@budibase/backend-core 3.2.1 → 3.2.3

package/dist/index.js

@@ -11234,7 +11234,7 @@ var require_lib3 = __commonJS({
 var require_utils = __commonJS({
   "../../node_modules/@techpass/passport-openidconnect/lib/utils.js"(exports) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     exports.originalURL = function(req, options2) {
       options2 = options2 || {};
       var app = req.app;
@@ -11254,7 +11254,7 @@ var require_utils = __commonJS({
       return a;
     };
     exports.uid = function(len) {
-      return crypto3.randomBytes(Math.ceil(len * 3 / 4)).toString("base64").slice(0, len);
+      return crypto4.randomBytes(Math.ceil(len * 3 / 4)).toString("base64").slice(0, len);
     };
   }
 });
@@ -11425,7 +11425,7 @@ var require_utils2 = __commonJS({
 var require_oauth = __commonJS({
   "../../node_modules/oauth/lib/oauth.js"(exports) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var sha1 = require_sha1();
     var http = require("http");
     var https = require("https");
@@ -11597,10 +11597,10 @@ var require_oauth = __commonJS({
         hash2 = key;
       } else if (this._signatureMethod == "RSA-SHA1") {
         key = this._privateKey || "";
-        hash2 = crypto3.createSign("RSA-SHA1").update(signatureBase).sign(key, "base64");
+        hash2 = crypto4.createSign("RSA-SHA1").update(signatureBase).sign(key, "base64");
       } else {
-        if (crypto3.Hmac) {
-          hash2 = crypto3.createHmac("sha1", key).update(signatureBase).digest("base64");
+        if (crypto4.Hmac) {
+          hash2 = crypto4.createHmac("sha1", key).update(signatureBase).digest("base64");
         } else {
           hash2 = sha1.HMACSHA1(key, signatureBase);
         }
@@ -11954,7 +11954,7 @@ var require_oauth2 = __commonJS({
   "../../node_modules/oauth/lib/oauth2.js"(exports) {
     "use strict";
     var querystring = require("querystring");
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var https = require("https");
     var http = require("http");
     var URL2 = require("url");
@@ -24012,7 +24012,7 @@ var require_helpers = __commonJS({
   "../../node_modules/request/lib/helpers.js"(exports) {
     "use strict";
     var jsonSafeStringify = require_stringify();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Buffer2 = require_safe_buffer().Buffer;
     var defer = typeof setImmediate === "undefined" ? process.nextTick : setImmediate;
     function paramsHaveRequestBody(params2) {
@@ -24028,7 +24028,7 @@ var require_helpers = __commonJS({
       return ret;
     }
     function md5(str) {
-      return crypto3.createHash("md5").update(str).digest("hex");
+      return crypto4.createHash("md5").update(str).digest("hex");
     }
     function isReadStream(rs) {
       return rs.readable && rs.path && rs.mode;
@@ -24066,7 +24066,7 @@ var require_helpers = __commonJS({
 var require_aws_sign2 = __commonJS({
   "../../node_modules/aws-sign2/index.js"(exports, module2) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var parse = require("url").parse;
     var keys2 = [
       "acl",
@@ -24090,7 +24090,7 @@ var require_aws_sign2 = __commonJS({
     module2.exports = authorization;
     module2.exports.authorization = authorization;
     function hmacSha1(options2) {
-      return crypto3.createHmac("sha1", options2.secret).update(options2.message).digest("base64");
+      return crypto4.createHmac("sha1", options2.secret).update(options2.message).digest("base64");
     }
     module2.exports.hmacSha1 = hmacSha1;
     function sign(options2) {
@@ -24246,14 +24246,14 @@ var require_aws4 = __commonJS({
     var aws4 = exports;
     var url = require("url");
     var querystring = require("querystring");
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var lru = require_lru();
     var credentialsCache = lru(1e3);
     function hmac(key, string, encoding) {
