@budibase/backend-core 2.9.39-alpha.0 → 2.9.39-alpha.2

package/dist/src/middleware/index.js

@@ -0,0 +1,95 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var middleware_exports = {};
+__export(middleware_exports, {
+  adminOnly: () => import_adminOnly.default,
+  auditLog: () => import_auditLog.default,
+  authError: () => import_utils.authError,
+  authenticated: () => import_authenticated.default,
+  builderOnly: () => import_builderOnly.default,
+  builderOrAdmin: () => import_builderOrAdmin.default,
+  correlation: () => import_middleware2.default,
+  csrf: () => import_csrf.default,
+  datasource: () => datasource,
+  errorHandling: () => import_errorHandling.default,
+  google: () => google,
+  internalApi: () => import_internalApi.default,
+  joiValidator: () => joiValidator,
+  local: () => local,
+  oidc: () => oidc,
+  pino: () => import_middleware.default,
+  querystringToBody: () => import_querystringToBody.default,
+  ssoCallbackUrl: () => import_utils.ssoCallbackUrl,
+  tenancy: () => import_tenancy.default
+});
+module.exports = __toCommonJS(middleware_exports);
+var local = __toESM(require("./passport/local"));
+var google = __toESM(require("./passport/sso/google"));
+var oidc = __toESM(require("./passport/sso/oidc"));
+var datasourceGoogle = __toESM(require("./passport/datasource/google"));
+var import_utils = require("./passport/utils");
+var import_authenticated = __toESM(require("./authenticated"));
+var import_auditLog = __toESM(require("./auditLog"));
+var import_tenancy = __toESM(require("./tenancy"));
+var import_internalApi = __toESM(require("./internalApi"));
+var import_csrf = __toESM(require("./csrf"));
+var import_adminOnly = __toESM(require("./adminOnly"));
+var import_builderOrAdmin = __toESM(require("./builderOrAdmin"));
+var import_builderOnly = __toESM(require("./builderOnly"));
+var import_middleware = __toESM(require("../logging/pino/middleware"));
+var import_middleware2 = __toESM(require("../logging/correlation/middleware"));
+var import_errorHandling = __toESM(require("./errorHandling"));
+var import_querystringToBody = __toESM(require("./querystringToBody"));
+var joiValidator = __toESM(require("./joi-validator"));
+const datasource = {
+  google: datasourceGoogle
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  adminOnly,
+  auditLog,
+  authError,
+  authenticated,
+  builderOnly,
+  builderOrAdmin,
+  correlation,
+  csrf,
+  datasource,
+  errorHandling,
+  google,
+  internalApi,
+  joiValidator,
+  local,
+  oidc,
+  pino,
+  querystringToBody,
+  ssoCallbackUrl,
+  tenancy
+});
+//# sourceMappingURL=index.js.map

package/dist/src/middleware/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/middleware/index.ts"],
+  "sourcesContent": ["export * as local from \"./passport/local\"\nexport * as google from \"./passport/sso/google\"\nexport * as oidc from \"./passport/sso/oidc\"\nimport * as datasourceGoogle from \"./passport/datasource/google\"\nexport const datasource = {\n  google: datasourceGoogle,\n}\nexport { authError, ssoCallbackUrl } from \"./passport/utils\"\nexport { default as authenticated } from \"./authenticated\"\nexport { default as auditLog } from \"./auditLog\"\nexport { default as tenancy } from \"./tenancy\"\nexport { default as internalApi } from \"./internalApi\"\nexport { default as csrf } from \"./csrf\"\nexport { default as adminOnly } from \"./adminOnly\"\nexport { default as builderOrAdmin } from \"./builderOrAdmin\"\nexport { default as builderOnly } from \"./builderOnly\"\nexport { default as pino } from \"../logging/pino/middleware\"\nexport { default as correlation } from \"../logging/correlation/middleware\"\nexport { default as errorHandling } from \"./errorHandling\"\nexport { default as querystringToBody } from \"./querystringToBody\"\nexport * as joiValidator from \"./joi-validator\"\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAAuB;AACvB,aAAwB;AACxB,WAAsB;AACtB,uBAAkC;AAIlC,mBAA0C;AAC1C,2BAAyC;AACzC,sBAAoC;AACpC,qBAAmC;AACnC,yBAAuC;AACvC,kBAAgC;AAChC,uBAAqC;AACrC,4BAA0C;AAC1C,yBAAuC;AACvC,wBAAgC;AAChC,IAAAA,qBAAuC;AACvC,2BAAyC;AACzC,+BAA6C;AAC7C,mBAA8B;AAhBvB,MAAM,aAAa;AAAA,EACxB,QAAQ;AACV;",
+  "names": ["import_middleware"]
+}

