@oneuptime/common 14.0.13 → 14.0.14

package/build/dist/Server/API/DashboardDomainAPI.js

@@ -6,61 +6,45 @@ import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import CommonAPI from "./CommonAPI";
 import BadDataException from "../../Types/Exception/BadDataException";
+import TooManyRequestsException from "../../Types/Exception/TooManyRequestsException";
 import ObjectID from "../../Types/ObjectID";
 import DashboardDomain from "../../Models/DatabaseModels/DashboardDomain";
+import CertificateOrder from "../Utils/Greenlock/CertificateOrder";
+import CustomDomainRoutes from "./CustomDomainRoutes";
 export default class DashboardDomainAPI extends BaseAPI {
     constructor() {
         var _a, _b, _c;
         super(DashboardDomain, DashboardDomainService);
-        // CNAME verification api
-        this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/verify-cname/:id`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
-            try {
-                if (!DashboardCNameRecord) {
-                    return Response.sendErrorResponse(req, res, new BadDataException(`Custom Domains not enabled for this
-                                OneUptime installation. Please contact
-                                your server admin to enable this
-                                feature.`));
-                }
-                const databaseProps = await CommonAPI.getDatabaseCommonInteractionProps(req);
-                const id = new ObjectID(req.params["id"]);
-                const domainCount = await DashboardDomainService.countBy({
-                    query: {
-                        _id: id.toString(),
-                    },
-                    props: databaseProps,
-                });
-                if (domainCount.toNumber() === 0) {
-                    return Response.sendErrorResponse(req, res, new BadDataException("The domain does not exist or user does not have access to it."));
-                }
-                const domain = await DashboardDomainService.findOneBy({
-                    query: {
-                        _id: id.toString(),
-                    },
-                    select: {
-                        _id: true,
-                        fullDomain: true,
-                    },
-                    props: {
-                        isRoot: true,
-                    },
-                });
-                if (!domain) {
-                    return Response.sendErrorResponse(req, res, new BadDataException("Invalid token."));
-                }
-                if (!domain.fullDomain) {
-                    return Response.sendErrorResponse(req, res, new BadDataException("Invalid domain."));
-                }
-                const isValid = await DashboardDomainService.isCnameValid(domain.fullDomain);
-                if (!isValid) {
-                    return Response.sendErrorResponse(req, res, new BadDataException("CNAME is not verified. Please make sure you have the correct record and please verify CNAME again. If you are sure that the record is correct, please wait for some time for the DNS to propagate."));
-                }
-                return Response.sendEmptySuccessResponse(req, res);
-            }
-            catch (e) {
-                next(e);
-            }
+        /*
+         * Check now (verify-cname) and the Status column's certificates: the
+         * same routes as a status page's custom domains, registered once for
+         * both (CustomDomainRoutes). Check now used to answer an empty body here,
+         * and the certificate waited for an "Order Free SSL" button or the next
+         * order sweep.
+         */
+        CustomDomainRoutes.add({
+            router: this.router,
+            crudApiPath: ((_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()) || "",
+            service: DashboardDomainService,
+            getCnameRecord: () => {
+                return DashboardCNameRecord;
+            },
+            parentColumn: "dashboardId",
         });
-        // Provision SSL API
+        /*
+         * Order SSL. The dashboard no longer has a button for this: a domain's
+         * certificate is ordered as soon as its CNAME is verified, by Check now
+         * or by the sweeps. It stays for API callers, and orders the way
+         * everything else does, through orderCertIfMissing - a domain that has
+         * its certificate already, or has one being ordered right now, is not
+         * ordered twice - and never for a domain on an uploaded certificate.
+         *
+         * It shares Check now's window: one order on demand per domain per 15
+         * minutes, whichever of the two placed it. An order that fails leaves the
+         * domain unordered, so without it a script calling this in a loop placed
+         * an order on every call, against the account the whole installation
+         * shares.
+         */
         this.router.get(`${(_b = new this.entityType().getCrudApiPath()) === null || _b === void 0 ? void 0 : _b.toString()}/order-ssl/:id`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
                 if (!DashboardCNameRecord) {
@@ -90,6 +74,9 @@ export default class DashboardDomainAPI extends BaseAPI {
                         cnameVerificationToken: true,
                         isCnameVerified: true,
                         isSslProvisioned: true,
+                        isCustomCertificate: true,
+                        // Whose on-demand orders the order counts against.
