@crowi/api 2.0.0-alpha.1 → 2.0.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/hono/handlers/activation.d.ts +3 -3
- package/dist/hono/handlers/admin/users.d.ts +118 -0
- package/dist/hono/handlers/admin/users.js +28 -0
- package/dist/hono/handlers/admin/users.js.map +1 -1
- package/dist/hono/handlers/app.d.ts +1 -0
- package/dist/hono/handlers/app.js +11 -0
- package/dist/hono/handlers/app.js.map +1 -1
- package/dist/hono/handlers/attachment-stream.js +23 -0
- package/dist/hono/handlers/attachment-stream.js.map +1 -1
- package/dist/hono/handlers/draft.js +10 -0
- package/dist/hono/handlers/draft.js.map +1 -1
- package/dist/hono/handlers/emailChange.d.ts +4 -4
- package/dist/hono/handlers/inviteAccept.d.ts +6 -6
- package/dist/hono/handlers/page.d.ts +251 -0
- package/dist/hono/handlers/page.js +123 -6
- package/dist/hono/handlers/page.js.map +1 -1
- package/dist/hono/handlers/passwordReset.d.ts +5 -5
- package/dist/hono/handlers/tokenAuth.d.ts +7 -7
- package/dist/mcp/result.d.ts +42 -16
- package/dist/mcp/result.js +56 -10
- package/dist/mcp/result.js.map +1 -1
- package/dist/mcp/tools/page.js +21 -1
- package/dist/mcp/tools/page.js.map +1 -1
- package/dist/mcp/tools/search.d.ts +12 -0
- package/dist/mcp/tools/search.js +21 -5
- package/dist/mcp/tools/search.js.map +1 -1
- package/dist/migration/helpers.d.ts +13 -0
- package/dist/migration/helpers.js +29 -0
- package/dist/migration/helpers.js.map +1 -0
- package/dist/migration/migrations/files-url-to-attachments.d.ts +35 -0
- package/dist/migration/migrations/files-url-to-attachments.js +291 -0
- package/dist/migration/migrations/files-url-to-attachments.js.map +1 -0
- package/dist/migration/migrations/index.js +4 -0
- package/dist/migration/migrations/index.js.map +1 -1
- package/dist/migration/migrations/published-current-revision.d.ts +47 -0
- package/dist/migration/migrations/published-current-revision.js +90 -0
- package/dist/migration/migrations/published-current-revision.js.map +1 -0
- package/dist/migration/migrations/wikilink-format.d.ts +0 -11
- package/dist/migration/migrations/wikilink-format.js +5 -156
- package/dist/migration/migrations/wikilink-format.js.map +1 -1
- package/dist/migration/migrations/wikilink-html-recover.d.ts +116 -0
- package/dist/migration/migrations/wikilink-html-recover.js +314 -0
- package/dist/migration/migrations/wikilink-html-recover.js.map +1 -0
- package/dist/models/page.d.ts +3 -0
- package/dist/models/page.js +31 -0
- package/dist/models/page.js.map +1 -1
- package/dist/models/user.d.ts +1 -0
- package/dist/models/user.js +40 -21
- package/dist/models/user.js.map +1 -1
- package/dist/renderer/core/headings.d.ts +12 -1
- package/dist/renderer/core/headings.js +48 -8
- package/dist/renderer/core/headings.js.map +1 -1
- package/dist/renderer/pipeline.d.ts +6 -0
- package/dist/renderer/pipeline.js.map +1 -1
- package/dist/util/page-response.js +19 -2
- package/dist/util/page-response.js.map +1 -1
- package/package.json +12 -6
- package/views/mail/layout.mjml +7 -5
- package/dist/common/functions/path2name.d.ts +0 -1
- package/dist/common/functions/path2name.js +0 -22
- package/dist/common/functions/path2name.js.map +0 -1
- package/dist/common/functions/renderIcon.d.ts +0 -1
- package/dist/common/functions/renderIcon.js +0 -9
- package/dist/common/functions/renderIcon.js.map +0 -1
- package/dist/controllers/admin.d.ts +0 -3
- package/dist/controllers/admin.js +0 -474
- package/dist/controllers/admin.js.map +0 -1
- package/dist/controllers/attachment.d.ts +0 -4
- package/dist/controllers/attachment.js +0 -200
- package/dist/controllers/attachment.js.map +0 -1
- package/dist/controllers/backlink.d.ts +0 -3
- package/dist/controllers/backlink.js +0 -42
- package/dist/controllers/backlink.js.map +0 -1
- package/dist/controllers/bookmark.d.ts +0 -3
- package/dist/controllers/bookmark.js +0 -100
- package/dist/controllers/bookmark.js.map +0 -1
- package/dist/controllers/comment.d.ts +0 -3
- package/dist/controllers/comment.js +0 -111
- package/dist/controllers/comment.js.map +0 -1
- package/dist/controllers/index.d.ts +0 -25
- package/dist/controllers/index.js +0 -44
- package/dist/controllers/index.js.map +0 -1
- package/dist/controllers/installer.d.ts +0 -3
- package/dist/controllers/installer.js +0 -48
- package/dist/controllers/installer.js.map +0 -1
- package/dist/controllers/login.d.ts +0 -4
- package/dist/controllers/login.js +0 -438
- package/dist/controllers/login.js.map +0 -1
- package/dist/controllers/logout.d.ts +0 -5
- package/dist/controllers/logout.js +0 -11
- package/dist/controllers/logout.js.map +0 -1
- package/dist/controllers/me.d.ts +0 -4
- package/dist/controllers/me.js +0 -369
- package/dist/controllers/me.js.map +0 -1
- package/dist/controllers/notification.d.ts +0 -3
- package/dist/controllers/notification.js +0 -88
- package/dist/controllers/notification.js.map +0 -1
- package/dist/controllers/page.d.ts +0 -3
- package/dist/controllers/page.js +0 -881
- package/dist/controllers/page.js.map +0 -1
- package/dist/controllers/revision.d.ts +0 -3
- package/dist/controllers/revision.js +0 -91
- package/dist/controllers/revision.js.map +0 -1
- package/dist/controllers/search.d.ts +0 -3
- package/dist/controllers/search.js +0 -93
- package/dist/controllers/search.js.map +0 -1
- package/dist/controllers/share.d.ts +0 -3
- package/dist/controllers/share.js +0 -207
- package/dist/controllers/share.js.map +0 -1
- package/dist/controllers/shareAccess.d.ts +0 -3
- package/dist/controllers/shareAccess.js +0 -28
- package/dist/controllers/shareAccess.js.map +0 -1
- package/dist/controllers/slack.d.ts +0 -3
- package/dist/controllers/slack.js +0 -87
- package/dist/controllers/slack.js.map +0 -1
- package/dist/controllers/tokenAuth.d.ts +0 -10
- package/dist/controllers/tokenAuth.js +0 -292