package/dist/src/middleware/internalApi.js

@@ -0,0 +1,39 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var internalApi_exports = {};
+__export(internalApi_exports, {
+  default: () => internalApi_default
+});
+module.exports = __toCommonJS(internalApi_exports);
+var import_constants = require("../constants");
+var import_utils = require("../utils");
+var internalApi_default = async (ctx, next) => {
+  const apiKey = ctx.request.headers[import_constants.Header.API_KEY];
+  if (!apiKey) {
+    ctx.throw(403, "Unauthorized");
+  }
+  if (Array.isArray(apiKey)) {
+    ctx.throw(403, "Unauthorized");
+  }
+  if (!(0, import_utils.isValidInternalAPIKey)(apiKey)) {
+    ctx.throw(403, "Unauthorized");
+  }
+  return next();
+};
+//# sourceMappingURL=internalApi.js.map

package/dist/src/middleware/internalApi.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/middleware/internalApi.ts"],
+  "sourcesContent": ["import { Header } from \"../constants\"\nimport { BBContext } from \"@budibase/types\"\nimport { isValidInternalAPIKey } from \"../utils\"\n\n/**\n * API Key only endpoint.\n */\nexport default async (ctx: BBContext, next: any) => {\n  const apiKey = ctx.request.headers[Header.API_KEY]\n  if (!apiKey) {\n    ctx.throw(403, \"Unauthorized\")\n  }\n\n  if (Array.isArray(apiKey)) {\n    ctx.throw(403, \"Unauthorized\")\n  }\n\n  if (!isValidInternalAPIKey(apiKey)) {\n    ctx.throw(403, \"Unauthorized\")\n  }\n\n  return next()\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAuB;AAEvB,mBAAsC;AAKtC,IAAO,sBAAQ,OAAO,KAAgB,SAAc;AAClD,QAAM,SAAS,IAAI,QAAQ,QAAQ,wBAAO,OAAO;AACjD,MAAI,CAAC,QAAQ;AACX,QAAI,MAAM,KAAK,cAAc;AAAA,EAC/B;AAEA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,MAAM,KAAK,cAAc;AAAA,EAC/B;AAEA,MAAI,KAAC,oCAAsB,MAAM,GAAG;AAClC,QAAI,MAAM,KAAK,cAAc;AAAA,EAC/B;AAEA,SAAO,KAAK;AACd;",
+  "names": []
+}

package/dist/src/middleware/joi-validator.js

@@ -0,0 +1,73 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var joi_validator_exports = {};
+__export(joi_validator_exports, {
+  body: () => body,
+  params: () => params
+});
+module.exports = __toCommonJS(joi_validator_exports);
+var import_joi = __toESM(require("joi"));
+function validate(schema, property) {
+  return (ctx, next) => {
+    if (!schema) {
+      return next();
+    }
+    let params2 = null;
+    let reqProp = ctx.request?.[property];
+    if (ctx[property] != null) {
+      params2 = ctx[property];
+    } else if (reqProp != null) {
+      params2 = reqProp;
+    }
+    if (schema.append) {
+      schema = schema.append({
+        createdAt: import_joi.default.any().optional(),
+        updatedAt: import_joi.default.any().optional()
+      });
+    }
+    const { error } = schema.validate(params2);
+    if (error) {
+      ctx.throw(400, `Invalid ${property} - ${error.message}`);
+      return;
+    }
+    return next();
+  };
+}
+function body(schema) {
+  return validate(schema, "body");
+}
+function params(schema) {
+  return validate(schema, "params");
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  body,
+  params
+});
+//# sourceMappingURL=joi-validator.js.map

