@authhero/saml 0.5.1 → 0.5.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core.cjs +1 -1
- package/dist/core.mjs +183 -154
- package/dist/saml.cjs +4 -4
- package/dist/saml.mjs +383 -354
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/package.json +2 -2
package/dist/saml.mjs
CHANGED
|
@@ -1459,37 +1459,37 @@ function S(...e) {
|
|
|
1459
1459
|
}
|
|
1460
1460
|
return t;
|
|
1461
1461
|
}
|
|
1462
|
-
var C = "external", w = "base",
|
|
1463
|
-
function
|
|
1464
|
-
return !e || e === C ? new Set([C]) : e ===
|
|
1462
|
+
var C = "external", w = "base", Oe = "all";
|
|
1463
|
+
function ke(e) {
|
|
1464
|
+
return !e || e === C ? new Set([C]) : e === Oe ? new Set([Oe]) : e === w ? new Set([w]) : Array.isArray(e) ? new Set(e) : new Set([C]);
|
|
1465
1465
|
}
|
|
1466
|
-
var
|
|
1466
|
+
var T = Object.freeze({
|
|
1467
1467
|
allow: 0,
|
|
1468
1468
|
leave: 1,
|
|
1469
1469
|
remove: 2,
|
|
1470
1470
|
throw: 3
|
|
1471
|
-
}),
|
|
1471
|
+
}), Ae = new Set([
|
|
1472
1472
|
9,
|
|
1473
1473
|
10,
|
|
1474
1474
|
13
|
|
1475
1475
|
]);
|
|
1476
|
-
function
|
|
1476
|
+
function je(e) {
|
|
1477
1477
|
if (!e) return {
|
|
1478
1478
|
xmlVersion: 1,
|
|
1479
|
-
onLevel:
|
|
1480
|
-
nullLevel:
|
|
1479
|
+
onLevel: T.allow,
|
|
1480
|
+
nullLevel: T.remove
|
|
1481
1481
|
};
|
|
1482
|
-
let t = e.xmlVersion === 1.1 ? 1.1 : 1, n =
|
|
1482
|
+
let t = e.xmlVersion === 1.1 ? 1.1 : 1, n = T[e.onNCR] ?? T.allow, r = T[e.nullNCR] ?? T.remove;
|
|
1483
1483
|
return {
|
|
1484
1484
|
xmlVersion: t,
|
|
1485
1485
|
onLevel: n,
|
|
1486
|
-
nullLevel: Math.max(r,
|
|
1486
|
+
nullLevel: Math.max(r, T.remove)
|
|
1487
1487
|
};
|
|
1488
1488
|
}
|
|
1489
|
-
var
|
|
1489
|
+
var Me = class {
|
|
1490
1490
|
constructor(e = {}) {
|
|
1491
|
-
this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers =
|
|
1492
|
-
let t =
|
|
1491
|
+
this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = ke(this._limit.applyLimitsTo ?? C), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = S(we, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
|
|
1492
|
+
let t = je(e.ncr);
|
|
1493
1493
|
this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel, this._onExternalEntity = typeof e.onExternalEntity == "function" ? e.onExternalEntity : null, this._onInputEntity = typeof e.onInputEntity == "function" ? e.onInputEntity : null;
|
|
1494
1494
|
}
|
|
1495
1495
|
_applyRegistrationHook(e, t, n, r) {
|
|
@@ -1579,7 +1579,7 @@ var je = class {
|
|
|
1579
1579
|
return this._postCheck(l, t);
|
|
1580
1580
|
}
|
|
1581
1581
|
_tierCounts(e) {
|
|
1582
|
-
return this._limitTiers.has(
|
|
1582
|
+
return this._limitTiers.has(Oe) ? !0 : this._limitTiers.has(e);
|
|
1583
1583
|
}
|
|
1584
1584
|
_resolveName(e) {
|
|
1585
1585
|
if (e in this._inputMap) return {
|
|
@@ -1596,14 +1596,14 @@ var je = class {
|
|
|
1596
1596
|
};
|
|
1597
1597
|
}
|
|
1598
1598
|
_classifyNCR(e) {
|
|
1599
|
-
return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !
|
|
1599
|
+
return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !Ae.has(e) ? T.remove : -1;
|
|
1600
1600
|
}
|
|
1601
1601
|
_applyNCRAction(e, t, n) {
|
|
1602
1602
|
switch (e) {
|
|
1603
|
-
case
|
|
1604
|
-
case
|
|
1605
|
-
case
|
|
1606
|
-
case
|
|
1603
|
+
case T.allow: return String.fromCodePoint(n);
|
|
1604
|
+
case T.remove: return "";
|
|
1605
|
+
case T.leave: return;
|
|
1606
|
+
case T.throw: throw Error(`[EntityDecoder] Prohibited numeric character reference &${t}; (U+${n.toString(16).toUpperCase().padStart(4, "0")})`);
|
|
1607
1607
|
default: return String.fromCodePoint(n);
|
|
1608
1608
|
}
|
|
1609
1609
|
}
|
|
@@ -1611,11 +1611,11 @@ var je = class {
|
|
|
1611
1611
|
let t = e.charCodeAt(1), n;
|
|
1612
1612
|
if (n = t === 120 || t === 88 ? parseInt(e.slice(2), 16) : parseInt(e.slice(1), 10), Number.isNaN(n) || n < 0 || n > 1114111) return;
|
|
1613
1613
|
let r = this._classifyNCR(n);
|
|
1614
|
-
if (!this._numericAllowed && r <
|
|
1614
|
+
if (!this._numericAllowed && r < T.remove) return;
|
|
1615
1615
|
let i = r === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, r);
|
|
1616
1616
|
return this._applyNCRAction(i, e, n);
|
|
1617
1617
|
}
|
|
1618
|
-
},
|
|
1618
|
+
}, Ne = (e) => p.includes(e) ? "__" + e : e, Pe = {
|
|
1619
1619
|
preserveOrder: !1,
|
|
1620
1620
|
attributeNamePrefix: "@_",
|
|
1621
1621
|
attributesGroupName: !1,
|
|
@@ -1658,14 +1658,14 @@ var je = class {
|
|
|
1658
1658
|
maxNestedTags: 100,
|
|
1659
1659
|
strictReservedNames: !0,
|
|
1660
1660
|
jPath: !0,
|
|
1661
|
-
onDangerousProperty:
|
|
1661
|
+
onDangerousProperty: Ne
|
|
1662
1662
|
};
|
|
1663
|
-
function
|
|
1663
|
+
function Fe(e, t) {
|
|
1664
1664
|
if (typeof e != "string") return;
|
|
1665
1665
|
let n = e.toLowerCase();
|
|
1666
1666
|
if (p.some((e) => n === e.toLowerCase()) || m.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
|
|
1667
1667
|
}
|
|
1668
|
-
function
|
|
1668
|
+
function Ie(e, t) {
|
|
1669
1669
|
return typeof e == "boolean" ? {
|
|
1670
1670
|
enabled: e,
|
|
1671
1671
|
maxEntitySize: 1e4,
|
|
@@ -1686,10 +1686,10 @@ function Fe(e, t) {
|
|
|
1686
1686
|
allowedTags: e.allowedTags ?? null,
|
|
1687
1687
|
tagFilter: e.tagFilter ?? null,
|
|
1688
1688
|
appliesTo: e.appliesTo ?? "all"
|
|
1689
|
-
} :
|
|
1689
|
+
} : Ie(!0);
|
|
1690
1690
|
}
|
|
1691
|
-
var
|
|
1692
|
-
let t = Object.assign({},
|
|
1691
|
+
var Le = function(e) {
|
|
1692
|
+
let t = Object.assign({}, Pe, e), n = [
|
|
1693
1693
|
{
|
|
1694
1694
|
value: t.attributeNamePrefix,
|
|
1695
1695
|
name: "attributeNamePrefix"
|
|
@@ -1711,9 +1711,9 @@ var Ie = function(e) {
|
|
|
1711
1711
|
name: "commentPropName"
|
|
1712
1712
|
}
|
|
1713
1713
|
];
|
|
1714
|
-
for (let { value: e, name: t } of n) e &&
|
|
1715
|
-
return t.onDangerousProperty === null && (t.onDangerousProperty =
|
|
1716
|
-
},
|
|
1714
|
+
for (let { value: e, name: t } of n) e && Fe(e, t);
|
|
1715
|
+
return t.onDangerousProperty === null && (t.onDangerousProperty = Ne), t.processEntities = Ie(t.processEntities, t.htmlEntities), t.unpairedTagsSet = new Set(t.unpairedTags), t.stopNodes && Array.isArray(t.stopNodes) && (t.stopNodes = t.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), t;
|
|
1716
|
+
}, Re = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", E = class {
|
|
1717
1717
|
constructor(e) {
|
|
1718
1718
|
this.tagname = e, this.child = [], this[":@"] = Object.create(null);
|
|
1719
1719
|
}
|
|
@@ -1724,12 +1724,12 @@ var Ie = function(e) {
|
|
|
1724
1724
|
e.tagname === "__proto__" && (e.tagname = "#__proto__"), e[":@"] && Object.keys(e[":@"]).length > 0 ? this.child.push({
|
|
1725
1725
|
[e.tagname]: e.child,
|
|
1726
1726
|
":@": e[":@"]
|
|
1727
|
-
}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][
|
|
1727
|
+
}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][Re] = { startIndex: t });
|
|
1728
1728
|
}
|
|
1729
1729
|
static getMetaDataSymbol() {
|
|
1730
|
-
return
|
|
1730
|
+
return Re;
|
|
1731
1731
|
}
|
|
1732
|
-
},
|
|
1732
|
+
}, ze = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�", Be = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�\\-\\.\\d·̀-ͯ‿-⁀", Ve = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�𐀀-", He = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�𐀀-\\-\\.\\d·̀-ͯ҇‿-⁀", D = (e, t, n = "") => {
|
|
1733
1733
|
let r = `[${e.replace(":", "")}][${t.replace(":", "")}]*`;
|
|
1734
1734
|
return {
|
|
1735
1735
|
name: RegExp(`^[${e}][${t}]*$`, n),
|
|
@@ -1738,15 +1738,15 @@ var Ie = function(e) {
|
|
|
1738
1738
|
nmToken: RegExp(`^[${t}]+$`, n),
|
|
1739
1739
|
nmTokens: RegExp(`^[${t}]+(?:\\s+[${t}]+)*$`, n)
|
|
1740
1740
|
};
|
|
1741
|
-
},
|
|
1741
|
+
}, Ue = D(ze, Be), We = D(Ve, He, "u"), Ge = D(":A-Za-z_", ":A-Za-z_\\-\\.\\d"), Ke = (e = "1.0", t = !1) => t ? Ge : e === "1.1" ? We : Ue, qe = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1 } = {}) => Ke(t, n).qName.test(e), Je = [
|
|
1742
1742
|
"name",
|
|
1743
1743
|
"ncName",
|
|
1744
1744
|
"qName",
|
|
1745
1745
|
"nmToken",
|
|
1746
1746
|
"nmTokens"
|
|
1747
|
-
],
|
|
1748
|
-
if (!
|
|
1749
|
-
let i =
|
|
1747
|
+
], Ye = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1, maxCacheSize: r = 2048 } = {}) => {
|
|
1748
|
+
if (!Je.includes(e)) throw TypeError(`Unknown production "${e}". Must be one of: ${Je.join(", ")}`);
|
|
1749
|
+
let i = Ke(t, n)[e], a = /* @__PURE__ */ new Map(), o = (e) => {
|
|
1750
1750
|
let t = a.get(e);
|
|
1751
1751
|
if (t !== void 0) return t;
|
|
1752
1752
|
let n = i.test(e);
|
|
@@ -1755,7 +1755,7 @@ var Ie = function(e) {
|
|
|
1755
1755
|
return o.reset = () => {
|
|
1756
1756
|
a = /* @__PURE__ */ new Map();
|
|
1757
1757
|
}, o;
|
|
1758
|
-
},
|
|
1758
|
+
}, Xe = class {
|
|
1759
1759
|
constructor(e, t) {
|
|
1760
1760
|
this.suppressValidationErr = !e, this.options = e, this.xmlVersion = t || 1;
|
|
1761
1761
|
}
|
|
@@ -1768,23 +1768,23 @@ var Ie = function(e) {
|
|
|
1768
1768
|
t += 9;
|
|
1769
1769
|
let i = 1, a = !1, o = !1, s = "";
|
|
1770
1770
|
for (; t < e.length; t++) if (e[t] === "<" && !o) {
|
|
1771
|
-
if (a &&
|
|
1771
|
+
if (a && k(e, "!ENTITY", t)) {
|
|
1772
1772
|
t += 7;
|
|
1773
1773
|
let i, a;
|
|
1774
1774
|
if ([i, a, t] = this.readEntityExp(e, t + 1, this.suppressValidationErr), a.indexOf("&") === -1) {
|
|
1775
1775
|
if (this.options.enabled !== !1 && this.options.maxEntityCount != null && r >= this.options.maxEntityCount) throw Error(`Entity count (${r + 1}) exceeds maximum allowed (${this.options.maxEntityCount})`);
|
|
1776
1776
|
n[i] = a, r++;
|
|
1777
1777
|
}
|
|
1778
|
-
} else if (a &&
|
|
1778
|
+
} else if (a && k(e, "!ELEMENT", t)) {
|
|
1779
1779
|
t += 8;
|
|
1780
1780
|
let { index: n } = this.readElementExp(e, t + 1);
|
|
1781
1781
|
t = n;
|
|
1782
|
-
} else if (a &&
|
|
1783
|
-
else if (a &&
|
|
1782
|
+
} else if (a && k(e, "!ATTLIST", t)) t += 8;
|
|
1783
|
+
else if (a && k(e, "!NOTATION", t)) {
|
|
1784
1784
|
t += 9;
|
|
1785
1785
|
let { index: n } = this.readNotationExp(e, t + 1, this.suppressValidationErr);
|
|
1786
1786
|
t = n;
|
|
1787
|
-
} else if (
|
|
1787
|
+
} else if (k(e, "!--", t)) o = !0;
|
|
1788
1788
|
else throw Error("Invalid DOCTYPE");
|
|
1789
1789
|
i++, s = "";
|
|
1790
1790
|
} else if (e[t] === ">") {
|
|
@@ -1798,11 +1798,11 @@ var Ie = function(e) {
|
|
|
1798
1798
|
};
|
|
1799
1799
|
}
|
|
1800
1800
|
readEntityExp(e, t) {
|
|
1801
|
-
t =
|
|
1801
|
+
t = O(e, t);
|
|
1802
1802
|
let n = t;
|
|
1803
1803
|
for (; t < e.length && !/\s/.test(e[t]) && e[t] !== "\"" && e[t] !== "'";) t++;
|
|
1804
1804
|
let r = e.substring(n, t);
|
|
1805
|
-
if (
|
|
1805
|
+
if (A(r, { xmlVersion: this.xmlVersion }), t = O(e, t), !this.suppressValidationErr) {
|
|
1806
1806
|
if (e.substring(t, t + 6).toUpperCase() === "SYSTEM") throw Error("External entities are not supported");
|
|
1807
1807
|
if (e[t] === "%") throw Error("Parameter entities are not supported");
|
|
1808
1808
|
}
|
|
@@ -1815,16 +1815,16 @@ var Ie = function(e) {
|
|
|
1815
1815
|
];
|
|
1816
1816
|
}
|
|
1817
1817
|
readNotationExp(e, t) {
|
|
1818
|
-
t =
|
|
1818
|
+
t = O(e, t);
|
|
1819
1819
|
let n = t;
|
|
1820
1820
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1821
1821
|
let r = e.substring(n, t);
|
|
1822
|
-
!this.suppressValidationErr &&
|
|
1822
|
+
!this.suppressValidationErr && A(r, { xmlVersion: this.xmlVersion }), t = O(e, t);
|
|
1823
1823
|
let i = e.substring(t, t + 6).toUpperCase();
|
|
1824
1824
|
if (!this.suppressValidationErr && i !== "SYSTEM" && i !== "PUBLIC") throw Error(`Expected SYSTEM or PUBLIC, found "${i}"`);
|
|
1825
|
-
t += i.length, t =
|
|
1825
|
+
t += i.length, t = O(e, t);
|
|
1826
1826
|
let a = null, o = null;
|
|
1827
|
-
if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t =
|
|
1827
|
+
if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t = O(e, t), (e[t] === "\"" || e[t] === "'") && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"));
|
|
1828
1828
|
else if (i === "SYSTEM" && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"), !this.suppressValidationErr && !o)) throw Error("Missing mandatory system identifier for SYSTEM notation");
|
|
1829
1829
|
return {
|
|
1830
1830
|
notationName: r,
|
|
@@ -1843,15 +1843,15 @@ var Ie = function(e) {
|
|
|
1843
1843
|
return t++, [t, r];
|
|
1844
1844
|
}
|
|
1845
1845
|
readElementExp(e, t) {
|
|
1846
|
-
t =
|
|
1846
|
+
t = O(e, t);
|
|
1847
1847
|
let n = t;
|
|
1848
1848
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1849
1849
|
let r = e.substring(n, t);
|
|
1850
|
-
if (!this.suppressValidationErr && !