- package/dist/controllers/tokenAuth.js.map +0 -1
- package/dist/controllers/user.d.ts +0 -3
- package/dist/controllers/user.js +0 -67
- package/dist/controllers/user.js.map +0 -1
- package/dist/controllers/version.d.ts +0 -4
- package/dist/controllers/version.js +0 -19
- package/dist/controllers/version.js.map +0 -1
- package/dist/crowi/express-init.d.ts +0 -4
- package/dist/crowi/express-init.js +0 -101
- package/dist/crowi/express-init.js.map +0 -1
- package/dist/form/admin/app.d.ts +0 -2
- package/dist/form/admin/app.js +0 -9
- package/dist/form/admin/app.js.map +0 -1
- package/dist/form/admin/auth.d.ts +0 -2
- package/dist/form/admin/auth.js +0 -9
- package/dist/form/admin/auth.js.map +0 -1
- package/dist/form/admin/aws.d.ts +0 -2
- package/dist/form/admin/aws.js +0 -13
- package/dist/form/admin/aws.js.map +0 -1
- package/dist/form/admin/github.d.ts +0 -2
- package/dist/form/admin/github.js +0 -15
- package/dist/form/admin/github.js.map +0 -1
- package/dist/form/admin/google.d.ts +0 -2
- package/dist/form/admin/google.js +0 -13
- package/dist/form/admin/google.js.map +0 -1
- package/dist/form/admin/mail.d.ts +0 -2
- package/dist/form/admin/mail.js +0 -13
- package/dist/form/admin/mail.js.map +0 -1
- package/dist/form/admin/sec.d.ts +0 -2
- package/dist/form/admin/sec.js +0 -10
- package/dist/form/admin/sec.js.map +0 -1
- package/dist/form/admin/slackSetting.d.ts +0 -2
- package/dist/form/admin/slackSetting.js +0 -13
- package/dist/form/admin/slackSetting.js.map +0 -1
- package/dist/form/admin/userEdit.d.ts +0 -2
- package/dist/form/admin/userEdit.js +0 -9
- package/dist/form/admin/userEdit.js.map +0 -1
- package/dist/form/admin/userInvite.d.ts +0 -2
- package/dist/form/admin/userInvite.js +0 -9
- package/dist/form/admin/userInvite.js.map +0 -1
- package/dist/form/comment.d.ts +0 -2
- package/dist/form/comment.js +0 -9
- package/dist/form/comment.js.map +0 -1
- package/dist/form/index.d.ts +0 -25
- package/dist/form/index.js +0 -48
- package/dist/form/index.js.map +0 -1
- package/dist/form/invited.d.ts +0 -2
- package/dist/form/invited.js +0 -13
- package/dist/form/invited.js.map +0 -1
- package/dist/form/login.d.ts +0 -2
- package/dist/form/login.js +0 -11
- package/dist/form/login.js.map +0 -1
- package/dist/form/me/apiToken.d.ts +0 -2
- package/dist/form/me/apiToken.js +0 -9
- package/dist/form/me/apiToken.js.map +0 -1
- package/dist/form/me/password.d.ts +0 -2
- package/dist/form/me/password.js +0 -11
- package/dist/form/me/password.js.map +0 -1
- package/dist/form/me/user.d.ts +0 -2
- package/dist/form/me/user.js +0 -9
- package/dist/form/me/user.js.map +0 -1
- package/dist/form/register.d.ts +0 -2
- package/dist/form/register.js +0 -13
- package/dist/form/register.js.map +0 -1
- package/dist/form/revision.d.ts +0 -2
- package/dist/form/revision.js +0 -13
- package/dist/form/revision.js.map +0 -1
- package/dist/hono/handlers/admin/share.d.ts +0 -106
- package/dist/hono/handlers/admin/share.js +0 -55
- package/dist/hono/handlers/admin/share.js.map +0 -1
- package/dist/middlewares/accessTokenParser.d.ts +0 -4
- package/dist/middlewares/accessTokenParser.js +0 -29
- package/dist/middlewares/accessTokenParser.js.map +0 -1
- package/dist/middlewares/adminRequired.d.ts +0 -10
- package/dist/middlewares/adminRequired.js +0 -35
- package/dist/middlewares/adminRequired.js.map +0 -1
- package/dist/middlewares/applicationInstalled.d.ts +0 -3
- package/dist/middlewares/applicationInstalled.js +0 -20
- package/dist/middlewares/applicationInstalled.js.map +0 -1
- package/dist/middlewares/applicationNotInstalled.d.ts +0 -3
- package/dist/middlewares/applicationNotInstalled.js +0 -13
- package/dist/middlewares/applicationNotInstalled.js.map +0 -1
- package/dist/middlewares/basicAuth.d.ts +0 -4
- package/dist/middlewares/basicAuth.js +0 -23
- package/dist/middlewares/basicAuth.js.map +0 -1
- package/dist/middlewares/csrfVerify.d.ts +0 -4
- package/dist/middlewares/csrfVerify.js +0 -24
- package/dist/middlewares/csrfVerify.js.map +0 -1
- package/dist/middlewares/encodeSpace.d.ts +0 -3
- package/dist/middlewares/encodeSpace.js +0 -14
- package/dist/middlewares/encodeSpace.js.map +0 -1
- package/dist/middlewares/fileAccessRightOrLoginRequired.d.ts +0 -4
- package/dist/middlewares/fileAccessRightOrLoginRequired.js +0 -29
- package/dist/middlewares/fileAccessRightOrLoginRequired.js.map +0 -1
- package/dist/middlewares/index.d.ts +0 -16
- package/dist/middlewares/index.js +0 -30
- package/dist/middlewares/index.js.map +0 -1
- package/dist/middlewares/jwtAdminRequired.d.ts +0 -8
- package/dist/middlewares/jwtAdminRequired.js +0 -35
- package/dist/middlewares/jwtAdminRequired.js.map +0 -1
- package/dist/middlewares/jwtAuth.d.ts +0 -4
- package/dist/middlewares/jwtAuth.js +0 -104
- package/dist/middlewares/jwtAuth.js.map +0 -1
- package/dist/middlewares/loginChecker.d.ts +0 -4
- package/dist/middlewares/loginChecker.js +0 -32
- package/dist/middlewares/loginChecker.js.map +0 -1
- package/dist/middlewares/loginRequired.d.ts +0 -4
- package/dist/middlewares/loginRequired.js +0 -88
- package/dist/middlewares/loginRequired.js.map +0 -1
- package/dist/routes/admin.d.ts +0 -4
- package/dist/routes/admin.js +0 -17
- package/dist/routes/admin.js.map +0 -1
- package/dist/routes/api/admin.d.ts +0 -4
- package/dist/routes/api/admin.js +0 -37
- package/dist/routes/api/admin.js.map +0 -1
- package/dist/routes/api/attachment.d.ts +0 -4
- package/dist/routes/api/attachment.js +0 -19
- package/dist/routes/api/attachment.js.map +0 -1
- package/dist/routes/api/bookmark.d.ts +0 -4
- package/dist/routes/api/bookmark.js +0 -15
- package/dist/routes/api/bookmark.js.map +0 -1
- package/dist/routes/api/comment.d.ts +0 -4
- package/dist/routes/api/comment.js +0 -14
- package/dist/routes/api/comment.js.map +0 -1
