@camera.ui/server 0.0.70 → 0.0.71

package/dist/server/src/api/index.js

@@ -1,18 +1,20 @@
+import { API_EVENT } from '@camera.ui/sdk';
 import FastifyCors from '@fastify/cors';
 import FastifyFormbody from '@fastify/formbody';
 import FastifyHelmet from '@fastify/helmet';
 import FastifyMultipart from '@fastify/multipart';
 import FastifyStatic from '@fastify/static';
+import FastifySwagger from '@fastify/swagger';
+import FastifySwaggerUI from '@fastify/swagger-ui';
 import { green } from 'ansicolor';
 import Fastify from 'fastify';
-import { serializerCompiler, validatorCompiler } from 'fastify-type-provider-zod';
+import { jsonSchemaTransform, serializerCompiler, validatorCompiler } from 'fastify-type-provider-zod';
 import qs from 'qs';
 import { container } from 'tsyringe';
-import { API_EVENT } from '../api.js';
+import { PROXY_SERVICE_URL, SHARE_SERVICE_URL } from '../services/config/constants.js';
 import { ConfigService } from '../services/config/index.js';
 import { RUNTIME_STATUS } from '../services/config/types.js';
 import { HeaderPlugin } from './plugins/header.plugin.js';
-// import { LoggerPlugin } from './plugins/logger.plugin.js';
 import { ProxyPlugin } from './plugins/proxy.plugin.js';
 import { SocketIoPlugin } from './plugins/socket.plugin.js';
 import { SystemPlugin } from './plugins/system.plugin.js';
@@ -21,27 +23,31 @@ import { FastifyRoutes } from './routes/index.js';
 export class Server {
     isRunning = false;
     app;
+    internalApp;
     api;
     logger;
     configService;
     proxyServer;
+    _internalPort = 0;
     constructor() {
+        container.registerInstance('server', this);
         this.api = container.resolve('api');
         this.logger = container.resolve('logger');
         this.configService = container.resolve('configService');
         this.proxyServer = container.resolve('proxy');
     }
+    get internalPort() {
+        return this._internalPort;
+    }
     async register() {
         this.app = Fastify(this.serverOptions);
-        // setup zod validator and serializer
+        this.internalApp = Fastify({ bodyLimit: 1e6, disableRequestLogging: true });
         this.app.setValidatorCompiler(validatorCompiler);
         this.app.setSerializerCompiler(serializerCompiler);
-        // setup listeners
         this.setupListeners();
-        // register plugins
         await this.registerPlugins();
-        // register routes
         await this.registerRouters();
+        await this.registerInternalRouters();
     }
     async listen() {
         if (!this.app) {
@@ -51,16 +57,19 @@ export class Server {
             host: '::',
             port: this.configService.config.port,
         });
+        if (this.internalApp) {
+            await this.internalApp.listen({ host: '127.0.0.1', port: 0 });
+            const addr = this.internalApp.server.address();
+            this._internalPort = addr?.port ?? 0;
+            this.logger.debug(`camera.ui internal listener bound to http://127.0.0.1:${this._internalPort}`);
+        }
         this.isRunning = true;
     }
     async close() {
-        try {
-            await this.app?.close();
-        }
-        catch {
-            // ignore
-        }
+        await Promise.allSettled([this.app?.close(), this.internalApp?.close()]);
         this.app = undefined;
+        this.internalApp = undefined;
+        this._internalPort = 0;
     }
     setupListeners() {
         if (this.app) {
@@ -88,7 +97,6 @@ export class Server {
     async registerPlugins() {
         await this.app?.register(SocketIoPlugin, this.socketOptions);
         await this.app?.register(SystemPlugin);
-        // await this.app?.register(LoggerPlugin);
         await this.app?.register(HeaderPlugin);
         await this.app?.register(FastifyHelmet, this.helmetOptions);
         await this.app?.register(FastifyCors, this.corsOptions);
@@ -98,6 +106,8 @@ export class Server {
         await this.app?.register(UserAgentPlugin);
         await this.app?.register(FastifyMultipart, this.multipartOptions);
         await this.app?.register(FastifyStatic, this.staticOptions);
+        await this.app?.register(FastifySwagger, this.swaggerOptions);
+        await this.app?.register(FastifySwaggerUI, this.swaggerUiOptions);
     }
     async registerRouters() {
         if (this.app) {
@@ -105,15 +115,47 @@ export class Server {
             await routes.register();
