@nocobase/plugin-auth 2.3.0-alpha.1 → 2.3.0-beta.11

package/dist/externalVersion.js

@@ -8,21 +8,21 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.3.0-alpha.1",
+  "@nocobase/client": "2.3.0-beta.11",
   "react": "18.2.0",
   "react-router-dom": "6.30.1",
-  "@nocobase/utils": "2.3.0-alpha.1",
+  "@nocobase/utils": "2.3.0-beta.11",
   "axios": "1.7.7",
   "lodash": "4.18.1",
-  "@nocobase/client-v2": "2.3.0-alpha.1",
-  "@nocobase/flow-engine": "2.3.0-alpha.1",
+  "@nocobase/client-v2": "2.3.0-beta.11",
+  "@nocobase/flow-engine": "2.3.0-beta.11",
   "react-i18next": "11.18.6",
-  "@nocobase/auth": "2.3.0-alpha.1",
-  "@nocobase/database": "2.3.0-alpha.1",
-  "@nocobase/cache": "2.3.0-alpha.1",
-  "@nocobase/server": "2.3.0-alpha.1",
-  "@nocobase/logger": "2.3.0-alpha.1",
-  "@nocobase/test": "2.3.0-alpha.1",
+  "@nocobase/auth": "2.3.0-beta.11",
+  "@nocobase/database": "2.3.0-beta.11",
+  "@nocobase/cache": "2.3.0-beta.11",
+  "@nocobase/server": "2.3.0-beta.11",
+  "@nocobase/logger": "2.3.0-beta.11",
+  "@nocobase/test": "2.3.0-beta.11",
   "@formily/antd-v5": "1.2.3",
   "antd": "5.24.2",
   "@formily/shared": "2.3.7",
@@ -30,6 +30,6 @@ module.exports = {
   "@emotion/css": "11.13.0",
   "@ant-design/icons": "5.6.1",
   "ahooks": "3.7.8",
-  "@nocobase/actions": "2.3.0-alpha.1",
+  "@nocobase/actions": "2.3.0-beta.11",
   "@formily/core": "2.3.7"
 };

package/dist/index.d.ts

@@ -6,5 +6,5 @@
  * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
-export { AuthModel, BasicAuth, buildRedirectPath, defaultTokenPolicyConfig, default, getModernClientPrefix, presetAuthType, resolveSigninPrefix, } from './server';
+export { AuthModel, BasicAuth, buildRedirectPath, defaultTokenPolicyConfig, default, getModernClientPrefix, presetAuthType, resolveSubAppSegment, resolveSigninPrefix, } from './server';
 export type { BuildRedirectPathOptions, ResolveSigninPrefixOptions } from './server';

package/dist/index.js

@@ -43,7 +43,8 @@ __export(src_exports, {
   defaultTokenPolicyConfig: () => import_server.defaultTokenPolicyConfig,
   getModernClientPrefix: () => import_server.getModernClientPrefix,
   presetAuthType: () => import_server.presetAuthType,
-  resolveSigninPrefix: () => import_server.resolveSigninPrefix
+  resolveSigninPrefix: () => import_server.resolveSigninPrefix,
+  resolveSubAppSegment: () => import_server.resolveSubAppSegment
 });
 module.exports = __toCommonJS(src_exports);
 var import_server = __toESM(require("./server"));
@@ -55,5 +56,6 @@ var import_server = __toESM(require("./server"));
   defaultTokenPolicyConfig,
   getModernClientPrefix,
   presetAuthType,
-  resolveSigninPrefix
+  resolveSigninPrefix,
+  resolveSubAppSegment
 });