- package/dist/routes/api/index.d.ts +0 -4
- package/dist/routes/api/index.js +0 -36
- package/dist/routes/api/index.js.map +0 -1
- package/dist/routes/api/like.d.ts +0 -4
- package/dist/routes/api/like.js +0 -13
- package/dist/routes/api/like.js.map +0 -1
- package/dist/routes/api/notification.d.ts +0 -4
- package/dist/routes/api/notification.js +0 -15
- package/dist/routes/api/notification.js.map +0 -1
- package/dist/routes/api/page.d.ts +0 -4
- package/dist/routes/api/page.js +0 -24
- package/dist/routes/api/page.js.map +0 -1
- package/dist/routes/api/revision.d.ts +0 -4
- package/dist/routes/api/revision.js +0 -14
- package/dist/routes/api/revision.js.map +0 -1
- package/dist/routes/api/share.d.ts +0 -4
- package/dist/routes/api/share.js +0 -16
- package/dist/routes/api/share.js.map +0 -1
- package/dist/routes/api/version.d.ts +0 -4
- package/dist/routes/api/version.js +0 -10
- package/dist/routes/api/version.js.map +0 -1
- package/dist/routes/index.d.ts +0 -4
- package/dist/routes/index.js +0 -71
- package/dist/routes/index.js.map +0 -1
- package/dist/routes/login.d.ts +0 -4
- package/dist/routes/login.js +0 -18
- package/dist/routes/login.js.map +0 -1
- package/dist/routes/me.d.ts +0 -4
- package/dist/routes/me.js +0 -24
- package/dist/routes/me.js.map +0 -1
- package/dist/routes/ts-rest/admin/app.d.ts +0 -4
- package/dist/routes/ts-rest/admin/app.js +0 -67
- package/dist/routes/ts-rest/admin/app.js.map +0 -1
- package/dist/routes/ts-rest/admin/auth.d.ts +0 -4
- package/dist/routes/ts-rest/admin/auth.js +0 -95
- package/dist/routes/ts-rest/admin/auth.js.map +0 -1
- package/dist/routes/ts-rest/admin/index.d.ts +0 -10
- package/dist/routes/ts-rest/admin/index.js +0 -35
- package/dist/routes/ts-rest/admin/index.js.map +0 -1
- package/dist/routes/ts-rest/admin/mail.d.ts +0 -4
- package/dist/routes/ts-rest/admin/mail.js +0 -156
- package/dist/routes/ts-rest/admin/mail.js.map +0 -1
- package/dist/routes/ts-rest/admin/plugins.d.ts +0 -4
- package/dist/routes/ts-rest/admin/plugins.js +0 -317
- package/dist/routes/ts-rest/admin/plugins.js.map +0 -1
- package/dist/routes/ts-rest/admin/search.d.ts +0 -4
- package/dist/routes/ts-rest/admin/search.js +0 -67
- package/dist/routes/ts-rest/admin/search.js.map +0 -1
- package/dist/routes/ts-rest/admin/security.d.ts +0 -4
- package/dist/routes/ts-rest/admin/security.js +0 -114
- package/dist/routes/ts-rest/admin/security.js.map +0 -1
- package/dist/routes/ts-rest/admin/share.d.ts +0 -4
- package/dist/routes/ts-rest/admin/share.js +0 -69
- package/dist/routes/ts-rest/admin/share.js.map +0 -1
- package/dist/routes/ts-rest/admin/storage.d.ts +0 -4
- package/dist/routes/ts-rest/admin/storage.js +0 -59
- package/dist/routes/ts-rest/admin/storage.js.map +0 -1
- package/dist/routes/ts-rest/admin/users.d.ts +0 -4
- package/dist/routes/ts-rest/admin/users.js +0 -215
- package/dist/routes/ts-rest/admin/users.js.map +0 -1
- package/dist/routes/ts-rest/adminCrypto.d.ts +0 -4
- package/dist/routes/ts-rest/adminCrypto.js +0 -111
- package/dist/routes/ts-rest/adminCrypto.js.map +0 -1
- package/dist/routes/ts-rest/app.d.ts +0 -4
- package/dist/routes/ts-rest/app.js +0 -23
- package/dist/routes/ts-rest/app.js.map +0 -1
- package/dist/routes/ts-rest/attachment.d.ts +0 -4
- package/dist/routes/ts-rest/attachment.js +0 -830
- package/dist/routes/ts-rest/attachment.js.map +0 -1
- package/dist/routes/ts-rest/auth.d.ts +0 -4
- package/dist/routes/ts-rest/auth.js +0 -70
- package/dist/routes/ts-rest/auth.js.map +0 -1
- package/dist/routes/ts-rest/autocomplete.d.ts +0 -30
- package/dist/routes/ts-rest/autocomplete.js +0 -189
- package/dist/routes/ts-rest/autocomplete.js.map +0 -1
- package/dist/routes/ts-rest/backlink.d.ts +0 -4
- package/dist/routes/ts-rest/backlink.js +0 -106
- package/dist/routes/ts-rest/backlink.js.map +0 -1
- package/dist/routes/ts-rest/bookmark.d.ts +0 -4
- package/dist/routes/ts-rest/bookmark.js +0 -189
- package/dist/routes/ts-rest/bookmark.js.map +0 -1
- package/dist/routes/ts-rest/comment.d.ts +0 -4
- package/dist/routes/ts-rest/comment.js +0 -217
- package/dist/routes/ts-rest/comment.js.map +0 -1
- package/dist/routes/ts-rest/draft.d.ts +0 -22
- package/dist/routes/ts-rest/draft.js +0 -200
- package/dist/routes/ts-rest/draft.js.map +0 -1
- package/dist/routes/ts-rest/index.d.ts +0 -4
- package/dist/routes/ts-rest/index.js +0 -103
- package/dist/routes/ts-rest/index.js.map +0 -1
- package/dist/routes/ts-rest/installer.d.ts +0 -4
- package/dist/routes/ts-rest/installer.js +0 -77
- package/dist/routes/ts-rest/installer.js.map +0 -1
- package/dist/routes/ts-rest/me.d.ts +0 -4
- package/dist/routes/ts-rest/me.js +0 -410
- package/dist/routes/ts-rest/me.js.map +0 -1
- package/dist/routes/ts-rest/notification.d.ts +0 -4
- package/dist/routes/ts-rest/notification.js +0 -241
- package/dist/routes/ts-rest/notification.js.map +0 -1
- package/dist/routes/ts-rest/page-collab.d.ts +0 -29
- package/dist/routes/ts-rest/page-collab.js +0 -90
- package/dist/routes/ts-rest/page-collab.js.map +0 -1
- package/dist/routes/ts-rest/page-preview.d.ts +0 -26
- package/dist/routes/ts-rest/page-preview.js +0 -80
- package/dist/routes/ts-rest/page-preview.js.map +0 -1
- package/dist/routes/ts-rest/page.d.ts +0 -4
- package/dist/routes/ts-rest/page.js +0 -676
- package/dist/routes/ts-rest/page.js.map +0 -1
- package/dist/routes/ts-rest/presence.d.ts +0 -30
- package/dist/routes/ts-rest/presence.js +0 -155
- package/dist/routes/ts-rest/presence.js.map +0 -1
- package/dist/routes/ts-rest/revision.d.ts +0 -4
- package/dist/routes/ts-rest/revision.js +0 -240
- package/dist/routes/ts-rest/revision.js.map +0 -1
- package/dist/routes/ts-rest/search.d.ts +0 -4
- package/dist/routes/ts-rest/search.js +0 -121
- package/dist/routes/ts-rest/search.js.map +0 -1
