@budibase/backend-core 2.22.11 → 2.22.13

package/dist/index.js

@@ -26842,7 +26842,7 @@ var require_private_key = __commonJS({
 var require_identity = __commonJS({
   "../../node_modules/sshpk/lib/identity.js"(exports, module2) {
     "use strict";
-    module2.exports = Identity5;
+    module2.exports = Identity6;
     var assert = require_assert();
     var algs = require_algs();
     var crypto2 = require("crypto");
@@ -26881,7 +26881,7 @@ var require_identity = __commonJS({
     Object.keys(oids).forEach(function(k) {
       unoids[oids[k]] = k;
     });
-    function Identity5(opts) {
+    function Identity6(opts) {
       var self2 = this;
       assert.object(opts, "options");
       assert.arrayOfObject(opts.components, "options.components");
@@ -26941,7 +26941,7 @@ var require_identity = __commonJS({
           throw new Error("Unknown type " + this.type);
       }
     }
-    Identity5.prototype.toString = function() {
+    Identity6.prototype.toString = function() {
       return this.components.map(function(c) {
         var n = c.name.toUpperCase();
         n = n.replace(/=/g, "\\=");
@@ -26950,7 +26950,7 @@ var require_identity = __commonJS({
         return n + "=" + v;
       }).join(", ");
     };
-    Identity5.prototype.get = function(name, asArray) {
+    Identity6.prototype.get = function(name, asArray) {
       assert.string(name, "name");
       var arr = this.componentLookup[name];
       if (arr === void 0 || arr.length === 0)
@@ -26963,7 +26963,7 @@ var require_identity = __commonJS({
         return c.value;
       });
     };
-    Identity5.prototype.toArray = function(idx) {
+    Identity6.prototype.toArray = function(idx) {
       return this.components.map(function(c) {
         return {
           name: c.name,
@@ -26973,7 +26973,7 @@ var require_identity = __commonJS({
     };
     var NOT_PRINTABLE = /[^a-zA-Z0-9 '(),+.\/:=?-]/;
     var NOT_IA5 = /[^\x00-\x7f]/;
-    Identity5.prototype.toAsn1 = function(der, tag) {
+    Identity6.prototype.toAsn1 = function(der, tag) {
       der.startSequence(tag);
       this.components.forEach(function(c) {
         der.startSequence(asn1.Ber.Constructor | asn1.Ber.Set);
@@ -27010,8 +27010,8 @@ var require_identity = __commonJS({
       }
       return true;
     }
-    Identity5.prototype.equals = function(other) {
-      if (!Identity5.isIdentity(other, [1, 0]))
+    Identity6.prototype.equals = function(other) {
+      if (!Identity6.isIdentity(other, [1, 0]))
         return false;
       if (other.components.length !== this.components.length)
         return false;
@@ -27027,31 +27027,31 @@ var require_identity = __commonJS({
       }
       return true;
     };
-    Identity5.forHost = function(hostname) {
+    Identity6.forHost = function(hostname) {
       assert.string(hostname, "hostname");
-      return new Identity5({
+      return new Identity6({
         type: "host",
         hostname,
         components: [{ name: "cn", value: hostname }]
       });
     };
-    Identity5.forUser = function(uid) {
+    Identity6.forUser = function(uid) {
       assert.string(uid, "uid");
-      return new Identity5({
+      return new Identity6({
         type: "user",
         uid,
         components: [{ name: "uid", value: uid }]
       });
     };
-    Identity5.forEmail = function(email) {
+    Identity6.forEmail = function(email) {
       assert.string(email, "email");
-      return new Identity5({
+      return new Identity6({
         type: "email",
         email,
         components: [{ name: "mail", value: email }]
       });
     };
-    Identity5.parseDN = function(dn) {
+    Identity6.parseDN = function(dn) {
       assert.string(dn, "dn");
       var parts = [""];
       var idx = 0;
@@ -27086,9 +27086,9 @@ var require_identity = __commonJS({
         var value = c.slice(eqPos + 1);
