@andrewcaires/api 3.0.14 → 3.0.15

package/dist/index.cjs.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.14
+ * @andrewcaires/api v3.0.15
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2024 Andrew Caires
  * @license: MIT
  */
-"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),o=require("sequelize"),s=require("dotenv"),i=require("fs"),n=require("express-session"),d=require("jsonwebtoken"),a=require("mime-types"),l=require("multer"),u=require("path"),c=require("crypto-js");function p(e,t,r,o){var s,i=arguments.length,n=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var d=e.length-1;d>=0;d--)(s=e[d])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))||n);return i>3&&n&&Object.defineProperty(t,r,n),n}function g(e,t){return function(r,o){t(r,o,e)}}function y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function h(e,t,r,o){return new(r||(r=Promise))((function(s,i){function n(e){try{a(o.next(e))}catch(e){i(e)}}function d(e){try{a(o.throw(e))}catch(e){i(e)}}function a(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(n,d)}a((o=o.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,s.config();class m{static getBool(e,r){return t.toBool(m.getString(e,r.toString()))}static getInt(e,t){return parseInt(m.getString(e,t.toString()))}static getMs(e,r){return t.parseMs(m.getString(e,r))}static getString(e,t){return e in process.env?process.env[e]||"":t}}m.API_CONSOLE_ERROR=m.getBool("API_CONSOLE_ERROR",!1),m.API_DEFAULT_PATH=m.getString("API_DEFAULT_PATH","/api"),m.API_DB_DATABASE=m.getString("API_DB_DATABASE",""),m.API_DB_HOST=m.getString("API_DB_HOST","127.0.0.1"),m.API_DB_PASSWORD=m.getString("API_DB_PASSWORD",""),m.API_DB_PORT=m.getInt("API_DB_PORT",3306),m.API_DB_TYPE=m.getString("API_DB_TYPE",""),m.API_DB_USERNAME=m.getString("API_DB_USERNAME","root"),m.API_DB_LOG=m.getBool("API_DB_LOG",!1),m.API_DB_PREFIX=m.getString("API_DB_PREFIX",""),m.API_DB_TIMEZONE=m.getString("API_DB_TIMEZONE","+00:00"),m.API_HTTP_CRT=m.getString("API_HTTP_CRT",""),m.API_HTTP_KEY=m.getString("API_HTTP_KEY",""),m.API_HTTP_PORT=m.getInt("API_HTTP_PORT",3e3),m.API_HTTP_PUBLIC=m.getString("API_HTTP_PUBLIC",""),m.API_HTTP_CROSS=m.getBool("API_HTTP_CROSS",!1),m.API_HTTP_HYBRID=m.getBool("API_HTTP_HYBRID",!1),m.API_HTTP_REDIRECT=m.getString("API_HTTP_REDIRECT",""),m.API_SLEEP_AUTH=m.getMs("API_SLEEP_AUTH","2s"),m.API_SLEEP_FORGOT=m.getMs("API_SLEEP_FORGOT","5s"),m.API_SLEEP_REGISTRY=m.getMs("API_SLEEP_REGISTRY","5s"),m.API_SESSION_NAME=m.getString("API_SESSION_NAME","session.id"),m.API_SESSION_LIFETIME=m.getMs("API_SESSION_LIFETIME","1d"),m.API_SESSION_SECRET=m.getString("API_SESSION_SECRET","yoursecret"),m.API_TOKEN_CRT=m.getString("API_TOKEN_CRT",""),m.API_TOKEN_KEY=m.getString("API_TOKEN_KEY",""),m.API_TOKEN_FORGOT=m.getMs("API_TOKEN_LIFETIME","1d"),m.API_TOKEN_HEADER=m.getString("API_TOKEN_HEADER","authorization"),m.API_TOKEN_LIFETIME=m.getMs("API_TOKEN_LIFETIME","1d"),m.API_TOKEN_RENEW=m.getMs("API_TOKEN_RENEW","1d"),m.API_UPLOAD_COUNT=m.getInt("API_UPLOAD_COUNT",1),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=m.getInt("API_UPLOAD_SIZE",2),m.API_UPLOAD_TEMP=m.getString("API_UPLOAD_TEMP","./temp"),m.API_WEBSOCKET_START=m.getBool("API_WEBSOCKET_START",!1);class A{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in A)return A[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_memory(){return new o.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_mysql(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_postgres(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_sqlite(e){return new o.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}}const I=A.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class _ extends o.Model{}_.init({secret:o.DataTypes.STRING,logout:o.DataTypes.DATE,useragent:o.DataTypes.STRING},{sequelize:I,modelName:m.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends o.Model{}v.init({token:o.DataTypes.STRING,timestamp:o.DataTypes.BIGINT,state:o.DataTypes.BOOLEAN},{sequelize:I,modelName:m.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends o.Model{}O.init({name:o.DataTypes.STRING,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:I,modelName:m.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class P extends o.Model{}P.init({},{sequelize:I,modelName:m.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),P.removeAttribute("id");class S extends o.Model{}S.init({token:o.DataTypes.STRING,state:o.DataTypes.BOOLEAN},{sequelize:I,modelName:m.API_DB_PREFIX+"register",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends o.Model{}f.init({name:o.DataTypes.STRING,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:I,modelName:m.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class E extends o.Model{}E.init({name:o.DataTypes.STRING,email:o.DataTypes.STRING,username:o.DataTypes.STRING,password:o.DataTypes.STRING,avatar:o.DataTypes.STRING,date:o.DataTypes.DATEONLY,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:I,modelName:m.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class R extends o.Model{}R.init({},{sequelize:I,modelName:m.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),R.removeAttribute("id");class x extends o.Model{}x.init({key:o.DataTypes.STRING,value:o.DataTypes.STRING},{sequelize:I,modelName:m.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),x.removeAttribute("id");class T extends o.Model{}T.init({type:o.DataTypes.STRING,source:o.DataTypes.STRING,message:o.DataTypes.TEXT},{sequelize:I,modelName:m.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class w extends o.Model{}var C;w.init({session:o.DataTypes.STRING,json:o.DataTypes.TEXT,expired:o.DataTypes.BIGINT},{sequelize:I,modelName:m.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),w.removeAttribute("id"),E.hasMany(_),_.belongsTo(E),E.hasMany(v),v.belongsTo(E),E.hasMany(S),S.belongsTo(E),O.hasMany(P),P.belongsTo(O),f.hasMany(P),P.belongsTo(f),E.hasMany(R),R.belongsTo(E),O.hasMany(R),R.belongsTo(O),exports.LogsColor=void 0,(C=exports.LogsColor||(exports.LogsColor={})).ERROR="",C.INFO="",C.NONE="",C.SUCCESS="",C.WARNING="";class b{static write(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.NONE,"",e,t,r)}))}static error(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.ERROR,"error",e,t,r)}))}static info(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.INFO,"info",e,t,r)}))}static success(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.ERROR,"success",e,t,r)}))}static warning(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,o){const s=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",s,"|",o)}static writeRaw(e,t,r,o,s){return h(this,void 0,void 0,(function*(){s&&b.writeConsole(e,t,r),I&&(yield T.create({type:t,source:o,message:r}).catch((()=>null)))}))}}const D=e=>i.existsSync(e)?i.readFileSync(e):void 0,N={http:D(m.API_HTTP_CRT),token:D(m.API_TOKEN_CRT)},M={http:D(m.API_HTTP_KEY),token:D(m.API_TOKEN_KEY)};class q extends n.Store{constructor(){super(),this.all=e=>h(this,void 0,void 0,(function*(){e=e||t.noop;const r=yield w.findAll({attributes:["session"],where:{expired:{[o.Op.gte]:Date.now()}}}).catch((t=>(e(t),null)));r&&e(null,r.map((e=>e.session))),e()})),this.clear=e=>h(this,void 0,void 0,(function*(){yield w.destroy().catch(t.noop),e&&e()})),this.destroy=(e,r)=>h(this,void 0,void 0,(function*(){yield w.destroy({where:{session:e}}).catch(t.noop),r&&r()})),this.expired=()=>h(this,void 0,void 0,(function*(){yield w.destroy({where:{expired:{[o.Op.lt]:Date.now()}}}).catch(t.noop)})),this.get=(e,r)=>h(this,void 0,void 0,(function*(){r=r||t.noop;const s=yield w.findOne({where:{session:e,expired:{[o.Op.gte]:Date.now()}}}).catch((e=>(r(e),null)));if(s){const e=JSON.parse(s.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield s.destroy().catch(t.noop),void r(null)}r(null,e)}else r(null)})),this.length=e=>h(this,void 0,void 0,(function*(){e&&e(null,(yield w.count().catch(t.noop))||0)})),this.set=(e,r,o)=>h(this,void 0,void 0,(function*(){o=o||t.noop;const s=Date.now()+m.API_SESSION_LIFETIME,i=JSON.stringify(r),[n,d]=(yield w.findOrCreate({where:{session:e},defaults:{session:e,json:i,expired:s}}).catch(t.noop))||[];n&&(d||(n.json=i,n.expired=s,yield n.save().catch(t.noop))),o()})),this.loop=t.loop(this.expired,3e4),this.loop.start()}}class F{static create(e){return h(this,void 0,void 0,(function*(){if(!M.token)return{error:"Key not found"};const{id:r}=e,o=t.uuidv4(),s=yield _.create({secret:o,userId:r}).catch(F.error);if(!s)return{error:"Internal Server Error"};return{auth:s,token:d.sign({id:r,secret:o},M.token,F.options())}}))}static destroy(e){return h(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){b.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:m.API_TOKEN_LIFETIME+"ms"}}static renew(e){return h(this,void 0,void 0,(function*(){if(!M.token)return{error:"Key not found"};const{error:r,decode:o}=F.verify(e,m.API_TOKEN_RENEW/1e3);if(r)return{error:r};if(o){const{id:e,secret:r}=o;if(e&&r){const o=yield E.findOne({where:{id:e,state:!0}}).catch(F.error);if(o){const s=yield _.findOne({where:{secret:r,userId:o.id}}).catch(F.error);if(s&&!s.logout){s.secret=t.uuidv4(),yield s.save().catch(F.error);return{auth:s,token:d.sign({id:e,secret:s.secret},M.token,F.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return h(this,void 0,void 0,(function*(){const{error:t,decode:r}=F.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield E.findOne({where:{id:e,state:!0}}).catch(F.error);if(r){const e=yield _.findOne({where:{secret:t,userId:r.id}}).catch(F.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!N.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:d.verify(e,N.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class j extends e.Application{constructor(e){super(e,{cert:N.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:M.http,path:m.API_DEFAULT_PATH,port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC,redirect:m.API_HTTP_REDIRECT,session:{store:new q,name:m.API_SESSION_NAME,secret:m.API_SESSION_SECRET,cookie:{maxAge:m.API_SESSION_LIFETIME},genid:t.uuidv4}})}error(e,t){b.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){b.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return h(this,void 0,void 0,(function*(){yield I.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>h(this,void 0,void 0,(function*(){r.url||(r.url="");const o=r.url.length<=1?"":r.url.replace(/\//g,".");let s;e.on("message",(t=>h(this,void 0,void 0,(function*(){if(s)try{const i=JSON.parse(t);this.emit("ws.message"+o,{data:i,message:t,req:r,user:s,ws:e})}catch(i){this.emit("ws.message"+o,{message:t,req:r,user:s,ws:e})}else{const{user:i}=yield F.user(t.toString());i&&(s=i,this.emit("ws.connection"+o,{req:r,user:s,ws:e}))}s||e.close()})))),e.on("close",(()=>{s&&this.emit("ws.close"+o,{user:s,ws:e})})),yield t.sleep(2e3),s||e.close()})))))}))}websocket(){return this._webSocket}}class B{static all(){return h(this,void 0,void 0,(function*(){const e=yield x.findAll().catch(B.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return h(this,void 0,void 0,(function*(){return((yield x.destroy({where:{key:e}}).catch(B.error))||0)>0}))}static error(e){b.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return h(this,void 0,void 0,(function*(){const t=yield x.findOne({where:{key:e}}).catch(B.error);return t&&t.value||""}))}static set(e,t){return h(this,void 0,void 0,(function*(){const[r]=(yield x.findOrCreate({where:{key:e}}).catch(B.error))||[];r&&(r.value=t,yield r.save().catch(B.error))}))}}const L=e.parameterFactory((({req:e})=>e.auth)),k=e.parameterFactory((({req:e})=>t.toArray(e.files))),G=e.parameterFactory((({req:e})=>e.user));class H{static all(e,t){return h(this,void 0,void 0,(function*(){return yield f.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:P,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:R,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{b.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return h(this,void 0,void 0,(function*(){const t=yield H.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return h(this,void 0,void 0,(function*(){const r=yield H.all(e,{name:t});return!!r&&r.length>0}))}}class U extends t.EventEmitter{auth(t,r,o,s,i){return h(this,void 0,void 0,(function*(){const{auth:n,error:d,user:a}=yield F.user(o);d?e.Responses.error(r,d):n&&a?n.useragent==s?(t.auth=n,t.user=a,i()):e.Responses.error(r,"Invalid token"):e.Responses.error(r,"Internal Server Error")}))}session(e,r,o){return h(this,void 0,void 0,(function*(){r.auth&&r.user&&(r.useragent?r.useragent!=e&&r.regenerate(t.noop):(r.useragent=e,r.save(t.noop))),o()}))}error(e){b.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,o,s){return h(this,void 0,void 0,(function*(){s?(yield H.is(s,o))?r():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,o){return this.permission(t,r,(o||this.name())+".read",e)}upload(r,o,s,i){const n=(null==i?void 0:i.path)||m.API_UPLOAD_TEMP,d=l.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>h(this,void 0,void 0,(function*(){return r(null,this.uploadFile(n,a.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==i?void 0:i.size)||m.API_UPLOAD_SIZE),c=l({storage:d,fileFilter(e,r,o){var s;return h(this,void 0,void 0,(function*(){const e=null===(s=null==i?void 0:i.types)||void 0===s?void 0:s.indexOf(r.mimetype);return t.isNumber(e)&&e<0?o(new Error("File type not allowed")):o(null,!0)}))},limits:{fileSize:u}}),p=(null==i?void 0:i.count)||m.API_UPLOAD_COUNT,g=(null==i?void 0:i.field)||m.API_UPLOAD_FIELD;c.array(g,p)(r,o,(t=>t?e.Responses.error(o,t.message):s()))}uploadFile(e,r){const o=t.uuidv4()+"."+r;return i.existsSync(u.join(e,o))?this.uploadFile(e,r):o}validation(r,o,s,i){return h(this,void 0,void 0,(function*(){const{error:n,value:d}=yield t.Validation.object(i).parse().validateAsync(r.body);n?e.Responses.validation(o,n):(r.body=d,s())}))}write(e,t,r,o){return this.permission(e,t,(r||this.name())+".write",o)}}p([g(0,e.Req()),g(1,e.Res()),g(2,e.Headers(m.API_TOKEN_HEADER)),g(3,e.Headers("user-agent")),g(4,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String,Function]),y("design:returntype",Promise)],U.prototype,"auth",null),p([g(0,e.Headers("user-agent")),g(1,e.Session()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[String,Object,Function]),y("design:returntype",Promise)],U.prototype,"session",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,G()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,E]),y("design:returntype",Promise)],U.prototype,"permission",null),p([g(0,G()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[E,Object,Function,String]),y("design:returntype",Promise)],U.prototype,"read",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",void 0)],U.prototype,"upload",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",Promise)],U.prototype,"validation",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,G()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,E]),y("design:returntype",Promise)],U.prototype,"write",null),exports.AuthController=class extends U{login(e,r,s,i,n){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const d=s,a=yield E.findOne({where:{[o.Op.or]:[{email:d},{username:s}],[o.Op.and]:[{password:c.SHA256(i).toString()}]}}).catch(this.error);if(!a)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const l=yield S.findOne({where:{state:!0,userId:a.id}}).catch(this.error);if(l)return e.error("Activation required"),n.emit("auth.activation",{ctx:e,register:l,user:a}),void this.emit("auth.activation",{ctx:e,register:l,user:a});if(!a.state)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const{auth:u,error:p,token:g}=yield F.create(a);return p?(e.error(p),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e})):u&&g?(e.data({token:g}),u.useragent=r,yield u.save().catch(this.error),n.emit("auth.login",{auth:u,ctx:e,user:a}),void this.emit("auth.login",{auth:u,ctx:e,user:a})):(e.error("Internal Server Error"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e}))}))}logout(e,t,r,o){return h(this,void 0,void 0,(function*(){if(yield F.destroy(t))return e.success("Disconcerted"),o.emit("auth.logout",{auth:t,ctx:e,user:r}),void this.emit("auth.logout",{auth:t,ctx:e,user:r});e.unauthorized("Access denied")}))}renew(e,t,r,o){return h(this,void 0,void 0,(function*(){const{auth:s,error:i,token:n}=yield F.renew(r);i?e.error(i):s?(e.data({token:n}),s.useragent=t,yield s.save().catch(this.error),o.emit("auth.renew",{auth:s,ctx:e}),this.emit("auth.renew",{auth:s,ctx:e})):e.error("Internal Server Error")}))}update(e,t,r,o){return h(this,void 0,void 0,(function*(){const s=yield E.scope("password").findOne({where:{id:o.id,password:c.SHA256(t).toString(),state:!0}}).catch(this.error);s?