@nocobase/plugin-idp-oauth 2.3.0-beta.9 → 2.4.0-alpha.10

package/dist/node_modules/oidc-provider/node_modules/type-is/node_modules/mime-types/index.js

@@ -0,0 +1,211 @@
+/*!
+ * mime-types
+ * Copyright(c) 2014 Jonathan Ong
+ * Copyright(c) 2015 Douglas Christopher Wilson
+ * MIT Licensed
+ */
+
+'use strict'
+
+/**
+ * Module dependencies.
+ * @private
+ */
+
+var db = require('mime-db')
+var extname = require('path').extname
+var mimeScore = require('./mimeScore')
+
+/**
+ * Module variables.
+ * @private
+ */
+
+var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/
+var TEXT_TYPE_REGEXP = /^text\//i
+
+/**
+ * Module exports.
+ * @public
+ */
+
+exports.charset = charset
+exports.charsets = { lookup: charset }
+exports.contentType = contentType
+exports.extension = extension
+exports.extensions = Object.create(null)
+exports.lookup = lookup
+exports.types = Object.create(null)
+exports._extensionConflicts = []
+
+// Populate the extensions/types maps
+populateMaps(exports.extensions, exports.types)
+
+/**
+ * Get the default charset for a MIME type.
+ *
+ * @param {string} type
+ * @return {false|string}
+ */
+
+function charset (type) {
+  if (!type || typeof type !== 'string') {
+    return false
+  }
+
+  // TODO: use media-typer
+  var match = EXTRACT_TYPE_REGEXP.exec(type)
+  var mime = match && db[match[1].toLowerCase()]
+
+  if (mime && mime.charset) {
+    return mime.charset
+  }
+
+  // default text/* to utf-8
+  if (match && TEXT_TYPE_REGEXP.test(match[1])) {
+    return 'UTF-8'
+  }
+
+  return false
+}
+
+/**
+ * Create a full Content-Type header given a MIME type or extension.
+ *
+ * @param {string} str
+ * @return {false|string}
+ */
+
+function contentType (str) {
+  // TODO: should this even be in this module?
+  if (!str || typeof str !== 'string') {
+    return false
+  }
+
+  var mime = str.indexOf('/') === -1 ? exports.lookup(str) : str
+
+  if (!mime) {
+    return false
+  }
+
+  // TODO: use content-type or other module
+  if (mime.indexOf('charset') === -1) {
+    var charset = exports.charset(mime)
+    if (charset) mime += '; charset=' + charset.toLowerCase()
+  }
+
+  return mime
+}
+
+/**
+ * Get the default extension for a MIME type.
+ *
+ * @param {string} type
+ * @return {false|string}
+ */
+
+function extension (type) {
+  if (!type || typeof type !== 'string') {
+    return false
+  }
+
+  // TODO: use media-typer
+  var match = EXTRACT_TYPE_REGEXP.exec(type)
+
+  // get extensions
+  var exts = match && exports.extensions[match[1].toLowerCase()]
+
+  if (!exts || !exts.length) {
+    return false
+  }
+
+  return exts[0]
+}
+
+/**
+ * Lookup the MIME type for a file path/extension.
+ *
+ * @param {string} path
+ * @return {false|string}
+ */
+
+function lookup (path) {
+  if (!path || typeof path !== 'string') {
+    return false
+  }
+
+  // get the extension ("ext" or ".ext" or full path)
+  var extension = extname('x.' + path)
+    .toLowerCase()
+    .slice(1)
+
+  if (!extension) {
+    return false
+  }
+
+  return exports.types[extension] || false
+}
+
+/**
+ * Populate the extensions and types maps.
+ * @private
+ */
+
+function populateMaps (extensions, types) {
+  Object.keys(db).forEach(function forEachMimeType (type) {
+    var mime = db[type]
+    var exts = mime.extensions
+
+    if (!exts || !exts.length) {
+      return
+    }
+
+    // mime -> extensions
+    extensions[type] = exts
+
+    // extension -> mime
+    for (var i = 0; i < exts.length; i++) {
+      var extension = exts[i]
+      types[extension] = _preferredType(extension, types[extension], type)
+
+      // DELETE (eventually): Capture extension->type maps that change as a
+      // result of switching to mime-score.  This is just to help make reviewing
+      // PR #119 easier, and can be removed once that PR is approved.
+      const legacyType = _preferredTypeLegacy(
+        extension,
+        types[extension],
+        type
+      )
+      if (legacyType !== types[extension]) {
+        exports._extensionConflicts.push([extension, legacyType, types[extension]])
+      }
+    }
+  })
+}
+
+// Resolve type conflict using mime-score
+function _preferredType (ext, type0, type1) {
+  var score0 = type0 ? mimeScore(type0, db[type0].source) : 0
+  var score1 = type1 ? mimeScore(type1, db[type1].source) : 0
+
+  return score0 > score1 ? type0 : type1
+}
+
+// Resolve type conflict using pre-mime-score logic
+function _preferredTypeLegacy (ext, type0, type1) {
+  var SOURCE_RANK = ['nginx', 'apache', undefined, 'iana']
+
+  var score0 = type0 ? SOURCE_RANK.indexOf(db[type0].source) : 0
+  var score1 = type1 ? SOURCE_RANK.indexOf(db[type1].source) : 0
+
+  if (
+    exports.types[extension] !== 'application/octet-stream' &&
+    (score0 > score1 ||
+      (score0 === score1 &&
+        exports.types[extension]?.slice(0, 12) === 'application/'))
+  ) {
+    return type0
+  }
+
+  return score0 > score1 ? type0 : type1
+}

