@budibase/server 0.0.32 → 0.0.999-alpha.30

package/dist/api/controllers/application.js

@@ -0,0 +1,575 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateAppPackage = exports.sync = exports.unpublish = exports.destroy = exports.revertClient = exports.updateClient = exports.update = exports.create = exports.fetchAppPackage = exports.fetchAppDefinition = exports.fetch = void 0;
+const environment_1 = __importDefault(require("../../environment"));
+const package_json_1 = __importDefault(require("../../../package.json"));
+const staticViews_1 = require("../../db/views/staticViews");
+const fileSystem_1 = require("../../utilities/fileSystem");
+const utils_1 = require("../../db/utils");
+const backend_core_1 = require("@budibase/backend-core");
+const constants_1 = require("../../constants");
+const datasource_bb_default_1 = require("../../db/defaultData/datasource_bb_default");
+const workerRequests_1 = require("../../utilities/workerRequests");
+const utilities_1 = require("../../utilities");
+const redis_1 = require("../../utilities/redis");
+const fileSystem_2 = require("../../utilities/fileSystem");
+const utils_2 = require("../../automations/utils");
+const logging_1 = require("../../automations/logging");
+const rows_1 = require("../../utilities/usageQuota/rows");
+const pro_1 = require("@budibase/pro");
+const types_1 = require("@budibase/types");
+const layouts_1 = require("../../constants/layouts");
+const sdk_1 = __importDefault(require("../../sdk"));
+// utility function, need to do away with this
+function getLayouts() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const db = backend_core_1.context.getAppDB();
+        return (yield db.allDocs((0, utils_1.getLayoutParams)(null, {
+            include_docs: true,
+        }))).rows.map((row) => row.doc);
+    });
+}
+function getScreens() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const db = backend_core_1.context.getAppDB();
+        return (yield db.allDocs((0, utils_1.getScreenParams)(null, {
+            include_docs: true,
+        }))).rows.map((row) => row.doc);
+    });
+}
+function getUserRoleId(ctx) {
+    var _a;
+    return !((_a = ctx.user) === null || _a === void 0 ? void 0 : _a.role) || !ctx.user.role._id
+        ? backend_core_1.roles.BUILTIN_ROLE_IDS.PUBLIC
+        : ctx.user.role._id;
+}
+function checkAppUrl(ctx, apps, url, currentAppId) {
+    if (currentAppId) {
+        apps = apps.filter((app) => app.appId !== currentAppId);
+    }
+    if (apps.some((app) => app.url === url)) {
+        ctx.throw(400, "App URL is already in use.");
+    }
+}
+function checkAppName(ctx, apps, name, currentAppId) {
+    // TODO: Replace with Joi
+    if (!name) {
+        ctx.throw(400, "Name is required");
+    }
+    if (currentAppId) {
+        apps = apps.filter((app) => app.appId !== currentAppId);
+    }
+    if (apps.some((app) => app.name === name)) {
+        ctx.throw(400, "App name is already in use.");
+    }
+}
+function createInstance(appId, template, includeSampleData) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const db = backend_core_1.context.getAppDB();
+        yield db.put({
+            _id: "_design/database",
+            // view collation information, read before writing any complex views:
+            // https://docs.couchdb.org/en/master/ddocs/views/collation.html#collation-specification
+            views: {},
+        });
+        // NOTE: indexes need to be created before any tables/templates
+        // add view for linked rows
+        yield (0, staticViews_1.createLinkView)();
+        yield (0, staticViews_1.createRoutingView)();
+        yield (0, staticViews_1.createAllSearchIndex)();
+        // replicate the template data to the instance DB
+        // this is currently very hard to test, downloading and importing template files
+        if (template && template.templateString) {
+            const { ok } = yield db.load((0, utilities_1.stringToReadStream)(template.templateString));
+            if (!ok) {
+                throw "Error loading database dump from memory.";
+            }
+        }
+        else if (template && template.useTemplate === "true") {
+            yield sdk_1.default.backups.importApp(appId, db, template);
+        }
+        else {
+            // create the users table
+            yield db.put(constants_1.USERS_TABLE_SCHEMA);
+            if (includeSampleData) {
+                // create ootb stock db
+                yield addDefaultTables(db);
+            }
+        }
+        return { _id: appId };
+    });
+}
+function addDefaultTables(db) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const defaultDbDocs = (0, datasource_bb_default_1.buildDefaultDocs)();
+        // add in the default db data docs - tables, datasource, rows and links
+        yield db.bulkDocs([...defaultDbDocs]);
+    });
+}
+function fetch(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const dev = ctx.query && ctx.query.status === utils_1.AppStatus.DEV;
+        const all = ctx.query && ctx.query.status === utils_1.AppStatus.ALL;
