@opengis/fastify-table 2.5.53 → 3.0.0-beta.0

package/dist/index.js

@@ -1,279 +1,2 @@
-import fp from "fastify-plugin";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import proxy from "@fastify/http-proxy";
-import addTemplateDir from "./server/plugins/table/funcs/addTemplateDir.js";
-const filename = fileURLToPath(import.meta.url);
-const cwd = path.dirname(filename);
-// core templates && cls
-config.templates?.forEach((el) => addTemplateDir(el));
-addTemplateDir(path.join(cwd, "module/core"));
-import config from "./config.js";
-import { preForm, afterInsert, afterTable, afterTemplate, afterUpdate, preTemplate, onReady, onListen1, onListen2, onListen3, } from "./functions.js";
-import addHook from "./server/plugins/hook/addHook.js";
-const { maxFileSize = 512 } = config;
-const { name: execName } = path.parse(process.argv0);
-const routes = [];
-const policyCls = {
-    public: "Public", // old policy support
-    user: "User", // old policy support
-    site: "Public", // old policy support
-    L0: "Public",
-    L1: "User",
-    L2: "User",
-    L3: "User",
-};
-// helpers
-// import helperPlugin from './server/helpers/index.js';
-// plugins
-import cronPlugin from "./server/plugins/cron/index.js";
-import pgPlugin from "./server/plugins/pg/index.js";
-import sqlitePlugin from "./server/plugins/sqlite/index.js";
-import policyPlugin from "./server/plugins/policy/index.js";
-import metricPlugin from "./server/plugins/metric/index.js";
-import redisPlugin from "./server/plugins/redis/index.js";
-import loggerPlugin from "./server/plugins/logger/index.js";
-import authPlugin from "./server/plugins/auth/index.js";
-import chunkedUploadPlugin from "./server/plugins/upload/index.js";
-// utils
-import execMigrations from "./server/plugins/migration/exec.migrations.js";
-import pgClients from "./server/plugins/pg/pgClients.js";
-// routes
-import cronRoutes from "./server/routes/cron/index.js";
-import crudRoutes from "./server/routes/crud/crud.route.js";
-import loggerRoutes from "./server/routes/logger/index.js";
-import propertiesRoutes from "./server/routes/properties/index.js";
-import tableRoutes from "./server/routes/table/index.js";
-import utilRoutes from "./server/routes/util/index.js";
-import accessRoutes from "./server/routes/access/index.js";
-import dblistRoutes from "./server/routes/dblist/index.js";
-import menuRoutes from "./server/routes/menu/index.js";
-import templatesRoutes from "./server/routes/templates/index.js";
-import widgetRoutes from "./server/routes/widget/index.js";
-import authRoutes from "./server/routes/auth/index.js";
-import fileRoutes from "./server/routes/file/index.js";
-import uploadChunkRoutes from "./server/routes/upload/index.js";
-import grpcRoutes from "./server/routes/grpc/index.js";
-import notificationsRoutes from "./server/routes/notifications/index.js";
-import userClsRoutes from "./server/routes/usercls/index.js";
-import dictionariesRoutes from "./server/routes/dictionaries/dictionaries.route.js";
-import apiListService from "./server/routes/util/controllers/api.list.js";
-addHook("preForm", preForm);
-addHook("afterTable", afterTable);
-addHook("preTemplate", preTemplate);
-addHook("afterTemplate", afterTemplate);
-addHook("afterUpdate", afterUpdate);
-addHook("afterInsert", afterInsert);
-async function plugin(fastify) {
-    const opt = { prefix: "/api" };
-    // await new Promise(resolve => setTimeout(resolve, 50000)); // ! for debug, simulate Plugin did not start in time
-    if (config.disableCors) {
-        fastify.addHook("onSend", async (_, reply) => {
-            reply.header("Access-Control-Allow-Origin", "*");
-        });
-    }
-    const apiListSchema = {
-        querystring: {
-            type: "object",
-            additionalProperties: false,
-            properties: {
-                package: { type: "string" },
-                exclude_package: { type: "string" },
-                subdir: { type: "string" },
-                md: { type: "string", pattern: "^1$" },
-                tags: { type: "string", pattern: "^[a-zA-Z0-9_,]+$" },
-                exclude_tags: { type: "string", pattern: "^[a-zA-Z0-9_,]+$" },
-            },
-        },
-    };
-    if (!fastify.hasRoute({ method: "GET", url: "/api/list" })) {
-        fastify.get(`${opt.prefix || "/api"}/list`, {
-            config: {
-                tags: ["core", "util"],
-                package: "fastify-table",
-                role: "admin",
-            },
-            schema: apiListSchema,
-        }, function apiList(req, reply) {
-            const result = apiListService({
-                includeTags: req.query.tags,
-                excludeTags: req.query.exclude_tags,
-                excludePackage: req.query.exclude_package,
-                packageName: req.query.package,
-                subdir: req.query.subdir,
-                md: req.query.md,
-                routes,
-            });
-            if (result.headers) {
-                return reply.headers(result.headers).send(result.data);
-            }
-            return result;
-        });
-    }
-    fastify.addHook("onRoute", (r) => {
-        if (r.method === "HEAD")
-            return;
-        const method = Array.isArray(r.method) ? "ALL" : r.method;
-        const query = r.schema?.querystring
-            ? Object.keys(r.schema?.querystring?.properties || {}).reduce((acc, curr) => ({
-                ...acc,
-                [curr]: r.schema?.querystring?.properties?.[curr]?.type,
-            }), {})
-            : undefined;
-        r.config = r.config || {};
-        r.config.package = r.config.package || "fastify-table";
-        routes.push({
-            method,
-            endpoint: r.url,
-            subdir: r.config?.subdir,
-            package: r.config?.package,
-            tags: Array.isArray(r.config?.tags) ? r.config?.tags : undefined,
-            description: r.config?.description,
-            summary: r.config?.summary,
-            query,
-            roles: r.config?.role?.split?.("|"),
-            policy: (Array.isArray(r.config?.policy)
-                ? r.config?.policy
-                : r.config?.policy?.split?.(","))?.map?.((name) => policyCls[name] || name),
-        });
-    });
-    fastify.addHook("onListen", onListen1);
-    fastify.addHook("onListen", onListen2);
-    fastify.addHook("onListen", onListen3);
-    fastify.addHook("onReady", onReady);
-    // core migrations (second argument for core only)
-    execMigrations(path.join(cwd, "server/migrations"), pgClients.client, true).catch((err) => console.warn(err.toString()));
-    // plugins / utils / funcs
-    authPlugin(fastify); // fastify-auth api + hooks integrated to core
-    chunkedUploadPlugin(fastify);
-    policyPlugin(fastify);
-    metricPlugin();
-    redisPlugin(fastify);
-    pgPlugin(fastify);
-    sqlitePlugin(fastify);
-    cronPlugin();
-    loggerPlugin(fastify);
-    if (config.rateLimit !== false) {
-        fastify.register(import("@fastify/rate-limit"), {
-            max: parseInt(config.rateLimit?.max || 100),
-            timeWindow: config.rateLimit?.timeWindow || 60000,
-            hook: "preHandler",
-            global: true,
-            keyGenerator: (req) => `${req.user?.uid || req.ip}-${req.raw.url.split("?")[0]}`,
-        });
-    }
-    else {
-        console.log("⚠️ rate limit is disabled");
-    }
-    // add multipart parser before any route registration
-    fastify.register(import("@fastify/multipart"), {
-        limits: {
-            fileSize: maxFileSize * 1024 * 1024,
-        },
-    });
-    if (config.dblist) {
-        fastify.register(dblistRoutes, opt);
-    }
-    fastify.addHook("preValidation", async (request) => {
-        Object.keys(request.query || {})
-            .filter((key) => request.query[key] === "")
-            .forEach((key) => delete request.query[key]);
-        Object.keys(request.body || {})
-            .filter((key) => request.body[key] === "")
-            .forEach((key) => delete request.body[key]);
-    });
-    fastify.addHook("preHandler", async (request, reply) => {
-        const q = request.query;
-        if (q?.limit !== undefined) {
-            const limit = Number(q.limit);
-            if (!Number.isInteger(limit) || limit < 1 || limit > 1000) {
-                reply.code(400).send({
-                    error: "Invalid limit (1-100)",
-                });
-            }
-        }
-        if (q?.offset !== undefined) {
-            const offset = Number(q.offset);
-            if (!Number.isInteger(offset) || offset < 0) {
-                reply.code(400).send({
-                    error: "Invalid offset (>=0)",
-                });
-            }
-        }
-        if (q?.page !== undefined) {
-            const page = Number(q.page);
-            if (!Number.isInteger(page) || page > 100000) {
-                reply.code(400).send({
-                    error: "Invalid page (<=100000)",
-                });
-            }
-        }
-    });
-    // routes / api
-    fastify.register(cronRoutes, opt);
-    fastify.register(crudRoutes, opt);
-    fastify.register(loggerRoutes);
-    fastify.register(propertiesRoutes, opt);
-    fastify.register(tableRoutes, opt);
-    fastify.register(utilRoutes, opt);
-    fastify.register(accessRoutes, opt);
-    fastify.register(widgetRoutes, opt);
-    fastify.register(menuRoutes, opt);
-    fastify.register(templatesRoutes, opt);
-    fastify.register(authRoutes); // from fastify-auth
-    // from fastify-file
-    fastify.register(fileRoutes);
-    fastify.register(uploadChunkRoutes);
-    fastify.register(grpcRoutes, opt);
-    // from admin
-    fastify.register(notificationsRoutes, opt);
-    fastify.register(userClsRoutes, opt);
-    fastify.register(dictionariesRoutes, opt);
-    config.proxy?.forEach?.((el) => {
-        if (execName === "bun") {
-            fastify.all(`${el.source}/*`, async (req, reply) => {
-                const url = el.target.replace(/\/$/, "") +
-                    req.raw.url.replace(new RegExp(`^${el.source}`), "");
-                const res = await fetch(url, {
-                    method: req.method,
-                    headers: {
-                        // ...req.headers,
-                        uid: req.user?.uid,
-                        ...(el.headers || {}),
-                    },
-                    body: ["PUT", "POST"].includes(req.method) ? req.raw : undefined,
-                });
-                reply.headers(Object.fromEntries(res.headers));
-                reply.status(res.status);
-                if (res.headers.get("content-type")?.startsWith?.("text/")) {
-                    const resp = await res.text();
-                    // reply.send(resp);
-                    return resp;
-                }
-                if (res.headers.get("content-type")?.includes?.("/json")) {
-                    const resp = await res.json();
-                    // reply.send(resp);
-                    return resp;
-                }
-                const blob = await res.blob();
-                const arrayBuffer = await blob.arrayBuffer();
-                const fileBuffer = Buffer.from(arrayBuffer);
-                return fileBuffer;
-            });
-        }
-        else {
-            fastify.register(proxy, {
-                upstream: el.target,
-                prefix: el.source,
-                http2: false,
-                preHandler: async (req) => {
-                    req.headers.uid = req.session?.passport?.user?.uid;
-                    Object.keys(el.headers || {})?.forEach((item) => (req.headers[item] = el.headers[item]));
-                },
-            });
-        }
-    });
-}
-export default fp(plugin, {
-    name: "@opengis/fastify-table",
-});
+import{CreateContext as e,SetContext as t}from"./core.js";import n from"./config.js";import r from"./plugins/redis/funcs/createRedis.js";import i from"./plugins/logger/createLogger.js";import a from"./plugins/pg/funcs/createPg.js";import o from"./plugins/pg/audit/index.js";import s from"./plugins/grpc/createGrpc.js";import c from"./plugins/file/providers/index.js";import l from"./modules/templates/services/addTemplateDir.js";import{BadRequestError as u}from"./errors.js";import d from"./plugins/hook/addHook.js";import f from"./plugins/migration/exec.migrations.js";import p from"./plugins/upload/index.js";import{afterInsert as m,afterTable as h,afterTemplate as g,afterUpdate as _,onListen1 as v,onListen2 as y,onListen3 as b,onReady as x,preForm as S,preTemplate as C}from"./functions.js";import w from"./plugins/cron/index.js";import T from"./plugins/context/index.js";import E from"./plugins/pg/index.js";import D from"./plugins/sqlite/index.js";import O from"./plugins/policy/index.js";import k from"./plugins/metric/index.js";import A from"./plugins/redis/index.js";import j from"./plugins/logger/index.js";import M from"./plugins/auth/index.js";import N from"./modules/system/system.route.js";import P from"./modules/templates/templates.route.js";import F from"./modules/file/file.route.js";import I from"./modules/data/data.route.js";import L from"./modules/auth/auth.route.js";import R from"fastify-plugin";import z from"node:path";import{fileURLToPath as B}from"node:url";import V from"@fastify/http-proxy";const H=B(import.meta.url),U=z.dirname(H);n.templates?.forEach(e=>l(e)),l(z.join(U,`module/core`));const{maxFileSize:W=512}=n,G=[],K={public:`Public`,user:`User`,site:`Public`,L0:`Public`,L1:`User`,L2:`User`,L3:`User`};d(`preForm`,S),d(`afterTable`,h),d(`preTemplate`,C),d(`afterTemplate`,g),d(`afterUpdate`,_),d(`afterInsert`,m);async function q(l){let d={prefix:`/api`},m=a(n.pg),h=i(n.logger),g=e({pg:m,logger:h,audit:o({pg:m,logger:h}),config:n,redis:r(n.redis),file:c({s3:n.s3}),grpc:s({server:n.convertServerAddress},{logger:h})});t(g),n.pg&&(a({name:`client`}),a({name:`stream`,statement_timeout:!1})),n.disableCors&&l.addHook(`onSend`,async(e,t)=>{t.header(`Access-Control-Allow-Origin`,`*`)}),l.addHook(`onRoute`,e=>{if(e.method===`HEAD`)return;let t=Array.isArray(e.method)?`ALL`:e.method,n=e.schema?.querystring?Object.keys(e.schema?.querystring?.properties||{}).reduce((t,n)=>({...t,[n]:e.schema?.querystring?.properties?.[n]?.type}),{}):void 0;e.config=e.config||{},e.config.package=e.config.package||`fastify-table`,G.push({method:t,endpoint:e.url,subdir:e.config?.subdir,package:e.config?.package,tags:Array.isArray(e.config?.tags)?e.config?.tags:void 0,description:e.config?.description,summary:e.config?.summary,query:n,roles:e.config?.role?.split?.(`|`),policy:(Array.isArray(e.config?.policy)?e.config?.policy:e.config?.policy?.split?.(`,`))?.map?.(e=>K[e]||e)})}),l.addHook(`onListen`,v),l.addHook(`onListen`,y),l.addHook(`onListen`,b),l.addHook(`onReady`,x),f({dirPath:z.join(U,`server/migrations`),core:!0},g).catch(e=>console.warn(e.toString())),T(l),M(l),p(l),O(l),k(),A(l),E(l),D(l),w(),j(l),n.rateLimit===!1?console.log(`⚠️ rate limit is disabled`):l.register(import(`@fastify/rate-limit`),{max:parseInt(n.rateLimit?.max||100),timeWindow:n.rateLimit?.timeWindow||6e4,hook:`preHandler`,global:!0,keyGenerator:e=>`${e.user?.uid||e.ip}-${e.raw.url.split(`?`)[0]}`}),l.register(import(`@fastify/multipart`),{limits:{fileSize:W*1024*1024}}),l.addHook(`preValidation`,async e=>{Object.keys(e.query||{}).filter(t=>e.query[t]===``).forEach(t=>delete e.query[t]),Object.keys(e.body||{}).filter(t=>e.body[t]===``).forEach(t=>delete e.body[t])}),l.addHook(`preHandler`,async(e,t)=>{let n=e.query;if(n?.limit!==void 0){let e=Number(n.limit);if(!Number.isInteger(e)||e<1||e>1e3)throw u(`Invalid limit (1-100)`)}if(n?.offset!==void 0){let e=Number(n.offset);if(!Number.isInteger(e)||e<0)throw u(`Invalid offset (>=0)`)}if(n?.page!==void 0){let e=Number(n.page);if(!Number.isInteger(e)||e>1e5)throw u(`Invalid page (<=100000)`)}}),l.register(L),l.register(I,d),l.register(F,d),l.register(N,d),l.register(P,d),n.proxy?.forEach?.