@opengis/fastify-table 2.5.29 → 2.5.30

package/dist/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../helper.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,SAAS,EAAkB,MAAM,YAAY,CAAC;AAEvD,QAAA,MAAQ,MAAM,KAAoB,CAAC;AAInC,wBAAsB,KAAK,kBAI1B;AAGD,wBAAsB,QAAQ,kBAW7B;AAED,wBAAsB,KAAK,iBA0B1B;AAED,OAAO,EAEL,MAAM,EACN,MAAM,EACN,SAAS,GACV,CAAC"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../helper.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,QAAA,MAAQ,MAAM,KAAoB,CAAC;AAInC,wBAAsB,KAAK,kBAI1B;AAGD,wBAAsB,QAAQ,kBAW7B;AAED,wBAAsB,KAAK,iBA+B1B;AAED,OAAO,EAEL,MAAM,EACN,MAAM,EACN,SAAS,GACV,CAAC"}

package/dist/helper.js

@@ -22,13 +22,18 @@ export async function teardown() {
 export async function build() {
     if (!app) {
         app = Fastify({ logger: false });
+        app.addHook("onRequest", async (req) => {
+            req.user = req.headers?.uid
+                ? {
+                    uid: req.headers?.uid,
+                    user_type: req.headers?.user_type || "regular",
+                }
+                : undefined;
+        });
         app.register(appService, config);
         app.get("/jwt-scoped", { config: { auth: "user-jwt", scope: "sumdu" } }, (req) => req.headers.authorization);
         app.get("/jwt-scoped2", { config: { auth: "user-jwt", scope: "dzk" } }, (req) => req.headers.authorization);
         app.get("/jwt-unscoped", { config: { auth: "user-jwt" } }, (req) => req.headers.authorization);
-        app.addHook("onRequest", async (req) => {
-            req.user = req.user || { uid: "1", user_type: "admin" };
-        });
         await app.ready(); // ? ensure plugins registered, can not add fastify hooks after app is ready
     }
     console.log("server started", process.env.PORT || 3000);

package/dist/server/migrations/users.sql

@@ -28,7 +28,8 @@ ALTER TABLE admin.users add column if not exists salt text;
 ALTER TABLE admin.users add column if not exists cdate timestamp without time zone DEFAULT date_trunc('seconds'::text, now());
 ALTER TABLE admin.users add column if not exists editor_id text;
 ALTER TABLE admin.users add column if not exists editor_date timestamp without time zone;
-ALTER TABLE admin.users add column if not exists twofa boolean not null DEFAULT true;
+ALTER TABLE admin.users add column if not exists twofa boolean not null DEFAULT false;
+alter table admin.users alter column twofa set default false;
 
 ALTER TABLE admin.users add CONSTRAINT admin_user_uid_pkey PRIMARY KEY (uid);
 ALTER TABLE admin.users add CONSTRAINT admin_user_user_rnokpp UNIQUE (user_rnokpp);

package/dist/server/plugins/policy/funcs/checkPermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkPermissions.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAOhC,wBAA8B,gBAAgB,CAAC,GAAG,EAAE,eAAe,iBA4DlE"}
+{"version":3,"file":"checkPermissions.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAQhC,wBAA8B,gBAAgB,CAAC,GAAG,EAAE,eAAe,iBAyElE"}

package/dist/server/plugins/policy/funcs/checkPermissions.js

@@ -1,7 +1,8 @@
 import logger from "../../logger/getLogger.js";
 import getUserPermissions from "../../access/funcs/getUserPermissions.js";
 import pgClients from "../../pg/pgClients.js";
-import { ForbiddenError } from "../../../../errors.js";
+import { ForbiddenError, UnauthorizedError } from "../../../../errors.js";
+import getIP from "./getIP.js";
 export default async function checkPermissions(req) {
     const { originalUrl: path, query, params, method, routeOptions, pg = pgClients.client, } = req;
     const user = req.user || req.session?.passport?.user;
@@ -17,6 +18,18 @@ export default async function checkPermissions(req) {
     if (!permissions?.length) {
         return null;
     }
+    if (!user?.uid) {
+        logger.file("policy/permissions", {
+            path,
+            method,
+            params,
+            query,
+            body,
+            message: "unauthorized: not permitted",
+            ip: getIP(req),
+        });
+        throw UnauthorizedError("unauthorized: not permitted");
+    }
     const userPermissions = await getUserPermissions({ uid: user?.uid, userType: user?.user_type }, pg).then((arr) => arr.reduce((acc, curr) => ({ ...acc, [curr.name]: curr.actions }), {}));
     const havePermission = permissions?.some(([key, value]) => userPermissions?.[key]?.includes(value)) ?? false;
     if (!user?.user_type?.includes?.("admin") && !havePermission) {
@@ -26,10 +39,10 @@ export default async function checkPermissions(req) {
             params,
             query,
             body,
-            message: "access restricted: permissions",
+            message: "access restricted: not permitted",
             uid: user?.uid,
         });
-        throw ForbiddenError("access restricted: permissions");
+        throw ForbiddenError("access restricted: not permitted");
     }
     return null;
 }

