@budibase/backend-core 3.2.26 → 3.2.27

package/dist/src/tenancy/tenancy.js

@@ -1,125 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTenantIDFromCtx = exports.isUserInAppTenant = void 0;
-exports.addTenantToUrl = addTenantToUrl;
-const context_1 = require("../context");
-const types_1 = require("@budibase/types");
-const constants_1 = require("../constants");
-function addTenantToUrl(url) {
-    const tenantId = (0, context_1.getTenantId)();
-    if ((0, context_1.isMultiTenant)()) {
-        const char = url.indexOf("?") === -1 ? "?" : "&";
-        url += `${char}tenantId=${tenantId}`;
-    }
-    return url;
-}
-const isUserInAppTenant = (appId, user) => {
-    let userTenantId;
-    if (user) {
-        userTenantId = user.tenantId || context_1.DEFAULT_TENANT_ID;
-    }
-    else {
-        userTenantId = (0, context_1.getTenantId)();
-    }
-    const tenantId = (0, context_1.getTenantIDFromAppID)(appId) || context_1.DEFAULT_TENANT_ID;
-    return tenantId === userTenantId;
-};
-exports.isUserInAppTenant = isUserInAppTenant;
-const ALL_STRATEGIES = Object.values(types_1.TenantResolutionStrategy);
-const getTenantIDFromCtx = (ctx, opts) => {
-    var _a;
-    // exit early if not multi-tenant
-    if (!(0, context_1.isMultiTenant)()) {
-        return context_1.DEFAULT_TENANT_ID;
-    }
-    // opt defaults
-    if (opts.allowNoTenant === undefined) {
-        opts.allowNoTenant = false;
-    }
-    if (!opts.includeStrategies) {
-        opts.includeStrategies = ALL_STRATEGIES;
-    }
-    if (!opts.excludeStrategies) {
-        opts.excludeStrategies = [];
-    }
-    const isAllowed = (strategy) => {
-        var _a, _b;
-        // excluded takes precedence
-        if ((_a = opts.excludeStrategies) === null || _a === void 0 ? void 0 : _a.includes(strategy)) {
-            return false;
-        }
-        if ((_b = opts.includeStrategies) === null || _b === void 0 ? void 0 : _b.includes(strategy)) {
-            return true;
-        }
-    };
-    // always use user first
-    if (isAllowed(types_1.TenantResolutionStrategy.USER)) {
-        const userTenantId = (_a = ctx.user) === null || _a === void 0 ? void 0 : _a.tenantId;
-        if (userTenantId) {
-            return userTenantId;
-        }
-    }
-    // header
-    if (isAllowed(types_1.TenantResolutionStrategy.HEADER)) {
-        const headerTenantId = ctx.request.headers[constants_1.Header.TENANT_ID];
-        if (headerTenantId) {
-            return headerTenantId;
-        }
-    }
-    // query param
-    if (isAllowed(types_1.TenantResolutionStrategy.QUERY)) {
-        const queryTenantId = ctx.request.query.tenantId;
-        if (queryTenantId) {
-            return queryTenantId;
-        }
-    }
-    // subdomain
-    if (isAllowed(types_1.TenantResolutionStrategy.SUBDOMAIN)) {
-        // e.g. budibase.app or local.com:10000
-        let platformHost;
-        try {
-            platformHost = new URL((0, context_1.getPlatformURL)()).host.split(":")[0];
-        }
-        catch (err) {
-            // if invalid URL, just don't try to process subdomain
-            if (err.code !== "ERR_INVALID_URL") {
-                throw err;
-            }
-        }
-        // e.g. tenant.budibase.app or tenant.local.com
-        const requestHost = ctx.host;
-        // parse the tenant id from the difference
-        if (platformHost && requestHost.includes(platformHost)) {
-            const tenantId = requestHost.substring(0, requestHost.indexOf(`.${platformHost}`));
-            if (tenantId) {
-                return tenantId;
-            }
-        }
-    }
-    // path
-    if (isAllowed(types_1.TenantResolutionStrategy.PATH)) {
-        // params - have to parse manually due to koa-router not run yet
-        const match = ctx.matched.find((m) => !!m.paramNames.find((p) => p.name === "tenantId"));
-        // get the raw path url - without any query params
-        const ctxUrl = ctx.originalUrl;
-        let url;
-        if (ctxUrl.includes("?")) {
-            url = ctxUrl.split("?")[0];
-        }
-        else {
-            url = ctxUrl;
-        }
-        if (match) {
-            const params = match.params(url, match.captures(url), {});
-            if (params.tenantId) {
-                return params.tenantId;
-            }
-        }
-    }
-    if (!opts.allowNoTenant) {
-        ctx.throw(403, "Tenant id not set");
-    }
-    return undefined;
-};
-exports.getTenantIDFromCtx = getTenantIDFromCtx;
-//# sourceMappingURL=tenancy.js.map