(e=>{process.versions&&process.versions.bun?l.all(`${e.source}/*`,async(t,n)=>{let r=e.target.replace(/\/$/,``)+t.raw.url.replace(RegExp(`^${e.source}`),``),i=await fetch(r,{method:t.method,headers:{uid:t.user?.uid,...e.headers||{}},body:[`PUT`,`POST`].includes(t.method)?t.raw:void 0});if(n.headers(Object.fromEntries(i.headers)),n.status(i.status),i.headers.get(`content-type`)?.startsWith?.(`text/`))return await i.text();if(i.headers.get(`content-type`)?.includes?.(`/json`))return await i.json();let a=await(await i.blob()).arrayBuffer();return Buffer.from(a)}):l.register(V,{upstream:e.target,prefix:e.source,http2:!1,preHandler:async t=>{t.headers.uid=t.session?.passport?.user?.uid,Object.keys(e.headers||{})?.forEach(n=>t.headers[n]=e.headers[n])}})})}var J=R(q,{name:`@opengis/fastify-table`});export{J as default,G as routes};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["createAudit"],"sources":["../src/index.ts"],"sourcesContent":["import fp from \"fastify-plugin\";\r\n\r\nimport { FastifyReply } from \"fastify\";\r\n\r\nimport path from \"node:path\";\r\n\r\nimport { fileURLToPath } from \"node:url\";\r\n\r\nimport proxy from \"@fastify/http-proxy\";\r\n\r\nimport { CreateContext, SetContext } from \"./core.js\";\r\nimport createPg from \"./plugins/pg/funcs/createPg.js\";\r\nimport createAudit from \"./plugins/pg/audit/index.js\";\r\nimport createLogger from \"./plugins/logger/createLogger.js\";\r\nimport createRedis from \"./plugins/redis/funcs/createRedis.js\";\r\nimport createGrpc from \"./plugins/grpc/createGrpc.js\";\r\nimport createFileProvider from \"./plugins/file/providers/index.js\";\r\n\r\nimport addTemplateDir from \"./modules/templates/services/addTemplateDir.js\";\r\nconst filename = fileURLToPath(import.meta.url);\r\nconst cwd = path.dirname(filename);\r\n\r\n// core templates && cls\r\nconfig.templates?.forEach((el: string) => addTemplateDir(el));\r\naddTemplateDir(path.join(cwd, \"module/core\"));\r\n\r\nimport config from \"./config.js\";\r\n\r\nimport { BadRequestError } from \"./errors.js\";\r\n\r\nimport {\r\n  preForm,\r\n  afterInsert,\r\n  afterTable,\r\n  afterTemplate,\r\n  afterUpdate,\r\n  preTemplate,\r\n  onReady,\r\n  onListen1,\r\n  onListen2,\r\n  onListen3,\r\n} from \"./functions.js\";\r\nimport addHook from \"./plugins/hook/addHook.js\";\r\n\r\nconst { maxFileSize = 512 } = config;\r\n\r\nexport const routes: any = [];\r\n\r\nconst policyCls: Record<string, string> = {\r\n  public: \"Public\", // old policy support\r\n  user: \"User\", // old policy support\r\n  site: \"Public\", // old policy support\r\n  L0: \"Public\",\r\n  L1: \"User\",\r\n  L2: \"User\",\r\n  L3: \"User\",\r\n};\r\n\r\n// plugins\r\nimport cronPlugin from \"./plugins/cron/index.js\";\r\nimport contextPlugin from \"./plugins/context/index.js\";\r\n\r\nimport pgPlugin from \"./plugins/pg/index.js\";\r\nimport sqlitePlugin from \"./plugins/sqlite/index.js\";\r\nimport policyPlugin from \"./plugins/policy/index.js\";\r\nimport metricPlugin from \"./plugins/metric/index.js\";\r\nimport redisPlugin from \"./plugins/redis/index.js\";\r\nimport loggerPlugin from \"./plugins/logger/index.js\";\r\nimport authPlugin from \"./plugins/auth/index.js\";\r\nimport chunkedUploadPlugin from \"./plugins/upload/index.js\";\r\nimport pgClients from \"./plugins/pg/pgClients.js\";\r\nimport execMigrations from \"./plugins/migration/exec.migrations.js\";\r\n\r\n// routes\r\nimport systemRoutes from \"./modules/system/system.route.js\";\r\nimport templatesRoutes from \"./modules/templates/templates.route.js\";\r\nimport fileRoutes from \"./modules/file/file.route.js\";\r\nimport dataRoutes from \"./modules/data/data.route.js\";\r\nimport authRoutes from \"./modules/auth/auth.route.js\";\r\n\r\n// import cronRoutes from \"./src/routes/cron/index.js\";\r\n// import crudRoutes from \"./src/routes/crud/crud.route.js\";\r\n// import loggerRoutes from \"./src/routes/logger/index.js\";\r\n// import propertiesRoutes from \"./src/routes/properties/index.js\";\r\n// import tableRoutes from \"./src/routes/table/index.js\";\r\n// import utilRoutes from \"./src/routes/util/index.js\";\r\n// import accessRoutes from \"./src/routes/access/index.js\";\r\n\r\n// import menuRoutes from \"./src/routes/menu/index.js\";\r\n// import templatesRoutes from \"./src/routes/templates/index.js\";\r\n// import widgetRoutes from \"./src/routes/widget/index.js\";\r\n// import authRoutes from \"./src/routes/auth/index.js\";\r\n// import fileRoutes from \"./src/routes/file/index.js\";\r\n// import uploadChunkRoutes from \"./src/routes/upload/index.js\";\r\n// import grpcRoutes from \"./src/routes/grpc/index.js\";\r\n// import notificationsRoutes from \"./src/routes/notifications/index.js\";\r\n// import userClsRoutes from \"./src/routes/usercls/index.js\";\r\n// import dictionariesRoutes from \"./src/routes/dictionaries/dictionaries.route.js\";\r\n\r\naddHook(\"preForm\", preForm);\r\naddHook(\"afterTable\", afterTable);\r\naddHook(\"preTemplate\", preTemplate);\r\naddHook(\"afterTemplate\", afterTemplate);\r\naddHook(\"afterUpdate\", afterUpdate);\r\naddHook(\"afterInsert\", afterInsert);\r\n\r\nasync function plugin(fastify: any) {\r\n  const opt = { prefix: \"/api\" };\r\n\r\n  const pg = createPg(config.pg);\r\n  const logger = createLogger(config.logger);\r\n  const audit = createAudit({\r\n    pg,\r\n    logger,\r\n  });\r\n  const redis = createRedis(config.redis);\r\n  const file = createFileProvider({\r\n    s3: config.s3,\r\n  });\r\n  const grpc = createGrpc(\r\n    {\r\n      server: config.convertServerAddress,\r\n    },\r\n    { logger }\r\n  );\r\n\r\n  const ctx = CreateContext({\r\n    pg,\r\n    logger,\r\n    audit,\r\n    config,\r\n    redis,\r\n    file,\r\n    grpc,\r\n  });\r\n\r\n  SetContext(ctx);\r\n\r\n  if (config.pg) {\r\n    createPg({ name: \"client\" });\r\n    createPg({ name: \"stream\", statement_timeout: false });\r\n  }\r\n\r\n  if (config.disableCors) {\r\n    fastify.addHook(\"onSend\", async (_: any, reply: FastifyReply) => {\r\n      reply.header(\"Access-Control-Allow-Origin\", \"*\");\r\n    });\r\n  }\r\n\r\n  fastify.addHook(\"onRoute\", (r: any) => {\r\n    if (r.method === \"HEAD\") return;\r\n    const method = Array.isArray(r.method) ? \"ALL\" : r.method;\r\n    const query = r.schema?.querystring\r\n      ? Object.keys(r.schema?.querystring?.properties || {}).reduce(\r\n          (acc, curr) => ({\r\n            ...acc,\r\n            [curr]: r.schema?.querystring?.properties?.[curr]?.type,\r\n          }),\r\n          {}\r\n        )\r\n      : undefined;\r\n\r\n    r.config = r.config || {};\r\n    r.config.package = r.config.package || \"fastify-table\";\r\n\r\n    routes.push({\r\n      method,\r\n      endpoint: r.url,\r\n      subdir: r.config?.subdir,\r\n      package: r.config?.package,\r\n      tags: Array.isArray(r.config?.tags) ? r.config?.tags : undefined,\r\n      description: r.config?.description,\r\n      summary: r.config?.summary,\r\n      query,\r\n      roles: r.config?.role?.split?.(\"|\"),\r\n      policy: (Array.isArray(r.config?.policy)\r\n        ? r.config?.policy\r\n        : r.config?.policy?.split?.(\",\")\r\n      )?.map?.((name: string) => policyCls[name] || name),\r\n    });\r\n  });\r\n  // user menu to db - for admin environment\r\n  fastify.addHook(\"onListen\", onListen1);\r\n  // cls to db\r\n  fastify.addHook(\"onListen\", onListen2);\r\n  // dictionaries to db\r\n  fastify.addHook(\"onListen\", onListen3);\r\n  // load locales\r\n  fastify.addHook(\"onReady\", onReady);\r\n\r\n  // core migrations (second argument for core only)\r\n  execMigrations(\r\n    {\r\n      dirPath: path.join(cwd, \"server/migrations\"),\r\n      core: true,\r\n    },\r\n    ctx\r\n  ).catch((err: any) => console.warn(err.toString()));\r\n\r\n  // plugins / utils / funcs\r\n  contextPlugin(fastify);\r\n  authPlugin(fastify); // fastify-auth api + hooks integrated to core\r\n  chunkedUploadPlugin(fastify);\r\n  policyPlugin(fastify);\r\n  metricPlugin();\r\n  redisPlugin(fastify);\r\n  pgPlugin(fastify);\r\n  sqlitePlugin(fastify);\r\n\r\n  cronPlugin();\r\n  loggerPlugin(fastify);\r\n\r\n  if (config.rateLimit !== false) {\r\n    fastify.register(import(\"@fastify/rate-limit\"), {\r\n      max: parseInt(config.rateLimit?.max || 100),\r\n      timeWindow: config.rateLimit?.timeWindow || 60000,\r\n      hook: \"preHandler\",\r\n      global: true,\r\n      keyGenerator: (req: any) =>\r\n        `${req.user?.uid || req.ip}-${req.raw.url.split(\"?\")[0]}`,\r\n    });\r\n  } else {\r\n    console.log(\"⚠️ rate limit is disabled\");\r\n  }\r\n\r\n  // add multipart parser before any route registration\r\n  fastify.register(import(\"@fastify/multipart\"), {\r\n    limits: {\r\n      fileSize: maxFileSize * 1024 * 1024,\r\n    },\r\n  });\r\n\r\n  fastify.addHook(\"preValidation\", async (request: any) => {\r\n    Object.keys(request.query || {})\r\n      .filter((key) => request.query[key] === \"\")\r\n      .forEach((key) => delete request.query[key]);\r\n    Object.keys(request.body || {})\r\n      .filter((key) => request.body[key] === \"\")\r\n      .forEach((key) => delete request.body[key]);\r\n  });\r\n\r\n  fastify.addHook(\"preHandler\", async (request: any, reply: any) => {\r\n    const q = request.query;\r\n\r\n    if (q?.limit !== undefined) {\r\n      const limit = Number(q.limit);\r\n      if (!Number.isInteger(limit) || limit < 1 || limit > 1000) {\r\n        throw BadRequestError(\"Invalid limit (1-100)\");\r\n      }\r\n    }\r\n\r\n    if (q?.offset !== undefined) {\r\n      const offset = Number(q.offset);\r\n      if (!Number.isInteger(offset) || offset < 0) {\r\n        throw BadRequestError(\"Invalid offset (>=0)\");\r\n      }\r\n    }\r\n\r\n    if (q?.page !== undefined) {\r\n      const page = Number(q.page);\r\n      if (!Number.isInteger(page) || page > 100000) {\r\n        throw BadRequestError(\"Invalid page (<=100000)\");\r\n      }\r\n    }\r\n  });\r\n\r\n  // routes / api\r\n  fastify.register(authRoutes);\r\n  fastify.register(dataRoutes, opt);\r\n  fastify.register(fileRoutes, opt);\r\n  fastify.register(systemRoutes, opt);\r\n  fastify.register(templatesRoutes, opt);\r\n\r\n  config.proxy?.forEach?.((el: Record<string, any>) => {\r\n    if (process.versions && process.versions.bun) {\r\n      fastify.all(`${el.source}/*`, async (req: any, reply: FastifyReply) => {\r\n        const url =\r\n          el.target.replace(/\\/$/, \"\") +\r\n          req.raw.url.replace(new RegExp(`^${el.source}`), \"\");\r\n        const res = await fetch(url, {\r\n          method: req.method,\r\n          headers: {\r\n            // ...req.headers,\r\n            uid: req.user?.uid,\r\n            ...(el.headers || {}),\r\n          },\r\n          body: [\"PUT\", \"POST\"].includes(req.method) ? req.raw : undefined,\r\n        });\r\n        reply.headers(Object.fromEntries(res.headers));\r\n        reply.status(res.status);\r\n        if (res.headers.get(\"content-type\")?.startsWith?.(\"text/\")) {\r\n          const resp = await res.text();\r\n          // reply.send(resp);\r\n          return resp;\r\n        }\r\n        if (res.headers.get(\"content-type\")?.includes?.(\"/json\")) {\r\n          const resp = await res.json();\r\n          // reply.send(resp);\r\n          return resp;\r\n        }\r\n        const blob = await res.blob();\r\n        const arrayBuffer = await blob.arrayBuffer();\r\n        const fileBuffer = Buffer.from(arrayBuffer);\r\n        return fileBuffer;\r\n      });\r\n    } else {\r\n      fastify.register(proxy, {\r\n        upstream: el.target,\r\n        prefix: el.source,\r\n        http2: false,\r\n        preHandler: async (req: any) => {\r\n          req.headers.uid = req.session?.passport?.user?.uid;\r\n          Object.keys(el.headers || {})?.forEach(\r\n            (item) => (req.headers[item] = el.headers[item])\r\n          );\r\n        },\r\n      });\r\n    }\r\n  });\r\n}\r\nexport default fp(plugin, {\r\n  name: \"@opengis/fastify-table\",\r\n});\r\n"],"mappings":"k/CAmBA,MAAM,EAAW,EAAc,OAAO,KAAK,GAAG,EACxC,EAAM,EAAK,QAAQ,CAAQ,EAGjC,EAAO,WAAW,QAAS,GAAe,EAAe,CAAE,CAAC,EAC5D,EAAe,EAAK,KAAK,EAAK,aAAa,CAAC,EAoB5C,KAAM,CAAE,cAAc,KAAQ,EAEjB,EAAc,CAAC,EAEtB,EAAoC,CACxC,OAAQ,SACR,KAAM,OACN,KAAM,SACN,GAAI,SACJ,GAAI,OACJ,GAAI,OACJ,GAAI,MACN,EA2CA,EAAQ,UAAW,CAAO,EAC1B,EAAQ,aAAc,CAAU,EAChC,EAAQ,cAAe,CAAW,EAClC,EAAQ,gBAAiB,CAAa,EACtC,EAAQ,cAAe,CAAW,EAClC,EAAQ,cAAe,CAAW,EAElC,eAAe,EAAO,EAAc,CAClC,IAAM,EAAM,CAAE,OAAQ,MAAO,EAEvB,EAAK,EAAS,EAAO,EAAE,EACvB,EAAS,EAAa,EAAO,MAAM,EAgBnC,EAAM,EAAc,CACxB,KACA,SACA,MAlBYA,EAAY,CACxB,KACA,QACF,CAeM,EACJ,SACA,MAhBY,EAAY,EAAO,KAgB3B,EACJ,KAhBW,EAAmB,CAC9B,GAAI,EAAO,EACb,CAcK,EACH,KAdW,EACX,CACE,OAAQ,EAAO,oBACjB,EACA,CAAE,QAAO,CAUN,CACL,CAAC,EAED,EAAW,CAAG,EAEV,EAAO,KACT,EAAS,CAAE,KAAM,QAAS,CAAC,EAC3B,EAAS,CAAE,KAAM,SAAU,kBAAmB,EAAM,CAAC,GAGnD,EAAO,aACT,EAAQ,QAAQ,SAAU,MAAO,EAAQ,IAAwB,CAC/D,EAAM,OAAO,8BAA+B,GAAG,CACjD,CAAC,EAGH,EAAQ,QAAQ,UAAY,GAAW,CACrC,GAAI,EAAE,SAAW,OAAQ,OACzB,IAAM,EAAS,MAAM,QAAQ,EAAE,MAAM,EAAI,MAAQ,EAAE,OAC7C,EAAQ,EAAE,QAAQ,YACpB,OAAO,KAAK,EAAE,QAAQ,aAAa,YAAc,CAAC,CAAC,EAAE,QAClD,EAAK,KAAU,CACd,GAAG,GACF,GAAO,EAAE,QAAQ,aAAa,aAAa,IAAO,IACrD,GACA,CAAC,CACH,EACA,IAAA,GAEJ,EAAE,OAAS,EAAE,QAAU,CAAC,EACxB,EAAE,OAAO,QAAU,EAAE,OAAO,SAAW,gBAEvC,EAAO,KAAK,CACV,SACA,SAAU,EAAE,IACZ,OAAQ,EAAE,QAAQ,OAClB,QAAS,EAAE,QAAQ,QACnB,KAAM,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAI,EAAE,QAAQ,KAAO,IAAA,GACvD,YAAa,EAAE,QAAQ,YACvB,QAAS,EAAE,QAAQ,QACnB,QACA,MAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAClC,QAAS,MAAM,QAAQ,EAAE,QAAQ,MAAM,EACnC,EAAE,QAAQ,OACV,EAAE,QAAQ,QAAQ,QAAQ,GAAG,IAC9B,MAAO,GAAiB,EAAU,IAAS,CAAI,CACpD,CAAC,CACH,CAAC,EAED,EAAQ,QAAQ,WAAY,CAAS,EAErC,EAAQ,QAAQ,WAAY,CAAS,EAErC,EAAQ,QAAQ,WAAY,CAAS,EAErC,EAAQ,QAAQ,UAAW,CAAO,EAGlC,EACE,CACE,QAAS,EAAK,KAAK,EAAK,mBAAmB,EAC3C,KAAM,EACR,EACA,CACF,EAAE,MAAO,GAAa,QAAQ,KAAK,EAAI,SAAS,CAAC,CAAC,EAGlD,EAAc,CAAO,EACrB,EAAW,CAAO,EAClB,EAAoB,CAAO,EAC3B,EAAa,CAAO,EACpB,EAAa,EACb,EAAY,CAAO,EACnB,EAAS,CAAO,EAChB,EAAa,CAAO,EAEpB,EAAW,EACX,EAAa,CAAO,EAEhB,EAAO,YAAc,GAUvB,QAAQ,IAAI,2BAA2B,EATvC,EAAQ,SAAS,OAAO,uBAAwB,CAC9C,IAAK,SAAS,EAAO,WAAW,KAAO,GAAG,EAC1C,WAAY,EAAO,WAAW,YAAc,IAC5C,KAAM,aACN,OAAQ,GACR,aAAe,GACb,GAAG,EAAI,MAAM,KAAO,EAAI,GAAG,GAAG,EAAI,IAAI,IAAI,MAAM,GAAG,EAAE,IACzD,CAAC,EAMH,EAAQ,SAAS,OAAO,sBAAuB,CAC7C,OAAQ,CACN,SAAU,EAAc,KAAO,IACjC,CACF,CAAC,EAED,EAAQ,QAAQ,gBAAiB,KAAO,IAAiB,CACvD,OAAO,KAAK,EAAQ,OAAS,CAAC,CAAC,EAC5B,OAAQ,GAAQ,EAAQ,MAAM,KAAS,EAAE,EACzC,QAAS,GAAQ,OAAO,EAAQ,MAAM,EAAI,EAC7C,OAAO,KAAK,EAAQ,MAAQ,CAAC,CAAC,EAC3B,OAAQ,GAAQ,EAAQ,KAAK,KAAS,EAAE,EACxC,QAAS,GAAQ,OAAO,EAAQ,KAAK,EAAI,CAC9C,CAAC,EAED,EAAQ,QAAQ,aAAc,MAAO,EAAc,IAAe,CAChE,IAAM,EAAI,EAAQ,MAElB,GAAI,GAAG,QAAU,IAAA,GAAW,CAC1B,IAAM,EAAQ,OAAO,EAAE,KAAK,EAC5B,GAAI,CAAC,OAAO,UAAU,CAAK,GAAK,EAAQ,GAAK,EAAQ,IACnD,MAAM,EAAgB,uBAAuB,CAEjD,CAEA,GAAI,GAAG,SAAW,IAAA,GAAW,CAC3B,IAAM,EAAS,OAAO,EAAE,MAAM,EAC9B,GAAI,CAAC,OAAO,UAAU,CAAM,GAAK,EAAS,EACxC,MAAM,EAAgB,sBAAsB,CAEhD,CAEA,GAAI,GAAG,OAAS,IAAA,GAAW,CACzB,IAAM,EAAO,OAAO,EAAE,IAAI,EAC1B,GAAI,CAAC,OAAO,UAAU,CAAI,GAAK,EAAO,IACpC,MAAM,EAAgB,yBAAyB,CAEnD,CACF,CAAC,EAGD,EAAQ,SAAS,CAAU,EAC3B,EAAQ,SAAS,EAAY,CAAG,EAChC,EAAQ,SAAS,EAAY,CAAG,EAChC,EAAQ,SAAS,EAAc,CAAG,EAClC,EAAQ,SAAS,EAAiB,CAAG,EAErC,EAAO,OAAO,UAAW,GAA4B,CAC/C,QAAQ,UAAY,QAAQ,SAAS,IACvC,EAAQ,IAAI,GAAG,EAAG,OAAO,IAAK,MAAO,EAAU,IAAwB,CACrE,IAAM,EACJ,EAAG,OAAO,QAAQ,MAAO,EAAE,EAC3B,EAAI,IAAI,IAAI,QAAY,OAAO,IAAI,EAAG,QAAQ,EAAG,EAAE,EAC/C,EAAM,MAAM,MAAM,EAAK,CAC3B,OAAQ,EAAI,OACZ,QAAS,CAEP,IAAK,EAAI,MAAM,IACf,GAAI,EAAG,SAAW,CAAC,CACrB,EACA,KAAM,CAAC,MAAO,MAAM,EAAE,SAAS,EAAI,MAAM,EAAI,EAAI,IAAM,IAAA,EACzD,CAAC,EAGD,GAFA,EAAM,QAAQ,OAAO,YAAY,EAAI,OAAO,CAAC,EAC7C,EAAM,OAAO,EAAI,MAAM,EACnB,EAAI,QAAQ,IAAI,cAAc,GAAG,aAAa,OAAO,EAGvD,OAAO,MAFY,EAAI,KAAK,EAI9B,GAAI,EAAI,QAAQ,IAAI,cAAc,GAAG,WAAW,OAAO,EAGrD,OAAO,MAFY,EAAI,KAAK,EAK9B,IAAM,EAAc,MAAM,MADP,EAAI,KAAK,GACG,YAAY,EAE3C,OADmB,OAAO,KAAK,CACf,CAClB,CAAC,EAED,EAAQ,SAAS,EAAO,CACtB,SAAU,EAAG,OACb,OAAQ,EAAG,OACX,MAAO,GACP,WAAY,KAAO,IAAa,CAC9B,EAAI,QAAQ,IAAM,EAAI,SAAS,UAAU,MAAM,IAC/C,OAAO,KAAK,EAAG,SAAW,CAAC,CAAC,GAAG,QAC5B,GAAU,EAAI,QAAQ,GAAQ,EAAG,QAAQ,EAC5C,CACF,CACF,CAAC,CAEL,CAAC,CACH,CACA,IAAA,EAAe,EAAG,EAAQ,CACxB,KAAM,wBACR,CAAC"}

