npm - @dr.pogodin/react-utils - Versions diffs - 1.25.6 → 1.26.0 - Mend

@dr.pogodin/react-utils 1.25.6 → 1.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (290) hide show

package/build/development/server/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","names":["require","_http","_interopRequireDefault","_https","_lodash","_server","_interopRequireWildcard","_renderer","_utils","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","newObj","hasPropertyDescriptor","getOwnPropertyDescriptor","desc","set","normalizePort","value","port","toNumber","isFinite","isNumber","launch","webpackConfig","options","ops","cloneDeep","process","env","PORT","defaults","httpsRedirect","logger","undefined","newDefaultLogger","defaultLogLevel","defaultLoggerLogLevel","expressServer","serverFactory","httpServer","https","createServer","cert","http","on","error","syscall","bind","isString","code","exit","addr","address","info","NODE_ENV","listen","SCRIPT_LOCATIONS","_default"],"sources":["../../../src/server/index.js"],"sourcesContent":["import 'source-map-support/register';\n\nimport http from 'http';\nimport https from 'https';\n\nimport {\n cloneDeep,\n defaults,\n isFinite,\n isNumber,\n isString,\n toNumber,\n} from 'lodash';\n\n/* Polyfill required by ReactJS. /\nimport 'raf/polyfill';\n\nimport serverFactory from './server';\nimport { SCRIPT_LOCATIONS, newDefaultLogger } from './renderer';\n\nexport { getDefaultCspSettings } from './server';\nexport from './utils';\n\n/*\n Normalizes a port into a number, string, or false.\n * TODO: Drop this function?\n * @ignore\n * @param {String} value Port name or number.\n * @return Port number (Number), name (String), or false.\n /\nfunction normalizePort(value) {\n const port = toNumber(value);\n if (isFinite(port)) return port; / port number /\n if (!isNumber(port)) return value; / named pipe /\n return false;\n}\n\n/\n Creates and launches web-server for ReactJS application. Allows zero\n * or detailed configuration, supports server-side rendering,\n * and development tools, including Hot Module Reloading (HMR).\n \n NOTE: Many of options defined below are passed down to the server and\n * renderer factories, and their declared default values are set in those\n * factories, rather than here.\n \n @param {object} webpackConfig Webpack configuration used to build\n * the frontend bundle. In production mode the server will read out of it\n * `context`, `publicPath`, and a few other parameters, necessary to locate\n * and serve the app bundle. In development mode the server will use entire\n * provided config to build the app bundle in memory, and further watch and\n * update it via HMR.\n * @param {object} [options] Additional parameters.\n * @param {Component} [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param {function} [options.beforeExpressJsError] Asynchronous callback\n * (`(server) => Promise<boolean>`) to be executed just before the default error\n * handler is added to ExpressJS server. If the callback is provided and its\n * result resolves to a truthy value, `react-utils` won't attach the default\n * error handler.\n * @param {function} [options.beforeExpressJsSetup] Asynchronous callback\n * (`(server) => Promise) to be executed right after ExpressJS server creation,\n * before any configuration is performed.\n * @param {BeforeRenderHook} [options.beforeRender] The hook to run just before\n * the server-side rendering. For each incoming request, it will be executed\n * just before the HTML markup is generated at the server. It allows to load\n * and provide the data necessary for server-side rendering, and also to inject\n * additional configuration and scripts into the generated HTML code.\n * @param {boolean} [options.noCsp] Set `true` to disable\n * Content-Security-Policy (CSP) headers altogether.\n * @param {function} [options.cspSettingsHook] A hook allowing\n * to customize [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)\n * settings for [helmet](https://github.com/helmetjs/helmet)'s\n * `contentSecurityPolicy` middleware on per-request basis.\n \n If provided it should be a with signature: \\\n * `(defaultSettings: object, req: object)` ⇒ `object` \\\n * which gets the default settings (also used without the hook),\n * and the incoming request object. The hook response will be passed\n * as options to the helmet `contentSecurityPolicy` middleware.\n \n Currently, the default settings is the following object in production\n * environment:\n * ```js\n * {\n * directives: {\n * defaultSrc: [\"'self'\"],\n * baseUri: [\"'self'\"],\n * blockAllMixedContent: [],\n * fontSrc: [\"'self'\", 'https:', 'data:'],\n * frameAncestors: [\"'self'\"],\n * frameSrc: [\"'self'\", 'https://.youtube.com'],\n imgSrc: [\"'self'\", 'data:'],\n * objectSrc: [\"'none'\"],\n * scriptSrc: [\"'self'\", \"'unsafe-eval'\", `'nonce-UNIQUE_NONCE_VALUE'`],\n * scriptSrcAttr: [\"'none'\"],\n * styleSrc: [\"'self'\", 'https:', \"'unsafe-inline'\"],\n * upgradeInsecureRequests: [] // Removed in dev mode.\n * }\n * }\n * ```\n * It matches the default value used by Helmet with a few updates:\n * - YouTube host is whitelisted in the `frameSrc` directive to ensure\n * the {@link YouTubeVideo} component works.\n * - An unique per-request nonce is added to `scriptSrc` directive to\n * whitelist auxiliary scripts injected by react-utils. The actual nonce\n * value can be fetched by host code via `.nonce` field of `req` argument\n * of `.beforeRender` hook.\n * - `upgradeInsecureRequests` directive is removed in development mode,\n * to simplify local testing with http requests.\n * @param {string} [options.defaultLoggerLogLevel='info'] Log level for\n * the default logger, which is created if no `logger` option provided.\n * @param {boolean} [options.devMode] Pass in `true` to start the server in\n * development mode.\n * @param {string} [options.favicon] Path to the favicon to use by the server.\n * By default no favicon is used.\n * @param {object} [options.https] If provided, HTTPS server will be started,\n * instead of HTTP otherwise. The object should provide SSL certificate and key\n * via two string fields: `cert`, and `key`.\n * @param {string} [options.https.cert] SSL Certificate.\n * @param {string} [options.https.key] SSL key.\n * @param {boolean} [options.httpsRedirect=true] Pass in `true` to enable\n * automatic redirection of all incoming HTTP requests to HTTPS.\n \n To smoothly use it at `localhost` you need to run the server in HTTPS mode,\n * and also properly create and install a self-signed SSL sertificate on your\n * system. This article is helpful:\n * [How to get HTTPS working on your local development environment in 5 minutes](https://medium.freecodecamp.org/how-to-get-https-working-on-your-local-development-environment-in-5-minutes-7af615770eec)\n * @param {Logger} [options.logger] The logger to use at server side.\n * By default [`winston`](https://www.npmjs.com/package/winston) logger\n * with console transport is used. The logger you provide, or the default\n * `winston` logger otherwise, will be attached to the created ExpressJS server\n * object.\n * @param {function} [options.onExpressJsSetup] An async callback\n * (`(server) => Promise`) to be triggered when most of the server\n * configuration is completed, just before the server-side renderer,\n * and the default error handler are attached. You can use it to mount\n * custom API routes. The server-side logger can be accessed as `server.logger`.\n * @param {number\|string} [options.port=3000] The port to start the server on.\n * @param {number} [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param {function} [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` – the cache key for the response;\n * - `maxage?: number` – the maximum age of cached result in ms.\n * If undefined - infinite age is assumed.\n * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @return {Promise<{ expressServer: object, httpServer: object }>} Resolves to\n * an object with created Express and HTTP servers.\n /\nasync function launch(webpackConfig, options) {\n / Options normalization. /\n const ops = options ? cloneDeep(options) : {};\n ops.port = normalizePort(ops.port \|\| process.env.PORT \|\| 3000);\n defaults(ops, { httpsRedirect: true });\n\n if (ops.logger === undefined) {\n ops.logger = newDefaultLogger({\n defaultLogLevel: ops.defaultLoggerLogLevel,\n });\n }\n\n / Creates servers, resolves and sets the port. /\n const expressServer = await serverFactory(webpackConfig, ops);\n\n let httpServer;\n if (ops.https) {\n httpServer = https.createServer({\n cert: ops.https.cert,\n key: ops.https.key,\n }, expressServer);\n } else httpServer = http.createServer(expressServer);\n\n / Sets error handler for HTTP(S) server. /\n httpServer.on('error', (error) => {\n if (error.syscall !== 'listen') throw error;\n const bind = isString(ops.port) ? `Pipe ${ops.port}` : `Port ${ops.port}`;\n\n / Human-readable message for some specific listen errors. /\n switch (error.code) {\n case 'EACCES':\n ops.logger.error(`${bind} requires elevated privileges`);\n return process.exit(1);\n case 'EADDRINUSE':\n ops.logger.error(`${bind} is already in use`);\n return process.exit(1);\n default:\n throw error;\n }\n });\n\n / Listening event handler for HTTP(S) server. */\n httpServer.on('listening', () => {\n const addr = httpServer.address();\n const bind = isString(addr) ? `pipe ${addr}` : `port ${addr.port}`;\n ops.logger.info(`Server listening on ${bind} in ${\n process.env.NODE_ENV} mode`);\n });\n\n httpServer.listen(ops.port);\n\n return {\n expressServer,\n httpServer,\n };\n}\n\nlaunch.SCRIPT_LOCATIONS = SCRIPT_LOCATIONS;\n\nexport default launch;\n"],"mappings":";;;;;;;;;;;;;;;;AAAAA,OAAA;AAEA,IAAAC,KAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,MAAA,GAAAD,sBAAA,CAAAF,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AAUAA,OAAA;AAEA,IAAAK,OAAA,GAAAC,uBAAA,CAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AAGA,IAAAQ,MAAA,GAAAR,OAAA;AAAAS,MAAA,CAAAC,IAAA,CAAAF,MAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,MAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,MAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AAAwB,SAAAS,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAhB,wBAAAoB,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAT,GAAA,CAAAM,GAAA,SAAAK,MAAA,WAAAC,qBAAA,GAAAvB,MAAA,CAAAS,cAAA,IAAAT,MAAA,CAAAwB,wBAAA,WAAArB,GAAA,IAAAc,GAAA,QAAAd,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAW,GAAA,EAAAd,GAAA,SAAAsB,IAAA,GAAAF,qBAAA,GAAAvB,MAAA,CAAAwB,wBAAA,CAAAP,GAAA,EAAAd,GAAA,cAAAsB,IAAA,KAAAA,IAAA,CAAAd,GAAA,IAAAc,IAAA,CAAAC,GAAA,KAAA1B,MAAA,CAAAS,cAAA,CAAAa,MAAA,EAAAnB,GAAA,EAAAsB,IAAA,YAAAH,MAAA,CAAAnB,GAAA,IAAAc,GAAA,CAAAd,GAAA,SAAAmB,MAAA,CAAAH,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAM,GAAA,CAAAT,GAAA,EAAAK,MAAA,YAAAA,MAAA;AAPxB;;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASK,aAAaA,CAACC,KAAK,EAAE;EAC5B,MAAMC,IAAI,GAAG,IAAAC,gBAAQ,EAACF,KAAK,CAAC;EAC5B,IAAI,IAAAG,gBAAQ,EAACF,IAAI,CAAC,EAAE,OAAOA,IAAI,CAAC,CAAC;EACjC,IAAI,CAAC,IAAAG,gBAAQ,EAACH,IAAI,CAAC,EAAE,OAAOD,KAAK,CAAC,CAAC;EACnC,OAAO,KAAK;AACd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eAAeK,MAAMA,CAACC,aAAa,EAAEC,OAAO,EAAE;EAC5C;EACA,MAAMC,GAAG,GAAGD,OAAO,GAAG,IAAAE,iBAAS,EAACF,OAAO,CAAC,GAAG,CAAC,CAAC;EAC7CC,GAAG,CAACP,IAAI,GAAGF,aAAa,CAACS,GAAG,CAACP,IAAI,IAAIS,OAAO,CAACC,GAAG,CAACC,IAAI,IAAI,IAAI,CAAC;EAC9D,IAAAC,gBAAQ,EAACL,GAAG,EAAE;IAAEM,aAAa,EAAE;EAAK,CAAC,CAAC;EAEtC,IAAIN,GAAG,CAACO,MAAM,KAAKC,SAAS,EAAE;IAC5BR,GAAG,CAACO,MAAM,GAAG,IAAAE,0BAAgB,EAAC;MAC5BC,eAAe,EAAEV,GAAG,CAACW;IACvB,CAAC,CAAC;EACJ;;EAEA;EACA,MAAMC,aAAa,GAAG,MAAM,IAAAC,eAAa,EAACf,aAAa,EAAEE,GAAG,CAAC;EAE7D,IAAIc,UAAU;EACd,IAAId,GAAG,CAACe,KAAK,EAAE;IACbD,UAAU,GAAGC,cAAK,CAACC,YAAY,CAAC;MAC9BC,IAAI,EAAEjB,GAAG,CAACe,KAAK,CAACE,IAAI;MACpBlD,GAAG,EAAEiC,GAAG,CAACe,KAAK,CAAChD;IACjB,CAAC,EAAE6C,aAAa,CAAC;EACnB,CAAC,MAAME,UAAU,GAAGI,aAAI,CAACF,YAAY,CAACJ,aAAa,CAAC;;EAEpD;EACAE,UAAU,CAACK,EAAE,CAAC,OAAO,EAAGC,KAAK,IAAK;IAChC,IAAIA,KAAK,CAACC,OAAO,KAAK,QAAQ,EAAE,MAAMD,KAAK;IAC3C,MAAME,IAAI,GAAG,IAAAC,gBAAQ,EAACvB,GAAG,CAACP,IAAI,CAAC,GAAI,QAAOO,GAAG,CAACP,IAAK,EAAC,GAAI,QAAOO,GAAG,CAACP,IAAK,EAAC;;IAEzE;IACA,QAAQ2B,KAAK,CAACI,IAAI;MAChB,KAAK,QAAQ;QACXxB,GAAG,CAACO,MAAM,CAACa,KAAK,CAAE,GAAEE,IAAK,+BAA8B,CAAC;QACxD,OAAOpB,OAAO,CAACuB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAK,YAAY;QACfzB,GAAG,CAACO,MAAM,CAACa,KAAK,CAAE,GAAEE,IAAK,oBAAmB,CAAC;QAC7C,OAAOpB,OAAO,CAACuB,IAAI,CAAC,CAAC,CAAC;MACxB;QACE,MAAML,KAAK;IACf;EACF,CAAC,CAAC;;EAEF;EACAN,UAAU,CAACK,EAAE,CAAC,WAAW,EAAE,MAAM;IAC/B,MAAMO,IAAI,GAAGZ,UAAU,CAACa,OAAO,CAAC,CAAC;IACjC,MAAML,IAAI,GAAG,IAAAC,gBAAQ,EAACG,IAAI,CAAC,GAAI,QAAOA,IAAK,EAAC,GAAI,QAAOA,IAAI,CAACjC,IAAK,EAAC;IAClEO,GAAG,CAACO,MAAM,CAACqB,IAAI,CAAE,uBAAsBN,IAAK,OAC1CpB,OAAO,CAACC,GAAG,CAAC0B,QAAS,OAAM,CAAC;EAChC,CAAC,CAAC;EAEFf,UAAU,CAACgB,MAAM,CAAC9B,GAAG,CAACP,IAAI,CAAC;EAE3B,OAAO;IACLmB,aAAa;IACbE;EACF,CAAC;AACH;AAEAjB,MAAM,CAACkC,gBAAgB,GAAGA,0BAAgB;AAAC,IAAAC,QAAA,GAAA5D,OAAA,CAAAW,OAAA,GAE5Bc,MAAM"}
1	+ {"version":3,"file":"index.js","names":["require","_http","_interopRequireDefault","_https","_lodash","_server","_interopRequireWildcard","_renderer","_utils","_getRequireWildcardCache","e","WeakMap","r","t","__esModule","default","has","get","n","__proto__","a","Object","defineProperty","getOwnPropertyDescriptor","u","prototype","hasOwnProperty","call","i","set","normalizePort","value","port","toNumber","isFinite","isNumber","launchServer","webpackConfig","options","ops","cloneDeep","process","env","PORT","defaults","httpsRedirect","logger","undefined","newDefaultLogger","defaultLogLevel","defaultLoggerLogLevel","expressServer","serverFactory","httpServer","https","createServer","cert","key","http","on","error","syscall","bind","isString","code","exit","addr","address","info","NODE_ENV","listen","SCRIPT_LOCATIONS"],"sources":["../../../src/server/index.ts"],"sourcesContent":["import 'source-map-support/register';\n\nimport http from 'http';\nimport https from 'https';\n\nimport {\n cloneDeep,\n defaults,\n isFinite,\n isNumber,\n isString,\n toNumber,\n} from 'lodash';\n\n/* Polyfill required by ReactJS. /\nimport 'raf/polyfill';\n\nimport { type Configuration } from 'webpack';\n\nimport serverFactory, { type OptionsT as ServerOptionsT } from './server';\nimport { SCRIPT_LOCATIONS, newDefaultLogger } from './renderer';\n\nexport {\n getDefaultCspSettings,\n} from './server';\n\nexport { errors } from './utils';\n\n/\n Normalizes a port into a number, string, or false.\n * TODO: Drop this function?\n * @param value Port name or number.\n * @return Port number (Number), name (String), or false.\n /\nfunction normalizePort(value: number \| string) {\n const port = toNumber(value);\n if (isFinite(port)) return port; / port number /\n if (!isNumber(port)) return value; / named pipe /\n return false;\n}\n\ntype OptionsT = ServerOptionsT & {\n https?: {\n cert: string;\n key: string;\n },\n\n // TODO: Should we limit it to number \| string, and throw if it is different value?\n port?: false \| number \| string;\n};\n\n/\n Creates and launches web-server for ReactJS application. Allows zero\n * or detailed configuration, supports server-side rendering,\n * and development tools, including Hot Module Reloading (HMR).\n \n NOTE: Many of options defined below are passed down to the server and\n * renderer factories, and their declared default values are set in those\n * factories, rather than here.\n \n @param {object} webpackConfig Webpack configuration used to build\n * the frontend bundle. In production mode the server will read out of it\n * `context`, `publicPath`, and a few other parameters, necessary to locate\n * and serve the app bundle. In development mode the server will use entire\n * provided config to build the app bundle in memory, and further watch and\n * update it via HMR.\n * @param {object} [options] Additional parameters.\n * @param {Component} [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param {function} [options.beforeExpressJsError] Asynchronous callback\n * (`(server) => Promise<boolean>`) to be executed just before the default error\n * handler is added to ExpressJS server. If the callback is provided and its\n * result resolves to a truthy value, `react-utils` won't attach the default\n * error handler.\n * @param {function} [options.beforeExpressJsSetup] Asynchronous callback\n * (`(server) => Promise) to be executed right after ExpressJS server creation,\n * before any configuration is performed.\n * @param {BeforeRenderHook} [options.beforeRender] The hook to run just before\n * the server-side rendering. For each incoming request, it will be executed\n * just before the HTML markup is generated at the server. It allows to load\n * and provide the data necessary for server-side rendering, and also to inject\n * additional configuration and scripts into the generated HTML code.\n * @param {boolean} [options.noCsp] Set `true` to disable\n * Content-Security-Policy (CSP) headers altogether.\n * @param {function} [options.cspSettingsHook] A hook allowing\n * to customize [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)\n * settings for [helmet](https://github.com/helmetjs/helmet)'s\n * `contentSecurityPolicy` middleware on per-request basis.\n \n If provided it should be a with signature: \\\n * `(defaultSettings: object, req: object)` ⇒ `object` \\\n * which gets the default settings (also used without the hook),\n * and the incoming request object. The hook response will be passed\n * as options to the helmet `contentSecurityPolicy` middleware.