package/dist/node_modules/cron/package.json

@@ -1 +1 @@
-{"name":"cron","description":"Cron jobs for your node","version":"2.4.4","author":"Nick Campbell <nicholas.j.campbell@gmail.com> (https://github.com/ncb000gt)","bugs":{"url":"https://github.com/kelektiv/node-cron/issues"},"repository":{"type":"git","url":"https://github.com/kelektiv/node-cron.git"},"main":"lib/cron","scripts":{"lint":"eslint {lib,tests}/*.js","test":"jest --coverage","test:watch":"jest --watch --coverage","test:types":"tsd","prepare":"husky install","release":"semantic-release"},"types":"types/index.d.ts","dependencies":{"@types/luxon":"~3.3.0","luxon":"~3.3.0"},"devDependencies":{"@commitlint/cli":"~17.6.6","@insurgentlab/commitlint-config":"^18.1.0","@insurgentlab/conventional-changelog-preset":"~6.0.3","@semantic-release/changelog":"~6.0.x","@semantic-release/commit-analyzer":"~9.0.x","@semantic-release/git":"~10.0.x","@semantic-release/github":"~8.1.x","@semantic-release/npm":"~10.0.x","@semantic-release/release-notes-generator":"~11.0.x","chai":"~4.2.x","eslint":"~8.36.x","eslint-config-prettier":"^8.7.x","eslint-config-standard":"~17.0.x","eslint-plugin-import":"~2.27.x","eslint-plugin-jest":"~27.2.x","eslint-plugin-n":"~15.6.x","eslint-plugin-prettier":"~4.2.x","eslint-plugin-promise":"~6.1.x","husky":"^8.0.3","jest":"~29.5.x","prettier":"~2.8.x","semantic-release":"~21.0.x","sinon":"^15.0.x","tsd":"^0.28.1"},"keywords":["cron","node cron","node-cron","schedule","scheduler","cronjob","cron job"],"license":"MIT","contributors":["Brandon der Blätter <https://interlucid.com/contact/> (https://github.com/intcreator)","Romain Beauxis <toots@rastageeks.org> (https://github.com/toots)","James Padolsey <> (https://github.com/jamespadolsey)","Finn Herpich <fh@three-heads.de> (https://github.com/ErrorProne)","Clifton Cunningham <clifton.cunningham@gmail.com> (https://github.com/cliftonc)","Eric Abouaf <eric.abouaf@gmail.com> (https://github.com/neyric)","humanchimp <morphcham@gmail.com> (https://github.com/humanchimp)","Craig Condon <craig@spiceapps.com> (https://github.com/spiceapps)","Dan Bear <daniel@hulu.com> (https://github.com/danhbear)","Vadim Baryshev <vadimbaryshev@gmail.com> (https://github.com/baryshev)","Leandro Ferrari <lfthomaz@gmail.com> (https://github.com/lfthomaz)","Gregg Zigler <greggzigler@gmail.com> (https://github.com/greggzigler)","Jordan Abderrachid <jabderrachid@gmail.com> (https://github.com/jordanabderrachid)","Masakazu Matsushita <matsukaz@gmail.com> (matsukaz)","Christopher Lunt <me@kirisu.co.uk> (https://github.com/kirisu)"],"jest":{"collectCoverage":true,"collectCoverageFrom":["lib/*.js"],"coverageThreshold":{"global":{"statements":80,"branches":80,"functions":70,"lines":80}}},"files":["lib","types","CHANGELOG.md","LICENSE","README.md"],"_lastModified":"2026-07-16T12:56:43.859Z"}
+{"name":"cron","description":"Cron jobs for your node","version":"2.4.4","author":"Nick Campbell <nicholas.j.campbell@gmail.com> (https://github.com/ncb000gt)","bugs":{"url":"https://github.com/kelektiv/node-cron/issues"},"repository":{"type":"git","url":"https://github.com/kelektiv/node-cron.git"},"main":"lib/cron","scripts":{"lint":"eslint {lib,tests}/*.js","test":"jest --coverage","test:watch":"jest --watch --coverage","test:types":"tsd","prepare":"husky install","release":"semantic-release"},"types":"types/index.d.ts","dependencies":{"@types/luxon":"~3.3.0","luxon":"~3.3.0"},"devDependencies":{"@commitlint/cli":"~17.6.6","@insurgentlab/commitlint-config":"^18.1.0","@insurgentlab/conventional-changelog-preset":"~6.0.3","@semantic-release/changelog":"~6.0.x","@semantic-release/commit-analyzer":"~9.0.x","@semantic-release/git":"~10.0.x","@semantic-release/github":"~8.1.x","@semantic-release/npm":"~10.0.x","@semantic-release/release-notes-generator":"~11.0.x","chai":"~4.2.x","eslint":"~8.36.x","eslint-config-prettier":"^8.7.x","eslint-config-standard":"~17.0.x","eslint-plugin-import":"~2.27.x","eslint-plugin-jest":"~27.2.x","eslint-plugin-n":"~15.6.x","eslint-plugin-prettier":"~4.2.x","eslint-plugin-promise":"~6.1.x","husky":"^8.0.3","jest":"~29.5.x","prettier":"~2.8.x","semantic-release":"~21.0.x","sinon":"^15.0.x","tsd":"^0.28.1"},"keywords":["cron","node cron","node-cron","schedule","scheduler","cronjob","cron job"],"license":"MIT","contributors":["Brandon der Blätter <https://interlucid.com/contact/> (https://github.com/intcreator)","Romain Beauxis <toots@rastageeks.org> (https://github.com/toots)","James Padolsey <> (https://github.com/jamespadolsey)","Finn Herpich <fh@three-heads.de> (https://github.com/ErrorProne)","Clifton Cunningham <clifton.cunningham@gmail.com> (https://github.com/cliftonc)","Eric Abouaf <eric.abouaf@gmail.com> (https://github.com/neyric)","humanchimp <morphcham@gmail.com> (https://github.com/humanchimp)","Craig Condon <craig@spiceapps.com> (https://github.com/spiceapps)","Dan Bear <daniel@hulu.com> (https://github.com/danhbear)","Vadim Baryshev <vadimbaryshev@gmail.com> (https://github.com/baryshev)","Leandro Ferrari <lfthomaz@gmail.com> (https://github.com/lfthomaz)","Gregg Zigler <greggzigler@gmail.com> (https://github.com/greggzigler)","Jordan Abderrachid <jabderrachid@gmail.com> (https://github.com/jordanabderrachid)","Masakazu Matsushita <matsukaz@gmail.com> (matsukaz)","Christopher Lunt <me@kirisu.co.uk> (https://github.com/kirisu)"],"jest":{"collectCoverage":true,"collectCoverageFrom":["lib/*.js"],"coverageThreshold":{"global":{"statements":80,"branches":80,"functions":70,"lines":80}}},"files":["lib","types","CHANGELOG.md","LICENSE","README.md"],"_lastModified":"2026-09-20T06:17:57.916Z"}

