@bananacool467/authtics-host 0.0.1-beta.8 → 0.0.1-beta.9

package/README.md

@@ -1,8 +1,10 @@
 # Authtics Host
 
-Version 0.0.1-beta.8
+Version 0.0.1-beta.9
 License: MIT
 
+**(UPDATE (Security Update): Now versions, 0.0.1-beta.9 and over now requires DAT (Developer Access Token) restriction to access remote controls such as: Restarting and Shutting Down)**
+
 **(NOTE: This version is in BETA, bugs are expected)**
 
 Authtics Host is a framework inspired by Next.js. Authtics Host supports SSR (Server-Side Rendering) and uses esbuild.

package/dist/cli.js

@@ -110,6 +110,25 @@ export default class App {
     server;
     constructor() {
         this.server = start();
+        this.post('/__authtics_host_apis__/get-dat-restriction-missing', async (req, res) => {
+            const reqBody = (await getJsonBody(req));
+            let datMatched = false;
+            let datRestrictedEnv = false;
+            if (config_.dat && config_.dat == reqBody.dat)
+                datMatched = true;
+            if (config_.dat == undefined)
+                datMatched = true;
+            if (config_.dat && Array.isArray(config_.dat) && config_.dat.includes(reqBody.dat))
+                datMatched = true;
+            if (datMatched) {
+                if (config_.dat !== undefined)
+                    datRestrictedEnv = true;
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({
+                    enabled: datRestrictedEnv
+                }));
+            }
+        });
         this.post('/__authtics_host_apis__/get-dat-matching', async (req, res) => {
             const reqBody = (await getJsonBody(req));
             let datMatched = false;
@@ -180,8 +199,6 @@ export default class App {
             let datMatched = false;
             if (config_.dat && config_.dat == reqBody.dat)
                 datMatched = true;
-            if (config_.dat == undefined)
-                datMatched = true;
             if (config_.dat && Array.isArray(config_.dat) && config_.dat.includes(reqBody.dat))
                 datMatched = true;
             if (datMatched) {
@@ -203,8 +220,6 @@ export default class App {
             let datMatched = false;
             if (config_.dat && config_.dat == reqBody.dat)
                 datMatched = true;
-            if (config_.dat == undefined)
-                datMatched = true;
             if (config_.dat && Array.isArray(config_.dat) && config_.dat.includes(reqBody.dat))
                 datMatched = true;
             if (datMatched) {