+        const apps = (yield backend_core_1.db.getAllApps({ dev, all }));
+        const appIds = apps
+            .filter((app) => app.status === "development")
+            .map((app) => app.appId);
+        // get the locks for all the dev apps
+        if (dev || all) {
+            const locks = yield (0, redis_1.getLocksById)(appIds);
+            for (let app of apps) {
+                const lock = locks[app.appId];
+                if (lock) {
+                    app.lockedBy = lock;
+                }
+                else {
+                    // make sure its definitely not present
+                    delete app.lockedBy;
+                }
+            }
+        }
+        ctx.body = yield (0, logging_1.checkAppMetadata)(apps);
+    });
+}
+exports.fetch = fetch;
+function fetchAppDefinition(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const layouts = yield getLayouts();
+        const userRoleId = getUserRoleId(ctx);
+        const accessController = new backend_core_1.roles.AccessController();
+        const screens = yield accessController.checkScreensAccess(yield getScreens(), userRoleId);
+        ctx.body = {
+            layouts,
+            screens,
+            libraries: ["@budibase/standard-components"],
+        };
+    });
+}
+exports.fetchAppDefinition = fetchAppDefinition;
+function fetchAppPackage(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const db = backend_core_1.context.getAppDB();
+        let application = yield db.get(utils_1.DocumentType.APP_METADATA);
+        const layouts = yield getLayouts();
+        let screens = yield getScreens();
+        // Enrich plugin URLs
+        application.usedPlugins = backend_core_1.objectStore.enrichPluginURLs(application.usedPlugins);
+        // Only filter screens if the user is not a builder
+        if (!(ctx.user.builder && ctx.user.builder.global)) {
+            const userRoleId = getUserRoleId(ctx);
+            const accessController = new backend_core_1.roles.AccessController();
+            screens = yield accessController.checkScreensAccess(screens, userRoleId);
+        }
+        const clientLibPath = backend_core_1.objectStore.clientLibraryUrl(ctx.params.appId, application.version);
+        ctx.body = {
+            application,
+            screens,
+            layouts,
+            clientLibPath,
+        };
+    });
+}
+exports.fetchAppPackage = fetchAppPackage;
+function performAppCreate(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const apps = (yield backend_core_1.db.getAllApps({ dev: true }));
+        const name = ctx.request.body.name, possibleUrl = ctx.request.body.url;
+        checkAppName(ctx, apps, name);
+        const url = sdk_1.default.applications.getAppUrl({ name, url: possibleUrl });
+        checkAppUrl(ctx, apps, url);
+        const { useTemplate, templateKey, templateString } = ctx.request.body;
+        const instanceConfig = {
+            useTemplate,
+            key: templateKey,
+            templateString,
+        };
+        if (ctx.request.files && ctx.request.files.templateFile) {
+            instanceConfig.file = ctx.request.files.templateFile;
+        }
+        const includeSampleData = (0, utilities_1.isQsTrue)(ctx.request.body.sampleData);
+        const tenantId = backend_core_1.tenancy.isMultiTenant() ? backend_core_1.tenancy.getTenantId() : null;
+        const appId = (0, utils_1.generateDevAppID)((0, utils_1.generateAppID)(tenantId));
+        return yield backend_core_1.context.doInAppContext(appId, () => __awaiter(this, void 0, void 0, function* () {
+            const instance = yield createInstance(appId, instanceConfig, includeSampleData);
+            const db = backend_core_1.context.getAppDB();
+            let newApplication = {
+                _id: utils_1.DocumentType.APP_METADATA,
+                _rev: undefined,
+                appId,
+                type: "app",
+                version: package_json_1.default.version,
+                componentLibraries: ["@budibase/standard-components"],
+                name: name,
+                url: url,
+                template: templateKey,
+                instance,
+                tenantId: backend_core_1.tenancy.getTenantId(),
+                updatedAt: new Date().toISOString(),
+                createdAt: new Date().toISOString(),
+                status: utils_1.AppStatus.DEV,
+                navigation: {
+                    navigation: "Top",
+                    title: name,
+                    navWidth: "Large",
+                    navBackground: "var(--spectrum-global-color-gray-100)",
+                    links: [
+                        {
+                            url: "/home",
+                            text: "Home",
+                        },
+                    ],
+                },
+                theme: "spectrum--light",
+                customTheme: {
+                    buttonBorderRadius: "16px",
+                },
+            };
+            // If we used a template or imported an app there will be an existing doc.