         }
     }
+    async registerInternalRouters() {
+        if (this.internalApp) {
+            const routes = new FastifyRoutes(this.internalApp);
+            await routes.registerInternal();
+        }
+    }
     get corsOptions() {
         return {
-            origin: [`https://127.0.0.1:${this.configService.config.port}`, `http://127.0.0.1:${this.configService.UI_PORT}`],
+            methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
+            credentials: true,
+            origin: (origin, cb) => {
+                if (!origin) {
+                    cb(null, true);
+                    return;
+                }
+                if (origin === `https://127.0.0.1:${this.configService.config.port}` ||
+                    origin === `http://127.0.0.1:${this.configService.UI_PORT}` ||
+                    /^https?:\/\/localhost(:\d+)?$/.exec(origin)) {
+                    cb(null, true);
+                    return;
+                }
+                if (origin === 'capacitor://localhost' || origin === 'https://localhost') {
+                    cb(null, true);
+                    return;
+                }
+                if (origin === PROXY_SERVICE_URL || origin === SHARE_SERVICE_URL) {
+                    cb(null, true);
+                    return;
+                }
+                if (origin.endsWith('.trycloudflare.com')) {
+                    cb(null, true);
+                    return;
+                }
+                cb(null, false);
+            },
         };
     }
     get natsProxyOptions() {
         return {
             upstream: `wss://localhost:${this.proxyServer.server.wsPort}`,
-            prefix: '/proxy',
+            prefix: '/api/proxy',
             target: 'nats',
             tls: {
                 cert: this.configService.ssl.cert,
@@ -127,7 +169,7 @@ export class Server {
         const go2rtcAddress = this.configService.go2rtcAddress('ws');
         return {
             upstream: `${go2rtcAddress}/api/ws`,
-            prefix: '/go2rtc',
+            prefix: '/api/go2rtc',
             target: 'go2rtc',
             tls: {
                 cert: this.configService.ssl.cert,
@@ -142,7 +184,7 @@ export class Server {
             hsts: false,
             frameguard: false,
             referrerPolicy: {
-                policy: 'no-referrer',
+                policy: 'strict-origin-when-cross-origin',
             },
             crossOriginEmbedderPolicy: false,
             crossOriginOpenerPolicy: false,
@@ -156,7 +198,7 @@ export class Server {
                     // fontSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'", 'data:'],
                     frameSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'"],
                     connectSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'", 'ws:', 'wss:', 'https:', 'blob:', 'data:', 'file:', 'filesystem:', 'mediastream:'],
-                    imgSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'", 'data:', 'blob:'],
+                    imgSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'", 'data:', 'blob:', 'https://*.tile.openstreetmap.org'],
                     mediaSrc: ["'unsafe-eval'", "'unsafe-inline'", "'self'", 'data:', 'blob:', 'http:', 'https:'],
                     scriptSrcAttr: null,
                     fontSrc: null,
@@ -164,7 +206,7 @@ export class Server {
                     frameAncestors: null,
                     formAction: null,
                     baseUri: null,
-                    upgradeInsecureRequests: null,
+                    upgradeInsecureRequests: [],
                     blockAllMixedContent: null,
                 },
             },
@@ -191,37 +233,20 @@ export class Server {
                 key: this.configService.ssl.key,
                 ca: this.configService.ssl.ca,
             },
-            querystringParser: this.qsParser.bind(this),
-        };
-    }
-    qsParser(str) {
-        return qs.parse(str, {
-            decoder(str, defaultDecoder, charset, type) {
-                if (type === 'value' && /^(?:-(?:[1-9](?:\d{0,2}(?:,\d{3})+|\d*))|(?:0|(?:[1-9](?:\d{0,2}(?:,\d{3})+|\d*))))(?:.\d+|)$/.test(str)) {
-                    return parseFloat(str);
-                }
-                const keywords = {
-                    true: true,
-                    false: false,
-                    null: null,
