@getstrata/core 0.5.48 → 0.5.50
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +25 -0
- package/dist/core/auth/membershipContextMiddleware.d.ts +1 -1
- package/dist/core/auth/scimAuthMiddleware.d.ts +1 -1
- package/dist/core/database/errors.d.ts +1 -1
- package/dist/core/facades/index.d.ts +1 -1
- package/dist/core/http/authMiddleware.d.ts +2 -2
- package/dist/core/http/authorizeMiddleware.d.ts +2 -2
- package/dist/core/http/index.d.ts +1 -1
- package/dist/core/http/requireAuthMiddleware.d.ts +1 -1
- package/dist/core/http/requireWebAuthMiddleware.d.ts +1 -1
- package/dist/core/http/securedRouteModelBinding.d.ts +1 -1
- package/dist/core/logging/requestLoggingMiddleware.d.ts +1 -1
- package/dist/core/queue/failedJobRepository.d.ts +1 -1
- package/dist/core/queue/failedJobTable.d.ts +1 -1
- package/dist/core/runtime/applicationRegistry.d.ts +3 -3
- package/dist/core/tracing/tracingMiddleware.d.ts +1 -1
- package/dist/entries/audit/exportAuditLogs.js +9 -175
- package/dist/entries/auth/membershipMiddleware.js +2 -74
- package/dist/entries/auth/scimAuthMiddleware.js +10 -96
- package/dist/entries/auth/sessionGuard.js +138 -2732
- package/dist/entries/database/errors.js +6 -66
- package/dist/entries/database/model.js +2 -65
- package/dist/entries/http/authMiddleware.js +1 -23
- package/dist/entries/http/authorizeMiddleware.js +2 -89
- package/dist/entries/http/bodySizeLimitMiddleware.js +1 -66
- package/dist/entries/http/conditionalResponse.js +3 -66
- package/dist/entries/http/csrfMiddleware.js +2 -65
- package/dist/entries/http/etag.js +3 -66
- package/dist/entries/http/formRequest.js +5 -110
- package/dist/entries/http/pagination.js +8 -113
- package/dist/entries/http/parseFormBody.js +1 -66
- package/dist/entries/http/parseMultipartUpload.js +3 -66
- package/dist/entries/http/requireAbilityMiddleware.js +2 -89
- package/dist/entries/http/requireAuthMiddleware.js +1 -66
- package/dist/entries/http/requireGlobalAdminMiddleware.js +4 -128
- package/dist/entries/http/requireWebAuthMiddleware.js +2 -65
- package/dist/entries/http/routeModelBinding.js +3 -111
- package/dist/entries/http/securedRouteModelBinding.js +15 -206
- package/dist/entries/http/throttleMiddleware.js +2 -47
- package/dist/entries/http/webErrorResponse.js +222 -2732
- package/dist/entries/http/webFormRequest.js +8 -112
- package/dist/entries/jobs/dispatchWebhookJob.js +5 -174
- package/dist/entries/logging/requestLoggingMiddleware.js +2 -25
- package/dist/entries/queue/createAppQueue.js +13 -2332
- package/dist/entries/queue/failedJobRepository.js +4 -2324
- package/dist/entries/queue/jobRunner.js +9 -8
- package/dist/entries/queue/publicQueue.js +13 -2332
- package/dist/entries/queue/queueMetrics.js +13 -2332
- package/dist/entries/queue/redisQueue.js +9 -8
- package/dist/entries/security/safeFetch.js +1 -68
- package/dist/entries/security/safeUrl.js +1 -68
- package/dist/entries/security/stripeWebhook.js +1 -68
- package/dist/entries/tenant/databaseTenantContext.js +3 -105
- package/dist/entries/tenant/tenantDatabaseScope.js +3 -61
- package/dist/entries/validation/rules.js +1 -66
- package/dist/entries/view.js +159 -2735
- package/package.json +2 -2
|
@@ -1,69 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/
|
|
3
|
-
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
2
|
+
// ../../src/core/http/pagination.ts
|
|
3
|
+
