@andrewcaires/api 3.0.7 → 3.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/index.cjs.js +2 -2
  2. package/dist/index.d.ts +1 -1
  3. package/dist/index.esm.js +2 -2
  4. package/package.json +5 -5
package/dist/index.cjs.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * @andrewcaires/api v3.0.7
2
+ * @andrewcaires/api v3.0.8
3
3
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket
4
4
  * (c) 2023 Andrew Caires
5
5
  * @license: MIT
6
6
  */
7
- "use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class A extends s.Model{}A.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends s.Model{}v.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}var b;E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),P.hasMany(A),A.belongsTo(P),P.hasMany(v),v.belongsTo(P),O.hasMany(_),_.belongsTo(O),I.hasMany(_),_.belongsTo(I),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(b||(b={}));class w{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&w.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const x=e=>n.existsSync(e)?n.readFileSync(e):void 0,S={http:x(m.API_HTTP_CRT),token:x(m.API_TOKEN_CRT)},C={http:x(m.API_HTTP_KEY),token:x(m.API_TOKEN_KEY)};class q{static error(e){w.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return C.token?{token:i.sign(e,C.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=q.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(q.error);if(r){const e=yield A.findOne({where:{secret:t,userId:r.id}}).catch(q.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!S.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,S.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:S.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:C.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){w.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){w.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield q.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){w.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield I.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{w.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const M=e.parameterFactory((({req:e})=>e.auth)),F=e.parameterFactory((({req:e})=>e.user)),B=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?B(e,r):s};class G extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield q.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){w.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,a=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,B(i,d.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),p=l({storage:a,fileFilter(e,r,s){var o;return y(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),c=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;p.array(g,c)(s,r,(t=>t?e.Responses.error(r,t.message):o()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],G.prototype,"auth",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"permission",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],G.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],G.prototype,"validation",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"write",null),exports.AuthController=class extends G{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=q.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield A.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield N.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,M()),c(3,F()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,A,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(G)],exports.AuthController),exports.ForgotController=class extends G{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield v.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(G)],exports.ForgotController),exports.ModelController=class extends G{add(t,r,s){return y(this,void 0,void 0,(function*(){const o=yield this.model().create(t.body,s||{}).catch(this.error);if(o){const t=o.id;return e.Responses.data(r,{id:t}),t}return e.Responses.error(r,"Internal Server Error"),0}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?w.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params,[n]=(yield this.model().update(t.body,Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:o})})).catch(this.error))||[];return n?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(G)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupController),exports.GroupRouteController=class extends exports.ModelController{model(){return _}groupRouteAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield I.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteSet",null),exports.GroupRouteController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupRouteController),exports.LogsController=class extends exports.ModelController{model(){return E}logsAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"logsAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController);class L extends s.Model{}L.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),exports.RegisterController=class extends G{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield L.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(G)],exports.RegisterController),exports.RouteController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RouteController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RouteController),exports.SetupController=class extends G{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield I.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield I.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(G)],exports.SetupController),exports.UserController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}userAdd(e,t){t.body.password=a.SHA256(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(t,r,s,o){if(!s||s.id.toString()==o)return e.Responses.error(t,"Internal Server Error");this.del(r,t)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=a.SHA256(t.body.password).toString()),this.set(t,e)}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Object)],exports.UserController.prototype,"userDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userSet",null),exports.UserController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserController),exports.UserGroupController=class extends exports.ModelController{model(){return f}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UserGroupController.prototype,"userGroupsAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsSet",null),exports.UserGroupController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserGroupController),exports.Application=D,exports.Auth=A,exports.Config=j,exports.Configs=T,exports.ControllerBase=G,exports.Database=h,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=_,exports.Log=w,exports.Logs=E,exports.Permission=N,exports.ReqAuth=M,exports.ReqUser=F,exports.Route=I,exports.Token=q,exports.User=P,exports.UserGroup=f,exports.crt=S,exports.key=C,exports.sequelize=R;
7
+ "use strict";var e=require("@andrewcaires/express"),t=require("@andrewcaires/utils.js"),r=require("ws"),s=require("sequelize"),o=require("dotenv"),n=require("fs"),i=require("jsonwebtoken"),a=require("crypto-js"),d=require("mime-types"),l=require("multer"),u=require("path");function p(e,t,r,s){var o,n=arguments.length,i=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(i=(n<3?o(i):n>3?o(t,r,i):o(t,r))||i);return n>3&&i&&Object.defineProperty(t,r,i),i}function c(e,t){return function(r,s){t(r,s,e)}}function g(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function y(e,t,r,s){return new(r||(r=Promise))((function(o,n){function i(e){try{d(s.next(e))}catch(e){n(e)}}function a(e){try{d(s.throw(e))}catch(e){n(e)}}function d(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(i,a)}d((s=s.apply(e,t||[])).next())}))}o.config();class m{}m.API_CONSOLE_ERROR=t.toBool(process.env.API_CONSOLE_ERROR||"false"),m.API_DB_DATABASE=process.env.API_DB_DATABASE||"",m.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",m.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",m.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),m.API_DB_TYPE=process.env.API_DB_TYPE||"",m.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",m.API_DB_LOG=t.toBool(process.env.API_DB_LOG||"false"),m.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",m.API_HTTP_CRT=process.env.API_HTTP_CRT||"",m.API_HTTP_KEY=process.env.API_HTTP_KEY||"",m.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),m.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",m.API_HTTP_CROSS=t.toBool(process.env.API_HTTP_CROSS||"false"),m.API_HTTP_HYBRID=t.toBool(process.env.API_HTTP_HYBRID||"false"),m.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),m.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),m.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),m.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",m.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",m.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",m.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),m.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),m.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",m.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),m.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",m.API_WEBSOCKET_START=t.toBool(process.env.API_WEBSOCKET_START||"false");class h{static connect(e){const t="connect_"+m.API_DB_TYPE.toLowerCase();if(t in h)return h[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new s.Sequelize("sqlite::memory:",{logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new s.Sequelize(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:m.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new s.Sequelize({dialect:"sqlite",storage:e.database,logging:m.API_DB_LOG,define:{timestamps:!1}})}}const R=h.connect({database:m.API_DB_DATABASE,username:m.API_DB_USERNAME,password:m.API_DB_PASSWORD,hostname:m.API_DB_HOST,hostport:m.API_DB_PORT});class A extends s.Model{}A.init({login:s.DataTypes.BIGINT,logout:s.DataTypes.BIGINT,secret:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,useragent:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class v extends s.Model{}v.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class O extends s.Model{}O.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class I extends s.Model{}I.init({name:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class _ extends s.Model{}_.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),_.removeAttribute("id");class P extends s.Model{}P.init({name:s.DataTypes.STRING,email:s.DataTypes.STRING,username:s.DataTypes.STRING,password:s.DataTypes.STRING,avatar:s.DataTypes.STRING,description:s.DataTypes.TEXT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class f extends s.Model{}f.init({},{sequelize:R,modelName:m.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),f.removeAttribute("id");class T extends s.Model{}T.init({key:s.DataTypes.STRING,value:s.DataTypes.STRING},{sequelize:R,modelName:m.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),T.removeAttribute("id");class E extends s.Model{}var b;E.init({type:s.DataTypes.STRING,source:s.DataTypes.STRING,message:s.DataTypes.TEXT},{sequelize:R,modelName:m.