package/dist/node_modules/oidc-provider/node_modules/type-is/node_modules/mime-types/mimeScore.js

@@ -0,0 +1,57 @@
+// 'mime-score' back-ported to CommonJS
+
+// Score RFC facets (see https://tools.ietf.org/html/rfc6838#section-3)
+var FACET_SCORES = {
+  'prs.': 100,
+  'x-': 200,
+  'x.': 300,
+  'vnd.': 400,
+  default: 900
+}
+
+// Score mime source (Logic originally from `jshttp/mime-types` module)
+var SOURCE_SCORES = {
+  nginx: 10,
+  apache: 20,
+  iana: 40,
+  default: 30 // definitions added by `jshttp/mime-db` project?
+}
+
+var TYPE_SCORES = {
+  // prefer application/xml over text/xml
+  // prefer application/rtf over text/rtf
+  application: 1,
+
+  // prefer font/woff over application/font-woff
+  font: 2,
+
+  // prefer video/mp4 over audio/mp4 over application/mp4
+  // See https://www.rfc-editor.org/rfc/rfc4337.html#section-2
+  audio: 2,
+  video: 3,
+
+  default: 0
+}
+
+/**
+ * Get each component of the score for a mime type.  The sum of these is the
+ * total score.  The higher the score, the more "official" the type.
+ */
+module.exports = function mimeScore (mimeType, source = 'default') {
+  if (mimeType === 'application/octet-stream') {
+    return 0
+  }
+
+  const [type, subtype] = mimeType.split('/')
+
+  const facet = subtype.replace(/(\.|x-).*/, '$1')
+
+  const facetScore = FACET_SCORES[facet] || FACET_SCORES.default
+  const sourceScore = SOURCE_SCORES[source] || SOURCE_SCORES.default
+  const typeScore = TYPE_SCORES[type] || TYPE_SCORES.default
+
+  // All else being equal prefer shorter types
+  const lengthScore = 1 - mimeType.length / 100
+
+  return facetScore + sourceScore + typeScore + lengthScore
+}

package/dist/node_modules/oidc-provider/node_modules/type-is/node_modules/mime-types/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "mime-types",
+  "description": "The ultimate javascript content-type utility.",
+  "version": "3.0.2",
+  "contributors": [
+    "Douglas Christopher Wilson <doug@somethingdoug.com>",
+    "Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)",
+    "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
+  ],
+  "license": "MIT",
+  "keywords": [
+    "mime",
+    "types"
+  ],
+  "repository": "jshttp/mime-types",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/express"
+  },
+  "dependencies": {
+    "mime-db": "^1.54.0"
+  },
+  "devDependencies": {
+    "eslint": "8.33.0",
+    "eslint-config-standard": "14.1.1",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-markdown": "3.0.1",
+    "eslint-plugin-node": "11.1.0",
+    "eslint-plugin-promise": "6.6.0",
+    "eslint-plugin-standard": "4.1.0",
+    "mocha": "10.8.2",
+    "nyc": "15.1.0"
+  },
+  "files": [
+    "HISTORY.md",
+    "LICENSE",
+    "index.js",
+    "mimeScore.js"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "lint": "eslint .",
+    "test": "mocha --reporter spec test/test.js",
+    "test-ci": "nyc --reporter=lcov --reporter=text npm test",
+    "test-cov": "nyc --reporter=html --reporter=text npm test"
+  }
+}