import { BadRequestError as BadRequestError2 } from "@getstrata/core/errors/http";
|
|
67
4
|
|
|
68
5
|
// ../../src/core/pagination/index.ts
|
|
69
6
|
function buildPaginationMeta(input) {
|
|
@@ -76,52 +13,10 @@ function buildPaginationMeta(input) {
|
|
|
76
13
|
};
|
|
77
14
|
}
|
|
78
15
|
|
|
79
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
80
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
81
|
-
function createAsyncContextStore(key) {
|
|
82
|
-
const symbol = Symbol.for(key);
|
|
83
|
-
const globalRecord = globalThis;
|
|
84
|
-
const existing = globalRecord[symbol];
|
|
85
|
-
if (existing) {
|
|
86
|
-
return existing;
|
|
87
|
-
}
|
|
88
|
-
const store = new AsyncLocalStorage;
|
|
89
|
-
globalRecord[symbol] = store;
|
|
90
|
-
return store;
|
|
91
|
-
}
|
|
92
|
-
|
|
93
|
-
// ../../src/core/auth/authContext.ts
|
|
94
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
95
|
-
function runWithAuthUser(user, callback) {
|
|
96
|
-
return authContext.run(user, callback);
|
|
97
|
-
}
|
|
98
|
-
function currentAuthUser() {
|
|
99
|
-
return authContext.getStore() ?? null;
|
|
100
|
-
}
|
|
101
|
-
|
|
102
|
-
// ../../src/core/tenant/tenantContext.ts
|
|
103
|
-
var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
|
|
104
|
-
function runWithTenant(tenant, callback) {
|
|
105
|
-
return tenantContext.run(tenant, callback);
|
|
106
|
-
}
|
|
107
|
-
function currentTenant() {
|
|
108
|
-
return tenantContext.getStore() ?? null;
|
|
109
|
-
}
|
|
110
|
-
function currentTenantId() {
|
|
111
|
-
return currentTenant()?.id ?? 1;
|
|
112
|
-
}
|
|
113
|
-
function rateLimitMultiplierForPlan(plan) {
|
|
114
|
-
switch (plan) {
|
|
115
|
-
case "enterprise":
|
|
116
|
-
return 4;
|
|
117
|
-
case "pro":
|
|
118
|
-
return 2;
|
|
119
|
-
default:
|
|
120
|
-
return 1;
|
|
121
|
-
}
|
|
122
|
-
}
|
|
123
|
-
|
|
124
16
|
// ../../src/core/http/validation.ts
|
|
17
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
18
|
+
import { BadRequestError } from "@getstrata/core/errors/http";
|
|
19
|
+
import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
|
|
125
20
|
function getQueryParams(request) {
|
|
126
21
|
if (!request) {
|
|
127
22
|
return new URLSearchParams;
|
|
@@ -151,11 +46,11 @@ var MAX_PER_PAGE = 100;
|
|
|
151
46
|
function parseRequiredPositiveIntQueryParam(params, name) {
|
|
152
47
|
const value = params.get(name);
|
|
153
48
|
if (value === null || value.trim() === "") {
|
|
154
|
-
throw new
|
|
49
|
+
throw new BadRequestError2(`Invalid query parameter "${name}". Expected a positive integer.`);
|
|
155
50
|
}
|
|
156
51
|
const parsed = Number.parseInt(value, 10);
|
|
157
52
|
if (!Number.isInteger(parsed) || parsed <= 0) {
|
|
158
|
-
throw new
|
|
53
|
+
throw new BadRequestError2(`Invalid query parameter "${name}". Expected a positive integer.`);
|
|
159
54
|
}
|
|
160
55
|
return parsed;
|
|
161
56
|
}
|
|
@@ -169,7 +64,7 @@ function parsePaginationQuery(request) {
|
|
|
169
64
|
}
|
|
170
65
|
const perPage = parseRequiredPositiveIntQueryParam(params, "per_page");
|
|
171
66
|
if (perPage > MAX_PER_PAGE) {
|
|
172
|
-
throw new
|
|
67
|
+
throw new BadRequestError2(`Invalid query parameter "per_page". Maximum allowed value is ${MAX_PER_PAGE}.`);
|
|
173
68
|
}
|
|
174
69
|
return { page, perPage };
|
|
175
70
|
}
|
|
@@ -1,71 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
2
|
