@opengis/fastify-table 2.5.53 → 3.0.0-beta.0

package/dist/server/plugins/pg/funcs/init.js

@@ -1,190 +0,0 @@
-import pg from "pg";
-import { createHash } from "node:crypto";
-import config from "../../../../config.js";
-import getRedis from "../../redis/funcs/getRedis.js";
-import logger from "../../logger/getLogger.js";
-const rclient = getRedis({ db: 0 });
-async function init(client) {
-    if (!client)
-        return;
-    // for unit tests
-    const options = client.options || {
-        database: client.database,
-        user: client.user,
-        password: client.password,
-        port: client.port,
-        host: client.host,
-    };
-    if (!client || !client.query || !client.connect) {
-        return;
-    }
-    const pgType = await client
-        .query(`SELECT json_object_agg(t.oid:: text, pg_catalog.format_type(t.oid, NULL)) FROM pg_catalog.pg_type t`)
-        .then((el) => el.rows[0]?.json_object_agg || {});
-    const pks = await client
-        .query(`
-    SELECT
-      connamespace::regnamespace::text,
-      conrelid::regclass,
-      (
-        SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]
-      ) as pk
-    FROM pg_constraint c
-    WHERE contype = 'p'
-    AND connamespace::regnamespace::text NOT IN ('sde')`)
-        .then((el) => el.rows || []);
-    const pk = pks.reduce((acc, curr) => ({
-        ...acc,
-        [curr.connamespace === "public"
-            ? `${curr.connamespace}.${curr.conrelid}`
-            : curr.conrelid]: curr.pk,
-    }), {});
-    const tlist = await client
-        .query(`SELECT
-        array_agg(
-          (
-            SELECT
-              nspname
-            FROM
-              pg_namespace
-            WHERE
-              oid = relnamespace
-          ) || '.' || relname
-        ) tlist
-      FROM
-        pg_class
-      WHERE
-        relkind IN ('r', 'v', 'm')`)
-        .then((d) => d.rows[0].tlist);
-    const rows = await client
-        .query(`SELECT
-      (
-        SELECT
-          nspname
-        FROM
-          pg_namespace
-        WHERE
-          oid = relnamespace
-      ) || '.' || relname AS tname,
-      relkind
-    FROM
-      pg_class
-    WHERE
-      relkind IN ('r', 'v', 'm')`)
-        .then((el) => el.rows || []);
-    const relkinds = rows.reduce((acc, curr) => Object.assign(acc, { [curr.tname]: curr.relkind }), {});
-    async function query(q, args = []) {
-        if (!client)
-            throw new Error("empty pg client");
-        try {
-            const data = await client.query(q, args);
-            if (config.trace)
-                console.log(q, args);
-            return data;
-        }
-        catch (err) {
-            // canceling statement due to statement timeout
-            if (err.code === "57014") {
-                logger.file("timeout/query", { q, stack: err.stack });
-            }
-            throw err;
-        }
-    }
-    async function querySafe(q, param) {
-        const pg1 = new pg.Pool({
-            ...options,
-            statement_timeout: param?.timeout || 100000000,
-        });
-        try {
-            const args = Array.isArray(param) ? param : param?.args || [];
-            const data = await pg1.query(q, args);
-            console.log("pg.querySafe ok", q);
-            return data;
-        }
-        catch (err) {
-            if (err.code === "57014") {
-                console.warn("⚠️ pg.querySafe timeout", q);
-                return { rows: [], timeout: true };
-            }
-            console.warn("⚠️ pg.querySafe error", q);
-            throw err;
-        }
-        finally {
-            pg1.end();
-            console.log("pg.querySafe released", q);
-        }
-    }
-    async function one(q, param) {
-        const data = await query(q, Array.isArray(param) ? param : param?.args || []);
-        const result = ((Array.isArray(data) ? data.pop() : data)?.rows || [])[0] || {};
-        return result;
-    }
-    async function queryNotice(q, args, cb = () => { }) {
-        if (!client)
-            throw new Error("empty pg client");
-        const clientCb = await client.connect();
-        clientCb.on("notice", (e) => {
-            cb(e.message);
-        });
-        let result;
-        try {
-            result = await clientCb.query(q, args);
-            clientCb.release();
-        }
-        catch (err) {
-            clientCb.release();
-            cb(err.toString(), 1);
-            throw err;
-        }
-        // client.end();
-        return result;
-    }
-    async function queryCache(q, param) {
-        const { table, args = [], time = 15 } = param || {};
-        const seconds = typeof time !== "number" || time < 0 ? 0 : time * 60;
-        if (seconds === 0 || config.disableCache) {
-            const data = await query(q, args || []);
-            return data;
-        }
-        // CRUD table state
-        const keyCacheTable = `pg:${client?.database}:${table}:crud`;
-        const crudInc = table && config.redis ? (await rclient.get(keyCacheTable)) || 0 : 0;
-        //
-        const hash = createHash("sha1")
-            .update([q, client?.database, JSON.stringify(args)].join())
-            .digest("base64");
-        const keyCache = `pg:${hash}:${crudInc}`;
-        const cacheData = config.redis ? await rclient.get(keyCache) : null;
-        if (cacheData && !config.local) {
-            // console.log('from cache', table, query);
-            return JSON.parse(cacheData);
-        }
-        const data = await query(q, args || []);
-        if (seconds > 0 && config.redis) {
-            rclient.set(keyCache, JSON.stringify(data), "EX", seconds);
-        }
-        // console.log('no cache', table, crudInc, query);
-        return data;
-    }
-    Object.assign(client, {
-        ...options,
-        options,
-        one,
-        pgType,
-        pk,
-        tlist,
-        relkinds,
-        queryCache,
-        queryNotice,
-        querySafe,
-    });
-    if (config.trace) {
-        console.log("New client init finished", client.database, new Date().toISOString());
-    }
-    logger.file("pg", {
-        message: "client init finished",
-        database: client.database,
-    });
-}
-// export default client;
-export default init;