package/dist/src/middleware/joi-validator.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/middleware/joi-validator.ts"],
+  "sourcesContent": ["import Joi, { ObjectSchema } from \"joi\"\nimport { BBContext } from \"@budibase/types\"\n\nfunction validate(\n  schema: Joi.ObjectSchema | Joi.ArraySchema,\n  property: string\n) {\n  // Return a Koa middleware function\n  return (ctx: BBContext, next: any) => {\n    if (!schema) {\n      return next()\n    }\n    let params = null\n    // @ts-ignore\n    let reqProp = ctx.request?.[property]\n    if (ctx[property] != null) {\n      params = ctx[property]\n    } else if (reqProp != null) {\n      params = reqProp\n    }\n\n    // not all schemas have the append property e.g. array schemas\n    if ((schema as Joi.ObjectSchema).append) {\n      schema = (schema as Joi.ObjectSchema).append({\n        createdAt: Joi.any().optional(),\n        updatedAt: Joi.any().optional(),\n      })\n    }\n\n    const { error } = schema.validate(params)\n    if (error) {\n      ctx.throw(400, `Invalid ${property} - ${error.message}`)\n      return\n    }\n    return next()\n  }\n}\n\nexport function body(schema: Joi.ObjectSchema | Joi.ArraySchema) {\n  return validate(schema, \"body\")\n}\n\nexport function params(schema: Joi.ObjectSchema | Joi.ArraySchema) {\n  return validate(schema, \"params\")\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAAkC;AAGlC,SAAS,SACP,QACA,UACA;AAEA,SAAO,CAAC,KAAgB,SAAc;AACpC,QAAI,CAAC,QAAQ;AACX,aAAO,KAAK;AAAA,IACd;AACA,QAAIA,UAAS;AAEb,QAAI,UAAU,IAAI,UAAU,QAAQ;AACpC,QAAI,IAAI,QAAQ,KAAK,MAAM;AACzB,MAAAA,UAAS,IAAI,QAAQ;AAAA,IACvB,WAAW,WAAW,MAAM;AAC1B,MAAAA,UAAS;AAAA,IACX;AAGA,QAAK,OAA4B,QAAQ;AACvC,eAAU,OAA4B,OAAO;AAAA,QAC3C,WAAW,WAAAC,QAAI,IAAI,EAAE,SAAS;AAAA,QAC9B,WAAW,WAAAA,QAAI,IAAI,EAAE,SAAS;AAAA,MAChC,CAAC;AAAA,IACH;AAEA,UAAM,EAAE,MAAM,IAAI,OAAO,SAASD,OAAM;AACxC,QAAI,OAAO;AACT,UAAI,MAAM,KAAK,WAAW,QAAQ,MAAM,MAAM,OAAO,EAAE;AACvD;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,KAAK,QAA4C;AAC/D,SAAO,SAAS,QAAQ,MAAM;AAChC;AAEO,SAAS,OAAO,QAA4C;AACjE,SAAO,SAAS,QAAQ,QAAQ;AAClC;",
+  "names": ["params", "Joi"]
+}

package/dist/src/middleware/matchers.js

@@ -0,0 +1,62 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var matchers_exports = {};
+__export(matchers_exports, {
+  buildMatcherRegex: () => buildMatcherRegex,
+  matches: () => matches
+});
+module.exports = __toCommonJS(matchers_exports);
+const PARAM_REGEX = /\/:(.*?)(\/.*)?$/g;
+const buildMatcherRegex = (patterns) => {
+  if (!patterns) {
+    return [];
+  }
+  return patterns.map((pattern) => {
+    let route = pattern.route;
+    const method = pattern.method;
+    const strict = pattern.strict ? pattern.strict : false;
+    const matches2 = route.match(PARAM_REGEX);
+    if (matches2) {
+      for (let match of matches2) {
+        const suffix = match.endsWith("/") ? "/" : "";
+        const pattern2 = "/.*" + suffix;
+        route = route.replace(match, pattern2);
+      }
+    }
+    return { regex: new RegExp(route), method, strict, route };
+  });
+};
+const matches = (ctx, options) => {
+  return options.find(({ regex, method, strict, route }) => {
+    let urlMatch;
+    if (strict) {
+      urlMatch = ctx.request.url === route;
+    } else {
+      urlMatch = regex.test(ctx.request.url);
+    }
+    const methodMatch = method === "ALL" ? true : ctx.request.method.toLowerCase() === method.toLowerCase();
+    return urlMatch && methodMatch;
+  });
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildMatcherRegex,
+  matches
+});
+//# sourceMappingURL=matchers.js.map

