@getstrata/core 0.5.49 → 0.5.50
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -2
- package/dist/core/auth/membershipContextMiddleware.d.ts +1 -1
- package/dist/core/auth/scimAuthMiddleware.d.ts +1 -1
- package/dist/core/database/errors.d.ts +1 -1
- package/dist/core/facades/index.d.ts +1 -1
- package/dist/core/http/authMiddleware.d.ts +2 -2
- package/dist/core/http/authorizeMiddleware.d.ts +2 -2
- package/dist/core/http/index.d.ts +1 -1
- package/dist/core/http/requireAuthMiddleware.d.ts +1 -1
- package/dist/core/http/requireWebAuthMiddleware.d.ts +1 -1
- package/dist/core/http/securedRouteModelBinding.d.ts +1 -1
- package/dist/core/logging/requestLoggingMiddleware.d.ts +1 -1
- package/dist/core/queue/failedJobRepository.d.ts +1 -1
- package/dist/core/queue/failedJobTable.d.ts +1 -1
- package/dist/core/runtime/applicationRegistry.d.ts +3 -3
- package/dist/core/tracing/tracingMiddleware.d.ts +1 -1
- package/dist/entries/audit/exportAuditLogs.js +9 -175
- package/dist/entries/auth/membershipMiddleware.js +2 -74
- package/dist/entries/auth/scimAuthMiddleware.js +10 -93
- package/dist/entries/auth/sessionGuard.js +0 -6
- package/dist/entries/database/errors.js +6 -66
- package/dist/entries/database/model.js +2 -65
- package/dist/entries/http/authMiddleware.js +1 -23
- package/dist/entries/http/authorizeMiddleware.js +2 -89
- package/dist/entries/http/bodySizeLimitMiddleware.js +1 -66
- package/dist/entries/http/conditionalResponse.js +3 -66
- package/dist/entries/http/csrfMiddleware.js +2 -65
- package/dist/entries/http/etag.js +3 -66
- package/dist/entries/http/formRequest.js +5 -107
- package/dist/entries/http/pagination.js +8 -110
- package/dist/entries/http/parseFormBody.js +1 -66
- package/dist/entries/http/parseMultipartUpload.js +3 -66
- package/dist/entries/http/requireAbilityMiddleware.js +2 -89
- package/dist/entries/http/requireAuthMiddleware.js +1 -66
- package/dist/entries/http/requireGlobalAdminMiddleware.js +4 -128
- package/dist/entries/http/requireWebAuthMiddleware.js +2 -65
- package/dist/entries/http/routeModelBinding.js +3 -108
- package/dist/entries/http/securedRouteModelBinding.js +15 -203
- package/dist/entries/http/throttleMiddleware.js +2 -44
- package/dist/entries/http/webErrorResponse.js +25 -93
- package/dist/entries/http/webFormRequest.js +8 -109
- package/dist/entries/jobs/dispatchWebhookJob.js +5 -174
- package/dist/entries/logging/requestLoggingMiddleware.js +2 -25
- package/dist/entries/queue/createAppQueue.js +4 -2324
- package/dist/entries/queue/failedJobRepository.js +4 -2324
- package/dist/entries/queue/publicQueue.js +4 -2324
- package/dist/entries/queue/queueMetrics.js +4 -2324
- package/dist/entries/security/safeFetch.js +1 -68
- package/dist/entries/security/safeUrl.js +1 -68
- package/dist/entries/security/stripeWebhook.js +1 -68
- package/dist/entries/tenant/databaseTenantContext.js +3 -105
- package/dist/entries/tenant/tenantDatabaseScope.js +3 -58
- package/dist/entries/validation/rules.js +1 -66
- package/dist/entries/view.js +5 -16
- package/package.json +2 -2
|
@@ -1,69 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/
|
|
3
|
-
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
2
|
+
// ../../src/core/http/pagination.ts
|
|
3
|
+
import { BadRequestError as BadRequestError2 } from "@getstrata/core/errors/http";
|
|
67
4
|
|
|
68
5
|
// ../../src/core/pagination/index.ts
|
|
69
6
|
function buildPaginationMeta(input) {
|
|
@@ -76,49 +13,10 @@ function buildPaginationMeta(input) {
|
|
|
76
13
|
};
|
|
77
14
|
}
|
|
78
15
|
|
|
79
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
80
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
81
|
-
function createAsyncContextStore(key) {
|
|
82
|
-
const symbol = Symbol.for(key);
|
|
83
|
-
const globalRecord = globalThis;