package/dist/modules/auth/auth.route.js

@@ -0,0 +1,2 @@
+import"../../errors.js";import e from"../../shared/services/getIP.js";import"../../plugins/auth/funcs/authorizeUser.js";import t from"./services/login.js";import n from"./services/loginPage.js";import r from"./services/logout.js";import i from"./services/verifyTwoFactor.js";import a from"./services/recoverTwoFactor.js";import o from"./services/resetTwoFactor.js";import s from"./services/authorizeOAuth.js";import c from"./services/issueOAuthToken.js";import l from"./services/getCurrentUser.js";import u from"./services/getAccessGroup.js";import d from"./services/setAccessGroup.js";import f from"./services/getAccessUser.js";import p from"./services/setAccessUser.js";import m from"./services/loginPageTwoFactor.js";import h from"./services/qrCodetwoFactor.js";import g from"./services/updateCurrentUserInfo.js";import"./services/index.js";import{accessGroupPostSchema as _,accessGroupSchema as v,accessUserPostSchema as y,accessUserSchema as b,authorizeOAuthSchema as x,issueOAuthTokenSchema as S,loginPageTwoFactorSchema as C,recoverTwoFactorSchema as w,resetTwoFactorSchema as T,updateCurrentUserInfo as E,verifyTwoFactorSchema as D}from"./auth.schema.js";const O=[`core`,`auth`],k=`fastify-table`,A={config:{policy:`L0`,tags:O,package:k}},j={config:{policy:`L1`,tags:O,package:k}},M={config:{policy:`L1`,role:`admin`,tags:O,package:k}};function N(O){process.env.CUSTOM_AUTH_ROUTES!==`true`&&(process.platform===`win32`&&process.env.DEBUG_AUTH===`true`&&(O.get(`/api/login`,async(e,n)=>t(e,n)),O.get(`/logout`,async(e,t)=>r(e,t))),O.post(`/api/login`,async(e,n)=>t(e,n)),O.post(`/api/logout`,async(e,t)=>r(e,t)),!O.hasRoute({method:`GET`,url:`/login`})&&process.env.DISABLE_AUTH!==`true`&&process.env.CUSTOM_LOGIN_PAGE!==`true`&&O.get(`/login`,{...A,schema:{}},async(e,t)=>n(e,t)),O.post(`/2factor/verify`,{...j,schema:D},async e=>{let{hostname:t,protocol:n,headers:r,user:a,body:o}=e,s=await i({hostname:t,protocol:n,referer:r.referer,code:o.code,uid:a.uid,userType:a.user_type,twofa:a.twofa,email:a.email},O.ctx);return e.session.secondFactorPassed=!0,s}),O.post(`/2factor/recovery`,{...j,schema:w},async({hostname:e,protocol:t,body:n,user:r})=>await a({hostname:e,protocol:t,uid:r.uid,userType:r.user_type,twofa:r.twofa,email:r.email,code:n.code},O.ctx)),O.get(`/2factor/reset`,{...M,schema:T},async({query:e})=>o({uid:e.uid},O.ctx)),!O.hasRoute({method:`GET`,url:`/2factor`})&&process.env.DISABLE_AUTH!==`true`&&process.env.CUSTOM_TWOFACTOR_LOGIN_PAGE!==`true`&&O.get(`/2factor`,{...j,schema:C},async(e,t)=>{let n=await m({secondFactorPassed:e.session?.secondFactorPassed,hostname:e.hostname,protocol:e.protocol,recovery:!!e.query.recovery,uid:e.user.uid},O.ctx);return t.headers(n.headers).send(n.data)}),O.hasRoute({method:`GET`,url:`/2factor/qr`})||O.get(`/2factor/qrcode`,{...j,schema:{}},async({user:e},t)=>{let n=await h({uid:e.uid},O.ctx);return t.headers(n.headers).send(n.data)}),O.post(`/oauth/authorize`,{...A,schema:x},async(t,n)=>{let{body:r}=t,i=await s({ip:e(t),response_type:r.response_type,client_id:r.client_id,redirect_uri:r.redirect_uri,scope:r.scope},O.ctx);return i&&typeof i==`object`&&i.redirectUrl?n.redirect(i.redirectUrl):i}),O.post(`/oauth/token`,{...A,schema:S},async t=>await c({ip:e(t),req:t,query:t.query,body:t.body,url:t.url,originalUrl:t.originalUrl,headers:t.headers,method:`POST`,routeOptions:t.routeOptions,grant_type:t.body.grant_type,client_id:t.body.client_id,code:t.body.code,redirect_uri:t.body.redirect_uri},O.ctx)),O.get(`/user`,{...A,schema:{}},async({session:e,cookies:t})=>l({session:e,cookies:t},O.ctx)),O.hasRoute({method:`POST`,url:`/user`})||O.post(`/user`,{...j,schema:E},async({body:e,user:t})=>g({uid:t?.uid,payload:e},O.ctx)),O.get(`/access/group/:id`,{...M,schema:v},async({params:e,user:t})=>u({id:e.id,uid:t.uid,userType:t.user_type},O.ctx)),O.post(`/access/group/:id`,{...j,schema:_},async({params:e,body:t,user:n})=>d({id:e.id,uid:n.uid,userType:n.user_type,users:t.users,routes:t.routes},O.ctx)),O.get(`/access/user/:id`,{...j,schema:b},async({params:e,user:t})=>f({id:e.id,uid:t.uid,userType:t.user_type},O.ctx)),O.post(`/access/user/:id`,{...j,schema:y},async({params:e,body:t,user:n})=>p({id:e.id,uid:n.uid,userType:n.user_type,routes:t.routes},O.ctx)))}export{N as default};
+//# sourceMappingURL=auth.route.js.map

