@oneuptime/common 13.0.8 → 14.0.0

package/build/dist/Server/API/GlobalConfigAPI.js

@@ -3,19 +3,27 @@ import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import GlobalConfig from "../../Models/DatabaseModels/GlobalConfig";
 import ObjectID from "../../Types/ObjectID";
-import BadDataException from "../../Types/Exception/BadDataException";
-import API from "../../Utils/API";
-import HTTPErrorResponse from "../../Types/API/HTTPErrorResponse";
-import { AppVersion, DisableUpdateCheck, EnterpriseLicenseValidationUrl, Host, } from "../EnvironmentConfig";
+import { AppVersion, DisableUpdateCheck } from "../EnvironmentConfig";
 import VersionUtil from "../../Utils/VersionUtil";
 import UserMiddleware from "../Middleware/UserAuthorization";
 import NotAuthenticatedException from "../../Types/Exception/NotAuthenticatedException";
-import MasterAdminAuthorization from "../Middleware/MasterAdminAuthorization";
-import EnterpriseLicenseSeatUtil from "../Utils/EnterpriseLicense/EnterpriseLicenseSeatUtil";
-import UserService from "../Services/UserService";
+import EnterpriseEdition from "../Enterprise/EnterpriseEdition";
+import { EnterpriseLicenseSnapshotUtil, } from "../Enterprise/EnterpriseLicenseSnapshot";
+// Everything buildLicenseResponse reads off the GlobalConfig row.
+export const LICENSE_RESPONSE_CONFIG_SELECT = {
+    enterpriseLicenseKey: true,
+    enterpriseLicenseToken: true,
+    enterpriseLicenseCurrentUserCount: true,
+    enterpriseLicenseUserCountUpdatedAt: true,
+    enterpriseLicenseInstances: true,
+    instanceId: true,
+    latestReleaseVersion: true,
+    latestReleasePublishedAt: true,
+    latestReleaseCheckedAt: true,
+};
 export default class GlobalConfigAPI extends BaseAPI {
     constructor() {
-        var _a, _b, _c, _d;
+        var _a, _b;
         super(GlobalConfig, GlobalConfigService);
         this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/vars`, async (req, res, next) => {
             try {
@@ -36,8 +44,21 @@ export default class GlobalConfigAPI extends BaseAPI {
                 next(err);
             }
         });
+        /*
+         * The license state of this installation, for the edition pill and the
+         * license dialog.
+         *
+         * This route stays in core so the Community Edition can still serve the
+         * version and update-check half of the dialog. The license half comes
+         * from the Enterprise license client through EnterpriseEdition; activating
+         * and refreshing a license (the POSTs on this path) are served by the
+         * Enterprise module itself (ee/Server/License).
+         *
+         * This route also serves the login page (before sign-in), so it cannot
+         * require authentication outright. Anybody but a master admin gets only
+         * what the edition pill shows - see buildLicenseResponse.
+         */
         this.router.get(`${(_b = new this.entityType().getCrudApiPath()) === null || _b === void 0 ? void 0 : _b.toString()}/license`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
-            var _a;
             try {
                 /*
                  * This route also serves the login page, so a caller with no session
@@ -50,161 +71,34 @@ export default class GlobalConfigAPI extends BaseAPI {
                     UserMiddleware.isAnonymousRequest(req)) {
                     throw new NotAuthenticatedException(UserMiddleware.AUTHENTICATION_REQUIRED_MESSAGE);
                 }
-                const config = await GlobalConfigService.findOneById({
-                    id: ObjectID.getZeroObjectID(),
-                    select: {
-                        enterpriseCompanyName: true,
-                        enterpriseLicenseExpiresAt: true,
-                        enterpriseLicenseKey: true,
-                        enterpriseLicenseToken: true,
-                        enterpriseLicenseIsEvaluation: true,
-                        enterpriseLicenseUserLimit: true,
-                        enterpriseLicenseCurrentUserCount: true,
-                        enterpriseLicenseUserCountUpdatedAt: true,
-                        enterpriseLicenseInstances: true,
-                        instanceId: true,
-                        latestReleaseVersion: true,
-                        latestReleasePublishedAt: true,
-                        latestReleaseCheckedAt: true,
-                    },
-                    props: {
-                        isRoot: true,
-                    },
-                });
-                /*
-                 * This route also serves the login page (before sign-in), so it
-                 * cannot require authentication outright. Anonymous callers only
-                 * get enough to render the edition pill — the license key, token
-                 * and instance topology require a signed-in user.
-                 */
-                const isAuthenticatedUser = Boolean((_a = req.userAuthorization) === null || _a === void 0 ? void 0 : _a.userId);
-                const licenseValid = Boolean((config === null || config === void 0 ? void 0 : config.enterpriseLicenseToken) &&
-                    (config === null || config === void 0 ? void 0 : config.enterpriseLicenseExpiresAt) &&
-                    config.enterpriseLicenseExpiresAt.getTime() > Date.now());
+                const audience = GlobalConfigAPI.getLicenseResponseAudience(req);
+                const isEnterpriseEditionLoaded = EnterpriseEdition.isLoaded();
+                const snapshot = isEnterpriseEditionLoaded
+                    ? await EnterpriseEdition.getLicenseSnapshot()
+                    : null;
                 /*
-                 * What the seat limit actually means on this installation right now,
-                 * as opposed to what oneuptime.com last reported. Only for signed-in
-                 * callers: it is derived from the live User table, and an anonymous
-                 * visitor on the login page has no business being told how close this
-                 * server is to refusing new accounts.
+                 * Only a master admin's response carries anything read from the row
+                 * or derived from the live User table, so nobody else costs a read.