|
|
84
|
-
const existing = globalRecord[symbol];
|
|
85
|
-
if (existing) {
|
|
86
|
-
return existing;
|
|
87
|
-
}
|
|
88
|
-
const store = new AsyncLocalStorage;
|
|
89
|
-
globalRecord[symbol] = store;
|
|
90
|
-
return store;
|
|
91
|
-
}
|
|
92
|
-
|
|
93
|
-
// ../../src/core/auth/authContext.ts
|
|
94
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
95
|
-
function runWithAuthUser(user, callback) {
|
|
96
|
-
return authContext.run(user, callback);
|
|
97
|
-
}
|
|
98
|
-
function currentAuthUser() {
|
|
99
|
-
return authContext.getStore() ?? null;
|
|
100
|
-
}
|
|
101
|
-
|
|
102
|
-
// ../../src/core/tenant/tenantContext.ts
|
|
103
|
-
var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
|
|
104
|
-
function runWithTenant(tenant, callback) {
|
|
105
|
-
return tenantContext.run(tenant, callback);
|
|
106
|
-
}
|
|
107
|
-
function currentTenant() {
|
|
108
|
-
return tenantContext.getStore() ?? null;
|
|
109
|
-
}
|
|
110
|
-
function rateLimitMultiplierForPlan(plan) {
|
|
111
|
-
switch (plan) {
|
|
112
|
-
case "enterprise":
|
|
113
|
-
return 4;
|
|
114
|
-
case "pro":
|
|
115
|
-
return 2;
|
|
116
|
-
default:
|
|
117
|
-
return 1;
|
|
118
|
-
}
|
|
119
|
-
}
|
|
120
|
-
|
|
121
16
|
// ../../src/core/http/validation.ts
|
|
17
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
18
|
+
import { BadRequestError } from "@getstrata/core/errors/http";
|
|
19
|
+
import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
|
|
122
20
|
function getQueryParams(request) {
|
|
123
21
|
if (!request) {
|
|
124
22
|
return new URLSearchParams;
|
|
@@ -148,11 +46,11 @@ var MAX_PER_PAGE = 100;
|
|
|
148
46
|
function parseRequiredPositiveIntQueryParam(params, name) {
|
|
149
47
|
const value = params.get(name);
|
|
150
48
|
if (value === null || value.trim() === "") {
|
|
151
|
-
throw new
|
|
49
|
+
throw new BadRequestError2(`Invalid query parameter "${name}". Expected a positive integer.`);
|
|
152
50
|
}
|
|
153
51
|
const parsed = Number.parseInt(value, 10);
|
|
154
52
|
if (!Number.isInteger(parsed) || parsed <= 0) {
|
|
155
|
-
throw new
|
|
53
|
+
throw new BadRequestError2(`Invalid query parameter "${name}". Expected a positive integer.`);
|
|
156
54
|
}
|
|
157
55
|
return parsed;
|
|
158
56
|
}
|
|
@@ -166,7 +64,7 @@ function parsePaginationQuery(request) {
|
|
|
166
64
|
}
|
|
167
65
|
const perPage = parseRequiredPositiveIntQueryParam(params, "per_page");
|
|
168
66
|
if (perPage > MAX_PER_PAGE) {
|
|
169
|
-
throw new
|
|
67
|
+
throw new BadRequestError2(`Invalid query parameter "per_page". Maximum allowed value is ${MAX_PER_PAGE}.`);
|
|
170
68
|
}
|
|
171
69
|
return { page, perPage };
|
|
172
70
|
}
|
|
@@ -1,71 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
2
|
// ../../src/core/http/parseFormBody.ts
|
|
3
|
+
import { BadRequestError } from "@getstrata/core/errors/http";
|
|
69
4
|
async function parseFormBody(request) {
|
|
70
5
|
const contentType = request.headers.get("content-type")?.toLowerCase() ?? "";
|
|
71
6
|
if (!contentType.includes("application/x-www-form-urlencoded") && !contentType.includes("multipart/form-data")) {
|
|
@@ -1,4 +1,7 @@
|
|
|
1
1
|
// @bun
|
|
2
|
+
// ../../src/core/http/parseMultipartUpload.ts
|
|
3
|
+
import { BadRequestError, PayloadTooLargeError } from "@getstrata/core/errors/http";
|
|
4
|
+
|
|
2
5
|
// ../../src/config/uploads.ts
|
|
3
6
|
var DEFAULT_MAX_UPLOAD_BYTES = 5 * 1024 * 1024;
|
|
4
7
|
var ALLOWED_UPLOAD_MIME_TYPES = new Set([
|
|
@@ -35,72 +38,6 @@ function isAllowedMimeType(mimeType) {
|
|
|
35
38
|
return ALLOWED_UPLOAD_MIME_TYPES.has(normalized);
|
|
36
39
|
}
|
|
37
40
|
|
|
38
|
-
// ../../src/core/errors/http.ts
|
|
39
|
-
class HttpError extends Error {
|
|
40
|
-
status;
|
|
41
|
-
details;
|
|
42
|
-
constructor(status, message, details) {