package/dist/modules/auth/auth.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.route.js","names":["services.login","services.logout","services.loginPage","schemas.verifyTwoFactorSchema","services.verifyTwoFactor","schemas.recoverTwoFactorSchema","services.recoverTwoFactor","schemas.resetTwoFactorSchema","services.resetTwoFactor","schemas.loginPageTwoFactorSchema","services.loginPageTwoFactor","services.qrCodetwoFactor","schemas.authorizeOAuthSchema","services.authorizeOAuth","schemas.issueOAuthTokenSchema","services.issueOAuthToken","services.getCurrentUser","schemas.updateCurrentUserInfo","services.updateCurrentUserInfo","schemas.accessGroupSchema","services.getAccessGroup","schemas.accessGroupPostSchema","services.setAccessGroup","schemas.accessUserSchema","services.getAccessUser","schemas.accessUserPostSchema","services.setAccessUser"],"sources":["../../../src/modules/auth/auth.route.ts"],"sourcesContent":["import * as services from \"./services/index.js\";\r\n\r\nimport * as schemas from \"./auth.schema.js\";\r\nimport authorizeUser from \"../../plugins/auth/funcs/authorizeUser.js\";\r\n\r\nimport { BadRequestError } from \"../../errors.js\";\r\n\r\nimport getIP from \"../../shared/services/getIP.js\";\r\n\r\nconst tags = [\"core\", \"auth\"];\r\nconst packageName = \"fastify-table\";\r\nconst publicParams = { config: { policy: \"L0\", tags, package: packageName } };\r\nconst privateParams = { config: { policy: \"L1\", tags, package: packageName } };\r\nconst adminParams = {\r\n  config: { policy: \"L1\", role: \"admin\", tags, package: packageName },\r\n};\r\n\r\nexport default function authRoutes(app: any) {\r\n  if (process.env.CUSTOM_AUTH_ROUTES === \"true\") {\r\n    return;\r\n  }\r\n\r\n  if (process.platform === \"win32\" && process.env.DEBUG_AUTH === \"true\") {\r\n    app.get(\"/api/login\", async (req: any, reply: any) => {\r\n      return services.login(req, reply);\r\n    });\r\n\r\n    app.get(\"/logout\", async (req: any, reply: any) => {\r\n      return services.logout(req, reply);\r\n    });\r\n  }\r\n\r\n  app.post(\"/api/login\", async (req: any, reply: any) => {\r\n    return services.login(req, reply);\r\n  });\r\n\r\n  app.post(\"/api/logout\", async (req: any, reply: any) => {\r\n    return services.logout(req, reply);\r\n  });\r\n\r\n  // login page\r\n  if (\r\n    !app.hasRoute({ method: \"GET\", url: \"/login\" }) &&\r\n    process.env.DISABLE_AUTH !== \"true\" &&\r\n    process.env.CUSTOM_LOGIN_PAGE !== \"true\"\r\n  ) {\r\n    app.get(\r\n      \"/login\",\r\n      { ...publicParams, schema: {} },\r\n      async (req: any, reply: any) => {\r\n        return services.loginPage(req, reply);\r\n      }\r\n    );\r\n  }\r\n\r\n  if (false) {\r\n    app.post(\r\n      \"/registration\",\r\n      { ...publicParams, schema: schemas.registrationSchema },\r\n      async (req: any) => {\r\n        const { password, email, login, first_name, last_name, phone } =\r\n          req.body || {};\r\n        const { user: newUser, authType } = await services.register(\r\n          {\r\n            password,\r\n            email,\r\n            login,\r\n            first_name,\r\n            last_name,\r\n            phone,\r\n          },\r\n          app.ctx\r\n        );\r\n        const result = await authorizeUser(newUser, req, authType);\r\n        return result;\r\n      }\r\n    );\r\n\r\n    app.get(\r\n      \"/recovery\",\r\n      { ...publicParams, schema: {} },\r\n      async ({ hostname, protocol, query }: any, reply: any) => {\r\n        if (!!query.noredirect) {\r\n        }\r\n        const result = await services.recover(\r\n          {\r\n            hostname,\r\n            protocol,\r\n            code: query.code,\r\n            email: query.email,\r\n            password: query.password,\r\n            repassword: query.repassword,\r\n            nocache: !!query.nocache,\r\n            noredirect: !!query.noredirect,\r\n          },\r\n          app.ctx\r\n        );\r\n\r\n        if (result.redirectUrl) {\r\n          return reply.redirect(result.redirectUrl);\r\n        }\r\n        if (result.statusCode === 200) {\r\n          return result;\r\n        }\r\n        throw BadRequestError(result.message);\r\n      }\r\n    );\r\n  }\r\n\r\n  // /2factor/verify\r\n  app.post(\r\n    \"/2factor/verify\",\r\n    { ...privateParams, schema: schemas.verifyTwoFactorSchema },\r\n    async (req: any) => {\r\n      const { hostname, protocol, headers, user, body } = req;\r\n      const result = await services.verifyTwoFactor(\r\n        {\r\n          hostname,\r\n          protocol,\r\n          referer: headers.referer,\r\n          code: body.code,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n          twofa: user.twofa,\r\n          email: user.email,\r\n        },\r\n        app.ctx\r\n      );\r\n      req.session.secondFactorPassed = true;\r\n      return result;\r\n    }\r\n  );\r\n\r\n  // /2factor/recovery\r\n  app.post(\r\n    \"/2factor/recovery\",\r\n    { ...privateParams, schema: schemas.recoverTwoFactorSchema },\r\n    async ({ hostname, protocol, body, user }: any) => {\r\n      const result = await services.recoverTwoFactor(\r\n        {\r\n          hostname,\r\n          protocol,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n          twofa: user.twofa,\r\n          email: user.email,\r\n          code: body.code,\r\n        },\r\n        app.ctx\r\n      );\r\n      return result;\r\n    }\r\n  );\r\n\r\n  // /2factor/reset\r\n  app.get(\r\n    \"/2factor/reset\",\r\n    { ...adminParams, schema: schemas.resetTwoFactorSchema },\r\n    async ({ query }: any) => {\r\n      return services.resetTwoFactor(\r\n        {\r\n          uid: query.uid,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  if (\r\n    !app.hasRoute({ method: \"GET\", url: \"/2factor\" }) &&\r\n    process.env.DISABLE_AUTH !== \"true\" &&\r\n    process.env.CUSTOM_TWOFACTOR_LOGIN_PAGE !== \"true\"\r\n  ) {\r\n    app.get(\r\n      \"/2factor\",\r\n      { ...privateParams, schema: schemas.loginPageTwoFactorSchema },\r\n      async (req: any, reply: any) => {\r\n        const result = await services.loginPageTwoFactor(\r\n          {\r\n            secondFactorPassed: req.session?.secondFactorPassed,\r\n            hostname: req.hostname,\r\n            protocol: req.protocol,\r\n            recovery: !!req.query.recovery,\r\n            uid: req.user.uid,\r\n          },\r\n          app.ctx\r\n        );\r\n        return reply.headers(result.headers).send(result.data);\r\n      }\r\n    );\r\n  }\r\n\r\n  // /2factor/qr\r\n  if (!app.hasRoute({ method: \"GET\", url: \"/2factor/qr\" })) {\r\n    app.get(\r\n      \"/2factor/qrcode\",\r\n      { ...privateParams, schema: {} },\r\n      async ({ user }: any, reply: any) => {\r\n        const result = await services.qrCodetwoFactor(\r\n          {\r\n            uid: user.uid,\r\n          },\r\n          app.ctx\r\n        );\r\n        return reply.headers(result.headers).send(result.data);\r\n      }\r\n    );\r\n  }\r\n\r\n  app.post(\r\n    \"/oauth/authorize\",\r\n    { ...publicParams, schema: schemas.authorizeOAuthSchema },\r\n    async (req: any, reply: any) => {\r\n      const { body } = req;\r\n      const ip = getIP(req);\r\n      const result = await services.authorizeOAuth(\r\n        {\r\n          ip,\r\n          response_type: body.response_type,\r\n          client_id: body.client_id,\r\n          redirect_uri: body.redirect_uri,\r\n          scope: body.scope,\r\n        },\r\n        app.ctx\r\n      );\r\n      if (result && typeof result === \"object\" && result.redirectUrl) {\r\n        return reply.redirect(result.redirectUrl);\r\n      }\r\n      return result;\r\n    }\r\n  );\r\n\r\n  app.post(\r\n    \"/oauth/token\",\r\n    { ...publicParams, schema: schemas.issueOAuthTokenSchema },\r\n    async (req: any) => {\r\n      const ip = getIP(req);\r\n      const result = await services.issueOAuthToken(\r\n        {\r\n          ip,\r\n          req,\r\n          query: req.query,\r\n          body: req.body,\r\n          url: req.url,\r\n          originalUrl: req.originalUrl,\r\n          headers: req.headers,\r\n          method: \"POST\",\r\n          routeOptions: req.routeOptions,\r\n          grant_type: req.body.grant_type,\r\n          client_id: req.body.client_id,\r\n          code: req.body.code,\r\n          redirect_uri: req.body.redirect_uri,\r\n        },\r\n        app.ctx\r\n      );\r\n      return result;\r\n    }\r\n  );\r\n\r\n  app.get(\r\n    \"/user\",\r\n    { ...publicParams, schema: {} },\r\n    async ({ session, cookies }: any) => {\r\n      return services.getCurrentUser(\r\n        {\r\n          session,\r\n          cookies,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  if (!app.hasRoute({ method: \"POST\", url: \"/user\" })) {\r\n    app.post(\r\n      \"/user\",\r\n      { ...privateParams, schema: schemas.updateCurrentUserInfo },\r\n      async ({ body, user }: any) => {\r\n        return services.updateCurrentUserInfo(\r\n          {\r\n            uid: user?.uid,\r\n            payload: body,\r\n          },\r\n          app.ctx\r\n        );\r\n      }\r\n    );\r\n  }\r\n\r\n  app.get(\r\n    \"/access/group/:id\",\r\n    {\r\n      ...adminParams,\r\n      schema: schemas.accessGroupSchema,\r\n    },\r\n    async ({ params, user }: any) => {\r\n      return services.getAccessGroup(\r\n        {\r\n          id: params.id,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  app.post(\r\n    \"/access/group/:id\",\r\n    { ...privateParams, schema: schemas.accessGroupPostSchema },\r\n    async ({ params, body, user }: any) => {\r\n      return services.setAccessGroup(\r\n        {\r\n          id: params.id,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n          users: body.users,\r\n          routes: body.routes,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  app.get(\r\n    \"/access/user/:id\",\r\n    { ...privateParams, schema: schemas.accessUserSchema },\r\n    async ({ params, user }: any) => {\r\n      return services.getAccessUser(\r\n        {\r\n          id: params.id,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  app.post(\r\n    \"/access/user/:id\",\r\n    { ...privateParams, schema: schemas.accessUserPostSchema },\r\n    async ({ params, body, user }: any) => {\r\n      return services.setAccessUser(\r\n        {\r\n          id: params.id,\r\n          uid: user.uid,\r\n          userType: user.user_type,\r\n          routes: body.routes,\r\n        },\r\n        app.ctx\r\n      );\r\n    }\r\n  );\r\n\r\n  /*\r\n    if (\r\n      !app.hasRoute({ method: \"GET\", url: \"/authorizeByEusign\" }) &&\r\n      process.env[\"auth.customGovId\"] !== \"true\"\r\n    ) {\r\n      // /auth/by_data\r\n      app.get(\r\n        \"/authorizeByEusign\",\r\n        publicParams,\r\n        async (req: any, reply: any) => {\r\n          const ip = getIP(req);\r\n          const result = await services.authorizeByEusign(\r\n            {\r\n              ip,\r\n              req,\r\n              queryData: req.query.data,\r\n              queryType: req.query.type,\r\n              referer: req.headers.referer,\r\n            },\r\n            app.ctx\r\n          );\r\n          if (result && typeof result === \"object\" && result.redirectUrl) {\r\n            return reply.redirect(result.redirectUrl);\r\n          }\r\n          return result;\r\n        }\r\n      );\r\n    }\r\n    app.get(\r\n      \"/getAccessInterface\",\r\n      { ...privateParams, schema: {} },\r\n      async ({}: any) => {\r\n        return services.getAccessInterface(undefined, app.ctx);\r\n      }\r\n    );\r\n    app.get(\r\n      \"/getUserTokens\",\r\n      { ...privateParams, schema: {} },\r\n      async ({ params, user }: any) => {\r\n        return services.getUserTokens(\r\n          { token: params.token, uid: user.uid },\r\n          app.ctx\r\n        );\r\n      }\r\n    );\r\n  */\r\n}\r\n"],"mappings":"2oCASA,MAAM,EAAO,CAAC,OAAQ,MAAM,EACtB,EAAc,gBACd,EAAe,CAAE,OAAQ,CAAE,OAAQ,KAAM,OAAM,QAAS,CAAY,CAAE,EACtE,EAAgB,CAAE,OAAQ,CAAE,OAAQ,KAAM,OAAM,QAAS,CAAY,CAAE,EACvE,EAAc,CAClB,OAAQ,CAAE,OAAQ,KAAM,KAAM,QAAS,OAAM,QAAS,CAAY,CACpE,EAEA,SAAwB,EAAW,EAAU,CACvC,QAAQ,IAAI,qBAAuB,SAInC,QAAQ,WAAa,SAAW,QAAQ,IAAI,aAAe,SAC7D,EAAI,IAAI,aAAc,MAAO,EAAU,IAC9BA,EAAe,EAAK,CAAK,CACjC,EAED,EAAI,IAAI,UAAW,MAAO,EAAU,IAC3BC,EAAgB,EAAK,CAAK,CAClC,GAGH,EAAI,KAAK,aAAc,MAAO,EAAU,IAC/BD,EAAe,EAAK,CAAK,CACjC,EAED,EAAI,KAAK,cAAe,MAAO,EAAU,IAChCC,EAAgB,EAAK,CAAK,CAClC,EAIC,CAAC,EAAI,SAAS,CAAE,OAAQ,MAAO,IAAK,QAAS,CAAC,GAC9C,QAAQ,IAAI,eAAiB,QAC7B,QAAQ,IAAI,oBAAsB,QAElC,EAAI,IACF,SACA,CAAE,GAAG,EAAc,OAAQ,CAAC,CAAE,EAC9B,MAAO,EAAU,IACRC,EAAmB,EAAK,CAAK,CAExC,EA0DF,EAAI,KACF,kBACA,CAAE,GAAG,EAAe,OAAQC,CAA8B,EAC1D,KAAO,IAAa,CAClB,GAAM,CAAE,WAAU,WAAU,UAAS,OAAM,QAAS,EAC9C,EAAS,MAAMC,EACnB,CACE,WACA,WACA,QAAS,EAAQ,QACjB,KAAM,EAAK,KACX,IAAK,EAAK,IACV,SAAU,EAAK,UACf,MAAO,EAAK,MACZ,MAAO,EAAK,KACd,EACA,EAAI,GACN,EAEA,MADA,GAAI,QAAQ,mBAAqB,GAC1B,CACT,CACF,EAGA,EAAI,KACF,oBACA,CAAE,GAAG,EAAe,OAAQC,CAA+B,EAC3D,MAAO,CAAE,WAAU,WAAU,OAAM,UAa1B,MAZcC,EACnB,CACE,WACA,WACA,IAAK,EAAK,IACV,SAAU,EAAK,UACf,MAAO,EAAK,MACZ,MAAO,EAAK,MACZ,KAAM,EAAK,IACb,EACA,EAAI,GACN,CAGJ,EAGA,EAAI,IACF,iBACA,CAAE,GAAG,EAAa,OAAQC,CAA6B,EACvD,MAAO,CAAE,WACAC,EACL,CACE,IAAK,EAAM,GACb,EACA,EAAI,GACN,CAEJ,EAGE,CAAC,EAAI,SAAS,CAAE,OAAQ,MAAO,IAAK,UAAW,CAAC,GAChD,QAAQ,IAAI,eAAiB,QAC7B,QAAQ,IAAI,8BAAgC,QAE5C,EAAI,IACF,WACA,CAAE,GAAG,EAAe,OAAQC,CAAiC,EAC7D,MAAO,EAAU,IAAe,CAC9B,IAAM,EAAS,MAAMC,EACnB,CACE,mBAAoB,EAAI,SAAS,mBACjC,SAAU,EAAI,SACd,SAAU,EAAI,SACd,SAAU,CAAC,CAAC,EAAI,MAAM,SACtB,IAAK,EAAI,KAAK,GAChB,EACA,EAAI,GACN,EACA,OAAO,EAAM,QAAQ,EAAO,OAAO,EAAE,KAAK,EAAO,IAAI,CACvD,CACF,EAIG,EAAI,SAAS,CAAE,OAAQ,MAAO,IAAK,aAAc,CAAC,GACrD,EAAI,IACF,kBACA,CAAE,GAAG,EAAe,OAAQ,CAAC,CAAE,EAC/B,MAAO,CAAE,QAAa,IAAe,CACnC,IAAM,EAAS,MAAMC,EACnB,CACE,IAAK,EAAK,GACZ,EACA,EAAI,GACN,EACA,OAAO,EAAM,QAAQ,EAAO,OAAO,EAAE,KAAK,EAAO,IAAI,CACvD,CACF,EAGF,EAAI,KACF,mBACA,CAAE,GAAG,EAAc,OAAQC,CAA6B,EACxD,MAAO,EAAU,IAAe,CAC9B,GAAM,CAAE,QAAS,EAEX,EAAS,MAAMC,EACnB,CACE,GAHO,EAAM,CAGb,EACA,cAAe,EAAK,cACpB,UAAW,EAAK,UAChB,aAAc,EAAK,aACnB,MAAO,EAAK,KACd,EACA,EAAI,GACN,EAIA,OAHI,GAAU,OAAO,GAAW,UAAY,EAAO,YAC1C,EAAM,SAAS,EAAO,WAAW,EAEnC,CACT,CACF,EAEA,EAAI,KACF,eACA,CAAE,GAAG,EAAc,OAAQC,CAA8B,EACzD,KAAO,IAoBE,MAlBcC,EACnB,CACE,GAHO,EAAM,CAGb,EACA,MACA,MAAO,EAAI,MACX,KAAM,EAAI,KACV,IAAK,EAAI,IACT,YAAa,EAAI,YACjB,QAAS,EAAI,QACb,OAAQ,OACR,aAAc,EAAI,aAClB,WAAY,EAAI,KAAK,WACrB,UAAW,EAAI,KAAK,UACpB,KAAM,EAAI,KAAK,KACf,aAAc,EAAI,KAAK,YACzB,EACA,EAAI,GACN,CAGJ,EAEA,EAAI,IACF,QACA,CAAE,GAAG,EAAc,OAAQ,CAAC,CAAE,EAC9B,MAAO,CAAE,UAAS,aACTC,EACL,CACE,UACA,SACF,EACA,EAAI,GACN,CAEJ,EAEK,EAAI,SAAS,CAAE,OAAQ,OAAQ,IAAK,OAAQ,CAAC,GAChD,EAAI,KACF,QACA,CAAE,GAAG,EAAe,OAAQC,CAA8B,EAC1D,MAAO,CAAE,OAAM,UACNC,EACL,CACE,IAAK,GAAM,IACX,QAAS,CACX,EACA,EAAI,GACN,CAEJ,EAGF,EAAI,IACF,oBACA,CACE,GAAG,EACH,OAAQC,CACV,EACA,MAAO,CAAE,SAAQ,UACRC,EACL,CACE,GAAI,EAAO,GACX,IAAK,EAAK,IACV,SAAU,EAAK,SACjB,EACA,EAAI,GACN,CAEJ,EAEA,EAAI,KACF,oBACA,CAAE,GAAG,EAAe,OAAQC,CAA8B,EAC1D,MAAO,CAAE,SAAQ,OAAM,UACdC,EACL,CACE,GAAI,EAAO,GACX,IAAK,EAAK,IACV,SAAU,EAAK,UACf,MAAO,EAAK,MACZ,OAAQ,EAAK,MACf,EACA,EAAI,GACN,CAEJ,EAEA,EAAI,IACF,mBACA,CAAE,GAAG,EAAe,OAAQC,CAAyB,EACrD,MAAO,CAAE,SAAQ,UACRC,EACL,CACE,GAAI,EAAO,GACX,IAAK,EAAK,IACV,SAAU,EAAK,SACjB,EACA,EAAI,GACN,CAEJ,EAEA,EAAI,KACF,mBACA,CAAE,GAAG,EAAe,OAAQC,CAA6B,EACzD,MAAO,CAAE,SAAQ,OAAM,UACdC,EACL,CACE,GAAI,EAAO,GACX,IAAK,EAAK,IACV,SAAU,EAAK,UACf,OAAQ,EAAK,MACf,EACA,EAAI,GACN,CAEJ,EAgDF"}