(s.password=c.SHA256(r).toString(),(yield s.save().catch(this.error))?e.success("OK"):e.success("Record not changed")):e.error("Record not changed")}))}user(e,t){return h(this,void 0,void 0,(function*(){const r=yield H.all(t);r?e.data(Object.assign(Object.assign({},t.toJSON()),{permissions:r.map((e=>e.name))})):e.error("Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(3).required(),password:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Headers("user-agent")),g(2,e.Body("username")),g(3,e.Body("password")),g(4,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,String,j]),y("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),g(0,e.Ctx()),g(1,L()),g(2,G()),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,_,E,j]),y("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Post("/renew"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Ctx()),g(1,e.Headers("user-agent")),g(2,e.Body("token")),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,j]),y("design:returntype",Promise)],exports.AuthController.prototype,"renew",null),p([e.Post("/update"),e.Middleware("auth"),e.Middleware("validation",{oldPassword:t.Validation.string().min(5).required(),newPassword:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body("oldPassword")),g(2,e.Body("newPassword")),g(3,G()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,E]),y("design:returntype",Promise)],exports.AuthController.prototype,"update",null),p([e.Get(),e.Middleware("auth"),g(0,e.Ctx()),g(1,G()),y("design:type",Function),y("design:paramtypes",[e.Context,E]),y("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(U)],exports.AuthController),exports.ForgotController=class extends U{check(r,o){return h(this,void 0,void 0,(function*(){const{token:s}=o.body,i=yield this.findOne(s);i&&i.user?(i.token=t.uniqueID(),yield i.save(),e.Responses.data(r,{token:i.token})):e.Responses.notfound(r,"User not found")}))}forgot(e,r,s){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_FORGOT);const i=r,n=yield E.findOne({where:{[o.Op.or]:[{email:i},{username:r}]}}).catch(this.error);if(!n)return void e.notFound("User not found");const d=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_FORGOT,l=yield v.create({token:d,timestamp:a,state:!0,userId:n.id});s.emit("forgot.send",{ctx:e,forgot:l,user:n}),this.emit("forgot.send",{ctx:e,forgot:l,user:n}),e.success("OK")}))}reset(e,t,r,o){return h(this,void 0,void 0,(function*(){const s=yield this.findOne(t);s?(s.state=!1,yield s.save().catch(this.error),s.user.password=c.SHA256(r).toString(),yield s.user.save().catch(this.error),o.emit("forgot.reset",{ctx:e,user:s.user}),this.emit("forgot.reset",{ctx:e,user:s.user}),e.success("OK")):e.notFound("User not found")}))}findOne(e){return h(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:E,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Post(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),g(0,e.Ctx()),g(1,e.Body("username")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,j]),y("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Post("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body("token")),g(2,e.Body("password")),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,j]),y("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(U)],exports.ForgotController),exports.ModelController=class extends U{add(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=yield this.model().create(Object.assign(Object.assign({},t.body),s||{}),o||{}).catch(this.error);if(i){const t=this.key();return e.Responses.data(r,{[t]:i.getDataValue(t)}),i}e.Responses.error(r,"Internal Server Error")}))}all(r,s,i,n){var d,a,l,u,c;return h(this,void 0,void 0,(function*(){const p=this.model(),g=Object.assign({},i||{});g.where=Object.assign({},g.where||{});const y=null===(d=r.query.limit)||void 0===d?void 0:d.toString();y&&(g.limit=parseInt(y));const h=null===(a=r.query.offset)||void 0===a?void 0:a.toString();h&&(g.offset=parseInt(h));const m=Object.keys(p.getAttributes()),A=[],I=null===(l=r.query.asc)||void 0===l?void 0:l.toString();I&&I.length&&I.split(",").forEach((e=>{m.indexOf(e)>=0&&A.push([e,"ASC"])}));const _=null===(u=r.query.desc)||void 0===u?void 0:u.toString();_&&_.length&&_.split(",").forEach((e=>{m.indexOf(e)>=0&&A.push([e,"DESC"])})),A.length&&(g.order=A);const v=[],O=t.isArray(g.attributes)?g.attributes:m,P=null===(c=r.query.search)||void 0===c?void 0:c.toString();O.forEach((e=>{var s;if(t.isString(e)&&(P&&P.length&&v.push({[e]:{[o.Op.like]:`%${P}%`}}),"search_"+e in r.query)){const t=null===(s=r.query["search_"+e])||void 0===s?void 0:s.toString();t&&t.length&&v.push({[e]:{[o.Op.like]:`%${t}%`}})}})),v.length&&(g.where=Object.assign(Object.assign({},g.where),{[o.Op.or]:[...v]}));const S=(yield p.count(Object.assign(Object.assign({},g),{col:m[0]})).catch(this.error))||0,f=yield p.findAll(g).catch(this.error);if(f)return e.Responses.data(s,{count:S,records:n?yield n(f):f}),f;e.Responses.error(s,"Internal Server Error")}))}del(t,r,o){return h(this,void 0,void 0,(function*(){const s=this.key(),{[s]:i}=t.params;if(!i)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[s]:i})})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?b.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=t.params,d=yield this.model().findOne(Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[i]:n})})).catch(this.error);if(d)return e.Responses.data(r,s?yield s(d):d.toJSON()),d;null!==d?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=t.params,[d]=(yield this.model().update(Object.assign(Object.assign({},t.body),s||{}),Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[i]:n})})).catch(this.error))||[];return d?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(U)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupsController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupsController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupsController),exports.GroupsRoutesController=class extends exports.ModelController{model(){return P}recordAll(e,t,r){return h(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:f,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(r,o,s){return h(this,void 0,void 0,(function*(){const i=yield O.findByPk(o,{attributes:["id"]}).catch(this.error);if(i){const t=i.id;if(yield P.destroy({where:{groupId:t}}),s){let e=0;for(let r=0;r<s.length;r++)e=yield f.count({where:{id:s[r]}}),e&&(yield P.create({groupId:t,routeId:s[r]}))}e.Responses.success(r,"OK")}else t.isNull(i)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),g(0,e.Req()),g(1,e.Res()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("routes")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordSet",null),exports.GroupsRoutesController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupsRoutesController),exports.LogsController=class extends exports.ModelController{model(){return T}recordAll(e,t,r,o){const s={};r&&(s.type=r),o&&(s.source=o),this.all(e,t,{where:s,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),g(2,e.Query("type")),g(3,e.Query("source")),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String]),y("design:returntype",void 0)],exports.LogsController.prototype,"recordAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController),exports.RegisterController=class extends U{register(e,r,s){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const{name:i,date:n,email:d,username:a,password:l,confirm:u}=r,p=a||d,g=c.SHA256(l).toString();if(yield E.count({where:{[o.Op.or]:[{email:d},{username:p}]}}).catch(this.error))return void e.validation("Invalid email or username");if(g!=c.SHA256(u).toString())return void e.error("Invalid password");const y=yield E.create({name:i,date:n,email:d,username:p,password:g,state:!1}).catch(this.error);if(!y)return void e.error("Internal Server Error");const h=yield S.create({token:yield this.getId(),userId:y.id,state:!0}).catch(this.error);if(!h)return y.destroy(),void e.error("Internal Server Error");e.success("OK"),s.emit("register.user",{ctx:e,register:h,user:y}),this.emit("register.user",{ctx:e,register:h,user:y})}))}confirm(e,t,r){return h(this,void 0,void 0,(function*(){const o=yield S.findOne({where:{token:t,state:!0},include:[{model:E,required:!0}]}).catch(this.error);o?(o.state=!1,yield o.save().catch(this.error),o.user.state=!0,yield o.user.save().catch(this.error),e.success("OK"),r.emit("register.confirm",{ctx:e,register:o,user:o.user}),this.emit("register.confirm",{ctx:e,register:o,user:o.user})):e.notFound("User not found")}))}send(e,t,r){return h(this,void 0,void 0,(function*(){const s=t,i=yield S.findOne({where:{state:!0},include:[{model:E,required:!0,where:{[o.Op.or]:[{email:s},{username:t}]}}]}).catch(this.error);i?(e.success("OK"),r.emit("register.send",{ctx:e,register:i,user:i.user}),this.emit("register.send",{ctx:e,register:i,user:i.user})):e.notFound("User not found")}))}getId(){return h(this,void 0,void 0,(function*(){const e=t.uuidv4();return(yield S.count({where:{token:e}}))?this.getId():e}))}},p([e.Post(),e.Middleware("validation",{name:t.Validation.string().required(),date:t.Validation.string().date().required(),email:t.Validation.string().email().required(),username:t.Validation.string().empty(),password:t.Validation.string().min(5).required(),confirm:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body()),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,Object,j]),y("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),p([e.Post("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Ctx()),g(1,e.Body("token")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,j]),y("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Post("/send"),e.Middleware("validation",{username:t.Validation.string().required()}),g(0,e.Ctx()),g(1,e.Body("username")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,j]),y("design:returntype",Promise)],exports.RegisterController.prototype,"send",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(U)],exports.RegisterController),exports.RoutesController=class extends exports.CrudController{model(){return f}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RoutesController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RoutesController),exports.SetupController=class extends U{setup(r){return h(this,void 0,void 0,(function*(){if(0==(yield E.count())){const e={description:"",state:!0},r=yield E.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),o=yield O.create(Object.assign({name:"admin"},e));yield R.create({userId:r.id,groupId:o.id});const s=["read","write"],i=["users","groups","routes"];yield t.forEachSeries(i,(r=>h(this,void 0,void 0,(function*(){yield t.forEachSeries(s,(t=>h(this,void 0,void 0,(function*(){const s=r+"."+t,i=yield f.create(Object.assign({name:s},e));yield P.create({groupId:o.id,routeId:i.id})}))))}))));const n=yield f.create(Object.assign({name:"logs.read"},e));yield P.create({groupId:o.id,routeId:n.id})}e.Responses.success(r,"OK")}))}},p([e.Get(),g(0,e.Res()),y("design:type",Function),y("design:paramtypes",[Object]),y("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(U)],exports.SetupController),exports.UsersController=class extends exports.ModelController{model(){return E}recordAdd(e,t,r){this.add(r,e,{},{password:c.SHA256(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(t,r,o,s){o&&o.id.toString()!=s?this.del(r,t):e.Responses.error(t,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:c.SHA256(t).toString()}:{})}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Res()),g(1,e.Req()),g(2,G()),g(3,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,E,String]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordSet",null),exports.UsersController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersController),exports.UsersGroupsController=class extends exports.ModelController{model(){return R}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(r,o,s){return h(this,void 0,void 0,(function*(){const i=yield E.findByPk(o,{attributes:["id"]}).catch(this.error);if(i){if(yield R.destroy({where:{userId:i.id}}),s){let e=0;for(let t=0;t<s.length;t++)e=yield O.count({where:{id:s[t]}}),e&&(yield R.create({userId:i.id,groupId:s[t]}))}e.Responses.success(r,"OK")}else t.isNull(i)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),g(0,e.Res()),g(1,e.Req()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",void 0)],exports.UsersGroupsController.prototype,"recordAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("groups")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.UsersGroupsController.prototype,"recordSet",null),exports.UsersGroupsController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersGroupsController),exports.Application=j,exports.Auth=_,exports.Config=B,exports.Configs=x,exports.ControllerBase=U,exports.Database=A,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=P,exports.Log=T,exports.Logs=b,exports.Permission=H,exports.Register=S,exports.ReqAuth=L,exports.ReqFiles=k,exports.ReqUser=G,exports.Route=f,exports.Session=w,exports.Token=F,exports.User=E,exports.UserGroup=R,exports.crt=N,exports.key=M,exports.sequelize=I;
+"use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),o=require("sequelize"),s=require("dotenv"),i=require("fs"),n=require("express-session"),d=require("jsonwebtoken"),a=require("mime-types"),l=require("multer"),u=require("path"),c=require("crypto-js");function p(e,t,r,o){var s,i=arguments.length,n=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var d=e.length-1;d>=0;d--)(s=e[d])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))||n);return i>3&&n&&Object.defineProperty(t,r,n),n}function g(e,t){return function(r,o){t(r,o,e)}}function y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function h(e,t,r,o){return new(r||(r=Promise))((function(s,i){function n(e){try{a(o.next(e))}catch(e){i(e)}}function d(e){try{a(o.throw(e))}catch(e){i(e)}}function a(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(n,d)}a((o=o.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,s.config();class m{static getBool(e,r){return t.toBool(m.getString(e,r.toString()))}static getInt(e,t){return parseInt(m.getString(e,t.toString()))}static getMs(e,r){return t.parseMs(m.getString(e,r))}static getString(e,t){return e in process.env?process.env[e]||"":t}}m.API_CONSOLE_ERROR=m.getBool("API_CONSOLE_ERROR",!1),m.API_DEFAULT_PATH=m.getString("API_DEFAULT_PATH","/api"),m.API_DB_DATABASE=m.getString("API_DB_DATABASE",""),m.API_DB_HOST=m.getString("API_DB_HOST","127.0.0.1"),m.API_DB_PASSWORD=m.getString("API_DB_PASSWORD",""),m.API_DB_PORT=m.getInt("API_DB_PORT",3306),m.API_DB_TYPE=m.getString("API_DB_TYPE",""),m.API_DB_USERNAME=m.getString("API_DB_USERNAME","root"),m.API_DB_LOG=m.getBool("API_DB_LOG",!1),m.API_DB_PREFIX=m.getString("API_DB_PREFIX",""),m.API_DB_TIMEZONE=m.getString("API_DB_TIMEZONE","+00:00"),m.API_HTTP_CRT=m.getString("API_HTTP_CRT",""),m.API_HTTP_KEY=m.getString("API_HTTP_KEY",""),m.API_HTTP_PORT=m.getInt("API_HTTP_PORT",3e3),m.API_HTTP_PUBLIC=m.getString("API_HTTP_PUBLIC",""),m.API_HTTP_CROSS=m.getBool("API_HTTP_CROSS",!1),m.API_HTTP_HYBRID=m.getBool("API_HTTP_HYBRID",!1),m.API_HTTP_REDIRECT=m.getString("API_HTTP_REDIRECT",""),m.API_SLEEP_AUTH=m.getMs("API_SLEEP_AUTH","2s"),m.API_SLEEP_FORGOT=m.getMs("API_SLEEP_FORGOT","5s"),m.API_SLEEP_REGISTRY=m.getMs("API_SLEEP_REGISTRY","5s"),m.API_SESSION_NAME=m.getString("API_SESSION_NAME","session.id"),m.API_SESSION_LIFETIME=m.getMs("API_SESSION_LIFETIME","1d"),m.API_SESSION_SECRET=m.getString("API_SESSION_SECRET","yoursecret"),m.API_TOKEN_CRT=m.getString("API_TOKEN_CRT",""),m.API_TOKEN_KEY=m.getString("API_TOKEN_KEY",""),m.API_TOKEN_FORGOT=m.getMs("API_TOKEN_LIFETIME","1d"),m.API_TOKEN_HEADER=m.getString("API_TOKEN_HEADER","authorization"),m.API_TOKEN_LIFETIME=m.getMs("API_TOKEN_LIFETIME","1d"),m.API_TOKEN_RENEW=m.getMs("API_TOKEN_RENEW","1d"),m.API_UPLOAD_COUNT=m.getInt("API_UPLOAD_COUNT",1),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=m.getInt("API_UPLOAD_SIZE",2),m.API_UPLOAD_TEMP=m.getString("API_UPLOAD_TEMP","./temp"),m.API_WEBSOCKET_START=m.getBool("API_WEBSOCKET_START",!1);class I{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in I)return I[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_memory(){return new o.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_mysql(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_postgres(e){return new o.