                  */
-                const seatUsage = isAuthenticatedUser
-                    ? await EnterpriseLicenseSeatUtil.getSeatUsageForLoadedGlobalConfig({
-                        config: config,
-                        getLocalUserCount: GlobalConfigAPI.getLocalUserCount,
+                const config = audience === "master-admin"
+                    ? await GlobalConfigService.findOneById({
+                        id: ObjectID.getZeroObjectID(),
+                        select: LICENSE_RESPONSE_CONFIG_SELECT,
+                        props: {
+                            isRoot: true,
+                        },
                     })
                     : null;
-                const responseBody = Object.assign({ companyName: (config === null || config === void 0 ? void 0 : config.enterpriseCompanyName) || null, expiresAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseExpiresAt)
-                        ? config.enterpriseLicenseExpiresAt.toISOString()
-                        : null, licenseKey: isAuthenticatedUser
-                        ? (config === null || config === void 0 ? void 0 : config.enterpriseLicenseKey) || null
-                        : null, token: isAuthenticatedUser
-                        ? (config === null || config === void 0 ? void 0 : config.enterpriseLicenseToken) || null
-                        : null, licenseValid: licenseValid, 
-                    /*
-                     * Whether this is an evaluation/testing license. Benign like the
-                     * company name and expiry, so it is not gated behind sign-in — the
-                     * edition modal shows the evaluation notice to anyone who opens it.
-                     */
-                    isEvaluationLicense: Boolean(config === null || config === void 0 ? void 0 : config.enterpriseLicenseIsEvaluation), userLimit: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserLimit) === "number"
-                        ? config.enterpriseLicenseUserLimit
-                        : null, currentUserCount: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseCurrentUserCount) === "number"
-                        ? config.enterpriseLicenseCurrentUserCount
-                        : null, userCountUpdatedAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserCountUpdatedAt)
-                        ? config.enterpriseLicenseUserCountUpdatedAt.toISOString()
-                        : null, instances: isAuthenticatedUser &&
-                        Array.isArray(config === null || config === void 0 ? void 0 : config.enterpriseLicenseInstances)
-                        ? config.enterpriseLicenseInstances
-                        : [], instanceId: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.instanceId)
-                        ? config.instanceId.toString()
-                        : null, 
-                    /*
-                     * Which build this installation runs, and whether a newer one has
-                     * been released, are gated the same way as the instance topology:
-                     * telling an anonymous visitor on the login page that this server
-                     * is behind on patches advertises an unpatched target.
-                     */
-                    currentVersion: isAuthenticatedUser ? AppVersion : null, latestVersion: isAuthenticatedUser
-                        ? (config === null || config === void 0 ? void 0 : config.latestReleaseVersion) || null
-                        : null, latestVersionPublishedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleasePublishedAt)
-                        ? config.latestReleasePublishedAt.toISOString()
-                        : null, latestVersionCheckedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleaseCheckedAt)
-                        ? config.latestReleaseCheckedAt.toISOString()
-                        : null, isUpdateAvailable: isAuthenticatedUser
-                        ? VersionUtil.isUpdateAvailable({
-                            currentVersion: AppVersion,
-                            latestVersion: config === null || config === void 0 ? void 0 : config.latestReleaseVersion,
-                        })
-                        : false, 
-                    /*
-                     * Lets the modal say "update checks are off" instead of "has not
-                     * checked yet", which would be a promise the installation is never
-                     * going to keep.
-                     */
-                    isUpdateCheckDisabled: isAuthenticatedUser
-                        ? DisableUpdateCheck
-                        : false }, GlobalConfigAPI.getSeatUsageResponseFields(seatUsage));
-                return Response.sendJsonObjectResponse(req, res, responseBody);
-            }
-            catch (err) {
-                next(err);
-            }
-        });
-        /*
-         * Activating (or replacing) the license key for the whole installation.
-         *
-         * Master admin only. This writes the terms that bound how many users the
-         * installation may have, so anyone who can reach it can change the seat
-         * limit UserService now enforces. It used to run on
-         * UserMiddleware.getUserMiddleware, which lets anonymous callers through
-         * (it has to — the GET above serves the signed-out login page), so the
-         * route was in practice unauthenticated.
-         */
-        this.router.post(`${(_c = new this.entityType().getCrudApiPath()) === null || _c === void 0 ? void 0 : _c.toString()}/license`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
-            var _a;
-            try {
-                const licenseKey = ((_a = req.body["licenseKey"]) === null || _a === void 0 ? void 0 : _a.trim()) || "";
-                if (!licenseKey) {
-                    throw new BadDataException("License key is required");
-                }
-                const responseBody = await this.validateAndStoreLicenseKey(licenseKey);
-                return Response.sendJsonObjectResponse(req, res, responseBody);
-            }
-            catch (err) {
-                next(err);
-            }
-        });
-        /*
-         * Re-fetch the license this installation already holds.
-         *
-         * The seat limit and the expiry live on oneuptime.com and can change on
-         * any day — a customer buys ten more seats at noon. The daily report job
-         * picks that up eventually; this is the button an administrator presses
-         * when "eventually" is not good enough, and it is the only way to apply a
-         * change without re-typing the key.
-         *
-         * Deliberately takes no license key: it uses the stored one. A refresh
-         * that accepted a key would be an activation with a friendlier name, and
-         * would let a mistyped key replace a working license by accident.