package/dist/modules/auth/auth.schema.js

@@ -0,0 +1,2 @@
+const e={type:`string`,pattern:`^[a-zA-Zа-яА-ЯіІїЇєЄґҐ'\\s]+$`},t={type:`string`,pattern:`^[a-zA-Z-_0-9]+$`},n={type:`string`,minLength:6,maxLength:100},r={params:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}},required:[`id`]}},i={params:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}},required:[`id`]}},a={params:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}},required:[`id`]},body:{type:`object`,properties:{users:{type:`array`,items:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}}}},routes:{type:`array`,items:{type:`object`,properties:{path:{type:`string`,pattern:`^([\\d\\w._-]+)$`},resource:{type:`string`,pattern:`^([\\d\\w._-]+)$`},actions:{type:`array`,items:{type:`string`,enum:[`read`,`create`,`update`,`delete`]}}}}}}}},o={params:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}},required:[`id`]},body:{type:`object`,properties:{users:{type:`array`,items:{type:`object`,properties:{id:{type:`string`,pattern:`^([\\d\\w._-]+)$`}}}},routes:{type:`array`,items:{type:`object`,properties:{path:{type:`string`,pattern:`^([\\d\\w._-]+)$`},resource:{type:`string`,pattern:`^([\\d\\w._-]+)$`},actions:{type:`array`,items:{type:`string`,enum:[`read`,`create`,`update`,`delete`]}}}}}}}},s={body:{type:`object`,additionalProperties:!1,properties:{code:{type:`string`,pattern:`^([\\d]{6})$`}}}},c={body:{type:`object`,additionalProperties:!1,properties:{code:{type:`string`,maxLength:100}}}},l={querystring:{type:`object`,additionalProperties:!1,properties:{uid:{type:`string`,pattern:`^([\\d\\w]+)$`}}}},u={querystring:{type:`object`,additionalProperties:!1,properties:{recovery:{type:`string`,enum:[`1`]}}}},d={body:{type:`object`,additionalProperties:!1,required:[`response_type`,`client_id`],properties:{response_type:{type:`string`,enum:[`code`]},client_id:{type:`string`,pattern:`^([\\d\\w]+)$`},redirect_uri:{type:`string`,pattern:`^([\\d\\w_.-]+)$`},scope:{type:`string`}}}},f={body:{type:`object`,additionalProperties:!1,required:[`grant_type`,`client_id`,`code`],properties:{grant_type:{type:`string`,enum:[`authorization_code`]},client_id:{type:`string`,pattern:`^([\\d\\w]+)$`},redirect_uri:{type:`string`,pattern:`^([\\d\\w_.-]+)$`},code:{type:`string`,pattern:`^([\\d\\w_.-]+)$`}}}},p={body:{type:`object`,additionalProperties:!1,properties:{twofa:{type:`boolean`},user_rnokpp:{type:`string`,pattern:`^([\\d]+)$`,maxLength:10},login:t,password:n,user_name:e,sur_name:e,father_name:e,email:{type:`string`,format:`email`},phone:{type:`string`,maxLength:20},avatar:{type:`string`},enabled:{type:`boolean`}}}};export{a as accessGroupPostSchema,r as accessGroupSchema,o as accessUserPostSchema,i as accessUserSchema,d as authorizeOAuthSchema,f as issueOAuthTokenSchema,u as loginPageTwoFactorSchema,c as recoverTwoFactorSchema,l as resetTwoFactorSchema,p as updateCurrentUserInfo,s as verifyTwoFactorSchema};
+//# sourceMappingURL=auth.schema.js.map

package/dist/modules/auth/auth.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.schema.js","names":[],"sources":["../../../src/modules/auth/auth.schema.ts"],"sourcesContent":["export default null;\r\n\r\nconst nameSchema = {\r\n  type: \"string\",\r\n  pattern: \"^([А-Яа-яҐґЄєІіЇї\\\\d\\\\w\\\\s_.-]+)$\",\r\n};\r\n\r\nconst userNameSchema = {\r\n  type: \"string\",\r\n  pattern: \"^[a-zA-Zа-яА-ЯіІїЇєЄґҐ'\\\\s]+$\",\r\n};\r\nconst loginSchema = { type: \"string\", pattern: \"^[a-zA-Z-_0-9]+$\" };\r\nconst passwordSchema = { type: \"string\", minLength: 6, maxLength: 100 };\r\n\r\nexport const registrationSchema = {\r\n  body: {\r\n    type: \"object\",\r\n    required: [\"password\"],\r\n    properties: {\r\n      password: passwordSchema,\r\n      email: { type: \"string\", format: \"email\" },\r\n      login: loginSchema,\r\n      first_name: userNameSchema,\r\n      last_name: userNameSchema,\r\n    },\r\n  },\r\n};\r\n\r\nexport const accessGroupSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    properties: {\r\n      id: { type: \"string\", pattern: \"^([\\\\d\\\\w._-]+)$\" },\r\n    },\r\n    required: [\"id\"],\r\n  },\r\n};\r\n\r\nexport const accessUserSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    properties: {\r\n      id: { type: \"string\", pattern: \"^([\\\\d\\\\w._-]+)$\" },\r\n    },\r\n    required: [\"id\"],\r\n  },\r\n};\r\n\r\nexport const accessInterfaceSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    properties: {\r\n      name: { type: \"string\", pattern: \"^([\\\\d\\\\w._-]+)$\" },\r\n    },\r\n    required: [\"name\"],\r\n  },\r\n};\r\n\r\nexport const accessGroupPostSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    properties: {\r\n      id: { type: \"string\", pattern: \"^([\\\\d\\\\w._-]+)$\" },\r\n    },\r\n    required: [\"id\"],\r\n  },\r\n  body: {\r\n    type: \"object\",\r\n    properties: {\r\n      users: {\r\n        type: \"array\",\r\n        items: {\r\n          type: \"object\",\r\n          properties: {\r\n            id: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n          },\r\n        },\r\n      },\r\n      routes: {\r\n        type: \"array\",\r\n        items: {\r\n          type: \"object\",\r\n          properties: {\r\n            path: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n            resource: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n            actions: {\r\n              type: \"array\",\r\n              items: {\r\n                type: \"string\",\r\n                enum: [\"read\", \"create\", \"update\", \"delete\"],\r\n              },\r\n            },\r\n          },\r\n        },\r\n      },\r\n    },\r\n  },\r\n};\r\n\r\nexport const accessUserPostSchema = {\r\n  params: {\r\n    type: \"object\",\r\n    properties: {\r\n      id: { type: \"string\", pattern: \"^([\\\\d\\\\w._-]+)$\" },\r\n    },\r\n    required: [\"id\"],\r\n  },\r\n  body: {\r\n    type: \"object\",\r\n    properties: {\r\n      users: {\r\n        type: \"array\",\r\n        items: {\r\n          type: \"object\",\r\n          properties: {\r\n            id: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n          },\r\n        },\r\n      },\r\n      routes: {\r\n        type: \"array\",\r\n        items: {\r\n          type: \"object\",\r\n          properties: {\r\n            path: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n            resource: {\r\n              type: \"string\",\r\n              pattern: \"^([\\\\d\\\\w._-]+)$\",\r\n            },\r\n            actions: {\r\n              type: \"array\",\r\n              items: {\r\n                type: \"string\",\r\n                enum: [\"read\", \"create\", \"update\", \"delete\"],\r\n              },\r\n            },\r\n          },\r\n        },\r\n      },\r\n    },\r\n  },\r\n};\r\n\r\nexport const verifyTwoFactorSchema = {\r\n  body: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      code: { type: \"string\", pattern: \"^([\\\\d]{6})$\" },\r\n    },\r\n  },\r\n};\r\n\r\nexport const recoverTwoFactorSchema = {\r\n  body: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      code: { type: \"string\", maxLength: 100 },\r\n    },\r\n  },\r\n};\r\n\r\nexport const resetTwoFactorSchema = {\r\n  querystring: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      uid: { type: \"string\", pattern: \"^([\\\\d\\\\w]+)$\" },\r\n    },\r\n  },\r\n};\r\n\r\nexport const loginPageTwoFactorSchema = {\r\n  querystring: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      recovery: { type: \"string\", enum: [\"1\"] },\r\n    },\r\n  },\r\n};\r\n\r\nexport const authorizeOAuthSchema = {\r\n  body: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    required: [\"response_type\", \"client_id\"],\r\n    properties: {\r\n      response_type: { type: \"string\", enum: [\"code\"] },\r\n      client_id: { type: \"string\", pattern: \"^([\\\\d\\\\w]+)$\" },\r\n      redirect_uri: { type: \"string\", pattern: \"^([\\\\d\\\\w_.-]+)$\" },\r\n      scope: { type: \"string\" },\r\n    },\r\n  },\r\n};\r\n\r\nexport const issueOAuthTokenSchema = {\r\n  body: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    required: [\"grant_type\", \"client_id\", \"code\"],\r\n    properties: {\r\n      grant_type: { type: \"string\", enum: [\"authorization_code\"] },\r\n      client_id: { type: \"string\", pattern: \"^([\\\\d\\\\w]+)$\" },\r\n      redirect_uri: { type: \"string\", pattern: \"^([\\\\d\\\\w_.-]+)$\" },\r\n      code: { type: \"string\", pattern: \"^([\\\\d\\\\w_.-]+)$\" },\r\n    },\r\n  },\r\n};\r\n\r\nexport const updateCurrentUserInfo = {\r\n  body: {\r\n    type: \"object\",\r\n    additionalProperties: false,\r\n    properties: {\r\n      twofa: { type: \"boolean\" },\r\n      user_rnokpp: { type: \"string\", pattern: \"^([\\\\d]+)$\", maxLength: 10 },\r\n      login: loginSchema,\r\n      password: passwordSchema,\r\n      user_name: userNameSchema,\r\n      sur_name: userNameSchema,\r\n      father_name: userNameSchema,\r\n      email: { type: \"string\", format: \"email\" },\r\n      phone: { type: \"string\", maxLength: 20 },\r\n      avatar: { type: \"string\" },\r\n      enabled: { type: \"boolean\" },\r\n    },\r\n  },\r\n};\r\n"],"mappings":"AAOA,MAAM,EAAiB,CACrB,KAAM,SACN,QAAS,+BACX,EACM,EAAc,CAAE,KAAM,SAAU,QAAS,kBAAmB,EAC5D,EAAiB,CAAE,KAAM,SAAU,UAAW,EAAG,UAAW,GAAI,EAgBzD,EAAoB,CAC/B,OAAQ,CACN,KAAM,SACN,WAAY,CACV,GAAI,CAAE,KAAM,SAAU,QAAS,kBAAmB,CACpD,EACA,SAAU,CAAC,IAAI,CACjB,CACF,EAEa,EAAmB,CAC9B,OAAQ,CACN,KAAM,SACN,WAAY,CACV,GAAI,CAAE,KAAM,SAAU,QAAS,kBAAmB,CACpD,EACA,SAAU,CAAC,IAAI,CACjB,CACF,EAYa,EAAwB,CACnC,OAAQ,CACN,KAAM,SACN,WAAY,CACV,GAAI,CAAE,KAAM,SAAU,QAAS,kBAAmB,CACpD,EACA,SAAU,CAAC,IAAI,CACjB,EACA,KAAM,CACJ,KAAM,SACN,WAAY,CACV,MAAO,CACL,KAAM,QACN,MAAO,CACL,KAAM,SACN,WAAY,CACV,GAAI,CACF,KAAM,SACN,QAAS,kBACX,CACF,CACF,CACF,EACA,OAAQ,CACN,KAAM,QACN,MAAO,CACL,KAAM,SACN,WAAY,CACV,KAAM,CACJ,KAAM,SACN,QAAS,kBACX,EACA,SAAU,CACR,KAAM,SACN,QAAS,kBACX,EACA,QAAS,CACP,KAAM,QACN,MAAO,CACL,KAAM,SACN,KAAM,CAAC,OAAQ,SAAU,SAAU,QAAQ,CAC7C,CACF,CACF,CACF,CACF,CACF,CACF,CACF,EAEa,EAAuB,CAClC,OAAQ,CACN,KAAM,SACN,WAAY,CACV,GAAI,CAAE,KAAM,SAAU,QAAS,kBAAmB,CACpD,EACA,SAAU,CAAC,IAAI,CACjB,EACA,KAAM,CACJ,KAAM,SACN,WAAY,CACV,MAAO,CACL,KAAM,QACN,MAAO,CACL,KAAM,SACN,WAAY,CACV,GAAI,CACF,KAAM,SACN,QAAS,kBACX,CACF,CACF,CACF,EACA,OAAQ,CACN,KAAM,QACN,MAAO,CACL,KAAM,SACN,WAAY,CACV,KAAM,CACJ,KAAM,SACN,QAAS,kBACX,EACA,SAAU,CACR,KAAM,SACN,QAAS,kBACX,EACA,QAAS,CACP,KAAM,QACN,MAAO,CACL,KAAM,SACN,KAAM,CAAC,OAAQ,SAAU,SAAU,QAAQ,CAC7C,CACF,CACF,CACF,CACF,CACF,CACF,CACF,EAEa,EAAwB,CACnC,KAAM,CACJ,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,KAAM,CAAE,KAAM,SAAU,QAAS,cAAe,CAClD,CACF,CACF,EAEa,EAAyB,CACpC,KAAM,CACJ,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,KAAM,CAAE,KAAM,SAAU,UAAW,GAAI,CACzC,CACF,CACF,EAEa,EAAuB,CAClC,YAAa,CACX,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,IAAK,CAAE,KAAM,SAAU,QAAS,eAAgB,CAClD,CACF,CACF,EAEa,EAA2B,CACtC,YAAa,CACX,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,SAAU,CAAE,KAAM,SAAU,KAAM,CAAC,GAAG,CAAE,CAC1C,CACF,CACF,EAEa,EAAuB,CAClC,KAAM,CACJ,KAAM,SACN,qBAAsB,GACtB,SAAU,CAAC,gBAAiB,WAAW,EACvC,WAAY,CACV,cAAe,CAAE,KAAM,SAAU,KAAM,CAAC,MAAM,CAAE,EAChD,UAAW,CAAE,KAAM,SAAU,QAAS,eAAgB,EACtD,aAAc,CAAE,KAAM,SAAU,QAAS,kBAAmB,EAC5D,MAAO,CAAE,KAAM,QAAS,CAC1B,CACF,CACF,EAEa,EAAwB,CACnC,KAAM,CACJ,KAAM,SACN,qBAAsB,GACtB,SAAU,CAAC,aAAc,YAAa,MAAM,EAC5C,WAAY,CACV,WAAY,CAAE,KAAM,SAAU,KAAM,CAAC,oBAAoB,CAAE,EAC3D,UAAW,CAAE,KAAM,SAAU,QAAS,eAAgB,EACtD,aAAc,CAAE,KAAM,SAAU,QAAS,kBAAmB,EAC5D,KAAM,CAAE,KAAM,SAAU,QAAS,kBAAmB,CACtD,CACF,CACF,EAEa,EAAwB,CACnC,KAAM,CACJ,KAAM,SACN,qBAAsB,GACtB,WAAY,CACV,MAAO,CAAE,KAAM,SAAU,EACzB,YAAa,CAAE,KAAM,SAAU,QAAS,aAAc,UAAW,EAAG,EACpE,MAAO,EACP,SAAU,EACV,UAAW,EACX,SAAU,EACV,YAAa,EACb,MAAO,CAAE,KAAM,SAAU,OAAQ,OAAQ,EACzC,MAAO,CAAE,KAAM,SAAU,UAAW,EAAG,EACvC,OAAQ,CAAE,KAAM,QAAS,EACzB,QAAS,CAAE,KAAM,SAAU,CAC7B,CACF,CACF"}

