@authhero/saml 0.5.2 → 0.5.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core.cjs +1 -1
- package/dist/core.mjs +177 -152
- package/dist/saml.cjs +4 -4
- package/dist/saml.mjs +377 -352
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/package.json +2 -2
package/dist/saml.mjs
CHANGED
|
@@ -1459,37 +1459,37 @@ function S(...e) {
|
|
|
1459
1459
|
}
|
|
1460
1460
|
return t;
|
|
1461
1461
|
}
|
|
1462
|
-
var C = "external", w = "base",
|
|
1463
|
-
function
|
|
1464
|
-
return !e || e === C ? new Set([C]) : e ===
|
|
1462
|
+
var C = "external", w = "base", Oe = "all";
|
|
1463
|
+
function ke(e) {
|
|
1464
|
+
return !e || e === C ? new Set([C]) : e === Oe ? new Set([Oe]) : e === w ? new Set([w]) : Array.isArray(e) ? new Set(e) : new Set([C]);
|
|
1465
1465
|
}
|
|
1466
|
-
var
|
|
1466
|
+
var T = Object.freeze({
|
|
1467
1467
|
allow: 0,
|
|
1468
1468
|
leave: 1,
|
|
1469
1469
|
remove: 2,
|
|
1470
1470
|
throw: 3
|
|
1471
|
-
}),
|
|
1471
|
+
}), Ae = new Set([
|
|
1472
1472
|
9,
|
|
1473
1473
|
10,
|
|
1474
1474
|
13
|
|
1475
1475
|
]);
|
|
1476
|
-
function
|
|
1476
|
+
function je(e) {
|
|
1477
1477
|
if (!e) return {
|
|
1478
1478
|
xmlVersion: 1,
|
|
1479
|
-
onLevel:
|
|
1480
|
-
nullLevel:
|
|
1479
|
+
onLevel: T.allow,
|
|
1480
|
+
nullLevel: T.remove
|
|
1481
1481
|
};
|
|
1482
|
-
let t = e.xmlVersion === 1.1 ? 1.1 : 1, n =
|
|
1482
|
+
let t = e.xmlVersion === 1.1 ? 1.1 : 1, n = T[e.onNCR] ?? T.allow, r = T[e.nullNCR] ?? T.remove;
|
|
1483
1483
|
return {
|
|
1484
1484
|
xmlVersion: t,
|
|
1485
1485
|
onLevel: n,
|
|
1486
|
-
nullLevel: Math.max(r,
|
|
1486
|
+
nullLevel: Math.max(r, T.remove)
|
|
1487
1487
|
};
|
|
1488
1488
|
}
|
|
1489
|
-
var
|
|
1489
|
+
var Me = class {
|
|
1490
1490
|
constructor(e = {}) {
|
|
1491
|
-
this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers =
|
|
1492
|
-
let t =
|
|
1491
|
+
this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = ke(this._limit.applyLimitsTo ?? C), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = S(we, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
|
|
1492
|
+
let t = je(e.ncr);
|
|
1493
1493
|
this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel, this._onExternalEntity = typeof e.onExternalEntity == "function" ? e.onExternalEntity : null, this._onInputEntity = typeof e.onInputEntity == "function" ? e.onInputEntity : null;
|
|
1494
1494
|
}
|
|
1495
1495
|
_applyRegistrationHook(e, t, n, r) {
|
|
@@ -1579,7 +1579,7 @@ var je = class {
|
|
|
1579
1579
|
return this._postCheck(l, t);
|
|
1580
1580
|
}
|
|
1581
1581
|
_tierCounts(e) {
|
|
1582
|
-
return this._limitTiers.has(
|
|
1582
|
+
return this._limitTiers.has(Oe) ? !0 : this._limitTiers.has(e);
|
|
1583
1583
|
}
|
|
1584
1584
|
_resolveName(e) {
|
|
1585
1585
|
if (e in this._inputMap) return {
|
|
@@ -1596,14 +1596,14 @@ var je = class {
|
|
|
1596
1596
|
};
|
|
1597
1597
|
}
|
|
1598
1598
|
_classifyNCR(e) {
|
|
1599
|
-
return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !
|
|
1599
|
+
return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !Ae.has(e) ? T.remove : -1;
|
|
1600
1600
|
}
|
|
1601
1601
|
_applyNCRAction(e, t, n) {
|
|
1602
1602
|
switch (e) {
|
|
1603
|
-
case
|
|
1604
|
-
case
|
|
1605
|
-
case
|
|
1606
|
-
case
|
|
1603
|
+
case T.allow: return String.fromCodePoint(n);
|
|
1604
|
+
case T.remove: return "";
|
|
1605
|
+
case T.leave: return;
|
|
1606
|
+
case T.throw: throw Error(`[EntityDecoder] Prohibited numeric character reference &${t}; (U+${n.toString(16).toUpperCase().padStart(4, "0")})`);
|
|
1607
1607
|
default: return String.fromCodePoint(n);
|
|
1608
1608
|
}
|
|
1609
1609
|
}
|
|
@@ -1611,11 +1611,11 @@ var je = class {
|
|
|
1611
1611
|
let t = e.charCodeAt(1), n;
|
|
1612
1612
|
if (n = t === 120 || t === 88 ? parseInt(e.slice(2), 16) : parseInt(e.slice(1), 10), Number.isNaN(n) || n < 0 || n > 1114111) return;
|
|
1613
1613
|
let r = this._classifyNCR(n);
|
|
1614
|
-
if (!this._numericAllowed && r <
|
|
1614
|
+
if (!this._numericAllowed && r < T.remove) return;
|
|
1615
1615
|
let i = r === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, r);
|
|
1616
1616
|
return this._applyNCRAction(i, e, n);
|
|
1617
1617
|
}
|
|
1618
|
-
},
|
|
1618
|
+
}, Ne = (e) => p.includes(e) ? "__" + e : e, Pe = {
|
|
1619
1619
|
preserveOrder: !1,
|
|
1620
1620
|
attributeNamePrefix: "@_",
|
|
1621
1621
|
attributesGroupName: !1,
|
|
@@ -1658,14 +1658,14 @@ var je = class {
|
|
|
1658
1658
|
maxNestedTags: 100,
|
|
1659
1659
|
strictReservedNames: !0,
|
|
1660
1660
|
jPath: !0,
|
|
1661
|
-
onDangerousProperty:
|
|
1661
|
+
onDangerousProperty: Ne
|
|
1662
1662
|
};
|
|
1663
|
-
function
|
|
1663
|
+
function Fe(e, t) {
|
|
1664
1664
|
if (typeof e != "string") return;
|
|
1665
1665
|
let n = e.toLowerCase();
|
|
1666
1666
|
if (p.some((e) => n === e.toLowerCase()) || m.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
|
|
1667
1667
|
}
|
|
1668
|
-
function
|
|
1668
|
+
function Ie(e, t) {
|
|
1669
1669
|
return typeof e == "boolean" ? {
|
|
1670
1670
|
enabled: e,
|
|
1671
1671
|
maxEntitySize: 1e4,
|
|
@@ -1686,10 +1686,10 @@ function Fe(e, t) {
|
|
|
1686
1686
|
allowedTags: e.allowedTags ?? null,
|
|
1687
1687
|
tagFilter: e.tagFilter ?? null,
|
|
1688
1688
|
appliesTo: e.appliesTo ?? "all"
|
|
1689
|
-
} :
|
|
1689
|
+
} : Ie(!0);
|
|
1690
1690
|
}
|
|
1691
|
-
var
|
|
1692
|
-
let t = Object.assign({},
|
|
1691
|
+
var Le = function(e) {
|
|
1692
|
+
let t = Object.assign({}, Pe, e), n = [
|
|
1693
1693
|
{
|
|
1694
1694
|
value: t.attributeNamePrefix,
|
|
1695
1695
|
name: "attributeNamePrefix"
|
|
@@ -1711,9 +1711,9 @@ var Ie = function(e) {
|
|
|
1711
1711
|
name: "commentPropName"
|
|
1712
1712
|
}
|
|
1713
1713
|
];
|
|
1714
|
-
for (let { value: e, name: t } of n) e &&
|
|
1715
|
-
return t.onDangerousProperty === null && (t.onDangerousProperty =
|
|
1716
|
-
},
|
|
1714
|
+
for (let { value: e, name: t } of n) e && Fe(e, t);
|
|
1715
|
+
return t.onDangerousProperty === null && (t.onDangerousProperty = Ne), t.processEntities = Ie(t.processEntities, t.htmlEntities), t.unpairedTagsSet = new Set(t.unpairedTags), t.stopNodes && Array.isArray(t.stopNodes) && (t.stopNodes = t.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), t;
|
|
1716
|
+
}, Re = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", E = class {
|
|
1717
1717
|
constructor(e) {
|
|
1718
1718
|
this.tagname = e, this.child = [], this[":@"] = Object.create(null);
|
|
1719
1719
|
}
|
|
@@ -1724,12 +1724,12 @@ var Ie = function(e) {
|
|
|
1724
1724
|
e.tagname === "__proto__" && (e.tagname = "#__proto__"), e[":@"] && Object.keys(e[":@"]).length > 0 ? this.child.push({
|
|
1725
1725
|
[e.tagname]: e.child,
|
|
1726
1726
|
":@": e[":@"]
|
|
1727
|
-
}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][
|
|
1727
|
+
}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][Re] = { startIndex: t });
|
|
1728
1728
|
}
|
|
1729
1729
|
static getMetaDataSymbol() {
|
|
1730
|
-
return
|
|
1730
|
+
return Re;
|
|
1731
1731
|
}
|
|
1732
|
-
},
|
|
1732
|
+
}, ze = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�", Be = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�\\-\\.\\d·̀-ͯ‿-⁀", Ve = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�𐀀-", He = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈--⁰-Ⰰ-、-豈-﷏ﷰ-�𐀀-\\-\\.\\d·̀-ͯ҇‿-⁀", D = (e, t, n = "") => {
|
|
1733
1733
|
let r = `[${e.replace(":", "")}][${t.replace(":", "")}]*`;
|
|
1734
1734
|
return {
|
|
1735
1735
|
name: RegExp(`^[${e}][${t}]*$`, n),
|
|
@@ -1738,15 +1738,15 @@ var Ie = function(e) {
|
|
|
1738
1738
|
nmToken: RegExp(`^[${t}]+$`, n),
|
|
1739
1739
|
nmTokens: RegExp(`^[${t}]+(?:\\s+[${t}]+)*$`, n)
|
|
1740
1740
|
};
|
|
1741
|
-
},
|
|
1741
|
+
}, Ue = D(ze, Be), We = D(Ve, He, "u"), Ge = D(":A-Za-z_", ":A-Za-z_\\-\\.\\d"), Ke = (e = "1.0", t = !1) => t ? Ge : e === "1.1" ? We : Ue, qe = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1 } = {}) => Ke(t, n).qName.test(e), Je = [
|
|
1742
1742
|
"name",
|
|
1743
1743
|
"ncName",
|
|
1744
1744
|
"qName",
|
|
1745
1745
|
"nmToken",
|
|
1746
1746
|
"nmTokens"
|
|
1747
|
-
],
|
|
1748
|
-
if (!
|
|
1749
|
-
let i =
|
|
1747
|
+
], Ye = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1, maxCacheSize: r = 2048 } = {}) => {
|
|
1748
|
+
if (!Je.includes(e)) throw TypeError(`Unknown production "${e}". Must be one of: ${Je.join(", ")}`);
|
|
1749
|
+
let i = Ke(t, n)[e], a = /* @__PURE__ */ new Map(), o = (e) => {
|
|
1750
1750
|
let t = a.get(e);
|
|
1751
1751
|
if (t !== void 0) return t;
|
|
1752
1752
|
let n = i.test(e);
|
|
@@ -1755,7 +1755,7 @@ var Ie = function(e) {
|
|
|
1755
1755
|
return o.reset = () => {
|
|
1756
1756
|
a = /* @__PURE__ */ new Map();
|
|
1757
1757
|
}, o;
|
|
1758
|
-
},
|
|
1758
|
+
}, Xe = class {
|
|
1759
1759
|
constructor(e, t) {
|
|
1760
1760
|
this.suppressValidationErr = !e, this.options = e, this.xmlVersion = t || 1;
|
|
1761
1761
|
}
|
|
@@ -1768,23 +1768,23 @@ var Ie = function(e) {
|
|
|
1768
1768
|
t += 9;
|
|
1769
1769
|
let i = 1, a = !1, o = !1, s = "";
|
|
1770
1770
|
for (; t < e.length; t++) if (e[t] === "<" && !o) {
|
|
1771
|
-
if (a &&
|
|
1771
|
+
if (a && k(e, "!ENTITY", t)) {
|
|
1772
1772
|
t += 7;
|
|
1773
1773
|
let i, a;
|
|
1774
1774
|
if ([i, a, t] = this.readEntityExp(e, t + 1, this.suppressValidationErr), a.indexOf("&") === -1) {
|
|
1775
1775
|
if (this.options.enabled !== !1 && this.options.maxEntityCount != null && r >= this.options.maxEntityCount) throw Error(`Entity count (${r + 1}) exceeds maximum allowed (${this.options.maxEntityCount})`);
|
|
1776
1776
|
n[i] = a, r++;
|
|
1777
1777
|
}
|
|
1778
|
-
} else if (a &&
|
|
1778
|
+
} else if (a && k(e, "!ELEMENT", t)) {
|
|
1779
1779
|
t += 8;
|
|
1780
1780
|
let { index: n } = this.readElementExp(e, t + 1);
|
|
1781
1781
|
t = n;
|
|
1782
|
-
} else if (a &&
|
|
1783
|
-
else if (a &&
|
|
1782
|
+
} else if (a && k(e, "!ATTLIST", t)) t += 8;
|
|
1783
|
+
else if (a && k(e, "!NOTATION", t)) {
|
|
1784
1784
|
t += 9;
|
|
1785
1785
|
let { index: n } = this.readNotationExp(e, t + 1, this.suppressValidationErr);
|
|
1786
1786
|
t = n;
|
|
1787
|
-
} else if (
|
|
1787
|
+
} else if (k(e, "!--", t)) o = !0;
|
|
1788
1788
|
else throw Error("Invalid DOCTYPE");
|
|
1789
1789
|
i++, s = "";
|
|
1790
1790
|
} else if (e[t] === ">") {
|
|
@@ -1798,11 +1798,11 @@ var Ie = function(e) {
|
|
|
1798
1798
|
};
|
|
1799
1799
|
}
|
|
1800
1800
|
readEntityExp(e, t) {
|
|
1801
|
-
t =
|
|
1801
|
+
t = O(e, t);
|
|
1802
1802
|
let n = t;
|
|
1803
1803
|
for (; t < e.length && !/\s/.test(e[t]) && e[t] !== "\"" && e[t] !== "'";) t++;
|
|
1804
1804
|
let r = e.substring(n, t);
|
|
1805
|
-
if (
|
|
1805
|
+
if (A(r, { xmlVersion: this.xmlVersion }), t = O(e, t), !this.suppressValidationErr) {
|
|
1806
1806
|
if (e.substring(t, t + 6).toUpperCase() === "SYSTEM") throw Error("External entities are not supported");
|
|
1807
1807
|
if (e[t] === "%") throw Error("Parameter entities are not supported");
|
|
1808
1808
|
}
|
|
@@ -1815,16 +1815,16 @@ var Ie = function(e) {
|
|
|
1815
1815
|
];
|
|
1816
1816
|
}
|
|
1817
1817
|
readNotationExp(e, t) {
|
|
1818
|
-
t =
|
|
1818
|
+
t = O(e, t);
|
|
1819
1819
|
let n = t;
|
|
1820
1820
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1821
1821
|
let r = e.substring(n, t);
|
|
1822
|
-
!this.suppressValidationErr &&
|
|
1822
|
+
!this.suppressValidationErr && A(r, { xmlVersion: this.xmlVersion }), t = O(e, t);
|
|
1823
1823
|
let i = e.substring(t, t + 6).toUpperCase();
|
|
1824
1824
|
if (!this.suppressValidationErr && i !== "SYSTEM" && i !== "PUBLIC") throw Error(`Expected SYSTEM or PUBLIC, found "${i}"`);
|
|
1825
|
-
t += i.length, t =
|
|
1825
|
+
t += i.length, t = O(e, t);
|
|
1826
1826
|
let a = null, o = null;
|
|
1827
|
-
if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t =
|
|
1827
|
+
if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t = O(e, t), (e[t] === "\"" || e[t] === "'") && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"));
|
|
1828
1828
|
else if (i === "SYSTEM" && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"), !this.suppressValidationErr && !o)) throw Error("Missing mandatory system identifier for SYSTEM notation");
|
|
1829
1829
|
return {
|
|
1830
1830
|
notationName: r,
|
|
@@ -1843,15 +1843,15 @@ var Ie = function(e) {
|
|
|
1843
1843
|
return t++, [t, r];
|
|
1844
1844
|
}
|
|
1845
1845
|
readElementExp(e, t) {
|
|
1846
|
-
t =
|
|
1846
|
+
t = O(e, t);
|
|
1847
1847
|
let n = t;
|
|
1848
1848
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1849
1849
|
let r = e.substring(n, t);
|
|
1850
|
-
if (!this.suppressValidationErr && !
