@oneuptime/common 14.0.10 → 14.0.11

package/build/dist/Server/API/IncidentFormAPI.js

@@ -0,0 +1,245 @@
+import IncidentFormRateLimit, { IncidentFormRateLimitBucket, } from "../Middleware/IncidentFormRateLimit";
+import UserMiddleware from "../Middleware/UserAuthorization";
+import IncidentFormService from "../Services/IncidentFormService";
+import { resolveClientIp } from "../Utils/ClientIp";
+import Response from "../Utils/Response";
+import SameOriginRequest from "../Utils/SameOriginRequest";
+import BaseAPI from "./BaseAPI";
+import IncidentForm from "../../Models/DatabaseModels/IncidentForm";
+import BadDataException from "../../Types/Exception/BadDataException";
+import ForbiddenException from "../../Types/Exception/ForbiddenException";
+import { INCIDENT_FORM_PAGE_HEADER, INCIDENT_FORM_PAGE_HEADER_VALUE, } from "../../Types/Incident/IncidentFormPublic";
+/*
+ * The incident form's CRUD routes (inherited from BaseAPI, all behind the
+ * signed-in user middleware) plus the two routes the public form page calls,
+ * for anyone holding a form's link:
+ *
+ *   GET  /incident-form/public/:shareKey          the form's questions
+ *   POST /incident-form/public/:shareKey/submit   declare an incident
+ *
+ * Neither can be mistaken for a CRUD route: those are /incident-form,
+ * /incident-form/get-list, /incident-form/count and /incident-form/:id with
+ * or without /get-item, /update-item or /delete-item, and a share key is a
+ * UUID, never "get-item". The CRUD routes are registered first (in BaseAPI's
+ * constructor), so even a key spelled like one of their suffixes lands on a
+ * CRUD route and its authentication, never the other way round.
+ *
+ * Each public route runs, in order:
+ *
+ *  1. refuseForeignPageRequests: a request a browser sent from a page that
+ *     is not this instance's own is refused, 403, before it costs or spends
+ *     anything. These routes are anonymous and trust where a request comes
+ *     from - the form's IP allowlist, the per-address counters - so without
+ *     this any website could have its visitors' browsers read a form or
+ *     declare incidents from inside an allowed network, or use up those
+ *     visitors' shared budgets. It can only go by the two headers in which
+ *     a browser says where a request came from, and a browser does not
+ *     always send them, so each route then asks for something only the
+ *     form's page sends. The read route requires the page's own header
+ *     (requireFormPageHeader, the same 403): over plain HTTP another site's
+ *     <img> or link sends its GET with neither header, and it cannot add
+ *     one. The submit route requires a JSON body (requireJsonBody, 400):
+ *     the one kind another site cannot have a browser send without a
+ *     preflight, which carries the Origin the first check reads.
+ *
+ *  2. IncidentFormRateLimit's per-address counters, before anything else
+ *     costs anything. Reading a form is load control and fails open;
+ *     submitting one declares an incident, so its counters fail closed. (The
+ *     form's own hourly ceiling is spent later, by IncidentFormService, only
+ *     for a submission that passed every check; its 429 carries a
+ *     Retry-After this route writes.)
+ *
+ *  3. UserMiddleware.getPublicRouteUserMiddleware, the anonymous variant: an
+ *     access-token cookie that no longer decodes makes the request anonymous
+ *     instead of answering 401. The page is served on the same host as the
+ *     dashboard, so a visitor's own OneUptime session cookie rides along -
+ *     often expired - and a 401 would send the dashboard client to the login
+ *     page, or sign the visitor out of their real session. Nothing here
+ *     answers 401 (or 405), and the handlers never read who is calling:
+ *     forms are anonymous, and a signed-in visitor is just a visitor.
+ *
+ *  4. The handler, which checks the body's shape and hands everything else -
+ *     the link, the form's switch, the plan, the IP allowlist, the captcha,
+ *     the answers - to IncidentFormService, where it is unit-testable.
+ *
+ * What the page must handle: 200, 400 (bad answers or captcha, with a
+ * message to show), 403 (network not allowed), 404 (one message for every
+ * unavailable form), 429 with Retry-After, 500 and 503. (The own-page
+ * checks' 403 never reaches it: the page is served from this instance's own
+ * origin, and its client sends the page's header with every request.)