         return { name, value };
       });
-      return new Identity5({ components: cmps });
+      return new Identity6({ components: cmps });
     };
-    Identity5.fromArray = function(components) {
+    Identity6.fromArray = function(components) {
       assert.arrayOfObject(components, "components");
       components.forEach(function(cmp) {
         assert.object(cmp, "component");
@@ -27097,9 +27097,9 @@ var require_identity = __commonJS({
           throw new Error("Invalid component value");
         }
       });
-      return new Identity5({ components });
+      return new Identity6({ components });
     };
-    Identity5.parseAsn1 = function(der, top) {
+    Identity6.parseAsn1 = function(der, top) {
       var components = [];
       der.readSequence(top);
       var end2 = der.offset + der.length;
@@ -27133,15 +27133,15 @@ var require_identity = __commonJS({
         der._offset = after;
       }
       der._offset = end2;
-      return new Identity5({
+      return new Identity6({
         components
       });
     };
-    Identity5.isIdentity = function(obj, ver) {
-      return utils.isCompatible(obj, Identity5, ver);
+    Identity6.isIdentity = function(obj, ver) {
+      return utils.isCompatible(obj, Identity6, ver);
     };
-    Identity5.prototype._sshpkApiVersion = [1, 0];
-    Identity5._oldVersionDetect = function(obj) {
+    Identity6.prototype._sshpkApiVersion = [1, 0];
+    Identity6._oldVersionDetect = function(obj) {
       return [1, 0];
     };
   }
@@ -27168,7 +27168,7 @@ var require_openssh_cert = __commonJS({
     var algs = require_algs();
     var Key = require_key();
     var PrivateKey = require_private_key();
-    var Identity5 = require_identity();
+    var Identity6 = require_identity();
     var rfc4253 = require_rfc4253();
     var Signature = require_signature();
     var utils = require_utils3();
@@ -27240,9 +27240,9 @@ var require_openssh_cert = __commonJS({
         principals = ["*"];
       cert.subjects = principals.map(function(pr) {
         if (type === "user")
-          return Identity5.forUser(pr);
+          return Identity6.forUser(pr);
         else if (type === "host")
-          return Identity5.forHost(pr);
+          return Identity6.forHost(pr);
         throw new Error("Unknown identity type " + type);
       });
       cert.validFrom = int64ToDate(sshbuf.readInt64());
@@ -27267,7 +27267,7 @@ var require_openssh_cert = __commonJS({
       sshbuf.readBuffer();
       var signingKeyBuf = sshbuf.readBuffer();
       cert.issuerKey = rfc4253.read(signingKeyBuf);
-      cert.issuer = Identity5.forHost("**");
+      cert.issuer = Identity6.forHost("**");
       var sigBuf = sshbuf.readBuffer();
       cert.signatures.openssh.signature = Signature.parse(sigBuf, cert.issuerKey.type, "ssh");
       if (partial !== void 0) {
@@ -27453,7 +27453,7 @@ var require_x509 = __commonJS({
     var Key = require_key();
     var PrivateKey = require_private_key();
     var pem = require_pem();
-    var Identity5 = require_identity();
+    var Identity6 = require_identity();
     var Signature = require_signature();
     var Certificate = require_certificate();
     var pkcs8 = require_pkcs8();
@@ -27547,11 +27547,11 @@ var require_x509 = __commonJS({
       if (certAlg === void 0)
         throw new Error("unknown signature algorithm " + certAlgOid);
       der._offset = after;
-      cert.issuer = Identity5.parseAsn1(der);
+      cert.issuer = Identity6.parseAsn1(der);
       der.readSequence();
       cert.validFrom = readDate(der);
       cert.validUntil = readDate(der);
-      cert.subjects = [Identity5.parseAsn1(der)];
+      cert.subjects = [Identity6.parseAsn1(der)];
       der.readSequence();
       after = der.offset + der.length;
       cert.subjectKey = pkcs8.readPkcs8(void 0, "public", der);