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),P.hasMany(A),A.belongsTo(P),P.hasMany(v),v.belongsTo(P),O.hasMany(_),_.belongsTo(O),I.hasMany(_),_.belongsTo(I),P.hasMany(f),f.belongsTo(P),O.hasMany(f),f.belongsTo(O),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(b||(b={}));class w{static write(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.NONE,"",e,t,r)}))}static error(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"error",e,t,r)}))}static info(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.INFO,"info",e,t,r)}))}static success(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.ERROR,"success",e,t,r)}))}static warning(e,t,r){return y(this,void 0,void 0,(function*(){yield w.writeRaw(b.WARNING,"warning",e,t,r)}))}static writeConsole(e,r,s){const o=t.dateFormat(new Date,"%H:%M:%S");console.log(">",e,r+" ".repeat(10-r.length),"","|",o,"|",s)}static writeRaw(e,t,r,s,o){return y(this,void 0,void 0,(function*(){o&&w.writeConsole(e,t,r),R&&(yield E.create({type:t,source:s,message:r}).catch((()=>null)))}))}}const x=e=>n.existsSync(e)?n.readFileSync(e):void 0,S={http:x(m.API_HTTP_CRT),token:x(m.API_TOKEN_CRT)},C={http:x(m.API_HTTP_KEY),token:x(m.API_TOKEN_KEY)};class q{static error(e){w.error(e.message,"api.token",m.API_CONSOLE_ERROR)}static sign(e){return C.token?{token:i.sign(e,C.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return y(this,void 0,void 0,(function*(){const{error:t,decode:r}=q.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield P.findOne({where:{id:e,state:!0}}).catch(q.error);if(r){const e=yield A.findOne({where:{secret:t,userId:r.id}}).catch(q.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*m.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!S.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:i.verify(e,S.token)}}catch(e){return{error:"Invalid Token"}}}}class D extends e.Application{constructor(e){super(e,{cert:S.http,cross:m.API_HTTP_CROSS,hybrid:m.API_HTTP_HYBRID,key:C.http,path:"/api",port:m.API_HTTP_PORT,public:m.API_HTTP_PUBLIC})}error(e,t){w.info(e.message,t,m.API_CONSOLE_ERROR)}log(e,t){w.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return y(this,void 0,void 0,(function*(){yield R.sync(),yield e.listen.call(this),m.API_WEBSOCKET_START&&this.server&&(this._webSocket=new r.Server({server:this.server,verifyClient:(e,t)=>t(m.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,r)=>y(this,void 0,void 0,(function*(){r.url||(r.url="");const s=r.url.length<=1?"":r.url.replace(/\//g,".");let o;e.on("message",(t=>y(this,void 0,void 0,(function*(){if(o)try{const n=JSON.parse(t);this.emit("ws.message"+s,{data:n,message:t,req:r,user:o,ws:e})}catch(n){this.emit("ws.message"+s,{message:t,req:r,user:o,ws:e})}else{const{user:n}=yield q.user(t.toString());n&&(o=n,this.emit("ws.connection"+s,{req:r,user:o,ws:e}))}o||e.close()})))),e.on("close",(()=>{o&&this.emit("ws.close"+s,{user:o,ws:e})})),yield t.sleep(2e3),o||e.close()})))))}))}websocket(){return this._webSocket}}class j{static all(){return y(this,void 0,void 0,(function*(){const e=yield T.findAll().catch(j.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return y(this,void 0,void 0,(function*(){return((yield T.destroy({where:{key:e}}).catch(j.error))||0)>0}))}static error(e){w.error(e.message,"api.config",m.API_CONSOLE_ERROR)}static get(e){return y(this,void 0,void 0,(function*(){const t=yield T.findOne({where:{key:e}}).catch(j.error);return t&&t.value||""}))}static set(e,t){return y(this,void 0,void 0,(function*(){const[r]=(yield T.findOrCreate({where:{key:e}}).catch(j.error))||[];r&&(r.value=t,yield r.save().catch(j.error))}))}}class N{static all(e,t){return y(this,void 0,void 0,(function*(){return yield I.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:_,required:!0,include:[{model:O,required:!0,where:{state:!0},include:[{model:f,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{w.error(e.message,"api.permission",m.API_CONSOLE_ERROR)}))}))}static get(e){return y(this,void 0,void 0,(function*(){const t=yield N.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return y(this,void 0,void 0,(function*(){const r=yield N.all(e,{name:t});return!!r&&r.length>0}))}}const M=e.parameterFactory((({req:e})=>e.auth)),F=e.parameterFactory((({req:e})=>e.user)),B=(e,r)=>{const s=t.uuidv4()+"."+r;return n.existsSync(u.join(e,s))?B(e,r):s};class G extends t.EventEmitter{auth(t,r,s,o,n){return y(this,void 0,void 0,(function*(){const{auth:i,error:a,user:d}=yield q.user(s);return a?e.Responses.error(t,a):i&&d?(o&&(i.useragent=o),yield i.save(),r.auth=i,r.user=d,n()):e.Responses.error(t,"Internal Server Error")}))}error(e){w.error(e.message,"api.controller",m.API_CONSOLE_ERROR)}name(){return"api"}permission(t,r,s,o){return y(this,void 0,void 0,(function*(){return r?(yield N.is(r,o))?s():e.Responses.error(t,"Unauthorized access"):e.Responses.unauthorized(t,"Access denied")}))}read(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".read")}upload(r,s,o,n){const i=(null==n?void 0:n.path)||m.API_UPLOAD_TEMP,a=l.diskStorage({destination:(e,t,r)=>r(null,i),filename:(e,t,r)=>y(this,void 0,void 0,(function*(){return r(null,B(i,d.extension(t.mimetype)||"bin"))}))}),u=1e6*((null==n?void 0:n.size)||m.API_UPLOAD_SIZE),p=l({storage:a,fileFilter(e,r,s){var o;return y(this,void 0,void 0,(function*(){const e=null===(o=null==n?void 0:n.types)||void 0===o?void 0:o.indexOf(r.mimetype);return t.isNumber(e)&&e<0?s(new Error("File type not allowed")):s(null,!0)}))},limits:{fileSize:u}}),c=(null==n?void 0:n.count)||m.API_UPLOAD_COUNT,g=(null==n?void 0:n.field)||m.API_UPLOAD_FIELD;p.array(g,c)(s,r,(t=>t?e.Responses.error(r,t.message):o()))}validation(r,s,o,n){return y(this,void 0,void 0,(function*(){const{error:i,value:a}=yield t.Validation.object(n).parse().validateAsync(s.body);return i?e.Responses.validation(r,i):(s.body=a,o())}))}write(e,t,r,s){return this.permission(e,t,r,(s||this.name())+".write")}}p([c(0,e.Res()),c(1,e.Req()),c(2,e.Headers(m.API_TOKEN_HEADER)),c(3,e.Headers("user-agent")),c(4,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,String,Function]),g("design:returntype",Promise)],G.prototype,"auth",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"permission",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"read",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",void 0)],G.prototype,"upload",null),p([c(0,e.Res()),c(1,e.Req()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function,Object]),g("design:returntype",Promise)],G.prototype,"validation",null),p([c(0,e.Res()),c(1,F()),c(2,e.Next()),c(3,e.Argument()),g("design:type",Function),g("design:paramtypes",[Object,P,Function,String]),g("design:returntype",Promise)],G.prototype,"write",null),exports.AuthController=class extends G{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_AUTH);const{username:i,password:d}=s.body,l=yield P.findOne({where:{username:i}}).catch(this.error);if(!l)return n.emit("auth.failure",{req:s}),e.Responses.notfound(r,"Username not found");if(!l.state)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Username is disabled");const u=a.SHA256(d).toString();if(l.password!=u)return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Invalid password");const p=l.id,c=t.uniqueID(),{error:g,token:y}=q.sign({id:p,secret:c});if(g)return n.emit("auth.failure",{req:s}),e.Responses.error(r,g);if(y){const t=Date.now(),n=t+6e4*m.API_TOKEN_LIFETIME,i=yield A.create({login:t,secret:c,timestamp:n,useragent:o,userId:p}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:s,user:l}),e.Responses.data(r,{token:y})}return n.emit("auth.failure",{req:s}),e.Responses.error(r,"Internal Server Error")}))}logout(t,r,s,o,n){return y(this,void 0,void 0,(function*(){return s&&o&&!s.logout?(s.logout=Date.now(),s.timestamp=s.logout,yield s.save(),n.emit("auth.logout",{auth:s,req:r,user:o}),e.Responses.success(t,"Disconcerted")):e.Responses.unauthorized(t,"Access denied")}))}user(r,s){return y(this,void 0,void 0,(function*(){const o=s.user;if(!o)return e.Responses.unauthorized(r,"Access denied");const n=yield N.all(o);if(n){const s=n.map((e=>e.name));return e.Responses.data(r,Object.assign(Object.assign({},t.allowedObject(this.attributes,o.toJSON())),{permissions:s}))}return e.Responses.error(r,"Internal Server Error")}))}},p([e.Post("/login"),e.Middleware("validation",{username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Headers("user-agent")),c(3,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,String,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"login",null),p([e.Get("/logout"),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),c(2,M()),c(3,F()),c(4,e.App()),g("design:type",Function),g("design:paramtypes",[Object,Object,A,P,D]),g("design:returntype",Promise)],exports.AuthController.prototype,"logout",null),p([e.Get(),e.Middleware("auth"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.AuthController.prototype,"user",null),exports.AuthController=p([e.Controller("/auth"),e.Extends(G)],exports.AuthController),exports.ForgotController=class extends G{check(r,s){return y(this,void 0,void 0,(function*(){const{token:o}=s.body,n=yield this.findOne(o);return n&&n.user?(n.token=t.uniqueID(),yield n.save(),e.Responses.data(r,{token:n.token})):e.Responses.notfound(r,"User not found")}))}forgot(r,s){return y(this,void 0,void 0,(function*(){const{username:o}=s.body;yield t.sleep(m.API_SLEEP_FORGOT);const n=yield P.findOne({where:{username:o}}).catch(this.error);if(!n)return e.Responses.notfound(r,"User not found");const i=t.uniqueID(),a=Date.now()+6e4*m.API_TOKEN_LIFETIME,d=yield v.create({token:i,timestamp:a,state:!0,userId:n.id});return this.emit("forgot",{forgot:d,req:s,user:n}),e.Responses.success(r,"OK")}))}reset(t,r){return y(this,void 0,void 0,(function*(){const{token:s,password:o}=r.body,n=yield this.findOne(s);return n?(n.state=!1,yield n.save().catch(this.error),n.user.password=a.SHA256(o).toString(),yield n.user.save().catch(this.error),this.emit("forgot.reset",{req:r,user:n.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}findOne(e){return y(this,void 0,void 0,(function*(){return yield v.findOne({where:{token:e,state:!0},include:[{model:P,required:!0}]}).catch(this.error)}))}},p([e.Get("/check"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"check",null),p([e.Get(),e.Middleware("validation",{username:t.Validation.string().min(4).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"forgot",null),p([e.Get("/reset"),e.Middleware("validation",{token:t.Validation.string().required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",Promise)],exports.ForgotController.prototype,"reset",null),exports.ForgotController=p([e.Controller("/forgot"),e.Extends(G)],exports.ForgotController),exports.ModelController=class extends G{add(t,r,s){return y(this,void 0,void 0,(function*(){const o=yield this.model().create(t.body,s||{}).catch(this.error);if(o){const t=o.id;return e.Responses.data(r,{id:t}),t}return e.Responses.error(r,"Internal Server Error"),0}))}all(r,o,n,i){var a,d,l,u,p;return y(this,void 0,void 0,(function*(){const c=this.model(),g=Object.assign({},n||{});g.where=Object.assign({},g.where||{});const y=null===(a=r.query.limit)||void 0===a?void 0:a.toString();y&&(g.limit=parseInt(y));const m=null===(d=r.query.offset)||void 0===d?void 0:d.toString();m&&(g.offset=parseInt(m));const h=Object.keys(c.getAttributes()),R=[],A=null===(l=r.query.asc)||void 0===l?void 0:l.toString();A&&A.length&&A.