+ *
+ * A page the browser takes for this instance's own - a DNS-rebinding name
+ * pointed at this server, a status page on its owner's domain - passes the
+ * read route's checks, and can read a form's questions through a visitor
+ * inside its IP allowlist. It cannot submit: see SameOriginRequest.
+ */
+export const INCIDENT_FORM_SUBMISSION_BODY_MESSAGE = 'The request must be a JSON object holding the form\'s answers in "data".';
+/*
+ * The one answer to a request another page had a browser send, whatever the
+ * form and whether it exists: the refusal comes before the link is looked
+ * at, so it tells that page nothing.
+ */
+export const INCIDENT_FORM_FOREIGN_PAGE_MESSAGE = "This form can only be used from its own page.";
+export const INCIDENT_FORM_CAPTCHA_TOKEN_MESSAGE = "captchaToken must be a string.";
+/*
+ * Far past any token hCaptcha hands out (a few thousand characters), and
+ * small enough that a stranger cannot have the server forward megabytes of
+ * "token" to hCaptcha on the form's behalf.
+ */
+export const INCIDENT_FORM_CAPTCHA_TOKEN_MAX_LENGTH = 16384;
+export const INCIDENT_FORM_CAPTCHA_TOKEN_TOO_LONG_MESSAGE = `captchaToken cannot be more than ${INCIDENT_FORM_CAPTCHA_TOKEN_MAX_LENGTH} characters.`;
+const isPlainObject = (value) => {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+};
+export default class IncidentFormAPI extends BaseAPI {
+    constructor() {
+        var _a, _b;
+        super(IncidentForm, IncidentFormService);
+        const readRateLimit = IncidentFormRateLimit.getMiddleware(IncidentFormRateLimitBucket.Read);
+        const submitRateLimit = IncidentFormRateLimit.getMiddleware(IncidentFormRateLimitBucket.Submit);
+        this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/public/:shareKey`, IncidentFormAPI.refuseForeignPageRequests, IncidentFormAPI.requireFormPageHeader, readRateLimit, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+            try {
+                /*
+                 * First, so a refusal is not cached either: a form turned back on
+                 * must not stay "not available" in a proxy.
+                 */
+                Response.setNoCacheHeaders(res);
+                const form = await IncidentFormService.getPublicForm({
+                    shareKey: req.params["shareKey"],
+                    clientIp: resolveClientIp(req),
+                });
+                return Response.sendJsonObjectResponse(req, res, form);
+            }
+            catch (err) {
+                next(err);
+            }
+        });
+        this.router.post(`${(_b = new this.entityType()
+            .getCrudApiPath()) === null || _b === void 0 ? void 0 : _b.toString()}/public/:shareKey/submit`, IncidentFormAPI.refuseForeignPageRequests, IncidentFormAPI.requireJsonBody, submitRateLimit, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+            try {
+                Response.setNoCacheHeaders(res);
+                const request = IncidentFormAPI.readSubmissionRequest(req.body);
+                /*
+                 * The trusted end of X-Forwarded-For, for the form's IP allowlist
+                 * and for hCaptcha alike: never an address the caller wrote.
+                 */
+                const clientIp = resolveClientIp(req);
+                const result = await IncidentFormService.submitPublicForm({
+                    shareKey: req.params["shareKey"],
+                    request: request,
+                    clientIp: clientIp,
+                    captchaRemoteIp: clientIp,
+                });
+                return Response.sendJsonObjectResponse(req, res, result);
+            }
+            catch (err) {
+                // The form's own ceiling refused: say when to come back.
+                IncidentFormRateLimit.setRetryAfterFor(res, err);
+                next(err);
+            }
+        });
+    }
+    /*
+     * First on both public routes (the rule is SameOriginRequest's): a request
+     * a browser sent from a page that is not this instance's own is refused
+     * before the limiter counts it - so such a page cannot use up its
+     * visitors' budgets either - and before the link is looked at. The form's
+     * own page is served from this instance's origin and never meets it. A
+     * request with neither header passes here - curl, a server-side client,
+     * but also another site's <img> over plain HTTP - and meets the route's
+     * next check.
