@beechcms/api 0.5.0 → 0.6.0-preview.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/dashboard/BeechLogo.svg +18 -18
- package/assets/dashboard/BeechLogoLIght.svg +48 -48
- package/assets/dashboard/Searching.svg +1 -0
- package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
- package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
- package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
- package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
- package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
- package/assets/dashboard/beechLogoDark.svg +48 -48
- package/assets/dashboard/index.html +18 -18
- package/assets/dashboard/noResult.svg +43 -0
- package/assets/dashboard/sol.svg +3 -3
- package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
- package/assets/dashboard/working.svg +1 -0
- package/migrations/0000_v040_base.sql +265 -238
- package/migrations/0029_automations.sql +14 -14
- package/migrations/0030_test_seeds.sql +125 -125
- package/package.json +13 -9
- package/src/auth/{in-memory-hash-provider.ts → __fixtures__/in-memory-hash-provider.ts} +17 -13
- package/src/auth/{static-token-service.ts → __fixtures__/static-token-service.ts} +22 -18
- package/src/auth/bcrypt-hash-provider.ts +24 -20
- package/src/auth/constants.ts +14 -10
- package/src/auth/generate-refresh-token.test.ts +23 -19
- package/src/auth/hash-provider.test.ts +55 -46
- package/src/auth/jose-token-service.ts +62 -55
- package/src/auth/jwt-claims-passthrough.test.ts +87 -0
- package/src/auth/login.test.ts +100 -92
- package/src/auth/login.ts +78 -74
- package/src/auth/refresh.ts +11 -5
- package/src/auth/token-service.test.ts +90 -82
- package/src/factory.ts +370 -347
- package/src/features/automations/__tests__/action-executors.test.ts +255 -268
- package/src/features/automations/__tests__/automation-runner.test.ts +196 -192
- package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -56
- package/src/features/automations/__tests__/automations.handler.test.ts +264 -260
- package/src/features/automations/__tests__/automations.repository.test.ts +163 -159
- package/src/features/automations/__tests__/automations.schema.test.ts +224 -134
- package/src/features/automations/__tests__/context-resolver.test.ts +126 -122
- package/src/features/automations/__tests__/cron-runner.test.ts +267 -263
- package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -140
- package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -306
- package/src/features/automations/__tests__/template-grammar.test.ts +308 -304
- package/src/features/automations/__tests__/webhook.executor.test.ts +142 -0
- package/src/features/automations/__tests__/when-evaluator.test.ts +274 -270
- package/src/features/automations/__tests__/when-pushdown.test.ts +281 -277
- package/src/features/automations/action-executors/create-entry.executor.ts +27 -23
- package/src/features/automations/action-executors/edit-field.executor.ts +26 -22
- package/src/features/automations/action-executors/index.ts +37 -33
- package/src/features/automations/action-executors/send-mail.executor.ts +53 -42
- package/src/features/automations/action-executors/set-variable.executor.ts +159 -146
- package/src/features/automations/action-executors/webhook.executor.ts +67 -25
- package/src/features/automations/automation-runner.ts +85 -81
- package/src/features/automations/automation-runner.utils.ts +47 -43
- package/src/features/automations/automations.handler.ts +197 -193