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"ASC"])}));const v=null===(u=r.query.desc)||void 0===u?void 0:u.toString();v&&v.length&&v.split(",").forEach((e=>{h.indexOf(e)>=0&&R.push([e,"DESC"])})),R.length&&(g.order=R);const O=[],I=t.isArray(g.attributes)?g.attributes:h,_=null===(p=r.query.search)||void 0===p?void 0:p.toString();I.forEach((e=>{var o;if(t.isString(e)&&(_&&_.length&&O.push({[e]:{[s.Op.like]:`%${_}%`}}),"search_"+e in r.query)){const t=null===(o=r.query["search_"+e])||void 0===o?void 0:o.toString();t&&t.length&&O.push({[e]:{[s.Op.like]:`%${t}%`}})}})),O.length&&(g.where=Object.assign(Object.assign({},g.where),{[s.Op.or]:[...O]}));const P=yield c.count(Object.assign(Object.assign({},g),{col:h[0]})).catch(this.error),f=yield c.findAll(g).catch(this.error);if(f)return e.Responses.data(o,{count:P,records:i?i(f):f}),f;e.Responses.error(o,"Internal Server Error")}))}del(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params;if(!o)return e.Responses.error(r,"Internal Server Error"),0;const n=yield this.model().destroy(Object.assign(Object.assign({},s||{}),{where:{id:o}})).catch(this.error);return n?(e.Responses.success(r,"OK"),n):(e.Responses.notfound(r,"Record not found"),0)}))}error(e){e.sql?w.error(e.message+"\n"+e.sql,"api.controller.sql",m.API_CONSOLE_ERROR):super.error(e)}get(t,r,s,o){return y(this,void 0,void 0,(function*(){const n=Object.assign({},s||{});n.where=n.where?Object.assign({},n.where):{};const{id:i}=t.params,a=yield this.model().findByPk(i,n).catch(this.error);if(a)return e.Responses.data(r,o?o(a):a.toJSON()),a;null!==a?e.Responses.error(r,"Internal Server Error"):e.Responses.notfound(r,"Record not found")}))}name(){return this.model().tableName}set(t,r,s){return y(this,void 0,void 0,(function*(){const{id:o}=t.params,[n]=(yield this.model().update(t.body,Object.assign(Object.assign({},s||{}),{where:Object.assign(Object.assign({},(s||{}).where),{id:o})})).catch(this.error))||[];return n?(e.Responses.success(r,"OK"),!0):(e.Responses.success(r,"Record not changed"),!1)}))}},exports.ModelController=p([e.Extends(G)],exports.ModelController),exports.CrudController=class extends exports.ModelController{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationAdd"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validationSet"),c(0,e.Req()),c(1,e.Res()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.CrudController.prototype,"recordSet",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationAdd",null),p([c(0,e.Req()),c(1,e.Res()),c(2,e.Next()),g("design:type",Function),g("design:paramtypes",[Object,Object,Function]),g("design:returntype",void 0)],exports.CrudController.prototype,"validationSet",null),exports.CrudController=p([e.Extends(exports.ModelController)],exports.CrudController),exports.GroupController=class extends exports.CrudController{model(){return O}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.GroupController=p([e.Controller("/groups"),e.Extends(exports.CrudController)],exports.GroupController),exports.GroupRouteController=class extends exports.ModelController{model(){return _}groupRouteAll(e,t,r){return y(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:I,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield O.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield _.destroy({where:{groupId:t}}),o){let e=0;for(let r=0;r<o.length;r++)e=yield I.count({where:{id:o[r]}}),e&&(yield _.create({groupId:t,routeId:o[r]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/routes"),e.Middleware("auth"),e.Middleware("read","groups"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteAll",null),p([e.Put("/:id/routes"),e.Middleware("auth"),e.Middleware("write","groups"),e.Middleware("validation",{routes:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("routes")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.GroupRouteController.prototype,"groupRouteSet",null),exports.GroupRouteController=p([e.Controller("/groups"),e.Extends(exports.ModelController)],exports.GroupRouteController),exports.LogsController=class extends exports.ModelController{model(){return E}logsAll(e,t){const{source:r,type:s}=t.query,o=r&&s?{source:r,type:s}:r?{source:r}:s?{type:s}:{};this.all(t,e,{where:o,order:[["created","DESC"]]})}},p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.LogsController.prototype,"logsAll",null),exports.LogsController=p([e.Controller("/logs"),e.Extends(exports.ModelController)],exports.LogsController);class L extends s.Model{}L.init({token:s.DataTypes.STRING,timestamp:s.DataTypes.BIGINT,state:s.DataTypes.BOOLEAN},{sequelize:R,modelName:m.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"}),exports.RegisterController=class extends G{confirm(t,r){return y(this,void 0,void 0,(function*(){const s=yield L.findOne({where:{token:r,state:!0},include:[{model:P,required:!0}]}).catch(this.error);return s?(s.user.state=!0,yield s.user.save().catch(this.error),this.emit("user.confirm",{user:s.user}),e.Responses.success(t,"OK")):e.Responses.notfound(t,"User not found")}))}register(r,s,o,n){return y(this,void 0,void 0,(function*(){yield t.sleep(m.API_SLEEP_REGISTRY);const s=yield P.findOne({where:{username:n}}).catch(this.error);if(s)return e.Responses.error(r,"Invalid Username");if(!t.isNull(s))return e.Responses.error(r,"Internal Server Error");const i=yield P.create(Object.assign(Object.assign({},o),{state:!1}));return this.emit("user.register",{user:i}),e.Responses.success(r,"OK")}))}},p([e.Get("/confirm"),e.Middleware("validation",{token:t.Validation.string().required()}),c(0,e.Res()),c(1,e.Body("token")),g("design:type",Function),g("design:paramtypes",[Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"confirm",null),p([e.Get(),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required()}),c(0,e.Res()),c(1,e.Req()),c(2,e.Body()),c(3,e.Body("username")),g("design:type",Function),g("design:paramtypes",[Object,Object,Object,String]),g("design:returntype",Promise)],exports.RegisterController.prototype,"register",null),exports.RegisterController=p([e.Controller("/register"),e.Extends(G)],exports.RegisterController),exports.RouteController=class extends exports.CrudController{model(){return I}create(){return{name:t.Validation.string().required(),description:t.Validation.string().empty(""),state:t.Validation.boolean().parse().required()}}update(){return{name:t.Validation.string().empty(),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}}},exports.RouteController=p([e.Controller("/routes"),e.Extends(exports.CrudController)],exports.RouteController),exports.SetupController=class extends G{setup(r){return y(this,void 0,void 0,(function*(){if(0==(yield P.count())){const e={description:"",state:!0},r=yield P.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),s=yield O.create(Object.assign({name:"admin"},e));yield f.create({userId:r.id,groupId:s.id});const o=["read","write"],n=["users","groups","routes"];yield t.forEachSeries(n,(r=>y(this,void 0,void 0,(function*(){yield t.forEachSeries(o,(t=>y(this,void 0,void 0,(function*(){const o=r+"."+t,n=yield I.create(Object.assign({name:o},e));yield _.create({groupId:s.id,routeId:n.id})}))))}))));const i=yield I.create(Object.assign({name:"logs.read"},e));yield _.create({groupId:s.id,routeId:i.id})}return e.Responses.success(r,"OK")}))}},p([e.Get(),c(0,e.Res()),g("design:type",Function),g("design:paramtypes",[Object]),g("design:returntype",Promise)],exports.SetupController.prototype,"setup",null),exports.SetupController=p([e.Controller("/setup"),e.Extends(G)],exports.SetupController),exports.UserController=class extends exports.ModelController{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return P}userAdd(e,t){t.body.password=a.SHA256(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(t,r,s,o){if(!s||s.id.toString()==o)return e.Responses.error(t,"Internal Server Error");this.del(r,t)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=a.SHA256(t.body.password).toString()),this.set(t,e)}},p([e.Post(),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().required(),email:t.Validation.string().email().required(),username:t.Validation.string().min(4).required(),password:t.Validation.string().min(5).required(),description:t.Validation.string().required(),state:t.Validation.boolean().parse().required()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAdd",null),p([e.Get(),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userAll",null),p([e.Delete("/:id"),e.Middleware("auth"),e.Middleware("write"),c(0,e.Res()),c(1,e.Req()),c(2,F()),c(3,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,P,String]),g("design:returntype",Object)],exports.UserController.prototype,"userDel",null),p([e.Get("/:id"),e.Middleware("auth"),e.Middleware("read"),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userGet",null),p([e.Put("/:id"),e.Middleware("auth"),e.Middleware("write"),e.Middleware("validation",{name:t.Validation.string().empty(),email:t.Validation.string().email().empty(),username:t.Validation.string().min(4).empty(),password:t.Validation.string().min(5).empty().filter(""),description:t.Validation.string().empty(),state:t.Validation.boolean().parse().empty()}),c(0,e.Res()),c(1,e.Req()),g("design:type",Function),g("design:paramtypes",[Object,Object]),g("design:returntype",void 0)],exports.UserController.prototype,"userSet",null),exports.UserController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserController),exports.UserGroupController=class extends exports.ModelController{model(){return f}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:O,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(r,s,o){return y(this,void 0,void 0,(function*(){const n=yield P.findByPk(s,{attributes:["id"]}).catch(this.error);if(n){if(yield f.destroy({where:{userId:n.id}}),o){let e=0;for(let t=0;t<o.length;t++)e=yield O.count({where:{id:o[t]}}),e&&(yield f.create({userId:n.id,groupId:o[t]}))}return e.Responses.success(r,"OK")}return t.isNull(n)?e.Responses.notfound(r,"Record not found"):e.Responses.error(r,"Internal Server Error")}))}},p([e.Get("/:id/groups"),e.Middleware("auth"),e.Middleware("read","users"),c(0,e.Res()),c(1,e.Req()),c(2,e.Params("id")),g("design:type",Function),g("design:paramtypes",[Object,Object,String]),g("design:returntype",void 0)],exports.UserGroupController.prototype,"userGroupsAll",null),p([e.Put("/:id/groups"),e.Middleware("auth"),e.Middleware("write","users"),e.Middleware("validation",{groups:t.Validation.array(t.Validation.number().parse())}),c(0,e.Res()),c(1,e.Params("id")),c(2,e.Body("groups")),g("design:type",Function),g("design:paramtypes",[Object,String,Array]),g("design:returntype",Promise)],exports.UserGroupController.prototype,"userGroupsSet",null),exports.UserGroupController=p([e.Controller("/users"),e.Extends(exports.ModelController)],exports.UserGroupController),exports.Application=D,exports.Auth=A,exports.Config=j,exports.Configs=T,exports.ControllerBase=G,exports.Database=h,exports.Env=m,exports.Forgot=v,exports.Group=O,exports.GroupRoute=_,exports.Log=w,exports.Logs=E,exports.Permission=N,exports.ReqAuth=M,exports.ReqUser=F,exports.Route=I,exports.Token=q,exports.User=P,exports.UserGroup=f,exports.crt=S,exports.key=C,exports.sequelize=R;
package/dist/index.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  /*!
