@budibase/backend-core 2.9.16 → 2.9.18

package/dist/src/middleware/joi-validator.js

@@ -1,47 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.params = exports.body = void 0;
-const joi_1 = __importDefault(require("joi"));
-function validate(schema, property) {
-    // Return a Koa middleware function
-    return (ctx, next) => {
-        var _a;
-        if (!schema) {
-            return next();
-        }
-        let params = null;
-        // @ts-ignore
-        let reqProp = (_a = ctx.request) === null || _a === void 0 ? void 0 : _a[property];
-        if (ctx[property] != null) {
-            params = ctx[property];
-        }
-        else if (reqProp != null) {
-            params = reqProp;
-        }
-        // not all schemas have the append property e.g. array schemas
-        if (schema.append) {
-            schema = schema.append({
-                createdAt: joi_1.default.any().optional(),
-                updatedAt: joi_1.default.any().optional(),
-            });
-        }
-        const { error } = schema.validate(params);
-        if (error) {
-            ctx.throw(400, `Invalid ${property} - ${error.message}`);
-            return;
-        }
-        return next();
-    };
-}
-function body(schema) {
-    return validate(schema, "body");
-}
-exports.body = body;
-function params(schema) {
-    return validate(schema, "params");
-}
-exports.params = params;
-//# sourceMappingURL=joi-validator.js.map

package/dist/src/middleware/joi-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"joi-validator.js","sourceRoot":"","sources":["../../../src/middleware/joi-validator.ts"],"names":[],"mappings":";;;;;;AAAA,8CAAuC;AAGvC,SAAS,QAAQ,CACf,MAA0C,EAC1C,QAAgB;IAEhB,mCAAmC;IACnC,OAAO,CAAC,GAAc,EAAE,IAAS,EAAE,EAAE;;QACnC,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,IAAI,EAAE,CAAA;SACd;QACD,IAAI,MAAM,GAAG,IAAI,CAAA;QACjB,aAAa;QACb,IAAI,OAAO,GAAG,MAAA,GAAG,CAAC,OAAO,0CAAG,QAAQ,CAAC,CAAA;QACrC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE;YACzB,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAA;SACvB;aAAM,IAAI,OAAO,IAAI,IAAI,EAAE;YAC1B,MAAM,GAAG,OAAO,CAAA;SACjB;QAED,8DAA8D;QAC9D,IAAK,MAA2B,CAAC,MAAM,EAAE;YACvC,MAAM,GAAI,MAA2B,CAAC,MAAM,CAAC;gBAC3C,SAAS,EAAE,aAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;gBAC/B,SAAS,EAAE,aAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;aAChC,CAAC,CAAA;SACH;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,KAAK,EAAE;YACT,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACxD,OAAM;SACP;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,SAAgB,IAAI,CAAC,MAA0C;IAC7D,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AACjC,CAAC;AAFD,oBAEC;AAED,SAAgB,MAAM,CAAC,MAA0C;IAC/D,OAAO,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACnC,CAAC;AAFD,wBAEC"}

package/dist/src/middleware/matchers.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.matches = exports.buildMatcherRegex = void 0;
-const PARAM_REGEX = /\/:(.*?)(\/.*)?$/g;
-const buildMatcherRegex = (patterns) => {
-    if (!patterns) {
-        return [];
-    }
-    return patterns.map(pattern => {
-        let route = pattern.route;
-        const method = pattern.method;
-        const strict = pattern.strict ? pattern.strict : false;
-        // if there is a param in the route
-        // use a wildcard pattern
-        const matches = route.match(PARAM_REGEX);
-        if (matches) {
-            for (let match of matches) {
-                const suffix = match.endsWith("/") ? "/" : "";
-                const pattern = "/.*" + suffix;
-                route = route.replace(match, pattern);
-            }
-        }
-        return { regex: new RegExp(route), method, strict, route };
-    });
-};
-exports.buildMatcherRegex = buildMatcherRegex;
-const matches = (ctx, options) => {
-    return options.find(({ regex, method, strict, route }) => {
-        let urlMatch;
-        if (strict) {
-            urlMatch = ctx.request.url === route;
-        }
-        else {
-            urlMatch = regex.test(ctx.request.url);
-        }
-        const methodMatch = method === "ALL"
-            ? true
-            : ctx.request.method.toLowerCase() === method.toLowerCase();
-        return urlMatch && methodMatch;
-    });
-};
-exports.matches = matches;
-//# sourceMappingURL=matchers.js.map