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}static connect_sqlite(e){return new o.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1},timezone:m.API_DB_TIMEZONE})}}const A=I.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class v extends o.Model{}v.init({secret:o.DataTypes.STRING,logout:o.DataTypes.DATE,useragent:o.DataTypes.STRING},{sequelize:A,modelName:m.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends o.Model{}_.init({token:o.DataTypes.STRING,timestamp:o.DataTypes.BIGINT,state:o.DataTypes.BOOLEAN},{sequelize:A,modelName:m.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class P extends o.Model{}P.init({name:o.DataTypes.STRING,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:A,modelName:m.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends o.Model{}O.init({},{sequelize:A,modelName:m.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),O.removeAttribute("id");class f extends o.Model{}f.init({token:o.DataTypes.STRING,state:o.DataTypes.BOOLEAN},{sequelize:A,modelName:m.API_DB_PREFIX+"register",timestamps:!0,createdAt:"created",updatedAt:"updated"});class S extends o.Model{}S.init({name:o.DataTypes.STRING,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:A,modelName:m.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class x extends o.Model{}x.init({name:o.DataTypes.STRING,email:o.DataTypes.STRING,username:o.DataTypes.STRING,password:o.DataTypes.STRING,avatar:o.DataTypes.STRING,date:o.DataTypes.DATEONLY,description:o.DataTypes.TEXT,state:o.DataTypes.BOOLEAN},{sequelize:A,modelName:m.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class E extends o.Model{}E.init({},{sequelize:A,modelName:m.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),E.removeAttribute("id");class R extends o.Model{}R.init({key:o.DataTypes.STRING,value:o.DataTypes.STRING},{sequelize:A,modelName:m.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),R.removeAttribute("id");class T extends o.Model{}T.init({type:o.DataTypes.STRING,source:o.DataTypes.STRING,message:o.DataTypes.TEXT},{sequelize:A,modelName:m.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class w extends o.Model{}var C;w.init({session:o.DataTypes.STRING,json:o.DataTypes.TEXT,expired:o.DataTypes.BIGINT},{sequelize:A,modelName:m.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),w.removeAttribute("id"),x.hasMany(v),v.belongsTo(x),x.hasMany(_),_.belongsTo(x),x.hasMany(f),f.belongsTo(x),P.hasMany(O),O.belongsTo(P),S.hasMany(O),O.belongsTo(S),x.hasMany(E),E.belongsTo(x),P.hasMany(E),E.belongsTo(P),exports.LogsColor=void 0,(C=exports.LogsColor||(exports.LogsColor={})).ERROR="",C.INFO="",C.NONE="",C.SUCCESS="",C.WARNING="";class b{static write(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.NONE,"",e,t,r)}))}static error(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.ERROR,"error",e,t,r)}))}static info(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.INFO,"info",e,t,r)}))}static success(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.ERROR,"success",e,t,r)}))}static warning(e,t,r){return h(this,void 0,void 0,(function*(){yield b.writeRaw(exports.LogsColor.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,o){const s=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",s,"|",o)}static writeRaw(e,t,r,o,s){return h(this,void 0,void 0,(function*(){s&&b.writeConsole(e,t,r),A&&(yield T.create({type:t,source:o,message:r}).catch((()=>null)))}))}}const D=e=>i.existsSync(e)?i.readFileSync(e):void 0,N={http:D(m.API_HTTP_CRT),token:D(m.API_TOKEN_CRT)},M={http:D(m.API_HTTP_KEY),token:D(m.API_TOKEN_KEY)};class q extends n.Store{constructor(){super(),this.all=e=>h(this,void 0,void 0,(function*(){e=e||t.noop;const r=yield w.findAll({attributes:["session"],where:{expired:{[o.Op.gte]:Date.now()}}}).catch((t=>(e(t),null)));r&&e(null,r.map((e=>e.session))),e()})),this.clear=e=>h(this,void 0,void 0,(function*(){yield w.destroy().catch(t.noop),e&&e()})),this.destroy=(e,r)=>h(this,void 0,void 0,(function*(){yield w.destroy({where:{session:e}}).catch(t.noop),r&&r()})),this.expired=()=>h(this,void 0,void 0,(function*(){yield w.destroy({where:{expired:{[o.Op.lt]:Date.now()}}}).catch(t.noop)})),this.get=(e,r)=>h(this,void 0,void 0,(function*(){r=r||t.noop;const s=yield w.findOne({where:{session:e,expired:{[o.Op.gte]:Date.now()}}}).catch((e=>(r(e),null)));if(s){const e=JSON.parse(s.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield s.destroy().catch(t.noop),void r(null)}r(null,e)}else r(null)})),this.length=e=>h(this,void 0,void 0,(function*(){e&&e(null,(yield w.count().catch(t.noop))||0)})),this.set=(e,r,o)=>h(this,void 0,void 0,(function*(){o=o||t.noop;const s=Date.now()+m.API_SESSION_LIFETIME,i=JSON.stringify(r),[n,d]=(yield w.findOrCreate({where:{session:e},defaults:{session:e,json:i,expired:s}}).catch(t.noop))||[];n&&(d||(n.json=i,n.expired=s,yield n.save().catch(t.noop))),o()})),this.loop=t.loop(this.expired,3e4),this.loop.start()}}class F{static create(e){return h(this,void 0,void 0,(function*(){if(!M.token)return{error:"Key not found"};const{id:r}=e,o=t.uuidv4(),s=yield v.create({secret:o,userId:r}).catch(F.error);if(!s)return{error:"Internal Server Error"};return{auth:s,token:d.sign({id:r,secret:o},M.token,F.options())}}))}static destroy(e){return h(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){b.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:m.API_TOKEN_LIFETIME+"ms"}}static renew(e){return h(this,void 0,void 0,(function*(){if(!M.token)return{error:"Key not found"};const{error:r,decode:o}=F.verify(e,m.API_TOKEN_RENEW/1e3);if(r)return{error:r};if(o){const{id:e,secret:r}=o;if(e&&r){const o=yield x.findOne({where:{id:e,state:!0}}).catch(F.error);if(o){const s=yield v.findOne({where:{secret:r,userId:o.id}}).catch(F.error);if(s&&!s.logout){s.secret=t.uuidv4(),yield s.save().catch(F.error);return{auth:s,token:d.sign({id:e,secret:s.secret},M.token,F.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return h(this,void 0,void 0,(function*(){const{error:t,decode:r}=F.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield x.findOne({where:{id:e,state:!0}}).catch(F.error);if(r){const e=yield v.findOne({where:{secret:t,userId:r.id}}).catch(F.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!N.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:d.verify(e,N.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class B extends e.Application{constructor(e){super(e,{cert:N.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:M.http,path:m.API_DEFAULT_PATH,port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC,redirect:m.API_HTTP_REDIRECT,session:{store:new q,name:m.API_SESSION_NAME,secret:m.API_SESSION_SECRET,cookie:{maxAge:m.API_SESSION_LIFETIME},genid:t.uuidv4}})}error(e,t){b.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){b.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return h(this,void 0,void 0,(function*(){yield A.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>h(this,void 0,void 0,(function*(){r.url||(r.url="");const o=r.url.length<=1?"":r.url.replace(/\//g,".");let s;e.on("message",(t=>h(this,void 0,void 0,(function*(){if(s)try{const i=JSON.parse(t);this.emit("ws.message"+o,{data:i,message:t,req:r,user:s,ws:e})}catch(i){this.emit("ws.message"+o,{message:t,req:r,user:s,ws:e})}else{const{user:i}=yield F.user(t.toString());i&&(s=i,this.emit("ws.connection"+o,{req:r,user:s,ws:e}))}s||e.close()})))),e.on("close",(()=>{s&&this.emit("ws.close"+o,{user:s,ws:e})})),yield t.sleep(2e3),s||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return h(this,void 0,void 0,(function*(){const e=yield R.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return h(this,void 0,void 0,(function*(){return((yield R.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){b.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return h(this,void 0,void 0,(function*(){const t=yield R.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return h(this,void 0,void 0,(function*(){const[r]=(yield R.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}const L=e.parameterFactory((({req:e})=>e.auth)),k=e.parameterFactory((({req:e})=>t.toArray(e.files))),G=e.parameterFactory((({req:e})=>e.user));class U{static all(e,t){return h(this,void 0,void 0,(function*(){return yield S.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:O,required:!0,include:[{model:P,required:!0,where:{state:!0},include:[{model:E,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{b.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return h(this,void 0,void 0,(function*(){const t=yield U.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return h(this,void 0,void 0,(function*(){const r=yield U.all(e,{name:t});return!!r&&r.length>0}))}}class H extends t.EventEmitter{auth(t,r,o,s,i){return h(this,void 0,void 0,(function*(){const{auth:n,error:d,user:a}=yield F.user(o);d?e.Responses.error(r,d):n&&a?n.useragent==s?(t.auth=n,t.user=a,i()):e.Responses.error(r,"Invalid token"):e.Responses.error(r,"Internal Server Error")}))}session(e,r,o){return h(this,void 0,void 0,(function*(){r.auth&&r.user&&(r.useragent?r.useragent!=e&&r.regenerate(t.noop):(r.useragent=e,r.save(t.noop))),o()}))}error(e){b.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,o,s){return h(this,void 0,void 0,(function*(){s?(yield U.is(s,o))?r():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,o){return this.permission(t,r,(o||this.name())+".read",e)}upload(r,o,s,i){const n=(null==i?void 0:i.path)||m.API_UPLOAD_TEMP,d=l.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>h(this,void 0,void 0,(function*(){return r(null,this.uploadFile(n,a.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==i?void 0:i.size)||m.API_UPLOAD_SIZE),c=l({storage:d,fileFilter(e,r,o){var s;return h(this,void 0,void 0,(function*(){const e=null===(s=null==i?void 0:i.types)||void 0===s?void 0:s.indexOf(r.mimetype);return t.isNumber(e)&&e<0?o(new Error("File type not allowed")):o(null,!0)}))},limits:{fileSize:u}}),p=(null==i?void 0:i.count)||m.API_UPLOAD_COUNT,g=(null==i?void 0:i.field)||m.API_UPLOAD_FIELD;c.array(g,p)(r,o,(t=>t?e.Responses.error(o,t.message):s()))}uploadFile(e,r){const o=t.uuidv4()+"."+r;return i.existsSync(u.join(e,o))?this.uploadFile(e,r):o}validation(r,o,s,i){return h(this,void 0,void 0,(function*(){const{error:n,value:d}=yield t.Validation.object(i).parse().validateAsync(r.body);n?e.Responses.validation(o,n):(r.body=d,s())}))}write(e,t,r,o){return this.permission(e,t,(r||this.name())+".write",o)}}p([g(0,e.Req()),g(1,e.Res()),g(2,e.Headers(m.API_TOKEN_HEADER)),g(3,e.Headers("user-agent")),g(4,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String,Function]),y("design:returntype",Promise)],H.prototype,"auth",null),p([g(0,e.Headers("user-agent")),g(1,e.Session()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[String,Object,Function]),y("design:returntype",Promise)],H.prototype,"session",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,G()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,x]),y("design:returntype",Promise)],H.prototype,"permission",null),p([g(0,G()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[x,Object,Function,String]),y("design:returntype",Promise)],H.prototype,"read",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",void 0)],H.prototype,"upload",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),g(3,e.Argument()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function,Object]),y("design:returntype",Promise)],H.prototype,"validation",null),p([g(0,e.Res()),g(1,e.Next()),g(2,e.Argument()),g(3,G()),y("design:type",Function),y("design:paramtypes",[Object,Function,String,x]),y("design:returntype",Promise)],H.prototype,"write",null),exports.AuthController=class extends H{login(e,r,s,i,n){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const d=s,a=yield x.findOne({where:{[o.Op.or]:[{email:d},{username:s}],[o.Op.and]:[{password:c.SHA256(i).toString()}]}}).catch(this.error);if(!a)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const l=yield f.findOne({where:{state:!0,userId:a.id}}).catch(this.error);if(l)return e.error("Activation required"),n.emit("auth.activation",{ctx:e,register:l,user:a}),void this.emit("auth.activation",{ctx:e,register:l,user:a});if(!a.state)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const{auth:u,error:p,token:g}=yield F.create(a);return p?(e.error(p),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e})):u&&g?(e.data({token:g}),u.useragent=r,yield u.save().catch(this.error),n.emit("auth.login",{auth:u,ctx:e,user:a}),void this.emit("auth.login",{auth:u,ctx:e,user:a})):(e.error("Internal Server Error"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e}))}))}logout(e,t,r,o){return h(this,void 0,void 0,(function*(){if(yield F.destroy(t))return e.success("Disconcerted"),o.emit("auth.logout",{auth:t,ctx:e,user:r}),void this.emit("auth.logout",{auth:t,ctx:e,user:r});e.unauthorized("Access denied")}))}renew(e,t,r,o){return h(this,void 0,void 0,(function*(){const{auth:s,error:i,token:n}=yield F.renew(r);i?e.error(i):s?(e.data({token:n}),s.useragent=t,yield s.save().catch(this.error),o.emit("auth.renew",{auth:s,ctx:e}),this.emit("auth.renew",{auth:s,ctx:e})):e.error("Internal Server Error")}))}user(e,t){return h(this,void 0,void 0,(function*(){const r=yield U.all(t);r?e.data(Object.assign(Object.assign({},t.toJSON()),{permissions:r.map((e=>e.name))})):e.error("Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(3).required(),password:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Headers("user-agent")),g(2,e.Body("username")),g(3,e.Body("password")),g(4,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,String,B]),y("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),g(0,e.Ctx()),g(1,L()),g(2,G()),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,v,x,B]),y("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Post("/renew"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Ctx()),g(1,e.Headers("user-agent")),g(2,e.Body("token")),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,B]),y("design:returntype",Promise)],exports.AuthController.prototype,"renew",null),p([e.Get(),e.Middleware("auth"),g(0,e.Ctx()),g(1,G()),y("design:type",Function),y("design:paramtypes",[e.Context,x]),y("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(H)],exports.AuthController),exports.ForgotController=class extends H{check(r,o){return h(this,void 0,void 0,(function*(){const{token:s}=o.body,i=yield this.findOne(s);i&&i.user?(i.token=t.uniqueID(),yield i.save(),e.Responses.data(r,{token:i.token})):e.Responses.notfound(r,"User not found")}))}forgot(e,r,s){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_FORGOT);const i=r,n=yield x.findOne({where:{[o.Op.or]:[{email:i},{username:r}]}}).catch(this.error);if(!n)return void e.notFound("User not found");const d=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_FORGOT,l=yield _.create({token:d,timestamp:a,state:!0,userId:n.id});s.emit("forgot.send",{ctx:e,forgot:l,user:n}),this.emit("forgot.send",{ctx:e,forgot:l,user:n}),e.success("OK")}))}reset(e,t,r,o){return h(this,void 0,void 0,(function*(){const s=yield this.findOne(t);s?(s.state=!1,yield s.save().catch(this.error),s.user.password=c.SHA256(r).toString(),yield s.user.save().catch(this.error),o.emit("forgot.reset",{ctx:e,user:s.user}),this.emit("forgot.reset",{ctx:e,user:s.user}),e.success("OK")):e.notFound("User not found")}))}findOne(e){return h(this,void 0,void 0,(function*(){return yield _.findOne({where:{token:e,state:!0},include:[{model:x,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Post(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),g(0,e.Ctx()),g(1,e.Body("username")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,B]),y("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Post("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body("token")),g(2,e.Body("password")),g(3,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,B]),y("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(H)],exports.ForgotController),exports.ModelController=class extends H{add(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=yield this.model().create(Object.assign(Object.assign({},t.body),s||{}),o||{}).catch(this.error);if(i){const t=this.key();return e.Responses.data(r,{[t]:i.getDataValue(t)}),i}e.Responses.error(r,"Internal Server Error")}))}all(r,s,i,n){var d,a,l,u,c;return h(this,void 0,void 0,(function*(){const p=this.model(),g=Object.assign({},i||{});g.where=Object.assign({},g.where||{});const y=null===(d=r.query.limit)||void 0===d?void 0:d.toString();y&&(g.limit=parseInt(y));const h=null===(a=r.query.offset)||void 0===a?void 0:a.toString();h&&(g.offset=parseInt(h));const m=Object.keys(p.getAttributes()),I=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{m.indexOf(e)>=0&&I.