-                    undefined: undefined,
-                };
-                if (type === 'value' && str in keywords) {
-                    return keywords[str];
-                }
-                return defaultDecoder(str, defaultDecoder, charset);
+            routerOptions: {
+                querystringParser: this.qsParser.bind(this),
             },
-        });
+        };
     }
     get socketOptions() {
         return {
             cors: {
                 origin: '*',
             },
-            pingTimeout: 60000,
+            path: '/api/socket.io',
+            maxHttpBufferSize: 1e7,
             pingInterval: 25000,
-            transports: ['websocket', 'polling'],
-            path: '/socket.io',
+            pingTimeout: 20000,
         };
     }
     get multipartOptions() {
@@ -235,5 +260,59 @@ export class Server {
             prefix: '/',
         };
     }
+    get swaggerOptions() {
+        return {
+            transform: jsonSchemaTransform,
+            openapi: {
+                info: {
+                    title: 'camera.ui API',
+                    description: 'HTTP API for camera.ui.',
+                    version: ConfigService.VERSION,
+                },
+                components: {
+                    securitySchemes: {
+                        passwordAuth: {
+                            type: 'oauth2',
+                            flows: {
+                                password: {
+                                    tokenUrl: '/api/auth/token',
+                                    scopes: {},
+                                },
+                            },
+                        },
+                    },
+                },
+                security: [{ passwordAuth: [] }],
+            },
+        };
+    }
+    get swaggerUiOptions() {
+        return {
+            routePrefix: '/api/swagger',
+            uiConfig: {
+                docExpansion: 'list',
+                persistAuthorization: true,
+            },
+        };
+    }
+    qsParser(str) {
+        return qs.parse(str, {
+            decoder(str, defaultDecoder, charset, type) {
+                if (type === 'value' && /^(?:-(?:[1-9](?:\d{0,2}(?:,\d{3})+|\d*))|(?:0|(?:[1-9](?:\d{0,2}(?:,\d{3})+|\d*))))(?:.\d+|)$/.test(str)) {
+                    return parseFloat(str);
+                }
+                const keywords = {
+                    true: true,
+                    false: false,
+                    null: null,
+                    undefined: undefined,
+                };
+                if (type === 'value' && str in keywords) {
+                    return keywords[str];
+                }
+                return defaultDecoder(str, defaultDecoder, charset);
+            },
+        });
+    }
 }
 //# sourceMappingURL=index.js.map

package/dist/server/src/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,eAAe,CAAC;AACxC,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,6DAA6D;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAelD,MAAM,OAAO,MAAM;IACV,SAAS,GAAG,KAAK,CAAC;IAClB,GAAG,CAAsC;IAExC,GAAG,CAAc;IACjB,MAAM,CAAgB;IACtB,aAAa,CAAgB;IAC7B,WAAW,CAAc;IAEjC;QACE,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,OAAO,CAAc,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAgB,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAgB,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,OAAO,CAAc,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEvC,qCAAqC;QACrC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAEnD,kBAAkB;QAClB,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,mBAAmB;QACnB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7B,kBAAkB;QAClB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;IACvB,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,aAAa,CAAC,OAAO,sCAAsC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAElI,MAAM,WAAW,GAAkB;oBACjC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE;iBACnE,CAAC;gBAEF,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAEhD,MAAM,WAAW,GAAkB;oBACjC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE;iBACnE,CAAC;gBAEF,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,0CAA0C;QAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAY,WAAW;QACrB,OAAO;YACL,MAAM,EAAE,CAAC,qBAAqB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,oBAAoB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;SAClH,CAAC;IACJ,