- package/src/features/automations/automations.schema.ts +177 -160
- package/src/features/automations/context-resolver.ts +152 -148
- package/src/features/automations/cron-runner.ts +140 -136
- package/src/features/automations/cron-runner.utils.ts +44 -40
- package/src/features/automations/filter-translation.ts +46 -42
- package/src/features/automations/index.ts +16 -12
- package/src/features/automations/template-grammar.ts +245 -241
- package/src/features/automations/var-access-resolver.ts +140 -136
- package/src/features/automations/when-evaluator.ts +87 -83
- package/src/features/automations/when-pushdown.ts +57 -53
- package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -0
- package/src/features/backrefs/backrefs.handler.ts +168 -0
- package/src/features/backrefs/d1-backref.repository.ts +84 -0
- package/src/features/backrefs/index.ts +5 -0
- package/src/features/content/constants.ts +16 -10
- package/src/features/content/handlers/bulk.handler.ts +185 -0
- package/src/features/content/handlers/create.ts +129 -165
- package/src/features/content/handlers/delete.ts +62 -87
- package/src/features/content/handlers/facets.ts +49 -45
- package/src/features/content/handlers/get.ts +120 -116
- package/src/features/content/handlers/helpers.test.ts +180 -0
- package/src/features/content/handlers/helpers.ts +93 -0
- package/src/features/content/handlers/list.ts +174 -88
- package/src/features/content/handlers/update.ts +174 -219
- package/src/features/content/index.ts +26 -20
- package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
- package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
- package/src/features/dashboard-layout/index.ts +5 -0
- package/src/features/draft/draft.handler.ts +195 -170
- package/src/features/draft/draft.middleware.ts +66 -62
- package/src/features/draft/index.ts +5 -1
- package/src/features/email/email.provider.ts +42 -38
- package/src/features/email/email.service.ts +98 -93
- package/src/features/email/email.types.ts +119 -108
- package/src/features/email/index.ts +33 -29
- package/src/features/email/providers/resend.ts +67 -63
- package/src/features/email/providers/smtp.ts +55 -0
- package/src/features/email/templates/automation-mail.ts +19 -15
- package/src/features/email/templates/password-changed.ts +63 -59
- package/src/features/email/templates/password-reset.ts +68 -64
- package/src/features/email/templates/shell.ts +96 -92
- package/src/features/notifications/index.ts +5 -1
- package/src/features/notifications/notifications.handler.ts +105 -101
- package/src/features/password-reset/index.ts +19 -15
- package/src/features/password-reset/request.ts +92 -82
- package/src/features/password-reset/reset.ts +102 -92
- package/src/features/rotate-field/index.ts +5 -1
- package/src/features/rotate-field/rotate-field.handler.ts +132 -128
- package/src/features/rotate-field/rotate-field.schema.ts +17 -13
- package/src/features/schema/schema.handler.ts +131 -16
- package/src/features/seeds/index.ts +5 -0
- package/src/features/seeds/seeds.handler.test.ts +1199 -0
- package/src/features/seeds/seeds.handler.ts +558 -0
- package/src/features/settings/__tests__/settings.handler.test.ts +555 -0
- package/src/features/settings/settings.handler.ts +392 -302
- package/src/features/setup/index.ts +288 -91
- package/src/features/stats/index.ts +5 -1
- package/src/features/stats/stats.handler.ts +420 -430
- package/src/features/webhooks/index.ts +63 -0
- package/src/index.ts +65 -56
- package/src/media-utils.ts +82 -78
