@opengis/fastify-table 2.1.7 → 2.1.9

package/dist/log/migration/dist-technical-cls.json

@@ -0,0 +1 @@
+[{"name":"core.roles","module":"admin","type":"select","hash":"d5d31d7e7fe19912d4d45bacb3aab3d3","dbhash":"d5d31d7e7fe19912d4d45bacb3aab3d3","update":false},{"name":"core.routes","module":"admin","type":"select","hash":"431032fdbe25c2db997391f61c6e944f","dbhash":"431032fdbe25c2db997391f61c6e944f","update":false},{"name":"core.user_uid","module":"admin","type":"select","hash":"45f7d8a57ecbca5b433be7937be51d5c","dbhash":"45f7d8a57ecbca5b433be7937be51d5c","update":false},{"name":"data.product","module":"shop","type":"select","hash":"9f9f99a1fb323ed0a32823cff47e59c7","dbhash":"9f9f99a1fb323ed0a32823cff47e59c7","update":false},{"name":"shop.categories","module":"shop","type":"select","hash":"549584bc96bd5ab14f872d4ef8df3d82","dbhash":"549584bc96bd5ab14f872d4ef8df3d82","update":false},{"name":"shop.products","module":"shop","type":"select","hash":"099ec0587edd16f26a1d05395a21709e","dbhash":"099ec0587edd16f26a1d05395a21709e","update":false},{"name":"shop.types","module":"shop","type":"select","hash":"a110b4d5bbe74557a7272df65ab10c3e","dbhash":"a110b4d5bbe74557a7272df65ab10c3e","update":false},{"name":"shop.types_parent","module":"shop","type":"select","hash":"14fa482423740f452139ce622f961740","dbhash":"14fa482423740f452139ce622f961740","update":false},{"name":"core.user_mentioned","module":"core","type":"select","hash":"6687f073de73a3ec4b6e0811d9310e7e","dbhash":"5a35e8ca97ce4fde93030521104ca5d3","update":true},{"name":"users.user_type","module":"admin","type":"cls","hash":"065fe92f48196a961a35f48ddd6ba9bd","dbhash":"065fe92f48196a961a35f48ddd6ba9bd","update":false},{"name":"yes_no","module":"admin","type":"cls","hash":"50c527053426248c20b0a2f112ff9046","dbhash":"50c527053426248c20b0a2f112ff9046","update":false},{"name":"currency","module":"shop","type":"cls","hash":"99ee673ab4ac2c222c0272bb7ef8079e","dbhash":"99ee673ab4ac2c222c0272bb7ef8079e","update":false},{"name":"delivery_method","module":"shop","type":"cls","hash":"953a6e6de0e83d7468393bd02e179b05","dbhash":"953a6e6de0e83d7468393bd02e179b05","update":false},{"name":"order_items.order_type","module":"shop","type":"cls","hash":"d99d36a3563ec77131b0800044df5fd0","dbhash":"d99d36a3563ec77131b0800044df5fd0","update":false},{"name":"order_status","module":"shop","type":"cls","hash":"65049e14b7d1faa6c2b0e837ff41f37d","dbhash":"65049e14b7d1faa6c2b0e837ff41f37d","update":false},{"name":"constraint_action","module":"core","type":"cls","hash":"1b7129eae9eb42106ed6e646223c806a","dbhash":"1b7129eae9eb42106ed6e646223c806a","update":false},{"name":"constraint_matchtype","module":"core","type":"cls","hash":"446ad903e69a391748a8a27bae2dc5cd","dbhash":"446ad903e69a391748a8a27bae2dc5cd","update":false},{"name":"constraint_type_full","module":"core","type":"cls","hash":"9e1cc580273f7e73fbc08ee553ad8f64","dbhash":"9e1cc580273f7e73fbc08ee553ad8f64","update":false},{"name":"core.user_type","module":"core","type":"cls","hash":"728bc9e0bcc88de83ec56d8dc7e7efff","dbhash":"728bc9e0bcc88de83ec56d8dc7e7efff","update":false}]

