||this.name())+".write",s)}}p([g(0,e.Req()),g(1,e.Res()),g(2,e.Headers(m.API_TOKEN_HEADER)),g(3,e.Headers("user-agent")),g(4,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String,Function]),y("design:returntype",Promise)],V.prototype,"auth",null),p([g(0,e.Headers("user-agent")),g(1,e.Session()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[String,Object,Function]),y("design:returntype",Promise)],V.prototype,"session",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,k()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,f]),y("design:returntype",Promise)],V.prototype,"permission",null),p([g(0,k()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[f,Object,Function,String]),y("design:returntype",Promise)],V.prototype,"read",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",void 0)],V.prototype,"upload",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",Promise)],V.prototype,"validation",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,k()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,f]),y("design:returntype",Promise)],V.prototype,"write",null),exports.AuthController=class extends V{login(r,s,o,n,i,d){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const a=yield f.findOne({where:{username:n,password:c.SHA256(i).toString(),state:!0}}).catch(this.error);if(!a)return e.Responses.notfound(s,"Username not found"),void d.emit("auth.failure",{req:r});const{auth:l,error:u,token:p}=yield M.create(a);return u?(e.Responses.error(s,u),void d.emit("auth.failure",{req:r})):l&&p?(e.Responses.data(s,{token:p}),l.useragent=o,yield l.save().catch(this.error),void this.emit("auth.login",{auth:l,req:r,user:a})):(e.Responses.error(s,"Internal Server Error"),void d.emit("auth.failure",{req:r}))}))}logout(t,r,s,o,n){return h(this,void 0,void 0,(function*(){if(yield M.destroy(s))return e.Responses.success(t,"Disconcerted"),void n.emit("auth.logout",{auth:s,req:r,user:o});e.Responses.unauthorized(t,"Access denied")}))}renew(t,r,s,o,n){return h(this,void 0,void 0,(function*(){const{auth:i,error:d,token:a}=yield M.renew(o);d?e.Responses.error(r,d):i?(e.Responses.data(r,{token:a}),i.useragent=s,yield i.save().catch(this.error),n.emit("auth.renew",{auth:i,req:t})):e.Responses.error(r,"Internal Server Error")}))}update(t,r,s,o){return h(this,void 0,void 0,(function*(){const n=yield f.scope("password").findOne({where:{id:o.id,password:c.SHA256(r).toString(),state:!0}}).catch(this.error);n?(n.password=c.SHA256(s).toString(),(yield n.save().catch(this.error))?e.Responses.success(t,"OK"):e.Responses.success(t,"Record not changed")):e.Responses.error(t,"Record not changed")}))}user(t,r){return h(this,void 0,void 0,(function*(){const s=yield U.all(r);s?e.Responses.data(t,Object.assign(Object.assign({},r.toJSON()),{permissions:s.map((e=>e.name))})):e.Responses.error(t,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),g(0,e.Req()),g(1,e.Res()),g(2,e.Headers("user-agent")),g(3,e.Body("username")),g(4,e.Body("password")),g(5,e.App()),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String,String,F]),y("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),g(0,e.Res()),g(1,e.Req()),g(2,L()),g(3,k()),g(4,e.App()),y("design:type",Function),y("design:paramtypes",[Object,Object,R,f,F]),y("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Post("/renew"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Req()),g(1,e.Res()),g(2,e.Headers("user-agent")),g(3,e.Body("token")),g(4,e.App()),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String,F]),y("design:returntype",Promise)],exports.AuthController.prototype,"renew",null),p([e.Post("/update"),e.Middleware("auth"),e.Middleware("validation",{oldPassword:t.Validation.string().min(5).required(),newPassword:t.Validation.string().min(5).required()}),g(0,e.Res()),g(1,e.Body("oldPassword")),g(2,e.Body("newPassword")),g(3,k()),y("design:type",Function),y("design:paramtypes",[Object,String,String,f]),y("design:returntype",Promise)],exports.AuthController.prototype,"update",null),p([e.Get(),e.Middleware("auth"),g(0,e.Res()),g(1,k()),y("design:type",Function),y("design:paramtypes",[Object,f]),y("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(V)],exports.AuthController),exports.ForgotController=class extends V{check(r,s){return h(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return h(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield f.findOne({where:{username:o}}).catch(this.error);if(!n)return void e.Responses.notfound(r,"User not found");const i=t.uniqueID(),d=Date.now()+6e4*m.API_TOKEN_LIFETIME,a=yield A.create({token:i,timestamp:d,state:!0,userId:n.id});this.emit("forgot",{forgot:a,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return h(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);n?(n.state=!1,yield n.save().catch(this.error),n.user.password=c.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return h(this,void 0,void 0,(function*(){return yield A.findOne({where:{token:e,state:!0},include:[{model:f,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(V)],exports.ForgotController),exports.ModelController=class extends V{add(t,r,s,o){return h(this,void 0,void 0,(function*(){const n=yield this.model().create(Object.assign(Object.assign({},t.body),o||{}),s||{}).catch(this.error);if(n){const t=this.key();return e.Responses.data(r,{[t]:n.getDataValue(t)}),n}e.Responses.error(r,"Internal Server Error")}))}all(r,o,n,i){var d,a,l,u,c;return h(this,void 0,void 0,(function*(){const p=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(d=r.query.limit)||void 0===d?void 0:d.toString();y&&(g.limit=parseInt(y));const h=null===(a=r.query.offset)||void 0===a?void 0:a.toString();h&&(g.offset=parseInt(h));const m=Object.keys(p.getAttributes()),v=[],O=null===(l=r.query.asc)||void 0===l?void 0:l.toString();O&&O.length&&O.split(",").forEach((e=>{m.indexOf(e)>=0&&v.push([e,"ASC"])}));const R=null===(u=r.query.desc)||void 0===u?void 0:u.toString();R&&R.length&&R.split(",").forEach((e=>{m.indexOf(e)>=0&&v.push([e,"DESC"])})),v.length&&(g.order=v);const A=[],I=t.isArray(g.attributes)?g.attributes:m,_=null===(c=r.query.search)||void 0===c?void 0:c.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&A.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&A.push({[e]:{[s.Op.like]:`%${t}%`}})}})),A.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...A]}));const P=(yield p.count(Object.assign(Object.assign({},g),{col:m[0]})).catch(this.error))||0,f=yield p.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?yield i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return h(this,void 0,void 0,(function*(){const o=this.key(),{[o]:n}=t.params;if(!n)return e.Responses.error(r,"Internal Server Error"),0;const i=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[o]:n})})).catch(this.error);return i?(e.Responses.success(r,"OK"),i):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?C.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return h(this,void 0,void 0,(function*(){const n=this.key(),{[n]:i}=t.params,d=yield this.model().findOne(Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[n]:i})})).catch(this.error);if(d)return e.Responses.data(r,o?yield o(d):d.toJSON()),d;null!==d?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(t,r,s,o){return h(this,void 0,void 0,(function*(){const n=this.key(),{[n]:i}=t.params,[d]=(yield this.model().update(Object.assign(Object.assign({},t.body),o||{}),Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{[n]:i})})).catch(this.error))||[];return d?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(V)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupsController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupsController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupsController),exports.GroupsRoutesController=class extends exports.ModelController{model(){return _}recordAll(e,t,r){return h(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:P,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(r,s,o){return h(this,void 0,void 0,(function*(){const n=yield I.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield P.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}e.Responses.success(r,"OK")}else t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),g(0,e.Req()),g(1,e.Res()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("routes")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordSet",null),exports.GroupsRoutesController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupsRoutesController),exports.LogsController=class extends exports.ModelController{model(){return w}recordAll(e,t,r,s){const o={};r&&(o.type=r),s&&(o.source=s),this.all(e,t,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),g(2,e.Query("type")),g(3,e.Query("source")),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String]),y("design:returntype",void 0)],exports.LogsController.prototype,"recordAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController),exports.RegisterController=class extends V{confirm(t,r){return h(this,void 0,void 0,(function*(){const s=yield T.findOne({where:{token:r,state:!0},include:[{model:f,required:!0}]}).catch(this.error);s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield f.findOne({where:{username:n}}).catch(this.error);if(s)return void e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return void e.Responses.error(r,"Internal Server Error");const i=yield f.create(Object.assign(Object.assign({},o),{state:!1}));this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Res()),g(1,e.Body("token")),y("design:type",Function),y("design:paramtypes",[Object,String]),y("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),g(0,e.Res()),g(1,e.Req()),g(2,e.Body()),g(3,e.Body("username")),y("design:type",Function),y("design:paramtypes",[Object,Object,Object,String]),y("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(V)],exports.RegisterController),exports.RoutesController=class extends exports.CrudController{model(){return P}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RoutesController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RoutesController),exports.SetupController=class extends V{setup(r){return h(this,void 0,void 0,(function*(){if(0==(yield f.count())){const e={description:"",state:!0},r=yield f.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield I.create(Object.assign({name:"admin"},e));yield E.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>h(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>h(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield P.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield P.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}e.Responses.success(r,"OK")}))}},p([e.Get(),g(0,e.Res()),y("design:type",Function),y("design:paramtypes",[Object]),y("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(V)],exports.SetupController),exports.UsersController=class extends exports.ModelController{model(){return f}recordAdd(e,t,r){this.add(r,e,{},{password:c.SHA256(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(t,r,s,o){s&&s.id.toString()!=o?this.del(r,t):e.Responses.error(t,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:c.SHA256(t).toString()}:{})}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Res()),g(1,e.Req()),g(2,k()),g(3,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,f,String]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordSet",null),exports.UsersController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersController),exports.UsersGroupsController=class extends exports.ModelController{model(){return E}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(r,s,o){return h(this,void 0,void 0,(function*(){const n=yield f.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield E.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield I.count({where:{id:o[t]}}),e&&(yield E.create({userId:n.id,groupId:o[t]}))}e.Responses.success(r,"OK")}else t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),g(0,e.Res()),g(1,e.Req()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",void 0)],exports.UsersGroupsController.prototype,"recordAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("groups")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.UsersGroupsController.prototype,"recordSet",null),exports.UsersGroupsController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersGroupsController),exports.Application=F,exports.Auth=R,exports.Config=B,exports.Configs=S,exports.ControllerBase=V,exports.Database=v,exports.Env=m,exports.Forgot=A,exports.Group=I,exports.GroupRoute=_,exports.Log=w,exports.Logs=C,exports.Permission=U,exports.Registry=T,exports.ReqAuth=L,exports.ReqFiles=G,exports.ReqUser=k,exports.Route=P,exports.Session=x,exports.Token=M,exports.User=f,exports.UserGroup=E,exports.crt=q,exports.key=N,exports.sequelize=O;

package/dist/index.d.ts

@@ -1,13 +1,13 @@
 /*!
- * @andrewcaires/api v3.0.10
+ * @andrewcaires/api v3.0.11
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-import { Application as Application$1 } from '@andrewcaires/express';
+import { IStore, Application as Application$1 } from '@andrewcaires/express';
 import WebSocket from 'ws';
-import { EventEmitter, TypeObject, ValidationBase, TypeObjectString, TypeObjectAny } from '@andrewcaires/utils.js';
-import { Response, Request, NextFunction } from 'express';
+import { TypeObjectAny, EventEmitter, TypeObject, ValidationBase, TypeObjectString } from '@andrewcaires/utils.js';
+import { Request, Response, NextFunction } from 'express';
 import { Model, CreateOptions, Attributes, FindOptions, ModelStatic, UpdateOptions, Sequelize, WhereOptions } from 'sequelize';
 
 declare class Route extends Model {
@@ -91,22 +91,58 @@ declare class Registry extends Model {
     userId: number;
 }
 