package/dist/src/tenancy/tenancy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenancy.js","sourceRoot":"","sources":["../../../src/tenancy/tenancy.ts"],"names":[],"mappings":";;;AAcA,wCASC;AAvBD,wCAMmB;AACnB,2CAIwB;AACxB,4CAAqC;AAErC,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,QAAQ,GAAG,IAAA,qBAAW,GAAE,CAAA;IAE9B,IAAI,IAAA,uBAAa,GAAE,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QAChD,GAAG,IAAI,GAAG,IAAI,YAAY,QAAQ,EAAE,CAAA;IACtC,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,IAAU,EAAE,EAAE;IAC7D,IAAI,YAAY,CAAA;IAChB,IAAI,IAAI,EAAE,CAAC;QACT,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,2BAAiB,CAAA;IACnD,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,IAAA,qBAAW,GAAE,CAAA;IAC9B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,8BAAoB,EAAC,KAAK,CAAC,IAAI,2BAAiB,CAAA;IACjE,OAAO,QAAQ,KAAK,YAAY,CAAA;AAClC,CAAC,CAAA;AATY,QAAA,iBAAiB,qBAS7B;AAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,gCAAwB,CAAC,CAAA;AAEvD,MAAM,kBAAkB,GAAG,CAChC,GAAQ,EACR,IAAwB,EACJ,EAAE;;IACtB,iCAAiC;IACjC,IAAI,CAAC,IAAA,uBAAa,GAAE,EAAE,CAAC;QACrB,OAAO,2BAAiB,CAAA;IAC1B,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAA;IAC5B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,cAAc,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAA;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,QAAkC,EAAE,EAAE;;QACvD,4BAA4B;QAC5B,IAAI,MAAA,IAAI,CAAC,iBAAiB,0CAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,MAAA,IAAI,CAAC,iBAAiB,0CAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IAED,wBAAwB;IACxB,IAAI,SAAS,CAAC,gCAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAA,GAAG,CAAC,IAAI,0CAAE,QAAQ,CAAA;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAA;QACrB,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,SAAS,CAAC,gCAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAM,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,cAAwB,CAAA;QACjC,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,SAAS,CAAC,gCAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAA;QAChD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAuB,CAAA;QAChC,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,SAAS,CAAC,gCAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,uCAAuC;QACvC,IAAI,YAAY,CAAA;QAChB,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,GAAG,CAAC,IAAA,wBAAc,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,sDAAsD;YACtD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACnC,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,+CAA+C;QAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAA;QAC5B,0CAA0C;QAC1C,IAAI,YAAY,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CACpC,CAAC,EACD,WAAW,CAAC,OAAO,CAAC,IAAI,YAAY,EAAE,CAAC,CACxC,CAAA;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAA;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;IACP,IAAI,SAAS,CAAC,gCAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,gEAAgE;QAChE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CACnE,CAAA;QAED,kDAAkD;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAA;QAC9B,IAAI,GAAG,CAAA;QACP,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,CAAA;QACd,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;YACzD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC,QAAQ,CAAA;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AA7GY,QAAA,kBAAkB,sBA6G9B"}

package/dist/src/timers/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./timers"), exports);
-//# sourceMappingURL=index.js.map

package/dist/src/timers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/timers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwB"}

package/dist/src/timers/timers.js

@@ -1,25 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.set = set;
-exports.clear = clear;
-exports.cleanup = cleanup;
-let intervals = [];
-function set(callback, period) {
-    const interval = setInterval(callback, period);
-    intervals.push(interval);
-    return interval;
-}
-function clear(interval) {
-    const idx = intervals.indexOf(interval);
-    if (idx !== -1) {
-        intervals.splice(idx, 1);
-    }
-    clearInterval(interval);
-}
-function cleanup() {
-    for (let interval of intervals) {
-        clearInterval(interval);
-    }
-    intervals = [];
-}
-//# sourceMappingURL=timers.js.map

package/dist/src/timers/timers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"timers.js","sourceRoot":"","sources":["../../../src/timers/timers.ts"],"names":[],"mappings":";;AAEA,kBAIC;AAED,sBAMC;AAED,0BAKC;AArBD,IAAI,SAAS,GAAqB,EAAE,CAAA;AAEpC,SAAgB,GAAG,CAAC,QAAmB,EAAE,MAAc;IACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAgB,KAAK,CAAC,QAAwB;IAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,aAAa,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,SAAgB,OAAO;IACrB,KAAK,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,aAAa,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IACD,SAAS,GAAG,EAAE,CAAA;AAChB,CAAC"}

package/dist/src/users/db.js

@@ -1,489 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserDB = void 0;
-const environment_1 = __importDefault(require("../environment"));
-const eventHelpers = __importStar(require("./events"));
-const accountSdk = __importStar(require("../accounts"));
-const cache = __importStar(require("../cache"));
-const context_1 = require("../context");
-const dbUtils = __importStar(require("../db"));
-const errors_1 = require("../errors");
-const platform = __importStar(require("../platform"));
-const sessions = __importStar(require("../security/sessions"));