|
|
1851
|
-
t =
|
|
1850
|
+
if (!this.suppressValidationErr && !qe(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
|
|
1851
|
+
t = O(e, t);
|
|
1852
1852
|
let i = "";
|
|
1853
|
-
if (e[t] === "E" &&
|
|
1854
|
-
else if (e[t] === "A" &&
|
|
1853
|
+
if (e[t] === "E" && k(e, "MPTY", t)) t += 4;
|
|
1854
|
+
else if (e[t] === "A" && k(e, "NY", t)) t += 2;
|
|
1855
1855
|
else if (e[t] === "(") {
|
|
1856
1856
|
t++;
|
|
1857
1857
|
let n = t;
|
|
@@ -1865,25 +1865,25 @@ var Ie = function(e) {
|
|
|
1865
1865
|
};
|
|
1866
1866
|
}
|
|
1867
1867
|
readAttlistExp(e, t) {
|
|
1868
|
-
t =
|
|
1868
|
+
t = O(e, t);
|
|
1869
1869
|
let n = t;
|
|
1870
1870
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1871
1871
|
let r = e.substring(n, t);
|
|
1872
|
-
for (
|
|
1872
|
+
for (A(r, { xmlVersion: this.xmlVersion }), t = O(e, t), n = t; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1873
1873
|
let i = e.substring(n, t);
|
|
1874
|
-
if (!
|
|
1875
|
-
t =
|
|
1874
|
+
if (!A(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid attribute name: "${i}"`);
|
|
1875
|
+
t = O(e, t);
|
|
1876
1876
|
let a = "";
|
|
1877
1877
|
if (e.substring(t, t + 8).toUpperCase() === "NOTATION") {
|
|
1878
|
-
if (a = "NOTATION", t += 8, t =
|
|
1878
|
+
if (a = "NOTATION", t += 8, t = O(e, t), e[t] !== "(") throw Error(`Expected '(', found "${e[t]}"`);
|
|
1879
1879
|
t++;
|
|
1880
1880
|
let n = [];
|
|
1881
1881
|
for (; t < e.length && e[t] !== ")";) {
|
|
1882
1882
|
let r = t;
|
|
1883
1883
|
for (; t < e.length && e[t] !== "|" && e[t] !== ")";) t++;
|
|
1884
1884
|
let i = e.substring(r, t);
|
|
1885
|
-
if (i = i.trim(), !
|
|
1886
|
-
n.push(i), e[t] === "|" && (t++, t =
|
|
1885
|
+
if (i = i.trim(), !A(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid notation name: "${i}"`);
|
|
1886
|
+
n.push(i), e[t] === "|" && (t++, t = O(e, t));
|
|
1887
1887
|
}
|
|
1888
1888
|
if (e[t] !== ")") throw Error("Unterminated list of notations");
|
|
1889
1889
|
t++, a += " (" + n.join("|") + ")";
|
|
@@ -1901,7 +1901,7 @@ var Ie = function(e) {
|
|
|
1901
1901
|
"NMTOKENS"
|
|
1902
1902
|
].includes(a.toUpperCase())) throw Error(`Invalid attribute type: "${a}"`);
|
|
1903
1903
|
}
|
|
1904
|
-
t =
|
|
1904
|
+
t = O(e, t);
|
|
1905
1905
|
let o = "";
|
|
1906
1906
|
return e.substring(t, t + 8).toUpperCase() === "#REQUIRED" ? (o = "#REQUIRED", t += 8) : e.substring(t, t + 7).toUpperCase() === "#IMPLIED" ? (o = "#IMPLIED", t += 7) : [t, o] = this.readIdentifierVal(e, t, "ATTLIST"), {
|
|
1907
1907
|
elementName: r,
|
|
@@ -1911,21 +1911,21 @@ var Ie = function(e) {
|
|
|
1911
1911
|
index: t
|
|
1912
1912
|
};
|
|
1913
1913
|
}
|
|
1914
|
-
},
|
|
1914
|
+
}, O = (e, t) => {
|
|
1915
1915
|
for (; t < e.length && /\s/.test(e[t]);) t++;
|
|
1916
1916
|
return t;
|
|
1917
1917
|
};
|
|
1918
|
-
function
|
|
1918
|
+
function k(e, t, n) {
|
|
1919
1919
|
for (let r = 0; r < t.length; r++) if (t[r] !== e[n + r + 1]) return !1;
|
|
1920
1920
|
return !0;
|
|
1921
1921
|
}
|
|
1922
|
-
function
|
|
1923
|
-
if (
|
|
1922
|
+
function A(e, t) {
|
|
1923
|
+
if (qe(e, { xmlVersion: t })) return e;
|
|
1924
1924
|
throw Error(`Invalid entity name ${e}`);
|
|
1925
1925
|
}
|
|
1926
1926
|
//#endregion
|
|
1927
1927
|
//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/digitTable.js
|
|
1928
|
-
var
|
|
1928
|
+
var Ze = [
|
|
1929
1929
|
48,
|
|
1930
1930
|
1632,
|
|
1931
1931
|
1776,
|
|
@@ -1987,28 +1987,28 @@ var Xe = [
|
|
|
1987
1987
|
124144,
|
|
1988
1988
|
125264,
|
|
1989
1989
|
130032
|
|
1990
|
-
],
|
|
1991
|
-
for (let e of
|
|
1990
|
+
], j = /* @__PURE__ */ new Map(), Qe = 65535, $e = 1632, M = new Uint8Array(63904).fill(255);
|
|
1991
|
+
for (let e of Ze) for (let t = 0; t < 10; t++) {
|
|
1992
1992
|
let n = e + t;
|
|
1993
|
-
n <=
|
|
1993
|
+
n <= Qe ? M[n - $e] = t : j.set(n, t);
|
|
1994
1994
|
}
|
|
1995
1995
|
//#endregion
|
|
1996
1996
|
//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/anynum.js
|
|
1997
|
-
var
|
|
1997
|
+
var et = 48, tt = 57, nt = 45, N = new Set([
|
|
1998
1998
|
8722,
|
|
1999
1999
|
65293,
|
|
2000
2000
|
65123
|
|
2001
2001
|
]);
|
|
2002
|
-
function
|
|
2002
|
+
function rt(e) {
|
|
2003
2003
|
if (typeof e != "string") return e;
|
|
2004
2004
|
let t = e.length;
|
|
2005
2005
|
if (t === 0) return e;
|
|
2006
2006
|
let n = -1;
|
|
2007
2007
|
for (let r = 0; r < t; r++) {
|
|
2008
2008
|
let i = e.charCodeAt(r);
|
|
2009
|
-
if (!(i >=
|
|
2009
|
+
if (!(i >= et && i <= tt || i === nt)) {
|
|
2010
2010
|
if (i < 1632) {
|
|
2011
|
-
if (
|
|
2011
|
+
if (N.has(i)) {
|
|
2012
2012
|
n = r;
|
|
2013
2013
|
break;
|
|
2014
2014
|
}
|
|
@@ -2019,7 +2019,7 @@ function nt(e) {
|
|
|
2019
2019
|
let t = e.charCodeAt(r + 1);
|
|
2020
2020
|
if (t >= 56320 && t <= 57343) {
|
|
2021
2021
|
let e = 65536 + (i - 55296 << 10) + (t - 56320);
|
|
2022
|
-
if (
|
|
2022
|
+
if (j.has(e)) {
|
|
2023
2023
|
n = r;
|
|
2024
2024
|
break;
|
|
2025
2025
|
}
|
|
@@ -2027,7 +2027,7 @@ function nt(e) {
|
|
|
2027
2027
|
}
|
|
2028
2028
|
continue;
|
|
2029
2029
|
}
|
|
2030
|
-
if (
|
|
2030
|
+
if (M[i - 1632] !== 255 || N.has(i)) {
|
|
2031
2031
|
n = r;
|
|
2032
2032
|
break;
|
|
2033
2033
|
}
|
|
@@ -2038,19 +2038,19 @@ function nt(e) {
|
|
|
2038
2038
|
n > 0 && r.push(e.slice(0, n));
|
|
2039
2039
|
for (let i = n; i < t; i++) {
|
|
2040
2040
|
let n = e.charCodeAt(i);
|
|
2041
|
-
if (n >=
|
|
2041
|
+
if (n >= et && n <= tt || n === nt) {
|
|
2042
2042
|
r.push(e[i]);
|
|
2043
2043
|
continue;
|
|
2044
2044
|
}
|
|
2045
2045
|
if (n < 1632) {
|
|
2046
|
-
r.push(
|
|
2046
|
+
r.push(N.has(n) ? "-" : e[i]);
|
|
2047
2047
|
continue;
|
|
2048
2048
|
}
|
|
2049
2049
|
if (n >= 55296 && n <= 56319) {
|
|
2050
2050
|
if (i + 1 < t) {
|
|
2051
2051
|
let t = e.charCodeAt(i + 1);
|
|
2052
2052
|
if (t >= 56320 && t <= 57343) {
|
|
2053
|
-
let e = 65536 + (n - 55296 << 10) + (t - 56320), a =
|
|
2053
|
+
let e = 65536 + (n - 55296 << 10) + (t - 56320), a = j.get(e);
|
|
2054
2054
|
if (a !== void 0) {
|
|
2055
2055
|
r.push(String.fromCharCode(a + 48)), i++;
|
|
2056
2056
|
continue;
|
|
@@ -2060,18 +2060,18 @@ function nt(e) {
|
|
|
2060
2060
|
r.push(e[i]);
|
|
2061
2061
|
continue;
|
|
2062
2062
|
}
|
|
2063
|
-
if (
|
|
2063
|
+
if (N.has(n)) {
|
|
2064
2064
|
r.push("-");
|
|
2065
2065
|
continue;
|
|
2066
2066
|
}
|
|
2067
|
-
let a =
|
|
2067
|
+
let a = M[n - $e];
|
|
2068
2068
|
r.push(a === 255 ? e[i] : String.fromCharCode(a + 48));
|
|
2069
2069
|
}
|
|
2070
2070
|
return r.join("");
|
|
2071
2071
|
}
|
|
2072
2072
|
//#endregion
|
|
2073
2073
|
//#region ../../node_modules/.pnpm/strnum@2.4.1/node_modules/strnum/strnum.js
|
|
2074
|
-
var
|
|
2074
|
+
var it = /^[-+]?0x[a-fA-F0-9]+$/, at = /^0b[01]+$/, ot = /^0o[0-7]+$/, st = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, ct = {
|
|
2075
2075
|
hex: !0,
|
|
2076
2076
|
binary: !1,
|
|
2077
2077
|
octal: !1,
|
|
@@ -2081,20 +2081,20 @@ var rt = /^[-+]?0x[a-fA-F0-9]+$/, it = /^0b[01]+$/, at = /^0o[0-7]+$/, ot = /^([
|
|
|
2081
2081
|
infinity: "original",
|
|
2082
2082
|
unicode: !1
|
|
2083
2083
|
};
|
|
2084
|
-
function
|
|
2085
|
-
if (t = Object.assign({},
|
|
2084
|
+
function lt(e, t = {}) {
|
|
2085
|
+
if (t = Object.assign({}, ct, t), !e || typeof e != "string") return e;
|
|
2086
2086
|
let n = e.trim();
|
|
2087
2087
|
if (n.length === 0 || t.skipLike !== void 0 && t.skipLike.test(n)) return e;
|
|
2088
|
-
if (n === "0" || t.unicode && (n =
|
|
2089
|
-
if (t.hex &&
|
|
2090
|
-
if (t.binary &&
|
|
2091
|
-
if (t.octal &&
|
|
2092
|
-
if (!isFinite(n)) return
|
|
2093
|
-
if (n.includes("e") || n.includes("E")) return
|
|
2088
|
+
if (n === "0" || t.unicode && (n = rt(n), n === "0")) return 0;
|
|
2089
|
+
if (t.hex && it.test(n)) return P(n, 16);
|
|
2090
|
+
if (t.binary && at.test(n)) return P(n, 2);
|
|
2091
|
+
if (t.octal && ot.test(n)) return P(n, 8);
|
|
2092
|
+
if (!isFinite(n)) return pt(e, Number(n), t);
|
|
2093
|
+
if (n.includes("e") || n.includes("E")) return dt(e, n, t);
|
|
2094
2094
|
{
|
|
2095
|
-
let r =
|
|
2095
|
+
let r = st.exec(n);
|
|
2096
2096
|
if (r) {
|
|
2097
|
-
let i = r[1] || "", a = r[2], o =
|
|
2097
|
+
let i = r[1] || "", a = r[2], o = ft(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
|
|
2098
2098
|
if (!t.leadingZeros && (a.length > 1 || a.length === 1 && !s)) return e;
|
|
2099
2099
|
{
|
|
2100
2100
|
let r = Number(n), s = String(r);
|
|
@@ -2107,26 +2107,26 @@ function ct(e, t = {}) {
|
|
|
2107
2107
|
} else return e;
|
|
2108
2108
|
}
|
|
2109
2109
|
}
|
|
2110
|
-
var
|
|
2111
|
-
function
|
|
2110
|
+
var ut = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
|
|
2111
|
+
function dt(e, t, n) {
|
|
2112
2112
|
if (!n.eNotation) return e;
|
|
2113
|
-
let r = t.match(
|
|
2113
|
+
let r = t.match(ut);
|
|
2114
2114
|
if (r) {
|
|
2115
2115
|
let i = r[1] || "", a = r[3].indexOf("e") === -1 ? "E" : "e", o = r[2], s = i ? e[o.length + 1] === a : e[o.length] === a;
|
|
2116
2116
|
return o.length > 1 && s ? e : o.length === 1 && (r[3].startsWith(`.${a}`) || r[3][0] === a) ? Number(t) : o.length > 0 ? n.leadingZeros && !s ? (t = (r[1] || "") + r[3], Number(t)) : e : Number(t);
|
|
2117
2117
|
} else return e;
|
|
2118
2118
|
}
|
|
2119
|
-
function
|
|
2119
|
+
function ft(e) {
|
|
2120
2120
|
return e && e.indexOf(".") !== -1 ? (e = e.replace(/0+$/, ""), e === "." ? e = "0" : e[0] === "." ? e = "0" + e : e[e.length - 1] === "." && (e = e.substring(0, e.length - 1)), e) : e;
|
|
2121
2121
|
}
|
|
2122
|
-
function
|
|
2122
|
+
function P(e, t) {
|
|
2123
2123
|
let n = e.trim();
|
|
2124
2124
|
if ((t === 2 || t === 8) && (e = n.substring(2)), parseInt) return parseInt(e, t);
|
|
2125
2125
|
if (Number.parseInt) return Number.parseInt(e, t);
|
|
2126
2126
|
if (window && window.parseInt) return window.parseInt(e, t);
|
|
2127
2127
|
throw Error("parseInt, Number.parseInt, window.parseInt are not supported");
|
|
2128
2128
|
}
|
|
2129
|
-
function
|
|
2129
|
+
function pt(e, t, n) {
|
|
2130
2130
|
let r = t === Infinity;
|
|
2131
2131
|
switch (n.infinity.toLowerCase()) {
|
|
2132
2132
|
case "null": return null;
|
|
@@ -2137,14 +2137,14 @@ function ft(e, t, n) {
|
|
|
2137
2137
|
}
|
|
2138
2138
|
//#endregion
|
|
2139
2139
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
|
|
2140
|
-
function
|
|
2140
|
+
function mt(e) {
|
|
2141
2141
|
return typeof e == "function" ? e : Array.isArray(e) ? (t) => {
|
|
2142
2142
|
for (let n of e) if (typeof n == "string" && t === n || n instanceof RegExp && n.test(t)) return !0;
|
|
2143
2143
|
} : () => !1;
|
|
2144
2144
|
}
|
|
2145
2145
|
//#endregion
|
|
2146
2146
|
//#region ../../node_modules/.pnpm/path-expression-matcher@1.6.2/node_modules/path-expression-matcher/src/Expression.js
|
|
2147
|
-
var
|
|
2147
|
+
var F = class {
|
|
2148
2148
|
constructor(e, t = {}, n) {
|
|
2149
2149
|
this.pattern = e, this.separator = t.separator || ".", this.segments = this._parse(e), this.data = n, this._hasDeepWildcard = this.segments.some((e) => e.type === "deep-wildcard"), this._hasAttributeCondition = this.segments.some((e) => e.attrName !== void 0), this._hasPositionSelector = this.segments.some((e) => e.position !== void 0);
|
|
2150
2150
|
}
|
|
@@ -2200,7 +2200,7 @@ var I = class {
|
|
|
2200
2200
|
toString() {
|
|
2201
2201
|
return this.pattern;
|
|
2202
2202
|
}
|
|
2203
|
-
},
|
|
2203
|
+
}, ht = class {
|
|
2204
2204
|
constructor() {
|
|
2205
2205
|
this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._deepByTerminalTag = /* @__PURE__ */ new Map(), this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