-interface UploadOptions {
+declare class Session extends Model {
+    session: string;
+    json: string;
+    expired: number;
+}
+
+interface IDatabaseOptions {
+    database: string;
+    username: string;
+    password: string;
+    hostname: string;
+    hostport: number;
+}
+
+interface ITokenParameters {
+    auth?: Auth;
+    decode?: TypeObjectAny;
+    error?: string;
+    forgot?: Forgot;
+    token?: string;
+    user?: User;
+}
+
+interface IUploadOptions {
     count?: number;
     field?: string;
     path?: string;
     size?: number;
     types?: Array<string>;
 }
+
+declare enum LogsColor {
+    ERROR = "\u001B[31m",
+    INFO = "\u001B[36m",
+    NONE = "\u001B[37m",
+    SUCCESS = "\u001B[32m",
+    WARNING = "\u001B[33m"
+}
+
+type LogsTypes = "error" | "info" | "success" | "warning" | "";
+
 declare abstract class ControllerBase extends EventEmitter {
-    auth(res: Response, req: Request, token: string, useragent: string, next: NextFunction): Promise<void>;
+    auth(req: Request, res: Response, token: string, useragent: string, next: NextFunction): Promise<void>;
+    session(useragent: string, store: IStore, next: NextFunction): Promise<void>;
     error(error: any): void;
     protected name(): string;
-    permission(res: Response, user: User, next: NextFunction, name: string): Promise<void>;
-    read(res: Response, user: User, next: NextFunction, name: string): Promise<void>;
-    upload(res: Response, req: Request, next: NextFunction, options: UploadOptions): void;
-    validation(res: Response, req: Request, next: NextFunction, options: TypeObject<ValidationBase>): Promise<void>;
-    write(res: Response, user: User, next: NextFunction, name: string): Promise<void>;
+    permission(res: Response, next: NextFunction, name: string, user: User): Promise<void>;
+    read(user: User, res: Response, next: NextFunction, name: string): Promise<void>;
+    upload(req: Request, res: Response, next: NextFunction, options: IUploadOptions): void;
+    private uploadFile;
+    validation(req: Request, res: Response, next: NextFunction, options: TypeObject<ValidationBase>): Promise<void>;
+    write(res: Response, next: NextFunction, name: string, user: User): Promise<void>;
 }
 
 declare class Application extends Application$1 {
@@ -127,11 +163,11 @@ declare class Config {
 }
 
 declare class AuthController extends ControllerBase {
-    protected login(res: Response, req: Request, useragent: string, app: Application): Promise<void>;
+    protected login(req: Request, res: Response, useragent: string, username: string, password: string, app: Application): Promise<void>;
     protected logout(res: Response, req: Request, auth: Auth, user: User, app: Application): Promise<void>;
-    protected renew(res: Response, req: Request, old: string, useragent: string, app: Application): Promise<void>;
-    protected update(res: Response, body: TypeObjectAny, password: string, user: User): Promise<void>;
-    protected user(res: Response, auth: Auth, user: User, useragent: string): Promise<void>;
+    protected renew(req: Request, res: Response, useragent: string, old: string, app: Application): Promise<void>;
+    protected update(res: Response, oldPassword: string, newPassword: string, user: User): Promise<void>;
+    protected user(res: Response, user: User): Promise<void>;
 }
 
 declare class ForgotController extends ControllerBase {
@@ -175,13 +211,13 @@ declare class GroupsController extends CrudController<Group> {
 
 declare class GroupsRoutesController extends ModelController<GroupRoute> {
     model(): typeof GroupRoute;
-    recordAll(res: Response, req: Request, groupId: string): Promise<void>;
+    recordAll(req: Request, res: Response, groupId: string): Promise<void>;
     recordSet(res: Response, id: string, routes: Array<number>): Promise<void>;
 }
 
 declare class LogsController extends ModelController<Log> {
     model(): typeof Log;
-    protected recordAll(res: Response, req: Request): void;
+    protected recordAll(req: Request, res: Response, type: string, source: string): void;
 }
 
 declare class RegisterController extends ControllerBase {
@@ -214,20 +250,13 @@ declare class UsersGroupsController extends ModelController<UserGroup> {
     recordSet(res: Response, id: string, groups: Array<number>): Promise<void>;
 }
 
-interface DatabaseOptions {
-    database: string;
-    username: string;
-    password: string;
-    hostname: string;
-    hostport: number;
-}
 declare class Database {
-    static connect(options: DatabaseOptions): Sequelize;
-    static connect_mariadb(options: DatabaseOptions): Sequelize;
+    static connect(options: IDatabaseOptions): Sequelize;
+    static connect_mariadb(options: IDatabaseOptions): Sequelize;
     static connect_memory(): Sequelize;
-    static connect_mysql(options: DatabaseOptions): Sequelize;
-    static connect_postgres(options: DatabaseOptions): Sequelize;
-    static connect_sqlite(options: DatabaseOptions): Sequelize;
+    static connect_mysql(options: IDatabaseOptions): Sequelize;
+    static connect_postgres(options: IDatabaseOptions): Sequelize;
+    static connect_sqlite(options: IDatabaseOptions): Sequelize;
 }
 declare const sequelize: Sequelize;
 
@@ -240,7 +269,8 @@ declare class Env {
     static readonly API_DB_TYPE: string;
     static readonly API_DB_USERNAME: string;
     static readonly API_DB_LOG: boolean;
-    static readonly API_TABLE_PREFIX: string;
+    static readonly API_DB_PREFIX: string;
+    static readonly API_DB_TIMEZONE: string;
     static readonly API_HTTP_CRT: string;
     static readonly API_HTTP_KEY: string;
     static readonly API_HTTP_PORT: number;
@@ -250,6 +280,9 @@ declare class Env {
     static readonly API_SLEEP_AUTH: number;
     static readonly API_SLEEP_FORGOT: number;
     static readonly API_SLEEP_REGISTRY: number;
+    static readonly API_SESSION_NAME: string;
+    static readonly API_SESSION_LIFETIME: number;
+    static readonly API_SESSION_SECRET: string;
     static readonly API_TOKEN_CRT: string;
     static readonly API_TOKEN_KEY: string;
     static readonly API_TOKEN_HEADER: string;
@@ -274,14 +307,6 @@ declare global {
     }
 }
 
-declare enum LogsColor {
-    ERROR = "\u001B[31m",
-    INFO = "\u001B[36m",
-    NONE = "\u001B[37m",
-    SUCCESS = "\u001B[32m",
-    WARNING = "\u001B[33m"
-}
-type LogsTypes = "error" | "info" | "success" | "warning" | "";
 declare class Logs {
     static write(message: string, source?: string, console?: boolean): Promise<void>;
     static error(message: string, source?: string, console?: boolean): Promise<void>;
@@ -307,21 +332,14 @@ declare const key: {
     token: Buffer | undefined;
 };
 
-interface TokenParameters {
-    auth?: Auth;
-    decode?: TypeObjectAny;
-    error?: string;
-    forgot?: Forgot;
-    token?: string;
-    user?: User;
-}
 declare class Token {
-    static create(user: User): Promise<TokenParameters>;
+    static create(user: User): Promise<ITokenParameters>;
     static destroy(auth?: Auth): Promise<boolean>;
     private static error;
-    static renew(token: string): Promise<TokenParameters>;
-    static user(token: string): Promise<TokenParameters>;
+    private static options;
+    static renew(token: string): Promise<ITokenParameters>;
+    static user(token: string): Promise<ITokenParameters>;
     private static verify;
 }
 
-export { Application, Auth, AuthController, Config, Configs, ControllerBase, CrudController, Database, DatabaseOptions, Env, Forgot, ForgotController, Group, GroupRoute, GroupsController, GroupsRoutesController, Log, Logs, LogsColor, LogsController, LogsTypes, ModelController, Permission, RegisterController, Registry, ReqAuth, ReqFiles, ReqUser, Route, RoutesController, SetupController, Token, User, UserGroup, UsersController, UsersGroupsController, crt, key, sequelize };
+export { Application, Auth, AuthController, Config, Configs, ControllerBase, CrudController, Database, Env, Forgot, ForgotController, Group, GroupRoute, GroupsController, GroupsRoutesController, type IDatabaseOptions, type ITokenParameters, type IUploadOptions, Log, Logs, LogsColor, LogsController, type LogsTypes, ModelController, Permission, RegisterController, Registry, ReqAuth, ReqFiles, ReqUser, Route, RoutesController, Session, SetupController, Token, User, UserGroup, UsersController, UsersGroupsController, crt, key, sequelize };