-      return crypto3.createHmac("sha256", key).update(string, "utf8").digest(encoding);
+      return crypto4.createHmac("sha256", key).update(string, "utf8").digest(encoding);
     }
     function hash2(string, encoding) {
-      return crypto3.createHash("sha256").update(string, "utf8").digest(encoding);
+      return crypto4.createHash("sha256").update(string, "utf8").digest(encoding);
     }
     function encodeRfc3986(urlEncodedString) {
       return urlEncodedString.replace(/[!'()*]/g, function(c) {
@@ -29573,23 +29573,23 @@ var require_nacl_fast = __commonJS({
         randombytes = fn;
       };
       (function() {
-        var crypto3 = typeof self !== "undefined" ? self.crypto || self.msCrypto : null;
-        if (crypto3 && crypto3.getRandomValues) {
+        var crypto4 = typeof self !== "undefined" ? self.crypto || self.msCrypto : null;
+        if (crypto4 && crypto4.getRandomValues) {
           var QUOTA = 65536;
           nacl.setPRNG(function(x, n) {
             var i, v = new Uint8Array(n);
             for (i = 0; i < n; i += QUOTA) {
-              crypto3.getRandomValues(v.subarray(i, i + Math.min(n - i, QUOTA)));
+              crypto4.getRandomValues(v.subarray(i, i + Math.min(n - i, QUOTA)));
             }
             for (i = 0; i < n; i++)
               x[i] = v[i];
             cleanup3(v);
           });
         } else if (typeof require !== "undefined") {
-          crypto3 = require("crypto");
-          if (crypto3 && crypto3.randomBytes) {
+          crypto4 = require("crypto");
+          if (crypto4 && crypto4.randomBytes) {
             nacl.setPRNG(function(x, n) {
-              var i, v = crypto3.randomBytes(n);
+              var i, v = crypto4.randomBytes(n);
               for (i = 0; i < n; i++)
                 x[i] = v[i];
               cleanup3(v);
@@ -29629,7 +29629,7 @@ var require_utils3 = __commonJS({
     var Buffer2 = require_safer().Buffer;
     var PrivateKey = require_private_key();
     var Key = require_key();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var algs = require_algs();
     var asn1 = require_lib4();
     var ec = require_ec();
@@ -29713,7 +29713,7 @@ var require_utils3 = __commonJS({
         bufs.push(salt);
         D = Buffer2.concat(bufs);
         for (var j = 0; j < count; ++j)
-          D = crypto3.createHash("md5").update(D).digest();
+          D = crypto4.createHash("md5").update(D).digest();
         material = Buffer2.concat([material, D]);
         D_prev = D;
       }
@@ -29735,13 +29735,13 @@ var require_utils3 = __commonJS({
       return Buffer2.concat(ts).slice(0, size);
       function T(I) {
         hkey.writeUInt32BE(I, hkey.length - 4);
-        var hmac = crypto3.createHmac(hashAlg, passphrase);
+        var hmac = crypto4.createHmac(hashAlg, passphrase);
         hmac.update(hkey);
         var Ti = hmac.digest();
         var Uc = Ti;
         var c = 1;
         while (c++ < iterations) {
-          hmac = crypto3.createHmac(hashAlg, passphrase);
+          hmac = crypto4.createHmac(hashAlg, passphrase);
           hmac.update(Uc);
           Uc = hmac.digest();
           for (var x = 0; x < Ti.length; ++x)
@@ -30112,7 +30112,7 @@ var require_signature = __commonJS({
     var assert = require_assert();
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var errs = require_errors();
     var utils = require_utils3();
     var asn1 = require_lib4();
@@ -30492,7 +30492,7 @@ var require_sec = __commonJS({
 var require_ecc_jsbn = __commonJS({
   "../../node_modules/ecc-jsbn/index.js"(exports) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var BigInteger = require_jsbn().BigInteger;
     var ECPointFp = require_ec().ECPointFp;
     var Buffer2 = require_safer().Buffer;
@@ -30516,7 +30516,7 @@ var require_ecc_jsbn = __commonJS({
         }