-const usersCore = __importStar(require("./users"));
-const types_1 = require("@budibase/types");
-const utils_1 = require("./utils");
-const lookup_1 = require("./lookup");
-const utils_2 = require("../utils");
-const security_1 = require("../security");
-const bulkDeleteProcessing = (dbUser) => __awaiter(void 0, void 0, void 0, function* () {
-    const userId = dbUser._id;
-    yield platform.users.removeUser(dbUser);
-    yield eventHelpers.handleDeleteEvents(dbUser);
-    yield cache.user.invalidateUser(userId);
-    yield sessions.invalidateSessions(userId, { reason: "bulk-deletion" });
-});
-class UserDB {
-    static init(quotaFns, groupFns, featureFns) {
-        UserDB.quotas = quotaFns;
-        UserDB.groups = groupFns;
-        UserDB.features = featureFns;
-    }
-    static isPreventPasswordActions(user, account) {
-        return __awaiter(this, void 0, void 0, function* () {
-            // when in maintenance mode we allow sso users with the admin role
-            // to perform any password action - this prevents lockout
-            if (environment_1.default.ENABLE_SSO_MAINTENANCE_MODE && (0, utils_1.isAdmin)(user)) {
-                return false;
-            }
-            // SSO is enforced for all users
-            if (yield UserDB.features.isSSOEnforced()) {
-                return true;
-            }
-            // Check local sso
-            if ((0, types_1.isSSOUser)(user)) {
-                return true;
-            }
-            // Check account sso
-            if (!account) {
-                account = yield accountSdk.getAccountByTenantId((0, context_1.getTenantId)());
-            }
-            return !!(account && account.email === user.email && (0, types_1.isSSOAccount)(account));
-        });
-    }
-    static buildUser(user_1) {
-        return __awaiter(this, arguments, void 0, function* (user, opts = {
-            hashPassword: true,
-            requirePassword: true,
-        }, tenantId, dbUser, account) {
-            let { password, _id } = user;
-            // don't require a password if the db user doesn't already have one
-            if (dbUser && !dbUser.password) {
-                opts.requirePassword = false;
-            }
-            let hashedPassword;
-            if (password) {
-                if (yield UserDB.isPreventPasswordActions(user, account)) {
-                    throw new errors_1.HTTPError("Password change is disabled for this user", 400);
-                }
-                if (!opts.skipPasswordValidation) {
-                    const passwordValidation = (0, security_1.validatePassword)(password);
-                    if (!passwordValidation.valid) {
-                        throw new errors_1.HTTPError(passwordValidation.error, 400);
-                    }
-                }
-                hashedPassword = opts.hashPassword ? yield (0, utils_2.hash)(password) : password;
-            }
-            else if (dbUser) {
-                hashedPassword = dbUser.password;
-            }
-            // passwords are never required if sso is enforced
-            const requirePasswords = opts.requirePassword && !(yield UserDB.features.isSSOEnforced());
-            if (!hashedPassword && requirePasswords) {
-                throw "Password must be specified.";
-            }
-            _id = _id || dbUtils.generateGlobalUserID();
-            const fullUser = Object.assign(Object.assign(Object.assign({ createdAt: Date.now() }, dbUser), user), { _id, password: hashedPassword, tenantId });
-            // make sure the roles object is always present
-            if (!fullUser.roles) {
-                fullUser.roles = {};
-            }
-            // add the active status to a user if it's not provided
-            if (fullUser.status == null) {
-                fullUser.status = types_1.UserStatus.ACTIVE;
-            }
-            return fullUser;
-        });
-    }
-    static allUsers() {
-        return __awaiter(this, void 0, void 0, function* () {
-            const db = (0, context_1.getGlobalDB)();
-            const response = yield db.allDocs(dbUtils.getGlobalUserParams(null, {
-                include_docs: true,
-            }));
-            return response.rows.map(row => row.doc);
-        });
-    }
-    static countUsersByApp(appId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            let response = yield usersCore.searchGlobalUsersByApp(appId, {});
-            return {
-                userCount: response.length,
-            };
-        });
-    }
-    static getUsersByAppAccess(opts) {
-        return __awaiter(this, void 0, void 0, function* () {
-            let response = yield usersCore.searchGlobalUsersByAppAccess(opts.appId, { limit: opts.limit || 50 });
-            return response;
-        });
-    }
-    static getUserByEmail(email) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return usersCore.getGlobalUserByEmail(email);
-        });
-    }
-    /**
-     * Gets a user by ID from the global database, based on the current tenancy.