package/dist/index.esm.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.10
+ * @andrewcaires/api v3.0.11
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2023 Andrew Caires
  * @license: MIT
  */
-import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as i,Next as s,Argument as o,Responses as d,Post as a,Middleware as c,App as u,Get as l,Body as p,Controller as g,Extends as m,Delete as y,Put as h,Params as v}from"@andrewcaires/express";import{toBool as O,parseMs as f,dateFormat as _,uuidv4 as A,sleep as I,toArray as P,EventEmitter as E,isNumber as b,Validation as T,uniqueID as S,isArray as w,isString as R,isNull as j,forEachSeries as N}from"@andrewcaires/utils.js";import q from"ws";import{Sequelize as F,DataTypes as D,Model as L,Op as k}from"sequelize";import{config as B}from"dotenv";import{existsSync as K,readFileSync as C}from"fs";import{verify as G,sign as x}from"jsonwebtoken";import{SHA256 as U}from"crypto-js";import H from"mime-types";import M from"multer";import{join as z}from"path";function X(e,t,r,n){var i,s=arguments.length,o=s<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var d=e.length-1;d>=0;d--)(i=e[d])&&(o=(s<3?i(o):s>3?i(t,r,o):i(t,r))||o);return s>3&&o&&Object.defineProperty(t,r,o),o}function Y(e,t){return function(r,n){t(r,n,e)}}function W(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function J(e,t,r,n){return new(r||(r=Promise))((function(i,s){function o(e){try{a(n.next(e))}catch(e){s(e)}}function d(e){try{a(n.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?i(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((n=n.apply(e,t||[])).next())}))}B();class Z{}Z.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),Z.API_DB_DATABASE=process.env.API_DB_DATABASE||"",Z.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",Z.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",Z.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),Z.API_DB_TYPE=process.env.API_DB_TYPE||"",Z.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",Z.API_DB_LOG=O(process.env.API_DB_LOG||"false"),Z.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",Z.API_HTTP_CRT=process.env.API_HTTP_CRT||"",Z.API_HTTP_KEY=process.env.API_HTTP_KEY||"",Z.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),Z.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",Z.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),Z.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),Z.API_SLEEP_AUTH=f(process.env.API_SLEEP_AUTH||"2s"),Z.API_SLEEP_FORGOT=f(process.env.API_SLEEP_FORGOT||"5s"),Z.API_SLEEP_REGISTRY=f(process.env.API_SLEEP_REGISTRY||"5s"),Z.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",Z.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",Z.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",Z.API_TOKEN_LIFETIME=f(process.env.API_TOKEN_LIFETIME||"1d"),Z.API_TOKEN_RENEW=f(process.env.API_TOKEN_RENEW||"1d"),Z.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),Z.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",Z.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),Z.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",Z.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class ${static connect(e){const t="connect_"+Z.API_DB_TYPE.toLowerCase();if(t in $)return $[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new F("sqlite::memory:",{logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new F(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:Z.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new F({dialect:"sqlite",storage:e.database,logging:Z.API_DB_LOG,define:{timestamps:!1}})}}const V=$.connect({database:Z.API_DB_DATABASE,username:Z.API_DB_USERNAME,password:Z.API_DB_PASSWORD,hostname:Z.API_DB_HOST,hostport:Z.API_DB_PORT});class Q extends L{}Q.init({secret:D.STRING,logout:D.DATE,useragent:D.STRING},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends L{}ee.init({token:D.STRING,timestamp:D.BIGINT,state:D.BOOLEAN},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends L{}te.init({name:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class re extends L{}re.init({},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),re.removeAttribute("id");class ne extends L{}ne.init({name:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ie extends L{}ie.init({name:D.STRING,email:D.STRING,username:D.STRING,password:D.STRING,avatar:D.STRING,description:D.TEXT,state:D.BOOLEAN},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class se extends L{}se.init({},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),se.removeAttribute("id");class oe extends L{}oe.init({key:D.STRING,value:D.STRING},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),oe.removeAttribute("id");class de extends L{}de.init({type:D.STRING,source:D.STRING,message:D.TEXT},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class ae extends L{}var ce;ae.init({token:D.STRING,timestamp:D.BIGINT,state:D.BOOLEAN},{sequelize:V,modelName:Z.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.hasMany(Q),Q.belongsTo(ie),ie.hasMany(ee),ee.belongsTo(ie),te.hasMany(re),re.belongsTo(te),ne.hasMany(re),re.belongsTo(ne),ie.hasMany(se),se.belongsTo(ie),te.hasMany(se),se.belongsTo(te),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ce||(ce={}));class ue{static write(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.NONE,"",e,t,r)}))}static error(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.ERROR,"error",e,t,r)}))}static info(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.INFO,"info",e,t,r)}))}static success(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.ERROR,"success",e,t,r)}))}static warning(e,t,r){return J(this,void 0,void 0,(function*(){yield ue.writeRaw(ce.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,i){return J(this,void 0,void 0,(function*(){i&&ue.writeConsole(e,t,r),V&&(yield de.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const le=e=>K(e)?C(e):void 0,pe={http:le(Z.API_HTTP_CRT),token:le(Z.API_TOKEN_CRT)},ge={http:le(Z.API_HTTP_KEY),token:le(Z.API_TOKEN_KEY)};class me{static create(e){return J(this,void 0,void 0,(function*(){if(!ge.token)return{error:"Key not found"};const{id:t}=e,r=A(),n=yield Q.create({secret:r,userId:t}).catch(me.error);return n?{auth:n,token:x({id:t,secret:r},ge.token,{algorithm:"RS256",expiresIn:Z.API_TOKEN_LIFETIME+"ms"})}:{error:"Internal Server Error"}}))}static destroy(e){return J(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){ue.error(e.message,"api.token",Z.API_CONSOLE_ERROR)}static renew(e){return J(this,void 0,void 0,(function*(){if(!ge.token)return{error:"Key not found"};const{error:t,decode:r}=me.verify(e,Z.API_TOKEN_RENEW/1e3);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield ie.findOne({where:{id:e,state:!0}}).catch(me.error);if(r){const n=yield Q.findOne({where:{secret:t,userId:r.id}}).catch(me.error);if(n&&!n.logout)return n.secret=A(),yield n.save().catch(me.error),{auth:n,token:x({id:e,secret:n.secret},ge.token,{algorithm:"RS256",expiresIn:Z.API_TOKEN_LIFETIME+"ms"})}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return J(this,void 0,void 0,(function*(){const{error:t,decode:r}=me.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield ie.findOne({where:{id:e,state:!0}}).catch(me.error);if(r){const e=yield Q.findOne({where:{secret:t,userId:r.id}}).catch(me.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!pe.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:G(e,pe.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class ye extends e{constructor(e){super(e,{cert:pe.http,cross:Z.API_HTTP_CROSS,hybrid:Z.API_HTTP_HYBRID,key:ge.http,path:"/api",port:Z.API_HTTP_PORT,public:Z.API_HTTP_PUBLIC})}error(e,t){ue.info(e.message,t,Z.API_CONSOLE_ERROR)}log(e,t){ue.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return J(this,void 0,void 0,(function*(){yield V.sync(),yield e.listen.call(this),Z.API_WEBSOCKET_START&&this.server&&(this._webSocket=new q.Server({server:this.server,verifyClient:(e,t)=>t(Z.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>J(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(i=>J(this,void 0,void 0,(function*(){if(n)try{const s=JSON.parse(i);this.emit("ws.message"+r,{data:s,message:i,req:t,user:n,ws:e})}catch(s){this.emit("ws.message"+r,{message:i,req:t,user:n,ws:e})}else{const{user:s}=yield me.user(i.toString());s&&(n=s,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class he{static all(){return J(this,void 0,void 0,(function*(){const e=yield oe.findAll().catch(he.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return J(this,void 0,void 0,(function*(){return((yield oe.destroy({where:{key:e}}).catch(he.error))||0)>0}))}static error(e){ue.error(e.message,"api.config",Z.API_CONSOLE_ERROR)}static get(e){return J(this,void 0,void 0,(function*(){const t=yield oe.findOne({where:{key:e}}).catch(he.error);return t&&t.value||""}))}static set(e,t){return J(this,void 0,void 0,(function*(){const[r]=(yield oe.findOrCreate({where:{key:e}}).catch(he.error))||[];r&&(r.value=t,yield r.save().catch(he.error))}))}}class ve{static all(e,t){return J(this,void 0,void 0,(function*(){return yield ne.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:re,required:!0,include:[{model:te,required:!0,where:{state:!0},include:[{model:se,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{ue.error(e.message,"api.permission",Z.API_CONSOLE_ERROR)}))}))}static get(e){return J(this,void 0,void 0,(function*(){const t=yield ve.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return J(this,void 0,void 0,(function*(){const r=yield ve.all(e,{name:t});return!!r&&r.length>0}))}}const Oe=t((({req:e})=>e.auth)),fe=t((({req:e})=>P(e.files))),_e=t((({req:e})=>e.user)),Ae=(e,t)=>{const r=A()+"."+t;return K(z(e,r))?Ae(e,t):r};class Ie extends E{auth(e,t,r,n,i){return J(this,void 0,void 0,(function*(){const{auth:s,error:o,user:a}=yield me.user(r);o?d.error(e,o):s&&a?(n&&(s.useragent=n),t.auth=s,t.user=a,yield s.save(),i()):d.error(e,"Internal Server Error")}))}error(e){ue.error(e.message,"api.controller",Z.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return J(this,void 0,void 0,(function*(){t?