       } else {
         var n1 = n.subtract(BigInteger.ONE);
-        var r = new BigInteger(crypto3.randomBytes(n.bitLength()));
+        var r = new BigInteger(crypto4.randomBytes(n.bitLength()));
         priv = r.mod(n1).add(BigInteger.ONE);
         this.P = c.getG().multiply(priv);
       }
@@ -30546,14 +30546,14 @@ var require_dhe = __commonJS({
       generateED25519
     };
     var assert = require_assert();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils3();
     var nacl = require_nacl_fast();
     var Key = require_key();
     var PrivateKey = require_private_key();
-    var CRYPTO_HAVE_ECDH = crypto3.createECDH !== void 0;
+    var CRYPTO_HAVE_ECDH = crypto4.createECDH !== void 0;
     var ecdh = require_ecc_jsbn();
     var ec = require_ec();
     var jsbn = require_jsbn().BigInteger;
@@ -30567,7 +30567,7 @@ var require_dhe = __commonJS({
         if (!CRYPTO_HAVE_ECDH) {
           throw new Error("Due to bugs in the node 0.10 crypto API, node 0.12.x or later is required to use DH");
         }
-        this._dh = crypto3.createDiffieHellman(
+        this._dh = crypto4.createDiffieHellman(
           key.part.p.data,
           void 0,
           key.part.g.data,
@@ -30594,7 +30594,7 @@ var require_dhe = __commonJS({
           "nistp384": "secp384r1",
           "nistp521": "secp521r1"
         }[key.curve];
-        this._dh = crypto3.createECDH(curve);
+        this._dh = crypto4.createECDH(curve);
         if (typeof this._dh !== "object" || typeof this._dh.setPrivateKey !== "function") {
           CRYPTO_HAVE_ECDH = false;
           DiffieHellman.call(this, key);
@@ -30746,7 +30746,7 @@ var require_dhe = __commonJS({
           return this._key;
         } else {
           var n = this._ecParams.getN();
-          var r = new jsbn(crypto3.randomBytes(n.bitLength()));
+          var r = new jsbn(crypto4.randomBytes(n.bitLength()));
           var n1 = n.subtract(jsbn.ONE);
           priv = r.mod(n1).add(jsbn.ONE);
           pub = this._ecParams.getG().multiply(priv);
@@ -30852,7 +30852,7 @@ var require_dhe = __commonJS({
           "nistp384": "secp384r1",
           "nistp521": "secp521r1"
         }[curve];
-        var dh = crypto3.createECDH(osCurve);
+        var dh = crypto4.createECDH(osCurve);
         dh.generateKeys();
         parts.push({
           name: "curve",
@@ -30870,7 +30870,7 @@ var require_dhe = __commonJS({
         var ecParams = new X9ECParameters(curve);
         var n = ecParams.getN();
         var cByteLen = Math.ceil((n.bitLength() + 64) / 8);
-        var c = new jsbn(crypto3.randomBytes(cByteLen));
+        var c = new jsbn(crypto4.randomBytes(cByteLen));
         var n1 = n.subtract(jsbn.ONE);
         var priv = c.mod(n1).add(jsbn.ONE);
         var pub = ecParams.getG().multiply(priv);
@@ -33207,7 +33207,7 @@ var require_ssh_private = __commonJS({
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils3();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Key = require_key();
     var PrivateKey = require_private_key();
     var pem = require_pem();
@@ -33281,7 +33281,7 @@ var require_ssh_private = __commonJS({
           out = Buffer2.from(out);
           var ckey = out.slice(0, cinf.keySize);
           var iv = out.slice(cinf.keySize, cinf.keySize + cinf.blockSize);
-          var cipherStream = crypto3.createDecipheriv(
+          var cipherStream = crypto4.createDecipheriv(
             cinf.opensslName,
             ckey,
             iv
@@ -33346,7 +33346,7 @@ var require_ssh_private = __commonJS({
       var privBuf;
       if (PrivateKey.isPrivateKey(key)) {
         privBuf = new SSHBuffer({});
-        var checkInt = crypto3.randomBytes(4).readUInt32BE(0);
+        var checkInt = crypto4.randomBytes(4).readUInt32BE(0);
         privBuf.writeInt(checkInt);