|
|
2206
2206
|
}
|
|
@@ -2258,7 +2258,7 @@ var I = class {
|
|
|
2258
2258
|
for (let t = 0; t < this._deepWildcards.length; t++) if (e.matches(this._deepWildcards[t])) return this._deepWildcards[t];
|
|
2259
2259
|
return null;
|
|
2260
2260
|
}
|
|
2261
|
-
},
|
|
2261
|
+
}, gt = class {
|
|
2262
2262
|
constructor(e) {
|
|
2263
2263
|
this._matcher = e;
|
|
2264
2264
|
}
|
|
@@ -2315,9 +2315,9 @@ var I = class {
|
|
|
2315
2315
|
matchesAny(e) {
|
|
2316
2316
|
return e.matchesAny(this._matcher);
|
|
2317
2317
|
}
|
|
2318
|
-
},
|
|
2318
|
+
}, I = class {
|
|
2319
2319
|
constructor(e = {}) {
|
|
2320
|
-
this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new
|
|
2320
|
+
this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new gt(this), this._keptAttrs = [];
|
|
2321
2321
|
}
|
|
2322
2322
|
push(e, t = null, n = null, r = null) {
|
|
2323
2323
|
this._pathStringCache = null, this.path.length > 0 && (this.path[this.path.length - 1].values = void 0);
|
|
@@ -2468,7 +2468,7 @@ var I = class {
|
|
|
2468
2468
|
readOnly() {
|
|
2469
2469
|
return this._view;
|
|
2470
2470
|
}
|
|
2471
|
-
},
|
|
2471
|
+
}, L = [
|
|
2472
2472
|
{
|
|
2473
2473
|
id: "html-script-open",
|
|
2474
2474
|
description: "<script opening tag",
|
|
@@ -2554,7 +2554,7 @@ var I = class {
|
|
|
2554
2554
|
description: "<form tag — can be used for phishing / credential harvesting injection",
|
|
2555
2555
|
pattern: /<form[\s>/]/i
|
|
2556
2556
|
}
|
|
2557
|
-
],
|
|
2557
|
+
], R = [
|
|
2558
2558
|
{
|
|
2559
2559
|
id: "xml-cdata-injection",
|
|
2560
2560
|
description: "CDATA section injection: <![CDATA[ breaks out of text node context",
|
|
@@ -2615,7 +2615,7 @@ var I = class {
|
|
|
2615
2615
|
description: "?> closes an enclosing processing instruction",
|
|
2616
2616
|
pattern: /\?>/
|
|
2617
2617
|
}
|
|
2618
|
-
],
|
|
2618
|
+
], _t = [
|
|
2619
2619
|
{
|
|
2620
2620
|
id: "svg-script-element",
|
|
2621
2621
|
description: "<script element inside SVG executes JavaScript",
|
|
@@ -2681,7 +2681,7 @@ var I = class {
|
|
|
2681
2681
|
description: "style= attribute containing javascript: (e.g. background:url(javascript:...))",
|
|
2682
2682
|
pattern: /style\s*=[\s\S]{0,60}javascript\s*:/i
|
|
2683
2683
|
}
|
|
2684
|
-
],
|
|
2684
|
+
], z = [
|
|
2685
2685
|
{
|
|
2686
2686
|
id: "sql-block-comment-open",
|
|
2687
2687
|
description: "SQL block comment open: /* ... */ — unusual in legitimate user text",
|
|
@@ -2757,7 +2757,7 @@ var I = class {
|
|
|
2757
2757
|
description: "INFORMATION_SCHEMA — reconnaissance query for table/column enumeration",
|
|
2758
2758
|
pattern: /\bINFORMATION_SCHEMA\b/i
|
|
2759
2759
|
}
|
|
2760
|
-
],
|
|
2760
|
+
], vt = [
|
|
2761
2761
|
{
|
|
2762
2762
|
id: "shell-path-traversal-unix",
|
|
2763
2763
|
description: "Unix path traversal: ../ — climbing the directory tree",
|
|
@@ -2848,7 +2848,7 @@ var I = class {
|
|
|
2848
2848
|
description: "curl/wget with URL or flags — can exfiltrate data or download payloads",
|
|
2849
2849
|
pattern: /\b(?:curl|wget)\s+(?:https?:\/\/|ftp:\/\/|-)/i
|
|
2850
2850
|
}
|
|
2851
|
-
],
|
|
2851
|
+
], yt = [
|
|
2852
2852
|
{
|
|
2853
2853
|
id: "redos-nested-quantifier-plus",
|
|
2854
2854
|
description: "Nested + quantifier inside a group with outer quantifier: (a+)+, (.+b)*, etc.",
|
|
@@ -2889,71 +2889,71 @@ var I = class {
|
|
|
2889
2889
|
description: "Long alternation with many similar branches — polynomial backtracking risk",
|
|
2890
2890
|
pattern: /\([^)]{0,200}(?:\|[^|)]{0,50}){9,}\)/
|
|
2891
2891
|
}
|
|
2892
|
-
],
|
|
2892
|
+
], B = "[\"'\\s]*:", bt = [
|
|
2893
2893
|
{
|
|
2894
2894
|
id: "nosql-where-operator",
|
|
2895
2895
|
description: "$where — executes arbitrary JavaScript server-side in MongoDB",
|
|
2896
|
-
pattern: RegExp(`\\$where${
|
|
2896
|
+
pattern: RegExp(`\\$where${B}`, "i")
|
|
2897
2897
|
},
|
|
2898
2898
|
{
|
|
2899
2899
|
id: "nosql-ne-operator",
|
|
2900
2900
|
description: "$ne — \"not equal\" operator used to bypass equality checks",
|
|
2901
|
-
pattern: RegExp(`\\$ne${
|
|
2901
|
+
pattern: RegExp(`\\$ne${B}`, "i")
|
|
2902
2902
|
},
|
|
2903
2903
|
{
|
|
2904
2904
|
id: "nosql-gt-operator",
|
|
2905
2905
|
description: "$gt — \"greater than\" used to bypass password/value checks",
|
|
2906
|
-
pattern: RegExp(`\\$gte?${
|
|
2906
|
+
pattern: RegExp(`\\$gte?${B}`, "i")
|
|
2907
2907
|
},
|
|
2908
2908
|
{
|
|
2909
2909
|
id: "nosql-lt-operator",
|
|
2910
2910
|
description: "$lt / $lte — \"less than\" bypass variants",
|
|
2911
|
-
pattern: RegExp(`\\$lte?${
|
|
2911
|
+
pattern: RegExp(`\\$lte?${B}`, "i")
|
|
2912
2912
|
},
|
|
2913
2913
|
{
|
|
2914
2914
|
id: "nosql-regex-operator",
|
|
2915
2915
|
description: "$regex — can be used to extract data character by character (blind injection)",
|
|
2916
|
-
pattern: RegExp(`\\$regex${
|
|
2916
|
+
pattern: RegExp(`\\$regex${B}`, "i")
|
|
2917
2917
|
},
|
|
2918
2918
|
{
|
|
2919
2919
|
id: "nosql-or-operator",
|
|
2920
2920
|
description: "$or — logical OR; used to create always-true conditions",
|
|
2921
|
-
pattern: RegExp(`\\$or${
|
|
2921
|
+
pattern: RegExp(`\\$or${B}\\s*\\[`, "i")
|
|
2922
2922
|
},
|
|
2923
2923
|
{
|
|
2924
2924
|
id: "nosql-and-operator",
|
|
2925
2925
|
description: "$and — logical AND operator injection",
|
|
2926
|
-
pattern: RegExp(`\\$and${
|
|
2926
|
+
pattern: RegExp(`\\$and${B}\\s*\\[`, "i")
|
|
2927
2927
|
},
|
|
2928
2928
|
{
|
|
2929
2929
|
id: "nosql-nor-operator",
|
|
2930
2930
|
description: "$nor — logical NOR operator injection",
|
|
2931
|
-
pattern: RegExp(`\\$nor${
|
|
2931
|
+
pattern: RegExp(`\\$nor${B}\\s*\\[`, "i")
|
|
2932
2932
|
},
|
|
2933
2933
|
{
|
|
2934
2934
|
id: "nosql-exists-operator",
|
|
2935
2935
|
description: "$exists — can enumerate fields to determine schema",
|
|
2936
|
-
pattern: RegExp(`\\$exists${
|
|
2936
|
+
pattern: RegExp(`\\$exists${B}`, "i")
|
|
2937
2937
|
},
|
|
2938
2938
|
{
|
|
2939
2939
|
id: "nosql-in-operator",
|
|
2940
2940
|
description: "$in — matches any value in a list; can enumerate values",
|
|
2941
|
-
pattern: RegExp(`\\$in${
|
|
2941
|
+
pattern: RegExp(`\\$in${B}\\s*\\[`, "i")
|
|
2942
2942
|
},
|
|
2943
2943
|
{
|
|
2944
2944
|
id: "nosql-expr-operator",
|
|
2945
2945
|
description: "$expr — allows aggregation expressions in queries (MongoDB 3.6+)",
|
|
2946
|
-
pattern: RegExp(`\\$expr${
|
|
2946
|
+
pattern: RegExp(`\\$expr${B}`, "i")
|
|
2947
2947
|
},
|
|
2948
2948
|
{
|
|
2949
2949
|
id: "nosql-function-operator",
|
|
2950
2950
|
description: "$function — executes arbitrary JavaScript in MongoDB 4.4+",
|
|
2951
|
-
pattern: RegExp(`\\$function${
|
|
2951
|
+
pattern: RegExp(`\\$function${B}`, "i")
|
|
2952
2952
|
},
|
|
2953
2953
|
{
|
|
2954
2954
|
id: "nosql-accumulator-operator",
|
|
2955
2955
|
description: "$accumulator — custom aggregation with arbitrary JS execution",
|
|
2956
|
-
pattern: RegExp(`\\$accumulator${
|
|
2956
|
+
pattern: RegExp(`\\$accumulator${B}`, "i")
|
|
2957
2957
|
},
|
|
2958
2958
|
{
|
|
2959
2959
|
id: "nosql-proto-pollution",
|
|
@@ -2970,7 +2970,7 @@ var I = class {
|
|
|
2970
2970
|
description: "[\"__proto__\"] — bracket-notation prototype pollution",
|
|
2971
2971
|
pattern: /\[["']__proto__["']\]/
|
|
2972
2972
|
}
|
|
2973
|
-
],
|
|
2973
|
+
], xt = [
|
|
2974
2974
|
{
|
|
2975
2975
|
id: "log-crlf-injection",
|
|
2976
2976
|
description: "CRLF injection: literal \\r or \\n embeds fake log lines",
|
|
@@ -3031,7 +3031,7 @@ var I = class {
|
|
|
3031
3031
|
description: "ANSI escape sequence: ESC[ — can manipulate terminal output when logs are tailed",
|
|
3032
3032
|
pattern: /\x1b\[/
|
|
3033
3033
|
}
|
|
3034
|
-
],
|
|
3034
|
+
], St = [
|
|
3035
3035
|
{
|
|
3036
3036
|
id: "sql-line-comment",
|
|
3037
3037
|
description: "SQL line comment: -- followed by whitespace or end of string",
|
|
@@ -3047,22 +3047,22 @@ var I = class {
|
|
|
3047
3047
|
description: "Hex-encoded string injection: 0x41414141 style (MySQL)",
|
|
3048
3048
|
pattern: /\b0x[0-9a-f]{4,}/i
|
|
3049
3049
|
}
|
|
3050
|
-
],
|
|
3051
|
-
|
|
3052
|
-
HTML:
|
|
3053
|
-
XML:
|
|
3054
|
-
SVG:
|
|
3055
|
-
SQL:
|
|
3056
|
-
"SQL-STRICT":
|
|
3057
|
-
SHELL:
|
|
3058
|
-
REDOS:
|
|
3059
|
-
NOSQL:
|
|
3060
|
-
LOG:
|
|
3050
|
+
], Ct = [...z, ...St];
|
|
3051
|
+
L.label = "HTML", R.label = "XML", _t.label = "SVG", z.label = "SQL", Ct.label = "SQL-STRICT", vt.label = "SHELL", yt.label = "REDOS", bt.label = "NOSQL", xt.label = "LOG", Object.freeze({
|
|
3052
|
+
HTML: L,
|
|
3053
|
+
XML: R,
|
|
3054
|
+
SVG: _t,
|
|
3055
|
+
SQL: z,
|
|
3056
|
+
"SQL-STRICT": Ct,
|
|
3057
|
+
SHELL: vt,
|
|
3058
|
+
REDOS: yt,
|
|
3059
|
+
NOSQL: bt,
|
|
3060
|
+
LOG: xt
|
|
3061
3061
|
});
|
|
3062
|
-
function
|
|
3062
|
+
function wt(e) {
|
|
3063
3063
|
if (typeof e != "string") throw TypeError(`is-unsafe: first argument must be a string, got ${typeof e}`);
|
|
3064
3064
|
}
|
|
3065
|
-
function
|
|
3065
|
+
function Tt(e) {
|
|
3066
3066
|
if (!(e instanceof RegExp)) {
|
|
3067
3067
|
if (Array.isArray(e)) {
|
|
3068
3068
|
if (e.length === 0) throw TypeError("is-unsafe: context must not be an empty array");
|
|
@@ -3074,7 +3074,7 @@ function wt(e) {
|
|
|
3074
3074
|
throw TypeError(`is-unsafe: second argument must be a PatternList (e.g. HTML), an array of PatternLists (e.g. [HTML, XML]), or a RegExp. Got: ${typeof e}`);
|
|
3075
3075
|
}
|
|
3076
3076
|
}
|
|
3077
|
-
function
|
|
3077
|
+
function Et(e) {
|
|
3078
3078
|
return e instanceof RegExp ? {
|
|
3079
3079
|
lists: null,
|
|
3080
3080
|
regex: e
|
|
@@ -3086,7 +3086,7 @@ function Tt(e) {
|
|
|
3086
3086
|
regex: null
|
|
3087
3087
|
};
|
|
3088
3088
|
}
|
|
3089
|
-
function
|
|
3089
|
+
function Dt(e, t) {
|
|
3090
3090
|
let n = t.label ?? "CUSTOM";
|
|
3091
3091
|
for (let r of t) if (r.pattern.test(e)) return {
|
|
3092
3092
|
context: n,
|
|
@@ -3096,16 +3096,16 @@ function Et(e, t) {
|
|
|
3096
3096
|
};
|
|
3097
3097
|
return null;
|
|
3098
3098
|
}
|
|
3099
|
-
function
|
|
3100
|
-
|
|
3101
|
-
let { lists: n, regex: r } =
|
|
3099
|
+
function Ot(e, t) {
|
|
3100
|
+
wt(e), Tt(t);
|
|
3101
|
+
let { lists: n, regex: r } = Et(t);
|
|
3102
3102
|
if (r) return r.test(e);
|
|
3103
|
-
for (let t of n) if (
|
|
3103
|
+
for (let t of n) if (Dt(e, t) !== null) return !0;
|
|
3104
3104
|
return !1;
|
|
3105
3105
|
}
|
|
3106
3106
|
//#endregion
|
|
3107
3107
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
|
|
3108
|
-
function
|
|
3108
|
+
function kt(e, t) {
|
|
3109
3109
|
if (!e) return {};
|
|
3110
3110
|
let n = t.attributesGroupName ? e[t.attributesGroupName] : e;
|
|
3111
3111
|
if (!n) return {};
|
|
@@ -3116,7 +3116,7 @@ function Ot(e, t) {
|
|
|
3116
3116
|
} else r[e] = n[e];
|
|
3117
3117
|
return r;
|
|
3118
3118
|
}
|
|
3119
|
-
function
|
|
3119
|
+
function At(e) {
|
|
3120
3120
|
if (!e || typeof e != "string") return;
|
|
3121
3121
|
let t = e.indexOf(":");
|
|
3122
3122
|
if (t !== -1 && t > 0) {
|
|
@@ -3124,14 +3124,14 @@ function kt(e) {
|
|
|
3124
3124
|
if (n !== "xmlns") return n;
|
|
3125
3125
|
}
|
|
3126
3126
|
}
|
|
3127
|
-
var
|
|
3127
|
+
var jt = class {
|
|
3128
3128
|
constructor(e, t) {
|
|
3129
|
-
this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml =
|
|
3129
|
+
this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = It, this.parseTextData = Mt, this.resolveNameSpace = Nt, this.buildAttributesMap = Ft, this.isItStopNode = Bt, this.replaceEntitiesValue = Rt, this.readStopNodeData = Ut, this.saveTextToParentTag = zt, this.addChild = Lt, this.ignoreAttributesFn = mt(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
