@budibase/backend-core 3.2.24 → 3.2.25

package/dist/index.js

@@ -27675,7 +27675,7 @@ __export(permissions_exports, {
   BUILTIN_PERMISSIONS: () => BUILTIN_PERMISSIONS,
   CREATOR: () => CREATOR,
   GLOBAL_BUILDER: () => GLOBAL_BUILDER,
-  Permission: () => Permission,
+  PermissionImpl: () => PermissionImpl,
   PermissionLevel: () => PermissionLevel,
   PermissionType: () => PermissionType,
   doesHaveBasePermission: () => doesHaveBasePermission,
@@ -27687,7 +27687,7 @@ __export(permissions_exports, {
 });
 var import_flatten = __toESM(require("lodash/flatten"));
 var import_cloneDeep2 = __toESM(require("lodash/fp/cloneDeep"));
-var Permission = class {
+var PermissionImpl = class {
   constructor(type, level) {
     this.type = type;
     this.level = level;
@@ -27729,52 +27729,52 @@ var BUILTIN_PERMISSIONS = {
     _id: "public" /* PUBLIC */,
     name: "Public",
     permissions: [
-      new Permission("webhook" /* WEBHOOK */, "execute" /* EXECUTE */)
+      new PermissionImpl("webhook" /* WEBHOOK */, "execute" /* EXECUTE */)
     ]
   },
   READ_ONLY: {
     _id: "read_only" /* READ_ONLY */,
     name: "Read only",
     permissions: [
-      new Permission("query" /* QUERY */, "read" /* READ */),
-      new Permission("table" /* TABLE */, "read" /* READ */),
-      new Permission("app" /* APP */, "read" /* READ */)
+      new PermissionImpl("query" /* QUERY */, "read" /* READ */),
+      new PermissionImpl("table" /* TABLE */, "read" /* READ */),
+      new PermissionImpl("app" /* APP */, "read" /* READ */)
     ]
   },
   WRITE: {
     _id: "write" /* WRITE */,
     name: "Read/Write",
     permissions: [
-      new Permission("query" /* QUERY */, "write" /* WRITE */),
-      new Permission("table" /* TABLE */, "write" /* WRITE */),
-      new Permission("automation" /* AUTOMATION */, "execute" /* EXECUTE */),
-      new Permission("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
-      new Permission("app" /* APP */, "read" /* READ */)
+      new PermissionImpl("query" /* QUERY */, "write" /* WRITE */),
+      new PermissionImpl("table" /* TABLE */, "write" /* WRITE */),
+      new PermissionImpl("automation" /* AUTOMATION */, "execute" /* EXECUTE */),
+      new PermissionImpl("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
+      new PermissionImpl("app" /* APP */, "read" /* READ */)
     ]
   },
   POWER: {
     _id: "power" /* POWER */,
     name: "Power",
     permissions: [
-      new Permission("table" /* TABLE */, "write" /* WRITE */),
-      new Permission("user" /* USER */, "read" /* READ */),
-      new Permission("automation" /* AUTOMATION */, "execute" /* EXECUTE */),
-      new Permission("webhook" /* WEBHOOK */, "read" /* READ */),
-      new Permission("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
-      new Permission("app" /* APP */, "read" /* READ */)
+      new PermissionImpl("table" /* TABLE */, "write" /* WRITE */),
+      new PermissionImpl("user" /* USER */, "read" /* READ */),
+      new PermissionImpl("automation" /* AUTOMATION */, "execute" /* EXECUTE */),
+      new PermissionImpl("webhook" /* WEBHOOK */, "read" /* READ */),
+      new PermissionImpl("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
+      new PermissionImpl("app" /* APP */, "read" /* READ */)
     ]
   },
   ADMIN: {
     _id: "admin" /* ADMIN */,
     name: "Admin",
     permissions: [
-      new Permission("table" /* TABLE */, "admin" /* ADMIN */),
-      new Permission("user" /* USER */, "admin" /* ADMIN */),
-      new Permission("automation" /* AUTOMATION */, "admin" /* ADMIN */),
-      new Permission("webhook" /* WEBHOOK */, "read" /* READ */),
-      new Permission("query" /* QUERY */, "admin" /* ADMIN */),
-      new Permission("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
-      new Permission("app" /* APP */, "read" /* READ */)
+      new PermissionImpl("table" /* TABLE */, "admin" /* ADMIN */),
+      new PermissionImpl("user" /* USER */, "admin" /* ADMIN */),
+      new PermissionImpl("automation" /* AUTOMATION */, "admin" /* ADMIN */),
+      new PermissionImpl("webhook" /* WEBHOOK */, "read" /* READ */),
+      new PermissionImpl("query" /* QUERY */, "admin" /* ADMIN */),
+      new PermissionImpl("legacy_view" /* LEGACY_VIEW */, "read" /* READ */),
+      new PermissionImpl("app" /* APP */, "read" /* READ */)
     ]
   }
 };
@@ -28710,25 +28710,32 @@ async function checkApiKey(apiKey, populateUser) {
     }
   });
 }
+function getHeader(ctx, header) {
+  const contents = ctx.request.headers[header];
+  if (Array.isArray(contents)) {
+    throw new Error("Unexpected header format");
+  }
+  return contents;
+}
 function authenticated_default(noAuthPatterns = [], opts = {
   publicAllowed: false
 }) {
   const noAuthOptions = noAuthPatterns ? buildMatcherRegex(noAuthPatterns) : [];
   return async (ctx, next) => {
     let publicEndpoint = false;
-    const version = ctx.request.headers["x-budibase-api-version" /* API_VER */];
+    const version = getHeader(ctx, "x-budibase-api-version" /* API_VER */);
     const found = matches(ctx, noAuthOptions);
     if (found) {
       publicEndpoint = true;
     }
     try {
-      let headerToken = ctx.request.headers["x-budibase-token" /* TOKEN */];
+      let headerToken = getHeader(ctx, "x-budibase-token" /* TOKEN */);
       const authCookie = getCookie(ctx, "budibase:auth" /* Auth */) || openJwt(headerToken);
-      let apiKey = ctx.request.headers["x-budibase-api-key" /* API_KEY */];
+      let apiKey = getHeader(ctx, "x-budibase-api-key" /* API_KEY */);
       if (!apiKey && ctx.request.headers["authorization" /* AUTHORIZATION */]) {
         apiKey = ctx.request.headers["authorization" /* AUTHORIZATION */].split(" ")[1];
       }
-      const tenantId = ctx.request.headers["x-budibase-tenant-id" /* TENANT_ID */];
+      const tenantId = getHeader(ctx, "x-budibase-tenant-id" /* TENANT_ID */);
       let authenticated = false, user = void 0, internal = false, loginMethod = void 0;
       if (authCookie && !apiKey) {
         const sessionId = authCookie.sessionId;
@@ -28825,9 +28832,10 @@ function authenticated_default(noAuthPatterns = [], opts = {
 }
 
 // src/middleware/auditLog.ts
-var auditLog_default2 = async (ctx, next) => {
+var middleware = async (ctx, next) => {
   return next();
 };
+var auditLog_default2 = middleware;
 
 // src/middleware/tenancy.ts
 function tenancy_default(allowQueryStringPatterns, noTenancyPatterns, opts = { noTenancyRequired: false }) {