|
|
43
|
-
super(message);
|
|
44
|
-
this.name = new.target.name;
|
|
45
|
-
this.status = status;
|
|
46
|
-
this.details = details;
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class BadRequestError extends HttpError {
|
|
51
|
-
constructor(message = "Bad Request", details) {
|
|
52
|
-
super(400, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class NotFoundError extends HttpError {
|
|
57
|
-
constructor(message = "Not Found", details) {
|
|
58
|
-
super(404, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class ConflictError extends HttpError {
|
|
63
|
-
constructor(message = "Conflict", details) {
|
|
64
|
-
super(409, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
class UnprocessableEntityError extends HttpError {
|
|
69
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
70
|
-
super(422, message, details);
|
|
71
|
-
}
|
|
72
|
-
}
|
|
73
|
-
|
|
74
|
-
class ValidationError extends HttpError {
|
|
75
|
-
constructor(message = "Validation failed", details) {
|
|
76
|
-
super(422, message, details);
|
|
77
|
-
}
|
|
78
|
-
}
|
|
79
|
-
|
|
80
|
-
class ForbiddenError extends HttpError {
|
|
81
|
-
constructor(message = "Forbidden", details) {
|
|
82
|
-
super(403, message, details);
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
|
|
86
|
-
class UnauthorizedError extends HttpError {
|
|
87
|
-
constructor(message = "Unauthorized", details) {
|
|
88
|
-
super(401, message, details);
|
|
89
|
-
}
|
|
90
|
-
}
|
|
91
|
-
|
|
92
|
-
class PayloadTooLargeError extends HttpError {
|
|
93
|
-
constructor(message = "Payload Too Large", details) {
|
|
94
|
-
super(413, message, details);
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
|
|
98
|
-
class PreconditionFailedError extends HttpError {
|
|
99
|
-
constructor(message = "Precondition Failed", details) {
|
|
100
|
-
super(412, message, details);
|
|
101
|
-
}
|
|
102
|
-
}
|
|
103
|
-
|
|
104
41
|
// ../../src/core/http/parseMultipartUpload.ts
|
|
105
42
|
function normalizeMimeType2(mimeType) {
|
|
106
43
|
return mimeType.split(";")[0]?.trim().toLowerCase() || "application/octet-stream";
|
|
@@ -1,94 +1,7 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
3
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
4
|
-
function createAsyncContextStore(key) {
|
|
5
|
-
const symbol = Symbol.for(key);
|
|
6
|
-
const globalRecord = globalThis;
|
|
7
|
-
const existing = globalRecord[symbol];
|
|
8
|
-
if (existing) {
|
|
9
|
-
return existing;
|
|
10
|
-
}
|
|
11
|
-
const store = new AsyncLocalStorage;
|
|
12
|
-
globalRecord[symbol] = store;
|
|
13
|
-
return store;
|
|
14
|
-
}
|
|
15
|
-
|
|
16
|
-
// ../../src/core/auth/authContext.ts
|
|
17
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
18
|
-
function runWithAuthUser(user, callback) {
|
|
19
|
-
return authContext.run(user, callback);
|
|
20
|
-
}
|
|
21
|
-
function currentAuthUser() {
|
|
22
|
-
return authContext.getStore() ?? null;
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
// ../../src/core/errors/http.ts
|
|
26
|
-
class HttpError extends Error {
|
|
27
|
-
status;
|
|
28
|
-
details;
|
|
29
|
-
constructor(status, message, details) {
|
|
30
|
-
super(message);
|
|
31
|
-
this.name = new.target.name;
|
|
32
|
-
this.status = status;
|
|
33
|
-
this.details = details;
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
class BadRequestError extends HttpError {
|
|
38
|
-
constructor(message = "Bad Request", details) {
|
|
39
|
-
super(400, message, details);
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
|
-
|
|
43
|
-
class NotFoundError extends HttpError {
|
|
44
|
-
constructor(message = "Not Found", details) {
|
|
45
|
-
super(404, message, details);
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
|
|
49
|
-