package/dist/server/plugins/pg/funcs/pool.d.ts

@@ -1,4 +0,0 @@
-export declare const Pools: Record<string, any>;
-declare const _default: (param?: any) => any;
-export default _default;
-//# sourceMappingURL=pool.d.ts.map

package/dist/server/plugins/pg/funcs/pool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/pg/funcs/pool.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,CAAC;yBAE7B,QAAO,GAAQ;AAA/B,wBAgEE"}

package/dist/server/plugins/pg/funcs/pool.js

@@ -1,65 +0,0 @@
-import pg from "pg";
-import logger from "../../../plugins/logger/getLogger.js";
-const { types } = pg;
-types.setTypeParser(1082, (stringValue) => stringValue);
-// ALTER ROLE myuser SET timezone = 'Europe/Kyiv'; - for GET requests
-types.setTypeParser(1114, (stringValue) => stringValue);
-// optional - now frontend does not support timestamp in such format
-// types.setTypeParser(1184, (stringValue) => stringValue);
-import pgClients from "../pgClients.js";
-import init from "./init.js";
-import config from "../../../../config.js";
-config.ready = config.ready || {};
-export const Pools = {};
-export default (param = {}) => {
-    if (!config.pg)
-        return null;
-    const { name = param.database || "client" } = param;
-    // return inited client
-    if (pgClients[name]?.tlist)
-        return pgClients[name];
-    // return non-inited client
-    if (Pools[name])
-        return Pools[name];
-    const pool = new pg.Pool(param);
-    pool.on("release", () => {
-        if (config.trace) {
-            console.log("PG client released", param.database);
-        }
-    });
-    pool.on("error", (err) => {
-        console.warn("⚠️ Unexpected error on idle client", param.database);
-        config.ready[`pg:${param.database}`] = false;
-        logger.file("pg", {
-            error: err.toString(),
-            database: param.database,
-        });
-        if (config.trace) {
-            console.warn("⚠️ Unexpected error on idle client details:", err.toString(), err.stack);
-        }
-    });
-    pool.on("connect", () => {
-        // skip auto drops and reconnects handled by pg internally
-        if (!config.ready[`pg:${param.database}`]) {
-            logger.file("pg", {
-                message: "client connected",
-                database: param.database,
-            });
-            config.ready[`pg:${param.database}`] = true;
-        }
-        if (config.trace) {
-            console.log("PG client connected", param.database);
-        }
-        // handle delayed connect to database?
-        if (pgClients[name] && !pgClients[name]?.tlist) {
-            init(Pools[name]);
-        }
-        Pools[name] = pool;
-    });
-    if (config.trace) {
-        pool.on("remove", () => {
-            console.log("PG Client removed from the pool.", param.database);
-        });
-    }
-    return pool;
-};