|
|
3130
3130
|
let n = { ...we };
|
|
3131
3131
|
this.options.entityDecoder ? this.entityDecoder = this.options.entityDecoder : (typeof this.options.htmlEntities == "object" ? n = this.options.htmlEntities : this.options.htmlEntities === !0 && (n = {
|
|
3132
3132
|
...Te,
|
|
3133
3133
|
...xe
|
|
3134
|
-
}), this.entityDecoder = new
|
|
3134
|
+
}), this.entityDecoder = new Me({
|
|
3135
3135
|
namedEntities: {
|
|
3136
3136
|
...n,
|
|
3137
3137
|
...t
|
|
@@ -3142,19 +3142,19 @@ var At = class {
|
|
|
3142
3142
|
maxExpandedLength: this.options.processEntities.maxExpandedLength,
|
|
3143
3143
|
applyLimitsTo: this.options.processEntities.appliesTo
|
|
3144
3144
|
},
|
|
3145
|
-
onInputEntity: (e, t) =>
|
|
3146
|
-
})), this.matcher = new
|
|
3145
|
+
onInputEntity: (e, t) => Ot(t, [L, R]) ? x.BLOCK : x.ALLOW
|
|
3146
|
+
})), this.matcher = new I(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new ht();
|
|
3147
3147
|
let r = this.options.stopNodes;
|
|
3148
3148
|
if (r && r.length > 0) {
|
|
3149
3149
|
for (let e = 0; e < r.length; e++) {
|
|
3150
3150
|
let t = r[e];
|
|
3151
|
-
typeof t == "string" ? this.stopNodeExpressionsSet.add(new
|
|
3151
|
+
typeof t == "string" ? this.stopNodeExpressionsSet.add(new F(t)) : t instanceof F && this.stopNodeExpressionsSet.add(t);
|
|
3152
3152
|
}
|
|
3153
3153
|
this.stopNodeExpressionsSet.seal();
|
|
3154
3154
|
}
|
|
3155
3155
|
}
|
|
3156
3156
|
};
|
|
3157
|
-
function
|
|
3157
|
+
function Mt(e, t, n, r, i, a, o) {
|
|
3158
3158
|
let s = this.options;
|
|
3159
3159
|
if (e !== void 0 && (s.trimValues && !r && (e = e.trim()), e.length > 0)) {
|
|
3160
3160
|
o || (e = this.replaceEntitiesValue(e, t, n));
|
|
@@ -3162,7 +3162,7 @@ function jt(e, t, n, r, i, a, o) {
|
|
|
3162
3162
|
return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Wt(e, s.parseTagValue, s.numberParseOptions) : e;
|
|
3163
3163
|
}
|
|
3164
3164
|
}
|
|
3165
|
-
function
|
|
3165
|
+
function Nt(e) {
|
|
3166
3166
|
if (this.options.removeNSPrefix) {
|
|
3167
3167
|
let t = e.split(":"), n = e.charAt(0) === "/" ? "/" : "";
|
|
3168
3168
|
if (t[0] === "xmlns") return "";
|
|
@@ -3170,11 +3170,11 @@ function Mt(e) {
|
|
|
3170
3170
|
}
|
|
3171
3171
|
return e;
|
|
3172
3172
|
}
|
|
3173
|
-
var
|
|
3174
|
-
function
|
|
3173
|
+
var Pt = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
|
|
3174
|
+
function Ft(e, t, n, r = !1) {
|
|
3175
3175
|
let i = this.options;
|
|
3176
3176
|
if (r === !0 || i.ignoreAttributes !== !0 && typeof e == "string") {
|
|
3177
|
-
let r = u(e,
|
|
3177
|
+
let r = u(e, Pt), a = r.length, o = {}, s = Array(a), c = !1, l = {};
|
|
3178
3178
|
for (let e = 0; e < a; e++) {
|
|
3179
3179
|
let t = this.resolveNameSpace(r[e][1]), a = r[e][4];
|
|
3180
3180
|
if (t.length && a !== void 0) {
|
|
@@ -3201,15 +3201,15 @@ function Pt(e, t, n, r = !1) {
|
|
|
3201
3201
|
return o;
|
|
3202
3202
|
}
|
|
3203
3203
|
}
|
|
3204
|
-
var
|
|
3204
|
+
var It = function(e) {
|
|
3205
3205
|
e = e.replace(/\r\n?/g, "\n");
|
|
3206
|
-
let t = new
|
|
3206
|
+
let t = new E("!xml"), n = t, r = "";
|
|
3207
3207
|
this.matcher.reset(), this.entityDecoder.reset(), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
|
|
3208
|
-
let i = this.options, a = new
|
|
3208
|
+
let i = this.options, a = new Xe(i.processEntities), o = e.length;
|
|
3209
3209
|
for (let s = 0; s < o; s++) if (e[s] === "<") {
|
|
3210
3210
|
let c = e.charCodeAt(s + 1);
|
|
3211
3211
|
if (c === 47) {
|
|
3212
|
-
let t =
|
|
3212
|
+
let t = V(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
|
|
3213
3213
|
if (i.removeNSPrefix) {
|
|
3214
3214
|
let e = a.indexOf(":");
|
|
3215
3215
|
e !== -1 && (a = a.substr(e + 1));
|
|
@@ -3219,7 +3219,7 @@ var Ft = function(e) {
|
|
|
3219
3219
|
if (a && i.unpairedTagsSet.has(a)) throw Error(`Unpaired tag can not be used as closing tag: </${a}>`);
|
|
3220
3220
|
o && i.unpairedTagsSet.has(o) && (this.matcher.pop(), this.tagsNodeStack.pop()), this.matcher.pop(), this.isCurrentNodeStopNode = !1, n = this.tagsNodeStack.pop(), r = "", s = t;
|
|
3221
3221
|
} else if (c === 63) {
|
|
3222
|
-
let t =
|
|
3222
|
+
let t = H(e, s, !1, "?>");
|
|
3223
3223
|
if (!t) throw Error("Pi Tag is not closed.");
|
|
3224
3224
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
|
|
3225
3225
|
let o = this.buildAttributesMap(t.tagExp, this.matcher, t.tagName, !0);
|
|
@@ -3228,12 +3228,12 @@ var Ft = function(e) {
|
|
|
3228
3228
|
this.entityDecoder.setXmlVersion(Number(e) || 1), a.setXmlVersion(Number(e) || 1);
|
|
3229
3229
|
}
|
|
3230
3230
|
if (!(i.ignoreDeclaration && t.tagName === "?xml" || i.ignorePiTags)) {
|
|
3231
|
-
let e = new
|
|
3231
|
+
let e = new E(t.tagName);
|
|
3232
3232
|
e.add(i.textNodeName, ""), t.tagName !== t.tagExp && t.attrExpPresent && i.ignoreAttributes !== !0 && (e[":@"] = o), this.addChild(n, e, this.readonlyMatcher, s);
|
|
3233
3233
|
}
|
|
3234
3234
|
s = t.closeIndex + 1;
|
|
3235
3235
|
} else if (c === 33 && e.charCodeAt(s + 2) === 45 && e.charCodeAt(s + 3) === 45) {
|
|
3236
|
-
let t =
|
|
3236
|
+
let t = V(e, "-->", s + 4, "Comment is not closed.");
|
|
3237
3237
|
if (i.commentPropName) {
|
|
3238
3238
|
let a = e.substring(s + 4, t - 2);
|
|
3239
3239
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher), n.add(i.commentPropName, [{ [i.textNodeName]: a }]);
|
|
@@ -3243,12 +3243,12 @@ var Ft = function(e) {
|
|
|
3243
3243
|
let t = a.readDocType(e, s);
|
|
3244
3244
|
this.entityDecoder.addInputEntities(t.entities), s = t.i;
|
|
3245
3245
|
} else if (c === 33 && e.charCodeAt(s + 2) === 91) {
|
|
3246
|
-
let t =
|
|
3246
|
+
let t = V(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
|
|
3247
3247
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
|
|
3248
3248
|
let o = this.parseTextData(a, n.tagname, this.readonlyMatcher, !0, !1, !0, !0);
|
|
3249
3249
|
o ??= "", i.cdataPropName ? n.add(i.cdataPropName, [{ [i.textNodeName]: a }]) : n.add(i.textNodeName, o), s = t + 2;
|
|
3250
3250
|
} else {
|
|
3251
|
-
let a =
|
|
3251
|
+
let a = H(e, s, i.removeNSPrefix);
|
|
3252
3252
|
if (!a) {
|
|
3253
3253
|
let t = e.substring(Math.max(0, s - 50), Math.min(o, s + 50));
|
|
3254
3254
|
throw Error(`readTagExp returned undefined at position ${s}. Context: "${t}"`);
|
|
@@ -3261,7 +3261,7 @@ var Ft = function(e) {
|
|
|
3261
3261
|
let m = !1;
|
|
3262
3262
|
u.length > 0 && u.lastIndexOf("/") === u.length - 1 && (m = !0, c[c.length - 1] === "/" ? (c = c.substr(0, c.length - 1), u = c) : u = u.substr(0, u.length - 1), d = c !== u);
|
|
3263
3263
|
let h = null, g;
|
|
3264
|
-
g =
|
|
3264
|
+
g = At(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && kt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
|
|
3265
3265
|
let _ = s;
|
|
3266
3266
|
if (this.isCurrentNodeStopNode) {
|
|
3267
3267
|
let t = "";
|
|
@@ -3272,19 +3272,19 @@ var Ft = function(e) {
|
|
|
3272
3272
|
if (!n) throw Error(`Unexpected end of ${l}`);
|
|
3273
3273
|
s = n.i, t = n.tagContent;
|
|
3274
3274
|
}
|
|
3275
|
-
let r = new
|
|
3275
|
+
let r = new E(c);
|
|
3276
3276
|
h && (r[":@"] = h), r.add(i.textNodeName, t), this.matcher.pop(), this.isCurrentNodeStopNode = !1, this.addChild(n, r, this.readonlyMatcher, _);
|
|
3277
3277
|
} else {
|
|
3278
3278
|
if (m) {
|
|
3279
3279
|
({tagName: c, tagExp: u} = Gt(i.transformTagName, c, u, i));
|
|
3280
|
-
let e = new
|
|
3280
|
+
let e = new E(c);
|
|
3281
3281
|
h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1;
|
|
3282
3282
|
} else if (i.unpairedTagsSet.has(c)) {
|
|
3283
|
-
let e = new
|
|
3283
|
+
let e = new E(c);
|
|
3284
3284
|
h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1, s = a.closeIndex;
|
|
3285
3285
|
continue;
|
|
3286
3286
|
} else {
|
|
3287
|
-
let e = new
|
|
3287
|
+
let e = new E(c);
|
|
3288
3288
|
if (this.tagsNodeStack.length > i.maxNestedTags) throw Error("Maximum nested tags exceeded");
|
|
3289
3289
|
this.tagsNodeStack.push(n), h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), n = e;
|
|
3290
3290
|
}
|
|
@@ -3294,12 +3294,12 @@ var Ft = function(e) {
|
|
|
3294
3294
|
} else r += e[s];
|
|
3295
3295
|
return t.child;
|
|
3296
3296
|
};
|
|
3297
|
-
function
|
|
3297
|
+
function Lt(e, t, n, r) {
|
|
3298
3298
|
this.options.captureMetaData || (r = void 0);
|
|
3299
3299
|
let i = this.options.jPath ? n.toString() : n, a = this.options.updateTag(t.tagname, i, t[":@"]);
|
|
3300
3300
|
a === !1 || (typeof a == "string" && (t.tagname = a), e.addChild(t, r));
|
|
3301
3301
|
}
|
|
3302
|
-
function
|
|
3302
|
+
function Rt(e, t, n) {
|
|
3303
3303
|
let r = this.options.processEntities;
|
|
3304
3304
|
if (!r || !r.enabled) return e;
|
|
3305
3305
|
if (r.allowedTags) {
|
|
@@ -3312,13 +3312,13 @@ function Lt(e, t, n) {
|
|
|
3312
3312
|
}
|
|
3313
3313
|
return this.entityDecoder.decode(e);
|
|
3314
3314
|
}
|
|
3315
|
-
function
|
|
3315
|
+
function zt(e, t, n, r) {
|
|
3316
3316
|
return e &&= (r === void 0 && (r = t.child.length === 0), e = this.parseTextData(e, t.tagname, n, !1, t[":@"] ? Object.keys(t[":@"]).length !== 0 : !1, r), e !== void 0 && e !== "" && t.add(this.options.textNodeName, e), ""), e;
|
|
3317
3317
|
}
|
|
3318
|
-
function
|
|
3318
|
+
function Bt() {
|
|
3319
3319
|
return this.stopNodeExpressionsSet.size === 0 ? !1 : this.matcher.matchesAny(this.stopNodeExpressionsSet);
|
|
3320
3320
|
}
|
|
3321
|
-
function
|
|
3321
|
+
function Vt(e, t, n = ">") {
|
|
3322
3322
|
let r = 0, i = e.length, a = n.charCodeAt(0), o = n.length > 1 ? n.charCodeAt(1) : -1, s = "", c = t;
|
|
3323
3323
|
for (let n = t; n < i; n++) {
|
|
3324
3324
|
let t = e.charCodeAt(n);
|
|
@@ -3336,18 +3336,18 @@ function Bt(e, t, n = ">") {
|
|
|
3336
3336
|
else t === 9 && !r && (s += e.substring(c, n) + " ", c = n + 1);
|
|
3337
3337
|
}
|
|
3338
3338
|
}
|
|
3339
|
-
function
|
|
3339
|
+
function V(e, t, n, r) {
|
|
3340
3340
|
let i = e.indexOf(t, n);
|
|
3341
3341
|
if (i === -1) throw Error(r);
|
|
3342
3342
|
return i + t.length - 1;
|
|
3343
3343
|
}
|
|
3344
|
-
function
|
|
3344
|
+
function Ht(e, t, n, r) {
|
|
3345
3345
|
let i = e.indexOf(t, n);
|
|
3346
3346
|
if (i === -1) throw Error(r);
|
|
3347
3347
|
return i;
|
|
3348
3348
|
}
|
|
3349
|
-
function
|
|
3350
|
-
let i =
|
|
3349
|
+
function H(e, t, n, r = ">") {
|
|
3350
|
+
let i = Vt(e, t + 1, r);
|
|
3351
3351
|
if (!i) return;
|
|
3352
3352
|
let a = i.data, o = i.index, s = a.search(/\s/), c = a, l = !0;
|
|
3353
3353
|
s !== -1 && (c = a.substring(0, s), a = a.substring(s + 1).trimStart());
|
|
@@ -3369,17 +3369,17 @@ function Ut(e, t, n) {
|
|
|
3369
3369
|
for (; n < a; n++) if (e[n] === "<") {
|
|
3370
3370
|
let a = e.charCodeAt(n + 1);
|
|
3371
3371
|
if (a === 47) {
|
|
3372
|
-
let a =
|
|
3372
|
+
let a = Ht(e, ">", n, `${t} is not closed`);
|
|
3373
3373
|
if (e.substring(n + 2, a).trim() === t && (i--, i === 0)) return {
|
|
3374
3374
|
tagContent: e.substring(r, n),
|
|
3375
3375
|
i: a
|
|
3376
3376
|
};
|
|
3377
3377
|
n = a;
|
|
3378
|
-
} else if (a === 63) n =
|
|
3379
|
-
else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n =
|
|
3380
|
-
else if (a === 33 && e.charCodeAt(n + 2) === 91) n =
|
|
3378
|
+
} else if (a === 63) n = V(e, "?>", n + 1, "StopNode is not closed.");
|
|
3379
|
+
else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = V(e, "-->", n + 3, "StopNode is not closed.");
|
|
3380
|
+
else if (a === 33 && e.charCodeAt(n + 2) === 91) n = V(e, "]]>", n, "StopNode is not closed.") - 2;
|
|
3381
3381
|
else {
|
|
3382
|
-
let r =
|
|
3382
|
+
let r = H(e, n, !1);
|
|
3383
3383
|