class ConflictError extends HttpError {
|
|
50
|
-
constructor(message = "Conflict", details) {
|
|
51
|
-
super(409, message, details);
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
|
|
55
|
-
class UnprocessableEntityError extends HttpError {
|
|
56
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
57
|
-
super(422, message, details);
|
|
58
|
-
}
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
class ValidationError extends HttpError {
|
|
62
|
-
constructor(message = "Validation failed", details) {
|
|
63
|
-
super(422, message, details);
|
|
64
|
-
}
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
class ForbiddenError extends HttpError {
|
|
68
|
-
constructor(message = "Forbidden", details) {
|
|
69
|
-
super(403, message, details);
|
|
70
|
-
}
|
|
71
|
-
}
|
|
72
|
-
|
|
73
|
-
class UnauthorizedError extends HttpError {
|
|
74
|
-
constructor(message = "Unauthorized", details) {
|
|
75
|
-
super(401, message, details);
|
|
76
|
-
}
|
|
77
|
-
}
|
|
78
|
-
|
|
79
|
-
class PayloadTooLargeError extends HttpError {
|
|
80
|
-
constructor(message = "Payload Too Large", details) {
|
|
81
|
-
super(413, message, details);
|
|
82
|
-
}
|
|
83
|
-
}
|
|
84
|
-
|
|
85
|
-
class PreconditionFailedError extends HttpError {
|
|
86
|
-
constructor(message = "Precondition Failed", details) {
|
|
87
|
-
super(412, message, details);
|
|
88
|
-
}
|
|
89
|
-
}
|
|
90
|
-
|
|
91
2
|
// ../../src/core/http/requireAbilityMiddleware.ts
|
|
3
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
4
|
+
import { ForbiddenError } from "@getstrata/core/errors/http";
|
|
92
5
|
function createRequireAbilityMiddleware(abilityChecker) {
|
|
93
6
|
return (ability) => {
|
|
94
7
|
return async (_request, next) => {
|
|
@@ -1,71 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
2
|
// ../../src/core/http/requireAuthMiddleware.ts
|
|
3
|
+
import { UnauthorizedError } from "@getstrata/core/errors/http";
|
|
69
4
|
function createRequireAuthMiddleware(auth) {
|
|
70
5
|
return async (request, next) => {
|
|
71
6
|
if (!await auth.check(request)) {
|
|
@@ -1,133 +1,9 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/errors/http.ts
|
|
3
|
-
class HttpError extends Error {
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
// ../../src/core/runtime/asyncContextStore.ts
|
|
69
|
-
import { AsyncLocalStorage } from "async_hooks";
|
|
70
|
-
function createAsyncContextStore(key) {
|
|
71
|
-
const symbol = Symbol.for(key);
|
|
72
|
-
const globalRecord = globalThis;
|
|
73
|
-
const existing = globalRecord[symbol];
|
|
74
|
-
if (existing) {
|
|
75
|
-
return existing;
|
|
76
|
-
}
|
|
77
|
-
const store = new AsyncLocalStorage;
|
|
78
|
-
globalRecord[symbol] = store;
|
|
79
|
-
return store;
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
// ../../src/core/auth/authContext.ts
|
|
83
|
-
var authContext = createAsyncContextStore("@getstrata/authContext");
|
|
84
|
-
function runWithAuthUser(user, callback) {
|
|
85
|
-
return authContext.run(user, callback);
|
|
86
|
-
}
|
|
87
|
-
function currentAuthUser() {
|
|
88
|
-
return authContext.getStore() ?? null;
|
|
89
|
-
}
|
|
90
|
-
|
|
91
|
-
// ../../src/core/auth/accessControl.ts
|
|
92
|
-
function isGlobalAdmin(user) {
|
|
93
|
-
return user?.role === "admin";
|
|
94
|
-
}
|
|
95
|
-
function resolveUserId(user) {
|
|
96
|
-
const userId = typeof user.id === "number" ? user.id : Number(user.id);
|
|
97
|
-
if (!Number.isInteger(userId) || userId <= 0) {
|
|
98
|
-
throw new ForbiddenError("Invalid authenticated user.");
|
|
99
|
-
}
|
|
100
|
-
return userId;
|
|
101
|
-
}
|
|
102
|
-
|
|
103
|
-
// ../../src/core/http/requestMetaContext.ts
|
|
104
|
-
var requestMetaContext = createAsyncContextStore("@getstrata/requestMetaContext");
|
|
105
|
-
function runWithRequestMeta(meta, callback) {