package/dist/server/plugins/pg/index.d.ts

@@ -1,3 +0,0 @@
-declare function plugin(fastify: any): void;
-export default plugin;
-//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/pg/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/plugins/pg/index.ts"],"names":[],"mappings":"AAkCA,iBAAS,MAAM,CAAC,OAAO,EAAE,GAAG,QAwB3B;AAED,eAAe,MAAM,CAAC"}

package/dist/server/plugins/pg/index.js

@@ -1,51 +0,0 @@
-import config from "../../../config.js";
-import pgClients from "./pgClients.js";
-import getPGAsync from "./funcs/getPGAsync.js";
-import logger from "../logger/getLogger.js";
-function close() {
-    Object.keys(pgClients)
-        .filter((key) => !pgClients[key]?.ending && !pgClients[key]?.ended)
-        .forEach((key) => {
-        console.log("Closing pg client", key);
-        pgClients[key].end();
-    });
-}
-async function getHeadersPG(req) {
-    if (!req.headers?.token)
-        return null;
-    const validToken = (req.ip === "193.239.152.181" ||
-        req.ip === "127.0.0.1" ||
-        req.ip.startsWith("192.168.") ||
-        config.debug) &&
-        req.headers?.token &&
-        config.auth?.tokens?.includes?.(req.headers.token);
-    if (validToken && typeof req.headers?.db === "string") {
-        const pg = pgClients[req.headers.db] || (await getPGAsync(req.headers.db));
-        return pg;
-    }
-    return null;
-}
-function plugin(fastify) {
-    fastify.addHook("onRequest", async (req) => {
-        const headersPG = await getHeadersPG(req);
-        const client = await getPGAsync({ ...(config.pg || {}), name: "client" });
-        req.pg = headersPG || req.pg || client || pgClients.client;
-        if (headersPG) {
-            req.user = { uid: req.headers?.uid };
-            req.folder = config.folder;
-            req.root = config.root;
-        }
-    });
-    fastify.addHook("onError", async (req, reply, err) => {
-        if (err.message === "canceling statement due to statement timeout") {
-            logger.file("timeout/request", {
-                method: req.method,
-                url: req.url,
-                referer: req.headers?.referer,
-                stack: err.stack,
-            });
-        }
-    });
-    fastify.addHook("onClose", close);
-}
-export default plugin;

package/dist/server/plugins/pg/pgClients.d.ts

@@ -1,3 +0,0 @@
-declare const pgClients: Record<string, any>;
-export default pgClients;
-//# sourceMappingURL=pgClients.d.ts.map

package/dist/server/plugins/pg/pgClients.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pgClients.d.ts","sourceRoot":"","sources":["../../../../server/plugins/pg/pgClients.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,CAAC;AAE1C,eAAe,SAAS,CAAC"}

package/dist/server/plugins/pg/pgClients.js

@@ -1,2 +0,0 @@
-const pgClients = {};
-export default pgClients;

package/dist/server/plugins/policy/funcs/checkJWT.d.ts

@@ -1,8 +0,0 @@
-import type { ExtendedRequest } from "../../../types/core.js";
-export default function checkJWT(req: ExtendedRequest): Promise<{
-    token: any;
-    valid: boolean;
-    payload: any;
-    redirectURIs: any;
-} | null>;
-//# sourceMappingURL=checkJWT.d.ts.map