package/dist/server/plugins/policy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/plugins/policy/index.ts"],"names":[],"mappings":"AAOA,iBAAS,MAAM,CAAC,OAAO,EAAE,GAAG,QA+B3B;AAED,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/plugins/policy/index.ts"],"names":[],"mappings":"AAWA,iBAAS,MAAM,CAAC,OAAO,EAAE,GAAG,QAkD3B;AAED,eAAe,MAAM,CAAC"}

package/dist/server/plugins/policy/index.js

@@ -1,18 +1,26 @@
 import config from "../../../config.js";
+import logger from "../logger/getLogger.js";
 import checkPolicy from "./funcs/checkPolicy.js";
 import checkTraversal from "./funcs/checkTraversal.js";
 import checkPermissions from "./funcs/checkPermissions.js";
 import checkJWT from "./funcs/checkJWT.js";
+import getIP from "./funcs/getIP.js";
+import { ForbiddenError } from "../../../errors.js";
 function plugin(fastify) {
     fastify.addHook("preHandler", async (request) => {
         checkTraversal(request);
         // ! skip locally, skip tests
-        if ((process.env.local === "true" || process.env.NODE_ENV === "test") &&
-            !config.debugAuth &&
-            request.user?.user_type !== "viewer") {
+        if ((process.env.local === "true" ||
+            process.env.NODE_ENV === "test" ||
+            process.env.VITEST) &&
+            !config.debugAuth) {
             console.log("skipping policy / permissions check", request.url);
             return null;
         }
+        if (request.user?.user_type === "viewer" && request.method === "GET") {
+            console.log("skipping policy / permissions check for viewer", request.url);
+            return null;
+        }
         // ! skip non-API Requests, handle with vite/vike
         const isApi = request.routeOptions?.method &&
             request.routeOptions?.url &&
@@ -21,6 +29,15 @@ function plugin(fastify) {
         if (!isApi) {
             return null;
         }
+        if (request.query?.sql) {
+            logger.file("alert", {
+                message: "database structure disclosure attempt",
+                url: request.url,
+                ip: getIP(request),
+                uid: request.user?.uid,
+            });
+            throw ForbiddenError("query.sql not allowed");
+        }
         await checkPermissions(request);
         const jwt = await checkJWT(request);
         checkPolicy(request, jwt);

package/dist/server/routes/access/controllers/access.group.d.ts

@@ -1,4 +1,3 @@
-import { type FastifyReply } from "fastify";
 import { type ExtendedPG } from "../../../types/core.js";
 export default function accessGroup({ pg, params, user, }: {
     pg: ExtendedPG;
@@ -6,7 +5,7 @@ export default function accessGroup({ pg, params, user, }: {
         id: string;
     };
     user: Record<string, any>;
-}, reply: FastifyReply): Promise<{
+}): Promise<{
     routes: any;
     resources: any;
     users: any;

package/dist/server/routes/access/controllers/access.group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.group.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAKzD,wBAA8B,WAAW,CACvC,EACE,EAAqB,EACrB,MAAM,EACN,IAAS,GACV,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC3B,EAED,KAAK,EAAE,YAAY;;;;GAwCpB"}
+{"version":3,"file":"access.group.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AASzD,wBAA8B,WAAW,CAAC,EACxC,EAAqB,EACrB,MAAM,EACN,IAAS,GACV,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC3B;;;;GA0CA"}