(yield ve.is(t,n))?r():d.error(e,"Unauthorized access"):d.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const i=(null==n?void 0:n.path)||Z.API_UPLOAD_TEMP,s=M.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>J(this,void 0,void 0,(function*(){return r(null,Ae(i,H.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||Z.API_UPLOAD_SIZE),a=M({storage:s,fileFilter(e,t,r){var i;return J(this,void 0,void 0,(function*(){const e=null===(i=null==n?void 0:n.types)||void 0===i?void 0:i.indexOf(t.mimetype);return b(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),c=(null==n?void 0:n.count)||Z.API_UPLOAD_COUNT,u=(null==n?void 0:n.field)||Z.API_UPLOAD_FIELD;a.array(u,c)(t,e,(t=>t?d.error(e,t.message):r()))}validation(e,t,r,n){return J(this,void 0,void 0,(function*(){const{error:i,value:s}=yield T.object(n).parse().validateAsync(t.body);i?d.validation(e,i):(t.body=s,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}X([Y(0,r()),Y(1,n()),Y(2,i(Z.API_TOKEN_HEADER)),Y(3,i("user-agent")),Y(4,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,String,Function]),W("design:returntype",Promise)],Ie.prototype,"auth",null),X([Y(0,r()),Y(1,_e()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],Ie.prototype,"permission",null),X([Y(0,r()),Y(1,_e()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],Ie.prototype,"read",null),X([Y(0,r()),Y(1,n()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function,Object]),W("design:returntype",void 0)],Ie.prototype,"upload",null),X([Y(0,r()),Y(1,n()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function,Object]),W("design:returntype",Promise)],Ie.prototype,"validation",null),X([Y(0,r()),Y(1,_e()),Y(2,s()),Y(3,o()),W("design:type",Function),W("design:paramtypes",[Object,ie,Function,String]),W("design:returntype",Promise)],Ie.prototype,"write",null);let Pe=class extends Ie{login(e,t,r,n){return J(this,void 0,void 0,(function*(){yield I(Z.API_SLEEP_AUTH);const{username:i,password:s}=t.body,o=yield ie.findOne({where:{username:i,password:U(s).toString(),state:!0}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),void d.notfound(e,"Username not found");const{auth:a,error:c,token:u}=yield me.create(o);return c?(n.emit("auth.failure",{req:t}),void d.error(e,c)):a&&u?(a.useragent=r,yield a.save().catch(this.error),this.emit("auth.login",{auth:a,req:t,user:o}),void d.data(e,{token:u})):(n.emit("auth.failure",{req:t}),void d.error(e,"Internal Server Error"))}))}logout(e,t,r,n,i){return J(this,void 0,void 0,(function*(){if(yield me.destroy(r))return i.emit("auth.logout",{auth:r,req:t,user:n}),void d.success(e,"Disconcerted");d.unauthorized(e,"Access denied")}))}renew(e,t,r,n,i){return J(this,void 0,void 0,(function*(){const{auth:s,error:o,token:a}=yield me.renew(r);if(!o)return s?(s.useragent=n,yield s.save().catch(this.error),i.emit("auth.renew",{auth:s,req:t}),void d.data(e,{token:a})):void d.error(e,"Internal Server Error");d.error(e,o)}))}update(e,t,r,n){return J(this,void 0,void 0,(function*(){if(n){if(yield ie.scope("password").findOne({where:{id:n.id,password:r,state:!0}}).catch(this.error)){t.newPassword&&(t.password=U(t.newPassword).toString()),delete t.newPassword,delete t.oldPassword;const[r]=(yield ie.update(t,{where:{id:n.id}}).catch(this.error))||[];return r?void d.success(e,"OK"):void d.success(e,"Record not changed")}d.error(e,"Record not changed")}else d.error(e,"Internal Server Error")}))}user(e,t,r,n){return J(this,void 0,void 0,(function*(){t.useragent=n,yield t.save().catch(this.error);const i=yield ve.all(r);i?d.data(e,Object.assign(Object.assign({},r.toJSON()),{permissions:i.map((e=>e.name))})):d.error(e,"Internal Server Error")}))}};X([a("/login"),c("validation",{username:T.string().min(4).required(),password:T.string().min(5).required()}),Y(0,r()),Y(1,n()),Y(2,i("user-agent")),Y(3,u()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,ye]),W("design:returntype",Promise)],Pe.prototype,"login",null),X([l("/logout"),c("auth"),Y(0,r()),Y(1,n()),Y(2,Oe()),Y(3,_e()),Y(4,u()),W("design:type",Function),W("design:paramtypes",[Object,Object,Q,ie,ye]),W("design:returntype",Promise)],Pe.prototype,"logout",null),X([a("/renew"),c("validation",{token:T.string().required()}),Y(0,r()),Y(1,n()),Y(2,p("token")),Y(3,i("user-agent")),Y(4,u()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,String,ye]),W("design:returntype",Promise)],Pe.prototype,"renew",null),X([a("/update"),c("auth"),c("validation",{name:T.string().empty(),newPassword:T.string().min(5).empty().filter(""),oldPassword:T.string().min(5).empty().filter(""),avatar:T.string().empty()}),Y(0,r()),Y(1,p()),Y(2,p("oldPassword")),Y(3,_e()),W("design:type",Function),W("design:paramtypes",[Object,Object,String,ie]),W("design:returntype",Promise)],Pe.prototype,"update",null),X([l(),c("auth"),Y(0,r()),Y(1,Oe()),Y(2,_e()),Y(3,i("user-agent")),W("design:type",Function),W("design:paramtypes",[Object,Q,ie,String]),W("design:returntype",Promise)],Pe.prototype,"user",null),Pe=X([g("/auth"),m(Ie)],Pe);let Ee=class extends Ie{check(e,t){return J(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);n&&n.user?(n.token=S(),yield n.save(),d.data(e,{token:n.token})):d.notfound(e,"User not found")}))}forgot(e,t){return J(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(Z.API_SLEEP_FORGOT);const n=yield ie.findOne({where:{username:r}}).catch(this.error);if(!n)return void d.notfound(e,"User not found");const i=S(),s=Date.now()+6e4*Z.API_TOKEN_LIFETIME,o=yield ee.create({token:i,timestamp:s,state:!0,userId:n.id});this.emit("forgot",{forgot:o,req:t,user:n}),d.success(e,"OK")}))}reset(e,t){return J(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,i=yield this.findOne(r);i?(i.state=!1,yield i.save().catch(this.error),i.user.password=U(n).toString(),yield i.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:i.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}findOne(e){return J(this,void 0,void 0,(function*(){return yield ee.findOne({where:{token:e,state:!0},include:[{model:ie,required:!0}]}).catch(this.error)}))}};X([l("/check"),c("validation",{token:T.string().required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"check",null),X([l(),c("validation",{username:T.string().min(4).required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"forgot",null),X([l("/reset"),c("validation",{token:T.string().required(),password:T.string().min(5).required()}),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",Promise)],Ee.prototype,"reset",null),Ee=X([g("/forgot"),m(Ie)],Ee);let be=class extends Ie{add(e,t,r,n){return J(this,void 0,void 0,(function*(){const i=yield this.model().create(Object.assign(Object.assign({},e.body),n||{}),r||{}).catch(this.error);if(i){const e=this.key();return d.data(t,{[e]:i.getDataValue(e)}),i}d.error(t,"Internal Server Error")}))}all(e,t,r,n){var i,s,o,a,c;return J(this,void 0,void 0,(function*(){const u=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(i=e.query.limit)||void 0===i?void 0:i.toString();p&&(l.limit=parseInt(p));const g=null===(s=e.query.offset)||void 0===s?void 0:s.toString();g&&(l.offset=parseInt(g));const m=Object.keys(u.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{m.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(a=e.query.desc)||void 0===a?void 0:a.toString();v&&v.length&&v.split(",").forEach((e=>{m.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],f=w(l.attributes)?l.attributes:m,_=null===(c=e.query.search)||void 0===c?void 0:c.toString();f.forEach((t=>{var r;if(R(t)&&(_&&_.length&&O.push({[t]:{[k.like]:`%${_}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[k.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[k.or]:[...O]}));const A=(yield u.count(Object.assign(Object.assign({},l),{col:m[0]})).catch(this.error))||0,I=yield u.findAll(l).catch(this.error);if(I)return d.data(t,{count:A,records:n?yield n(I):I}),I;d.error(t,"Internal Server Error")}))}del(e,t,r){return J(this,void 0,void 0,(function*(){const n=this.key(),{[n]:i}=e.params;if(!i)return d.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[n]:i})})).catch(this.error);return s?(d.success(t,"OK"),s):(d.notfound(t,"Record not found"),0)}))}error(e){e.sql?ue.error(e.message+"\n"+e.sql,"api.controller.sql",Z.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return J(this,void 0,void 0,(function*(){const i=this.key(),{[i]:s}=e.params,o=yield this.model().findOne(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[i]:s})})).catch(this.error);if(o)return d.data(t,n?yield n(o):o.toJSON()),o;null!==o?d.error(t,"Internal Server Error"):d.notfound(t,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(e,t,r,n){return J(this,void 0,void 0,(function*(){const i=this.key(),{[i]:s}=e.params,[o]=(yield this.model().update(Object.assign(Object.assign({},e.body),n||{}),Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[i]:s})})).catch(this.error))||[];return o?(d.success(t,"OK"),!0):(d.success(t,"Record not changed"),!1)}))}};be=X([m(Ie)],be);let Te=class extends be{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};X([a(),c("auth"),c("write"),c("validationAdd"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordAdd",null),X([l(),c("auth"),c("read"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordAll",null),X([y("/:id"),c("auth"),c("write"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordDel",null),X([l("/:id"),c("auth"),c("read"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordGet",null),X([h("/:id"),c("auth"),c("write"),c("validationSet"),Y(0,n()),Y(1,r()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Te.prototype,"recordSet",null),X([Y(0,n()),Y(1,r()),Y(2,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function]),W("design:returntype",void 0)],Te.prototype,"validationAdd",null),X([Y(0,n()),Y(1,r()),Y(2,s()),W("design:type",Function),W("design:paramtypes",[Object,Object,Function]),W("design:returntype",void 0)],Te.prototype,"validationSet",null),Te=X([m(be)],Te);let Se=class extends Te{model(){return te}create(){return{name:T.string().required(),description:T.string().empty(""),state:T.boolean().parse().required()}}update(){return{name:T.string().empty(),description:T.string().empty(),state:T.boolean().parse().empty()}}};Se=X([g("/groups"),m(Te)],Se);let we=class extends be{model(){return re}recordAll(e,t,r){return J(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:ne,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(e,t,r){return J(this,void 0,void 0,(function*(){const n=yield te.