@budibase/backend-core 2.9.39-alpha.8 → 2.9.39

package/dist/src/middleware/passport/sso/sso.js

@@ -1,149 +1,165 @@
 "use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
 };
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var sso_exports = {};
-__export(sso_exports, {
-  authenticate: () => authenticate,
-  ssoSaveUserNoOp: () => ssoSaveUserNoOp
-});
-module.exports = __toCommonJS(sso_exports);
-var import_db = require("../../../db");
-var import_utils = require("../utils");
-var users = __toESM(require("../../../users"));
-var context = __toESM(require("../../../context"));
-var import_node_fetch = __toESM(require("node-fetch"));
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticate = exports.ssoSaveUserNoOp = void 0;
+const db_1 = require("../../../db");
+const utils_1 = require("../utils");
+const users = __importStar(require("../../../users"));
+const context = __importStar(require("../../../context"));
+const node_fetch_1 = __importDefault(require("node-fetch"));
+// no-op function for user save
+// - this allows datasource auth and access token refresh to work correctly
+// - prefer no-op over an optional argument to ensure function is provided to login flows
 const ssoSaveUserNoOp = (user, opts) => Promise.resolve(user);
-async function authenticate(details, requireLocalAccount = true, done, saveUserFn) {
-  if (!saveUserFn) {
-    throw new Error("Save user function must be provided");
-  }
-  if (!details.userId) {
-    return (0, import_utils.authError)(done, "sso user id required");
-  }
-  if (!details.email) {
-    return (0, import_utils.authError)(done, "sso user email required");
-  }
-  const userId = (0, import_db.generateGlobalUserID)(details.userId);
-  let dbUser;
-  try {
-    dbUser = await users.getById(userId);
-  } catch (err) {
-    if (!err.status || err.status !== 404) {
-      return (0, import_utils.authError)(
-        done,
-        "Unexpected error when retrieving existing user",
-        err
-      );
-    }
-  }
-  if (!dbUser) {
-    dbUser = await users.getGlobalUserByEmail(details.email);
-  }
-  if (!dbUser && requireLocalAccount) {
-    return (0, import_utils.authError)(
-      done,
-      "Email does not yet exist. You must set up your local budibase account first."
-    );
-  }
-  if (!dbUser) {
-    dbUser = {
-      _id: userId,
-      email: details.email,
-      roles: {},
-      tenantId: context.getTenantId()
-    };
-  }
-  let ssoUser = await syncUser(dbUser, details);
-  ssoUser.forceResetPassword = false;
-  try {
-    delete ssoUser.password;
-    ssoUser = await saveUserFn(ssoUser, {
-      hashPassword: false,
-      requirePassword: false
+exports.ssoSaveUserNoOp = ssoSaveUserNoOp;
+/**
+ * Common authentication logic for third parties. e.g. OAuth, OIDC.
+ */
+function authenticate(details, requireLocalAccount = true, done, saveUserFn) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!saveUserFn) {
+            throw new Error("Save user function must be provided");
+        }
+        if (!details.userId) {
+            return (0, utils_1.authError)(done, "sso user id required");
+        }
+        if (!details.email) {
+            return (0, utils_1.authError)(done, "sso user email required");
+        }
+        // use the third party id
+        const userId = (0, db_1.generateGlobalUserID)(details.userId);
+        let dbUser;
+        // try to load by id
+        try {
+            dbUser = yield users.getById(userId);
+        }
+        catch (err) {
+            // abort when not 404 error
+            if (!err.status || err.status !== 404) {
+                return (0, utils_1.authError)(done, "Unexpected error when retrieving existing user", err);
+            }