+                        projectId: true,
                     },
                     props: {
                         isRoot: true,
@@ -107,11 +94,31 @@ export default class DashboardDomainAPI extends BaseAPI {
                 if (domain.isSslProvisioned) {
                     return Response.sendErrorResponse(req, res, new BadDataException("SSL is already provisioned."));
                 }
+                // The sweeps never order for one either: it serves the upload.
+                if (domain.isCustomCertificate) {
+                    return Response.sendErrorResponse(req, res, new BadDataException("This domain uses a certificate you uploaded, so there is no free SSL certificate to order for it."));
+                }
                 if (!domain.fullDomain) {
                     return Response.sendErrorResponse(req, res, new BadDataException("Invalid domain."));
                 }
                 logger.debug("Ordering SSL", getLogAttributesFromRequest(req));
-                await DashboardDomainService.orderCert(domain);
+                try {
+                    await CertificateOrder.orderOnDemand({
+                        domain: domain.fullDomain,
+                        order: () => {
+                            return DashboardDomainService.orderCertIfMissing(domain, {
+                                onDemand: true,
+                            });
+                        },
+                    });
+                }
+                catch (err) {
+                    // Too soon, or nothing ordered: the order's own failures go on.
+                    if (err instanceof TooManyRequestsException) {
+                        return Response.sendErrorResponse(req, res, err);
+                    }
+                    throw err;
+                }
                 logger.debug("SSL Provisioned for domain - " + domain.fullDomain, getLogAttributesFromRequest(req));
                 return Response.sendEmptySuccessResponse(req, res);
             }

package/build/dist/Server/API/DashboardDomainAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"DashboardDomainAPI.js","sourceRoot":"","sources":["../../../../Server/API/DashboardDomainAPI.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,sBAEN,MAAM,oCAAoC,CAAC;AAO5C,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,eAAe,MAAM,6CAA6C,CAAC;AAE1E,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,OAG/C;IACC;;QACE,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QAE/C,yBAAyB;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,mBAAmB,EACxE,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB;;;yCAGyB,CAC1B,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,EAAE,GAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC;gBAE9D,MAAM,WAAW,GACf,MAAM,sBAAsB,CAAC,OAAO,CAAC;oBACnC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;gBAEL,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,+DAA+D,CAChE,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,sBAAsB,CAAC,SAAS,CAAC;oBACrC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,UAAU,EAAE,IAAI;qBACjB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CACxC,CAAC;gBACJ,CAAC;gBAED,MAAM,OAAO,GAAY,MAAM,sBAAsB,CAAC,YAAY,CAChE,MAAM,CAAC,UAAW,CACnB,CAAC;gBAEF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,oMAAoM,CACrM,CACF,CAAC;gBACJ,CAAC;gBAED,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC;QACH,CAAC,CACF,CAAC;QAEF,oBAAoB;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,gBAAgB,EACrE,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB;;;yCAGyB,CAC1B,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,EAAE,GAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC;gBAE9D,MAAM,WAAW,GACf,MAAM,sBAAsB,CAAC,OAAO,CAAC;oBACnC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;gBAEL,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,+DAA+D,CAChE,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,sBAAsB,CAAC,SAAS,CAAC;oBACrC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,UAAU,EAAE,IAAI;wBAChB,sBAAsB,EAAE,IAAI;wBAC5B,eAAe,EAAE,IAAI;wBACrB,gBAAgB,EAAE,IAAI;qBACvB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;oBACnC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,4EAA4E,CAC7E,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC5B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CACpD,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CACxC,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,KAAK,CACV,cAAc,EACd,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,MAAM,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAE/C,MAAM,CAAC,KAAK,CACV,+BAA+B,GAAG,MAAM,CAAC,UAAU,EACnD,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;WASG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB;;;yCAGyB,CAC1B,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,EAAE,GAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC;gBAE9D;;;mBAGG;gBACH,MAAM,WAAW,GACf,MAAM,sBAAsB,CAAC,OAAO,CAAC;oBACnC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;gBAEL,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,+DAA+D,CAChE,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,KAAK,CACV,eAAe,EACf,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,MAAM,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAE7C,MAAM,CAAC,KAAK,CACV,+BAA+B,GAAG,EAAE,CAAC,QAAQ,EAAE,EAC/C,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"DashboardDomainAPI.js","sourceRoot":"","sources":["../../../../Server/API/DashboardDomainAPI.