|
|
1851
|
-
t =
|
|
1850
|
+
if (!this.suppressValidationErr && !qe(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
|
|
1851
|
+
t = O(e, t);
|
|
1852
1852
|
let i = "";
|
|
1853
|
-
if (e[t] === "E" &&
|
|
1854
|
-
else if (e[t] === "A" &&
|
|
1853
|
+
if (e[t] === "E" && k(e, "MPTY", t)) t += 4;
|
|
1854
|
+
else if (e[t] === "A" && k(e, "NY", t)) t += 2;
|
|
1855
1855
|
else if (e[t] === "(") {
|
|
1856
1856
|
t++;
|
|
1857
1857
|
let n = t;
|
|
@@ -1865,25 +1865,25 @@ var Ie = function(e) {
|
|
|
1865
1865
|
};
|
|
1866
1866
|
}
|
|
1867
1867
|
readAttlistExp(e, t) {
|
|
1868
|
-
t =
|
|
1868
|
+
t = O(e, t);
|
|
1869
1869
|
let n = t;
|
|
1870
1870
|
for (; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1871
1871
|
let r = e.substring(n, t);
|
|
1872
|
-
for (
|
|
1872
|
+
for (A(r, { xmlVersion: this.xmlVersion }), t = O(e, t), n = t; t < e.length && !/\s/.test(e[t]);) t++;
|
|
1873
1873
|
let i = e.substring(n, t);
|
|
1874
|
-
if (!
|
|
1875
|
-
t =
|
|
1874
|
+
if (!A(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid attribute name: "${i}"`);
|
|
1875
|
+
t = O(e, t);
|
|
1876
1876
|
let a = "";
|
|
1877
1877
|
if (e.substring(t, t + 8).toUpperCase() === "NOTATION") {
|
|
1878
|
-
if (a = "NOTATION", t += 8, t =
|
|
1878
|
+
if (a = "NOTATION", t += 8, t = O(e, t), e[t] !== "(") throw Error(`Expected '(', found "${e[t]}"`);
|
|
1879
1879
|
t++;
|
|
1880
1880
|
let n = [];
|
|
1881
1881
|
for (; t < e.length && e[t] !== ")";) {
|
|
1882
1882
|
let r = t;
|
|
1883
1883
|
for (; t < e.length && e[t] !== "|" && e[t] !== ")";) t++;
|
|
1884
1884
|
let i = e.substring(r, t);
|
|
1885
|
-
if (i = i.trim(), !
|
|
1886
|
-
n.push(i), e[t] === "|" && (t++, t =
|
|
1885
|
+
if (i = i.trim(), !A(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid notation name: "${i}"`);
|
|
1886
|
+
n.push(i), e[t] === "|" && (t++, t = O(e, t));
|
|
1887
1887
|
}
|
|
1888
1888
|
if (e[t] !== ")") throw Error("Unterminated list of notations");
|
|
1889
1889
|
t++, a += " (" + n.join("|") + ")";
|
|
@@ -1901,7 +1901,7 @@ var Ie = function(e) {
|
|
|
1901
1901
|
"NMTOKENS"
|
|
1902
1902
|
].includes(a.toUpperCase())) throw Error(`Invalid attribute type: "${a}"`);
|
|
1903
1903
|
}
|
|
1904
|
-
t =
|
|
1904
|
+
t = O(e, t);
|
|
1905
1905
|
let o = "";
|
|
1906
1906
|
return e.substring(t, t + 8).toUpperCase() === "#REQUIRED" ? (o = "#REQUIRED", t += 8) : e.substring(t, t + 7).toUpperCase() === "#IMPLIED" ? (o = "#IMPLIED", t += 7) : [t, o] = this.readIdentifierVal(e, t, "ATTLIST"), {
|
|
1907
1907
|
elementName: r,
|
|
@@ -1911,21 +1911,21 @@ var Ie = function(e) {
|
|
|
1911
1911
|
index: t
|
|
1912
1912
|
};
|
|
1913
1913
|
}
|
|
1914
|
-
},
|
|
1914
|
+
}, O = (e, t) => {
|
|
1915
1915
|
for (; t < e.length && /\s/.test(e[t]);) t++;
|
|
1916
1916
|
return t;
|
|
1917
1917
|
};
|
|
1918
|
-
function
|
|
1918
|
+
function k(e, t, n) {
|
|
1919
1919
|
for (let r = 0; r < t.length; r++) if (t[r] !== e[n + r + 1]) return !1;
|
|
1920
1920
|
return !0;
|
|
1921
1921
|
}
|
|
1922
|
-
function
|
|
1923
|
-
if (
|
|
1922
|
+
function A(e, t) {
|
|
1923
|
+
if (qe(e, { xmlVersion: t })) return e;
|
|
1924
1924
|
throw Error(`Invalid entity name ${e}`);
|
|
1925
1925
|
}
|
|
1926
1926
|
//#endregion
|
|
1927
1927
|
//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/digitTable.js
|
|
1928
|
-
var
|
|
1928
|
+
var Ze = [
|
|
1929
1929
|
48,
|
|
1930
1930
|
1632,
|
|
1931
1931
|
1776,
|
|
@@ -1987,28 +1987,28 @@ var Xe = [
|
|
|
1987
1987
|
124144,
|
|
1988
1988
|
125264,
|
|
1989
1989
|
130032
|
|
1990
|
-
],
|
|
1991
|
-
for (let e of
|
|
1990
|
+
], j = /* @__PURE__ */ new Map(), Qe = 65535, $e = 1632, M = new Uint8Array(63904).fill(255);
|
|
1991
|
+
for (let e of Ze) for (let t = 0; t < 10; t++) {
|
|
1992
1992
|
let n = e + t;
|
|
1993
|
-
n <=
|
|
1993
|
+
n <= Qe ? M[n - $e] = t : j.set(n, t);
|
|
1994
1994
|
}
|
|
1995
1995
|
//#endregion
|
|
1996
1996
|
//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/anynum.js
|
|
1997
|
-
var
|
|
1997
|
+
var et = 48, tt = 57, nt = 45, N = new Set([
|
|
1998
1998
|
8722,
|
|
1999
1999
|
65293,
|
|
2000
2000
|
65123
|
|
2001
2001
|
]);
|
|
2002
|
-
function
|
|
2002
|
+
function rt(e) {
|
|
2003
2003
|
if (typeof e != "string") return e;
|
|
2004
2004
|
let t = e.length;
|
|
2005
2005
|
if (t === 0) return e;
|
|
2006
2006
|
let n = -1;
|
|
2007
2007
|
for (let r = 0; r < t; r++) {
|
|
2008
2008
|
let i = e.charCodeAt(r);
|
|
2009
|
-
if (!(i >=
|
|
2009
|
+
if (!(i >= et && i <= tt || i === nt)) {
|
|
2010
2010
|
if (i < 1632) {
|
|
2011
|
-
if (
|
|
2011
|
+
if (N.has(i)) {
|
|
2012
2012
|
n = r;
|
|
2013
2013
|
break;
|
|
2014
2014
|
}
|
|
@@ -2019,7 +2019,7 @@ function nt(e) {
|
|
|
2019
2019
|
let t = e.charCodeAt(r + 1);
|
|
2020
2020
|
if (t >= 56320 && t <= 57343) {
|
|
2021
2021
|
let e = 65536 + (i - 55296 << 10) + (t - 56320);
|
|
2022
|
-
if (
|
|
2022
|
+
if (j.has(e)) {
|
|
2023
2023
|
n = r;
|
|
2024
2024
|
break;
|
|
2025
2025
|
}
|
|
@@ -2027,7 +2027,7 @@ function nt(e) {
|
|
|
2027
2027
|
}
|
|
2028
2028
|
continue;
|
|
2029
2029
|
}
|
|
2030
|
-
if (
|
|
2030
|
+
if (M[i - 1632] !== 255 || N.has(i)) {
|
|
2031
2031
|
n = r;
|
|
2032
2032
|
break;
|
|
2033
2033
|
}
|
|
@@ -2038,19 +2038,19 @@ function nt(e) {
|
|
|
2038
2038
|
n > 0 && r.push(e.slice(0, n));
|
|
2039
2039
|
for (let i = n; i < t; i++) {
|
|
2040
2040
|
let n = e.charCodeAt(i);
|
|
2041
|
-
if (n >=
|
|
2041
|
+
if (n >= et && n <= tt || n === nt) {
|
|
2042
2042
|
r.push(e[i]);
|
|
2043
2043
|
continue;
|
|
2044
2044
|
}
|
|
2045
2045
|
if (n < 1632) {
|
|
2046
|
-
r.push(
|
|
2046
|
+
r.push(N.has(n) ? "-" : e[i]);
|
|
2047
2047
|
continue;
|
|
2048
2048
|
}
|
|
2049
2049
|
if (n >= 55296 && n <= 56319) {
|
|
2050
2050
|
if (i + 1 < t) {
|
|
2051
2051
|
let t = e.charCodeAt(i + 1);
|
|
2052
2052
|
if (t >= 56320 && t <= 57343) {
|
|
2053
|
-
let e = 65536 + (n - 55296 << 10) + (t - 56320), a =
|
|
2053
|
+
let e = 65536 + (n - 55296 << 10) + (t - 56320), a = j.get(e);
|
|
2054
2054
|
if (a !== void 0) {
|
|
2055
2055
|
r.push(String.fromCharCode(a + 48)), i++;
|
|
2056
2056
|
continue;
|
|
@@ -2060,18 +2060,18 @@ function nt(e) {
|
|
|
2060
2060
|
r.push(e[i]);
|
|
2061
2061
|
continue;
|
|
2062
2062
|
}
|
|
2063
|
-
if (
|
|
2063
|
+
if (N.has(n)) {
|
|
2064
2064
|
r.push("-");
|
|
2065
2065
|
continue;
|
|
2066
2066
|
}
|
|
2067
|
-
let a =
|
|
2067
|
+
let a = M[n - $e];
|
|
2068
2068
|
r.push(a === 255 ? e[i] : String.fromCharCode(a + 48));
|
|
2069
2069
|
}
|
|
2070
2070
|
return r.join("");
|
|
2071
2071
|
}
|
|
2072
2072
|
//#endregion
|
|
2073
2073
|
//#region ../../node_modules/.pnpm/strnum@2.4.1/node_modules/strnum/strnum.js
|
|
2074
|
-
var
|
|
2074
|
+
var it = /^[-+]?0x[a-fA-F0-9]+$/, at = /^0b[01]+$/, ot = /^0o[0-7]+$/, st = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, ct = {
|
|
2075
2075
|
hex: !0,
|
|
2076
2076
|
binary: !1,
|
|
2077
2077
|
octal: !1,
|
|
@@ -2081,20 +2081,20 @@ var rt = /^[-+]?0x[a-fA-F0-9]+$/, it = /^0b[01]+$/, at = /^0o[0-7]+$/, ot = /^([
|
|
|
2081
2081
|
infinity: "original",
|
|
2082
2082
|
unicode: !1
|
|
2083
2083
|
};
|
|
2084
|
-
function
|
|
2085
|
-
if (t = Object.assign({},
|
|
2084
|
+
function lt(e, t = {}) {
|
|
2085
|
+
if (t = Object.assign({}, ct, t), !e || typeof e != "string") return e;
|
|
2086
2086
|
let n = e.trim();
|
|
2087
2087
|
if (n.length === 0 || t.skipLike !== void 0 && t.skipLike.test(n)) return e;
|
|
2088
|
-
if (n === "0" || t.unicode && (n =
|
|
2089
|
-
if (t.hex &&
|
|
2090
|
-
if (t.binary &&
|
|
2091
|
-
if (t.octal &&
|
|
2092
|
-
if (!isFinite(n)) return
|
|
2093
|
-
if (n.includes("e") || n.includes("E")) return
|
|
2088
|
+
if (n === "0" || t.unicode && (n = rt(n), n === "0")) return 0;
|
|
2089
|
+
if (t.hex && it.test(n)) return P(n, 16);
|
|
2090
|
+
if (t.binary && at.test(n)) return P(n, 2);
|
|
2091
|
+
if (t.octal && ot.test(n)) return P(n, 8);
|
|
2092
|
+
if (!isFinite(n)) return pt(e, Number(n), t);
|
|
2093
|
+
if (n.includes("e") || n.includes("E")) return dt(e, n, t);
|
|
2094
2094
|
{
|
|
2095
|
-
let r =
|
|
2095
|
+
let r = st.exec(n);
|
|
2096
2096
|
if (r) {
|
|
2097
|
-
let i = r[1] || "", a = r[2], o =
|
|
2097
|
+
let i = r[1] || "", a = r[2], o = ft(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
|
|
2098
2098
|
if (!t.leadingZeros && (a.length > 1 || a.length === 1 && !s)) return e;
|
|
2099
2099
|
{
|
|
2100
2100
|
let r = Number(n), s = String(r);
|
|
@@ -2107,26 +2107,26 @@ function ct(e, t = {}) {
|
|
|
2107
2107
|
} else return e;
|
|
2108
2108
|
}
|
|
2109
2109
|
}
|
|
2110
|
-
var
|
|
2111
|
-
function
|
|
2110
|
+
var ut = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
|
|
2111
|
+
function dt(e, t, n) {
|
|
2112
2112
|
if (!n.eNotation) return e;
|
|
2113
|
-
let r = t.match(
|
|
2113
|
+
let r = t.match(ut);
|
|
2114
2114
|
if (r) {
|
|
2115
2115
|
let i = r[1] || "", a = r[3].indexOf("e") === -1 ? "E" : "e", o = r[2], s = i ? e[o.length + 1] === a : e[o.length] === a;
|
|
2116
2116
|
return o.length > 1 && s ? e : o.length === 1 && (r[3].startsWith(`.${a}`) || r[3][0] === a) ? Number(t) : o.length > 0 ? n.leadingZeros && !s ? (t = (r[1] || "") + r[3], Number(t)) : e : Number(t);
|
|
2117
2117
|
} else return e;
|
|
2118
2118
|
}
|
|
2119
|
-
function
|
|
2119
|
+
function ft(e) {
|
|
2120
2120
|
return e && e.indexOf(".") !== -1 ? (e = e.replace(/0+$/, ""), e === "." ? e = "0" : e[0] === "." ? e = "0" + e : e[e.length - 1] === "." && (e = e.substring(0, e.length - 1)), e) : e;
|
|
2121
2121
|
}
|
|
2122
|
-
function
|
|
2122
|
+
function P(e, t) {
|
|
2123
2123
|
let n = e.trim();
|
|
2124
2124
|
if ((t === 2 || t === 8) && (e = n.substring(2)), parseInt) return parseInt(e, t);
|
|
2125
2125
|
if (Number.parseInt) return Number.parseInt(e, t);
|
|
2126
2126
|
if (window && window.parseInt) return window.parseInt(e, t);
|
|
2127
2127
|
throw Error("parseInt, Number.parseInt, window.parseInt are not supported");
|
|
2128
2128
|
}
|
|
2129
|
-
function
|
|
2129
|
+
function pt(e, t, n) {
|
|
2130
2130
|
let r = t === Infinity;
|
|
2131
2131
|
switch (n.infinity.toLowerCase()) {
|
|
2132
2132
|
case "null": return null;
|
|
@@ -2137,14 +2137,14 @@ function ft(e, t, n) {
|
|
|
2137
2137
|
}
|
|
2138
2138
|
//#endregion
|
|
2139
2139
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
|
|
2140
|
-
function
|
|
2140
|
+
function mt(e) {
|
|
2141
2141
|
return typeof e == "function" ? e : Array.isArray(e) ? (t) => {
|
|
2142
2142
|
for (let n of e) if (typeof n == "string" && t === n || n instanceof RegExp && n.test(t)) return !0;
|
|
2143
2143
|
} : () => !1;
|
|
2144
2144
|
}
|
|
2145
2145
|
//#endregion
|
|
2146
2146
|
//#region ../../node_modules/.pnpm/path-expression-matcher@1.6.2/node_modules/path-expression-matcher/src/Expression.js
|
|
2147
|
-
var
|
|
2147
|
+
var F = class {
|
|
2148
2148
|
constructor(e, t = {}, n) {
|
|
2149
2149
|
this.pattern = e, this.separator = t.separator || ".", this.segments = this._parse(e), this.data = n, this._hasDeepWildcard = this.segments.some((e) => e.type === "deep-wildcard"), this._hasAttributeCondition = this.segments.some((e) => e.attrName !== void 0), this._hasPositionSelector = this.segments.some((e) => e.position !== void 0);
|
|
2150
2150
|
}
|
|
@@ -2200,7 +2200,7 @@ var I = class {
|
|
|
2200
2200
|
toString() {
|
|
2201
2201
|
return this.pattern;
|
|
2202
2202
|
}
|
|
2203
|
-
},
|
|
2203
|
+
}, ht = class {
|
|
2204
2204
|
constructor() {
|
|
2205
2205
|
