@infuro/cms-core 1.0.11 → 1.0.12

package/dist/{index-DeO4AnAj.d.ts → index-C4Yl7js9.d.ts}

@@ -265,6 +265,13 @@ interface SettingsApiConfig extends CmsHandlersBase {
     /** Groups in this list are readable without auth (GET returns all keys for the group). */
     publicGetGroups?: string[];
 }
+interface GetPublicSettingsGroupConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap;
+    encryptionKey?: string;
+}
+/** Same rows as unauthenticated GET /api/settings/:group when the group is in publicGetGroups. */
+declare function getPublicSettingsGroup(config: GetPublicSettingsGroupConfig, group: string): Promise<Record<string, string>>;
 declare function createSettingsApiHandlers(config: SettingsApiConfig): {
     GET(req: Request, group: string): Promise<Response>;
     PUT(req: Request, group: string): Promise<Response>;
@@ -359,4 +366,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, createSetPasswordHandler as G, createSettingsApiHandlers as H, type InviteAcceptConfig as I, createStorefrontApiHandler as J, createUploadHandler as K, createUserAuthApiRouter as L, createUserAvatarHandler as M, createUserProfileHandler as N, type OrderPlacedLineItem as O, createUsersApiHandlers as P, getCompanyDetailsFromSettings as Q, mergeEmailLayoutCompanyDetails as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, type EmailTemplateName as a, type AuthHandlersConfig as b, type ChangePasswordConfig as c, type CmsApiHandlerConfig as d, type CmsGetter as e, type CrudHandlerOptions as f, type EntityMap as g, type FormBySlugConfig as h, type SetPasswordConfig as i, type SettingsApiConfig as j, type SocialLinkItem as k, type StorefrontApiConfig as l, type UserAuthApiConfig as m, type UserAvatarConfig as n, type UserProfileConfig as o, type UsersApiConfig as p, createAnalyticsHandlers as q, createBlogBySlugHandler as r, createChangePasswordHandler as s, createCmsApiHandler as t, createCrudByIdHandler as u, createCrudHandler as v, createDashboardStatsHandler as w, createForgotPasswordHandler as x, createFormBySlugHandler as y, createInviteAcceptHandler as z };
+export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createSetPasswordHandler as H, type InviteAcceptConfig as I, createSettingsApiHandlers as J, createStorefrontApiHandler as K, createUploadHandler as L, createUserAuthApiRouter as M, createUserAvatarHandler as N, type OrderPlacedLineItem as O, createUserProfileHandler as P, createUsersApiHandlers as Q, getCompanyDetailsFromSettings as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, getPublicSettingsGroup as V, mergeEmailLayoutCompanyDetails as W, type EmailTemplateName as a, type AuthHandlersConfig as b, type ChangePasswordConfig as c, type CmsApiHandlerConfig as d, type CmsGetter as e, type CrudHandlerOptions as f, type EntityMap as g, type FormBySlugConfig as h, type SetPasswordConfig as i, type SettingsApiConfig as j, type SocialLinkItem as k, type StorefrontApiConfig as l, type UserAuthApiConfig as m, type UserAvatarConfig as n, type UserProfileConfig as o, type UsersApiConfig as p, createAnalyticsHandlers as q, createBlogBySlugHandler as r, createChangePasswordHandler as s, createCmsApiHandler as t, createCrudByIdHandler as u, createCrudHandler as v, createDashboardStatsHandler as w, createForgotPasswordHandler as x, createFormBySlugHandler as y, createInviteAcceptHandler as z };