+            // Fetch and migrate some metadata from the existing app.
+            try {
+                const existing = yield db.get(utils_1.DocumentType.APP_METADATA);
+                const keys = [
+                    "_rev",
+                    "navigation",
+                    "theme",
+                    "customTheme",
+                    "icon",
+                ];
+                keys.forEach(key => {
+                    if (existing[key]) {
+                        // @ts-ignore
+                        newApplication[key] = existing[key];
+                    }
+                });
+                // Migrate navigation settings and screens if required
+                if (existing) {
+                    const navigation = yield migrateAppNavigation();
+                    if (navigation) {
+                        newApplication.navigation = navigation;
+                    }
+                }
+            }
+            catch (err) {
+                // Nothing to do
+            }
+            const response = yield db.put(newApplication, { force: true });
+            newApplication._rev = response.rev;
+            /* istanbul ignore next */
+            if (!environment_1.default.isTest()) {
+                yield (0, fileSystem_1.createApp)(appId);
+            }
+            yield backend_core_1.cache.app.invalidateAppMetadata(appId, newApplication);
+            return newApplication;
+        }));
+    });
+}
+function creationEvents(request, app) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        let creationFns = [];
+        const body = request.body;
+        if (body.useTemplate === "true") {
+            // from template
+            if (body.templateKey && body.templateKey !== "undefined") {
+                creationFns.push(a => backend_core_1.events.app.templateImported(a, body.templateKey));
+            }
+            // from file
+            else if ((_a = request.files) === null || _a === void 0 ? void 0 : _a.templateFile) {
+                creationFns.push(a => backend_core_1.events.app.fileImported(a));
+            }
+            // unknown
+            else {
+                console.error("Could not determine template creation event");
+            }
+        }
+        creationFns.push(a => backend_core_1.events.app.created(a));
+        for (let fn of creationFns) {
+            yield fn(app);
+        }
+    });
+}
+function appPostCreate(ctx, app) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const tenantId = backend_core_1.tenancy.getTenantId();
+        yield backend_core_1.migrations.backPopulateMigrations({
+            type: types_1.MigrationType.APP,
+            tenantId,
+            appId: app.appId,
+        });
+        yield creationEvents(ctx.request, app);
+        // app import & template creation
+        if (ctx.request.body.useTemplate === "true") {
+            const { rows } = yield (0, rows_1.getUniqueRows)([app.appId]);
+            const rowCount = rows ? rows.length : 0;
+            if (rowCount) {
+                try {
+                    yield backend_core_1.context.doInAppContext(app.appId, () => {
+                        return pro_1.quotas.addRows(rowCount);
+                    });
+                }
+                catch (err) {
+                    if (err.code && err.code === backend_core_1.ErrorCode.USAGE_LIMIT_EXCEEDED) {
+                        // this import resulted in row usage exceeding the quota
+                        // delete the app
+                        // skip pre and post-steps as no rows have been added to quotas yet
+                        ctx.params.appId = app.appId;
+                        yield destroyApp(ctx);
+                    }
+                    throw err;
+                }
+            }
+        }
+    });
+}
+function create(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const newApplication = yield pro_1.quotas.addApp(() => performAppCreate(ctx));
+        yield appPostCreate(ctx, newApplication);
+        yield backend_core_1.cache.bustCache(backend_core_1.cache.CacheKey.CHECKLIST);
+        ctx.body = newApplication;
+        ctx.status = 200;
+    });
+}
+exports.create = create;