this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._deepByTerminalTag = /* @__PURE__ */ new Map(), this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
|
|
2206
2206
|
}
|
|
@@ -2258,7 +2258,7 @@ var I = class {
|
|
|
2258
2258
|
for (let t = 0; t < this._deepWildcards.length; t++) if (e.matches(this._deepWildcards[t])) return this._deepWildcards[t];
|
|
2259
2259
|
return null;
|
|
2260
2260
|
}
|
|
2261
|
-
},
|
|
2261
|
+
}, gt = class {
|
|
2262
2262
|
constructor(e) {
|
|
2263
2263
|
this._matcher = e;
|
|
2264
2264
|
}
|
|
@@ -2315,9 +2315,9 @@ var I = class {
|
|
|
2315
2315
|
matchesAny(e) {
|
|
2316
2316
|
return e.matchesAny(this._matcher);
|
|
2317
2317
|
}
|
|
2318
|
-
},
|
|
2318
|
+
}, I = class {
|
|
2319
2319
|
constructor(e = {}) {
|
|
2320
|
-
this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new
|
|
2320
|
+
this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new gt(this), this._keptAttrs = [];
|
|
2321
2321
|
}
|
|
2322
2322
|
push(e, t = null, n = null, r = null) {
|
|
2323
2323
|
this._pathStringCache = null, this.path.length > 0 && (this.path[this.path.length - 1].values = void 0);
|
|
@@ -2468,7 +2468,7 @@ var I = class {
|
|
|
2468
2468
|
readOnly() {
|
|
2469
2469
|
return this._view;
|
|
2470
2470
|
}
|
|
2471
|
-
},
|
|
2471
|
+
}, L = [
|
|
2472
2472
|
{
|
|
2473
2473
|
id: "html-script-open",
|
|
2474
2474
|
description: "<script opening tag",
|
|
@@ -2554,7 +2554,7 @@ var I = class {
|
|
|
2554
2554
|
description: "<form tag — can be used for phishing / credential harvesting injection",
|
|
2555
2555
|
pattern: /<form[\s>/]/i
|
|
2556
2556
|
}
|
|
2557
|
-
],
|
|
2557
|
+
], R = [
|
|
2558
2558
|
{
|
|
2559
2559
|
id: "xml-cdata-injection",
|
|
2560
2560
|
description: "CDATA section injection: <![CDATA[ breaks out of text node context",
|
|
@@ -2615,7 +2615,7 @@ var I = class {
|
|
|
2615
2615
|
description: "?> closes an enclosing processing instruction",
|
|
2616
2616
|
pattern: /\?>/
|
|
2617
2617
|
}
|
|
2618
|
-
],
|
|
2618
|
+
], _t = [
|
|
2619
2619
|
{
|
|
2620
2620
|
id: "svg-script-element",
|
|
2621
2621
|
description: "<script element inside SVG executes JavaScript",
|
|
@@ -2681,7 +2681,7 @@ var I = class {
|
|
|
2681
2681
|
description: "style= attribute containing javascript: (e.g. background:url(javascript:...))",
|
|
2682
2682
|
pattern: /style\s*=[\s\S]{0,60}javascript\s*:/i
|
|
2683
2683
|
}
|
|
2684
|
-
],
|
|
2684
|
+
], z = [
|
|
2685
2685
|
{
|
|
2686
2686
|
id: "sql-block-comment-open",
|
|
2687
2687
|
description: "SQL block comment open: /* ... */ — unusual in legitimate user text",
|
|
@@ -2757,7 +2757,7 @@ var I = class {
|
|
|
2757
2757
|
description: "INFORMATION_SCHEMA — reconnaissance query for table/column enumeration",
|
|
2758
2758
|
pattern: /\bINFORMATION_SCHEMA\b/i
|
|
2759
2759
|
}
|
|
2760
|
-
],
|
|
2760
|
+
], vt = [
|
|
2761
2761
|
{
|
|
2762
2762
|
id: "shell-path-traversal-unix",
|
|
2763
2763
|
description: "Unix path traversal: ../ — climbing the directory tree",
|
|
@@ -2848,7 +2848,7 @@ var I = class {
|
|
|
2848
2848
|
description: "curl/wget with URL or flags — can exfiltrate data or download payloads",
|
|
2849
2849
|
pattern: /\b(?:curl|wget)\s+(?:https?:\/\/|ftp:\/\/|-)/i
|
|
2850
2850
|
}
|
|
2851
|
-
],
|
|
2851
|
+
], yt = [
|
|
2852
2852
|
{
|
|
2853
2853
|
id: "redos-nested-quantifier-plus",
|
|
2854
2854
|
description: "Nested + quantifier inside a group with outer quantifier: (a+)+, (.+b)*, etc.",
|
|
@@ -2889,71 +2889,71 @@ var I = class {
|
|
|
2889
2889
|
description: "Long alternation with many similar branches — polynomial backtracking risk",
|
|
2890
2890
|
pattern: /\([^)]{0,200}(?:\|[^|)]{0,50}){9,}\)/
|
|
2891
2891
|
}
|
|
2892
|
-
],
|
|
2892
|
+
], B = "[\"'\\s]*:", bt = [
|
|
2893
2893
|
{
|
|
2894
2894
|
id: "nosql-where-operator",
|
|
2895
2895
|
description: "$where — executes arbitrary JavaScript server-side in MongoDB",
|
|
2896
|
-
pattern: RegExp(`\\$where${
|
|
2896
|
+
pattern: RegExp(`\\$where${B}`, "i")
|
|
2897
2897
|
},
|
|
2898
2898
|
{
|
|
2899
2899
|
id: "nosql-ne-operator",
|
|
2900
2900
|
description: "$ne — \"not equal\" operator used to bypass equality checks",
|
|
2901
|
-
pattern: RegExp(`\\$ne${
|
|
2901
|
+
pattern: RegExp(`\\$ne${B}`, "i")
|
|
2902
2902
|
},
|
|
2903
2903
|
{
|
|
2904
2904
|
id: "nosql-gt-operator",
|
|
2905
2905
|
description: "$gt — \"greater than\" used to bypass password/value checks",
|
|
2906
|
-
pattern: RegExp(`\\$gte?${
|
|
2906
|
+
pattern: RegExp(`\\$gte?${B}`, "i")
|
|
2907
2907
|
},
|
|
2908
2908
|
{
|
|
2909
2909
|
id: "nosql-lt-operator",
|
|
2910
2910
|
description: "$lt / $lte — \"less than\" bypass variants",
|
|
2911
|
-
pattern: RegExp(`\\$lte?${
|
|
2911
|
+
pattern: RegExp(`\\$lte?${B}`, "i")
|
|
2912
2912
|
},
|
|
2913
2913
|
{
|
|
2914
2914
|
id: "nosql-regex-operator",
|
|
2915
2915
|
description: "$regex — can be used to extract data character by character (blind injection)",
|
|
2916
|
-
pattern: RegExp(`\\$regex${
|
|
2916
|
+
pattern: RegExp(`\\$regex${B}`, "i")
|
|
2917
2917
|
},
|
|
2918
2918
|
{
|
|
2919
2919
|
id: "nosql-or-operator",
|
|
2920
2920
|
description: "$or — logical OR; used to create always-true conditions",
|
|
2921
|
-
pattern: RegExp(`\\$or${
|
|
2921
|
+
pattern: RegExp(`\\$or${B}\\s*\\[`, "i")
|
|
2922
2922
|
},
|
|
2923
2923
|
{
|
|
2924
2924
|
id: "nosql-and-operator",
|
|
2925
2925
|
description: "$and — logical AND operator injection",
|
|
2926
|
-
pattern: RegExp(`\\$and${
|
|
2926
|
+
pattern: RegExp(`\\$and${B}\\s*\\[`, "i")
|
|
2927
2927
|
},
|
|
2928
2928
|
{
|
|
2929
2929
|
id: "nosql-nor-operator",
|
|
2930
2930
|
description: "$nor — logical NOR operator injection",
|
|
2931
|
-
pattern: RegExp(`\\$nor${
|
|
2931
|
+
pattern: RegExp(`\\$nor${B}\\s*\\[`, "i")
|
|
2932
2932
|
},
|
|
2933
2933
|
{
|
|
2934
2934
|
id: "nosql-exists-operator",
|
|
2935
2935
|
description: "$exists — can enumerate fields to determine schema",
|
|
2936
|
-
pattern: RegExp(`\\$exists${
|
|
2936
|
+
pattern: RegExp(`\\$exists${B}`, "i")
|
|
2937
2937
|
},
|
|
2938
2938
|
{
|
|
2939
2939
|
id: "nosql-in-operator",
|
|
2940
2940
|
description: "$in — matches any value in a list; can enumerate values",
|
|
2941
|
-
pattern: RegExp(`\\$in${
|
|
2941
|
+
pattern: RegExp(`\\$in${B}\\s*\\[`, "i")
|
|
2942
2942
|
},
|
|
2943
2943
|
{
|
|
2944
2944
|
id: "nosql-expr-operator",
|
|
2945
2945
|
description: "$expr — allows aggregation expressions in queries (MongoDB 3.6+)",
|
|
2946
|
-
pattern: RegExp(`\\$expr${
|
|
2946
|
+
pattern: RegExp(`\\$expr${B}`, "i")
|
|
2947
2947
|
},
|
|
2948
2948
|
{
|
|
2949
2949
|
id: "nosql-function-operator",
|
|
2950
2950
|
description: "$function — executes arbitrary JavaScript in MongoDB 4.4+",
|
|
2951
|
-
pattern: RegExp(`\\$function${
|
|
2951
|
+
pattern: RegExp(`\\$function${B}`, "i")
|
|
2952
2952
|
},
|
|
2953
2953
|
{
|
|
2954
2954
|
id: "nosql-accumulator-operator",
|
|
2955
2955
|
description: "$accumulator — custom aggregation with arbitrary JS execution",
|
|
2956
|
-
pattern: RegExp(`\\$accumulator${
|
|
2956
|
+
pattern: RegExp(`\\$accumulator${B}`, "i")
|
|
2957
2957
|
},
|
|
2958
2958
|
{
|
|
2959
2959
|
id: "nosql-proto-pollution",
|
|
@@ -2970,7 +2970,7 @@ var I = class {
|
|
|
2970
2970
|
description: "[\"__proto__\"] — bracket-notation prototype pollution",
|
|
2971
2971
|
pattern: /\[["']__proto__["']\]/
|
|
2972
2972
|
}
|
|
2973
|
-
],
|
|
2973
|
+
], xt = [
|
|
2974
2974
|
{
|
|
2975
2975
|
id: "log-crlf-injection",
|
|
2976
2976
|
description: "CRLF injection: literal \\r or \\n embeds fake log lines",
|
|
@@ -3031,7 +3031,7 @@ var I = class {
|
|
|
3031
3031
|
description: "ANSI escape sequence: ESC[ — can manipulate terminal output when logs are tailed",
|
|
3032
3032
|
pattern: /\x1b\[/
|
|
3033
3033
|
}
|
|
3034
|
-
],
|
|
3034
|
+
], St = [
|
|
3035
3035
|
{
|
|
3036
3036
|
id: "sql-line-comment",
|
|
3037
3037
|
description: "SQL line comment: -- followed by whitespace or end of string",
|
|
@@ -3047,22 +3047,22 @@ var I = class {
|
|
|
3047
3047
|
description: "Hex-encoded string injection: 0x41414141 style (MySQL)",
|
|
3048
3048
|
pattern: /\b0x[0-9a-f]{4,}/i
|
|
3049
3049
|
}
|
|
3050
|
-
],
|
|
3051
|
-
|
|
3052
|
-
HTML:
|
|
3053
|
-
XML:
|
|
3054
|
-
SVG:
|
|
3055
|
-
SQL:
|
|
3056
|
-
"SQL-STRICT":
|
|
3057
|
-
SHELL:
|
|
3058
|
-
REDOS:
|
|
3059
|
-
NOSQL:
|
|
3060
|
-
LOG:
|
|
3050
|
+
], Ct = [...z, ...St];
|
|
3051
|
+
L.label = "HTML", R.label = "XML", _t.label = "SVG", z.label = "SQL", Ct.label = "SQL-STRICT", vt.label = "SHELL", yt.label = "REDOS", bt.label = "NOSQL", xt.label = "LOG", Object.freeze({
|
|
3052
|
+
HTML: L,
|
|
3053
|
+
XML: R,
|
|
3054
|
+
SVG: _t,
|
|
3055
|
+
SQL: z,
|
|
3056
|
+
"SQL-STRICT": Ct,
|
|
3057
|
+
SHELL: vt,
|
|
3058
|
+
REDOS: yt,
|
|
3059
|
+
NOSQL: bt,
|
|
3060
|
+
LOG: xt
|
|
3061
3061
|
});
|
|
3062
|
-
function
|
|
3062
|
+
function wt(e) {
|
|
3063
3063
|
if (typeof e != "string") throw TypeError(`is-unsafe: first argument must be a string, got ${typeof e}`);
|
|
3064
3064
|
}
|
|
3065
|
-
function
|
|
3065
|
+
function Tt(e) {
|
|
3066
3066
|
if (!(e instanceof RegExp)) {
|
|
3067
3067
|
if (Array.isArray(e)) {
|
|
3068
3068
|
if (e.length === 0) throw TypeError("is-unsafe: context must not be an empty array");
|
|
@@ -3074,7 +3074,7 @@ function wt(e) {
|
|
|
3074
3074
|
throw TypeError(`is-unsafe: second argument must be a PatternList (e.g. HTML), an array of PatternLists (e.g. [HTML, XML]), or a RegExp. Got: ${typeof e}`);
|
|
3075
3075
|
}
|
|
3076
3076
|
}
|
|
3077
|
-
function
|
|
3077
|
+
function Et(e) {
|
|
3078
3078
|
return e instanceof RegExp ? {
|
|
3079
3079
|
lists: null,
|
|
3080
3080
|
regex: e
|
|
@@ -3086,7 +3086,7 @@ function Tt(e) {
|
|
|
3086
3086
|
regex: null
|
|
3087
3087
|
};
|
|
3088
3088
|
}
|
|
3089
|
-
function
|
|
3089
|
+
function Dt(e, t) {
|
|
3090
3090
|
let n = t.label ?? "CUSTOM";
|
|
3091
3091
|
for (let r of t) if (r.pattern.test(e)) return {
|
|
3092
3092
|
context: n,
|
|
@@ -3096,16 +3096,16 @@ function Et(e, t) {
|
|
|
3096
3096
|
};
|
|
3097
3097
|
return null;
|
|
3098
3098
|
}
|
|
3099
|
-
function
|
|
3100
|
-
|
|
3101
|
-
let { lists: n, regex: r } =
|
|
3099
|
+
function Ot(e, t) {
|
|
3100
|
+
wt(e), Tt(t);
|
|
3101
|
+
let { lists: n, regex: r } = Et(t);
|
|
3102
3102
|
if (r) return r.test(e);
|
|
3103
|
-
for (let t of n) if (
|
|
3103
|
+
for (let t of n) if (Dt(e, t) !== null) return !0;
|
|
3104
3104
|
return !1;
|
|
3105
3105
|
}
|
|
3106
3106
|
//#endregion
|
|
3107
3107
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
|
|
3108
|
-
function
|
|
3108
|
+
function kt(e, t) {
|
|
3109
3109
|
if (!e) return {};
|
|
3110
3110
|
let n = t.attributesGroupName ? e[t.attributesGroupName] : e;
|
|
3111
3111
|
if (!n) return {};
|
|
@@ -3116,7 +3116,7 @@ function Ot(e, t) {
|
|
|
3116
3116
|
} else r[e] = n[e];
|
|
3117
3117
|
return r;
|
|
3118
3118
|
}
|
|
3119
|
-
function
|
|
3119
|
+
function At(e) {
|
|
3120
3120
|
if (!e || typeof e != "string") return;
|
|
3121
3121
|
let t = e.indexOf(":");
|
|
3122
3122
|
if (t !== -1 && t > 0) {
|
|
@@ -3124,14 +3124,14 @@ function kt(e) {
|
|
|
3124
3124
|
if (n !== "xmlns") return n;
|
|
3125
3125
|
}
|
|
3126
3126
|
}
|
|
3127
|
-
var
|
|
3127
|
+
var jt = class {
|
|
3128
3128
|
constructor(e, t) {
|
|
3129
|
-
this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml =
|
|
3129
|
+