package/dist/node_modules/ms/package.json

@@ -1 +1 @@
-{"name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","repository":"vercel/ms","main":"./index","files":["index.js"],"scripts":{"precommit":"lint-staged","lint":"eslint lib/* bin/*","test":"mocha tests.js"},"eslintConfig":{"extends":"eslint:recommended","env":{"node":true,"es6":true}},"lint-staged":{"*.js":["npm run lint","prettier --single-quote --write","git add"]},"license":"MIT","devDependencies":{"eslint":"4.18.2","expect.js":"0.3.1","husky":"0.14.3","lint-staged":"5.0.0","mocha":"4.0.1","prettier":"2.0.5"},"_lastModified":"2026-07-16T12:56:43.948Z"}
+{"name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","repository":"vercel/ms","main":"./index","files":["index.js"],"scripts":{"precommit":"lint-staged","lint":"eslint lib/* bin/*","test":"mocha tests.js"},"eslintConfig":{"extends":"eslint:recommended","env":{"node":true,"es6":true}},"lint-staged":{"*.js":["npm run lint","prettier --single-quote --write","git add"]},"license":"MIT","devDependencies":{"eslint":"4.18.2","expect.js":"0.3.1","husky":"0.14.3","lint-staged":"5.0.0","mocha":"4.0.1","prettier":"2.0.5"},"_lastModified":"2026-09-20T06:17:58.005Z"}