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,sBAEN,MAAM,oCAAoC,CAAC;AAO5C,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,wBAAwB,MAAM,gDAAgD,CAAC;AACtF,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,eAAe,MAAM,6CAA6C,CAAC;AAC1E,OAAO,gBAAgB,MAAM,qCAAqC,CAAC;AACnE,OAAO,kBAAkB,MAAM,sBAAsB,CAAC;AAEtD,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,OAG/C;IACC;;QACE,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QAE/C;;;;;;WAMG;QACH,kBAAkB,CAAC,GAAG,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,CAAA,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,KAAI,EAAE;YACrE,OAAO,EAAE,sBAAsB;YAC/B,cAAc,EAAE,GAAW,EAAE;gBAC3B,OAAO,oBAAoB,CAAC;YAC9B,CAAC;YACD,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QAEH;;;;;;;;;;;;;WAaG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,gBAAgB,EACrE,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB;;;yCAGyB,CAC1B,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,EAAE,GAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC;gBAE9D,MAAM,WAAW,GACf,MAAM,sBAAsB,CAAC,OAAO,CAAC;oBACnC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;gBAEL,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,+DAA+D,CAChE,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,sBAAsB,CAAC,SAAS,CAAC;oBACrC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,UAAU,EAAE,IAAI;wBAChB,sBAAsB,EAAE,IAAI;wBAC5B,eAAe,EAAE,IAAI;wBACrB,gBAAgB,EAAE,IAAI;wBACtB,mBAAmB,EAAE,IAAI;wBACzB,mDAAmD;wBACnD,SAAS,EAAE,IAAI;qBAChB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;oBACnC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CACvC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,4EAA4E,CAC7E,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC5B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CACpD,CAAC;gBACJ,CAAC;gBAED,+DAA+D;gBAC/D,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC/B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,mGAAmG,CACpG,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CACxC,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,KAAK,CACV,cAAc,EACd,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,aAAa,CAAC;wBACnC,MAAM,EAAE,MAAM,CAAC,UAAU;wBACzB,KAAK,EAAE,GAAG,EAAE;4BACV,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,MAAM,EAAE;gCACvD,QAAQ,EAAE,IAAI;6BACf,CAAC,CAAC;wBACL,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,gEAAgE;oBAChE,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;wBAC5C,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;oBACnD,CAAC;oBAED,MAAM,GAAG,CAAC;gBACZ,CAAC;gBAED,MAAM,CAAC,KAAK,CACV,+BAA+B,GAAG,MAAM,CAAC,UAAU,EACnD,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;WASG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB;;;yCAGyB,CAC1B,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,EAAE,GAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,CAAC;gBAE9D;;;mBAGG;gBACH,MAAM,WAAW,GACf,MAAM,sBAAsB,CAAC,OAAO,CAAC;oBACnC,KAAK,EAAE;wBACL,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE;qBACnB;oBACD,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;gBAEL,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAClB,+DAA+D,CAChE,CACF,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,KAAK,CACV,eAAe,EACf,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,MAAM,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAE7C,MAAM,CAAC,KAAK,CACV,+BAA+B,GAAG,EAAE,CAAC,QAAQ,EAAE,EAC/C,2BAA2B,CAAC,GAAuB,CAAC,CACrD,CAAC;gBAEF,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/API/StatusPageAPI.js

@@ -100,6 +100,7 @@ import ProjectSmtpConfigService from "../Services/ProjectSmtpConfigService";
 import SlackUtil from "../Utils/Workspace/Slack/Slack";
 import MicrosoftTeamsUtil from "../Utils/Workspace/MicrosoftTeams/MicrosoftTeams";
 import { MASTER_PASSWORD_INVALID_MESSAGE } from "../../Types/StatusPage/MasterPassword";
+import { isStatusPageMasterPasswordRequired } from "../../Types/StatusPage/StatusPageAccess";
 import StatusPageSubscriberNotificationEventType from "../../Types/StatusPage/StatusPageSubscriberNotificationEventType";
 import StatusPageSubscriberNotificationMethod from "../../Types/StatusPage/StatusPageSubscriberNotificationMethod";
 import StatusPageSubscriberNotificationTemplateService, { Service as StatusPageSubscriberNotificationTemplateServiceClass, } from "../Services/StatusPageSubscriberNotificationTemplateService";
@@ -108,6 +109,8 @@ import ArchivedMonitorResources from "../../Utils/StatusPage/ArchivedMonitorReso
 import IncidentStatusPageScope, { INCIDENT_SCOPE_SELECT, } from "../Utils/StatusPage/IncidentStatusPageScope";