package/dist/src/middleware/matchers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/middleware/matchers.ts"],
+  "sourcesContent": ["import { BBContext, EndpointMatcher, RegexMatcher } from \"@budibase/types\"\n\nconst PARAM_REGEX = /\\/:(.*?)(\\/.*)?$/g\n\nexport const buildMatcherRegex = (\n  patterns: EndpointMatcher[]\n): RegexMatcher[] => {\n  if (!patterns) {\n    return []\n  }\n  return patterns.map(pattern => {\n    let route = pattern.route\n    const method = pattern.method\n    const strict = pattern.strict ? pattern.strict : false\n\n    // if there is a param in the route\n    // use a wildcard pattern\n    const matches = route.match(PARAM_REGEX)\n    if (matches) {\n      for (let match of matches) {\n        const suffix = match.endsWith(\"/\") ? \"/\" : \"\"\n        const pattern = \"/.*\" + suffix\n        route = route.replace(match, pattern)\n      }\n    }\n\n    return { regex: new RegExp(route), method, strict, route }\n  })\n}\n\nexport const matches = (ctx: BBContext, options: RegexMatcher[]) => {\n  return options.find(({ regex, method, strict, route }) => {\n    let urlMatch\n    if (strict) {\n      urlMatch = ctx.request.url === route\n    } else {\n      urlMatch = regex.test(ctx.request.url)\n    }\n\n    const methodMatch =\n      method === \"ALL\"\n        ? true\n        : ctx.request.method.toLowerCase() === method.toLowerCase()\n\n    return urlMatch && methodMatch\n  })\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,MAAM,cAAc;AAEb,MAAM,oBAAoB,CAC/B,aACmB;AACnB,MAAI,CAAC,UAAU;AACb,WAAO,CAAC;AAAA,EACV;AACA,SAAO,SAAS,IAAI,aAAW;AAC7B,QAAI,QAAQ,QAAQ;AACpB,UAAM,SAAS,QAAQ;AACvB,UAAM,SAAS,QAAQ,SAAS,QAAQ,SAAS;AAIjD,UAAMA,WAAU,MAAM,MAAM,WAAW;AACvC,QAAIA,UAAS;AACX,eAAS,SAASA,UAAS;AACzB,cAAM,SAAS,MAAM,SAAS,GAAG,IAAI,MAAM;AAC3C,cAAMC,WAAU,QAAQ;AACxB,gBAAQ,MAAM,QAAQ,OAAOA,QAAO;AAAA,MACtC;AAAA,IACF;AAEA,WAAO,EAAE,OAAO,IAAI,OAAO,KAAK,GAAG,QAAQ,QAAQ,MAAM;AAAA,EAC3D,CAAC;AACH;AAEO,MAAM,UAAU,CAAC,KAAgB,YAA4B;AAClE,SAAO,QAAQ,KAAK,CAAC,EAAE,OAAO,QAAQ,QAAQ,MAAM,MAAM;AACxD,QAAI;AACJ,QAAI,QAAQ;AACV,iBAAW,IAAI,QAAQ,QAAQ;AAAA,IACjC,OAAO;AACL,iBAAW,MAAM,KAAK,IAAI,QAAQ,GAAG;AAAA,IACvC;AAEA,UAAM,cACJ,WAAW,QACP,OACA,IAAI,QAAQ,OAAO,YAAY,MAAM,OAAO,YAAY;AAE9D,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;",
+  "names": ["matches", "pattern"]
+}

package/dist/src/middleware/passport/datasource/google.js

@@ -0,0 +1,103 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var google_exports = {};
+__export(google_exports, {
+  postAuth: () => postAuth,
+  preAuth: () => preAuth
+});
+module.exports = __toCommonJS(google_exports);
+var google = __toESM(require("../sso/google"));
+var import_constants = require("../../../constants");
+var configs = __toESM(require("../../../configs"));
+var cache = __toESM(require("../../../cache"));
+var utils = __toESM(require("../../../utils"));
+var import_sso = require("../sso/sso");
+const GoogleStrategy = require("passport-google-oauth").OAuth2Strategy;
+async function fetchGoogleCreds() {
+  let config = await configs.getGoogleDatasourceConfig();
+  if (!config) {
+    throw new Error("No google configuration found");
+  }
+  return config;
+}
+async function preAuth(passport, ctx, next) {
+  const googleConfig = await fetchGoogleCreds();
+  const platformUrl = await configs.getPlatformUrl({ tenantAware: false });
+  let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`;
+  const strategy = await google.strategyFactory(
+    googleConfig,
+    callbackUrl,
+    import_sso.ssoSaveUserNoOp
+  );
+  if (!ctx.query.appId) {
+    ctx.throw(400, "appId query param not present.");
+  }
+  return passport.authenticate(strategy, {
+    scope: ["profile", "email", "https://www.googleapis.com/auth/spreadsheets"],
+    accessType: "offline",
+    prompt: "consent"
+  })(ctx, next);
+}
+async function postAuth(passport, ctx, next) {
+  const config = await fetchGoogleCreds();
+  const platformUrl = await configs.getPlatformUrl({ tenantAware: false });
+  let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`;
+  const authStateCookie = utils.getCookie(ctx, import_constants.Cookie.DatasourceAuth);
+  return passport.authenticate(
+    new GoogleStrategy(
+      {
+        clientID: config.clientID,
+        clientSecret: config.clientSecret,
+        callbackURL: callbackUrl
+      },
+      (accessToken, refreshToken, _profile, done) => {
+        utils.clearCookie(ctx, import_constants.Cookie.DatasourceAuth);
+        done(null, { accessToken, refreshToken });
+      }
+    ),
+    { successRedirect: "/", failureRedirect: "/error" },
+    async (err, tokens) => {
+      const baseUrl = `/builder/app/${authStateCookie.appId}/data`;
+      const id = utils.newid();
+      await cache.store(
+        `datasource:creation:${authStateCookie.appId}:google:${id}`,
+        {
+          tokens
+        }
+      );
+      ctx.redirect(`${baseUrl}/new?continue_google_setup=${id}`);
+    }
+  )(ctx, next);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  postAuth,
+  preAuth
+});
+//# sourceMappingURL=google.js.map