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{m.indexOf(e)>=0&&I.push([e,"DESC"])})),I.length&&(g.order=I);const _=[],P=t.isArray(g.attributes)?g.attributes:m,O=null===(c=r.query.search)||void 0===c?void 0:c.toString();P.forEach((e=>{var s;if(t.isString(e)&&(O&&O.length&&_.push({[e]:{[o.Op.like]:`%${O}%`}}),"search_"+e in r.query)){const t=null===(s=r.query["search_"+e])||void 0===s?void 0:s.toString();t&&t.length&&_.push({[e]:{[o.Op.like]:`%${t}%`}})}})),_.length&&(g.where=Object.assign(Object.assign({},g.where),{[o.Op.or]:[..._]}));const f=(yield p.count(Object.assign(Object.assign({},g),{col:m[0]})).catch(this.error))||0,S=yield p.findAll(g).catch(this.error);if(S)return e.Responses.data(s,{count:f,records:n?yield n(S):S}),S;e.Responses.error(s,"Internal Server Error")}))}del(t,r,o){return h(this,void 0,void 0,(function*(){const s=this.key(),{[s]:i}=t.params;if(!i)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[s]:i})})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?b.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=t.params,d=yield this.model().findOne(Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[i]:n})})).catch(this.error);if(d)return e.Responses.data(r,s?yield s(d):d.toJSON()),d;null!==d?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(t,r,o,s){return h(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=t.params,[d]=(yield this.model().update(Object.assign(Object.assign({},t.body),s||{}),Object.assign(Object.assign({},o||{}),{where:Object.assign(Object.assign({},(o||{}).where),{[i]:n})})).catch(this.error))||[];return d?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(H)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),g(0,e.Req()),g(1,e.Res()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([g(0,e.Req()),g(1,e.Res()),g(2,e.Next()),y("design:type",Function),y("design:paramtypes",[Object,Object,Function]),y("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupsController=class extends exports.CrudController{model(){return P}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupsController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupsController),exports.GroupsRoutesController=class extends exports.ModelController{model(){return O}recordAll(e,t,r){return h(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:S,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(r,o,s){return h(this,void 0,void 0,(function*(){const i=yield P.findByPk(o,{attributes:["id"]}).catch(this.error);if(i){const t=i.id;if(yield O.destroy({where:{groupId:t}}),s){let e=0;for(let r=0;r<s.length;r++)e=yield S.count({where:{id:s[r]}}),e&&(yield O.create({groupId:t,routeId:s[r]}))}e.Responses.success(r,"OK")}else t.isNull(i)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),g(0,e.Req()),g(1,e.Res()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("routes")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.GroupsRoutesController.prototype,"recordSet",null),exports.GroupsRoutesController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupsRoutesController),exports.LogsController=class extends exports.ModelController{model(){return T}recordAll(e,t,r,o){const s={};r&&(s.type=r),o&&(s.source=o),this.all(e,t,{where:s,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Req()),g(1,e.Res()),g(2,e.Query("type")),g(3,e.Query("source")),y("design:type",Function),y("design:paramtypes",[Object,Object,String,String]),y("design:returntype",void 0)],exports.LogsController.prototype,"recordAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController),exports.RegisterController=class extends H{register(e,r,s){return h(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const{name:i,date:n,email:d,username:a,password:l,confirm:u}=r,p=a||d,g=c.SHA256(l).toString();if(yield x.count({where:{[o.Op.or]:[{email:d},{username:p}]}}).catch(this.error))return void e.validation("Invalid email or username");if(g!=c.SHA256(u).toString())return void e.error("Invalid password");const y=yield x.create({name:i,email:d,username:p,password:g,avatar:"",date:n,description:"",state:!1}).catch(this.error);if(!y)return void e.error("Internal Server Error");const h=yield f.create({token:yield this.getId(),userId:y.id,state:!0}).catch(this.error);if(!h)return y.destroy(),void e.error("Internal Server Error");e.success("OK"),s.emit("register.user",{ctx:e,register:h,user:y}),this.emit("register.user",{ctx:e,register:h,user:y})}))}confirm(e,t,r){return h(this,void 0,void 0,(function*(){const o=yield f.findOne({where:{token:t,state:!0},include:[{model:x,required:!0}]}).catch(this.error);o?(o.state=!1,yield o.save().catch(this.error),o.user.state=!0,yield o.user.save().catch(this.error),e.success("OK"),r.emit("register.confirm",{ctx:e,register:o,user:o.user}),this.emit("register.confirm",{ctx:e,register:o,user:o.user})):e.notFound("User not found")}))}send(e,t,r){return h(this,void 0,void 0,(function*(){const s=t,i=yield f.findOne({where:{state:!0},include:[{model:x,required:!0,where:{[o.Op.or]:[{email:s},{username:t}]}}]}).catch(this.error);i?(e.success("OK"),r.emit("register.send",{ctx:e,register:i,user:i.user}),this.emit("register.send",{ctx:e,register:i,user:i.user})):e.notFound("User not found")}))}getId(){return h(this,void 0,void 0,(function*(){const e=t.uuidv4();return(yield f.count({where:{token:e}}))?this.getId():e}))}},p([e.Post(),e.Middleware("validation",{name:t.Validation.string().required(),date:t.Validation.string().date().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).required(),confirm:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body()),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,Object,B]),y("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),p([e.Post("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),g(0,e.Ctx()),g(1,e.Body("token")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,B]),y("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Post("/send"),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),g(0,e.Ctx()),g(1,e.Body("username")),g(2,e.App()),y("design:type",Function),y("design:paramtypes",[e.Context,String,B]),y("design:returntype",Promise)],exports.RegisterController.prototype,"send",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(H)],exports.RegisterController),exports.RoutesController=class extends exports.CrudController{model(){return S}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RoutesController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RoutesController),exports.SetupController=class extends H{setup(r){return h(this,void 0,void 0,(function*(){if(0==(yield x.count())){const e={description:"",state:!0},r=yield x.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),o=yield P.create(Object.assign({name:"admin"},e));yield E.create({userId:r.id,groupId:o.id});const s=["read","write"],i=["users","groups","routes"];yield t.forEachSeries(i,(r=>h(this,void 0,void 0,(function*(){yield t.forEachSeries(s,(t=>h(this,void 0,void 0,(function*(){const s=r+"."+t,i=yield S.create(Object.assign({name:s},e));yield O.create({groupId:o.id,routeId:i.id})}))))}))));const n=yield S.create(Object.assign({name:"logs.read"},e));yield O.create({groupId:o.id,routeId:n.id})}e.Responses.success(r,"OK")}))}},p([e.Get(),g(0,e.Res()),y("design:type",Function),y("design:paramtypes",[Object]),y("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(H)],exports.SetupController),exports.UsersController=class extends exports.ModelController{model(){return x}constructor(){if(super(),m.API_HTTP_PUBLIC){const e=m.API_HTTP_PUBLIC+"/avatar";i.existsSync(m.API_HTTP_PUBLIC)&&!i.existsSync(e)&&i.mkdirSync(e)}}avatar(e,r){return h(this,void 0,void 0,(function*(){if(t.isArray(e.req.files)&&e.req.files.length){const t=e.req.files[0].filename||"";if(t){const o=m.API_HTTP_PUBLIC+"/avatar/";if(i.existsSync(o+r.avatar)&&i.lstatSync(o+r.avatar).isFile()&&i.rmSync(o+r.avatar),r.avatar=t,yield r.save().catch(this.error))return void e.success("OK")}}e.success("Record not changed")}))}password(e,t,r,o){return h(this,void 0,void 0,(function*(){const s=yield x.scope("password").findOne({where:{id:o.id,password:c.SHA256(t).toString(),state:!0}}).catch(this.error);s?(s.password=c.SHA256(r).toString(),(yield s.save().catch(this.error))?e.success("OK"):e.success("Record not changed")):e.error("Record not changed")}))}recordAdd(e,t,r){this.add(r,e,{},{password:c.SHA256(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(t,r,o,s){o&&o.id.toString()!=s?this.del(r,t):e.Responses.error(t,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:c.SHA256(t).toString()}:{})}},p([e.Post("/avatar"),e.Middleware("auth"),e.Middleware("upload",{count:1,field:"file",path:m.API_HTTP_PUBLIC+"/avatar",types:["image/bmp","image/jpeg","image/png"],size:20}),g(0,e.Ctx()),g(1,G()),y("design:type",Function),y("design:paramtypes",[e.Context,x]),y("design:returntype",Promise)],exports.UsersController.prototype,"avatar",null),p([e.Post("/password"),e.Middleware("auth"),e.Middleware("validation",{oldPassword:t.Validation.string().min(5).required(),newPassword:t.Validation.string().min(5).required()}),g(0,e.Ctx()),g(1,e.Body("oldPassword")),g(2,e.Body("newPassword")),g(3,G()),y("design:type",Function),y("design:paramtypes",[e.Context,String,String,x]),y("design:returntype",Promise)],exports.UsersController.prototype,"password",null),p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),g(0,e.Res()),g(1,e.Req()),g(2,G()),g(3,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,x,String]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),g(0,e.Res()),g(1,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),g(0,e.Res()),g(1,e.Body("password")),g(2,e.Req()),y("design:type",Function),y("design:paramtypes",[Object,String,Object]),y("design:returntype",void 0)],exports.UsersController.prototype,"recordSet",null),exports.UsersController=p([e.Controller("/users"),e.Extends(exports.ModelController),y("design:paramtypes",[])],exports.UsersController),exports.UsersGroupsController=class extends exports.ModelController{model(){return E}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:P,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(r,o,s){return h(this,void 0,void 0,(function*(){const i=yield x.findByPk(o,{attributes:["id"]}).catch(this.error);if(i){if(yield E.destroy({where:{userId:i.id}}),s){let e=0;for(let t=0;t<s.length;t++)e=yield P.count({where:{id:s[t]}}),e&&(yield E.create({userId:i.id,groupId:s[t]}))}e.Responses.success(r,"OK")}else t.isNull(i)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),g(0,e.Res()),g(1,e.Req()),g(2,e.Params("id")),y("design:type",Function),y("design:paramtypes",[Object,Object,String]),y("design:returntype",void 0)],exports.UsersGroupsController.prototype,"recordAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),g(0,e.Res()),g(1,e.Params("id")),g(2,e.Body("groups")),y("design:type",Function),y("design:paramtypes",[Object,String,Array]),y("design:returntype",Promise)],exports.UsersGroupsController.prototype,"recordSet",null),exports.UsersGroupsController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UsersGroupsController),exports.Application=B,exports.Auth=v,exports.Config=j,exports.Configs=R,exports.ControllerBase=H,exports.Database=I,exports.Env=m,exports.Forgot=_,exports.Group=P,exports.GroupRoute=O,exports.Log=T,exports.Logs=b,exports.Permission=U,exports.Register=f,exports.ReqAuth=L,exports.ReqFiles=k,exports.ReqUser=G,exports.Route=S,exports.Session=w,exports.Token=F,exports.User=x,exports.UserGroup=E,exports.crt=N,exports.key=M,exports.sequelize=A;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 /*!
- * @andrewcaires/api v3.0.14
+ * @andrewcaires/api v3.0.15
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2024 Andrew Caires
  * @license: MIT
@@ -166,7 +166,6 @@ declare class AuthController extends ControllerBase {
     protected login(ctx: Context, useragent: string, username: string, password: string, app: Application): Promise<void>;
     protected logout(ctx: Context, auth: Auth, user: User, app: Application): Promise<void>;
     protected renew(ctx: Context, useragent: string, old: string, app: Application): Promise<void>;
-    protected update(ctx: Context, oldPassword: string, newPassword: string, user: User): Promise<void>;
     protected user(ctx: Context, user: User): Promise<void>;
 }
 
@@ -239,6 +238,9 @@ declare class SetupController extends ControllerBase {
 
 declare class UsersController extends ModelController<User> {
     model(): typeof User;
+    constructor();
+    avatar(ctx: Context, user: User): Promise<void>;
+    protected password(ctx: Context, oldPassword: string, newPassword: string, user: User): Promise<void>;
     recordAdd(res: Response, password: string, req: Request): void;
     protected recordAll(res: Response, req: Request): void;
     protected recordDel(res: Response, req: Request, user: User, id: string): void;

package/dist/index.esm.js

@@ -1,7 +1,7 @@
 /*!
- * @andrewcaires/api v3.0.14
+ * @andrewcaires/api v3.0.15
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket 
  * (c) 2024 Andrew Caires
  * @license: MIT
  */
-import{Application as e,parameterFactory as t,Req as r,Res as i,Headers as n,Next as s,Session as o,Argument as d,Responses as a,Post as c,Middleware as u,Ctx as l,Body as p,App as g,Get as m,Controller as h,Extends as y,Context as I,Delete as _,Put as v,Params as O,Query as f}from"@andrewcaires/express";import{toBool as A,parseMs as P,dateFormat as S,noop as E,loop as T,uuidv4 as w,sleep as b,toArray as R,EventEmitter as N,isNumber as D,Validation as j,uniqueID as F,isArray as B,isString as x,isNull as k,forEachSeries as q}from"@andrewcaires/utils.js";import L from"ws";import{Sequelize as C,DataTypes as K,Model as M,Op as G}from"sequelize";import{config as H}from"dotenv";import{existsSync as U,readFileSync as z}from"fs";import{Store as X}from"express-session";import{verify as Y,sign as W}from"jsonwebtoken";import{extension as Z}from"mime-types";import J from"multer";import{join as $}from"path";import{SHA256 as V}from"crypto-js";function Q(e,t,r,i){var n,s=arguments.length,o=s<3?t:null===i?i=Object.getOwnPropertyDescriptor(t,r):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,i);else for(var d=e.length-1;d>=0;d--)(n=e[d])&&(o=(s<3?n(o):s>3?n(t,r,o):n(t,r))||o);return s>3&&o&&Object.defineProperty(t,r,o),o}function ee(e,t){return function(r,i){t(r,i,e)}}function te(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function re(e,t,r,i){return new(r||(r=Promise))((function(n,s){function o(e){try{a(i.next(e))}catch(e){s(e)}}function d(e){try{a(i.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?n(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((i=i.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,H();class ie{static getBool(e,t){return A(ie.getString(e,t.toString()))}static getInt(e,t){return parseInt(ie.getString(e,t.toString()))}static getMs(e,t){return P(ie.getString(e,t))}static getString(e,t){return e in process.env?process.env[e]||"":t}}ie.API_CONSOLE_ERROR=ie.getBool("API_CONSOLE_ERROR",!1),ie.API_DEFAULT_PATH=ie.getString("API_DEFAULT_PATH","/api"),ie.API_DB_DATABASE=ie.getString("API_DB_DATABASE",""),ie.API_DB_HOST=ie.getString("API_DB_HOST","127.0.0.1"),ie.API_DB_PASSWORD=ie.getString("API_DB_PASSWORD",""),ie.API_DB_PORT=ie.getInt("API_DB_PORT",3306),ie.API_DB_TYPE=ie.getString("API_DB_TYPE",""),ie.API_DB_USERNAME=ie.getString("API_DB_USERNAME","root"),ie.API_DB_LOG=ie.getBool("API_DB_LOG",!1),ie.API_DB_PREFIX=ie.getString("API_DB_PREFIX",""),ie.API_DB_TIMEZONE=ie.getString("API_DB_TIMEZONE","+00:00"),ie.API_HTTP_CRT=ie.getString("API_HTTP_CRT",""),ie.API_HTTP_KEY=ie.getString("API_HTTP_KEY",""),ie.API_HTTP_PORT=ie.getInt("API_HTTP_PORT",3e3),ie.API_HTTP_PUBLIC=ie.getString("API_HTTP_PUBLIC",""),ie.API_HTTP_CROSS=ie.getBool("API_HTTP_CROSS",!1),ie.API_HTTP_HYBRID=ie.getBool("API_HTTP_HYBRID",!1),ie.API_HTTP_REDIRECT=ie.getString("API_HTTP_REDIRECT",""),ie.API_SLEEP_AUTH=ie.getMs("API_SLEEP_AUTH","2s"),ie.API_SLEEP_FORGOT=ie.getMs("API_SLEEP_FORGOT","5s"),ie.API_SLEEP_REGISTRY=ie.getMs("API_SLEEP_REGISTRY","5s"),ie.API_SESSION_NAME=ie.getString("API_SESSION_NAME","session.id"),ie.API_SESSION_LIFETIME=ie.getMs("API_SESSION_LIFETIME","1d"),ie.API_SESSION_SECRET=ie.getString("API_SESSION_SECRET","yoursecret"),ie.API_TOKEN_CRT=ie.getString("API_TOKEN_CRT",""),ie.API_TOKEN_KEY=ie.getString("API_TOKEN_KEY",""),ie.API_TOKEN_FORGOT=ie.getMs("API_TOKEN_LIFETIME","1d"),ie.API_TOKEN_HEADER=ie.getString("API_TOKEN_HEADER","authorization"),ie.API_TOKEN_LIFETIME=ie.getMs("API_TOKEN_LIFETIME","1d"),ie.API_TOKEN_RENEW=ie.getMs("API_TOKEN_RENEW","1d"),ie.API_UPLOAD_COUNT=ie.getInt("API_UPLOAD_COUNT",1),ie.