+        }
+        // fallback to loading by email
+        if (!dbUser) {
+            dbUser = yield users.getGlobalUserByEmail(details.email);
+        }
+        // exit early if there is still no user and auto creation is disabled
+        if (!dbUser && requireLocalAccount) {
+            return (0, utils_1.authError)(done, "Email does not yet exist. You must set up your local budibase account first.");
+        }
+        // first time creation
+        if (!dbUser) {
+            // setup a blank user using the third party id
+            dbUser = {
+                _id: userId,
+                email: details.email,
+                roles: {},
+                tenantId: context.getTenantId(),
+            };
+        }
+        let ssoUser = yield syncUser(dbUser, details);
+        // never prompt for password reset
+        ssoUser.forceResetPassword = false;
+        try {
+            // don't try to re-save any existing password
+            delete ssoUser.password;
+            // create or sync the user
+            ssoUser = (yield saveUserFn(ssoUser, {
+                hashPassword: false,
+                requirePassword: false,
+            }));
+        }
+        catch (err) {
+            return (0, utils_1.authError)(done, "Error saving user", err);
+        }
+        return done(null, ssoUser);
     });
-  } catch (err) {
-    return (0, import_utils.authError)(done, "Error saving user", err);
-  }
-  return done(null, ssoUser);
 }
-async function getProfilePictureUrl(user, details) {
-  const pictureUrl = details.profile?._json.picture;
-  if (pictureUrl) {
-    const response = await (0, import_node_fetch.default)(pictureUrl);
-    if (response.status === 200) {
-      const type = response.headers.get("content-type");
-      if (type.startsWith("image/")) {
-        return pictureUrl;
-      }
-    }
-  }
+exports.authenticate = authenticate;
+function getProfilePictureUrl(user, details) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        const pictureUrl = (_a = details.profile) === null || _a === void 0 ? void 0 : _a._json.picture;
+        if (pictureUrl) {
+            const response = yield (0, node_fetch_1.default)(pictureUrl);
+            if (response.status === 200) {
+                const type = response.headers.get("content-type");
+                if (type.startsWith("image/")) {
+                    return pictureUrl;
+                }
+            }
+        }
+    });
 }
-async function syncUser(user, details) {
-  let firstName;
-  let lastName;
-  let pictureUrl;
-  let oauth2;
-  let thirdPartyProfile;
-  if (details.profile) {
-    const profile = details.profile;
-    if (profile.name) {
-      const name = profile.name;
-      if (name.givenName) {
-        firstName = name.givenName;
-      }
-      if (name.familyName) {
-        lastName = name.familyName;
-      }
-    }
-    pictureUrl = await getProfilePictureUrl(user, details);
-    thirdPartyProfile = {
-      ...profile._json
-    };
-  }
-  if (details.oauth2) {
-    oauth2 = {
-      ...details.oauth2
-    };
-  }
-  return {
-    ...user,
-    provider: details.provider,
-    providerType: details.providerType,
-    firstName,
-    lastName,
-    thirdPartyProfile,
-    pictureUrl,
-    oauth2
-  };
+/**
+ * @returns a user that has been sync'd with third party information
+ */
+function syncUser(user, details) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let firstName;
+        let lastName;
+        let pictureUrl;
+        let oauth2;
+        let thirdPartyProfile;
+        if (details.profile) {
+            const profile = details.profile;
+            if (profile.name) {
+                const name = profile.name;