|
|
106
|
-
return requestMetaContext.run(meta, callback);
|
|
107
|
-
}
|
|
108
|
-
function currentRequestMeta() {
|
|
109
|
-
return requestMetaContext.getStore() ?? {
|
|
110
|
-
ipAddress: null,
|
|
111
|
-
userAgent: null
|
|
112
|
-
};
|
|
113
|
-
}
|
|
114
|
-
|
|
115
|
-
// ../../src/core/security/securityEvents.ts
|
|
116
|
-
function logSecurityEvent(event, details = {}) {
|
|
117
|
-
const meta = currentRequestMeta();
|
|
118
|
-
const user = currentAuthUser();
|
|
119
|
-
console.log(JSON.stringify({
|
|
120
|
-
level: "security",
|
|
121
|
-
event,
|
|
122
|
-
timestamp: new Date().toISOString(),
|
|
123
|
-
ip_address: meta.ipAddress ?? null,
|
|
124
|
-
user_agent: meta.userAgent ?? null,
|
|
125
|
-
user_id: user?.id ?? null,
|
|
126
|
-
...details
|
|
127
|
-
}));
|
|
128
|
-
}
|
|
129
|
-
|
|
130
2
|
// ../../src/core/http/requireGlobalAdminMiddleware.ts
|
|
3
|
+
import { isGlobalAdmin } from "@getstrata/core/auth/accessControl";
|
|
4
|
+
import { currentAuthUser } from "@getstrata/core/auth/authContext";
|
|
5
|
+
import { ForbiddenError } from "@getstrata/core/errors/http";
|
|
6
|
+
import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
|
|
131
7
|
function createRequireGlobalAdminMiddleware() {
|
|
132
8
|
return async (_request, next) => {
|
|
133
9
|
const user = currentAuthUser();
|
|
@@ -1,69 +1,6 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
// ../../src/core/
|
|
3
|
-
|
|
4
|
-
status;
|
|
5
|
-
details;
|
|
6
|
-
constructor(status, message, details) {
|
|
7
|
-
super(message);
|
|
8
|
-
this.name = new.target.name;
|
|
9
|
-
this.status = status;
|
|
10
|
-
this.details = details;
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
class BadRequestError extends HttpError {
|
|
15
|
-
constructor(message = "Bad Request", details) {
|
|
16
|
-
super(400, message, details);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
|
|
20
|
-
class NotFoundError extends HttpError {
|
|
21
|
-
constructor(message = "Not Found", details) {
|
|
22
|
-
super(404, message, details);
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
class ConflictError extends HttpError {
|
|
27
|
-
constructor(message = "Conflict", details) {
|
|
28
|
-
super(409, message, details);
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
class UnprocessableEntityError extends HttpError {
|
|
33
|
-
constructor(message = "Unprocessable Entity", details) {
|
|
34
|
-
super(422, message, details);
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
|
|
38
|
-
class ValidationError extends HttpError {
|
|
39
|
-
constructor(message = "Validation failed", details) {
|
|
40
|
-
super(422, message, details);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
class ForbiddenError extends HttpError {
|
|
45
|
-
constructor(message = "Forbidden", details) {
|
|
46
|
-
super(403, message, details);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
class UnauthorizedError extends HttpError {
|
|
51
|
-
constructor(message = "Unauthorized", details) {
|
|
52
|
-
super(401, message, details);
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
class PayloadTooLargeError extends HttpError {
|
|
57
|
-
constructor(message = "Payload Too Large", details) {
|
|
58
|
-
super(413, message, details);
|
|
59
|
-
}
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
class PreconditionFailedError extends HttpError {
|
|
63
|
-
constructor(message = "Precondition Failed", details) {
|
|
64
|
-
super(412, message, details);
|
|
65
|
-
}
|
|
66
|
-
}
|
|
2
|
+
// ../../src/core/http/requireWebAuthMiddleware.ts
|
|
3
|
+
import { UnauthorizedError } from "@getstrata/core/errors/http";
|
|
67
4
|
|
|
68
5
|
// ../../src/core/http/contentNegotiation.ts
|
|
69
6
|
function requestPrefersJson(request) {
|