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",ie.API_UPLOAD_SIZE=ie.getInt("API_UPLOAD_SIZE",2),ie.API_UPLOAD_TEMP=ie.getString("API_UPLOAD_TEMP","./temp"),ie.API_WEBSOCKET_START=ie.getBool("API_WEBSOCKET_START",!1);class ne{static connect(e){const t="connect_"+ie.API_DB_TYPE.toLowerCase();if(t in ne)return ne[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:ie.API_DB_LOG,define:{timestamps:!1},timezone:ie.API_DB_TIMEZONE})}static connect_memory(){return new C("sqlite::memory:",{logging:ie.API_DB_LOG,define:{timestamps:!1},timezone:ie.API_DB_TIMEZONE})}static connect_mysql(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:ie.API_DB_LOG,define:{timestamps:!1},timezone:ie.API_DB_TIMEZONE})}static connect_postgres(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:ie.API_DB_LOG,define:{timestamps:!1},timezone:ie.API_DB_TIMEZONE})}static connect_sqlite(e){return new C({dialect:"sqlite",storage:e.database,logging:ie.API_DB_LOG,define:{timestamps:!1},timezone:ie.API_DB_TIMEZONE})}}const se=ne.connect({database:ie.API_DB_DATABASE,username:ie.API_DB_USERNAME,password:ie.API_DB_PASSWORD,hostname:ie.API_DB_HOST,hostport:ie.API_DB_PORT});class oe extends M{}oe.init({secret:K.STRING,logout:K.DATE,useragent:K.STRING},{sequelize:se,modelName:ie.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class de extends M{}de.init({token:K.STRING,timestamp:K.BIGINT,state:K.BOOLEAN},{sequelize:se,modelName:ie.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ae extends M{}ae.init({name:K.STRING,description:K.TEXT,state:K.BOOLEAN},{sequelize:se,modelName:ie.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ce extends M{}ce.init({},{sequelize:se,modelName:ie.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),ce.removeAttribute("id");class ue extends M{}ue.init({token:K.STRING,state:K.BOOLEAN},{sequelize:se,modelName:ie.API_DB_PREFIX+"register",timestamps:!0,createdAt:"created",updatedAt:"updated"});class le extends M{}le.init({name:K.STRING,description:K.TEXT,state:K.BOOLEAN},{sequelize:se,modelName:ie.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class pe extends M{}pe.init({name:K.STRING,email:K.STRING,username:K.STRING,password:K.STRING,avatar:K.STRING,date:K.DATEONLY,description:K.TEXT,state:K.BOOLEAN},{sequelize:se,modelName:ie.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class ge extends M{}ge.init({},{sequelize:se,modelName:ie.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),ge.removeAttribute("id");class me extends M{}me.init({key:K.STRING,value:K.STRING},{sequelize:se,modelName:ie.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),me.removeAttribute("id");class he extends M{}he.init({type:K.STRING,source:K.STRING,message:K.TEXT},{sequelize:se,modelName:ie.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class ye extends M{}var Ie;ye.init({session:K.STRING,json:K.TEXT,expired:K.BIGINT},{sequelize:se,modelName:ie.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ye.removeAttribute("id"),pe.hasMany(oe),oe.belongsTo(pe),pe.hasMany(de),de.belongsTo(pe),pe.hasMany(ue),ue.belongsTo(pe),ae.hasMany(ce),ce.belongsTo(ae),le.hasMany(ce),ce.belongsTo(le),pe.hasMany(ge),ge.belongsTo(pe),ae.hasMany(ge),ge.belongsTo(ae),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(Ie||(Ie={}));class _e{static write(e,t,r){return re(this,void 0,void 0,(function*(){yield _e.writeRaw(Ie.NONE,"",e,t,r)}))}static error(e,t,r){return re(this,void 0,void 0,(function*(){yield _e.writeRaw(Ie.ERROR,"error",e,t,r)}))}static info(e,t,r){return re(this,void 0,void 0,(function*(){yield _e.writeRaw(Ie.INFO,"info",e,t,r)}))}static success(e,t,r){return re(this,void 0,void 0,(function*(){yield _e.writeRaw(Ie.ERROR,"success",e,t,r)}))}static warning(e,t,r){return re(this,void 0,void 0,(function*(){yield _e.writeRaw(Ie.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const i=S(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",i,"|",r)}static writeRaw(e,t,r,i,n){return re(this,void 0,void 0,(function*(){n&&_e.writeConsole(e,t,r),se&&(yield he.create({type:t,source:i,message:r}).catch((()=>null)))}))}}const ve=e=>U(e)?z(e):void 0,Oe={http:ve(ie.API_HTTP_CRT),token:ve(ie.API_TOKEN_CRT)},fe={http:ve(ie.API_HTTP_KEY),token:ve(ie.API_TOKEN_KEY)};class Ae extends X{constructor(){super(),this.all=e=>re(this,void 0,void 0,(function*(){e=e||E;const t=yield ye.findAll({attributes:["session"],where:{expired:{[G.gte]:Date.now()}}}).catch((t=>(e(t),null)));t&&e(null,t.map((e=>e.session))),e()})),this.clear=e=>re(this,void 0,void 0,(function*(){yield ye.destroy().catch(E),e&&e()})),this.destroy=(e,t)=>re(this,void 0,void 0,(function*(){yield ye.destroy({where:{session:e}}).catch(E),t&&t()})),this.expired=()=>re(this,void 0,void 0,(function*(){yield ye.destroy({where:{expired:{[G.lt]:Date.now()}}}).catch(E)})),this.get=(e,t)=>re(this,void 0,void 0,(function*(){t=t||E;const r=yield ye.findOne({where:{session:e,expired:{[G.gte]:Date.now()}}}).catch((e=>(t(e),null)));if(r){const e=JSON.parse(r.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield r.destroy().catch(E),void t(null)}t(null,e)}else t(null)})),this.length=e=>re(this,void 0,void 0,(function*(){e&&e(null,(yield ye.count().catch(E))||0)})),this.set=(e,t,r)=>re(this,void 0,void 0,(function*(){r=r||E;const i=Date.now()+ie.API_SESSION_LIFETIME,n=JSON.stringify(t),[s,o]=(yield ye.findOrCreate({where:{session:e},defaults:{session:e,json:n,expired:i}}).catch(E))||[];s&&(o||(s.json=n,s.expired=i,yield s.save().catch(E))),r()})),this.loop=T(this.expired,3e4),this.loop.start()}}class Pe{static create(e){return re(this,void 0,void 0,(function*(){if(!fe.token)return{error:"Key not found"};const{id:t}=e,r=w(),i=yield oe.create({secret:r,userId:t}).catch(Pe.error);if(!i)return{error:"Internal Server Error"};return{auth:i,token:W({id:t,secret:r},fe.token,Pe.options())}}))}static destroy(e){return re(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){_e.error(e.message,"api.token",ie.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:ie.API_TOKEN_LIFETIME+"ms"}}static renew(e){return re(this,void 0,void 0,(function*(){if(!fe.token)return{error:"Key not found"};const{error:t,decode:r}=Pe.verify(e,ie.API_TOKEN_RENEW/1e3);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield pe.findOne({where:{id:e,state:!0}}).catch(Pe.error);if(r){const i=yield oe.findOne({where:{secret:t,userId:r.id}}).catch(Pe.error);if(i&&!i.logout){i.secret=w(),yield i.save().catch(Pe.error);return{auth:i,token:W({id:e,secret:i.secret},fe.token,Pe.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return re(this,void 0,void 0,(function*(){const{error:t,decode:r}=Pe.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield pe.findOne({where:{id:e,state:!0}}).catch(Pe.error);if(r){const e=yield oe.findOne({where:{secret:t,userId:r.id}}).catch(Pe.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!Oe.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:Y(e,Oe.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class Se extends e{constructor(e){super(e,{cert:Oe.http,cross:ie.API_HTTP_CROSS,hybrid:ie.API_HTTP_HYBRID,key:fe.http,path:ie.API_DEFAULT_PATH,port:ie.API_HTTP_PORT,public:ie.API_HTTP_PUBLIC,redirect:ie.API_HTTP_REDIRECT,session:{store:new Ae,name:ie.API_SESSION_NAME,secret:ie.API_SESSION_SECRET,cookie:{maxAge:ie.API_SESSION_LIFETIME},genid:w}})}error(e,t){_e.info(e.message,t,ie.API_CONSOLE_ERROR)}log(e,t){_e.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return re(this,void 0,void 0,(function*(){yield se.sync(),yield e.listen.call(this),ie.API_WEBSOCKET_START&&this.server&&(this._webSocket=new L.Server({server:this.server,verifyClient:(e,t)=>t(ie.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>re(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let i;e.on("message",(n=>re(this,void 0,void 0,(function*(){if(i)try{const s=JSON.parse(n);this.emit("ws.message"+r,{data:s,message:n,req:t,user:i,ws:e})}catch(s){this.emit("ws.message"+r,{message:n,req:t,user:i,ws:e})}else{const{user:s}=yield Pe.user(n.toString());s&&(i=s,this.emit("ws.connection"+r,{req:t,user:i,ws:e}))}i||e.close()})))),e.on("close",(()=>{i&&this.emit("ws.close"+r,{user:i,ws:e})})),yield b(2e3),i||e.close()})))))}))}websocket(){return this._webSocket}}class Ee{static all(){return re(this,void 0,void 0,(function*(){const e=yield me.findAll().catch(Ee.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return re(this,void 0,void 0,(function*(){return((yield me.destroy({where:{key:e}}).catch(Ee.error))||0)>0}))}static error(e){_e.error(e.message,"api.config",ie.API_CONSOLE_ERROR)}static get(e){return re(this,void 0,void 0,(function*(){const t=yield me.findOne({where:{key:e}}).catch(Ee.error);return t&&t.value||""}))}static set(e,t){return re(this,void 0,void 0,(function*(){const[r]=(yield me.findOrCreate({where:{key:e}}).catch(Ee.error))||[];r&&(r.value=t,yield r.save().catch(Ee.error))}))}}const Te=t((({req:e})=>e.auth)),we=t((({req:e})=>R(e.files))),be=t((({req:e})=>e.user));class Re{static all(e,t){return re(this,void 0,void 0,(function*(){return yield le.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:ce,required:!0,include:[{model:ae,required:!0,where:{state:!0},include:[{model:ge,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{_e.error(e.message,"api.permission",ie.API_CONSOLE_ERROR)}))}))}static get(e){return re(this,void 0,void 0,(function*(){const t=yield Re.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return re(this,void 0,void 0,(function*(){const r=yield Re.all(e,{name:t});return!!r&&r.length>0}))}}class Ne extends N{auth(e,t,r,i,n){return re(this,void 0,void 0,(function*(){const{auth:s,error:o,user:d}=yield Pe.user(r);o?a.error(t,o):s&&d?s.useragent==i?(e.auth=s,e.user=d,n()):a.error(t,"Invalid token"):a.error(t,"Internal Server Error")}))}session(e,t,r){return re(this,void 0,void 0,(function*(){t.auth&&t.user&&(t.useragent?t.useragent!=e&&t.regenerate(E):(t.useragent=e,t.save(E))),r()}))}error(e){_e.error(e.message,"api.controller",ie.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,i){return re(this,void 0,void 0,(function*(){i?(yield Re.is(i,r))?t():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,i){return this.permission(t,r,(i||this.name())+".read",e)}upload(e,t,r,i){const n=(null==i?void 0:i.path)||ie.API_UPLOAD_TEMP,s=J.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>re(this,void 0,void 0,(function*(){return r(null,this.uploadFile(n,Z(t.mimetype)||"bin"))}))}),o=1e6*((null==i?void 0:i.size)||ie.API_UPLOAD_SIZE),d=J({storage:s,fileFilter(e,t,r){var n;return re(this,void 0,void 0,(function*(){const e=null===(n=null==i?void 0:i.types)||void 0===n?void 0:n.indexOf(t.mimetype);return D(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),c=(null==i?void 0:i.count)||ie.API_UPLOAD_COUNT,u=(null==i?void 0:i.field)||ie.API_UPLOAD_FIELD;d.array(u,c)(e,t,(e=>e?a.error(t,e.message):r()))}uploadFile(e,t){const r=w()+"."+t;return U($(e,r))?this.uploadFile(e,t):r}validation(e,t,r,i){return re(this,void 0,void 0,(function*(){const{error:n,value:s}=yield j.object(i).parse().validateAsync(e.body);n?a.validation(t,n):(e.body=s,r())}))}write(e,t,r,i){return this.permission(e,t,(r||this.name())+".write",i)}}Q([ee(0,r()),ee(1,i()),ee(2,n(ie.API_TOKEN_HEADER)),ee(3,n("user-agent")),ee(4,s()),te("design:type",Function),te("design:paramtypes",[Object,Object,String,String,Function]),te("design:returntype",Promise)],Ne.prototype,"auth",null),Q([ee(0,n("user-agent")),ee(1,o()),ee(2,s()),te("design:type",Function),te("design:paramtypes",[String,Object,Function]),te("design:returntype",Promise)],Ne.prototype,"session",null),Q([ee(0,i()),ee(1,s()),ee(2,d()),ee(3,be()),te("design:type",Function),te("design:paramtypes",[Object,Function,String,pe]),te("design:returntype",Promise)],Ne.prototype,"permission",null),Q([ee(0,be()),ee(1,i()),ee(2,s()),ee(3,d()),te("design:type",Function),te("design:paramtypes",[pe,Object,Function,String]),te("design:returntype",Promise)],Ne.prototype,"read",null),Q([ee(0,r()),ee(1,i()),ee(2,s()),ee(3,d()),te("design:type",Function),te("design:paramtypes",[Object,Object,Function,Object]),te("design:returntype",void 0)],Ne.prototype,"upload",null),Q([ee(0,r()),ee(1,i()),ee(2,s()),ee(3,d()),te("design:type",Function),te("design:paramtypes",[Object,Object,Function,Object]),te("design:returntype",Promise)],Ne.prototype,"validation",null),Q([ee(0,i()),ee(1,s()),ee(2,d()),ee(3,be()),te("design:type",Function),te("design:paramtypes",[Object,Function,String,pe]),te("design:returntype",Promise)],Ne.prototype,"write",null);let De=class extends Ne{login(e,t,r,i,n){return re(this,void 0,void 0,(function*(){yield b(ie.API_SLEEP_AUTH);const s=r,o=yield pe.findOne({where:{[G.or]:[{email:s},{username:r}],[G.and]:[{password:V(i).toString()}]}}).catch(this.error);if(!o)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const d=yield ue.findOne({where:{state:!0,userId:o.id}}).catch(this.error);if(d)return e.error("Activation required"),n.emit("auth.activation",{ctx:e,register:d,user:o}),void this.emit("auth.activation",{ctx:e,register:d,user:o});if(!o.state)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const{auth:a,error:c,token:u}=yield Pe.create(o);return c?(e.error(c),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e})):a&&u?(e.data({token:u}),a.useragent=t,yield a.save().catch(this.error),n.emit("auth.login",{auth:a,ctx:e,user:o}),void this.emit("auth.login",{auth:a,ctx:e,user:o})):(e.error("Internal Server Error"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e}))}))}logout(e,t,r,i){return re(this,void 0,void 0,(function*(){if(yield Pe.destroy(t))return e.success("Disconcerted"),i.emit("auth.logout",{auth:t,ctx:e,user:r}),void this.emit("auth.logout",{auth:t,ctx:e,user:r});e.unauthorized("Access denied")}))}renew(e,t,r,i){return re(this,void 0,void 0,(function*(){const{auth:n,error:s,token:o}=yield Pe.renew(r);s?e.error(s):n?(e.data({token:o}),n.useragent=t,yield n.save().catch(this.error),i.emit("auth.renew",{auth:n,ctx:e}),this.emit("auth.renew",{auth:n,ctx:e})):e.error("Internal Server Error")}))}update(e,t,r,i){return re(this,void 0,void 0,(function*(){const n=yield pe.scope("password").findOne({where:{id:i.id,password:V(t).toString(),state:!0}}).catch(this.error);n?(n.password=V(r).toString(),(yield n.save().catch(this.error))?e.success("OK"):e.success("Record not changed")):e.error("Record not changed")}))}user(e,t){return re(this,void 0,void 0,(function*(){const r=yield Re.all(t);r?e.data(Object.assign(Object.assign({},t.toJSON()),{permissions:r.map((e=>e.name))})):e.error("Internal Server Error")}))}};Q([c("/login"),u("validation",{username:j.string().min(3).required(),password:j.string().min(5).required()}),ee(0,l()),ee(1,n("user-agent")),ee(2,p("username")),ee(3,p("password")),ee(4,g()),te("design:type",Function),te("design:paramtypes",[I,String,String,String,Se]),te("design:returntype",Promise)],De.prototype,"login",null),Q([m("/logout"),u("auth"),ee(0,l()),ee(1,Te()),ee(2,be()),ee(3,g()),te("design:type",Function),te("design:paramtypes",[I,oe,pe,Se]),te("design:returntype",Promise)],De.prototype,"logout",null),Q([c("/renew"),u("validation",{token:j.string().required()}),ee(0,l()),ee(1,n("user-agent")),ee(2,p("token")),ee(3,g()),te("design:type",Function),te("design:paramtypes",[I,String,String,Se]),te("design:returntype",Promise)],De.prototype,"renew",null),Q([c("/update"),u("auth"),u("validation",{oldPassword:j.string().min(5).required(),newPassword:j.string().min(5).required()}),ee(0,l()),ee(1,p("oldPassword")),ee(2,p("newPassword")),ee(3,be()),te("design:type",Function),te("design:paramtypes",[I,String,String,pe]),te("design:returntype",Promise)],De.prototype,"update",null),Q([m(),u("auth"),ee(0,l()),ee(1,be()),te("design:type",Function),te("design:paramtypes",[I,pe]),te("design:returntype",Promise)],De.prototype,"user",null),De=Q([h("/auth"),y(Ne)],De);let je=class extends Ne{check(e,t){return re(this,void 0,void 0,(function*(){const{token:r}=t.body,i=yield this.findOne(r);i&&i.user?