package/dist/log/migration/dist-technical-cls.sql

@@ -0,0 +1,2 @@
+insert into admin.cls(name,type,data,module,hash) values('core.user_mentioned','sql','select uid, coalesce(sur_name,'''')||coalesce('' ''||user_name,'''') as text, email from admin.users
+where enabled order by coalesce(sur_name,'''')||coalesce('' ''||user_name,'''')', 'core','6687f073de73a3ec4b6e0811d9310e7e')

package/dist/module/core/select/core.user_mentioned.sql

@@ -1,2 +1,2 @@
-select uid, coalesce(sur_name,'')||coalesce(' '||user_name,'') as text, email from admin.users
+select uid, coalesce(sur_name,'')||coalesce(' '||user_name,'') as text, email from admin.users
 where enabled order by coalesce(sur_name,'')||coalesce(' '||user_name,'')

package/dist/server/routes/crud/controllers/deleteCrud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deleteCrud.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/deleteCrud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,wBAA8B,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBA8IrE"}
+{"version":3,"file":"deleteCrud.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/deleteCrud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAc5C,wBAA8B,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBAmJrE"}

package/dist/server/routes/crud/controllers/deleteCrud.js

@@ -58,7 +58,10 @@ export default async function deleteCrud(req, reply) {
             code: 403,
         });
     }
-    if (!actions.includes("del") && !config?.local && !tokenData) {
+    if (!actions.includes("del") &&
+        !config.security?.disableToken &&
+        !config?.local &&
+        !tokenData) {
         return reply.status(403).send({
             error: "access restricted: actions",
             code: 403,

package/dist/server/routes/crud/controllers/insert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"insert.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/insert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAgB5C,wBAA8B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBAsNjE"}
+{"version":3,"file":"insert.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/insert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAgB5C,wBAA8B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBA2NjE"}

package/dist/server/routes/crud/controllers/insert.js

@@ -57,7 +57,10 @@ export default async function insert(req, reply) {
         !config.auth?.disable) {
         return reply.status(400).send({ error: "invalid token", code: 400 });
     }
-    if (!actions.includes("add") && !config.local && !tokenData) {
+    if (!actions.includes("add") &&
+        !config.security?.disableToken &&
+        !config.local &&
+        !tokenData) {
         return reply
             .status(403)
             .send({ error: "access restricted: actions", code: 403 });

package/dist/server/routes/crud/controllers/table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAgB5C,wBAA8B,QAAQ,CACpC,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,GAAG,gBA8PZ"}
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAgB5C,wBAA8B,QAAQ,CACpC,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,GAAG,gBAoQZ"}

package/dist/server/routes/crud/controllers/table.js

@@ -69,7 +69,11 @@ export default async function tableAPI(req, reply, called) {
         !called) {
         return reply.status(400).send("invalid token");
     }
-    if (!actions.includes("edit") && !config?.local && !tokenData && !called) {
+    if (!actions.includes("edit") &&
+        !config?.local &&
+        !config.security?.disableToken &&
+        !tokenData &&
+        !called) {
         return reply
             .status(403)
             .send({ error: "access restricted: actions", code: 403 });

package/dist/server/routes/crud/controllers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/update.ts"],"names":[],"mappings":"AAgBA,wBAA8B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAgNxD"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/update.ts"],"names":[],"mappings":"AAgBA,wBAA8B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAqNxD"}

package/dist/server/routes/crud/controllers/update.js

@@ -68,7 +68,10 @@ export default async function update(req, reply) {
         !config.auth?.disable) {
         return reply.status(400).send({ error: "invalid token", code: 400 });
     }
-    if (!actions.includes("edit") && !config.local && !tokenData) {
+    if (!actions.includes("edit") &&
+        !config.local &&
+        !config.security?.disableToken &&
+        !tokenData) {
         return reply
             .status(403)
             .send({ error: "access restricted: actions", code: 403 });