2
- * @andrewcaires/api v3.0.7
2
+ * @andrewcaires/api v3.0.8
3
3
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket
4
4
  * (c) 2023 Andrew Caires
5
5
  * @license: MIT
package/dist/index.esm.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * @andrewcaires/api v3.0.7
2
+ * @andrewcaires/api v3.0.8
3
3
  * Simple api for small applications using express, jsonwebtoken, sequelize and websocket
4
4
  * (c) 2023 Andrew Caires
5
5
  * @license: MIT
6
6
  */
7
- import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as s,Next as i,Argument as o,Responses as a,Post as d,Middleware as u,App as c,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,EventEmitter as A,isNumber as f,Validation as P,uuidv4 as E,uniqueID as b,allowedObject as T,isArray as S,isString as R,isNull as w,forEachSeries as j}from"@andrewcaires/utils.js";import N from"ws";import{Sequelize as q,DataTypes as F,Model as D,Op as L}from"sequelize";import{config as B}from"dotenv";import{existsSync as k,readFileSync as G}from"fs";import{sign as C,verify as x}from"jsonwebtoken";import{SHA256 as K}from"crypto-js";import U from"mime-types";import H from"multer";import{join as z}from"path";function M(e,t,r,n){var s,i=arguments.length,o=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,r,o):s(t,r))||o);return i>3&&o&&Object.defineProperty(t,r,o),o}function X(e,t){return function(r,n){t(r,n,e)}}function Y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function W(e,t,r,n){return new(r||(r=Promise))((function(s,i){function o(e){try{d(n.next(e))}catch(e){i(e)}}function a(e){try{d(n.throw(e))}catch(e){i(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,a)}d((n=n.apply(e,t||[])).next())}))}B();class J{}J.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),J.API_DB_DATABASE=process.env.API_DB_DATABASE||"",J.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",J.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",J.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),J.API_DB_TYPE=process.env.API_DB_TYPE||"",J.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",J.API_DB_LOG=O(process.env.API_DB_LOG||"false"),J.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",J.API_HTTP_CRT=process.env.API_HTTP_CRT||"",J.API_HTTP_KEY=process.env.API_HTTP_KEY||"",J.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),J.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",J.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),J.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),J.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),J.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),J.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),J.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",J.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",J.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",J.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),J.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),J.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",J.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),J.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",J.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class Z{static connect(e){const t="connect_"+J.API_DB_TYPE.toLowerCase();if(t in Z)return Z[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new q("sqlite::memory:",{logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new q({dialect:"sqlite",storage:e.database,logging:J.API_DB_LOG,define:{timestamps:!1}})}}const $=Z.connect({database:J.API_DB_DATABASE,username:J.API_DB_USERNAME,password:J.API_DB_PASSWORD,hostname:J.API_DB_HOST,hostport:J.API_DB_PORT});class Q extends D{}Q.init({login:F.BIGINT,logout:F.BIGINT,secret:F.STRING,timestamp:F.BIGINT,useragent:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class V extends D{}V.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends D{}ee.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends D{}te.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class re extends D{}re.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),re.removeAttribute("id");class ne extends D{}ne.init({name:F.STRING,email:F.STRING,username:F.STRING,password:F.STRING,avatar:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class se extends D{}se.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),se.removeAttribute("id");class ie extends D{}ie.init({key:F.STRING,value:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.removeAttribute("id");class oe extends D{}var ae;oe.init({type:F.STRING,source:F.STRING,message:F.TEXT},{sequelize:$,modelName:J.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),ne.hasMany(Q),Q.belongsTo(ne),ne.hasMany(V),V.belongsTo(ne),ee.hasMany(re),re.belongsTo(ee),te.hasMany(re),re.belongsTo(te),ne.hasMany(se),se.belongsTo(ne),ee.hasMany(se),se.belongsTo(ee),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ae||(ae={}));class de{static write(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.NONE,"",e,t,r)}))}static error(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"error",e,t,r)}))}static info(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.INFO,"info",e,t,r)}))}static success(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"success",e,t,r)}))}static warning(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,s){return W(this,void 0,void 0,(function*(){s&&de.writeConsole(e,t,r),$&&(yield oe.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const ue=e=>k(e)?G(e):void 0,ce={http:ue(J.API_HTTP_CRT),token:ue(J.API_TOKEN_CRT)},le={http:ue(J.API_HTTP_KEY),token:ue(J.API_TOKEN_KEY)};class pe{static error(e){de.error(e.message,"api.token",J.API_CONSOLE_ERROR)}static sign(e){return le.token?{token:C(e,le.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return W(this,void 0,void 0,(function*(){const{error:t,decode:r}=pe.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield ne.findOne({where:{id:e,state:!0}}).catch(pe.error);if(r){const e=yield Q.findOne({where:{secret:t,userId:r.id}}).catch(pe.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*J.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!ce.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:x(e,ce.token)}}catch(e){return{error:"Invalid Token"}}}}class me extends e{constructor(e){super(e,{cert:ce.http,cross:J.API_HTTP_CROSS,hybrid:J.API_HTTP_HYBRID,key:le.http,path:"/api",port:J.API_HTTP_PORT,public:J.API_HTTP_PUBLIC})}error(e,t){de.info(e.message,t,J.API_CONSOLE_ERROR)}log(e,t){de.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return W(this,void 0,void 0,(function*(){yield $.sync(),yield e.listen.call(this),J.API_WEBSOCKET_START&&this.server&&(this._webSocket=new N.Server({server:this.server,verifyClient:(e,t)=>t(J.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>W(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(s=>W(this,void 0,void 0,(function*(){if(n)try{const i=JSON.parse(s);this.emit("ws.message"+r,{data:i,message:s,req:t,user:n,ws:e})}catch(i){this.emit("ws.message"+r,{message:s,req:t,user:n,ws:e})}else{const{user:i}=yield pe.user(s.toString());i&&(n=i,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class ge{static all(){return W(this,void 0,void 0,(function*(){const e=yield ie.findAll().catch(ge.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return W(this,void 0,void 0,(function*(){return((yield ie.destroy({where:{key:e}}).catch(ge.error))||0)>0}))}static error(e){de.error(e.message,"api.config",J.API_CONSOLE_ERROR)}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ie.findOne({where:{key:e}}).catch(ge.error);return t&&t.value||""}))}static set(e,t){return W(this,void 0,void 0,(function*(){const[r]=(yield ie.findOrCreate({where:{key:e}}).catch(ge.error))||[];r&&(r.value=t,yield r.save().catch(ge.error))}))}}class ye{static all(e,t){return W(this,void 0,void 0,(function*(){return yield te.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:re,required:!0,include:[{model:ee,required:!0,where:{state:!0},include:[{model:se,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{de.error(e.message,"api.permission",J.API_CONSOLE_ERROR)}))}))}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ye.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return W(this,void 0,void 0,(function*(){const r=yield ye.all(e,{name:t});return!!r&&r.length>0}))}}const he=t((({req:e})=>e.auth)),ve=t((({req:e})=>e.user)),Oe=(e,t)=>{const r=E()+"."+t;return k(z(e,r))?Oe(e,t):r};class _e extends A{auth(e,t,r,n,s){return W(this,void 0,void 0,(function*(){const{auth:i,error:o,user:d}=yield pe.user(r);return o?a.error(e,o):i&&d?(n&&(i.useragent=n),yield i.save(),t.auth=i,t.user=d,s()):a.error(e,"Internal Server Error")}))}error(e){de.error(e.message,"api.controller",J.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return W(this,void 0,void 0,(function*(){return t?(yield ye.is(t,n))?r():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const s=(null==n?void 0:n.path)||J.API_UPLOAD_TEMP,i=H.diskStorage({destination:(e,t,r)=>r(null,s),filename:(e,t,r)=>W(this,void 0,void 0,(function*(){return r(null,Oe(s,U.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||J.API_UPLOAD_SIZE),d=H({storage:i,fileFilter(e,t,r){var s;return W(this,void 0,void 0,(function*(){const e=null===(s=null==n?void 0:n.types)||void 0===s?void 0:s.indexOf(t.mimetype);return f(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),u=(null==n?void 0:n.count)||J.API_UPLOAD_COUNT,c=(null==n?void 0:n.field)||J.API_UPLOAD_FIELD;d.array(c,u)(t,e,(t=>t?a.error(e,t.message):r()))}validation(e,t,r,n){return W(this,void 0,void 0,(function*(){const{error:s,value:i}=yield P.object(n).parse().validateAsync(t.body);return s?a.validation(e,s):(t.body=i,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}M([X(0,r()),X(1,n()),X(2,s(J.API_TOKEN_HEADER)),X(3,s("user-agent")),X(4,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,String,Function]),Y("design:returntype",Promise)],_e.prototype,"auth",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"permission",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"read",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",void 0)],_e.prototype,"upload",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",Promise)],_e.prototype,"validation",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"write",null);let Ie=class extends _e{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_AUTH);const{username:s,password:i}=t.body,o=yield ne.findOne({where:{username:s}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),a.