(i.token=F(),yield i.save(),a.data(e,{token:i.token})):a.notfound(e,"User not found")}))}forgot(e,t,r){return re(this,void 0,void 0,(function*(){yield b(ie.API_SLEEP_FORGOT);const i=t,n=yield pe.findOne({where:{[G.or]:[{email:i},{username:t}]}}).catch(this.error);if(!n)return void e.notFound("User not found");const s=F(),o=Date.now()+6e4*ie.API_TOKEN_FORGOT,d=yield de.create({token:s,timestamp:o,state:!0,userId:n.id});r.emit("forgot.send",{ctx:e,forgot:d,user:n}),this.emit("forgot.send",{ctx:e,forgot:d,user:n}),e.success("OK")}))}reset(e,t,r,i){return re(this,void 0,void 0,(function*(){const n=yield this.findOne(t);n?(n.state=!1,yield n.save().catch(this.error),n.user.password=V(r).toString(),yield n.user.save().catch(this.error),i.emit("forgot.reset",{ctx:e,user:n.user}),this.emit("forgot.reset",{ctx:e,user:n.user}),e.success("OK")):e.notFound("User not found")}))}findOne(e){return re(this,void 0,void 0,(function*(){return yield de.findOne({where:{token:e,state:!0},include:[{model:pe,required:!0}]}).catch(this.error)}))}};Q([m("/check"),u("validation",{token:j.string().required()}),ee(0,i()),ee(1,r()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",Promise)],je.prototype,"check",null),Q([c(),u("validation",{username:j.string().min(4).required()}),ee(0,l()),ee(1,p("username")),ee(2,g()),te("design:type",Function),te("design:paramtypes",[I,String,Se]),te("design:returntype",Promise)],je.prototype,"forgot",null),Q([c("/reset"),u("validation",{token:j.string().required(),password:j.string().min(5).required()}),ee(0,l()),ee(1,p("token")),ee(2,p("password")),ee(3,g()),te("design:type",Function),te("design:paramtypes",[I,String,String,Se]),te("design:returntype",Promise)],je.prototype,"reset",null),je=Q([h("/forgot"),y(Ne)],je);let Fe=class extends Ne{add(e,t,r,i){return re(this,void 0,void 0,(function*(){const n=yield this.model().create(Object.assign(Object.assign({},e.body),i||{}),r||{}).catch(this.error);if(n){const e=this.key();return a.data(t,{[e]:n.getDataValue(e)}),n}a.error(t,"Internal Server Error")}))}all(e,t,r,i){var n,s,o,d,c;return re(this,void 0,void 0,(function*(){const u=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(n=e.query.limit)||void 0===n?void 0:n.toString();p&&(l.limit=parseInt(p));const g=null===(s=e.query.offset)||void 0===s?void 0:s.toString();g&&(l.offset=parseInt(g));const m=Object.keys(u.getAttributes()),h=[],y=null===(o=e.query.asc)||void 0===o?void 0:o.toString();y&&y.length&&y.split(",").forEach((e=>{m.indexOf(e)>=0&&h.push([e,"ASC"])}));const I=null===(d=e.query.desc)||void 0===d?void 0:d.toString();I&&I.length&&I.split(",").forEach((e=>{m.indexOf(e)>=0&&h.push([e,"DESC"])})),h.length&&(l.order=h);const _=[],v=B(l.attributes)?l.attributes:m,O=null===(c=e.query.search)||void 0===c?void 0:c.toString();v.forEach((t=>{var r;if(x(t)&&(O&&O.length&&_.push({[t]:{[G.like]:`%${O}%`}}),"search_"+t in e.query)){const i=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();i&&i.length&&_.push({[t]:{[G.like]:`%${i}%`}})}})),_.length&&(l.where=Object.assign(Object.assign({},l.where),{[G.or]:[..._]}));const f=(yield u.count(Object.assign(Object.assign({},l),{col:m[0]})).catch(this.error))||0,A=yield u.findAll(l).catch(this.error);if(A)return a.data(t,{count:f,records:i?yield i(A):A}),A;a.error(t,"Internal Server Error")}))}del(e,t,r){return re(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[i]:n})})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?_e.error(e.message+"\n"+e.sql,"api.controller.sql",ie.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,i){return re(this,void 0,void 0,(function*(){const n=this.key(),{[n]:s}=e.params,o=yield this.model().findOne(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[n]:s})})).catch(this.error);if(o)return a.data(t,i?yield i(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(e,t,r,i){return re(this,void 0,void 0,(function*(){const n=this.key(),{[n]:s}=e.params,[o]=(yield this.model().update(Object.assign(Object.assign({},e.body),i||{}),Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[n]:s})})).catch(this.error))||[];return o?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};Fe=Q([y(Ne)],Fe);let Be=class extends Fe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}};Q([c(),u("auth"),u("write"),u("validationAdd"),ee(0,r()),ee(1,i()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Be.prototype,"recordAdd",null),Q([m(),u("auth"),u("read"),ee(0,r()),ee(1,i()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Be.prototype,"recordAll",null),Q([_("/:id"),u("auth"),u("write"),ee(0,r()),ee(1,i()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Be.prototype,"recordDel",null),Q([m("/:id"),u("auth"),u("read"),ee(0,r()),ee(1,i()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Be.prototype,"recordGet",null),Q([v("/:id"),u("auth"),u("write"),u("validationSet"),ee(0,r()),ee(1,i()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Be.prototype,"recordSet",null),Q([ee(0,r()),ee(1,i()),ee(2,s()),te("design:type",Function),te("design:paramtypes",[Object,Object,Function]),te("design:returntype",void 0)],Be.prototype,"validationAdd",null),Q([ee(0,r()),ee(1,i()),ee(2,s()),te("design:type",Function),te("design:paramtypes",[Object,Object,Function]),te("design:returntype",void 0)],Be.prototype,"validationSet",null),Be=Q([y(Fe)],Be);let xe=class extends Be{model(){return ae}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};xe=Q([h("/groups"),y(Be)],xe);let ke=class extends Fe{model(){return ce}recordAll(e,t,r){return re(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:le,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(e,t,r){return re(this,void 0,void 0,(function*(){const i=yield ae.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){const t=i.id;if(yield ce.destroy({where:{groupId:t}}),r){let e=0;for(let i=0;i<r.length;i++)e=yield le.count({where:{id:r[i]}}),e&&(yield ce.create({groupId:t,routeId:r[i]}))}a.success(e,"OK")}else k(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};Q([m("/:id/routes"),u("auth"),u("read","groups"),ee(0,r()),ee(1,i()),ee(2,O("id")),te("design:type",Function),te("design:paramtypes",[Object,Object,String]),te("design:returntype",Promise)],ke.prototype,"recordAll",null),Q([v("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:j.array(j.number().parse())}),ee(0,i()),ee(1,O("id")),ee(2,p("routes")),te("design:type",Function),te("design:paramtypes",[Object,String,Array]),te("design:returntype",Promise)],ke.prototype,"recordSet",null),ke=Q([h("/groups"),y(Fe)],ke);let qe=class extends Fe{model(){return he}recordAll(e,t,r,i){const n={};r&&(n.type=r),i&&(n.source=i),this.all(e,t,{where:n,order:[["created","DESC"]]})}};Q([m(),u("auth"),u("read"),ee(0,r()),ee(1,i()),ee(2,f("type")),ee(3,f("source")),te("design:type",Function),te("design:paramtypes",[Object,Object,String,String]),te("design:returntype",void 0)],qe.prototype,"recordAll",null),qe=Q([h("/logs"),y(Fe)],qe);let Le=class extends Ne{register(e,t,r){return re(this,void 0,void 0,(function*(){yield b(ie.API_SLEEP_REGISTRY);const{name:i,date:n,email:s,username:o,password:d,confirm:a}=t,c=o||s,u=V(d).toString();if(yield pe.count({where:{[G.or]:[{email:s},{username:c}]}}).catch(this.error))return void e.validation("Invalid email or username");if(u!=V(a).toString())return void e.error("Invalid password");const l=yield pe.create({name:i,date:n,email:s,username:c,password:u,state:!1}).catch(this.error);if(!l)return void e.error("Internal Server Error");const p=yield ue.create({token:yield this.getId(),userId:l.id,state:!0}).catch(this.error);if(!p)return l.destroy(),void e.error("Internal Server Error");e.success("OK"),r.emit("register.user",{ctx:e,register:p,user:l}),this.emit("register.user",{ctx:e,register:p,user:l})}))}confirm(e,t,r){return re(this,void 0,void 0,(function*(){const i=yield ue.findOne({where:{token:t,state:!0},include:[{model:pe,required:!0}]}).catch(this.error);i?(i.state=!1,yield i.save().catch(this.error),i.user.state=!0,yield i.user.save().catch(this.error),e.success("OK"),r.emit("register.confirm",{ctx:e,register:i,user:i.user}),this.emit("register.confirm",{ctx:e,register:i,user:i.user})):e.notFound("User not found")}))}send(e,t,r){return re(this,void 0,void 0,(function*(){const i=t,n=yield ue.findOne({where:{state:!0},include:[{model:pe,required:!0,where:{[G.or]:[{email:i},{username:t}]}}]}).catch(this.error);n?(e.success("OK"),r.emit("register.send",{ctx:e,register:n,user:n.user}),this.emit("register.send",{ctx:e,register:n,user:n.user})):e.notFound("User not found")}))}getId(){return re(this,void 0,void 0,(function*(){const e=w();return(yield ue.count({where:{token:e}}))?this.getId():e}))}};Q([c(),u("validation",{name:j.string().required(),date:j.string().date().required(),email:j.string().email().required(),username:j.string().empty(),password:j.string().min(5).required(),confirm:j.string().min(5).required()}),ee(0,l()),ee(1,p()),ee(2,g()),te("design:type",Function),te("design:paramtypes",[I,Object,Se]),te("design:returntype",Promise)],Le.prototype,"register",null),Q([c("/confirm"),u("validation",{token:j.string().required()}),ee(0,l()),ee(1,p("token")),ee(2,g()),te("design:type",Function),te("design:paramtypes",[I,String,Se]),te("design:returntype",Promise)],Le.prototype,"confirm",null),Q([c("/send"),u("validation",{username:j.string().required()}),ee(0,l()),ee(1,p("username")),ee(2,g()),te("design:type",Function),te("design:paramtypes",[I,String,Se]),te("design:returntype",Promise)],Le.prototype,"send",null),Le=Q([h("/register"),y(Ne)],Le);let Ce=class extends Be{model(){return le}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};Ce=Q([h("/routes"),y(Be)],Ce);let Ke=class extends Ne{setup(e){return re(this,void 0,void 0,(function*(){if(0==(yield pe.count())){const e={description:"",state:!0},t=yield pe.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield ae.create(Object.assign({name:"admin"},e));yield ge.create({userId:t.id,groupId:r.id});const i=["read","write"],n=["users","groups","routes"];yield q(n,(t=>re(this,void 0,void 0,(function*(){yield q(i,(i=>re(this,void 0,void 0,(function*(){const n=t+"."+i,s=yield le.create(Object.assign({name:n},e));yield ce.create({groupId:r.id,routeId:s.id})}))))}))));const s=yield le.create(Object.assign({name:"logs.read"},e));yield ce.create({groupId:r.id,routeId:s.id})}a.success(e,"OK")}))}};Q([m(),ee(0,i()),te("design:type",Function),te("design:paramtypes",[Object]),te("design:returntype",Promise)],Ke.prototype,"setup",null),Ke=Q([h("/setup"),y(Ne)],Ke);let Me=class extends Fe{model(){return pe}recordAdd(e,t,r){this.add(r,e,{},{password:V(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(e,t,r,i){r&&r.id.toString()!=i?this.del(t,e):a.error(e,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:V(t).toString()}:{})}};Q([c(),u("auth"),u("write"),u("validation",{name:j.string().required(),email:j.string().email().required(),username:j.string().min(4).required(),password:j.string().min(5).required(),description:j.string().empty(""),state:j.boolean().parse().required()}),ee(0,i()),ee(1,p("password")),ee(2,r()),te("design:type",Function),te("design:paramtypes",[Object,String,Object]),te("design:returntype",void 0)],Me.prototype,"recordAdd",null),Q([m(),u("auth"),u("read"),ee(0,i()),ee(1,r()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Me.prototype,"recordAll",null),Q([_("/:id"),u("auth"),u("write"),ee(0,i()),ee(1,r()),ee(2,be()),ee(3,O("id")),te("design:type",Function),te("design:paramtypes",[Object,Object,pe,String]),te("design:returntype",void 0)],Me.prototype,"recordDel",null),Q([m("/:id"),u("auth"),u("read"),ee(0,i()),ee(1,r()),te("design:type",Function),te("design:paramtypes",[Object,Object]),te("design:returntype",void 0)],Me.prototype,"recordGet",null),Q([v("/:id"),u("auth"),u("write"),u("validation",{name:j.string().empty(),email:j.string().email().empty(),username:j.string().min(4).empty(),password:j.string().min(5).empty().filter(""),description:j.string().empty(),state:j.boolean().parse().empty()}),ee(0,i()),ee(1,p("password")),ee(2,r()),te("design:type",Function),te("design:paramtypes",[Object,String,Object]),te("design:returntype",void 0)],Me.prototype,"recordSet",null),Me=Q([h("/users"),y(Fe)],Me);let Ge=class extends Fe{model(){return ge}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:ae,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(e,t,r){return re(this,void 0,void 0,(function*(){const i=yield pe.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){if(yield ge.destroy({where:{userId:i.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield ae.count({where:{id:r[t]}}),e&&(yield ge.create({userId:i.id,groupId:r[t]}))}a.success(e,"OK")}else k(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};Q([m("/:id/groups"),u("auth"),u("read","users"),ee(0,i()),ee(1,r()),ee(2,O("id")),te("design:type",Function),te("design:paramtypes",[Object,Object,String]),te("design:returntype",void 0)],Ge.prototype,"recordAll",null),Q([v("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:j.array(j.number().parse())}),ee(0,i()),ee(1,O("id")),ee(2,p("groups")),te("design:type",Function),te("design:paramtypes",[Object,String,Array]),te("design:returntype",Promise)],Ge.prototype,"recordSet",null),Ge=Q([h("/users"),y(Fe)],Ge);export{Se as Application,oe as Auth,De as AuthController,Ee as Config,me as Configs,Ne as ControllerBase,Be as CrudController,ne as Database,ie as Env,de as Forgot,je as ForgotController,ae as Group,ce as GroupRoute,xe as GroupsController,ke as GroupsRoutesController,he as Log,_e as Logs,Ie as LogsColor,qe as LogsController,Fe as ModelController,Re as Permission,ue as Register,Le as RegisterController,Te as ReqAuth,we as ReqFiles,be as ReqUser,le as Route,Ce as RoutesController,ye as Session,Ke as SetupController,Pe as Token,pe as User,ge as UserGroup,Me as UsersController,Ge as UsersGroupsController,Oe as crt,fe as key,se as sequelize};
+import{Application as e,parameterFactory as t,Req as r,Res as i,Headers as n,Next as s,Session as o,Argument as d,Responses as a,Post as c,Middleware as u,Ctx as l,Body as p,App as g,Get as m,Controller as h,Extends as y,Context as I,Delete as _,Put as v,Params as f,Query as P}from"@andrewcaires/express";import{toBool as A,parseMs as O,dateFormat as S,noop as E,loop as T,uuidv4 as w,sleep as b,toArray as R,EventEmitter as N,isNumber as D,Validation as j,uniqueID as F,isArray as B,isString as x,isNull as q,forEachSeries as k}from"@andrewcaires/utils.js";import L from"ws";import{Sequelize as C,DataTypes as K,Model as H,Op as M}from"sequelize";import{config as G}from"dotenv";import{existsSync as U,readFileSync as z,mkdirSync as X,lstatSync as Y,rmSync as W}from"fs";import{Store as Z}from"express-session";import{verify as J,sign as $}from"jsonwebtoken";import{extension as V}from"mime-types";import Q from"multer";import{join as ee}from"path";import{SHA256 as te}from"crypto-js";function re(e,t,r,i){var n,s=arguments.length,o=s<3?t:null===i?i=Object.getOwnPropertyDescriptor(t,r):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,i);else for(var d=e.length-1;d>=0;d--)(n=e[d])&&(o=(s<3?n(o):s>3?n(t,r,o):n(t,r))||o);return s>3&&o&&Object.defineProperty(t,r,o),o}function ie(e,t){return function(r,i){t(r,i,e)}}function ne(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function se(e,t,r,i){return new(r||(r=Promise))((function(n,s){function o(e){try{a(i.next(e))}catch(e){s(e)}}function d(e){try{a(i.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?n(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,d)}a((i=i.apply(e,t||[])).next())}))}"function"==typeof SuppressedError&&SuppressedError,G();class oe{static getBool(e,t){return A(oe.getString(e,t.toString()))}static getInt(e,t){return parseInt(oe.getString(e,t.toString()))}static getMs(e,t){return O(oe.getString(e,t))}static getString(e,t){return e in process.env?process.env[e]||"":t}}oe.API_CONSOLE_ERROR=oe.getBool("API_CONSOLE_ERROR",!1),oe.API_DEFAULT_PATH=oe.getString("API_DEFAULT_PATH","/api"),oe.API_DB_DATABASE=oe.getString("API_DB_DATABASE",""),oe.API_DB_HOST=oe.getString("API_DB_HOST","127.0.0.1"),oe.API_DB_PASSWORD=oe.getString("API_DB_PASSWORD",""),oe.API_DB_PORT=oe.getInt("API_DB_PORT",3306),oe.API_DB_TYPE=oe.getString("API_DB_TYPE",""),oe.API_DB_USERNAME=oe.getString("API_DB_USERNAME","root"),oe.API_DB_LOG=oe.getBool("API_DB_LOG",!1),oe.API_DB_PREFIX=oe.getString("API_DB_PREFIX",""),oe.API_DB_TIMEZONE=oe.getString("API_DB_TIMEZONE","+00:00"),oe.API_HTTP_CRT=oe.getString("API_HTTP_CRT",""),oe.API_HTTP_KEY=oe.getString("API_HTTP_KEY",""),oe.API_HTTP_PORT=oe.getInt("API_HTTP_PORT",3e3),oe.API_HTTP_PUBLIC=oe.getString("API_HTTP_PUBLIC",""),oe.API_HTTP_CROSS=oe.getBool("API_HTTP_CROSS",!1),oe.API_HTTP_HYBRID=oe.getBool("API_HTTP_HYBRID",!1),oe.API_HTTP_REDIRECT=oe.getString("API_HTTP_REDIRECT",""),oe.API_SLEEP_AUTH=oe.getMs("API_SLEEP_AUTH","2s"),oe.API_SLEEP_FORGOT=oe.getMs("API_SLEEP_FORGOT","5s"),oe.API_SLEEP_REGISTRY=oe.getMs("API_SLEEP_REGISTRY","5s"),oe.API_SESSION_NAME=oe.getString("API_SESSION_NAME","session.id"),oe.API_SESSION_LIFETIME=oe.getMs("API_SESSION_LIFETIME","1d"),oe.API_SESSION_SECRET=oe.getString("API_SESSION_SECRET","yoursecret"),oe.API_TOKEN_CRT=oe.getString("API_TOKEN_CRT",""),oe.API_TOKEN_KEY=oe.getString("API_TOKEN_KEY",""),oe.API_TOKEN_FORGOT=oe.getMs("API_TOKEN_LIFETIME","1d"),oe.API_TOKEN_HEADER=oe.getString("API_TOKEN_HEADER","authorization"),oe.API_TOKEN_LIFETIME=oe.getMs("API_TOKEN_LIFETIME","1d"),oe.API_TOKEN_RENEW=oe.getMs("API_TOKEN_RENEW","1d"),oe.API_UPLOAD_COUNT=oe.getInt("API_UPLOAD_COUNT",1),oe.