package/dist/server/routes/access/controllers/access.group.js

@@ -1,14 +1,16 @@
-import { pgClients, getAdminAccess } from "../../../../utils.js";
-import { BadRequestError } from "../../../../errors.js";
-export default async function accessGroup({ pg = pgClients.client, params, user = {}, }, reply) {
+import { pgClients } from "../../../../utils.js";
+import { BadRequestError, ForbiddenError, UnauthorizedError, } from "../../../../errors.js";
+export default async function accessGroup({ pg = pgClients.client, params, user = {}, }) {
     if (!params?.id) {
         throw BadRequestError("not enough params: id");
     }
+    if (!user?.uid) {
+        throw UnauthorizedError("unauthorized");
+    }
     // restrict access - admin only
-    await getAdminAccess({
-        id: params.id,
-        user,
-    });
+    if (!user.user_type?.includes?.("admin")) {
+        throw ForbiddenError("not an admin");
+    }
     const routes = await pg
         .query(`select a.route_id as path, b.actions from admin.routes a 
     left join admin.role_access b on a.route_id=b.route_id

package/dist/server/routes/access/controllers/access.group.post.d.ts

@@ -1,4 +1,3 @@
-import { type FastifyReply } from "fastify";
 import { type ExtendedPG } from "../../../types/core.js";
 export default function accessGroupPost({ pg, params, user, body, }: {
     pg: ExtendedPG;
@@ -7,9 +6,17 @@ export default function accessGroupPost({ pg, params, user, body, }: {
     };
     user: Record<string, any>;
     body: Record<string, any>;
-}, reply: FastifyReply): Promise<{
+}): Promise<{
     routes: any;
     resources: any;
     users: any;
+} | {
+    id: string;
+    routes: any;
+    resources?: undefined;
+} | {
+    id: string;
+    routes: any;
+    resources: any;
 }>;
 //# sourceMappingURL=access.group.post.d.ts.map

package/dist/server/routes/access/controllers/access.group.post.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.group.post.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.group.post.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAMzD,wBAA8B,eAAe,CAC3C,EACE,EAAqB,EACrB,MAAM,EACN,IAAS,EACT,IAAS,GACV,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC3B,EACD,KAAK,EAAE,YAAY;;;;GA4GpB"}
+{"version":3,"file":"access.group.post.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.group.post.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWzD,wBAA8B,eAAe,CAAC,EAC5C,EAAqB,EACrB,MAAM,EACN,IAAS,EACT,IAAS,GACV,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC3B;;;;;;;;;;;;GA+HA"}