-         */
-        this.router.post(`${(_d = new this.entityType().getCrudApiPath()) === null || _d === void 0 ? void 0 : _d.toString()}/license/refresh`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
-            var _a;
-            try {
-                const config = await GlobalConfigService.findOneById({
-                    id: ObjectID.getZeroObjectID(),
-                    select: {
-                        enterpriseLicenseKey: true,
-                    },
-                    props: {
-                        isRoot: true,
-                    },
-                });
-                const licenseKey = ((_a = config === null || config === void 0 ? void 0 : config.enterpriseLicenseKey) === null || _a === void 0 ? void 0 : _a.trim()) || "";
-                if (!licenseKey) {
-                    throw new BadDataException("This installation does not have an enterprise license key yet. Enter a license key to activate it first.");
-                }
-                const responseBody = await this.validateAndStoreLicenseKey(licenseKey);
-                return Response.sendJsonObjectResponse(req, res, responseBody);
+                const seatUsage = audience === "master-admin" && isEnterpriseEditionLoaded
+                    ? await EnterpriseEdition.getSeatUsage()
+                    : null;
+                return Response.sendJsonObjectResponse(req, res, GlobalConfigAPI.buildLicenseResponse({
+                    audience,
+                    isEnterpriseEditionLoaded,
+                    snapshot,
+                    config,
+                    seatUsage,
+                }));
             }
             catch (err) {
                 next(err);
@@ -212,199 +106,99 @@ export default class GlobalConfigAPI extends BaseAPI {
         });
     }
     /*
-     * Ask oneuptime.com what this license key is worth today, and mirror the
-     * answer into GlobalConfig.
+     * A master admin is recognised from the verified access token that
+     * UserMiddleware.getUserMiddleware decoded. Anything else - no token, an
+     * API key, a status-page user, a signed-in project member - is "public".
+     */
+    static getLicenseResponseAudience(req) {
+        var _a;
+        return ((_a = req.userAuthorization) === null || _a === void 0 ? void 0 : _a.isMasterAdmin) === true
+            ? "master-admin"
+            : "public";
+    }
+    /*
+     * The body of GET /global-config/license, and of the Enterprise license
+     * client's activation and refresh responses, so the three can never
+     * disagree on a field.
      *
-     * Shared by activation and refresh so the two cannot drift: the whole point
-     * of refresh is that it applies exactly what activation would have applied,
-     * and a second hand-written copy of this mapping is how the seat limit came
-     * to be dropped on the floor by the daily report job before.
+     * licenseValid is true for a valid license AND one in its grace period:
+     * grace means nothing has changed yet, and the dialog must not tell an
+     * administrator the license is gone while everything still works.
      */
-    async validateAndStoreLicenseKey(licenseKey) {
-        var _a, _b;
-        const globalConfigId = ObjectID.getZeroObjectID();
-        const existingConfig = await GlobalConfigService.findOneById({
-            id: globalConfigId,
-            select: {
-                _id: true,
-                instanceId: true,
-            },
-            props: {
-                isRoot: true,
-                ignoreHooks: true,
-            },
-        });
-        /*
-         * Send this instance's id and host along with the key so the
-         * license server registers this instance against the license and
-         * it shows up in the instance list on all instances that share
-         * the license.
-         */
-        const instanceId = (existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId) || ObjectID.generate();
-        const validationResponse = await API.post({
-            url: EnterpriseLicenseValidationUrl,
-            data: {
-                licenseKey,
-                instanceId: instanceId.toString(),
-                host: Host,
-                /*
-                 * Sent here as well as from the daily report job so the version
-                 * lands on the license server the moment the key is validated,
-                 * rather than up to 24 hours later.
-                 */
-                version: AppVersion,
-            },
-        });
-        if (!validationResponse.isSuccess()) {
-            const errorMessage = validationResponse instanceof HTTPErrorResponse
-                ? validationResponse.message || "Failed to validate license key."
-                : "Failed to validate license key.";
-            throw new BadDataException(errorMessage);
-        }
-        const payload = validationResponse.data;
-        const companyNameRaw = ((_a = payload["companyName"]) === null || _a === void 0 ? void 0 : _a.trim()) || "";
-        const expiresAtRaw = payload["expiresAt"] || "";
-        const licenseKeyRaw = ((_b = payload["licenseKey"]) === null || _b === void 0 ? void 0 : _b.trim()) || licenseKey;
-        const licenseToken = payload["token"] || "";
-        let licenseExpiry = undefined;
-        if (expiresAtRaw) {
-            const parsedDate = new Date(expiresAtRaw);
-            if (Number.isNaN(parsedDate.getTime())) {
-                throw new BadDataException("License expiration returned from server is invalid.");
-            }
-            licenseExpiry = parsedDate;
-        }
-        const userLimitRaw = payload["userLimit"];
-        const userLimit = typeof userLimitRaw === "number" && Number.isFinite(userLimitRaw)
-            ? userLimitRaw
-            : null;
-        const currentUserCountRaw = payload["currentUserCount"];
-        const currentUserCount = typeof currentUserCountRaw === "number" &&
-            Number.isFinite(currentUserCountRaw)
-            ? currentUserCountRaw
-            : null;
-        const userCountUpdatedAtRaw = payload["userCountUpdatedAt"];
-        let userCountUpdatedAt = null;
-        if (userCountUpdatedAtRaw) {
-            const parsedReportedAt = new Date(userCountUpdatedAtRaw);
-            if (!Number.isNaN(parsedReportedAt.getTime())) {
-                userCountUpdatedAt = parsedReportedAt;
-            }
-        }
-        const isEvaluationLicense = payload["isEvaluationLicense"] === true;
-        const instances = Array.isArray(payload["instances"])
-            ? payload["instances"]
-            : [];
-        const updatePayload = {
-            enterpriseCompanyName: companyNameRaw || null,
-            enterpriseLicenseKey: licenseKeyRaw || null,
-            enterpriseLicenseExpiresAt: licenseExpiry || null,
-            enterpriseLicenseToken: licenseToken || null,
-            enterpriseLicenseIsEvaluation: isEvaluationLicense,
-            enterpriseLicenseUserLimit: userLimit,
-            enterpriseLicenseCurrentUserCount: currentUserCount,
-            enterpriseLicenseUserCountUpdatedAt: userCountUpdatedAt,
-            enterpriseLicenseInstances: instances,
+    static buildLicenseResponse(data) {
+        const snapshot = data.isEnterpriseEditionLoaded ? data.snapshot : null;
+        const publicFields = {
+            edition: data.isEnterpriseEditionLoaded ? "enterprise" : "community",
+            status: snapshot ? snapshot.status : null,
+            verification: snapshot ? snapshot.verification : null,
+            graceReason: (snapshot === null || snapshot === void 0 ? void 0 : snapshot.graceReason) || null,
+            licenseValid: EnterpriseLicenseSnapshotUtil.isUsable(snapshot),
+            companyName: (snapshot === null || snapshot === void 0 ? void 0 : snapshot.companyName) || null,
+            expiresAt: GlobalConfigAPI.toIsoString(snapshot === null || snapshot === void 0 ? void 0 : snapshot.expiresAt),
+            graceEndsAt: GlobalConfigAPI.toIsoString(snapshot === null || snapshot === void 0 ? void 0 : snapshot.graceEndsAt),
+            isEvaluation: Boolean(snapshot === null || snapshot === void 0 ? void 0 : snapshot.isEvaluation),
+            // The name older dialogs read; same value as isEvaluation.
