@axium/server 0.25.0 → 0.26.1

package/dist/acl.js

@@ -1,7 +1,7 @@
+import * as io from '@axium/core/node/io';
 import { sql } from 'kysely';
 import { jsonArrayFrom } from 'kysely/helpers/postgres';
 import * as db from './database.js';
-import * as io from './io.js';
 const accessControllableTypes = {
     userId: { type: 'uuid', required: true },
     publicPermission: { type: 'int4', required: true, hasDefault: true },

package/dist/api/admin.js

@@ -1,15 +1,15 @@
 import { AuditFilter, Severity } from '@axium/core';
+import { plugins } from '@axium/core/plugins';
 import { jsonArrayFrom, jsonObjectFrom } from 'kysely/helpers/postgres';
 import { omit } from 'utilium';
 import * as z from 'zod';
-import { audit, getEvents } from '../audit.js';
+import pkg from '../../package.json' with { type: 'json' };
+import { audit, events, getEvents } from '../audit.js';
 import { getSessionAndUser } from '../auth.js';
 import { config } from '../config.js';
 import { count, database as db } from '../database.js';
 import { error, getToken, withError } from '../requests.js';
 import { addRoute } from '../routes.js';
-import { plugins } from '../plugins.js';
-import pkg from '../../package.json' with { type: 'json' };
 async function assertAdmin(route, req) {
     const token = getToken(req);
     if (!token)
@@ -99,6 +99,23 @@ addRoute({
 });
 addRoute({
     path: '/api/admin/audit/events',
+    async OPTIONS(req) {
+        await assertAdmin(this, req);
+        if (config.audit.allow_raw)
+            return false;
+        const tags = new Set(), source = new Set(), name = [];
+        for (const event of events.values()) {
+            for (const tag of event.tags)
+                tags.add(tag);
+            source.add(event.source);
+            name.push(event.name);
+        }
+        return {
+            tags: Array.from(tags),
+            source: Array.from(source),
+            name: name,
+        };
+    },
     async GET(req) {
         await assertAdmin(this, req);
         const filter = { severity: Severity.Info };

package/dist/api/metadata.js

@@ -1,9 +1,9 @@
+import { apps } from '@axium/core';
+import { plugins } from '@axium/core/plugins';
 import { requestMethods } from '@axium/core/requests';
 import pkg from '../../package.json' with { type: 'json' };
-import { apps } from '../apps.js';
 import { getSessionAndUser } from '../auth.js';
 import { config } from '../config.js';
-import { plugins } from '../plugins.js';
 import { error, getToken } from '../requests.js';
 import { addRoute, routes } from '../routes.js';
 addRoute({
@@ -39,7 +39,7 @@ addRoute({
 });
 addRoute({
     path: '/api/apps',
-    async GET() {
+    GET() {
         const result = [];
         for (const app of apps.values()) {
             if (config.apps.disabled.includes(app.id))

package/dist/api/users.js

@@ -125,10 +125,13 @@ addRoute({
         switch (type) {
             case 'login':
                 return await createSessionData(userId);
+            case 'client_login':
+                /** @todo tag in DB so users can manage easier */
+                return await createSessionData(userId, { noCookie: true });
             case 'action':
                 if ((Date.now() - passkey.createdAt.getTime()) / 60_000 < config.auth.passkey_probation)
                     error(403, 'You can not authorize sensitive actions with a newly created passkey');
-                return await createSessionData(userId, true);
+                return await createSessionData(userId, { elevated: true });
         }
     },
 });

package/dist/audit.d.ts

@@ -46,6 +46,7 @@ export interface AuditEventConfig {
     extra?: z.ZodObject;
     noAutoSuspend?: boolean;
 }
+export declare const events: Map<keyof $EventTypes, AuditEventConfig>;
 export declare function addEvent(init: AuditEventConfigInit): void;
 export declare function audit<T extends EventName>(eventName: T, userId?: string, extra?: EventExtra<T>): Promise<void>;
 export declare function getEvents(filter: AuditFilter): SelectQueryBuilder<Schema, 'audit_log', AuditEvent>;

package/dist/audit.js

@@ -4,7 +4,7 @@ import { capitalize, omit } from 'utilium';
 import * as z from 'zod';
 import config from './config.js';
 import { database } from './database.js';
-import * as io from './io.js';
+import * as io from '@axium/core/node/io';
 const severityFormat = {
     [Severity.Emergency]: ['bgRedBright', 'white', 'underline'],
     [Severity.Alert]: ['bgRedBright', 'white'],
@@ -32,7 +32,7 @@ export async function audit_raw(event) {
     const result = await database.insertInto('audit_log').values(event).returningAll().executeTakeFirstOrThrow();
     output(result);
 }
-const events = new Map();
+export const events = new Map();
 export function addEvent(init) {
     if (events.has(init.name))
         throw io.error(`Can not register multiple events with the same name ("${init.name}")`);
@@ -52,7 +52,7 @@ export async function audit(eventName, userId, extra) {
         if (cfg.extra)
             extra = cfg.extra.parse(extra);
     }
-    catch (e) {
+    catch {
         io.error('Audit event has invalid extra data: ' + eventName);
         return;
     }