package/dist/server/routes/access/controllers/access.group.post.js

@@ -1,57 +1,80 @@
-import { pgClients, getAdminAccess } from "../../../../utils.js";
+import { pgClients } from "../../../../utils.js";
+import { BadRequestError, ForbiddenError, UnauthorizedError, } from "../../../../errors.js";
 import accessGroup from "./access.group.js";
-import { UnauthorizedError } from "../../../../errors.js";
-export default async function accessGroupPost({ pg = pgClients.client, params, user = {}, body = {}, }, reply) {
+export default async function accessGroupPost({ pg = pgClients.client, params, user = {}, body = {}, }) {
     const { id } = params;
-    if (!user?.uid) {
-        throw UnauthorizedError("unauthorized");
-    }
-    // restrict access - admin only
-    await getAdminAccess({ id, user });
-    const { users = [], routes = [] } = body;
-    if (!routes?.length) {
-        await pg.query("delete from admin.role_access where role_id=$1", [id]);
-        if (!users?.length) {
-            return reply.status(200).send({ id, routes });
+    try {
+        if (!user?.uid) {
+            throw UnauthorizedError("unauthorized");
         }
-    }
-    if (routes?.length) {
-        const routesDB = await pg
-            .query('select array_agg(route_id) as "routesDB" from admin.routes where enabled')
-            .then((el) => el.rows?.[0]?.routesDB || []);
-        await pg.query("delete from admin.role_access where role_id=$1", [id]);
-        await Promise.all(routes
-            .filter((el) => el.path && !routesDB?.includes(el.path))
-            .map((el) => pg.query("insert into admin.routes(route_id) values($1)", [el.path])));
-        await Promise.all(routes
-            .filter((el) => el.path && el.actions)
-            .map((el) => pg.query("insert into admin.role_access(role_id,route_id,actions)   values ($1,$2,$3)", [id, el.path, el.actions])));
-        await Promise.all(routes
-            .filter((el) => el.resource && el.actions)
-            .map((el) => pg.query("insert into admin.role_access(role_id,resource_id,route_id,actions)   values ($1,$2,$3,$4)", [id, el.resource, el.path, el.actions])));
-        const rows = await pg
-            .query(`select a.route_id as path, b.actions as actions from admin.routes a 
-            left join admin.role_access b on a.route_id=b.route_id
-            where b.role_id=$1`, [id])
-            .then((el) => el.rows || []);
-        const resources = await pg
-            .query(`select resource_id, actions from admin.role_access
-      where resource_id is not null and role_id=$1`, [id])
-            .then((el) => el.rows || []);
-        if (!users?.length) {
-            return reply.status(200).send({ id, routes: rows, resources });
+        // restrict access - admin only
+        if (!user.user_type?.includes?.("admin")) {
+            throw ForbiddenError("not an admin");
+        }
+        const { users = [], routes = [] } = body;
+        const roleExists = await pg
+            .query("select 1 from admin.roles where role_id=$1", [id])
+            .then((r) => r.rowCount === 1);
+        if (!roleExists) {
+            throw BadRequestError("role not found: " + id);
+        }
+        if (!routes?.length) {
+            await pg.query("delete from admin.role_access where role_id=$1", [id]);
+            if (!users?.length) {
+                return { id, routes };
+            }
+        }
+        if (routes?.length) {
+            const routesDB = await pg
+                .query('select array_agg(route_id) as "routesDB" from admin.routes where enabled')
+                .then((r) => r.rows?.[0]?.routesDB || []);
+            await pg.query("delete from admin.role_access where role_id=$1", [id]);
+            await Promise.all(routes
+                .filter((el) => el.path && !routesDB?.includes(el.path))
+                .map((el) => pg.query("insert into admin.routes(route_id) values($1)", [el.path])));
+            await Promise.all(routes
+                .filter((el) => el.path && el.actions)
+                .map((el) => pg.query("insert into admin.role_access(role_id,route_id,actions)   values ($1,$2,$3)", [id, el.path, el.actions])));
+            await Promise.all(routes
+                .filter((el) => el.resource && el.actions)
+                .map((el) => pg.query("insert into admin.role_access(role_id,resource_id,route_id,actions)   values ($1,$2,$3,$4)", [id, el.resource, el.path, el.actions])));
+            const rows = await pg
+                .query(`select a.route_id as path, b.actions as actions from admin.routes a 
+              left join admin.role_access b on a.route_id=b.route_id
+              where b.role_id=$1`, [id])
+                .then((el) => el.rows || []);
+            const resources = await pg
+                .query(`select resource_id, actions from admin.role_access
+        where resource_id is not null and role_id=$1`, [id])
+                .then((el) => el.rows || []);
+            if (!users?.length) {
+                return { id, routes: rows, resources };
+            }
         }
+        const client = await pg.connect();
+        try {
+            await client.query("begin");
+            await client.query("delete from admin.user_roles where role_id=$1", [id]);
+            await Promise.all(users
+                .filter((el) => el?.id)
+                .map((el) => pg.query("insert into admin.user_roles(role_id,user_uid,access_granted) values ($1,$2,$3)", [id, el.id, user.uid])));
+            await client.query("commit");
+        }
+        catch (err) {
+            await client.query("rollback");
+            throw err;
+        }
+        finally {
+            client.release();
+            const res = await accessGroup({
+                pg,
+                params,
+                user,
+            });
+            return res;
+        }
+    }
+    catch (error) {
+        throw error;
     }
-    const q = `delete from admin.user_roles where role_id='${id.replace(/'/g, "''")}';
-    insert into admin.user_roles(role_id,user_uid,access_granted)
-    values ${users
-        .filter((el) => el?.id)
-        .map((el) => `('${id.replace(/'/g, "''")}','${el.id.replace(/'/g, "''")}','${user?.uid?.replace(/'/g, "''")}')`)}`;
-    await pg.query(q);
-    const res = await accessGroup({
-        pg,
-        params,
-        user,
-    }, reply);
-    return res;
 }

package/dist/server/routes/access/controllers/access.interface.d.ts

@@ -1,5 +1,4 @@
-import { type FastifyReply } from "fastify";
-export default function accessInterface(req: any, reply: FastifyReply): Promise<{
+export default function accessInterface(req: any): Promise<{
     rows: any;
 }>;
 //# sourceMappingURL=access.interface.d.ts.map

