@intranefr/superbackend 1.5.3 → 1.6.3

package/src/routes/adminSeoConfig.routes.js

@@ -1,21 +1,21 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminSeoConfigController = require('../controllers/adminSeoConfig.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.get('/', basicAuth, adminSeoConfigController.get);
-router.put('/', basicAuth, adminSeoConfigController.update);
+router.get('/', adminSessionAuth, adminSeoConfigController.get);
+router.put('/', adminSessionAuth, adminSeoConfigController.update);
 
 // SEO Config helpers
-router.get('/ai/views', basicAuth, adminSeoConfigController.seoConfigAiListViews);
-router.post('/ai/generate-entry', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiGenerateEntry);
-router.post('/ai/improve-entry', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiImproveEntry);
-router.post('/pages/apply-entry', basicAuth, adminSeoConfigController.seoConfigApplyEntry);
+router.get('/ai/views', adminSessionAuth, adminSeoConfigController.seoConfigAiListViews);
+router.post('/ai/generate-entry', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiGenerateEntry);
+router.post('/ai/improve-entry', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiImproveEntry);
+router.post('/pages/apply-entry', adminSessionAuth, adminSeoConfigController.seoConfigApplyEntry);
 
-router.put('/og/svg', basicAuth, adminSeoConfigController.updateOgSvg);
-router.post('/og/generate-png', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.generateOgPng);
-router.post('/ai/edit-svg', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.aiEditSvg);
+router.put('/og/svg', adminSessionAuth, adminSeoConfigController.updateOgSvg);
+router.post('/og/generate-png', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.generateOgPng);
+router.post('/ai/edit-svg', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.aiEditSvg);
 
 module.exports = router;

package/src/routes/adminTelegram.routes.js

@@ -1,9 +1,9 @@
 const express = require('express');
 const router = express.Router();
 const adminTelegramController = require('../controllers/adminTelegram.controller');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/', adminTelegramController.listBots);
 router.post('/', adminTelegramController.createBot);

package/src/routes/adminTerminals.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminTerminals.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/sessions', controller.createSession);
 router.get('/sessions', controller.listSessions);

package/src/routes/adminUiComponents.routes.js

@@ -1,12 +1,12 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminUiComponentsController = require('../controllers/adminUiComponents.controller');
 const adminUiComponentsAiController = require('../controllers/adminUiComponentsAi.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/projects', adminUiComponentsController.listProjects);
 router.post('/projects', adminUiComponentsController.createProject);

package/src/routes/adminUploadNamespaces.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminUploadNamespacesController = require('../controllers/adminUploadNamespaces.controller');
 
-router.get('/', basicAuth, adminUploadNamespacesController.listNamespaces);
-router.get('/summary', basicAuth, adminUploadNamespacesController.getNamespacesSummary);
-router.get('/:key', basicAuth, adminUploadNamespacesController.getNamespace);
-router.post('/', basicAuth, adminUploadNamespacesController.createNamespace);
-router.put('/:key', basicAuth, adminUploadNamespacesController.updateNamespace);
-router.delete('/:key', basicAuth, adminUploadNamespacesController.deleteNamespace);
+router.get('/', adminSessionAuth, adminUploadNamespacesController.listNamespaces);
+router.get('/summary', adminSessionAuth, adminUploadNamespacesController.getNamespacesSummary);
+router.get('/:key', adminSessionAuth, adminUploadNamespacesController.getNamespace);
+router.post('/', adminSessionAuth, adminUploadNamespacesController.createNamespace);
+router.put('/:key', adminSessionAuth, adminUploadNamespacesController.updateNamespace);
+router.delete('/:key', adminSessionAuth, adminUploadNamespacesController.deleteNamespace);
 
 module.exports = router;

package/src/routes/blogInternal.routes.js

@@ -2,11 +2,11 @@ const express = require('express');
 const router = express.Router();
 
 const controller = require('../controllers/blogInternal.controller');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/blog/automation/run', rateLimiter.limit('blogAiLimiter'), controller.runAutomation);
 router.post('/blog/publish-scheduled/run', controller.publishScheduled);

package/src/routes/experiments.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 const controller = require('../controllers/experiments.controller');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get(
   '/:code/assignment',