package/dist/src/middleware/matchers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"matchers.js","sourceRoot":"","sources":["../../../src/middleware/matchers.ts"],"names":[],"mappings":";;;AAEA,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAEhC,MAAM,iBAAiB,GAAG,CAC/B,QAA2B,EACX,EAAE;IAClB,IAAI,CAAC,QAAQ,EAAE;QACb,OAAO,EAAE,CAAA;KACV;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5B,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;QAEtD,mCAAmC;QACnC,yBAAyB;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACxC,IAAI,OAAO,EAAE;YACX,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC7C,MAAM,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;gBAC9B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;aACtC;SACF;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAxBY,QAAA,iBAAiB,qBAwB7B;AAEM,MAAM,OAAO,GAAG,CAAC,GAAc,EAAE,OAAuB,EAAE,EAAE;IACjE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACvD,IAAI,QAAQ,CAAA;QACZ,IAAI,MAAM,EAAE;YACV,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,KAAK,CAAA;SACrC;aAAM;YACL,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;SACvC;QAED,MAAM,WAAW,GACf,MAAM,KAAK,KAAK;YACd,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAA;QAE/D,OAAO,QAAQ,IAAI,WAAW,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAhBY,QAAA,OAAO,WAgBnB"}

package/dist/src/middleware/passport/datasource/google.js

@@ -1,95 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.postAuth = exports.preAuth = void 0;
-const google = __importStar(require("../sso/google"));
-const constants_1 = require("../../../constants");
-const configs = __importStar(require("../../../configs"));
-const cache = __importStar(require("../../../cache"));
-const utils = __importStar(require("../../../utils"));
-const sso_1 = require("../sso/sso");
-const GoogleStrategy = require("passport-google-oauth").OAuth2Strategy;
-function fetchGoogleCreds() {
-    return __awaiter(this, void 0, void 0, function* () {
-        let config = yield configs.getGoogleDatasourceConfig();
-        if (!config) {
-            throw new Error("No google configuration found");
-        }
-        return config;
-    });
-}
-function preAuth(passport, ctx, next) {
-    return __awaiter(this, void 0, void 0, function* () {
-        // get the relevant config
-        const googleConfig = yield fetchGoogleCreds();
-        const platformUrl = yield configs.getPlatformUrl({ tenantAware: false });
-        let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`;
-        const strategy = yield google.strategyFactory(googleConfig, callbackUrl, sso_1.ssoSaveUserNoOp);
-        if (!ctx.query.appId) {
-            ctx.throw(400, "appId query param not present.");
-        }
-        return passport.authenticate(strategy, {
-            scope: ["profile", "email", "https://www.googleapis.com/auth/spreadsheets"],
-            accessType: "offline",
-            prompt: "consent",
-        })(ctx, next);
-    });
-}
-exports.preAuth = preAuth;
-function postAuth(passport, ctx, next) {
-    return __awaiter(this, void 0, void 0, function* () {
-        // get the relevant config
-        const config = yield fetchGoogleCreds();
-        const platformUrl = yield configs.getPlatformUrl({ tenantAware: false });
-        let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`;
-        const authStateCookie = utils.getCookie(ctx, constants_1.Cookie.DatasourceAuth);
-        return passport.authenticate(new GoogleStrategy({
-            clientID: config.clientID,
-            clientSecret: config.clientSecret,
-            callbackURL: callbackUrl,
-        }, (accessToken, refreshToken, _profile, done) => {
-            utils.clearCookie(ctx, constants_1.Cookie.DatasourceAuth);
-            done(null, { accessToken, refreshToken });
-        }), { successRedirect: "/", failureRedirect: "/error" }, (err, tokens) => __awaiter(this, void 0, void 0, function* () {
-            const baseUrl = `/builder/app/${authStateCookie.appId}/data`;
-            const id = utils.newid();
-            yield cache.store(`datasource:creation:${authStateCookie.appId}:google:${id}`, {
-                tokens,
-            });
-            ctx.redirect(`${baseUrl}/new?continue_google_setup=${id}`);
-        }))(ctx, next);
-    });
-}
-exports.postAuth = postAuth;
-//# sourceMappingURL=google.js.map