+                // first name
+                if (name.givenName) {
+                    firstName = name.givenName;
+                }
+                // last name
+                if (name.familyName) {
+                    lastName = name.familyName;
+                }
+            }
+            pictureUrl = yield getProfilePictureUrl(user, details);
+            thirdPartyProfile = Object.assign({}, profile._json);
+        }
+        // oauth tokens for future use
+        if (details.oauth2) {
+            oauth2 = Object.assign({}, details.oauth2);
+        }
+        return Object.assign(Object.assign({}, user), { provider: details.provider, providerType: details.providerType, firstName,
+            lastName,
+            thirdPartyProfile,
+            pictureUrl,
+            oauth2 });
+    });
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  authenticate,
-  ssoSaveUserNoOp
-});
-//# sourceMappingURL=sso.js.map
+//# sourceMappingURL=sso.js.map

package/dist/src/middleware/passport/sso/sso.js.map

@@ -1,7 +1 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/middleware/passport/sso/sso.ts"],
-  "sourcesContent": ["import { generateGlobalUserID } from \"../../../db\"\nimport { authError } from \"../utils\"\nimport * as users from \"../../../users\"\nimport * as context from \"../../../context\"\nimport fetch from \"node-fetch\"\nimport {\n  SaveSSOUserFunction,\n  SaveUserOpts,\n  SSOAuthDetails,\n  SSOUser,\n  User,\n} from \"@budibase/types\"\n\n// no-op function for user save\n// - this allows datasource auth and access token refresh to work correctly\n// - prefer no-op over an optional argument to ensure function is provided to login flows\nexport const ssoSaveUserNoOp: SaveSSOUserFunction = (\n  user: SSOUser,\n  opts: SaveUserOpts\n) => Promise.resolve(user)\n\n/**\n * Common authentication logic for third parties. e.g. OAuth, OIDC.\n */\nexport async function authenticate(\n  details: SSOAuthDetails,\n  requireLocalAccount: boolean = true,\n  done: any,\n  saveUserFn: SaveSSOUserFunction\n) {\n  if (!saveUserFn) {\n    throw new Error(\"Save user function must be provided\")\n  }\n  if (!details.userId) {\n    return authError(done, \"sso user id required\")\n  }\n  if (!details.email) {\n    return authError(done, \"sso user email required\")\n  }\n\n  // use the third party id\n  const userId = generateGlobalUserID(details.userId)\n\n  let dbUser: User | undefined\n\n  // try to load by id\n  try {\n    dbUser = await users.getById(userId)\n  } catch (err: any) {\n    // abort when not 404 error\n    if (!err.status || err.status !== 404) {\n      return authError(\n        done,\n        \"Unexpected error when retrieving existing user\",\n        err\n      )\n    }\n  }\n\n  // fallback to loading by email\n  if (!dbUser) {\n    dbUser = await users.getGlobalUserByEmail(details.email)\n  }\n\n  // exit early if there is still no user and auto creation is disabled\n  if (!dbUser && requireLocalAccount) {\n    return authError(\n      done,\n      \"Email does not yet exist. You must set up your local budibase account first.\"\n    )\n  }\n\n  // first time creation\n  if (!dbUser) {\n    // setup a blank user using the third party id\n    dbUser = {\n      _id: userId,\n      email: details.email,\n      roles: {},\n      tenantId: context.getTenantId(),\n    }\n  }\n\n  let ssoUser = await syncUser(dbUser, details)\n  // never prompt for password reset\n  ssoUser.forceResetPassword = false\n\n  try {\n    // don't try to re-save any existing password\n    delete ssoUser.password\n    // create or sync the user\n    ssoUser = (await saveUserFn(ssoUser, {\n      hashPassword: false,\n      requirePassword: false,\n    })) as