 import { StatusPageSubscriberUnsubscribeSource } from "../Utils/StatusPage/StatusPageSubscriberUnsubscribeNotice";
 import StatusPageSubscriberUnsubscribe from "../../Types/StatusPage/StatusPageSubscriberUnsubscribe";
+import StatusPagesListingMonitors from "../../Types/StatusPage/StatusPagesListingMonitors";
+import StatusPagesListingMonitorsBuilder from "../Utils/StatusPage/StatusPagesListingMonitorsBuilder";
 /*
  * A manage-subscription request is unauthenticated, and one Slack or Microsoft
  * Teams workspace name can match several subscriptions. Cap how many of them a
@@ -179,7 +182,7 @@ class StatusPageAPI extends BaseAPI {
         }
     }
     constructor() {
-        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10, _11;
         super(StatusPage, StatusPageService);
         // get title, description of the page.  This is used for SEO.
         this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/seo/:statusPageIdOrDomain`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res) => {
@@ -642,12 +645,27 @@ class StatusPageAPI extends BaseAPI {
             }
             return Response.sendTextResponse(req, res, challenge.challenge);
         });
+        /*
+         * The status pages that list some monitors, for the status page pickers
+         * of scheduled maintenance events and announcements to suggest (see
+         * StatusPagesListingMonitors). It only reads, and only names pages and
+         * looks up monitors the caller can read. A POST because the monitors
+         * travel in the body.
+         */
+        this.router.post(`${(_q = new this.entityType().getCrudApiPath()) === null || _q === void 0 ? void 0 : _q.toString()}/listing-monitors`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+            try {
+                await this.getStatusPagesListingMonitors(req, res);
+            }
+            catch (err) {
+                next(err);
+            }
+        });
         /*
          * Sends the status page's report to an address the caller chooses, so it
          * is gated like editing the status page: an authenticated member of the
          * project that owns it who could update this particular page.
          */
-        this.router.post(`${(_q = new this.entityType().getCrudApiPath()) === null || _q === void 0 ? void 0 : _q.toString()}/test-email-report`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+        this.router.post(`${(_r = new this.entityType().getCrudApiPath()) === null || _r === void 0 ? void 0 : _r.toString()}/test-email-report`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
             try {
                 /*
                  * This route acts on one page in one project, and the permission
@@ -700,7 +718,7 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_r = new this.entityType().getCrudApiPath()) === null || _r === void 0 ? void 0 : _r.toString()}/domain`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_s = new this.entityType().getCrudApiPath()) === null || _s === void 0 ? void 0 : _s.toString()}/domain`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 if (!req.body["domain"]) {
                     throw new BadDataException("domain is required in request body");
@@ -732,8 +750,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_s = new this.entityType()
-            .getCrudApiPath()) === null || _s === void 0 ? void 0 : _s.toString()}/master-page/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_t = new this.entityType()
+            .getCrudApiPath()) === null || _t === void 0 ? void 0 : _t.toString()}/master-page/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const statusPageIdParam = req.params["statusPageId"];
                 ObjectID.validateUUID(statusPageIdParam);
@@ -760,6 +778,8 @@ class StatusPageAPI extends BaseAPI {
                     enableSmsSubscribers: true,
                     isPublicStatusPage: true,
                     enableMasterPassword: true,
+                    // Only to tell whether one is set; never sent (see below).
+                    masterPassword: true,
                     allowSubscribersToChooseResources: true,
                     allowSubscribersToChooseEventTypes: true,
                     requireSsoForLogin: true,
@@ -820,6 +840,23 @@ class StatusPageAPI extends BaseAPI {
                 }
                 // Not part of what the page renders.
                 delete item.isArchived;
+                /*
+                 * Whether the page asks visitors for the master password, by the
+                 * rule the server enforces (Types/StatusPage/StatusPageAccess): not
+                 * public, the switch on and a password set. The switch alone said
+                 * yes on a private page with no password set, and the app sent
+                 * every visitor - private users included - to a password prompt
+                 * that could never let anyone in, while the server treated the
+                 * page as a sign-in page.
