@budibase/backend-core 2.14.1 → 2.14.3

package/dist/index.js

@@ -2591,6 +2591,8 @@ var init_environment2 = __esm({
       DISABLE_JWT_WARNING: process.env.DISABLE_JWT_WARNING,
       BLACKLIST_IPS: process.env.BLACKLIST_IPS,
       SERVICE_TYPE: "unknown",
+      PASSWORD_MIN_LENGTH: process.env.PASSWORD_MIN_LENGTH,
+      PASSWORD_MAX_LENGTH: process.env.PASSWORD_MAX_LENGTH,
       /**
        * Enable to allow an admin user to login using a password.
        * This can be useful to prevent lockout when configuring SSO.
@@ -10521,8 +10523,9 @@ __export(security_exports, {
 });
 
 // src/security/auth.ts
-var PASSWORD_MIN_LENGTH = +(process.env.PASSWORD_MIN_LENGTH || 8);
-var PASSWORD_MAX_LENGTH = +(process.env.PASSWORD_MAX_LENGTH || 512);
+init_environment2();
+var PASSWORD_MIN_LENGTH = +(environment_default.PASSWORD_MIN_LENGTH || 8);
+var PASSWORD_MAX_LENGTH = +(environment_default.PASSWORD_MAX_LENGTH || 512);
 function validatePassword(password) {
   if (!password || password.length < PASSWORD_MIN_LENGTH) {
     return {
@@ -10581,9 +10584,11 @@ var UserDB = class _UserDB {
       if (await _UserDB.isPreventPasswordActions(user, account)) {
         throw new HTTPError("Password change is disabled for this user", 400);
       }
-      const passwordValidation = validatePassword(password);
-      if (!passwordValidation.valid) {
-        throw new HTTPError(passwordValidation.error, 400);
+      if (!opts.skipPasswordValidation) {
+        const passwordValidation = validatePassword(password);
+        if (!passwordValidation.valid) {
+          throw new HTTPError(passwordValidation.error, 400);
+        }
       }
       hashedPassword = opts.hashPassword ? await hash(password) : password;
     } else if (dbUser) {
@@ -10892,7 +10897,8 @@ var UserDB = class _UserDB {
     await bustCache("checklist" /* CHECKLIST */);
     return await _UserDB.save(user, {
       hashPassword: opts?.hashPassword,
-      requirePassword: opts?.requirePassword
+      requirePassword: opts?.requirePassword,
+      skipPasswordValidation: opts?.skipPasswordValidation
     });
   }
   static async getGroups(groupIds) {
@@ -12915,6 +12921,7 @@ function readBytes(stream2, length) {
 // src/middleware/authenticated.ts
 init_identity();
 init_environment2();
+var import_dd_trace3 = __toESM(require("dd-trace"));
 var ONE_MINUTE = environment_default.SESSION_UPDATE_PERIOD ? parseInt(environment_default.SESSION_UPDATE_PERIOD) : 60 * 1e3;
 function timeMinusOneMinute() {
   return new Date(Date.now() - ONE_MINUTE).toISOString();
@@ -13025,6 +13032,17 @@ function authenticated_default(noAuthPatterns = [], opts = {
       if (!authenticated) {
         authenticated = false;
       }
+      if (user) {
+        import_dd_trace3.default.setUser({
+          id: user?._id,
+          tenantId: user?.tenantId,
+          admin: user?.admin,
+          builder: user?.builder,
+          budibaseAccess: user?.budibaseAccess,
+          status: user?.status,
+          roles: user?.roles
+        });
+      }
       finalise(ctx, { authenticated, user, internal, version, publicEndpoint });
       if (user && user.email) {
         return doInUserContext(user, ctx, next);