package/dist/server/routes/access/controllers/access.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.interface.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAqB5C,wBAA8B,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY;;GAkB1E"}
+{"version":3,"file":"access.interface.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.interface.ts"],"names":[],"mappings":"AAmBA,wBAA8B,eAAe,CAAC,GAAG,EAAE,GAAG;;GAsBrD"}

package/dist/server/routes/access/controllers/access.interface.js

@@ -1,5 +1,5 @@
-// import { type ExtendedRequest } from "../../../types/core.js";
-import { pgClients, metaFormat, getAdminAccess } from "../../../../utils.js";
+import { ForbiddenError, UnauthorizedError } from "../../../../errors.js";
+import { pgClients, metaFormat } from "../../../../utils.js";
 const q = `select a.route_id as id, coalesce(b.user_uid, d.user_uid) as user_uid, coalesce(d.actions, b.actions, array['view']) as actions, b.scope, c.role_id
 from admin.routes a 
 left join admin.role_access b on 
@@ -15,14 +15,16 @@ left join admin.user_roles d on
             else 1=1 
         end )
 where $1 in (a.route_id, a.alias, a.table_name) and coalesce(b.user_uid, d.user_uid) is not null`;
-export default async function accessInterface(req, reply) {
-    const { pg = pgClients.client, params = {}, user = {}, unittest } = req;
+export default async function accessInterface(req) {
+    const { pg = pgClients.client, params = {}, user = {} } = req;
+    if (!user?.uid) {
+        throw UnauthorizedError("unauthorized");
+    }
     // restrict access - admin only
-    await getAdminAccess({
-        id: params.name,
-        user,
-    });
-    const { rows = [] } = await pg.query(q, [params.name]);
+    if (!user.user_type?.includes?.("admin")) {
+        throw ForbiddenError("not an admin");
+    }
+    const rows = await pg.query(q, [params.name]).then((r) => r.rows || []);
     const cls = {
         user_uid: "core.user_uid",
         actions: "core.actions",

package/dist/server/routes/access/controllers/access.user.d.ts

@@ -1,4 +1,4 @@
-export default function accessUser(req: any): Promise<{
+export default function accessUser({ pg, params, user, }: any): Promise<{
     routes: any;
     resources: any;
     user: any;

package/dist/server/routes/access/controllers/access.user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.user.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.user.ts"],"names":[],"mappings":"AAGA,wBAA8B,UAAU,CAAC,GAAG,EAAE,GAAG;;;;GAmChD"}
+{"version":3,"file":"access.user.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.user.ts"],"names":[],"mappings":"AAOA,wBAA8B,UAAU,CAAC,EACvC,EAAqB,EACrB,MAAM,EACN,IAAI,GACL,EAAE,GAAG;;;;GAyCL"}

package/dist/server/routes/access/controllers/access.user.js

@@ -1,24 +1,31 @@
-import { BadRequestError } from "../../../../errors.js";
+import { BadRequestError, 
+// ForbiddenError,
+UnauthorizedError, } from "../../../../errors.js";
 import { pgClients } from "../../../../utils.js";
-export default async function accessUser(req) {
-    if (!req.params?.id) {
+export default async function accessUser({ pg = pgClients.client, params, user, }) {
+    if (!params?.id) {
         throw BadRequestError("not enough params: id");
     }
-    const { pg = pgClients.client } = req;
+    if (!user?.uid) {
+        throw UnauthorizedError("unauthorized");
+    }
+    if (!user.user_type?.includes?.("admin")) {
+        // throw ForbiddenError("not an admin");
+    }
     const routes = await pg
         .query(`select a.route_id as path, b.actions from admin.routes a 
     left join admin.role_access b on a.route_id=b.route_id
-    where b.user_uid=$1`, [req.params.id])
-        .then((el) => el.rows || []);
+    where b.user_uid=$1`, [params.id])
+        .then((r) => r.rows || []);
     const resources = await pg
         .query(`select resource_id, actions from admin.role_access
-where resource_id is not null and user_uid=$1`, [req.params.id])
-        .then((el) => el.rows || []);
-    const user = await pg
+where resource_id is not null and user_uid=$1`, [params.id])
+        .then((r) => r.rows || []);
+    const userRoles = await pg
         .query(`select user_uid as id, user_name as name, access_granted, 
     b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a
     left join admin.users b on a.user_uid=b.uid
-    where a.user_uid=$1`, [req.params.id])
-        .then((el) => el.rows?.[0]);
-    return { routes, resources, user };
+    where a.user_uid=$1`, [params.id])
+        .then((r) => r.rows?.[0]);
+    return { routes, resources, user: userRoles };
 }