r && ((r && r.tagName) === t && r.tagExp[r.tagExp.length - 1] !== "/" && i++, n = r.closeIndex);
|
|
3384
3384
|
}
|
|
3385
3385
|
}
|
|
@@ -3387,7 +3387,7 @@ function Ut(e, t, n) {
|
|
|
3387
3387
|
function Wt(e, t, n) {
|
|
3388
3388
|
if (t && typeof e == "string") {
|
|
3389
3389
|
let t = e.trim();
|
|
3390
|
-
return t === "true" ? !0 : t === "false" ? !1 :
|
|
3390
|
+
return t === "true" ? !0 : t === "false" ? !1 : lt(e, n);
|
|
3391
3391
|
} else if (f(e)) return e;
|
|
3392
3392
|
else return "";
|
|
3393
3393
|
}
|
|
@@ -3407,7 +3407,7 @@ function Kt(e, t) {
|
|
|
3407
3407
|
}
|
|
3408
3408
|
//#endregion
|
|
3409
3409
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
|
|
3410
|
-
var qt =
|
|
3410
|
+
var qt = E.getMetaDataSymbol();
|
|
3411
3411
|
function Jt(e, t) {
|
|
3412
3412
|
if (!e || typeof e != "object") return {};
|
|
3413
3413
|
if (!t) return e;
|
|
@@ -3467,7 +3467,7 @@ function $t(e, t) {
|
|
|
3467
3467
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
|
|
3468
3468
|
var en = class {
|
|
3469
3469
|
constructor(e) {
|
|
3470
|
-
this.externalEntities = {}, this.options =
|
|
3470
|
+
this.externalEntities = {}, this.options = Le(e);
|
|
3471
3471
|
}
|
|
3472
3472
|
parse(e, t) {
|
|
3473
3473
|
if (typeof e != "string" && e.toString) e = e.toString();
|
|
@@ -3477,7 +3477,7 @@ var en = class {
|
|
|
3477
3477
|
let n = g(e, t);
|
|
3478
3478
|
if (n !== !0) throw Error(`${n.err.msg}:${n.err.line}:${n.err.col}`);
|
|
3479
3479
|
}
|
|
3480
|
-
let n = new
|
|
3480
|
+
let n = new jt(this.options, this.externalEntities), r = n.parseXml(e);
|
|
3481
3481
|
return this.options.preserveOrder || r === void 0 ? r : Yt(r, this.options, n.matcher, n.readonlyMatcher);
|
|
3482
3482
|
}
|
|
3483
3483
|
addEntity(e, t) {
|
|
@@ -3487,7 +3487,7 @@ var en = class {
|
|
|
3487
3487
|
this.externalEntities[e] = t;
|
|
3488
3488
|
}
|
|
3489
3489
|
static getMetaDataSymbol() {
|
|
3490
|
-
return
|
|
3490
|
+
return E.getMetaDataSymbol();
|
|
3491
3491
|
}
|
|
3492
3492
|
};
|
|
3493
3493
|
//#endregion
|
|
@@ -3528,9 +3528,9 @@ function sn(e, t) {
|
|
|
3528
3528
|
let r = [];
|
|
3529
3529
|
if (t.stopNodes && Array.isArray(t.stopNodes)) for (let e = 0; e < t.stopNodes.length; e++) {
|
|
3530
3530
|
let n = t.stopNodes[e];
|
|
3531
|
-
typeof n == "string" ? r.push(new
|
|
3531
|
+
typeof n == "string" ? r.push(new F(n)) : n instanceof F && r.push(n);
|
|
3532
3532
|
}
|
|
3533
|
-
let i =
|
|
3533
|
+
let i = Ye("qName", { xmlVersion: an(e, t) }), a = new I();
|
|
3534
3534
|
return cn(e, t, n, a, r, i);
|
|
3535
3535
|
}
|
|
3536
3536
|
function cn(e, t, n, r, i, a) {
|
|
@@ -3698,7 +3698,7 @@ var _n = {
|
|
|
3698
3698
|
function W(e) {
|
|
3699
3699
|
if (this.options = Object.assign({}, _n, e), this.options.stopNodes && Array.isArray(this.options.stopNodes) && (this.options.stopNodes = this.options.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), this.stopNodeExpressions = [], this.options.stopNodes && Array.isArray(this.options.stopNodes)) for (let e = 0; e < this.options.stopNodes.length; e++) {
|
|
3700
3700
|
let t = this.options.stopNodes[e];
|
|
3701
|
-
typeof t == "string" ? this.stopNodeExpressions.push(new
|
|
3701
|
+
typeof t == "string" ? this.stopNodeExpressions.push(new F(t)) : t instanceof F && this.stopNodeExpressions.push(t);
|
|
3702
3702
|
}
|
|
3703
3703
|
this.options.ignoreAttributes === !0 || this.options.attributesGroupName ? this.isAttribute = function() {
|
|
3704
3704
|
return !1;
|
|
@@ -3728,7 +3728,7 @@ W.prototype.build = function(e) {
|
|
|
3728
3728
|
if (this.options.preserveOrder) return sn(e, this.options);
|
|
3729
3729
|
{
|
|
3730
3730
|
Array.isArray(e) && this.options.arrayNodeName && this.options.arrayNodeName.length > 1 && (e = { [this.options.arrayNodeName]: e });
|
|
3731
|
-
let t = new
|
|
3731
|
+
let t = new I(), n = Ye("qName", { xmlVersion: vn(e, this.options) });
|
|
3732
3732
|
return this.j2x(e, 0, t, n).val;
|
|
3733
3733
|
}
|
|
3734
3734
|
}, W.prototype.j2x = function(e, t, n, r) {
|
|
@@ -4929,7 +4929,9 @@ var Mr = e.object({
|
|
|
4929
4929
|
type: e.literal("EMAIL"),
|
|
4930
4930
|
config: e.object({
|
|
4931
4931
|
placeholder: e.string().optional(),
|
|
4932
|
-
default_value: e.string().optional()
|
|
4932
|
+
default_value: e.string().optional(),
|
|
4933
|
+
last_used: e.boolean().optional(),
|
|
4934
|
+
last_used_label: e.string().optional()
|
|
4933
4935
|
}).optional()
|
|
4934
4936
|
}), $r = Y.extend({
|
|
4935
4937
|
type: e.literal("FILE"),
|
|
@@ -4996,7 +4998,9 @@ var Mr = e.object({
|
|
|
4996
4998
|
placeholder: e.string().optional(),
|
|
4997
4999
|
multiline: e.boolean().optional(),
|
|
4998
5000
|
max_length: e.number().optional(),
|
|
4999
|
-
default_value: e.string().optional()
|
|
5001
|
+
default_value: e.string().optional(),
|
|
5002
|
+
last_used: e.boolean().optional(),
|
|
5003
|
+
last_used_label: e.string().optional()
|
|
5000
5004
|
}).optional()
|
|
5001
5005
|
}), si = Y.extend({
|
|
5002
5006
|
type: e.literal("COUNTRY"),
|
|
@@ -5198,7 +5202,7 @@ var bi = e.enum([
|
|
|
5198
5202
|
"credentials-exchange",
|
|
5199
5203
|
"pre-user-registration",
|
|
5200
5204
|
"post-user-registration"
|
|
5201
|
-
]), wi = e.enum([
|
|
5205
|
+
]), wi = e.enum(["post-user-login"]), Ti = e.enum(["impersonate"]), Ei = e.enum([
|
|
5202
5206
|
"ensure-username",
|
|
5203
5207
|
"set-preferred-username",
|
|
5204
5208
|
"account-linking"
|
|
@@ -5208,59 +5212,73 @@ var bi = e.enum([
|
|
|
5208
5212
|
priority: e.number().optional(),
|
|
5209
5213
|
hook_id: e.string().optional(),
|
|
5210
5214
|
metadata: e.record(e.string(), e.unknown()).optional()
|
|
5211
|
-
},
|
|
5215
|
+
}, Di = e.object({
|
|
5212
5216
|
...Z,
|
|
5213
5217
|
trigger_id: bi,
|
|
5214
5218
|
url: e.string()
|
|
5215
|
-
}),
|
|
5219
|
+
}), Oi = e.object({
|
|
5216
5220
|
...Z,
|
|
5217
5221
|
trigger_id: xi,
|
|
5218
5222
|
form_id: e.string()
|
|
5219
|
-
}),
|
|
5223
|
+
}), ki = e.object({
|
|
5220
5224
|
...Z,
|
|
5221
5225
|
trigger_id: Si,
|
|
5222
|
-
template_id:
|
|
5223
|
-
}),
|
|
5226
|
+
template_id: Ei
|
|
5227
|
+
}), Ai = e.object({
|
|
5224
5228
|
...Z,
|
|
5225
5229
|
trigger_id: Ci,
|
|
5226
5230
|
code_id: e.string()
|
|
5231
|
+
}), ji = e.object({
|
|
5232
|
+
...Z,
|
|
5233
|
+
trigger_id: wi,
|
|
5234
|
+
page_id: Ti,
|
|
5235
|
+
permission_required: e.string().optional()
|
|
5227
5236
|
});
|
|
5228
5237
|
e.union([
|
|
5229
|
-
Ti,
|
|
5230
|
-
Ei,
|
|
5231
5238
|
Di,
|
|
5232
|
-
Oi
|
|
5239
|
+
Oi,
|
|
5240
|
+
ki,
|
|
5241
|
+
Ai,
|
|
5242
|
+
ji
|
|
5233
5243
|
]);
|
|
5234
|
-
var
|
|
5244
|
+
var Mi = e.object({
|
|
5235
5245
|
...Z,
|
|
5236
5246
|
trigger_id: bi
|
|
5237
5247
|
}).extend(G.shape).extend({
|
|
5238
5248
|
hook_id: e.string(),
|
|
5239
5249
|
url: e.string()
|
|
5240
|
-
}),
|
|
5250
|
+
}), Ni = e.object({
|
|
5241
5251
|
...Z,
|
|
5242
5252
|
trigger_id: xi
|
|
5243
5253
|
}).extend(G.shape).extend({
|
|
5244
5254
|
hook_id: e.string(),
|
|
5245
5255
|
form_id: e.string()
|
|
5246
|
-
}),
|
|
5256
|
+
}), Pi = e.object({
|
|
5247
5257
|
...Z,
|
|
5248
5258
|
trigger_id: Si
|
|
5249
5259
|
}).extend(G.shape).extend({
|
|
5250
5260
|
hook_id: e.string(),
|
|
5251
|
-
template_id:
|
|
5252
|
-
}),
|
|
5261
|
+
template_id: Ei
|
|
5262
|
+
}), Fi = e.object({
|
|
5253
5263
|
...Z,
|
|
5254
5264
|
trigger_id: Ci
|
|
5255
5265
|
}).extend(G.shape).extend({
|
|
5256
5266
|
hook_id: e.string(),
|
|
5257
5267
|
code_id: e.string()
|
|
5268
|
+
}), Ii = e.object({
|
|
5269
|
+
...Z,
|
|
5270
|
+
trigger_id: wi
|
|
5271
|
+
}).extend(G.shape).extend({
|
|
5272
|
+
hook_id: e.string(),
|
|
5273
|
+
page_id: Ti,
|
|
5274
|
+
permission_required: e.string().optional()
|
|
5258
5275
|
});
|
|
5259
5276
|
e.union([
|
|
5260
|
-
|
|
5261
|
-
|
|
5262
|
-
|
|
5263
|
-
|
|
5277
|
+
Mi,
|
|
5278
|
+
Ni,
|
|
5279
|
+
Pi,
|
|
5280
|
+
Fi,
|
|
5281
|
+
Ii
|
|
5264
5282
|
]), e.object({
|
|
5265
5283
|
code: e.string().max(1e5),
|
|
5266
5284
|
secrets: e.record(e.string(), e.string()).optional()
|
|
@@ -5268,11 +5286,11 @@ e.union([
|
|
|
5268
5286
|
id: e.string(),
|
|
5269
5287
|
tenant_id: e.string()
|
|
5270
5288
|
}).extend(G.shape);
|
|
5271
|
-
var
|
|
5289
|
+
var Li = e.object({ name: e.string().optional() }), Ri = e.object({ email: e.string().optional() }), zi = e.object({
|
|
5272
5290
|
id: e.string().optional(),
|
|
5273
5291
|
organization_id: e.string().max(50),
|
|
5274
|
-
inviter:
|
|
5275
|
-
invitee:
|
|
5292
|
+
inviter: Li,
|
|
5293
|
+
invitee: Ri,
|
|
5276
5294
|
invitation_url: e.string().url(),
|
|
5277
5295
|
client_id: e.string(),
|
|
5278
5296
|
connection_id: e.string().optional(),
|
|
@@ -5288,8 +5306,8 @@ e.object({
|
|
|
5288
5306
|
created_at: e.string().datetime(),
|
|
5289
5307
|
expires_at: e.string().datetime(),
|
|
5290
5308
|
ticket_id: e.string().optional()
|
|
5291
|
-
}).extend(
|
|
5292
|
-
var
|
|
5309
|
+
}).extend(zi.omit({ id: !0 }).shape);
|
|
5310
|
+
var Bi = e.object({
|
|
5293
5311
|
alg: e.enum([
|
|
5294
5312
|
"RS256",
|
|
5295
5313
|
"RS384",
|
|
@@ -5331,7 +5349,7 @@ var Ii = e.object({
|
|
|
5331
5349
|
message: `EC JWK is missing required member '${r}'`
|
|
5332
5350
|
});
|
|
5333
5351
|
});
|
|
5334
|
-
e.object({ keys: e.array(
|
|
5352
|
+
e.object({ keys: e.array(Bi) }), e.object({
|
|
5335
5353
|
issuer: e.string(),
|
|
5336
5354
|
authorization_endpoint: e.string(),
|
|
5337
5355
|
token_endpoint: e.string(),
|
|
@@ -5358,9 +5376,9 @@ e.object({ keys: e.array(Ii) }), e.object({
|
|
|
5358
5376
|
backchannel_logout_supported: e.boolean().optional(),
|
|
5359
5377
|
backchannel_logout_session_supported: e.boolean().optional()
|
|
5360
5378
|
});
|
|
5361
|
-
var
|
|
5379
|
+
var Vi = /* @__PURE__ */ function(e) {
|
|
5362
5380
|
return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
|
|
5363
|
-
}({}),
|
|
5381
|
+
}({}), Hi = e.nativeEnum(Vi), Ui = e.object({
|
|
5364
5382
|
strategy: e.string(),
|
|
5365
5383
|
strategy_type: e.string()
|
|
5366
5384
|
});
|
|
@@ -5374,12 +5392,12 @@ e.object({
|
|
|
5374
5392
|
useragent: e.string().optional(),
|
|
5375
5393
|
session_id: e.string().optional(),
|
|
5376
5394
|
authorization_url: e.string().optional(),
|
|
5377
|
-
state:
|
|
5395
|
+
state: Hi.optional().default("pending"),
|
|
5378
5396
|
state_data: e.string().optional(),
|
|
5379
5397
|
failure_reason: e.string().optional(),
|
|
5380
5398
|
user_id: e.string().optional(),
|
|
5381
5399
|
auth_connection: e.string().optional(),
|
|
5382
|
-
auth_strategy:
|
|
5400
|
+
auth_strategy: Ui.optional(),
|
|
5383
5401
|
authenticated_at: e.string().optional()
|
|
5384
5402
|
}).openapi({ description: "This represents a login sesion" }).extend({
|
|
5385
5403
|
id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
|
|
@@ -5546,17 +5564,17 @@ var Q = {
|
|
|
5546
5564
|
WARNING_DURING_LOGIN: "w",
|
|
5547
5565
|
WARNING_SENDING_NOTIFICATION: "wn",
|
|
5548
5566
|
WARNING_USER_MANAGEMENT: "wum"
|
|
5549
|
-
},
|
|
5567
|
+
}, Wi = e.string().refine((e) => Object.values(Q).includes(e), { message: "Invalid log type" });
|
|
5550
5568
|