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",oe.API_UPLOAD_SIZE=oe.getInt("API_UPLOAD_SIZE",2),oe.API_UPLOAD_TEMP=oe.getString("API_UPLOAD_TEMP","./temp"),oe.API_WEBSOCKET_START=oe.getBool("API_WEBSOCKET_START",!1);class de{static connect(e){const t="connect_"+oe.API_DB_TYPE.toLowerCase();if(t in de)return de[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:oe.API_DB_LOG,define:{timestamps:!1},timezone:oe.API_DB_TIMEZONE})}static connect_memory(){return new C("sqlite::memory:",{logging:oe.API_DB_LOG,define:{timestamps:!1},timezone:oe.API_DB_TIMEZONE})}static connect_mysql(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:oe.API_DB_LOG,define:{timestamps:!1},timezone:oe.API_DB_TIMEZONE})}static connect_postgres(e){return new C(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:oe.API_DB_LOG,define:{timestamps:!1},timezone:oe.API_DB_TIMEZONE})}static connect_sqlite(e){return new C({dialect:"sqlite",storage:e.database,logging:oe.API_DB_LOG,define:{timestamps:!1},timezone:oe.API_DB_TIMEZONE})}}const ae=de.connect({database:oe.API_DB_DATABASE,username:oe.API_DB_USERNAME,password:oe.API_DB_PASSWORD,hostname:oe.API_DB_HOST,hostport:oe.API_DB_PORT});class ce extends H{}ce.init({secret:K.STRING,logout:K.DATE,useragent:K.STRING},{sequelize:ae,modelName:oe.API_DB_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ue extends H{}ue.init({token:K.STRING,timestamp:K.BIGINT,state:K.BOOLEAN},{sequelize:ae,modelName:oe.API_DB_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class le extends H{}le.init({name:K.STRING,description:K.TEXT,state:K.BOOLEAN},{sequelize:ae,modelName:oe.API_DB_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class pe extends H{}pe.init({},{sequelize:ae,modelName:oe.API_DB_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),pe.removeAttribute("id");class ge extends H{}ge.init({token:K.STRING,state:K.BOOLEAN},{sequelize:ae,modelName:oe.API_DB_PREFIX+"register",timestamps:!0,createdAt:"created",updatedAt:"updated"});class me extends H{}me.init({name:K.STRING,description:K.TEXT,state:K.BOOLEAN},{sequelize:ae,modelName:oe.API_DB_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class he extends H{}he.init({name:K.STRING,email:K.STRING,username:K.STRING,password:K.STRING,avatar:K.STRING,date:K.DATEONLY,description:K.TEXT,state:K.BOOLEAN},{sequelize:ae,modelName:oe.API_DB_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated",defaultScope:{attributes:{exclude:["password"]}},scopes:{password:{attributes:{include:["password"]}}}});class ye extends H{}ye.init({},{sequelize:ae,modelName:oe.API_DB_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),ye.removeAttribute("id");class Ie extends H{}Ie.init({key:K.STRING,value:K.STRING},{sequelize:ae,modelName:oe.API_DB_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),Ie.removeAttribute("id");class _e extends H{}_e.init({type:K.STRING,source:K.STRING,message:K.TEXT},{sequelize:ae,modelName:oe.API_DB_PREFIX+"log",timestamps:!0,createdAt:"created",updatedAt:!1});class ve extends H{}var fe;ve.init({session:K.STRING,json:K.TEXT,expired:K.BIGINT},{sequelize:ae,modelName:oe.API_DB_PREFIX+"session",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ve.removeAttribute("id"),he.hasMany(ce),ce.belongsTo(he),he.hasMany(ue),ue.belongsTo(he),he.hasMany(ge),ge.belongsTo(he),le.hasMany(pe),pe.belongsTo(le),me.hasMany(pe),pe.belongsTo(me),he.hasMany(ye),ye.belongsTo(he),le.hasMany(ye),ye.belongsTo(le),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(fe||(fe={}));class Pe{static write(e,t,r){return se(this,void 0,void 0,(function*(){yield Pe.writeRaw(fe.NONE,"",e,t,r)}))}static error(e,t,r){return se(this,void 0,void 0,(function*(){yield Pe.writeRaw(fe.ERROR,"error",e,t,r)}))}static info(e,t,r){return se(this,void 0,void 0,(function*(){yield Pe.writeRaw(fe.INFO,"info",e,t,r)}))}static success(e,t,r){return se(this,void 0,void 0,(function*(){yield Pe.writeRaw(fe.ERROR,"success",e,t,r)}))}static warning(e,t,r){return se(this,void 0,void 0,(function*(){yield Pe.writeRaw(fe.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const i=S(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",i,"|",r)}static writeRaw(e,t,r,i,n){return se(this,void 0,void 0,(function*(){n&&Pe.writeConsole(e,t,r),ae&&(yield _e.create({type:t,source:i,message:r}).catch((()=>null)))}))}}const Ae=e=>U(e)?z(e):void 0,Oe={http:Ae(oe.API_HTTP_CRT),token:Ae(oe.API_TOKEN_CRT)},Se={http:Ae(oe.API_HTTP_KEY),token:Ae(oe.API_TOKEN_KEY)};class Ee extends Z{constructor(){super(),this.all=e=>se(this,void 0,void 0,(function*(){e=e||E;const t=yield ve.findAll({attributes:["session"],where:{expired:{[M.gte]:Date.now()}}}).catch((t=>(e(t),null)));t&&e(null,t.map((e=>e.session))),e()})),this.clear=e=>se(this,void 0,void 0,(function*(){yield ve.destroy().catch(E),e&&e()})),this.destroy=(e,t)=>se(this,void 0,void 0,(function*(){yield ve.destroy({where:{session:e}}).catch(E),t&&t()})),this.expired=()=>se(this,void 0,void 0,(function*(){yield ve.destroy({where:{expired:{[M.lt]:Date.now()}}}).catch(E)})),this.get=(e,t)=>se(this,void 0,void 0,(function*(){t=t||E;const r=yield ve.findOne({where:{session:e,expired:{[M.gte]:Date.now()}}}).catch((e=>(t(e),null)));if(r){const e=JSON.parse(r.json);if(e.cookie){if(new Date(e.cookie.expires).getTime()<=Date.now())return yield r.destroy().catch(E),void t(null)}t(null,e)}else t(null)})),this.length=e=>se(this,void 0,void 0,(function*(){e&&e(null,(yield ve.count().catch(E))||0)})),this.set=(e,t,r)=>se(this,void 0,void 0,(function*(){r=r||E;const i=Date.now()+oe.API_SESSION_LIFETIME,n=JSON.stringify(t),[s,o]=(yield ve.findOrCreate({where:{session:e},defaults:{session:e,json:n,expired:i}}).catch(E))||[];s&&(o||(s.json=n,s.expired=i,yield s.save().catch(E))),r()})),this.loop=T(this.expired,3e4),this.loop.start()}}class Te{static create(e){return se(this,void 0,void 0,(function*(){if(!Se.token)return{error:"Key not found"};const{id:t}=e,r=w(),i=yield ce.create({secret:r,userId:t}).catch(Te.error);if(!i)return{error:"Internal Server Error"};return{auth:i,token:$({id:t,secret:r},Se.token,Te.options())}}))}static destroy(e){return se(this,void 0,void 0,(function*(){return!(!e||e.logout)&&(e.logout=new Date,yield e.save(),!0)}))}static error(e){Pe.error(e.message,"api.token",oe.API_CONSOLE_ERROR)}static options(){return{algorithm:"RS256",expiresIn:oe.API_TOKEN_LIFETIME+"ms"}}static renew(e){return se(this,void 0,void 0,(function*(){if(!Se.token)return{error:"Key not found"};const{error:t,decode:r}=Te.verify(e,oe.API_TOKEN_RENEW/1e3);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield he.findOne({where:{id:e,state:!0}}).catch(Te.error);if(r){const i=yield ce.findOne({where:{secret:t,userId:r.id}}).catch(Te.error);if(i&&!i.logout){i.secret=w(),yield i.save().catch(Te.error);return{auth:i,token:$({id:e,secret:i.secret},Se.token,Te.options())}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static user(e){return se(this,void 0,void 0,(function*(){const{error:t,decode:r}=Te.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&t){const r=yield he.findOne({where:{id:e,state:!0}}).catch(Te.error);if(r){const e=yield ce.findOne({where:{secret:t,userId:r.id}}).catch(Te.error);if(e&&!e.logout)return{auth:e,user:r}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e,t){if(!Oe.token)return{error:"Cert not found"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:J(e,Oe.token,{clockTolerance:t})}}catch(e){return{error:"Invalid Token"}}}}class we extends e{constructor(e){super(e,{cert:Oe.http,cross:oe.API_HTTP_CROSS,hybrid:oe.API_HTTP_HYBRID,key:Se.http,path:oe.API_DEFAULT_PATH,port:oe.API_HTTP_PORT,public:oe.API_HTTP_PUBLIC,redirect:oe.API_HTTP_REDIRECT,session:{store:new Ee,name:oe.API_SESSION_NAME,secret:oe.API_SESSION_SECRET,cookie:{maxAge:oe.API_SESSION_LIFETIME},genid:w}})}error(e,t){Pe.info(e.message,t,oe.API_CONSOLE_ERROR)}log(e,t){Pe.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return se(this,void 0,void 0,(function*(){yield ae.sync(),yield e.listen.call(this),oe.API_WEBSOCKET_START&&this.server&&(this._webSocket=new L.Server({server:this.server,verifyClient:(e,t)=>t(oe.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>se(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let i;e.on("message",(n=>se(this,void 0,void 0,(function*(){if(i)try{const s=JSON.parse(n);this.emit("ws.message"+r,{data:s,message:n,req:t,user:i,ws:e})}catch(s){this.emit("ws.message"+r,{message:n,req:t,user:i,ws:e})}else{const{user:s}=yield Te.user(n.toString());s&&(i=s,this.emit("ws.connection"+r,{req:t,user:i,ws:e}))}i||e.close()})))),e.on("close",(()=>{i&&this.emit("ws.close"+r,{user:i,ws:e})})),yield b(2e3),i||e.close()})))))}))}websocket(){return this._webSocket}}class be{static all(){return se(this,void 0,void 0,(function*(){const e=yield Ie.findAll().catch(be.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return se(this,void 0,void 0,(function*(){return((yield Ie.destroy({where:{key:e}}).catch(be.error))||0)>0}))}static error(e){Pe.error(e.message,"api.config",oe.API_CONSOLE_ERROR)}static get(e){return se(this,void 0,void 0,(function*(){const t=yield Ie.findOne({where:{key:e}}).catch(be.error);return t&&t.value||""}))}static set(e,t){return se(this,void 0,void 0,(function*(){const[r]=(yield Ie.findOrCreate({where:{key:e}}).catch(be.error))||[];r&&(r.value=t,yield r.save().catch(be.error))}))}}const Re=t((({req:e})=>e.auth)),Ne=t((({req:e})=>R(e.files))),De=t((({req:e})=>e.user));class je{static all(e,t){return se(this,void 0,void 0,(function*(){return yield me.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:pe,required:!0,include:[{model:le,required:!0,where:{state:!0},include:[{model:ye,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{Pe.error(e.message,"api.permission",oe.API_CONSOLE_ERROR)}))}))}static get(e){return se(this,void 0,void 0,(function*(){const t=yield je.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return se(this,void 0,void 0,(function*(){const r=yield je.all(e,{name:t});return!!r&&r.length>0}))}}class Fe extends N{auth(e,t,r,i,n){return se(this,void 0,void 0,(function*(){const{auth:s,error:o,user:d}=yield Te.user(r);o?a.error(t,o):s&&d?s.useragent==i?(e.auth=s,e.user=d,n()):a.error(t,"Invalid token"):a.error(t,"Internal Server Error")}))}session(e,t,r){return se(this,void 0,void 0,(function*(){t.auth&&t.user&&(t.useragent?t.useragent!=e&&t.regenerate(E):(t.useragent=e,t.save(E))),r()}))}error(e){Pe.error(e.message,"api.controller",oe.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,i){return se(this,void 0,void 0,(function*(){i?(yield je.is(i,r))?t():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,i){return this.permission(t,r,(i||this.name())+".read",e)}upload(e,t,r,i){const n=(null==i?void 0:i.path)||oe.API_UPLOAD_TEMP,s=Q.diskStorage({destination:(e,t,r)=>r(null,n),filename:(e,t,r)=>se(this,void 0,void 0,(function*(){return r(null,this.uploadFile(n,V(t.mimetype)||"bin"))}))}),o=1e6*((null==i?void 0:i.size)||oe.API_UPLOAD_SIZE),d=Q({storage:s,fileFilter(e,t,r){var n;return se(this,void 0,void 0,(function*(){const e=null===(n=null==i?void 0:i.types)||void 0===n?void 0:n.indexOf(t.mimetype);return D(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),c=(null==i?void 0:i.count)||oe.API_UPLOAD_COUNT,u=(null==i?void 0:i.field)||oe.API_UPLOAD_FIELD;d.array(u,c)(e,t,(e=>e?a.error(t,e.message):r()))}uploadFile(e,t){const r=w()+"."+t;return U(ee(e,r))?this.uploadFile(e,t):r}validation(e,t,r,i){return se(this,void 0,void 0,(function*(){const{error:n,value:s}=yield j.object(i).parse().validateAsync(e.body);n?a.validation(t,n):(e.body=s,r())}))}write(e,t,r,i){return this.permission(e,t,(r||this.name())+".write",i)}}re([ie(0,r()),ie(1,i()),ie(2,n(oe.API_TOKEN_HEADER)),ie(3,n("user-agent")),ie(4,s()),ne("design:type",Function),ne("design:paramtypes",[Object,Object,String,String,Function]),ne("design:returntype",Promise)],Fe.prototype,"auth",null),re([ie(0,n("user-agent")),ie(1,o()),ie(2,s()),ne("design:type",Function),ne("design:paramtypes",[String,Object,Function]),ne("design:returntype",Promise)],Fe.prototype,"session",null),re([ie(0,i()),ie(1,s()),ie(2,d()),ie(3,De()),ne("design:type",Function),ne("design:paramtypes",[Object,Function,String,he]),ne("design:returntype",Promise)],Fe.prototype,"permission",null),re([ie(0,De()),ie(1,i()),ie(2,s()),ie(3,d()),ne("design:type",Function),ne("design:paramtypes",[he,Object,Function,String]),ne("design:returntype",Promise)],Fe.prototype,"read",null),re([ie(0,r()),ie(1,i()),ie(2,s()),ie(3,d()),ne("design:type",Function),ne("design:paramtypes",[Object,Object,Function,Object]),ne("design:returntype",void 0)],Fe.prototype,"upload",null),re([ie(0,r()),ie(1,i()),ie(2,s()),ie(3,d()),ne("design:type",Function),ne("design:paramtypes",[Object,Object,Function,Object]),ne("design:returntype",Promise)],Fe.prototype,"validation",null),re([ie(0,i()),ie(1,s()),ie(2,d()),ie(3,De()),ne("design:type",Function),ne("design:paramtypes",[Object,Function,String,he]),ne("design:returntype",Promise)],Fe.prototype,"write",null);let Be=class extends Fe{login(e,t,r,i,n){return se(this,void 0,void 0,(function*(){yield b(oe.API_SLEEP_AUTH);const s=r,o=yield he.findOne({where:{[M.or]:[{email:s},{username:r}],[M.and]:[{password:te(i).toString()}]}}).catch(this.error);if(!o)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const d=yield ge.findOne({where:{state:!0,userId:o.id}}).catch(this.error);if(d)return e.error("Activation required"),n.emit("auth.activation",{ctx:e,register:d,user:o}),void this.emit("auth.activation",{ctx:e,register:d,user:o});if(!o.state)return e.notFound("Invalid username or password"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e});const{auth:a,error:c,token:u}=yield Te.create(o);return c?(e.error(c),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e})):a&&u?(e.data({token:u}),a.useragent=t,yield a.save().catch(this.error),n.emit("auth.login",{auth:a,ctx:e,user:o}),void this.emit("auth.login",{auth:a,ctx:e,user:o})):(e.error("Internal Server Error"),n.emit("auth.failure",{ctx:e}),void this.emit("auth.failure",{ctx:e}))}))}logout(e,t,r,i){return se(this,void 0,void 0,(function*(){if(yield Te.destroy(t))return e.success("Disconcerted"),i.emit("auth.logout",{auth:t,ctx:e,user:r}),void this.emit("auth.logout",{auth:t,ctx:e,user:r});e.unauthorized("Access denied")}))}renew(e,t,r,i){return se(this,void 0,void 0,(function*(){const{auth:n,error:s,token:o}=yield Te.renew(r);s?e.error(s):n?(e.data({token:o}),n.useragent=t,yield n.save().catch(this.error),i.emit("auth.renew",{auth:n,ctx:e}),this.emit("auth.renew",{auth:n,ctx:e})):e.error("Internal Server Error")}))}user(e,t){return se(this,void 0,void 0,(function*(){const r=yield je.all(t);r?e.data(Object.assign(Object.assign({},t.toJSON()),{permissions:r.map((e=>e.name))})):e.error("Internal Server Error")}))}};re([c("/login"),u("validation",{username:j.string().min(3).required(),password:j.string().min(5).required()}),ie(0,l()),ie(1,n("user-agent")),ie(2,p("username")),ie(3,p("password")),ie(4,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,String,String,we]),ne("design:returntype",Promise)],Be.prototype,"login",null),re([m("/logout"),u("auth"),ie(0,l()),ie(1,Re()),ie(2,De()),ie(3,g()),ne("design:type",Function),ne("design:paramtypes",[I,ce,he,we]),ne("design:returntype",Promise)],Be.prototype,"logout",null),re([c("/renew"),u("validation",{token:j.string().required()}),ie(0,l()),ie(1,n("user-agent")),ie(2,p("token")),ie(3,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,String,we]),ne("design:returntype",Promise)],Be.prototype,"renew",null),re([m(),u("auth"),ie(0,l()),ie(1,De()),ne("design:type",Function),ne("design:paramtypes",[I,he]),ne("design:returntype",Promise)],Be.prototype,"user",null),Be=re([h("/auth"),y(Fe)],Be);let xe=class extends Fe{check(e,t){return se(this,void 0,void 0,(function*(){const{token:r}=t.body,i=yield this.findOne(r);i&&i.user?