// ../../src/core/http/parseFormBody.ts
|
|
3
|
+
import { BadRequestError } from "@getstrata/core/errors/http";
|
|
69
4
|
async function parseFormBody(request) {
|
|
70
5
|
const contentType = request.headers.get("content-type")?.toLowerCase() ?? "";
|
|
71
6
|
if (!contentType.includes("application/x-www-form-urlencoded") && !contentType.includes("multipart/form-data")) {
|
|
@@ -1,4 +1,7 @@
|
|
|
1
1
|
// @bun
|
|
2
|
+
// ../../src/core/http/parseMultipartUpload.ts
|
|
3
|
+
import { BadRequestError, PayloadTooLargeError } from "@getstrata/core/errors/http";
|
|
4
|
+
|
|
2
5
|
// ../../src/config/uploads.ts
|
|
3
6
|
var DEFAULT_MAX_UPLOAD_BYTES = 5 * 1024 * 1024;
|
|
4
7
|
var ALLOWED_UPLOAD_MIME_TYPES = new Set([
|
|
@@ -35,72 +38,6 @@ function isAllowedMimeType(mimeType) {
|
|
|
35
38
|
return ALLOWED_UPLOAD_MIME_TYPES.has(normalized);
|
|
36
39
|
}
|
|
37
40
|
|
|
38
|
-
// ../../src/core/errors/http.ts
|
|
39
|
-
class HttpError extends Error {
|
|
40
|
-
status;
|
|
41
|
-
details;
|
|
42
|
-
constructor(status, message, details) {
|
|
43
|
-
super(message);
|
|
44
|
-
this.name = new.target.name;
|
|
45
|
-
this.status = status;
|
|
46
|
-
this.details = details;
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class BadRequestError extends HttpError {
|
|
51
|
-
constructor(message = "Bad Request", details) {
|
|
52
|
-
super(400, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class NotFoundError extends HttpError {
|
|
57
|
-
constructor(message = "Not Found", details) {
|
|
58
|
-
super(404, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class ConflictError extends HttpError {
|
|
63
|
-
constructor(message = "Conflict", details) {
|
|
64
|
-
super(409, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
class UnprocessableEntityError extends HttpError {
|
|
69
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
70
|
-
super(422, message, details);
|
|
71
|
-
}
|
|
72
|
-
}
|
|
73
|
-
|
|
74
|
-
class ValidationError extends HttpError {
|
|
75
|
-
constructor(message = "Validation failed", details) {
|
|
76
|
-
super(422, message, details);
|
|
77
|
-
}
|
|
78
|
-
}
|
|
79
|
-
|
|
80
|
-
class ForbiddenError extends HttpError {
|
|
81
|
-
constructor(message = "Forbidden", details) {
|
|
82
|
-
super(403, message, details);
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
|
|
86
|
-
class UnauthorizedError extends HttpError {
|
|
87
|
-
constructor(message = "Unauthorized", details) {
|
|
88
|
-
super(401, message, details);
|
|
89
|
-
}
|
|
90
|
-
}
|
|
91
|
-
|
|
92
|
-
class PayloadTooLargeError extends HttpError {
|
|
93
|
-
constructor(message = "Payload Too Large", details) {
|
|
94
|
-
super(413, message, details);
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
|
|
98
|
-
class PreconditionFailedError extends HttpError {
|
|
99
|
-
constructor(message = "Precondition Failed", details) {
|
|
100
|
-
super(412, message, details);
|
|
101
|
-
}
|
|
102
|
-
}
|
|
103
|
-
|
|
104
41
|
// ../../src/core/http/parseMultipartUpload.ts
|
|
105
42
|
function normalizeMimeType2(mimeType) {
|
|
106
43
|
return mimeType.split(";")[0]?.trim().toLowerCase() || "application/octet-stream";
|
|
@@ -1,94 +1,7 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
3
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
4
|
-
function createAsyncContextStore(key) {
|
|
5
|
-
const symbol = Symbol.for(key);