package/dist/server/routes/access/controllers/access.user.post.d.ts

@@ -1,2 +1,9 @@
-export default function accessUserPost(req: any, reply: any): Promise<any>;
+export default function accessUserPost(req: any): Promise<{
+    routes: any;
+    resources: any;
+    user: any;
+} | {
+    id: any;
+    routes: never[];
+}>;
 //# sourceMappingURL=access.user.post.d.ts.map

package/dist/server/routes/access/controllers/access.user.post.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.user.post.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.user.post.ts"],"names":[],"mappings":"AAKA,wBAA8B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAuDhE"}
+{"version":3,"file":"access.user.post.d.ts","sourceRoot":"","sources":["../../../../../server/routes/access/controllers/access.user.post.ts"],"names":[],"mappings":"AASA,wBAA8B,cAAc,CAAC,GAAG,EAAE,GAAG;;;;;;;GA2DpD"}

package/dist/server/routes/access/controllers/access.user.post.js

@@ -1,7 +1,9 @@
-import { BadRequestError, UnauthorizedError } from "../../../../errors.js";
+import { BadRequestError, 
+// ForbiddenError,
+UnauthorizedError, } from "../../../../errors.js";
 import { pgClients } from "../../../../utils.js";
 import accessUser from "./access.user.js";
-export default async function accessUserPost(req, reply) {
+export default async function accessUserPost(req) {
     const { pg = pgClients.client, params, body, user } = req;
     if (!params?.id) {
         throw BadRequestError("not enough params: id");
@@ -9,15 +11,18 @@ export default async function accessUserPost(req, reply) {
     if (!user?.uid) {
         throw UnauthorizedError("unauthorized");
     }
+    if (!user.user_type?.includes?.("admin")) {
+        // throw ForbiddenError("not an admin");
+    }
     await pg.query("delete from admin.role_access where user_uid=$1", [
         params.id,
     ]);
     if (!body?.routes?.length) {
-        return reply.status(200).send({ id: params.id, routes: [] });
+        return { id: params.id, routes: [] };
     }
     const routesDB = await pg
         .query("select array_agg(route_id) from admin.routes where enabled")
-        .then((el) => el.rows?.[0]?.array_agg || []);
+        .then((r) => r.rows?.[0]?.array_agg || []);
     await Promise.all(body.routes
         .filter((el) => el.path && !routesDB?.includes(el.path))
         .map((el) => pg.query("insert into admin.routes(route_id) values($1)", [el.path])));
@@ -27,6 +32,6 @@ export default async function accessUserPost(req, reply) {
     await Promise.all(body.routes
         .filter((el) => el.resource && el.actions)
         .map((el) => pg.query("insert into admin.role_access(user_uid,resource_id,actions) values ($1,$2,$3)", [params.id, el.resource, el.actions])));
-    const result = await accessUser({ pg, params });
+    const result = await accessUser({ pg, params, user });
     return result;
 }

package/dist/server/routes/access/index.js

@@ -7,8 +7,8 @@ import { publicResourcesList } from "../../plugins/access/funcs/getResources.js"
 import { accessGroupPostSchema, accessGroupSchema, accessInterfaceSchema, accessUserPostSchema, accessUserSchema, } from "./schema.js";
 const tags = ["core", "access"];
 export default async function route(fastify, opt = {}) {
-    fastify.get("/access-group/:id", { config: { tags }, schema: accessGroupSchema }, accessGroup);
-    fastify.post("/access-group/:id", { config: { tags }, schema: accessGroupPostSchema }, accessGroupPost);
+    fastify.get("/access-group/:id", { config: { tags, role: "admin" }, schema: accessGroupSchema }, accessGroup);
+    fastify.post("/access-group/:id", { config: { tags, role: "admin" }, schema: accessGroupPostSchema }, accessGroupPost);
     fastify.get("/access-user/:id", {
         config: { tags, permission: "admin.users.read" },
         schema: accessUserSchema,
@@ -17,6 +17,6 @@ export default async function route(fastify, opt = {}) {
         config: { tags, permission: "admin.users.update" },
         schema: accessUserPostSchema,
     }, accessUserPost);
-    fastify.get("/access-interface/:name", { config: { tags }, schema: accessInterfaceSchema }, accessInterface);
+    fastify.get("/access-interface/:name", { config: { tags, role: "admin" }, schema: accessInterfaceSchema }, accessInterface);
     fastify.get("/resources", { config: { tags, policy: "L0" } }, async () => publicResourcesList);
 }