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield re.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield ne.count({where:{id:r[n]}}),e&&(yield re.create({groupId:t,routeId:r[n]}))}d.success(e,"OK")}else j(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};X([l("/:id/routes"),c("auth"),c("read","groups"),Y(0,r()),Y(1,n()),Y(2,v("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,String]),W("design:returntype",Promise)],we.prototype,"recordAll",null),X([h("/:id/routes"),c("auth"),c("write","groups"),c("validation",{routes:T.array(T.number().parse())}),Y(0,r()),Y(1,v("id")),Y(2,p("routes")),W("design:type",Function),W("design:paramtypes",[Object,String,Array]),W("design:returntype",Promise)],we.prototype,"recordSet",null),we=X([g("/groups"),m(be)],we);let Re=class extends be{model(){return de}recordAll(e,t){const{source:r,type:n}=t.query,i=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:i,order:[["created","DESC"]]})}};X([l(),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Re.prototype,"recordAll",null),Re=X([g("/logs"),m(be)],Re);let je=class extends Ie{confirm(e,t){return J(this,void 0,void 0,(function*(){const r=yield ae.findOne({where:{token:t,state:!0},include:[{model:ie,required:!0}]}).catch(this.error);r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),d.success(e,"OK")):d.notfound(e,"User not found")}))}register(e,t,r,n){return J(this,void 0,void 0,(function*(){yield I(Z.API_SLEEP_REGISTRY);const t=yield ie.findOne({where:{username:n}}).catch(this.error);if(t)return void d.error(e,"Invalid Username");if(!j(t))return void d.error(e,"Internal Server Error");const i=yield ie.create(Object.assign(Object.assign({},r),{state:!1}));this.emit("user.register",{user:i}),d.success(e,"OK")}))}};X([l("/confirm"),c("validation",{token:T.string().required()}),Y(0,r()),Y(1,p("token")),W("design:type",Function),W("design:paramtypes",[Object,String]),W("design:returntype",Promise)],je.prototype,"confirm",null),X([l(),c("validation",{name:T.string().required(),email:T.string().email().required(),username:T.string().min(4).required(),password:T.string().min(5).required()}),Y(0,r()),Y(1,n()),Y(2,p()),Y(3,p("username")),W("design:type",Function),W("design:paramtypes",[Object,Object,Object,String]),W("design:returntype",Promise)],je.prototype,"register",null),je=X([g("/register"),m(Ie)],je);let Ne=class extends Te{model(){return ne}create(){return{name:T.string().required(),description:T.string().empty(""),state:T.boolean().parse().required()}}update(){return{name:T.string().empty(),description:T.string().empty(),state:T.boolean().parse().empty()}}};Ne=X([g("/routes"),m(Te)],Ne);let qe=class extends Ie{setup(e){return J(this,void 0,void 0,(function*(){if(0==(yield ie.count())){const e={description:"",state:!0},t=yield ie.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield te.create(Object.assign({name:"admin"},e));yield se.create({userId:t.id,groupId:r.id});const n=["read","write"],i=["users","groups","routes"];yield N(i,(t=>J(this,void 0,void 0,(function*(){yield N(n,(n=>J(this,void 0,void 0,(function*(){const i=t+"."+n,s=yield ne.create(Object.assign({name:i},e));yield re.create({groupId:r.id,routeId:s.id})}))))}))));const s=yield ne.create(Object.assign({name:"logs.read"},e));yield re.create({groupId:r.id,routeId:s.id})}d.success(e,"OK")}))}};X([l(),Y(0,r()),W("design:type",Function),W("design:paramtypes",[Object]),W("design:returntype",Promise)],qe.prototype,"setup",null),qe=X([g("/setup"),m(Ie)],qe);let Fe=class extends be{model(){return ie}recordAdd(e,t,r){this.add(r,e,{},{password:U(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(e,t,r,n){r&&r.id.toString()!=n?this.del(t,e):d.error(e,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:U(t).toString()}:{})}};X([a(),c("auth"),c("write"),c("validation",{name:T.string().required(),email:T.string().email().required(),username:T.string().min(4).required(),password:T.string().min(5).required(),description:T.string().empty(""),state:T.boolean().parse().required()}),Y(0,r()),Y(1,p("password")),Y(2,n()),W("design:type",Function),W("design:paramtypes",[Object,String,Object]),W("design:returntype",void 0)],Fe.prototype,"recordAdd",null),X([l(),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Fe.prototype,"recordAll",null),X([y("/:id"),c("auth"),c("write"),Y(0,r()),Y(1,n()),Y(2,_e()),Y(3,v("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,ie,String]),W("design:returntype",void 0)],Fe.prototype,"recordDel",null),X([l("/:id"),c("auth"),c("read"),Y(0,r()),Y(1,n()),W("design:type",Function),W("design:paramtypes",[Object,Object]),W("design:returntype",void 0)],Fe.prototype,"recordGet",null),X([h("/:id"),c("auth"),c("write"),c("validation",{name:T.string().empty(),email:T.string().email().empty(),username:T.string().min(4).empty(),password:T.string().min(5).empty().filter(""),description:T.string().empty(),state:T.boolean().parse().empty()}),Y(0,r()),Y(1,p("password")),Y(2,n()),W("design:type",Function),W("design:paramtypes",[Object,String,Object]),W("design:returntype",void 0)],Fe.prototype,"recordSet",null),Fe=X([g("/users"),m(be)],Fe);let De=class extends be{model(){return se}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:te,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(e,t,r){return J(this,void 0,void 0,(function*(){const n=yield ie.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield se.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield te.count({where:{id:r[t]}}),e&&(yield se.create({userId:n.id,groupId:r[t]}))}d.success(e,"OK")}else j(n)?d.notfound(e,"Record not found"):d.error(e,"Internal Server Error")}))}};X([l("/:id/groups"),c("auth"),c("read","users"),Y(0,r()),Y(1,n()),Y(2,v("id")),W("design:type",Function),W("design:paramtypes",[Object,Object,String]),W("design:returntype",void 0)],De.prototype,"recordAll",null),X([h("/:id/groups"),c("auth"),c("write","users"),c("validation",{groups:T.array(T.number().parse())}),Y(0,r()),Y(1,v("id")),Y(2,p("groups")),W("design:type",Function),W("design:paramtypes",[Object,String,Array]),W("design:returntype",Promise)],De.prototype,"recordSet",null),De=X([g("/users"),m(be)],De);export{ye as Application,Q as Auth,Pe as AuthController,he as Config,oe as Configs,Ie as ControllerBase,Te as CrudController,$ as Database,Z as Env,ee as Forgot,Ee as ForgotController,te as Group,re as GroupRoute,Se as GroupsController,we as GroupsRoutesController,de as Log,ue as Logs,ce as LogsColor,Re as LogsController,be as ModelController,ve as Permission,je as RegisterController,ae as Registry,Oe as ReqAuth,fe as ReqFiles,_e as ReqUser,ne as Route,Ne as RoutesController,qe as SetupController,me as Token,ie as User,se as UserGroup,Fe as UsersController,De as UsersGroupsController,pe as crt,ge as key,V as sequelize};
+import{Application as e,parameterFactory as t,Req as r,Res as i,Headers as s,Next as n,Session as o,Argument as d,Responses as a,Post as c,Middleware as u,Body as l,App as p,Get as g,Controller as m,Extends as y,Delete as h,Put as v,Params as O,Query as _}from"@andrewcaires/express";import{toBool as I,parseMs as f,dateFormat as A,noop as P,loop as E,uuidv4 as S,sleep as b,toArray as T,EventEmitter as w,isNumber as R,Validation as j,uniqueID as N,isArray as D,isString as F,isNull as q,forEachSeries as B}from"@andrewcaires/utils.js";import k from"ws";import{Sequelize as L,DataTypes as x,Model as C,Op as K}from"sequelize";import{config as G}from"dotenv";import{existsSync as U,readFileSync as H}from"fs";import{Store as M}from"express-session";import{verify as z,sign as X}from"jsonwebtoken";import{extension as Y}from"mime-types";import W from"multer";import{join as Z}from"path";import{SHA256 as J}from"crypto-js";function $(e,t,r,i){var s,n=arguments.length,o=n<3?t:null===i?i=Object.getOwnPropertyDescriptor(t,r):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,i);else for(var d=e.length-1;d>=0;d--)(s=e[d])&&(o=(n<3?s(o):n>3?s(t,r,o):s(t,r))||o);return n>3&&o&&Object.defineProperty(t,r,o),o}function V(e,t){return function(r,i){t(r,i,e)}}function Q(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function ee(e,t,r,i){return new(r||(r=Promise))((function(s,n){function o(e){try{a(i.next(e))}catch(e){n(e)}}function d(e){try{a(i.throw(e))}catch(e){n(e)}}function a(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((i=i.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,G();class te{}te.API_CONSOLE_ERROR=I(process.env.API_CONSOLE_ERROR||"false"),te.API_DB_DATABASE=process.env.API_DB_DATABASE||"",te.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",te.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",te.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),te.API_DB_TYPE=process.env.API_DB_TYPE||"",te.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",te.API_DB_LOG=I(process.env.API_DB_LOG||"false"),te.API_DB_PREFIX=process.env.API_DB_PREFIX||"",te.API_DB_TIMEZONE=process.env.API_DB_TIMEZONE||"+00:00",te.API_HTTP_CRT=process.env.API_HTTP_CRT||"",te.API_HTTP_KEY=process.env.API_HTTP_KEY||"",te.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),te.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",te.API_HTTP_CROSS=I(process.env.API_HTTP_CROSS||"false"),te.API_HTTP_HYBRID=I(process.env.API_HTTP_HYBRID||"false"),te.API_SLEEP_AUTH=f(process.env.API_SLEEP_AUTH||"2s"),te.API_SLEEP_FORGOT=f(process.env.API_SLEEP_FORGOT||"5s"),te.API_SLEEP_REGISTRY=f(process.env.API_SLEEP_REGISTRY||"5s"),te.API_SESSION_NAME=process.env.API_SESSION_NAME||"session.id",te.API_SESSION_LIFETIME=f(process.env.API_SESSION_LIFETIME||"1d"),te.API_SESSION_SECRET=process.env.API_SESSION_SECRET||"yoursecret",te.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",te.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",te.