package/dist/src/middleware/passport/datasource/google.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/middleware/passport/datasource/google.ts"],
+  "sourcesContent": ["import * as google from \"../sso/google\"\nimport { Cookie } from \"../../../constants\"\nimport * as configs from \"../../../configs\"\nimport * as cache from \"../../../cache\"\nimport * as utils from \"../../../utils\"\nimport { UserCtx, SSOProfile } from \"@budibase/types\"\nimport { ssoSaveUserNoOp } from \"../sso/sso\"\n\nconst GoogleStrategy = require(\"passport-google-oauth\").OAuth2Strategy\n\ntype Passport = {\n  authenticate: any\n}\n\nasync function fetchGoogleCreds() {\n  let config = await configs.getGoogleDatasourceConfig()\n\n  if (!config) {\n    throw new Error(\"No google configuration found\")\n  }\n  return config\n}\n\nexport async function preAuth(\n  passport: Passport,\n  ctx: UserCtx,\n  next: Function\n) {\n  // get the relevant config\n  const googleConfig = await fetchGoogleCreds()\n  const platformUrl = await configs.getPlatformUrl({ tenantAware: false })\n\n  let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`\n  const strategy = await google.strategyFactory(\n    googleConfig,\n    callbackUrl,\n    ssoSaveUserNoOp\n  )\n\n  if (!ctx.query.appId) {\n    ctx.throw(400, \"appId query param not present.\")\n  }\n\n  return passport.authenticate(strategy, {\n    scope: [\"profile\", \"email\", \"https://www.googleapis.com/auth/spreadsheets\"],\n    accessType: \"offline\",\n    prompt: \"consent\",\n  })(ctx, next)\n}\n\nexport async function postAuth(\n  passport: Passport,\n  ctx: UserCtx,\n  next: Function\n) {\n  // get the relevant config\n  const config = await fetchGoogleCreds()\n  const platformUrl = await configs.getPlatformUrl({ tenantAware: false })\n\n  let callbackUrl = `${platformUrl}/api/global/auth/datasource/google/callback`\n  const authStateCookie = utils.getCookie(ctx, Cookie.DatasourceAuth)\n\n  return passport.authenticate(\n    new GoogleStrategy(\n      {\n        clientID: config.clientID,\n        clientSecret: config.clientSecret,\n        callbackURL: callbackUrl,\n      },\n      (\n        accessToken: string,\n        refreshToken: string,\n        _profile: SSOProfile,\n        done: Function\n      ) => {\n        utils.clearCookie(ctx, Cookie.DatasourceAuth)\n        done(null, { accessToken, refreshToken })\n      }\n    ),\n    { successRedirect: \"/\", failureRedirect: \"/error\" },\n    async (err: any, tokens: string[]) => {\n      const baseUrl = `/builder/app/${authStateCookie.appId}/data`\n\n      const id = utils.newid()\n      await cache.store(\n        `datasource:creation:${authStateCookie.appId}:google:${id}`,\n        {\n          tokens,\n        }\n      )\n\n      ctx.redirect(`${baseUrl}/new?continue_google_setup=${id}`)\n    }\n  )(ctx, next)\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAAwB;AACxB,uBAAuB;AACvB,cAAyB;AACzB,YAAuB;AACvB,YAAuB;AAEvB,iBAAgC;AAEhC,MAAM,iBAAiB,QAAQ,uBAAuB,EAAE;AAMxD,eAAe,mBAAmB;AAChC,MAAI,SAAS,MAAM,QAAQ,0BAA0B;AAErD,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AACA,SAAO;AACT;AAEA,eAAsB,QACpB,UACA,KACA,MACA;AAEA,QAAM,eAAe,MAAM,iBAAiB;AAC5C,QAAM,cAAc,MAAM,QAAQ,eAAe,EAAE,aAAa,MAAM,CAAC;AAEvE,MAAI,cAAc,GAAG,WAAW;AAChC,QAAM,WAAW,MAAM,OAAO;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,CAAC,IAAI,MAAM,OAAO;AACpB,QAAI,MAAM,KAAK,gCAAgC;AAAA,EACjD;AAEA,SAAO,SAAS,aAAa,UAAU;AAAA,IACrC,OAAO,CAAC,WAAW,SAAS,8CAA8C;AAAA,IAC1E,YAAY;AAAA,IACZ,QAAQ;AAAA,EACV,CAAC,EAAE,KAAK,IAAI;AACd;AAEA,eAAsB,SACpB,UACA,KACA,MACA;AAEA,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,cAAc,MAAM,QAAQ,eAAe,EAAE,aAAa,MAAM,CAAC;AAEvE,MAAI,cAAc,GAAG,WAAW;AAChC,QAAM,kBAAkB,MAAM,UAAU,KAAK,wBAAO,cAAc;AAElE,SAAO,SAAS;AAAA,IACd,IAAI;AAAA,MACF;AAAA,QACE,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,aAAa;AAAA,MACf;AAAA,MACA,CACE,aACA,cACA,UACA,SACG;AACH,cAAM,YAAY,KAAK,wBAAO,cAAc;AAC5C,aAAK,MAAM,EAAE,aAAa,aAAa,CAAC;AAAA,MAC1C;AAAA,IACF;AAAA,IACA,EAAE,iBAAiB,KAAK,iBAAiB,SAAS;AAAA,IAClD,OAAO,KAAU,WAAqB;AACpC,YAAM,UAAU,gBAAgB,gBAAgB,KAAK;AAErD,YAAM,KAAK,MAAM,MAAM;AACvB,YAAM,MAAM;AAAA,QACV,uBAAuB,gBAAgB,KAAK,WAAW,EAAE;AAAA,QACzD;AAAA,UACE;AAAA,QACF;AAAA,MACF;AAEA,UAAI,SAAS,GAAG,OAAO,8BAA8B,EAAE,EAAE;AAAA,IAC3D;AAAA,EACF,EAAE,KAAK,IAAI;AACb;",
+  "names": []
+}