\n \n Currently, the default settings is the following object in production\n * environment:\n * ```js\n * {\n * directives: {\n * defaultSrc: [\"'self'\"],\n * baseUri: [\"'self'\"],\n * blockAllMixedContent: [],\n * fontSrc: [\"'self'\", 'https:', 'data:'],\n * frameAncestors: [\"'self'\"],\n * frameSrc: [\"'self'\", 'https://.youtube.com'],\n imgSrc: [\"'self'\", 'data:'],\n * objectSrc: [\"'none'\"],\n * scriptSrc: [\"'self'\", \"'unsafe-eval'\", `'nonce-UNIQUE_NONCE_VALUE'`],\n * scriptSrcAttr: [\"'none'\"],\n * styleSrc: [\"'self'\", 'https:', \"'unsafe-inline'\"],\n * upgradeInsecureRequests: [] // Removed in dev mode.\n * }\n * }\n * ```\n * It matches the default value used by Helmet with a few updates:\n * - YouTube host is whitelisted in the `frameSrc` directive to ensure\n * the {@link YouTubeVideo} component works.\n * - An unique per-request nonce is added to `scriptSrc` directive to\n * whitelist auxiliary scripts injected by react-utils. The actual nonce\n * value can be fetched by host code via `.nonce` field of `req` argument\n * of `.beforeRender` hook.\n * - `upgradeInsecureRequests` directive is removed in development mode,\n * to simplify local testing with http requests.\n * @param {string} [options.defaultLoggerLogLevel='info'] Log level for\n * the default logger, which is created if no `logger` option provided.\n * @param {boolean} [options.devMode] Pass in `true` to start the server in\n * development mode.\n * @param {string} [options.favicon] Path to the favicon to use by the server.\n * By default no favicon is used.\n * @param {object} [options.https] If provided, HTTPS server will be started,\n * instead of HTTP otherwise. The object should provide SSL certificate and key\n * via two string fields: `cert`, and `key`.\n * @param {string} [options.https.cert] SSL Certificate.\n * @param {string} [options.https.key] SSL key.\n * @param {boolean} [options.httpsRedirect=true] Pass in `true` to enable\n * automatic redirection of all incoming HTTP requests to HTTPS.\n \n To smoothly use it at `localhost` you need to run the server in HTTPS mode,\n * and also properly create and install a self-signed SSL sertificate on your\n * system. This article is helpful:\n * [How to get HTTPS working on your local development environment in 5 minutes](https://medium.freecodecamp.org/how-to-get-https-working-on-your-local-development-environment-in-5-minutes-7af615770eec)\n * @param {Logger} [options.logger] The logger to use at server side.\n * By default [`winston`](https://www.npmjs.com/package/winston) logger\n * with console transport is used. The logger you provide, or the default\n * `winston` logger otherwise, will be attached to the created ExpressJS server\n * object.\n * @param {function} [options.onExpressJsSetup] An async callback\n * (`(server) => Promise`) to be triggered when most of the server\n * configuration is completed, just before the server-side renderer,\n * and the default error handler are attached. You can use it to mount\n * custom API routes. The server-side logger can be accessed as `server.logger`.\n * @param {number\|string} [options.port=3000] The port to start the server on.\n * @param {number} [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param {function} [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` – the cache key for the response;\n * - `maxage?: number` – the maximum age of cached result in ms.\n * If undefined - infinite age is assumed.\n * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @return {Promise<{ expressServer: object, httpServer: object }>} Resolves to\n * an object with created Express and HTTP servers.\n /\nexport default async function launchServer(webpackConfig: Configuration, options: OptionsT) {\n / Options normalization. /\n const ops = options ? cloneDeep(options) : {};\n ops.port = normalizePort(ops.port \|\| process.env.PORT \|\| 3000);\n defaults(ops, { httpsRedirect: true });\n\n // TODO: Need a separate type for normalized options, which guarantees\n // the logger is set!\n if (ops.logger === undefined) {\n ops.logger = newDefaultLogger({\n defaultLogLevel: ops.defaultLoggerLogLevel,\n });\n }\n\n / Creates servers, resolves and sets the port. /\n const expressServer = await serverFactory(webpackConfig, ops);\n\n let httpServer: http.Server;\n if (ops.https) {\n httpServer = https.createServer({\n cert: ops.https.cert,\n key: ops.https.key,\n }, expressServer);\n } else httpServer = http.createServer(expressServer);\n\n / Sets error handler for HTTP(S) server. /\n httpServer.on('error', (error: Error) => {\n if ((error as any).syscall !== 'listen') throw error;\n const bind = isString(ops.port) ? `Pipe ${ops.port}` : `Port ${ops.port}`;\n\n / Human-readable message for some specific listen errors. /\n switch ((error as any).code) {\n case 'EACCES':\n ops.logger!.error(`${bind} requires elevated privileges`);\n return process.exit(1);\n case 'EADDRINUSE':\n ops.logger!.error(`${bind} is already in use`);\n return process.exit(1);\n default:\n throw error;\n }\n });\n\n / Listening event handler for HTTP(S) server. */\n httpServer.on('listening', () => {\n const addr = httpServer.address()!;\n const bind = isString(addr) ? `pipe ${addr}` : `port ${addr.port}`;\n ops.logger!.info(`Server listening on ${bind} in ${\n process.env.NODE_ENV} mode`);\n });\n\n httpServer.listen(ops.port);\n\n return {\n expressServer,\n httpServer,\n };\n}\n\nlaunchServer.SCRIPT_LOCATIONS = SCRIPT_LOCATIONS;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAAA,OAAA;AAEA,IAAAC,KAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,MAAA,GAAAD,sBAAA,CAAAF,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AAUAA,OAAA;AAEAA,OAAA;AAEA,IAAAK,OAAA,GAAAC,uBAAA,CAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AAMA,IAAAQ,MAAA,GAAAR,OAAA;AAAiC,SAAAS,yBAAAC,CAAA,6BAAAC,OAAA,mBAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,CAAAC,CAAA,WAAAA,CAAA,GAAAG,CAAA,GAAAD,CAAA,KAAAF,CAAA;AAAA,SAAAJ,wBAAAI,CAAA,EAAAE,CAAA,SAAAA,CAAA,IAAAF,CAAA,IAAAA,CAAA,CAAAI,UAAA,SAAAJ,CAAA,eAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,WAAAK,OAAA,EAAAL,CAAA,QAAAG,CAAA,GAAAJ,wBAAA,CAAAG,CAAA,OAAAC,CAAA,IAAAA,CAAA,CAAAG,GAAA,CAAAN,CAAA,UAAAG,CAAA,CAAAI,GAAA,CAAAP,CAAA,OAAAQ,CAAA,KAAAC,SAAA,UAAAC,CAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,CAAA,IAAAd,CAAA,oBAAAc,CAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAjB,CAAA,EAAAc,CAAA,SAAAI,CAAA,GAAAR,CAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAb,CAAA,EAAAc,CAAA,UAAAI,CAAA,KAAAA,CAAA,CAAAX,GAAA,IAAAW,CAAA,CAAAC,GAAA,IAAAR,MAAA,CAAAC,cAAA,CAAAJ,CAAA,EAAAM,CAAA,EAAAI,CAAA,IAAAV,CAAA,CAAAM,CAAA,IAAAd,CAAA,CAAAc,CAAA,YAAAN,CAAA,CAAAH,OAAA,GAAAL,CAAA,EAAAG,CAAA,IAAAA,CAAA,CAAAgB,GAAA,CAAAnB,CAAA,EAAAQ,CAAA,GAAAA,CAAA;AAZjC;;AAcA;AACA;AACA;AACA;AACA;AACA;AACA,SAASY,aAAaA,CAACC,KAAsB,EAAE;EAC7C,MAAMC,IAAI,GAAG,IAAAC,gBAAQ,EAACF,KAAK,CAAC;EAC5B,IAAI,IAAAG,gBAAQ,EAACF,IAAI,CAAC,EAAE,OAAOA,IAAI,CAAC,CAAC;EACjC,IAAI,CAAC,IAAAG,gBAAQ,EAACH,IAAI,CAAC,EAAE,OAAOD,KAAK,CAAC,CAAC;EACnC,OAAO,KAAK;AACd;AAYA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACe,eAAeK,YAAYA,CAACC,aAA4B,EAAEC,OAAiB,EAAE;EAC1F;EACA,MAAMC,GAAG,GAAGD,OAAO,GAAG,IAAAE,iBAAS,EAACF,OAAO,CAAC,GAAG,CAAC,CAAC;EAC7CC,GAAG,CAACP,IAAI,GAAGF,aAAa,CAACS,GAAG,CAACP,IAAI,IAAIS,OAAO,CAACC,GAAG,CAACC,IAAI,IAAI,IAAI,CAAC;EAC9D,IAAAC,gBAAQ,EAACL,GAAG,EAAE;IAAEM,aAAa,EAAE;EAAK,CAAC,CAAC;;EAEtC;EACA;EACA,IAAIN,GAAG,CAACO,MAAM,KAAKC,SAAS,EAAE;IAC5BR,GAAG,CAACO,MAAM,GAAG,IAAAE,0BAAgB,EAAC;MAC5BC,eAAe,EAAEV,GAAG,CAACW;IACvB,CAAC,CAAC;EACJ;;EAEA;EACA,MAAMC,aAAa,GAAG,MAAM,IAAAC,eAAa,EAACf,aAAa,EAAEE,GAAG,CAAC;EAE7D,IAAIc,UAAuB;EAC3B,IAAId,GAAG,CAACe,KAAK,EAAE;IACbD,UAAU,GAAGC,cAAK,CAACC,YAAY,CAAC;MAC9BC,IAAI,EAAEjB,GAAG,CAACe,KAAK,CAACE,IAAI;MACpBC,GAAG,EAAElB,GAAG,CAACe,KAAK,CAACG;IACjB,CAAC,EAAEN,aAAa,CAAC;EACnB,CAAC,MAAME,UAAU,GAAGK,aAAI,CAACH,YAAY,CAACJ,aAAa,CAAC;;EAEpD;EACAE,UAAU,CAACM,EAAE,CAAC,OAAO,EAAGC,KAAY,IAAK;IACvC,IAAKA,KAAK,CAASC,OAAO,KAAK,QAAQ,EAAE,MAAMD,KAAK;IACpD,MAAME,IAAI,GAAG,IAAAC,gBAAQ,EAACxB,GAAG,CAACP,IAAI,CAAC,GAAI,QAAOO,GAAG,CAACP,IAAK,EAAC,GAAI,QAAOO,GAAG,CAACP,IAAK,EAAC;;IAEzE;IACA,QAAS4B,KAAK,CAASI,IAAI;MACzB,KAAK,QAAQ;QACXzB,GAAG,CAACO,MAAM,CAAEc,KAAK,CAAE,GAAEE,IAAK,+BAA8B,CAAC;QACzD,OAAOrB,OAAO,CAACwB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAK,YAAY;QACf1B,GAAG,CAACO,MAAM,CAAEc,KAAK,CAAE,GAAEE,IAAK,oBAAmB,CAAC;QAC9C,OAAOrB,OAAO,CAACwB,IAAI,CAAC,CAAC,CAAC;MACxB;QACE,MAAML,KAAK;IACf;EACF,CAAC,CAAC;;EAEF;EACAP,UAAU,CAACM,EAAE,CAAC,WAAW,EAAE,MAAM;IAC/B,MAAMO,IAAI,GAAGb,UAAU,CAACc,OAAO,CAAC,CAAE;IAClC,MAAML,IAAI,GAAG,IAAAC,gBAAQ,EAACG,IAAI,CAAC,GAAI,QAAOA,IAAK,EAAC,GAAI,QAAOA,IAAI,CAAClC,IAAK,EAAC;IAClEO,GAAG,CAACO,MAAM,CAAEsB,IAAI,CAAE,uBAAsBN,IAAK,OAC3CrB,OAAO,CAACC,GAAG,CAAC2B,QAAS,OAAM,CAAC;EAChC,CAAC,CAAC;EAEFhB,UAAU,CAACiB,MAAM,CAAC/B,GAAG,CAACP,IAAI,CAAC;EAE3B,OAAO;IACLmB,aAAa;IACbE;EACF,CAAC;AACH;AAEAjB,YAAY,CAACmC,gBAAgB,GAAGA,0BAAgB"}

package/build/development/server/renderer.js CHANGED Viewed

@@ -10,6 +10,8 @@ exports.isBrotliAcceptable = isBrotliAcceptable;
 exports.newDefaultLogger = newDefaultLogger;
 var _fs = _interopRequireDefault(require("fs"));
 var _path = _interopRequireDefault(require("path"));
+require("express");
+require("react");
 var _stream = require("stream");
 var _zlib = require("zlib");
 var _winston = _interopRequireDefault(require("winston"));
@@ -23,6 +25,8 @@ var _reactHelmet = require("react-helmet");
 var _server2 = require("react-router-dom/server");
 var _serializeJavascript = _interopRequireDefault(require("serialize-javascript"));
 var _buildInfo = require("../shared/utils/isomorphy/buildInfo");
+require("../shared/utils/globalState");
+require("webpack");
 var _Cache = _interopRequireDefault(require("./Cache"));
 var _jsxRuntime = require("react/jsx-runtime");
 /**
@@ -30,25 +34,38 @@ var _jsxRuntime = require("react/jsx-runtime");
  */
 const sanitizedConfig = (0, _lodash.omit)(_config.default, 'SECRET');
-const SCRIPT_LOCATIONS = exports.SCRIPT_LOCATIONS = {
-  BODY_OPEN: 'BODY_OPEN',
-  DEFAULT: 'DEFAULT',
-  HEAD_OPEN: 'HEAD_OPEN'
-};
+// Note: These type definitions for logger are copied from Winston logger,
+// then simplified to make it easier to fit an alternative logger into this
+// interface.
+// eslint-disable-next-line @typescript-eslint/naming-convention
+let SCRIPT_LOCATIONS = exports.SCRIPT_LOCATIONS = /*#__PURE__*/function (SCRIPT_LOCATIONS) {
+  SCRIPT_LOCATIONS["BODY_OPEN"] = "BODY_OPEN";
+  SCRIPT_LOCATIONS["DEFAULT"] = "DEFAULT";
+  SCRIPT_LOCATIONS["HEAD_OPEN"] = "HEAD_OPEN";
+  return SCRIPT_LOCATIONS;
+}({});
+class ServerSsrContext extends _reactGlobalState.SsrContext {
+  chunks = [];
+  status = 200;
+  constructor(req, chunkGroups, initialState) {
+    super((0, _lodash.cloneDeep)(initialState) || {});
+    this.chunkGroups = chunkGroups;
+    this.req = req;
+  }
+}
 /**
  * Reads build-time information about the app. This information is generated
  * by our standard Webpack config for apps, and it is written into
  * ".build-info" file in the context folder specified in Webpack config.
  * At the moment, that file contains build timestamp and a random 32-bit key,
  * suitable for cryptographical use.
- * @ignore
- * @param {String} context Webpack context path used during the build.
- * @return {Object} Resolves to the build-time information.
+ * @param context Webpack context path used during the build.
+ * @return Resolves to the build-time information.
  */
 function getBuildInfo(context) {
   const url = _path.default.resolve(context, '.build-info');
-  return JSON.parse(_fs.default.readFileSync(url));
+  return JSON.parse(_fs.default.readFileSync(url, 'utf8'));
 }
 /**
@@ -56,15 +73,14 @@ function getBuildInfo(context) {
  * by Webpack during the compilation.
  * It will not work for development builds, where these stats should be captured
  * via compilator callback.
- * @ignore
- * @param {string} buildDir
- * @return {object}
+ * @param buildDir
+ * @return
  */
 function readChunkGroupsJson(buildDir) {
   const url = _path.default.resolve(buildDir, '__chunk_groups__.json');
   let res;
   try {
-    res = JSON.parse(_fs.default.readFileSync(url));
+    res = JSON.parse(_fs.default.readFileSync(url, 'utf8'));
   } catch (err) {
     res = null;
   }
@@ -73,10 +89,9 @@ function readChunkGroupsJson(buildDir) {
 /**
  * Prepares a new Cipher for data encryption.
- * @ignore
- * @param {String} key Encryption key (32-bit random key is expected, see
+ * @param key Encryption key (32-bit random key is expected, see
  *  node-forge documentation, in case of doubts).
- * @return {Promise} Resolves to the object with two fields:
+ * @return Resolves to the object with two fields:
  *  1. cipher - a new Cipher, ready for encryption;
  *  2. iv - initial vector used by the cipher.
  */
@@ -183,29 +198,28 @@ function newDefaultLogger({
     transports: [new transports.Console()]
   });
 }
 /**
  * Creates the middleware.
- * @param {object} webpackConfig
- * @param {object} options Additional options:
- * @param {Component} [options.Application] The root ReactJS component of
+ * @param webpackConfig
+ * @param options Additional options:
+ * @param [options.Application] The root ReactJS component of
  * the app to use for the server-side rendering. When not provided
  * the server-side rendering is disabled.
- * @param {object} [options.buildInfo] "Build info" object to use. If provided,
+ * @param [options.buildInfo] "Build info" object to use. If provided,
  *  it will be used, instead of trying to load from the filesystem the one
  *  generated by the Webpack build. It is intended for test environments,
  *  where passing this stuff via file system is no bueno.
- * @param {boolean} [options.favicon] `true` will include favicon
+ * @param [options.favicon] `true` will include favicon
  *  link into the rendered HTML templates.
- * @param {boolean} [options.noCsp] `true` means that no
+ * @param [options.noCsp] `true` means that no
  * Content-Security-Policy (CSP) is used by server, thus the renderer
  * may cut a few corners.
- * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.
- * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,
+ * @param [options.maxSsrRounds=10] Maximum number of SSR rounds.
+ * @param [options.ssrTimeout=1000] SSR timeout in milliseconds,
  * defaults to 1 second.
- * @param {number} [options.staticCacheSize=1.e7] The maximum
+ * @param [options.staticCacheSize=1.e7] The maximum
  * static cache size in bytes. Defaults to ~10 MB.
- * @param {function} [options.staticCacheController] When given, it activates,
+ * @param [options.staticCacheController] When given, it activates,
  * and controls the static caching of generated HTML markup. When this function
  * is provided, on each incoming request it is triggered with the request
  * passed in as the argument. To attempt to serve the response from the cache
@@ -213,7 +227,7 @@ function newDefaultLogger({
  * - `key: string` &ndash; the cache key for the response;
  * - `maxage?: number` &ndash; the maximum age of cached result in ms.
  *   If undefined - infinite age is assumed.
- * @return {function} Created middleware.
+ * @return Created middleware.
  */
 function factory(webpackConfig, options) {
   const ops = (0, _lodash.defaults)((0, _lodash.clone)(options), {
@@ -311,17 +325,16 @@ function factory(webpackConfig, options) {
       } else if (CHUNK_GROUPS) chunkGroups = CHUNK_GROUPS;else chunkGroups = {};
       /* Optional server-side rendering. */
-      let App = ops.Application;
-      const ssrContext = {
-        req,
-        state: (0, _lodash.cloneDeep)(initialState || {}),
-        // Array of chunk names encountered during the rendering.
-        chunks: [],
-        chunkGroups
-      };
+      const App = ops.Application;
+      let appHtmlMarkup = '';
+      const ssrContext = new ServerSsrContext(req, chunkGroups, initialState);
       let stream;
       if (App) {
         const ssrStart = Date.now();
+        // TODO: Somehow, without it TS does not realise that
+        // App has been checked to exist.
+        const App2 = App;
         const renderPass = async () => {
           ssrContext.chunks = [];
           return new Promise((resolve, reject) => {
@@ -330,7 +343,7 @@ function factory(webpackConfig, options) {
               ssrContext: ssrContext,
               children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_server2.StaticRouter, {
                 location: req.url,
-                children: /*#__PURE__*/(0, _jsxRuntime.jsx)(App, {})
+                children: /*#__PURE__*/(0, _jsxRuntime.jsx)(App2, {})
               })
             }), {
               onAllReady: () => resolve(pipeableStream),
@@ -361,10 +374,9 @@ function factory(webpackConfig, options) {
           logMsg = bailed ? `SSR timed out after ${ops.ssrTimeout} second(s)` : `SSR bailed out after ${ops.maxSsrRounds} round(s)`;
         } else logMsg = `SSR completed in ${ssrRound + 1} round(s)`;
         ops.logger.log(ssrContext.dirty ? 'warn' : 'info', logMsg);
-        App = '';
         stream.pipe(new _stream.Writable({
           write: (chunk, _, done) => {
-            App += chunk.toString();
+            appHtmlMarkup += chunk.toString();
             done();
           }
         }));
@@ -437,7 +449,7 @@ function factory(webpackConfig, options) {
           </head>
           <body>
             ${grouppedExtraScripts[SCRIPT_LOCATIONS.BODY_OPEN]}
-            <div id="react-view">${App || ''}</div>
+            <div id="react-view">${appHtmlMarkup}</div>
             ${scriptChunkString}
             ${grouppedExtraScripts[SCRIPT_LOCATIONS.DEFAULT]}
           </body>
@@ -449,12 +461,13 @@ function factory(webpackConfig, options) {
         // but it greately simplifies testing, and error reporting.