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",te.API_TOKEN_LIFETIME=f(process.env.API_TOKEN_LIFETIME||"1d"),te.API_TOKEN_RENEW=f(process.env.API_TOKEN_RENEW||"1d"),te.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),te.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",te.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),te.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",te.API_WEBSOCKET_START=I(process.env.API_WEBSOCKET_START||"false");class re{static connect(e){const t="connect_"+te.API_DB_TYPE.toLowerCase();if(t in re)return re[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new L(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:te.API_DB_LOG,define:{timestamps:!1},timezone:te.API_DB_TIMEZONE})}static connect_memory(){return new L("sqlite::memory:",{logging:te.API_DB_LOG,define:{timestamps:!1},timezone:te.API_DB_TIMEZONE})}static connect_mysql(e){return new L(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:te.API_DB_LOG,define:{timestamps:!1},timezone:te.API_DB_TIMEZONE})}static connect_postgres(e){return new L(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:te.API_DB_LOG,define:{timestamps:!1},timezone:te.API_DB_TIMEZONE})}static connect_sqlite(e){return new L({dialect:"sqlite",storage:e.database,logging:te.API_DB_LOG,define:{timestamps:!1},timezone:te.API_DB_TIMEZONE})}}const ie=re.connect({database:te.API_DB_DATABASE,username:te.API_DB_USERNAME,password:te.API_DB_PASSWORD,hostname:te.API_DB_HOST,hostport:te.API_DB_PORT});class se extends C{}se.init({secret:x.STRING,logout:x.DATE,useragent:x.STRING},{sequelize:ie,modelName:te.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ne extends C{}ne.init({token:x.STRING,timestamp:x.BIGINT,state:x.BOOLEAN},{sequelize:ie,modelName:te.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class oe extends C{}oe.init({name:x.STRING,description:x.TEXT,state:x.BOOLEAN},{sequelize:ie,modelName:te.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class de extends C{}de.init({},{sequelize:ie,modelName:te.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),de.removeAttribute("id");class ae extends C{}ae.init({name:x.STRING,description:x.TEXT,state:x.BOOLEAN},{sequelize:ie,modelName:te.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ce extends C{}ce.init({name:x.STRING,email:x.STRING,username:x.STRING,password:x.STRING,avatar:x.STRING,description:x.TEXT,state:x.BOOLEAN},{sequelize:ie,modelName:te.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class ue extends C{}ue.init({},{sequelize:ie,modelName:te.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),ue.removeAttribute("id");class le extends C{}le.init({key:x.STRING,value:x.STRING},{sequelize:ie,modelName:te.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),le.removeAttribute("id");class pe extends C{}pe.init({type:x.STRING,source:x.STRING,message:x.TEXT},{sequelize:ie,modelName:te.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class ge extends C{}ge.init({token:x.STRING,timestamp:x.BIGINT,state:x.BOOLEAN},{sequelize:ie,modelName:te.API_DB_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});class me extends C{}var ye;me.init({session:x.STRING,json:x.TEXT,expired:x.BIGINT},{sequelize:ie,modelName:te.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),me.removeAttribute("id"),ce.hasMany(se),se.belongsTo(ce),ce.hasMany(ne),ne.belongsTo(ce),oe.hasMany(de),de.belongsTo(oe),ae.hasMany(de),de.belongsTo(ae),ce.hasMany(ue),ue.belongsTo(ce),oe.hasMany(ue),ue.belongsTo(oe),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ye||(ye={}));class he{static write(e,t,r){return ee(this,void 0,void 0,(function*(){yield he.writeRaw(ye.NONE,"",e,t,r)}))}static error(e,t,r){return ee(this,void 0,void 0,(function*(){yield he.writeRaw(ye.ERROR,"error",e,t,r)}))}static info(e,t,r){return ee(this,void 0,void 0,(function*(){yield he.writeRaw(ye.INFO,"info",e,t,r)}))}static success(e,t,r){return ee(this,void 0,void 0,(function*(){yield he.writeRaw(ye.ERROR,"success",e,t,r)}))}static warning(e,t,r){return ee(this,void 0,void 0,(function*(){yield he.writeRaw(ye.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const i=A(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",i,"|",r)}static writeRaw(e,t,r,i,s){return ee(this,void 0,void 0,(function*(){s&&he.writeConsole(e,t,r),ie&&(yield pe.create({type:t,source:i,message:r}).catch((()=>null)))}))}}const ve=e=>U(e)?H(e):void 0,Oe={http:ve(te.API_HTTP_CRT),token:ve(te.API_TOKEN_CRT)},_e={http:ve(te.API_HTTP_KEY),token:ve(te.API_TOKEN_KEY)};class Ie extends M{constructor(){super(),this.all=e=>ee(this,void 0,void 0,(function*(){e=e||P;const t=yield me.findAll({attributes:["session"],where:{expired:{[K.gte]:Date.now()}}}).catch((t=>(e(t),null)));t&&e(null,t.map((e=>e.session))),e()})),this.clear=e=>ee(this,void 0,void 0,(function*(){yield me.destroy().catch(P),e&&e()})),this.destroy=(e,t)=>ee(this,void 0,void 0,(function*(){yield me.destroy({where:{session:e}}).catch(P),t&&t()})),this.expired=()=>ee(this,void 0,void 0,(function*(){yield me.destroy({where:{expired:{[K.lt]:Date.now()}}}).catch(P)})),this.get=(e,t)=>ee(this,void 0,void 0,(function*(){t=t||P;const r=yield me.findOne({where:{session:e,expired:{[K.gte]:Date.now()}}}).catch((e=>(t(e),null)));if(r){const e=JSON.parse(r.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield r.destroy().catch(P),void t(null)}t(null,e)}else t(null)})),this.length=e=>ee(this,void 0,void 0,(function*(){e&&e(null,(yield me.count().catch(P))||0)})),this.set=(e,t,r)=>ee(this,void 0,void 0,(function*(){r=r||P;const i=Date.now()+te.API_SESSION_LIFETIME,s=JSON.stringify(t),[n,o]=(yield me.findOrCreate({where:{session:e},defaults:{session:e,json:s,expired:i}}).catch(P))||[];n&&(o||(n.json=s,n.expired=i,yield n.save().catch(P))),r()})),this.loop=E(this.expired,3e4),this.loop.start()}}class fe{static create(e){return ee(this,void 0,void 0,(function*(){if(!_e.token)return{error:"Key not found"};const{id:t}=e,r=S(),i=yield se.create({secret:r,userId:t}).catch(fe.error);if(!i)return{error:"Internal Server Error"};return{auth:i,token:X({id:t,secret:r},_e.token,fe.options())}}))}static destroy(e){return ee(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){he.error(e.message,"api.token",te.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:te.API_TOKEN_LIFETIME+"ms"}}static renew(e){return ee(this,void 0,void 0,(function*(){if(!_e.token)return{error:"Key not found"};const{error:t,decode:r}=fe.verify(e,te.API_TOKEN_RENEW/1e3);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield ce.findOne({where:{id:e,state:!0}}).catch(fe.error);if(r){const i=yield se.findOne({where:{secret:t,userId:r.id}}).catch(fe.error);if(i&&!i.logout){i.secret=S(),yield i.save().catch(fe.error);return{auth:i,token:X({id:e,secret:i.secret},_e.token,fe.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return ee(this,void 0,void 0,(function*(){const{error:t,decode:r}=fe.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield ce.findOne({where:{id:e,state:!0}}).catch(fe.error);if(r){const e=yield se.findOne({where:{secret:t,userId:r.id}}).catch(fe.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!Oe.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:z(e,Oe.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class Ae extends e{constructor(e){super(e,{cert:Oe.http,cross:te.API_HTTP_CROSS,hybrid:te.API_HTTP_HYBRID,key:_e.http,path:"/api",port:te.API_HTTP_PORT,public:te.API_HTTP_PUBLIC,session:{store:new Ie,name:te.API_SESSION_NAME,secret:te.API_SESSION_SECRET,cookie:{maxAge:te.API_SESSION_LIFETIME},genid:S}})}error(e,t){he.info(e.message,t,te.API_CONSOLE_ERROR)}log(e,t){he.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return ee(this,void 0,void 0,(function*(){yield ie.sync(),yield e.listen.call(this),te.API_WEBSOCKET_START&&this.server&&(this._webSocket=new k.Server({server:this.server,verifyClient:(e,t)=>t(te.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>ee(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let i;e.on("message",(s=>ee(this,void 0,void 0,(function*(){if(i)try{const n=JSON.parse(s);this.emit("ws.message"+r,{data:n,message:s,req:t,user:i,ws:e})}catch(n){this.emit("ws.message"+r,{message:s,req:t,user:i,ws:e})}else{const{user:n}=yield fe.user(s.toString());n&&(i=n,this.emit("ws.connection"+r,{req:t,user:i,ws:e}))}i||e.close()})))),e.on("close",(()=>{i&&this.emit("ws.close"+r,{user:i,ws:e})})),yield b(2e3),i||e.close()})))))}))}websocket(){return this._webSocket}}class Pe{static all(){return ee(this,void 0,void 0,(function*(){const e=yield le.findAll().catch(Pe.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return ee(this,void 0,void 0,(function*(){return((yield le.destroy({where:{key:e}}).catch(Pe.error))||0)>0}))}static error(e){he.error(e.message,"api.config",te.API_CONSOLE_ERROR)}static get(e){return ee(this,void 0,void 0,(function*(){const t=yield le.findOne({where:{key:e}}).catch(Pe.error);return t&&t.value||""}))}static set(e,t){return ee(this,void 0,void 0,(function*(){const[r]=(yield le.findOrCreate({where:{key:e}}).catch(Pe.error))||[];r&&(r.value=t,yield r.save().catch(Pe.error))}))}}const Ee=t((({req:e})=>e.auth)),Se=t((({req:e})=>T(e.files))),be=t((({req:e})=>e.user));class Te{static all(e,t){return ee(this,void 0,void 0,(function*(){return yield ae.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:de,required:!0,include:[{model:oe,required:!0,where:{state:!0},include:[{model:ue,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{he.error(e.message,"api.permission",te.API_CONSOLE_ERROR)}))}))}static get(e){return ee(this,void 0,void 0,(function*(){const t=yield Te.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return ee(this,void 0,void 0,(function*(){const r=yield Te.all(e,{name:t});return!!r&&r.length>0}))}}class we extends w{auth(e,t,r,i,s){return ee(this,void 0,void 0,(function*(){const{auth:n,error:o,user:d}=yield fe.user(r);o?a.error(t,o):n&&d?n.useragent==i?(e.auth=n,e.user=d,s()):a.error(t,"Invalid token"):a.error(t,"Internal Server Error")}))}session(e,t,r){return ee(this,void 0,void 0,(function*(){t.auth&&t.user&&(t.useragent?t.useragent!