+            isEvaluationLicense: Boolean(snapshot === null || snapshot === void 0 ? void 0 : snapshot.isEvaluation),
+            /*
+             * Which enterprise features the license covers: "all", or the
+             * EnterpriseFeature values it lists (null on the Community Edition).
+             * A valid license that leaves a feature out stops that feature (see
+             * EnterpriseEdition.isFeatureActive), which licenseValid alone cannot
+             * tell a screen.
+             */
+            features: GlobalConfigAPI.toFeaturesResponse(snapshot),
         };
-        if (!(existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId)) {
-            // Installs that predate instance ids: persist the one we generated.
-            updatePayload.instanceId = instanceId;
-        }
-        if (existingConfig) {
-            await GlobalConfigService.updateOneById({
-                id: globalConfigId,
-                data: updatePayload,
-                props: {
-                    isRoot: true,
-                    ignoreHooks: true,
-                },
-            });
-        }
-        else {
-            const newConfig = new GlobalConfig();
-            newConfig.id = globalConfigId;
-            if (companyNameRaw) {
-                newConfig.enterpriseCompanyName = companyNameRaw;
-            }
-            if (licenseKeyRaw) {
-                newConfig.enterpriseLicenseKey = licenseKeyRaw;
-            }
-            if (licenseToken) {
-                newConfig.enterpriseLicenseToken = licenseToken;
-            }
-            newConfig.enterpriseLicenseIsEvaluation = isEvaluationLicense;
-            if (licenseExpiry) {
-                newConfig.enterpriseLicenseExpiresAt = licenseExpiry;
-            }
-            if (userLimit !== null) {
-                newConfig.enterpriseLicenseUserLimit = userLimit;
-            }
-            if (currentUserCount !== null) {
-                newConfig.enterpriseLicenseCurrentUserCount = currentUserCount;
-            }
-            if (userCountUpdatedAt) {
-                newConfig.enterpriseLicenseUserCountUpdatedAt = userCountUpdatedAt;
-            }
-            newConfig.enterpriseLicenseInstances = instances;
-            newConfig.instanceId = instanceId;
-            await GlobalConfigService.create({
-                data: newConfig,
-                props: {
-                    isRoot: true,
-                    ignoreHooks: true,
-                },
-            });
+        if (data.audience !== "master-admin") {
+            return publicFields;
         }
+        const config = data.config;
         /*
-         * Seat usage recomputed from what was just stored, so the dialog that
-         * triggered this can show the new limit against the real user count
-         * without a second round trip - and so an administrator who just bought
-         * seats sees them land.
+         * The license columns mean nothing on the Community Edition (a leftover
+         * key from an earlier Enterprise image licenses nothing here), so only
+         * the version half of the dialog is filled in there.
          */
-        const seatUsage = await GlobalConfigAPI.getSeatUsageForResponse({
-            userLimit: userLimit,
-            currentUserCount: currentUserCount,
-            instances: instances,
-            instanceId: instanceId,
-        });
-        return Object.assign({ companyName: companyNameRaw || null, expiresAt: licenseExpiry ? licenseExpiry.toISOString() : null, licenseKey: licenseKeyRaw || null, token: licenseToken || null, isEvaluationLicense: isEvaluationLicense, userLimit: userLimit, currentUserCount: currentUserCount, userCountUpdatedAt: userCountUpdatedAt
-                ? userCountUpdatedAt.toISOString()
-                : null, instances: instances, instanceId: instanceId.toString() }, GlobalConfigAPI.getSeatUsageResponseFields(seatUsage));
+        const licenseConfig = snapshot ? config : null;
+        const licenseToken = (licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseToken) || null;
+        const licenseKey = (licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseKey) || null;
+        return Object.assign(Object.assign(Object.assign({}, publicFields), { message: (snapshot === null || snapshot === void 0 ? void 0 : snapshot.message) || null, licenseKey: licenseKey, token: licenseToken, 
+            /*
+             * "offline" when the license was activated by pasting a signed token:
+             * such an installation holds no license key and never calls home.
+             */
+            activationMode: licenseToken ? (licenseKey ? "online" : "offline") : null, 
+            // From the signed claims for a verified license, else the stored column.
