@crowi/api 2.0.0-alpha.0

package/dist/routes/ts-rest/adminCrypto.js

@@ -0,0 +1,111 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("@ts-rest/express");
+const api_contract_1 = require("@crowi/api-contract");
+const express_2 = require("express");
+const crypto_1 = require("../../util/crypto");
+const config_sensitive_1 = require("../../models/config-sensitive");
+const debug_1 = __importDefault(require("debug"));
+const debug = (0, debug_1.default)('crowi:routes:ts-rest:adminCrypto');
+exports.default = (crowi, _app) => {
+    const s = (0, express_1.initServer)();
+    const router = (0, express_2.Router)();
+    const Config = crowi.model('Config');
+    const router_ = s.router(api_contract_1.apiContract.adminCrypto, {
+        /**
+         * Reads the raw `value` column rather than going through loadAllConfig's
+         * decrypt path, so encrypted vs legacy plaintext can be distinguished by
+         * the `enc:v1:` prefix.
+         */
+        getCryptoStatus: async () => {
+            const registry = (0, config_sensitive_1.listSensitiveConfigKeys)();
+            const docs = await Config.find({
+                $or: registry.map(({ ns, key }) => ({ ns, key })),
+            })
+                .lean()
+                .exec();
+            const docByCompound = new Map();
+            for (const doc of docs) {
+                docByCompound.set(`${doc.ns}:${doc.key}`, { value: doc.value });
+            }
+            let unencryptedCount = 0;
+            let encryptedCount = 0;
+            const entries = registry.map(({ ns, key }) => {
+                const stored = docByCompound.get(`${ns}:${key}`);
+                if (!stored) {
+                    return { ns, key, present: false, encrypted: false };
+                }
+                const encrypted = (0, crypto_1.isEncrypted)(stored.value);
+                if (encrypted)
+                    encryptedCount += 1;
+                else
+                    unencryptedCount += 1;
+                return { ns, key, present: true, encrypted };
+            });
+            return {
+                status: 200,
+                body: {
+                    encryptionConfigured: (0, crypto_1.isEncryptionConfigured)(),
+                    unencryptedCount,
+                    encryptedCount,
+                    entries,
+                },
+            };
+        },
+        /**
+         * The raw value column is JSON-stringified already (= loadAllConfig's
+         * expected shape), so we wrap it verbatim with encrypt() — no parse /
+         * stringify round-trip on the migration path.
+         */
+        reencryptAll: async () => {
+            if (!(0, crypto_1.isEncryptionConfigured)()) {
+                return {
+                    status: 503,
+                    body: {
+                        error: {
+                            code: 'ENCRYPTION_NOT_CONFIGURED',
+                            message: 'CROWI_ENCRYPTION_KEY is not set on the server.',
+                        },
+                    },
+                };
+            }
+            const registry = (0, config_sensitive_1.listSensitiveConfigKeys)();
+            const docs = (await Config.find({
+                $or: registry.map(({ ns, key }) => ({ ns, key })),
+            })
+                .lean()
+                .exec());
+            const presentByCompound = new Map();
+            for (const doc of docs)
+                presentByCompound.set(`${doc.ns}:${doc.key}`, doc.value);
+            let rewritten = 0;
+            let alreadyEncrypted = 0;
+            let missing = 0;
+            for (const { ns, key } of registry) {
+                const value = presentByCompound.get(`${ns}:${key}`);
+                if (value === undefined) {
+                    missing += 1;
+                    continue;
+                }
+                if ((0, crypto_1.isEncrypted)(value)) {
+                    alreadyEncrypted += 1;
+                    continue;
+                }
+                const next = (0, crypto_1.encrypt)(value);
+                await Config.findOneAndUpdate({ ns, key }, { ns, key, value: next }, { upsert: true }).exec();
+                debug('re-encrypted %s:%s', ns, key);
+                rewritten += 1;
+            }
+            return {
+                status: 200,
+                body: { rewritten, alreadyEncrypted, missing },
+            };
+        },
+    });
+    (0, express_1.createExpressEndpoints)(api_contract_1.apiContract.adminCrypto, router_, router);
+    return router;
+};
+//# sourceMappingURL=adminCrypto.js.map