package/dist/server/routes/file/controllers/resize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resize.d.ts","sourceRoot":"","sources":["../../../../../server/routes/file/controllers/resize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAoC5C;;GAEG;AAEH,wBAA8B,MAAM,CAClC,EACE,KAAK,GACN,EAAE;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,CAAC,CAAC,EAAE,MAAM,CAAC;QACX,CAAC,CAAC,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,GAAG,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACf,CAAC;CACH,EACD,KAAK,EAAE,YAAY,kBAwIpB"}
+{"version":3,"file":"resize.d.ts","sourceRoot":"","sources":["../../../../../server/routes/file/controllers/resize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAoC5C;;GAEG;AAEH,wBAA8B,MAAM,CAClC,EACE,KAAK,GACN,EAAE;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,CAAC,CAAC,EAAE,MAAM,CAAC;QACX,CAAC,CAAC,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,GAAG,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,GAAG,CAAC;KACf,CAAC;CACH,EACD,KAAK,EAAE,YAAY,kBAwJpB"}

package/dist/server/routes/file/controllers/resize.js

@@ -36,6 +36,21 @@ export default async function resize({ query, }, reply) {
             .status(400)
             .send({ error: "invalid query params: filepath", code: 400 });
     }
+    // svg не підтримується
+    if (mimeType === "image/svg+xml") {
+        const fileData = await downloadFile(filepath, { buffer: true });
+        if (!fileData?.length) {
+            return reply
+                .status(404)
+                .send({ error: `Файл не знайдено - ${filepath}`, code: 400 });
+        }
+        return reply
+            .headers({
+            "Content-Type": "image/svg+xml",
+            "Cache-control": "max-age=604800",
+        })
+            .send(fileData);
+    }
     const resizePath1 = size
         ? filepath.replace(basename, `${size}_resized_${basename}`)
         : filepath.replace(basename, `${w || defaultWidth}_${h || (w ? "" : defaultHeight)}_resized_${basename}`);

package/dist/server/routes/table/controllers/getFormByTable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getFormByTable.d.ts","sourceRoot":"","sources":["../../../../../server/routes/table/controllers/getFormByTable.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAY5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAUzD,wBAA8B,OAAO,CACnC,EACE,EAAqB,EACrB,MAAM,EACN,IAAS,EACT,KAAU,EACV,MAAM,GACP,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,EACD,KAAK,EAAE,YAAY,gBAgLpB"}
+{"version":3,"file":"getFormByTable.d.ts","sourceRoot":"","sources":["../../../../../server/routes/table/controllers/getFormByTable.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAY5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAUzD,wBAA8B,OAAO,CACnC,EACE,EAAqB,EACrB,MAAM,EACN,IAAS,EACT,KAAU,EACV,MAAM,GACP,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,EACD,KAAK,EAAE,YAAY,gBAmLpB"}

package/dist/server/routes/table/controllers/getFormByTable.js

@@ -80,10 +80,13 @@ export default async function getForm({ pg = pgClients.client, params, user = {}
             : actions.includes("add");
         if (!isAllowedByTemplate &&
             !config.local &&
+            !config.security?.disableToken &&
             process.env.NODE_ENV !== "test" &&
             !(tokenData?.form || hookData?.form) &&
             form) {
-            return reply.status(403).send("access restricted: actions");
+            return reply
+                .status(403)
+                .send({ error: "access restricted: actions", code: 403 });
         }
         const token = setToken({
             ids: [JSON.stringify({ id, table, form })],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "2.1.7",
+  "version": "2.1.9",
   "type": "module",
   "description": "core-plugins",
   "keywords": [

package/dist/module/core/cls/constraint_type.json

@@ -1,14 +0,0 @@
-[
-    {
-        "id": "u",
-        "text": "UK"
-    },
-    {
-        "id": "p",
-        "text": "PK"
-    },
-    {
-        "id": "f",
-        "text": "FK"
-    }
-]

package/dist/module/core/cls/constraint_type_table.json

@@ -1,18 +0,0 @@
-[
-    {
-        "id": "u",
-        "text": "UK"
-    },
-    {
-        "id": "p",
-        "text": "PK"
-    },
-    {
-        "id": "f",
-        "text": "FK"
-    },
-    {
-        "id": "c",
-        "text": "CHECK"
-    }
-]

package/dist/server/plugins/auth/funcs/getUserPermissions.d.ts

@@ -1,2 +0,0 @@
-export default function getUserPermissions(uid?: string, pg?: any): Promise<any>;
-//# sourceMappingURL=getUserPermissions.d.ts.map