         await new Promise((done, failed) => {
           (0, _zlib.brotliCompress)(html, (error, buffer) => {
+            const b = buffer;
             if (error) failed(error);else {
-              buffer.nonce = req.nonce; // eslint-disable-line no-param-reassign
+              b.nonce = req.nonce; // eslint-disable-line no-param-reassign
               cache.add({
-                buffer,
+                buffer: b,
                 status
-              }, cacheRef.key);
+              }, cacheRef.key, buffer.length);
               done();
             }
           });

package/build/development/server/renderer.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"renderer.js","names":["_fs","_interopRequireDefault","require","_path","_stream","_zlib","_winston","_reactGlobalState","_jsUtils","_lodash","_config","_nodeForge","_server","_reactHelmet","_server2","_serializeJavascript","_buildInfo","_Cache","_jsxRuntime","sanitizedConfig","omit","config","SCRIPT_LOCATIONS","exports","BODY_OPEN","DEFAULT","HEAD_OPEN","getBuildInfo","context","url","path","resolve","JSON","parse","fs","readFileSync","readChunkGroupsJson","buildDir","res","err","prepareCipher","key","Promise","reject","forge","random","getBytes","iv","cipher","createCipher","start","isBrotliAcceptable","req","acceptable","get","ops","split","i","length","type","priority","trim","parseFloat","groupExtraScripts","scripts","script","isString","code","location","undefined","Error","newDefaultLogger","defaultLogLevel","format","transports","winston","createLogger","level","combine","splat","timestamp","colorize","printf","message","stack","rest","Object","keys","stringify","Console","factory","webpackConfig","options","defaults","clone","beforeRender","maxSsrRounds","ssrTimeout","staticCacheSize","logger","defaultLoggerLogLevel","buildInfo","setBuildInfo","publicPath","outputPath","output","manifestLink","existsSync","cache","staticCacheController","Cache","CHUNK_GROUPS","next","set","cookie","csrfToken","cacheRef","data","buffer","status","noCsp","send","done","failed","brotliDecompress","error","html","h","toString","regex","RegExp","nonce","replace","configToInject","extraScripts","initialState","all","helmet","chunkGroups","webpackStats","locals","mapValues","toJson","namedChunkGroups","item","assets","map","name","App","Application","ssrContext","state","cloneDeep","chunks","stream","ssrStart","Date","now","renderPass","pipeableStream","renderToPipeableStream","jsx","GlobalStateProvider","children","StaticRouter","onAllReady","onError","ssrRound","bailed","dirty","timeout","race","allSettled","pending","timer","then","logMsg","log","pipe","Writable","write","chunk","_","Helmet","renderStatic","payload","serializeJs","CONFIG","ISTATE","ignoreFunction","unsafe","update","util","createBuffer","finish","INJ","encode64","chunkSet","Set","forEach","asset","add","styleChunkString","scriptChunkString","endsWith","grouppedExtraScripts","faviconLink","favicon","title","meta","brotliCompress"],"sources":["../../../src/server/renderer.jsx"],"sourcesContent":["/*\n ExpressJS middleware for server-side rendering of a ReactJS app.\n /\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { Writable } from 'stream';\nimport { brotliCompress, brotliDecompress } from 'zlib';\nimport winston from 'winston';\n\nimport { GlobalStateProvider } from '@dr.pogodin/react-global-state';\nimport { timer } from '@dr.pogodin/js-utils';\n\nimport {\n clone,\n cloneDeep,\n defaults,\n isString,\n get,\n mapValues,\n omit,\n} from 'lodash';\n\nimport config from 'config';\nimport forge from 'node-forge';\n\nimport { renderToPipeableStream } from 'react-dom/server';\nimport { Helmet } from 'react-helmet';\nimport { StaticRouter } from 'react-router-dom/server';\nimport serializeJs from 'serialize-javascript';\nimport { setBuildInfo } from 'utils/isomorphy/buildInfo';\n\nimport Cache from './Cache';\n\nconst sanitizedConfig = omit(config, 'SECRET');\n\nexport const SCRIPT_LOCATIONS = {\n BODY_OPEN: 'BODY_OPEN',\n DEFAULT: 'DEFAULT',\n HEAD_OPEN: 'HEAD_OPEN',\n};\n\n/\n Reads build-time information about the app. This information is generated\n * by our standard Webpack config for apps, and it is written into\n * \".build-info\" file in the context folder specified in Webpack config.\n * At the moment, that file contains build timestamp and a random 32-bit key,\n * suitable for cryptographical use.\n * @ignore\n * @param {String} context Webpack context path used during the build.\n * @return {Object} Resolves to the build-time information.\n /\nfunction getBuildInfo(context) {\n const url = path.resolve(context, '.build-info');\n return JSON.parse(fs.readFileSync(url));\n}\n\n/\n Attempts to read from disk the named chunk groups mapping generated\n * by Webpack during the compilation.\n * It will not work for development builds, where these stats should be captured\n * via compilator callback.\n * @ignore\n * @param {string} buildDir\n * @return {object}\n /\nfunction readChunkGroupsJson(buildDir) {\n const url = path.resolve(buildDir, '__chunk_groups__.json');\n let res;\n try {\n res = JSON.parse(fs.readFileSync(url));\n } catch (err) {\n res = null;\n }\n return res;\n}\n\n/\n Prepares a new Cipher for data encryption.\n * @ignore\n * @param {String} key Encryption key (32-bit random key is expected, see\n * node-forge documentation, in case of doubts).\n * @return {Promise} Resolves to the object with two fields:\n * 1. cipher - a new Cipher, ready for encryption;\n * 2. iv - initial vector used by the cipher.\n /\nfunction prepareCipher(key) {\n return new Promise((resolve, reject) => {\n forge.random.getBytes(32, (err, iv) => {\n if (err) reject(err);\n else {\n const cipher = forge.cipher.createCipher('AES-CBC', key);\n cipher.start({ iv });\n resolve({ cipher, iv });\n }\n });\n });\n}\n\n/\n Given an incoming HTTP requests, it deduces whether Brotli-encoded responses\n * are acceptable to the caller.\n * @param {object} req\n * @return {boolean}\n * @ignore\n /\nexport function isBrotliAcceptable(req) {\n const acceptable = req.get('accept-encoding');\n if (acceptable) {\n const ops = acceptable.split(',');\n for (let i = 0; i < ops.length; ++i) {\n const [type, priority] = ops[i].trim().split(';q=');\n if ((type === '' \|\| type === 'br')\n && (!priority \|\| parseFloat(priority) > 0)) {\n return true;\n }\n }\n }\n return false;\n}\n\n/*\n Given an array of extra script strings / objects, it returns an object with\n * arrays of scripts to inject in different HTML template locations. During\n * the script groupping it also filters out any empty scripts.\n * @param {({\n * code: string;\n * location: string;\n * }\|string)[]} [scripts=[]]\n * @return {{\n * BODY_OPEN: string[];\n * DEFAULT: string[];\n * HEAD_OPEN: string[];\n * }}\n /\nfunction groupExtraScripts(scripts = []) {\n const res = {\n [SCRIPT_LOCATIONS.BODY_OPEN]: '',\n [SCRIPT_LOCATIONS.DEFAULT]: '',\n [SCRIPT_LOCATIONS.HEAD_OPEN]: '',\n };\n for (let i = 0; i < scripts.length; ++i) {\n const script = scripts[i];\n if (isString(script)) {\n if (script) res[SCRIPT_LOCATIONS.DEFAULT] += script;\n } else if (script.code) {\n if (res[script.location] !== undefined) {\n res[script.location] += script.code;\n } else throw Error(`Invalid location \"${script.location}\"`);\n }\n }\n return res;\n}\n\n/\n Creates a new default (Winston) logger.\n * @param {object} [options={}]\n * @param {string} [options.defaultLogLevel='info']\n * @return {object}\n /\nexport function newDefaultLogger({\n defaultLogLevel = 'info',\n} = {}) {\n const { format, transports } = winston;\n return winston.createLogger({\n level: defaultLogLevel,\n format: format.combine(\n format.splat(),\n format.timestamp(),\n format.colorize(),\n format.printf(\n ({\n level,\n message,\n timestamp,\n stack,\n ...rest\n }) => {\n let res = `${level}\\t(at ${timestamp}):\\t${message}`;\n if (Object.keys(rest).length) {\n res += `\\n${JSON.stringify(rest, null, 2)}`;\n }\n if (stack) res += `\\n${stack}`;\n return res;\n },\n ),\n ),\n transports: [new transports.Console()],\n });\n}\n\n/\n Creates the middleware.\n * @param {object} webpackConfig\n * @param {object} options Additional options:\n * @param {Component} [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param {object} [options.buildInfo] \"Build info\" object to use. If provided,\n * it will be used, instead of trying to load from the filesystem the one\n * generated by the Webpack build. It is intended for test environments,\n * where passing this stuff via file system is no bueno.\n * @param {boolean} [options.favicon] `true` will include favicon\n * link into the rendered HTML templates.\n * @param {boolean} [options.noCsp] `true` means that no\n * Content-Security-Policy (CSP) is used by server, thus the renderer\n * may cut a few corners.\n * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @param {number} [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param {function} [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` – the cache key for the response;\n * - `maxage?: number` – the maximum age of cached result in ms.\n * If undefined - infinite age is assumed.\n * @return {function} Created middleware.\n /\nexport default function factory(webpackConfig, options) {\n const ops = defaults(clone(options), {\n beforeRender: () => Promise.resolve({}),\n maxSsrRounds: 10,\n ssrTimeout: 1000,\n staticCacheSize: 1.e7,\n });\n\n // Note: in normal use the default logger is created and set in the root\n // server function, and this initialization is for testing uses, where\n // renderer is imported directly.\n if (ops.logger === undefined) {\n ops.logger = newDefaultLogger({\n defaultLogLevel: ops.defaultLoggerLogLevel,\n });\n }\n\n const buildInfo = ops.buildInfo \|\| getBuildInfo(webpackConfig.context);\n setBuildInfo(buildInfo);\n\n // publicPath from webpack.output has a trailing slash at the end.\n const { publicPath, path: outputPath } = webpackConfig.output;\n\n const manifestLink = fs.existsSync(`${outputPath}/manifest.json`)\n ? `<link rel=\"manifest\" href=\"${publicPath}manifest.json\">` : '';\n\n const cache = ops.staticCacheController\n ? new Cache(ops.staticCacheSize) : null;\n\n const CHUNK_GROUPS = readChunkGroupsJson(outputPath);\n\n return async (req, res, next) => {\n try {\n // Ensures any caches always revalidate HTML markup before reuse.\n res.set('Cache-Control', 'no-cache');\n\n res.cookie('csrfToken', req.csrfToken());\n\n let cacheRef;\n if (cache) {\n cacheRef = ops.staticCacheController(req);\n if (cacheRef) {\n const data = cache.get(cacheRef);\n if (data !== null) {\n const { buffer, status } = data;\n if (ops.noCsp && isBrotliAcceptable(req)) {\n res.set('Content-Type', 'text/html');\n res.set('Content-Encoding', 'br');\n if (status !== 200) res.status(status);\n res.send(buffer);\n } else {\n await new Promise((done, failed) => {\n brotliDecompress(buffer, (error, html) => {\n if (error) failed(error);\n else {\n let h = html.toString();\n if (!ops.noCsp) {\n // TODO: Starting from Node v15 we'll be able to use string's\n // .replaceAll() method instead relying on reg. expression for\n // global matching.\n const regex = new RegExp(buffer.nonce, 'g');\n h = h.replace(regex, req.nonce);\n }\n if (status !== 200) res.status(status);\n res.send(h);\n done();\n }\n });\n });\n }\n return;\n }\n }\n }\n\n const [{\n configToInject,\n extraScripts,\n initialState,\n }, {\n cipher,\n iv,\n }] = await Promise.all([\n ops.beforeRender(req, sanitizedConfig),\n prepareCipher(buildInfo.key),\n ]);\n\n let helmet;\n\n // Gets the mapping between code chunk names and their asset files.\n // These data come from the Webpack compilation, either from the stats\n // attached to the request (in dev mode), or from a file output during\n // the build (in prod mode).\n let chunkGroups;\n const webpackStats = get(res.locals, 'webpack.devMiddleware.stats');\n if (webpackStats) {\n chunkGroups = mapValues(\n webpackStats.toJson({\n all: false,\n chunkGroups: true,\n }).namedChunkGroups,\n (item) => item.assets.map(({ name }) => name),\n );\n } else if (CHUNK_GROUPS) chunkGroups = CHUNK_GROUPS;\n else chunkGroups = {};\n\n / Optional server-side rendering. /\n let App = ops.Application;\n const ssrContext = {\n req,\n state: cloneDeep(initialState \|\| {}),\n\n // Array of chunk names encountered during the rendering.\n chunks: [],\n\n chunkGroups,\n };\n let stream;\n if (App) {\n const ssrStart = Date.now();\n\n const renderPass = async () => {\n ssrContext.chunks = [];\n return new Promise((resolve, reject) => {\n const pipeableStream = renderToPipeableStream(\n <GlobalStateProvider\n initialState={ssrContext.state}\n ssrContext={ssrContext}\n >\n <StaticRouter location={req.url}>\n <App />\n </StaticRouter>\n </GlobalStateProvider>,\n {\n onAllReady: () => resolve(pipeableStream),\n onError: reject,\n },\n );\n });\n };\n\n let ssrRound = 0;\n let bailed = false;\n for (; ssrRound < ops.maxSsrRounds; ++ssrRound) {\n stream = await renderPass(); // eslint-disable-line no-await-in-loop\n\n if (!ssrContext.dirty) break;\n\n / eslint-disable no-await-in-loop /\n const timeout = ops.ssrTimeout + ssrStart - Date.now();\n bailed = timeout <= 0 \|\| !await Promise.race([\n Promise.allSettled(ssrContext.pending),\n timer(timeout).then(() => false),\n ]);\n if (bailed) break;\n / eslint-enable no-await-in-loop /\n }\n\n let logMsg;\n if (ssrContext.dirty) {\n // NOTE: In the case of incomplete SSR one more round is necessary\n // to ensure the correct hydration when some pending promises have\n // resolved and placed their data into the initial global state.\n stream = await renderPass();\n\n logMsg = bailed ? `SSR timed out after ${ops.ssrTimeout} second(s)`\n : `SSR bailed out after ${ops.maxSsrRounds} round(s)`;\n } else logMsg = `SSR completed in ${ssrRound + 1} round(s)`;\n\n ops.logger.log(ssrContext.dirty ? 'warn' : 'info', logMsg);\n\n App = '';\n stream.pipe(new Writable({\n write: (chunk, _, done) => {\n App += chunk.toString();\n done();\n },\n }));\n\n / This takes care about server-side rendering of page title and meta tags\n * (still demands injection into HTML template, which happens below). /\n helmet = Helmet.renderStatic();\n }\n\n / Encrypts data to be injected into HTML.\n * Keep in mind, that this encryption is no way secure: as the JS bundle\n * contains decryption key and is able to decode it at the client side.\n * Hovewer, for a number of reasons, encryption of injected data is still\n * better than injection of a plain text. */\n const payload = serializeJs({\n CHUNK_GROUPS: chunkGroups,\n CONFIG: configToInject \|\| sanitizedConfig,\n ISTATE: ssrContext.state,\n }, {\n ignoreFunction: true,\n unsafe: true,\n });\n cipher.update(forge.util.createBuffer(payload, 'utf8'));\n cipher.finish();\n const INJ = forge.util.encode64(`${iv}${cipher.output.data}`);\n\n const chunkSet = new Set();\n\n // TODO: \"main\" chunk has to be added explicitly,\n // because unlike all other chunks they are not managed by <CodeSplit>\n // component, thus they are not added to the ssrContext.chunks\n // automatically. Actually, names of these entry chunks should be\n // read from Wepback config, as the end user may customize them,\n // remove or add other entry points, but it requires additional\n // efforts to figure out how to automatically order them right,\n // thus for now this handles the default config.\n [\n 'main',\n ...ssrContext.chunks,\n ].forEach((chunk) => {\n const assets = chunkGroups[chunk];\n if (assets) assets.forEach((asset) => chunkSet.add(asset));\n });\n\n let styleChunkString = '';\n let scriptChunkString = '';\n chunkSet.forEach((chunk) => {\n if (chunk.endsWith('.css')) {\n styleChunkString += `<link href=\"${publicPath}${chunk}\" rel=\"stylesheet\">`;\n } else if (\n chunk.endsWith('.js')\n // In dev mode HMR adds JS updates into asset arrays,\n // and they (updates) should be ignored.