package/dist/server/index.d.ts

@@ -12,5 +12,6 @@ export { presetAuthType } from '../preset';
 export { defaultTokenPolicyConfig } from '../constants';
 export { buildRedirectPath, getModernClientPrefix, resolveSigninPrefix } from './utils/buildRedirectPath';
 export type { BuildRedirectPathOptions, ResolveSigninPrefixOptions } from './utils/buildRedirectPath';
+export { resolveSubAppSegment } from './utils/resolveSubAppSegment';
 export { default } from './plugin';
 export * from '../constants';

package/dist/server/index.js

@@ -44,7 +44,8 @@ __export(server_exports, {
   defaultTokenPolicyConfig: () => import_constants.defaultTokenPolicyConfig,
   getModernClientPrefix: () => import_buildRedirectPath.getModernClientPrefix,
   presetAuthType: () => import_preset.presetAuthType,
-  resolveSigninPrefix: () => import_buildRedirectPath.resolveSigninPrefix
+  resolveSigninPrefix: () => import_buildRedirectPath.resolveSigninPrefix,
+  resolveSubAppSegment: () => import_resolveSubAppSegment.resolveSubAppSegment
 });
 module.exports = __toCommonJS(server_exports);
 var import_basic_auth = require("./basic-auth");
@@ -52,6 +53,7 @@ var import_authenticator = require("./model/authenticator");
 var import_preset = require("../preset");
 var import_constants = require("../constants");
 var import_buildRedirectPath = require("./utils/buildRedirectPath");
+var import_resolveSubAppSegment = require("./utils/resolveSubAppSegment");
 var import_plugin = __toESM(require("./plugin"));
 __reExport(server_exports, require("../constants"), module.exports);
 // Annotate the CommonJS export names for ESM import in node:
@@ -63,5 +65,6 @@ __reExport(server_exports, require("../constants"), module.exports);
   getModernClientPrefix,
   presetAuthType,
   resolveSigninPrefix,
+  resolveSubAppSegment,
   ...require("../constants")
 });

package/dist/server/plugin.js

@@ -139,6 +139,11 @@ class PluginAuthServer extends import_server.Plugin {
     ["check", "signOut", "syncCookies", "changePassword"].forEach(
       (action) => this.app.acl.allow("auth", action, "loggedIn")
     );
+    this.app.acl.allow(
+      "auth",
+      "checkLegacyFileAccess",
+      (ctx) => ctx.state.currentUser || ctx.state.legacyLocalStoragePublicAccess === true
+    );
     ["lostPassword", "resetPassword", "checkResetToken"].forEach(
       (action) => this.app.acl.allow("auth", action, "public")
     );

package/dist/server/token-controller.d.ts

@@ -26,6 +26,7 @@ export declare class TokenController implements TokenControlService {
     getConfig(): Promise<NumericTokenPolicyConfig>;
     setConfig(config: TokenPolicyConfig): Promise<void>;
     removeSessionExpiredTokens(userId: number): Promise<number>;
+    private cleanupSessionExpiredTokens;
     add({ userId, authenticator }: {
         userId: number;
         authenticator?: string;