(i.token=F(),yield i.save(),a.data(e,{token:i.token})):a.notfound(e,"User not found")}))}forgot(e,t,r){return se(this,void 0,void 0,(function*(){yield b(oe.API_SLEEP_FORGOT);const i=t,n=yield he.findOne({where:{[M.or]:[{email:i},{username:t}]}}).catch(this.error);if(!n)return void e.notFound("User not found");const s=F(),o=Date.now()+6e4*oe.API_TOKEN_FORGOT,d=yield ue.create({token:s,timestamp:o,state:!0,userId:n.id});r.emit("forgot.send",{ctx:e,forgot:d,user:n}),this.emit("forgot.send",{ctx:e,forgot:d,user:n}),e.success("OK")}))}reset(e,t,r,i){return se(this,void 0,void 0,(function*(){const n=yield this.findOne(t);n?(n.state=!1,yield n.save().catch(this.error),n.user.password=te(r).toString(),yield n.user.save().catch(this.error),i.emit("forgot.reset",{ctx:e,user:n.user}),this.emit("forgot.reset",{ctx:e,user:n.user}),e.success("OK")):e.notFound("User not found")}))}findOne(e){return se(this,void 0,void 0,(function*(){return yield ue.findOne({where:{token:e,state:!0},include:[{model:he,required:!0}]}).catch(this.error)}))}};re([m("/check"),u("validation",{token:j.string().required()}),ie(0,i()),ie(1,r()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",Promise)],xe.prototype,"check",null),re([c(),u("validation",{username:j.string().min(4).required()}),ie(0,l()),ie(1,p("username")),ie(2,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,we]),ne("design:returntype",Promise)],xe.prototype,"forgot",null),re([c("/reset"),u("validation",{token:j.string().required(),password:j.string().min(5).required()}),ie(0,l()),ie(1,p("token")),ie(2,p("password")),ie(3,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,String,we]),ne("design:returntype",Promise)],xe.prototype,"reset",null),xe=re([h("/forgot"),y(Fe)],xe);let qe=class extends Fe{add(e,t,r,i){return se(this,void 0,void 0,(function*(){const n=yield this.model().create(Object.assign(Object.assign({},e.body),i||{}),r||{}).catch(this.error);if(n){const e=this.key();return a.data(t,{[e]:n.getDataValue(e)}),n}a.error(t,"Internal Server Error")}))}all(e,t,r,i){var n,s,o,d,c;return se(this,void 0,void 0,(function*(){const u=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(n=e.query.limit)||void 0===n?void 0:n.toString();p&&(l.limit=parseInt(p));const g=null===(s=e.query.offset)||void 0===s?void 0:s.toString();g&&(l.offset=parseInt(g));const m=Object.keys(u.getAttributes()),h=[],y=null===(o=e.query.asc)||void 0===o?void 0:o.toString();y&&y.length&&y.split(",").forEach((e=>{m.indexOf(e)>=0&&h.push([e,"ASC"])}));const I=null===(d=e.query.desc)||void 0===d?void 0:d.toString();I&&I.length&&I.split(",").forEach((e=>{m.indexOf(e)>=0&&h.push([e,"DESC"])})),h.length&&(l.order=h);const _=[],v=B(l.attributes)?l.attributes:m,f=null===(c=e.query.search)||void 0===c?void 0:c.toString();v.forEach((t=>{var r;if(x(t)&&(f&&f.length&&_.push({[t]:{[M.like]:`%${f}%`}}),"search_"+t in e.query)){const i=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();i&&i.length&&_.push({[t]:{[M.like]:`%${i}%`}})}})),_.length&&(l.where=Object.assign(Object.assign({},l.where),{[M.or]:[..._]}));const P=(yield u.count(Object.assign(Object.assign({},l),{col:m[0]})).catch(this.error))||0,A=yield u.findAll(l).catch(this.error);if(A)return a.data(t,{count:P,records:i?yield i(A):A}),A;a.error(t,"Internal Server Error")}))}del(e,t,r){return se(this,void 0,void 0,(function*(){const i=this.key(),{[i]:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[i]:n})})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?Pe.error(e.message+"\n"+e.sql,"api.controller.sql",oe.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,i){return se(this,void 0,void 0,(function*(){const n=this.key(),{[n]:s}=e.params,o=yield this.model().findOne(Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[n]:s})})).catch(this.error);if(o)return a.data(t,i?yield i(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}key(){return this.model().primaryKeyAttribute}name(){return this.model().tableName}set(e,t,r,i){return se(this,void 0,void 0,(function*(){const n=this.key(),{[n]:s}=e.params,[o]=(yield this.model().update(Object.assign(Object.assign({},e.body),i||{}),Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{[n]:s})})).catch(this.error))||[];return o?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};qe=re([y(Fe)],qe);let ke=class extends qe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(e,t,r,this.create())}validationSet(e,t,r){this.validation(e,t,r,this.update())}};re([c(),u("auth"),u("write"),u("validationAdd"),ie(0,r()),ie(1,i()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],ke.prototype,"recordAdd",null),re([m(),u("auth"),u("read"),ie(0,r()),ie(1,i()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],ke.prototype,"recordAll",null),re([_("/:id"),u("auth"),u("write"),ie(0,r()),ie(1,i()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],ke.prototype,"recordDel",null),re([m("/:id"),u("auth"),u("read"),ie(0,r()),ie(1,i()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],ke.prototype,"recordGet",null),re([v("/:id"),u("auth"),u("write"),u("validationSet"),ie(0,r()),ie(1,i()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],ke.prototype,"recordSet",null),re([ie(0,r()),ie(1,i()),ie(2,s()),ne("design:type",Function),ne("design:paramtypes",[Object,Object,Function]),ne("design:returntype",void 0)],ke.prototype,"validationAdd",null),re([ie(0,r()),ie(1,i()),ie(2,s()),ne("design:type",Function),ne("design:paramtypes",[Object,Object,Function]),ne("design:returntype",void 0)],ke.prototype,"validationSet",null),ke=re([y(qe)],ke);let Le=class extends ke{model(){return le}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};Le=re([h("/groups"),y(ke)],Le);let Ce=class extends qe{model(){return pe}recordAll(e,t,r){return se(this,void 0,void 0,(function*(){this.all(e,t,{where:{groupId:r},include:[{model:me,required:!0}]},(e=>e.map((e=>e.route))))}))}recordSet(e,t,r){return se(this,void 0,void 0,(function*(){const i=yield le.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){const t=i.id;if(yield pe.destroy({where:{groupId:t}}),r){let e=0;for(let i=0;i<r.length;i++)e=yield me.count({where:{id:r[i]}}),e&&(yield pe.create({groupId:t,routeId:r[i]}))}a.success(e,"OK")}else q(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};re([m("/:id/routes"),u("auth"),u("read","groups"),ie(0,r()),ie(1,i()),ie(2,f("id")),ne("design:type",Function),ne("design:paramtypes",[Object,Object,String]),ne("design:returntype",Promise)],Ce.prototype,"recordAll",null),re([v("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:j.array(j.number().parse())}),ie(0,i()),ie(1,f("id")),ie(2,p("routes")),ne("design:type",Function),ne("design:paramtypes",[Object,String,Array]),ne("design:returntype",Promise)],Ce.prototype,"recordSet",null),Ce=re([h("/groups"),y(qe)],Ce);let Ke=class extends qe{model(){return _e}recordAll(e,t,r,i){const n={};r&&(n.type=r),i&&(n.source=i),this.all(e,t,{where:n,order:[["created","DESC"]]})}};re([m(),u("auth"),u("read"),ie(0,r()),ie(1,i()),ie(2,P("type")),ie(3,P("source")),ne("design:type",Function),ne("design:paramtypes",[Object,Object,String,String]),ne("design:returntype",void 0)],Ke.prototype,"recordAll",null),Ke=re([h("/logs"),y(qe)],Ke);let He=class extends Fe{register(e,t,r){return se(this,void 0,void 0,(function*(){yield b(oe.API_SLEEP_REGISTRY);const{name:i,date:n,email:s,username:o,password:d,confirm:a}=t,c=o||s,u=te(d).toString();if(yield he.count({where:{[M.or]:[{email:s},{username:c}]}}).catch(this.error))return void e.validation("Invalid email or username");if(u!=te(a).toString())return void e.error("Invalid password");const l=yield he.create({name:i,email:s,username:c,password:u,avatar:"",date:n,description:"",state:!1}).catch(this.error);if(!l)return void e.error("Internal Server Error");const p=yield ge.create({token:yield this.getId(),userId:l.id,state:!0}).catch(this.error);if(!p)return l.destroy(),void e.error("Internal Server Error");e.success("OK"),r.emit("register.user",{ctx:e,register:p,user:l}),this.emit("register.user",{ctx:e,register:p,user:l})}))}confirm(e,t,r){return se(this,void 0,void 0,(function*(){const i=yield ge.findOne({where:{token:t,state:!0},include:[{model:he,required:!0}]}).catch(this.error);i?(i.state=!1,yield i.save().catch(this.error),i.user.state=!0,yield i.user.save().catch(this.error),e.success("OK"),r.emit("register.confirm",{ctx:e,register:i,user:i.user}),this.emit("register.confirm",{ctx:e,register:i,user:i.user})):e.notFound("User not found")}))}send(e,t,r){return se(this,void 0,void 0,(function*(){const i=t,n=yield ge.findOne({where:{state:!0},include:[{model:he,required:!0,where:{[M.or]:[{email:i},{username:t}]}}]}).catch(this.error);n?(e.success("OK"),r.emit("register.send",{ctx:e,register:n,user:n.user}),this.emit("register.send",{ctx:e,register:n,user:n.user})):e.notFound("User not found")}))}getId(){return se(this,void 0,void 0,(function*(){const e=w();return(yield ge.count({where:{token:e}}))?this.getId():e}))}};re([c(),u("validation",{name:j.string().required(),date:j.string().date().required(),email:j.string().email().required(),username:j.string().min(4).empty(),password:j.string().min(5).required(),confirm:j.string().min(5).required()}),ie(0,l()),ie(1,p()),ie(2,g()),ne("design:type",Function),ne("design:paramtypes",[I,Object,we]),ne("design:returntype",Promise)],He.prototype,"register",null),re([c("/confirm"),u("validation",{token:j.string().required()}),ie(0,l()),ie(1,p("token")),ie(2,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,we]),ne("design:returntype",Promise)],He.prototype,"confirm",null),re([c("/send"),u("validation",{username:j.string().min(4).required()}),ie(0,l()),ie(1,p("username")),ie(2,g()),ne("design:type",Function),ne("design:paramtypes",[I,String,we]),ne("design:returntype",Promise)],He.prototype,"send",null),He=re([h("/register"),y(Fe)],He);let Me=class extends ke{model(){return me}create(){return{name:j.string().required(),description:j.string().empty(""),state:j.boolean().parse().required()}}update(){return{name:j.string().empty(),description:j.string().empty(),state:j.boolean().parse().empty()}}};Me=re([h("/routes"),y(ke)],Me);let Ge=class extends Fe{setup(e){return se(this,void 0,void 0,(function*(){if(0==(yield he.count())){const e={description:"",state:!0},t=yield he.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield le.create(Object.assign({name:"admin"},e));yield ye.create({userId:t.id,groupId:r.id});const i=["read","write"],n=["users","groups","routes"];yield k(n,(t=>se(this,void 0,void 0,(function*(){yield k(i,(i=>se(this,void 0,void 0,(function*(){const n=t+"."+i,s=yield me.create(Object.assign({name:n},e));yield pe.create({groupId:r.id,routeId:s.id})}))))}))));const s=yield me.create(Object.assign({name:"logs.read"},e));yield pe.create({groupId:r.id,routeId:s.id})}a.success(e,"OK")}))}};re([m(),ie(0,i()),ne("design:type",Function),ne("design:paramtypes",[Object]),ne("design:returntype",Promise)],Ge.prototype,"setup",null),Ge=re([h("/setup"),y(Fe)],Ge);let Ue=class extends qe{model(){return he}constructor(){if(super(),oe.API_HTTP_PUBLIC){const e=oe.API_HTTP_PUBLIC+"/avatar";U(oe.API_HTTP_PUBLIC)&&!U(e)&&X(e)}}avatar(e,t){return se(this,void 0,void 0,(function*(){if(B(e.req.files)&&e.req.files.length){const r=e.req.files[0].filename||"";if(r){const i=oe.API_HTTP_PUBLIC+"/avatar/";if(U(i+t.avatar)&&Y(i+t.avatar).isFile()&&W(i+t.avatar),t.avatar=r,yield t.save().catch(this.error))return void e.success("OK")}}e.success("Record not changed")}))}password(e,t,r,i){return se(this,void 0,void 0,(function*(){const n=yield he.scope("password").findOne({where:{id:i.id,password:te(t).toString(),state:!0}}).catch(this.error);n?(n.password=te(r).toString(),(yield n.save().catch(this.error))?e.success("OK"):e.success("Record not changed")):e.error("Record not changed")}))}recordAdd(e,t,r){this.add(r,e,{},{password:te(t).toString()})}recordAll(e,t){this.all(t,e)}recordDel(e,t,r,i){r&&r.id.toString()!=i?this.del(t,e):a.error(e,"Internal Server Error")}recordGet(e,t){this.get(t,e)}recordSet(e,t,r){this.set(r,e,{where:{}},t?{password:te(t).toString()}:{})}};re([c("/avatar"),u("auth"),u("upload",{count:1,field:"file",path:oe.API_HTTP_PUBLIC+"/avatar",types:["image/bmp","image/jpeg","image/png"],size:20}),ie(0,l()),ie(1,De()),ne("design:type",Function),ne("design:paramtypes",[I,he]),ne("design:returntype",Promise)],Ue.prototype,"avatar",null),re([c("/password"),u("auth"),u("validation",{oldPassword:j.string().min(5).required(),newPassword:j.string().min(5).required()}),ie(0,l()),ie(1,p("oldPassword")),ie(2,p("newPassword")),ie(3,De()),ne("design:type",Function),ne("design:paramtypes",[I,String,String,he]),ne("design:returntype",Promise)],Ue.prototype,"password",null),re([c(),u("auth"),u("write"),u("validation",{name:j.string().required(),email:j.string().email().required(),username:j.string().min(4).required(),password:j.string().min(5).required(),description:j.string().empty(""),state:j.boolean().parse().required()}),ie(0,i()),ie(1,p("password")),ie(2,r()),ne("design:type",Function),ne("design:paramtypes",[Object,String,Object]),ne("design:returntype",void 0)],Ue.prototype,"recordAdd",null),re([m(),u("auth"),u("read"),ie(0,i()),ie(1,r()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],Ue.prototype,"recordAll",null),re([_("/:id"),u("auth"),u("write"),ie(0,i()),ie(1,r()),ie(2,De()),ie(3,f("id")),ne("design:type",Function),ne("design:paramtypes",[Object,Object,he,String]),ne("design:returntype",void 0)],Ue.prototype,"recordDel",null),re([m("/:id"),u("auth"),u("read"),ie(0,i()),ie(1,r()),ne("design:type",Function),ne("design:paramtypes",[Object,Object]),ne("design:returntype",void 0)],Ue.prototype,"recordGet",null),re([v("/:id"),u("auth"),u("write"),u("validation",{name:j.string().empty(),email:j.string().email().empty(),username:j.string().min(4).empty(),password:j.string().min(5).empty().filter(""),description:j.string().empty(),state:j.boolean().parse().empty()}),ie(0,i()),ie(1,p("password")),ie(2,r()),ne("design:type",Function),ne("design:paramtypes",[Object,String,Object]),ne("design:returntype",void 0)],Ue.prototype,"recordSet",null),Ue=re([h("/users"),y(qe),ne("design:paramtypes",[])],Ue);let ze=class extends qe{model(){return ye}recordAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:le,required:!0}]},(e=>e.map((e=>e.group))))}recordSet(e,t,r){return se(this,void 0,void 0,(function*(){const i=yield he.findByPk(t,{attributes:["id"]}).catch(this.error);if(i){if(yield ye.destroy({where:{userId:i.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield le.count({where:{id:r[t]}}),e&&(yield ye.create({userId:i.id,groupId:r[t]}))}a.success(e,"OK")}else q(i)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};re([m("/:id/groups"),u("auth"),u("read","users"),ie(0,i()),ie(1,r()),ie(2,f("id")),ne("design:type",Function),ne("design:paramtypes",[Object,Object,String]),ne("design:returntype",void 0)],ze.prototype,"recordAll",null),re([v("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:j.array(j.number().parse())}),ie(0,i()),ie(1,f("id")),ie(2,p("groups")),ne("design:type",Function),ne("design:paramtypes",[Object,String,Array]),ne("design:returntype",Promise)],ze.prototype,"recordSet",null),ze=re([h("/users"),y(qe)],ze);export{we as Application,ce as Auth,Be as AuthController,be as Config,Ie as Configs,Fe as ControllerBase,ke as CrudController,de as Database,oe as Env,ue as Forgot,xe as ForgotController,le as Group,pe as GroupRoute,Le as GroupsController,Ce as GroupsRoutesController,_e as Log,Pe as Logs,fe as LogsColor,Ke as LogsController,qe as ModelController,je as Permission,ge as Register,He as RegisterController,Re as ReqAuth,Ne as ReqFiles,De as ReqUser,me as Route,Me as RoutesController,ve as Session,Ge as SetupController,Te as Token,he as User,ye as UserGroup,Ue as UsersController,ze as UsersGroupsController,Oe as crt,Se as key,ae as sequelize};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andrewcaires/api",
-  "version": "3.0.14",
+  "version": "3.0.15",
   "description": "Simple api for small applications using express, jsonwebtoken, sequelize and websocket",
   "main": "./dist/index.cjs.js",
   "types": "./dist/index.d.ts",
@@ -71,7 +71,7 @@
     "@types/jsonwebtoken": "^9.0.6",
     "@types/mime-types": "^2.1.4",
     "@types/multer": "^1.4.11",
-    "@types/node": "^20.12.8",
+    "@types/node": "^20.12.11",
     "@types/ws": "^8.5.10",
     "@typescript-eslint/eslint-plugin": "^7.8.0",
     "@typescript-eslint/parser": "^7.8.0",