package/dist/{index-C_CZLmHD.d.cts → index-JrST6EIC.d.cts}

@@ -265,6 +265,13 @@ interface SettingsApiConfig extends CmsHandlersBase {
     /** Groups in this list are readable without auth (GET returns all keys for the group). */
     publicGetGroups?: string[];
 }
+interface GetPublicSettingsGroupConfig {
+    dataSource: DataSource;
+    entityMap: EntityMap;
+    encryptionKey?: string;
+}
+/** Same rows as unauthenticated GET /api/settings/:group when the group is in publicGetGroups. */
+declare function getPublicSettingsGroup(config: GetPublicSettingsGroupConfig, group: string): Promise<Record<string, string>>;
 declare function createSettingsApiHandlers(config: SettingsApiConfig): {
     GET(req: Request, group: string): Promise<Response>;
     PUT(req: Request, group: string): Promise<Response>;
@@ -359,4 +366,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, createSetPasswordHandler as G, createSettingsApiHandlers as H, type InviteAcceptConfig as I, createStorefrontApiHandler as J, createUploadHandler as K, createUserAuthApiRouter as L, createUserAvatarHandler as M, createUserProfileHandler as N, type OrderPlacedLineItem as O, createUsersApiHandlers as P, getCompanyDetailsFromSettings as Q, mergeEmailLayoutCompanyDetails as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, type EmailTemplateName as a, type AuthHandlersConfig as b, type ChangePasswordConfig as c, type CmsApiHandlerConfig as d, type CmsGetter as e, type CrudHandlerOptions as f, type EntityMap as g, type FormBySlugConfig as h, type SetPasswordConfig as i, type SettingsApiConfig as j, type SocialLinkItem as k, type StorefrontApiConfig as l, type UserAuthApiConfig as m, type UserAvatarConfig as n, type UserProfileConfig as o, type UsersApiConfig as p, createAnalyticsHandlers as q, createBlogBySlugHandler as r, createChangePasswordHandler as s, createCmsApiHandler as t, createCrudByIdHandler as u, createCrudHandler as v, createDashboardStatsHandler as w, createForgotPasswordHandler as x, createFormBySlugHandler as y, createInviteAcceptHandler as z };
+export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createSetPasswordHandler as H, type InviteAcceptConfig as I, createSettingsApiHandlers as J, createStorefrontApiHandler as K, createUploadHandler as L, createUserAuthApiRouter as M, createUserAvatarHandler as N, type OrderPlacedLineItem as O, createUserProfileHandler as P, createUsersApiHandlers as Q, getCompanyDetailsFromSettings as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, getPublicSettingsGroup as V, mergeEmailLayoutCompanyDetails as W, type EmailTemplateName as a, type AuthHandlersConfig as b, type ChangePasswordConfig as c, type CmsApiHandlerConfig as d, type CmsGetter as e, type CrudHandlerOptions as f, type EntityMap as g, type FormBySlugConfig as h, type SetPasswordConfig as i, type SettingsApiConfig as j, type SocialLinkItem as k, type StorefrontApiConfig as l, type UserAuthApiConfig as m, type UserAvatarConfig as n, type UserProfileConfig as o, type UsersApiConfig as p, createAnalyticsHandlers as q, createBlogBySlugHandler as r, createChangePasswordHandler as s, createCmsApiHandler as t, createCrudByIdHandler as u, createCrudHandler as v, createDashboardStatsHandler as w, createForgotPasswordHandler as x, createFormBySlugHandler as y, createInviteAcceptHandler as z };

package/dist/index.cjs

@@ -316,6 +316,7 @@ __export(src_exports, {
   getCompanyDetailsFromSettings: () => getCompanyDetailsFromSettings,
   getNextAuthOptions: () => getNextAuthOptions,
   getPermissionableEntityKeys: () => getPermissionableEntityKeys,
+  getPublicSettingsGroup: () => getPublicSettingsGroup,
   getRequiredPermission: () => getRequiredPermission,
   hasEntityPermission: () => hasEntityPermission,
   isOpenEndpoint: () => isOpenEndpoint,
@@ -5798,6 +5799,24 @@ function simpleDecrypt(encoded, key) {
   for (let i = 0; i < buf.length; i++) out[i] = buf[i] ^ keyBuf[i % keyBuf.length];
   return out.toString("utf8");
 }
+async function getPublicSettingsGroup(config, group) {
+  const { dataSource, entityMap, encryptionKey } = config;
+  const repo = dataSource.getRepository(entityMap.configs);
+  const rows = await repo.find({ where: { settings: group, deleted: false } });
+  const result = {};
+  for (const row of rows) {
+    const r = row;
+    let val = r.value;
+    if (r.encrypted && encryptionKey) {
+      try {
+        val = simpleDecrypt(val, encryptionKey);
+      } catch {
+      }
+    }
+    result[r.key] = val;
+  }
+  return result;
+}
 function createSettingsApiHandlers(config) {
   const { dataSource, entityMap, json, requireAuth, encryptionKey, publicGetGroups } = config;
   const configRepo = () => dataSource.getRepository(entityMap.configs);
@@ -5807,6 +5826,13 @@ function createSettingsApiHandlers(config) {
       const authErr = isPublicGroup ? null : await requireAuth(req);
       const isAuthed = !authErr;
       try {
+        if (isPublicGroup) {
+          const result2 = await getPublicSettingsGroup(
+            { dataSource, entityMap, encryptionKey },
+            group
+          );
+          return json(result2);
+        }
         const where = { settings: group, deleted: false };
         if (!isAuthed && !isPublicGroup) where.type = "public";
         const rows = await configRepo().find({ where });
@@ -7464,6 +7490,7 @@ var DEFAULT_ADMIN_NAV = [
   getCompanyDetailsFromSettings,
   getNextAuthOptions,
   getPermissionableEntityKeys,
+  getPublicSettingsGroup,
   getRequiredPermission,
   hasEntityPermission,
   isOpenEndpoint,