+            userLimit: typeof (snapshot === null || snapshot === void 0 ? void 0 : snapshot.userLimit) === "number" ? snapshot.userLimit : null, currentUserCount: typeof (licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseCurrentUserCount) === "number"
+                ? licenseConfig.enterpriseLicenseCurrentUserCount
+                : null, userCountUpdatedAt: GlobalConfigAPI.toIsoString(licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseUserCountUpdatedAt), instances: Array.isArray(licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseInstances)
+                ? licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.enterpriseLicenseInstances
+                : [], instanceId: (licenseConfig === null || licenseConfig === void 0 ? void 0 : licenseConfig.instanceId)
+                ? licenseConfig.instanceId.toString()
+                : null, 
+            /*
+             * Which build this installation runs, and whether a newer one has been
+             * released. Master admins only: telling anybody else that this server
+             * is behind on patches advertises an unpatched target.
+             */
+            currentVersion: AppVersion, latestVersion: (config === null || config === void 0 ? void 0 : config.latestReleaseVersion) || null, latestVersionPublishedAt: GlobalConfigAPI.toIsoString(config === null || config === void 0 ? void 0 : config.latestReleasePublishedAt), latestVersionCheckedAt: GlobalConfigAPI.toIsoString(config === null || config === void 0 ? void 0 : config.latestReleaseCheckedAt), isUpdateAvailable: VersionUtil.isUpdateAvailable({
+                currentVersion: AppVersion,
+                latestVersion: config === null || config === void 0 ? void 0 : config.latestReleaseVersion,
+            }), 
+            /*
+             * Lets the dialog say "update checks are off" instead of "has not
+             * checked yet", which would be a promise the installation is never
+             * going to keep.
+             */
+            isUpdateCheckDisabled: DisableUpdateCheck }), GlobalConfigAPI.getSeatUsageResponseFields(snapshot ? data.seatUsage : null));
     }
-    /*
-     * Seat usage built from license terms held in memory rather than re-read
-     * from the database. Used right after a write, where re-reading would race
-     * the write it is describing.
-     */
-    static async getSeatUsageForResponse(data) {
-        const config = new GlobalConfig();
-        config.instanceId = data.instanceId;
-        config.enterpriseLicenseInstances = data.instances;
-        if (data.userLimit !== null) {
-            config.enterpriseLicenseUserLimit = data.userLimit;
+    // The license's features for a response: "all", a copy of the list, or null.
+    static toFeaturesResponse(snapshot) {
+        if (!snapshot) {
+            return null;
         }
-        if (data.currentUserCount !== null) {
-            config.enterpriseLicenseCurrentUserCount = data.currentUserCount;
+        if (snapshot.features === "all") {
+            return "all";
         }
-        return EnterpriseLicenseSeatUtil.getSeatUsageForLoadedGlobalConfig({
-            config: config,
-            getLocalUserCount: GlobalConfigAPI.getLocalUserCount,
-        });
-    }
-    /*
-     * How many users exist on this installation right now. Deliberately the live
-     * count rather than the last reported one: the number an administrator is
-     * about to act on is the number that decides whether the next invitation
-     * goes through.
-     */
-    static async getLocalUserCount() {
-        const userCount = await UserService.countBy({
-            query: {},
-            props: {
-                isRoot: true,
-            },
-        });
-        return userCount.toNumber();
+        return Array.isArray(snapshot.features) ? [...snapshot.features] : [];
     }
     /*
      * The seat-enforcement half of a license response. Always the same keys, so
@@ -428,5 +222,15 @@ export default class GlobalConfigAPI extends BaseAPI {
             canAddMoreUsers: seatUsage.hasSeatForNewUser,
         };
     }
+    static toIsoString(value) {
+        if (!value) {
+            return null;
+        }
+        const date = value instanceof Date ? value : new Date(value);
+        if (Number.isNaN(date.getTime())) {
+            return null;
+        }
+        return date.toISOString();
+    }
 }
 //# sourceMappingURL=GlobalConfigAPI.js.map

package/build/dist/Server/API/GlobalConfigAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"GlobalConfigAPI.js","sourceRoot":"","sources":["../../../../Server/API/GlobalConfigAPI.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,iCAAiC,CAAC;AAOzC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAClC,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAGlE,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,8BAA8B,EAC9B,IAAI,GACL,MAAM,sBAAsB,CAAC;AAE9B,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yBAAyB,MAAM,sDAAsD,CAAC;AAE7F,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAGlD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAG5C;IACC;;QACE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,OAAO,EAC5D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,0BAA0B,EAAE,IAAI;qBACjC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,OAAO,CACjC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,0BAA0B,CACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH;;;;;;mBAMG;gBACH,IACE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,MAAM;oBAChC,cAAc,CAAC,kBAAkB,CAAC,GAAuB,CAAC,EAC1D,CAAC;oBACD,MAAM,IAAI,yBAAyB,CACjC,cAAc,CAAC,+BAA+B,CAC/C,