@intranefr/superbackend 1.6.6 → 1.7.7

package/cookies.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771637659	superbackend.admin.session	s%3AqRrB9xwjQm68DAgSOlyfgBfyq8BqnDCp.q1NiKyQlwZw2ZllDyHbP6v0%2F%2FMrE%2FU%2FlAa7K2vUleBE
-localhost	FALSE	/	FALSE	1803087259	saas_anon_id	b1095bdfcae46d10f0428aa70ee83de2

package/cookies1.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771629571	superbackend.admin.session	s%3AsEcSn6xXkyeOqHm9mRm23J5Dc1nxuz1k.OqghsIsnLrw4SKxxIYx8lmmAjWt9IXCMxn%2FcYeAvUBc
-localhost	FALSE	/	FALSE	1803079171	saas_anon_id	51dc6dfc39d5ea7a7012b848631cae6a

package/cookies2.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771637427	superbackend.admin.session	s%3AvhBh0by7y7DrXprXCYSEi1UFlhT1fuR8.t1FufjMGUS%2F4PPxxQa%2B3En7QjEGB26clmZ3L6yf4%2F0o
-localhost	FALSE	/	FALSE	1803087027	saas_anon_id	711a36c4d41763f6964ae744e69164c3

package/cookies3.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771629581	superbackend.admin.session	s%3AiN0D-96QhVJhqcAUYtzx6qy01CgQ3Dgo.VyE%2F7D1wbr5FqK3UMQd1lda%2FC7Y8SQ9dRbwkxGMzuBM
-localhost	FALSE	/	FALSE	1803079181	saas_anon_id	c8eeb3f7879f705c085ca27b89f7ff42

package/cookies4.txt

@@ -1,5 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-localhost	FALSE	/	FALSE	1803079186	saas_anon_id	f679820563d5f343f793c6ed7d5b4f87

package/cookies_old.txt

@@ -1,5 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-localhost	FALSE	/	FALSE	1803079090	saas_anon_id	0ad79ed83e8b6933dd2469b2af3065d8

package/cookies_old_test.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771629556	superbackend.admin.session	s%3ABoRFJAcrePSTzSsN1EbrhiflhjfX1d69.H0fWiFrS1g9rqZARagoBd5csk387jkobU7e4KFIZd%2Fk
-localhost	FALSE	/	FALSE	1803079156	saas_anon_id	cdadcc15da1d363683ebf9267b79f8a8

package/cookies_super.txt

@@ -1,5 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-localhost	FALSE	/	FALSE	1803079106	saas_anon_id	93e0f60b466aca5cd9974d947c6bf78f

package/cookies_super_test.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771629526	superbackend.admin.session	s%3ATUoGC9bTPVpHPYS6GtIdeJNMcLfcD98e.utwPy950VenpwybMXuLeVNxi2XZEv%2FiCs2LN1FZumGs
-localhost	FALSE	/	FALSE	1803079126	saas_anon_id	229f3817edba8d9274702f3b7fa6223c

package/cookies_test.txt

@@ -1,6 +0,0 @@
-# Netscape HTTP Cookie File
-# https://curl.se/docs/http-cookies.html
-# This file was generated by libcurl! Edit at your own risk.
-
-#HttpOnly_localhost	FALSE	/	FALSE	1771629501	superbackend.admin.session	s%3AgzJQktAUd-6uZRBWJl2TgZL_iEKx9FME.UwOmJJS6XL9wuK7nQtMpVs6qSktGrgdgGVMZWW0eTmE
-localhost	FALSE	/	FALSE	1803079101	saas_anon_id	277a3d95195da9261595cb40995a4bf0