this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = It, this.parseTextData = Mt, this.resolveNameSpace = Nt, this.buildAttributesMap = Ft, this.isItStopNode = Bt, this.replaceEntitiesValue = Rt, this.readStopNodeData = Ut, this.saveTextToParentTag = zt, this.addChild = Lt, this.ignoreAttributesFn = mt(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
|
|
3130
3130
|
let n = { ...we };
|
|
3131
3131
|
this.options.entityDecoder ? this.entityDecoder = this.options.entityDecoder : (typeof this.options.htmlEntities == "object" ? n = this.options.htmlEntities : this.options.htmlEntities === !0 && (n = {
|
|
3132
3132
|
...Te,
|
|
3133
3133
|
...xe
|
|
3134
|
-
}), this.entityDecoder = new
|
|
3134
|
+
}), this.entityDecoder = new Me({
|
|
3135
3135
|
namedEntities: {
|
|
3136
3136
|
...n,
|
|
3137
3137
|
...t
|
|
@@ -3142,19 +3142,19 @@ var At = class {
|
|
|
3142
3142
|
maxExpandedLength: this.options.processEntities.maxExpandedLength,
|
|
3143
3143
|
applyLimitsTo: this.options.processEntities.appliesTo
|
|
3144
3144
|
},
|
|
3145
|
-
onInputEntity: (e, t) =>
|
|
3146
|
-
})), this.matcher = new
|
|
3145
|
+
onInputEntity: (e, t) => Ot(t, [L, R]) ? x.BLOCK : x.ALLOW
|
|
3146
|
+
})), this.matcher = new I(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new ht();
|
|
3147
3147
|
let r = this.options.stopNodes;
|
|
3148
3148
|
if (r && r.length > 0) {
|
|
3149
3149
|
for (let e = 0; e < r.length; e++) {
|
|
3150
3150
|
let t = r[e];
|
|
3151
|
-
typeof t == "string" ? this.stopNodeExpressionsSet.add(new
|
|
3151
|
+
typeof t == "string" ? this.stopNodeExpressionsSet.add(new F(t)) : t instanceof F && this.stopNodeExpressionsSet.add(t);
|
|
3152
3152
|
}
|
|
3153
3153
|
this.stopNodeExpressionsSet.seal();
|
|
3154
3154
|
}
|
|
3155
3155
|
}
|
|
3156
3156
|
};
|
|
3157
|
-
function
|
|
3157
|
+
function Mt(e, t, n, r, i, a, o) {
|
|
3158
3158
|
let s = this.options;
|
|
3159
3159
|
if (e !== void 0 && (s.trimValues && !r && (e = e.trim()), e.length > 0)) {
|
|
3160
3160
|
o || (e = this.replaceEntitiesValue(e, t, n));
|
|
@@ -3162,7 +3162,7 @@ function jt(e, t, n, r, i, a, o) {
|
|
|
3162
3162
|
return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Wt(e, s.parseTagValue, s.numberParseOptions) : e;
|
|
3163
3163
|
}
|
|
3164
3164
|
}
|
|
3165
|
-
function
|
|
3165
|
+
function Nt(e) {
|
|
3166
3166
|
if (this.options.removeNSPrefix) {
|
|
3167
3167
|
let t = e.split(":"), n = e.charAt(0) === "/" ? "/" : "";
|
|
3168
3168
|
if (t[0] === "xmlns") return "";
|
|
@@ -3170,11 +3170,11 @@ function Mt(e) {
|
|
|
3170
3170
|
}
|
|
3171
3171
|
return e;
|
|
3172
3172
|
}
|
|
3173
|
-
var
|
|
3174
|
-
function
|
|
3173
|
+
var Pt = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
|
|
3174
|
+
function Ft(e, t, n, r = !1) {
|
|
3175
3175
|
let i = this.options;
|
|
3176
3176
|
if (r === !0 || i.ignoreAttributes !== !0 && typeof e == "string") {
|
|
3177
|
-
let r = u(e,
|
|
3177
|
+
let r = u(e, Pt), a = r.length, o = {}, s = Array(a), c = !1, l = {};
|
|
3178
3178
|
for (let e = 0; e < a; e++) {
|
|
3179
3179
|
let t = this.resolveNameSpace(r[e][1]), a = r[e][4];
|
|
3180
3180
|
if (t.length && a !== void 0) {
|
|
@@ -3201,15 +3201,15 @@ function Pt(e, t, n, r = !1) {
|
|
|
3201
3201
|
return o;
|
|
3202
3202
|
}
|
|
3203
3203
|
}
|
|
3204
|
-
var
|
|
3204
|
+
var It = function(e) {
|
|
3205
3205
|
e = e.replace(/\r\n?/g, "\n");
|
|
3206
|
-
let t = new
|
|
3206
|
+
let t = new E("!xml"), n = t, r = "";
|
|
3207
3207
|
this.matcher.reset(), this.entityDecoder.reset(), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
|
|
3208
|
-
let i = this.options, a = new
|
|
3208
|
+
let i = this.options, a = new Xe(i.processEntities), o = e.length;
|
|
3209
3209
|
for (let s = 0; s < o; s++) if (e[s] === "<") {
|
|
3210
3210
|
let c = e.charCodeAt(s + 1);
|
|
3211
3211
|
if (c === 47) {
|
|
3212
|
-
let t =
|
|
3212
|
+
let t = V(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
|
|
3213
3213
|
if (i.removeNSPrefix) {
|
|
3214
3214
|
let e = a.indexOf(":");
|
|
3215
3215
|
e !== -1 && (a = a.substr(e + 1));
|
|
@@ -3219,7 +3219,7 @@ var Ft = function(e) {
|
|
|
3219
3219
|
if (a && i.unpairedTagsSet.has(a)) throw Error(`Unpaired tag can not be used as closing tag: </${a}>`);
|
|
3220
3220
|
o && i.unpairedTagsSet.has(o) && (this.matcher.pop(), this.tagsNodeStack.pop()), this.matcher.pop(), this.isCurrentNodeStopNode = !1, n = this.tagsNodeStack.pop(), r = "", s = t;
|
|
3221
3221
|
} else if (c === 63) {
|
|
3222
|
-
let t =
|
|
3222
|
+
let t = H(e, s, !1, "?>");
|
|
3223
3223
|
if (!t) throw Error("Pi Tag is not closed.");
|
|
3224
3224
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
|
|
3225
3225
|
let o = this.buildAttributesMap(t.tagExp, this.matcher, t.tagName, !0);
|
|
@@ -3228,12 +3228,12 @@ var Ft = function(e) {
|
|
|
3228
3228
|
this.entityDecoder.setXmlVersion(Number(e) || 1), a.setXmlVersion(Number(e) || 1);
|
|
3229
3229
|
}
|
|
3230
3230
|
if (!(i.ignoreDeclaration && t.tagName === "?xml" || i.ignorePiTags)) {
|
|
3231
|
-
let e = new
|
|
3231
|
+
let e = new E(t.tagName);
|
|
3232
3232
|
e.add(i.textNodeName, ""), t.tagName !== t.tagExp && t.attrExpPresent && i.ignoreAttributes !== !0 && (e[":@"] = o), this.addChild(n, e, this.readonlyMatcher, s);
|
|
3233
3233
|
}
|
|
3234
3234
|
s = t.closeIndex + 1;
|
|
3235
3235
|
} else if (c === 33 && e.charCodeAt(s + 2) === 45 && e.charCodeAt(s + 3) === 45) {
|
|
3236
|
-
let t =
|
|
3236
|
+
let t = V(e, "-->", s + 4, "Comment is not closed.");
|
|
3237
3237
|
if (i.commentPropName) {
|
|
3238
3238
|
let a = e.substring(s + 4, t - 2);
|
|
3239
3239
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher), n.add(i.commentPropName, [{ [i.textNodeName]: a }]);
|
|
@@ -3243,12 +3243,12 @@ var Ft = function(e) {
|
|
|
3243
3243
|
let t = a.readDocType(e, s);
|
|
3244
3244
|
this.entityDecoder.addInputEntities(t.entities), s = t.i;
|
|
3245
3245
|
} else if (c === 33 && e.charCodeAt(s + 2) === 91) {
|
|
3246
|
-
let t =
|
|
3246
|
+
let t = V(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
|
|
3247
3247
|
r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
|
|
3248
3248
|
let o = this.parseTextData(a, n.tagname, this.readonlyMatcher, !0, !1, !0, !0);
|
|
3249
3249
|
o ??= "", i.cdataPropName ? n.add(i.cdataPropName, [{ [i.textNodeName]: a }]) : n.add(i.textNodeName, o), s = t + 2;
|
|
3250
3250
|
} else {
|
|
3251
|
-
let a =
|
|
3251
|
+
let a = H(e, s, i.removeNSPrefix);
|
|
3252
3252
|
if (!a) {
|
|
3253
3253
|
let t = e.substring(Math.max(0, s - 50), Math.min(o, s + 50));
|
|
3254
3254
|
throw Error(`readTagExp returned undefined at position ${s}. Context: "${t}"`);
|
|
@@ -3261,7 +3261,7 @@ var Ft = function(e) {
|
|
|
3261
3261
|
let m = !1;
|
|
3262
3262
|
u.length > 0 && u.lastIndexOf("/") === u.length - 1 && (m = !0, c[c.length - 1] === "/" ? (c = c.substr(0, c.length - 1), u = c) : u = u.substr(0, u.length - 1), d = c !== u);
|
|
3263
3263
|
let h = null, g;
|
|
3264
|
-
g =
|
|
3264
|
+
g = At(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && kt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
|
|
3265
3265
|
let _ = s;
|
|
3266
3266
|
if (this.isCurrentNodeStopNode) {
|
|
3267
3267
|
let t = "";
|
|
@@ -3272,19 +3272,19 @@ var Ft = function(e) {
|
|
|
3272
3272
|
if (!n) throw Error(`Unexpected end of ${l}`);
|
|
3273
3273
|
s = n.i, t = n.tagContent;
|
|
3274
3274
|
}
|
|
3275
|
-
let r = new
|
|
3275
|
+
let r = new E(c);
|
|
3276
3276
|
h && (r[":@"] = h), r.add(i.textNodeName, t), this.matcher.pop(), this.isCurrentNodeStopNode = !1, this.addChild(n, r, this.readonlyMatcher, _);
|
|
3277
3277
|
} else {
|
|
3278
3278
|
if (m) {
|
|
3279
3279
|
({tagName: c, tagExp: u} = Gt(i.transformTagName, c, u, i));
|
|
3280
|
-
let e = new
|
|
3280
|
+
let e = new E(c);
|
|
3281
3281
|
h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1;
|
|
3282
3282
|
} else if (i.unpairedTagsSet.has(c)) {
|
|
3283
|
-
let e = new
|
|
3283
|
+
let e = new E(c);
|
|
3284
3284
|
h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1, s = a.closeIndex;
|
|
3285
3285
|
continue;
|
|
3286
3286
|
} else {
|
|
3287
|
-
let e = new
|
|
3287
|
+
let e = new E(c);
|
|
3288
3288
|
if (this.tagsNodeStack.length > i.maxNestedTags) throw Error("Maximum nested tags exceeded");
|
|
3289
3289
|
this.tagsNodeStack.push(n), h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), n = e;
|
|
3290
3290
|
}
|
|
@@ -3294,12 +3294,12 @@ var Ft = function(e) {
|
|
|
3294
3294
|
} else r += e[s];
|
|
3295
3295
|
return t.child;
|
|
3296
3296
|
};
|
|
3297
|
-
function
|
|
3297
|
+
function Lt(e, t, n, r) {
|
|
3298
3298
|
this.options.captureMetaData || (r = void 0);
|
|
3299
3299
|
let i = this.options.jPath ? n.toString() : n, a = this.options.updateTag(t.tagname, i, t[":@"]);
|
|
3300
3300
|
a === !1 || (typeof a == "string" && (t.tagname = a), e.addChild(t, r));
|
|
3301
3301
|
}
|
|
3302
|
-
function
|
|
3302
|
+
function Rt(e, t, n) {
|
|
3303
3303
|
let r = this.options.processEntities;
|
|
3304
3304
|
if (!r || !r.enabled) return e;
|
|
3305
3305
|
if (r.allowedTags) {
|
|
@@ -3312,13 +3312,13 @@ function Lt(e, t, n) {
|
|
|
3312
3312
|
}
|
|
3313
3313
|
return this.entityDecoder.decode(e);
|
|
3314
3314
|
}
|
|
3315
|
-
function
|
|
3315
|
+
function zt(e, t, n, r) {
|
|
3316
3316
|
return e &&= (r === void 0 && (r = t.child.length === 0), e = this.parseTextData(e, t.tagname, n, !1, t[":@"] ? Object.keys(t[":@"]).length !== 0 : !1, r), e !== void 0 && e !== "" && t.add(this.options.textNodeName, e), ""), e;
|
|
3317
3317
|
}
|
|
3318
|
-
function
|
|
3318
|
+
function Bt() {
|
|
3319
3319
|
return this.stopNodeExpressionsSet.size === 0 ? !1 : this.matcher.matchesAny(this.stopNodeExpressionsSet);
|
|
3320
3320
|
}
|
|
3321
|
-
function
|
|
3321
|
+
function Vt(e, t, n = ">") {
|
|
3322
3322
|
let r = 0, i = e.length, a = n.charCodeAt(0), o = n.length > 1 ? n.charCodeAt(1) : -1, s = "", c = t;
|
|
3323
3323
|
for (let n = t; n < i; n++) {
|
|
3324
3324
|
let t = e.charCodeAt(n);
|
|
@@ -3336,18 +3336,18 @@ function Bt(e, t, n = ">") {
|
|
|
3336
3336
|
else t === 9 && !r && (s += e.substring(c, n) + " ", c = n + 1);
|
|
3337
3337
|
}
|
|
3338
3338
|
}
|
|
3339
|
-
function
|
|
3339
|
+
function V(e, t, n, r) {
|
|
3340
3340
|
let i = e.indexOf(t, n);
|
|
3341
3341
|
if (i === -1) throw Error(r);
|
|
3342
3342
|
return i + t.length - 1;
|
|
3343
3343
|
}
|
|
3344
|
-
function
|
|
3344
|
+
function Ht(e, t, n, r) {
|
|
3345
3345
|
let i = e.indexOf(t, n);
|
|
3346
3346
|
if (i === -1) throw Error(r);
|
|
3347
3347
|
return i;
|
|
3348
3348
|
}
|
|
3349
|
-
function
|
|
3350
|
-
let i =
|
|
3349
|
+
function H(e, t, n, r = ">") {
|
|
3350
|
+
let i = Vt(e, t + 1, r);
|
|
3351
3351
|
if (!i) return;
|
|
3352
3352
|
let a = i.data, o = i.index, s = a.search(/\s/), c = a, l = !0;
|
|
3353
3353
|
s !== -1 && (c = a.substring(0, s), a = a.substring(s + 1).trimStart());
|
|
@@ -3369,17 +3369,17 @@ function Ut(e, t, n) {
|
|
|
3369
3369
|
for (; n < a; n++) if (e[n] === "<") {
|
|
3370
3370
|
let a = e.charCodeAt(n + 1);
|
|
3371
3371
|
if (a === 47) {
|
|
3372
|
-
let a =
|
|
3372
|
+
let a = Ht(e, ">", n, `${t} is not closed`);
|
|
3373
3373
|
if (e.substring(n + 2, a).trim() === t && (i--, i === 0)) return {
|
|
3374
3374
|
tagContent: e.substring(r, n),
|
|
3375
3375
|
i: a
|
|
3376
3376
|
};
|
|
3377
3377
|
n = a;
|
|
3378
|
-
} else if (a === 63) n =
|
|
3379
|
-
else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n =
|
|
3380
|
-
else if (a === 33 && e.charCodeAt(n + 2) === 91) n =
|
|
3378
|
+
} else if (a === 63) n = V(e, "?>", n + 1, "StopNode is not closed.");
