@opengis/fastify-table 2.4.17 → 2.4.18

package/dist/server/routes/file/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/file/index.ts"],"names":[],"mappings":"AAgBA,iBAAS,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAE,GAAQ,QA+BtC;AAED,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/file/index.ts"],"names":[],"mappings":"AAoBA,iBAAS,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAE,GAAQ,QA8BtC;AAED,eAAe,MAAM,CAAC"}

package/dist/server/routes/file/index.js

@@ -9,14 +9,15 @@ import uploadImage from "./controllers/uploadImage.js";
 import deleteFileAPI from "./controllers/delete.js";
 import { resizeSchema } from "./schema.js";
 const tags = ["core", "file"];
+const { uploadPolicy = "L1" } = config;
 const publicParams = { config: { tags, policy: "L0" } };
+const privateParams = { config: { tags, policy: uploadPolicy } };
 function plugin(app, opt = {}) {
-    app.get("/files/*", { config: { tags, policy: "L0" } }, files);
+    app.get("/files/*", publicParams, files);
     if (!app.hasRoute({ method: "GET", url: "/file/resize" })) {
         app.get("/file/resize", {
             config: {
-                tags,
-                policy: "L0",
+                ...publicParams,
                 rateLimit: config.rateLimit
                     ? {
                         max: +(config.rateLimit?.resize?.max || 1000),
@@ -28,8 +29,8 @@ function plugin(app, opt = {}) {
         }, resize);
     }
     app.get("/api/resize-all", { config: { tags, role: "admin" }, schema: resizeSchema }, resizeAll);
-    app.post("/file/upload/*", publicParams, upload);
-    app.post("/file/upload-image/*", publicParams, uploadImage);
+    app.post("/file/upload/*", privateParams, upload);
+    app.post("/file/upload-image/*", privateParams, uploadImage);
     app.get("/file/download/*", publicParams, download);
     app.get("/file/delete/*", publicParams, deleteFileAPI);
     app.get(`/api/export`, publicParams, exportTable);

package/dist/server/routes/upload/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/upload/index.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,GAAG,EAAE,GAAG,QAmGtC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/upload/index.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,GAAG,EAAE,GAAG,QA2GtC"}

package/dist/server/routes/upload/index.js

@@ -1,17 +1,20 @@
 import config from "../../../config.js";
-const { chunkSize = 5242880 } = config;
+const { chunkSize = 5242880, uploadPolicy = "L1" } = config;
 import { prefix } from "../../plugins/upload/index.js";
 import startUpload from "../../plugins/upload/startUpload.js";
 import uploadChunk from "../../plugins/upload/uploadChunk.js";
 import getUploadStatus from "../../plugins/upload/getUploadStatus.js";
 import { BadRequestError, LengthRequiredError } from "../../../errors.js";
-const policy = "L0"; // public
 const tags = ["core", "upload"];
 export default function plugin(app) {
     // provide server with metadata for chunked upload
     app.post(`/${prefix}/start`, {
-        config: { tags, description: "Init chunked upload", policy },
-    }, async (req, reply) => {
+        config: {
+            tags,
+            description: "Init chunked upload",
+            policy: uploadPolicy,
+        },
+    }, async (req) => {
         const { fileName, size, subdir, id } = req.body || {};
         if (!fileName || !size) {
             throw BadRequestError("fileName and size are required");
@@ -33,7 +36,7 @@ export default function plugin(app) {
         config: {
             tags,
             description: "Upload chunk of data",
-            policy: config.uploadChunkPolicy || policy,
+            policy: uploadPolicy,
             rateLimit: config.rateLimit
                 ? {
                     max: +(config.rateLimit?.uploadChunk?.max || 1000),
@@ -67,7 +70,11 @@ export default function plugin(app) {
     });
     // check upload status
     app.get(`/${prefix}/:id`, {
-        config: { tags, description: "Check chunked upload status", policy },
+        config: {
+            tags,
+            description: "Check chunked upload status",
+            policy: uploadPolicy,
+        },
     }, async (req) => {
         const { id } = req.params;
         const status = await getUploadStatus({ id });

package/dist/server/routes/widget/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/widget/index.ts"],"names":[],"mappings":"AAkDA,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,GAAG,EAAE,GAAG,QAmHrC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/widget/index.ts"],"names":[],"mappings":"AAoDA,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,GAAG,EAAE,GAAG,QAiIrC"}