-     */
-    static getUser(userId) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const user = yield usersCore.getById(userId);
-            if (user) {
-                delete user.password;
-            }
-            return user;
-        });
-    }
-    static bulkGet(userIds) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield usersCore.bulkGetGlobalUsersById(userIds);
-        });
-    }
-    static bulkUpdate(users) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield usersCore.bulkUpdateGlobalUsers(users);
-        });
-    }
-    static save(user_1) {
-        return __awaiter(this, arguments, void 0, function* (user, opts = {}) {
-            // default booleans to true
-            if (opts.hashPassword == null) {
-                opts.hashPassword = true;
-            }
-            if (opts.requirePassword == null) {
-                opts.requirePassword = true;
-            }
-            const tenantId = (0, context_1.getTenantId)();
-            const db = (0, context_1.getGlobalDB)();
-            const { email, _id, userGroups = [], roles } = user;
-            if (!email && !_id) {
-                throw new Error("_id or email is required");
-            }
-            let dbUser;
-            if (_id) {
-                // try to get existing user from db
-                try {
-                    dbUser = yield usersCore.getById(_id);
-                    if (email && dbUser.email !== email && !opts.allowChangingEmail) {
-                        throw new Error("Email address cannot be changed");
-                    }
-                }
-                catch (e) {
-                    if (e.status === 404) {
-                        // do nothing, save this new user with the id specified - required for SSO auth
-                    }
-                    else {
-                        throw e;
-                    }
-                }
-            }
-            if (!dbUser && email) {
-                // no id was specified - load from email instead
-                dbUser = yield usersCore.getGlobalUserByEmail(email);
-                if (dbUser && dbUser._id !== _id) {
-                    throw new errors_1.EmailUnavailableError(email);
-                }
-            }
-            const change = dbUser ? 0 : 1; // no change if there is existing user
-            const creatorsChange = (yield (0, utils_1.isCreator)(dbUser)) !== (yield (0, utils_1.isCreator)(user)) ? 1 : 0;
-            return UserDB.quotas.addUsers(change, creatorsChange, () => __awaiter(this, void 0, void 0, function* () {
-                yield (0, utils_1.validateUniqueUser)(email, tenantId);
-                let builtUser = yield UserDB.buildUser(user, opts, tenantId, dbUser);
-                // don't allow a user to update its own roles/perms
-                if (opts.currentUserId && opts.currentUserId === (dbUser === null || dbUser === void 0 ? void 0 : dbUser._id)) {
-                    builtUser = usersCore.cleanseUserObject(builtUser, dbUser);
-                }
-                if (!dbUser && (roles === null || roles === void 0 ? void 0 : roles.length)) {
-                    builtUser.roles = Object.assign({}, roles);
-                }
-                // make sure we set the _id field for a new user
-                // Also if this is a new user, associate groups with them
-                const groupPromises = [];
-                if (!_id) {
-                    if (userGroups.length > 0) {
-                        for (let groupId of userGroups) {
-                            groupPromises.push(UserDB.groups.addUsers(groupId, [builtUser._id]));
-                        }
-                    }
-                }
-                try {
-                    // save the user to db
-                    let response = yield db.put(builtUser);
-                    builtUser._rev = response.rev;
-                    yield eventHelpers.handleSaveEvents(builtUser, dbUser);
-                    if (dbUser && builtUser.email !== dbUser.email) {
-                        // Remove the plaform email reference if the email changed
-                        yield platform.users.removeUser({ email: dbUser.email });
-                    }
-                    yield platform.users.addUser(tenantId, builtUser._id, builtUser.email, builtUser.ssoId);
-                    yield cache.user.invalidateUser(response.id);
-                    yield Promise.all(groupPromises);
-                    // finally returned the saved user from the db
-                    return db.get(builtUser._id);
-                }
-                catch (err) {
-                    if (err.status === 409) {
-                        throw "User exists already";
-                    }
-                    else {
-                        throw err;
-                    }
-                }
-            }));
-        });
-    }
-    static bulkCreate(newUsersRequested, groups) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const tenantId = (0, context_1.getTenantId)();