SSOUser\n  } catch (err: any) {\n    return authError(done, \"Error saving user\", err)\n  }\n\n  return done(null, ssoUser)\n}\n\nasync function getProfilePictureUrl(user: User, details: SSOAuthDetails) {\n  const pictureUrl = details.profile?._json.picture\n  if (pictureUrl) {\n    const response = await fetch(pictureUrl)\n    if (response.status === 200) {\n      const type = response.headers.get(\"content-type\") as string\n      if (type.startsWith(\"image/\")) {\n        return pictureUrl\n      }\n    }\n  }\n}\n\n/**\n * @returns a user that has been sync'd with third party information\n */\nasync function syncUser(user: User, details: SSOAuthDetails): Promise<SSOUser> {\n  let firstName\n  let lastName\n  let pictureUrl\n  let oauth2\n  let thirdPartyProfile\n\n  if (details.profile) {\n    const profile = details.profile\n\n    if (profile.name) {\n      const name = profile.name\n      // first name\n      if (name.givenName) {\n        firstName = name.givenName\n      }\n      // last name\n      if (name.familyName) {\n        lastName = name.familyName\n      }\n    }\n\n    pictureUrl = await getProfilePictureUrl(user, details)\n\n    thirdPartyProfile = {\n      ...profile._json,\n    }\n  }\n\n  // oauth tokens for future use\n  if (details.oauth2) {\n    oauth2 = {\n      ...details.oauth2,\n    }\n  }\n\n  return {\n    ...user,\n    provider: details.provider,\n    providerType: details.providerType,\n    firstName,\n    lastName,\n    thirdPartyProfile,\n    pictureUrl,\n    oauth2,\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAqC;AACrC,mBAA0B;AAC1B,YAAuB;AACvB,cAAyB;AACzB,wBAAkB;AAYX,MAAM,kBAAuC,CAClD,MACA,SACG,QAAQ,QAAQ,IAAI;AAKzB,eAAsB,aACpB,SACA,sBAA+B,MAC/B,MACA,YACA;AACA,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,MAAI,CAAC,QAAQ,QAAQ;AACnB,eAAO,wBAAU,MAAM,sBAAsB;AAAA,EAC/C;AACA,MAAI,CAAC,QAAQ,OAAO;AAClB,eAAO,wBAAU,MAAM,yBAAyB;AAAA,EAClD;AAGA,QAAM,aAAS,gCAAqB,QAAQ,MAAM;AAElD,MAAI;AAGJ,MAAI;AACF,aAAS,MAAM,MAAM,QAAQ,MAAM;AAAA,EACrC,SAAS,KAAU;AAEjB,QAAI,CAAC,IAAI,UAAU,IAAI,WAAW,KAAK;AACrC,iBAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,CAAC,QAAQ;AACX,aAAS,MAAM,MAAM,qBAAqB,QAAQ,KAAK;AAAA,EACzD;AAGA,MAAI,CAAC,UAAU,qBAAqB;AAClC,eAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,MAAI,CAAC,QAAQ;AAEX,aAAS;AAAA,MACP,KAAK;AAAA,MACL,OAAO,QAAQ;AAAA,MACf,OAAO,CAAC;AAAA,MACR,UAAU,QAAQ,YAAY;AAAA,IAChC;AAAA,EACF;AAEA,MAAI,UAAU,MAAM,SAAS,QAAQ,OAAO;AAE5C,UAAQ,qBAAqB;AAE7B,MAAI;AAEF,WAAO,QAAQ;AAEf,cAAW,MAAM,WAAW,SAAS;AAAA,MACnC,cAAc;AAAA,MACd,iBAAiB;AAAA,IACnB,CAAC;AAAA,EACH,SAAS,KAAU;AACjB,eAAO,wBAAU,MAAM,qBAAqB,GAAG;AAAA,EACjD;AAEA,SAAO,KAAK,MAAM,OAAO;AAC3B;AAEA,eAAe,qBAAqB,MAAY,SAAyB;AACvE,QAAM,aAAa,QAAQ,SAAS,MAAM;AAC1C,MAAI,YAAY;AACd,UAAM,WAAW,UAAM,kBAAAA,SAAM,UAAU;AACvC,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,OAAO,SAAS,QAAQ,IAAI,cAAc;AAChD,UAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,SAAS,MAAY,SAA2C;AAC7E,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,QAAQ,SAAS;AACnB,UAAM,UAAU,QAAQ;AAExB,QAAI,QAAQ,MAAM;AAChB,YAAM,OAAO,QAAQ;AAErB,UAAI,KAAK,WAAW;AAClB,oBAAY,KAAK;AAAA,MACnB;AAEA,UAAI,KAAK,YAAY;AACnB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAEA,iBAAa,MAAM,qBAAqB,MAAM,OAAO;AAErD,wBAAoB;AAAA,MAClB,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAGA,MAAI,QAAQ,QAAQ;AAClB,aAAS;AAAA,MACP,GAAG,QAAQ;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
-  "names": ["fetch"]
-}