package/dist/server/routes/table/controllers/suggest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggest.d.ts","sourceRoot":"","sources":["../../../../../server/routes/table/controllers/suggest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAyBpD,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,QAAQ,EACR,MAAM,EACN,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,EACH,EAAqB,GACtB,EAAE;IACD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,GAAG,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,UAAU,CAAC;CACjB;;;;;UAwFA;AAED,wBAA8B,OAAO,CAAC,GAAG,EAAE,GAAG,gBAoa7C"}
+{"version":3,"file":"suggest.d.ts","sourceRoot":"","sources":["../../../../../server/routes/table/controllers/suggest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA8BpD,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,QAAQ,EACR,MAAM,EACN,UAAU,EACV,QAAQ,EACR,UAAU,EACV,GAAG,EACH,EAAqB,GACtB,EAAE;IACD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,GAAG,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,UAAU,CAAC;CACjB;;;;;UAwFA;AAED,wBAA8B,OAAO,CAAC,GAAG,EAAE,GAAG,gBAuc7C"}

package/dist/server/routes/table/controllers/suggest.js

@@ -1,7 +1,8 @@
 import path from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { config, getPGAsync, getTemplate, getSelectMeta, getMeta, applyHook, getSelectVal, logger, getSelect, metaFormat, getColumnCLS, pgClients, getFilter, getUserClsList, } from "../../../../utils.js";
-import { BadRequestError, NotFoundError } from "../../../../errors.js";
+import { BadRequestError, ForbiddenError, NotFoundError, } from "../../../../errors.js";
+import getIP from "../../../plugins/policy/funcs/getIP.js";
 const defaultLimit = 50;
 export async function getTableColumnMeta({ table, template, column, selectName, filtered, startsWith, key, pg = pgClients.client, }) {
     if (!table || !column) {
@@ -73,6 +74,36 @@ export default async function suggest(req) {
         user?.user_type?.includes?.("admin") ||
         process.env.NODE_ENV === "test" ||
         process.env.VITEST;
+    if (params.data.includes("admin.") && !user) {
+        const ip = getIP(req);
+        logger.file("alert", {
+            message: "admin table data get attempt",
+            suggest: params.data,
+            ip,
+        });
+        throw ForbiddenError("unauthorized");
+    }
+    if (query.token && query.token?.includes("admin.") && !user) {
+        const ip = getIP(req);
+        logger.file("alert", {
+            message: "admin table data get attempt - token",
+            suggest: params.data,
+            token: query.token,
+            ip,
+        });
+        throw ForbiddenError("unauthorized");
+    }
+    const forbidden = params.data.includes(":password") || params.data.includes(":salt");
+    if (forbidden) {
+        const ip = getIP(req);
+        logger.file("alert", {
+            message: "password / salt get attempt",
+            uid: user?.uid,
+            suggest: params.data,
+            ip,
+        });
+        throw ForbiddenError("unauthorized");
+    }
     if (params?.data && params.data?.startsWith?.("hash-")) {
         const filepath = path.join(process.cwd(), `/log/suggest/${params.data.replace("hash-", "")}.json`);
         if (existsSync(filepath)) {

package/dist/server/routes/table/schema.d.ts

@@ -169,6 +169,9 @@ declare const suggestSchema: {
             count: {
                 type: string;
             };
+            json: {
+                type: string;
+            };
         };
     };
     params: {

package/dist/server/routes/table/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../server/routes/table/schema.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpB,CAAC;AAEF,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BhB,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAajB,CAAC;AAEF,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoBlB,CAAC;AAEF,QAAA,MAAM,UAAU;;;;;;;;;;;;;;CAQf,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;CAOjB,CAAC;AAEF,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;CAatB,CAAC;AAEF,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;CAQtB,CAAC;AAEF,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,iBAAiB,GAClB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../server/routes/table/schema.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpB,CAAC;AAEF,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BhB,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAajB,CAAC;AAEF,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBlB,CAAC;AAEF,QAAA,MAAM,UAAU;;;;;;;;;;;;;;CAQf,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;CAOjB,CAAC;AAEF,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;CAatB,CAAC;AAEF,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;CAQtB,CAAC;AAEF,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,iBAAiB,GAClB,CAAC"}