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO;YACL,QAAQ,EAAE,mBAAmB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE;YAC7D,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,KAAK;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,IAAY,kBAAkB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE7D,OAAO;YACL,QAAQ,EAAE,GAAG,aAAa,SAAS;YACnC,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,KAAK;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE;gBACd,MAAM,EAAE,aAAa;aACtB;YACD,yBAAyB,EAAE,KAAK;YAChC,uBAAuB,EAAE,KAAK;YAC9B,yBAAyB,EAAE,KAAK;YAChC,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,UAAU,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBAC1D,YAAY,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBAC5D,SAAS,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;oBAC3E,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;oBAC3E,oEAAoE;oBACpE,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBACxD,UAAU,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC;oBAC7I,MAAM,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;oBACxE,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;oBAC7F,aAAa,EAAE,IAAI;oBACnB,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,uBAAuB,EAAE,IAAI;oBAC7B,oBAAoB,EAAE,IAAI;iBAC3B;aACF;SACF,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,aAAa;IACb,gBAAgB;IAChB,6BAA6B;IAC7B,0BAA0B;IAC1B,OAAO;IACP,IAAI;IAEJ,IAAY,aAAa;QACvB,OAAO;YACL,SAAS,EAAE,GAAG;YACd,qBAAqB,EAAE,IAAI;YAC3B,qBAAqB,EAAE,IAAI;YAC3B,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,kBAAkB,EAAE,KAAK;gBACzB,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;aAC9B;YACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;SAC5C,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACnB,OAAO,CAAC,GAAW,EAAE,cAAiC,EAAE,OAAe,EAAE,IAAqB;gBAC5F,IAAI,IAAI,KAAK,OAAO,IAAI,+FAA+F,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClI,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBAED,MAAM,QAAQ,GAAQ;oBACpB,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,SAAS;iBACrB,CAAC;gBACF,IAAI,IAAI,KAAK,OAAO,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;oBACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAED,OAAO,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG;aACZ;YACD,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;YACpC,IAAI,EAAE,YAAY;SACnB,CAAC;IACJ,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO;YACL,kBAAkB,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,WAAW,MAAM,eAAe,CAAC;AACxC,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,gBAAgB,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAkBlD,MAAM,OAAO,MAAM;IACV,SAAS,GAAG,KAAK,CAAC;IAClB,GAAG,CAAsC;IACzC,WAAW,CAAmB;IAE7B,GAAG,CAAc;IACjB,MAAM,CAAgB;IACtB,aAAa,CAAgB;IAC7B,WAAW,CAAc;IAEzB,aAAa,GAAG,CAAC,CAAC;IAE1B;QACE,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,OAAO,CAAc,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAgB,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAgB,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,OAAO,CAAc,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;SACrC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAwB,CAAC;YACrE,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,aAAa,CAAC,OAAO,sCAAsC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAElI,MAAM,WAAW,GAAkB;oBACjC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE;iBACnE,CAAC;gBAEF,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAEhD,MAAM,WAAW,GAAkB;oBACjC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE;iBACnE,CAAC;gBAEF,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAY,WAAW;QACrB,OAAO;YACL,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC7D,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE;gBACrB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,IACE,MAAM,KAAK,qBAAqB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE;oBAChE,MAAM,KAAK,oBAAoB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;oBAC3D,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,EAC5C,CAAC;oBACD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,KAAK,uBAAuB,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;oBACzE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;oBACjE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBAC1C,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO;YACL,QAAQ,EAAE,mBAAmB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE;YAC7D,