package/dist/node_modules/oidc-provider/node_modules/type-is/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "type-is",
+  "description": "Infer the content-type of a request.",
+  "version": "2.0.1",
+  "contributors": [
+    "Douglas Christopher Wilson <doug@somethingdoug.com>",
+    "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
+  ],
+  "license": "MIT",
+  "repository": "jshttp/type-is",
+  "dependencies": {
+    "content-type": "^1.0.5",
+    "media-typer": "^1.1.0",
+    "mime-types": "^3.0.0"
+  },
+  "devDependencies": {
+    "eslint": "7.32.0",
+    "eslint-config-standard": "14.1.1",
+    "eslint-plugin-import": "2.25.4",
+    "eslint-plugin-markdown": "2.2.1",
+    "eslint-plugin-node": "11.1.0",
+    "eslint-plugin-promise": "5.2.0",
+    "eslint-plugin-standard": "4.1.0",
+    "mocha": "9.2.1",
+    "nyc": "15.1.0"
+  },
+  "engines": {
+    "node": ">= 0.6"
+  },
+  "files": [
+    "LICENSE",
+    "HISTORY.md",
+    "index.js"
+  ],
+  "scripts": {
+    "lint": "eslint .",
+    "test": "mocha --reporter spec --check-leaks --bail test/",
+    "test:debug": "mocha --reporter spec --check-leaks --inspect --inspect-brk test/",
+    "test-ci": "nyc --reporter=lcovonly --reporter=text npm test",
+    "test-cov": "nyc --reporter=html --reporter=text npm test"
+  },
+  "keywords": [
+    "content",
+    "type",
+    "checking"
+  ]
+}

package/dist/node_modules/oidc-provider/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oidc-provider",
-  "version": "9.7.1",
+  "version": "9.12.2",
   "description": "OAuth 2.0 Authorization Server implementation for Node.js with OpenID Connect",
   "keywords": [
     "appauth",
@@ -47,49 +47,12 @@
   "type": "module",
   "main": "lib/index.js",
   "files": [
-    "lib"
+    "lib",
+    "THIRD-PARTY-NOTICES.md"
   ],
-  "scripts": {
-    "format": "eslint lib example certification test docs --fix",
-    "test": "node ./test/run",
-    "test-ci": "node ./test/ci"
-  },
   "dependencies": {
-    "@koa/cors": "^5.0.0",
-    "@koa/router": "^15.3.1",
     "debug": "^4.4.3",
-    "eta": "^4.5.1",
-    "jose": "^6.2.0",
-    "jsesc": "^3.1.0",
-    "koa": "^3.1.2",
-    "nanoid": "^5.1.6",
-    "quick-lru": "^7.3.0",
-    "raw-body": "^3.0.2",
-    "undici": "^7.22.0"
-  },
-  "devDependencies": {
-    "@fastify/middie": "^9.3.1",
-    "@hapi/hapi": "^21.4.6",
-    "@koa/ejs": "^5.1.0",
-    "base64url": "^3.0.1",
-    "chai": "^6.2.2",
-    "desm": "^1.3.1",
-    "eslint": "^8.57.1",
-    "eslint-config-airbnb-base": "^15.0.0",
-    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-redos": "^4.5.0",
-    "express": "^5.2.1",
-    "fastify": "^5.8.1",
-    "helmet": "^8.1.0",
-    "koa-body": "^7.0.1",
-    "koa-mount": "^4.2.0",
-    "lodash": "^4.17.23",
-    "mocha": "^11.7.5",
-    "moment": "^2.30.1",
-    "openid-client": "^6.8.2",
-    "selfsigned": "^5.5.0",
-    "sinon": "^21.0.2",
-    "supertest": "^7.2.2",
-    "timekeeper": "^2.3.1"
+    "jose": "^6.2.10",
+    "koa": "^3.2.1"
   }
 }

