@camstack/server 1.2.537 → 1.2.539

package/dist/api/core/auth.router.js

@@ -1036,6 +1036,46 @@ function createAuthRouter(auth, registry, moleculer = null, shareTokens = null,
             });
             return { id: record.id, token, expiresAt: record.expiresAt };
         }),
+        /**
+         * Slide expiry on a still-valid share token (same `csv_*`). Used by the
+         * Home Assistant embed cache so a long-lived dashboard does not mint a
+         * new row every hour. Expired / missing → NOT_FOUND (caller must create).
+         */
+        extendShareToken: trpc_middleware_js_1.protectedProcedure
+            .input(zod_1.z.object({
+            id: zod_1.z.string().min(1),
+            ttlSec: zod_1.z.number().int().min(share_token_service_js_1.SHARE_TOKEN_TTL_MIN_SEC).max(share_token_service_js_1.SHARE_TOKEN_TTL_MAX_SEC),
+        }))
+            .output(zod_1.z.object({ id: zod_1.z.string(), expiresAt: zod_1.z.number() }))
+            .mutation(async ({ input, ctx }) => {
+            assertRealUserSession(ctx.user);
+            const service = requireShareTokens();
+            try {
+                const record = await service.extend({
+                    id: input.id,
+                    ttlSec: input.ttlSec,
+                    callerUserId: ctx.user.id,
+                    callerIsAdmin: ctx.user.isAdmin,
+                });
+                if (record.expiresAt === null) {
+                    throw new server_1.TRPCError({
+                        code: 'BAD_REQUEST',
+                        message: 'A never-expiring share token cannot be extended',
+                    });
+                }
+                return { id: record.id, expiresAt: record.expiresAt };
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : 'Share token extend failed';
+                if (/not found|expired/i.test(message)) {
+                    throw new server_1.TRPCError({ code: 'NOT_FOUND', message });
+                }
+                if (/owner or an admin|never-expiring/i.test(message)) {
+                    throw new server_1.TRPCError({ code: 'FORBIDDEN', message });
+                }
+                throw new server_1.TRPCError({ code: 'BAD_REQUEST', message });
+            }
+        }),
         revokeShareToken: trpc_middleware_js_1.protectedProcedure
             .input(zod_1.z.object({ id: zod_1.z.string().min(1) }))
             .output(zod_1.z.object({ success: zod_1.z.boolean() }))

package/dist/core/auth/share-token.service.js

@@ -262,6 +262,59 @@ class ShareTokenService {
         });
         return record;
     }
+    /**
+     * Slide `expiresAt` forward from NOW for a still-valid token. Same raw
+     * credential, same id — Home Assistant remints without flooding
+     * `share_view_tokens`. Throws when missing, expired, never-expiring,
+     * or the caller is not the owner/admin; refuses `'never'` as ttlSec.
+     */
+    async extend(input) {
+        if (!Number.isInteger(input.ttlSec) ||
+            input.ttlSec < exports.SHARE_TOKEN_TTL_MIN_SEC ||
+            input.ttlSec > exports.SHARE_TOKEN_TTL_MAX_SEC) {
+            throw new Error(`Share token TTL out of bounds — got ${input.ttlSec}s, allowed ` +
+                `[${exports.SHARE_TOKEN_TTL_MIN_SEC}s, ${exports.SHARE_TOKEN_TTL_MAX_SEC}s]`);
+        }
+        const results = await (await this.store()).query({
+            collection: SHARE_TOKENS_COLLECTION,
+            filter: { where: { id: input.id } },
+        });
+        const first = results[0];
+        if (!first) {
+            throw new Error(`Share token not found: ${input.id}`);
+        }
+        const record = parseShareToken(first.data);
+        if (!record) {
+            throw new Error(`Share token not found: ${input.id}`);
+        }
+        if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
+            throw new Error('Only the token owner or an admin can extend a share token');
+        }
+        if (record.expiresAt === null) {
+            throw new Error('A never-expiring share token cannot be extended');
+        }
+        const now = Date.now();
+        if (now > record.expiresAt) {
+            throw new Error(`Share token expired: ${input.id}`);
+        }
+        const updated = {
+            ...record,
+            expiresAt: now + input.ttlSec * 1000,
+        };
+        await (await this.store()).update({
+            collection: SHARE_TOKENS_COLLECTION,
+            id: record.id,
+            data: { ...updated },
+        });
+        this.logger?.info('Share token extended', {
+            meta: {
+                id: updated.id,
+                byUserId: input.callerUserId,
+                expiresAt: updated.expiresAt,
+            },
+        });
+        return updated;
+    }
     /**
      * Revoke (delete) a share token. Only the minting user or an admin may
      * revoke. Returns `false` when the token doesn't exist; throws on a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.537",
+  "version": "1.2.539",
   "license": "MIT",
   "private": false,
   "files": [
@@ -37,17 +37,17 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.404",
+    "@camstack/addon-admin-ui": "1.2.405",
     "@camstack/addon-agent-ui": "1.2.223",
     "@camstack/addon-auth": "1.2.141",
     "@camstack/addon-decoder-nodeav": "1.2.123",
     "@camstack/addon-notifiers": "1.2.134",
-    "@camstack/addon-pipeline": "1.2.357",
-    "@camstack/addon-pipeline-orchestrator": "1.2.308",
-    "@camstack/addon-post-analysis": "1.2.356",
+    "@camstack/addon-pipeline": "1.2.358",
+    "@camstack/addon-pipeline-orchestrator": "1.2.309",
+    "@camstack/addon-post-analysis": "1.2.357",
     "@camstack/sdk": "1.2.131",
-    "@camstack/system": "1.2.414",
-    "@camstack/types": "1.2.352",
+    "@camstack/system": "1.2.415",
+    "@camstack/types": "1.2.353",
     "@camstack/ui-library": "1.2.281",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",