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,KAAK;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,IAAY,kBAAkB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE7D,OAAO;YACL,QAAQ,EAAE,GAAG,aAAa,SAAS;YACnC,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,KAAK;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE;gBACd,MAAM,EAAE,iCAAiC;aAC1C;YACD,yBAAyB,EAAE,KAAK;YAChC,uBAAuB,EAAE,KAAK;YAC9B,yBAAyB,EAAE,KAAK;YAChC,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,UAAU,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBAC1D,YAAY,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBAC5D,SAAS,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;oBAC3E,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;oBAC3E,oEAAoE;oBACpE,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC;oBACxD,UAAU,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC;oBAC7I,MAAM,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,kCAAkC,CAAC;oBAC5G,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;oBAC7F,aAAa,EAAE,IAAI;oBACnB,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,uBAAuB,EAAE,EAAE;oBAC3B,oBAAoB,EAAE,IAAI;iBAC3B;aACF;SACF,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,aAAa;IACb,gBAAgB;IAChB,6BAA6B;IAC7B,0BAA0B;IAC1B,OAAO;IACP,IAAI;IAEJ,IAAY,aAAa;QACvB,OAAO;YACL,SAAS,EAAE,GAAG;YACd,qBAAqB,EAAE,IAAI;YAC3B,qBAAqB,EAAE,IAAI;YAC3B,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,KAAK,EAAE;gBACL,kBAAkB,EAAE,KAAK;gBACzB,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI;gBACjC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBAC/B,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;aAC9B;YACD,aAAa,EAAE;gBACb,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG;aACZ;YACD,IAAI,EAAE,gBAAgB;YACtB,iBAAiB,EAAE,GAAG;YACtB,YAAY,EAAE,KAAK;YACnB,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO;YACL,kBAAkB,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAED,IAAY,aAAa;QACvB,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,cAAc;YAClC,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,IAAY,cAAc;QACxB,OAAO;YACL,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE;gBACP,IAAI,EAAE;oBACJ,KAAK,EAAE,eAAe;oBACtB,WAAW,EAAE,yBAAyB;oBACtC,OAAO,EAAE,aAAa,CAAC,OAAO;iBAC/B;gBACD,UAAU,EAAE;oBACV,eAAe,EAAE;wBACf,YAAY,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE;gCACL,QAAQ,EAAE;oCACR,QAAQ,EAAE,iBAAiB;oCAC3B,MAAM,EAAE,EAAE;iCACX;6BACF;yBACF;qBACF;iBACF;gBACD,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;aACjC;SACF,CAAC;IACJ,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE;gBACR,YAAY,EAAE,MAAM;gBACpB,oBAAoB,EAAE,IAAI;aAC3B;SACF,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACnB,OAAO,CAAC,GAAW,EAAE,cAAiC,EAAE,OAAe,EAAE,IAAqB;gBAC5F,IAAI,IAAI,KAAK,OAAO,IAAI,+FAA+F,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClI,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBAED,MAAM,QAAQ,GAAQ;oBACpB,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK;oBACZ,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,SAAS;iBACrB,CAAC;gBACF,IAAI,IAAI,KAAK,OAAO,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;oBACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAED,OAAO,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/server/src/api/middlewares/authPermission.middleware.d.ts

@@ -1,6 +1,6 @@
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import type { AuthLoginRequest, AuthParamsRequest } from '../types/index.js';
-export declare const onlyMasterCanDoThisAction: (req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply) => Promise<FastifyReply>;
-export declare const onlyAdminCanDoThisAction: (req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply) => Promise<FastifyReply>;
-export declare const onlySameUserOrAdminCanDoThisAction: (req: FastifyRequest<AuthLoginRequest & AuthParamsRequest>, reply: FastifyReply) => Promise<FastifyReply>;
-export declare const sameUserCantDoThisAction: (req: FastifyRequest<AuthLoginRequest & AuthParamsRequest>, reply: FastifyReply) => Promise<FastifyReply>;
+export declare function onlyMasterCanDoThisAction(req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply): Promise<FastifyReply>;
+export declare function onlyAdminCanDoThisAction(req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply): Promise<FastifyReply>;
+export declare function onlySameUserOrAdminCanDoThisAction(req: FastifyRequest<AuthLoginRequest & AuthParamsRequest>, reply: FastifyReply): Promise<FastifyReply>;