-            let usersToSave = [];
-            let newUsers = [];
-            let newCreators = [];
-            const emails = newUsersRequested.map((user) => user.email);
-            const existingEmails = yield (0, lookup_1.searchExistingEmails)(emails);
-            const unsuccessful = [];
-            for (const newUser of newUsersRequested) {
-                if (newUsers.find((x) => x.email.toLowerCase() === newUser.email.toLowerCase()) ||
-                    existingEmails.includes(newUser.email.toLowerCase())) {
-                    unsuccessful.push({
-                        email: newUser.email,
-                        reason: `Unavailable`,
-                    });
-                    continue;
-                }
-                newUser.userGroups = groups || [];
-                newUsers.push(newUser);
-                if (yield (0, utils_1.isCreator)(newUser)) {
-                    newCreators.push(newUser);
-                }
-            }
-            const account = yield accountSdk.getAccountByTenantId(tenantId);
-            return UserDB.quotas.addUsers(newUsers.length, newCreators.length, () => __awaiter(this, void 0, void 0, function* () {
-                // create the promises array that will be called by bulkDocs
-                newUsers.forEach((user) => {
-                    usersToSave.push(UserDB.buildUser(user, {
-                        hashPassword: true,
-                        requirePassword: user.requirePassword,
-                    }, tenantId, undefined, // no dbUser
-                    account));
-                });
-                const usersToBulkSave = yield Promise.all(usersToSave);
-                yield usersCore.bulkUpdateGlobalUsers(usersToBulkSave);
-                // Post-processing of bulk added users, e.g. events and cache operations
-                for (const user of usersToBulkSave) {
-                    // TODO: Refactor to bulk insert users into the info db
-                    // instead of relying on looping tenant creation
-                    yield platform.users.addUser(tenantId, user._id, user.email);
-                    yield eventHelpers.handleSaveEvents(user, undefined);
-                }
-                const saved = usersToBulkSave.map(user => {
-                    return {
-                        _id: user._id,
-                        email: user.email,
-                    };
-                });
-                // now update the groups
-                if (Array.isArray(saved) && groups) {
-                    const groupPromises = [];
-                    const createdUserIds = saved.map(user => user._id);
-                    for (let groupId of groups) {
-                        groupPromises.push(UserDB.groups.addUsers(groupId, createdUserIds));
-                    }
-                    yield Promise.all(groupPromises);
-                }
-                return {
-                    successful: saved,
-                    unsuccessful,
-                };
-            }));
-        });
-    }
-    static bulkDelete(users) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const db = (0, context_1.getGlobalDB)();
-            const response = {
-                successful: [],
-                unsuccessful: [],
-            };
-            // remove the account holder from the delete request if present
-            const accountHolder = yield (0, utils_1.getAccountHolderFromUsers)(users);
-            if (accountHolder) {
-                users = users.filter(u => u.userId !== accountHolder.userId);
-                // mark user as unsuccessful
-                response.unsuccessful.push({
-                    _id: accountHolder.userId,
-                    email: accountHolder.email,
-                    reason: "Account holder cannot be deleted",
-                });
-            }
-            // Get users and delete
-            const allDocsResponse = yield db.allDocs({
-                include_docs: true,
-                keys: users.map(u => u.userId),
-            });
-            const usersToDelete = allDocsResponse.rows.map(user => {
-                return user.doc;
-            });
-            // Delete from DB
-            const toDelete = usersToDelete.map(user => (Object.assign(Object.assign({}, user), { _deleted: true })));
-            const dbResponse = yield usersCore.bulkUpdateGlobalUsers(toDelete);
-            const creatorsEval = yield Promise.all(usersToDelete.map(utils_1.isCreator));
-            const creatorsToDeleteCount = creatorsEval.filter(creator => !!creator).length;
-            const ssoUsersToDelete = [];
-            for (let user of usersToDelete) {
-                const platformUser = (yield (0, lookup_1.getFirstPlatformUser)(user._id));
-                const ssoId = platformUser.ssoId;
-                if (ssoId) {
-                    // Need to get the _rev of the SSO user doc to delete it. The view also returns docs that have the ssoId property, so we need to ignore those.