package/dist/server/plugins/auth/funcs/getUserPermissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getUserPermissions.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/getUserPermissions.ts"],"names":[],"mappings":"AAUA,wBAA8B,kBAAkB,CAC9C,GAAG,CAAC,EAAE,MAAM,EACZ,EAAE,MAAmB,gBAoBtB"}

package/dist/server/plugins/auth/funcs/getUserPermissions.js

@@ -1,24 +0,0 @@
-import pgClients from "../../pg/pgClients.js";
-const q = `select resource_id as name,
-        array_intersect(coalesce(a.actions, array['read']), coalesce(c.actions, array['create', 'read','update','delete'])) as actions,
-        b.name as role
-from admin.role_access a
-left join admin.roles b on a.role_id=b.role_id and b.enabled
-left join admin.user_roles c on a.role_id=c.role_id
-where resource_id is not null and $1 in (a.user_uid, c.user_uid)`;
-export default async function getUserPermissions(uid, pg = pgClients.client) {
-    if (!uid)
-        return [];
-    // ? in case pg.pk not set yet
-    const pks = await pg
-        .query(`SELECT json_object_agg(conrelid::regclass, (SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]) ) 
-      FROM pg_constraint c WHERE contype = 'p' AND connamespace::regnamespace::text = 'admin'`)
-        .then((el) => el.rows?.[0]?.json_object_agg || {});
-    const permissions = pks["admin.role_access"] &&
-        pks["admin.user_roles"] &&
-        pks["admin.users"] &&
-        uid
-        ? await pg.query(q, [uid]).then((el) => el.rows || [])
-        : [];
-    return permissions;
-}

package/dist/server/plugins/auth/onRequest.d.ts

@@ -1,4 +0,0 @@
-import { FastifyReply } from "fastify";
-import { ExtendedRequest } from "../../types/core.js";
-export default function onRequest(req: ExtendedRequest, reply: FastifyReply): Promise<null>;
-//# sourceMappingURL=onRequest.d.ts.map

package/dist/server/plugins/auth/onRequest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onRequest.d.ts","sourceRoot":"","sources":["../../../../server/plugins/auth/onRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,wBAA8B,SAAS,CACrC,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,YAAY,iBA+HpB"}