|
|
3379
|
+
else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = V(e, "-->", n + 3, "StopNode is not closed.");
|
|
3380
|
+
else if (a === 33 && e.charCodeAt(n + 2) === 91) n = V(e, "]]>", n, "StopNode is not closed.") - 2;
|
|
3381
3381
|
else {
|
|
3382
|
-
let r =
|
|
3382
|
+
let r = H(e, n, !1);
|
|
3383
3383
|
r && ((r && r.tagName) === t && r.tagExp[r.tagExp.length - 1] !== "/" && i++, n = r.closeIndex);
|
|
3384
3384
|
}
|
|
3385
3385
|
}
|
|
@@ -3387,7 +3387,7 @@ function Ut(e, t, n) {
|
|
|
3387
3387
|
function Wt(e, t, n) {
|
|
3388
3388
|
if (t && typeof e == "string") {
|
|
3389
3389
|
let t = e.trim();
|
|
3390
|
-
return t === "true" ? !0 : t === "false" ? !1 :
|
|
3390
|
+
return t === "true" ? !0 : t === "false" ? !1 : lt(e, n);
|
|
3391
3391
|
} else if (f(e)) return e;
|
|
3392
3392
|
else return "";
|
|
3393
3393
|
}
|
|
@@ -3407,7 +3407,7 @@ function Kt(e, t) {
|
|
|
3407
3407
|
}
|
|
3408
3408
|
//#endregion
|
|
3409
3409
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
|
|
3410
|
-
var qt =
|
|
3410
|
+
var qt = E.getMetaDataSymbol();
|
|
3411
3411
|
function Jt(e, t) {
|
|
3412
3412
|
if (!e || typeof e != "object") return {};
|
|
3413
3413
|
if (!t) return e;
|
|
@@ -3467,7 +3467,7 @@ function $t(e, t) {
|
|
|
3467
3467
|
//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
|
|
3468
3468
|
var en = class {
|
|
3469
3469
|
constructor(e) {
|
|
3470
|
-
this.externalEntities = {}, this.options =
|
|
3470
|
+
this.externalEntities = {}, this.options = Le(e);
|
|
3471
3471
|
}
|
|
3472
3472
|
parse(e, t) {
|
|
3473
3473
|
if (typeof e != "string" && e.toString) e = e.toString();
|
|
@@ -3477,7 +3477,7 @@ var en = class {
|
|
|
3477
3477
|
let n = g(e, t);
|
|
3478
3478
|
if (n !== !0) throw Error(`${n.err.msg}:${n.err.line}:${n.err.col}`);
|
|
3479
3479
|
}
|
|
3480
|
-
let n = new
|
|
3480
|
+
let n = new jt(this.options, this.externalEntities), r = n.parseXml(e);
|
|
3481
3481
|
return this.options.preserveOrder || r === void 0 ? r : Yt(r, this.options, n.matcher, n.readonlyMatcher);
|
|
3482
3482
|
}
|
|
3483
3483
|
addEntity(e, t) {
|
|
@@ -3487,7 +3487,7 @@ var en = class {
|
|
|
3487
3487
|
this.externalEntities[e] = t;
|
|
3488
3488
|
}
|
|
3489
3489
|
static getMetaDataSymbol() {
|
|
3490
|
-
return
|
|
3490
|
+
return E.getMetaDataSymbol();
|
|
3491
3491
|
}
|
|
3492
3492
|
};
|
|
3493
3493
|
//#endregion
|
|
@@ -3528,9 +3528,9 @@ function sn(e, t) {
|
|
|
3528
3528
|
let r = [];
|
|
3529
3529
|
if (t.stopNodes && Array.isArray(t.stopNodes)) for (let e = 0; e < t.stopNodes.length; e++) {
|
|
3530
3530
|
let n = t.stopNodes[e];
|
|
3531
|
-
typeof n == "string" ? r.push(new
|
|
3531
|
+
typeof n == "string" ? r.push(new F(n)) : n instanceof F && r.push(n);
|
|
3532
3532
|
}
|
|
3533
|
-
let i =
|
|
3533
|
+
let i = Ye("qName", { xmlVersion: an(e, t) }), a = new I();
|
|
3534
3534
|
return cn(e, t, n, a, r, i);
|
|
3535
3535
|
}
|
|
3536
3536
|
function cn(e, t, n, r, i, a) {
|
|
@@ -3698,7 +3698,7 @@ var _n = {
|
|
|
3698
3698
|
function W(e) {
|
|
3699
3699
|
if (this.options = Object.assign({}, _n, e), this.options.stopNodes && Array.isArray(this.options.stopNodes) && (this.options.stopNodes = this.options.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), this.stopNodeExpressions = [], this.options.stopNodes && Array.isArray(this.options.stopNodes)) for (let e = 0; e < this.options.stopNodes.length; e++) {
|
|
3700
3700
|
let t = this.options.stopNodes[e];
|
|
3701
|
-
typeof t == "string" ? this.stopNodeExpressions.push(new
|
|
3701
|
+
typeof t == "string" ? this.stopNodeExpressions.push(new F(t)) : t instanceof F && this.stopNodeExpressions.push(t);
|
|
3702
3702
|
}
|
|
3703
3703
|
this.options.ignoreAttributes === !0 || this.options.attributesGroupName ? this.isAttribute = function() {
|
|
3704
3704
|
return !1;
|
|
@@ -3728,7 +3728,7 @@ W.prototype.build = function(e) {
|
|
|
3728
3728
|
if (this.options.preserveOrder) return sn(e, this.options);
|
|
3729
3729
|
{
|
|
3730
3730
|
Array.isArray(e) && this.options.arrayNodeName && this.options.arrayNodeName.length > 1 && (e = { [this.options.arrayNodeName]: e });
|
|
3731
|
-
let t = new
|
|
3731
|
+
let t = new I(), n = Ye("qName", { xmlVersion: vn(e, this.options) });
|
|
3732
3732
|
return this.j2x(e, 0, t, n).val;
|
|
3733
3733
|
}
|
|
3734
3734
|
}, W.prototype.j2x = function(e, t, n, r) {
|
|
@@ -5202,7 +5202,7 @@ var bi = e.enum([
|
|
|
5202
5202
|
"credentials-exchange",
|
|
5203
5203
|
"pre-user-registration",
|
|
5204
5204
|
"post-user-registration"
|
|
5205
|
-
]), wi = e.enum([
|
|
5205
|
+
]), wi = e.enum(["post-user-login"]), Ti = e.enum(["impersonate"]), Ei = e.enum([
|
|
5206
5206
|
"ensure-username",
|
|
5207
5207
|
"set-preferred-username",
|
|
5208
5208
|
"account-linking"
|
|
@@ -5212,59 +5212,73 @@ var bi = e.enum([
|
|
|
5212
5212
|
priority: e.number().optional(),
|
|
5213
5213
|
hook_id: e.string().optional(),
|
|
5214
5214
|
metadata: e.record(e.string(), e.unknown()).optional()
|
|
5215
|
-
},
|
|
5215
|
+
}, Di = e.object({
|
|
5216
5216
|
...Z,
|
|
5217
5217
|
trigger_id: bi,
|
|
5218
5218
|
url: e.string()
|
|
5219
|
-
}),
|
|
5219
|
+
}), Oi = e.object({
|
|
5220
5220
|
...Z,
|
|
5221
5221
|
trigger_id: xi,
|
|
5222
5222
|
form_id: e.string()
|
|
5223
|
-
}),
|
|
5223
|
+
}), ki = e.object({
|
|
5224
5224
|
...Z,
|
|
5225
5225
|
trigger_id: Si,
|
|
5226
|
-
template_id:
|
|
5227
|
-
}),
|
|
5226
|
+
template_id: Ei
|
|
5227
|
+
}), Ai = e.object({
|
|
5228
5228
|
...Z,
|
|
5229
5229
|
trigger_id: Ci,
|
|
5230
5230
|
code_id: e.string()
|
|
5231
|
+
}), ji = e.object({
|
|
5232
|
+
...Z,
|
|
5233
|
+
trigger_id: wi,
|
|
5234
|
+
page_id: Ti,
|
|
5235
|
+
permission_required: e.string().optional()
|
|
5231
5236
|
});
|
|
5232
5237
|
e.union([
|
|
5233
|
-
Ti,
|
|
5234
|
-
Ei,
|
|
5235
5238
|
Di,
|
|
5236
|
-
Oi
|
|
5239
|
+
Oi,
|
|
5240
|
+
ki,
|
|
5241
|
+
Ai,
|
|
5242
|
+
ji
|
|
5237
5243
|
]);
|
|
5238
|
-
var
|
|
5244
|
+
var Mi = e.object({
|
|
5239
5245
|
...Z,
|
|
5240
5246
|
trigger_id: bi
|
|
5241
5247
|
}).extend(G.shape).extend({
|
|
5242
5248
|
hook_id: e.string(),
|
|
5243
5249
|
url: e.string()
|
|
5244
|
-
}),
|
|
5250
|
+
}), Ni = e.object({
|
|
5245
5251
|
...Z,
|
|
5246
5252
|
trigger_id: xi
|
|
5247
5253
|
}).extend(G.shape).extend({
|
|
5248
5254
|
hook_id: e.string(),
|
|
5249
5255
|
form_id: e.string()
|
|
5250
|
-
}),
|
|
5256
|
+
}), Pi = e.object({
|
|
5251
5257
|
...Z,
|
|
5252
5258
|
trigger_id: Si
|
|
5253
5259
|
}).extend(G.shape).extend({
|
|
5254
5260
|
hook_id: e.string(),
|
|
5255
|
-
template_id:
|
|
5256
|
-
}),
|
|
5261
|
+
template_id: Ei
|
|
5262
|
+
}), Fi = e.object({
|
|
5257
5263
|
...Z,
|
|
5258
5264
|
trigger_id: Ci
|
|
5259
5265
|
}).extend(G.shape).extend({
|
|
5260
5266
|
hook_id: e.string(),
|
|
5261
5267
|
code_id: e.string()
|
|
5268
|
+
}), Ii = e.object({
|
|
5269
|
+
...Z,
|
|
5270
|
+
trigger_id: wi
|
|
5271
|
+
}).extend(G.shape).extend({
|
|
5272
|
+
hook_id: e.string(),
|
|
5273
|
+
page_id: Ti,
|
|
5274
|
+
permission_required: e.string().optional()
|
|
5262
5275
|
});
|
|
5263
5276
|
e.union([
|
|
5264
|
-
|
|
5265
|
-
|
|
5266
|
-
|
|
5267
|
-
|
|
5277
|
+
Mi,
|
|
5278
|
+
Ni,
|
|
5279
|
+
Pi,
|
|
5280
|
+
Fi,
|
|
5281
|
+
Ii
|
|
5268
5282
|
]), e.object({
|
|
5269
5283
|
code: e.string().max(1e5),
|
|
5270
5284
|
secrets: e.record(e.string(), e.string()).optional()
|
|
@@ -5272,11 +5286,11 @@ e.union([
|
|
|
5272
5286
|
id: e.string(),
|
|
5273
5287
|
tenant_id: e.string()
|
|
5274
5288
|
}).extend(G.shape);
|
|
5275
|
-
var
|
|
5289
|
+
var Li = e.object({ name: e.string().optional() }), Ri = e.object({ email: e.string().optional() }), zi = e.object({
|
|
5276
5290
|
id: e.string().optional(),
|
|
5277
5291
|
organization_id: e.string().max(50),
|
|
5278
|
-
inviter:
|
|
5279
|
-
invitee:
|
|
5292
|
+
inviter: Li,
|
|
5293
|
+
invitee: Ri,
|
|
5280
5294
|
invitation_url: e.string().url(),
|
|
5281
5295
|
client_id: e.string(),
|
|
5282
5296
|
connection_id: e.string().optional(),
|
|
@@ -5292,8 +5306,8 @@ e.object({
|
|
|
5292
5306
|
created_at: e.string().datetime(),
|
|
5293
5307
|
expires_at: e.string().datetime(),
|
|
5294
5308
|
ticket_id: e.string().optional()
|
|
5295
|
-
}).extend(
|
|
5296
|
-
var
|
|
5309
|
+
}).extend(zi.omit({ id: !0 }).shape);
|
|
5310
|
+
var Bi = e.object({
|
|
5297
5311
|
alg: e.enum([
|
|
5298
5312
|
"RS256",
|
|
5299
5313
|
"RS384",
|
|
@@ -5335,7 +5349,7 @@ var Ii = e.object({
|
|
|
5335
5349
|
message: `EC JWK is missing required member '${r}'`
|
|
5336
5350
|
});
|
|
5337
5351
|
});
|
|
5338
|
-
e.object({ keys: e.array(
|
|
5352
|
+
e.object({ keys: e.array(Bi) }), e.object({
|
|
5339
5353
|
issuer: e.string(),
|
|
5340
5354
|
authorization_endpoint: e.string(),
|
|
5341
5355
|
token_endpoint: e.string(),
|
|
@@ -5362,9 +5376,9 @@ e.object({ keys: e.array(Ii) }), e.object({
|
|
|
5362
5376
|
backchannel_logout_supported: e.boolean().optional(),
|
|
5363
5377
|
backchannel_logout_session_supported: e.boolean().optional()
|
|
5364
5378
|
});
|
|
5365
|
-
var
|
|
5379
|
+
var Vi = /* @__PURE__ */ function(e) {
|
|
5366
5380
|
return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
|
|
5367
|
-
}({}),
|
|
5381
|
+
}({}), Hi = e.nativeEnum(Vi), Ui = e.object({
|
|
5368
5382
|
strategy: e.string(),
|
|
5369
5383
|
strategy_type: e.string()
|
|
5370
5384
|
});
|
|
@@ -5378,12 +5392,12 @@ e.object({
|
|
|
5378
5392
|
useragent: e.string().optional(),
|
|
5379
5393
|
session_id: e.string().optional(),
|
|
5380
5394
|
authorization_url: e.string().optional(),
|
|
5381
|
-
state:
|
|
5395
|
+
state: Hi.optional().default("pending"),
|
|
5382
5396
|
state_data: e.string().optional(),
|
|
5383
5397
|
failure_reason: e.string().optional(),
|
|
5384
5398
|
user_id: e.string().optional(),
|
|
5385
5399
|
auth_connection: e.string().optional(),
|
|
5386
|
-
auth_strategy:
|
|
5400
|
+
auth_strategy: Ui.optional(),
|
|
5387
5401
|
authenticated_at: e.string().optional()
|
|
5388
5402
|
}).openapi({ description: "This represents a login sesion" }).extend({
|
|
5389
5403
|
id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
|
|
@@ -5550,17 +5564,17 @@ var Q = {
|
|
|
5550
5564
|
WARNING_DURING_LOGIN: "w",
|
|
5551
5565
|
WARNING_SENDING_NOTIFICATION: "wn",
|
|
5552
5566
|
WARNING_USER_MANAGEMENT: "wum"
|
|
5553
|
-
},
|
|
5567
|
+
}, Wi = e.string().refine((e) => Object.values(Q).includes(e), { message: "Invalid log type" });
|
|
5554
5568
|