+     */
+    static refuseForeignPageRequests(req, res, next) {
+        if (SameOriginRequest.isForeignPageRequest({
+            headers: req.headers,
+            instanceOrigin: SameOriginRequest.getInstanceOrigin(),
+        })) {
+            Response.setNoCacheHeaders(res);
+            return Response.sendErrorResponse(req, res, new ForbiddenException(INCIDENT_FORM_FOREIGN_PAGE_MESSAGE));
+        }
+        return next();
+    }
+    /*
+     * Second on the read route, still before the limiter: the request must
+     * carry the header the form's page adds to every request it makes
+     * (INCIDENT_FORM_PAGE_HEADER). Over plain HTTP a browser sends another
+     * site's <img>, link or no-cors fetch with neither header the check above
+     * reads, so without this such a page could have each of its visitors'
+     * browsers send reads by the hundred - answered or not, every one counted
+     * against the budget everybody behind that visitor's address shares, until
+     * their own colleagues are refused the form. None of those can add a
+     * header, and a script on another origin that adds one is preflighted,
+     * then refused above for its Origin. The same 403 as above, for the same
+     * reason; a caller that is not the page - curl, a script - sends the
+     * header itself.
+     *
+     * The submit route needs no such header: every POST carries its Origin,
+     * and requireJsonBody forces the preflight a JSON body needs.
+     */
+    static requireFormPageHeader(req, res, next) {
+        if (!SameOriginRequest.hasPageScriptHeader({
+            headers: req.headers,
+            name: INCIDENT_FORM_PAGE_HEADER,
+            value: INCIDENT_FORM_PAGE_HEADER_VALUE,
+        })) {
+            Response.setNoCacheHeaders(res);
+            return Response.sendErrorResponse(req, res, new ForbiddenException(INCIDENT_FORM_FOREIGN_PAGE_MESSAGE));
+        }
+        return next();
+    }
+    /*
+     * Second on the submit route, still before the limiter: the body must be
+     * JSON. Another site's page can have a browser send a urlencoded,
+     * multipart or plain text body with no preflight - a plain HTML form does
+     * - and the app's urlencoded parser turns "data[title]=..." into the very
+     * object a JSON body gives. A browser that sends no Origin with such a
+     * form gets past the check above; it cannot get past this. The form's page
+     * always sends JSON.
+     */
+    static requireJsonBody(req, res, next) {
+        if (!SameOriginRequest.isJsonContentType(req.headers["content-type"])) {
+            Response.setNoCacheHeaders(res);
+            return Response.sendErrorResponse(req, res, new BadDataException(INCIDENT_FORM_SUBMISSION_BODY_MESSAGE));
+        }
+        return next();
+    }
+    /*
+     * The shape of the submit body, checked before anything reaches the
+     * service: an object with the answers in `data` and, optionally, the
+     * captcha token as text of a sane length. What the answers themselves
+     * hold is the service's to judge (validateIncidentFormSubmission); every
+     * other key in the body is left behind here, so it cannot reach anything.
+     *
+     * The body's size is not checked here. The app's JSON parser has read it
+     * (up to 50 MB) before any route runs, so refusing a large body now would
+     * save none of what it cost; and nothing after this does more work for a
+     * larger body - only the answers the form asks are read, each text is
+     * capped, a multi-select's list is bounded before its entries are read,
+     * an answer that is an object is refused unread, and the token is capped
+     * below. A fixed size would also have to allow for a form with many long
+     * questions.