|
|
6
|
-
const globalRecord = globalThis;
|
|
7
|
-
const existing = globalRecord[symbol];
|
|
8
|
-
if (existing) {
|
|
9
|
-
return existing;
|
|
10
|
-
}
|
|
11
|
-
const store = new AsyncLocalStorage;
|
|
12
|
-
globalRecord[symbol] = store;
|
|
13
|
-
return store;
|
|
14
|
-
}
|
|
15
|
-
|
|
16
|
-
// ../../src/core/auth/authContext.ts
|
|
17
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
18
|
-
function runWithAuthUser(user, callback) {
|
|
19
|
-
return authContext.run(user, callback);
|
|
20
|
-
}
|
|
21
|
-
function currentAuthUser() {
|
|
22
|
-
return authContext.getStore() ?? null;
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
// ../../src/core/errors/http.ts
|
|
26
|
-
class HttpError extends Error {
|
|
27
|
-
status;
|
|
28
|
-
details;
|
|
29
|
-
constructor(status, message, details) {
|
|
30
|
-
super(message);
|
|
31
|
-
this.name = new.target.name;
|
|
32
|
-
this.status = status;
|
|
33
|
-
this.details = details;
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
class BadRequestError extends HttpError {
|
|
38
|
-
constructor(message = "Bad Request", details) {
|
|
39
|
-
super(400, message, details);
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
|
-
|
|
43
|
-
class NotFoundError extends HttpError {
|
|
44
|
-
constructor(message = "Not Found", details) {
|
|
45
|
-
super(404, message, details);
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
|
|
49
|
-
class ConflictError extends HttpError {
|
|
50
|
-
constructor(message = "Conflict", details) {
|
|
51
|
-
super(409, message, details);
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
|
|
55
|
-
class UnprocessableEntityError extends HttpError {
|
|
56
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
57
|
-
super(422, message, details);
|
|
58
|
-
}
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
class ValidationError extends HttpError {
|
|
62
|
-
constructor(message = "Validation failed", details) {
|
|
63
|
-
super(422, message, details);
|
|
64
|
-
}
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
class ForbiddenError extends HttpError {
|
|
68
|
-
constructor(message = "Forbidden", details) {
|
|
69
|
-
super(403, message, details);
|
|
70
|
-
}
|
|
71
|
-
}
|
|
72
|
-
|
|
73
|
-
class UnauthorizedError extends HttpError {
|
|
74
|
-
constructor(message = "Unauthorized", details) {
|
|
75
|
-
super(401, message, details);
|
|
76
|
-
}
|
|
77
|
-
}
|
|
78
|
-
|
|
79
|
-
class PayloadTooLargeError extends HttpError {
|
|
80
|
-
constructor(message = "Payload Too Large", details) {
|
|
81
|
-
super(413, message, details);
|
|
82
|
-
}
|
|
83
|
-
}
|
|
84
|
-
|
|
85
|
-
class PreconditionFailedError extends HttpError {
|
|
86
|
-
constructor(message = "Precondition Failed", details) {
|
|
87
|
-
super(412, message, details);
|
|
88
|
-
}
|
|
89
|
-
}
|
|
90
|
-
|
|
91
2
|
// ../../src/core/http/requireAbilityMiddleware.ts
|
|
3
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
4
|
+
import { ForbiddenError } from "@getstrata/core/errors/http";
|
|
92
5
|
function createRequireAbilityMiddleware(abilityChecker) {
|
|
93
6
|
return (ability) => {
|
|
94
7
|
return async (_request, next) => {
|
|
@@ -1,71 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
2
|
// ../../src/core/http/requireAuthMiddleware.ts
|
|
3
|
+
import { UnauthorizedError } from "@getstrata/core/errors/http";
|
|
69
4