\n && !chunk.endsWith('.hot-update.js')\n ) {\n scriptChunkString += `<script src=\"${publicPath}${chunk}\" type=\"application/javascript\"></script>`;\n }\n });\n\n const grouppedExtraScripts = groupExtraScripts(extraScripts);\n\n const faviconLink = ops.favicon ? (\n '<link rel=\"shortcut icon\" href=\"/favicon.ico\">'\n ) : '';\n\n const html = `<!DOCTYPE html>\n <html lang=\"en\">\n <head>\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.HEAD_OPEN]}\n ${helmet ? helmet.title.toString() : ''}\n ${helmet ? helmet.meta.toString() : ''}\n <meta name=\"theme-color\" content=\"#FFFFFF\">\n ${manifestLink}\n ${styleChunkString}\n ${faviconLink}\n <meta charset=\"utf-8\">\n <meta\n content=\"width=device-width,initial-scale=1.0\"\n name=\"viewport\"\n >\n <meta itemprop=\"drpruinj\" content=\"${INJ}\">\n </head>\n <body>\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.BODY_OPEN]}\n <div id=\"react-view\">${App \|\| ''}</div>\n ${scriptChunkString}\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.DEFAULT]}\n </body>\n </html>`;\n\n const status = ssrContext.status \|\| 200;\n if (status !== 200) res.status(status);\n\n if (cacheRef && status < 500) {\n // Note: waiting for the caching to complete is not strictly necessary,\n // but it greately simplifies testing, and error reporting.\n await new Promise((done, failed) => {\n brotliCompress(html, (error, buffer) => {\n if (error) failed(error);\n else {\n buffer.nonce = req.nonce; // eslint-disable-line no-param-reassign\n cache.add({ buffer, status }, cacheRef.key);\n done();\n }\n });\n });\n }\n\n // Note: as caching code above may throw in some cases, sending response\n // before it completes will likely hide the error, making it difficult\n // to debug. Thus, at least for now, lets send response after it.\n res.send(html);\n } catch (error) {\n next(error);\n }\n };\n}\n"],"mappings":";;;;;;;;;;AAIA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,iBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEA,IAAAO,OAAA,GAAAP,OAAA;AAUA,IAAAQ,OAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,UAAA,GAAAV,sBAAA,CAAAC,OAAA;AAEA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,YAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AACA,IAAAa,oBAAA,GAAAd,sBAAA,CAAAC,OAAA;AACA,IAAAc,UAAA,GAAAd,OAAA;AAEA,IAAAe,MAAA,GAAAhB,sBAAA,CAAAC,OAAA;AAA4B,IAAAgB,WAAA,GAAAhB,OAAA;AAjC5B;AACA;AACA;;AAiCA,MAAMiB,eAAe,GAAG,IAAAC,YAAI,EAACC,eAAM,EAAE,QAAQ,CAAC;AAEvC,MAAMC,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG;EAC9BE,SAAS,EAAE,WAAW;EACtBC,OAAO,EAAE,SAAS;EAClBC,SAAS,EAAE;AACb,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,YAAYA,CAACC,OAAO,EAAE;EAC7B,MAAMC,GAAG,GAAGC,aAAI,CAACC,OAAO,CAACH,OAAO,EAAE,aAAa,CAAC;EAChD,OAAOI,IAAI,CAACC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,GAAG,CAAC,CAAC;AACzC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASO,mBAAmBA,CAACC,QAAQ,EAAE;EACrC,MAAMR,GAAG,GAAGC,aAAI,CAACC,OAAO,CAACM,QAAQ,EAAE,uBAAuB,CAAC;EAC3D,IAAIC,GAAG;EACP,IAAI;IACFA,GAAG,GAAGN,IAAI,CAACC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,GAAG,CAAC,CAAC;EACxC,CAAC,CAAC,OAAOU,GAAG,EAAE;IACZD,GAAG,GAAG,IAAI;EACZ;EACA,OAAOA,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASE,aAAaA,CAACC,GAAG,EAAE;EAC1B,OAAO,IAAIC,OAAO,CAAC,CAACX,OAAO,EAAEY,MAAM,KAAK;IACtCC,kBAAK,CAACC,MAAM,CAACC,QAAQ,CAAC,EAAE,EAAE,CAACP,GAAG,EAAEQ,EAAE,KAAK;MACrC,IAAIR,GAAG,EAAEI,MAAM,CAACJ,GAAG,CAAC,CAAC,KAChB;QACH,MAAMS,MAAM,GAAGJ,kBAAK,CAACI,MAAM,CAACC,YAAY,CAAC,SAAS,EAAER,GAAG,CAAC;QACxDO,MAAM,CAACE,KAAK,CAAC;UAAEH;QAAG,CAAC,CAAC;QACpBhB,OAAO,CAAC;UAAEiB,MAAM;UAAED;QAAG,CAAC,CAAC;MACzB;IACF,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,kBAAkBA,CAACC,GAAG,EAAE;EACtC,MAAMC,UAAU,GAAGD,GAAG,CAACE,GAAG,CAAC,iBAAiB,CAAC;EAC7C,IAAID,UAAU,EAAE;IACd,MAAME,GAAG,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;IACjC,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,GAAG,CAACG,MAAM,EAAE,EAAED,CAAC,EAAE;MACnC,MAAM,CAACE,IAAI,EAAEC,QAAQ,CAAC,GAAGL,GAAG,CAACE,CAAC,CAAC,CAACI,IAAI,CAAC,CAAC,CAACL,KAAK,CAAC,KAAK,CAAC;MACnD,IAAI,CAACG,IAAI,KAAK,GAAG,IAAIA,IAAI,KAAK,IAAI,MAC9B,CAACC,QAAQ,IAAIE,UAAU,CAACF,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;QAC1C,OAAO,IAAI;MACb;IACF;EACF;EACA,OAAO,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASG,iBAAiBA,CAACC,OAAO,GAAG,EAAE,EAAE;EACvC,MAAM1B,GAAG,GAAG;IACV,CAAChB,gBAAgB,CAACE,SAAS,GAAG,EAAE;IAChC,CAACF,gBAAgB,CAACG,OAAO,GAAG,EAAE;IAC9B,CAACH,gBAAgB,CAACI,SAAS,GAAG;EAChC,CAAC;EACD,KAAK,IAAI+B,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGO,OAAO,CAACN,MAAM,EAAE,EAAED,CAAC,EAAE;IACvC,MAAMQ,MAAM,GAAGD,OAAO,CAACP,CAAC,CAAC;IACzB,IAAI,IAAAS,gBAAQ,EAACD,MAAM,CAAC,EAAE;MACpB,IAAIA,MAAM,EAAE3B,GAAG,CAAChB,gBAAgB,CAACG,OAAO,CAAC,IAAIwC,MAAM;IACrD,CAAC,MAAM,IAAIA,MAAM,CAACE,IAAI,EAAE;MACtB,IAAI7B,GAAG,CAAC2B,MAAM,CAACG,QAAQ,CAAC,KAAKC,SAAS,EAAE;QACtC/B,GAAG,CAAC2B,MAAM,CAACG,QAAQ,CAAC,IAAIH,MAAM,CAACE,IAAI;MACrC,CAAC,MAAM,MAAMG,KAAK,CAAE,qBAAoBL,MAAM,CAACG,QAAS,GAAE,CAAC;IAC7D;EACF;EACA,OAAO9B,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASiC,gBAAgBA,CAAC;EAC/BC,eAAe,GAAG;AACpB,CAAC,GAAG,CAAC,CAAC,EAAE;EACN,MAAM;IAAEC,MAAM;IAAEC;EAAW,CAAC,GAAGC,gBAAO;EACtC,OAAOA,gBAAO,CAACC,YAAY,CAAC;IAC1BC,KAAK,EAAEL,eAAe;IACtBC,MAAM,EAAEA,MAAM,CAACK,OAAO,CACpBL,MAAM,CAACM,KAAK,CAAC,CAAC,EACdN,MAAM,CAACO,SAAS,CAAC,CAAC,EAClBP,MAAM,CAACQ,QAAQ,CAAC,CAAC,EACjBR,MAAM,CAACS,MAAM,CACX,CAAC;MACCL,KAAK;MACLM,OAAO;MACPH,SAAS;MACTI,KAAK;MACL,GAAGC;IACL,CAAC,KAAK;MACJ,IAAI/C,GAAG,GAAI,GAAEuC,KAAM,SAAQG,SAAU,OAAMG,OAAQ,EAAC;MACpD,IAAIG,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAAC3B,MAAM,EAAE;QAC5BpB,GAAG,IAAK,KAAIN,IAAI,CAACwD,SAAS,CAACH,IAAI,EAAE,IAAI,EAAE,CAAC,CAAE,EAAC;MAC7C;MACA,IAAID,KAAK,EAAE9C,GAAG,IAAK,KAAI8C,KAAM,EAAC;MAC9B,OAAO9C,GAAG;IACZ,CACF,CACF,CAAC;IACDoC,UAAU,EAAE,CAAC,IAAIA,UAAU,CAACe,OAAO,CAAC,CAAC;EACvC,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACe,SAASC,OAAOA,CAACC,aAAa,EAAEC,OAAO,EAAE;EACtD,MAAMrC,GAAG,GAAG,IAAAsC,gBAAQ,EAAC,IAAAC,aAAK,EAACF,OAAO,CAAC,EAAE;IACnCG,YAAY,EAAEA,CAAA,KAAMrD,OAAO,CAACX,OAAO,CAAC,CAAC,CAAC,CAAC;IACvCiE,YAAY,EAAE,EAAE;IAChBC,UAAU,EAAE,IAAI;IAChBC,eAAe,EAAE;EACnB,CAAC,CAAC;;EAEF;EACA;EACA;EACA,IAAI3C,GAAG,CAAC4C,MAAM,KAAK9B,SAAS,EAAE;IAC5Bd,GAAG,CAAC4C,MAAM,GAAG5B,gBAAgB,CAAC;MAC5BC,eAAe,EAAEjB,GAAG,CAAC6C;IACvB,CAAC,CAAC;EACJ;EAEA,MAAMC,SAAS,GAAG9C,GAAG,CAAC8C,SAAS,IAAI1E,YAAY,CAACgE,aAAa,CAAC/D,OAAO,CAAC;EACtE,IAAA0E,uBAAY,EAACD,SAAS,CAAC;;EAEvB;EACA,MAAM;IAAEE,UAAU;IAAEzE,IAAI,EAAE0E;EAAW,CAAC,GAAGb,aAAa,CAACc,MAAM;EAE7D,MAAMC,YAAY,GAAGxE,WAAE,CAACyE,UAAU,CAAE,GAAEH,UAAW,gBAAe,CAAC,GAC5D,8BAA6BD,UAAW,iBAAgB,GAAG,EAAE;EAElE,MAAMK,KAAK,GAAGrD,GAAG,CAACsD,qBAAqB,GACnC,IAAIC,cAAK,CAACvD,GAAG,CAAC2C,eAAe,CAAC,GAAG,IAAI;EAEzC,MAAMa,YAAY,GAAG3E,mBAAmB,CAACoE,UAAU,CAAC;EAEpD,OAAO,OAAOpD,GAAG,EAAEd,GAAG,EAAE0E,IAAI,KAAK;IAC/B,IAAI;MACF;MACA1E,GAAG,CAAC2E,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC;MAEpC3E,GAAG,CAAC4E,MAAM,CAAC,WAAW,EAAE9D,GAAG,CAAC+D,SAAS,CAAC,CAAC,CAAC;MAExC,IAAIC,QAAQ;MACZ,IAAIR,KAAK,EAAE;QACTQ,QAAQ,GAAG7D,GAAG,CAACsD,qBAAqB,CAACzD,GAAG,CAAC;QACzC,IAAIgE,QAAQ,EAAE;UACZ,MAAMC,IAAI,GAAGT,KAAK,CAACtD,GAAG,CAAC8D,QAAQ,CAAC;UAChC,IAAIC,IAAI,KAAK,IAAI,EAAE;YACjB,MAAM;cAAEC,MAAM;cAAEC;YAAO,CAAC,GAAGF,IAAI;YAC/B,IAAI9D,GAAG,CAACiE,KAAK,IAAIrE,kBAAkB,CAACC,GAAG,CAAC,EAAE;cACxCd,GAAG,CAAC2E,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;cACpC3E,GAAG,CAAC2E,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC;cACjC,IAAIM,MAAM,KAAK,GAAG,EAAEjF,GAAG,CAACiF,MAAM,CAACA,MAAM,CAAC;cACtCjF,GAAG,CAACmF,IAAI,CAACH,MAAM,CAAC;YAClB,CAAC,MAAM;cACL,MAAM,IAAI5E,OAAO,CAAC,CAACgF,IAAI,EAAEC,MAAM,KAAK;gBAClC,IAAAC,sBAAgB,EAACN,MAAM,EAAE,CAACO,KAAK,EAAEC,IAAI,KAAK;kBACxC,IAAID,KAAK,EAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,KACpB;oBACH,IAAIE,CAAC,GAAGD,IAAI,CAACE,QAAQ,CAAC,CAAC;oBACvB,IAAI,CAACzE,GAAG,CAACiE,KAAK,EAAE;sBACd;sBACA;sBACA;sBACA,MAAMS,KAAK,GAAG,IAAIC,MAAM,CAACZ,MAAM,CAACa,KAAK,EAAE,GAAG,CAAC;sBAC3CJ,CAAC,GAAGA,CAAC,CAACK,OAAO,CAACH,KAAK,EAAE7E,GAAG,CAAC+E,KAAK,CAAC;oBACjC;oBACA,IAAIZ,MAAM,KAAK,GAAG,EAAEjF,GAAG,CAACiF,MAAM,CAACA,MAAM,CAAC;oBACtCjF,GAAG,CAACmF,IAAI,CAACM,CAAC,CAAC;oBACXL,IAAI,CAAC,CAAC;kBACR;gBACF,CAAC,CAAC;cACJ,CAAC,CAAC;YACJ;YACA;UACF;QACF;MACF;MAEA,MAAM,CAAC;QACLW,cAAc;QACdC,YAAY;QACZC;MACF,CAAC,EAAE;QACDvF,MAAM;QACND;MACF,CAAC,CAAC,GAAG,MAAML,OAAO,CAAC8F,GAAG,CAAC,CACrBjF,GAAG,CAACwC,YAAY,CAAC3C,GAAG,EAAEjC,eAAe,CAAC,EACtCqB,aAAa,CAAC6D,SAAS,CAAC5D,GAAG,CAAC,CAC7B,CAAC;MAEF,IAAIgG,MAAM;;MAEV;MACA;MACA;MACA;MACA,IAAIC,WAAW;MACf,MAAMC,YAAY,GAAG,IAAArF,WAAG,EAAChB,GAAG,CAACsG,MAAM,EAAE,6BAA6B,CAAC;MACnE,IAAID,YAAY,EAAE;QAChBD,WAAW,GAAG,IAAAG,iBAAS,EACrBF,YAAY,CAACG,MAAM,CAAC;UAClBN,GAAG,EAAE,KAAK;UACVE,WAAW,EAAE;QACf,CAAC,CAAC,CAACK,gBAAgB,EAClBC,IAAI,IAAKA,IAAI,CAACC,MAAM,CAACC,GAAG,CAAC,CAAC;UAAEC;QAAK,CAAC,KAAKA,IAAI,CAC9C,CAAC;MACH,CAAC,MAAM,IAAIpC,YAAY,EAAE2B,WAAW,GAAG3B,YAAY,CAAC,KAC/C2B,WAAW,GAAG,CAAC,CAAC;;MAErB;MACA,IAAIU,GAAG,GAAG7F,GAAG,CAAC8F,WAAW;MACzB,MAAMC,UAAU,GAAG;QACjBlG,GAAG;QACHmG,KAAK,EAAE,IAAAC,iBAAS,EAACjB,YAAY,IAAI,CAAC,CAAC,CAAC;QAEpC;QACAkB,MAAM,EAAE,EAAE;QAEVf;MACF,CAAC;MACD,IAAIgB,MAAM;MACV,IAAIN,GAAG,EAAE;QACP,MAAMO,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;QAE3B,MAAMC,UAAU,GAAG,MAAAA,CAAA,KAAY;UAC7BR,UAAU,CAACG,MAAM,GAAG,EAAE;UACtB,OAAO,IAAI/G,OAAO,CAAC,CAACX,OAAO,EAAEY,MAAM,KAAK;YACtC,MAAMoH,cAAc,GAAG,IAAAC,8BAAsB,gBAC3C,IAAA9I,WAAA,CAAA+I,GAAA,EAAC1J,iBAAA,CAAA2J,mBAAmB;cAClB3B,YAAY,EAAEe,UAAU,CAACC,KAAM;cAC/BD,UAAU,EAAEA,UAAW;cAAAa,QAAA,eAEvB,IAAAjJ,WAAA,CAAA+I,GAAA,EAACnJ,QAAA,CAAAsJ,YAAY;gBAAChG,QAAQ,EAAEhB,GAAG,CAACvB,GAAI;gBAAAsI,QAAA,eAC9B,IAAAjJ,WAAA,CAAA+I,GAAA,EAACb,GAAG,IAAE;cAAC,CACK;YAAC,CACI,CAAC,EACtB;cACEiB,UAAU,EAAEA,CAAA,KAAMtI,OAAO,CAACgI,cAAc,CAAC;cACzCO,OAAO,EAAE3H;YACX,CACF,CAAC;UACH,CAAC,CAAC;QACJ,CAAC;QAED,IAAI4H,QAAQ,GAAG,CAAC;QAChB,IAAIC,MAAM,GAAG,KAAK;QAClB,OAAOD,QAAQ,GAAGhH,GAAG,CAACyC,YAAY,EAAE,EAAEuE,QAAQ,EAAE;UAC9Cb,MAAM,GAAG,MAAMI,UAAU,CAAC,CAAC,CAAC,CAAC;;UAE7B,IAAI,CAACR,UAAU,CAACmB,KAAK,EAAE;;UAEvB;UACA,MAAMC,OAAO,GAAGnH,GAAG,CAAC0C,UAAU,GAAG0D,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;UACtDW,MAAM,GAAGE,OAAO,IAAI,CAAC,IAAI,EAAC,MAAMhI,OAAO,CAACiI,IAAI,CAAC,CAC3CjI,OAAO,CAACkI,UAAU,CAACtB,UAAU,CAACuB,OAAO,CAAC,EACtC,IAAAC,cAAK,EAACJ,OAAO,CAAC,CAACK,IAAI,CAAC,MAAM,KAAK,CAAC,CACjC,CAAC;UACF,IAAIP,MAAM,EAAE;UACZ;QACF;;QAEA,IAAIQ,MAAM;QACV,IAAI1B,UAAU,CAACmB,KAAK,EAAE;UACpB;UACA;UACA;UACAf,MAAM,GAAG,MAAMI,UAAU,CAAC,CAAC;UAE3BkB,MAAM,GAAGR,MAAM,GAAI,uBAAsBjH,GAAG,CAAC0C,UAAW,YAAW,GAC9D,wBAAuB1C,GAAG,CAACyC,YAAa,WAAU;QACzD,CAAC,MAAMgF,MAAM,GAAI,oBAAmBT,QAAQ,GAAG,CAAE,WAAU;QAE3DhH,GAAG,CAAC4C,MAAM,CAAC8E,GAAG,CAAC3B,UAAU,CAACmB,KAAK,GAAG,MAAM,GAAG,MAAM,EAAEO,MAAM,CAAC;QAE1D5B,GAAG,GAAG,EAAE;QACRM,MAAM,CAACwB,IAAI,CAAC,IAAIC,gBAAQ,CAAC;UACvBC,KAAK,EAAEA,CAACC,KAAK,EAAEC,CAAC,EAAE5D,IAAI,KAAK;YACzB0B,GAAG,IAAIiC,KAAK,CAACrD,QAAQ,CAAC,CAAC;YACvBN,IAAI,CAAC,CAAC;UACR;QACF,CAAC,CAAC,CAAC;;QAEH;AACR;QACQe,MAAM,GAAG8C,mBAAM,CAACC,YAAY,CAAC,CAAC;MAChC;;MAEA;AACN;AACA;AACA;AACA;MACM,MAAMC,OAAO,GAAG,IAAAC,4BAAW,EAAC;QAC1B3E,YAAY,EAAE2B,WAAW;QACzBiD,MAAM,EAAEtD,cAAc,IAAIlH,eAAe;QACzCyK,MAAM,EAAEtC,UAAU,CAACC;MACrB,CAAC,EAAE;QACDsC,cAAc,EAAE,IAAI;QACpBC,MAAM,EAAE;MACV,CAAC,CAAC;MACF9I,MAAM,CAAC+I,MAAM,CAACnJ,kBAAK,CAACoJ,IAAI,CAACC,YAAY,CAACR,OAAO,EAAE,MAAM,CAAC,CAAC;MACvDzI,MAAM,CAACkJ,MAAM,CAAC,CAAC;MACf,MAAMC,GAAG,GAAGvJ,kBAAK,CAACoJ,IAAI,CAACI,QAAQ,CAAE,GAAErJ,EAAG,GAAEC,MAAM,CAACyD,MAAM,CAACY,IAAK,EAAC,CAAC;MAE7D,MAAMgF,QAAQ,GAAG,IAAIC,GAAG,CAAC,CAAC;;MAE1B;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA,CACE,MAAM,EACN,GAAGhD,UAAU,CAACG,MAAM,CACrB,CAAC8C,OAAO,CAAElB,KAAK,IAAK;QACnB,MAAMpC,MAAM,GAAGP,WAAW,CAAC2C,KAAK,CAAC;QACjC,IAAIpC,MAAM,EAAEA,MAAM,CAACsD,OAAO,CAAEC,KAAK,IAAKH,QAAQ,CAACI,GAAG,CAACD,KAAK,CAAC,CAAC;MAC5D,CAAC,CAAC;MAEF,IAAIE,gBAAgB,GAAG,EAAE;MACzB,IAAIC,iBAAiB,GAAG,EAAE;MAC1BN,QAAQ,CAACE,OAAO,CAAElB,KAAK,IAAK;QAC1B,IAAIA,KAAK,CAACuB,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC1BF,gBAAgB,IAAK,eAAcnG,UAAW,GAAE8E,KAAM,qBAAoB;QAC5E,CAAC,MAAM,IACLA,KAAK,CAACuB,QAAQ,CAAC,KAAK;QAClB;QACA;QAAA,GACG,CAACvB,KAAK,CAACuB,QAAQ,CAAC,gBAAgB,CAAC,EACtC;UACAD,iBAAiB,IAAK,gBAAepG,UAAW,GAAE8E,KAAM,2CAA0C;QACpG;MACF,CAAC,CAAC;MAEF,MAAMwB,oBAAoB,GAAG9I,iBAAiB,CAACuE,YAAY,CAAC;MAE5D,MAAMwE,WAAW,GAAGvJ,GAAG,CAACwJ,OAAO,GAC7B,gDAAgD,GAC9C,EAAE;MAEN,MAAMjF,IAAI,GAAI;AACpB;AACA;AACA,cAAc+E,oBAAoB,CAACvL,gBAAgB,CAACI,SAAS,CAAE;AAC/D,cAAc+G,MAAM,GAAGA,MAAM,CAACuE,KAAK,CAAChF,QAAQ,CAAC,CAAC,GAAG,EAAG;AACpD,cAAcS,MAAM,GAAGA,MAAM,CAACwE,IAAI,CAACjF,QAAQ,CAAC,CAAC,GAAG,EAAG;AACnD;AACA,cAActB,YAAa;AAC3B,cAAcgG,gBAAiB;AAC/B,cAAcI,WAAY;AAC1B;AACA;AACA;AACA;AACA;AACA,iDAAiDX,GAAI;AACrD;AACA;AACA,cAAcU,oBAAoB,CAACvL,gBAAgB,CAACE,SAAS,CAAE;AAC/D,mCAAmC4H,GAAG,IAAI,EAAG;AAC7C,cAAcuD,iBAAkB;AAChC,cAAcE,oBAAoB,CAACvL,gBAAgB,CAACG,OAAO,CAAE;AAC7D;AACA,gBAAgB;MAEV,MAAM8F,MAAM,GAAG+B,UAAU,CAAC/B,MAAM,IAAI,GAAG;MACvC,IAAIA,MAAM,KAAK,GAAG,EAAEjF,GAAG,CAACiF,MAAM,CAACA,MAAM,CAAC;MAEtC,IAAIH,QAAQ,IAAIG,MAAM,GAAG,GAAG,EAAE;QAC5B;QACA;QACA,MAAM,IAAI7E,OAAO,CAAC,CAACgF,IAAI,EAAEC,MAAM,KAAK;UAClC,IAAAuF,oBAAc,EAACpF,IAAI,EAAE,CAACD,KAAK,EAAEP,MAAM,KAAK;YACtC,IAAIO,KAAK,EAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,KACpB;cACHP,MAAM,CAACa,KAAK,GAAG/E,GAAG,CAAC+E,KAAK,CAAC,CAAC;cAC1BvB,KAAK,CAAC6F,GAAG,CAAC;gBAAEnF,MAAM;gBAAEC;cAAO,CAAC,EAAEH,QAAQ,CAAC3E,GAAG,CAAC;cAC3CiF,IAAI,CAAC,CAAC;YACR;UACF,CAAC,CAAC;QACJ,CAAC,CAAC;MACJ;;MAEA;MACA;MACA;MACApF,GAAG,CAACmF,IAAI,CAACK,IAAI,CAAC;IAChB,CAAC,CAAC,OAAOD,KAAK,EAAE;MACdb,IAAI,CAACa,KAAK,CAAC;IACb;EACF,CAAC;AACH"}