+{"version":3,"file":"sso.js","sourceRoot":"","sources":["../../../../../src/middleware/passport/sso/sso.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAkD;AAClD,oCAAoC;AACpC,sDAAuC;AACvC,0DAA2C;AAC3C,4DAA8B;AAS9B,+BAA+B;AAC/B,2EAA2E;AAC3E,yFAAyF;AAClF,MAAM,eAAe,GAAwB,CAClD,IAAa,EACb,IAAkB,EAClB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAHb,QAAA,eAAe,mBAGF;AAE1B;;GAEG;AACH,SAAsB,YAAY,CAChC,OAAuB,EACvB,sBAA+B,IAAI,EACnC,IAAS,EACT,UAA+B;;QAE/B,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;SACvD;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACnB,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;SAC/C;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAClB,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;SAClD;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,IAAA,yBAAoB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAEnD,IAAI,MAAwB,CAAA;QAE5B,oBAAoB;QACpB,IAAI;YACF,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;SACrC;QAAC,OAAO,GAAQ,EAAE;YACjB,2BAA2B;YAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;gBACrC,OAAO,IAAA,iBAAS,EACd,IAAI,EACJ,gDAAgD,EAChD,GAAG,CACJ,CAAA;aACF;SACF;QAED,+BAA+B;QAC/B,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;SACzD;QAED,qEAAqE;QACrE,IAAI,CAAC,MAAM,IAAI,mBAAmB,EAAE;YAClC,OAAO,IAAA,iBAAS,EACd,IAAI,EACJ,8EAA8E,CAC/E,CAAA;SACF;QAED,sBAAsB;QACtB,IAAI,CAAC,MAAM,EAAE;YACX,8CAA8C;YAC9C,MAAM,GAAG;gBACP,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE;aAChC,CAAA;SACF;QAED,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7C,kCAAkC;QAClC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAA;QAElC,IAAI;YACF,6CAA6C;YAC7C,OAAO,OAAO,CAAC,QAAQ,CAAA;YACvB,0BAA0B;YAC1B,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE;gBACnC,YAAY,EAAE,KAAK;gBACnB,eAAe,EAAE,KAAK;aACvB,CAAC,CAAY,CAAA;SACf;QAAC,OAAO,GAAQ,EAAE;YACjB,OAAO,IAAA,iBAAS,EAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;SACjD;QAED,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5B,CAAC;CAAA;AA5ED,oCA4EC;AAED,SAAe,oBAAoB,CAAC,IAAU,EAAE,OAAuB;;;QACrE,MAAM,UAAU,GAAG,MAAA,OAAO,CAAC,OAAO,0CAAE,KAAK,CAAC,OAAO,CAAA;QACjD,IAAI,UAAU,EAAE;YACd,MAAM,QAAQ,GAAG,MAAM,IAAA,oBAAK,EAAC,UAAU,CAAC,CAAA;YACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAW,CAAA;gBAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;oBAC7B,OAAO,UAAU,CAAA;iBAClB;aACF;SACF;;CACF;AAED;;GAEG;AACH,SAAe,QAAQ,CAAC,IAAU,EAAE,OAAuB;;QACzD,IAAI,SAAS,CAAA;QACb,IAAI,QAAQ,CAAA;QACZ,IAAI,UAAU,CAAA;QACd,IAAI,MAAM,CAAA;QACV,IAAI,iBAAiB,CAAA;QAErB,IAAI,OAAO,CAAC,OAAO,EAAE;YACnB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;YAE/B,IAAI,OAAO,CAAC,IAAI,EAAE;gBAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;gBACzB,aAAa;gBACb,IAAI,IAAI,CAAC,SAAS,EAAE;oBAClB,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;iBAC3B;gBACD,YAAY;gBACZ,IAAI,IAAI,CAAC,UAAU,EAAE;oBACnB,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAA;iBAC3B;aACF;YAED,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAEtD,iBAAiB,qBACZ,OAAO,CAAC,KAAK,CACjB,CAAA;SACF;QAED,8BAA8B;QAC9B,IAAI,OAAO,CAAC,MAAM,EAAE;YAClB,MAAM,qBACD,OAAO,CAAC,MAAM,CAClB,CAAA;SACF;QAED,uCACK,IAAI,KACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAC1B,YAAY,EAAE,OAAO,CAAC,YAAY,EAClC,SAAS;YACT,QAAQ;YACR,iBAAiB;YACjB,UAAU;YACV,MAAM,IACP;IACH,CAAC;CAAA"}

package/dist/src/middleware/passport/utils.js

@@ -1,62 +1,66 @@
 "use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
 };
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var utils_exports = {};
-__export(utils_exports, {
-  authError: () => authError,
-  ssoCallbackUrl: () => ssoCallbackUrl
-});
-module.exports = __toCommonJS(utils_exports);
-var import_context = require("../../context");
-var configs = __toESM(require("../../configs"));
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ssoCallbackUrl = exports.authError = void 0;
+const context_1 = require("../../context");
+const configs = __importStar(require("../../configs"));
+/**
+ * Utility to handle authentication errors.
+ *
+ * @param {*} done The passport callback.