package/dist/src/middleware/passport/datasource/google.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../../src/middleware/passport/datasource/google.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sDAAuC;AACvC,kDAA2C;AAC3C,0DAA2C;AAC3C,sDAAuC;AACvC,sDAAuC;AAEvC,oCAA4C;AAE5C,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC,cAAc,CAAA;AAMtE,SAAe,gBAAgB;;QAC7B,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAA;QAEtD,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;SACjD;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CAAA;AAED,SAAsB,OAAO,CAC3B,QAAkB,EAClB,GAAY,EACZ,IAAc;;QAEd,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,gBAAgB,EAAE,CAAA;QAC7C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;QAExE,IAAI,WAAW,GAAG,GAAG,WAAW,6CAA6C,CAAA;QAC7E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAC3C,YAAY,EACZ,WAAW,EACX,qBAAe,CAChB,CAAA;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACpB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAA;SACjD;QAED,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE;YACrC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,8CAA8C,CAAC;YAC3E,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACf,CAAC;CAAA;AAzBD,0BAyBC;AAED,SAAsB,QAAQ,CAC5B,QAAkB,EAClB,GAAY,EACZ,IAAc;;QAEd,0BAA0B;QAC1B,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACvC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;QAExE,IAAI,WAAW,GAAG,GAAG,WAAW,6CAA6C,CAAA;QAC7E,MAAM,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,kBAAM,CAAC,cAAc,CAAC,CAAA;QAEnE,OAAO,QAAQ,CAAC,YAAY,CAC1B,IAAI,cAAc,CAChB;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,WAAW;SACzB,EACD,CACE,WAAmB,EACnB,YAAoB,EACpB,QAAoB,EACpB,IAAc,EACd,EAAE;YACF,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,kBAAM,CAAC,cAAc,CAAC,CAAA;YAC7C,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAA;QAC3C,CAAC,CACF,EACD,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,EACnD,CAAO,GAAQ,EAAE,MAAgB,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,gBAAgB,eAAe,CAAC,KAAK,OAAO,CAAA;YAE5D,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;YACxB,MAAM,KAAK,CAAC,KAAK,CACf,uBAAuB,eAAe,CAAC,KAAK,WAAW,EAAE,EAAE,EAC3D;gBACE,MAAM;aACP,CACF,CAAA;YAED,GAAG,CAAC,QAAQ,CAAC,GAAG,OAAO,8BAA8B,EAAE,EAAE,CAAC,CAAA;QAC5D,CAAC,CAAA,CACF,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACd,CAAC;CAAA;AA5CD,4BA4CC"}

package/dist/src/middleware/passport/local.js

@@ -1,81 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authenticate = exports.options = void 0;
-const constants_1 = require("../../constants");
-const utils_1 = require("../../utils");
-const users = __importStar(require("../../users"));
-const utils_2 = require("./utils");
-const INVALID_ERR = "Invalid credentials";
-const EXPIRED = "This account has expired. Please reset your password";
-exports.options = {
-    passReqToCallback: true,
-};
-/**
- * Passport Local Authentication Middleware.
- * @param {*} ctx the request structure
- * @param {*} email username to login with
- * @param {*} password plain text password to log in with
- * @param {*} done callback from passport to return user information and errors
- * @returns The authenticated user, or errors if they occur
- */
-function authenticate(ctx, email, password, done) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (!email)
-            return (0, utils_2.authError)(done, "Email Required");
-        if (!password)
-            return (0, utils_2.authError)(done, "Password Required");
-        const dbUser = yield users.getGlobalUserByEmail(email);
-        if (dbUser == null) {
-            console.info(`user=${email} could not be found`);
-            return (0, utils_2.authError)(done, INVALID_ERR);
-        }
-        if (dbUser.status === constants_1.UserStatus.INACTIVE) {
-            console.info(`user=${email} is inactive`, dbUser);
-            return (0, utils_2.authError)(done, INVALID_ERR);
-        }
-        if (!dbUser.password) {
-            console.info(`user=${email} has no password set`, dbUser);
-            return (0, utils_2.authError)(done, EXPIRED);
-        }
-        if (!(yield (0, utils_1.compare)(password, dbUser.password))) {
-            return (0, utils_2.authError)(done, INVALID_ERR);
-        }
-        // intentionally remove the users password in payload
-        delete dbUser.password;
-        return done(null, dbUser);
-    });
-}
-exports.authenticate = authenticate;
-//# sourceMappingURL=local.js.map