package/dist/server/plugins/policy/funcs/checkJWT.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkJWT.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkJWT.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAOhC,wBAA8B,QAAQ,CAAC,GAAG,EAAE,eAAe;;;;;UAoG1D"}

package/dist/server/plugins/policy/funcs/checkJWT.js

@@ -1,83 +0,0 @@
-import getIP from "./getIP.js";
-import logger from "../../logger/getLogger.js";
-import { scryptVerify, verify } from "../../auth/funcs/jwt.js";
-import { ForbiddenError, UnauthorizedError } from "../../../../errors.js";
-export default async function checkJWT(req) {
-    const { originalUrl: path, headers, method, routeOptions, pg } = req;
-    const ip = getIP(req);
-    const { policy, auth, scope } = (routeOptions?.config ||
-        {});
-    const requireUser = Array.isArray(policy)
-        ? policy.includes("user")
-        : ["L1", "L2", "L3"].includes(policy || "");
-    const requireJWT = auth === "user-jwt" || req.url === "/oauth/token";
-    const user = req.user || req.session?.passport?.user;
-    // skip entirely if not required via API config or alternative exists
-    if (!requireJWT || (requireUser && user)) {
-        return null;
-    }
-    const code = req.body ? req.body.code : req.query.code;
-    const jwtToken = req.url === "/oauth/token" && code
-        ? code
-        : headers["x-auth-token"] || headers.authorization?.split(" ")?.[1];
-    // restict access if header is not provided at all
-    if (!jwtToken) {
-        logger.file("policy/jwt", {
-            path,
-            method,
-            message: "unauthorized",
-            ip,
-            uid: user?.uid,
-        });
-        throw UnauthorizedError("unaothorized");
-    }
-    if (!pg) {
-        throw new Error("empty pg");
-    }
-    const { clientId, tokenHash, isRevoked, isExpired } = await pg
-        .query('select client_id as "clientId", token_hash as "tokenHash", revoked_at is not null as "isRevoked", expires_at <= now() as "isExpired" from oauth.tokens where ip=$1 and token_hint=$2', [ip, jwtToken.slice(-6)])
-        .then((el) => el.rows?.[0] || {});
-    if (requireJWT && tokenHash && (isExpired || isRevoked)) {
-        logger.file("policy/jwt", {
-            path,
-            method,
-            message: isRevoked ? "token is revoked" : "token is expired",
-            ip,
-            jwtToken: jwtToken.slice(-6),
-            uid: user?.uid,
-        });
-        throw ForbiddenError("forbidden");
-    }
-    const isValid = await scryptVerify(tokenHash || "", jwtToken);
-    if (requireJWT && !isValid) {
-        logger.file("policy/jwt", {
-            path,
-            method,
-            message: tokenHash ? "scrypt verification failed" : "token not found",
-            ip,
-            clientId,
-            uid: user?.uid,
-        });
-        throw ForbiddenError("forbidden");
-    }
-    const q = `select client_secret_hash as "secret", redirect_uris as "redirectURIs" from oauth.clients where client_id=$1 and token_endpoint_auth_method=$2`;
-    const { secret, redirectURIs } = pg?.pk?.["oauth.clients"]
-        ? await pg
-            .query(q, [clientId, "private_key_jwt"])
-            .then((el) => el.rows?.[0] || {})
-        : {};
-    const { valid, error, payload } = verify(jwtToken, secret, scope);
-    // restrict access if token is invalid
-    if (requireJWT && !valid) {
-        logger.file("policy/jwt", {
-            path,
-            method,
-            message: error || "forbidden",
-            ip,
-            clientId,
-            uid: user?.uid,
-        });
-        throw ForbiddenError("forbidden");
-    }
-    return { token: jwtToken, valid: true, payload, redirectURIs };
-}

package/dist/server/plugins/policy/funcs/checkPermissions.d.ts

@@ -1,3 +0,0 @@
-import type { ExtendedRequest } from "../../../types/core.js";
-export default function checkPermissions(req: ExtendedRequest): Promise<null>;
-//# sourceMappingURL=checkPermissions.d.ts.map