- package/dist/routes/ts-rest/tokenAuth.d.ts +0 -4
- package/dist/routes/ts-rest/tokenAuth.js +0 -94
- package/dist/routes/ts-rest/tokenAuth.js.map +0 -1
- package/dist/routes/ts-rest/user.d.ts +0 -4
- package/dist/routes/ts-rest/user.js +0 -307
- package/dist/routes/ts-rest/user.js.map +0 -1
- package/dist/types/express.d.ts +0 -34
- package/dist/types/express.js +0 -50
- package/dist/types/express.js.map +0 -1
- package/dist/util/accessTokenParser.d.ts +0 -1
- package/dist/util/accessTokenParser.js +0 -34
- package/dist/util/accessTokenParser.js.map +0 -1
- package/dist/util/apiPaginate.d.ts +0 -11
- package/dist/util/apiPaginate.js +0 -33
- package/dist/util/apiPaginate.js.map +0 -1
- package/dist/util/apiResponse.d.ts +0 -9
- package/dist/util/apiResponse.js +0 -23
- package/dist/util/apiResponse.js.map +0 -1
- package/dist/util/auth.d.ts +0 -11
- package/dist/util/auth.js +0 -48
- package/dist/util/auth.js.map +0 -1
- package/dist/util/aws-config-migration.d.ts +0 -11
- package/dist/util/aws-config-migration.js +0 -68
- package/dist/util/aws-config-migration.js.map +0 -1
- package/dist/util/formUtil.d.ts +0 -2
- package/dist/util/formUtil.js +0 -15
- package/dist/util/formUtil.js.map +0 -1
- package/dist/util/githubAuth.d.ts +0 -2
- package/dist/util/githubAuth.js +0 -82
- package/dist/util/githubAuth.js.map +0 -1
- package/dist/util/googleAuth.d.ts +0 -2
- package/dist/util/googleAuth.js +0 -85
- package/dist/util/googleAuth.js.map +0 -1
- package/dist/util/mailer.d.ts +0 -7
- package/dist/util/mailer.js +0 -98
- package/dist/util/mailer.js.map +0 -1
- package/dist/util/page-status-migration.d.ts +0 -23
- package/dist/util/page-status-migration.js +0 -48
- package/dist/util/page-status-migration.js.map +0 -1
- package/dist/util/ssr.d.ts +0 -3
- package/dist/util/ssr.js +0 -9
- package/dist/util/ssr.js.map +0 -1
- package/dist/util/view.d.ts +0 -10
- package/dist/util/view.js +0 -99
- package/dist/util/view.js.map +0 -1
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"adminRequired.js","sourceRoot":"","sources":["../../src/middlewares/adminRequired.ts"],"names":[],"mappings":";;AAOA;;;;;;GAMG;AACH,kBAAe,GAAG,EAAE;IAClB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QAC3C,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACpB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,aAAa,GAAuB;gBACxC,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,2BAA2B;oBACpC,UAAU,EAAE,GAAG;iBAChB;aACF,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,aAAa,GAAgC;YACjD,KAAK,EAAE;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,4BAA4B;gBACrC,UAAU,EAAE,QAAQ;aACrB;SACF,CAAC;QACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.default = () => {
|
|
4
|
-
return (req, res, next) => {
|
|
5
|
-
const config = req.config;
|
|
6
|
-
if (Object.keys(config.crowi).length === 1) {
|
|
7
|
-
// app:url is set by process
|
|
8
|
-
const errorResponse = {
|
|
9
|
-
error: {
|
|
10
|
-
code: 'APPLICATION_NOT_INSTALLED',
|
|
11
|
-
message: 'Application is not installed',
|
|
12
|
-
redirectTo: '/installer',
|
|
13
|
-
},
|
|
14
|
-
};
|
|
15
|
-
return res.status(503).json(errorResponse);
|
|
16
|
-
}
|
|
17
|
-
return next();
|
|
18
|
-
};
|
|
19
|
-
};
|
|
20
|
-
//# sourceMappingURL=applicationInstalled.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"applicationInstalled.js","sourceRoot":"","sources":["../../src/middlewares/applicationInstalled.ts"],"names":[],"mappings":";;AAMA,kBAAe,GAAG,EAAE;IAClB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAE1B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,4BAA4B;YAC5B,MAAM,aAAa,GAAiC;gBAClD,KAAK,EAAE;oBACL,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,8BAA8B;oBACvC,UAAU,EAAE,YAAY;iBACzB;aACF,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.default = () => {
|
|
4
|
-
return (req, res, next) => {
|
|
5
|
-
const config = req.config;
|
|
6
|
-
if (Object.keys(config.crowi).length !== 1) {
|
|
7
|
-
req.flash('errorMessage', 'Application already installed.');
|
|
8
|
-
return res.redirect('admin'); // admin以外はadminRequiredで'/'にリダイレクトされる
|
|
9
|
-
}
|
|
10
|
-
return next();
|
|
11
|
-
};
|
|
12
|
-
};
|
|
13
|
-
//# sourceMappingURL=applicationNotInstalled.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"applicationNotInstalled.js","sourceRoot":"","sources":["../../src/middlewares/applicationNotInstalled.ts"],"names":[],"mappings":";;AAEA,kBAAe,GAAG,EAAE;IAClB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAE1B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;YAC5D,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;QACtE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const basic_auth_connect_1 = __importDefault(require("basic-auth-connect"));
|
|
7
|
-
const accessTokenParser_1 = require("../util/accessTokenParser");
|
|
8
|
-
exports.default = (crowi, app) => {
|
|
9
|
-
return (req, res, next) => {
|
|
10
|
-
const config = crowi.getConfig();
|
|
11
|
-
const accessToken = (0, accessTokenParser_1.parseAccessToken)(req);
|
|
12
|
-
if (accessToken) {
|
|
13
|
-
return next();
|
|
14
|
-
}
|
|
15
|
-
if (config.crowi['security:basicName'] && config.crowi['security:basicSecret']) {
|
|
16
|
-
return (0, basic_auth_connect_1.default)(config.crowi['security:basicName'], config.crowi['security:basicSecret'])(req, res, next);
|
|
17
|
-
}
|
|
18
|
-
else {
|
|
19
|
-
next();
|
|
20
|
-
}
|
|
21
|
-
};
|
|
22
|
-
};
|
|
23
|
-
//# sourceMappingURL=basicAuth.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"basicAuth.js","sourceRoot":"","sources":["../../src/middlewares/basicAuth.ts"],"names":[],"mappings":";;;;;AAEA,4EAA2C;AAC3C,kEAA8D;AAE9D,kBAAe,CAAC,KAAY,EAAE,GAAY,EAAE,EAAE;IAC5C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAA,4BAAS,EAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7G,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const debug_1 = __importDefault(require("debug"));