         privBuf.writeInt(checkInt);
         privBuf.write(key.toBuffer("rfc4253"));
@@ -33360,7 +33360,7 @@ var require_ssh_private = __commonJS({
         case "none":
           break;
         case "bcrypt":
-          var salt = crypto3.randomBytes(16);
+          var salt = crypto4.randomBytes(16);
           var rounds = 16;
           var kdfssh = new SSHBuffer({});
           kdfssh.writeBuffer(salt);
@@ -33387,7 +33387,7 @@ var require_ssh_private = __commonJS({
           out = Buffer2.from(out);
           var ckey = out.slice(0, cinf.keySize);
           var iv = out.slice(cinf.keySize, cinf.keySize + cinf.blockSize);
-          var cipherStream = crypto3.createCipheriv(
+          var cipherStream = crypto4.createCipheriv(
             cinf.opensslName,
             ckey,
             iv
@@ -33450,7 +33450,7 @@ var require_pem = __commonJS({
     };
     var assert = require_assert();
     var asn1 = require_lib4();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
     var utils = require_utils3();
@@ -33618,7 +33618,7 @@ var require_pem = __commonJS({
         alg = void 0;
       }
       if (cipher && key && iv) {
-        var cipherStream = crypto3.createDecipheriv(cipher, key, iv);
+        var cipherStream = crypto4.createDecipheriv(cipher, key, iv);
         var chunk, chunks = [];
         cipherStream.once("error", function(e) {
           if (e.toString().indexOf("bad decrypt") !== -1) {
@@ -34046,7 +34046,7 @@ var require_putty = __commonJS({
     var rfc4253 = require_rfc4253();
     var Key = require_key();
     var SSHBuffer = require_ssh_buffer();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var PrivateKey = require_private_key();
     var errors = require_errors();
     function read(buf, options2) {
@@ -34116,7 +34116,7 @@ var require_putty = __commonJS({
             );
           }
           var iv = Buffer2.alloc(16, 0);
-          var decipher = crypto3.createDecipheriv(
+          var decipher = crypto4.createDecipheriv(
             "aes-256-cbc",
             derivePPK2EncryptionKey(options2.passphrase),
             iv
@@ -34167,11 +34167,11 @@ var require_putty = __commonJS({
       return key;
     }
     function derivePPK2EncryptionKey(passphrase) {
-      var hash1 = crypto3.createHash("sha1").update(Buffer2.concat([
+      var hash1 = crypto4.createHash("sha1").update(Buffer2.concat([
         Buffer2.from([0, 0, 0, 0]),
         Buffer2.from(passphrase)
       ])).digest();
-      var hash2 = crypto3.createHash("sha1").update(Buffer2.concat([
+      var hash2 = crypto4.createHash("sha1").update(Buffer2.concat([
         Buffer2.from([0, 0, 0, 1]),
         Buffer2.from(passphrase)
       ])).digest();
@@ -34327,7 +34327,7 @@ var require_private_key = __commonJS({
     var assert = require_assert();
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature = require_signature();
     var errs = require_errors();
@@ -34438,14 +34438,14 @@ var require_private_key = __commonJS({
       var v, nm, err;
       try {
         nm = hashAlgo.toUpperCase();
-        v = crypto3.createSign(nm);
+        v = crypto4.createSign(nm);
       } catch (e) {
         err = e;
       }
       if (v === void 0 || err instanceof Error && err.message.match(/Unknown message digest/)) {
         nm = "RSA-";
         nm += hashAlgo.toUpperCase();
-        v = crypto3.createSign(nm);
+        v = crypto4.createSign(nm);
       }
       assert.ok(v, "failed to create verifier");
       var oldSign = v.sign.bind(v);
@@ -34531,7 +34531,7 @@ var require_identity = __commonJS({
     module2.exports = Identity6;
     var assert = require_assert();
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature = require_signature();
     var errs = require_errors();
@@ -34849,7 +34849,7 @@ var require_openssh_cert = __commonJS({
     };