+// This endpoint currently operates as a PATCH rather than a PUT
+// Thus name and url fields are handled only if present
+function update(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const apps = (yield backend_core_1.db.getAllApps({ dev: true }));
+        // validation
+        const name = ctx.request.body.name, possibleUrl = ctx.request.body.url;
+        if (name) {
+            checkAppName(ctx, apps, name, ctx.params.appId);
+        }
+        const url = sdk_1.default.applications.getAppUrl({ name, url: possibleUrl });
+        if (url) {
+            checkAppUrl(ctx, apps, url, ctx.params.appId);
+            ctx.request.body.url = url;
+        }
+        const app = yield updateAppPackage(ctx.request.body, ctx.params.appId);
+        yield backend_core_1.events.app.updated(app);
+        ctx.status = 200;
+        ctx.body = app;
+    });
+}
+exports.update = update;
+function updateClient(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // Get current app version
+        const db = backend_core_1.context.getAppDB();
+        const application = yield db.get(utils_1.DocumentType.APP_METADATA);
+        const currentVersion = application.version;
+        // Update client library and manifest
+        if (!environment_1.default.isTest()) {
+            yield (0, fileSystem_2.backupClientLibrary)(ctx.params.appId);
+            yield (0, fileSystem_2.updateClientLibrary)(ctx.params.appId);
+        }
+        // Update versions in app package
+        const updatedToVersion = package_json_1.default.version;
+        const appPackageUpdates = {
+            version: updatedToVersion,
+            revertableVersion: currentVersion,
+        };
+        const app = yield updateAppPackage(appPackageUpdates, ctx.params.appId);
+        yield backend_core_1.events.app.versionUpdated(app, currentVersion, updatedToVersion);
+        ctx.status = 200;
+        ctx.body = app;
+    });
+}
+exports.updateClient = updateClient;
+function revertClient(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // Check app can be reverted
+        const db = backend_core_1.context.getAppDB();
+        const application = yield db.get(utils_1.DocumentType.APP_METADATA);
+        if (!application.revertableVersion) {
+            ctx.throw(400, "There is no version to revert to");
+        }
+        // Update client library and manifest
+        if (!environment_1.default.isTest()) {
+            yield (0, fileSystem_2.revertClientLibrary)(ctx.params.appId);
+        }
+        // Update versions in app package
+        const currentVersion = application.version;
+        const revertedToVersion = application.revertableVersion;
+        const appPackageUpdates = {
+            version: revertedToVersion,
+            revertableVersion: null,
+        };
+        const app = yield updateAppPackage(appPackageUpdates, ctx.params.appId);
+        yield backend_core_1.events.app.versionReverted(app, currentVersion, revertedToVersion);
+        ctx.status = 200;
+        ctx.body = app;
+    });
+}
+exports.revertClient = revertClient;
+function unpublishApp(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let appId = ctx.params.appId;
+        appId = backend_core_1.db.getProdAppID(appId);
+        const db = backend_core_1.context.getProdAppDB();
+        const result = yield db.destroy();
+        yield backend_core_1.events.app.unpublished({ appId });
+        // automations only in production
+        yield (0, utils_2.cleanupAutomations)(appId);
+        yield backend_core_1.cache.app.invalidateAppMetadata(appId);
+        return result;
+    });
+}
+function destroyApp(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let appId = ctx.params.appId;
+        appId = backend_core_1.db.getProdAppID(appId);
+        const devAppId = backend_core_1.db.getDevAppID(appId);
+        // check if we need to unpublish first
+        if (yield backend_core_1.db.dbExists(appId)) {
+            // app is deployed, run through unpublish flow
+            yield sdk_1.default.applications.syncApp(devAppId);
+            yield unpublishApp(ctx);
+        }
+        const db = backend_core_1.db.getDB(devAppId);
+        // standard app deletion flow