package/dist/server/plugins/policy/funcs/checkPermissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkPermissions.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAQhC,wBAA8B,gBAAgB,CAAC,GAAG,EAAE,eAAe,iBAyElE"}

package/dist/server/plugins/policy/funcs/checkPermissions.js

@@ -1,48 +0,0 @@
-import logger from "../../logger/getLogger.js";
-import getUserPermissions from "../../access/funcs/getUserPermissions.js";
-import pgClients from "../../pg/pgClients.js";
-import { ForbiddenError, UnauthorizedError } from "../../../../errors.js";
-import getIP from "./getIP.js";
-export default async function checkPermissions(req) {
-    const { originalUrl: path, query, params, method, routeOptions, pg = pgClients.client, } = req;
-    const user = req.user || req.session?.passport?.user;
-    const body = req.body
-        ? JSON.stringify(req?.body || {}).substring(30)
-        : undefined;
-    const { permission } = (routeOptions?.config ||
-        {});
-    const permissions = (Array.isArray(permission) ? permission : permission?.split("|"))?.map((el) => {
-        const lastDotIndex = el.lastIndexOf(".");
-        return [el.slice(0, lastDotIndex), el.slice(lastDotIndex + 1)];
-    });
-    if (!permissions?.length) {
-        return null;
-    }
-    if (!user?.uid) {
-        logger.file("policy/permissions", {
-            path,
-            method,
-            params,
-            query,
-            body,
-            message: "unauthorized: not permitted",
-            ip: getIP(req),
-        });
-        throw UnauthorizedError("unauthorized: not permitted");
-    }
-    const userPermissions = await getUserPermissions({ uid: user?.uid, userType: user?.user_type }, pg).then((arr) => arr.reduce((acc, curr) => ({ ...acc, [curr.name]: curr.actions }), {}));
-    const havePermission = permissions?.some(([key, value]) => userPermissions?.[key]?.includes(value)) ?? false;
-    if (!user?.user_type?.includes?.("admin") && !havePermission) {
-        logger.file("policy/permissions", {
-            path,
-            method,
-            params,
-            query,
-            body,
-            message: "access restricted: not permitted",
-            uid: user?.uid,
-        });
-        throw ForbiddenError("access restricted: not permitted");
-    }
-    return null;
-}

package/dist/server/plugins/policy/funcs/checkPolicy.d.ts

@@ -1,3 +0,0 @@
-import type { ExtendedRequest } from "../../../types/core.js";
-export default function checkPolicy(req: ExtendedRequest, jwt?: any): null;
-//# sourceMappingURL=checkPolicy.d.ts.map

package/dist/server/plugins/policy/funcs/checkPolicy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkPolicy.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAKhC,MAAM,CAAC,OAAO,UAAU,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,GAAG,QAkIlE"}