1	+ {"version":3,"file":"renderer.js","names":["_fs","_interopRequireDefault","require","_path","_stream","_zlib","_winston","_reactGlobalState","_jsUtils","_lodash","_config","_nodeForge","_server","_reactHelmet","_server2","_serializeJavascript","_buildInfo","_Cache","_jsxRuntime","sanitizedConfig","omit","config","SCRIPT_LOCATIONS","exports","ServerSsrContext","SsrContext","chunks","status","constructor","req","chunkGroups","initialState","cloneDeep","getBuildInfo","context","url","path","resolve","JSON","parse","fs","readFileSync","readChunkGroupsJson","buildDir","res","err","prepareCipher","key","Promise","reject","forge","random","getBytes","iv","cipher","createCipher","start","isBrotliAcceptable","acceptable","get","ops","split","i","length","type","priority","trim","parseFloat","groupExtraScripts","scripts","BODY_OPEN","DEFAULT","HEAD_OPEN","script","isString","code","location","undefined","Error","newDefaultLogger","defaultLogLevel","format","transports","winston","createLogger","level","combine","splat","timestamp","colorize","printf","message","stack","rest","Object","keys","stringify","Console","factory","webpackConfig","options","defaults","clone","beforeRender","maxSsrRounds","ssrTimeout","staticCacheSize","logger","defaultLoggerLogLevel","buildInfo","setBuildInfo","publicPath","outputPath","output","manifestLink","existsSync","cache","staticCacheController","Cache","CHUNK_GROUPS","next","set","cookie","csrfToken","cacheRef","data","buffer","noCsp","send","done","failed","brotliDecompress","error","html","h","toString","regex","RegExp","nonce","replace","configToInject","extraScripts","all","helmet","webpackStats","locals","mapValues","toJson","namedChunkGroups","item","assets","map","name","App","Application","appHtmlMarkup","ssrContext","stream","ssrStart","Date","now","App2","renderPass","pipeableStream","renderToPipeableStream","jsx","GlobalStateProvider","state","children","StaticRouter","onAllReady","onError","ssrRound","bailed","dirty","timeout","race","allSettled","pending","timer","then","logMsg","log","pipe","Writable","write","chunk","_","Helmet","renderStatic","payload","serializeJs","CONFIG","ISTATE","ignoreFunction","unsafe","update","util","createBuffer","finish","INJ","encode64","chunkSet","Set","forEach","asset","add","styleChunkString","scriptChunkString","endsWith","grouppedExtraScripts","faviconLink","favicon","title","meta","brotliCompress","b"],"sources":["../../../src/server/renderer.tsx"],"sourcesContent":["/*\n ExpressJS middleware for server-side rendering of a ReactJS app.\n /\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { type Request, type RequestHandler } from 'express';\nimport { type ComponentType } from 'react';\nimport { Writable } from 'stream';\nimport { brotliCompress, brotliDecompress } from 'zlib';\nimport winston from 'winston';\n\nimport { GlobalStateProvider, SsrContext } from '@dr.pogodin/react-global-state';\nimport { timer } from '@dr.pogodin/js-utils';\n\nimport {\n clone,\n cloneDeep,\n defaults,\n isString,\n get,\n mapValues,\n omit,\n} from 'lodash';\n\nimport config from 'config';\nimport forge from 'node-forge';\n\nimport { type PipeableStream, renderToPipeableStream } from 'react-dom/server';\nimport { Helmet } from 'react-helmet';\nimport { StaticRouter } from 'react-router-dom/server';\nimport serializeJs from 'serialize-javascript';\nimport { type BuildInfoT, setBuildInfo } from 'utils/isomorphy/buildInfo';\n\nimport { type ChunkGroupsT, type SsrContextT } from 'utils/globalState';\n\nimport { type Configuration } from 'webpack';\n\nimport Cache from './Cache';\n\nconst sanitizedConfig = omit(config, 'SECRET');\n\n// Note: These type definitions for logger are copied from Winston logger,\n// then simplified to make it easier to fit an alternative logger into this\n// interface.\ninterface LogMethodI {\n (level: string, message: string, ...meta: any[]): void;\n}\ninterface LeveledLogMethodI {\n (message: string, ...meta: any[]): void;\n}\n\nexport interface LoggerI {\n debug: LeveledLogMethodI;\n error: LeveledLogMethodI;\n info: LeveledLogMethodI;\n log: LogMethodI;\n warn: LeveledLogMethodI;\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention\nexport enum SCRIPT_LOCATIONS {\n BODY_OPEN = 'BODY_OPEN',\n DEFAULT = 'DEFAULT',\n HEAD_OPEN = 'HEAD_OPEN',\n}\n\nclass ServerSsrContext<StateT>\n extends SsrContext<StateT>\n implements SsrContextT<StateT> {\n chunkGroups: ChunkGroupsT;\n\n chunks: string[] = [];\n\n req: Request;\n\n status: number = 200;\n\n constructor(\n req: Request,\n chunkGroups: ChunkGroupsT,\n initialState?: StateT,\n ) {\n super(cloneDeep(initialState) \|\| ({} as StateT));\n this.chunkGroups = chunkGroups;\n this.req = req;\n }\n}\n\ntype ScriptT = {\n code: string;\n location: SCRIPT_LOCATIONS;\n};\n\n/\n Reads build-time information about the app. This information is generated\n * by our standard Webpack config for apps, and it is written into\n * \".build-info\" file in the context folder specified in Webpack config.\n * At the moment, that file contains build timestamp and a random 32-bit key,\n * suitable for cryptographical use.\n * @param context Webpack context path used during the build.\n * @return Resolves to the build-time information.\n /\nfunction getBuildInfo(context: string) {\n const url = path.resolve(context, '.build-info');\n return JSON.parse(fs.readFileSync(url, 'utf8'));\n}\n\n/\n Attempts to read from disk the named chunk groups mapping generated\n * by Webpack during the compilation.\n * It will not work for development builds, where these stats should be captured\n * via compilator callback.\n * @param buildDir\n * @return\n /\nfunction readChunkGroupsJson(buildDir: string) {\n const url = path.resolve(buildDir, '__chunk_groups__.json');\n let res;\n try {\n res = JSON.parse(fs.readFileSync(url, 'utf8'));\n } catch (err) {\n res = null;\n }\n return res;\n}\n\n/\n Prepares a new Cipher for data encryption.\n * @param key Encryption key (32-bit random key is expected, see\n * node-forge documentation, in case of doubts).\n * @return Resolves to the object with two fields:\n * 1. cipher - a new Cipher, ready for encryption;\n * 2. iv - initial vector used by the cipher.\n /\nfunction prepareCipher(key: string) {\n return new Promise((resolve, reject) => {\n forge.random.getBytes(32, (err, iv) => {\n if (err) reject(err);\n else {\n const cipher = forge.cipher.createCipher('AES-CBC', key);\n cipher.start({ iv });\n resolve({ cipher, iv });\n }\n });\n });\n}\n\n/\n Given an incoming HTTP requests, it deduces whether Brotli-encoded responses\n * are acceptable to the caller.\n * @param {object} req\n * @return {boolean}\n * @ignore\n /\nexport function isBrotliAcceptable(req: Request) {\n const acceptable = req.get('accept-encoding');\n if (acceptable) {\n const ops = acceptable.split(',');\n for (let i = 0; i < ops.length; ++i) {\n const [type, priority] = ops[i].trim().split(';q=');\n if ((type === '' \|\| type === 'br')\n && (!priority \|\| parseFloat(priority) > 0)) {\n return true;\n }\n }\n }\n return false;\n}\n\n/*\n Given an array of extra script strings / objects, it returns an object with\n * arrays of scripts to inject in different HTML template locations. During\n * the script groupping it also filters out any empty scripts.\n * @param {({\n * code: string;\n * location: string;\n * }\|string)[]} [scripts=[]]\n * @return {{\n * BODY_OPEN: string[];\n * DEFAULT: string[];\n * HEAD_OPEN: string[];\n * }}\n /\nfunction groupExtraScripts(scripts: Array<string \| ScriptT> = []) {\n const res = {\n [SCRIPT_LOCATIONS.BODY_OPEN]: '',\n [SCRIPT_LOCATIONS.DEFAULT]: '',\n [SCRIPT_LOCATIONS.HEAD_OPEN]: '',\n };\n for (let i = 0; i < scripts.length; ++i) {\n const script = scripts[i];\n if (isString(script)) {\n if (script) res[SCRIPT_LOCATIONS.DEFAULT] += script;\n } else if (script.code) {\n if (res[script.location] !== undefined) {\n res[script.location] += script.code;\n } else throw Error(`Invalid location \"${script.location}\"`);\n }\n }\n return res;\n}\n\n/\n Creates a new default (Winston) logger.\n * @param {object} [options={}]\n * @param {string} [options.defaultLogLevel='info']\n * @return {object}\n /\nexport function newDefaultLogger({\n defaultLogLevel = 'info',\n} = {}) {\n const { format, transports } = winston;\n return winston.createLogger({\n level: defaultLogLevel,\n format: format.combine(\n format.splat(),\n format.timestamp(),\n format.colorize(),\n format.printf(\n ({\n level,\n message,\n timestamp,\n stack,\n ...rest\n }) => {\n let res = `${level}\\t(at ${timestamp}):\\t${message}`;\n if (Object.keys(rest).length) {\n res += `\\n${JSON.stringify(rest, null, 2)}`;\n }\n if (stack) res += `\\n${stack}`;\n return res;\n },\n ),\n ),\n transports: [new transports.Console()],\n });\n}\n\ntype ConfigT = {\n [key: string]: ConfigT \| string;\n};\n\ntype BeforeRenderResT = {\n configToInject?: ConfigT;\n extraScripts?: Array<ScriptT \| string>;\n initialState?: any;\n};\n\ntype BeforeRenderT =\n(req: Request, config: ConfigT) => BeforeRenderResT \| Promise<BeforeRenderResT>;\n\ntype CacheRefT = {\n key: string;\n maxage?: number;\n};\n\nexport type OptionsT = {\n Application?: ComponentType;\n beforeRender?: BeforeRenderT;\n buildInfo?: BuildInfoT;\n defaultLoggerLogLevel?: string;\n favicon?: string;\n logger?: LoggerI;\n maxSsrRounds?: number;\n noCsp?: boolean;\n staticCacheSize?: number;\n ssrTimeout?: number;\n staticCacheController?: (req: Request) => CacheRefT;\n};\n\n/\n Creates the middleware.\n * @param webpackConfig\n * @param options Additional options:\n * @param [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param [options.buildInfo] \"Build info\" object to use. If provided,\n * it will be used, instead of trying to load from the filesystem the one\n * generated by the Webpack build. It is intended for test environments,\n * where passing this stuff via file system is no bueno.\n * @param [options.favicon] `true` will include favicon\n * link into the rendered HTML templates.\n * @param [options.noCsp] `true` means that no\n * Content-Security-Policy (CSP) is used by server, thus the renderer\n * may cut a few corners.\n * @param [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @param [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` – the cache key for the response;\n * - `maxage?: number` – the maximum age of cached result in ms.\n * If undefined - infinite age is assumed.\n * @return Created middleware.\n /\nexport default function factory(\n webpackConfig: Configuration,\n options: OptionsT,\n): RequestHandler {\n const ops: OptionsT = defaults(clone(options), {\n beforeRender: () => Promise.resolve({}),\n maxSsrRounds: 10,\n ssrTimeout: 1000,\n staticCacheSize: 1.e7,\n });\n\n // Note: in normal use the default logger is created and set in the root\n // server function, and this initialization is for testing uses, where\n // renderer is imported directly.\n if (ops.logger === undefined) {\n ops.logger = newDefaultLogger({\n defaultLogLevel: ops.defaultLoggerLogLevel,\n });\n }\n\n const buildInfo = ops.buildInfo \|\| getBuildInfo(webpackConfig.context!);\n setBuildInfo(buildInfo);\n\n // publicPath from webpack.output has a trailing slash at the end.\n const { publicPath, path: outputPath } = webpackConfig.output!;\n\n const manifestLink = fs.existsSync(`${outputPath}/manifest.json`)\n ? `<link rel=\"manifest\" href=\"${publicPath}manifest.json\">` : '';\n\n interface BufferWithNonce extends Buffer {\n nonce: string;\n }\n\n const cache = ops.staticCacheController\n ? new Cache<{\n buffer: BufferWithNonce;\n status: number;\n }>(ops.staticCacheSize!)\n : null;\n\n const CHUNK_GROUPS = readChunkGroupsJson(outputPath!);\n\n return async (req, res, next) => {\n try {\n // Ensures any caches always revalidate HTML markup before reuse.\n res.set('Cache-Control', 'no-cache');\n\n res.cookie('csrfToken', req.csrfToken());\n\n let cacheRef: CacheRefT \| undefined;\n if (cache) {\n cacheRef = ops.staticCacheController!(req);\n if (cacheRef) {\n const data = cache.get(cacheRef);\n if (data !== null) {\n const { buffer, status } = data;\n if (ops.noCsp && isBrotliAcceptable(req)) {\n res.set('Content-Type', 'text/html');\n res.set('Content-Encoding', 'br');\n if (status !== 200) res.status(status);\n res.send(buffer);\n } else {\n await new Promise<void>((done, failed) => {\n brotliDecompress(buffer, (error, html) => {\n if (error) failed(error);\n else {\n let h = html.toString();\n if (!ops.noCsp) {\n // TODO: Starting from Node v15 we'll be able to use string's\n // .replaceAll() method instead relying on reg. expression for\n // global matching.\n const regex = new RegExp(buffer.nonce, 'g');\n h = h.replace(regex, (req as any).nonce);\n }\n if (status !== 200) res.status(status);\n res.send(h);\n done();\n }\n });\n });\n }\n return;\n }\n }\n }\n\n const [{\n configToInject,\n extraScripts,\n initialState,\n }, {\n cipher,\n iv,\n }] = await Promise.all([\n ops.beforeRender!(req, sanitizedConfig as any),\n prepareCipher(buildInfo.key) as Promise<any>,\n ]);\n\n let helmet;\n\n // Gets the mapping between code chunk names and their asset files.\n // These data come from the Webpack compilation, either from the stats\n // attached to the request (in dev mode), or from a file output during\n // the build (in prod mode).\n let chunkGroups: ChunkGroupsT;\n const webpackStats = get(res.locals, 'webpack.devMiddleware.stats');\n if (webpackStats) {\n chunkGroups = mapValues(\n webpackStats.toJson({\n all: false,\n chunkGroups: true,\n }).namedChunkGroups,\n (item) => item.assets.map(({ name }: { name: string }) => name),\n );\n } else if (CHUNK_GROUPS) chunkGroups = CHUNK_GROUPS;\n else chunkGroups = {};\n\n / Optional server-side rendering. /\n const App = ops.Application;\n let appHtmlMarkup: string = '';\n const ssrContext = new ServerSsrContext(req, chunkGroups, initialState);\n let stream: PipeableStream;\n if (App) {\n const ssrStart = Date.now();\n\n // TODO: Somehow, without it TS does not realise that\n // App has been checked to exist.\n const App2 = App;\n\n const renderPass = async () => {\n ssrContext.chunks = [];\n return new Promise<PipeableStream>((resolve, reject) => {\n const pipeableStream = renderToPipeableStream(\n <GlobalStateProvider\n initialState={ssrContext.state}\n ssrContext={ssrContext}\n >\n <StaticRouter location={req.url}>\n <App2 />\n </StaticRouter>\n </GlobalStateProvider>,\n {\n onAllReady: () => resolve(pipeableStream),\n onError: reject,\n },\n );\n });\n };\n\n let ssrRound = 0;\n let bailed = false;\n for (; ssrRound < ops.maxSsrRounds!; ++ssrRound) {\n stream = await renderPass(); // eslint-disable-line no-await-in-loop\n\n if (!ssrContext.dirty) break;\n\n / eslint-disable no-await-in-loop /\n const timeout = ops.ssrTimeout! + ssrStart - Date.now();\n bailed = timeout <= 0 \|\| !await Promise.race([\n Promise.allSettled(ssrContext.pending),\n timer(timeout).then(() => false),\n ]);\n if (bailed) break;\n / eslint-enable no-await-in-loop /\n }\n\n let logMsg;\n if (ssrContext.dirty) {\n // NOTE: In the case of incomplete SSR one more round is necessary\n // to ensure the correct hydration when some pending promises have\n // resolved and placed their data into the initial global state.\n stream = await renderPass();\n\n logMsg = bailed ? `SSR timed out after ${ops.ssrTimeout} second(s)`\n : `SSR bailed out after ${ops.maxSsrRounds} round(s)`;\n } else logMsg = `SSR completed in ${ssrRound + 1} round(s)`;\n\n ops.logger!.log(ssrContext.dirty ? 'warn' : 'info', logMsg);\n\n stream!.pipe(new Writable({\n write: (chunk, _, done) => {\n appHtmlMarkup += chunk.toString();\n done();\n },\n }));\n\n / This takes care about server-side rendering of page title and meta tags\n * (still demands injection into HTML template, which happens below). /\n helmet = Helmet.renderStatic();\n }\n\n / Encrypts data to be injected into HTML.\n * Keep in mind, that this encryption is no way secure: as the JS bundle\n * contains decryption key and is able to decode it at the client side.\n * Hovewer, for a number of reasons, encryption of injected data is still\n * better than injection of a plain text. */\n const payload = serializeJs({\n CHUNK_GROUPS: chunkGroups,\n CONFIG: configToInject \|\| sanitizedConfig,\n ISTATE: ssrContext.state,\n }, {\n ignoreFunction: true,\n unsafe: true,\n });\n cipher.update(forge.util.createBuffer(payload, 'utf8'));\n cipher.finish();\n const INJ = forge.util.encode64(`${iv}${cipher.output.data}`);\n\n const chunkSet = new Set<string>();\n\n // TODO: \"main\" chunk has to be added explicitly,\n // because unlike all other chunks they are not managed by <CodeSplit>\n // component, thus they are not added to the ssrContext.chunks\n // automatically. Actually, names of these entry chunks should be\n // read from Wepback config, as the end user may customize them,\n // remove or add other entry points, but it requires additional\n // efforts to figure out how to automatically order them right,\n // thus for now this handles the default config.\n [\n 'main',\n ...ssrContext.chunks,\n ].forEach((chunk) => {\n const assets = chunkGroups[chunk];\n if (assets) assets.forEach((asset) => chunkSet.add(asset));\n });\n\n let styleChunkString = '';\n let scriptChunkString = '';\n chunkSet.forEach((chunk) => {\n if (chunk.endsWith('.css')) {\n styleChunkString += `<link href=\"${publicPath}${chunk}\" rel=\"stylesheet\">`;\n } else if (\n chunk.endsWith('.js')\n // In dev mode HMR adds JS updates into asset arrays,\n // and they (updates) should be ignored.\n && !chunk.endsWith('.hot-update.js')\n ) {\n scriptChunkString += `<script src=\"${publicPath}${chunk}\" type=\"application/javascript\"></script>`;\n }\n });\n\n const grouppedExtraScripts = groupExtraScripts(extraScripts);\n\n const faviconLink = ops.favicon ? (\n '<link rel=\"shortcut icon\" href=\"/favicon.ico\">'\n ) : '';\n\n const html = `<!DOCTYPE html>\n <html lang=\"en\">\n <head>\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.HEAD_OPEN]}\n ${helmet ? helmet.title.toString() : ''}\n ${helmet ? helmet.meta.toString() : ''}\n <meta name=\"theme-color\" content=\"#FFFFFF\">\n ${manifestLink}\n ${styleChunkString}\n ${faviconLink}\n <meta charset=\"utf-8\">\n <meta\n content=\"width=device-width,initial-scale=1.0\"\n name=\"viewport\"\n >\n <meta itemprop=\"drpruinj\" content=\"${INJ}\">\n </head>\n <body>\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.BODY_OPEN]}\n <div id=\"react-view\">${appHtmlMarkup}</div>\n ${scriptChunkString}\n ${grouppedExtraScripts[SCRIPT_LOCATIONS.DEFAULT]}\n </body>\n </html>`;\n\n const status = ssrContext.status \|\| 200;\n if (status !