+export declare function sameUserCantDoThisAction(req: FastifyRequest<AuthLoginRequest & AuthParamsRequest>, reply: FastifyReply): Promise<FastifyReply>;

package/dist/server/src/api/middlewares/authPermission.middleware.js

@@ -1,4 +1,4 @@
-export const onlyMasterCanDoThisAction = async (req, reply) => {
+export async function onlyMasterCanDoThisAction(req, reply) {
     if (req.locals.user?.role !== 'master') {
         return reply.code(403).send({
             statusCode: 403,
@@ -6,8 +6,8 @@ export const onlyMasterCanDoThisAction = async (req, reply) => {
         });
     }
     return {};
-};
-export const onlyAdminCanDoThisAction = async (req, reply) => {
+}
+export async function onlyAdminCanDoThisAction(req, reply) {
     if (req.locals.user?.role !== 'admin' && req.locals.user?.role !== 'master') {
         return reply.code(403).send({
             statusCode: 403,
@@ -15,8 +15,8 @@ export const onlyAdminCanDoThisAction = async (req, reply) => {
         });
     }
     return {};
-};
-export const onlySameUserOrAdminCanDoThisAction = async (req, reply) => {
+}
+export async function onlySameUserOrAdminCanDoThisAction(req, reply) {
     if (req.locals.user?.username !== req.params?.username && req.locals.user?.role !== 'admin' && req.locals.user?.role !== 'master') {
         return reply.code(403).send({
             statusCode: 403,
@@ -24,8 +24,8 @@ export const onlySameUserOrAdminCanDoThisAction = async (req, reply) => {
         });
     }
     return {};
-};
-export const sameUserCantDoThisAction = async (req, reply) => {
+}
+export async function sameUserCantDoThisAction(req, reply) {
     if (req.params.username === req.locals.user?.username) {
         return reply.code(403).send({
             statusCode: 403,
@@ -33,5 +33,5 @@ export const sameUserCantDoThisAction = async (req, reply) => {
         });
     }
     return {};
-};
+}
 //# sourceMappingURL=authPermission.middleware.js.map

package/dist/server/src/api/middlewares/authPermission.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"authPermission.middleware.js","sourceRoot":"","sources":["../../../../../src/api/middlewares/authPermission.middleware.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,GAAqC,EAAE,KAAmB,EAAyB,EAAE;IACnI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAAE,GAAqC,EAAE,KAAmB,EAAyB,EAAE;IAClI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EAAE,GAAyD,EAAE,KAAmB,EAAyB,EAAE;IAChK,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClI,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAAE,GAAyD,EAAE,KAAmB,EAAyB,EAAE;IACtJ,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC,CAAC"}
+{"version":3,"file":"authPermission.middleware.js","sourceRoot":"","sources":["../../../../../src/api/middlewares/authPermission.middleware.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAqC,EAAE,KAAmB;IACxG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAqC,EAAE,KAAmB;IACvG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,GAAyD,EAAE,KAAmB;IACrI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClI,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAyD,EAAE,KAAmB;IAC3H,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAkB,CAAC;AAC5B,CAAC"}

package/dist/server/src/api/middlewares/authValidation.middleware.d.ts

@@ -1,4 +1,7 @@
 import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { DBUser } from '../database/types.js';
 import type { AuthLoginRequest, AuthNewLoginRequest } from '../types/index.js';
-export declare const isPasswordAndUserMatch: (req: FastifyRequest<AuthNewLoginRequest>, reply: FastifyReply) => Promise<FastifyReply>;
-export declare const validJWTNeeded: (req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply) => Promise<FastifyReply>;
+export declare function hashPassword(salt: string, password: string): string;
+export declare function verifyUserPassword(username: string, password: string): DBUser | undefined;
+export declare function isPasswordAndUserMatch(req: FastifyRequest<AuthNewLoginRequest>, reply: FastifyReply): Promise<FastifyReply>;
+export declare function validJWTNeeded(req: FastifyRequest<AuthLoginRequest>, reply: FastifyReply): Promise<FastifyReply>;

package/dist/server/src/api/middlewares/authValidation.middleware.js

@@ -3,8 +3,20 @@ import { createHmac } from 'node:crypto';
 import { container } from 'tsyringe';