- package/src/middleware/auth-providers.middleware.test.ts +85 -0
- package/src/middleware/auth-providers.middleware.ts +45 -32
- package/src/middleware/observability.middleware.test.ts +93 -0
- package/src/middleware/observability.middleware.ts +70 -52
- package/src/middleware/rate-limit.middleware.ts +45 -41
- package/src/middleware/repository.middleware.ts +117 -91
- package/src/middleware/seed-registry.middleware.test.ts +97 -0
- package/src/middleware/seed-registry.middleware.ts +21 -0
- package/src/middleware/storage.middleware.ts +25 -21
- package/src/middleware.ts +45 -47
- package/src/public/access-policy.ts +27 -23
- package/src/public/api-key-middleware.ts +57 -53
- package/src/public/cache-utils.ts +38 -34
- package/src/public/entry-projection.ts +46 -42
- package/src/public/idempotency.ts +23 -19
- package/src/public/index.ts +16 -12
- package/src/public/problem-details.ts +124 -53
- package/src/public/public-add.ts +114 -110
- package/src/public/public-edit.ts +163 -159
- package/src/public/public-errors.ts +19 -15
- package/src/public/public-read.ts +63 -59
- package/src/public/public-routes.ts +88 -84
- package/src/public/query-builder.test.ts +224 -220
- package/src/public/query-builder.ts +156 -152
- package/src/public/rate-limit-middleware.ts +34 -30
- package/src/public/read-list.ts +54 -50
- package/src/public/read-single.ts +48 -44
- package/src/public/response-builder.ts +30 -26
- package/src/public/sanitize.ts +69 -65
- package/src/public/slug-utils.ts +18 -14
- package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -26
- package/src/rate-limit/cloudflare-rate-limiter.ts +15 -11
- package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -33
- package/src/rate-limit/in-memory-rate-limiter.ts +17 -13
- package/src/rate-limit/no-op-rate-limiter.test.ts +22 -18
- package/src/rate-limit/no-op-rate-limiter.ts +11 -7
- package/src/search-utils.test.ts +211 -207
- package/src/search-utils.ts +213 -209
- package/src/search.ts +65 -61
- package/src/shared/apply-policies.test.ts +81 -77
- package/src/shared/apply-policies.ts +67 -63
- package/src/shared/automations.repository.d1.ts +150 -146
- package/src/shared/background-notification-service.test.ts +62 -58
- package/src/shared/background-notification-service.ts +52 -48
- package/src/shared/base.repository.d1.ts +32 -28
- package/src/shared/content-utils.test.ts +165 -161
- package/src/shared/content-utils.ts +86 -82
- package/src/shared/content.repository.d1.test.ts +507 -312
- package/src/shared/content.repository.d1.ts +851 -382
- package/src/shared/d1-activity-log.repository.test.ts +140 -136
- package/src/shared/d1-activity-log.repository.ts +105 -101
- package/src/shared/d1-activity-logger.test.ts +86 -82
- package/src/shared/d1-activity-logger.ts +67 -63
- package/src/shared/d1-analytics.repository.test.ts +78 -74
- package/src/shared/d1-analytics.repository.ts +85 -81
- package/src/shared/d1-content-scan.repository.test.ts +80 -76
- package/src/shared/d1-content-scan.repository.ts +37 -29
- package/src/shared/d1-notification.repository.test.ts +128 -124
- package/src/shared/d1-notification.repository.ts +118 -114
- package/src/shared/d1-password-reset-token.repository.test.ts +81 -77
- package/src/shared/d1-password-reset-token.repository.ts +56 -52
- package/src/shared/d1-search.repository.test.ts +87 -83
- package/src/shared/d1-search.repository.ts +88 -84
- package/src/shared/d1-session.repository.test.ts +125 -121