== 200) res.status(status);\n\n if (cacheRef && status < 500) {\n // Note: waiting for the caching to complete is not strictly necessary,\n // but it greately simplifies testing, and error reporting.\n await new Promise<void>((done, failed) => {\n brotliCompress(html, (error, buffer) => {\n const b = buffer as BufferWithNonce;\n if (error) failed(error);\n else {\n b.nonce = (req as any).nonce; // eslint-disable-line no-param-reassign\n cache!.add({ buffer: b, status }, cacheRef!.key, buffer.length);\n done();\n }\n });\n });\n }\n\n // Note: as caching code above may throw in some cases, sending response\n // before it completes will likely hide the error, making it difficult\n // to debug. Thus, at least for now, lets send response after it.\n res.send(html);\n } catch (error) {\n next(error);\n }\n };\n}\n"],"mappings":";;;;;;;;;;AAIA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEAA,OAAA;AACAA,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,iBAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAEA,IAAAO,OAAA,GAAAP,OAAA;AAUA,IAAAQ,OAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,UAAA,GAAAV,sBAAA,CAAAC,OAAA;AAEA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,YAAA,GAAAX,OAAA;AACA,IAAAY,QAAA,GAAAZ,OAAA;AACA,IAAAa,oBAAA,GAAAd,sBAAA,CAAAC,OAAA;AACA,IAAAc,UAAA,GAAAd,OAAA;AAEAA,OAAA;AAEAA,OAAA;AAEA,IAAAe,MAAA,GAAAhB,sBAAA,CAAAC,OAAA;AAA4B,IAAAgB,WAAA,GAAAhB,OAAA;AAvC5B;AACA;AACA;;AAuCA,MAAMiB,eAAe,GAAG,IAAAC,YAAI,EAACC,eAAM,EAAE,QAAQ,CAAC;;AAE9C;AACA;AACA;AAgBA;AAAA,IACYC,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,0BAAhBA,gBAAgB;EAAhBA,gBAAgB;EAAhBA,gBAAgB;EAAhBA,gBAAgB;EAAA,OAAhBA,gBAAgB;AAAA;AAM5B,MAAME,gBAAgB,SACZC,4BAAU,CACa;EAG/BC,MAAM,GAAa,EAAE;EAIrBC,MAAM,GAAW,GAAG;EAEpBC,WAAWA,CACTC,GAAY,EACZC,WAAyB,EACzBC,YAAqB,EACrB;IACA,KAAK,CAAC,IAAAC,iBAAS,EAACD,YAAY,CAAC,IAAK,CAAC,CAAY,CAAC;IAChD,IAAI,CAACD,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACD,GAAG,GAAGA,GAAG;EAChB;AACF;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASI,YAAYA,CAACC,OAAe,EAAE;EACrC,MAAMC,GAAG,GAAGC,aAAI,CAACC,OAAO,CAACH,OAAO,EAAE,aAAa,CAAC;EAChD,OAAOI,IAAI,CAACC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,GAAG,EAAE,MAAM,CAAC,CAAC;AACjD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASO,mBAAmBA,CAACC,QAAgB,EAAE;EAC7C,MAAMR,GAAG,GAAGC,aAAI,CAACC,OAAO,CAACM,QAAQ,EAAE,uBAAuB,CAAC;EAC3D,IAAIC,GAAG;EACP,IAAI;IACFA,GAAG,GAAGN,IAAI,CAACC,KAAK,CAACC,WAAE,CAACC,YAAY,CAACN,GAAG,EAAE,MAAM,CAAC,CAAC;EAChD,CAAC,CAAC,OAAOU,GAAG,EAAE;IACZD,GAAG,GAAG,IAAI;EACZ;EACA,OAAOA,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASE,aAAaA,CAACC,GAAW,EAAE;EAClC,OAAO,IAAIC,OAAO,CAAC,CAACX,OAAO,EAAEY,MAAM,KAAK;IACtCC,kBAAK,CAACC,MAAM,CAACC,QAAQ,CAAC,EAAE,EAAE,CAACP,GAAG,EAAEQ,EAAE,KAAK;MACrC,IAAIR,GAAG,EAAEI,MAAM,CAACJ,GAAG,CAAC,CAAC,KAChB;QACH,MAAMS,MAAM,GAAGJ,kBAAK,CAACI,MAAM,CAACC,YAAY,CAAC,SAAS,EAAER,GAAG,CAAC;QACxDO,MAAM,CAACE,KAAK,CAAC;UAAEH;QAAG,CAAC,CAAC;QACpBhB,OAAO,CAAC;UAAEiB,MAAM;UAAED;QAAG,CAAC,CAAC;MACzB;IACF,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,kBAAkBA,CAAC5B,GAAY,EAAE;EAC/C,MAAM6B,UAAU,GAAG7B,GAAG,CAAC8B,GAAG,CAAC,iBAAiB,CAAC;EAC7C,IAAID,UAAU,EAAE;IACd,MAAME,GAAG,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;IACjC,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,GAAG,CAACG,MAAM,EAAE,EAAED,CAAC,EAAE;MACnC,MAAM,CAACE,IAAI,EAAEC,QAAQ,CAAC,GAAGL,GAAG,CAACE,CAAC,CAAC,CAACI,IAAI,CAAC,CAAC,CAACL,KAAK,CAAC,KAAK,CAAC;MACnD,IAAI,CAACG,IAAI,KAAK,GAAG,IAAIA,IAAI,KAAK,IAAI,MAC9B,CAACC,QAAQ,IAAIE,UAAU,CAACF,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;QAC1C,OAAO,IAAI;MACb;IACF;EACF;EACA,OAAO,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASG,iBAAiBA,CAACC,OAAgC,GAAG,EAAE,EAAE;EAChE,MAAMzB,GAAG,GAAG;IACV,CAACtB,gBAAgB,CAACgD,SAAS,GAAG,EAAE;IAChC,CAAChD,gBAAgB,CAACiD,OAAO,GAAG,EAAE;IAC9B,CAACjD,gBAAgB,CAACkD,SAAS,GAAG;EAChC,CAAC;EACD,KAAK,IAAIV,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGO,OAAO,CAACN,MAAM,EAAE,EAAED,CAAC,EAAE;IACvC,MAAMW,MAAM,GAAGJ,OAAO,CAACP,CAAC,CAAC;IACzB,IAAI,IAAAY,gBAAQ,EAACD,MAAM,CAAC,EAAE;MACpB,IAAIA,MAAM,EAAE7B,GAAG,CAACtB,gBAAgB,CAACiD,OAAO,CAAC,IAAIE,MAAM;IACrD,CAAC,MAAM,IAAIA,MAAM,CAACE,IAAI,EAAE;MACtB,IAAI/B,GAAG,CAAC6B,MAAM,CAACG,QAAQ,CAAC,KAAKC,SAAS,EAAE;QACtCjC,GAAG,CAAC6B,MAAM,CAACG,QAAQ,CAAC,IAAIH,MAAM,CAACE,IAAI;MACrC,CAAC,MAAM,MAAMG,KAAK,CAAE,qBAAoBL,MAAM,CAACG,QAAS,GAAE,CAAC;IAC7D;EACF;EACA,OAAOhC,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASmC,gBAAgBA,CAAC;EAC/BC,eAAe,GAAG;AACpB,CAAC,GAAG,CAAC,CAAC,EAAE;EACN,MAAM;IAAEC,MAAM;IAAEC;EAAW,CAAC,GAAGC,gBAAO;EACtC,OAAOA,gBAAO,CAACC,YAAY,CAAC;IAC1BC,KAAK,EAAEL,eAAe;IACtBC,MAAM,EAAEA,MAAM,CAACK,OAAO,CACpBL,MAAM,CAACM,KAAK,CAAC,CAAC,EACdN,MAAM,CAACO,SAAS,CAAC,CAAC,EAClBP,MAAM,CAACQ,QAAQ,CAAC,CAAC,EACjBR,MAAM,CAACS,MAAM,CACX,CAAC;MACCL,KAAK;MACLM,OAAO;MACPH,SAAS;MACTI,KAAK;MACL,GAAGC;IACL,CAAC,KAAK;MACJ,IAAIjD,GAAG,GAAI,GAAEyC,KAAM,SAAQG,SAAU,OAAMG,OAAQ,EAAC;MACpD,IAAIG,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAAC9B,MAAM,EAAE;QAC5BnB,GAAG,IAAK,KAAIN,IAAI,CAAC0D,SAAS,CAACH,IAAI,EAAE,IAAI,EAAE,CAAC,CAAE,EAAC;MAC7C;MACA,IAAID,KAAK,EAAEhD,GAAG,IAAK,KAAIgD,KAAM,EAAC;MAC9B,OAAOhD,GAAG;IACZ,CACF,CACF,CAAC;IACDsC,UAAU,EAAE,CAAC,IAAIA,UAAU,CAACe,OAAO,CAAC,CAAC;EACvC,CAAC,CAAC;AACJ;AAkCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACe,SAASC,OAAOA,CAC7BC,aAA4B,EAC5BC,OAAiB,EACD;EAChB,MAAMxC,GAAa,GAAG,IAAAyC,gBAAQ,EAAC,IAAAC,aAAK,EAACF,OAAO,CAAC,EAAE;IAC7CG,YAAY,EAAEA,CAAA,KAAMvD,OAAO,CAACX,OAAO,CAAC,CAAC,CAAC,CAAC;IACvCmE,YAAY,EAAE,EAAE;IAChBC,UAAU,EAAE,IAAI;IAChBC,eAAe,EAAE;EACnB,CAAC,CAAC;;EAEF;EACA;EACA;EACA,IAAI9C,GAAG,CAAC+C,MAAM,KAAK9B,SAAS,EAAE;IAC5BjB,GAAG,CAAC+C,MAAM,GAAG5B,gBAAgB,CAAC;MAC5BC,eAAe,EAAEpB,GAAG,CAACgD;IACvB,CAAC,CAAC;EACJ;EAEA,MAAMC,SAAS,GAAGjD,GAAG,CAACiD,SAAS,IAAI5E,YAAY,CAACkE,aAAa,CAACjE,OAAQ,CAAC;EACvE,IAAA4E,uBAAY,EAACD,SAAS,CAAC;;EAEvB;EACA,MAAM;IAAEE,UAAU;IAAE3E,IAAI,EAAE4E;EAAW,CAAC,GAAGb,aAAa,CAACc,MAAO;EAE9D,MAAMC,YAAY,GAAG1E,WAAE,CAAC2E,UAAU,CAAE,GAAEH,UAAW,gBAAe,CAAC,GAC5D,8BAA6BD,UAAW,iBAAgB,GAAG,EAAE;EAMlE,MAAMK,KAAK,GAAGxD,GAAG,CAACyD,qBAAqB,GACnC,IAAIC,cAAK,CAGR1D,GAAG,CAAC8C,eAAgB,CAAC,GACtB,IAAI;EAER,MAAMa,YAAY,GAAG7E,mBAAmB,CAACsE,UAAW,CAAC;EAErD,OAAO,OAAOnF,GAAG,EAAEe,GAAG,EAAE4E,IAAI,KAAK;IAC/B,IAAI;MACF;MACA5E,GAAG,CAAC6E,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC;MAEpC7E,GAAG,CAAC8E,MAAM,CAAC,WAAW,EAAE7F,GAAG,CAAC8F,SAAS,CAAC,CAAC,CAAC;MAExC,IAAIC,QAA+B;MACnC,IAAIR,KAAK,EAAE;QACTQ,QAAQ,GAAGhE,GAAG,CAACyD,qBAAqB,CAAExF,GAAG,CAAC;QAC1C,IAAI+F,QAAQ,EAAE;UACZ,MAAMC,IAAI,GAAGT,KAAK,CAACzD,GAAG,CAACiE,QAAQ,CAAC;UAChC,IAAIC,IAAI,KAAK,IAAI,EAAE;YACjB,MAAM;cAAEC,MAAM;cAAEnG;YAAO,CAAC,GAAGkG,IAAI;YAC/B,IAAIjE,GAAG,CAACmE,KAAK,IAAItE,kBAAkB,CAAC5B,GAAG,CAAC,EAAE;cACxCe,GAAG,CAAC6E,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;cACpC7E,GAAG,CAAC6E,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC;cACjC,IAAI9F,MAAM,KAAK,GAAG,EAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC;cACtCiB,GAAG,CAACoF,IAAI,CAACF,MAAM,CAAC;YAClB,CAAC,MAAM;cACL,MAAM,IAAI9E,OAAO,CAAO,CAACiF,IAAI,EAAEC,MAAM,KAAK;gBACxC,IAAAC,sBAAgB,EAACL,MAAM,EAAE,CAACM,KAAK,EAAEC,IAAI,KAAK;kBACxC,IAAID,KAAK,EAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,KACpB;oBACH,IAAIE,CAAC,GAAGD,IAAI,CAACE,QAAQ,CAAC,CAAC;oBACvB,IAAI,CAAC3E,GAAG,CAACmE,KAAK,EAAE;sBACd;sBACA;sBACA;sBACA,MAAMS,KAAK,GAAG,IAAIC,MAAM,CAACX,MAAM,CAACY,KAAK,EAAE,GAAG,CAAC;sBAC3CJ,CAAC,GAAGA,CAAC,CAACK,OAAO,CAACH,KAAK,EAAG3G,GAAG,CAAS6G,KAAK,CAAC;oBAC1C;oBACA,IAAI/G,MAAM,KAAK,GAAG,EAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC;oBACtCiB,GAAG,CAACoF,IAAI,CAACM,CAAC,CAAC;oBACXL,IAAI,CAAC,CAAC;kBACR;gBACF,CAAC,CAAC;cACJ,CAAC,CAAC;YACJ;YACA;UACF;QACF;MACF;MAEA,MAAM,CAAC;QACLW,cAAc;QACdC,YAAY;QACZ9G;MACF,CAAC,EAAE;QACDuB,MAAM;QACND;MACF,CAAC,CAAC,GAAG,MAAML,OAAO,CAAC8F,GAAG,CAAC,CACrBlF,GAAG,CAAC2C,YAAY,CAAE1E,GAAG,EAAEV,eAAsB,CAAC,EAC9C2B,aAAa,CAAC+D,SAAS,CAAC9D,GAAG,CAAC,CAC7B,CAAC;MAEF,IAAIgG,MAAM;;MAEV;MACA;MACA;MACA;MACA,IAAIjH,WAAyB;MAC7B,MAAMkH,YAAY,GAAG,IAAArF,WAAG,EAACf,GAAG,CAACqG,MAAM,EAAE,6BAA6B,CAAC;MACnE,IAAID,YAAY,EAAE;QAChBlH,WAAW,GAAG,IAAAoH,iBAAS,EACrBF,YAAY,CAACG,MAAM,CAAC;UAClBL,GAAG,EAAE,KAAK;UACVhH,WAAW,EAAE;QACf,CAAC,CAAC,CAACsH,gBAAgB,EAClBC,IAAI,IAAKA,IAAI,CAACC,MAAM,CAACC,GAAG,CAAC,CAAC;UAAEC;QAAuB,CAAC,KAAKA,IAAI,CAChE,CAAC;MACH,CAAC,MAAM,IAAIjC,YAAY,EAAEzF,WAAW,GAAGyF,YAAY,CAAC,KAC/CzF,WAAW,GAAG,CAAC,CAAC;;MAErB;MACA,MAAM2H,GAAG,GAAG7F,GAAG,CAAC8F,WAAW;MAC3B,IAAIC,aAAqB,GAAG,EAAE;MAC9B,MAAMC,UAAU,GAAG,IAAIpI,gBAAgB,CAACK,GAAG,EAAEC,WAAW,EAAEC,YAAY,CAAC;MACvE,IAAI8H,MAAsB;MAC1B,IAAIJ,GAAG,EAAE;QACP,MAAMK,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;;QAE3B;QACA;QACA,MAAMC,IAAI,GAAGR,GAAG;QAEhB,MAAMS,UAAU,GAAG,MAAAA,CAAA,KAAY;UAC7BN,UAAU,CAAClI,MAAM,GAAG,EAAE;UACtB,OAAO,IAAIsB,OAAO,CAAiB,CAACX,OAAO,EAAEY,MAAM,KAAK;YACtD,MAAMkH,cAAc,GAAG,IAAAC,8BAAsB,gBAC3C,IAAAlJ,WAAA,CAAAmJ,GAAA,EAAC9J,iBAAA,CAAA+J,mBAAmB;cAClBvI,YAAY,EAAE6H,UAAU,CAACW,KAAM;cAC/BX,UAAU,EAAEA,UAAW;cAAAY,QAAA,eAEvB,IAAAtJ,WAAA,CAAAmJ,GAAA,EAACvJ,QAAA,CAAA2J,YAAY;gBAAC7F,QAAQ,EAAE/C,GAAG,CAACM,GAAI;gBAAAqI,QAAA,eAC9B,IAAAtJ,WAAA,CAAAmJ,GAAA,EAACJ,IAAI,IAAE;cAAC,CACI;YAAC,CACI,CAAC,EACtB;cACES,UAAU,EAAEA,CAAA,KAAMrI,OAAO,CAAC8H,cAAc,CAAC;cACzCQ,OAAO,EAAE1H;YACX,CACF,CAAC;UACH,CAAC,CAAC;QACJ,CAAC;QAED,IAAI2H,QAAQ,GAAG,CAAC;QAChB,IAAIC,MAAM,GAAG,KAAK;QAClB,OAAOD,QAAQ,GAAGhH,GAAG,CAAC4C,YAAa,EAAE,EAAEoE,QAAQ,EAAE;UAC/Cf,MAAM,GAAG,MAAMK,UAAU,CAAC,CAAC,CAAC,CAAC;;UAE7B,IAAI,CAACN,UAAU,CAACkB,KAAK,EAAE;;UAEvB;UACA,MAAMC,OAAO,GAAGnH,GAAG,CAAC6C,UAAU,GAAIqD,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;UACvDa,MAAM,GAAGE,OAAO,IAAI,CAAC,IAAI,EAAC,MAAM/H,OAAO,CAACgI,IAAI,CAAC,CAC3ChI,OAAO,CAACiI,UAAU,CAACrB,UAAU,CAACsB,OAAO,CAAC,EACtC,IAAAC,cAAK,EAACJ,OAAO,CAAC,CAACK,IAAI,CAAC,MAAM,KAAK,CAAC,CACjC,CAAC;UACF,IAAIP,MAAM,EAAE;UACZ;QACF;;QAEA,IAAIQ,MAAM;QACV,IAAIzB,UAAU,CAACkB,KAAK,EAAE;UACpB;UACA;UACA;UACAjB,MAAM,GAAG,MAAMK,UAAU,CAAC,CAAC;UAE3BmB,MAAM,GAAGR,MAAM,GAAI,uBAAsBjH,GAAG,CAAC6C,UAAW,YAAW,GAC9D,wBAAuB7C,GAAG,CAAC4C,YAAa,WAAU;QACzD,CAAC,MAAM6E,MAAM,GAAI,oBAAmBT,QAAQ,GAAG,CAAE,WAAU;QAE3DhH,GAAG,CAAC+C,MAAM,CAAE2E,GAAG,CAAC1B,UAAU,CAACkB,KAAK,GAAG,MAAM,GAAG,MAAM,EAAEO,MAAM,CAAC;QAE3DxB,MAAM,CAAE0B,IAAI,CAAC,IAAIC,gBAAQ,CAAC;UACxBC,KAAK,EAAEA,CAACC,KAAK,EAAEC,CAAC,EAAE1D,IAAI,KAAK;YACzB0B,aAAa,IAAI+B,KAAK,CAACnD,QAAQ,CAAC,CAAC;YACjCN,IAAI,CAAC,CAAC;UACR;QACF,CAAC,CAAC,CAAC;;QAEH;AACR;QACQc,MAAM,GAAG6C,mBAAM,CAACC,YAAY,CAAC,CAAC;MAChC;;MAEA;AACN;AACA;AACA;AACA;MACM,MAAMC,OAAO,GAAG,IAAAC,4BAAW,EAAC;QAC1BxE,YAAY,EAAEzF,WAAW;QACzBkK,MAAM,EAAEpD,cAAc,IAAIzH,eAAe;QACzC8K,MAAM,EAAErC,UAAU,CAACW;MACrB,CAAC,EAAE;QACD2B,cAAc,EAAE,IAAI;QACpBC,MAAM,EAAE;MACV,CAAC,CAAC;MACF7I,MAAM,CAAC8I,MAAM,CAAClJ,kBAAK,CAACmJ,IAAI,CAACC,YAAY,CAACR,OAAO,EAAE,MAAM,CAAC,CAAC;MACvDxI,MAAM,CAACiJ,MAAM,CAAC,CAAC;MACf,MAAMC,GAAG,GAAGtJ,kBAAK,CAACmJ,IAAI,CAACI,QAAQ,CAAE,GAAEpJ,EAAG,GAAEC,MAAM,CAAC2D,MAAM,CAACY,IAAK,EAAC,CAAC;MAE7D,MAAM6E,QAAQ,GAAG,IAAIC,GAAG,CAAS,CAAC;;MAElC;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA,CACE,MAAM,EACN,GAAG/C,UAAU,CAAClI,MAAM,CACrB,CAACkL,OAAO,CAAElB,KAAK,IAAK;QACnB,MAAMpC,MAAM,GAAGxH,WAAW,CAAC4J,KAAK,CAAC;QACjC,IAAIpC,MAAM,EAAEA,MAAM,CAACsD,OAAO,CAAEC,KAAK,IAAKH,QAAQ,CAACI,GAAG,CAACD,KAAK,CAAC,CAAC;MAC5D,CAAC,CAAC;MAEF,IAAIE,gBAAgB,GAAG,EAAE;MACzB,IAAIC,iBAAiB,GAAG,EAAE;MAC1BN,QAAQ,CAACE,OAAO,CAAElB,KAAK,IAAK;QAC1B,IAAIA,KAAK,CAACuB,QAAQ,CAAC,MAAM,CAAC,EAAE;UAC1BF,gBAAgB,IAAK,eAAchG,UAAW,GAAE2E,KAAM,qBAAoB;QAC5E,CAAC,MAAM,IACLA,KAAK,CAACuB,QAAQ,CAAC,KAAK;QAClB;QACA;QAAA,GACG,CAACvB,KAAK,CAACuB,QAAQ,CAAC,gBAAgB,CAAC,EACtC;UACAD,iBAAiB,IAAK,gBAAejG,UAAW,GAAE2E,KAAM,2CAA0C;QACpG;MACF,CAAC,CAAC;MAEF,MAAMwB,oBAAoB,GAAG9I,iBAAiB,CAACyE,YAAY,CAAC;MAE5D,MAAMsE,WAAW,GAAGvJ,GAAG,CAACwJ,OAAO,GAC7B,gDAAgD,GAC9C,EAAE;MAEN,MAAM/E,IAAI,GAAI;AACpB;AACA;AACA,cAAc6E,oBAAoB,CAAC5L,gBAAgB,CAACkD,SAAS,CAAE;AAC/D,cAAcuE,MAAM,GAAGA,MAAM,CAACsE,KAAK,CAAC9E,QAAQ,CAAC,CAAC,GAAG,EAAG;AACpD,cAAcQ,MAAM,GAAGA,MAAM,CAACuE,IAAI,CAAC/E,QAAQ,CAAC,CAAC,GAAG,EAAG;AACnD;AACA,cAAcrB,YAAa;AAC3B,cAAc6F,gBAAiB;AAC/B,cAAcI,WAAY;AAC1B;AACA;AACA;AACA;AACA;AACA,iDAAiDX,GAAI;AACrD;AACA;AACA,cAAcU,oBAAoB,CAAC5L,gBAAgB,CAACgD,SAAS,CAAE;AAC/D,mCAAmCqF,aAAc;AACjD,cAAcqD,iBAAkB;AAChC,cAAcE,oBAAoB,CAAC5L,gBAAgB,CAACiD,OAAO,CAAE;AAC7D;AACA,gBAAgB;MAEV,MAAM5C,MAAM,GAAGiI,UAAU,CAACjI,MAAM,IAAI,GAAG;MACvC,IAAIA,MAAM,KAAK,GAAG,EAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC;MAEtC,IAAIiG,QAAQ,IAAIjG,MAAM,GAAG,GAAG,EAAE;QAC5B;QACA;QACA,MAAM,IAAIqB,OAAO,CAAO,CAACiF,IAAI,EAAEC,MAAM,KAAK;UACxC,IAAAqF,oBAAc,EAAClF,IAAI,EAAE,CAACD,KAAK,EAAEN,MAAM,KAAK;YACtC,MAAM0F,CAAC,GAAG1F,MAAyB;YACnC,IAAIM,KAAK,EAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,KACpB;cACHoF,CAAC,CAAC9E,KAAK,GAAI7G,GAAG,CAAS6G,KAAK,CAAC,CAAC;cAC9BtB,KAAK,CAAE0F,GAAG,CAAC;gBAAEhF,MAAM,EAAE0F,CAAC;gBAAE7L;cAAO,CAAC,EAAEiG,QAAQ,CAAE7E,GAAG,EAAE+E,MAAM,CAAC/D,MAAM,CAAC;cAC/DkE,IAAI,CAAC,CAAC;YACR;UACF,CAAC,CAAC;QACJ,CAAC,CAAC;MACJ;;MAEA;MACA;MACA;MACArF,GAAG,CAACoF,IAAI,CAACK,IAAI,CAAC;IAChB,CAAC,CAAC,OAAOD,KAAK,EAAE;MACdZ,IAAI,CAACY,KAAK,CAAC;IACb;EACF,CAAC;AACH"}

package/build/development/server/server.js CHANGED Viewed

@@ -18,6 +18,7 @@ var _helmet = _interopRequireDefault(require("helmet"));
 var _morgan = _interopRequireDefault(require("morgan"));
 var _requestIp = _interopRequireDefault(require("request-ip"));
 var _uuid = require("uuid");
+require("webpack");
 var _renderer = _interopRequireDefault(require("./renderer"));
 var _errors = require("./utils/errors");
 /**
@@ -75,7 +76,7 @@ async function factory(webpackConfig, options) {
   if (options.beforeExpressJsSetup) {
     await options.beforeExpressJsSetup(server);
   }
-  server.logger = options.logger;
+  if (options.logger) server.logger = options.logger;
   if (options.httpsRedirect) {
     server.use((req, res, next) => {
       const schema = req.headers['x-forwarded-proto'];
@@ -96,16 +97,17 @@ async function factory(webpackConfig, options) {
   }));
   if (!options.noCsp) {
     server.use((req, res, next) => {
-      req.nonce = (0, _uuid.v4)();
+      const req2 = req;
+      req2.nonce = (0, _uuid.v4)();
       // TODO: This is deprecated, but it is kept for now for backward
       // compatibility. Should be removed sometime later.
-      req.cspNonce = req.nonce;
+      req2.cspNonce = req2.nonce;
       // The deep clone is necessary here to ensure that default value can't be
       // mutated during request processing.
       let cspSettings = (0, _lodash.cloneDeep)(defaultCspSettings);
-      cspSettings.directives['script-src'].push(`'nonce-${req.nonce}'`);
+      (cspSettings.directives?.['script-src']).push(`'nonce-${req2.nonce}'`);
       if (options.cspSettingsHook) {
         cspSettings = options.cspSettingsHook(cspSettings, req);
       }
@@ -131,6 +133,8 @@ async function factory(webpackConfig, options) {
   const FORMAT = ':ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent';
   server.use((0, _morgan.default)(FORMAT, {
     stream: {
+      // TODO: This implies the logger is always set. Is it on a higher level?
+      // then mark it as always present.
       write: options.logger.info.bind(options.logger)
     }
   }));
@@ -139,7 +143,7 @@ async function factory(webpackConfig, options) {
   // to be served from the root, to have all web app pages in its scope.
   // Thus, this setup to serve it. Probably, need some more configuration
   // for special cases, but this will do for now.