 import { AuthService } from '../services/auth.service.js';
 import { UsersService } from '../services/users.service.js';
-import { REFRESH_TOKEN } from '../types/index.js';
-export const isPasswordAndUserMatch = async (req, reply) => {
+const FIRST_LOGIN_ALLOWED_ROUTES = new Set(['GET /api/auth/check']);
+export function hashPassword(salt, password) {
+    return createHmac('sha512', salt).update(password).digest('base64');
+}
+export function verifyUserPassword(username, password) {
+    const user = new UsersService().findByName(username);
+    if (!user) {
+        return undefined;
+    }
+    const [salt, expected] = user.password.split('$');
+    return hashPassword(salt, password) === expected ? user : undefined;
+}
+export async function isPasswordAndUserMatch(req, reply) {
+    const configService = container.resolve('configService');
     req.locals = {};
     const service = new UsersService();
     const user = service.findByName(req.body.username);
@@ -14,124 +26,73 @@ export const isPasswordAndUserMatch = async (req, reply) => {
             message: 'Forbidden',
         });
     }
-    else {
-        const passwordFields = user.password.split('$');
-        const salt = passwordFields[0];
-        const hash = createHmac('sha512', salt).update(req.body.password).digest('base64');
-        if (hash === passwordFields[1]) {
-            req.locals.user = {
-                _id: user._id,
-                avatar: user.avatar,
-                firstLogin: user.firstLogin,
-                singleSession: user.singleSession,
-                password: user.password,
-                preferences: user.preferences,
-                rememberMe: req.body.rememberMe,
-                role: user.role,
-                sessionTimer: user.sessionTimer,
-                username: user.username,
-            };
-            return {};
-        }
-        else {
-            return reply.code(401).send({
-                statusCode: 401,
-                message: 'Invalid username or password',
-            });
-        }
+    const passwordFields = user.password.split('$');
+    const hash = hashPassword(passwordFields[0], req.body.password);
+    if (hash !== passwordFields[1]) {
+        return reply.code(401).send({
+            statusCode: 401,
+            message: 'Invalid username or password',
+        });
+    }
+    if (user.twoFactor?.enabled) {
+        const tempToken = jwt.sign({
+            _id: user._id,
+            purpose: '2fa_pending',
+            kind: req.body.kind,
+            persistent: req.body.persistent,
+            device: req.body.device,
+        }, configService.SECRETS.jwt2faKey, { expiresIn: '5m' });
+        const response = {
+            requires2fa: true,
+            tempToken,
+        };
+        return reply.code(200).send(response);
     }
-};
-export const validJWTNeeded = async (req, reply) => {
+    req.locals.user = user;
+    return {};
+}
+export async function validJWTNeeded(req, reply) {
     const configService = container.resolve('configService');
     const authService = new AuthService();
     const userService = new UsersService();
     req.locals = {};
-    let user;
-    let tokenEncoded;
-    if (req.query.username && req.query.password) {
-        user = userService.findByName(req.query.username);
-        if (user) {
-            const passwordFields = user.password.split('$');
-            const salt = passwordFields[0];
-            const hash = createHmac('sha512', salt).update(req.query.password).digest('base64');
-            if (hash === passwordFields[1]) {
-                const payload = {
-                    _id: user._id,
-                    // avatar: user.avatar,
-                    username: user.username,
-                    // role: user.role,
-                    rememberMe: user.rememberMe,
-                    // singleSession: user.singleSession,
-                    // firstLogin: user.firstLogin,
-                    sessionTimer: user.sessionTimer,
-                };
-                const payloadRefresh = {
-                    _id: user._id,
-                };
-                const access_token = jwt.sign(payload, configService.SECRETS.jwtAccessKey, {
-                    expiresIn: user.rememberMe ? '100y' : user.sessionTimer,
-                });
-                const refresh_token = jwt.sign(payloadRefresh, configService.SECRETS.jwtRefreshKey, {