|
|
7
|
-
const debug = (0, debug_1.default)('crowi:middlewares:csrfVerify');
|
|
8
|
-
exports.default = (crowi) => {
|
|
9
|
-
return (req, res, next) => {
|
|
10
|
-
const token = req.body._csrf || req.query._csrf || null;
|
|
11
|
-
const csrfKey = (req.session && req.session.id) || 'anon';
|
|
12
|
-
debug('req.skipCsrfVerify', req.skipCsrfVerify);
|
|
13
|
-
if (req.skipCsrfVerify) {
|
|
14
|
-
debug('csrf verify skipped');
|
|
15
|
-
return next();
|
|
16
|
-
}
|
|
17
|
-
if (crowi.getTokens().verify(csrfKey, token)) {
|
|
18
|
-
return next();
|
|
19
|
-
}
|
|
20
|
-
debug('csrf verification failed. return 403', csrfKey, token);
|
|
21
|
-
return res.sendStatus(403);
|
|
22
|
-
};
|
|
23
|
-
};
|
|
24
|
-
//# sourceMappingURL=csrfVerify.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"csrfVerify.js","sourceRoot":"","sources":["../../src/middlewares/csrfVerify.ts"],"names":[],"mappings":";;;;;AACA,kDAA0B;AAG1B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,8BAA8B,CAAC,CAAC;AAEpD,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC;QAE1D,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC7B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,sCAAsC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,14 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const path_1 = require("../util/path");
|
|
4
|
-
exports.default = () => {
|
|
5
|
-
return (req, res, next) => {
|
|
6
|
-
const path = decodeURIComponent(req.originalUrl || '');
|
|
7
|
-
const encodedPath = (0, path_1.encodeSpace)(path);
|
|
8
|
-
if (path !== encodedPath) {
|
|
9
|
-
return res.redirect(encodedPath);
|
|
10
|
-
}
|
|
11
|
-
return next();
|
|
12
|
-
};
|
|
13
|
-
};
|
|
14
|
-
//# sourceMappingURL=encodeSpace.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"encodeSpace.js","sourceRoot":"","sources":["../../src/middlewares/encodeSpace.ts"],"names":[],"mappings":";;AACA,wCAA4C;AAE5C,kBAAe,GAAG,EAAE;IAClB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAA,kBAAW,EAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,29 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.default = (crowi) => {
|
|
4
|
-
return async function (req, res, next) {
|
|
5
|
-
try {
|
|
6
|
-
const Attachment = crowi.model('Attachment');
|
|
7
|
-
const Share = crowi.model('Share');
|
|
8
|
-
const attachment = await Attachment.findById(req.params.id);
|
|
9
|
-
if (!attachment) {
|
|
10
|
-
return res.sendStatus(404);
|
|
11
|
-
}
|
|
12
|
-
const { uuid, secretKeyword } = await Share.findShareByPageId(attachment.page, { status: Share.STATUS_ACTIVE });
|
|
13
|
-
const { shareIds = [], secretKeywords = {} } = req.session;
|
|
14
|
-
const isNoExistKeyword = !secretKeyword;
|
|
15
|
-
const hasCorrectKeyword = secretKeywords[uuid] === secretKeyword;
|
|
16
|
-
const isAccessedSharedPage = shareIds.includes(uuid);
|
|
17
|
-
const hasAccessRight = (isNoExistKeyword || hasCorrectKeyword) && isAccessedSharedPage;
|
|
18
|
-
if (hasAccessRight) {
|
|
19
|
-
return next();
|
|
20
|
-
}
|
|
21
|
-
}
|
|
22
|
-
catch (err) {
|
|
23
|
-
// share url not found, but its okay
|
|
24
|
-
// debug(err)
|
|
25
|
-
}
|
|
26
|
-
return crowi.middlewares.LoginRequired(req, res, next);
|
|
27
|
-
};
|
|
28
|
-
};
|
|
29
|
-
//# sourceMappingURL=fileAccessRightOrLoginRequired.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"fileAccessRightOrLoginRequired.js","sourceRoot":"","sources":["../../src/middlewares/fileAccessRightOrLoginRequired.ts"],"names":[],"mappings":";;AAGA,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,OAAO,KAAK,WAAW,GAAY,EAAE,GAAa,EAAE,IAAI;QACtD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;YAChH,MAAM,EAAE,QAAQ,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;YAC3D,MAAM,gBAAgB,GAAG,CAAC,aAAa,CAAC;YACxC,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC;YACjE,MAAM,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,cAAc,GAAG,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,IAAI,oBAAoB,CAAC;YACvF,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oCAAoC;YACpC,aAAa;QACf,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import { Express } from 'express';
|
|
2
|
-
import Crowi from '../crowi';
|
|
3
|
-
declare const _default: (crowi: Crowi, app: Express) => {
|
|
4
|
-
AccessTokenParser: (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => void;
|
|
5
|
-
AdminRequired: (req: import("express").Request, res: import("express").Response, next: any) => any;
|
|
6
|
-
ApplicationInstalled: (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => void | import("express").Response<any, Record<string, any>>;
|
|
7
|
-
ApplicationNotInstalled: (req: import("express").Request, res: import("express").Response, next: any) => any;
|
|
8
|
-
BasicAuth: (req: import("express").Request, res: import("express").Response, next: any) => any;
|
|
9
|
-
CsrfVerify: (req: import("express").Request, res: import("express").Response, next: any) => any;
|
|
10
|
-
EncodeSpace: (req: import("express").Request, res: import("express").Response, next: any) => any;
|
|
11
|
-
FileAccessRightOrLoginRequired: (req: import("express").Request, res: import("express").Response, next: any) => Promise<any>;
|
|
12
|
-
JwtAuth: (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => Promise<import("express").Response<any, Record<string, any>> | undefined>;
|
|
13
|
-
LoginChecker: (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => void;
|
|
14
|
-
LoginRequired: (req: import("express").Request, res: import("express").Response, next: any) => Promise<any>;
|
|
15
|
-
};
|
|
16
|
-
export default _default;
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const accessTokenParser_1 = __importDefault(require("./accessTokenParser"));