     var assert = require_assert();
     var SSHBuffer = require_ssh_buffer();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
     var Key = require_key();
@@ -35038,7 +35038,7 @@ var require_openssh_cert = __commonJS({
       assert.object(cert.signatures.openssh, "signature for openssh format");
       var sig = cert.signatures.openssh;
       if (sig.nonce === void 0)
-        sig.nonce = crypto3.randomBytes(16);
+        sig.nonce = crypto4.randomBytes(16);
       var buf = new SSHBuffer({});
       buf.writeString(getCertType(cert.subjectKey));
       buf.writeBuffer(sig.nonce);
@@ -35844,7 +35844,7 @@ var require_certificate = __commonJS({
     var assert = require_assert();
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature = require_signature();
     var errs = require_errors();
@@ -35931,7 +35931,7 @@ var require_certificate = __commonJS({
         throw new InvalidAlgorithmError(algo);
       if (this._hashCache[algo])
         return this._hashCache[algo];
-      var hash2 = crypto3.createHash(algo).update(this.toBuffer("x509")).digest();
+      var hash2 = crypto4.createHash(algo).update(this.toBuffer("x509")).digest();
       this._hashCache[algo] = hash2;
       return hash2;
     };
@@ -36202,7 +36202,7 @@ var require_fingerprint = __commonJS({
     var assert = require_assert();
     var Buffer2 = require_safer().Buffer;
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var errs = require_errors();
     var Key = require_key();
     var PrivateKey = require_private_key();
@@ -36269,9 +36269,9 @@ var require_fingerprint = __commonJS({
         );
       }
       var theirHash = other.hash(this.algorithm, this.hashType);
-      var theirHash2 = crypto3.createHash(this.algorithm).update(theirHash).digest("base64");
+      var theirHash2 = crypto4.createHash(this.algorithm).update(theirHash).digest("base64");
       if (this.hash2 === void 0)
-        this.hash2 = crypto3.createHash(this.algorithm).update(this.hash).digest("base64");
+        this.hash2 = crypto4.createHash(this.algorithm).update(this.hash).digest("base64");
       return this.hash2 === theirHash2;
     };
     var base64RE = /^[A-Za-z0-9+\/=]+$/;
@@ -36397,7 +36397,7 @@ var require_key = __commonJS({
     module2.exports = Key;
     var assert = require_assert();
     var algs = require_algs();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Fingerprint = require_fingerprint();
     var Signature = require_signature();
     var DiffieHellman = require_dhe().DiffieHellman;
@@ -36495,7 +36495,7 @@ var require_key = __commonJS({
       } else {
         throw new Error("Hash type " + type + " not supported");
       }
-      var hash2 = crypto3.createHash(algo).update(buf).digest();
+      var hash2 = crypto4.createHash(algo).update(buf).digest();
       this._hashCache[cacheKey] = hash2;
       return hash2;
     };
@@ -36543,14 +36543,14 @@ var require_key = __commonJS({
       var v, nm, err;
       try {
         nm = hashAlgo.toUpperCase();
-        v = crypto3.createVerify(nm);
+        v = crypto4.createVerify(nm);
       } catch (e) {
         err = e;
       }
       if (v === void 0 || err instanceof Error && err.message.match(/Unknown message digest/)) {
         nm = "RSA-";
         nm += hashAlgo.toUpperCase();
-        v = crypto3.createVerify(nm);
+        v = crypto4.createVerify(nm);
       }
       assert.ok(v, "failed to create verifier");
       var oldVerify = v.verify.bind(v);
@@ -38355,7 +38355,7 @@ var require_signer = __commonJS({
   "../../node_modules/http-signature/lib/signer.js"(exports, module2) {
     "use strict";
     var assert = require_assert();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var http = require("http");
     var util = require("util");
     var sshpk = require_lib5();
@@ -38392,7 +38392,7 @@ var require_signer = __commonJS({