- package/src/shared/d1-session.repository.ts +102 -98
- package/src/shared/d1-setup-checklist.repository.ts +36 -0
- package/src/shared/d1-user.repository.test.ts +151 -147
- package/src/shared/d1-user.repository.ts +119 -109
- package/src/shared/d1-widget.repository.test.ts +267 -217
- package/src/shared/d1-widget.repository.ts +385 -337
- package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
- package/src/shared/dashboard-layout.repository.d1.ts +58 -0
- package/src/shared/demo-data-sql.ts +216 -0
- package/src/shared/demo-data.repository.d1.ts +20 -0
- package/src/shared/execution-context-scheduler.ts +13 -9
- package/src/shared/fixed-clock.ts +25 -21
- package/src/shared/fts-sync.ts +8 -4
- package/src/shared/idempotency.repository.d1.test.ts +83 -79
- package/src/shared/idempotency.repository.d1.ts +60 -56
- package/src/shared/in-memory-activity-logger.ts +19 -15
- package/src/shared/in-memory-notification-service.ts +19 -15
- package/src/shared/in-memory-seed.repository.ts +58 -0
- package/src/shared/media.repository.d1.test.ts +107 -103
- package/src/shared/media.repository.d1.ts +68 -64
- package/src/shared/qstash-notification-service.test.ts +67 -0
- package/src/shared/qstash-notification-service.ts +55 -0
- package/src/shared/query-utils.ts +141 -137
- package/src/shared/request-utils.ts +26 -22
- package/src/shared/schema-mutator.d1.test.ts +142 -0
- package/src/shared/schema-mutator.d1.ts +64 -0
- package/src/shared/seed-layout.repository.d1.test.ts +114 -0
- package/src/shared/seed-layout.repository.d1.ts +62 -0
- package/src/shared/seed-registry-cache.test.ts +68 -0
- package/src/shared/seed-registry-cache.ts +49 -0
- package/src/shared/seed.repository.d1.test.ts +143 -0
- package/src/shared/seed.repository.d1.ts +98 -0
- package/src/shared/sequential-id-generator.ts +33 -22
- package/src/shared/site-settings.repository.d1.ts +53 -0
- package/src/shared/storage/factory.ts +41 -40
- package/src/shared/storage/s3-bucket.ts +195 -163
- package/src/shared/storage-utils.ts +40 -36
- package/src/shared/system-stats.repository.d1.test.ts +58 -54
- package/src/shared/system-stats.repository.d1.ts +48 -44
- package/src/types.ts +90 -67
- package/src/upload.ts +198 -187
- package/src/widget.test.ts +85 -0
- package/src/widget.ts +251 -208
- package/assets/dashboard/assets/index-B1mUfgiK.css +0 -1
- package/assets/dashboard/assets/index-CHxxc_id.js +0 -629
- package/src/shared/storage/r2-binding-bucket.ts +0 -81
|
@@ -1,114 +1,118 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
.
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
}
|
|
96
|
-
|
|
97
|
-
async
|
|
98
|
-
await this.database
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
/// <reference types="@cloudflare/workers-types" />
|
|
6
|
+
import type {
|
|
7
|
+
INotificationRepository,
|
|
8
|
+
NotificationRecord,
|
|
9
|
+
NotificationStats,
|
|
10
|
+
NotificationType,
|
|
11
|
+
IClock,
|
|
12
|
+
IIdGenerator,
|
|
13
|
+
} from '@beechcms/core'
|
|
14
|
+
|
|
15
|
+
interface NotificationRow {
|
|
16
|
+
id: string
|
|
17
|
+
title: string
|
|
18
|
+
message: string
|
|
19
|
+
type: string
|
|
20
|
+
is_read: number
|
|
21
|
+
created_at: number
|
|
22
|
+
}
|
|
23
|
+
|
|
24
|
+
interface NotificationStatsRow {
|
|
25
|
+
total_count: number | null
|
|
26
|
+
latest_created_at: number | null
|
|
27
|
+
read_count: number | null
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
/**
|
|
31
|
+
* D1-backed implementation of {@link INotificationRepository}.