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,qBAAqB,EAAE,IAAI;wBAC3B,0BAA0B,EAAE,IAAI;wBAChC,oBAAoB,EAAE,IAAI;wBAC1B,sBAAsB,EAAE,IAAI;wBAC5B,6BAA6B,EAAE,IAAI;wBACnC,0BAA0B,EAAE,IAAI;wBAChC,iCAAiC,EAAE,IAAI;wBACvC,mCAAmC,EAAE,IAAI;wBACzC,0BAA0B,EAAE,IAAI;wBAChC,UAAU,EAAE,IAAI;wBAChB,oBAAoB,EAAE,IAAI;wBAC1B,wBAAwB,EAAE,IAAI;wBAC9B,sBAAsB,EAAE,IAAI;qBAC7B;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL;;;;;mBAKG;gBACH,MAAM,mBAAmB,GAAY,OAAO,CAC1C,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,MAAM,CACpD,CAAC;gBAEF,MAAM,YAAY,GAAY,OAAO,CACnC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB;qBAC5B,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA;oBAClC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAC3D,CAAC;gBAEF;;;;;;mBAMG;gBACH,MAAM,SAAS,GAAqB,mBAAmB;oBACrD,CAAC,CAAC,MAAM,yBAAyB,CAAC,iCAAiC,CAC/D;wBACE,MAAM,EAAE,MAAM;wBACd,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;qBACrD,CACF;oBACH,CAAC,CAAC,IAAI,CAAC;gBAET,MAAM,YAAY,mBAChB,WAAW,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,qBAAqB,KAAI,IAAI,EAClD,SAAS,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B;wBAC3C,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,WAAW,EAAE;wBACjD,CAAC,CAAC,IAAI,EACR,UAAU,EAAE,mBAAmB;wBAC7B,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI,EACR,KAAK,EAAE,mBAAmB;wBACxB,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,KAAI,IAAI;wBACxC,CAAC,CAAC,IAAI,EACR,YAAY,EAAE,YAAY;oBAC1B;;;;uBAIG;oBACH,mBAAmB,EAAE,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,6BAA6B,CAAC,EACnE,SAAS,EACP,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA,KAAK,QAAQ;wBACpD,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,IAAI,EACV,gBAAgB,EACd,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,iCAAiC,CAAA,KAAK,QAAQ;wBAC3D,CAAC,CAAC,MAAM,CAAC,iCAAiC;wBAC1C,CAAC,CAAC,IAAI,EACV,kBAAkB,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,mCAAmC;wBAC7D,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,WAAW,EAAE;wBAC1D,CAAC,CAAC,IAAI,EACR,SAAS,EACP,mBAAmB;wBACnB,KAAK,CAAC,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAC;wBAC/C,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,EAAE,EACR,UAAU,EACR,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,CAAA;wBACvC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE;wBAC9B,CAAC,CAAC,IAAI;oBACV;;;;;uBAKG;oBACH,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EACvD,aAAa,EAAE,mBAAmB;wBAChC,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI,EACR,wBAAwB,EACtB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,wBAAwB,CAAA;wBACrD,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE;wBAC/C,CAAC,CAAC,IAAI,EACV,sBAAsB,EACpB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,CAAA;wBACnD,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE;wBAC7C,CAAC,CAAC,IAAI,EACV,iBAAiB,EAAE,mBAAmB;wBACpC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC;4BAC5B,cAAc,EAAE,UAAU;4BAC1B,aAAa,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB;yBAC5C,CAAC;wBACJ,CAAC,CAAC,KAAK;oBACT;;;;uBAIG;oBACH,qBAAqB,EAAE,mBAAmB;wBACxC,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,KAAK,IACN,eAAe,CAAC,0BAA0B,CAAC,SAAS,CAAC,CACzD,CAAC;gBAEF,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;WASG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,UAAU,GACd,CAAA,MAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAE/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAEpD,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,oBAAoB,EAAE,IAAI;qBAC3B;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,MAAM,UAAU,GAAW,CAAA,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAEtE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,gBAAgB,CACxB,0GAA0G,CAC3G,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAEpD,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,0BAA0B,CACtC,UAAkB;;QAElB,MAAM,cAAc,GAAa,QAAQ,CAAC,eAAe,EAAE,CAAC;QAE5D,MAAM,cAAc,GAClB,MAAM,mBAAmB,CAAC,WAAW,CAAC;YACpC,EAAE,EAAE,cAAc;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,UAAU,EAAE,IAAI;aACjB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QAEL;;;;;WAKG;QACH,MAAM,UAAU,GACd,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,KAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAEpD,MAAM,kBAAkB,GACtB,MAAM,GAAG,CAAC,IAAI,CAAa;YACzB,GAAG,EAAE,8BAA8B;YACnC,IAAI,EAAE;gBACJ,UAAU;gBACV,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;gBACjC,IAAI,EAAE,IAAI;gBACV;;;;mBAIG;gBACH,OAAO,EAAE,UAAU;aACpB;SACF,CAAC,CAAC;QAEL,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC;YACpC,MAAM,YAAY,GAChB,kBAAkB,YAAY,iBAAiB;gBAC7C,CAAC,CAAC,kBAAkB,CAAC,OAAO,IAAI,iCAAiC;gBACjE,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAe,kBAAkB,CAAC,IAAkB,CAAC;QAElE,MAAM,cAAc,GAClB,CAAA,MAAC,OAAO,CAAC,aAAa,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;QAC/D,MAAM,YAAY,GACf,OAAO,CAAC,WAAW,CAAwB,IAAI,EAAE,CAAC;QACrD,MAAM,aAAa,GACjB,CAAA,MAAC,OAAO,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,UAAU,CAAC;QACtE,MAAM,YAAY,GAAY,OAAO,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;QAE5E,IAAI,aAAa,GAAqB,SAAS,CAAC;QAChD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,GAAS,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;YAEhD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,aAAa,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,MAAM,YAAY,GAAY,OAAO,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GACb,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,mBAAmB,GAAY,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GACpB,OAAO,mBAAmB,KAAK,QAAQ;YACvC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAClC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,qBAAqB,GAAuB,OAAO,