+                 */
+                item.enableMasterPassword = isStatusPageMasterPasswordRequired({
+                    isPublicStatusPage: Boolean(item.isPublicStatusPage),
+                    enableMasterPassword: item.enableMasterPassword,
+                    hasMasterPassword: Boolean(item.masterPassword),
+                });
+                // The password's hash and salt never leave the server.
+                delete item.masterPassword;
+                delete item.masterPasswordSalt;
                 if (!allowStatusPageCustomizations) {
                     /*
                      * The conditional select above keeps these values out of the
@@ -891,8 +928,8 @@ class StatusPageAPI extends BaseAPI {
          * a refused attempt costs neither a session lookup nor a hash. See
          * PublicDashboardRateLimit for the budget and why it fails closed.
          */
-        this.router.post(`${(_t = new this.entityType()
-            .getCrudApiPath()) === null || _t === void 0 ? void 0 : _t.toString()}/master-password/:statusPageId`, PublicDashboardRateLimit.getMiddleware(PublicDashboardRateLimitBucket.StatusPageMasterPassword), UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_u = new this.entityType()
+            .getCrudApiPath()) === null || _u === void 0 ? void 0 : _u.toString()}/master-password/:statusPageId`, PublicDashboardRateLimit.getMiddleware(PublicDashboardRateLimitBucket.StatusPageMasterPassword), UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 if (!req.params["statusPageId"]) {
                     throw new BadDataException("Status Page ID not found");
@@ -944,7 +981,7 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_u = new this.entityType().getCrudApiPath()) === null || _u === void 0 ? void 0 : _u.toString()}/sso/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_v = new this.entityType().getCrudApiPath()) === null || _v === void 0 ? void 0 : _v.toString()}/sso/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
                 const sso = await StatusPageSsoService.findBy({
@@ -970,7 +1007,7 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_v = new this.entityType().getCrudApiPath()) === null || _v === void 0 ? void 0 : _v.toString()}/oidc/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_w = new this.entityType().getCrudApiPath()) === null || _w === void 0 ? void 0 : _w.toString()}/oidc/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
                 const oidc = await StatusPageOidcService.findBy({
@@ -996,8 +1033,8 @@ class StatusPageAPI extends BaseAPI {
             }
         });
         // Get all status page resources for subscriber to subscribe to.
-        this.router.post(`${(_w = new this.entityType()
-            .getCrudApiPath()) === null || _w === void 0 ? void 0 : _w.toString()}/resources/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_x = new this.entityType()
+            .getCrudApiPath()) === null || _x === void 0 ? void 0 : _x.toString()}/resources/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const statusPageId = new ObjectID(req.params["statusPageId"]);
                 await this.checkHasReadAccess({
@@ -1042,8 +1079,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_x = new this.entityType()
-            .getCrudApiPath()) === null || _x === void 0 ? void 0 : _x.toString()}/uptime/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_y = new this.entityType()
+            .getCrudApiPath()) === null || _y === void 0 ? void 0 : _y.toString()}/uptime/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             var _a, _b;
             try {
                 // This reosurce ID can be of a status page resource OR a status page group.
@@ -1360,8 +1397,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         };
-        const overviewApiPath = `${(_y = new this.entityType()
-            .getCrudApiPath()) === null || _y === void 0 ? void 0 : _y.toString()}/overview/:statusPageIdOrDomain`;
+        const overviewApiPath = `${(_z = new this.entityType()
+            .getCrudApiPath()) === null || _z === void 0 ? void 0 : _z.toString()}/overview/:statusPageIdOrDomain`;
         this.router.post(overviewApiPath, UserMiddleware.getPublicRouteUserMiddleware, overviewHandler);
         /*
          * GET variant of the overview endpoint. Same middleware and same handler
@@ -1369,8 +1406,8 @@ class StatusPageAPI extends BaseAPI {
          * unauthenticated callers exactly as they are on POST.