package/dist/src/middleware/passport/local.js

@@ -0,0 +1,73 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var local_exports = {};
+__export(local_exports, {
+  authenticate: () => authenticate,
+  options: () => options
+});
+module.exports = __toCommonJS(local_exports);
+var import_constants = require("../../constants");
+var import_utils = require("../../utils");
+var users = __toESM(require("../../users"));
+var import_utils2 = require("./utils");
+const INVALID_ERR = "Invalid credentials";
+const EXPIRED = "This account has expired. Please reset your password";
+const options = {
+  passReqToCallback: true
+};
+async function authenticate(ctx, email, password, done) {
+  if (!email)
+    return (0, import_utils2.authError)(done, "Email Required");
+  if (!password)
+    return (0, import_utils2.authError)(done, "Password Required");
+  const dbUser = await users.getGlobalUserByEmail(email);
+  if (dbUser == null) {
+    console.info(`user=${email} could not be found`);
+    return (0, import_utils2.authError)(done, INVALID_ERR);
+  }
+  if (dbUser.status === import_constants.UserStatus.INACTIVE) {
+    console.info(`user=${email} is inactive`, dbUser);
+    return (0, import_utils2.authError)(done, INVALID_ERR);
+  }
+  if (!dbUser.password) {
+    console.info(`user=${email} has no password set`, dbUser);
+    return (0, import_utils2.authError)(done, EXPIRED);
+  }
+  if (!await (0, import_utils.compare)(password, dbUser.password)) {
+    return (0, import_utils2.authError)(done, INVALID_ERR);
+  }
+  delete dbUser.password;
+  return done(null, dbUser);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  authenticate,
+  options
+});
+//# sourceMappingURL=local.js.map