package/dist/src/middleware/passport/local.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../../src/middleware/passport/local.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAA4C;AAC5C,uCAAqC;AACrC,mDAAoC;AACpC,mCAAmC;AAGnC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AACzC,MAAM,OAAO,GAAG,sDAAsD,CAAA;AAEzD,QAAA,OAAO,GAAG;IACrB,iBAAiB,EAAE,IAAI;CACxB,CAAA;AAED;;;;;;;GAOG;AACH,SAAsB,YAAY,CAChC,GAAc,EACd,KAAa,EACb,QAAgB,EAChB,IAAc;;QAEd,IAAI,CAAC,KAAK;YAAE,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;QAE1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,MAAM,IAAI,IAAI,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAA;YAChD,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,WAAW,CAAC,CAAA;SACpC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,sBAAU,CAAC,QAAQ,EAAE;YACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,MAAM,CAAC,CAAA;YACjD,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,WAAW,CAAC,CAAA;SACpC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,sBAAsB,EAAE,MAAM,CAAC,CAAA;YACzD,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;SAChC;QAED,IAAI,CAAC,CAAC,MAAM,IAAA,eAAO,EAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE;YAC/C,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,WAAW,CAAC,CAAA;SACpC;QAED,qDAAqD;QACrD,OAAO,MAAM,CAAC,QAAQ,CAAA;QACtB,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC;CAAA;AAhCD,oCAgCC"}

package/dist/src/middleware/passport/sso/google.js

@@ -1,90 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getCallbackUrl = exports.strategyFactory = exports.buildVerifyFn = void 0;
-const utils_1 = require("../utils");
-const sso = __importStar(require("./sso"));
-const types_1 = require("@budibase/types");
-const GoogleStrategy = require("passport-google-oauth").OAuth2Strategy;
-function buildVerifyFn(saveUserFn) {
-    return (accessToken, refreshToken, profile, done) => {
-        const details = {
-            provider: "google",
-            providerType: types_1.SSOProviderType.GOOGLE,
-            userId: profile.id,
-            profile: profile,
-            email: profile._json.email,
-            oauth2: {
-                accessToken,
-                refreshToken,
-            },
-        };
-        return sso.authenticate(details, true, // require local accounts to exist
-        done, saveUserFn);
-    };
-}
-exports.buildVerifyFn = buildVerifyFn;
-/**
- * Create an instance of the google passport strategy. This wrapper fetches the configuration
- * from couchDB rather than environment variables, using this factory is necessary for dynamically configuring passport.
- * @returns Dynamically configured Passport Google Strategy
- */
-function strategyFactory(config, callbackUrl, saveUserFn) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            const { clientID, clientSecret } = config;
-            if (!clientID || !clientSecret) {
-                throw new Error("Configuration invalid. Must contain google clientID and clientSecret");
-            }
-            const verify = buildVerifyFn(saveUserFn);
-            return new GoogleStrategy({
-                clientID: config.clientID,
-                clientSecret: config.clientSecret,
-                callbackURL: callbackUrl,
-            }, verify);
-        }
-        catch (err) {
-            console.error(err);
-            throw new Error(`Error constructing google authentication strategy: ${err}`);
-        }
-    });
-}
-exports.strategyFactory = strategyFactory;
-function getCallbackUrl(config) {
-    return __awaiter(this, void 0, void 0, function* () {
-        return (0, utils_1.ssoCallbackUrl)(types_1.ConfigType.GOOGLE, config);
-    });
-}
-exports.getCallbackUrl = getCallbackUrl;
-//# sourceMappingURL=google.js.map

package/dist/src/middleware/passport/sso/google.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../../src/middleware/passport/sso/google.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAyC;AACzC,2CAA4B;AAC5B,2CAOwB;AACxB,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC,cAAc,CAAA;AAEtE,SAAgB,aAAa,CAAC,UAA+B;IAC3D,OAAO,CACL,WAAmB,EACnB,YAAoB,EACpB,OAAmB,EACnB,IAAc,EACd,EAAE;QACF,MAAM,OAAO,GAAmB;YAC9B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,uBAAe,CAAC,MAAM;YACpC,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,MAAM,EAAE;gBACN,WAAW;gBACX,YAAY;aACb;SACF,CAAA;QAED,OAAO,GAAG,CAAC,YAAY,CACrB,OAAO,EACP,IAAI,EAAE,kCAAkC;QACxC,IAAI,EACJ,UAAU,CACX,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AA1BD,sCA0BC;AAED;;;;GAIG;AACH,SAAsB,eAAe,CACnC,MAAyB,EACzB,WAAmB,EACnB,UAA+B;;QAE/B,IAAI;YACF,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;YAEzC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE;gBAC9B,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAA;aACF;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;YACxC,OAAO,IAAI,cAAc,CACvB;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,WAAW;aACzB,EACD,MAAM,CACP,CAAA;SACF;QAAC,OAAO,GAAQ,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClB,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAA;SAC7E;IACH,CAAC;CAAA;AA3BD,0CA2BC;AAED,SAAsB,cAAc,CAAC,MAAyB;;QAC5D,OAAO,IAAA,sBAAc,EAAC,kBAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClD,CAAC;CAAA;AAFD,wCAEC"}