package/dist/server/plugins/policy/funcs/checkPolicy.js

@@ -1,99 +0,0 @@
-import { config, logger } from "../../../../utils.js";
-import { ForbiddenError } from "../../../../errors.js";
-export default function checkPolicy(req, jwt) {
-    const { originalUrl: path, hostname, query, params, headers, method, routeOptions, } = req;
-    const user = req.user || req.session?.passport?.user;
-    const body = req.body
-        ? JSON.stringify(req?.body || {}).substring(30)
-        : undefined;
-    const isAdmin = process.env.NODE_ENV === "admin" ||
-        hostname.split(":").shift() === config.adminDomain ||
-        config.admin ||
-        hostname.startsWith("admin");
-    const { role, referer, policy = [], } = (routeOptions?.config || {});
-    // role=admin|regular
-    const isRole = (role && (!user?.user_type || !user?.user_type?.includes?.(role))) ||
-        (policy.includes("admin") && !user?.user_type?.includes?.("admin"));
-    const allowExtPublic = [".png", ".jpg", ".svg"];
-    const ext = path.toLowerCase().substr(-4);
-    const isPublic = Array.isArray(policy)
-        ? policy.includes("public")
-        : policy === "L0";
-    const requireUser = Array.isArray(policy)
-        ? policy.includes("user")
-        : ["L1", "L2", "L3"].includes(policy);
-    const requireReferer = Array.isArray(policy)
-        ? policy.includes("referer")
-        : referer;
-    if (method !== "GET" && user?.user_type === "viewer") {
-        logger.file("policy/role", {
-            path,
-            method,
-            userRole: user.user_type,
-        });
-        throw ForbiddenError("access restricted: 0");
-    }
-    // ! role
-    if (isRole) {
-        logger.file("policy/role", {
-            role,
-            userRole: user?.user_type || "none",
-            path,
-            method,
-            params,
-            query,
-            body,
-            uid: user?.uid,
-        });
-        throw ForbiddenError("access restricted: role");
-    }
-    // ! invalid file extension
-    if (path.includes("files/") && allowExtPublic.includes(ext)) {
-        return null;
-    }
-    // ! user required, but not logged in
-    if (requireUser && !user && !jwt?.valid) {
-        logger.file("policy/user", {
-            path,
-            method,
-            params,
-            query,
-            body,
-        });
-        throw ForbiddenError("access restricted: 3");
-    }
-    // ! referer
-    if (requireReferer && !headers?.referer?.includes?.(hostname)) {
-        logger.file("policy/referer", {
-            path,
-            method,
-            params,
-            query,
-            body,
-            uid: user?.uid,
-        });
-        throw ForbiddenError("access restricted: 4");
-    }
-    // ! public / token
-    if (isPublic || config.debug) {
-        return null;
-    }
-    // ! block any API for admin panel (without authorization)
-    if (isAdmin &&
-        !req.url?.includes?.("/assets") &&
-        !config.debug &&
-        !user?.uid &&
-        !jwt?.valid) {
-        logger.file("policy/api", {
-            path,
-            method,
-            params,
-            query,
-            body,
-            message: "access restricted: 6",
-            uid: user?.uid,
-        });
-        throw ForbiddenError("access restricted: 6");
-    }
-    return null;
-}

package/dist/server/plugins/policy/funcs/checkTraversal.d.ts

@@ -1,2 +0,0 @@
-export default function checkTraversal(request: any): void;
-//# sourceMappingURL=checkTraversal.d.ts.map

package/dist/server/plugins/policy/funcs/checkTraversal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkTraversal.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkTraversal.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,OAAO,EAAE,GAAG,QAgBlD"}

package/dist/server/plugins/policy/funcs/checkTraversal.js

@@ -1,22 +0,0 @@
-import { logger } from "../../../../utils.js";
-import { ConflictError } from "../../../../errors.js";
-const decodeTraversal = (str) => str
-    .replace(/%2e/g, ".")
-    .replace(/%2E/g, ".")
-    .replace(/%2f/g, "/")
-    .replace(/%2F/g, "/");
-export default function checkTraversal(request) {
-    const { method, originalUrl, query, params, user } = request;
-    if (decodeTraversal(JSON.stringify(params || {})).includes("../") ||
-        decodeTraversal(JSON.stringify(query || {})).includes("../") ||
-        decodeTraversal(originalUrl).includes("../")) {
-        logger.file("injection/file", {
-            path: originalUrl,
-            method,
-            params,
-            query,
-            uid: user?.uid,
-        });
-        throw ConflictError("path traversal detected");
-    }
-}

package/dist/server/plugins/policy/funcs/checkXSS.d.ts

@@ -1,9 +0,0 @@
-declare function checkXSS({ body, schema }: any): {
-    body: any;
-    error?: undefined;
-} | {
-    error: string;
-    body: any;
-};
-export default checkXSS;
-//# sourceMappingURL=checkXSS.d.ts.map

package/dist/server/plugins/policy/funcs/checkXSS.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkXSS.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/policy/funcs/checkXSS.ts"],"names":[],"mappings":"AAGA,iBAAS,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAW,EAAE,EAAE,GAAG;;;;;;EA0D3C;AAED,eAAe,QAAQ,CAAC"}