+        const app = yield db.get(utils_1.DocumentType.APP_METADATA);
+        const result = yield db.destroy();
+        yield pro_1.quotas.removeApp();
+        yield backend_core_1.events.app.deleted(app);
+        if (!environment_1.default.isTest()) {
+            yield (0, fileSystem_1.deleteApp)(appId);
+        }
+        yield (0, workerRequests_1.removeAppFromUserRoles)(ctx, appId);
+        yield backend_core_1.cache.app.invalidateAppMetadata(devAppId);
+        return result;
+    });
+}
+function preDestroyApp(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { rows } = yield (0, rows_1.getUniqueRows)([ctx.params.appId]);
+        ctx.rowCount = rows.length;
+    });
+}
+function postDestroyApp(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const rowCount = ctx.rowCount;
+        yield pro_1.groups.cleanupApp(ctx.params.appId);
+        if (rowCount) {
+            yield pro_1.quotas.removeRows(rowCount);
+        }
+    });
+}
+function destroy(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        yield preDestroyApp(ctx);
+        const result = yield destroyApp(ctx);
+        yield postDestroyApp(ctx);
+        ctx.status = 200;
+        ctx.body = result;
+    });
+}
+exports.destroy = destroy;
+function unpublish(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const prodAppId = backend_core_1.db.getProdAppID(ctx.params.appId);
+        const dbExists = yield backend_core_1.db.dbExists(prodAppId);
+        // check app has been published
+        if (!dbExists) {
+            return ctx.throw(400, "App has not been published.");
+        }
+        yield preDestroyApp(ctx);
+        yield unpublishApp(ctx);
+        yield postDestroyApp(ctx);
+        ctx.status = 204;
+    });
+}
+exports.unpublish = unpublish;
+function sync(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const appId = ctx.params.appId;
+        try {
+            ctx.body = yield sdk_1.default.applications.syncApp(appId);
+        }
+        catch (err) {
+            ctx.throw(err.status || 400, err.message);
+        }
+    });
+}
+exports.sync = sync;
+function updateAppPackage(appPackage, appId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return backend_core_1.context.doInAppContext(appId, () => __awaiter(this, void 0, void 0, function* () {
+            const db = backend_core_1.context.getAppDB();
+            const application = yield db.get(utils_1.DocumentType.APP_METADATA);
+            const newAppPackage = Object.assign(Object.assign({}, application), appPackage);
+            if (appPackage._rev !== application._rev) {
+                newAppPackage._rev = application._rev;
+            }
+            // the locked by property is attached by server but generated from
+            // Redis, shouldn't ever store it
+            delete newAppPackage.lockedBy;
+            yield db.put(newAppPackage);
+            // remove any cached metadata, so that it will be updated
+            yield backend_core_1.cache.app.invalidateAppMetadata(appId);
+            return newAppPackage;
+        }));
+    });
+}
+exports.updateAppPackage = updateAppPackage;
+function migrateAppNavigation() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const db = backend_core_1.context.getAppDB();
+        const existing = yield db.get(utils_1.DocumentType.APP_METADATA);
+        const layouts = yield getLayouts();
+        const screens = yield getScreens();
+        // Migrate all screens, removing custom layouts
+        for (let screen of screens) {
+            if (!screen.layoutId) {
+                continue;
+            }
+            const layout = layouts.find(layout => layout._id === screen.layoutId);
+            screen.layoutId = undefined;
+            screen.showNavigation = (layout === null || layout === void 0 ? void 0 : layout.props.navigation) !== "None";
+            screen.width = (layout === null || layout === void 0 ? void 0 : layout.props.width) || "Large";
+            yield db.put(screen);
+        }
+        // Migrate layout navigation settings
+        const { name, customTheme } = existing;
+        const layout = layouts === null || layouts === void 0 ? void 0 : layouts.find((layout) => layout._id === layouts_1.BASE_LAYOUT_PROP_IDS.PRIVATE);