package/dist/server/routes/widget/index.js

@@ -1,4 +1,5 @@
 import { addHook } from "../../../utils.js";
+import config from "../../../config.js";
 import widgetDel from "./controllers/widget.del.js";
 import widgetSet from "./controllers/widget.set.js";
 import widgetGet from "./controllers/widget.get.js";
@@ -8,7 +9,9 @@ import widgetEntityGet from "./services/widget.entity.get.js";
 import widgetEntitySet from "./services/widget.entity.set.js";
 import widgetEntityDel from "./services/widget.entity.del.js";
 import uploadMultiPart from "../../plugins/file/uploadMultiPart.js";
+import { UnauthorizedError } from "../../../errors.js";
 const tags = ["core", "widget"];
+const { uploadPolicy = "L1" } = config;
 const tableSchema = {
     params: {
         type: "object",
@@ -37,10 +40,9 @@ const tableSchema = {
     },
 };
 addHook("onWidgetSet", onWidgetSet);
-const policy = "L0";
-const params = { config: { tags, policy }, schema: tableSchema };
+const publicParams = { config: { tags, policy: "L0" }, schema: tableSchema };
 export default function route(app) {
-    app.get("/v2/widget/:type/:entityType/:objectid", params, async (req) => {
+    app.get("/v2/widget/:type/:entityType/:objectid", publicParams, async (req) => {
         const result = await widgetEntityGet({
             type: req.params.type,
             entityType: req.params.entityType,
@@ -51,9 +53,12 @@ export default function route(app) {
         }, req.pg);
         return result;
     });
-    app.post("/v2/widget/:type/:entityType/:objectid", params, async (req) => {
+    app.post("/v2/widget/:type/:entityType/:objectid", publicParams, async (req) => {
         if (["gallery", "file"].includes(req.params.type) &&
             req.headers["content-type"]?.startsWith("multipart/form-data")) {
+            if (!req.user?.uid && uploadPolicy !== "L0") {
+                throw UnauthorizedError("unauthorized");
+            }
             const file = await uploadMultiPart(req);
             const result = await widgetEntitySet({
                 type: req.params.type,
@@ -74,9 +79,12 @@ export default function route(app) {
         }, req.pg);
         return result;
     });
-    app.put("/v2/widget/:type/:entityType/:objectid/:id", params, async (req) => {
+    app.put("/v2/widget/:type/:entityType/:objectid/:id", publicParams, async (req) => {
         if (["gallery", "file"].includes(req.params.type) &&
             req.headers["content-type"]?.startsWith("multipart/form-data")) {
+            if (!req.user?.uid && uploadPolicy !== "L0") {
+                throw UnauthorizedError("unauthorized");
+            }
             const file = await uploadMultiPart(req);
             const result = await widgetEntitySet({
                 type: req.params.type,
@@ -99,7 +107,7 @@ export default function route(app) {
         }, req.pg);
         return result;
     });
-    app.delete("/v2/widget/:type/:entityType/:objectid/:id", params, async (req) => {
+    app.delete("/v2/widget/:type/:entityType/:objectid/:id", publicParams, async (req) => {
         const result = await widgetEntityDel({
             type: req.params.type,
             entityType: req.params.entityType,
@@ -110,9 +118,9 @@ export default function route(app) {
         }, req.pg);
         return result;
     });
-    app.get("/widget/:type/:objectid", params, widgetGet);
-    app.post("/widget/:type/:objectid/:id?", params, widgetSet);
-    // app.put("/widget/:type/:objectid/:id", params, widgetSet);
-    app.delete("/widget/:type/:objectid/:id", params, widgetDel);
-    app.put("/file-edit/:id", params, fileEdit);
+    app.get("/widget/:type/:objectid", publicParams, widgetGet);
+    app.post("/widget/:type/:objectid/:id?", publicParams, widgetSet);
+    // app.put("/widget/:type/:objectid/:id", publicParams, widgetSet);
+    app.delete("/widget/:type/:objectid/:id", publicParams, widgetDel);
+    app.put("/file-edit/:id", publicParams, fileEdit);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "2.4.17",
+  "version": "2.4.18",
   "type": "module",
   "description": "core-plugins",
   "keywords": [