         this.rs_keyId = options2.keyId;
         if (typeof options2.key !== "string" && !Buffer.isBuffer(options2.key))
           throw new TypeError("options.key for HMAC must be a string or Buffer");
-        this.rs_signer = crypto3.createHmac(alg[1].toUpperCase(), options2.key);
+        this.rs_signer = crypto4.createHmac(alg[1].toUpperCase(), options2.key);
         this.rs_signer.sign = function() {
           var digest = this.digest("base64");
           return {
@@ -38610,7 +38610,7 @@ var require_signer = __commonJS({
         if (alg[0] === "hmac") {
           if (typeof options2.key !== "string" && !Buffer.isBuffer(options2.key))
             throw new TypeError("options.key must be a string or Buffer");
-          var hmac = crypto3.createHmac(alg[1].toUpperCase(), options2.key);
+          var hmac = crypto4.createHmac(alg[1].toUpperCase(), options2.key);
           hmac.update(stringToSign);
           signature = hmac.digest("base64");
         } else {
@@ -38656,7 +38656,7 @@ var require_verify = __commonJS({
   "../../node_modules/http-signature/lib/verify.js"(exports, module2) {
     "use strict";
     var assert = require_assert();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var sshpk = require_lib5();
     var utils = require_utils4();
     var HASH_ALGOS = utils.HASH_ALGOS;
@@ -38704,12 +38704,12 @@ var require_verify = __commonJS({
         if (alg[0] !== "hmac")
           return false;
         var hashAlg = alg[1].toUpperCase();
-        var hmac = crypto3.createHmac(hashAlg, secret);
+        var hmac = crypto4.createHmac(hashAlg, secret);
         hmac.update(parsedSignature.signingString);
-        var h1 = crypto3.createHmac(hashAlg, secret);
+        var h1 = crypto4.createHmac(hashAlg, secret);
         h1.update(hmac.digest());
         h1 = h1.digest();
-        var h2 = crypto3.createHmac(hashAlg, secret);
+        var h2 = crypto4.createHmac(hashAlg, secret);
         h2.update(new Buffer(parsedSignature.params.signature, "base64"));
         h2 = h2.digest();
         if (typeof h1 === "string")
@@ -56662,12 +56662,12 @@ var require_auth = __commonJS({
 var require_oauth_sign = __commonJS({
   "../../node_modules/oauth-sign/index.js"(exports) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     function sha(key, body2, algorithm) {
-      return crypto3.createHmac(algorithm, key).update(body2).digest("base64");
+      return crypto4.createHmac(algorithm, key).update(body2).digest("base64");
     }
     function rsa(key, body2) {
-      return crypto3.createSign("RSA-SHA1").update(body2).sign(key, "base64");
+      return crypto4.createSign("RSA-SHA1").update(body2).sign(key, "base64");
     }
     function rfc3986(str) {
       return encodeURIComponent(str).replace(/!/g, "%21").replace(/\*/g, "%2A").replace(/\(/g, "%28").replace(/\)/g, "%29").replace(/'/g, "%27");
@@ -56774,7 +56774,7 @@ var require_oauth4 = __commonJS({
     var caseless = require_caseless();
     var uuid2 = require("uuid/v4");
     var oauth = require_oauth_sign();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var Buffer2 = require_safe_buffer().Buffer;
     function OAuth(request) {
       this.request = request;
@@ -56826,7 +56826,7 @@ var require_oauth4 = __commonJS({
       if (["HMAC-SHA1", "RSA-SHA1"].indexOf(_oauth.signature_method || "HMAC-SHA1") < 0) {
         this.request.emit("error", new Error("oauth: " + _oauth.signature_method + " signature_method not supported with body_hash signing."));
       }
-      var shasum = crypto3.createHash("sha1");
+      var shasum = crypto4.createHash("sha1");
       shasum.update(body2 || "");
       var sha1 = shasum.digest("hex");
       return Buffer2.from(sha1, "hex").toString("base64");
@@ -56895,15 +56895,15 @@ var require_oauth4 = __commonJS({
 var require_hawk = __commonJS({