Q.ACLS_SUMMARY, Q.ACTIONS_EXECUTION_FAILED, Q.API_LIMIT, Q.API_LIMIT_WARNING, Q.APPI, Q.CIBA_EXCHANGE_FAILED, Q.CIBA_EXCHANGE_SUCCEEDED, Q.CIBA_START_FAILED, Q.CIBA_START_SUCCEEDED, Q.CODE_LINK_SENT, Q.CODE_SENT, Q.DEPRECATION_NOTICE, Q.FAILED_LOGIN, Q.FAILED_BY_CONNECTOR, Q.FAILED_CHANGE_EMAIL, Q.FAILED_BY_CORS, Q.FAILED_CROSS_ORIGIN_AUTHENTICATION, Q.FAILED_CHANGE_PASSWORD, Q.FAILED_POST_CHANGE_PASSWORD_HOOK, Q.FAILED_CHANGE_PHONE_NUMBER, Q.FAILED_CHANGE_PASSWORD_REQUEST, Q.FAILED_CONNECTOR_PROVISIONING, Q.FAILED_CHANGE_USERNAME, Q.FAILED_DELEGATION, Q.FAILED_DEVICE_ACTIVATION, Q.FAILED_DEVICE_AUTHORIZATION_REQUEST, Q.USER_CANCELED_DEVICE_CONFIRMATION, Q.FAILED_USER_DELETION, Q.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.FAILED_EXCHANGE_CUSTOM_TOKEN, Q.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.FAILED_FEDERATED_LOGOUT, Q.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, Q.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_HOOK, Q.FAILED_IMPERSONATION, Q.FAILED_INVITE_ACCEPT, Q.FAILED_LOGOUT, Q.FLOWS_EXECUTION_COMPLETED, Q.FLOWS_EXECUTION_FAILED, Q.FAILED_SENDING_NOTIFICATION, Q.FORMS_SUBMISSION_FAILED, Q.FORMS_SUBMISSION_SUCCEEDED, Q.FAILED_LOGIN_INCORRECT_PASSWORD, Q.FAILED_PUSHED_AUTHORIZATION_REQUEST, Q.FAILED_POST_USER_REGISTRATION_HOOK, Q.FAILED_SIGNUP, Q.FAILED_SILENT_AUTH, Q.FAILED_LOGIN_INVALID_EMAIL_USERNAME, Q.FAILED_USERS_IMPORT, Q.FAILED_VERIFICATION_EMAIL, Q.FAILED_VERIFICATION_EMAIL_REQUEST, Q.EMAIL_VERIFICATION_CONFIRMED, Q.EMAIL_VERIFICATION_FAILED, Q.MFA_AUTH_FAILED, Q.MFA_AUTH_REJECTED, Q.MFA_AUTH_SUCCESS, Q.MFA_ENROLLMENT_COMPLETE, Q.TOO_MANY_MFA_FAILURES, Q.MFA_RECOVERY_FAILED, Q.MFA_RECOVERY_RATE_LIMIT_EXCEED, Q.MFA_RECOVERY_SUCCESS, Q.MFA_EMAIL_SENT, Q.EMAIL_VERIFICATION_SENT, Q.EMAIL_VERIFICATION_SEND_FAILURE, Q.PUSH_NOTIFICATION_SENT, Q.ERROR_SENDING_MFA_PUSH_NOTIFICATION, Q.MFA_SMS_SENT, Q.ERROR_SENDING_MFA_SMS, Q.MFA_VOICE_CALL_SUCCESS, Q.MFA_VOICE_CALL_FAILED, Q.SECOND_FACTOR_STARTED, Q.MFA_ENROLL_STARTED, Q.MFA_ENROLLMENT_FAILED, Q.GUARDIAN_TENANT_UPDATE, Q.UNENROLL_DEVICE_ACCOUNT, Q.UPDATE_DEVICE_ACCOUNT, Q.WEBAUTHN_CHALLENGE_FAILED, Q.WEBAUTHN_ENROLLMENT_FAILED, Q.FAILED_KMS_API_OPERATION, Q.SUCCESS_KMS_API_OPERATION, Q.KMS_KEY_STATE_CHANGED, Q.TOO_MANY_CALLS_TO_DELEGATION, Q.BLOCKED_IP_ADDRESS, Q.BLOCKED_ACCOUNT_IP, Q.BLOCKED_ACCOUNT_EMAIL, Q.INFORMATION, Q.MFA_REQUIRED, Q.MANAGEMENT_API_READ_OPERATION, Q.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.FAILED_OIDC_BACKCHANNEL_LOGOUT, Q.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, Q.ORGANIZATION_MEMBER_ADDED, Q.PASSKEY_CHALLENGE_FAILED, Q.PASSKEY_CHALLENGE_STARTED, Q.PRE_LOGIN_ASSESSMENT, Q.BREACHED_PASSWORD, Q.BREACHED_PASSWORD_ON_RESET, Q.SUCCESS_RESOURCE_CLEANUP, Q.RICH_CONSENTS_ACCESS_ERROR, Q.SUCCESS_LOGIN, Q.SUCCESS_API_OPERATION, Q.FAILED_API_OPERATION, Q.SUCCESS_CHANGE_EMAIL, Q.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, Q.SUCCESS_CHANGE_PASSWORD, Q.SUCCESS_CHANGE_PHONE_NUMBER, Q.SUCCESS_CHANGE_PASSWORD_REQUEST, Q.SUCCESS_CHANGE_USERNAME, Q.SUCCESS_CREDENTIAL_VALIDATION, Q.SUCCESS_DELEGATION, Q.SUCCESS_USER_DELETION, Q.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.SUCCESS_EXCHANGE_CUSTOM_TOKEN, Q.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_IMPERSONATION, Q.SUCCESSFULLY_ACCEPTED_USER_INVITE, Q.BREACHED_PASSWORD_ON_SIGNUP, Q.SUCCESS_LOGOUT, Q.SUCCESS_HOOK, Q.SUCCESS_PASSWORD_MIGRATION, Q.SUCCESS_REVOCATION, Q.SUCCESS_SIGNUP, Q.FAILED_SS_SSO_OPERATION, Q.INFORMATION_FROM_SS_SSO_OPERATION, Q.SUCCESS_SS_SSO_OPERATION, Q.SUCCESS_SILENT_AUTH, Q.SUCCESSFUL_SCIM_OPERATION, Q.SUCCESSFULLY_IMPORTED_USERS, Q.SUCCESS_VERIFICATION_EMAIL, Q.SUCCESS_VERIFICATION_EMAIL_REQUEST, Q.MAX_AMOUNT_OF_AUTHENTICATORS, Q.USER_LOGIN_BLOCK_RELEASED, Q.FAILED_UNIVERSAL_LOGOUT, Q.SUCCESSFUL_UNIVERSAL_LOGOUT, Q.WARNING_DURING_LOGIN, Q.WARNING_SENDING_NOTIFICATION, Q.WARNING_USER_MANAGEMENT, (() => {
|
|
5551
5569
|
let e = {};
|
|
5552
5570
|
for (let [t, n] of Object.entries(Q)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
|
|
5553
5571
|
return e;
|
|
5554
5572
|
})();
|
|
5555
|
-
var
|
|
5573
|
+
var Gi = e.object({
|
|
5556
5574
|
name: e.string(),
|
|
5557
5575
|
version: e.string(),
|
|
5558
5576
|
env: e.object({ node: e.string().optional() }).optional()
|
|
5559
|
-
}),
|
|
5577
|
+
}), Ki = e.object({
|
|
5560
5578
|
country_code: e.string().length(2),
|
|
5561
5579
|
city_name: e.string(),
|
|
5562
5580
|
latitude: e.string(),
|
|
@@ -5565,7 +5583,7 @@ var Vi = e.object({
|
|
|
5565
5583
|
continent_code: e.string()
|
|
5566
5584
|
});
|
|
5567
5585
|
e.object({
|
|
5568
|
-
type:
|
|
5586
|
+
type: Wi,
|
|
5569
5587
|
date: e.string(),
|
|
5570
5588
|
description: e.string().optional(),
|
|
5571
5589
|
ip: e.string().optional(),
|
|
@@ -5583,63 +5601,63 @@ e.object({
|
|
|
5583
5601
|
strategy: e.string().optional(),
|
|
5584
5602
|
strategy_type: e.string().optional(),
|
|
5585
5603
|
hostname: e.string().optional(),
|
|
5586
|
-
auth0_client:
|
|
5604
|
+
auth0_client: Gi.optional(),
|
|
5587
5605
|
log_id: e.string().optional(),
|
|
5588
|
-
location_info:
|
|
5606
|
+
location_info: Ki.optional()
|
|
5589
5607
|
}).extend({ log_id: e.string() });
|
|
5590
|
-
var
|
|
5608
|
+
var qi = e.enum([
|
|
5591
5609
|
"http",
|
|
5592
5610
|
"eventbridge",
|
|
5593
5611
|
"eventgrid",
|
|
5594
5612
|
"splunk",
|
|
5595
5613
|
"datadog",
|
|
5596
5614
|
"sumo"
|
|
5597
|
-
]),
|
|
5615
|
+
]), Ji = e.enum([
|
|
5598
5616
|
"active",
|
|
5599
5617
|
"paused",
|
|
5600
5618
|
"suspended"
|
|
5601
|
-
]),
|
|
5619
|
+
]), Yi = e.object({
|
|
5602
5620
|
type: e.string(),
|
|
5603
5621
|
name: e.string()
|
|
5604
5622
|
});
|
|
5605
5623
|
e.object({
|
|
5606
5624
|
name: e.string(),
|
|
5607
|
-
type:
|
|
5608
|
-
status:
|
|
5625
|
+
type: qi,
|
|
5626
|
+
status: Ji.optional(),
|
|
5609
5627
|
sink: e.record(e.string(), e.unknown()),
|
|
5610
|
-
filters: e.array(
|
|
5628
|
+
filters: e.array(Yi).optional(),
|
|
5611
5629
|
isPriority: e.boolean().optional()
|
|
5612
5630
|
}).extend({
|
|
5613
5631
|
id: e.string(),
|
|
5614
|
-
status:
|
|
5632
|
+
status: Ji,
|
|
5615
5633
|
created_at: e.string().optional(),
|
|
5616
5634
|
updated_at: e.string().optional()
|
|
5617
5635
|
});
|
|
5618
|
-
var
|
|
5636
|
+
var Xi = e.enum([
|
|
5619
5637
|
"auth0",
|
|
5620
5638
|
"cognito",
|
|
5621
5639
|
"okta",
|
|
5622
5640
|
"oidc"
|
|
5623
|
-
]),
|
|
5641
|
+
]), Zi = e.object({
|
|
5624
5642
|
domain: e.string(),
|
|
5625
5643
|
client_id: e.string(),
|
|
5626
5644
|
client_secret: e.string(),
|
|
5627
5645
|
audience: e.string().optional(),
|
|
5628
5646
|
scope: e.string().optional()
|
|
5629
|
-
}),
|
|
5647
|
+
}), Qi = e.object({
|
|
5630
5648
|
id: e.string().optional(),
|
|
5631
5649
|
name: e.string(),
|
|
5632
|
-
provider:
|
|
5650
|
+
provider: Xi,
|
|
5633
5651
|
connection: e.string(),
|
|
5634
5652
|
enabled: e.boolean().default(!0),
|
|
5635
|
-
credentials:
|
|
5653
|
+
credentials: Zi
|
|
5636
5654
|
});
|
|
5637
5655
|
e.object({
|
|
5638
5656
|
id: e.string(),
|
|
5639
5657
|
created_at: e.string(),
|
|
5640
5658
|
updated_at: e.string()
|
|
5641
|
-
}).extend(
|
|
5642
|
-
var
|
|
5659
|
+
}).extend(Qi.shape);
|
|
5660
|
+
var $i = e.object({
|
|
5643
5661
|
enabled: e.boolean().optional(),
|
|
5644
5662
|
shields: e.array(e.string()).optional(),
|
|
5645
5663
|
admin_notification_frequency: e.array(e.string()).optional(),
|
|
@@ -5648,13 +5666,13 @@ var Yi = e.object({
|
|
|
5648
5666
|
"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
|
|
5649
5667
|
"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
|
|
5650
5668
|
}).optional()
|
|
5651
|
-
}),
|
|
5669
|
+
}), ea = e.object({
|
|
5652
5670
|
enabled: e.boolean().optional(),
|
|
5653
5671
|
shields: e.array(e.string()).optional(),
|
|
5654
5672
|
allowlist: e.array(e.string()).optional(),
|
|
5655
5673
|
mode: e.string().optional(),
|
|
5656
5674
|
max_attempts: e.number().optional()
|
|
5657
|
-
}),
|
|
5675
|
+
}), ta = e.object({
|
|
5658
5676
|
enabled: e.boolean().optional(),
|
|
5659
5677
|
shields: e.array(e.string()).optional(),
|
|
5660
5678
|
allowlist: e.array(e.string()).optional(),
|
|
@@ -5668,10 +5686,10 @@ var Yi = e.object({
|
|
|
5668
5686
|
rate: e.number().optional()
|
|
5669
5687
|
}).optional()
|
|
5670
5688
|
}).optional()
|
|
5671
|
-
}),
|
|
5672
|
-
breached_password_detection:
|
|
5673
|
-
brute_force_protection:
|
|
5674
|
-
suspicious_ip_throttling:
|
|
5689
|
+
}), na = e.object({
|
|
5690
|
+
breached_password_detection: $i.optional(),
|
|
5691
|
+
brute_force_protection: ea.optional(),
|
|
5692
|
+
suspicious_ip_throttling: ta.optional()
|
|
5675
5693
|
});
|
|
5676
5694
|
e.object({
|
|
5677
5695
|
id: e.string().optional(),
|
|
@@ -5684,14 +5702,14 @@ e.object({
|
|
|
5684
5702
|
created_at: e.string(),
|
|
5685
5703
|
updated_at: e.string()
|
|
5686
5704
|
});
|
|
5687
|
-
var
|
|
5705
|
+
var ra = e.object({
|
|
5688
5706
|
initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
|
|
5689
5707
|
initial_ip: e.string().describe("First IP address associated with this session"),
|
|
5690
5708
|
initial_asn: e.string().describe("First autonomous system number associated with this session"),
|
|
5691
5709
|
last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
|
|
5692
5710
|
last_ip: e.string().describe("Last IP address from which this user logged in"),
|
|
5693
5711
|
last_asn: e.string().describe("Last autonomous system number from which this user logged in")
|
|
5694
|
-
}),
|
|
5712
|
+
}), ia = e.object({
|
|
5695
5713
|
id: e.string(),
|
|
5696
5714
|
revoked_at: e.string().optional(),
|
|
5697
5715
|
used_at: e.string().optional(),
|
|
@@ -5699,7 +5717,7 @@ var $i = e.object({
|
|
|
5699
5717
|
expires_at: e.string().optional(),
|
|
5700
5718
|
login_session_id: e.string(),
|
|
5701
5719
|
idle_expires_at: e.string().optional(),
|
|
5702
|
-
device:
|
|
5720
|
+
device: ra.describe("Metadata related to the device used in the session"),
|
|
5703
5721
|
clients: e.array(e.string()).describe("List of client details for the session")
|
|
5704
5722
|
});
|
|
5705
5723
|
e.object({
|
|
@@ -5707,7 +5725,7 @@ e.object({
|
|
|
5707
5725
|
updated_at: e.string(),
|
|
5708
5726
|
authenticated_at: e.string(),
|
|
5709
5727
|
last_interaction_at: e.string()
|
|
5710
|
-
}).extend(
|
|
5728
|
+
}).extend(ia.shape), e.object({
|
|
5711
5729
|
kid: e.string().openapi({ description: "The key id of the signing key" }),
|
|
5712
5730
|
tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
|
|
5713
5731
|
cert: e.string().openapi({ description: "The public certificate of the signing key" }),
|
|
@@ -5724,7 +5742,7 @@ e.object({
|
|
|
5724
5742
|
connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
|
|
5725
5743
|
type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
|
|
5726
5744
|
});
|
|
5727
|
-
var
|
|
5745
|
+
var aa = e.object({
|
|
5728
5746
|
id: e.string().optional(),
|
|
5729
5747
|
audience: e.string().optional(),
|
|
5730
5748
|
friendly_name: e.string(),
|
|
@@ -5842,7 +5860,7 @@ var ta = e.object({
|
|
|
5842
5860
|
"shared_planetscale"
|
|
5843
5861
|
]).optional(),
|
|
5844
5862
|
d1_database_id: e.string().max(64).optional(),
|
|
5845
|
-
attack_protection:
|
|
5863
|
+
attack_protection: na.optional(),
|
|
5846
5864
|
mfa: e.object({
|
|
5847
5865
|
policy: e.enum(["never", "always"]).default("never").optional(),
|
|
5848
5866
|
factors: e.object({
|
|
@@ -5873,35 +5891,35 @@ var ta = e.object({
|
|
|
5873
5891
|
e.object({
|
|
5874
5892
|
created_at: e.string().nullable().transform((e) => e ?? ""),
|
|
5875
5893
|
updated_at: e.string().nullable().transform((e) => e ?? "")
|
|
5876
|
-
}).extend(
|
|
5894
|
+
}).extend(aa.shape).extend({
|
|
5877
5895
|
id: e.string(),
|
|
5878
5896
|
is_control_plane: e.boolean().optional()
|
|
5879
5897
|
});
|
|
5880
|
-
var
|
|
5898
|
+
var oa = e.enum([
|
|
5881
5899
|
"provision",
|
|
5882
5900
|
"seed",
|
|
5883
5901
|
"upgrade",
|
|
5884
5902
|
"backup",
|
|
5885
5903
|
"deprovision"
|
|
5886
|
-
]),
|
|
5904
|
+
]), sa = e.enum([
|
|
5887
5905
|
"pending",
|
|
5888
5906
|
"running",
|
|
5889
5907
|
"succeeded",
|
|
5890
