@nocobase/auth 2.2.7 → 2.2.9

package/lib/actions.js

@@ -89,6 +89,15 @@ const actions = {
     ctx.body = filterHiddenFields(ctx, ctx.auth.user);
     await next();
   }, "check"),
+  checkLegacyFileAccess: /* @__PURE__ */ __name(async (ctx, next) => {
+    var _a;
+    if (!ctx.auth.user && ((_a = ctx.state) == null ? void 0 : _a.legacyLocalStoragePublicAccess) !== true) {
+      ctx.throw(401, ctx.t("Unauthenticated. Please sign in to continue.", { ns: localeNamespace }));
+    }
+    ctx.status = 204;
+    ctx.withoutDataWrapping = true;
+    await next();
+  }, "checkLegacyFileAccess"),
   syncCookies: /* @__PURE__ */ __name(async (ctx, next) => {
     ctx.body = await ctx.auth.syncCookies();
     await next();

package/lib/auth.js

@@ -64,10 +64,13 @@ const _Auth = class _Auth {
     this.ctx = ctx;
   }
   async skipCheck() {
-    var _a, _b;
+    var _a, _b, _c;
     if (this.ctx.skipAuthCheck === true) {
       return true;
     }
+    if (((_a = this.ctx.state) == null ? void 0 : _a.legacyFileAccess) === true) {
+      return false;
+    }
     const { resourceName, actionName } = this.ctx.action;
     const acl = this.ctx.dataSource.acl;
     const isPublic = await acl.allowManager.isPublic(resourceName, actionName, this.ctx);
@@ -75,11 +78,11 @@ const _Auth = class _Auth {
       return true;
     }
     const hasExplicitToken = Boolean(this.ctx.get("Authorization") || this.ctx.query.token);
-    if (!hasExplicitToken && this.ctx.app.options.acl === false && ((_a = this.ctx.state) == null ? void 0 : _a.optionalAuth) !== true) {
+    if (!hasExplicitToken && this.ctx.app.options.acl === false && ((_b = this.ctx.state) == null ? void 0 : _b.optionalAuth) !== true) {
       return true;
     }
     const token = this.ctx.getBearerToken();
-    if (!token && ((_b = this.ctx.state) == null ? void 0 : _b.optionalAuth) === true) {
+    if (!token && ((_c = this.ctx.state) == null ? void 0 : _c.optionalAuth) === true) {
       return true;
     }
     if (!token && this.ctx.app.options.acl === false) {

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@nocobase/auth",
-  "version": "2.2.7",
+  "version": "2.2.9",
   "description": "",
   "license": "Apache-2.0",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
   "dependencies": {
-    "@nocobase/actions": "2.2.7",
-    "@nocobase/cache": "2.2.7",
-    "@nocobase/database": "2.2.7",
-    "@nocobase/resourcer": "2.2.7",
-    "@nocobase/utils": "2.2.7",
+    "@nocobase/actions": "2.2.9",
+    "@nocobase/cache": "2.2.9",
+    "@nocobase/database": "2.2.9",
+    "@nocobase/resourcer": "2.2.9",
+    "@nocobase/utils": "2.2.9",
     "@types/jsonwebtoken": "^9.0.9",
     "jsonwebtoken": "^9.0.2"
   },
@@ -19,5 +19,5 @@
     "url": "git+https://github.com/nocobase/nocobase.git",
     "directory": "packages/auth"
   },
-  "gitHead": "bdaa5c2b8a2d0d1ca9d4c1497acf9492a34f2e74"
+  "gitHead": "82794da75067dd0ae19a9172cea64cb3fb643175"
 }