@@ -27727,13 +27727,13 @@ var require_x509 = __commonJS({
                 break;
               case ALTNAME.RFC822Name:
                 var email = der.readString(ALTNAME.RFC822Name);
-                id = Identity5.forEmail(email);
+                id = Identity6.forEmail(email);
                 if (!cert.subjects[0].equals(id))
                   cert.subjects.push(id);
                 break;
               case ALTNAME.DirectoryName:
                 der.readSequence(ALTNAME.DirectoryName);
-                id = Identity5.parseAsn1(der);
+                id = Identity6.parseAsn1(der);
                 if (!cert.subjects[0].equals(id))
                   cert.subjects.push(id);
                 break;
@@ -27741,7 +27741,7 @@ var require_x509 = __commonJS({
                 var host = der.readString(
                   ALTNAME.DNSName
                 );
-                id = Identity5.forHost(host);
+                id = Identity6.forHost(host);
                 if (!cert.subjects[0].equals(id))
                   cert.subjects.push(id);
                 break;
@@ -28085,7 +28085,7 @@ var require_x509_pem = __commonJS({
     var Key = require_key();
     var PrivateKey = require_private_key();
     var pem = require_pem();
-    var Identity5 = require_identity();
+    var Identity6 = require_identity();
     var Signature = require_signature();
     var Certificate = require_certificate();
     function read(buf, options2) {
@@ -28166,7 +28166,7 @@ var require_certificate = __commonJS({
     var utils = require_utils3();
     var Key = require_key();
     var PrivateKey = require_private_key();
-    var Identity5 = require_identity();
+    var Identity6 = require_identity();
     var formats2 = {};
     formats2["openssh"] = require_openssh_cert();
     formats2["x509"] = require_x509();
@@ -28178,7 +28178,7 @@ var require_certificate = __commonJS({
       assert.arrayOfObject(opts.subjects, "options.subjects");
       utils.assertCompatible(
         opts.subjects[0],
-        Identity5,
+        Identity6,
         [1, 0],
         "options.subjects"
       );
@@ -28188,7 +28188,7 @@ var require_certificate = __commonJS({
         [1, 0],
         "options.subjectKey"
       );
-      utils.assertCompatible(opts.issuer, Identity5, [1, 0], "options.issuer");
+      utils.assertCompatible(opts.issuer, Identity6, [1, 0], "options.issuer");
       if (opts.issuerKey !== void 0) {
         utils.assertCompatible(
           opts.issuerKey,
@@ -28326,7 +28326,7 @@ var require_certificate = __commonJS({
         subjects = [subjectOrSubjects];
       assert.arrayOfObject(subjects);
       subjects.forEach(function(subject) {
-        utils.assertCompatible(subject, Identity5, [1, 0], "subject");
+        utils.assertCompatible(subject, Identity6, [1, 0], "subject");
       });
       utils.assertCompatible(key, PrivateKey, [1, 2], "private key");
       assert.optionalObject(options2, "options");
@@ -28403,12 +28403,12 @@ var require_certificate = __commonJS({
         subjects = [subjectOrSubjects];
       assert.arrayOfObject(subjects);
       subjects.forEach(function(subject) {
-        utils.assertCompatible(subject, Identity5, [1, 0], "subject");
+        utils.assertCompatible(subject, Identity6, [1, 0], "subject");
       });
       utils.assertCompatible(key, Key, [1, 0], "key");
       if (PrivateKey.isPrivateKey(key))
         key = key.toPublic();
-      utils.assertCompatible(issuer, Identity5, [1, 0], "issuer");
+      utils.assertCompatible(issuer, Identity6, [1, 0], "issuer");
       utils.assertCompatible(issuerKey, PrivateKey, [1, 2], "issuer key");
       assert.optionalObject(options2, "options");
       if (options2 === void 0)
@@ -28953,7 +28953,7 @@ var require_lib5 = __commonJS({
     var Signature = require_signature();
     var PrivateKey = require_private_key();