5908
|
"failed",
|
|
5891
5909
|
"cancelled"
|
|
5892
|
-
]),
|
|
5910
|
+
]), ca = e.enum(["inline", "cloudflare-workflows"]);
|
|
5893
5911
|
e.object({
|
|
5894
5912
|
tenant_id: e.string().max(255).nullable().default(null),
|
|
5895
5913
|
rollout_id: e.string().max(255).nullable().optional(),
|
|
5896
|
-
kind:
|
|
5897
|
-
engine:
|
|
5914
|
+
kind: oa,
|
|
5915
|
+
engine: ca,
|
|
5898
5916
|
engine_instance_id: e.string().max(100).nullable().optional(),
|
|
5899
5917
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5900
5918
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5901
5919
|
initiated_by: e.string().max(255).nullable().optional()
|
|
5902
5920
|
}).extend({
|
|
5903
5921
|
id: e.string(),
|
|
5904
|
-
status:
|
|
5922
|
+
status: sa,
|
|
5905
5923
|
current_step: e.string().max(255).nullable().optional(),
|
|
5906
5924
|
error: e.string().nullable().optional(),
|
|
5907
5925
|
created_at: e.string(),
|
|
@@ -5916,7 +5934,7 @@ e.object({
|
|
|
5916
5934
|
error: !0,
|
|
5917
5935
|
finished_at: !0
|
|
5918
5936
|
}).partial();
|
|
5919
|
-
var
|
|
5937
|
+
var la = e.enum([
|
|
5920
5938
|
"started",
|
|
5921
5939
|
"succeeded",
|
|
5922
5940
|
"failed",
|
|
@@ -5927,18 +5945,18 @@ var aa = e.enum([
|
|
|
5927
5945
|
e.object({
|
|
5928
5946
|
operation_id: e.string().max(255),
|
|
5929
5947
|
step: e.string().max(255),
|
|
5930
|
-
outcome:
|
|
5948
|
+
outcome: la,
|
|
5931
5949
|
detail: e.record(e.string(), e.unknown()).nullable().optional(),
|
|
5932
5950
|
attempt: e.number().int().min(1).default(1)
|
|
5933
5951
|
}).extend({
|
|
5934
5952
|
id: e.string(),
|
|
5935
5953
|
created_at: e.string()
|
|
5936
5954
|
});
|
|
5937
|
-
var
|
|
5955
|
+
var ua = e.enum([
|
|
5938
5956
|
"upgrade",
|
|
5939
5957
|
"reseed",
|
|
5940
5958
|
"backup"
|
|
5941
|
-
]),
|
|
5959
|
+
]), da = e.enum([
|
|
5942
5960
|
"pending",
|
|
5943
5961
|
"canary",
|
|
5944
5962
|
"rolling",
|
|
@@ -5947,7 +5965,7 @@ var oa = e.enum([
|
|
|
5947
5965
|
"failed"
|
|
5948
5966
|
]);
|
|
5949
5967
|
e.object({
|
|
5950
|
-
kind:
|
|
5968
|
+
kind: ua,
|
|
5951
5969
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5952
5970
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5953
5971
|
wave_size: e.number().int().min(1).default(10),
|
|
@@ -5956,7 +5974,7 @@ e.object({
|
|
|
5956
5974
|
initiated_by: e.string().max(255).nullable().optional()
|
|
5957
5975
|
}).extend({
|
|
5958
5976
|
id: e.string(),
|
|
5959
|
-
status:
|
|
5977
|
+
status: da,
|
|
5960
5978
|
created_at: e.string(),
|
|
5961
5979
|
updated_at: e.string(),
|
|
5962
5980
|
finished_at: e.string().nullable().optional()
|
|
@@ -5978,7 +5996,7 @@ e.object({
|
|
|
5978
5996
|
code: e.string(),
|
|
5979
5997
|
state: e.string().optional()
|
|
5980
5998
|
});
|
|
5981
|
-
var
|
|
5999
|
+
var fa = e.object({
|
|
5982
6000
|
button_border_radius: e.number(),
|
|
5983
6001
|
button_border_weight: e.number(),
|
|
5984
6002
|
buttons_style: e.enum([
|
|
@@ -5996,7 +6014,7 @@ var ca = e.object({
|
|
|
5996
6014
|
show_widget_shadow: e.boolean(),
|
|
5997
6015
|
widget_border_weight: e.number(),
|
|
5998
6016
|
widget_corner_radius: e.number()
|
|
5999
|
-
}),
|
|
6017
|
+
}), pa = e.object({
|
|
6000
6018
|
base_focus_color: e.string(),
|
|
6001
6019
|
base_hover_color: e.string(),
|
|
6002
6020
|
body_text: e.string(),
|
|
@@ -6023,7 +6041,7 @@ var ca = e.object({
|
|
|
6023
6041
|
}), $ = e.object({
|
|
6024
6042
|
bold: e.boolean(),
|
|
6025
6043
|
size: e.number()
|
|
6026
|
-
}),
|
|
6044
|
+
}), ma = e.object({
|
|
6027
6045
|
body_text: $,
|
|
6028
6046
|
buttons_text: $,
|
|
6029
6047
|
font_url: e.string(),
|
|
@@ -6033,7 +6051,7 @@ var ca = e.object({
|
|
|
6033
6051
|
reference_text_size: e.number(),
|
|
6034
6052
|
subtitle: $,
|
|
6035
6053
|
title: $
|
|
6036
|
-
}),
|
|
6054
|
+
}), ha = e.object({
|
|
6037
6055
|
background_color: e.string(),
|
|
6038
6056
|
background_image_url: e.string(),
|
|
6039
6057
|
page_layout: e.enum([
|
|
@@ -6046,7 +6064,7 @@ var ca = e.object({
|
|
|
6046
6064
|
"chip",
|
|
6047
6065
|
"none"
|
|
6048
6066
|
]).optional()
|
|
6049
|
-
}),
|
|
6067
|
+
}), ga = e.object({
|
|
6050
6068
|
header_text_alignment: e.enum([
|
|
6051
6069
|
"center",
|
|
6052
6070
|
"left",
|
|
@@ -6063,12 +6081,12 @@ var ca = e.object({
|
|
|
6063
6081
|
social_buttons_layout: e.enum(["bottom", "top"])
|
|
6064
6082
|
});
|
|
6065
6083
|
e.object({
|
|
6066
|
-
borders:
|
|
6067
|
-
colors:
|
|
6084
|
+
borders: fa,
|
|
6085
|
+
colors: pa,
|
|
6068
6086
|
displayName: e.string(),
|
|
6069
|
-
fonts:
|
|
6070
|
-
page_background:
|
|
6071
|
-
widget:
|
|
6087
|
+
fonts: ma,
|
|
6088
|
+
page_background: ha,
|
|
6089
|
+
widget: ga
|
|
6072
6090
|
}).extend({ themeId: e.string() }), e.object({
|
|
6073
6091
|
universal_login_experience: e.enum(["new", "classic"]).default("new"),
|
|
6074
6092
|
identifier_first: e.boolean().default(!0),
|
|
@@ -6076,44 +6094,44 @@ e.object({
|
|
|
6076
6094
|
show_last_used_connection: e.boolean().default(!1),
|
|
6077
6095
|
webauthn_platform_first_factor: e.boolean()
|
|
6078
6096
|
});
|
|
6079
|
-
var
|
|
6097
|
+
var _a = e.object({
|
|
6080
6098
|
hosts: e.array(e.string()).optional(),
|
|
6081
6099
|
methods: e.array(e.string()).optional(),
|
|
6082
6100
|
path: e.string().default("/*"),
|
|
6083
6101
|
headers: e.record(e.string(), e.string()).optional(),
|
|
6084
6102
|
query: e.record(e.string(), e.string()).optional()
|
|
6085
|
-
}),
|
|
6103
|
+
}), va = e.object({
|
|
6086
6104
|
type: e.string(),
|
|
6087
6105
|
options: e.record(e.string(), e.unknown()).default({})
|
|
6088
|
-
}),
|
|
6106
|
+
}), ya = e.object({
|
|
6089
6107
|
id: e.string().optional(),
|
|
6090
6108
|
custom_domain_id: e.string(),
|
|
6091
6109
|
priority: e.number().int().default(100),
|
|
6092
|
-
match:
|
|
6093
|
-
handlers: e.array(
|
|
6110
|
+
match: _a,
|
|
6111
|
+
handlers: e.array(va).min(1)
|
|
6094
6112
|
});
|
|
6095
|
-
|
|
6113
|
+
ya.extend({
|
|
6096
6114
|
id: e.string(),
|
|
6097
6115
|
tenant_id: e.string(),
|
|
6098
6116
|
created_at: e.string(),
|
|
6099
6117
|
updated_at: e.string()
|
|
6100
|
-
}),
|
|
6118
|
+
}), ya.partial().omit({
|
|
6101
6119
|
id: !0,
|
|
6102
6120
|
custom_domain_id: !0
|
|
6103
6121
|
});
|
|
6104
|
-
var
|
|
6122
|
+
var ba = e.object({
|
|
6105
6123
|
scim: e.string(),
|
|
6106
6124
|
auth0: e.string()
|
|
6107
|
-
}),
|
|
6125
|
+
}), xa = e.object({
|
|
6108
6126
|
connection_id: e.string(),
|
|
6109
6127
|
user_id_attribute: e.string().default("externalId"),
|
|
6110
|
-
mapping: e.array(
|
|
6128
|
+
mapping: e.array(ba).default([])
|
|
6111
6129
|
});
|
|
6112
6130
|
e.object({
|
|
6113
6131
|
created_at: e.string(),
|
|
6114
6132
|
updated_at: e.string()
|
|
6115
|
-
}).extend(
|
|
6116
|
-
var
|
|
6133
|
+
}).extend(xa.shape);
|
|
6134
|
+
var Sa = e.object({
|
|
6117
6135
|
token_id: e.string(),
|
|
6118
6136
|
connection_id: e.string(),
|
|
6119
6137
|
token_hash: e.string(),
|
|
@@ -6123,20 +6141,20 @@ var va = e.object({
|
|
|
6123
6141
|
e.object({
|
|
6124
6142
|
created_at: e.string(),
|
|
6125
6143
|
last_used_at: e.string().optional()
|
|
6126
|
-
}).extend(
|
|
6127
|
-
var
|
|
6144
|
+
}).extend(Sa.shape);
|
|
6145
|
+
var Ca = e.object({
|
|
6128
6146
|
connection_id: e.string(),
|
|
6129
6147
|
external_id: e.string(),
|
|
6130
6148
|
user_id: e.string()
|
|
6131
6149
|
});
|
|
6132
|
-
e.object({ created_at: e.string() }).extend(
|
|
6150
|
+
e.object({ created_at: e.string() }).extend(Ca.shape), e.object({
|
|
6133
6151
|
name: e.string(),
|
|
6134
6152
|
enabled: e.boolean().optional().default(!0),
|
|
6135
6153
|
default_from_address: e.string().optional(),
|
|
6136
6154
|
credentials: e.record(e.string(), e.unknown()),
|
|
6137
6155
|
settings: e.object({}).optional()
|
|
6138
6156
|
});
|
|
6139
|
-
var
|
|
6157
|
+
var wa = e.enum([
|
|
6140
6158
|
"verify_email",
|
|
6141
6159
|
"verify_email_by_code",
|
|
6142
6160
|
"reset_email",
|
|
@@ -6151,7 +6169,7 @@ var ba = e.enum([
|
|
|
6151
6169
|
"user_invitation"
|
|
6152
6170
|
]);
|
|
6153
6171
|
e.object({
|
|
6154
|
-
template:
|
|
6172
|
+
template: wa,
|
|
6155
6173
|
body: e.string(),
|
|
6156
6174
|
from: e.string(),
|
|
6157
6175
|
subject: e.string(),
|
|
@@ -6168,7 +6186,7 @@ e.object({
|
|
|
6168
6186
|
expires_at: e.string().optional(),
|
|
6169
6187
|
idle_expires_at: e.string().optional(),
|
|
6170
6188
|
last_exchanged_at: e.string().optional(),
|
|
6171
|
-
device:
|
|
6189
|
+
device: ra,
|
|
6172
6190
|
resource_servers: e.array(e.object({
|
|
6173
6191
|
audience: e.string(),
|
|
6174
6192
|
scopes: e.string()
|
|
@@ -6189,10 +6207,10 @@ e.object({
|
|
|
6189
6207
|
name: e.string(),
|
|
6190
6208
|
options: e.object({})
|
|
6191
6209
|
});
|
|
6192
|
-
var
|
|
6210
|
+
var Ta = e.object({
|
|
6193
6211
|
value: e.string(),
|
|
6194
6212
|
description: e.string().optional()
|
|
6195
|
-
}),
|
|
6213
|
+
}), Ea = e.object({
|
|
6196
6214
|
token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
|
|
6197
6215
|
enforce_policies: e.boolean().optional(),
|
|
6198
6216
|
allow_skipping_userinfo: e.boolean().optional(),
|
|
@@ -6200,11 +6218,11 @@ var xa = e.object({
|
|
|
6200
6218
|
persist_client_authorization: e.boolean().optional(),
|
|
6201
6219
|
enable_introspection_endpoint: e.boolean().optional(),
|
|
6202
6220
|
mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
|
|
6203
|
-
}),
|
|
6221
|
+
}), Da = e.object({
|
|
6204
6222
|
id: e.string().optional(),
|
|
6205
6223
|
name: e.string(),
|
|
6206
6224
|
identifier: e.string(),
|
|
6207
|
-
scopes: e.array(
|
|
6225
|
+
scopes: e.array(Ta).optional(),
|
|
6208
6226
|
signing_alg: e.string().optional(),
|
|
6209
6227
|
signing_secret: e.string().optional(),
|
|
6210
6228
|
token_lifetime: e.number().default(86400),
|
|
@@ -6212,20 +6230,20 @@ var xa = e.object({
|
|
|
6212
6230
|
skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
|
|
6213
6231
|
allow_offline_access: e.boolean().optional(),
|
|
6214
6232
|
verificationKey: e.string().optional(),
|
|
6215
|
-
options:
|
|
6233
|
+
options: Ea.optional(),
|
|
6216
6234
|
is_system: e.boolean().optional(),
|
|
6217
6235
|
metadata: e.record(e.string(), e.any()).optional()
|
|
6218
6236
|
}).extend({
|
|
6219
6237
|
created_at: e.string().optional(),
|
|
6220
6238
|
updated_at: e.string().optional()
|
|
6221
6239
|
});
|
|
6222
|
-
e.array(
|
|
6223
|
-
var
|
|
6240
|
+
e.array(Da);
|
|
6241
|
+
var Oa = e.object({
|
|
6224
6242
|
role_id: e.string(),
|
|
6225
6243
|
resource_server_identifier: e.string(),
|
|
6226
6244
|
permission_name: e.string()
|
|
6227
6245
|
}).extend({ created_at: e.string() });
|
|
6228
|
-
e.array(
|
|
6246
|
+
e.array(Oa), e.object({
|
|
6229
6247
|
user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
|
|
6230
6248
|
clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
|
|
6231
6249
|
audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
|
|
@@ -6238,7 +6256,7 @@ e.array(wa), e.object({
|
|
|
6238
6256
|
failed_logins: e.array(e.string()).optional(),
|
|
6239
6257
|
last_password_reset: e.string().optional()
|
|
6240
6258
|
});
|
|
6241
|
-
var
|
|
6259
|
+
var ka = e.object({
|
|
6242
6260
|
user_id: e.string(),
|
|
6243
6261
|
resource_server_identifier: e.string(),
|
|
6244
6262
|
permission_name: e.string(),
|
|
@@ -6247,8 +6265,8 @@ var Ta = e.object({
|
|
|
6247
6265
|
tenant_id: e.string(),
|
|
6248
6266
|
created_at: e.string().optional()
|
|
6249
6267
|
});
|
|
6250
|
-
e.array(
|
|
6251
|
-
var
|
|
6268
|
+
e.array(ka);
|
|
6269
|
+
var Aa = e.object({
|
|
6252
6270
|
user_id: e.string(),
|
|
6253