package/dist/server/plugins/auth/onRequest.js

@@ -1,104 +0,0 @@
-import { existsSync } from "node:fs";
-import config from "../../../config.js";
-const { prefix = "/api" } = config;
-export default async function onRequest(req, reply) {
-    const { hostname, headers, routeOptions } = req;
-    const { config: routeConfig, method, handler, url } = routeOptions || {};
-    const { policy } = routeConfig || {};
-    const isApi = method && url && typeof handler === "function" && url !== "*";
-    // handle non-api at vite/vike
-    if (!isApi) {
-        return null;
-    }
-    // proxy from old apps to editor, bi etc.
-    const validToken = (req.ip === "193.239.152.181" ||
-        req.ip === "127.0.0.1" ||
-        req.ip?.startsWith?.("192.168.") ||
-        config.debug) &&
-        req.headers?.token &&
-        config.auth?.tokens?.includes?.(headers.token);
-    if (validToken && !req?.user?.uid) {
-        req.user = {
-            uid: req.headers?.uid?.toString?.(),
-            user_type: req.headers?.user_type?.toString?.() || "regular",
-        };
-    }
-    const isAdmin = process.env.NODE_ENV === "admin" ||
-        hostname?.split?.(":")?.shift?.() === config.adminDomain ||
-        config.admin ||
-        hostname?.startsWith?.("admin");
-    const isPublic = Array.isArray(policy)
-        ? policy.includes("public")
-        : policy === "L0";
-    if (req.cookies?.["session_auth"] &&
-        !req.session?.passport?.user?.uid &&
-        (config.auth?.disable || config.auth?.user)) {
-        req.session = req.session || {};
-        req.session.passport = req.session.passport || {}; // ensure passport session exists
-        req.session.passport.user = {
-            ...(config.auth?.user || {}),
-            uid: config.auth?.user?.uid?.toString?.() || "1",
-            user_rnokpp: config.auth?.user?.rnokpp,
-            user_type: config.auth?.user?.type || "regular",
-        };
-        req.user = req.session.passport.user;
-    }
-    // ! intentional: null || undefined > undefined
-    req.user = req.user || req.session?.passport?.user || undefined; // fix for user.uid errors, by default user is null, while with express passport it was {}, unauthorized user does not trigger serializer
-    // currently 2factor + auth with passwd file not supported
-    const ispasswd = (existsSync("passwd") && !config.auth?.["2factor"]) || config.auth?.passwd;
-    const loginPageUrl = config.auth?.link?.core?.login || config?.auth?.redirect || "/login";
-    if (!req.user?.uid &&
-        !config.auth?.disable &&
-        isAdmin &&
-        !isPublic &&
-        !config.auth?.disableRedirect &&
-        !req.url.startsWith(prefix) &&
-        !req.url.startsWith("/api") &&
-        !req.url.includes(loginPageUrl) &&
-        !req.url.includes(".") &&
-        !req.url.includes("@")) {
-        if (isApi) {
-            return reply.status(401).send({ error: "unauthorized", code: 401 });
-        }
-        return reply.redirect(`${loginPageUrl}` + `?redirect=${req.url}`);
-    }
-    // by default, disable 2factor for id.gov.ua auth
-    const check = req.user?.auth_type === "govid" ? config.auth?.["2factor"]?.govid : true;
-    const login2faPage = config.auth?.link?.["2fa"]?.login || "/2factor";
-    // example: 2factor for admin env only, while public env does not require it
-    const checkEnv = () => {
-        if (!config.auth?.["2factorEnv"])
-            return true;
-        if ((config.auth?.["2factorEnv"] &&
-            process.env.NODE_ENV === config.auth?.["2factorEnv"]) ||
-            (config.auth?.["2factorEnv"] === "admin" && isAdmin)) {
-            return true;
-        }
-        return false;
-    };
-    // if 2factor is enabled globally + for user and secondFactorPassed not true => redirect to 2factor login page
-    if (req.user?.uid &&
-        req.user?.twofa &&
-        // config.auth?.["2factor"] &&
-        // !isPublic &&
-        (routeOptions?.method || "GET") === "GET" &&
-        !req.session?.secondFactorPassed &&
-        !ispasswd &&
-        !config.auth?.disableRedirect &&
-        !config.auth?.disable &&
-        check &&
-        checkEnv() &&
-        !req.url.startsWith(login2faPage) &&
-        !routeOptions.url?.includes?.("/logout") &&
-        !routeOptions.url?.includes?.("/2fa") &&
-        !routeOptions.url?.includes?.("/assets")) {
-        if (isApi) {
-            return reply
-                .status(403)
-                .send({ error: "access restricted: twofa", code: 403 });
-        }
-        return reply.redirect(login2faPage);
-    }
-    return null;
-}

package/dist/server/plugins/migration/index.d.ts

@@ -1,3 +0,0 @@
-declare function plugin(): Promise<void>;
-export default plugin;
-//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/migration/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/plugins/migration/index.ts"],"names":[],"mappings":"AAEA,iBAAe,MAAM,kBAEpB;AAED,eAAe,MAAM,CAAC"}

package/dist/server/plugins/migration/index.js

@@ -1,5 +0,0 @@
-// import execMigrations from './funcs/exec.migrations.js';
-async function plugin() {
-    //   fastify.decorate('execMigrations', execMigrations);
-}
-export default plugin;

package/dist/server/plugins/policy/funcs/checkAuth.d.ts

@@ -1,4 +0,0 @@
-import { FastifyReply } from "fastify";
-import { ExtendedRequest } from "../../../types/core.js";
-export default function onRequest(req: ExtendedRequest, reply: FastifyReply): Promise<null>;
-//# sourceMappingURL=checkAuth.d.ts.map

package/dist/server/plugins/policy/funcs/checkAuth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkAuth.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD,wBAA8B,SAAS,CACrC,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,YAAY,iBA+HpB"}