+     */
+    static readSubmissionRequest(body) {
+        if (!isPlainObject(body) || !isPlainObject(body["data"])) {
+            throw new BadDataException(INCIDENT_FORM_SUBMISSION_BODY_MESSAGE);
+        }
+        const captchaToken = body["captchaToken"];
+        if (captchaToken !== undefined &&
+            captchaToken !== null &&
+            typeof captchaToken !== "string") {
+            throw new BadDataException(INCIDENT_FORM_CAPTCHA_TOKEN_MESSAGE);
+        }
+        if (typeof captchaToken === "string" &&
+            captchaToken.length > INCIDENT_FORM_CAPTCHA_TOKEN_MAX_LENGTH) {
+            throw new BadDataException(INCIDENT_FORM_CAPTCHA_TOKEN_TOO_LONG_MESSAGE);
+        }
+        const request = {
+            data: body["data"],
+        };
+        if (typeof captchaToken === "string") {
+            request.captchaToken = captchaToken;
+        }
+        return request;
+    }
+}
+//# sourceMappingURL=IncidentFormAPI.js.map

package/build/dist/Server/API/IncidentFormAPI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncidentFormAPI.js","sourceRoot":"","sources":["../../../../Server/API/IncidentFormAPI.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,EAAE,EAC5B,2BAA2B,GAC5B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,mBAEN,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMpD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,iBAAiB,MAAM,4BAA4B,CAAC;AAC3D,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,kBAAkB,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EACL,yBAAyB,EACzB,+BAA+B,GAKhC,MAAM,yCAAyC,CAAC;AAGjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,MAAM,CAAC,MAAM,qCAAqC,GAChD,0EAA0E,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,+CAA+C,CAAC;AAElD,MAAM,CAAC,MAAM,mCAAmC,GAC9C,gCAAgC,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAW,KAAK,CAAC;AAEpE,MAAM,CAAC,MAAM,4CAA4C,GAAW,oCAAoC,sCAAsC,cAAc,CAAC;AAM7J,MAAM,aAAa,GAA0B,CAC3C,KAAc,EACoB,EAAE;IACpC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAG5C;IACC;;QACE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAEzC,MAAM,aAAa,GAIE,qBAAqB,CAAC,aAAa,CACtD,2BAA2B,CAAC,IAAI,CACjC,CAAC;QAEF,MAAM,eAAe,GAIA,qBAAqB,CAAC,aAAa,CACtD,2BAA2B,CAAC,MAAM,CACnC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,mBAAmB,EACxE,eAAe,CAAC,yBAAyB,EACzC,eAAe,CAAC,qBAAqB,EACrC,aAAa,EACb,cAAc,CAAC,4BAA4B,EAC3C,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH;;;mBAGG;gBACH,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAEhC,MAAM,IAAI,GACR,MAAM,mBAAmB,CAAC,aAAa,CAAC;oBACtC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBAChC,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC;iBAC/B,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,IAA6B,CAC9B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE;aACrB,cAAc,EAAE,0CACf,QAAQ,EAAE,0BAA0B,EACxC,eAAe,CAAC,yBAAyB,EACzC,eAAe,CAAC,eAAe,EAC/B,eAAe,EACf,cAAc,CAAC,4BAA4B,EAC3C,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAEhC,MAAM,OAAO,GACX,eAAe,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAElD;;;mBAGG;gBACH,MAAM,QAAQ,GAAuB,eAAe,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;oBACzC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBAChC,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,eAAe,EAAE,QAAQ;iBAC1B,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,MAA+B,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,yDAAyD;gBACzD,qBAAqB,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACjD,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACI,MAAM,CAAC,yBAAyB,CACrC,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,IACE,iBAAiB,CAAC,oBAAoB,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,cAAc,EAAE,iBAAiB,CAAC,iBAAiB,EAAE;SACtD,CAAC,EACF,CAAC;YACD,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEhC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,MAAM,CAAC,qBAAqB,CACjC,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,IACE,CAAC,iBAAiB,CAAC,mBAAmB,CAAC;YACrC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,+BAA+B;SACvC,CAAC,EACF,CAAC;YACD,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEhC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,eAAe,CAC3B,GAAmB,EACnB,GAAoB,EACpB,IAAkB;QAElB,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEhC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,MAAM,CAAC,qBAAqB,CACjC,IAAa;QAEb,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,YAAY,GAAY,IAAI,CAAC,cAAc,CAAC,CAAC;QAEnD,IACE,YAAY,KAAK,SAAS;YAC1B,YAAY,KAAK,IAAI;YACrB,OAAO,YAAY,KAAK,QAAQ,EAChC,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;QAClE,CAAC;QAED,IACE,OAAO,YAAY,KAAK,QAAQ;YAChC,YAAY,CAAC,MAAM,GAAG,sCAAsC,EAC5D,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,OAAO,GAAwC;YACnD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAgD;SAClE,CAAC;QAEF,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACtC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/build/dist/Server/API/ProjectOIDC.js

@@ -1,5 +1,4 @@
 import ProjectOidcService from "../Services/ProjectOidcService";
-import EditionEnforcement from "../Utils/EditionEnforcement";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
@@ -19,29 +18,22 @@ export default class ProjectOidcAPI extends BaseAPI {
                 if (!projectId) {
                     return Response.sendErrorResponse(req, res, new BadDataException("Invalid project id."));
                 }
-                /*
-                 * Only list providers a user can actually sign in with: the
-                 * Community Edition serves no OIDC login routes, so it lists none
-                 * rather than send the user to a 404.