package/dist/src/middleware/passport/local.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/middleware/passport/local.ts"],
+  "sourcesContent": ["import { UserStatus } from \"../../constants\"\nimport { compare } from \"../../utils\"\nimport * as users from \"../../users\"\nimport { authError } from \"./utils\"\nimport { BBContext } from \"@budibase/types\"\n\nconst INVALID_ERR = \"Invalid credentials\"\nconst EXPIRED = \"This account has expired. Please reset your password\"\n\nexport const options = {\n  passReqToCallback: true,\n}\n\n/**\n * Passport Local Authentication Middleware.\n * @param {*} ctx the request structure\n * @param {*} email username to login with\n * @param {*} password plain text password to log in with\n * @param {*} done callback from passport to return user information and errors\n * @returns The authenticated user, or errors if they occur\n */\nexport async function authenticate(\n  ctx: BBContext,\n  email: string,\n  password: string,\n  done: Function\n) {\n  if (!email) return authError(done, \"Email Required\")\n  if (!password) return authError(done, \"Password Required\")\n\n  const dbUser = await users.getGlobalUserByEmail(email)\n  if (dbUser == null) {\n    console.info(`user=${email} could not be found`)\n    return authError(done, INVALID_ERR)\n  }\n\n  if (dbUser.status === UserStatus.INACTIVE) {\n    console.info(`user=${email} is inactive`, dbUser)\n    return authError(done, INVALID_ERR)\n  }\n\n  if (!dbUser.password) {\n    console.info(`user=${email} has no password set`, dbUser)\n    return authError(done, EXPIRED)\n  }\n\n  if (!(await compare(password, dbUser.password))) {\n    return authError(done, INVALID_ERR)\n  }\n\n  // intentionally remove the users password in payload\n  delete dbUser.password\n  return done(null, dbUser)\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAA2B;AAC3B,mBAAwB;AACxB,YAAuB;AACvB,IAAAA,gBAA0B;AAG1B,MAAM,cAAc;AACpB,MAAM,UAAU;AAET,MAAM,UAAU;AAAA,EACrB,mBAAmB;AACrB;AAUA,eAAsB,aACpB,KACA,OACA,UACA,MACA;AACA,MAAI,CAAC;AAAO,eAAO,yBAAU,MAAM,gBAAgB;AACnD,MAAI,CAAC;AAAU,eAAO,yBAAU,MAAM,mBAAmB;AAEzD,QAAM,SAAS,MAAM,MAAM,qBAAqB,KAAK;AACrD,MAAI,UAAU,MAAM;AAClB,YAAQ,KAAK,QAAQ,KAAK,qBAAqB;AAC/C,eAAO,yBAAU,MAAM,WAAW;AAAA,EACpC;AAEA,MAAI,OAAO,WAAW,4BAAW,UAAU;AACzC,YAAQ,KAAK,QAAQ,KAAK,gBAAgB,MAAM;AAChD,eAAO,yBAAU,MAAM,WAAW;AAAA,EACpC;AAEA,MAAI,CAAC,OAAO,UAAU;AACpB,YAAQ,KAAK,QAAQ,KAAK,wBAAwB,MAAM;AACxD,eAAO,yBAAU,MAAM,OAAO;AAAA,EAChC;AAEA,MAAI,CAAE,UAAM,sBAAQ,UAAU,OAAO,QAAQ,GAAI;AAC/C,eAAO,yBAAU,MAAM,WAAW;AAAA,EACpC;AAGA,SAAO,OAAO;AACd,SAAO,KAAK,MAAM,MAAM;AAC1B;",
+  "names": ["import_utils"]
+}