|
|
7
|
-
const adminRequired_1 = __importDefault(require("./adminRequired"));
|
|
8
|
-
const applicationInstalled_1 = __importDefault(require("./applicationInstalled"));
|
|
9
|
-
const applicationNotInstalled_1 = __importDefault(require("./applicationNotInstalled"));
|
|
10
|
-
const basicAuth_1 = __importDefault(require("./basicAuth"));
|
|
11
|
-
const csrfVerify_1 = __importDefault(require("./csrfVerify"));
|
|
12
|
-
const encodeSpace_1 = __importDefault(require("./encodeSpace"));
|
|
13
|
-
const fileAccessRightOrLoginRequired_1 = __importDefault(require("./fileAccessRightOrLoginRequired"));
|
|
14
|
-
const jwtAuth_1 = __importDefault(require("./jwtAuth"));
|
|
15
|
-
const loginChecker_1 = __importDefault(require("./loginChecker"));
|
|
16
|
-
const loginRequired_1 = __importDefault(require("./loginRequired"));
|
|
17
|
-
exports.default = (crowi, app) => ({
|
|
18
|
-
AccessTokenParser: (0, accessTokenParser_1.default)(crowi, app),
|
|
19
|
-
AdminRequired: (0, adminRequired_1.default)(),
|
|
20
|
-
ApplicationInstalled: (0, applicationInstalled_1.default)(),
|
|
21
|
-
ApplicationNotInstalled: (0, applicationNotInstalled_1.default)(),
|
|
22
|
-
BasicAuth: (0, basicAuth_1.default)(crowi, app),
|
|
23
|
-
CsrfVerify: (0, csrfVerify_1.default)(crowi),
|
|
24
|
-
EncodeSpace: (0, encodeSpace_1.default)(),
|
|
25
|
-
FileAccessRightOrLoginRequired: (0, fileAccessRightOrLoginRequired_1.default)(crowi),
|
|
26
|
-
JwtAuth: (0, jwtAuth_1.default)(crowi),
|
|
27
|
-
LoginChecker: (0, loginChecker_1.default)(crowi, app),
|
|
28
|
-
LoginRequired: (0, loginRequired_1.default)(crowi),
|
|
29
|
-
});
|
|
30
|
-
//# sourceMappingURL=index.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middlewares/index.ts"],"names":[],"mappings":";;;;;AAGA,4EAAoD;AACpD,oEAA4C;AAC5C,kFAA0D;AAC1D,wFAAgE;AAChE,4DAAoC;AACpC,8DAAsC;AACtC,gEAAwC;AACxC,sGAA8E;AAC9E,wDAAgC;AAChC,kEAA0C;AAC1C,oEAA4C;AAE5C,kBAAe,CAAC,KAAY,EAAE,GAAY,EAAE,EAAE,CAAC,CAAC;IAC9C,iBAAiB,EAAE,IAAA,2BAAiB,EAAC,KAAK,EAAE,GAAG,CAAC;IAChD,aAAa,EAAE,IAAA,uBAAa,GAAE;IAC9B,oBAAoB,EAAE,IAAA,8BAAoB,GAAE;IAC5C,uBAAuB,EAAE,IAAA,iCAAuB,GAAE;IAClD,SAAS,EAAE,IAAA,mBAAS,EAAC,KAAK,EAAE,GAAG,CAAC;IAChC,UAAU,EAAE,IAAA,oBAAU,EAAC,KAAK,CAAC;IAC7B,WAAW,EAAE,IAAA,qBAAW,GAAE;IAC1B,8BAA8B,EAAE,IAAA,wCAA8B,EAAC,KAAK,CAAC;IACrE,OAAO,EAAE,IAAA,iBAAO,EAAC,KAAK,CAAC;IACvB,YAAY,EAAE,IAAA,sBAAY,EAAC,KAAK,EAAE,GAAG,CAAC;IACtC,aAAa,EAAE,IAAA,uBAAa,EAAC,KAAK,CAAC;CACpC,CAAC,CAAC"}
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
import { Request, Response, NextFunction } from 'express';
|
|
2
|
-
import Crowi from '../crowi';
|
|
3
|
-
/**
|
|
4
|
-
* JWT authentication middleware with admin permission check
|
|
5
|
-
* Returns JSON error responses (401 or 403) for API endpoints
|
|
6
|
-
*/
|
|
7
|
-
declare const _default: (crowi: Crowi) => (req: Request, res: Response, next: NextFunction) => void;
|
|
8
|
-
export default _default;
|
|
@@ -1,35 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const jwtAuth_1 = __importDefault(require("./jwtAuth"));
|
|
7
|
-
/**
|
|
8
|
-
* JWT authentication middleware with admin permission check
|
|
9
|
-
* Returns JSON error responses (401 or 403) for API endpoints
|
|
10
|
-
*/
|
|
11
|
-
exports.default = (crowi) => {
|
|
12
|
-
const checkJwtAuth = (0, jwtAuth_1.default)(crowi);
|
|
13
|
-
return (req, res, next) => {
|
|
14
|
-
// First check JWT authentication
|
|
15
|
-
checkJwtAuth(req, res, (err) => {
|
|
16
|
-
if (err) {
|
|
17
|
-
// JWT auth failed - already handled by jwtAuth middleware
|
|
18
|
-
return;
|
|
19
|
-
}
|
|
20
|
-
// Check if user has admin permission
|
|
21
|
-
const user = req.user;
|
|
22
|
-
if (!user?.admin) {
|
|
23
|
-
const errorResponse = {
|
|
24
|
-
error: {
|
|
25
|
-
code: 'ADMIN_REQUIRED',
|
|
26
|
-
message: 'Admin permission required',
|
|
27
|
-
},
|
|
28
|
-
};
|
|
29
|
-
return res.status(403).json(errorResponse);
|
|
30
|
-
}
|
|
31
|
-
next();
|
|
32
|
-
});
|
|
33
|
-
};
|
|
34
|
-
};
|
|
35
|
-
//# sourceMappingURL=jwtAdminRequired.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"jwtAdminRequired.js","sourceRoot":"","sources":["../../src/middlewares/jwtAdminRequired.ts"],"names":[],"mappings":";;;;;AAIA,wDAAgC;AAIhC;;;GAGG;AACH,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,MAAM,YAAY,GAAG,IAAA,iBAAO,EAAC,KAAK,CAAC,CAAC;IAEpC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,iCAAiC;QACjC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,IAAI,GAAG,EAAE,CAAC;gBACR,0DAA0D;gBAC1D,OAAO;YACT,CAAC;YAED,qCAAqC;YACrC,MAAM,IAAI,GAAI,GAAgD,CAAC,IAAI,CAAC;YACpE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAuB;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,2BAA2B;qBACrC;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,104 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const debug_1 = __importDefault(require("debug"));
|
|
7
|
-
const jwt_1 = require("../util/jwt");
|
|
8
|
-
exports.default = (crowi) => {
|
|
9
|
-
const debug = (0, debug_1.default)('crowi:middlewares:jwtAuth');
|
|
10
|
-
const User = crowi.model('User');
|
|
11
|
-
const jwtUtil = (0, jwt_1.createJwtUtil)(crowi);
|
|
12
|
-
return async (req, res, next) => {
|
|
13
|
-
const authHeader = req.headers.authorization;
|
|
14
|
-
let token = jwtUtil.extractTokenFromHeader(authHeader);
|
|
15
|
-
if (!token) {
|
|
16
|
-
// Fallback: pull the JWT from a cookie. `<img src="/api/v2/...">`
|
|
17
|
-
// requests cannot carry an Authorization header (the browser
|
|
18
|
-
// builds them with no JS hook), so the web client mirrors the
|
|
19
|
-
// access token into the `crowi.accessToken` cookie at login
|
|
20
|
-
// time. Same-origin in production / via Next.js rewrite in dev,
|
|
21
|
-
// so the cookie always reaches the API.