+        if (layout && !existing.navigation) {
+            let navigationSettings = {
+                navigation: "Top",
+                title: name,
+                navWidth: "Large",
+                navBackground: (customTheme === null || customTheme === void 0 ? void 0 : customTheme.navBackground) || "var(--spectrum-global-color-gray-50)",
+                navTextColor: (customTheme === null || customTheme === void 0 ? void 0 : customTheme.navTextColor) || "var(--spectrum-global-color-gray-800)",
+            };
+            if (layout) {
+                navigationSettings.hideLogo = layout.props.hideLogo;
+                navigationSettings.hideTitle = layout.props.hideTitle;
+                navigationSettings.title = layout.props.title || name;
+                navigationSettings.logoUrl = layout.props.logoUrl;
+                navigationSettings.links = layout.props.links;
+                navigationSettings.navigation = layout.props.navigation || "Top";
+                navigationSettings.sticky = layout.props.sticky;
+                navigationSettings.navWidth = layout.props.width || "Large";
+                if (navigationSettings.navigation === "None") {
+                    navigationSettings.navigation = "Top";
+                }
+            }
+            return navigationSettings;
+        }
+        else {
+            return null;
+        }
+    });
+}

package/dist/api/controllers/auth.js

@@ -0,0 +1,80 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchSelf = void 0;
+const rowProcessor_1 = require("../../utilities/rowProcessor");
+const utils_1 = require("../../db/utils");
+const users_1 = require("../../utilities/users");
+const backend_core_1 = require("@budibase/backend-core");
+const pro_1 = require("@budibase/pro");
+const PUBLIC_ROLE = backend_core_1.roles.BUILTIN_ROLE_IDS.PUBLIC;
+/**
+ * Add the attributes that are session based to the current user.
+ */
+const addSessionAttributesToUser = (ctx) => {
+    if (ctx.user) {
+        ctx.body.license = ctx.user.license;
+    }
+};
+function fetchSelf(ctx) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let userId = ctx.user.userId || ctx.user._id;
+        /* istanbul ignore next */
+        if (!userId || !ctx.isAuthenticated) {
+            ctx.body = {};
+            return;
+        }
+        const appId = backend_core_1.context.getAppId();
+        const user = yield (0, users_1.getFullUser)(ctx, userId);
+        // this shouldn't be returned by the app self
+        delete user.roles;
+        // forward the csrf token from the session
+        user.csrfToken = ctx.user.csrfToken;
+        if (appId) {
+            const db = backend_core_1.context.getAppDB();
+            // check for group permissions
+            if (!user.roleId || user.roleId === PUBLIC_ROLE) {
+                const groupRoleId = yield pro_1.groups.getGroupRoleId(user, appId);
+                user.roleId = groupRoleId || user.roleId;
+            }
+            // remove the full roles structure
+            delete user.roles;
+            try {
+                const userTable = yield db.get(utils_1.InternalTables.USER_METADATA);
+                // specifically needs to make sure is enriched
+                ctx.body = yield (0, rowProcessor_1.outputProcessing)(userTable, user);
+            }
+            catch (err) {
+                let response;
+                // user didn't exist in app, don't pretend they do
+                if (user.roleId === PUBLIC_ROLE) {
+                    response = {};
+                }
+                // user has a role of some sort, return them
+                else if (err.status === 404) {
+                    const metadata = Object.assign(Object.assign({}, user), { _id: userId });
+                    const dbResp = yield db.put(metadata);
+                    user._rev = dbResp.rev;
+                    response = user;
+                }
+                else {
+                    response = user;
+                }
+                ctx.body = response;
+            }
+        }
+        else {
+            ctx.body = user;
+        }
+        addSessionAttributesToUser(ctx);
+    });
+}
+exports.fetchSelf = fetchSelf;