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),a.error(e,"Username is disabled");const d=K(i).toString();if(o.password!=d)return n.emit("auth.failure",{req:t}),a.error(e,"Invalid password");const u=o.id,c=b(),{error:l,token:p}=pe.sign({id:u,secret:c});if(l)return n.emit("auth.failure",{req:t}),a.error(e,l);if(p){const n=Date.now(),s=n+6e4*J.API_TOKEN_LIFETIME,i=yield Q.create({login:n,secret:c,timestamp:s,useragent:r,userId:u}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:t,user:o}),a.data(e,{token:p})}return n.emit("auth.failure",{req:t}),a.error(e,"Internal Server Error")}))}logout(e,t,r,n,s){return W(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),s.emit("auth.logout",{auth:r,req:t,user:n}),a.success(e,"Disconcerted")):a.unauthorized(e,"Access denied")}))}user(e,t){return W(this,void 0,void 0,(function*(){const r=t.user;if(!r)return a.unauthorized(e,"Access denied");const n=yield ye.all(r);if(n){const t=n.map((e=>e.name));return a.data(e,Object.assign(Object.assign({},T(this.attributes,r.toJSON())),{permissions:t}))}return a.error(e,"Internal Server Error")}))}};M([d("/login"),u("validation",{username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,s("user-agent")),X(3,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,me]),Y("design:returntype",Promise)],Ie.prototype,"login",null),M([l("/logout"),u("auth"),X(0,r()),X(1,n()),X(2,he()),X(3,ve()),X(4,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Q,ne,me]),Y("design:returntype",Promise)],Ie.prototype,"logout",null),M([l(),u("auth"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ie.prototype,"user",null),Ie=M([p("/auth"),m(_e)],Ie);let Ae=class extends _e{check(e,t){return W(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=b(),yield n.save(),a.data(e,{token:n.token})):a.notfound(e,"User not found")}))}forgot(e,t){return W(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(J.API_SLEEP_FORGOT);const n=yield ne.findOne({where:{username:r}}).catch(this.error);if(!n)return a.notfound(e,"User not found");const s=b(),i=Date.now()+6e4*J.API_TOKEN_LIFETIME,o=yield V.create({token:s,timestamp:i,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),a.success(e,"OK")}))}reset(e,t){return W(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,s=yield this.findOne(r);return s?(s.state=!1,yield s.save().catch(this.error),s.user.password=K(n).toString(),yield s.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:s.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}findOne(e){return W(this,void 0,void 0,(function*(){return yield V.findOne({where:{token:e,state:!0},include:[{model:ne,required:!0}]}).catch(this.error)}))}};M([l("/check"),u("validation",{token:P.string().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"check",null),M([l(),u("validation",{username:P.string().min(4).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"forgot",null),M([l("/reset"),u("validation",{token:P.string().required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"reset",null),Ae=M([p("/forgot"),m(_e)],Ae);let fe=class extends _e{add(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield this.model().create(e.body,r||{}).catch(this.error);if(n){const e=n.id;return a.data(t,{id:e}),e}return a.error(t,"Internal Server Error"),0}))}all(e,t,r,n){var s,i,o,d,u;return W(this,void 0,void 0,(function*(){const c=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(s=e.query.limit)||void 0===s?void 0:s.toString();p&&(l.limit=parseInt(p));const m=null===(i=e.query.offset)||void 0===i?void 0:i.toString();m&&(l.offset=parseInt(m));const g=Object.keys(c.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(d=e.query.desc)||void 0===d?void 0:d.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=S(l.attributes)?l.attributes:g,I=null===(u=e.query.search)||void 0===u?void 0:u.toString();_.forEach((t=>{var r;if(R(t)&&(I&&I.length&&O.push({[t]:{[L.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[L.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[L.or]:[...O]}));const A=yield c.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),f=yield c.findAll(l).catch(this.error);if(f)return a.data(t,{count:A,records:n?n(f):f}),f;a.error(t,"Internal Server Error")}))}del(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?de.error(e.message+"\n"+e.sql,"api.controller.sql",J.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return W(this,void 0,void 0,(function*(){const s=Object.assign({},r||{});s.where=s.where?Object.assign({},s.where):{};const{id:i}=e.params,o=yield this.model().findByPk(i,s).catch(this.error);if(o)return a.data(t,n?n(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params,[s]=(yield this.model().update(e.body,Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:n})})).catch(this.error))||[];return s?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};fe=M([m(_e)],fe);let Pe=class extends fe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};M([d(),u("auth"),u("write"),u("validationAdd"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAdd",null),M([l(),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAll",null),M([g("/:id"),u("auth"),u("write"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordDel",null),M([l("/:id"),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordGet",null),M([y("/:id"),u("auth"),u("write"),u("validationSet"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordSet",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationAdd",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationSet",null),Pe=M([m(fe)],Pe);let Ee=class extends Pe{model(){return ee}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};Ee=M([p("/groups"),m(Pe)],Ee);let be=class extends fe{model(){return re}groupRouteAll(e,t,r){return W(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:te,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ee.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield re.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield te.count({where:{id:r[n]}}),e&&(yield re.create({groupId:t,routeId:r[n]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/routes"),u("auth"),u("read","groups"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",Promise)],be.prototype,"groupRouteAll",null),M([y("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("routes")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],be.prototype,"groupRouteSet",null),be=M([p("/groups"),m(fe)],be);let Te=class extends fe{model(){return oe}logsAll(e,t){const{source:r,type:n}=t.query,s=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:s,order:[["created","DESC"]]})}};M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Te.prototype,"logsAll",null),Te=M([p("/logs"),m(fe)],Te);class Se extends D{}Se.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});let Re=class extends _e{confirm(e,t){return W(this,void 0,void 0,(function*(){const r=yield Se.findOne({where:{token:t,state:!0},include:[{model:ne,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}register(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_REGISTRY);const t=yield ne.findOne({where:{username:n}}).catch(this.error);if(t)return a.error(e,"Invalid Username");if(!w(t))return a.error(e,"Internal Server Error");const s=yield ne.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:s}),a.success(e,"OK")}))}};M([l("/confirm"),u("validation",{token:P.string().required()}),X(0,r()),X(1,v("token")),Y("design:type",Function),Y("design:paramtypes",[Object,String]),Y("design:returntype",Promise)],Re.prototype,"confirm",null),M([l(),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,v()),X(3,v("username")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Object,String]),Y("design:returntype",Promise)],Re.prototype,"register",null),Re=M([p("/register"),m(_e)],Re);let we=class extends Pe{model(){return te}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};we=M([p("/routes"),m(Pe)],we);let je=class extends _e{setup(e){return W(this,void 0,void 0,(function*(){if(0==(yield ne.count())){const e={description:"",state:!0},t=yield ne.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield ee.create(Object.assign({name:"admin"},e));yield se.create({userId:t.id,groupId:r.id});const n=["read","write"],s=["users","groups","routes"];yield j(s,(t=>W(this,void 0,void 0,(function*(){yield j(n,(n=>W(this,void 0,void 0,(function*(){const s=t+"."+n,i=yield te.create(Object.assign({name:s},e));yield re.create({groupId:r.id,routeId:i.id})}))))}))));const i=yield te.create(Object.assign({name:"logs.read"},e));yield re.create({groupId:r.id,routeId:i.id})}return a.success(e,"OK")}))}};M([l(),X(0,r()),Y("design:type",Function),Y("design:paramtypes",[Object]),Y("design:returntype",Promise)],je.prototype,"setup",null),je=M([p("/setup"),m(_e)],je);let Ne=class extends fe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return ne}userAdd(e,t){t.body.password=K(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(e,t,r,n){if(!r||r.id.toString()==n)return a.error(e,"Internal Server Error");this.del(t,e)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=K(t.body.password).toString()),this.set(t,e)}};M([d(),u("auth"),u("write"),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required(),description:P.string().required(),state:P.boolean().parse().