package/src/routes/formsAdmin.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const formsController = require('../controllers/forms.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/', basicAuth, asyncHandler(formsController.adminList));
-router.delete('/:id', basicAuth, asyncHandler(formsController.deleteSubmission));
-router.get('/definitions', basicAuth, asyncHandler(formsController.getForms));
-router.post('/definitions', basicAuth, asyncHandler(formsController.saveForm));
-router.delete('/definitions/:id', basicAuth, asyncHandler(formsController.deleteForm));
+router.get('/', adminSessionAuth, asyncHandler(formsController.adminList));
+router.delete('/:id', adminSessionAuth, asyncHandler(formsController.deleteSubmission));
+router.get('/definitions', adminSessionAuth, asyncHandler(formsController.getForms));
+router.post('/definitions', adminSessionAuth, asyncHandler(formsController.saveForm));
+router.delete('/definitions/:id', adminSessionAuth, asyncHandler(formsController.deleteForm));
 
 module.exports = router;

package/src/routes/globalSettings.routes.js

@@ -1,18 +1,18 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const globalSettingsController = require('../controllers/globalSettings.controller');
 
 // Public route (no auth)
 router.get('/public', globalSettingsController.getPublicSettings);
 
-// Protected routes (Basic Auth)
-router.get('/', basicAuth, globalSettingsController.getAllSettings);
+// Protected routes (Session Auth)
+router.get('/', adminSessionAuth, globalSettingsController.getAllSettings);
 // more specific path before :key catch-all
-router.get('/:key/reveal', basicAuth, globalSettingsController.revealSetting);
-router.get('/:key', basicAuth, globalSettingsController.getSetting);
-router.put('/:key', basicAuth, globalSettingsController.updateSetting);
-router.post('/', basicAuth, globalSettingsController.createSetting);
-router.delete('/:key', basicAuth, globalSettingsController.deleteSetting);
+router.get('/:key/reveal', adminSessionAuth, globalSettingsController.revealSetting);
+router.get('/:key', adminSessionAuth, globalSettingsController.getSetting);
+router.put('/:key', adminSessionAuth, globalSettingsController.updateSetting);
+router.post('/', adminSessionAuth, globalSettingsController.createSetting);
+router.delete('/:key', adminSessionAuth, globalSettingsController.deleteSetting);
 
 module.exports = router;

package/src/routes/internalExperiments.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 const controller = require('../controllers/internalExperiments.controller');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/experiments/aggregate/run', rateLimiter.limit('experimentsInternalAggLimiter'), controller.runAggregation);
 router.post('/experiments/retention/run', rateLimiter.limit('experimentsInternalRetentionLimiter'), controller.runRetention);

package/src/routes/notificationAdmin.routes.js

@@ -1,15 +1,15 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const notificationAdminController = require('../controllers/notificationAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/stats', basicAuth, asyncHandler(notificationAdminController.getNotificationStats));
-router.get('/', basicAuth, asyncHandler(notificationAdminController.listNotifications));
-router.post('/send', basicAuth, asyncHandler(notificationAdminController.sendNotification));
-router.post('/broadcast', basicAuth, asyncHandler(notificationAdminController.broadcastNotification));
-router.delete('/:id', basicAuth, asyncHandler(notificationAdminController.deleteNotification));
-router.post('/:id/retry-email', basicAuth, asyncHandler(notificationAdminController.retryEmailNotification));
+router.get('/stats', adminSessionAuth, asyncHandler(notificationAdminController.getNotificationStats));
+router.get('/', adminSessionAuth, asyncHandler(notificationAdminController.listNotifications));
+router.post('/send', adminSessionAuth, asyncHandler(notificationAdminController.sendNotification));
+router.post('/broadcast', adminSessionAuth, asyncHandler(notificationAdminController.broadcastNotification));
+router.delete('/:id', adminSessionAuth, asyncHandler(notificationAdminController.deleteNotification));
+router.post('/:id/retry-email', adminSessionAuth, asyncHandler(notificationAdminController.retryEmailNotification));
 
 module.exports = router;