=e&&t.regenerate(P):(t.useragent=e,t.save(P))),r()}))}error(e){he.error(e.message,"api.controller",te.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,i){return ee(this,void 0,void 0,(function*(){i?(yield Te.is(i,r))?t():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,i){return this.permission(t,r,(i||this.name())+".read",e)}upload(e,t,r,i){const s=(null==i?void 0:i.path)||te.API_UPLOAD_TEMP,n=W.diskStorage({destination:(e,t,r)=>r(null,s),filename:(e,t,r)=>ee(this,void 0,void 0,(function*(){return r(null,this.uploadFile(s,Y(t.mimetype)||"bin"))}))}),o=1e6*((null==i?void 0:i.size)||te.API_UPLOAD_SIZE),d=W({storage:n,fileFilter(e,t,r){var s;return ee(this,void 0,void 0,(function*(){const e=null===(s=null==i?void 0:i.types)||void 0===s?void 0:s.indexOf(t.mimetype);return R(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),c=(null==i?void 0:i.count)||te.API_UPLOAD_COUNT,u=(null==i?void 0:i.field)||te.API_UPLOAD_FIELD;d.array(u,c)(e,t,(e=>e?a.error(t,e.message):r()))}uploadFile(e,t){const r=S()+"."+t;return U(Z(e,r))?this.uploadFile(e,t):r}validation(e,t,r,i){return ee(this,void 0,void 0,(function*(){const{error:s,value:n}=yield j.object(i).parse().validateAsync(e.body);s?a.validation(t,s):(e.body=n,r())}))}write(e,t,r,i){return this.permission(e,t,(r||this.name())+".write",i)}}$([V(0,r()),V(1,i()),V(2,s(te.API_TOKEN_HEADER)),V(3,s("user-agent")),V(4,n()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String,String,Function]),Q("design:returntype",Promise)],we.prototype,"auth",null),$([V(0,s("user-agent")),V(1,o()),V(2,n()),Q("design:type",Function),Q("design:paramtypes",[String,Object,Function]),Q("design:returntype",Promise)],we.prototype,"session",null),$([V(0,i()),V(1,n()),V(2,d()),V(3,be()),Q("design:type",Function),Q("design:paramtypes",[Object,Function,String,ce]),Q("design:returntype",Promise)],we.prototype,"permission",null),$([V(0,be()),V(1,i()),V(2,n()),V(3,d()),Q("design:type",Function),Q("design:paramtypes",[ce,Object,Function,String]),Q("design:returntype",Promise)],we.prototype,"read",null),$([V(0,r()),V(1,i()),V(2,n()),V(3,d()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,Function,Object]),Q("design:returntype",void 0)],we.prototype,"upload",null),$([V(0,r()),V(1,i()),V(2,n()),V(3,d()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,Function,Object]),Q("design:returntype",Promise)],we.prototype,"validation",null),$([V(0,i()),V(1,n()),V(2,d()),V(3,be()),Q("design:type",Function),Q("design:paramtypes",[Object,Function,String,ce]),Q("design:returntype",Promise)],we.prototype,"write",null);let Re=class extends we{login(e,t,r,i,s,n){return ee(this,void 0,void 0,(function*(){yield b(te.API_SLEEP_AUTH);const o=yield ce.findOne({where:{username:i,password:J(s).toString(),state:!0}}).catch(this.error);if(!o)return a.notfound(t,"Username not found"),void n.emit("auth.failure",{req:e});const{auth:d,error:c,token:u}=yield fe.create(o);return c?(a.error(t,c),void n.emit("auth.failure",{req:e})):d&&u?(a.data(t,{token:u}),d.useragent=r,yield d.save().catch(this.error),void this.emit("auth.login",{auth:d,req:e,user:o})):(a.error(t,"Internal Server Error"),void n.emit("auth.failure",{req:e}))}))}logout(e,t,r,i,s){return ee(this,void 0,void 0,(function*(){if(yield fe.destroy(r))return a.success(e,"Disconcerted"),void s.emit("auth.logout",{auth:r,req:t,user:i});a.unauthorized(e,"Access denied")}))}renew(e,t,r,i,s){return ee(this,void 0,void 0,(function*(){const{auth:n,error:o,token:d}=yield fe.renew(i);o?a.error(t,o):n?(a.data(t,{token:d}),n.useragent=r,yield n.save().catch(this.error),s.emit("auth.renew",{auth:n,req:e})):a.error(t,"Internal Server Error")}))}update(e,t,r,i){return ee(this,void 0,void 0,(function*(){const s=yield ce.scope("password").findOne({where:{id:i.id,password:J(t).toString(),state:!0}}).catch(this.error);s?(s.password=J(r).toString(),(yield s.save().catch(this.error))?a.success(e,"OK"):a.success(e,"Record not changed")):a.error(e,"Record not changed")}))}user(e,t){return ee(this,void 0,void 0,(function*(){const r=yield Te.all(t);r?a.data(e,Object.assign(Object.assign({},t.toJSON()),{permissions:r.map((e=>e.name))})):a.error(e,"Internal Server Error")}))}};$([c("/login"),u("validation",{username:j.string().min(4).required(),password:j.string().min(5).required()}),V(0,r()),V(1,i()),V(2,s("user-agent")),V(3,l("username")),V(4,l("password")),V(5,p()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String,String,String,Ae]),Q("design:returntype",Promise)],Re.prototype,"login",null),$([g("/logout"),u("auth"),V(0,i()),V(1,r()),V(2,Ee()),V(3,be()),V(4,p()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,se,ce,Ae]),Q("design:returntype",Promise)],Re.prototype,"logout",null),$([c("/renew"),u("validation",{token:j.string().required()}),V(0,r()),V(1,i()),V(2,s("user-agent")),V(3,l("token")),V(4,p()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String,String,Ae]),Q("design:returntype",Promise)],Re.prototype,"renew",null),$([c("/update"),u("auth"),u("validation",{oldPassword:j.string().min(5).required(),newPassword:j.string().min(5).required()}),V(0,i()),V(1,l("oldPassword")),V(2,l("newPassword")),V(3,be()),Q("design:type",Function),Q("design:paramtypes",[Object,String,String,ce]),Q("design:returntype",Promise)],Re.prototype,"update",null),$([g(),u("auth"),V(0,i()),V(1,be()),Q("design:type",Function),Q("design:paramtypes",[Object,ce]),Q("design:returntype",Promise)],Re.prototype,"user",null),Re=$([m("/auth"),y(we)],Re);let je=class extends we{check(e,t){return ee(this,void 0,void 0,(function*(){const{token:r}=t.body,i=yield this.findOne(r);i&&i.user?(i.token=N(),yield i.save(),a.data(e,{token:i.token})):a.notfound(e,"User not found")}))}forgot(e,t){return ee(this,void 0,void 0,(function*(){const{username:r}=t.body;yield b(te.API_SLEEP_FORGOT);const i=yield ce.findOne({where:{username:r}}).catch(this.error);if(!i)return void a.notfound(e,"User not found");const s=N(),n=Date.now()+6e4*te.API_TOKEN_LIFETIME,o=yield ne.create({token:s,timestamp:n,state:!0,userId:i.id});this.emit("forgot",{forgot:o,req:t,user:i}),a.success(e,"OK")}))}reset(e,t){return ee(this,void 0,void 0,(function*(){const{token:r,password:i}=t.body,s=yield this.findOne(r);s?(s.state=!1,yield s.save().catch(this.error),s.user.password=J(i).toString(),yield s.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:s.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}findOne(e){return ee(this,void 0,void 0,(function*(){return yield ne.findOne({where:{token:e,state:!0},include:[{model:ce,required:!0}]}).catch(this.error)}))}};$([g("/check"),u("validation",{token:j.string().required()}),V(0,i()),V(1,r()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",Promise)],je.prototype,"check",null),$([g(),u("validation",{username:j.string().min(4).required()}),V(0,i()),V(1,r()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",Promise)],je.prototype,"forgot",null),$([g("/reset"),u("validation",{token:j.string().required(),password:j.string().min(5).required()}),V(0,i()),V(1,r()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",Promise)],je.prototype,"reset",null),je=$([m("/forgot"),y(we)],je);let Ne=class extends we{add(e,t,r,i){return ee(this,void 0,void 0,(function*(){const s=yield this.model().create(Object.assign(Object.assign({},e.body),i||{}),r||{}).catch(this.error);if(s){const e=this.key();return a.data(t,{[e]:s.getDataValue(e)}),s}a.error(t,"Internal Server Error")}))}all(e,t,r,i){var s,n,o,d,c;return ee(this,void 0,void 0,(function*(){const u=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(s=e.query.limit)||void 0===s?void 0:s.toString();p&&(l.limit=parseInt(p));const g=null===(n=e.query.offset)||void 0===n?void 0:n.toString();g&&(l.offset=parseInt(g));const m=Object.keys(u.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{m.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(d=e.query.desc)||void 0===d?void 0:d.toString();v&&v.length&&v.split(",").forEach((e=>{m.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=D(l.attributes)?l.attributes:m,I=null===(c=e.query.search)||void 0===c?void 0:c.toString();_.forEach((t=>{var r;if(F(t)&&(I&&I.length&&O.push({[t]:{[K.like]:`%${I}%`}}),"search_"+t in e.query)){const i=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();i&&i.length&&O.push({[t]:{[K.like]:`%${i}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[K.or]:[...O]}));const f=(yield u.count(Object.assign(Object.assign({},l),{col:m[0]})).catch(this.error))||0,A=yield u.findAll(l).catch(this.error);if(A)return a.data(t,{count:f,records:i?yield i(A):A}),A;a.error(t,"Internal Server Error")}))}del(e,t,r){return ee(this,void 0,void 0,(function*(){const i=this.key(),{[i]:s}=e.params;if(!s)return a.error(t,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[i]:s})})).catch(this.error);return n?(a.success(t,"OK"),n):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?he.error(e.message+"\n"+e.sql,"api.controller.sql",te.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,i){return ee(this,void 0,void 0,(function*(){const s=this.key(),{[s]:n}=e.params,o=yield this.model().findOne(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[s]:n})})).catch(this.error);if(o)return a.data(t,i?yield i(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(e,t,r,i){return ee(this,void 0,void 0,(function*(){const s=this.key(),{[s]:n}=e.params,[o]=(yield this.model().update(Object.assign(Object.assign({},e.body),i||{}),Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[s]:n})})).catch(this.error))||[];return o?