package/dist/modules/auth/providers/totp.js

@@ -0,0 +1,7 @@
+import{GetContext as e}from"../../../core.js";import{BadRequestError as t,ForbiddenError as n}from"../../../errors.js";import r from"node:crypto";import i from"qrcode";import*as a from"otplib";const o=`TOTP`,s=(t,n)=>{let{config:r}=e(),i=r.auth?.[`2fa`]?.prefix||`SOFTPRO`;return`otpauth://totp/${i}:${encodeURIComponent(t.toString())}?secret=${n}&period=30&digits=6&algorithm=SHA1&issuer=${encodeURIComponent(i)}`},c=async({uid:e,pg:t})=>({rowCount:await t.query(`update admin.users_social_auth set enabled=true where uid = $1 and social_auth_type = $2`,[e,o]).then(e=>e.rowCount)}),l=async({uid:e,pg:t})=>({rowCount:await t.query(`delete from admin.users_social_auth where uid=$1 and social_auth_type = $2`,[e,o]).then(e=>e.rowCount)}),u=async({uid:e,pg:t})=>{let{social_auth_code:n,enabled:r,recoveryCodes:i}=await t.query(`select social_auth_code, enabled, social_auth_obj->'codesArray' as "recoveryCodes"
+    from admin.users_social_auth 
+    where uid = $1 and social_auth_type = $2`,[e,o]).then(e=>e.rows?.[0]||{});return{secret:n,enabled:r,recoveryCodes:i}},d=async({uid:e,secret:t,pg:n,recoveryCodes:r,otp:i})=>{await n.query(`insert into admin.users_social_auth(uid, social_auth_code, social_auth_type, social_auth_obj, social_auth_url, enabled)
+    values($1, $2, $3, $4::json, $5, false)`,[e,t,o,{codesArray:r},i])},f=async({uid:e,pg:t,secret:n,recoveryCodes:r,otp:i})=>await t.query(`update admin.users_social_auth
+    set social_auth_code=$3, social_auth_obj=$4::json, social_auth_url=$5
+    where uid = $1 and social_auth_type = $2`,[e,o,n,{codesArray:r},i]).then(e=>e.rows?.[0]||{}),p=async({uid:t,pg:n})=>{let{config:o}=e(),{enabled:c}=await u({uid:t,pg:n});if(c)return{enabled:c};let l=a.generateSecret(),p=[r.randomUUID(),r.randomUUID(),r.randomUUID(),r.randomUUID()],m=await n.query(`select social_auth_id as code, coalesce(login,email) as login, email from admin.users where uid=$1`,[t]).then(e=>e.rows?.[0]||{}),{sufix:h}=o.auth?.[`2fa`]||{};h&&!m[h]&&console.warn(`⚠️ 2fa prefix not found at userData`);let g=s((h?m[h]:null)||m.login||m.code||t,l),_=await i.toDataURL(g);return c===void 0?await d({uid:t,secret:l,pg:n,recoveryCodes:p,otp:g}):await f({uid:t,secret:l,pg:n,recoveryCodes:p,otp:g}),{qr:_,key:l,otp:g,recoveryCodes:p}},m=async({uid:e,code:r,pg:i})=>{let{secret:o,enabled:s,recoveryCodes:c}=await u({uid:e,pg:i});if(!o)throw new t(`Включіть двофакторну аутентифікацію`);let{valid:l}=await a.verify({token:r,secret:o});if(!(l||c.reduce((e,t)=>e||t===r,!1)))throw new n(`Невірний код`);return{enabled:s,recoveryCodes:c}};export{l as deleteSecret,c as enableSecret,p as generate,u as getSecret,m as verify};
+//# sourceMappingURL=totp.js.map

package/dist/modules/auth/providers/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","names":["qrcode"],"sources":["../../../../src/modules/auth/providers/totp.ts"],"sourcesContent":["import { ExtendedPG } from \"../../../types/core.js\";\r\n\r\nimport crypto from \"node:crypto\";\r\nimport qrcode from \"qrcode\";\r\nimport * as authenticator from \"otplib\";\r\n\r\nimport { BadRequestError, ForbiddenError } from \"../../../../src/errors.js\";\r\nimport { GetContext } from \"../../../core.js\";\r\n\r\n// authenticator.options = { epoch: 0 }; // static code\r\n\r\ninterface ISecret {\r\n  uid: string;\r\n  pg: ExtendedPG;\r\n}\r\n\r\ninterface ICode {\r\n  uid: string;\r\n  code: string;\r\n  pg: ExtendedPG;\r\n  enable?: boolean;\r\n}\r\n\r\ninterface iQr {\r\n  uid: string;\r\n  secret: string;\r\n  pg: ExtendedPG;\r\n  recoveryCodes: string[];\r\n  otp: string;\r\n}\r\n\r\nconst TYPE = \"TOTP\";\r\n\r\n// equivalent to otplib@12.0.1 authenticator.keyuri(id,prefix,secret)\r\n// \"otpauth://totp/SOFTPRO:777?secret=secret&period=30&digits=6&algorithm=SHA1&issuer=SOFTPRO\"\r\nconst getOTP = (id: string | number, secret: string) => {\r\n  const { config } = GetContext();\r\n  const issuer = config.auth?.[\"2fa\"]?.prefix || \"SOFTPRO\";\r\n  return `otpauth://totp/${issuer}:${encodeURIComponent(\r\n    id.toString()\r\n  )}?secret=${secret}&period=30&digits=6&algorithm=SHA1&issuer=${encodeURIComponent(\r\n    issuer\r\n  )}`;\r\n};\r\n\r\nconst enableSecret = async ({ uid, pg }: ISecret) => {\r\n  const rowCount = await pg\r\n    .query(\r\n      \"update admin.users_social_auth set enabled=true where uid = $1 and social_auth_type = $2\",\r\n      [uid, TYPE]\r\n    )\r\n    .then((r: any) => r.rowCount);\r\n  return { rowCount };\r\n};\r\n\r\nconst deleteSecret = async ({ uid, pg }: ISecret) => {\r\n  const rowCount = await pg\r\n    .query(\r\n      \"delete from admin.users_social_auth where uid=$1 and social_auth_type = $2\",\r\n      [uid, TYPE]\r\n    )\r\n    .then((r: any) => r.rowCount);\r\n  return { rowCount };\r\n};\r\n\r\nconst getSecret = async ({ uid, pg }: ISecret) => {\r\n  const {\r\n    social_auth_code: secret,\r\n    enabled,\r\n    recoveryCodes,\r\n  } = await pg\r\n    .query(\r\n      `select social_auth_code, enabled, social_auth_obj->'codesArray' as \"recoveryCodes\"\r\n    from admin.users_social_auth \r\n    where uid = $1 and social_auth_type = $2`,\r\n      [uid, TYPE]\r\n    )\r\n    .then((r: any) => r.rows?.[0] || {});\r\n  return { secret, enabled, recoveryCodes };\r\n};\r\n\r\nconst addSecret = async ({ uid, secret, pg, recoveryCodes, otp }: iQr) => {\r\n  await pg.query(\r\n    `insert into admin.users_social_auth(uid, social_auth_code, social_auth_type, social_auth_obj, social_auth_url, enabled)\r\n    values($1, $2, $3, $4::json, $5, false)`,\r\n    [uid, secret, TYPE, { codesArray: recoveryCodes }, otp]\r\n  );\r\n};\r\n\r\nconst updateSecret = async ({ uid, pg, secret, recoveryCodes, otp }: iQr) => {\r\n  const result = await pg\r\n    .query(\r\n      `update admin.users_social_auth\r\n    set social_auth_code=$3, social_auth_obj=$4::json, social_auth_url=$5\r\n    where uid = $1 and social_auth_type = $2`,\r\n      [uid, TYPE, secret, { codesArray: recoveryCodes }, otp]\r\n    )\r\n    .then((r: any) => r.rows?.[0] || {});\r\n  return result;\r\n};\r\n\r\n// return a new secret until it's enabled\r\nconst generate = async ({ uid, pg }: ISecret) => {\r\n  const { config } = GetContext();\r\n\r\n  const { enabled } = await getSecret({ uid, pg });\r\n  if (enabled) return { enabled };\r\n\r\n  const secret = authenticator.generateSecret();\r\n  // console.log('secret', secret, 'length', secret.length, 'token', authenticator.generate(secret), 'verified', authenticator.verify({ secret, token: authenticator.generate(secret) }) );\r\n\r\n  const recoveryCodes = [\r\n    crypto.randomUUID(),\r\n    crypto.randomUUID(),\r\n    crypto.randomUUID(),\r\n    crypto.randomUUID(),\r\n  ];\r\n\r\n  const userData = await pg\r\n    .query(\r\n      `select social_auth_id as code, coalesce(login,email) as login, email from admin.users where uid=$1`,\r\n      [uid]\r\n    )\r\n    .then((r: any) => r.rows?.[0] || {});\r\n\r\n  const { sufix } = config.auth?.[\"2fa\"] || {};\r\n\r\n  if (sufix && !userData[sufix]) {\r\n    console.warn(\"⚠️ 2fa prefix not found at userData\");\r\n  }\r\n\r\n  const otp = getOTP(\r\n    (sufix ? userData[sufix] : null) || userData.login || userData.code || uid,\r\n    secret\r\n  );\r\n\r\n  const qrCodeAsImageSource = await qrcode.toDataURL(otp);\r\n\r\n  // no entry in db\r\n  if (enabled === undefined) {\r\n    await addSecret({\r\n      uid,\r\n      secret,\r\n      pg,\r\n      recoveryCodes,\r\n      otp,\r\n    });\r\n  } else {\r\n    await updateSecret({\r\n      uid,\r\n      secret,\r\n      pg,\r\n      recoveryCodes,\r\n      otp,\r\n    });\r\n  }\r\n  return {\r\n    qr: qrCodeAsImageSource,\r\n    key: secret,\r\n    otp,\r\n    recoveryCodes,\r\n  };\r\n};\r\n\r\nconst verify = async ({ uid, code: token, pg }: ICode) => {\r\n  const { secret, enabled, recoveryCodes } = await getSecret({ uid, pg });\r\n  // console.debug('secret', secret, 'enabled', enabled, 'verification', 'token', authenticator.generate(secret), authenticator.verify({ token: authenticator.generate(secret), secret }));\r\n  if (!secret) {\r\n    throw new BadRequestError(\"Включіть двофакторну аутентифікацію\");\r\n  }\r\n\r\n  const { valid } = await authenticator.verify({ token, secret });\r\n  const isValid =\r\n    valid ||\r\n    recoveryCodes.reduce(\r\n      (result: string, recoveryCode: string) =>\r\n        result || recoveryCode === token,\r\n      false\r\n    );\r\n  if (!isValid) {\r\n    throw new ForbiddenError(\"Невірний код\");\r\n  }\r\n  return { enabled, recoveryCodes };\r\n};\r\n\r\n// checks if code is correct\r\n// delete an entry from db to disable 2fa\r\n// set the enable flag in db to activate 2fa\r\nconst toggle = async ({ uid, code, pg, enable }: ICode) => {\r\n  const { enabled, recoveryCodes } = await verify({\r\n    uid,\r\n    code,\r\n    pg,\r\n  });\r\n  if (enabled === enable) {\r\n    throw new BadRequestError(\"Вже знаходиться у даному стані\");\r\n  }\r\n  if (enable) {\r\n    await enableSecret({\r\n      uid,\r\n      pg,\r\n    });\r\n    return recoveryCodes;\r\n  }\r\n  await deleteSecret({\r\n    uid,\r\n    pg,\r\n  });\r\n  return \"Відключено\";\r\n};\r\n\r\nexport { generate, verify, toggle, getSecret, enableSecret, deleteSecret };\r\n\r\nexport default null;\r\n"],"mappings":"iMA+BA,MAAM,EAAO,OAIP,GAAU,EAAqB,IAAmB,CACtD,GAAM,CAAE,UAAW,EAAW,EACxB,EAAS,EAAO,OAAO,QAAQ,QAAU,UAC/C,MAAO,kBAAkB,EAAO,GAAG,mBACjC,EAAG,SAAS,CACd,EAAE,UAAU,EAAO,4CAA4C,mBAC7D,CACF,GACF,EAEM,EAAe,MAAO,CAAE,MAAK,SAO1B,CAAE,SAAA,MANc,EACpB,MACC,2FACA,CAAC,EAAK,CAAI,CACZ,EACC,KAAM,GAAW,EAAE,QAAQ,CACZ,GAGd,EAAe,MAAO,CAAE,MAAK,SAO1B,CAAE,SAAA,MANc,EACpB,MACC,6EACA,CAAC,EAAK,CAAI,CACZ,EACC,KAAM,GAAW,EAAE,QAAQ,CACZ,GAGd,EAAY,MAAO,CAAE,MAAK,QAAkB,CAChD,GAAM,CACJ,iBAAkB,EAClB,UACA,iBACE,MAAM,EACP,MACC;;8CAGA,CAAC,EAAK,CAAI,CACZ,EACC,KAAM,GAAW,EAAE,OAAO,IAAM,CAAC,CAAC,EACrC,MAAO,CAAE,SAAQ,UAAS,eAAc,CAC1C,EAEM,EAAY,MAAO,CAAE,MAAK,SAAQ,KAAI,gBAAe,SAAe,CACxE,MAAM,EAAG,MACP;6CAEA,CAAC,EAAK,EAAQ,EAAM,CAAE,WAAY,CAAc,EAAG,CAAG,CACxD,CACF,EAEM,EAAe,MAAO,CAAE,MAAK,KAAI,SAAQ,gBAAe,SASrD,MARc,EAClB,MACC;;8CAGA,CAAC,EAAK,EAAM,EAAQ,CAAE,WAAY,CAAc,EAAG,CAAG,CACxD,EACC,KAAM,GAAW,EAAE,OAAO,IAAM,CAAC,CAAC,EAKjC,EAAW,MAAO,CAAE,MAAK,QAAkB,CAC/C,GAAM,CAAE,UAAW,EAAW,EAExB,CAAE,WAAY,MAAM,EAAU,CAAE,MAAK,IAAG,CAAC,EAC/C,GAAI,EAAS,MAAO,CAAE,SAAQ,EAE9B,IAAM,EAAS,EAAc,eAAe,EAGtC,EAAgB,CACpB,EAAO,WAAW,EAClB,EAAO,WAAW,EAClB,EAAO,WAAW,EAClB,EAAO,WAAW,CACpB,EAEM,EAAW,MAAM,EACpB,MACC,qGACA,CAAC,CAAG,CACN,EACC,KAAM,GAAW,EAAE,OAAO,IAAM,CAAC,CAAC,EAE/B,CAAE,SAAU,EAAO,OAAO,QAAU,CAAC,EAEvC,GAAS,CAAC,EAAS,IACrB,QAAQ,KAAK,qCAAqC,EAGpD,IAAM,EAAM,GACT,EAAQ,EAAS,GAAS,OAAS,EAAS,OAAS,EAAS,MAAQ,EACvE,CACF,EAEM,EAAsB,MAAMA,EAAO,UAAU,CAAG,EAoBtD,OAjBI,IAAY,IAAA,GACd,MAAM,EAAU,CACd,MACA,SACA,KACA,gBACA,KACF,CAAC,EAED,MAAM,EAAa,CACjB,MACA,SACA,KACA,gBACA,KACF,CAAC,EAEI,CACL,GAAI,EACJ,IAAK,EACL,MACA,eACF,CACF,EAEM,EAAS,MAAO,CAAE,MAAK,KAAM,EAAO,QAAgB,CACxD,GAAM,CAAE,SAAQ,UAAS,iBAAkB,MAAM,EAAU,CAAE,MAAK,IAAG,CAAC,EAEtE,GAAI,CAAC,EACH,MAAM,IAAI,EAAgB,qCAAqC,EAGjE,GAAM,CAAE,SAAU,MAAM,EAAc,OAAO,CAAE,QAAO,QAAO,CAAC,EAQ9D,GAAI,EANF,GACA,EAAc,QACX,EAAgB,IACf,GAAU,IAAiB,EAC7B,EACF,GAEA,MAAM,IAAI,EAAe,cAAc,EAEzC,MAAO,CAAE,UAAS,eAAc,CAClC"}