package/dist/devPanel.js

@@ -138,14 +138,14 @@ function installConsoleInterceptor() {
         };
     });
 }
-function PanelButton({ onClick, onClick2, children, style, fullWidth }) {
+function PanelButton({ onClick, onClick2, children, style, fullWidth, disabled }) {
     const [hovered, setHovered] = useState(false);
     const [pressed, setPressed] = useState(false);
     return (_jsx("div", { onClick: (e) => {
-            if (onClick) {
+            if (onClick && !disabled) {
                 onClick();
             }
-            else if (onClick2) {
+            else if (onClick2 && !disabled) {
                 onClick2(e);
             }
         }, onMouseEnter: () => setHovered(true), onMouseLeave: () => { setHovered(false); setPressed(false); }, onMouseDown: () => setPressed(true), onMouseUp: () => setPressed(false), style: {
@@ -213,6 +213,7 @@ export default function DevPanel() {
     const frames = useRef(0);
     const consoleScrollRef = useRef(null);
     const [isAtBottom, setIsAtBottom] = useState(true);
+    const [datRestrictionMissing, setDatRestrictionMissing] = useState(true);
     const [pos, setPos] = React.useState({ x: 20, y: 20 });
     const [dragging, setDragging] = React.useState(false);
     const offset = React.useRef({ x: 0, y: 0 });
@@ -489,6 +490,16 @@ useEffect(() => {
                 setDatMatch(data.isMatching);
                 if (!data.isMatching) {
                     doc?.getElementById('authtics-dev-panel-root')?.remove();
+                    return;
+                }
+                const resp2 = await fetch('/__authtics_host_apis__/get-dat-restriction-missing', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ dat: localStorage.getItem('dat') })
+                });
+                if (resp2.status === 200) {
+                    const data = await resp2.json();
+                    setDatRestrictionMissing(!data.enabled);
                 }
             }
         };
@@ -671,17 +682,6 @@ useEffect(() => {
     }, []);
     // Chart tick every 2 seconds — snapshot pending bytes then reset
     useEffect(() => {
-        /*let nE;
-        const navigationEntries = performance.getEntriesByType("navigation");
-      if (navigationEntries.length > 0) {
-        const navigationEntry = navigationEntries[0] as PerformanceNavigationTiming;
-        nE = navigationEntry;
-      }
-        let statusCode = 404;
-        if (nE instanceof PerformanceNavigationTiming) {
-          statusCode = nE.responseStatus;
-        }
-        setStatus(statusCode);*/
         const interval = setInterval(() => {
             const s = pendingSent.current;
             const r = pendingReceived.current;
@@ -1215,7 +1215,17 @@ useEffect(() => {
                                                         gap: '6px',
                                                         color: '#fff',
                                                         flexDirection: 'row',
-                                                    }, children: [_jsx(CircleX, { size: 12 }), "Invalid Developer Access Token (DAT)"] }) })) : (_jsx(_Fragment, {})), _jsx(PanelButton, { onClick: () => { restart(); }, fullWidth: true, style: { color: '#fff', justifyContent: 'center', height: '32px', background: '#ba4e4e' }, children: _jsx("span", { style: { display: 'flex', alignItems: 'center', gap: '6px', textAlign: 'center' }, children: "Restart App" }) }), _jsx(PanelButton, { onClick: () => { shutDown(); }, fullWidth: true, style: { color: '#fff', justifyContent: 'center', height: '32px', background: '#ba4e4e' }, children: _jsx("span", { style: { display: 'flex', alignItems: 'center', gap: '6px', textAlign: 'center' }, children: "Shut Down App" }) })] })] })) }) }), datMatch ? (_jsxs("div", { onClick: () => setOpen(o => !o), style: {
+                                                    }, children: [_jsx(CircleX, { size: 12 }), "Invalid Developer Access Token (DAT)"] }) })) : (_jsx(_Fragment, {})), hostVersion === "0.0.1-beta.9" ? (_jsx(_Fragment, { children: _jsx("div", { style: {
+                                                        display: 'flex',
+                                                        background: 'orange',
+                                                        borderRadius: '10px',
+                                                        padding: '6px 10px',
+                                                        justifyContent: 'left',
+                                                        alignItems: 'center',
+                                                        gap: '6px',
+                                                        color: '#fff',
+                                                        flexDirection: 'row',
+                                                    }, children: "Updates to security. Apps with version 0.0.1-beta.9 and over will now require DAT restriction to access remote features like restarting and shutting down the app." }) })) : (_jsx(_Fragment, {})), _jsx(PanelButton, { onClick: () => { restart(); }, fullWidth: true, style: { color: '#fff', justifyContent: 'center', height: '32px', background: '#ba4e4e' }, disabled: datRestrictionMissing, children: _jsx("span", { style: { display: 'flex', alignItems: 'center', gap: '6px', textAlign: 'center' }, children: "Restart App" }) }), datRestrictionMissing ? (_jsxs("span", { style: { display: 'flex', opacity: 0.5, fontSize: 10, justifyContent: 'center', alignItems: 'center', gap: '4px' }, children: [_jsx(Info, { size: 10 }), "Restarting the app is unavaliable. Set \"dat\" in the Authtics Host config to set restriction."] })) : (_jsx(_Fragment, {})), _jsx(PanelButton, { onClick: () => { shutDown(); }, fullWidth: true, style: { color: '#fff', justifyContent: 'center', height: '32px', background: '#ba4e4e' }, disabled: datRestrictionMissing, children: _jsx("span", { style: { display: 'flex', alignItems: 'center', gap: '6px', textAlign: 'center' }, children: "Shut Down App" }) }), datRestrictionMissing ? (_jsxs("span", { style: { display: 'flex', opacity: 0.5, fontSize: 10, justifyContent: 'center', alignItems: 'center', gap: '4px' }, children: [_jsx(Info, { size: 10 }), "Shutting down the app is unavaliable. Set \"dat\" in the Authtics Host config to set restriction."] })) : (_jsx(_Fragment, {}))] })] })) }) }), datMatch ? (_jsxs("div", { onClick: () => setOpen(o => !o), style: {
                             display: 'flex',
                             flexDirection: 'row',
                             alignItems: 'center',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bananacool467/authtics-host",
-  "version": "0.0.1-beta.8",
+  "version": "0.0.1-beta.9",
   "description": "A Next.js-inspired SSR framework for Node.js with TypeScript and JSX support.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",