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};Ne=$([y(we)],Ne);let De=class extends Ne{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}};$([c(),u("auth"),u("write"),u("validationAdd"),V(0,r()),V(1,i()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],De.prototype,"recordAdd",null),$([g(),u("auth"),u("read"),V(0,r()),V(1,i()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],De.prototype,"recordAll",null),$([h("/:id"),u("auth"),u("write"),V(0,r()),V(1,i()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],De.prototype,"recordDel",null),$([g("/:id"),u("auth"),u("read"),V(0,r()),V(1,i()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],De.prototype,"recordGet",null),$([v("/:id"),u("auth"),u("write"),u("validationSet"),V(0,r()),V(1,i()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],De.prototype,"recordSet",null),$([V(0,r()),V(1,i()),V(2,n()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,Function]),Q("design:returntype",void 0)],De.prototype,"validationAdd",null),$([V(0,r()),V(1,i()),V(2,n()),Q("design:type",Function),Q("design:paramtypes",[Object,Object,Function]),Q("design:returntype",void 0)],De.prototype,"validationSet",null),De=$([y(Ne)],De);let Fe=class extends De{model(){return oe}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};Fe=$([m("/groups"),y(De)],Fe);let qe=class extends Ne{model(){return de}recordAll(e,t,r){return ee(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:ae,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(e,t,r){return ee(this,void 0,void 0,(function*(){const i=yield oe.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){const t=i.id;if(yield de.destroy({where:{groupId:t}}),r){let e=0;for(let i=0;i<r.length;i++)e=yield ae.count({where:{id:r[i]}}),e&&(yield de.create({groupId:t,routeId:r[i]}))}a.success(e,"OK")}else q(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};$([g("/:id/routes"),u("auth"),u("read","groups"),V(0,r()),V(1,i()),V(2,O("id")),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String]),Q("design:returntype",Promise)],qe.prototype,"recordAll",null),$([v("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:j.array(j.number().parse())}),V(0,i()),V(1,O("id")),V(2,l("routes")),Q("design:type",Function),Q("design:paramtypes",[Object,String,Array]),Q("design:returntype",Promise)],qe.prototype,"recordSet",null),qe=$([m("/groups"),y(Ne)],qe);let Be=class extends Ne{model(){return pe}recordAll(e,t,r,i){const s={};r&&(s.type=r),i&&(s.source=i),this.all(e,t,{where:s,order:[["created","DESC"]]})}};$([g(),u("auth"),u("read"),V(0,r()),V(1,i()),V(2,_("type")),V(3,_("source")),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String,String]),Q("design:returntype",void 0)],Be.prototype,"recordAll",null),Be=$([m("/logs"),y(Ne)],Be);let ke=class extends we{confirm(e,t){return ee(this,void 0,void 0,(function*(){const r=yield ge.findOne({where:{token:t,state:!0},include:[{model:ce,required:!0}]}).catch(this.error);r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}register(e,t,r,i){return ee(this,void 0,void 0,(function*(){yield b(te.API_SLEEP_REGISTRY);const t=yield ce.findOne({where:{username:i}}).catch(this.error);if(t)return void a.error(e,"Invalid Username");if(!q(t))return void a.error(e,"Internal Server Error");const s=yield ce.create(Object.assign(Object.assign({},r),{state:!1}));this.emit("user.register",{user:s}),a.success(e,"OK")}))}};$([g("/confirm"),u("validation",{token:j.string().required()}),V(0,i()),V(1,l("token")),Q("design:type",Function),Q("design:paramtypes",[Object,String]),Q("design:returntype",Promise)],ke.prototype,"confirm",null),$([g(),u("validation",{name:j.string().required(),email:j.string().email().required(),username:j.string().min(4).required(),password:j.string().min(5).required()}),V(0,i()),V(1,r()),V(2,l()),V(3,l("username")),Q("design:type",Function),Q("design:paramtypes",[Object,Object,Object,String]),Q("design:returntype",Promise)],ke.prototype,"register",null),ke=$([m("/register"),y(we)],ke);let Le=class extends De{model(){return ae}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};Le=$([m("/routes"),y(De)],Le);let xe=class extends we{setup(e){return ee(this,void 0,void 0,(function*(){if(0==(yield ce.count())){const e={description:"",state:!0},t=yield ce.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield oe.create(Object.assign({name:"admin"},e));yield ue.create({userId:t.id,groupId:r.id});const i=["read","write"],s=["users","groups","routes"];yield B(s,(t=>ee(this,void 0,void 0,(function*(){yield B(i,(i=>ee(this,void 0,void 0,(function*(){const s=t+"."+i,n=yield ae.create(Object.assign({name:s},e));yield de.create({groupId:r.id,routeId:n.id})}))))}))));const n=yield ae.create(Object.assign({name:"logs.read"},e));yield de.create({groupId:r.id,routeId:n.id})}a.success(e,"OK")}))}};$([g(),V(0,i()),Q("design:type",Function),Q("design:paramtypes",[Object]),Q("design:returntype",Promise)],xe.prototype,"setup",null),xe=$([m("/setup"),y(we)],xe);let Ce=class extends Ne{model(){return ce}recordAdd(e,t,r){this.add(r,e,{},{password:J(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(e,t,r,i){r&&r.id.toString()!=i?this.del(t,e):a.error(e,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:J(t).toString()}:{})}};$([c(),u("auth"),u("write"),u("validation",{name:j.string().required(),email:j.string().email().required(),username:j.string().min(4).required(),password:j.string().min(5).required(),description:j.string().empty(""),state:j.boolean().parse().required()}),V(0,i()),V(1,l("password")),V(2,r()),Q("design:type",Function),Q("design:paramtypes",[Object,String,Object]),Q("design:returntype",void 0)],Ce.prototype,"recordAdd",null),$([g(),u("auth"),u("read"),V(0,i()),V(1,r()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],Ce.prototype,"recordAll",null),$([h("/:id"),u("auth"),u("write"),V(0,i()),V(1,r()),V(2,be()),V(3,O("id")),Q("design:type",Function),Q("design:paramtypes",[Object,Object,ce,String]),Q("design:returntype",void 0)],Ce.prototype,"recordDel",null),$([g("/:id"),u("auth"),u("read"),V(0,i()),V(1,r()),Q("design:type",Function),Q("design:paramtypes",[Object,Object]),Q("design:returntype",void 0)],Ce.prototype,"recordGet",null),$([v("/:id"),u("auth"),u("write"),u("validation",{name:j.string().empty(),email:j.string().email().empty(),username:j.string().min(4).empty(),password:j.string().min(5).empty().filter(""),description:j.string().empty(),state:j.boolean().parse().empty()}),V(0,i()),V(1,l("password")),V(2,r()),Q("design:type",Function),Q("design:paramtypes",[Object,String,Object]),Q("design:returntype",void 0)],Ce.prototype,"recordSet",null),Ce=$([m("/users"),y(Ne)],Ce);let Ke=class extends Ne{model(){return ue}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:oe,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(e,t,r){return ee(this,void 0,void 0,(function*(){const i=yield ce.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){if(yield ue.destroy({where:{userId:i.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield oe.count({where:{id:r[t]}}),e&&(yield ue.create({userId:i.id,groupId:r[t]}))}a.success(e,"OK")}else q(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};$([g("/:id/groups"),u("auth"),u("read","users"),V(0,i()),V(1,r()),V(2,O("id")),Q("design:type",Function),Q("design:paramtypes",[Object,Object,String]),Q("design:returntype",void 0)],Ke.prototype,"recordAll",null),$([v("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:j.array(j.number().parse())}),V(0,i()),V(1,O("id")),V(2,l("groups")),Q("design:type",Function),Q("design:paramtypes",[Object,String,Array]),Q("design:returntype",Promise)],Ke.prototype,"recordSet",null),Ke=$([m("/users"),y(Ne)],Ke);export{Ae as Application,se as Auth,Re as AuthController,Pe as Config,le as Configs,we as ControllerBase,De as CrudController,re as Database,te as Env,ne as Forgot,je as ForgotController,oe as Group,de as GroupRoute,Fe as GroupsController,qe as GroupsRoutesController,pe as Log,he as Logs,ye as LogsColor,Be as LogsController,Ne as ModelController,Te as Permission,ke as RegisterController,ge as Registry,Ee as ReqAuth,Se as ReqFiles,be as ReqUser,ae as Route,Le as RoutesController,me as Session,xe as SetupController,fe as Token,ce as User,ue as UserGroup,Ce as UsersController,Ke as UsersGroupsController,Oe as crt,_e as key,ie as sequelize};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andrewcaires/api",
-  "version": "3.0.10",
+  "version": "3.0.11",
   "description": "Simple api for small applications using express, jsonwebtoken, sequelize and websocket",
   "main": "./dist/index.cjs.js",
   "types": "./dist/index.d.ts",
@@ -45,39 +45,40 @@
   },
   "homepage": "https://github.com/andrewcaires/npm/tree/main/api#readme",
   "dependencies": {
-    "@andrewcaires/express": "^1.0.5",
-    "@andrewcaires/utils.js": "^0.2.17",
+    "@andrewcaires/express": "^1.0.8",
+    "@andrewcaires/utils.js": "^0.2.22",
     "cors": "^2.8.5",
-    "crypto-js": "^4.1.1",
-    "dotenv": "^16.0.3",
+    "crypto-js": "^4.2.0",
+    "dotenv": "^16.3.1",
     "express": "^4.18.2",
-    "jsonwebtoken": "^9.0.0",
-    "mariadb": "^3.1.2",
+    "express-session": "^1.17.3",
+    "jsonwebtoken": "^9.0.2",
+    "mariadb": "^3.2.2",
     "mime-types": "^2.1.35",
     "multer": "^1.4.5-lts.1",
-    "mysql2": "^3.3.0",
-    "sequelize": "^6.31.1",
-    "ws": "^8.13.0"
+    "mysql2": "^3.6.3",
+    "sequelize": "^6.35.0",
+    "ws": "^8.14.2"
   },
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^24.1.0",
-    "@rollup/plugin-terser": "^0.4.1",
-    "@rollup/plugin-typescript": "^11.1.0",
-    "@types/cors": "^2.8.13",
-    "@types/crypto-js": "^4.1.1",
-    "@types/express": "^4.17.17",
-    "@types/jsonwebtoken": "^9.0.2",
-    "@types/mime-types": "^2.1.1",
-    "@types/multer": "^1.4.7",
-    "@types/node": "^20.1.2",
-    "@types/ws": "^8.5.4",
-    "@typescript-eslint/eslint-plugin": "^5.59.5",
-    "@typescript-eslint/parser": "^5.59.5",
-    "eslint": "^8.40.0",
-    "rollup": "^3.21.6",
-    "rollup-plugin-dts": "^5.3.0",
-    "ts-node": "^10.9.1",
+    "@rollup/plugin-commonjs": "^25.0.7",
+    "@rollup/plugin-terser": "^0.4.4",
+    "@rollup/plugin-typescript": "^11.1.5",
+    "@types/cors": "^2.8.16",
+    "@types/crypto-js": "^4.2.1",
+    "@types/express": "^4.17.21",
+    "@types/express-session": "^1.17.10",
+    "@types/jsonwebtoken": "^9.0.5",
+    "@types/mime-types": "^2.1.4",
+    "@types/multer": "^1.4.10",
+    "@types/node": "^20.9.0",
+    "@types/ws": "^8.5.9",
+    "@typescript-eslint/eslint-plugin": "^6.11.0",
+    "@typescript-eslint/parser": "^6.11.0",
+    "eslint": "^8.53.0",
+    "rollup": "^4.4.1",
+    "rollup-plugin-dts": "^6.1.0",
     "ts-node-dev": "^2.0.0",
-    "tslib": "^2.5.0"
+    "tslib": "^2.6.2"
   }
 }