package/src/routes/orgAdmin.routes.js

@@ -1,26 +1,26 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const orgAdminController = require('../controllers/orgAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/', basicAuth, asyncHandler(orgAdminController.listOrgs));
-router.post('/', basicAuth, asyncHandler(orgAdminController.createOrganization));
-router.get('/:orgId', basicAuth, asyncHandler(orgAdminController.getOrg));
-router.put('/:orgId', basicAuth, asyncHandler(orgAdminController.updateOrganization));
-router.patch('/:orgId/disable', basicAuth, asyncHandler(orgAdminController.disableOrganization));
-router.patch('/:orgId/enable', basicAuth, asyncHandler(orgAdminController.enableOrganization));
-router.delete('/:orgId', basicAuth, asyncHandler(orgAdminController.deleteOrganization));
+router.get('/', adminSessionAuth, asyncHandler(orgAdminController.listOrgs));
+router.post('/', adminSessionAuth, asyncHandler(orgAdminController.createOrganization));
+router.get('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.getOrg));
+router.put('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.updateOrganization));
+router.patch('/:orgId/disable', adminSessionAuth, asyncHandler(orgAdminController.disableOrganization));
+router.patch('/:orgId/enable', adminSessionAuth, asyncHandler(orgAdminController.enableOrganization));
+router.delete('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.deleteOrganization));
 
-router.get('/:orgId/members', basicAuth, asyncHandler(orgAdminController.listMembers));
-router.post('/:orgId/members', basicAuth, asyncHandler(orgAdminController.addMember));
-router.patch('/:orgId/members/:memberId', basicAuth, asyncHandler(orgAdminController.updateMember));
-router.delete('/:orgId/members/:memberId', basicAuth, asyncHandler(orgAdminController.removeMember));
+router.get('/:orgId/members', adminSessionAuth, asyncHandler(orgAdminController.listMembers));
+router.post('/:orgId/members', adminSessionAuth, asyncHandler(orgAdminController.addMember));
+router.patch('/:orgId/members/:memberId', adminSessionAuth, asyncHandler(orgAdminController.updateMember));
+router.delete('/:orgId/members/:memberId', adminSessionAuth, asyncHandler(orgAdminController.removeMember));
 
-router.get('/:orgId/invites', basicAuth, asyncHandler(orgAdminController.listInvites));
-router.post('/:orgId/invites', basicAuth, asyncHandler(orgAdminController.createInvite));
-router.delete('/:orgId/invites/:inviteId', basicAuth, asyncHandler(orgAdminController.revokeInvite));
-router.post('/:orgId/invites/:inviteId/resend', basicAuth, asyncHandler(orgAdminController.resendInvite));
+router.get('/:orgId/invites', adminSessionAuth, asyncHandler(orgAdminController.listInvites));
+router.post('/:orgId/invites', adminSessionAuth, asyncHandler(orgAdminController.createInvite));
+router.delete('/:orgId/invites/:inviteId', adminSessionAuth, asyncHandler(orgAdminController.revokeInvite));
+router.post('/:orgId/invites/:inviteId/resend', adminSessionAuth, asyncHandler(orgAdminController.resendInvite));
 
 module.exports = router;

package/src/routes/pages.routes.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const router = express.Router();
 const pagesService = require('../services/pages.service');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
 router.get('*', async (req, res, next) => {
   try {
@@ -14,11 +14,11 @@ router.get('*', async (req, res, next) => {
 
     if (draft) {
       let nextCalled = false;
-      basicAuth(req, res, () => {
+      adminSessionAuth(req, res, () => {
         nextCalled = true;
       });
 
-      // If basicAuth did not call next(), it likely ended the response.
+      // If adminSessionAuth did not call next(), it likely ended the response.
       if (!nextCalled) {
         return;
       }

package/src/routes/registry.routes.js

@@ -0,0 +1,11 @@
+const express = require('express');
+
+const controller = require('../controllers/registry.controller');
+const rateLimiter = require('../services/rateLimiter.service');
+
+const router = express.Router();
+
+router.get('/:id/auth', rateLimiter.limit('openRegistryAuthLimiter'), controller.auth);
+router.get('/:id/list', rateLimiter.limit('openRegistryListLimiter'), controller.list);
+
+module.exports = router;