-                    expiresIn: user.rememberMe ? '100y' : REFRESH_TOKEN.EXPIRES_IN,
-                });
-                tokenEncoded = {
-                    _id: user._id,
-                    access_token: access_token,
-                    refresh_token: refresh_token,
-                    token_type: 'Bearer',
-                    expires_in: user.rememberMe ? 100 * 365 * 24 * 60 * 60 : user.sessionTimer,
-                    expires_at: user.rememberMe ? new Date((Date.now() / 1000 + 100 * 365 * 24 * 60 * 60) * 1000) : new Date((Date.now() / 1000 + user.sessionTimer) * 1000),
-                };
-                req.headers.authorization = `Bearer ${access_token}`;
-            }
-        }
+    const authHeader = req.headers.authorization ?? (req.query.token ? `Bearer ${req.query.token}` : undefined);
+    if (!authHeader) {
+        return reply.code(401).send({ statusCode: 401, message: 'Unauthorized' });
     }
-    if (req.headers.authorization || req.query.token) {
-        try {
-            const authHeader = req.headers.authorization ?? `Bearer ${req.query.token}`;
-            const authorization = authHeader.split(/\s+/);
-            if (authorization[0] !== 'Bearer') {
-                return reply.code(401).send({
-                    statusCode: 401,
-                    message: 'Unauthorized',
-                });
-            }
-            else {
-                // check if token exists in database and is still valid
-                const token = tokenEncoded ?? authService.findByToken(authorization[1]);
-                const tokenValid = authService.checkToken(token?.access_token ?? '');
-                if (!token || !tokenValid) {
-                    return reply.code(401).send({
-                        statusCode: 401,
-                        message: !token ? 'Unauthorized' : 'Token expired',
-                    });
-                }
-                const user = userService.findById(token._id);
-                if (!user) {
-                    return reply.code(403).send({
-                        statusCode: 403,
-                        message: 'User is not in database!',
-                    });
-                }
-                req.locals = {
-                    user,
-                    jwt: jwt.verify(token.access_token, configService.SECRETS.jwtAccessKey),
-                };
-                return {};
-            }
-        }
-        catch (error) {
-            return reply.code(401).send({
-                statusCode: 401,
-                message: error,
-            });
-        }
+    const authorization = authHeader.split(/\s+/);
+    if (authorization[0] !== 'Bearer' || !authorization[1]) {
+        return reply.code(401).send({ statusCode: 401, message: 'Unauthorized' });
     }
-    else {
-        return reply.code(401).send({
-            statusCode: 401,
-            message: 'Unauthorized',
-        });
+    const accessToken = authorization[1];
+    let decoded;
+    try {
+        decoded = jwt.verify(accessToken, configService.SECRETS.jwtAccessKey);
+    }
+    catch (error) {
+        const expired = error?.name === 'TokenExpiredError';
+        return reply.code(401).send({ statusCode: 401, message: expired ? 'Token expired' : 'Unauthorized' });
+    }
+    const dbToken = authService.findByAccessToken(accessToken);
+    if (!dbToken) {
+        return reply.code(401).send({ statusCode: 401, message: 'Token revoked' });
+    }
+    const user = userService.findById(decoded._id);
+    if (!user) {
+        return reply.code(403).send({ statusCode: 403, message: 'User is not in database' });
+    }
+    req.locals = { user, jwt: decoded };
+    if (user.firstLogin) {
+        const routeUrl = req.routeOptions?.url;
+        const params = req.params;
+        const isOwnUserRoute = routeUrl === '/api/users/:username' && params.username === user.username;
+        const isGloballyAllowed = routeUrl ? FIRST_LOGIN_ALLOWED_ROUTES.has(`${req.method} ${routeUrl}`) : false;
+        const allowed = isGloballyAllowed || ((req.method === 'PATCH' || req.method === 'GET') && isOwnUserRoute);
+        if (!allowed) {
+            return reply.code(403).send({ statusCode: 403, message: 'Password change required before first use' });
+        }
     }
-};
+    authService.bumpLastSeen(dbToken.id, req.ip);
+    return {};
+}
 //# sourceMappingURL=authValidation.middleware.js.map