|
|
32
|
+
*/
|
|
33
|
+
export class D1NotificationRepository implements INotificationRepository {
|
|
34
|
+
constructor(
|
|
35
|
+
private readonly database: D1Database,
|
|
36
|
+
private readonly clock: IClock,
|
|
37
|
+
private readonly idGenerator: IIdGenerator,
|
|
38
|
+
) {}
|
|
39
|
+
|
|
40
|
+
async list(limit: number): Promise<NotificationRecord[]> {
|
|
41
|
+
const queryResult = await this.database
|
|
42
|
+
.prepare(
|
|
43
|
+
`SELECT id, title, message, type, is_read, created_at
|
|
44
|
+
FROM notifications
|
|
45
|
+
ORDER BY created_at DESC
|
|
46
|
+
LIMIT ?`
|
|
47
|
+
)
|
|
48
|
+
.bind(limit)
|
|
49
|
+
.all<NotificationRow>()
|
|
50
|
+
|
|
51
|
+
return (queryResult.results ?? []).map(mapRowToRecord)
|
|
52
|
+
}
|
|
53
|
+
|
|
54
|
+
async stats(): Promise<NotificationStats> {
|
|
55
|
+
const statsRow = await this.database
|
|
56
|
+
.prepare(
|
|
57
|
+
`SELECT COUNT(*) as total_count,
|
|
58
|
+
MAX(created_at) as latest_created_at,
|
|
59
|
+
SUM(is_read) as read_count
|
|
60
|
+
FROM notifications`
|
|
61
|
+
)
|
|
62
|
+
.first<NotificationStatsRow>()
|
|
63
|
+
|
|
64
|
+
return {
|
|
65
|
+
totalCount: statsRow?.total_count ?? 0,
|
|
66
|
+
latestCreatedAt: statsRow?.latest_created_at ?? 0,
|
|
67
|
+
readCount: statsRow?.read_count ?? 0,
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
|
|
71
|
+
async create(record: Omit<NotificationRecord, 'id' | 'createdAt' | 'isRead'>): Promise<string> {
|
|
72
|
+
const generatedId = this.idGenerator.uuid()
|
|
73
|
+
await this.database
|
|
74
|
+
.prepare(
|
|
75
|
+
`INSERT INTO notifications (id, title, message, type)
|
|
76
|
+
VALUES (?, ?, ?, ?)`
|
|
77
|
+
)
|
|
78
|
+
.bind(generatedId, record.title, record.message, record.type)
|
|
79
|
+
.run()
|
|
80
|
+
return generatedId
|
|
81
|
+
}
|
|
82
|
+
|
|
83
|
+
async markRead(notificationId: string): Promise<void> {
|
|
84
|
+
await this.database
|
|
85
|
+
.prepare('UPDATE notifications SET is_read = 1 WHERE id = ?')
|
|
86
|
+
.bind(notificationId)
|
|
87
|
+
.run()
|
|
88
|
+
}
|
|
89
|
+
|
|
90
|
+
async markUnread(notificationId: string): Promise<void> {
|
|
91
|
+
await this.database
|
|
92
|
+
.prepare('UPDATE notifications SET is_read = 0 WHERE id = ?')
|
|
93
|
+
.bind(notificationId)
|
|
94
|
+
.run()
|
|
95
|
+
}
|
|
96
|
+
|
|
97
|
+
async markAllRead(): Promise<void> {
|
|
98
|
+
await this.database.prepare('UPDATE notifications SET is_read = 1').run()
|
|
99
|
+
}
|
|
100
|
+
|
|
101
|
+
async delete(notificationId: string): Promise<void> {
|
|
102
|
+
await this.database
|
|
103
|
+
.prepare('DELETE FROM notifications WHERE id = ?')