+ * @param {*} message Message that will be returned in the response body
+ * @param {*} err (Optional) error that will be logged
+ */
 function authError(done, message, err) {
-  return done(
-    err,
-    null,
-    // never return a user
-    { message }
-  );
+    return done(err, null, // never return a user
+    { message: message });
 }
-async function ssoCallbackUrl(type, config) {
-  if (config && config.callbackURL) {
-    return config.callbackURL;
-  }
-  const settingsConfig = await configs.getSettingsConfig();
-  let callbackUrl = `/api/global/auth`;
-  if ((0, import_context.isMultiTenant)()) {
-    callbackUrl += `/${(0, import_context.getTenantId)()}`;
-  }
-  callbackUrl += `/${type}/callback`;
-  return `${settingsConfig.platformUrl}${callbackUrl}`;
+exports.authError = authError;
+function ssoCallbackUrl(type, config) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // incase there is a callback URL from before
+        if (config && config.callbackURL) {
+            return config.callbackURL;
+        }
+        const settingsConfig = yield configs.getSettingsConfig();
+        let callbackUrl = `/api/global/auth`;
+        if ((0, context_1.isMultiTenant)()) {
+            callbackUrl += `/${(0, context_1.getTenantId)()}`;
+        }
+        callbackUrl += `/${type}/callback`;
+        return `${settingsConfig.platformUrl}${callbackUrl}`;
+    });
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  authError,
-  ssoCallbackUrl
-});
-//# sourceMappingURL=utils.js.map
+exports.ssoCallbackUrl = ssoCallbackUrl;
+//# sourceMappingURL=utils.js.map

package/dist/src/middleware/passport/utils.js.map

@@ -1,7 +1 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/middleware/passport/utils.ts"],
-  "sourcesContent": ["import { getTenantId, isMultiTenant } from \"../../context\"\nimport * as configs from \"../../configs\"\nimport { ConfigType, GoogleInnerConfig } from \"@budibase/types\"\n\n/**\n * Utility to handle authentication errors.\n *\n * @param {*} done The passport callback.\n * @param {*} message Message that will be returned in the response body\n * @param {*} err (Optional) error that will be logged\n */\n\nexport function authError(done: Function, message: string, err?: any) {\n  return done(\n    err,\n    null, // never return a user\n    { message: message }\n  )\n}\n\nexport async function ssoCallbackUrl(\n  type: ConfigType,\n  config?: GoogleInnerConfig\n) {\n  // incase there is a callback URL from before\n  if (config && (config as GoogleInnerConfig).callbackURL) {\n    return (config as GoogleInnerConfig).callbackURL as string\n  }\n  const settingsConfig = await configs.getSettingsConfig()\n\n  let callbackUrl = `/api/global/auth`\n  if (isMultiTenant()) {\n    callbackUrl += `/${getTenantId()}`\n  }\n  callbackUrl += `/${type}/callback`\n\n  return `${settingsConfig.platformUrl}${callbackUrl}`\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA2C;AAC3C,cAAyB;AAWlB,SAAS,UAAU,MAAgB,SAAiB,KAAW;AACpE,SAAO;AAAA,IACL;AAAA,IACA;AAAA;AAAA,IACA,EAAE,QAAiB;AAAA,EACrB;AACF;AAEA,eAAsB,eACpB,MACA,QACA;AAEA,MAAI,UAAW,OAA6B,aAAa;AACvD,WAAQ,OAA6B;AAAA,EACvC;AACA,QAAM,iBAAiB,MAAM,QAAQ,kBAAkB;AAEvD,MAAI,cAAc;AAClB,UAAI,8BAAc,GAAG;AACnB,mBAAe,QAAI,4BAAY,CAAC;AAAA,EAClC;AACA,iBAAe,IAAI,IAAI;AAEvB,SAAO,GAAG,eAAe,WAAW,GAAG,WAAW;AACpD;",
-  "names": []
-}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/middleware/passport/utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA0D;AAC1D,uDAAwC;AAGxC;;;;;;GAMG;AAEH,SAAgB,SAAS,CAAC,IAAc,EAAE,OAAe,EAAE,GAAS;IAClE,OAAO,IAAI,CACT,GAAG,EACH,IAAI,EAAE,sBAAsB;IAC5B,EAAE,OAAO,EAAE,OAAO,EAAE,CACrB,CAAA;AACH,CAAC;AAND,8BAMC;AAED,SAAsB,cAAc,CAClC,IAAgB,EAChB,MAA0B;;QAE1B,6CAA6C;QAC7C,IAAI,MAAM,IAAK,MAA4B,CAAC,WAAW,EAAE;YACvD,OAAQ,MAA4B,CAAC,WAAqB,CAAA;SAC3D;QACD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAA;QAExD,IAAI,WAAW,GAAG,kBAAkB,CAAA;QACpC,IAAI,IAAA,uBAAa,GAAE,EAAE;YACnB,WAAW,IAAI,IAAI,IAAA,qBAAW,GAAE,EAAE,CAAA;SACnC;QACD,WAAW,IAAI,IAAI,IAAI,WAAW,CAAA;QAElC,OAAO,GAAG,cAAc,CAAC,WAAW,GAAG,WAAW,EAAE,CAAA;IACtD,CAAC;CAAA;AAjBD,wCAiBC"}

package/dist/src/middleware/querystringToBody.js

@@ -1,45 +1,29 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var querystringToBody_exports = {};
-__export(querystringToBody_exports, {
-  default: () => querystringToBody_default
-});
-module.exports = __toCommonJS(querystringToBody_exports);
-function querystringToBody_default(ctx, next) {
-  const queryString = ctx.request.query?.query;
-  if (ctx.request.method.toLowerCase() !== "get") {
-    ctx.throw(
-      500,
-      "Query to download middleware can only be used for get requests."