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAdd",null),M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAll",null),M([g("/:id"),u("auth"),u("write"),X(0,r()),X(1,n()),X(2,ve()),X(3,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,ne,String]),Y("design:returntype",Object)],Ne.prototype,"userDel",null),M([l("/:id"),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userGet",null),M([y("/:id"),u("auth"),u("write"),u("validation",{name:P.string().empty(),email:P.string().email().empty(),username:P.string().min(4).empty(),password:P.string().min(5).empty(),description:P.string().empty(),state:P.boolean().parse().empty()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userSet",null),Ne=M([p("/users"),m(fe)],Ne);let qe=class extends fe{model(){return se}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:ee,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ne.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield se.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield ee.count({where:{id:r[t]}}),e&&(yield se.create({userId:n.id,groupId:r[t]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/groups"),u("auth"),u("read","users"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",void 0)],qe.prototype,"userGroupsAll",null),M([y("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("groups")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],qe.prototype,"userGroupsSet",null),qe=M([p("/users"),m(fe)],qe);export{me as Application,Q as Auth,Ie as AuthController,ge as Config,ie as Configs,_e as ControllerBase,Pe as CrudController,Z as Database,J as Env,V as Forgot,Ae as ForgotController,ee as Group,Ee as GroupController,re as GroupRoute,be as GroupRouteController,de as Log,oe as Logs,Te as LogsController,fe as ModelController,ye as Permission,Re as RegisterController,he as ReqAuth,ve as ReqUser,te as Route,we as RouteController,je as SetupController,pe as Token,ne as User,Ne as UserController,se as UserGroup,qe as UserGroupController,ce as crt,le as key,$ as sequelize};
7
+ import{Application as e,parameterFactory as t,Res as r,Req as n,Headers as s,Next as i,Argument as o,Responses as a,Post as d,Middleware as u,App as c,Get as l,Controller as p,Extends as m,Delete as g,Put as y,Params as h,Body as v}from"@andrewcaires/express";import{toBool as O,dateFormat as _,sleep as I,EventEmitter as A,isNumber as f,Validation as P,uuidv4 as E,uniqueID as b,allowedObject as T,isArray as S,isString as R,isNull as w,forEachSeries as j}from"@andrewcaires/utils.js";import N from"ws";import{Sequelize as q,DataTypes as F,Model as D,Op as L}from"sequelize";import{config as B}from"dotenv";import{existsSync as k,readFileSync as G}from"fs";import{sign as C,verify as x}from"jsonwebtoken";import{SHA256 as K}from"crypto-js";import U from"mime-types";import H from"multer";import{join as z}from"path";function M(e,t,r,n){var s,i=arguments.length,o=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,n);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,r,o):s(t,r))||o);return i>3&&o&&Object.defineProperty(t,r,o),o}function X(e,t){return function(r,n){t(r,n,e)}}function Y(e,t){if("object"==typeof Reflect&&"function"==typeof Reflect.metadata)return Reflect.metadata(e,t)}function W(e,t,r,n){return new(r||(r=Promise))((function(s,i){function o(e){try{d(n.next(e))}catch(e){i(e)}}function a(e){try{d(n.throw(e))}catch(e){i(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(o,a)}d((n=n.apply(e,t||[])).next())}))}B();class J{}J.API_CONSOLE_ERROR=O(process.env.API_CONSOLE_ERROR||"false"),J.API_DB_DATABASE=process.env.API_DB_DATABASE||"",J.API_DB_HOST=process.env.API_DB_HOST||"127.0.0.1",J.API_DB_PASSWORD=process.env.API_DB_PASSWORD||"",J.API_DB_PORT=parseInt(process.env.API_DB_PORT||"3306"),J.API_DB_TYPE=process.env.API_DB_TYPE||"",J.API_DB_USERNAME=process.env.API_DB_USERNAME||"root",J.API_DB_LOG=O(process.env.API_DB_LOG||"false"),J.API_TABLE_PREFIX=process.env.API_TABLE_PREFIX||"",J.API_HTTP_CRT=process.env.API_HTTP_CRT||"",J.API_HTTP_KEY=process.env.API_HTTP_KEY||"",J.API_HTTP_PORT=parseInt(process.env.API_HTTP_PORT||"3000"),J.API_HTTP_PUBLIC=process.env.API_HTTP_PUBLIC||"",J.API_HTTP_CROSS=O(process.env.API_HTTP_CROSS||"false"),J.API_HTTP_HYBRID=O(process.env.API_HTTP_HYBRID||"false"),J.API_SLEEP_AUTH=parseInt(process.env.API_SLEEP_AUTH||"1000"),J.API_SLEEP_FORGOT=parseInt(process.env.API_SLEEP_FORGOT||"5000"),J.API_SLEEP_REGISTRY=parseInt(process.env.API_SLEEP_REGISTRY||"5000"),J.API_TOKEN_CRT=process.env.API_TOKEN_CRT||"",J.API_TOKEN_KEY=process.env.API_TOKEN_KEY||"",J.API_TOKEN_HEADER=process.env.API_TOKEN_HEADER||"authorization",J.API_TOKEN_LIFETIME=parseInt(process.env.API_TOKEN_LIFETIME||"15"),J.API_UPLOAD_COUNT=parseInt(process.env.API_UPLOAD_COUNT||"1"),J.API_UPLOAD_FIELD=process.env.API_UPLOAD_FIELD||"upload",J.API_UPLOAD_SIZE=parseInt(process.env.API_UPLOAD_SIZE||"2"),J.API_UPLOAD_TEMP=process.env.API_UPLOAD_TEMP||"./temp",J.API_WEBSOCKET_START=O(process.env.API_WEBSOCKET_START||"false");class Z{static connect(e){const t="connect_"+J.API_DB_TYPE.toLowerCase();if(t in Z)return Z[t](e);throw new Error("No database is connected to this API")}static connect_mariadb(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mariadb",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_memory(){return new q("sqlite::memory:",{logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_mysql(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"mysql",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_postgres(e){return new q(e.database,e.username,e.password,{host:e.hostname,port:e.hostport,dialect:"postgres",logging:J.API_DB_LOG,define:{timestamps:!1}})}static connect_sqlite(e){return new q({dialect:"sqlite",storage:e.database,logging:J.API_DB_LOG,define:{timestamps:!1}})}}const $=Z.connect({database:J.API_DB_DATABASE,username:J.API_DB_USERNAME,password:J.API_DB_PASSWORD,hostname:J.API_DB_HOST,hostport:J.API_DB_PORT});class Q extends D{}Q.init({login:F.BIGINT,logout:F.BIGINT,secret:F.STRING,timestamp:F.BIGINT,useragent:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"auth",timestamps:!0,createdAt:"created",updatedAt:"updated"});class V extends D{}V.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"forgot",timestamps:!0,createdAt:"created",updatedAt:"updated"});class ee extends D{}ee.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"group",timestamps:!0,createdAt:"created",updatedAt:"updated"});class te extends D{}te.init({name:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"route",timestamps:!0,createdAt:"created",updatedAt:"updated"});class re extends D{}re.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"groups_routes",timestamps:!0,createdAt:"created",updatedAt:!1}),re.removeAttribute("id");class ne extends D{}ne.init({name:F.STRING,email:F.STRING,username:F.STRING,password:F.STRING,avatar:F.STRING,description:F.TEXT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"user",timestamps:!0,createdAt:"created",updatedAt:"updated"});class se extends D{}se.init({},{sequelize:$,modelName:J.API_TABLE_PREFIX+"users_groups",timestamps:!0,createdAt:"created",updatedAt:!1}),se.removeAttribute("id");class ie extends D{}ie.init({key:F.STRING,value:F.STRING},{sequelize:$,modelName:J.API_TABLE_PREFIX+"configs",timestamps:!0,createdAt:"created",updatedAt:"updated"}),ie.removeAttribute("id");class oe extends D{}var ae;oe.init({type:F.STRING,source:F.STRING,message:F.TEXT},{sequelize:$,modelName:J.API_TABLE_PREFIX+"logs",timestamps:!0,createdAt:"created",updatedAt:!1}),ne.hasMany(Q),Q.belongsTo(ne),ne.hasMany(V),V.belongsTo(ne),ee.hasMany(re),re.belongsTo(ee),te.hasMany(re),re.belongsTo(te),ne.hasMany(se),se.belongsTo(ne),ee.hasMany(se),se.belongsTo(ee),function(e){e.ERROR="",e.INFO="",e.NONE="",e.SUCCESS="",e.WARNING=""}(ae||(ae={}));class de{static write(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.NONE,"",e,t,r)}))}static error(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"error",e,t,r)}))}static info(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.INFO,"info",e,t,r)}))}static success(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.ERROR,"success",e,t,r)}))}static warning(e,t,r){return W(this,void 0,void 0,(function*(){yield de.writeRaw(ae.WARNING,"warning",e,t,r)}))}static writeConsole(e,t,r){const n=_(new Date,"%H:%M:%S");console.log(">",e,t+" ".repeat(10-t.length),"","|",n,"|",r)}static writeRaw(e,t,r,n,s){return W(this,void 0,void 0,(function*(){s&&de.writeConsole(e,t,r),$&&(yield oe.create({type:t,source:n,message:r}).catch((()=>null)))}))}}const ue=e=>k(e)?G(e):void 0,ce={http:ue(J.API_HTTP_CRT),token:ue(J.API_TOKEN_CRT)},le={http:ue(J.API_HTTP_KEY),token:ue(J.API_TOKEN_KEY)};class pe{static error(e){de.error(e.message,"api.token",J.API_CONSOLE_ERROR)}static sign(e){return le.token?