-                 */
-                const oidc = EditionEnforcement.areSsoRoutesServed()
-                    ? await this.service.findBy({
-                        query: {
-                            projectId: projectId,
-                            isEnabled: true,
-                        },
-                        limit: LIMIT_PER_PROJECT,
-                        skip: 0,
-                        select: {
-                            name: true,
-                            description: true,
-                            _id: true,
-                        },
-                        props: {
-                            isRoot: true,
-                        },
-                    })
-                    : [];
+                const oidc = await this.service.findBy({
+                    query: {
+                        projectId: projectId,
+                        isEnabled: true,
+                    },
+                    limit: LIMIT_PER_PROJECT,
+                    skip: 0,
+                    select: {
+                        name: true,
+                        description: true,
+                        _id: true,
+                    },
+                    props: {
+                        isRoot: true,
+                    },
+                });
                 return Response.sendEntityArrayResponse(req, res, oidc, new PositiveNumber(oidc.length), ProjectOIDC);
             }
             catch (err) {

package/build/dist/Server/API/ProjectOIDC.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectOIDC.js","sourceRoot":"","sources":["../../../../Server/API/ProjectOIDC.ts"],"names":[],"mappings":"AAAA,OAAO,kBAEN,MAAM,gCAAgC,CAAC;AAMxC,OAAO,kBAAkB,MAAM,6BAA6B,CAAC;AAC7D,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAG3C;IACC;;QACE,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAEvC,iBAAiB;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE;aACrB,cAAc,EAAE,0CACf,QAAQ,EAAE,uBAAuB,EACrC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAa,IAAI,QAAQ,CACtC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAW,CAClC,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAC5C,CAAC;gBACJ,CAAC;gBAED;;;;mBAIG;gBACH,MAAM,IAAI,GACR,kBAAkB,CAAC,kBAAkB,EAAE;oBACrC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;wBACxB,KAAK,EAAE;4BACL,SAAS,EAAE,SAAS;4BACpB,SAAS,EAAE,IAAI;yBAChB;wBACD,KAAK,EAAE,iBAAiB;wBACxB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE;4BACN,IAAI,EAAE,IAAI;4BACV,WAAW,EAAE,IAAI;4BACjB,GAAG,EAAE,IAAI;yBACV;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC;oBACJ,CAAC,CAAC,EAAE,CAAC;gBAET,OAAO,QAAQ,CAAC,uBAAuB,CACrC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAC/B,WAAW,CACZ,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ProjectOIDC.js","sourceRoot":"","sources":["../../../../Server/API/ProjectOIDC.ts"],"names":[],"mappings":"AAAA,OAAO,kBAEN,MAAM,gCAAgC,CAAC;AAMxC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAG3C;IACC;;QACE,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAEvC,iBAAiB;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE;aACrB,cAAc,EAAE,0CACf,QAAQ,EAAE,uBAAuB,EACrC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAa,IAAI,QAAQ,CACtC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAW,CAClC,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAC5C,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,GAAuB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;oBACzD,KAAK,EAAE;wBACL,SAAS,EAAE,SAAS;wBACpB,SAAS,EAAE,IAAI;qBAChB;oBACD,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,WAAW,EAAE,IAAI;wBACjB,GAAG,EAAE,IAAI;qBACV;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC,uBAAuB,CACrC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAC/B,WAAW,CACZ,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/API/ProjectSSO.js

@@ -1,5 +1,4 @@
 import ProjectSsoService from "../Services/ProjectSsoService";
-import EditionEnforcement from "../Utils/EditionEnforcement";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
@@ -19,29 +18,22 @@ export default class ProjectSsoAPI extends BaseAPI {
                 if (!projectId) {
                     return Response.sendErrorResponse(req, res, new BadDataException("Invalid project id."));
                 }
-                /*
-                 * Only list providers a user can actually sign in with: the
-                 * Community Edition serves no SAML login routes, so it lists none
-                 * rather than send the user to a 404.