Q.ACLS_SUMMARY, Q.ACTIONS_EXECUTION_FAILED, Q.API_LIMIT, Q.API_LIMIT_WARNING, Q.APPI, Q.CIBA_EXCHANGE_FAILED, Q.CIBA_EXCHANGE_SUCCEEDED, Q.CIBA_START_FAILED, Q.CIBA_START_SUCCEEDED, Q.CODE_LINK_SENT, Q.CODE_SENT, Q.DEPRECATION_NOTICE, Q.FAILED_LOGIN, Q.FAILED_BY_CONNECTOR, Q.FAILED_CHANGE_EMAIL, Q.FAILED_BY_CORS, Q.FAILED_CROSS_ORIGIN_AUTHENTICATION, Q.FAILED_CHANGE_PASSWORD, Q.FAILED_POST_CHANGE_PASSWORD_HOOK, Q.FAILED_CHANGE_PHONE_NUMBER, Q.FAILED_CHANGE_PASSWORD_REQUEST, Q.FAILED_CONNECTOR_PROVISIONING, Q.FAILED_CHANGE_USERNAME, Q.FAILED_DELEGATION, Q.FAILED_DEVICE_ACTIVATION, Q.FAILED_DEVICE_AUTHORIZATION_REQUEST, Q.USER_CANCELED_DEVICE_CONFIRMATION, Q.FAILED_USER_DELETION, Q.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.FAILED_EXCHANGE_CUSTOM_TOKEN, Q.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.FAILED_FEDERATED_LOGOUT, Q.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, Q.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_HOOK, Q.FAILED_IMPERSONATION, Q.FAILED_INVITE_ACCEPT, Q.FAILED_LOGOUT, Q.FLOWS_EXECUTION_COMPLETED, Q.FLOWS_EXECUTION_FAILED, Q.FAILED_SENDING_NOTIFICATION, Q.FORMS_SUBMISSION_FAILED, Q.FORMS_SUBMISSION_SUCCEEDED, Q.FAILED_LOGIN_INCORRECT_PASSWORD, Q.FAILED_PUSHED_AUTHORIZATION_REQUEST, Q.FAILED_POST_USER_REGISTRATION_HOOK, Q.FAILED_SIGNUP, Q.FAILED_SILENT_AUTH, Q.FAILED_LOGIN_INVALID_EMAIL_USERNAME, Q.FAILED_USERS_IMPORT, Q.FAILED_VERIFICATION_EMAIL, Q.FAILED_VERIFICATION_EMAIL_REQUEST, Q.EMAIL_VERIFICATION_CONFIRMED, Q.EMAIL_VERIFICATION_FAILED, Q.MFA_AUTH_FAILED, Q.MFA_AUTH_REJECTED, Q.MFA_AUTH_SUCCESS, Q.MFA_ENROLLMENT_COMPLETE, Q.TOO_MANY_MFA_FAILURES, Q.MFA_RECOVERY_FAILED, Q.MFA_RECOVERY_RATE_LIMIT_EXCEED, Q.MFA_RECOVERY_SUCCESS, Q.MFA_EMAIL_SENT, Q.EMAIL_VERIFICATION_SENT, Q.EMAIL_VERIFICATION_SEND_FAILURE, Q.PUSH_NOTIFICATION_SENT, Q.ERROR_SENDING_MFA_PUSH_NOTIFICATION, Q.MFA_SMS_SENT, Q.ERROR_SENDING_MFA_SMS, Q.MFA_VOICE_CALL_SUCCESS, Q.MFA_VOICE_CALL_FAILED, Q.SECOND_FACTOR_STARTED, Q.MFA_ENROLL_STARTED, Q.MFA_ENROLLMENT_FAILED, Q.GUARDIAN_TENANT_UPDATE, Q.UNENROLL_DEVICE_ACCOUNT, Q.UPDATE_DEVICE_ACCOUNT, Q.WEBAUTHN_CHALLENGE_FAILED, Q.WEBAUTHN_ENROLLMENT_FAILED, Q.FAILED_KMS_API_OPERATION, Q.SUCCESS_KMS_API_OPERATION, Q.KMS_KEY_STATE_CHANGED, Q.TOO_MANY_CALLS_TO_DELEGATION, Q.BLOCKED_IP_ADDRESS, Q.BLOCKED_ACCOUNT_IP, Q.BLOCKED_ACCOUNT_EMAIL, Q.INFORMATION, Q.MFA_REQUIRED, Q.MANAGEMENT_API_READ_OPERATION, Q.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.FAILED_OIDC_BACKCHANNEL_LOGOUT, Q.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, Q.ORGANIZATION_MEMBER_ADDED, Q.PASSKEY_CHALLENGE_FAILED, Q.PASSKEY_CHALLENGE_STARTED, Q.PRE_LOGIN_ASSESSMENT, Q.BREACHED_PASSWORD, Q.BREACHED_PASSWORD_ON_RESET, Q.SUCCESS_RESOURCE_CLEANUP, Q.RICH_CONSENTS_ACCESS_ERROR, Q.SUCCESS_LOGIN, Q.SUCCESS_API_OPERATION, Q.FAILED_API_OPERATION, Q.SUCCESS_CHANGE_EMAIL, Q.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, Q.SUCCESS_CHANGE_PASSWORD, Q.SUCCESS_CHANGE_PHONE_NUMBER, Q.SUCCESS_CHANGE_PASSWORD_REQUEST, Q.SUCCESS_CHANGE_USERNAME, Q.SUCCESS_CREDENTIAL_VALIDATION, Q.SUCCESS_DELEGATION, Q.SUCCESS_USER_DELETION, Q.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.SUCCESS_EXCHANGE_CUSTOM_TOKEN, Q.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_IMPERSONATION, Q.SUCCESSFULLY_ACCEPTED_USER_INVITE, Q.BREACHED_PASSWORD_ON_SIGNUP, Q.SUCCESS_LOGOUT, Q.SUCCESS_HOOK, Q.SUCCESS_PASSWORD_MIGRATION, Q.SUCCESS_REVOCATION, Q.SUCCESS_SIGNUP, Q.FAILED_SS_SSO_OPERATION, Q.INFORMATION_FROM_SS_SSO_OPERATION, Q.SUCCESS_SS_SSO_OPERATION, Q.SUCCESS_SILENT_AUTH, Q.SUCCESSFUL_SCIM_OPERATION, Q.SUCCESSFULLY_IMPORTED_USERS, Q.SUCCESS_VERIFICATION_EMAIL, Q.SUCCESS_VERIFICATION_EMAIL_REQUEST, Q.MAX_AMOUNT_OF_AUTHENTICATORS, Q.USER_LOGIN_BLOCK_RELEASED, Q.FAILED_UNIVERSAL_LOGOUT, Q.SUCCESSFUL_UNIVERSAL_LOGOUT, Q.WARNING_DURING_LOGIN, Q.WARNING_SENDING_NOTIFICATION, Q.WARNING_USER_MANAGEMENT, (() => {
|
|
5555
5569
|
let e = {};
|
|
5556
5570
|
for (let [t, n] of Object.entries(Q)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
|
|
5557
5571
|
return e;
|
|
5558
5572
|
})();
|
|
5559
|
-
var
|
|
5573
|
+
var Gi = e.object({
|
|
5560
5574
|
name: e.string(),
|
|
5561
5575
|
version: e.string(),
|
|
5562
5576
|
env: e.object({ node: e.string().optional() }).optional()
|
|
5563
|
-
}),
|
|
5577
|
+
}), Ki = e.object({
|
|
5564
5578
|
country_code: e.string().length(2),
|
|
5565
5579
|
city_name: e.string(),
|
|
5566
5580
|
latitude: e.string(),
|
|
@@ -5569,7 +5583,7 @@ var Vi = e.object({
|
|
|
5569
5583
|
continent_code: e.string()
|
|
5570
5584
|
});
|
|
5571
5585
|
e.object({
|
|
5572
|
-
type:
|
|
5586
|
+
type: Wi,
|
|
5573
5587
|
date: e.string(),
|
|
5574
5588
|
description: e.string().optional(),
|
|
5575
5589
|
ip: e.string().optional(),
|
|
@@ -5587,63 +5601,63 @@ e.object({
|
|
|
5587
5601
|
strategy: e.string().optional(),
|
|
5588
5602
|
strategy_type: e.string().optional(),
|
|
5589
5603
|
hostname: e.string().optional(),
|
|
5590
|
-
auth0_client:
|
|
5604
|
+
auth0_client: Gi.optional(),
|
|
5591
5605
|
log_id: e.string().optional(),
|
|
5592
|
-
location_info:
|
|
5606
|
+
location_info: Ki.optional()
|
|
5593
5607
|
}).extend({ log_id: e.string() });
|
|
5594
|
-
var
|
|
5608
|
+
var qi = e.enum([
|
|
5595
5609
|
"http",
|
|
5596
5610
|
"eventbridge",
|
|
5597
5611
|
"eventgrid",
|
|
5598
5612
|
"splunk",
|
|
5599
5613
|
"datadog",
|
|
5600
5614
|
"sumo"
|
|
5601
|
-
]),
|
|
5615
|
+
]), Ji = e.enum([
|
|
5602
5616
|
"active",
|
|
5603
5617
|
"paused",
|
|
5604
5618
|
"suspended"
|
|
5605
|
-
]),
|
|
5619
|
+
]), Yi = e.object({
|
|
5606
5620
|
type: e.string(),
|
|
5607
5621
|
name: e.string()
|
|
5608
5622
|
});
|
|
5609
5623
|
e.object({
|
|
5610
5624
|
name: e.string(),
|
|
5611
|
-
type:
|
|
5612
|
-
status:
|
|
5625
|
+
type: qi,
|
|
5626
|
+
status: Ji.optional(),
|
|
5613
5627
|
sink: e.record(e.string(), e.unknown()),
|
|
5614
|
-
filters: e.array(
|
|
5628
|
+
filters: e.array(Yi).optional(),
|
|
5615
5629
|
isPriority: e.boolean().optional()
|
|
5616
5630
|
}).extend({
|
|
5617
5631
|
id: e.string(),
|
|
5618
|
-
status:
|
|
5632
|
+
status: Ji,
|
|
5619
5633
|
created_at: e.string().optional(),
|
|
5620
5634
|
updated_at: e.string().optional()
|
|
5621
5635
|
});
|
|
5622
|
-
var
|
|
5636
|
+
var Xi = e.enum([
|
|
5623
5637
|
"auth0",
|
|
5624
5638
|
"cognito",
|
|
5625
5639
|
"okta",
|
|
5626
5640
|
"oidc"
|
|
5627
|
-
]),
|
|
5641
|
+
]), Zi = e.object({
|
|
5628
5642
|
domain: e.string(),
|
|
5629
5643
|
client_id: e.string(),
|
|
5630
5644
|
client_secret: e.string(),
|
|
5631
5645
|
audience: e.string().optional(),
|
|
5632
5646
|
scope: e.string().optional()
|
|
5633
|
-
}),
|
|
5647
|
+
}), Qi = e.object({
|
|
5634
5648
|
id: e.string().optional(),
|
|
5635
5649
|
name: e.string(),
|
|
5636
|
-
provider:
|
|
5650
|
+
provider: Xi,
|
|
5637
5651
|
connection: e.string(),
|
|
5638
5652
|
enabled: e.boolean().default(!0),
|
|
5639
|
-
credentials:
|
|
5653
|
+
credentials: Zi
|
|
5640
5654
|
});
|
|
5641
5655
|
e.object({
|
|
5642
5656
|
id: e.string(),
|
|
5643
5657
|
created_at: e.string(),
|
|
5644
5658
|
updated_at: e.string()
|
|
5645
|
-
}).extend(
|
|
5646
|
-
var
|
|
5659
|
+
}).extend(Qi.shape);
|
|
5660
|
+
var $i = e.object({
|
|
5647
5661
|
enabled: e.boolean().optional(),
|
|
5648
5662
|
shields: e.array(e.string()).optional(),
|
|
5649
5663
|
admin_notification_frequency: e.array(e.string()).optional(),
|
|
@@ -5652,13 +5666,13 @@ var Yi = e.object({
|
|
|
5652
5666
|
"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
|
|
5653
5667
|
"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
|
|
5654
5668
|
}).optional()
|
|
5655
|
-
}),
|
|
5669
|
+
}), ea = e.object({
|
|
5656
5670
|
enabled: e.boolean().optional(),
|
|
5657
5671
|
shields: e.array(e.string()).optional(),
|
|
5658
5672
|
allowlist: e.array(e.string()).optional(),
|
|
5659
5673
|
mode: e.string().optional(),
|
|
5660
5674
|
max_attempts: e.number().optional()
|
|
5661
|
-
}),
|
|
5675
|
+
}), ta = e.object({
|
|
5662
5676
|
enabled: e.boolean().optional(),
|
|
5663
5677
|
shields: e.array(e.string()).optional(),
|
|
5664
5678
|
allowlist: e.array(e.string()).optional(),
|
|
@@ -5672,10 +5686,10 @@ var Yi = e.object({
|
|
|
5672
5686
|
rate: e.number().optional()
|
|
5673
5687
|
}).optional()
|
|
5674
5688
|
}).optional()
|
|
5675
|
-
}),
|
|
5676
|
-
breached_password_detection:
|
|
5677
|
-
brute_force_protection:
|
|
5678
|
-
suspicious_ip_throttling:
|
|
5689
|
+
}), na = e.object({
|
|
5690
|
+
breached_password_detection: $i.optional(),
|
|
5691
|
+
brute_force_protection: ea.optional(),
|
|
5692
|
+
suspicious_ip_throttling: ta.optional()
|
|
5679
5693
|
});
|
|
5680
5694
|
e.object({
|
|
5681
5695
|
id: e.string().optional(),
|
|
@@ -5688,14 +5702,14 @@ e.object({
|
|
|
5688
5702
|
created_at: e.string(),
|
|
5689
5703
|
updated_at: e.string()
|
|
5690
5704
|
});
|
|
5691
|
-
var
|
|
5705
|
+
var ra = e.object({
|
|
5692
5706
|
initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
|
|
5693
5707
|
initial_ip: e.string().describe("First IP address associated with this session"),
|
|
5694
5708
|
initial_asn: e.string().describe("First autonomous system number associated with this session"),
|
|
5695
5709
|
last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
|
|
5696
5710
|
last_ip: e.string().describe("Last IP address from which this user logged in"),
|
|
5697
5711
|
last_asn: e.string().describe("Last autonomous system number from which this user logged in")
|
|
5698
|
-
}),
|
|
5712
|
+
}), ia = e.object({
|
|
5699
5713
|
id: e.string(),
|
|
5700
5714
|
revoked_at: e.string().optional(),
|
|
5701
5715
|
used_at: e.string().optional(),
|
|
@@ -5703,7 +5717,7 @@ var $i = e.object({
|
|
|
5703
5717
|
expires_at: e.string().optional(),
|
|
5704
5718
|
login_session_id: e.string(),
|
|
5705
5719
|
idle_expires_at: e.string().optional(),
|
|
5706
|
-
device:
|
|
5720
|
+
device: ra.describe("Metadata related to the device used in the session"),
|
|
5707
5721
|
clients: e.array(e.string()).describe("List of client details for the session")
|
|
5708
5722
|
});
|
|
5709
5723
|
e.object({
|
|
@@ -5711,7 +5725,7 @@ e.object({
|
|
|
5711
5725
|
updated_at: e.string(),
|
|
5712
5726
|
authenticated_at: e.string(),
|
|
5713
5727
|
last_interaction_at: e.string()
|
|
5714
|
-
}).extend(
|
|
5728
|
+
}).extend(ia.shape), e.object({
|
|
5715
5729
|
kid: e.string().openapi({ description: "The key id of the signing key" }),
|
|
5716
5730
|
tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
|
|
5717
5731
|
cert: e.string().openapi({ description: "The public certificate of the signing key" }),
|
|
@@ -5728,7 +5742,7 @@ e.object({
|
|
|
5728
5742
|
connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
|
|
5729
5743
|
type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
|
|
5730
5744
|
});
|
|
5731
|
-
var
|
|
5745
|
+
var aa = e.object({
|
|
5732
5746
|
id: e.string().optional(),
|
|
5733
5747
|
audience: e.string().optional(),
|
|
5734
5748
|
friendly_name: e.string(),
|
|
@@ -5846,7 +5860,7 @@ var ta = e.object({
|
|
|
5846
5860
|
"shared_planetscale"
|
|
5847
5861
|
]).optional(),
|
|
5848
5862
|
d1_database_id: e.string().max(64).optional(),
|
|
5849
|
-
attack_protection:
|
|
5863
|
+
attack_protection: na.optional(),
|
|
5850
5864
|
mfa: e.object({
|
|
5851
5865
|
policy: e.enum(["never", "always"]).default("never").optional(),
|
|
5852
5866
|
factors: e.object({
|
|
@@ -5877,35 +5891,35 @@ var ta = e.object({
|
|
|
5877
5891
|
e.object({
|
|
5878
5892
|
created_at: e.string().nullable().transform((e) => e ?? ""),
|
|
5879
5893
|
updated_at: e.string().nullable().transform((e) => e ?? "")
|
|
5880
|
-
}).extend(
|
|
5894
|
+
}).extend(aa.shape).extend({
|
|
5881
5895
|
id: e.string(),
|
|
5882
5896
|
is_control_plane: e.boolean().optional()
|
|
5883
5897
|
});
|
|
5884
|
-
var
|
|
5898
|
+
var oa = e.enum([
|
|
5885
5899
|
"provision",
|
|
5886
5900
|
"seed",
|
|
5887
5901
|
"upgrade",
|
|
5888
5902
|
"backup",
|
|
5889
5903
|
"deprovision"
|
|
5890
|
-
]),
|
|
5904
|
+
]), sa = e.enum([
|
|
5891
5905
|
"pending",
|
|
5892
5906
|
"running",
|
|
5893
5907
|
"succeeded",
|
|
5894
5908
|
"failed",
|
|
5895
5909
|
"cancelled"
|
|
5896
|
-
]),
|
|
5910
|
+
]), ca = e.enum(["inline", "cloudflare-workflows"]);
|
|
5897
5911
|
e.object({
|
|
5898
5912
|
tenant_id: e.string().max(255).nullable().default(null),
|
|
5899
5913
|
rollout_id: e.string().max(255).nullable().optional(),
|
|
5900
|
-
kind:
|
|
5901
|
-
engine:
|
|
5914
|
+
kind: oa,