|
|
22
|
-
const cookieHeader = req.headers.cookie;
|
|
23
|
-
if (cookieHeader) {
|
|
24
|
-
const match = cookieHeader.split(';').find((c) => c.trim().startsWith('crowi.accessToken='));
|
|
25
|
-
if (match) {
|
|
26
|
-
token = decodeURIComponent(match.split('=', 2)[1] ?? '').trim() || null;
|
|
27
|
-
}
|
|
28
|
-
}
|
|
29
|
-
}
|
|
30
|
-
if (!token) {
|
|
31
|
-
const errorResponse = {
|
|
32
|
-
error: {
|
|
33
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
34
|
-
message: 'Authentication is required',
|
|
35
|
-
},
|
|
36
|
-
};
|
|
37
|
-
return res.status(401).json(errorResponse);
|
|
38
|
-
}
|
|
39
|
-
const payload = jwtUtil.verifyToken(token, 'access');
|
|
40
|
-
if (!payload) {
|
|
41
|
-
const errorResponse = {
|
|
42
|
-
error: {
|
|
43
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
44
|
-
message: 'Authentication is required',
|
|
45
|
-
},
|
|
46
|
-
};
|
|
47
|
-
return res.status(401).json(errorResponse);
|
|
48
|
-
}
|
|
49
|
-
try {
|
|
50
|
-
const user = await User.findById(payload.userId);
|
|
51
|
-
if (!user) {
|
|
52
|
-
const errorResponse = {
|
|
53
|
-
error: {
|
|
54
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
55
|
-
message: 'Authentication is required',
|
|
56
|
-
},
|
|
57
|
-
};
|
|
58
|
-
return res.status(401).json(errorResponse);
|
|
59
|
-
}
|
|
60
|
-
if (user.status !== User.STATUS_ACTIVE) {
|
|
61
|
-
let code = 'USER_NOT_ACTIVE';
|
|
62
|
-
let message = 'User account is not active';
|
|
63
|
-
if (user.status === User.STATUS_REGISTERED) {
|
|
64
|
-
code = 'USER_REGISTERED';
|
|
65
|
-
message = 'User registration is not complete';
|
|
66
|
-
}
|
|
67
|
-
else if (user.status === User.STATUS_SUSPENDED) {
|
|
68
|
-
code = 'USER_SUSPENDED';
|
|
69
|
-
message = 'User account is suspended';
|
|
70
|
-
}
|
|
71
|
-
else if (user.status === User.STATUS_INVITED) {
|
|
72
|
-
code = 'USER_INVITED';
|
|
73
|
-
message = 'User invitation is pending';
|
|
74
|
-
}
|
|
75
|
-
const errorResponse = {
|
|
76
|
-
error: {
|
|
77
|
-
code: code,
|
|
78
|
-
message,
|
|
79
|
-
redirectTo: user.status === User.STATUS_REGISTERED
|
|
80
|
-
? '/login/error/registered'
|
|
81
|
-
: user.status === User.STATUS_SUSPENDED
|
|
82
|
-
? '/login/error/suspended'
|
|
83
|
-
: '/login/invited',
|
|
84
|
-
},
|
|
85
|
-
};
|
|
86
|
-
return res.status(403).json(errorResponse);
|
|
87
|
-
}
|
|
88
|
-
// Attach user to request
|
|
89
|
-
req.user = user;
|
|
90
|
-
next();
|
|
91
|
-
}
|
|
92
|
-
catch (error) {
|
|
93
|
-
debug('JWT authentication error:', error);
|
|
94
|
-
const errorResponse = {
|
|
95
|
-
error: {
|
|
96
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
97
|
-
message: 'Authentication is required',
|
|
98
|
-
},
|
|
99
|
-
};
|
|
100
|
-
return res.status(401).json(errorResponse);
|
|
101
|
-
}
|
|
102
|
-
};
|
|
103
|
-
};
|
|
104
|
-
//# sourceMappingURL=jwtAuth.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"jwtAuth.js","sourceRoot":"","sources":["../../src/middlewares/jwtAuth.ts"],"names":[],"mappings":";;;;;AAEA,kDAA0B;AAC1B,qCAA4C;AAO5C,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,2BAA2B,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,KAAK,CAAC,CAAC;IAErC,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,kEAAkE;YAClE,6DAA6D;YAC7D,8DAA8D;YAC9D,4DAA4D;YAC5D,gEAAgE;YAChE,wCAAwC;YACxC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YACxC,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBAC7F,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,aAAa,GAAgC;gBACjD,KAAK,EAAE;oBACL,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,4BAA4B;iBACtC;aACF,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,aAAa,GAAgC;gBACjD,KAAK,EAAE;oBACL,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,4BAA4B;iBACtC;aACF,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,aAAa,GAAG;oBACpB,KAAK,EAAE;wBACL,IAAI,EAAE,yBAAkC;wBACxC,OAAO,EAAE,4BAA4B;qBACtC;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvC,IAAI,IAAI,GAAG,iBAAiB,CAAC;gBAC7B,IAAI,OAAO,GAAG,4BAA4B,CAAC;gBAE3C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC3C,IAAI,GAAG,iBAAiB,CAAC;oBACzB,OAAO,GAAG,mCAAmC,CAAC;gBAChD,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACjD,IAAI,GAAG,gBAAgB,CAAC;oBACxB,OAAO,GAAG,2BAA2B,CAAC;gBACxC,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;oBAC/C,IAAI,GAAG,cAAc,CAAC;oBACtB,OAAO,GAAG,4BAA4B,CAAC;gBACzC,CAAC;gBAED,MAAM,aAAa,GAAoB;oBACrC,KAAK,EAAE;wBACL,IAAI,EAAE,IAA6D;wBACnE,OAAO;wBACP,UAAU,EACR,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,iBAAiB;4BACpC,CAAC,CAAC,yBAAyB;4BAC3B,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB;gCACrC,CAAC,CAAC,wBAAwB;gCAC1B,CAAC,CAAC,gBAAgB;qBACzB;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAED,yBAAyB;YACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAgC;gBACjD,KAAK,EAAE;oBACL,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,4BAA4B;iBACtC;aACF,CAAC;YACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
// const debug = Debug('crowi:middlewares:loginChecker')
|
|
4
|
-
exports.default = (crowi, app) => {
|
|
5
|
-
return (req, res, next) => {
|
|
6
|
-
const User = crowi.model('User');
|
|
7
|
-
const csrfKey = req.session?.id || 'anon';
|
|
8
|
-
if (!req.csrfToken) {
|
|
9
|
-
req.csrfToken = crowi.getTokens().create(csrfKey);
|
|
10
|
-
}
|
|
11
|
-
// session に user object が入ってる
|
|
12
|
-
if (req.session?.user && '_id' in req.session.user) {
|
|
13
|
-
User.findById(req.session.user._id)
|
|
14
|
-
.select('+password +apiToken')
|
|
15
|
-
.exec()
|
|
16
|
-
.then((userData) => {
|
|
17
|
-
req.user = req.session.user = userData;
|
|
18
|
-
res.locals.user = req.user;
|
|
19
|
-
next();
|
|
20
|
-
})
|
|
21
|
-
.catch(() => {
|
|
22
|
-
next();
|
|
23
|
-
});
|
|
24
|
-
}
|
|
25
|
-
else {
|
|
26
|
-
req.user = req.session.user = null;
|
|
27
|
-
res.locals.user = req.user;
|
|
28
|
-
next();
|
|
29
|
-
}
|
|
30
|
-
};
|
|
31
|
-
};
|
|
32
|
-
//# sourceMappingURL=loginChecker.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"loginChecker.js","sourceRoot":"","sources":["../../src/middlewares/loginChecker.ts"],"names":[],"mappings":";;AAEA,wDAAwD;AAExD,kBAAe,CAAC,KAAY,EAAE,GAAY,EAAE,EAAE;IAC5C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,MAAM,CAAC;QAE1C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,8BAA8B;QAC9B,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;iBAChC,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,IAAI,EAAE;iBACN,IAAI,CAAC,CAAC,QAAa,EAAE,EAAE;gBACtB,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACvC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC3B,IAAI,EAAE,CAAC;YACT,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