package/dist/server/service.js

@@ -87,6 +87,10 @@ function policyMillisecondsToSeconds(value, fallback) {
 function escapeHtmlText(value) {
   return String(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
+function shouldUseSettingsDevicePath() {
+  const appClientEntryMode = String(process.env.APP_CLIENT_ENTRY_MODE ?? "").trim();
+  return ["modern-only", "modern-default", "settings-default"].includes(appClientEntryMode);
+}
 function renderDevicePage(options) {
   return `<!doctype html>
 <html lang="en">
@@ -295,10 +299,11 @@ class IdpOauthService {
   }
   getFrontendDevicePath(appName, issuerPath = this.getIssuerPath(appName)) {
     const appPublicPath = this.getAppPublicPath();
+    const useSettingsPath = shouldUseSettingsDevicePath();
     if (!this.shouldUseSubAppPublicPrefix(appName, issuerPath)) {
-      return `${appPublicPath}/idpOAuth/device`;
+      return useSettingsPath ? `${appPublicPath}/settings/idpOAuth/device` : `${appPublicPath}/idpOAuth/device`;
     }
-    return `${appPublicPath}/apps/${appName}/idpOAuth/device`;
+    return useSettingsPath ? `${appPublicPath}/settings/apps/${appName}/idpOAuth/device` : `${appPublicPath}/apps/${appName}/idpOAuth/device`;
   }
   getProviderContext(ctx) {
     var _a;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/plugin-idp-oauth",
-  "version": "2.3.0-beta.9",
+  "version": "2.4.0-alpha.10",
   "main": "dist/server/index.js",
   "displayName": "IdP: OAuth",
   "displayName.zh-CN": "IdP: OAuth",
@@ -11,7 +11,7 @@
     "jose": "^6.2.1",
     "light-my-request": "^6.6.0",
     "ms": "^2.1.3",
-    "oidc-provider": "~9.7.0"
+    "oidc-provider": "~9.12.2"
   },
   "peerDependencies": {
     "@nocobase/client": "2.x",
@@ -24,5 +24,5 @@
   "keywords": [
     "Authentication"
   ],
-  "gitHead": "c215e60ed704afe6c086bd96304f4b0d3b46d02e"
+  "gitHead": "c869865c0413fbe4ef85b26be1f2b8d7078c38df"
 }

package/dist/node_modules/eta/LICENSE

@@ -1,7 +0,0 @@
-Copyright 2025 Ben Gubler <nebrelbug@gmail.com>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/node_modules/eta/README.md