|
|
104
|
+
.bind(notificationId)
|
|
105
|
+
.run()
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
|
|
109
|
+
function mapRowToRecord(row: NotificationRow): NotificationRecord {
|
|
110
|
+
return {
|
|
111
|
+
id: row.id,
|
|
112
|
+
title: row.title,
|
|
113
|
+
message: row.message,
|
|
114
|
+
type: row.type as NotificationType,
|
|
115
|
+
isRead: row.is_read === 1,
|
|
116
|
+
createdAt: row.created_at,
|
|
117
|
+
}
|
|
118
|
+
}
|
|
@@ -1,77 +1,81 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
const
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import { describe, it, expect, vi } from 'vitest'
|
|
6
|
+
import { D1PasswordResetTokenRepository } from './d1-password-reset-token.repository'
|
|
7
|
+
|
|
8
|
+
const NOW = Math.floor(Date.now() / 1000)
|
|
9
|
+
const fixedIdGen = { uuid: () => 'prt-1' }
|
|
10
|
+
|
|
11
|
+
function makeMockDb(opts: { firstResult?: unknown; runChanges?: number } = {}) {
|
|
12
|
+
const { firstResult = null, runChanges = 1 } = opts
|
|
13
|
+
const runMock = vi.fn().mockResolvedValue({ success: true, meta: { changes: runChanges } })
|
|
14
|
+
const firstMock = vi.fn().mockResolvedValue(firstResult)
|
|
15
|
+
const bindMock = vi.fn(() => ({ first: firstMock, run: runMock }))
|
|
16
|
+
const prepareMock = vi.fn(() => ({ bind: bindMock }))
|
|
17
|
+
return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock }
|
|
18
|
+
}
|
|
19
|
+
|
|
20
|
+
describe('D1PasswordResetTokenRepository', () => {
|
|
21
|
+
describe('create', () => {
|
|
22
|
+
it('calls INSERT INTO password_reset_tokens', async () => {
|
|
23
|
+
const { db, prepareMock } = makeMockDb()
|
|
24
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).create({
|
|
25
|
+
userId: 'u1', tokenHash: 'h', expiresAt: NOW + 1800,
|
|
26
|
+
})
|
|
27
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO password_reset_tokens'))
|
|
28
|
+
})
|
|
29
|
+
|
|
30
|
+
it('binds id, userId, tokenHash, and expiresAt in the correct order', async () => {
|
|
31
|
+
const { db, bindMock } = makeMockDb()
|
|
32
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).create({
|
|
33
|
+
userId: 'u1', tokenHash: 'h', expiresAt: NOW + 1800,
|
|
34
|
+
})
|
|
35
|
+
expect(bindMock).toHaveBeenCalledWith('prt-1', 'u1', 'h', NOW + 1800)
|
|
36
|
+
})
|
|
37
|
+
})
|
|
38
|
+
|
|
39
|
+
describe('findValidByHashWithEmail', () => {
|
|
40
|
+
it('returns a ValidatedResetToken with the userId and email from the JOIN', async () => {
|
|
41
|
+
const row = { id: 'prt-1', user_id: 'u1', email: 'user@test.com' }
|
|
42
|
+
const { db } = makeMockDb({ firstResult: row })
|
|
43
|
+
const result = await new D1PasswordResetTokenRepository(db, fixedIdGen).findValidByHashWithEmail('h', NOW)
|
|
44
|
+
expect(result).toEqual({ id: 'prt-1', userId: 'u1', email: 'user@test.com' })
|
|
45
|
+
})
|
|
46
|
+
|
|
47
|
+
it('returns null when the token is not found, expired, or already used', async () => {
|
|
48
|
+
const { db } = makeMockDb({ firstResult: null })
|
|
49
|
+
expect(await new D1PasswordResetTokenRepository(db, fixedIdGen).findValidByHashWithEmail('bad-hash', NOW)).toBeNull()
|
|
50
|
+
})
|
|
51
|
+
|
|
52
|
+
it('passes tokenHash and nowTimestamp as bound values', async () => {
|
|
53
|
+
const { db, bindMock } = makeMockDb()
|
|
54
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).findValidByHashWithEmail('my-hash', NOW)
|
|
55
|
+
expect(bindMock).toHaveBeenCalledWith('my-hash', NOW)
|
|
56
|
+
})
|
|
57
|
+
})
|
|
58
|
+
|
|
59
|
+