{token:C(e,le.token,{algorithm:"RS256"})}:{error:"Invalid Secret"}}static user(e){return W(this,void 0,void 0,(function*(){const{error:t,decode:r}=pe.verify(e);if(t)return{error:t};if(r){const{id:e,secret:t}=r;if(e&&r){const r=yield ne.findOne({where:{id:e,state:!0}}).catch(pe.error);if(r){const e=yield Q.findOne({where:{secret:t,userId:r.id}}).catch(pe.error);if(e){const t=Date.now();if(t>e.timestamp)return e.logout=t,yield e.save(),{error:"Expired token"};if(e.timestamp=t+6e4*J.API_TOKEN_LIFETIME,!e.logout)return yield e.save(),{auth:e,user:r}}}return{error:"Access denied"}}}return{error:"Invalid token"}}))}static verify(e){if(!ce.token)return{error:"Invalid Secret"};if(!e||e.split(".").length<3)return{error:"Invalid Token"};try{return{decode:x(e,ce.token)}}catch(e){return{error:"Invalid Token"}}}}class me extends e{constructor(e){super(e,{cert:ce.http,cross:J.API_HTTP_CROSS,hybrid:J.API_HTTP_HYBRID,key:le.http,path:"/api",port:J.API_HTTP_PORT,public:J.API_HTTP_PUBLIC})}error(e,t){de.info(e.message,t,J.API_CONSOLE_ERROR)}log(e,t){de.info(e,t,!0)}listen(){const e=Object.create(null,{listen:{get:()=>super.listen}});return W(this,void 0,void 0,(function*(){yield $.sync(),yield e.listen.call(this),J.API_WEBSOCKET_START&&this.server&&(this._webSocket=new N.Server({server:this.server,verifyClient:(e,t)=>t(J.API_WEBSOCKET_START)}),this._webSocket.on("connection",((e,t)=>W(this,void 0,void 0,(function*(){t.url||(t.url="");const r=t.url.length<=1?"":t.url.replace(/\//g,".");let n;e.on("message",(s=>W(this,void 0,void 0,(function*(){if(n)try{const i=JSON.parse(s);this.emit("ws.message"+r,{data:i,message:s,req:t,user:n,ws:e})}catch(i){this.emit("ws.message"+r,{message:s,req:t,user:n,ws:e})}else{const{user:i}=yield pe.user(s.toString());i&&(n=i,this.emit("ws.connection"+r,{req:t,user:n,ws:e}))}n||e.close()})))),e.on("close",(()=>{n&&this.emit("ws.close"+r,{user:n,ws:e})})),yield I(2e3),n||e.close()})))))}))}websocket(){return this._webSocket}}class ge{static all(){return W(this,void 0,void 0,(function*(){const e=yield ie.findAll().catch(ge.error),t={};return e&&e.forEach((e=>{t[e.key]=e.value})),t}))}static del(e){return W(this,void 0,void 0,(function*(){return((yield ie.destroy({where:{key:e}}).catch(ge.error))||0)>0}))}static error(e){de.error(e.message,"api.config",J.API_CONSOLE_ERROR)}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ie.findOne({where:{key:e}}).catch(ge.error);return t&&t.value||""}))}static set(e,t){return W(this,void 0,void 0,(function*(){const[r]=(yield ie.findOrCreate({where:{key:e}}).catch(ge.error))||[];r&&(r.value=t,yield r.save().catch(ge.error))}))}}class ye{static all(e,t){return W(this,void 0,void 0,(function*(){return yield te.findAll({where:Object.assign(Object.assign({},t),{state:!0}),include:[{model:re,required:!0,include:[{model:ee,required:!0,where:{state:!0},include:[{model:se,required:!0,where:{userId:e.id}}]}]}]}).catch((e=>{de.error(e.message,"api.permission",J.API_CONSOLE_ERROR)}))}))}static get(e){return W(this,void 0,void 0,(function*(){const t=yield ye.all(e);return t?t.map((e=>e.name)):[]}))}static is(e,t){return W(this,void 0,void 0,(function*(){const r=yield ye.all(e,{name:t});return!!r&&r.length>0}))}}const he=t((({req:e})=>e.auth)),ve=t((({req:e})=>e.user)),Oe=(e,t)=>{const r=E()+"."+t;return k(z(e,r))?Oe(e,t):r};class _e extends A{auth(e,t,r,n,s){return W(this,void 0,void 0,(function*(){const{auth:i,error:o,user:d}=yield pe.user(r);return o?a.error(e,o):i&&d?(n&&(i.useragent=n),yield i.save(),t.auth=i,t.user=d,s()):a.error(e,"Internal Server Error")}))}error(e){de.error(e.message,"api.controller",J.API_CONSOLE_ERROR)}name(){return"api"}permission(e,t,r,n){return W(this,void 0,void 0,(function*(){return t?(yield ye.is(t,n))?r():a.error(e,"Unauthorized access"):a.unauthorized(e,"Access denied")}))}read(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".read")}upload(e,t,r,n){const s=(null==n?void 0:n.path)||J.API_UPLOAD_TEMP,i=H.diskStorage({destination:(e,t,r)=>r(null,s),filename:(e,t,r)=>W(this,void 0,void 0,(function*(){return r(null,Oe(s,U.extension(t.mimetype)||"bin"))}))}),o=1e6*((null==n?void 0:n.size)||J.API_UPLOAD_SIZE),d=H({storage:i,fileFilter(e,t,r){var s;return W(this,void 0,void 0,(function*(){const e=null===(s=null==n?void 0:n.types)||void 0===s?void 0:s.indexOf(t.mimetype);return f(e)&&e<0?r(new Error("File type not allowed")):r(null,!0)}))},limits:{fileSize:o}}),u=(null==n?void 0:n.count)||J.API_UPLOAD_COUNT,c=(null==n?void 0:n.field)||J.API_UPLOAD_FIELD;d.array(c,u)(t,e,(t=>t?a.error(e,t.message):r()))}validation(e,t,r,n){return W(this,void 0,void 0,(function*(){const{error:s,value:i}=yield P.object(n).parse().validateAsync(t.body);return s?a.validation(e,s):(t.body=i,r())}))}write(e,t,r,n){return this.permission(e,t,r,(n||this.name())+".write")}}M([X(0,r()),X(1,n()),X(2,s(J.API_TOKEN_HEADER)),X(3,s("user-agent")),X(4,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,String,Function]),Y("design:returntype",Promise)],_e.prototype,"auth",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"permission",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"read",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",void 0)],_e.prototype,"upload",null),M([X(0,r()),X(1,n()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function,Object]),Y("design:returntype",Promise)],_e.prototype,"validation",null),M([X(0,r()),X(1,ve()),X(2,i()),X(3,o()),Y("design:type",Function),Y("design:paramtypes",[Object,ne,Function,String]),Y("design:returntype",Promise)],_e.prototype,"write",null);let Ie=class extends _e{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar"]}login(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_AUTH);const{username:s,password:i}=t.body,o=yield ne.findOne({where:{username:s}}).catch(this.error);if(!o)return n.emit("auth.failure",{req:t}),a.notfound(e,"Username not found");if(!o.state)return n.emit("auth.failure",{req:t}),a.error(e,"Username is disabled");const d=K(i).toString();if(o.password!=d)return n.emit("auth.failure",{req:t}),a.error(e,"Invalid password");const u=o.id,c=b(),{error:l,token:p}=pe.sign({id:u,secret:c});if(l)return n.emit("auth.failure",{req:t}),a.error(e,l);if(p){const n=Date.now(),s=n+6e4*J.API_TOKEN_LIFETIME,i=yield Q.create({login:n,secret:c,timestamp:s,useragent:r,userId:u}).catch(this.error);if(i)return this.emit("auth.login",{auth:i,req:t,user:o}),a.data(e,{token:p})}return n.emit("auth.failure",{req:t}),a.error(e,"Internal Server Error")}))}logout(e,t,r,n,s){return W(this,void 0,void 0,(function*(){return r&&n&&!r.logout?(r.logout=Date.now(),r.timestamp=r.logout,yield r.save(),s.emit("auth.logout",{auth:r,req:t,user:n}),a.success(e,"Disconcerted")):a.unauthorized(e,"Access denied")}))}user(e,t){return W(this,void 0,void 0,(function*(){const r=t.user;if(!r)return a.unauthorized(e,"Access denied");const n=yield ye.all(r);if(n){const t=n.map((e=>e.name));return a.data(e,Object.assign(Object.assign({},T(this.attributes,r.toJSON())),{permissions:t}))}return a.error(e,"Internal Server Error")}))}};M([d("/login"),u("validation",{username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,s("user-agent")),X(3,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String,me]),Y("design:returntype",Promise)],Ie.prototype,"login",null),M([l("/logout"),u("auth"),X(0,r()),X(1,n()),X(2,he()),X(3,ve()),X(4,c()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Q,ne,me]),Y("design:returntype",Promise)],Ie.prototype,"logout",null),M([l(),u("auth"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ie.prototype,"user",null),Ie=M([p("/auth"),m(_e)],Ie);let Ae=class extends _e{check(e,t){return W(this,void 0,void 0,(function*(){const{token:r}=t.body,n=yield this.findOne(r);return n&&n.user?(n.token=b(),yield n.save(),a.data(e,{token:n.token})):a.notfound(e,"User not found")}))}forgot(e,t){return W(this,void 0,void 0,(function*(){const{username:r}=t.body;yield I(J.API_SLEEP_FORGOT);const n=yield ne.findOne({where:{username:r}}).catch(this.error);if(!n)return a.notfound(e,"User not found");const s=b(),i=Date.now()+6e4*J.API_TOKEN_LIFETIME,o=yield V.create({token:s,timestamp:i,state:!0,userId:n.id});return this.emit("forgot",{forgot:o,req:t,user:n}),a.success(e,"OK")}))}reset(e,t){return W(this,void 0,void 0,(function*(){const{token:r,password:n}=t.body,s=yield this.findOne(r);return s?(s.state=!1,yield s.save().catch(this.error),s.user.password=K(n).toString(),yield s.user.save().catch(this.error),this.emit("forgot.reset",{req:t,user:s.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}findOne(e){return W(this,void 0,void 0,(function*(){return yield V.findOne({where:{token:e,state:!0},include:[{model:ne,required:!0}]}).catch(this.error)}))}};M([l("/check"),u("validation",{token:P.string().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"check",null),M([l(),u("validation",{username:P.string().min(4).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"forgot",null),M([l("/reset"),u("validation",{token:P.string().required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",Promise)],Ae.prototype,"reset",null),Ae=M([p("/forgot"),m(_e)],Ae);let fe=class extends _e{add(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield this.model().create(e.body,r||{}).catch(this.error);if(n){const e=n.id;return a.data(t,{id:e}),e}return a.error(t,"Internal Server Error"),0}))}all(e,t,r,n){var s,i,o,d,u;return W(this,void 0,void 0,(function*(){const c=this.model(),l=Object.assign({},r||{});l.where=Object.assign({},l.where||{});const p=null===(s=e.query.limit)||void 0===s?void 0:s.toString();p&&(l.limit=parseInt(p));const m=null===(i=e.query.offset)||void 0===i?void 0:i.toString();m&&(l.offset=parseInt(m));const g=Object.keys(c.getAttributes()),y=[],h=null===(o=e.query.asc)||void 0===o?void 0:o.toString();h&&h.length&&h.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"ASC"])}));const v=null===(d=e.query.desc)||void 0===d?void 0:d.toString();v&&v.length&&v.split(",").forEach((e=>{g.indexOf(e)>=0&&y.push([e,"DESC"])})),y.length&&(l.order=y);const O=[],_=S(l.attributes)?l.attributes:g,I=null===(u=e.query.search)||void 0===u?void 0:u.toString();_.forEach((t=>{var r;if(R(t)&&(I&&I.length&&O.push({[t]:{[L.like]:`%${I}%`}}),"search_"+t in e.query)){const n=null===(r=e.query["search_"+t])||void 0===r?void 0:r.toString();n&&n.length&&O.push({[t]:{[L.like]:`%${n}%`}})}})),O.length&&(l.where=Object.assign(Object.assign({},l.where),{[L.or]:[...O]}));const A=yield c.count(Object.assign(Object.assign({},l),{col:g[0]})).catch(this.error),f=yield c.findAll(l).catch(this.error);if(f)return a.data(t,{count:A,records:n?n(f):f}),f;a.error(t,"Internal Server Error")}))}del(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params;if(!n)return a.error(t,"Internal Server Error"),0;const s=yield this.model().destroy(Object.assign(Object.assign({},r||{}),{where:{id:n}})).catch(this.error);return s?(a.success(t,"OK"),s):(a.notfound(t,"Record not found"),0)}))}error(e){e.sql?de.error(e.message+"\n"+e.sql,"api.controller.sql",J.API_CONSOLE_ERROR):super.error(e)}get(e,t,r,n){return W(this,void 0,void 0,(function*(){const s=Object.assign({},r||{});s.where=s.where?Object.assign({},s.where):{};const{id:i}=e.params,o=yield this.model().findByPk(i,s).catch(this.error);if(o)return a.data(t,n?n(o):o.toJSON()),o;null!==o?a.error(t,"Internal Server Error"):a.notfound(t,"Record not found")}))}name(){return this.model().tableName}set(e,t,r){return W(this,void 0,void 0,(function*(){const{id:n}=e.params,[s]=(yield this.model().update(e.body,Object.assign(Object.assign({},r||{}),{where:Object.assign(Object.assign({},(r||{}).where),{id:n})})).catch(this.error))||[];return s?