package/dist/src/middleware/passport/sso/oidc.js

@@ -1,151 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getCallbackUrl = exports.fetchStrategyConfig = exports.strategyFactory = exports.buildVerifyFn = void 0;
-const node_fetch_1 = __importDefault(require("node-fetch"));
-const sso = __importStar(require("./sso"));
-const utils_1 = require("../utils");
-const utils_2 = require("../../../utils");
-const types_1 = require("@budibase/types");
-const OIDCStrategy = require("@techpass/passport-openidconnect").Strategy;
-function buildVerifyFn(saveUserFn) {
-    /**
-     * @param {*} issuer The identity provider base URL
-     * @param {*} sub The user ID
-     * @param {*} profile The user profile information. Created by passport from the /userinfo response
-     * @param {*} jwtClaims The parsed id_token claims
-     * @param {*} accessToken The access_token for contacting the identity provider - may or may not be a JWT
-     * @param {*} refreshToken The refresh_token for obtaining a new access_token - usually not a JWT
-     * @param {*} idToken The id_token - always a JWT
-     * @param {*} params The response body from requesting an access_token
-     * @param {*} done The passport callback: err, user, info
-     */
-    return (issuer, sub, profile, jwtClaims, accessToken, refreshToken, idToken, params, done) => __awaiter(this, void 0, void 0, function* () {
-        const details = {
-            // store the issuer info to enable sync in future
-            provider: issuer,
-            providerType: types_1.SSOProviderType.OIDC,
-            userId: profile.id,
-            profile: profile,
-            email: getEmail(profile, jwtClaims),
-            oauth2: {
-                accessToken: accessToken,
-                refreshToken: refreshToken,
-            },
-        };
-        return sso.authenticate(details, false, // don't require local accounts to exist
-        done, saveUserFn);
-    });
-}
-exports.buildVerifyFn = buildVerifyFn;
-/**
- * @param {*} profile The structured profile created by passport using the user info endpoint
- * @param {*} jwtClaims The claims returned in the id token
- */
-function getEmail(profile, jwtClaims) {
-    // profile not guaranteed to contain email e.g. github connected azure ad account
-    if (profile._json.email) {
-        return profile._json.email;
-    }
-    // fallback to id token email
-    if (jwtClaims.email) {
-        return jwtClaims.email;
-    }
-    // fallback to id token preferred username
-    const username = jwtClaims.preferred_username;
-    if (username && (0, utils_2.validEmail)(username)) {
-        return username;
-    }
-    throw new Error(`Could not determine user email from profile ${JSON.stringify(profile)} and claims ${JSON.stringify(jwtClaims)}`);
-}
-/**
- * Create an instance of the oidc passport strategy. This wrapper fetches the configuration
- * from couchDB rather than environment variables, using this factory is necessary for dynamically configuring passport.
- * @returns Dynamically configured Passport OIDC Strategy
- */
-function strategyFactory(config, saveUserFn) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            const verify = buildVerifyFn(saveUserFn);
-            const strategy = new OIDCStrategy(config, verify);
-            strategy.name = "oidc";
-            return strategy;
-        }
-        catch (err) {
-            console.error(err);
-            throw new Error(`Error constructing OIDC authentication strategy - ${err}`);
-        }
-    });
-}
-exports.strategyFactory = strategyFactory;
-function fetchStrategyConfig(oidcConfig, callbackUrl) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            const { clientID, clientSecret, configUrl } = oidcConfig;
-            if (!clientID || !clientSecret || !callbackUrl || !configUrl) {
-                // check for remote config and all required elements
-                throw new Error("Configuration invalid. Must contain clientID, clientSecret, callbackUrl and configUrl");
-            }
-            const response = yield (0, node_fetch_1.default)(configUrl);
-            if (!response.ok) {
-                throw new Error(`Unexpected response when fetching openid-configuration: ${response.statusText}`);
-            }
-            const body = yield response.json();
-            return {
-                issuer: body.issuer,
-                authorizationURL: body.authorization_endpoint,
-                tokenURL: body.token_endpoint,
-                userInfoURL: body.userinfo_endpoint,
-                clientID: clientID,
-                clientSecret: clientSecret,
-                callbackURL: callbackUrl,
-            };
-        }
-        catch (err) {
-            console.error(err);
-            throw new Error(`Error constructing OIDC authentication configuration - ${err}`);
-        }
-    });
-}
-exports.fetchStrategyConfig = fetchStrategyConfig;
-function getCallbackUrl() {
-    return __awaiter(this, void 0, void 0, function* () {
-        return (0, utils_1.ssoCallbackUrl)(types_1.ConfigType.OIDC);
-    });
-}
-exports.getCallbackUrl = getCallbackUrl;
-//# sourceMappingURL=oidc.js.map