describe('markUsed', () => {
|
|
60
|
+
it('calls UPDATE password_reset_tokens SET used_at', async () => {
|
|
61
|
+
const { db, prepareMock } = makeMockDb()
|
|
62
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).markUsed('prt-1', NOW)
|
|
63
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('used_at'))
|
|
64
|
+
})
|
|
65
|
+
|
|
66
|
+
it('binds nowTimestamp and tokenId in the correct order', async () => {
|
|
67
|
+
const { db, bindMock } = makeMockDb()
|
|
68
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).markUsed('prt-1', NOW)
|
|
69
|
+
expect(bindMock).toHaveBeenCalledWith(NOW, 'prt-1')
|
|
70
|
+
})
|
|
71
|
+
})
|
|
72
|
+
|
|
73
|
+
describe('invalidatePending', () => {
|
|
74
|
+
it('calls UPDATE password_reset_tokens and includes the userId in the bound values', async () => {
|
|
75
|
+
const { db, prepareMock, bindMock } = makeMockDb()
|
|
76
|
+
await new D1PasswordResetTokenRepository(db, fixedIdGen).invalidatePending('u1', NOW)
|
|
77
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('UPDATE password_reset_tokens'))
|
|
78
|
+
expect((bindMock.mock.calls[0] as unknown[]).includes('u1')).toBe(true)
|
|
79
|
+
})
|
|
80
|
+
})
|
|
81
|
+
})
|
|
@@ -1,52 +1,56 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
/// <reference types="@cloudflare/workers-types" />
|
|
6
|
+
import type { IPasswordResetTokenRepository, NewPasswordResetToken, ValidatedResetToken, IIdGenerator } from '@beechcms/core'
|
|
7
|
+
|
|
8
|
+
type ValidatedResetTokenRow = {
|
|
9
|
+
id: string
|
|
10
|
+
user_id: string
|
|
11
|
+
email: string
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export class D1PasswordResetTokenRepository implements IPasswordResetTokenRepository {
|
|
15
|
+
constructor(
|
|
16
|
+
private readonly db: D1Database,
|
|
17
|
+
private readonly idGenerator: IIdGenerator,
|
|
18
|
+
) {}
|
|
19
|
+
|
|
20
|
+
async invalidatePending(userId: string, nowTimestamp: number): Promise<void> {
|
|
21
|
+
await this.db
|
|
22
|
+
.prepare('UPDATE password_reset_tokens SET used_at = ? WHERE user_id = ? AND used_at IS NULL')
|
|
23
|
+
.bind(nowTimestamp, userId)
|
|
24
|
+
.run()
|
|
25
|
+
}
|
|
26
|
+
|
|
27
|
+
async create(record: NewPasswordResetToken): Promise<void> {
|
|
28
|
+
const generatedId = this.idGenerator.uuid()
|
|
29
|
+
await this.db
|
|
30
|
+
.prepare('INSERT INTO password_reset_tokens (id, user_id, token_hash, expires_at) VALUES (?, ?, ?, ?)')
|
|
31
|
+
.bind(generatedId, record.userId, record.tokenHash, record.expiresAt)
|
|
32
|
+
.run()
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
async findValidByHashWithEmail(tokenHash: string, nowTimestamp: number): Promise<ValidatedResetToken | null> {
|
|
36
|
+
const row = await this.db
|
|
37
|
+
.prepare(
|
|
38
|
+
`SELECT prt.id, prt.user_id, u.email
|
|
39
|
+
FROM password_reset_tokens prt
|
|
40
|
+
JOIN users u ON u.id = prt.user_id
|
|
41
|
+
WHERE prt.token_hash = ? AND prt.expires_at > ? AND prt.used_at IS NULL`
|
|
42
|
+
)
|
|
43
|
+
.bind(tokenHash, nowTimestamp)
|
|
44
|
+
.first<ValidatedResetTokenRow>()
|
|
45
|
+
|
|
46
|
+
if (!row) return null
|
|
47
|
+
return { id: row.id, userId: row.user_id, email: row.email }
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
async markUsed(tokenId: string, nowTimestamp: number): Promise<void> {
|
|
51
|
+
await this.db
|
|
52
|
+
.prepare('UPDATE password_reset_tokens SET used_at = ? WHERE id = ?')
|
|
53
|
+
.bind(nowTimestamp, tokenId)
|
|
54
|
+
.run()
|
|
55
|
+
}
|
|
56
|
+
}
|