-                 */
-                const sso = EditionEnforcement.areSsoRoutesServed()
-                    ? await this.service.findBy({
-                        query: {
-                            projectId: projectId,
-                            isEnabled: true,
-                        },
-                        limit: LIMIT_PER_PROJECT,
-                        skip: 0,
-                        select: {
-                            name: true,
-                            description: true,
-                            _id: true,
-                        },
-                        props: {
-                            isRoot: true,
-                        },
-                    })
-                    : [];
+                const sso = await this.service.findBy({
+                    query: {
+                        projectId: projectId,
+                        isEnabled: true,
+                    },
+                    limit: LIMIT_PER_PROJECT,
+                    skip: 0,
+                    select: {
+                        name: true,
+                        description: true,
+                        _id: true,
+                    },
+                    props: {
+                        isRoot: true,
+                    },
+                });
                 return Response.sendEntityArrayResponse(req, res, sso, new PositiveNumber(sso.length), ProjectSSO);
             }
             catch (err) {

package/build/dist/Server/API/ProjectSSO.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectSSO.js","sourceRoot":"","sources":["../../../../Server/API/ProjectSSO.ts"],"names":[],"mappings":"AAAA,OAAO,iBAEN,MAAM,+BAA+B,CAAC;AAMvC,OAAO,kBAAkB,MAAM,6BAA6B,CAAC;AAC7D,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,UAAU,MAAM,wCAAwC,CAAC;AAEhE,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAG1C;IACC;;QACE,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAErC,gBAAgB;QAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE;aACrB,cAAc,EAAE,0CACf,QAAQ,EAAE,sBAAsB,EACpC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAa,IAAI,QAAQ,CACtC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAW,CAClC,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAC5C,CAAC;gBACJ,CAAC;gBAED;;;;mBAIG;gBACH,MAAM,GAAG,GAAsB,kBAAkB,CAAC,kBAAkB,EAAE;oBACpE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;wBACxB,KAAK,EAAE;4BACL,SAAS,EAAE,SAAS;4BACpB,SAAS,EAAE,IAAI;yBAChB;wBACD,KAAK,EAAE,iBAAiB;wBACxB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE;4BACN,IAAI,EAAE,IAAI;4BACV,WAAW,EAAE,IAAI;4BACjB,GAAG,EAAE,IAAI;yBACV;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC;oBACJ,CAAC,CAAC,EAAE,CAAC;gBAEP,OAAO,QAAQ,CAAC,uBAAuB,CACrC,GAAG,EACH,GAAG,EACH,GAAG,EACH,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAC9B,UAAU,CACX,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ProjectSSO.js","sourceRoot":"","sources":["../../../../Server/API/ProjectSSO.ts"],"names":[],"mappings":"AAAA,OAAO,iBAEN,MAAM,+BAA+B,CAAC;AAMvC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,UAAU,MAAM,wCAAwC,CAAC;AAEhE,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAG1C;IACC;;QACE,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAErC,gBAAgB;QAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE;aACrB,cAAc,EAAE,0CACf,QAAQ,EAAE,sBAAsB,EACpC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAa,IAAI,QAAQ,CACtC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAW,CAClC,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAC5C,CAAC;gBACJ,CAAC;gBAED,MAAM,GAAG,GAAsB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;oBACvD,KAAK,EAAE;wBACL,SAAS,EAAE,SAAS;wBACpB,SAAS,EAAE,IAAI;qBAChB;oBACD,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,WAAW,EAAE,IAAI;wBACjB,GAAG,EAAE,IAAI;qBACV;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC,uBAAuB,CACrC,GAAG,EACH,GAAG,EACH,GAAG,EACH,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAC9B,UAAU,CACX,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/API/StatusPageAPI.js

@@ -40,7 +40,6 @@ import StatusPageOidcService from "../Services/StatusPageOidcService";
 import StatusPageSubscriberService from "../Services/StatusPageSubscriberService";
 import ModelPermission from "../Types/Database/Permissions/Index";
 import QueryHelper from "../Types/Database/QueryHelper";
-import EditionEnforcement from "../Utils/EditionEnforcement";
 import logger, { getLogAttributesFromRequest } from "../Utils/Logger";
 import { SEARCH_ENGINE_INDEXING_FLAG_NAME, isSearchEngineIndexingEnabled, } from "../../Types/StatusPage/SearchEngineIndexing";
 import Response from "../Utils/Response";
@@ -780,23 +779,15 @@ class StatusPageAPI extends BaseAPI {
                     select.headerHTML = true;
                     select.footerHTML = true;
                 }
-                /*
-                 * The status page app offers SSO sign-in when this is non-zero.
-                 * While SSO is not active - the Community Edition serves no status
-                 * page SSO routes, and on a lapsed Enterprise license they refuse -
-                 * it reports none rather than send visitors into a dead end.