package/src/routes/stripeAdmin.routes.js

@@ -1,20 +1,20 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const stripeAdminController = require('../controllers/stripeAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/status', basicAuth, asyncHandler(stripeAdminController.getStripeStatus));
-router.get('/catalog', basicAuth, asyncHandler(stripeAdminController.listCatalog));
-router.get('/catalog/:id', basicAuth, asyncHandler(stripeAdminController.getCatalogItem));
-router.post('/catalog/upsert', basicAuth, asyncHandler(stripeAdminController.upsertCatalogItem));
-router.post('/catalog/import', basicAuth, asyncHandler(stripeAdminController.importStripePrice));
-router.post('/catalog/:id/deactivate', basicAuth, asyncHandler(stripeAdminController.deactivateCatalogItem));
-router.post('/catalog/:id/activate', basicAuth, asyncHandler(stripeAdminController.activateCatalogItem));
-router.delete('/catalog/:id', basicAuth, asyncHandler(stripeAdminController.deleteCatalogItem));
-router.get('/products', basicAuth, asyncHandler(stripeAdminController.listStripeProducts));
-router.get('/prices', basicAuth, asyncHandler(stripeAdminController.listStripePrices));
-router.post('/env/sync', basicAuth, asyncHandler(stripeAdminController.syncEnvFromCatalog));
+router.get('/status', adminSessionAuth, asyncHandler(stripeAdminController.getStripeStatus));
+router.get('/catalog', adminSessionAuth, asyncHandler(stripeAdminController.listCatalog));
+router.get('/catalog/:id', adminSessionAuth, asyncHandler(stripeAdminController.getCatalogItem));
+router.post('/catalog/upsert', adminSessionAuth, asyncHandler(stripeAdminController.upsertCatalogItem));
+router.post('/catalog/import', adminSessionAuth, asyncHandler(stripeAdminController.importStripePrice));
+router.post('/catalog/:id/deactivate', adminSessionAuth, asyncHandler(stripeAdminController.deactivateCatalogItem));
+router.post('/catalog/:id/activate', adminSessionAuth, asyncHandler(stripeAdminController.activateCatalogItem));
+router.delete('/catalog/:id', adminSessionAuth, asyncHandler(stripeAdminController.deleteCatalogItem));
+router.get('/products', adminSessionAuth, asyncHandler(stripeAdminController.listStripeProducts));
+router.get('/prices', adminSessionAuth, asyncHandler(stripeAdminController.listStripePrices));
+router.post('/env/sync', adminSessionAuth, asyncHandler(stripeAdminController.syncEnvFromCatalog));
 
 module.exports = router;

package/src/routes/userAdmin.routes.js

@@ -1,15 +1,15 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const userAdminController = require('../controllers/userAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/stats', basicAuth, asyncHandler(userAdminController.getUserStats));
-router.get('/', basicAuth, asyncHandler(userAdminController.listUsers));
-router.get('/:id', basicAuth, asyncHandler(userAdminController.getUser));
-router.patch('/:id', basicAuth, asyncHandler(userAdminController.updateUser));
-router.post('/:id/disable', basicAuth, asyncHandler(userAdminController.disableUser));
-router.post('/:id/enable', basicAuth, asyncHandler(userAdminController.enableUser));
+router.get('/stats', adminSessionAuth, asyncHandler(userAdminController.getUserStats));
+router.get('/', adminSessionAuth, asyncHandler(userAdminController.listUsers));
+router.get('/:id', adminSessionAuth, asyncHandler(userAdminController.getUser));
+router.patch('/:id', adminSessionAuth, asyncHandler(userAdminController.updateUser));
+router.post('/:id/disable', adminSessionAuth, asyncHandler(userAdminController.disableUser));
+router.post('/:id/enable', adminSessionAuth, asyncHandler(userAdminController.enableUser));
 
 module.exports = router;

package/src/routes/waitingListAdmin.routes.js

@@ -1,9 +1,9 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const waitingListController = require('../controllers/waitingList.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/', basicAuth, asyncHandler(waitingListController.adminList));
+router.get('/', adminSessionAuth, asyncHandler(waitingListController.adminList));
 
 module.exports = router;

package/src/routes/workflows.routes.js

@@ -1,12 +1,12 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const Workflow = require('../models/Workflow');
 const WorkflowExecution = require('../models/WorkflowExecution');
 const workflowService = require('../services/workflow.service');
 
-// Apply basic authentication to all workflows endpoints
-router.use(basicAuth);
+// Apply session authentication to all workflows endpoints
+router.use(adminSessionAuth);
 
 // List workflows
 router.get('/', async (req, res) => {