-  server.get('/__service-worker.js', _express.default.static(webpackConfig.output.path, {
+  server.get('/__service-worker.js', _express.default.static(webpackConfig.output?.path || '', {
     setHeaders: res => res.set('Cache-Control', 'no-cache')
   }));

package/build/development/server/server.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"server.js","names":["_path","require","_url","_lodash","_compression","_interopRequireDefault","_cookieParser","_csurf","_express","_serveFavicon","_helmet","_morgan","_requestIp","_uuid","_renderer","_errors","defaultCspSettings","directives","mapValues","helmet","contentSecurityPolicy","getDefaultDirectives","array","filter","item","push","getDefaultCspSettings","cloneDeep","factory","webpackConfig","options","rendererOps","pick","renderer","rendererFactory","publicPath","output","server","express","beforeExpressJsSetup","logger","httpsRedirect","use","req","res","next","schema","headers","url","host","originalUrl","redirect","compression","crossOriginEmbedderPolicy","crossOriginOpenerPolicy","crossOriginResourcePolicy","noCsp","nonce","uuid","cspNonce","cspSettings","cspSettingsHook","favicon","send","json","limit","urlencoded","extended","cookieParser","requestIp","mw","csrf","cookie","loggerMiddleware","token","clientIp","FORMAT","stream","write","info","bind","get","static","path","setHeaders","set","devMode","global","location","href","pathToFileURL","process","cwd","sep","webpack","webpackDevMiddleware","webpackHotMiddleware","compiler","serverSideRender","onExpressJsSetup","newError","ERRORS","NOT_FOUND","CODES","dontAttachDefaultErrorHandler","beforeExpressJsError","error","headersSent","status","INTERNAL_SERVER_ERROR","serverSide","log","message","getErrorForCode","env","NODE_ENV","undefined"],"sources":["../../../src/server/server.js"],"sourcesContent":["/*\n Creation of standard ExpressJS server for ReactJS apps.\n /\n\nimport { sep } from 'path';\nimport { pathToFileURL } from 'url';\n\nimport {\n cloneDeep,\n mapValues,\n pick,\n} from 'lodash';\n\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport csrf from '@dr.pogodin/csurf';\nimport express from 'express';\nimport favicon from 'serve-favicon';\nimport helmet from 'helmet';\nimport loggerMiddleware from 'morgan';\nimport requestIp from 'request-ip';\nimport { v4 as uuid } from 'uuid';\n\nimport rendererFactory from './renderer';\n\nimport {\n CODES,\n ERRORS,\n getErrorForCode,\n newError,\n} from './utils/errors';\n\n/\n Default Content Security Policy settings.\n * @ignore\n /\nconst defaultCspSettings = {\n directives: mapValues(\n helmet.contentSecurityPolicy.getDefaultDirectives(),\n\n // 'https:' options (automatic re-write of insecure URLs to secure ones)\n // is removed to facilitate local development with HTTP server. In cloud\n // deployments we assume Apache or Nginx server in front of out app takes\n // care about such re-writes.\n (array) => array.filter((item) => item !== 'https:'),\n ),\n};\ndefaultCspSettings.directives['frame-src'] = [\n \"'self'\",\n\n // YouTube domain is whitelisted to allow <YouTubeVideo> component to work\n // out of box.\n 'https://.youtube.com',\n];\ndefaultCspSettings.directives['script-src'].push(\"'unsafe-eval'\");\n\n// No need for automatic re-writes via Content Security Policy settings:\n// the forefront Apache or Nginx server is supposed to take care of this\n// in production cloud deployments.\ndelete defaultCspSettings.directives['upgrade-insecure-requests'];\n\n/*\n @category Utilities\n * @func server/getDefaultCspSettings\n * @global\n * @desc\n * ```js\n * import { server } from '@dr.pogodin/react-utils';\n * const { getDefaultCspSettings } from '@dr.pogodin/react-utils';\n * ```\n * @return {{\n * directives: object\n * }} A deep copy of default CSP settings object used by `react-utils`,\n * with the exception of `nonce-xxx` clause in `script-src` directive,\n * which is added dynamically for each request.\n /\nexport function getDefaultCspSettings() {\n return cloneDeep(defaultCspSettings);\n}\n\nexport default async function factory(webpackConfig, options) {\n const rendererOps = pick(options, [\n 'Application',\n 'beforeRender',\n 'favicon',\n 'logger',\n 'maxSsrRounds',\n 'noCsp',\n 'ssrTimeout',\n 'staticCacheController',\n 'staticCacheSize',\n ]);\n const renderer = rendererFactory(webpackConfig, rendererOps);\n const { publicPath } = webpackConfig.output;\n\n const server = express();\n\n if (options.beforeExpressJsSetup) {\n await options.beforeExpressJsSetup(server);\n }\n\n server.logger = options.logger;\n\n if (options.httpsRedirect) {\n server.use((req, res, next) => {\n const schema = req.headers['x-forwarded-proto'];\n if (schema === 'http') {\n let url = `https://${req.headers.host}`;\n if (req.originalUrl !== '/') url += req.originalUrl;\n return res.redirect(url);\n }\n return next();\n });\n }\n\n server.use(compression());\n server.use(\n helmet({\n contentSecurityPolicy: false,\n crossOriginEmbedderPolicy: false,\n crossOriginOpenerPolicy: false,\n crossOriginResourcePolicy: false,\n }),\n );\n\n if (!options.noCsp) {\n server.use((req, res, next) => {\n req.nonce = uuid();\n\n // TODO: This is deprecated, but it is kept for now for backward\n // compatibility. Should be removed sometime later.\n req.cspNonce = req.nonce;\n\n // The deep clone is necessary here to ensure that default value can't be\n // mutated during request processing.\n let cspSettings = cloneDeep(defaultCspSettings);\n cspSettings.directives['script-src'].push(`'nonce-${req.nonce}'`);\n if (options.cspSettingsHook) {\n cspSettings = options.cspSettingsHook(cspSettings, req);\n }\n helmet.contentSecurityPolicy(cspSettings)(req, res, next);\n });\n }\n\n if (options.favicon) {\n server.use(favicon(options.favicon));\n }\n\n server.use('/robots.txt', (req, res) => res.send('User-agent: \\nDisallow:'));\n\n server.use(express.json({ limit: '300kb' }));\n server.use(express.urlencoded({ extended: false }));\n server.use(cookieParser());\n server.use(requestIp.mw());\n\n server.use(csrf({ cookie: true }));\n\n loggerMiddleware.token('ip', (req) => req.clientIp);\n const FORMAT = ':ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent';\n server.use(loggerMiddleware(FORMAT, {\n stream: {\n write: options.logger.info.bind(options.logger),\n },\n }));\n\n // Note: no matter the \"public path\", we want the service worker, if any,\n // to be served from the root, to have all web app pages in its scope.\n // Thus, this setup to serve it. Probably, need some more configuration\n // for special cases, but this will do for now.\n server.get('/__service-worker.js', express.static(\n webpackConfig.output.path,\n {\n setHeaders: (res) => res.set('Cache-Control', 'no-cache'),\n },\n ));\n\n /* Setup of Hot Module Reloading for development environment.\n * These dependencies are not used, nor installed for production use,\n * hence we should violate some import-related lint rules. /\n / eslint-disable global-require /\n / eslint-disable import/no-extraneous-dependencies /\n / eslint-disable import/no-unresolved /\n if (options.devMode) {\n // This is a workaround for SASS bug:\n // https://github.com/dart-lang/sdk/issues/27979\n // which manifests itself sometimes when webpack dev middleware is used\n // (in dev mode), and app modules are imported in some unfortunate ways.\n if (!global.location) {\n global.location = {\n href: `${pathToFileURL(process.cwd()).href}${sep}`,\n };\n }\n\n const webpack = require('webpack');\n const webpackDevMiddleware = require('webpack-dev-middleware');\n const webpackHotMiddleware = require('webpack-hot-middleware');\n const compiler = webpack(webpackConfig);\n server.use(webpackDevMiddleware(compiler, {\n publicPath,\n serverSideRender: true,\n }));\n server.use(webpackHotMiddleware(compiler));\n }\n / eslint-enable global-require /\n / eslint-enable import/no-extraneous-dependencies /\n / eslint-enable import/no-unresolved /\n\n server.use(publicPath, express.static(webpackConfig.output.path));\n\n if (options.onExpressJsSetup) {\n await options.onExpressJsSetup(server);\n }\n server.use(renderer);\n\n / Detects 404 errors, and forwards them to the error handler. /\n server.use((req, res, next) => {\n next(newError(ERRORS.NOT_FOUND, CODES.NOT_FOUND));\n });\n\n let dontAttachDefaultErrorHandler;\n if (options.beforeExpressJsError) {\n dontAttachDefaultErrorHandler = await options.beforeExpressJsError(server);\n }\n\n / Error handler. */\n if (!dontAttachDefaultErrorHandler) {\n // TODO: Do we need this error handler at all? It actually seems to do\n // what the default ExpressJS error handler does anyway, see:\n // https://expressjs.com/en/guide/error-handling.html\n //\n // TODO: It is better to move the default error handler definition\n // to a stand-alone function at top-level, but the use of options.logger\n // prevents to do it without some extra refactoring. Should be done sometime\n // though.\n server.use((error, req, res, next) => {\n // TODO: This is needed to correctly handled any errors thrown after\n // sending initial response to the client.\n if (res.headersSent) return next(error);\n\n const status = error.status \|\| CODES.INTERNAL_SERVER_ERROR;\n const serverSide = status >= CODES.INTERNAL_SERVER_ERROR;\n\n // Log server-side errors always, client-side at debug level only.\n options.logger.log(serverSide ? 'error' : 'debug', error);\n\n let message = error.message \|\| getErrorForCode(status);\n if (serverSide && process.env.NODE_ENV === 'production') {\n message = ERRORS.INTERNAL_SERVER_ERROR;\n }\n\n res.status(status).send(message);\n return undefined;\n });\n }\n\n return server;\n}\n"],"mappings":";;;;;;;;AAIA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AAMA,IAAAG,YAAA,GAAAC,sBAAA,CAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAD,sBAAA,CAAAJ,OAAA;AACA,IAAAM,MAAA,GAAAF,sBAAA,CAAAJ,OAAA;AACA,IAAAO,QAAA,GAAAH,sBAAA,CAAAJ,OAAA;AACA,IAAAQ,aAAA,GAAAJ,sBAAA,CAAAJ,OAAA;AACA,IAAAS,OAAA,GAAAL,sBAAA,CAAAJ,OAAA;AACA,IAAAU,OAAA,GAAAN,sBAAA,CAAAJ,OAAA;AACA,IAAAW,UAAA,GAAAP,sBAAA,CAAAJ,OAAA;AACA,IAAAY,KAAA,GAAAZ,OAAA;AAEA,IAAAa,SAAA,GAAAT,sBAAA,CAAAJ,OAAA;AAEA,IAAAc,OAAA,GAAAd,OAAA;AAzBA;AACA;AACA;;AA8BA;AACA;AACA;AACA;AACA,MAAMe,kBAAkB,GAAG;EACzBC,UAAU,EAAE,IAAAC,iBAAS,EACnBC,eAAM,CAACC,qBAAqB,CAACC,oBAAoB,CAAC,CAAC;EAEnD;EACA;EACA;EACA;EACCC,KAAK,IAAKA,KAAK,CAACC,MAAM,CAAEC,IAAI,IAAKA,IAAI,KAAK,QAAQ,CACrD;AACF,CAAC;AACDR,kBAAkB,CAACC,UAAU,CAAC,WAAW,CAAC,GAAG,CAC3C,QAAQ;AAER;AACA;AACA,uBAAuB,CACxB;AACDD,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAACQ,IAAI,CAAC,eAAe,CAAC;;AAEjE;AACA;AACA;AACA,OAAOT,kBAAkB,CAACC,UAAU,CAAC,2BAA2B,CAAC;;AAEjE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASS,qBAAqBA,CAAA,EAAG;EACtC,OAAO,IAAAC,iBAAS,EAACX,kBAAkB,CAAC;AACtC;AAEe,eAAeY,OAAOA,CAACC,aAAa,EAAEC,OAAO,EAAE;EAC5D,MAAMC,WAAW,GAAG,IAAAC,YAAI,EAACF,OAAO,EAAE,CAChC,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,cAAc,EACd,OAAO,EACP,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,CAClB,CAAC;EACF,MAAMG,QAAQ,GAAG,IAAAC,iBAAe,EAACL,aAAa,EAAEE,WAAW,CAAC;EAC5D,MAAM;IAAEI;EAAW,CAAC,GAAGN,aAAa,CAACO,MAAM;EAE3C,MAAMC,MAAM,GAAG,IAAAC,gBAAO,EAAC,CAAC;EAExB,IAAIR,OAAO,CAACS,oBAAoB,EAAE;IAChC,MAAMT,OAAO,CAACS,oBAAoB,CAACF,MAAM,CAAC;EAC5C;EAEAA,MAAM,CAACG,MAAM,GAAGV,OAAO,CAACU,MAAM;EAE9B,IAAIV,OAAO,CAACW,aAAa,EAAE;IACzBJ,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;MAC7B,MAAMC,MAAM,GAAGH,GAAG,CAACI,OAAO,CAAC,mBAAmB,CAAC;MAC/C,IAAID,MAAM,KAAK,MAAM,EAAE;QACrB,IAAIE,GAAG,GAAI,WAAUL,GAAG,CAACI,OAAO,CAACE,IAAK,EAAC;QACvC,IAAIN,GAAG,CAACO,WAAW,KAAK,GAAG,EAAEF,GAAG,IAAIL,GAAG,CAACO,WAAW;QACnD,OAAON,GAAG,CAACO,QAAQ,CAACH,GAAG,CAAC;MAC1B;MACA,OAAOH,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;EACJ;EAEAR,MAAM,CAACK,GAAG,CAAC,IAAAU,oBAAW,EAAC,CAAC,CAAC;EACzBf,MAAM,CAACK,GAAG,CACR,IAAAvB,eAAM,EAAC;IACLC,qBAAqB,EAAE,KAAK;IAC5BiC,yBAAyB,EAAE,KAAK;IAChCC,uBAAuB,EAAE,KAAK;IAC9BC,yBAAyB,EAAE;EAC7B,CAAC,CACH,CAAC;EAED,IAAI,CAACzB,OAAO,CAAC0B,KAAK,EAAE;IAClBnB,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;MAC7BF,GAAG,CAACc,KAAK,GAAG,IAAAC,QAAI,EAAC,CAAC;;MAElB;MACA;MACAf,GAAG,CAACgB,QAAQ,GAAGhB,GAAG,CAACc,KAAK;;MAExB;MACA;MACA,IAAIG,WAAW,GAAG,IAAAjC,iBAAS,EAACX,kBAAkB,CAAC;MAC/C4C,WAAW,CAAC3C,UAAU,CAAC,YAAY,CAAC,CAACQ,IAAI,CAAE,UAASkB,GAAG,CAACc,KAAM,GAAE,CAAC;MACjE,IAAI3B,OAAO,CAAC+B,eAAe,EAAE;QAC3BD,WAAW,GAAG9B,OAAO,CAAC+B,eAAe,CAACD,WAAW,EAAEjB,GAAG,CAAC;MACzD;MACAxB,eAAM,CAACC,qBAAqB,CAACwC,WAAW,CAAC,CAACjB,GAAG,EAAEC,GAAG,EAAEC,IAAI,CAAC;IAC3D,CAAC,CAAC;EACJ;EAEA,IAAIf,OAAO,CAACgC,OAAO,EAAE;IACnBzB,MAAM,CAACK,GAAG,CAAC,IAAAoB,qBAAO,EAAChC,OAAO,CAACgC,OAAO,CAAC,CAAC;EACtC;EAEAzB,MAAM,CAACK,GAAG,CAAC,aAAa,EAAE,CAACC,GAAG,EAAEC,GAAG,KAAKA,GAAG,CAACmB,IAAI,CAAC,0BAA0B,CAAC,CAAC;EAE7E1B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC0B,IAAI,CAAC;IAAEC,KAAK,EAAE;EAAQ,CAAC,CAAC,CAAC;EAC5C5B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC4B,UAAU,CAAC;IAAEC,QAAQ,EAAE;EAAM,CAAC,CAAC,CAAC;EACnD9B,MAAM,CAACK,GAAG,CAAC,IAAA0B,qBAAY,EAAC,CAAC,CAAC;EAC1B/B,MAAM,CAACK,GAAG,CAAC2B,kBAAS,CAACC,EAAE,CAAC,CAAC,CAAC;EAE1BjC,MAAM,CAACK,GAAG,CAAC,IAAA6B,cAAI,EAAC;IAAEC,MAAM,EAAE;EAAK,CAAC,CAAC,CAAC;EAElCC,eAAgB,CAACC,KAAK,CAAC,IAAI,EAAG/B,GAAG,IAAKA,GAAG,CAACgC,QAAQ,CAAC;EACnD,MAAMC,MAAM,GAAG,yFAAyF;EACxGvC,MAAM,CAACK,GAAG,CAAC,IAAA+B,eAAgB,EAACG,MAAM,EAAE;IAClCC,MAAM,EAAE;MACNC,KAAK,EAAEhD,OAAO,CAACU,MAAM,CAACuC,IAAI,CAACC,IAAI,CAAClD,OAAO,CAACU,MAAM;IAChD;EACF,CAAC,CAAC,CAAC;;EAEH;EACA;EACA;EACA;EACAH,MAAM,CAAC4C,GAAG,CAAC,sBAAsB,EAAE3C,gBAAO,CAAC4C,MAAM,CAC/CrD,aAAa,CAACO,MAAM,CAAC+C,IAAI,EACzB;IACEC,UAAU,EAAGxC,GAAG,IAAKA,GAAG,CAACyC,GAAG,CAAC,eAAe,EAAE,UAAU;EAC1D,CACF,CAAC,CAAC;;EAEF;AACF;AACA;EACE;EACA;EACA;EACA,IAAIvD,OAAO,CAACwD,OAAO,EAAE;IACnB;IACA;IACA;IACA;IACA,IAAI,CAACC,MAAM,CAACC,QAAQ,EAAE;MACpBD,MAAM,CAACC,QAAQ,GAAG;QAChBC,IAAI,EAAG,GAAE,IAAAC,kBAAa,EAACC,OAAO,CAACC,GAAG,CAAC,CAAC,CAAC,CAACH,IAAK,GAAEI,SAAI;MACnD,CAAC;IACH;IAEA,MAAMC,OAAO,GAAG7F,OAAO,CAAC,SAAS,CAAC;IAClC,MAAM8F,oBAAoB,GAAG9F,OAAO,CAAC,wBAAwB,CAAC;IAC9D,MAAM+F,oBAAoB,GAAG/F,OAAO,CAAC,wBAAwB,CAAC;IAC9D,MAAMgG,QAAQ,GAAGH,OAAO,CAACjE,aAAa,CAAC;IACvCQ,MAAM,CAACK,GAAG,CAACqD,oBAAoB,CAACE,QAAQ,EAAE;MACxC9D,UAAU;MACV+D,gBAAgB,EAAE;IACpB,CAAC,CAAC,CAAC;IACH7D,MAAM,CAACK,GAAG,CAACsD,oBAAoB,CAACC,QAAQ,CAAC,CAAC;EAC5C;EACA;EACA;EACA;;EAEA5D,MAAM,CAACK,GAAG,CAACP,UAAU,EAAEG,gBAAO,CAAC4C,MAAM,CAACrD,aAAa,CAACO,MAAM,CAAC+C,IAAI,CAAC,CAAC;EAEjE,IAAIrD,OAAO,CAACqE,gBAAgB,EAAE;IAC5B,MAAMrE,OAAO,CAACqE,gBAAgB,CAAC9D,MAAM,CAAC;EACxC;EACAA,MAAM,CAACK,GAAG,CAACT,QAAQ,CAAC;;EAEpB;EACAI,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;IAC7BA,IAAI,CAAC,IAAAuD,gBAAQ,EAACC,cAAM,CAACC,SAAS,EAAEC,aAAK,CAACD,SAAS,CAAC,CAAC;EACnD,CAAC,CAAC;EAEF,IAAIE,6BAA6B;EACjC,IAAI1E,OAAO,CAAC2E,oBAAoB,EAAE;IAChCD,6BAA6B,GAAG,MAAM1E,OAAO,CAAC2E,oBAAoB,CAACpE,MAAM,CAAC;EAC5E;;EAEA;EACA,IAAI,CAACmE,6BAA6B,EAAE;IAClC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACAnE,MAAM,CAACK,GAAG,CAAC,CAACgE,KAAK,EAAE/D,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;MACpC;MACA;MACA,IAAID,GAAG,CAAC+D,WAAW,EAAE,OAAO9D,IAAI,CAAC6D,KAAK,CAAC;MAEvC,MAAME,MAAM,GAAGF,KAAK,CAACE,MAAM,IAAIL,aAAK,CAACM,qBAAqB;MAC1D,MAAMC,UAAU,GAAGF,MAAM,IAAIL,aAAK,CAACM,qBAAqB;;MAExD;MACA/E,OAAO,CAACU,MAAM,CAACuE,GAAG,CAACD,UAAU,GAAG,OAAO,GAAG,OAAO,EAAEJ,KAAK,CAAC;MAEzD,IAAIM,OAAO,GAAGN,KAAK,CAACM,OAAO,IAAI,IAAAC,uBAAe,EAACL,MAAM,CAAC;MACtD,IAAIE,UAAU,IAAInB,OAAO,CAACuB,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;QACvDH,OAAO,GAAGX,cAAM,CAACQ,qBAAqB;MACxC;MAEAjE,GAAG,CAACgE,MAAM,CAACA,MAAM,CAAC,CAAC7C,IAAI,CAACiD,OAAO,CAAC;MAChC,OAAOI,SAAS;IAClB,CAAC,CAAC;EACJ;EAEA,OAAO/E,MAAM;AACf"}