package/dist/src/middleware/passport/sso/oidc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../../../../src/middleware/passport/sso/oidc.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4DAA8B;AAC9B,2CAA4B;AAC5B,oCAAyC;AACzC,0CAA2C;AAC3C,2CASwB;AAExB,MAAM,YAAY,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAA;AAEzE,SAAgB,aAAa,CAAC,UAA+B;IAC3D;;;;;;;;;;OAUG;IACH,OAAO,CACL,MAAc,EACd,GAAW,EACX,OAAmB,EACnB,SAAoB,EACpB,WAAmB,EACnB,YAAoB,EACpB,OAAe,EACf,MAAW,EACX,IAAc,EACd,EAAE;QACF,MAAM,OAAO,GAAmB;YAC9B,iDAAiD;YACjD,QAAQ,EAAE,MAAM;YAChB,YAAY,EAAE,uBAAe,CAAC,IAAI;YAClC,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;YACnC,MAAM,EAAE;gBACN,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;aAC3B;SACF,CAAA;QAED,OAAO,GAAG,CAAC,YAAY,CACrB,OAAO,EACP,KAAK,EAAE,wCAAwC;QAC/C,IAAI,EACJ,UAAU,CACX,CAAA;IACH,CAAC,CAAA,CAAA;AACH,CAAC;AA3CD,sCA2CC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,OAAmB,EAAE,SAAoB;IACzD,iFAAiF;IACjF,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE;QACvB,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAA;KAC3B;IAED,6BAA6B;IAC7B,IAAI,SAAS,CAAC,KAAK,EAAE;QACnB,OAAO,SAAS,CAAC,KAAK,CAAA;KACvB;IAED,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,kBAAkB,CAAA;IAC7C,IAAI,QAAQ,IAAI,IAAA,kBAAU,EAAC,QAAQ,CAAC,EAAE;QACpC,OAAO,QAAQ,CAAA;KAChB;IAED,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,SAAS,CAC3D,OAAO,CACR,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAC5C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAsB,eAAe,CACnC,MAAiC,EACjC,UAA+B;;QAE/B,IAAI;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;YACxC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjD,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAA;YACtB,OAAO,QAAQ,CAAA;SAChB;QAAC,OAAO,GAAQ,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAA;SAC5E;IACH,CAAC;CAAA;AAbD,0CAaC;AAED,SAAsB,mBAAmB,CACvC,UAA2B,EAC3B,WAAoB;;QAEpB,IAAI;YACF,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,UAAU,CAAA;YAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE;gBAC5D,oDAAoD;gBACpD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAA;aACF;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,SAAS,CAAC,CAAA;YAEvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAChB,MAAM,IAAI,KAAK,CACb,2DAA2D,QAAQ,CAAC,UAAU,EAAE,CACjF,CAAA;aACF;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAElC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,gBAAgB,EAAE,IAAI,CAAC,sBAAsB;gBAC7C,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,WAAW,EAAE,IAAI,CAAC,iBAAiB;gBACnC,QAAQ,EAAE,QAAQ;gBAClB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;aACzB,CAAA;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClB,MAAM,IAAI,KAAK,CACb,0DAA0D,GAAG,EAAE,CAChE,CAAA;SACF;IACH,CAAC;CAAA;AAvCD,kDAuCC;AAED,SAAsB,cAAc;;QAClC,OAAO,IAAA,sBAAc,EAAC,kBAAU,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;CAAA;AAFD,wCAEC"}