-                    const ssoUsers = (yield (0, lookup_1.getPlatformUsers)(ssoId));
-                    ssoUsers
-                        .filter(user => user.ssoId == null)
-                        .forEach(user => {
-                        ssoUsersToDelete.push(Object.assign(Object.assign({}, user), { _deleted: true }));
-                    });
-                }
-                yield bulkDeleteProcessing(user);
-            }
-            // Delete any associated SSO user docs
-            yield platform.getPlatformDB().bulkDocs(ssoUsersToDelete);
-            yield UserDB.quotas.removeUsers(toDelete.length, creatorsToDeleteCount);
-            // Build Response
-            // index users by id
-            const userIndex = {};
-            usersToDelete.reduce((prev, current) => {
-                prev[current._id] = current;
-                return prev;
-            }, userIndex);
-            // add the successful and unsuccessful users to response
-            dbResponse.forEach(item => {
-                const email = userIndex[item.id].email;
-                if (item.ok) {
-                    response.successful.push({ _id: item.id, email });
-                }
-                else {
-                    response.unsuccessful.push({
-                        _id: item.id,
-                        email,
-                        reason: "Database error",
-                    });
-                }
-            });
-            return response;
-        });
-    }
-    static destroy(id) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const db = (0, context_1.getGlobalDB)();
-            const dbUser = (yield db.get(id));
-            const userId = dbUser._id;
-            if (!environment_1.default.SELF_HOSTED && !environment_1.default.DISABLE_ACCOUNT_PORTAL) {
-                // root account holder can't be deleted from inside budibase
-                const email = dbUser.email;
-                const account = yield accountSdk.getAccount(email);
-                if (account) {
-                    if (dbUser.userId === (0, context_1.getIdentity)()._id) {
-                        throw new errors_1.HTTPError('Please visit "Account" to delete this user', 400);
-                    }
-                    else {
-                        throw new errors_1.HTTPError("Account holder cannot be deleted", 400);
-                    }
-                }
-            }
-            yield platform.users.removeUser(dbUser);
-            yield db.remove(userId, dbUser._rev);
-            const creatorsToDelete = (yield (0, utils_1.isCreator)(dbUser)) ? 1 : 0;
-            yield UserDB.quotas.removeUsers(1, creatorsToDelete);
-            yield eventHelpers.handleDeleteEvents(dbUser);
-            yield cache.user.invalidateUser(userId);
-            yield sessions.invalidateSessions(userId, { reason: "deletion" });
-        });
-    }
-    static createAdminUser(email, tenantId, opts) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const password = opts === null || opts === void 0 ? void 0 : opts.password;
-            const user = {
-                email: email,
-                password,
-                createdAt: Date.now(),
-                roles: {},
-                builder: {
-                    global: true,
-                },
-                admin: {
-                    global: true,
-                },
-                tenantId,
-                firstName: opts === null || opts === void 0 ? void 0 : opts.firstName,
-                lastName: opts === null || opts === void 0 ? void 0 : opts.lastName,
-            };
-            if (opts === null || opts === void 0 ? void 0 : opts.ssoId) {
-                user.ssoId = opts.ssoId;
-            }
-            // always bust checklist beforehand, if an error occurs but can proceed, don't get
-            // stuck in a cycle
-            yield cache.bustCache(cache.CacheKey.CHECKLIST);
-            return yield UserDB.save(user, {
-                hashPassword: opts === null || opts === void 0 ? void 0 : opts.hashPassword,
-                requirePassword: opts === null || opts === void 0 ? void 0 : opts.requirePassword,
-                skipPasswordValidation: opts === null || opts === void 0 ? void 0 : opts.skipPasswordValidation,
-            });
-        });
-    }
-    static getGroups(groupIds) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.groups.getBulk(groupIds);
-        });
-    }
-    static getGroupBuilderAppIds(user) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.groups.getGroupBuilderAppIds(user);
-        });
-    }
-}
-exports.UserDB = UserDB;
-//# sourceMappingURL=db.js.map