package/dist/server/plugins/policy/funcs/checkAuth.js

@@ -1,104 +0,0 @@
-import { existsSync } from "node:fs";
-import config from "../../../../config.js";
-const { prefix = "/api" } = config;
-export default async function onRequest(req, reply) {
-    const { hostname, headers, routeOptions } = req;
-    const { config: routeConfig, method, handler, url } = routeOptions || {};
-    const { policy } = routeConfig || {};
-    const isApi = method && url && typeof handler === "function" && url !== "*";
-    // handle non-api at vite/vike
-    if (!isApi) {
-        return null;
-    }
-    // proxy from old apps to editor, bi etc.
-    const validToken = (req.ip === "193.239.152.181" ||
-        req.ip === "127.0.0.1" ||
-        req.ip?.startsWith?.("192.168.") ||
-        config.debug) &&
-        req.headers?.token &&
-        config.auth?.tokens?.includes?.(headers.token);
-    if (validToken && !req?.user?.uid) {
-        req.user = {
-            uid: req.headers?.uid?.toString?.(),
-            user_type: req.headers?.user_type?.toString?.() || "regular",
-        };
-    }
-    const isAdmin = process.env.NODE_ENV === "admin" ||
-        hostname?.split?.(":")?.shift?.() === config.adminDomain ||
-        config.admin ||
-        hostname?.startsWith?.("admin");
-    const isPublic = Array.isArray(policy)
-        ? policy.includes("public")
-        : policy === "L0";
-    if (req.cookies?.["session_auth"] &&
-        !req.session?.passport?.user?.uid &&
-        (config.auth?.disable || config.auth?.user)) {
-        req.session = req.session || {};
-        req.session.passport = req.session.passport || {}; // ensure passport session exists
-        req.session.passport.user = {
-            ...(config.auth?.user || {}),
-            uid: config.auth?.user?.uid?.toString?.() || "1",
-            user_rnokpp: config.auth?.user?.rnokpp,
-            user_type: config.auth?.user?.type || "regular",
-        };
-        req.user = req.session.passport.user;
-    }
-    // ! intentional: null || undefined > undefined
-    req.user = req.user || req.session?.passport?.user || undefined; // fix for user.uid errors, by default user is null, while with express passport it was {}, unauthorized user does not trigger serializer
-    // currently 2factor + auth with passwd file not supported
-    const ispasswd = (existsSync("passwd") && !config.auth?.["2factor"]) || config.auth?.passwd;
-    const loginPageUrl = config.auth?.link?.core?.login || config?.auth?.redirect || "/login";
-    if (!req.user?.uid &&
-        !config.auth?.disable &&
-        isAdmin &&
-        !isPublic &&
-        !config.auth?.disableRedirect &&
-        !req.url.startsWith(prefix) &&
-        !req.url.startsWith("/api") &&
-        !req.url.includes(loginPageUrl) &&
-        !req.url.includes(".") &&
-        !req.url.includes("@")) {
-        if (isApi) {
-            return reply.status(401).send({ error: "unauthorized", code: 401 });
-        }
-        return reply.redirect(`${loginPageUrl}` + `?redirect=${req.url}`);
-    }
-    // by default, disable 2factor for id.gov.ua auth
-    const check = req.user?.auth_type === "govid" ? config.auth?.["2factor"]?.govid : true;
-    const login2faPage = config.auth?.link?.["2fa"]?.login || "/2factor";
-    // example: 2factor for admin env only, while public env does not require it
-    const checkEnv = () => {
-        if (!config.auth?.["2factorEnv"])
-            return true;
-        if ((config.auth?.["2factorEnv"] &&
-            process.env.NODE_ENV === config.auth?.["2factorEnv"]) ||
-            (config.auth?.["2factorEnv"] === "admin" && isAdmin)) {
-            return true;
-        }
-        return false;
-    };
-    // if 2factor is enabled globally + for user and secondFactorPassed not true => redirect to 2factor login page
-    if (req.user?.uid &&
-        req.user?.twofa &&
-        // config.auth?.["2factor"] &&
-        // !isPublic &&
-        (routeOptions?.method || "GET") === "GET" &&
-        !req.session?.secondFactorPassed &&
-        !ispasswd &&
-        !config.auth?.disableRedirect &&
-        !config.auth?.disable &&
-        check &&
-        checkEnv() &&
-        !req.url.startsWith(login2faPage) &&
-        !routeOptions.url?.includes?.("/logout") &&
-        !routeOptions.url?.includes?.("/2fa") &&
-        !routeOptions.url?.includes?.("/assets")) {
-        if (isApi) {
-            return reply
-                .status(403)
-                .send({ error: "access restricted: twofa", code: 403 });
-        }
-        return reply.redirect(login2faPage);
-    }
-    return null;
-}