   "../../node_modules/request/lib/hawk.js"(exports) {
     "use strict";
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     function randomString(size) {
       var bits = (size + 1) * 6;
-      var buffer = crypto3.randomBytes(Math.ceil(bits / 8));
+      var buffer = crypto4.randomBytes(Math.ceil(bits / 8));
       var string = buffer.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
       return string.slice(0, size);
     }
     function calculatePayloadHash(payload, algorithm, contentType) {
-      var hash2 = crypto3.createHash(algorithm);
+      var hash2 = crypto4.createHash(algorithm);
       hash2.update("hawk.1.payload\n");
       hash2.update((contentType ? contentType.split(";")[0].trim().toLowerCase() : "") + "\n");
       hash2.update(payload || "");
@@ -56919,7 +56919,7 @@ var require_hawk = __commonJS({
       if (opts.app) {
         normalized = normalized + opts.app + "\n" + (opts.dlg || "") + "\n";
       }
-      var hmac = crypto3.createHmac(credentials.algorithm, credentials.key).update(normalized);
+      var hmac = crypto4.createHmac(credentials.algorithm, credentials.key).update(normalized);
       var digest = hmac.digest("base64");
       return digest;
     };
@@ -61340,7 +61340,7 @@ var require_strategy2 = __commonJS({
     var OAuth2 = require_oauth3().OAuth2;
     var SessionStateStore = require_session();
     var InternalOAuthError = require_internaloautherror();
-    var crypto3 = require("crypto");
+    var crypto4 = require("crypto");
     var base64url = require_base64url2();
     var AuthorizationError = require_authorizationerror();
     function Strategy(options2, verify) {
@@ -61729,11 +61729,11 @@ var require_strategy2 = __commonJS({
               delete meta[param];
           }
           if (config.pkce) {
-            var verifier = base64url(crypto3.pseudoRandomBytes(32));
+            var verifier = base64url(crypto4.pseudoRandomBytes(32));
             switch (config.pkce) {
               case "S256":
                 params2.code_challenge = base64url(
-                  crypto3.createHash("sha256").update(verifier).digest()
+                  crypto4.createHash("sha256").update(verifier).digest()
                 );
                 break;
               case "plain":
@@ -62956,7 +62956,7 @@ function getNextExecutionDates(cronExpression, limit2 = 4) {
 }
 function validate(cronExpression) {
   const result = (0, import_cron_validate.default)(cronExpression, {
-    preset: "npm-node-cron",
+    preset: "npm-cron-schedule",
     override: {
       useSeconds: false
     }
@@ -64369,7 +64369,10 @@ var environment = {
   BB_ADMIN_USER_EMAIL: process.env.BB_ADMIN_USER_EMAIL,
   BB_ADMIN_USER_PASSWORD: process.env.BB_ADMIN_USER_PASSWORD,
   OPENAI_API_KEY: process.env.OPENAI_API_KEY,
-  MIN_VERSION_WITHOUT_POWER_ROLE: process.env.MIN_VERSION_WITHOUT_POWER_ROLE || "3.0.0"
+  MIN_VERSION_WITHOUT_POWER_ROLE: process.env.MIN_VERSION_WITHOUT_POWER_ROLE || "3.0.0",
+  DISABLE_CONTENT_SECURITY_POLICY: process.env.DISABLE_CONTENT_SECURITY_POLICY,
+  // stopgap migration strategy until we can ensure backwards compat without unsafe-inline in CSP
+  DISABLE_CSP_UNSAFE_INLINE_SCRIPTS: process.env.DISABLE_CSP_UNSAFE_INLINE_SCRIPTS
 };
 function setEnv(newEnvVars) {
   const oldEnv = (0, import_lodash4.cloneDeep)(environment);
@@ -74682,6 +74685,7 @@ __export(middleware_exports, {
   builderOnly: () => builderOnly_default,
   builderOrAdmin: () => builderOrAdmin_default,
   correlation: () => middleware_default2,
+  csp: () => contentSecurityPolicy_default,
   csrf: () => csrf_default,
   datasource: () => datasource,
   errorHandling: () => errorHandling_default,
@@ -75640,6 +75644,116 @@ function querystringToBody_default(ctx, next) {
   return next();
 }
 
+// src/middleware/contentSecurityPolicy.ts