package/dist/modules/auth/services/authorizeByEusign.js

@@ -0,0 +1 @@
+import"../../../errors.js";import"../../../utils/index.js";import"../../../plugins/auth/funcs/logAuth.js";import"../../../plugins/auth/funcs/authorizeUser.js";import"../../../plugins/auth/funcs/getQuery.js";import"undici";export{};

package/dist/modules/auth/services/authorizeOAuth.js

@@ -0,0 +1,2 @@
+import{BadRequestError as e,NotFoundError as t}from"../../../errors.js";import n from"../../../plugins/crud/funcs/dataInsert.js";import{scryptHash as r,sign as i}from"../../../plugins/auth/funcs/jwt.js";const a=+(process.env[`auth.oauthTokenExpireMs`]||1e3*60*60);async function o({method:o=`POST`,ip:s,response_type:c,client_id:l,redirect_uri:u,scope:d,noredirect:f=!0},{pg:p,logger:m,redis:h}){if(c!==`code`)throw e(`unsupported response_type`);if(!l)throw e(`not enough query params: client_id`);let g=`select * from oauth.clients where client_id=$1 and token_endpoint_auth_method=$2 and (allowed_ips is null or $3=any(allowed_ips)) and ${d?`$4=any(scopes)`:`1=1`} order by allowed_ips nulls last limit 1`,{owner_user_id:_,client_secret_hash:v,redirect_uris:y=[],scopes:b}=p.pk?.[`oauth.clients`]?await p.query(g,[l,`private_key_jwt`,s,d].filter(Boolean)).then(e=>e.rows?.[0]||{}):{};if(!_)throw e(`invalid client id`);if(u&&Array.isArray(y)&&!y.includes(u))throw e(`invalid redirect_uri`);if(!(p.pk?.[`admin.users`]&&await p.query(`select * from admin.users where uid=$1 and enabled limit 1`,[_]).then(e=>e.rows[0])))throw t(`user not found`);let x=i(_,v,a,b),S=await r(x);p.pk?.[`oauth.tokens`]&&await p.query(`update oauth.tokens set revoked_at = now(), revocation_reason='refresh' where client_id=$1`,[l]),await n({table:`oauth.tokens`,data:{token_type:`access`,token_hash:S,token_hint:x.slice(-6),client_id:l,user_id:_,scopes:[d].filter(Boolean),issued_at:new Date,expires_at:new Date(Date.now()+a),ip:s},uid:_},{pg:p,logger:m,redis:h});let C=u?`${u}?code=${x}`:``,w=u&&!u.includes(`?`)?C:C?.replace?.(/\?code=/,`&code=`);return o===`POST`?{code:x,expire:a,redirect_uri:w,scopes:b}:f?x:{redirectUrl:w}}export{o as default};
+//# sourceMappingURL=authorizeOAuth.js.map

package/dist/modules/auth/services/authorizeOAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizeOAuth.js","names":[],"sources":["../../../../src/modules/auth/services/authorizeOAuth.ts"],"sourcesContent":["import { BadRequestError, NotFoundError } from \"../../../../src/errors.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nimport { sign, scryptHash } from \"../../../plugins/auth/funcs/jwt.js\";\r\nimport dataInsert from \"../../../plugins/crud/funcs/dataInsert.js\";\r\n\r\nconst expireMsec = +(process.env[\"auth.oauthTokenExpireMs\"] || 1000 * 60 * 60);\r\n\r\n// ? Request example: http://localhost:3000/oauth/authorize?response_type=code&client_id=2835134164020233999&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Foauth%2Ftoken%3Fclient_id%3D2835134164020233999%26noredirect%3D1%26grant_type%3Dauthorization_code\r\n// ? add &noredirect=1 to retrieve code via GET request or simply send POST requests\r\n\r\nexport default async function authorize(\r\n  {\r\n    method = \"POST\",\r\n    ip,\r\n    response_type,\r\n    client_id,\r\n    redirect_uri,\r\n    scope,\r\n    noredirect = true,\r\n  }: {\r\n    method?: string;\r\n    ip: string;\r\n    response_type: string;\r\n    client_id: string;\r\n    redirect_uri?: string;\r\n    scope?: string;\r\n    noredirect?: boolean;\r\n  },\r\n  { pg, logger, redis }: CoreContext\r\n) {\r\n  if (response_type !== \"code\") {\r\n    throw BadRequestError(\"unsupported response_type\");\r\n  }\r\n\r\n  if (!client_id) {\r\n    throw BadRequestError(\"not enough query params: client_id\");\r\n  }\r\n\r\n  const q = `select * from oauth.clients where client_id=$1 and token_endpoint_auth_method=$2 and (allowed_ips is null or $3=any(allowed_ips)) and ${\r\n    scope ? \"$4=any(scopes)\" : \"1=1\"\r\n  } order by allowed_ips nulls last limit 1`;\r\n\r\n  const {\r\n    owner_user_id: userId,\r\n    client_secret_hash: secret,\r\n    redirect_uris = [],\r\n    scopes,\r\n  } = pg.pk?.[\"oauth.clients\"]\r\n    ? await pg\r\n        .query(q, [client_id, \"private_key_jwt\", ip, scope].filter(Boolean))\r\n        .then((r: any) => r.rows?.[0] || {})\r\n    : {};\r\n\r\n  if (!userId) {\r\n    throw BadRequestError(\"invalid client id\");\r\n  }\r\n\r\n  if (\r\n    redirect_uri &&\r\n    Array.isArray(redirect_uris) &&\r\n    !redirect_uris.includes(redirect_uri)\r\n  ) {\r\n    throw BadRequestError(\"invalid redirect_uri\");\r\n  }\r\n\r\n  const user = pg.pk?.[\"admin.users\"]\r\n    ? await pg\r\n        .query(\"select * from admin.users where uid=$1 and enabled limit 1\", [\r\n          userId,\r\n        ])\r\n        .then((r: any) => r.rows[0])\r\n    : null;\r\n\r\n  if (!user) {\r\n    throw NotFoundError(\"user not found\");\r\n  }\r\n\r\n  // Generate authorization code\r\n  const code = sign(userId, secret, expireMsec, scopes);\r\n  const tokenHash = await scryptHash(code);\r\n\r\n  // disable access via old tokens\r\n  if (pg.pk?.[\"oauth.tokens\"]) {\r\n    await pg.query(\r\n      \"update oauth.tokens set revoked_at = now(), revocation_reason='refresh' where client_id=$1\",\r\n      [client_id]\r\n    );\r\n  }\r\n\r\n  await dataInsert(\r\n    {\r\n      table: \"oauth.tokens\",\r\n      data: {\r\n        token_type: \"access\",\r\n        token_hash: tokenHash,\r\n        token_hint: code.slice(-6),\r\n        // jti: undefined,\r\n        client_id,\r\n        user_id: userId,\r\n        // issuer: undefined,\r\n        scopes: [scope].filter(Boolean),\r\n        // claims: undefined,\r\n        issued_at: new Date(),\r\n        expires_at: new Date(Date.now() + expireMsec),\r\n        // revoked_at: undefined,\r\n        // revocation_reason: undefined,\r\n        ip,\r\n      },\r\n      uid: userId,\r\n    },\r\n    { pg, logger, redis }\r\n  );\r\n\r\n  const backUrl = redirect_uri ? `${redirect_uri}?code=${code}` : \"\";\r\n\r\n  const href =\r\n    redirect_uri && !redirect_uri.includes(\"?\")\r\n      ? backUrl\r\n      : backUrl?.replace?.(/\\?code=/, \"&code=\");\r\n\r\n  if (method === \"POST\") {\r\n    return {\r\n      code,\r\n      expire: expireMsec,\r\n      redirect_uri: href,\r\n      scopes,\r\n    };\r\n  }\r\n\r\n  if (noredirect) {\r\n    return code;\r\n  }\r\n\r\n  return { redirectUrl: href };\r\n}\r\n"],"mappings":"2MAMA,MAAM,EAAa,EAAE,QAAQ,IAAI,4BAA8B,IAAO,GAAK,IAK3E,eAA8B,EAC5B,CACE,SAAS,OACT,KACA,gBACA,YACA,eACA,QACA,aAAa,IAUf,CAAE,KAAI,SAAQ,SACd,CACA,GAAI,IAAkB,OACpB,MAAM,EAAgB,2BAA2B,EAGnD,GAAI,CAAC,EACH,MAAM,EAAgB,oCAAoC,EAG5D,IAAM,EAAI,yIACR,EAAQ,iBAAmB,MAC5B,0CAEK,CACJ,cAAe,EACf,mBAAoB,EACpB,gBAAgB,CAAC,EACjB,UACE,EAAG,KAAK,iBACR,MAAM,EACH,MAAM,EAAG,CAAC,EAAW,kBAAmB,EAAI,CAAK,EAAE,OAAO,OAAO,CAAC,EAClE,KAAM,GAAW,EAAE,OAAO,IAAM,CAAC,CAAC,EACrC,CAAC,EAEL,GAAI,CAAC,EACH,MAAM,EAAgB,mBAAmB,EAG3C,GACE,GACA,MAAM,QAAQ,CAAa,GAC3B,CAAC,EAAc,SAAS,CAAY,EAEpC,MAAM,EAAgB,sBAAsB,EAW9C,GAAI,EARS,EAAG,KAAK,gBACjB,MAAM,EACH,MAAM,6DAA8D,CACnE,CACF,CAAC,EACA,KAAM,GAAW,EAAE,KAAK,EAAE,GAI/B,MAAM,EAAc,gBAAgB,EAItC,IAAM,EAAO,EAAK,EAAQ,EAAQ,EAAY,CAAM,EAC9C,EAAY,MAAM,EAAW,CAAI,EAGnC,EAAG,KAAK,iBACV,MAAM,EAAG,MACP,6FACA,CAAC,CAAS,CACZ,EAGF,MAAM,EACJ,CACE,MAAO,eACP,KAAM,CACJ,WAAY,SACZ,WAAY,EACZ,WAAY,EAAK,MAAM,EAAE,EAEzB,YACA,QAAS,EAET,OAAQ,CAAC,CAAK,EAAE,OAAO,OAAO,EAE9B,UAAW,IAAI,KACf,WAAY,IAAI,KAAK,KAAK,IAAI,EAAI,CAAU,EAG5C,IACF,EACA,IAAK,CACP,EACA,CAAE,KAAI,SAAQ,OAAM,CACtB,EAEA,IAAM,EAAU,EAAe,GAAG,EAAa,QAAQ,IAAS,GAE1D,EACJ,GAAgB,CAAC,EAAa,SAAS,GAAG,EACtC,EACA,GAAS,UAAU,UAAW,QAAQ,EAe5C,OAbI,IAAW,OACN,CACL,OACA,OAAQ,EACR,aAAc,EACd,QACF,EAGE,EACK,EAGF,CAAE,YAAa,CAAK,CAC7B"}

package/dist/modules/auth/services/getAccessGroup.js

@@ -0,0 +1,8 @@
+import{BadRequestError as e,ForbiddenError as t,UnauthorizedError as n}from"../../../errors.js";async function r({id:r,uid:i,userType:a},{pg:o}){if(!o)throw Error(`empty pg`);if(!r)throw e(`not enough params: id`);if(!i)throw n(`unauthorized`);if(!a?.includes?.(`admin`))throw t(`not an admin`);return{routes:await o.query(`select a.route_id as path, b.actions from admin.routes a 
+    left join admin.role_access b on a.route_id=b.route_id
+    where b.role_id=$1`,[r]).then(e=>e.rows||[]),resources:await o.query(`select resource_id, actions from admin.role_access
+  where resource_id is not null and role_id=$1`,[r]).then(e=>e.rows||[]),users:await o.query(`select user_uid as id, user_name as name, access_granted, 
+    b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a
+    left join admin.users b on a.user_uid=b.uid
+    where a.role_id=$1`,[r]).then(e=>e.rows||[])}}export{r as default};
+//# sourceMappingURL=getAccessGroup.js.map

package/dist/modules/auth/services/getAccessGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessGroup.js","names":[],"sources":["../../../../src/modules/auth/services/getAccessGroup.ts"],"sourcesContent":["import { type ExtendedPG } from \"../../../types/core.js\";\r\n\r\nimport { pgClients } from \"../../../../src/utils/index.js\";\r\nimport {\r\n  BadRequestError,\r\n  ForbiddenError,\r\n  UnauthorizedError,\r\n} from \"../../../../src/errors.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nexport default async function accessGroup(\r\n  {\r\n    id,\r\n    uid,\r\n    userType,\r\n  }: {\r\n    id: string;\r\n    uid: string;\r\n    userType: string;\r\n  },\r\n  { pg }: CoreContext\r\n) {\r\n  if (!pg) {\r\n    throw new Error(\"empty pg\");\r\n  }\r\n\r\n  if (!id) {\r\n    throw BadRequestError(\"not enough params: id\");\r\n  }\r\n\r\n  if (!uid) {\r\n    throw UnauthorizedError(\"unauthorized\");\r\n  }\r\n\r\n  // restrict access - admin only\r\n  if (!userType?.includes?.(\"admin\")) {\r\n    throw ForbiddenError(\"not an admin\");\r\n  }\r\n\r\n  const routes = await pg\r\n    .query(\r\n      `select a.route_id as path, b.actions from admin.routes a \r\n    left join admin.role_access b on a.route_id=b.route_id\r\n    where b.role_id=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows || []);\r\n\r\n  const resources = await pg\r\n    .query(\r\n      `select resource_id, actions from admin.role_access\r\n  where resource_id is not null and role_id=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows || []);\r\n\r\n  const users = await pg\r\n    .query(\r\n      `select user_uid as id, user_name as name, access_granted, \r\n    b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a\r\n    left join admin.users b on a.user_uid=b.uid\r\n    where a.role_id=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows || []);\r\n\r\n  return { routes, resources, users };\r\n}\r\n"],"mappings":"gGAUA,eAA8B,EAC5B,CACE,KACA,MACA,YAMF,CAAE,MACF,CACA,GAAI,CAAC,EACH,MAAU,MAAM,UAAU,EAG5B,GAAI,CAAC,EACH,MAAM,EAAgB,uBAAuB,EAG/C,GAAI,CAAC,EACH,MAAM,EAAkB,cAAc,EAIxC,GAAI,CAAC,GAAU,WAAW,OAAO,EAC/B,MAAM,EAAe,cAAc,EA8BrC,MAAO,CAAE,OAAA,MA3BY,EAClB,MACC;;wBAGA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EAoBf,UAAA,MAlBO,EACrB,MACC;gDAEA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EAYJ,MAAA,MAVR,EACjB,MACC;;;wBAIA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,CAEE,CACpC"}

package/dist/modules/auth/services/getAccessInterface.js

@@ -0,0 +1 @@
+import"../../templates/services/getTemplatePath.js";export{};