|
@@ -1,88 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
const auth_1 = __importDefault(require("../util/auth"));
|
|
7
|
-
const debug_1 = __importDefault(require("debug"));
|
|
8
|
-
exports.default = (crowi) => {
|
|
9
|
-
const debug = (0, debug_1.default)('crowi:middlewares:loginRequired');
|
|
10
|
-
return async (req, res, next) => {
|
|
11
|
-
const User = crowi.model('User');
|
|
12
|
-
const config = crowi.getConfig();
|
|
13
|
-
const { originalUrl } = req;
|
|
14
|
-
const query = originalUrl === '/' ? '' : `?continue=${originalUrl}`;
|
|
15
|
-
const isAuthPage = originalUrl.startsWith('/me/auth/');
|
|
16
|
-
const isAPI = originalUrl.startsWith('/_api/');
|
|
17
|
-
if (!isAuthPage && auth_1.default.isAccessTokenExpired(req)) {
|
|
18
|
-
const success = await auth_1.default.reauth(req, config);
|
|
19
|
-
if (!success) {
|
|
20
|
-
const errorResponse = {
|
|
21
|
-
error: {
|
|
22
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
23
|
-
message: 'Authentication is required',
|
|
24
|
-
redirectTo: '/logout',
|
|
25
|
-
},
|
|
26
|
-
};
|
|
27
|
-
return res.status(401).json(errorResponse);
|
|
28
|
-
}
|
|
29
|
-
}
|
|
30
|
-
if (req.user && '_id' in req.user) {
|
|
31
|
-
const { 'auth:requireThirdPartyAuth': requireThirdPartyAuth = '' } = config.crowi;
|
|
32
|
-
const hasValidThirdPartyId = req.user.hasValidThirdPartyId();
|
|
33
|
-
if (!isAuthPage && requireThirdPartyAuth && !hasValidThirdPartyId) {
|
|
34
|
-
const errorResponse = {
|
|
35
|
-
error: {
|
|
36
|
-
code: 'THIRD_PARTY_AUTH_REQUIRED',
|
|
37
|
-
message: 'Third party authentication is required',
|
|
38
|
-
redirectTo: `/me/auth/third-party${query}`,
|
|
39
|
-
},
|
|
40
|
-
};
|
|
41
|
-
return res.status(403).json(errorResponse);
|
|
42
|
-
}
|
|
43
|
-
if (req.user.status === User.STATUS_ACTIVE) {
|
|
44
|
-
// Active の人だけ先に進める
|
|
45
|
-
return next();
|
|
46
|
-
}
|
|
47
|
-
else if (req.user.status === User.STATUS_REGISTERED) {
|
|
48
|
-
const errorResponse = {
|
|
49
|
-
error: {
|
|
50
|
-
code: 'USER_REGISTERED',
|
|
51
|
-
message: 'User registration is not complete',
|
|
52
|
-
redirectTo: '/login/error/registered',
|
|
53
|
-
},
|
|
54
|
-
};
|
|
55
|
-
return res.status(403).json(errorResponse);
|
|
56
|
-
}
|
|
57
|
-
else if (req.user.status === User.STATUS_SUSPENDED) {
|
|
58
|
-
const errorResponse = {
|
|
59
|
-
error: {
|
|
60
|
-
code: 'USER_SUSPENDED',
|
|
61
|
-
message: 'User account is suspended',
|
|
62
|
-
redirectTo: '/login/error/suspended',
|
|
63
|
-
},
|
|
64
|
-
};
|
|
65
|
-
return res.status(403).json(errorResponse);
|
|
66
|
-
}
|
|
67
|
-
else if (req.user.status === User.STATUS_INVITED) {
|
|
68
|
-
const errorResponse = {
|
|
69
|
-
error: {
|
|
70
|
-
code: 'USER_INVITED',
|
|
71
|
-
message: 'User invitation is pending',
|
|
72
|
-
redirectTo: '/login/invited',
|
|
73
|
-
},
|
|
74
|
-
};
|
|
75
|
-
return res.status(403).json(errorResponse);
|
|
76
|
-
}
|
|
77
|
-
}
|
|
78
|
-
const errorResponse = {
|
|
79
|
-
error: {
|
|
80
|
-
code: 'AUTHENTICATION_REQUIRED',
|
|
81
|
-
message: 'Authentication is required',
|
|
82
|
-
redirectTo: `/login${query}`,
|
|
83
|
-
},
|
|
84
|
-
};
|
|
85
|
-
return res.status(401).json(errorResponse);
|
|
86
|
-
};
|
|
87
|
-
};
|
|
88
|
-
//# sourceMappingURL=loginRequired.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"loginRequired.js","sourceRoot":"","sources":["../../src/middlewares/loginRequired.ts"],"names":[],"mappings":";;;;;AAEA,yDAAiC;AACjC,kDAA0B;AAQ1B,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,iCAAiC,CAAC,CAAC;IAEvD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;QAC5B,MAAM,KAAK,GAAG,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,WAAW,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,UAAU,IAAI,cAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,cAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAgC;oBACjD,KAAK,EAAE;wBACL,IAAI,EAAE,yBAAyB;wBAC/B,OAAO,EAAE,4BAA4B;wBACrC,UAAU,EAAE,SAAS;qBACtB;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,EAAE,4BAA4B,EAAE,qBAAqB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YAClF,MAAM,oBAAoB,GAAG,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,CAAC,UAAU,IAAI,qBAAqB,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAClE,MAAM,aAAa,GAAgC;oBACjD,KAAK,EAAE;wBACL,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EAAE,wCAAwC;wBACjD,UAAU,EAAE,uBAAuB,KAAK,EAAE;qBAC3C;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3C,mBAAmB;gBACnB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACtD,MAAM,aAAa,GAAoB;oBACrC,KAAK,EAAE;wBACL,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,mCAAmC;wBAC5C,UAAU,EAAE,yBAAyB;qBACtC;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACrD,MAAM,aAAa,GAAoB;oBACrC,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,2BAA2B;wBACpC,UAAU,EAAE,wBAAwB;qBACrC;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;gBACnD,MAAM,aAAa,GAAoB;oBACrC,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,4BAA4B;wBACrC,UAAU,EAAE,gBAAgB;qBAC7B;iBACF,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAgC;YACjD,KAAK,EAAE;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,4BAA4B;gBACrC,UAAU,EAAE,SAAS,KAAK,EAAE;aAC7B;SACF,CAAC;QACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC,CAAC;AACJ,CAAC,CAAC"}
|
package/dist/routes/admin.d.ts
DELETED
package/dist/routes/admin.js
DELETED
|
@@ -1,17 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const express_1 = require("express");
|
|
4
|
-
const router = (0, express_1.Router)();
|
|
5
|
-
exports.default = (crowi, app, form) => {
|
|
6
|
-
const { Admin } = crowi.controllers;
|
|
7
|
-
const { LoginRequired, AdminRequired, CsrfVerify: csrf } = crowi.middlewares;
|
|
8
|
-
router.use('/admin*', LoginRequired, AdminRequired);
|
|
9
|
-
router.get('/admin', Admin.index);
|
|
10
|
-
router.get('/admin/app', Admin.index);
|
|
11
|
-
router.get('/admin/notification', Admin.index);
|
|
12
|
-
router.get('/admin/notification/slackAuth', Admin.notification.slackAuth);
|
|
13
|
-
router.get('/admin/users', Admin.index);
|
|
14
|
-
router.get('/admin/backlink', Admin.index);
|
|
15
|
-
return router;
|
|
16
|
-
};
|
|
17
|
-
//# sourceMappingURL=admin.js.map
|
package/dist/routes/admin.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":";;AAAA,qCAA0C;AAE1C,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB,kBAAe,CAAC,KAAY,EAAE,GAAY,EAAE,IAAI,EAAU,EAAE;IAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;IAE7E,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAEpD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAE3C,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}
|