package/dist/server/routes/table/schema.js

@@ -77,13 +77,14 @@ const suggestSchema = {
             val: { type: "string", pattern: "([\\d\\w]+)$" },
             sql: { type: "number" },
             count: { type: "number" },
+            json: { type: "number" },
         },
     },
     params: {
         type: "object",
         properties: {
         //  data: { type: 'string', pattern: '^([\\d\\w]+)$' },
-        }
+        },
     },
 };
 const formSchema = {
@@ -115,7 +116,7 @@ const cardTabDataSchema = {
         properties: {
             token: { type: "string", pattern: "^([\\d\\w]+)$" },
         },
-    }
+    },
 };
 const tableDataIdSchema = {
     params: {

package/dist/utils.d.ts

@@ -78,7 +78,7 @@ export { default as officeConverter } from "./server/plugins/grpc/office2pdf.js"
 export { default as getExport } from "./server/plugins/file/getExport.js";
 export { default as jsonToCsv } from "./server/routes/file/controllers/utils/jsonToCsv.js";
 export { default as jsonToXls } from "./server/routes/file/controllers/utils/jsonToXls.js";
-export { default as getAdminAccess } from "./server/plugins/access/funcs/getAdminAccess.js";
+export declare const getAdminAccess: () => never;
 export { default as getUserPermissions } from "./server/plugins/access/funcs/getUserPermissions.js";
 export { resourcesList, publicResourcesList, } from "./server/plugins/access/funcs/getResources.js";
 export { default as sendNotification } from "./server/plugins/auth/funcs/sendNotification.js";

package/dist/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../utils.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAGvE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAGhF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AAGvF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AACrH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAGjF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAGtF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAEpF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAExF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAE5E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,gDAAgD,CAAC;AAG5F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAG1F,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,qDAAqD,CAAC;AACpG,OAAO,EACL,aAAa,EACb,mBAAmB,GACpB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AAE9F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAEnG,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,cAAc,GACf,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,MAAM,IAAI,oBAAoB,EAC9B,OAAO,IAAI,kBAAkB,EAC7B,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAGnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,KAAK,GAAG,MAAM,oCAAoC,CAAC;;AAE1D,wBAAoB"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../utils.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAGvE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAGhF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AAGvF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AACrH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAGjF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAGtF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAEpF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAExF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAE5E,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,gDAAgD,CAAC;AAG5F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAG1F,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAE3F,eAAO,MAAM,cAAc,aAE1B,CAAC;AACF,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,qDAAqD,CAAC;AACpG,OAAO,EACL,aAAa,EACb,mBAAmB,GACpB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AAE9F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAEnG,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,cAAc,GACf,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,MAAM,IAAI,oBAAoB,EAC9B,OAAO,IAAI,kBAAkB,EAC7B,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAGnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,KAAK,GAAG,MAAM,oCAAoC,CAAC;;AAE1D,wBAAoB"}

package/dist/utils.js

@@ -95,7 +95,9 @@ export { default as officeConverter } from "./server/plugins/grpc/office2pdf.js"
 export { default as getExport } from "./server/plugins/file/getExport.js";
 export { default as jsonToCsv } from "./server/routes/file/controllers/utils/jsonToCsv.js";
 export { default as jsonToXls } from "./server/routes/file/controllers/utils/jsonToXls.js";
-export { default as getAdminAccess } from "./server/plugins/access/funcs/getAdminAccess.js";
+export const getAdminAccess = () => {
+    throw new Error("deprecated utils");
+};
 export { default as getUserPermissions } from "./server/plugins/access/funcs/getUserPermissions.js";
 export { resourcesList, publicResourcesList, } from "./server/plugins/access/funcs/getResources.js";
 export { default as sendNotification } from "./server/plugins/auth/funcs/sendNotification.js"; // email

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "2.5.29",
+  "version": "2.5.30",
   "type": "module",
   "description": "core-plugins",
   "keywords": [