package/dist/src/middleware/passport/sso/google.js

@@ -0,0 +1,93 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var google_exports = {};
+__export(google_exports, {
+  buildVerifyFn: () => buildVerifyFn,
+  getCallbackUrl: () => getCallbackUrl,
+  strategyFactory: () => strategyFactory
+});
+module.exports = __toCommonJS(google_exports);
+var import_utils = require("../utils");
+var sso = __toESM(require("./sso"));
+var import_types = require("@budibase/types");
+const GoogleStrategy = require("passport-google-oauth").OAuth2Strategy;
+function buildVerifyFn(saveUserFn) {
+  return (accessToken, refreshToken, profile, done) => {
+    const details = {
+      provider: "google",
+      providerType: import_types.SSOProviderType.GOOGLE,
+      userId: profile.id,
+      profile,
+      email: profile._json.email,
+      oauth2: {
+        accessToken,
+        refreshToken
+      }
+    };
+    return sso.authenticate(
+      details,
+      true,
+      // require local accounts to exist
+      done,
+      saveUserFn
+    );
+  };
+}
+async function strategyFactory(config, callbackUrl, saveUserFn) {
+  try {
+    const { clientID, clientSecret } = config;
+    if (!clientID || !clientSecret) {
+      throw new Error(
+        "Configuration invalid. Must contain google clientID and clientSecret"
+      );
+    }
+    const verify = buildVerifyFn(saveUserFn);
+    return new GoogleStrategy(
+      {
+        clientID: config.clientID,
+        clientSecret: config.clientSecret,
+        callbackURL: callbackUrl
+      },
+      verify
+    );
+  } catch (err) {
+    console.error(err);
+    throw new Error(`Error constructing google authentication strategy: ${err}`);
+  }
+}
+async function getCallbackUrl(config) {
+  return (0, import_utils.ssoCallbackUrl)(import_types.ConfigType.GOOGLE, config);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildVerifyFn,
+  getCallbackUrl,
+  strategyFactory
+});
+//# sourceMappingURL=google.js.map

package/dist/src/middleware/passport/sso/google.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/middleware/passport/sso/google.ts"],
+  "sourcesContent": ["import { ssoCallbackUrl } from \"../utils\"\nimport * as sso from \"./sso\"\nimport {\n  ConfigType,\n  SSOProfile,\n  SSOAuthDetails,\n  SSOProviderType,\n  SaveSSOUserFunction,\n  GoogleInnerConfig,\n} from \"@budibase/types\"\nconst GoogleStrategy = require(\"passport-google-oauth\").OAuth2Strategy\n\nexport function buildVerifyFn(saveUserFn: SaveSSOUserFunction) {\n  return (\n    accessToken: string,\n    refreshToken: string,\n    profile: SSOProfile,\n    done: Function\n  ) => {\n    const details: SSOAuthDetails = {\n      provider: \"google\",\n      providerType: SSOProviderType.GOOGLE,\n      userId: profile.id,\n      profile: profile,\n      email: profile._json.email,\n      oauth2: {\n        accessToken,\n        refreshToken,\n      },\n    }\n\n    return sso.authenticate(\n      details,\n      true, // require local accounts to exist\n      done,\n      saveUserFn\n    )\n  }\n}\n\n/**\n * Create an instance of the google passport strategy. This wrapper fetches the configuration\n * from couchDB rather than environment variables, using this factory is necessary for dynamically configuring passport.\n * @returns Dynamically configured Passport Google Strategy\n */\nexport async function strategyFactory(\n  config: GoogleInnerConfig,\n  callbackUrl: string,\n  saveUserFn: SaveSSOUserFunction\n) {\n  try {\n    const { clientID, clientSecret } = config\n\n    if (!clientID || !clientSecret) {\n      throw new Error(\n        \"Configuration invalid. Must contain google clientID and clientSecret\"\n      )\n    }\n\n    const verify = buildVerifyFn(saveUserFn)\n    return new GoogleStrategy(\n      {\n        clientID: config.clientID,\n        clientSecret: config.clientSecret,\n        callbackURL: callbackUrl,\n      },\n      verify\n    )\n  } catch (err: any) {\n    console.error(err)\n    throw new Error(`Error constructing google authentication strategy: ${err}`)\n  }\n}\n\nexport async function getCallbackUrl(config: GoogleInnerConfig) {\n  return ssoCallbackUrl(ConfigType.GOOGLE, config)\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA+B;AAC/B,UAAqB;AACrB,mBAOO;AACP,MAAM,iBAAiB,QAAQ,uBAAuB,EAAE;AAEjD,SAAS,cAAc,YAAiC;AAC7D,SAAO,CACL,aACA,cACA,SACA,SACG;AACH,UAAM,UAA0B;AAAA,MAC9B,UAAU;AAAA,MACV,cAAc,6BAAgB;AAAA,MAC9B,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA,OAAO,QAAQ,MAAM;AAAA,MACrB,QAAQ;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,IAAI;AAAA,MACT;AAAA,MACA;AAAA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAsB,gBACpB,QACA,aACA,YACA;AACA,MAAI;AACF,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,cAAc,UAAU;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,aAAa;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,KAAU;AACjB,YAAQ,MAAM,GAAG;AACjB,UAAM,IAAI,MAAM,sDAAsD,GAAG,EAAE;AAAA,EAC7E;AACF;AAEA,eAAsB,eAAe,QAA2B;AAC9D,aAAO,6BAAe,wBAAW,QAAQ,MAAM;AACjD;",
+  "names": []
+}