-                 */
-                const hasEnabledSSO = EditionEnforcement.areSsoRoutesServed()
-                    ? await StatusPageSsoService.countBy({
-                        query: {
-                            isEnabled: true,
-                            statusPageId: objectId,
-                        },
-                        props: {
-                            isRoot: true,
-                        },
-                    })
-                    : new PositiveNumber(0);
+                const hasEnabledSSO = await StatusPageSsoService.countBy({
+                    query: {
+                        isEnabled: true,
+                        statusPageId: objectId,
+                    },
+                    props: {
+                        isRoot: true,
+                    },
+                });
                 const item = await this.service.findOneById({
                     id: objectId,
                     select,
@@ -820,18 +811,6 @@ class StatusPageAPI extends BaseAPI {
                     delete item.headerHTML;
                     delete item.footerHTML;
                 }
-                /*
-                 * The status page app forces SSO sign-in from this flag. Report
-                 * the EFFECTIVE requirement: while SSO is not active (the
-                 * Community Edition, or a lapsed Enterprise license) it is not
-                 * enforced and password sign-in works, so the page must not send
-                 * visitors into an SSO flow that does not exist or refuses. The
-                 * stored value is untouched and applies again as soon as SSO is
-                 * active.
-                 */
-                if (!EditionEnforcement.isSsoEnforced()) {
-                    item.requireSsoForLogin = false;
-                }
                 const footerLinks = await StatusPageFooterLinkService.findBy({
                     query: {
                         statusPageId: objectId,
@@ -945,29 +924,23 @@ class StatusPageAPI extends BaseAPI {
         this.router.post(`${(_u = new this.entityType().getCrudApiPath()) === null || _u === void 0 ? void 0 : _u.toString()}/sso/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
-                /*
-                 * Only list providers a visitor can actually sign in with: the
-                 * Community Edition serves no status page SSO login routes.
-                 */
-                const sso = EditionEnforcement.areSsoRoutesServed()
-                    ? await StatusPageSsoService.findBy({
-                        query: {
-                            statusPageId: objectId,
-                            isEnabled: true,
-                        },
-                        select: {
-                            signOnURL: true,
-                            name: true,
-                            description: true,
-                            _id: true,
-                        },
-                        limit: LIMIT_PER_PROJECT,
-                        skip: 0,
-                        props: {
-                            isRoot: true,
-                        },
-                    })
-                    : [];
+                const sso = await StatusPageSsoService.findBy({
+                    query: {
+                        statusPageId: objectId,
+                        isEnabled: true,
+                    },
+                    select: {
+                        signOnURL: true,
+                        name: true,
+                        description: true,
+                        _id: true,
+                    },
+                    limit: LIMIT_PER_PROJECT,
+                    skip: 0,
+                    props: {
+                        isRoot: true,
+                    },
+                });
                 return Response.sendEntityArrayResponse(req, res, sso, new PositiveNumber(sso.length), StatusPageSSO);
             }
             catch (err) {
@@ -977,28 +950,22 @@ class StatusPageAPI extends BaseAPI {
         this.router.post(`${(_v = new this.entityType().getCrudApiPath()) === null || _v === void 0 ? void 0 : _v.toString()}/oidc/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
-                /*
-                 * Only list providers a visitor can actually sign in with: the
-                 * Community Edition serves no status page OIDC login routes.
-                 */
-                const oidc = EditionEnforcement.areSsoRoutesServed()
-                    ? await StatusPageOidcService.findBy({
-                        query: {
-                            statusPageId: objectId,
-                            isEnabled: true,
-                        },
-                        select: {
-                            name: true,
-                            description: true,
-                            _id: true,
-                        },
-                        limit: LIMIT_PER_PROJECT,
-                        skip: 0,
-                        props: {
-                            isRoot: true,
-                        },
-                    })
-                    : [];
+                const oidc = await StatusPageOidcService.findBy({
+                    query: {
+                        statusPageId: objectId,
+                        isEnabled: true,
+                    },
+                    select: {
+                        name: true,
+                        description: true,
+                        _id: true,
+                    },
+                    limit: LIMIT_PER_PROJECT,
+                    skip: 0,
+                    props: {
+                        isRoot: true,
+                    },
+                });
                 return Response.sendEntityArrayResponse(req, res, oidc, new PositiveNumber(oidc.length), StatusPageOIDC);
             }
             catch (err) {