+var import_crypto2 = __toESM(require("crypto"));
+var CSP_DIRECTIVES = {
+  "default-src": ["'self'"],
+  "script-src": [
+    "'self'",
+    "'unsafe-eval'",
+    "https://*.budibase.net",
+    "https://cdn.budi.live",
+    "https://js.intercomcdn.com",
+    "https://widget.intercom.io",
+    "https://d2l5prqdbvm3op.cloudfront.net",
+    "https://us-assets.i.posthog.com"
+  ],
+  "style-src": [
+    "'self'",
+    "'unsafe-inline'",
+    "https://cdn.jsdelivr.net",
+    "https://fonts.googleapis.com",
+    "https://rsms.me",
+    "https://maxcdn.bootstrapcdn.com"
+  ],
+  "object-src": ["'none'"],
+  "base-uri": ["'self'"],
+  "connect-src": [
+    "'self'",
+    "https://*.budibase.app",
+    "https://*.budibaseqa.app",
+    "https://*.budibase.net",
+    "https://api-iam.intercom.io",
+    "https://api-ping.intercom.io",
+    "https://app.posthog.com",
+    "https://us.i.posthog.com",
+    "wss://nexus-websocket-a.intercom.io",
+    "wss://nexus-websocket-b.intercom.io",
+    "https://nexus-websocket-a.intercom.io",
+    "https://nexus-websocket-b.intercom.io",
+    "https://uploads.intercomcdn.com",
+    "https://uploads.intercomusercontent.com",
+    "https://*.amazonaws.com",
+    "https://*.s3.amazonaws.com",
+    "https://*.s3.us-east-2.amazonaws.com",
+    "https://*.s3.us-east-1.amazonaws.com",
+    "https://*.s3.us-west-1.amazonaws.com",
+    "https://*.s3.us-west-2.amazonaws.com",
+    "https://*.s3.af-south-1.amazonaws.com",
+    "https://*.s3.ap-east-1.amazonaws.com",
+    "https://*.s3.ap-south-1.amazonaws.com",
+    "https://*.s3.ap-northeast-2.amazonaws.com",
+    "https://*.s3.ap-southeast-1.amazonaws.com",
+    "https://*.s3.ap-southeast-2.amazonaws.com",
+    "https://*.s3.ap-northeast-1.amazonaws.com",
+    "https://*.s3.ca-central-1.amazonaws.com",
+    "https://*.s3.cn-north-1.amazonaws.com",
+    "https://*.s3.cn-northwest-1.amazonaws.com",
+    "https://*.s3.eu-central-1.amazonaws.com",
+    "https://*.s3.eu-west-1.amazonaws.com",
+    "https://*.s3.eu-west-2.amazonaws.com",
+    "https://*.s3.eu-south-1.amazonaws.com",
+    "https://*.s3.eu-west-3.amazonaws.com",
+    "https://*.s3.eu-north-1.amazonaws.com",
+    "https://*.s3.sa-east-1.amazonaws.com",
+    "https://*.s3.me-south-1.amazonaws.com",
+    "https://*.s3.us-gov-east-1.amazonaws.com",
+    "https://*.s3.us-gov-west-1.amazonaws.com",
+    "https://api.github.com"
+  ],
+  "font-src": [
+    "'self'",
+    "data:",
+    "https://cdn.jsdelivr.net",
+    "https://fonts.gstatic.com",
+    "https://rsms.me",
+    "https://maxcdn.bootstrapcdn.com",
+    "https://js.intercomcdn.com",
+    "https://fonts.intercomcdn.com"
+  ],
+  "frame-src": ["'self'", "https:"],
+  "img-src": ["http:", "https:", "data:", "blob:"],
+  "manifest-src": ["'self'"],
+  "media-src": [
+    "'self'",
+    "https://js.intercomcdn.com",
+    "https://cdn.budi.live"
+  ],
+  "worker-src": ["blob:"]
+};
+async function contentSecurityPolicy(ctx, next) {
+  try {
+    const nonce = import_crypto2.default.randomBytes(16).toString("base64");
+    const directives = { ...CSP_DIRECTIVES };
+    directives["script-src"] = [
+      ...CSP_DIRECTIVES["script-src"],
+      `'nonce-${nonce}'`
+    ];
+    if (!environment_default.DISABLE_CSP_UNSAFE_INLINE_SCRIPTS) {
+      directives["script-src"].push("'unsafe-inline'");
+    }
+    ctx.state.nonce = nonce;
+    const cspHeader = Object.entries(directives).map(([key, sources]) => `${key} ${sources.join(" ")}`).join("; ");
+    ctx.set("Content-Security-Policy", cspHeader);
+    await next();
+  } catch (err) {
+    console.error(
+      `Error occurred in Content-Security-Policy middleware: ${err}`
+    );
+  }
+}
+var contentSecurityPolicy_default = contentSecurityPolicy;
+
 // src/middleware/joi-validator.ts
 var joi_validator_exports = {};
 __export(joi_validator_exports, {