package/dist/server/routes/access/controllers/access.resources.d.ts

@@ -1,6 +0,0 @@
-declare const arr: any;
-declare const publicResources: any[];
-declare const accessResources: (req?: any) => Promise<any[]>;
-export { arr as resources, publicResources };
-export default accessResources;
-//# sourceMappingURL=access.resources.d.ts.map

package/dist/server/routes/access/controllers/access.resources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.resources.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.resources.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,GAAG,KAEH,CAAC;AAEP,QAAA,MAAM,eAAe,EAAE,GAAG,EAIvB,CAAC;AAEJ,QAAA,MAAM,eAAe,GAAU,MAAM,GAAG,KAAG,OAAO,CAAC,GAAG,EAAE,CAEvD,CAAC;AAEF,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;AAC7C,eAAe,eAAe,CAAC"}

package/dist/server/routes/access/controllers/access.resources.js

@@ -1,14 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-const arr = existsSync("config/resources.json")
-    ? JSON.parse(readFileSync("config/resources.json", "utf-8") || "[]")
-    : [];
-const publicResources = arr.map(({ name, actions, feature }) => ({
-    name,
-    actions,
-    feature,
-}));
-const accessResources = async (req) => {
-    return publicResources;
-};
-export { arr as resources, publicResources };
-export default accessResources;

package/dist/server/routes/access/controllers/resources.d.ts

@@ -1,11 +0,0 @@
-declare const arr: any;
-interface Resource {
-    name: string;
-    actions: string[];
-    feature: string;
-}
-declare const publicResources: Resource[];
-declare const resources: (req?: any) => Promise<Resource[]>;
-export { arr as resources, publicResources };
-export default resources;
-//# sourceMappingURL=resources.d.ts.map

package/dist/server/routes/access/controllers/resources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/resources.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,GAAG,KAEH,CAAC;AAEP,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,QAAA,MAAM,eAAe,EAAE,QAAQ,EAM9B,CAAC;AAEF,QAAA,MAAM,SAAS,GAAU,MAAM,GAAG,KAAG,OAAO,CAAC,QAAQ,EAAE,CAEtD,CAAC;AAEF,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;AAC7C,eAAe,SAAS,CAAC"}

package/dist/server/routes/access/controllers/resources.js

@@ -1,14 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-const arr = existsSync("config/resources.json")
-    ? JSON.parse(readFileSync("config/resources.json", "utf-8") || "[]")
-    : [];
-const publicResources = arr.map(({ name, actions, feature }) => ({
-    name,
-    actions,
-    feature,
-}));
-const resources = async (req) => {
-    return publicResources;
-};
-export { arr as resources, publicResources };
-export default resources;

package/dist/server/routes/access/functions/resources.d.ts

@@ -1,6 +0,0 @@
-declare const resourcesList: any;
-declare const publicResourcesList: any[];
-export { resourcesList, publicResourcesList };
-declare const _default: null;
-export default _default;
-//# sourceMappingURL=resources.d.ts.map

package/dist/server/routes/access/functions/resources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/functions/resources.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,aAAa,KAEb,CAAC;AAEP,QAAA,MAAM,mBAAmB,EAAE,GAAG,EAM7B,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC;;AAC9C,wBAAoB"}

package/dist/server/routes/access/functions/resources.js

@@ -1,11 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-const resourcesList = existsSync("config/resources.json")
-    ? JSON.parse(readFileSync("config/resources.json", "utf-8") || "[]")
-    : [];
-const publicResourcesList = resourcesList.map(({ name, actions, feature }) => ({
-    name,
-    actions,
-    feature,
-}));
-export { resourcesList, publicResourcesList };
-export default null;