package/dist/routes/ts-rest/adminCrypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminCrypto.js","sourceRoot":"","sources":["../../../src/routes/ts-rest/adminCrypto.ts"],"names":[],"mappings":";;;;;AAAA,8CAAsE;AACtE,sDAA6E;AAC7E,qCAA0C;AAE1C,4CAA+E;AAC/E,kEAAsE;AACtE,kDAA0B;AAE1B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,kCAAkC,CAAC,CAAC;AAExD,kBAAe,CAAC,KAAY,EAAE,IAAa,EAAE,EAAE;IAC7C,MAAM,CAAC,GAAG,IAAA,oBAAU,GAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,0BAAW,CAAC,WAAW,EAAE;QAChD;;;;WAIG;QACH,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,IAAA,0CAAuB,GAAE,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;aAClD,CAAC;iBACC,IAAI,EAAE;iBACN,IAAI,EAAE,CAAC;YAEV,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;YAC3D,KAAK,MAAM,GAAG,IAAI,IAAyD,EAAE,CAAC;gBAC5E,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,MAAM,OAAO,GAA2B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACnE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gBACvD,CAAC;gBACD,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,SAAS;oBAAE,cAAc,IAAI,CAAC,CAAC;;oBAC9B,gBAAgB,IAAI,CAAC,CAAC;gBAC3B,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM,EAAE,GAAY;gBACpB,IAAI,EAAE;oBACJ,oBAAoB,EAAE,IAAA,+BAAsB,GAAE;oBAC9C,gBAAgB;oBAChB,cAAc;oBACd,OAAO;iBACR;aACF,CAAC;QACJ,CAAC;QAED;;;;WAIG;QACH,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC,IAAA,+BAAsB,GAAE,EAAE,CAAC;gBAC9B,OAAO;oBACL,MAAM,EAAE,GAAY;oBACpB,IAAI,EAAE;wBACJ,KAAK,EAAE;4BACL,IAAI,EAAE,2BAAoC;4BAC1C,OAAO,EAAE,gDAAgD;yBAC1D;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAA,0CAAuB,GAAE,CAAC;YAE3C,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC9B,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;aAClD,CAAC;iBACC,IAAI,EAAE;iBACN,IAAI,EAAE,CAAsD,CAAC;YAEhE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;YACpD,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAEjF,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,CAAC;oBACb,SAAS;gBACX,CAAC;gBACD,IAAI,IAAA,oBAAW,EAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,gBAAgB,IAAI,CAAC,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,IAAA,gBAAO,EAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9F,KAAK,CAAC,oBAAoB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;gBACrC,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,GAAY;gBACpB,IAAI,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE;aAC/C,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,IAAA,gCAAsB,EAAC,0BAAW,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/routes/ts-rest/app.d.ts

@@ -0,0 +1,4 @@
+import { Express } from 'express';
+import Crowi from '../../crowi';
+declare const _default: (_crowi: Crowi, _app: Express) => import("express-serve-static-core").Router;
+export default _default;

package/dist/routes/ts-rest/app.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("@ts-rest/express");
+const api_contract_1 = require("@crowi/api-contract");
+const express_2 = require("express");
+exports.default = (_crowi, _app) => {
+    const s = (0, express_1.initServer)();
+    const router = (0, express_2.Router)();
+    const appRouter = s.router(api_contract_1.apiContract.app, {
+        getInfo: async ({ req }) => {
+            const config = req.config;
+            const raw = config?.crowi?.['app:title'];
+            // 'Crowi' is the seed default in models/config.ts; treat that and
+            // empty/missing values as "not customized" so the client can render
+            // the full lockup instead of an icon-plus-text composition.
+            const title = raw && raw !== 'Crowi' ? raw : null;
+            return { status: 200, body: { title } };
+        },
+    });
+    (0, express_1.createExpressEndpoints)(api_contract_1.apiContract.app, appRouter, router);
+    return router;
+};
+//# sourceMappingURL=app.js.map

package/dist/routes/ts-rest/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/routes/ts-rest/app.ts"],"names":[],"mappings":";;AAAA,8CAAsE;AACtE,sDAAkD;AAClD,qCAA0C;AAG1C,kBAAe,CAAC,MAAa,EAAE,IAAa,EAAE,EAAE;IAC9C,MAAM,CAAC,GAAG,IAAA,oBAAU,GAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,0BAAW,CAAC,GAAG,EAAE;QAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzB,MAAM,MAAM,GAAI,GAAwD,CAAC,MAAM,CAAC;YAChF,MAAM,GAAG,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAuB,CAAC;YAC/D,kEAAkE;YAClE,oEAAoE;YACpE,4DAA4D;YAC5D,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,GAAY,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,CAAC;KACF,CAAC,CAAC;IAEH,IAAA,gCAAsB,EAAC,0BAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/routes/ts-rest/attachment.d.ts

@@ -0,0 +1,4 @@
+import Crowi from '../../crowi';
+import { Express } from 'express';
+declare const _default: (crowi: Crowi, _app: Express) => import("express-serve-static-core").Router;
+export default _default;