CACvD,oBAAoB,CACC,CAAC;QACxB,IAAI,kBAAkB,GAAgB,IAAI,CAAC;QAC3C,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,gBAAgB,GAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC9C,kBAAkB,GAAG,gBAAgB,CAAC;YACxC,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GACvB,OAAO,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAC;QAE1C,MAAM,SAAS,GAA4C,KAAK,CAAC,OAAO,CACtE,OAAO,CAAC,WAAW,CAAC,CACrB;YACC,CAAC,CAAE,OAAO,CAAC,WAAW,CAA6C;YACnE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,aAAa,GAAgC;YACjD,qBAAqB,EAAE,cAAc,IAAI,IAAI;YAC7C,oBAAoB,EAAE,aAAa,IAAI,IAAI;YAC3C,0BAA0B,EAAE,aAAa,IAAI,IAAI;YACjD,sBAAsB,EAAE,YAAY,IAAI,IAAI;YAC5C,6BAA6B,EAAE,mBAAmB;YAClD,0BAA0B,EAAE,SAAS;YACrC,iCAAiC,EAAE,gBAAgB;YACnD,mCAAmC,EAAE,kBAAkB;YACvD,0BAA0B,EAAE,SAAS;SACtC,CAAC;QAEF,IAAI,CAAC,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,CAAA,EAAE,CAAC;YAChC,oEAAoE;YACpE,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;QACxC,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,mBAAmB,CAAC,aAAa,CAAC;gBACtC,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAiB,IAAI,YAAY,EAAE,CAAC;YACnD,SAAS,CAAC,EAAE,GAAG,cAAc,CAAC;YAE9B,IAAI,cAAc,EAAE,CAAC;gBACnB,SAAS,CAAC,qBAAqB,GAAG,cAAc,CAAC;YACnD,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,SAAS,CAAC,oBAAoB,GAAG,aAAa,CAAC;YACjD,CAAC;YAED,IAAI,YAAY,EAAE,CAAC;gBACjB,SAAS,CAAC,sBAAsB,GAAG,YAAY,CAAC;YAClD,CAAC;YAED,SAAS,CAAC,6BAA6B,GAAG,mBAAmB,CAAC;YAE9D,IAAI,aAAa,EAAE,CAAC;gBAClB,SAAS,CAAC,0BAA0B,GAAG,aAAa,CAAC;YACvD,CAAC;YAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;YACnD,CAAC;YAED,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC9B,SAAS,CAAC,iCAAiC,GAAG,gBAAgB,CAAC;YACjE,CAAC;YAED,IAAI,kBAAkB,EAAE,CAAC;gBACvB,SAAS,CAAC,mCAAmC,GAAG,kBAAkB,CAAC;YACrE,CAAC;YAED,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;YACjD,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;YAElC,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBAC/B,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;QACL,CAAC;QAED;;;;;WAKG;QACH,MAAM,SAAS,GACb,MAAM,eAAe,CAAC,uBAAuB,CAAC;YAC5C,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,gBAAgB;YAClC,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEL,uBACE,WAAW,EAAE,cAAc,IAAI,IAAI,EACnC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAC7D,UAAU,EAAE,aAAa,IAAI,IAAI,EACjC,KAAK,EAAE,YAAY,IAAI,IAAI,EAC3B,mBAAmB,EAAE,mBAAmB,EACxC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,EAAE,kBAAkB;gBACpC,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;gBAClC,CAAC,CAAC,IAAI,EACR,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,IAC9B,eAAe,CAAC,0BAA0B,CAAC,SAAS,CAAC,EACxD;IACJ,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAK5C;QACC,MAAM,MAAM,GAAiB,IAAI,YAAY,EAAE,CAAC;QAChD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACpC,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAC,SAAS,CAAC;QAEnD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAC,SAAS,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,iCAAiC,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACnE,CAAC;QAED,OAAO,yBAAyB,CAAC,iCAAiC,CAAC;YACjE,MAAM,EAAE,MAAM;YACd,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,KAAK,CAAC,iBAAiB;QACpC,MAAM,SAAS,GAAmB,MAAM,WAAW,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE;YACT,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,0BAA0B,CACvC,SAA2B;QAE3B,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO;gBACL,mBAAmB,EAAE,KAAK;gBAC1B,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,iBAAiB;SAC7C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"GlobalConfigAPI.js","sourceRoot":"","sources":["../../../../Server/API/GlobalConfigAPI.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,iCAAiC,CAAC;AAOzC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAG5C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,yBAAyB,MAAM,iDAAiD,CAAC;AACxF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAEL,6BAA6B,GAE9B,MAAM,yCAAyC,CAAC;AA6BjD,kEAAkE;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAyB;IAClE,oBAAoB,EAAE,IAAI;IAC1B,sBAAsB,EAAE,IAAI;IAC5B,iCAAiC,EAAE,IAAI;IACvC,mCAAmC,EAAE,IAAI;IACzC,0BAA0B,EAAE,IAAI;IAChC,UAAU,EAAE,IAAI;IAChB,oBAAoB,EAAE,IAAI;IAC1B,wBAAwB,EAAE,IAAI;IAC9B,sBAAsB,EAAE,IAAI;CAC7B,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAG5C;IACC;;QACE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,OAAO,EAC5D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,0BAA0B,EAAE,IAAI;qBACjC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,OAAO,CACjC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,0BAA0B,CACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;;WAaG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH;;;;;;mBAMG;gBACH,IACE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,MAAM;oBAChC,cAAc,CAAC,kBAAkB,CAAC,GAAuB,CAAC,EAC1D,CAAC;oBACD,MAAM,IAAI,yBAAyB,CACjC,cAAc,CAAC,+BAA+B,CAC/C,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GACZ,eAAe,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,yBAAyB,GAC7B,iBAAiB,CAAC,QAAQ,EAAE,CAAC;gBAE/B,MAAM,QAAQ,GACZ,yBAAyB;oBACvB,CAAC,CAAC,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;oBAC9C,CAAC,CAAC,IAAI,CAAC;gBAEX;;;mBAGG;gBACH,MAAM,MAAM,GACV,QAAQ,KAAK,cAAc;oBACzB,CAAC,CAAC,MAAM,mBAAmB,CAAC,WAAW,CAAC;wBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;wBAC9B,MAAM,EAAE,8BAA8B;wBACtC,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC;oBACJ,CAAC,CAAC,IAAI,CAAC;gBAEX,MAAM,SAAS,GACb,QAAQ,KAAK,cAAc,IAAI,yBAAyB;oBACtD,CAAC,CAAC,MAAM,iBAAiB,CAAC,YAAY,EAAE;oBACxC,CAAC,CAAC,IAAI,CAAC;gBAEX,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,eAAe,CAAC,oBAAoB,CAAC;oBACnC,QAAQ;oBACR,yBAAyB;oBACzB,QAAQ;oBACR,MAAM;oBACN,SAAS;iBACV,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,0BAA0B,CACtC,GAAmB;;QAEnB,OAAO,CAAA,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,aAAa,MAAK,IAAI;YACxE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,oBAAoB,CAChC,IAA8B;QAE9B,MAAM,QAAQ,GACZ,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAExD,MAAM,YAAY,GAAe;YAC/B,OAAO,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;YACpE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACzC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YACrD,WAAW,EAAE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,WAAW,KAAI,IAAI;YAC1C,YAAY,EAAE,6BAA6B,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9D,WAAW,EAAE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,WAAW,KAAI,IAAI;YAC1C,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAC;YAC3D,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,WAAW,CAAC;YAC/D,YAAY,EAAE,OAAO,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,YAAY,CAAC;YAC7C,2DAA2D;YAC3D,mBAAmB,EAAE,OAAO,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,YAAY,CAAC;YACpD;;;;;;eAMG;YACH,QAAQ,EAAE,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC;SACvD,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,MAAM,GAAwB,IAAI,CAAC,MAAM,CAAC;QAEhD;;;;WAIG;QACH,MAAM,aAAa,GAAwB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpE,MAAM,YAAY,GAChB,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,sBAAsB,KAAI,IAAI,CAAC;QAChD,MAAM,UAAU,GACd,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,oBAAoB,KAAI,IAAI,CAAC;QAE9C,qDACK,YAAY,KACf,OAAO,EAAE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,KAAI,IAAI,EAClC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,YAAY;YACnB;;;eAGG;YACH,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACzE,yEAAyE;YACzE,SAAS,EACP,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EACrE,gBAAgB,EACd,OAAO,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,iCAAiC,CAAA,KAAK,QAAQ;gBAClE,CAAC,CAAC,aAAa,CAAC,iCAAiC;gBACjD,CAAC,CAAC,IAAI,EACV,kBAAkB,EAAE,eAAe,CAAC,WAAW,CAC7C,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,mCAAmC,CACnD,EACD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,0BAA0B,CAAC;gBACjE,CAAC,CAAE,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,0BAAsE;gBACxF,CAAC,CAAC,EAAE,EACN,UAAU,EAAE,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,UAAU;gBACnC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,EAAE;gBACrC,CAAC,CAAC,IAAI;YACR;;;;eAIG;YACH,cAAc,EAAE,UAAU,EAC1B,aAAa,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI,EACnD,wBAAwB,EAAE,eAAe,CAAC,WAAW,CACnD,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,wBAAwB,CACjC,EACD,sBAAsB,EAAE,eAAe,CAAC,WAAW,CACjD,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,CAC/B,EACD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC;gBAC/C,cAAc,EAAE,UAAU;gBAC1B,aAAa,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB;aAC5C,CAAC;YACF;;;;eAIG;YACH,qBAAqB,EAAE,kBAAkB,KACtC,eAAe,CAAC,0BAA0B,CAC3C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CACjC,EACD;IACJ,CAAC;IAED,6EAA6E;IACtE,MAAM,CAAC,kBAAkB,CAC9B,QAA0C;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,0BAA0B,CACtC,SAA2B;QAE3B,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO;gBACL,mBAAmB,EAAE,KAAK;gBAC1B,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,iBAAiB;SAC7C,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAA8B;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAS,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/build/dist/Server/API/ProjectOIDC.js

@@ -1,4 +1,5 @@
 import ProjectOidcService from "../Services/ProjectOidcService";
+import EditionEnforcement from "../Utils/EditionEnforcement";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
@@ -18,22 +19,29 @@ export default class ProjectOidcAPI extends BaseAPI {
                 if (!projectId) {
                     return Response.sendErrorResponse(req, res, new BadDataException("Invalid project id."));
                 }
-                const oidc = await this.service.findBy({
-                    query: {
-                        projectId: projectId,
-                        isEnabled: true,
-                    },
-                    limit: LIMIT_PER_PROJECT,
-                    skip: 0,
-                    select: {
-                        name: true,
-                        description: true,
-                        _id: true,
-                    },
-                    props: {
-                        isRoot: true,
-                    },
-                });
+                /*
+                 * Only list providers a user can actually sign in with: the
+                 * Community Edition serves no OIDC login routes, so it lists none
+                 * rather than send the user to a 404.
+                 */
+                const oidc = EditionEnforcement.areSsoRoutesServed()
+                    ? await this.service.findBy({
+                        query: {
+                            projectId: projectId,
+                            isEnabled: true,
+                        },
+                        limit: LIMIT_PER_PROJECT,
+                        skip: 0,
+                        select: {
+                            name: true,
+                            description: true,
+                            _id: true,
+                        },
+                        props: {
+                            isRoot: true,
+                        },
+                    })
+                    : [];
                 return Response.sendEntityArrayResponse(req, res, oidc, new PositiveNumber(oidc.length), ProjectOIDC);
             }
             catch (err) {