package/dist/server/token-controller.js

@@ -93,6 +93,13 @@ class TokenController {
       }
     });
   }
+  async cleanupSessionExpiredTokens(userId) {
+    try {
+      await this.removeSessionExpiredTokens(userId);
+    } catch (err) {
+      this.logger.error(err, { module: "auth", submodule: "token-controller", method: "removeSessionExpiredTokens" });
+    }
+  }
   async add({ userId, authenticator }) {
     const jti = (0, import_crypto.randomUUID)();
     const currTS = Date.now();
@@ -105,14 +112,10 @@ class TokenController {
       authenticator
     };
     await this.setTokenInfo(jti, data);
-    try {
-      if (process.env.DB_DIALECT === "sqlite") {
-        await this.removeSessionExpiredTokens(userId);
-      } else {
-        this.removeSessionExpiredTokens(userId);
-      }
-    } catch (err) {
-      this.logger.error(err, { module: "auth", submodule: "token-controller", method: "removeSessionExpiredTokens" });
+    if (process.env.DB_DIALECT === "sqlite") {
+      await this.cleanupSessionExpiredTokens(userId);
+    } else {
+      this.cleanupSessionExpiredTokens(userId);
     }
     return data;
   }

package/dist/server/utils/resolveSubAppSegment.d.ts

@@ -0,0 +1,17 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+/// <reference types="node" />
+import type { IncomingMessage } from 'http';
+/**
+ * Resolve the legacy sub-application URL segment for an authentication
+ * redirect. A sub-application reached through its custom domain is mounted at
+ * the root, while one reached through the supervisor domain uses
+ * `/apps/<name>`.
+ */
+export declare function resolveSubAppSegment(req: IncomingMessage, appName?: string | null): Promise<string>;

package/dist/server/utils/resolveSubAppSegment.js

@@ -0,0 +1,82 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var resolveSubAppSegment_exports = {};
+__export(resolveSubAppSegment_exports, {
+  resolveSubAppSegment: () => resolveSubAppSegment
+});
+module.exports = __toCommonJS(resolveSubAppSegment_exports);
+var import_server = require("@nocobase/server");
+function normalizeHostname(value) {
+  const host = value == null ? void 0 : value.split(",", 1)[0].trim();
+  if (!host) {
+    return "";
+  }
+  try {
+    return new URL(`http://${host}`).hostname;
+  } catch {
+    return "";
+  }
+}
+function getRequestHostname(req) {
+  const hostnameHeader = req.headers["x-hostname"];
+  if (Array.isArray(hostnameHeader)) {
+    for (const value of hostnameHeader) {
+      const hostname = normalizeHostname(value);
+      if (hostname) {
+        return hostname;
+      }
+    }
+  } else {
+    const hostname = normalizeHostname(hostnameHeader);
+    if (hostname) {
+      return hostname;
+    }
+  }
+  return (0, import_server.getHostname)(req);
+}
+async function resolveSubAppSegment(req, appName) {
+  var _a;
+  if (!appName || appName === "main") {
+    return "";
+  }
+  const appSupervisor = import_server.AppSupervisor.getInstance();
+  if (!appSupervisor || appSupervisor.runningMode === "single") {
+    return "";
+  }
+  const hostname = getRequestHostname(req);
+  if (hostname) {
+    const cnameAppName = await ((_a = appSupervisor.getAppNameByCName) == null ? void 0 : _a.call(appSupervisor, hostname));
+    if (cnameAppName === appName) {
+      return "";
+    }
+  }
+  return `/apps/${appName}`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  resolveSubAppSegment
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/plugin-auth",
-  "version": "2.3.0-alpha.1",
+  "version": "2.3.0-beta.11",
   "main": "./dist/server/index.js",
   "homepage": "https://docs.nocobase.com/handbook/auth",
   "homepage.ru-RU": "https://docs-ru.nocobase.com/handbook/auth",
@@ -31,7 +31,7 @@
   "description": "User authentication management, including password, SMS, and support for Single Sign-On (SSO) protocols, with extensibility.",
   "description.ru-RU": "Управление аутентификацией пользователей: пароли, SMS, поддержка протоколов единого входа (SSO) и возможность расширения.",
   "description.zh-CN": "用户认证管理，包括基础的密码认证、短信认证、SSO 协议的认证等，可扩展。",
-  "gitHead": "2377df8ceb12549149017f7f14a61207bf6e49a2",
+  "gitHead": "e81c2c69d55f13e4d237c420a51ebad1e9dae515",
   "keywords": [
     "Authentication",
     "Security"