|
|
5915
|
+
engine: ca,
|
|
5902
5916
|
engine_instance_id: e.string().max(100).nullable().optional(),
|
|
5903
5917
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5904
5918
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5905
5919
|
initiated_by: e.string().max(255).nullable().optional()
|
|
5906
5920
|
}).extend({
|
|
5907
5921
|
id: e.string(),
|
|
5908
|
-
status:
|
|
5922
|
+
status: sa,
|
|
5909
5923
|
current_step: e.string().max(255).nullable().optional(),
|
|
5910
5924
|
error: e.string().nullable().optional(),
|
|
5911
5925
|
created_at: e.string(),
|
|
@@ -5920,7 +5934,7 @@ e.object({
|
|
|
5920
5934
|
error: !0,
|
|
5921
5935
|
finished_at: !0
|
|
5922
5936
|
}).partial();
|
|
5923
|
-
var
|
|
5937
|
+
var la = e.enum([
|
|
5924
5938
|
"started",
|
|
5925
5939
|
"succeeded",
|
|
5926
5940
|
"failed",
|
|
@@ -5931,18 +5945,18 @@ var aa = e.enum([
|
|
|
5931
5945
|
e.object({
|
|
5932
5946
|
operation_id: e.string().max(255),
|
|
5933
5947
|
step: e.string().max(255),
|
|
5934
|
-
outcome:
|
|
5948
|
+
outcome: la,
|
|
5935
5949
|
detail: e.record(e.string(), e.unknown()).nullable().optional(),
|
|
5936
5950
|
attempt: e.number().int().min(1).default(1)
|
|
5937
5951
|
}).extend({
|
|
5938
5952
|
id: e.string(),
|
|
5939
5953
|
created_at: e.string()
|
|
5940
5954
|
});
|
|
5941
|
-
var
|
|
5955
|
+
var ua = e.enum([
|
|
5942
5956
|
"upgrade",
|
|
5943
5957
|
"reseed",
|
|
5944
5958
|
"backup"
|
|
5945
|
-
]),
|
|
5959
|
+
]), da = e.enum([
|
|
5946
5960
|
"pending",
|
|
5947
5961
|
"canary",
|
|
5948
5962
|
"rolling",
|
|
@@ -5951,7 +5965,7 @@ var oa = e.enum([
|
|
|
5951
5965
|
"failed"
|
|
5952
5966
|
]);
|
|
5953
5967
|
e.object({
|
|
5954
|
-
kind:
|
|
5968
|
+
kind: ua,
|
|
5955
5969
|
target_worker_version: e.string().max(255).nullable().optional(),
|
|
5956
5970
|
target_database_version: e.string().max(255).nullable().optional(),
|
|
5957
5971
|
wave_size: e.number().int().min(1).default(10),
|
|
@@ -5960,7 +5974,7 @@ e.object({
|
|
|
5960
5974
|
initiated_by: e.string().max(255).nullable().optional()
|
|
5961
5975
|
}).extend({
|
|
5962
5976
|
id: e.string(),
|
|
5963
|
-
status:
|
|
5977
|
+
status: da,
|
|
5964
5978
|
created_at: e.string(),
|
|
5965
5979
|
updated_at: e.string(),
|
|
5966
5980
|
finished_at: e.string().nullable().optional()
|
|
@@ -5982,7 +5996,7 @@ e.object({
|
|
|
5982
5996
|
code: e.string(),
|
|
5983
5997
|
state: e.string().optional()
|
|
5984
5998
|
});
|
|
5985
|
-
var
|
|
5999
|
+
var fa = e.object({
|
|
5986
6000
|
button_border_radius: e.number(),
|
|
5987
6001
|
button_border_weight: e.number(),
|
|
5988
6002
|
buttons_style: e.enum([
|
|
@@ -6000,7 +6014,7 @@ var ca = e.object({
|
|
|
6000
6014
|
show_widget_shadow: e.boolean(),
|
|
6001
6015
|
widget_border_weight: e.number(),
|
|
6002
6016
|
widget_corner_radius: e.number()
|
|
6003
|
-
}),
|
|
6017
|
+
}), pa = e.object({
|
|
6004
6018
|
base_focus_color: e.string(),
|
|
6005
6019
|
base_hover_color: e.string(),
|
|
6006
6020
|
body_text: e.string(),
|
|
@@ -6027,7 +6041,7 @@ var ca = e.object({
|
|
|
6027
6041
|
}), $ = e.object({
|
|
6028
6042
|
bold: e.boolean(),
|
|
6029
6043
|
size: e.number()
|
|
6030
|
-
}),
|
|
6044
|
+
}), ma = e.object({
|
|
6031
6045
|
body_text: $,
|
|
6032
6046
|
buttons_text: $,
|
|
6033
6047
|
font_url: e.string(),
|
|
@@ -6037,7 +6051,7 @@ var ca = e.object({
|
|
|
6037
6051
|
reference_text_size: e.number(),
|
|
6038
6052
|
subtitle: $,
|
|
6039
6053
|
title: $
|
|
6040
|
-
}),
|
|
6054
|
+
}), ha = e.object({
|
|
6041
6055
|
background_color: e.string(),
|
|
6042
6056
|
background_image_url: e.string(),
|
|
6043
6057
|
page_layout: e.enum([
|
|
@@ -6050,7 +6064,7 @@ var ca = e.object({
|
|
|
6050
6064
|
"chip",
|
|
6051
6065
|
"none"
|
|
6052
6066
|
]).optional()
|
|
6053
|
-
}),
|
|
6067
|
+
}), ga = e.object({
|
|
6054
6068
|
header_text_alignment: e.enum([
|
|
6055
6069
|
"center",
|
|
6056
6070
|
"left",
|
|
@@ -6067,12 +6081,12 @@ var ca = e.object({
|
|
|
6067
6081
|
social_buttons_layout: e.enum(["bottom", "top"])
|
|
6068
6082
|
});
|
|
6069
6083
|
e.object({
|
|
6070
|
-
borders:
|
|
6071
|
-
colors:
|
|
6084
|
+
borders: fa,
|
|
6085
|
+
colors: pa,
|
|
6072
6086
|
displayName: e.string(),
|
|
6073
|
-
fonts:
|
|
6074
|
-
page_background:
|
|
6075
|
-
widget:
|
|
6087
|
+
fonts: ma,
|
|
6088
|
+
page_background: ha,
|
|
6089
|
+
widget: ga
|
|
6076
6090
|
}).extend({ themeId: e.string() }), e.object({
|
|
6077
6091
|
universal_login_experience: e.enum(["new", "classic"]).default("new"),
|
|
6078
6092
|
identifier_first: e.boolean().default(!0),
|
|
@@ -6080,44 +6094,44 @@ e.object({
|
|
|
6080
6094
|
show_last_used_connection: e.boolean().default(!1),
|
|
6081
6095
|
webauthn_platform_first_factor: e.boolean()
|
|
6082
6096
|
});
|
|
6083
|
-
var
|
|
6097
|
+
var _a = e.object({
|
|
6084
6098
|
hosts: e.array(e.string()).optional(),
|
|
6085
6099
|
methods: e.array(e.string()).optional(),
|
|
6086
6100
|
path: e.string().default("/*"),
|
|
6087
6101
|
headers: e.record(e.string(), e.string()).optional(),
|
|
6088
6102
|
query: e.record(e.string(), e.string()).optional()
|
|
6089
|
-
}),
|
|
6103
|
+
}), va = e.object({
|
|
6090
6104
|
type: e.string(),
|
|
6091
6105
|
options: e.record(e.string(), e.unknown()).default({})
|
|
6092
|
-
}),
|
|
6106
|
+
}), ya = e.object({
|
|
6093
6107
|
id: e.string().optional(),
|
|
6094
6108
|
custom_domain_id: e.string(),
|
|
6095
6109
|
priority: e.number().int().default(100),
|
|
6096
|
-
match:
|
|
6097
|
-
handlers: e.array(
|
|
6110
|
+
match: _a,
|
|
6111
|
+
handlers: e.array(va).min(1)
|
|
6098
6112
|
});
|
|
6099
|
-
|
|
6113
|
+
ya.extend({
|
|
6100
6114
|
id: e.string(),
|
|
6101
6115
|
tenant_id: e.string(),
|
|
6102
6116
|
created_at: e.string(),
|
|
6103
6117
|
updated_at: e.string()
|
|
6104
|
-
}),
|
|
6118
|
+
}), ya.partial().omit({
|
|
6105
6119
|
id: !0,
|
|
6106
6120
|
custom_domain_id: !0
|
|
6107
6121
|
});
|
|
6108
|
-
var
|
|
6122
|
+
var ba = e.object({
|
|
6109
6123
|
scim: e.string(),
|
|
6110
6124
|
auth0: e.string()
|
|
6111
|
-
}),
|
|
6125
|
+
}), xa = e.object({
|
|
6112
6126
|
connection_id: e.string(),
|
|
6113
6127
|
user_id_attribute: e.string().default("externalId"),
|
|
6114
|
-
mapping: e.array(
|
|
6128
|
+
mapping: e.array(ba).default([])
|
|
6115
6129
|
});
|
|
6116
6130
|
e.object({
|
|
6117
6131
|
created_at: e.string(),
|
|
6118
6132
|
updated_at: e.string()
|
|
6119
|
-
}).extend(
|
|
6120
|
-
var
|
|
6133
|
+
}).extend(xa.shape);
|
|
6134
|
+
var Sa = e.object({
|
|
6121
6135
|
token_id: e.string(),
|
|
6122
6136
|
connection_id: e.string(),
|
|
6123
6137
|
token_hash: e.string(),
|
|
@@ -6127,20 +6141,20 @@ var va = e.object({
|
|
|
6127
6141
|
e.object({
|
|
6128
6142
|
created_at: e.string(),
|
|
6129
6143
|
last_used_at: e.string().optional()
|
|
6130
|
-
}).extend(
|
|
6131
|
-
var
|
|
6144
|
+
}).extend(Sa.shape);
|
|
6145
|
+
var Ca = e.object({
|
|
6132
6146
|
connection_id: e.string(),
|
|
6133
6147
|
external_id: e.string(),
|
|
6134
6148
|
user_id: e.string()
|
|
6135
6149
|
});
|
|
6136
|
-
e.object({ created_at: e.string() }).extend(
|
|
6150
|
+
e.object({ created_at: e.string() }).extend(Ca.shape), e.object({
|
|
6137
6151
|
name: e.string(),
|
|
6138
6152
|
enabled: e.boolean().optional().default(!0),
|
|
6139
6153
|
default_from_address: e.string().optional(),
|
|
6140
6154
|
credentials: e.record(e.string(), e.unknown()),
|
|
6141
6155
|
settings: e.object({}).optional()
|
|
6142
6156
|
});
|
|
6143
|
-
var
|
|
6157
|
+
var wa = e.enum([
|
|
6144
6158
|
"verify_email",
|
|
6145
6159
|
"verify_email_by_code",
|
|
6146
6160
|
"reset_email",
|
|
@@ -6155,7 +6169,7 @@ var ba = e.enum([
|
|
|
6155
6169
|
"user_invitation"
|
|
6156
6170
|
]);
|
|
6157
6171
|
e.object({
|
|
6158
|
-
template:
|
|
6172
|
+
template: wa,
|
|
6159
6173
|
body: e.string(),
|
|
6160
6174
|
from: e.string(),
|
|
6161
6175
|
subject: e.string(),
|
|
@@ -6172,7 +6186,7 @@ e.object({
|
|
|
6172
6186
|
expires_at: e.string().optional(),
|
|
6173
6187
|
idle_expires_at: e.string().optional(),
|
|
6174
6188
|
last_exchanged_at: e.string().optional(),
|
|
6175
|
-
device:
|
|
6189
|
+
device: ra,
|
|
6176
6190
|
resource_servers: e.array(e.object({
|
|
6177
6191
|
audience: e.string(),
|
|
6178
6192
|
scopes: e.string()
|
|
@@ -6193,10 +6207,10 @@ e.object({
|
|
|
6193
6207
|
name: e.string(),
|
|
6194
6208
|
options: e.object({})
|
|
6195
6209
|
});
|
|
6196
|
-
var
|
|
6210
|
+
var Ta = e.object({
|
|
6197
6211
|
value: e.string(),
|
|
6198
6212
|
description: e.string().optional()
|
|
6199
|
-
}),
|
|
6213
|
+
}), Ea = e.object({
|
|
6200
6214
|
token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
|
|
6201
6215
|
enforce_policies: e.boolean().optional(),
|
|
6202
6216
|
allow_skipping_userinfo: e.boolean().optional(),
|
|
@@ -6204,11 +6218,11 @@ var xa = e.object({
|
|
|
6204
6218
|
persist_client_authorization: e.boolean().optional(),
|
|
6205
6219
|
enable_introspection_endpoint: e.boolean().optional(),
|
|
6206
6220
|
mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
|
|
6207
|
-
}),
|
|
6221
|
+
}), Da = e.object({
|
|
6208
6222
|
id: e.string().optional(),
|
|
6209
6223
|
name: e.string(),
|
|
6210
6224
|
identifier: e.string(),
|
|
6211
|
-
scopes: e.array(
|
|
6225
|
+
scopes: e.array(Ta).optional(),
|
|
6212
6226
|
signing_alg: e.string().optional(),
|
|
6213
6227
|
signing_secret: e.string().optional(),
|
|
6214
6228
|
token_lifetime: e.number().default(86400),
|
|
@@ -6216,20 +6230,20 @@ var xa = e.object({
|
|
|
6216
6230
|
skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
|
|
6217
6231
|
allow_offline_access: e.boolean().optional(),
|
|
6218
6232
|
verificationKey: e.string().optional(),
|
|
6219
|
-
options:
|
|
6233
|
+
options: Ea.optional(),
|
|
6220
6234
|
is_system: e.boolean().optional(),
|
|
6221
6235
|
metadata: e.record(e.string(), e.any()).optional()
|
|
6222
6236
|
}).extend({
|
|
6223
6237
|
created_at: e.string().optional(),
|
|
6224
6238
|
updated_at: e.string().optional()
|
|
6225
6239
|
});
|
|
6226
|
-
e.array(
|
|
6227
|
-
var
|
|
6240
|
+
e.array(Da);
|
|
6241
|
+
var Oa = e.object({
|
|
6228
6242
|
role_id: e.string(),
|
|
6229
6243
|
resource_server_identifier: e.string(),
|
|
6230
6244
|
permission_name: e.string()
|
|
6231
6245
|
}).extend({ created_at: e.string() });
|
|
6232
|
-
e.array(
|
|
6246
|
+
e.array(Oa), e.object({
|
|
6233
6247
|
user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
|
|
6234
6248
|
clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
|
|
6235
6249
|
audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
|
|
@@ -6242,7 +6256,7 @@ e.array(wa), e.object({
|
|
|
6242
6256
|
failed_logins: e.array(e.string()).optional(),
|
|
6243
6257
|
last_password_reset: e.string().optional()
|
|
6244
6258
|
});
|
|
6245
|
-
var
|
|
6259
|
+
var ka = e.object({
|
|
6246
6260
|
user_id: e.string(),
|
|
6247
6261
|
resource_server_identifier: e.string(),
|
|
6248
6262
|
permission_name: e.string(),
|
|
@@ -6251,8 +6265,8 @@ var Ta = e.object({
|
|
|
6251
6265
|
tenant_id: e.string(),
|
|
6252
6266
|
created_at: e.string().optional()
|
|
6253
6267
|
});
|
|
6254
|
-
e.array(
|
|
6255
|
-
var
|
|
6268
|
+
e.array(ka);
|
|
6269
|
+
var Aa = e.object({
|
|
6256
6270
|
user_id: e.string(),
|
|
6257
6271
|
resource_server_identifier: e.string(),
|
|
6258
6272
|
resource_server_name: e.string(),
|
|
@@ -6261,8 +6275,8 @@ var Ea = e.object({
|
|
|
6261
6275
|
created_at: e.string().optional(),
|
|