|
function createRequireAuthMiddleware(auth) {
|
|
70
5
|
return async (request, next) => {
|
|
71
6
|
if (!await auth.check(request)) {
|
|
@@ -1,133 +1,9 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
69
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
70
|
-
function createAsyncContextStore(key) {
|
|
71
|
-
const symbol = Symbol.for(key);
|
|
72
|
-
const globalRecord = globalThis;
|
|
73
|
-
const existing = globalRecord[symbol];
|
|
74
|
-
if (existing) {
|
|
75
|
-
return existing;
|
|
76
|
-
}
|
|
77
|
-
const store = new AsyncLocalStorage;
|
|
78
|
-
globalRecord[symbol] = store;
|
|
79
|
-
return store;
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
// ../../src/core/auth/authContext.ts
|
|
83
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
84
|
-
function runWithAuthUser(user, callback) {
|
|
85
|
-
return authContext.run(user, callback);
|
|
86
|
-
}
|
|
87
|
-
function currentAuthUser() {
|
|
88
|
-
return authContext.getStore() ?? null;
|
|
89
|
-
}
|
|
90
|
-
|
|
91
|
-
// ../../src/core/auth/accessControl.ts
|
|
92
|
-
function isGlobalAdmin(user) {
|
|
93
|
-
return user?.role === "admin";
|
|
94
|
-
}
|
|
95
|
-
function resolveUserId(user) {
|
|
96
|
-
const userId = typeof user.id === "number" ? user.id : Number(user.id);
|
|
97
|
-
if (!Number.isInteger(userId) || userId <= 0) {
|
|
98
|
-
throw new ForbiddenError("Invalid authenticated user.");
|
|
99
|
-
}
|
|
100
|
-
return userId;
|
|
101
|
-
}
|
|
102
|
-
|
|
103
|
-
// ../../src/core/http/requestMetaContext.ts
|
|
104
|
-
var requestMetaContext = createAsyncContextStore("@getstrata/requestMetaContext");
|
|
105
|
-
function runWithRequestMeta(meta, callback) {
|
|
106
|
-
return requestMetaContext.run(meta, callback);
|
|
107
|
-
}
|
|
108
|
-
function currentRequestMeta() {
|
|
109
|
-
return requestMetaContext.getStore() ?? {
|
|
110
|
-
ipAddress: null,
|
|
111
|
-
userAgent: null
|
|
112
|
-
};
|
|
113
|
-
}
|
|
114
|
-
|
|
115
|
-
// ../../src/core/security/securityEvents.ts
|
|
116
|
-
function logSecurityEvent(event, details = {}) {
|
|
117
|
-
const meta = currentRequestMeta();
|
|
118
|
-
const user = currentAuthUser();
|
|
119
|
-
console.log(JSON.stringify({
|
|
120
|
-
level: "security",
|
|
121
|
-
event,
|
|
122
|
-
timestamp: new Date().toISOString(),
|
|
123
|
-
ip_address: meta.ipAddress ?? null,
|
|
124
|
-
user_agent: meta.userAgent ?? null,
|
|
125
|
-
user_id: user?.id ?? null,
|
|
126
|
-
...details
|
|
127
|
-
}));
|
|
128
|
-
}
|
|
129
|
-
|
|
130
2
|
// ../../src/core/http/requireGlobalAdminMiddleware.ts
|
|
3
|
+
import { isGlobalAdmin } from "@getstrata/core/auth/accessControl";
|
|
4
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
5
|
+
import { ForbiddenError } from "@getstrata/core/errors/http";
|
|
6
|
+
import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
|
|
131
7
|
function createRequireGlobalAdminMiddleware() {
|
|
132
8
|
return async (_request, next) => {
|
|
133
9
|
const user = currentAuthUser();
|
|
@@ -1,69 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/
|
|
3
|
-
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
2
|
+
// ../../src/core/http/requireWebAuthMiddleware.ts
|
|
3
|
+
import { UnauthorizedError } from "@getstrata/core/errors/http";
|
|
67
4
|
|
|
68
5
|
// ../../src/core/http/contentNegotiation.ts
|
|
69
6
|
function requestPrefersJson(request) {
|