-    );
-  }
-  if (!queryString) {
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Expects a standard "query" query string property which is the JSON body
+ * of the request, which has to be sent via query string due to the requirement
+ * of making an endpoint a GET request e.g. downloading a file stream.
+ */
+function default_1(ctx, next) {
+    var _a;
+    const queryString = (_a = ctx.request.query) === null || _a === void 0 ? void 0 : _a.query;
+    if (ctx.request.method.toLowerCase() !== "get") {
+        ctx.throw(500, "Query to download middleware can only be used for get requests.");
+    }
+    if (!queryString) {
+        return next();
+    }
+    const decoded = decodeURIComponent(queryString);
+    let json;
+    try {
+        json = JSON.parse(decoded);
+    }
+    catch (err) {
+        return next();
+    }
+    ctx.request.body = json;
     return next();
-  }
-  const decoded = decodeURIComponent(queryString);
-  let json;
-  try {
-    json = JSON.parse(decoded);
-  } catch (err) {
-    return next();
-  }
-  ctx.request.body = json;
-  return next();
 }
-//# sourceMappingURL=querystringToBody.js.map
+exports.default = default_1;
+//# sourceMappingURL=querystringToBody.js.map

package/dist/src/middleware/querystringToBody.js.map

@@ -1,7 +1 @@
-{
-  "version": 3,
-  "sources": ["../../../src/middleware/querystringToBody.ts"],
-  "sourcesContent": ["import { Ctx } from \"@budibase/types\"\n\n/**\n * Expects a standard \"query\" query string property which is the JSON body\n * of the request, which has to be sent via query string due to the requirement\n * of making an endpoint a GET request e.g. downloading a file stream.\n */\nexport default function (ctx: Ctx, next: any) {\n  const queryString = ctx.request.query?.query as string | undefined\n  if (ctx.request.method.toLowerCase() !== \"get\") {\n    ctx.throw(\n      500,\n      \"Query to download middleware can only be used for get requests.\"\n    )\n  }\n  if (!queryString) {\n    return next()\n  }\n  const decoded = decodeURIComponent(queryString)\n  let json\n  try {\n    json = JSON.parse(decoded)\n  } catch (err) {\n    return next()\n  }\n  ctx.request.body = json\n  return next()\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOe,SAAR,0BAAkB,KAAU,MAAW;AAC5C,QAAM,cAAc,IAAI,QAAQ,OAAO;AACvC,MAAI,IAAI,QAAQ,OAAO,YAAY,MAAM,OAAO;AAC9C,QAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,aAAa;AAChB,WAAO,KAAK;AAAA,EACd;AACA,QAAM,UAAU,mBAAmB,WAAW;AAC9C,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,SAAS,KAAK;AACZ,WAAO,KAAK;AAAA,EACd;AACA,MAAI,QAAQ,OAAO;AACnB,SAAO,KAAK;AACd;",
-  "names": []
-}
+{"version":3,"file":"querystringToBody.js","sourceRoot":"","sources":["../../../src/middleware/querystringToBody.ts"],"names":[],"mappings":";;AAEA;;;;GAIG;AACH,mBAAyB,GAAQ,EAAE,IAAS;;IAC1C,MAAM,WAAW,GAAG,MAAA,GAAG,CAAC,OAAO,CAAC,KAAK,0CAAE,KAA2B,CAAA;IAClE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE;QAC9C,GAAG,CAAC,KAAK,CACP,GAAG,EACH,iEAAiE,CAClE,CAAA;KACF;IACD,IAAI,CAAC,WAAW,EAAE;QAChB,OAAO,IAAI,EAAE,CAAA;KACd;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAA;IAC/C,IAAI,IAAI,CAAA;IACR,IAAI;QACF,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;KAC3B;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO,IAAI,EAAE,CAAA;KACd;IACD,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;IACvB,OAAO,IAAI,EAAE,CAAA;AACf,CAAC;AApBD,4BAoBC"}