          */
         this.router.get(overviewApiPath, UserMiddleware.getPublicRouteUserMiddleware, overviewHandler);
-        this.router.put(`${(_z = new this.entityType()
-            .getCrudApiPath()) === null || _z === void 0 ? void 0 : _z.toString()}/update-subscription/:statusPageId/:subscriberId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.put(`${(_0 = new this.entityType()
+            .getCrudApiPath()) === null || _0 === void 0 ? void 0 : _0.toString()}/update-subscription/:statusPageId/:subscriberId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 await this.subscribeToStatusPage(req);
                 return Response.sendEmptySuccessResponse(req, res);
@@ -1379,8 +1416,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_0 = new this.entityType()
-            .getCrudApiPath()) === null || _0 === void 0 ? void 0 : _0.toString()}/get-subscription/:statusPageId/:subscriberId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_1 = new this.entityType()
+            .getCrudApiPath()) === null || _1 === void 0 ? void 0 : _1.toString()}/get-subscription/:statusPageId/:subscriberId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const subscriber = await this.getSubscriber(req);
                 return Response.sendEntityResponse(req, res, subscriber, StatusPageSubscriber);
@@ -1389,8 +1426,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_1 = new this.entityType()
-            .getCrudApiPath()) === null || _1 === void 0 ? void 0 : _1.toString()}/subscribe/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_2 = new this.entityType()
+            .getCrudApiPath()) === null || _2 === void 0 ? void 0 : _2.toString()}/subscribe/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 await this.subscribeToStatusPage(req);
                 return Response.sendEmptySuccessResponse(req, res);
@@ -1399,8 +1436,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_2 = new this.entityType()
-            .getCrudApiPath()) === null || _2 === void 0 ? void 0 : _2.toString()}/manage-subscription/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_3 = new this.entityType()
+            .getCrudApiPath()) === null || _3 === void 0 ? void 0 : _3.toString()}/manage-subscription/:statusPageId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 await this.manageExistingSubscription(req);
                 return Response.sendEmptySuccessResponse(req, res);
@@ -1425,8 +1462,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         };
-        const incidentsListApiPath = `${(_3 = new this.entityType()
-            .getCrudApiPath()) === null || _3 === void 0 ? void 0 : _3.toString()}/incidents/:statusPageIdOrDomain`;
+        const incidentsListApiPath = `${(_4 = new this.entityType()
+            .getCrudApiPath()) === null || _4 === void 0 ? void 0 : _4.toString()}/incidents/:statusPageIdOrDomain`;
         this.router.post(incidentsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, incidentsListHandler);
         this.router.get(incidentsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, incidentsListHandler);
         /*
@@ -1446,8 +1483,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         };
-        const scheduledMaintenanceEventsListApiPath = `${(_4 = new this.entityType()
-            .getCrudApiPath()) === null || _4 === void 0 ? void 0 : _4.toString()}/scheduled-maintenance-events/:statusPageIdOrDomain`;
+        const scheduledMaintenanceEventsListApiPath = `${(_5 = new this.entityType()
+            .getCrudApiPath()) === null || _5 === void 0 ? void 0 : _5.toString()}/scheduled-maintenance-events/:statusPageIdOrDomain`;
         this.router.post(scheduledMaintenanceEventsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, scheduledMaintenanceEventsListHandler);
         this.router.get(scheduledMaintenanceEventsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, scheduledMaintenanceEventsListHandler);
         /*
@@ -1466,12 +1503,12 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         };
-        const announcementsListApiPath = `${(_5 = new this.entityType()
-            .getCrudApiPath()) === null || _5 === void 0 ? void 0 : _5.toString()}/announcements/:statusPageIdOrDomain`;
+        const announcementsListApiPath = `${(_6 = new this.entityType()
+            .getCrudApiPath()) === null || _6 === void 0 ? void 0 : _6.toString()}/announcements/:statusPageIdOrDomain`;
         this.router.post(announcementsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, announcementsListHandler);
         this.router.get(announcementsListApiPath, UserMiddleware.getPublicRouteUserMiddleware, announcementsListHandler);
-        this.router.post(`${(_6 = new this.entityType()