package/test-access.js

@@ -1,63 +0,0 @@
-require('dotenv').config();
-const mongoose = require('mongoose');
-
-async function testAccessControl() {
-  try {
-    await mongoose.connect(process.env.MONGODB_URI, { authSource: 'admin' });
-    console.log('✅ Connected to MongoDB');
-
-    // Check if roles and grants exist
-    const RbacRole = require('./src/models/RbacRole');
-    const RbacGrant = require('./src/models/RbacGrant');
-    const User = require('./src/models/User');
-
-    // Find the limited-admin user
-    const user = await User.findOne({ email: 'limitedadmin@example.com' });
-    
-    if (!user) {
-      console.log('❌ User not found');
-      return;
-    }
-    
-    console.log(`✅ Found user: ${user.email} (${user.role})`);
-
-    // Find the limited-admin role
-    const limitedAdminRole = await RbacRole.findOne({ key: 'limited-admin' });
-    if (!limitedAdminRole) {
-      console.log('❌ limited-admin role not found');
-      return;
-    }
-    
-    console.log(`✅ Found role: ${limitedAdminRole.name}`);
-
-    // Check grants for the role
-    const grants = await RbacGrant.find({ 
-      subjectType: 'role',
-      subjectId: limitedAdminRole._id 
-    });
-    
-    console.log(`\n📋 Role grants (${grants.length}):`);
-    grants.forEach(grant => {
-      console.log(`  - ${grant.right}`);
-    });
-
-    // Check specific permissions
-    const auditGrant = grants.find(g => g.right === 'admin_panel__audit:read');
-    const usersGrant = grants.find(g => g.right === 'admin_panel__users:read');
-    const errorsGrant = grants.find(g => g.right === 'admin_panel__errors:read');
-
-    console.log('\n🔍 Permission Summary:');
-    console.log(`Audit access: ${auditGrant ? '✅ ALLOWED' : '❌ DENIED'}`);
-    console.log(`Users access: ${usersGrant ? '✅ ALLOWED' : '❌ DENIED'}`);
-    console.log(`Errors access: ${errorsGrant ? '✅ ALLOWED' : '❌ DENIED'}`);
-
-    console.log('\n🎉 Access control test completed!');
-
-  } catch (error) {
-    console.error('❌ Test failed:', error);
-  } finally {
-    await mongoose.disconnect();
-  }
-}
-
-testAccessControl();

package/test-iframe-fix.html

@@ -1,63 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>Iframe Fix Test</title>
-    <style>
-        body { font-family: Arial, sans-serif; padding: 20px; }
-        .test-container { margin: 20px 0; }
-        iframe { width: 100%; height: 400px; border: 2px solid #ccc; }
-        .success { color: green; font-weight: bold; }
-        .error { color: red; font-weight: bold; }
-    </style>
-</head>
-<body>
-    <h1>Iframe Authentication Fix Test</h1>
-    
-    <div class="test-container">
-        <h2>Test 1: Iframe with Token (Should Work)</h2>
-        <iframe src="/admin/stats/dashboard-home?iframe_token=authenticated"></iframe>
-        <p id="test1-result">Loading...</p>
-    </div>
-    
-    <div class="test-container">
-        <h2>Test 2: Iframe without Token (Should Redirect to Login)</h2>
-        <iframe src="/admin/stats/dashboard-home"></iframe>
-        <p id="test2-result">Loading...</p>
-    </div>
-
-    <script>
-        // Test if iframe loads correctly
-        setTimeout(() => {
-            const iframes = document.querySelectorAll('iframe');
-            
-            // Test 1 - should show Command Center
-            iframes[0].contentDocument && iframes[0].contentDocument.body) {
-                const content = iframes[0].contentDocument.body.innerText;
-                if (content.includes('Command Center')) {
-                    document.getElementById('test1-result').innerHTML = '<span class="success">✅ SUCCESS: Iframe with token loads correctly</span>';
-                } else if (content.includes('login') || content.includes('Login')) {
-                    document.getElementById('test1-result').innerHTML = '<span class="error">❌ FAILED: Iframe with token redirected to login</span>';
-                } else {
-                    document.getElementById('test1-result').innerHTML = '<span class="error">❌ UNKNOWN: Could not determine iframe content</span>';
-                }
-            } else {
-                document.getElementById('test1-result').innerHTML = '<span class="error">❌ FAILED: Could not access iframe content (cross-origin)</span>';
-            }
-            
-            // Test 2 - should redirect to login
-            if (iframes[1].contentDocument && iframes[1].contentDocument.body) {
-                const content = iframes[1].contentDocument.body.innerText;
-                if (content.includes('login') || content.includes('Login')) {
-                    document.getElementById('test2-result').innerHTML = '<span class="success">✅ SUCCESS: Iframe without token correctly redirects to login</span>';
-                } else if (content.includes('Command Center')) {
-                    document.getElementById('test2-result').innerHTML = '<span class="error">❌ FAILED: Iframe without token loaded content (security issue)</span>';
-                } else {
-                    document.getElementById('test2-result').innerHTML = '<span class="error">❌ UNKNOWN: Could not determine iframe content</span>';
-                }
-            } else {
-                document.getElementById('test2-result').innerHTML = '<span class="error">❌ FAILED: Could not access iframe content (cross-origin)</span>';
-            }
-        }, 3000);
-    </script>
-</body>
-</html>

package/test-iframe.html

@@ -1,14 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-    <title>Iframe Test</title>
-</head>
-<body>
-    <h1>Iframe Test</h1>
-    <p>Testing iframe loading of admin dashboard content...</p>
-    
-    <iframe src="/admin/stats/dashboard-home" width="100%" height="500" style="border: 1px solid #ccc;"></iframe>
-    
-    <p>If you see the admin dashboard content above, iframes work. If you see a login page, there's a cookie/session issue.</p>
-</body>
-</html>