(a.success(t,"OK"),!0):(a.success(t,"Record not changed"),!1)}))}};fe=M([m(_e)],fe);let Pe=class extends fe{create(){return{}}recordAdd(e,t){this.add(e,t)}recordAll(e,t){this.all(e,t)}recordDel(e,t){this.del(e,t)}recordGet(e,t){this.get(e,t)}recordSet(e,t){this.set(e,t)}update(){return{}}validationAdd(e,t,r){this.validation(t,e,r,this.create())}validationSet(e,t,r){this.validation(t,e,r,this.update())}};M([d(),u("auth"),u("write"),u("validationAdd"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAdd",null),M([l(),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordAll",null),M([g("/:id"),u("auth"),u("write"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordDel",null),M([l("/:id"),u("auth"),u("read"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordGet",null),M([y("/:id"),u("auth"),u("write"),u("validationSet"),X(0,n()),X(1,r()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Pe.prototype,"recordSet",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationAdd",null),M([X(0,n()),X(1,r()),X(2,i()),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Function]),Y("design:returntype",void 0)],Pe.prototype,"validationSet",null),Pe=M([m(fe)],Pe);let Ee=class extends Pe{model(){return ee}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};Ee=M([p("/groups"),m(Pe)],Ee);let be=class extends fe{model(){return re}groupRouteAll(e,t,r){return W(this,void 0,void 0,(function*(){this.all(t,e,{where:{groupId:r},include:[{model:te,required:!0}]},(e=>e.map((e=>e.route))))}))}groupRouteSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ee.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){const t=n.id;if(yield re.destroy({where:{groupId:t}}),r){let e=0;for(let n=0;n<r.length;n++)e=yield te.count({where:{id:r[n]}}),e&&(yield re.create({groupId:t,routeId:r[n]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/routes"),u("auth"),u("read","groups"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",Promise)],be.prototype,"groupRouteAll",null),M([y("/:id/routes"),u("auth"),u("write","groups"),u("validation",{routes:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("routes")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],be.prototype,"groupRouteSet",null),be=M([p("/groups"),m(fe)],be);let Te=class extends fe{model(){return oe}logsAll(e,t){const{source:r,type:n}=t.query,s=r&&n?{source:r,type:n}:r?{source:r}:n?{type:n}:{};this.all(t,e,{where:s,order:[["created","DESC"]]})}};M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Te.prototype,"logsAll",null),Te=M([p("/logs"),m(fe)],Te);class Se extends D{}Se.init({token:F.STRING,timestamp:F.BIGINT,state:F.BOOLEAN},{sequelize:$,modelName:J.API_TABLE_PREFIX+"registry",timestamps:!0,createdAt:"created",updatedAt:"updated"});let Re=class extends _e{confirm(e,t){return W(this,void 0,void 0,(function*(){const r=yield Se.findOne({where:{token:t,state:!0},include:[{model:ne,required:!0}]}).catch(this.error);return r?(r.user.state=!0,yield r.user.save().catch(this.error),this.emit("user.confirm",{user:r.user}),a.success(e,"OK")):a.notfound(e,"User not found")}))}register(e,t,r,n){return W(this,void 0,void 0,(function*(){yield I(J.API_SLEEP_REGISTRY);const t=yield ne.findOne({where:{username:n}}).catch(this.error);if(t)return a.error(e,"Invalid Username");if(!w(t))return a.error(e,"Internal Server Error");const s=yield ne.create(Object.assign(Object.assign({},r),{state:!1}));return this.emit("user.register",{user:s}),a.success(e,"OK")}))}};M([l("/confirm"),u("validation",{token:P.string().required()}),X(0,r()),X(1,v("token")),Y("design:type",Function),Y("design:paramtypes",[Object,String]),Y("design:returntype",Promise)],Re.prototype,"confirm",null),M([l(),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required()}),X(0,r()),X(1,n()),X(2,v()),X(3,v("username")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,Object,String]),Y("design:returntype",Promise)],Re.prototype,"register",null),Re=M([p("/register"),m(_e)],Re);let we=class extends Pe{model(){return te}create(){return{name:P.string().required(),description:P.string().empty(""),state:P.boolean().parse().required()}}update(){return{name:P.string().empty(),description:P.string().empty(),state:P.boolean().parse().empty()}}};we=M([p("/routes"),m(Pe)],we);let je=class extends _e{setup(e){return W(this,void 0,void 0,(function*(){if(0==(yield ne.count())){const e={description:"",state:!0},t=yield ne.create(Object.assign({name:"Admin",email:"admin@localhost",username:"admin",password:"8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918",avatar:""},e)),r=yield ee.create(Object.assign({name:"admin"},e));yield se.create({userId:t.id,groupId:r.id});const n=["read","write"],s=["users","groups","routes"];yield j(s,(t=>W(this,void 0,void 0,(function*(){yield j(n,(n=>W(this,void 0,void 0,(function*(){const s=t+"."+n,i=yield te.create(Object.assign({name:s},e));yield re.create({groupId:r.id,routeId:i.id})}))))}))));const i=yield te.create(Object.assign({name:"logs.read"},e));yield re.create({groupId:r.id,routeId:i.id})}return a.success(e,"OK")}))}};M([l(),X(0,r()),Y("design:type",Function),Y("design:paramtypes",[Object]),Y("design:returntype",Promise)],je.prototype,"setup",null),je=M([p("/setup"),m(_e)],je);let Ne=class extends fe{constructor(){super(...arguments),this.attributes=["id","name","email","username","avatar","description","state","created","updated"]}model(){return ne}userAdd(e,t){t.body.password=K(t.body.password).toString(),this.add(t,e)}userAll(e,t){this.all(t,e,{attributes:this.attributes})}userDel(e,t,r,n){if(!r||r.id.toString()==n)return a.error(e,"Internal Server Error");this.del(t,e)}userGet(e,t){this.get(t,e,{attributes:this.attributes})}userSet(e,t){t.body.password&&(t.body.password=K(t.body.password).toString()),this.set(t,e)}};M([d(),u("auth"),u("write"),u("validation",{name:P.string().required(),email:P.string().email().required(),username:P.string().min(4).required(),password:P.string().min(5).required(),description:P.string().required(),state:P.boolean().parse().required()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAdd",null),M([l(),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userAll",null),M([g("/:id"),u("auth"),u("write"),X(0,r()),X(1,n()),X(2,ve()),X(3,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,ne,String]),Y("design:returntype",Object)],Ne.prototype,"userDel",null),M([l("/:id"),u("auth"),u("read"),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userGet",null),M([y("/:id"),u("auth"),u("write"),u("validation",{name:P.string().empty(),email:P.string().email().empty(),username:P.string().min(4).empty(),password:P.string().min(5).empty().filter(""),description:P.string().empty(),state:P.boolean().parse().empty()}),X(0,r()),X(1,n()),Y("design:type",Function),Y("design:paramtypes",[Object,Object]),Y("design:returntype",void 0)],Ne.prototype,"userSet",null),Ne=M([p("/users"),m(fe)],Ne);let qe=class extends fe{model(){return se}userGroupsAll(e,t,r){this.all(t,e,{where:{userId:r},include:[{model:ee,required:!0}]},(e=>e.map((e=>e.group))))}userGroupsSet(e,t,r){return W(this,void 0,void 0,(function*(){const n=yield ne.findByPk(t,{attributes:["id"]}).catch(this.error);if(n){if(yield se.destroy({where:{userId:n.id}}),r){let e=0;for(let t=0;t<r.length;t++)e=yield ee.count({where:{id:r[t]}}),e&&(yield se.create({userId:n.id,groupId:r[t]}))}return a.success(e,"OK")}return w(n)?a.notfound(e,"Record not found"):a.error(e,"Internal Server Error")}))}};M([l("/:id/groups"),u("auth"),u("read","users"),X(0,r()),X(1,n()),X(2,h("id")),Y("design:type",Function),Y("design:paramtypes",[Object,Object,String]),Y("design:returntype",void 0)],qe.prototype,"userGroupsAll",null),M([y("/:id/groups"),u("auth"),u("write","users"),u("validation",{groups:P.array(P.number().parse())}),X(0,r()),X(1,h("id")),X(2,v("groups")),Y("design:type",Function),Y("design:paramtypes",[Object,String,Array]),Y("design:returntype",Promise)],qe.prototype,"userGroupsSet",null),qe=M([p("/users"),m(fe)],qe);export{me as Application,Q as Auth,Ie as AuthController,ge as Config,ie as Configs,_e as ControllerBase,Pe as CrudController,Z as Database,J as Env,V as Forgot,Ae as ForgotController,ee as Group,Ee as GroupController,re as GroupRoute,be as GroupRouteController,de as Log,oe as Logs,Te as LogsController,fe as ModelController,ye as Permission,Re as RegisterController,he as ReqAuth,ve as ReqUser,te as Route,we as RouteController,je as SetupController,pe as Token,ne as User,Ne as UserController,se as UserGroup,qe as UserGroupController,ce as crt,le as key,$ as sequelize};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@andrewcaires/api",
3
- "version": "3.0.7",
3
+ "version": "3.0.8",
4
4
  "description": "Simple api for small applications using express, jsonwebtoken, sequelize and websocket",
5
5
  "main": "./dist/index.cjs.js",
6
6
  "types": "./dist/index.d.ts",
@@ -46,7 +46,7 @@
46
46
  "homepage": "https://github.com/andrewcaires/npm/tree/main/api#readme",
47
47
  "dependencies": {
48
48
  "@andrewcaires/express": "^1.0.5",
49
- "@andrewcaires/utils.js": "^0.2.13",
49
+ "@andrewcaires/utils.js": "^0.2.14",
50
50
  "cors": "^2.8.5",
51
51
  "crypto-js": "^4.1.1",
52
52
  "dotenv": "^16.0.3",
@@ -62,7 +62,7 @@
62
62
  "devDependencies": {
63
63
  "@rollup/plugin-commonjs": "^24.0.1",
64
64
  "@rollup/plugin-terser": "^0.4.0",
65
- "@rollup/plugin-typescript": "^11.0.0",
65
+ "@rollup/plugin-typescript": "^11.1.0",
66
66
  "@types/cors": "^2.8.13",
67
67
  "@types/crypto-js": "^4.1.1",
68
68
  "@types/express": "^4.17.17",
@@ -71,8 +71,8 @@
71
71
  "@types/multer": "^1.4.7",
72
72
  "@types/node": "^18.15.11",
73
73
  "@types/ws": "^8.5.4",
74
- "@typescript-eslint/eslint-plugin": "^5.57.0",
75
- "@typescript-eslint/parser": "^5.57.0",
74
+ "@typescript-eslint/eslint-plugin": "^5.57.1",
75
+ "@typescript-eslint/parser": "^5.57.1",
76
76
  "eslint": "^8.37.0",
77
77
  "rollup": "^3.20.2",
78
78
  "rollup-plugin-dts": "^5.3.0",