-            .getCrudApiPath()) === null || _6 === void 0 ? void 0 : _6.toString()}/incidents/:statusPageIdOrDomain/:incidentId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_7 = new this.entityType()
+            .getCrudApiPath()) === null || _7 === void 0 ? void 0 : _7.toString()}/incidents/:statusPageIdOrDomain/:incidentId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = await resolveStatusPageIdOrThrow(req.params["statusPageIdOrDomain"]);
                 const incidentId = new ObjectID(req.params["incidentId"]);
@@ -1482,8 +1519,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_7 = new this.entityType()
-            .getCrudApiPath()) === null || _7 === void 0 ? void 0 : _7.toString()}/scheduled-maintenance-events/:statusPageIdOrDomain/:scheduledMaintenanceId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_8 = new this.entityType()
+            .getCrudApiPath()) === null || _8 === void 0 ? void 0 : _8.toString()}/scheduled-maintenance-events/:statusPageIdOrDomain/:scheduledMaintenanceId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = await resolveStatusPageIdOrThrow(req.params["statusPageIdOrDomain"]);
                 const scheduledMaintenanceId = new ObjectID(req.params["scheduledMaintenanceId"]);
@@ -1494,8 +1531,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_8 = new this.entityType()
-            .getCrudApiPath()) === null || _8 === void 0 ? void 0 : _8.toString()}/announcements/:statusPageIdOrDomain/:announcementId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_9 = new this.entityType()
+            .getCrudApiPath()) === null || _9 === void 0 ? void 0 : _9.toString()}/announcements/:statusPageIdOrDomain/:announcementId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = await resolveStatusPageIdOrThrow(req.params["statusPageIdOrDomain"]);
                 const announcementId = new ObjectID(req.params["announcementId"]);
@@ -1507,8 +1544,8 @@ class StatusPageAPI extends BaseAPI {
             }
         });
         // Episodes endpoints
-        this.router.post(`${(_9 = new this.entityType()
-            .getCrudApiPath()) === null || _9 === void 0 ? void 0 : _9.toString()}/episodes/:statusPageIdOrDomain`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_10 = new this.entityType()
+            .getCrudApiPath()) === null || _10 === void 0 ? void 0 : _10.toString()}/episodes/:statusPageIdOrDomain`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = await resolveStatusPageIdOrThrow(req.params["statusPageIdOrDomain"]);
                 const response = await this.getEpisodes(objectId, null, req);
@@ -1518,8 +1555,8 @@ class StatusPageAPI extends BaseAPI {
                 next(err);
             }
         });
-        this.router.post(`${(_10 = new this.entityType()
-            .getCrudApiPath()) === null || _10 === void 0 ? void 0 : _10.toString()}/episodes/:statusPageIdOrDomain/:episodeId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
+        this.router.post(`${(_11 = new this.entityType()
+            .getCrudApiPath()) === null || _11 === void 0 ? void 0 : _11.toString()}/episodes/:statusPageIdOrDomain/:episodeId`, UserMiddleware.getPublicRouteUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = await resolveStatusPageIdOrThrow(req.params["statusPageIdOrDomain"]);
                 const episodeId = new ObjectID(req.params["episodeId"]);
@@ -1531,6 +1568,31 @@ class StatusPageAPI extends BaseAPI {
             }
         });
     }
+    /*
+     * POST /status-page/listing-monitors: which of the caller's readable status
+     * pages list some monitors (StatusPagesListingMonitorsBuilder).
+     */
+    async getStatusPagesListingMonitors(req, res) {
+        /*
+         * The answer is for one project, and the reads it is built from are
+         * bounded by the caller's permissions in that project, so the request is
+         * never treated as multi-tenant.
+         */
+        const props = Object.assign(Object.assign({}, (await CommonAPI.getDatabaseCommonInteractionProps(req))), { isMultiTenantRequest: false });
+        /*
+         * A member of the project, or one of its API keys. What either may see
+         * is then bounded by the monitor and status page reads below.
+         */
+        const projectId = CommonAPI.assertAuthenticatedProjectPrincipal(props);
+        const request = StatusPagesListingMonitorsBuilder.parseRequest({
+            body: req.body,
+            projectId: projectId,
+            props: props,
+        });
+        const result = await StatusPagesListingMonitorsBuilder.build(request);
+        Response.setNoCacheHeaders(res);
+        return Response.sendJsonObjectResponse(req, res, StatusPagesListingMonitors.toJSON(result));
+    }
     async getScheduledMaintenanceEvents(statusPageId, scheduledMaintenanceId, req) {
         await this.checkHasReadAccess({
             statusPageId: statusPageId,