@@ -1,185 +0,0 @@
-<p align="center">
-  <img align="center" width="50%" src="https://github.com/bgub/eta/assets/25597854/041dbe34-883b-459b-8607-c787815c441a">
-</p>
-
-<h1 align="center" style="text-align: center; width: fit-content; margin-left: auto; margin-right: auto;">eta (η)</h1>
-
-<p align="center">
-  <a href="https://eta.js.org">Documentation</a> -
-  <a href="https://discord.gg/27gGncJYE2">Chat</a> -
-  <a href="https://eta.js.org/playground">Playground</a>
-</p>
-
-<span align="center">
-
-[![GitHub package.json version (main)](https://img.shields.io/github/package-json/v/bgub/eta/main?label=current%20version)](https://www.npmjs.com/package/eta)
-[![GitHub Actions Status](https://github.com/bgub/eta/actions/workflows/ci.yml/badge.svg)](https://github.com/bgub/eta/actions)
-[![Codecov](https://codecov.io/github/bgub/eta/branch/main/graph/badge.svg)](https://codecov.io/github/bgub/eta)
-[![Donate](https://img.shields.io/badge/donate-paypal-blue.svg)](https://paypal.me/bengubler)
-
-</span>
-
-<span align="center">
-
-**You're viewing the source for Eta v4**
-
-</span>
-
-## Summary
-
-Eta is a lightweight and blazing fast embedded JS templating engine that works inside Node, Deno, and the browser. It's written in TypeScript and emphasizes great performance, configurability, and small bundle size.
-
-> 🎯 **Built with [ts-base](https://github.com/bgub/ts-base)** — A TypeScript library starter template featuring Biome, Vitest, tsdown, and automated releases. Check out ts-base for a modern TypeScript project setup!
-
-### 🌟 Features
-
-- 📦 0 dependencies
-- 💡 Only ~3.5 KB minzipped
-- ⚡️ Written in TypeScript
-- ✨ Deno support (+ Node and browser)
-- 🚀 Super Fast
-- 🔧 Configurable
-  - Plugins, custom delimiters, caching
-- 🔨 Powerful
-  - Precompilation, partials, async
-  - **Layout support**!
-- 🔥 Reliable
-  - Better quotes/comments support
-    - _ex._ `<%= someval + "string %>" %>` compiles correctly, while it fails with doT or EJS
-  - Great error reporting
-- ⚡️ Exports ES Modules
-- 📝 Easy template syntax
-
-## Get Started
-
-_For more thorough documentation, visit [https://eta.js.org](https://eta.js.org)_
-
-Install Eta
-
-```bash
-npm install eta
-```
-
-In the root of your project, create `templates/simple.eta`
-
-```eta
-Hi <%= it.name %>!
-```
-
-Then, in your JS file:
-
-```js
-import { Eta } from "eta";
-// or use https://jsr.io/@bgub/eta
-
-const eta = new Eta({ views: path.join(__dirname, "templates") });
-
-// Render a template
-
-const res = eta.render("./simple", { name: "Ben" });
-console.log(res); // Hi Ben!
-```
-
-## FAQs
-
-<details>
-  <summary>
-    <b>Where did Eta's name come from?</b>
-  </summary>
-
-"Eta" means tiny in Esperanto. Plus, it can be used as an acronym for all sorts of cool phrases: "ECMAScript Template Awesomeness", "Embedded Templating Alternative", etc....
-
-Additionally, Eta is a letter of the Greek alphabet (it stands for all sorts of cool things in various mathematical fields, including efficiency) and is three letters long (perfect for a file extension).
-
-</details>
-
-<br />
-
-## Integrations
-
-<details>
-  <summary>
-    <b>Visual Studio Code</b>
-  </summary>
-
-[@shadowtime2000](https://github.com/shadowtime2000) created [eta-vscode](https://marketplace.visualstudio.com/items?itemName=shadowtime2000.eta-vscode).
-
-</details>
-
-<details>
-  <summary>
-    <b>ESLint</b>
-  </summary>
-
-[eslint-plugin-eta](https://github.com/eta-dev/eslint-plugin-eta) was created to provide an ESLint processor so you can lint your Eta templates.
-
-</details>
-
-<details>
-  <summary>
-    <b>Webpack</b>
-  </summary>
-
-Currently there is no official Webpack integration but [@clshortfuse](https://github.com/clshortfuse) shared the loader he uses:
-
-```javascript
-{
-  loader: 'html-loader',
-  options: {
-    preprocessor(content, loaderContext) {
-      return eta.render(content, {}, { filename: loaderContext.resourcePath });
-    },
-  },
-}
-```
-
-</details>
-
-<details>
-  <summary>
-    <b>Node-RED</b>
-  </summary>
-
-To operate with Eta templates in Node-RED: [@ralphwetzel/node-red-contrib-eta](https://flows.nodered.org/node/@ralphwetzel/node-red-contrib-eta)
-
-  <img width="150" alt="image" src="https://user-images.githubusercontent.com/16342003/160198427-2a69ff10-e8bf-4873-9d99-2929a584ccc8.png">
-
-</details>
-
-<details>
-  <summary>
-    <b>Koa</b>
-  </summary>
-
-To render Eta templates in [Koa](https://koajs.com) web framework: [@cedx/koa-eta](https://github.com/cedx/koa-eta/wiki)
-
-</details>
-
-<details>
-  <summary>
-    <b>Vite</b>
-  </summary>
-
-To use Eta templates in your Vite project: [@rinoshiyo/vite-plugin-eta](https://github.com/rinoshiyo/vite-plugin-eta)
-
-</details>
-
-<br />
-
-## Projects using `eta`
-
-- [Docusaurus v2](https://v2.docusaurus.io): open-source documentation framework that uses Eta to generate a SSR build
-- [swagger-typescript-api](https://github.com/acacode/swagger-typescript-api): Open source typescript api codegenerator from Swagger. Uses Eta as codegenerator by templates
-- [html-bundler-webpack-plugin](https://github.com/webdiscus/html-bundler-webpack-plugin): Webpack plugin make easily to bundle HTML pages from templates, source styles and scripts
-- [SmartDeno](https://github.com/guildenstern70/SmartDeno): SmartDeno is an easy to setup web template using Deno & Oak
-- [stc](https://github.com/long-woo/stc): OpenAPI (Swagger) and Apifox documentation converted to api. Use eta templates to generate code.
-- [Add yours!](https://github.com/bgub/eta/edit/master/README.md)
-
-## Contributors
-
-Made with ❤️ by [bgub](https://github.com/bgub) and [many wonderful contributors](https://github.com/bgub/eta/graphs/contributors). Contributions of any kind are welcome!
-
-## Credits
-
-- Async support, file handling, and error formatting were based on code from [EJS](https://github.com/mde/ejs), which is licensed under the Apache-2.0 license. Code was modified and refactored to some extent.
-- Syntax and some parts of compilation are heavily based off EJS, Nunjucks, and doT.