     var Certificate = require_certificate();
-    var Identity5 = require_identity();
+    var Identity6 = require_identity();
     var errs = require_errors();
     module2.exports = {
       /* top-level classes */
@@ -28970,12 +28970,12 @@ var require_lib5 = __commonJS({
       parseCertificate: Certificate.parse,
       createSelfSignedCertificate: Certificate.createSelfSigned,
       createCertificate: Certificate.create,
-      Identity: Identity5,
-      identityFromDN: Identity5.parseDN,
-      identityForHost: Identity5.forHost,
-      identityForUser: Identity5.forUser,
-      identityForEmail: Identity5.forEmail,
-      identityFromArray: Identity5.fromArray,
+      Identity: Identity6,
+      identityFromDN: Identity6.parseDN,
+      identityForHost: Identity6.forHost,
+      identityForUser: Identity6.forUser,
+      identityForEmail: Identity6.forEmail,
+      identityFromArray: Identity6.fromArray,
       /* errors */
       FingerprintFormatError: errs.FingerprintFormatError,
       InvalidAlgorithmError: errs.InvalidAlgorithmError,
@@ -57120,7 +57120,7 @@ var Replication = class {
       }).on("complete", function(info) {
         return resolve(info);
       }).on("error", function(err) {
-        throw new Error(`Replication Error: ${err}`);
+        throw err;
       });
     });
   }
@@ -59183,7 +59183,9 @@ __export(platform_exports, {
 // src/platform/users.ts
 var users_exports2 = {};
 __export(users_exports2, {
+  addSsoUser: () => addSsoUser,
   addUser: () => addUser,
+  getUserDoc: () => getUserDoc,
   lookupTenantId: () => lookupTenantId,
   removeUser: () => removeUser
 });
@@ -59240,15 +59242,19 @@ async function addUserDoc(emailOrId, newDocFn) {
     }
   }
 }
+async function addSsoUser(ssoId, email, userId, tenantId) {
+  return addUserDoc(
+    ssoId,
+    () => newUserSsoIdDoc(ssoId, email, userId, tenantId)
+  );
+}
 async function addUser(tenantId, userId, email, ssoId) {
   const promises = [
     addUserDoc(userId, () => newUserIdDoc(userId, tenantId)),
     addUserDoc(email, () => newUserEmailDoc(userId, email, tenantId))
   ];
   if (ssoId) {
-    promises.push(
-      addUserDoc(ssoId, () => newUserSsoIdDoc(ssoId, email, userId, tenantId))
-    );
+    promises.push(addSsoUser(ssoId, email, userId, tenantId));
   }
   await Promise.all(promises);
 }
@@ -61807,9 +61813,9 @@ async function publishAsyncEvent(payload) {
 }
 
 // src/events/events.ts
-var publishEvent = async (event, properties, timestamp) => {
-  const identity = await identification_default.getCurrentIdentity();
-  const backfilling = await isBackfillingEvent(event);
+var publishEvent = async (event, properties, timestamp, identityOverride) => {
+  const identity = identityOverride || await identification_default.getCurrentIdentity();
+  const backfilling = identityOverride ? false : await isBackfillingEvent(event);
   if (!backfilling) {
     await publishAsyncEvent({
       event,
@@ -61830,11 +61836,16 @@ var publishEvent = async (event, properties, timestamp) => {
 };
 
 // src/events/publishers/account.ts
-async function created(account) {
+async function created(account, identityOverride) {
   const properties = {
     tenantId: account.tenantId
   };
-  await publishEvent("account:created" /* ACCOUNT_CREATED */, properties);
+  await publishEvent(
+    "account:created" /* ACCOUNT_CREATED */,
+    properties,
+    void 0,
+    identityOverride
+  );
 }
 async function deleted(account) {
   const properties = {
@@ -63607,7 +63618,7 @@ var UserDB = class _UserDB {
     await user_exports.invalidateUser(userId);
     await invalidateSessions(userId, { reason: "deletion" });
   }
-  static async createAdminUser(email, password, tenantId, opts) {
+  static async createAdminUser(email, tenantId, password, opts) {
     const user = {
       email,
       password,