6262
6276
|
organization_id: e.string().optional()
|
|
6263
6277
|
});
|
|
6264
|
-
e.array(
|
|
6265
|
-
var
|
|
6278
|
+
e.array(Aa);
|
|
6279
|
+
var ja = e.object({
|
|
6266
6280
|
user_id: e.string(),
|
|
6267
6281
|
role_id: e.string(),
|
|
6268
6282
|
organization_id: e.string().optional()
|
|
@@ -6270,8 +6284,8 @@ var Da = e.object({
|
|
|
6270
6284
|
tenant_id: e.string(),
|
|
6271
6285
|
created_at: e.string().optional()
|
|
6272
6286
|
});
|
|
6273
|
-
e.array(
|
|
6274
|
-
var
|
|
6287
|
+
e.array(ja);
|
|
6288
|
+
var Ma = e.object({
|
|
6275
6289
|
id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
|
|
6276
6290
|
name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
|
|
6277
6291
|
description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
|
|
@@ -6282,19 +6296,19 @@ var Oa = e.object({
|
|
|
6282
6296
|
created_at: e.string().optional(),
|
|
6283
6297
|
updated_at: e.string().optional()
|
|
6284
6298
|
});
|
|
6285
|
-
e.array(
|
|
6286
|
-
var
|
|
6299
|
+
e.array(Ma);
|
|
6300
|
+
var Na = e.object({
|
|
6287
6301
|
logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
|
|
6288
6302
|
colors: e.object({
|
|
6289
6303
|
primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
|
|
6290
6304
|
page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
|
|
6291
6305
|
}).optional()
|
|
6292
|
-
}).optional(),
|
|
6306
|
+
}).optional(), Pa = e.object({
|
|
6293
6307
|
connection_id: e.string().openapi({ description: "ID of the connection" }),
|
|
6294
6308
|
assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
|
|
6295
6309
|
show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
|
|
6296
6310
|
is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
|
|
6297
|
-
}),
|
|
6311
|
+
}), Fa = e.object({ client_credentials: e.object({
|
|
6298
6312
|
enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
|
|
6299
6313
|
per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
|
|
6300
6314
|
per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
|
|
@@ -6303,15 +6317,15 @@ e.object({
|
|
|
6303
6317
|
id: e.string().optional(),
|
|
6304
6318
|
name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
|
|
6305
6319
|
display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
|
|
6306
|
-
branding:
|
|
6320
|
+
branding: Na,
|
|
6307
6321
|
metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
|
|
6308
|
-
enabled_connections: e.array(
|
|
6309
|
-
token_quota:
|
|
6322
|
+
enabled_connections: e.array(Pa).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
|
|
6323
|
+
token_quota: Fa
|
|
6310
6324
|
}).extend(G.shape).extend({
|
|
6311
6325
|
id: e.string(),
|
|
6312
6326
|
name: e.string().min(1).openapi({ description: "The name of the organization" })
|
|
6313
6327
|
});
|
|
6314
|
-
var
|
|
6328
|
+
var Ia = e.object({
|
|
6315
6329
|
connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
|
|
6316
6330
|
assign_membership_on_login: e.boolean().optional().default(!1),
|
|
6317
6331
|
show_as_button: e.boolean().optional().default(!0),
|
|
@@ -6324,7 +6338,7 @@ var Ma = e.object({
|
|
|
6324
6338
|
created_at: e.string().optional(),
|
|
6325
6339
|
updated_at: e.string().optional()
|
|
6326
6340
|
});
|
|
6327
|
-
e.array(
|
|
6341
|
+
e.array(Ia), e.object({
|
|
6328
6342
|
user_id: e.string().openapi({ description: "ID of the user" }),
|
|
6329
6343
|
organization_id: e.string().openapi({ description: "ID of the organization" })
|
|
6330
6344
|
}).extend(G.shape).extend({ id: e.string() }), e.object({
|
|
@@ -6463,22 +6477,33 @@ e.array(Ma), e.object({
|
|
|
6463
6477
|
"passwordless",
|
|
6464
6478
|
"enterprise"
|
|
6465
6479
|
]);
|
|
6466
|
-
var
|
|
6480
|
+
var La = e.object({
|
|
6481
|
+
cohort: e.string(),
|
|
6482
|
+
sessions: e.number(),
|
|
6483
|
+
active: e.array(e.number())
|
|
6484
|
+
});
|
|
6485
|
+
e.object({
|
|
6486
|
+
interval: e.literal("week"),
|
|
6487
|
+
from: e.string(),
|
|
6488
|
+
to: e.string(),
|
|
6489
|
+
cohorts: e.array(La)
|
|
6490
|
+
});
|
|
6491
|
+
var Ra = e.object({
|
|
6467
6492
|
name: e.string(),
|
|
6468
6493
|
type: e.string()
|
|
6469
|
-
}),
|
|
6494
|
+
}), za = e.object({
|
|
6470
6495
|
elapsed: e.number(),
|
|
6471
6496
|
rows_read: e.number().optional(),
|
|
6472
6497
|
bytes_read: e.number().optional()
|
|
6473
6498
|
});
|
|
6474
6499
|
e.object({
|
|
6475
|
-
meta: e.array(
|
|
6500
|
+
meta: e.array(Ra),
|
|
6476
6501
|
data: e.array(e.record(e.string(), e.any())),
|
|
6477
6502
|
rows: e.number(),
|
|
6478
6503
|
rows_before_limit_at_least: e.number().optional(),
|
|
6479
|
-
statistics:
|
|
6504
|
+
statistics: za.optional()
|
|
6480
6505
|
});
|
|
6481
|
-
var
|
|
6506
|
+
var Ba = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Va = e.record(e.string(), e.record(e.string(), e.string())).openapi({
|
|
6482
6507
|
type: "object",
|
|
6483
6508
|
additionalProperties: {
|
|
6484
6509
|
type: "object",
|
|
@@ -6486,11 +6511,11 @@ var Fa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
|
|
|
6486
6511
|
}
|
|
6487
6512
|
});
|
|
6488
6513
|
e.object({
|
|
6489
|
-
prompt:
|
|
6514
|
+
prompt: Ba,
|
|
6490
6515
|
language: e.string(),
|
|
6491
|
-
custom_text:
|
|
6516
|
+
custom_text: Va
|
|
6492
6517
|
});
|
|
6493
|
-
var
|
|
6518
|
+
var Ha = e.enum([
|
|
6494
6519
|
"phone",
|
|
6495
6520
|
"totp",
|
|
6496
6521
|
"email",
|
|
@@ -6498,9 +6523,9 @@ var La = e.enum([
|
|
|
6498
6523
|
"webauthn-roaming",
|
|
6499
6524
|
"webauthn-platform",
|
|
6500
6525
|
"passkey"
|
|
6501
|
-
]),
|
|
6526
|
+
]), Ua = e.object({
|
|
6502
6527
|
user_id: e.string(),
|
|
6503
|
-
type:
|
|
6528
|
+
type: Ha,
|
|
6504
6529
|
phone_number: e.string().optional(),
|
|
6505
6530
|
totp_secret: e.string().optional(),
|
|
6506
6531
|
credential_id: e.string().optional(),
|
|
@@ -6511,7 +6536,7 @@ var La = e.enum([
|
|
|
6511
6536
|
friendly_name: e.string().optional(),
|
|
6512
6537
|
confirmed: e.boolean().default(!1)
|
|
6513
6538
|
});
|
|
6514
|
-
function
|
|
6539
|
+
function Wa(t, n) {
|
|
6515
6540
|
t.type === "phone" && !t.phone_number && n.addIssue({
|
|
6516
6541
|
code: e.ZodIssueCode.custom,
|
|
6517
6542
|
message: "phone_number is required when type is 'phone'",
|
|
@@ -6534,51 +6559,51 @@ function za(t, n) {
|
|
|
6534
6559
|
path: ["public_key"]
|
|
6535
6560
|
}));
|
|
6536
6561
|
}
|
|
6537
|
-
|
|
6562
|
+
Ua.superRefine(Wa), Ua.extend({
|
|
6538
6563
|
id: e.string(),
|
|
6539
6564
|
created_at: e.string(),
|
|
6540
6565
|
updated_at: e.string()
|
|
6541
|
-
}).superRefine(
|
|
6566
|
+
}).superRefine(Wa), e.object({
|
|
6542
6567
|
id: e.string().optional(),
|
|
6543
6568
|
created_at: e.string().datetime({ offset: !0 }).optional(),
|
|
6544
6569
|
updated_at: e.string().datetime({ offset: !0 }).optional()
|
|
6545
6570
|
});
|
|
6546
|
-
function
|
|
6571
|
+
function Ga(e) {
|
|
6547
6572
|
let t = atob(e), n = new Uint8Array(t.length);
|
|
6548
6573
|
for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
|
|
6549
6574
|
return n;
|
|
6550
6575
|
}
|
|
6551
6576
|
//#endregion
|
|
6552
6577
|
//#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
|
|
6553
|
-
var
|
|
6578
|
+
var Ka = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", qa = (e = 21) => {
|
|
6554
6579
|
let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
|
|
6555
|
-
for (; e--;) t +=
|
|
6580
|
+
for (; e--;) t += Ka[n[e] & 63];
|
|
6556
6581
|
return t;
|
|
6557
6582
|
};
|
|
6558
6583
|
//#endregion
|
|
6559
6584
|
//#region src/helpers.ts
|
|
6560
|
-
async function
|
|
6585
|
+
async function Ja(e) {
|
|
6561
6586
|
let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
|
|
6562
6587
|
return new Uint8Array(await new Response(r).arrayBuffer());
|
|
6563
6588
|
}
|
|
6564
|
-
async function
|
|
6565
|
-
let t =
|
|
6589
|
+
async function Ya(e) {
|
|
6590
|
+
let t = Ga(e.replace(/ /g, "+"));
|
|
6566
6591
|
try {
|
|
6567
|
-
let e = await
|
|
6592
|
+
let e = await Ja(t);
|
|
6568
6593
|
return new TextDecoder().decode(e);
|
|
6569
6594
|
} catch (e) {
|
|
6570
6595
|
return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
|
|
6571
6596
|
}
|
|
6572
6597
|
}
|
|
6573
|
-
async function
|
|
6574
|
-
let t = await
|
|
6598
|
+
async function Xa(e) {
|
|
6599
|
+
let t = await Ya(e), n = new en({
|
|
6575
6600
|
attributeNamePrefix: "@_",
|
|
6576
6601
|
alwaysCreateTextNode: !0,
|
|
6577
6602
|
ignoreAttributes: !1
|
|
6578
6603
|
}).parse(t);
|
|
6579
6604
|
return r.parse(n);
|
|
6580
6605
|
}
|
|
6581
|
-
function
|
|
6606
|
+
function Za(e) {
|
|
6582
6607
|
let t = e.certificates.map((e) => ({
|
|
6583
6608
|
"@_use": "signing",
|
|
6584
6609
|
KeyInfo: {
|
|
@@ -6652,8 +6677,8 @@ function Ka(e) {
|
|
|
6652
6677
|
attributeNamePrefix: "@_"
|
|
6653
6678
|
}).build(n);
|
|
6654
6679
|
}
|
|
6655
|
-
async function
|
|
6656
|
-
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${
|
|
6680
|
+
async function Qa(e, t) {
|
|
6681
|
+
let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${qa()}`, s = e.assertionId || `_${qa()}`, c = [{
|
|
6657
6682
|
"samlp:Response": [
|
|
6658
6683
|
{ "saml:Issuer": [{ "#text": e.issuer }] },
|
|
6659
6684
|
{ "samlp:Status": [{
|
|
@@ -6834,7 +6859,7 @@ async function qa(e, t) {
|
|
|
6834
6859
|
}
|
|
6835
6860
|
//#endregion
|
|
6836
6861
|
//#region src/signers/local.ts
|
|
6837
|
-
var
|
|
6862
|
+
var $a = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", eo = "http://www.w3.org/2001/04/xmlenc#sha256", to = "http://www.w3.org/2001/10/xml-exc-c14n#", no = class {
|
|
6838
6863
|
async signSAML(e, t, n) {
|
|
6839
6864
|
try {
|
|
6840
6865
|
let r = await import("xml-crypto"), i = r.SignedXml || r.default?.SignedXml;
|
|
@@ -6843,11 +6868,11 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6843
6868
|
privateKey: t,
|
|
6844
6869
|
publicCert: n
|
|
6845
6870
|
});
|
|
6846
|
-
a.canonicalizationAlgorithm =
|
|
6871
|
+
a.canonicalizationAlgorithm = to, a.addReference({
|
|
6847
6872
|
xpath: "(/*[local-name()='Response']/*[local-name()='Assertion'])[1]",
|
|
6848
|
-
digestAlgorithm:
|
|
6849
|
-
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature",
|
|
6850
|
-
}), a.signatureAlgorithm =
|
|
6873
|
+
digestAlgorithm: eo,
|
|
6874
|
+
transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", to]
|
|
6875
|
+
}), a.signatureAlgorithm = $a;
|
|
6851
6876
|
let o = n.replace(/-----BEGIN CERTIFICATE-----|-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
|
|
6852
6877
|
return a.keyInfoProvider = { getKeyInfo: () => `<X509Data><X509Certificate>${o}</X509Certificate></X509Data>` }, a.computeSignature(e, { location: {
|
|
6853
6878
|
reference: "/*[local-name()='Response']/*[local-name()='Assertion']/*[local-name()='Issuer']",
|
|
@@ -6857,7 +6882,7 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6857
6882
|
throw Error(`Failed to sign SAML locally. Make sure xml-crypto is installed. Error: ${e}`);
|
|
6858
6883
|
}
|
|
6859
6884
|
}
|
|
6860
|
-
},
|
|
6885
|
+
}, ro = class {
|
|
6861
6886
|
signUrl;
|
|
6862
6887
|
constructor(e) {
|
|
6863
6888
|
this.signUrl = e;
|
|
@@ -6877,4 +6902,4 @@ var Ja = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", Ya = "http://www.w
|
|
|
6877
6902
|
}
|
|
6878
6903
|
};
|
|
6879
6904
|
//#endregion
|
|
6880
|
-
export {
|
|
6905
|
+
export { ro as HttpSamlSigner, no as LocalSamlSigner, Za as createSamlMetadata, Qa as createSamlResponse, s as dsSignatureSchema, Ya as inflateDecompress, Ja as inflateRaw, Xa as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
|