1	+ {"version":3,"file":"server.js","names":["_path","require","_url","_lodash","_compression","_interopRequireDefault","_cookieParser","_csurf","_express","_serveFavicon","_helmet","_morgan","_requestIp","_uuid","_renderer","_errors","defaultCspSettings","directives","mapValues","helmet","contentSecurityPolicy","getDefaultDirectives","array","filter","item","push","getDefaultCspSettings","cloneDeep","factory","webpackConfig","options","rendererOps","pick","renderer","rendererFactory","publicPath","output","server","express","beforeExpressJsSetup","logger","httpsRedirect","use","req","res","next","schema","headers","url","host","originalUrl","redirect","compression","crossOriginEmbedderPolicy","crossOriginOpenerPolicy","crossOriginResourcePolicy","noCsp","req2","nonce","uuid","cspNonce","cspSettings","cspSettingsHook","favicon","send","json","limit","urlencoded","extended","cookieParser","requestIp","mw","csrf","cookie","loggerMiddleware","token","clientIp","FORMAT","stream","write","info","bind","get","static","path","setHeaders","set","devMode","global","location","href","pathToFileURL","process","cwd","sep","webpack","webpackDevMiddleware","webpackHotMiddleware","compiler","serverSideRender","onExpressJsSetup","newError","ERRORS","NOT_FOUND","CODES","dontAttachDefaultErrorHandler","beforeExpressJsError","error","headersSent","status","INTERNAL_SERVER_ERROR","serverSide","log","message","getErrorForCode","env","NODE_ENV","undefined"],"sources":["../../../src/server/server.ts"],"sourcesContent":["/*\n Creation of standard ExpressJS server for ReactJS apps.\n /\n\nimport { sep } from 'path';\nimport { pathToFileURL } from 'url';\n\nimport {\n cloneDeep,\n mapValues,\n pick,\n} from 'lodash';\n\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport csrf from '@dr.pogodin/csurf';\n\nimport express, {\n type Express,\n type NextFunction,\n type Request,\n type Response,\n} from 'express';\n\nimport favicon from 'serve-favicon';\nimport helmet, { type HelmetOptions } from 'helmet';\nimport loggerMiddleware from 'morgan';\nimport requestIp from 'request-ip';\nimport { v4 as uuid } from 'uuid';\nimport { type Configuration } from 'webpack';\n\nimport rendererFactory, {\n type LoggerI,\n type OptionsT as RendererOptionsT,\n} from './renderer';\n\nimport {\n CODES,\n ERRORS,\n getErrorForCode,\n newError,\n} from './utils/errors';\n\nexport type CspOptionsT =\nExclude<HelmetOptions['contentSecurityPolicy'], boolean \| undefined>;\n\ninterface RequestT extends Request {\n cspNonce: string;\n nonce: string;\n}\n\n/\n Default Content Security Policy settings.\n * @ignore\n /\nconst defaultCspSettings = {\n directives: mapValues(\n helmet.contentSecurityPolicy.getDefaultDirectives(),\n\n // 'https:' options (automatic re-write of insecure URLs to secure ones)\n // is removed to facilitate local development with HTTP server. In cloud\n // deployments we assume Apache or Nginx server in front of out app takes\n // care about such re-writes.\n (array) => (array as string[]).filter((item: string) => item !== 'https:'),\n ),\n};\ndefaultCspSettings.directives['frame-src'] = [\n \"'self'\",\n\n // YouTube domain is whitelisted to allow <YouTubeVideo> component to work\n // out of box.\n 'https://.youtube.com',\n];\ndefaultCspSettings.directives['script-src'].push(\"'unsafe-eval'\");\n\n// No need for automatic re-writes via Content Security Policy settings:\n// the forefront Apache or Nginx server is supposed to take care of this\n// in production cloud deployments.\ndelete defaultCspSettings.directives['upgrade-insecure-requests'];\n\n/*\n @category Utilities\n * @func server/getDefaultCspSettings\n * @global\n * @desc\n * ```js\n * import { server } from '@dr.pogodin/react-utils';\n * const { getDefaultCspSettings } from '@dr.pogodin/react-utils';\n * ```\n * @return {{\n * directives: object\n * }} A deep copy of default CSP settings object used by `react-utils`,\n * with the exception of `nonce-xxx` clause in `script-src` directive,\n * which is added dynamically for each request.\n /\nexport function getDefaultCspSettings() {\n return cloneDeep(defaultCspSettings);\n}\n\ntype ServerT = Express & {\n logger: LoggerI;\n};\n\nexport type OptionsT = RendererOptionsT & {\n beforeExpressJsError?: (server: ServerT) => Promise<boolean>;\n beforeExpressJsSetup?: (server: ServerT) => Promise<void>;\n cspSettingsHook?: (\n defaultOptions: CspOptionsT,\n req: Request,\n ) => CspOptionsT;\n devMode?: boolean;\n httpsRedirect?: boolean;\n onExpressJsSetup?: (server: ServerT) => Promise<void> \| void;\n};\n\nexport default async function factory(\n webpackConfig: Configuration,\n options: OptionsT,\n) {\n const rendererOps: RendererOptionsT = pick(options, [\n 'Application',\n 'beforeRender',\n 'favicon',\n 'logger',\n 'maxSsrRounds',\n 'noCsp',\n 'ssrTimeout',\n 'staticCacheController',\n 'staticCacheSize',\n ]);\n const renderer = rendererFactory(webpackConfig, rendererOps);\n const { publicPath } = webpackConfig.output!;\n\n const server = express() as ServerT;\n\n if (options.beforeExpressJsSetup) {\n await options.beforeExpressJsSetup(server);\n }\n\n if (options.logger) server.logger = options.logger;\n\n if (options.httpsRedirect) {\n server.use((req, res, next) => {\n const schema = req.headers['x-forwarded-proto'];\n if (schema === 'http') {\n let url = `https://${req.headers.host}`;\n if (req.originalUrl !== '/') url += req.originalUrl;\n return res.redirect(url);\n }\n return next();\n });\n }\n\n server.use(compression());\n server.use(\n helmet({\n contentSecurityPolicy: false,\n crossOriginEmbedderPolicy: false,\n crossOriginOpenerPolicy: false,\n crossOriginResourcePolicy: false,\n }),\n );\n\n if (!options.noCsp) {\n server.use(\n (req: Request, res: Response, next: NextFunction) => {\n const req2 = req as RequestT;\n\n req2.nonce = uuid();\n\n // TODO: This is deprecated, but it is kept for now for backward\n // compatibility. Should be removed sometime later.\n req2.cspNonce = req2.nonce;\n\n // The deep clone is necessary here to ensure that default value can't be\n // mutated during request processing.\n let cspSettings: CspOptionsT = cloneDeep(defaultCspSettings);\n (cspSettings.directives?.['script-src'] as string[]).push(`'nonce-${req2.nonce}'`);\n if (options.cspSettingsHook) {\n cspSettings = options.cspSettingsHook(cspSettings, req);\n }\n helmet.contentSecurityPolicy(cspSettings)(req, res, next);\n },\n );\n }\n\n if (options.favicon) {\n server.use(favicon(options.favicon));\n }\n\n server.use('/robots.txt', (req, res) => res.send('User-agent: \\nDisallow:'));\n\n server.use(express.json({ limit: '300kb' }));\n server.use(express.urlencoded({ extended: false }));\n server.use(cookieParser());\n server.use(requestIp.mw());\n\n server.use(csrf({ cookie: true }));\n\n loggerMiddleware.token(\n 'ip',\n (req: Request & { clientIp: string }) => req.clientIp,\n );\n const FORMAT = ':ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent';\n server.use(loggerMiddleware(FORMAT, {\n stream: {\n // TODO: This implies the logger is always set. Is it on a higher level?\n // then mark it as always present.\n write: options.logger!.info.bind(options.logger),\n },\n }));\n\n // Note: no matter the \"public path\", we want the service worker, if any,\n // to be served from the root, to have all web app pages in its scope.\n // Thus, this setup to serve it. Probably, need some more configuration\n // for special cases, but this will do for now.\n server.get('/__service-worker.js', express.static(\n webpackConfig.output?.path \|\| '',\n {\n setHeaders: (res) => res.set('Cache-Control', 'no-cache'),\n },\n ));\n\n /* Setup of Hot Module Reloading for development environment.\n * These dependencies are not used, nor installed for production use,\n * hence we should violate some import-related lint rules. /\n / eslint-disable global-require /\n / eslint-disable import/no-extraneous-dependencies /\n / eslint-disable import/no-unresolved /\n if (options.devMode) {\n // This is a workaround for SASS bug:\n // https://github.com/dart-lang/sdk/issues/27979\n // which manifests itself sometimes when webpack dev middleware is used\n // (in dev mode), and app modules are imported in some unfortunate ways.\n if (!global.location) {\n global.location = {\n href: `${pathToFileURL(process.cwd()).href}${sep}`,\n } as Location;\n }\n\n const webpack = require('webpack');\n const webpackDevMiddleware = require('webpack-dev-middleware');\n const webpackHotMiddleware = require('webpack-hot-middleware');\n const compiler = webpack(webpackConfig);\n server.use(webpackDevMiddleware(compiler, {\n publicPath,\n serverSideRender: true,\n }));\n server.use(webpackHotMiddleware(compiler));\n }\n / eslint-enable global-require /\n / eslint-enable import/no-extraneous-dependencies /\n / eslint-enable import/no-unresolved /\n\n server.use(publicPath as string, express.static(webpackConfig.output!.path!));\n\n if (options.onExpressJsSetup) {\n await options.onExpressJsSetup(server);\n }\n server.use(renderer);\n\n / Detects 404 errors, and forwards them to the error handler. /\n server.use((req, res, next) => {\n next(newError(ERRORS.NOT_FOUND, CODES.NOT_FOUND));\n });\n\n let dontAttachDefaultErrorHandler;\n if (options.beforeExpressJsError) {\n dontAttachDefaultErrorHandler = await options.beforeExpressJsError(server);\n }\n\n / Error handler. */\n if (!dontAttachDefaultErrorHandler) {\n // TODO: Do we need this error handler at all? It actually seems to do\n // what the default ExpressJS error handler does anyway, see:\n // https://expressjs.com/en/guide/error-handling.html\n //\n // TODO: It is better to move the default error handler definition\n // to a stand-alone function at top-level, but the use of options.logger\n // prevents to do it without some extra refactoring. Should be done sometime\n // though.\n server.use((\n error: any,\n req: Request,\n res: Response,\n next: NextFunction,\n ) => {\n // TODO: This is needed to correctly handled any errors thrown after\n // sending initial response to the client.\n if (res.headersSent) return next(error);\n\n const status = error.status \|\| CODES.INTERNAL_SERVER_ERROR;\n const serverSide = status >= CODES.INTERNAL_SERVER_ERROR;\n\n // Log server-side errors always, client-side at debug level only.\n options.logger!.log(serverSide ? 'error' : 'debug', error);\n\n let message = error.message \|\| getErrorForCode(status);\n if (serverSide && process.env.NODE_ENV === 'production') {\n message = ERRORS.INTERNAL_SERVER_ERROR;\n }\n\n res.status(status).send(message);\n return undefined;\n });\n }\n\n return server;\n}\n"],"mappings":";;;;;;;;AAIA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AAMA,IAAAG,YAAA,GAAAC,sBAAA,CAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAD,sBAAA,CAAAJ,OAAA;AACA,IAAAM,MAAA,GAAAF,sBAAA,CAAAJ,OAAA;AAEA,IAAAO,QAAA,GAAAH,sBAAA,CAAAJ,OAAA;AAOA,IAAAQ,aAAA,GAAAJ,sBAAA,CAAAJ,OAAA;AACA,IAAAS,OAAA,GAAAL,sBAAA,CAAAJ,OAAA;AACA,IAAAU,OAAA,GAAAN,sBAAA,CAAAJ,OAAA;AACA,IAAAW,UAAA,GAAAP,sBAAA,CAAAJ,OAAA;AACA,IAAAY,KAAA,GAAAZ,OAAA;AACAA,OAAA;AAEA,IAAAa,SAAA,GAAAT,sBAAA,CAAAJ,OAAA;AAKA,IAAAc,OAAA,GAAAd,OAAA;AApCA;AACA;AACA;;AAiDA;AACA;AACA;AACA;AACA,MAAMe,kBAAkB,GAAG;EACzBC,UAAU,EAAE,IAAAC,iBAAS,EACnBC,eAAM,CAACC,qBAAqB,CAACC,oBAAoB,CAAC,CAAC;EAEnD;EACA;EACA;EACA;EACCC,KAAK,IAAMA,KAAK,CAAcC,MAAM,CAAEC,IAAY,IAAKA,IAAI,KAAK,QAAQ,CAC3E;AACF,CAAC;AACDR,kBAAkB,CAACC,UAAU,CAAC,WAAW,CAAC,GAAG,CAC3C,QAAQ;AAER;AACA;AACA,uBAAuB,CACxB;AACDD,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAACQ,IAAI,CAAC,eAAe,CAAC;;AAEjE;AACA;AACA;AACA,OAAOT,kBAAkB,CAACC,UAAU,CAAC,2BAA2B,CAAC;;AAEjE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASS,qBAAqBA,CAAA,EAAG;EACtC,OAAO,IAAAC,iBAAS,EAACX,kBAAkB,CAAC;AACtC;AAkBe,eAAeY,OAAOA,CACnCC,aAA4B,EAC5BC,OAAiB,EACjB;EACA,MAAMC,WAA6B,GAAG,IAAAC,YAAI,EAACF,OAAO,EAAE,CAClD,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,cAAc,EACd,OAAO,EACP,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,CAClB,CAAC;EACF,MAAMG,QAAQ,GAAG,IAAAC,iBAAe,EAACL,aAAa,EAAEE,WAAW,CAAC;EAC5D,MAAM;IAAEI;EAAW,CAAC,GAAGN,aAAa,CAACO,MAAO;EAE5C,MAAMC,MAAM,GAAG,IAAAC,gBAAO,EAAC,CAAY;EAEnC,IAAIR,OAAO,CAACS,oBAAoB,EAAE;IAChC,MAAMT,OAAO,CAACS,oBAAoB,CAACF,MAAM,CAAC;EAC5C;EAEA,IAAIP,OAAO,CAACU,MAAM,EAAEH,MAAM,CAACG,MAAM,GAAGV,OAAO,CAACU,MAAM;EAElD,IAAIV,OAAO,CAACW,aAAa,EAAE;IACzBJ,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;MAC7B,MAAMC,MAAM,GAAGH,GAAG,CAACI,OAAO,CAAC,mBAAmB,CAAC;MAC/C,IAAID,MAAM,KAAK,MAAM,EAAE;QACrB,IAAIE,GAAG,GAAI,WAAUL,GAAG,CAACI,OAAO,CAACE,IAAK,EAAC;QACvC,IAAIN,GAAG,CAACO,WAAW,KAAK,GAAG,EAAEF,GAAG,IAAIL,GAAG,CAACO,WAAW;QACnD,OAAON,GAAG,CAACO,QAAQ,CAACH,GAAG,CAAC;MAC1B;MACA,OAAOH,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;EACJ;EAEAR,MAAM,CAACK,GAAG,CAAC,IAAAU,oBAAW,EAAC,CAAC,CAAC;EACzBf,MAAM,CAACK,GAAG,CACR,IAAAvB,eAAM,EAAC;IACLC,qBAAqB,EAAE,KAAK;IAC5BiC,yBAAyB,EAAE,KAAK;IAChCC,uBAAuB,EAAE,KAAK;IAC9BC,yBAAyB,EAAE;EAC7B,CAAC,CACH,CAAC;EAED,IAAI,CAACzB,OAAO,CAAC0B,KAAK,EAAE;IAClBnB,MAAM,CAACK,GAAG,CACR,CAACC,GAAY,EAAEC,GAAa,EAAEC,IAAkB,KAAK;MACnD,MAAMY,IAAI,GAAGd,GAAe;MAE5Bc,IAAI,CAACC,KAAK,GAAG,IAAAC,QAAI,EAAC,CAAC;;MAEnB;MACA;MACAF,IAAI,CAACG,QAAQ,GAAGH,IAAI,CAACC,KAAK;;MAE1B;MACA;MACA,IAAIG,WAAwB,GAAG,IAAAlC,iBAAS,EAACX,kBAAkB,CAAC;MAC5D,CAAC6C,WAAW,CAAC5C,UAAU,GAAG,YAAY,CAAC,EAAcQ,IAAI,CAAE,UAASgC,IAAI,CAACC,KAAM,GAAE,CAAC;MAClF,IAAI5B,OAAO,CAACgC,eAAe,EAAE;QAC3BD,WAAW,GAAG/B,OAAO,CAACgC,eAAe,CAACD,WAAW,EAAElB,GAAG,CAAC;MACzD;MACAxB,eAAM,CAACC,qBAAqB,CAACyC,WAAW,CAAC,CAAClB,GAAG,EAAEC,GAAG,EAAEC,IAAI,CAAC;IAC3D,CACF,CAAC;EACH;EAEA,IAAIf,OAAO,CAACiC,OAAO,EAAE;IACnB1B,MAAM,CAACK,GAAG,CAAC,IAAAqB,qBAAO,EAACjC,OAAO,CAACiC,OAAO,CAAC,CAAC;EACtC;EAEA1B,MAAM,CAACK,GAAG,CAAC,aAAa,EAAE,CAACC,GAAG,EAAEC,GAAG,KAAKA,GAAG,CAACoB,IAAI,CAAC,0BAA0B,CAAC,CAAC;EAE7E3B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC2B,IAAI,CAAC;IAAEC,KAAK,EAAE;EAAQ,CAAC,CAAC,CAAC;EAC5C7B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC6B,UAAU,CAAC;IAAEC,QAAQ,EAAE;EAAM,CAAC,CAAC,CAAC;EACnD/B,MAAM,CAACK,GAAG,CAAC,IAAA2B,qBAAY,EAAC,CAAC,CAAC;EAC1BhC,MAAM,CAACK,GAAG,CAAC4B,kBAAS,CAACC,EAAE,CAAC,CAAC,CAAC;EAE1BlC,MAAM,CAACK,GAAG,CAAC,IAAA8B,cAAI,EAAC;IAAEC,MAAM,EAAE;EAAK,CAAC,CAAC,CAAC;EAElCC,eAAgB,CAACC,KAAK,CACpB,IAAI,EACHhC,GAAmC,IAAKA,GAAG,CAACiC,QAC/C,CAAC;EACD,MAAMC,MAAM,GAAG,yFAAyF;EACxGxC,MAAM,CAACK,GAAG,CAAC,IAAAgC,eAAgB,EAACG,MAAM,EAAE;IAClCC,MAAM,EAAE;MACN;MACA;MACAC,KAAK,EAAEjD,OAAO,CAACU,MAAM,CAAEwC,IAAI,CAACC,IAAI,CAACnD,OAAO,CAACU,MAAM;IACjD;EACF,CAAC,CAAC,CAAC;;EAEH;EACA;EACA;EACA;EACAH,MAAM,CAAC6C,GAAG,CAAC,sBAAsB,EAAE5C,gBAAO,CAAC6C,MAAM,CAC/CtD,aAAa,CAACO,MAAM,EAAEgD,IAAI,IAAI,EAAE,EAChC;IACEC,UAAU,EAAGzC,GAAG,IAAKA,GAAG,CAAC0C,GAAG,CAAC,eAAe,EAAE,UAAU;EAC1D,CACF,CAAC,CAAC;;EAEF;AACF;AACA;EACE;EACA;EACA;EACA,IAAIxD,OAAO,CAACyD,OAAO,EAAE;IACnB;IACA;IACA;IACA;IACA,IAAI,CAACC,MAAM,CAACC,QAAQ,EAAE;MACpBD,MAAM,CAACC,QAAQ,GAAG;QAChBC,IAAI,EAAG,GAAE,IAAAC,kBAAa,EAACC,OAAO,CAACC,GAAG,CAAC,CAAC,CAAC,CAACH,IAAK,GAAEI,SAAI;MACnD,CAAa;IACf;IAEA,MAAMC,OAAO,GAAG9F,OAAO,CAAC,SAAS,CAAC;IAClC,MAAM+F,oBAAoB,GAAG/F,OAAO,CAAC,wBAAwB,CAAC;IAC9D,MAAMgG,oBAAoB,GAAGhG,OAAO,CAAC,wBAAwB,CAAC;IAC9D,MAAMiG,QAAQ,GAAGH,OAAO,CAAClE,aAAa,CAAC;IACvCQ,MAAM,CAACK,GAAG,CAACsD,oBAAoB,CAACE,QAAQ,EAAE;MACxC/D,UAAU;MACVgE,gBAAgB,EAAE;IACpB,CAAC,CAAC,CAAC;IACH9D,MAAM,CAACK,GAAG,CAACuD,oBAAoB,CAACC,QAAQ,CAAC,CAAC;EAC5C;EACA;EACA;EACA;;EAEA7D,MAAM,CAACK,GAAG,CAACP,UAAU,EAAYG,gBAAO,CAAC6C,MAAM,CAACtD,aAAa,CAACO,MAAM,CAAEgD,IAAK,CAAC,CAAC;EAE7E,IAAItD,OAAO,CAACsE,gBAAgB,EAAE;IAC5B,MAAMtE,OAAO,CAACsE,gBAAgB,CAAC/D,MAAM,CAAC;EACxC;EACAA,MAAM,CAACK,GAAG,CAACT,QAAQ,CAAC;;EAEpB;EACAI,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,EAAEC,GAAG,EAAEC,IAAI,KAAK;IAC7BA,IAAI,CAAC,IAAAwD,gBAAQ,EAACC,cAAM,CAACC,SAAS,EAAEC,aAAK,CAACD,SAAS,CAAC,CAAC;EACnD,CAAC,CAAC;EAEF,IAAIE,6BAA6B;EACjC,IAAI3E,OAAO,CAAC4E,oBAAoB,EAAE;IAChCD,6BAA6B,GAAG,MAAM3E,OAAO,CAAC4E,oBAAoB,CAACrE,MAAM,CAAC;EAC5E;;EAEA;EACA,IAAI,CAACoE,6BAA6B,EAAE;IAClC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACApE,MAAM,CAACK,GAAG,CAAC,CACTiE,KAAU,EACVhE,GAAY,EACZC,GAAa,EACbC,IAAkB,KACf;MACH;MACA;MACA,IAAID,GAAG,CAACgE,WAAW,EAAE,OAAO/D,IAAI,CAAC8D,KAAK,CAAC;MAEvC,MAAME,MAAM,GAAGF,KAAK,CAACE,MAAM,IAAIL,aAAK,CAACM,qBAAqB;MAC1D,MAAMC,UAAU,GAAGF,MAAM,IAAIL,aAAK,CAACM,qBAAqB;;MAExD;MACAhF,OAAO,CAACU,MAAM,CAAEwE,GAAG,CAACD,UAAU,GAAG,OAAO,GAAG,OAAO,EAAEJ,KAAK,CAAC;MAE1D,IAAIM,OAAO,GAAGN,KAAK,CAACM,OAAO,IAAI,IAAAC,uBAAe,EAACL,MAAM,CAAC;MACtD,IAAIE,UAAU,IAAInB,OAAO,CAACuB,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;QACvDH,OAAO,GAAGX,cAAM,CAACQ,qBAAqB;MACxC;MAEAlE,GAAG,CAACiE,MAAM,CAACA,MAAM,CAAC,CAAC7C,IAAI,CAACiD,OAAO,CAAC;MAChC,OAAOI,SAAS;IAClB,CAAC,CAAC;EACJ;EAEA,OAAOhF,MAAM;AACf"}