6271
|
resource_server_identifier: e.string(),
|
|
6254
6272
|
resource_server_name: e.string(),
|
|
@@ -6257,8 +6275,8 @@ var Ea = e.object({
|
|
|
6257
6275
|
created_at: e.string().optional(),
|
|
6258
6276
|
organization_id: e.string().optional()
|
|
6259
6277
|
});
|
|
6260
|
-
e.array(
|
|
6261
|
-
var
|
|
6278
|
+
e.array(Aa);
|
|
6279
|
+
var ja = e.object({
|
|
6262
6280
|
user_id: e.string(),
|
|
6263
6281
|
role_id: e.string(),
|
|
6264
6282
|
organization_id: e.string().optional()
|
|
@@ -6266,8 +6284,8 @@ var Da = e.object({
|
|
|
6266
6284
|
tenant_id: e.string(),
|
|
6267
6285
|
created_at: e.string().optional()
|
|
6268
6286
|
});
|
|
6269
|
-
e.array(
|
|
6270
|
-
var
|
|
6287
|
+
e.array(ja);
|
|
6288
|
+
var Ma = e.object({
|
|
6271
6289
|
id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
|
|
6272
6290
|
name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
|
|
6273
6291
|
description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
|
|
@@ -6278,19 +6296,19 @@ var Oa = e.object({
|
|
|
6278
6296
|
created_at: e.string().optional(),
|
|
6279
6297
|
updated_at: e.string().optional()
|
|
6280
6298
|
});
|
|
6281
|
-
e.array(
|
|
6282
|
-
var
|
|
6299
|
+
e.array(Ma);
|
|
6300
|
+
var Na = e.object({
|
|
6283
6301
|
logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
|
|
6284
6302
|
colors: e.object({
|
|
6285
6303
|
primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
|
|
6286
6304
|
page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
|
|
6287
6305
|
}).optional()
|
|
6288
|
-
}).optional(),
|
|
6306
|
+
}).optional(), Pa = e.object({
|
|
6289
6307
|
connection_id: e.string().openapi({ description: "ID of the connection" }),
|
|
6290
6308
|
assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
|
|
6291
6309
|
show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
|
|
6292
6310
|
is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
|
|
6293
|
-
}),
|
|
6311
|
+
}), Fa = e.object({ client_credentials: e.object({
|
|
6294
6312
|
enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
|
|
6295
6313
|
per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
|
|
6296
6314
|
per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
|
|
@@ -6299,15 +6317,15 @@ e.object({
|
|
|
6299
6317
|
id: e.string().optional(),
|
|
6300
6318
|
name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
|
|
6301
6319
|
display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
|
|
6302
|
-
branding:
|
|
6320
|
+
branding: Na,
|
|
6303
6321
|
metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
|
|
6304
|
-
enabled_connections: e.array(
|
|
6305
|
-
token_quota:
|
|
6322
|
+
enabled_connections: e.array(Pa).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
|
|
6323
|
+
token_quota: Fa
|
|
6306
6324
|
}).extend(G.shape).extend({
|
|
6307
6325
|
id: e.string(),
|
|
6308
6326
|
name: e.string().min(1).openapi({ description: "The name of the organization" })
|
|
6309
6327
|
});
|
|
6310
|
-
var
|
|
6328
|
+
var Ia = e.object({
|
|
6311
6329
|
connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
|
|
6312
6330
|
assign_membership_on_login: e.boolean().optional().default(!1),
|
|
6313
6331
|
show_as_button: e.boolean().optional().default(!0),
|
|
@@ -6320,7 +6338,7 @@ var Ma = e.object({
|
|
|
6320
6338
|
created_at: e.string().optional(),
|
|
6321
6339
|
updated_at: e.string().optional()
|
|
6322
6340
|
});
|
|
6323
|
-
e.array(
|
|
6341
|
+
e.array(Ia), e.object({
|
|
6324
6342
|
user_id: e.string().openapi({ description: "ID of the user" }),
|
|
6325
6343
|
organization_id: e.string().openapi({ description: "ID of the organization" })
|
|
6326
6344
|
}).extend(G.shape).extend({ id: e.string() }), e.object({
|
|
@@ -6459,22 +6477,33 @@ e.array(Ma), e.object({
|
|
|
6459
6477
|
"passwordless",
|
|
6460
6478
|
"enterprise"
|
|
6461
6479
|
]);
|
|
6462
|
-
var
|
|
6480
|
+
var La = e.object({
|
|
6481
|
+
cohort: e.string(),
|
|
6482
|
+
sessions: e.number(),
|
|
6483
|
+
active: e.array(e.number())
|
|
6484
|
+
});
|
|
6485
|
+
e.object({
|
|
6486
|
+
interval: e.literal("week"),
|
|
6487
|
+
from: e.string(),
|
|
6488
|
+
to: e.string(),
|
|
6489
|
+
cohorts: e.array(La)
|
|
6490
|
+
});
|
|
6491
|
+
var Ra = e.object({
|
|
6463
6492
|
name: e.string(),
|
|
6464
6493
|
type: e.string()
|
|
6465
|
-
}),
|
|
6494
|
+
}), za = e.object({
|
|
6466
6495
|
elapsed: e.number(),
|
|
6467
6496
|
rows_read: e.number().optional(),
|
|
6468
6497
|
bytes_read: e.number().optional()
|
|
6469
6498
|
});
|
|
6470
6499
|
e.object({
|
|
6471
|
-
meta: e.array(
|
|
6500
|
+
meta: e.array(Ra),
|
|
6472
6501
|
data: e.array(e.record(e.string(), e.any())),
|
|
6473
6502
|
rows: e.number(),
|
|
6474
6503
|
rows_before_limit_at_least: e.number().optional(),
|
|
6475
|
-
statistics:
|
|
6504
|
+
statistics: za.optional()
|
|
6476
6505
|
});
|
|
6477
|
-
var
|
|
6506
|
+
var Ba = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Va = e.record(e.string(), e.record(e.string(), e.string())).openapi({
|
|
6478
6507
|
type: "object",
|
|
6479
6508
|
additionalProperties: {
|
|
6480
6509
|
type: "object",
|
|
@@ -6482,11 +6511,11 @@ var Fa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
|
|
|
6482
6511
|
}
|
|
6483
6512
|
});
|
|
6484
6513
|
e.object({
|
|
6485
|
-
prompt:
|
|
6514
|
+
prompt: Ba,
|
|
6486
6515
|
language: e.string(),
|
|
6487
|
-
custom_text:
|
|
6516
|
+
custom_text: Va
|
|
6488
6517
|
});
|
|
6489
|
-
var
|
|
6518
|
+
var Ha = e.enum([
|
|
6490
6519
|
"phone",
|
|
6491
6520
|
"totp",
|
|
6492
6521
|
"email",
|
|
@@ -6494,9 +6523,9 @@ var La = e.enum([
|
|
|
6494
6523
|
"webauthn-roaming",
|
|
6495
6524
|
"webauthn-platform",
|
|
6496
6525
|
"passkey"
|
|
6497
|
-
]),
|
|
6526
|
+
]), Ua = e.object({
|
|
6498
6527
|
user_id: e.string(),
|
|
6499
|
-
type:
|
|
6528
|
+
type: Ha,
|
|
6500
6529
|
phone_number: e.string().optional(),
|
|
6501
6530
|
totp_secret: e.string().optional(),
|
|
6502
6531
|
credential_id: e.string().optional(),
|
|
@@ -6507,7 +6536,7 @@ var La = e.enum([
|
|
|
6507
6536
|
friendly_name: e.string().optional(),
|
|
6508
6537
|
confirmed: e.boolean().default(!1)
|
|
6509
6538
|
});
|
|
6510
|
-
function
|
|
6539
|
+
function Wa(t, n) {
|
|
6511
6540
|
t.type === "phone" && !t.phone_number && n.addIssue({
|
|
6512
6541
|
code: e.ZodIssueCode.custom,
|
|
6513
6542
|
message: "phone_number is required when type is 'phone'",
|
|
@@ -6530,51 +6559,51 @@ function za(t, n) {
|
|
|
6530
6559
|
path: ["public_key"]
|
|
6531
6560
|
}));
|
|
6532
6561
|
}
|
|
6533
|
-
|
|
6562
|
+
Ua.superRefine(Wa), Ua.extend({
|
|
6534
6563
|
id: e.string(),
|
|
6535
6564
|
created_at: e.string(),
|
|
6536
6565
|
updated_at: e.string()
|
|
6537
|
-
}).superRefine(
|
|
6566
|
+
}).superRefine(Wa), e.object({
|
|
6538
6567
|
id: e.string().optional(),
|
|
6539
6568
|
created_at: e.string().datetime({ offset: !0 }).optional(),
|
|
6540
6569
|
updated_at: e.string().datetime({ offset: !0 }).optional()
|
|
6541
6570
|
});
|
|
6542
|
-
function
|
|
6571
|
+
function Ga(e) {
|
|
6543
6572
|
let t = atob(e), n = new Uint8Array(t.length);
|
|
6544
6573
|
for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
|
|
6545
6574
|
return n;
|
|
6546
6575
|
}
|
|
6547
6576
|
//#endregion
|
|
6548
6577
|
//#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
|
|
6549
|
-
var
|
|
6578
|
+
var Ka = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", qa = (e = 21) => {
|
|
6550
6579
|
let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
|
|
6551
|
-
for (; e--;) t +=
|
|
6580
|
+
for (; e--;) t += Ka[n[e] & 63];
|
|
6552
6581
|
return t;
|
|
6553
6582
|
};
|
|
6554
6583
|
//#endregion
|
|
6555
6584
|
//#region src/helpers.ts
|
|
6556
|
-
async function
|
|
6585
|
+
async function Ja(e) {
|
|
6557
6586
|
let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
|
|
6558
6587
|
return new Uint8Array(await new Response(r).arrayBuffer());
|
|
6559
6588
|
}
|
|
6560
|
-
async function
|
|
6561
|
-
let t =
|
|
6589
|
+
async function Ya(e) {
|
|
6590
|
+
let t = Ga(e.replace(/ /g, "+"));
|
|
6562
6591
|
try {
|
|
6563
|
-
let e = await
|
|
6592
|
+
let e = await Ja(t);
|
|
6564
6593
|
return new TextDecoder().decode(e);
|
|
6565
6594
|
} catch (e) {
|
|
6566
6595
|
return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
|
|
6567
6596
|
}
|
|
6568
6597
|
}
|
|
6569
|
-
async function
|
|
6570
|
-
let t = await
|
|
6598
|
+
async function Xa(e) {
|
|
6599
|
+
let t = await Ya(e), n = new en({
|
|
6571
6600
|
attributeNamePrefix: "@_",
|
|
6572
6601
|
alwaysCreateTextNode: !0,
|
|
6573
6602
|
ignoreAttributes: !1
|
|
6574
6603
|
}).parse(t);
|
|
6575
6604
|
return r.parse(n);
|
|
6576
6605
|
}
|
|
6577
|
-
function
|
|
6606
|
+
function Za(e) {
|
|
6578
6607
|
let t = e.certificates.map((e) => ({
|
|
6579
6608
|
"@_use": "signing",
|
|
6580
6609
|
KeyInfo: {
|
|
@@ -6648,8 +6677,8 @@ function Ka(e) {
|
|
|
6648
6677
|
attributeNamePrefix: "@_"
|
|
6649
6678
|
}).build(n);
|
|
6650
6679
|
}
|
|
6651
|
-
async function
|
|
6652
|
-
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${
|
|
6680
|
+
async function Qa(e, t) {
|
|
6681
|
+
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${qa()}`, s = e.assertionId || `_${qa()}`, c = [{
|
|
6653
6682
|
"samlp:Response": [
|
|
6654
6683
|
{ "saml:Issuer": [{ "#text": e.issuer }] },
|
|
6655
6684
|
{ "samlp:Status": [{
|
|
@@ -6830,7 +6859,7 @@ async function qa(e, t) {
|
|
|
6830
6859
|
}
|
|
6831
6860
|
//#endregion
|
|
6832
6861
|
//#region src/signers/local.ts
|
|
6833
|
-
var
|
|
6862
|
+
var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w3.org/2001/04/xmlenc#sha256", to = "http://www.w3.org/2001/10/xml-exc-c14n#", no = class {
|
|
6834
6863
|
async signSAML(e, t, n) {
|
|
6835
6864
|
try {
|
|
6836
6865
|
let r = await import("xml-crypto"), i = r.SignedXml || r.default?.SignedXml;
|
|
@@ -6839,11 +6868,11 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6839
6868
|
privateKey: t,
|
|
6840
6869
|
publicCert: n
|
|
6841
6870
|
});
|
|
6842
|
-
a.canonicalizationAlgorithm =
|
|
6871
|
+
a.canonicalizationAlgorithm = to, a.addReference({
|
|
6843
6872
|
xpath: "(/*[local-name()='Response']/*[local-name()='Assertion'])[1]",
|
|
6844
|
-
digestAlgorithm:
|
|
6845
|
-
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature",
|
|
6846
|
-
}), a.signatureAlgorithm =
|
|
6873
|
+
digestAlgorithm: eo,
|
|
6874
|
+
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", to]
|
|
6875
|
+
}), a.signatureAlgorithm = $a;
|
|
6847
6876
|
let o = n.replace(/-----BEGIN CERTIFICATE-----|-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
|
|
6848
6877
|
return a.keyInfoProvider = { getKeyInfo: () => `<X509Data><X509Certificate>${o}</X509Certificate></X509Data>` }, a.computeSignature(e, { location: {
|
|
6849
6878
|
reference: "/*[local-name()='Response']/*[local-name()='Assertion']/*[local-name()='Issuer']",
|
|
@@ -6853,7 +6882,7 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6853
6882
|
throw Error(`Failed to sign SAML locally. Make sure xml-crypto is installed. Error: ${e}`);
|
|
6854
6883
|
}
|
|
6855
6884
|
}
|
|
6856
|
-
},
|
|
6885
|
+
}, ro = class {
|
|
6857
6886
|
signUrl;
|
|
6858
6887
|
constructor(e) {
|
|
6859
6888
|
this.signUrl = e;
|
|
@@ -6873,4 +6902,4 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6873
6902
|
}
|
|
6874
6903
|
};
|
|
6875
6904
|
//#endregion
|
|
6876
|
-
export {
|
|
6905
|
+
export { ro as HttpSamlSigner, no as LocalSamlSigner, Za as createSamlMetadata, Qa as createSamlResponse, s as dsSignatureSchema, Ya as inflateDecompress, Ja as inflateRaw, Xa as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
|