package/dist/modules/auth/services/getAccessUser.js

@@ -0,0 +1,8 @@
+import{BadRequestError as e,UnauthorizedError as t}from"../../../errors.js";async function n({id:n,uid:r,userType:i},{pg:a}){if(!n)throw e(`not enough params: id`);if(!r)throw t(`unauthorized`);return i?.includes?.(`admin`),{routes:await a.query(`select a.route_id as path, b.actions from admin.routes a 
+      left join admin.role_access b on a.route_id=b.route_id
+      where b.user_uid=$1`,[n]).then(e=>e.rows||[]),resources:await a.query(`select resource_id, actions from admin.role_access
+  where resource_id is not null and user_uid=$1`,[n]).then(e=>e.rows||[]),user:await a.query(`select user_uid as id, user_name as name, access_granted, 
+      b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a
+      left join admin.users b on a.user_uid=b.uid
+      where a.user_uid=$1`,[n]).then(e=>e.rows?.[0])}}export{n as default};
+//# sourceMappingURL=getAccessUser.js.map

package/dist/modules/auth/services/getAccessUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessUser.js","names":[],"sources":["../../../../src/modules/auth/services/getAccessUser.ts"],"sourcesContent":["import { BadRequestError, UnauthorizedError } from \"../../../../src/errors.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\nexport default async function accessUser(\r\n  { id, uid, userType }: { id: string; uid: string; userType: string },\r\n  { pg }: CoreContext\r\n) {\r\n  if (!id) {\r\n    throw BadRequestError(\"not enough params: id\");\r\n  }\r\n\r\n  if (!uid) {\r\n    throw UnauthorizedError(\"unauthorized\");\r\n  }\r\n\r\n  if (!userType?.includes?.(\"admin\")) {\r\n    // throw ForbiddenError(\"not an admin\");\r\n  }\r\n\r\n  const routes = await pg\r\n    .query(\r\n      `select a.route_id as path, b.actions from admin.routes a \r\n      left join admin.role_access b on a.route_id=b.route_id\r\n      where b.user_uid=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows || []);\r\n\r\n  const resources = await pg\r\n    .query(\r\n      `select resource_id, actions from admin.role_access\r\n  where resource_id is not null and user_uid=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows || []);\r\n\r\n  const userRoles = await pg\r\n    .query(\r\n      `select user_uid as id, user_name as name, access_granted, \r\n      b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a\r\n      left join admin.users b on a.user_uid=b.uid\r\n      where a.user_uid=$1`,\r\n      [id]\r\n    )\r\n    .then((r: any) => r.rows?.[0]);\r\n\r\n  return { routes, resources, user: userRoles };\r\n}\r\n"],"mappings":"4EAEA,eAA8B,EAC5B,CAAE,KAAI,MAAK,YACX,CAAE,MACF,CACA,GAAI,CAAC,EACH,MAAM,EAAgB,uBAAuB,EAG/C,GAAI,CAAC,EACH,MAAM,EAAkB,cAAc,EAkCxC,OA/BK,GAAU,WAAW,OAAO,EA+B1B,CAAE,OAAA,MA3BY,EAClB,MACC;;2BAGA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EAoBf,UAAA,MAlBO,EACrB,MACC;iDAEA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EAYJ,KAAM,MAVV,EACrB,MACC;;;2BAIA,CAAC,CAAE,CACL,EACC,KAAM,GAAW,EAAE,OAAO,EAAE,CAEa,CAC9C"}

package/dist/modules/auth/services/getCurrentUser.js

@@ -0,0 +1,35 @@
+import e from"../../../plugins/redis/funcs/createRedis.js";import t from"../../../plugins/access/funcs/getUserPermissions.js";import n from"../../../plugins/hook/applyHook.js";const r=e({db:2});async function i({session:e,cookies:i},a){let{config:o,pg:s}=a||{},{user:c}=e?.passport||{},l={sessionID:e?.sessionId};if(o.auth?.debug){let t=await r.get(`${e?.sessionId}-sessionInfo`);Object.assign(l,{redisUser:t?JSON.parse(t):null,cookies:i})}if(!c?.uid)return await n(`afterUser`,{payload:l})||l;let u=Object.fromEntries(Object.entries(c).filter(([e])=>![`salt`,`password`].includes(e))),d=typeof o.settingKeys==`string`?o.settingKeys.split(`|`):o.settingKeys||[`site`,`map`,`admin`],f=s?.pk?.[`admin.properties`]?await s.query(`select 
+        property_key as key, 
+        case
+          when property_text is not null then to_jsonb(property_text)
+          when property_int is not null then to_jsonb(property_int) 
+          when property_json is not null then property_json::jsonb 
+        end as val 
+        from admin.properties 
+        where property_key like any($1)`,[d.map(e=>`${e}%`)]).then(e=>e.rows.reduce((e,{key:t,val:n})=>{let[r,i]=t.split(`.`);return e[r]=e[r]||{},e[r][i]=n,e},{})):[],p=s?.pk?.[`admin.role_access`]&&s?.pk?.[`admin.user_roles`]&&s?.pk?.[`admin.users`]&&c?.uid?await s.query(`select
+
+  a.route_id as id, 
+  /* coalesce(d.actions, array['view', 'edit','add','del']) as role_actions,
+  coalesce(b.actions, array['view']) as interface_actions, */
+  array_intersect(coalesce(b.actions, array['view']), coalesce(d.actions, array['view', 'edit','add','del'])) as actions,
+  b.scope,
+  c.role_id,
+  c.name as role_name
+
+from admin.routes a 
+left join admin.role_access b on 
+  a.route_id=b.route_id
+left join admin.roles c on 
+  b.role_id=c.role_id 
+  and c.enabled
+left join admin.user_roles d on 
+  c.role_id=d.role_id
+  and (
+    case when
+      d.expiration is not null 
+      then d.expiration > CURRENT_DATE 
+      else 1=1 
+    end
+  )
+where $1 in (b.user_uid, d.user_uid)`,[c.uid]).then(e=>e.rows||[]):[],m=await t({uid:c?.uid,userType:c?.user_type},a);return Object.assign(l,{user:u,settings:f,session:o.auth?.debug?e:{...e,passport:null},access:p,permissions:m}),await n(`afterUser`,{payload:l})||l}export{i as default};
+//# sourceMappingURL=getCurrentUser.js.map

package/dist/modules/auth/services/getCurrentUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCurrentUser.js","names":[],"sources":["../../../../src/modules/auth/services/getCurrentUser.ts"],"sourcesContent":["import applyHook from \"../../../plugins/hook/applyHook.js\";\r\nimport createRedis from \"../../../plugins/redis/funcs/createRedis.js\";\r\nimport getUserPermissions from \"../../../plugins/access/funcs/getUserPermissions.js\";\r\n\r\nimport { CoreContext } from \"../../../core.js\";\r\n\r\nconst rclient2 = createRedis({ db: 2 });\r\n\r\nconst q = `select\r\n\r\n  a.route_id as id, \r\n  /* coalesce(d.actions, array['view', 'edit','add','del']) as role_actions,\r\n  coalesce(b.actions, array['view']) as interface_actions, */\r\n  array_intersect(coalesce(b.actions, array['view']), coalesce(d.actions, array['view', 'edit','add','del'])) as actions,\r\n  b.scope,\r\n  c.role_id,\r\n  c.name as role_name\r\n\r\nfrom admin.routes a \r\nleft join admin.role_access b on \r\n  a.route_id=b.route_id\r\nleft join admin.roles c on \r\n  b.role_id=c.role_id \r\n  and c.enabled\r\nleft join admin.user_roles d on \r\n  c.role_id=d.role_id\r\n  and (\r\n    case when\r\n      d.expiration is not null \r\n      then d.expiration > CURRENT_DATE \r\n      else 1=1 \r\n    end\r\n  )\r\nwhere $1 in (b.user_uid, d.user_uid)`;\r\n\r\nexport default async function getUserInfo(\r\n  {\r\n    session,\r\n    cookies,\r\n  }: {\r\n    session?: any;\r\n    cookies?: any;\r\n  },\r\n  ctx: CoreContext\r\n) {\r\n  const { config, pg } = ctx || {};\r\n\r\n  const { user } = session?.passport || {};\r\n\r\n  const payload = {\r\n    sessionID: session?.sessionId,\r\n  };\r\n\r\n  if (config.auth?.debug) {\r\n    const str = await rclient2.get(`${session?.sessionId}-sessionInfo`);\r\n    Object.assign(payload, {\r\n      redisUser: str ? JSON.parse(str) : null,\r\n      cookies,\r\n    });\r\n  }\r\n\r\n  if (!user?.uid) {\r\n    const hookData1 = await applyHook(\"afterUser\", { payload });\r\n    return hookData1 || payload;\r\n  }\r\n\r\n  const userInfo = Object.fromEntries(\r\n    Object.entries(user).filter(([key]) => ![\"salt\", \"password\"].includes(key))\r\n  );\r\n\r\n  const settingKeys =\r\n    typeof config.settingKeys === \"string\"\r\n      ? config.settingKeys.split(\"|\")\r\n      : config.settingKeys || [\"site\", \"map\", \"admin\"];\r\n\r\n  const settings = pg?.pk?.[\"admin.properties\"]\r\n    ? await pg\r\n        .query(\r\n          `select \r\n        property_key as key, \r\n        case\r\n          when property_text is not null then to_jsonb(property_text)\r\n          when property_int is not null then to_jsonb(property_int) \r\n          when property_json is not null then property_json::jsonb \r\n        end as val \r\n        from admin.properties \r\n        where property_key like any($1)`,\r\n          [settingKeys.map((key: string) => `${key}%`)]\r\n        )\r\n        .then((el: any) =>\r\n          el.rows.reduce(\r\n            (\r\n              p: Record<string, any>,\r\n              { key, val }: { key: string; val?: any }\r\n            ) => {\r\n              const [k1, k2] = key.split(\".\");\r\n              p[k1] = p[k1] || {};\r\n              p[k1][k2] = val;\r\n              return p;\r\n            },\r\n            {}\r\n          )\r\n        )\r\n    : [];\r\n\r\n  const access =\r\n    pg?.pk?.[\"admin.role_access\"] &&\r\n    pg?.pk?.[\"admin.user_roles\"] &&\r\n    pg?.pk?.[\"admin.users\"] &&\r\n    user?.uid\r\n      ? await pg.query(q, [user.uid]).then((r: any) => r.rows || [])\r\n      : [];\r\n\r\n  const permissions = await getUserPermissions(\r\n    { uid: user?.uid, userType: user?.user_type },\r\n    ctx\r\n  );\r\n\r\n  Object.assign(payload, {\r\n    user: userInfo,\r\n    settings,\r\n    session: !config.auth?.debug ? { ...session, passport: null } : session,\r\n    access,\r\n    permissions,\r\n  });\r\n\r\n  const hookData = await applyHook(\"afterUser\", { payload });\r\n  return hookData || payload;\r\n}\r\n"],"mappings":"gLAMA,MAAM,EAAW,EAAY,CAAE,GAAI,CAAE,CAAC,EA6BtC,eAA8B,EAC5B,CACE,UACA,WAKF,EACA,CACA,GAAM,CAAE,SAAQ,MAAO,GAAO,CAAC,EAEzB,CAAE,QAAS,GAAS,UAAY,CAAC,EAEjC,EAAU,CACd,UAAW,GAAS,SACtB,EAEA,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAM,MAAM,EAAS,IAAI,GAAG,GAAS,UAAU,aAAa,EAClE,OAAO,OAAO,EAAS,CACrB,UAAW,EAAM,KAAK,MAAM,CAAG,EAAI,KACnC,SACF,CAAC,CACH,CAEA,GAAI,CAAC,GAAM,IAET,OAAO,MADiB,EAAU,YAAa,CAAE,SAAQ,CAAC,GACtC,EAGtB,IAAM,EAAW,OAAO,YACtB,OAAO,QAAQ,CAAI,EAAE,QAAQ,CAAC,KAAS,CAAC,CAAC,OAAQ,UAAU,EAAE,SAAS,CAAG,CAAC,CAC5E,EAEM,EACJ,OAAO,EAAO,aAAgB,SAC1B,EAAO,YAAY,MAAM,GAAG,EAC5B,EAAO,aAAe,CAAC,OAAQ,MAAO,OAAO,EAE7C,EAAW,GAAI,KAAK,oBACtB,MAAM,EACH,MACC;;;;;;;;yCASA,CAAC,EAAY,IAAK,GAAgB,GAAG,EAAI,EAAE,CAAC,CAC9C,EACC,KAAM,GACL,EAAG,KAAK,QAEJ,EACA,CAAE,MAAK,SACJ,CACH,GAAM,CAAC,EAAI,GAAM,EAAI,MAAM,GAAG,EAG9B,MAFA,GAAE,GAAM,EAAE,IAAO,CAAC,EAClB,EAAE,GAAI,GAAM,EACL,CACT,EACA,CAAC,CACH,CACF,EACF,CAAC,EAEC,EACJ,GAAI,KAAK,sBACT,GAAI,KAAK,qBACT,GAAI,KAAK,gBACT,GAAM,IACF,MAAM,EAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;sCAAG,CAAC,EAAK,GAAG,CAAC,EAAE,KAAM,GAAW,EAAE,MAAQ,CAAC,CAAC,EAC3D,CAAC,EAED,EAAc,MAAM,EACxB,CAAE,IAAK,GAAM,IAAK,SAAU,GAAM,SAAU,EAC5C,CACF,EAWA,OATA,OAAO,OAAO,EAAS,CACrB,KAAM,EACN,WACA,QAAU,EAAO,MAAM,MAAyC,EAAjC,CAAE,GAAG,EAAS,SAAU,IAAK,EAC5D,SACA,aACF,CAAC,EAGM,MADgB,EAAU,YAAa,CAAE,SAAQ,CAAC,GACtC,CACrB"}

package/dist/modules/auth/services/index.js

@@ -0,0 +1 @@
+import"./login.js";import"./loginPage.js";import"./logout.js";import"./register.js";import"./recover.js";import"./verifyTwoFactor.js";import"./recoverTwoFactor.js";import"./resetTwoFactor.js";import"./authorizeOAuth.js";import"./issueOAuthToken.js";import"./getCurrentUser.js";import"./getAccessGroup.js";import"./setAccessGroup.js";import"./getAccessUser.js";import"./setAccessUser.js";import"./getAccessInterface.js";import"./loginPageTwoFactor.js";import"./qrCodetwoFactor.js";import"./authorizeByEusign.js";import"./updateCurrentUserInfo.js";export{};

package/dist/modules/auth/services/issueOAuthToken.js

@@ -0,0 +1,2 @@
+import{BadRequestError as e,NotFoundError as t,UnauthorizedError as n}from"../../../errors.js";import r from"../../../plugins/policy/funcs/checkJWT.js";import i from"../../../plugins/auth/funcs/authorizeUser.js";const a=1e3*60*60;async function o({ip:o,req:s,query:c,body:l,url:u,originalUrl:d,headers:f,method:p,routeOptions:m,grant_type:h,client_id:g,code:_,redirect_uri:v,noredirect:y=!0},{pg:b}){if(h!==`authorization_code`)throw e(`unsupported grant_type`);if(!g)throw e(`not enough params: client_id`);if(!_)throw e(`not enough params: code`);let{valid:x,payload:S,redirectURIs:C}=await r({ip:o,user:s.user||s.session?.passport?.user,query:c,body:l,url:u,originalUrl:d,headers:f,method:p,routeOptions:m})||{};if(!x)throw n(`unauthorized`);if(v&&!(C||[]).includes(v))throw e(`invalid redirect_uri`);let w=b.pk?.[`admin.users`]?await b.query(`select * from admin.users where uid=$1 and enabled limit 1`,[S.uid]).then(e=>e.rows[0]):null;if(!w)throw t(`user not found`);let T=await i(w,s,`jwt`,Math.min(S.expires-S.created||a,a)),E=v?`${v}?code=${_}`:``,D=v&&!v.includes(`?`)?E:E?.replace?.(/\?code=/,`&code=`)||T;return p===`POST`||y||process.env.NODE_ENV===`test`?{message:`auth success`,statusCode:200}:{redirectUrl:D}}export{o as default};
+//# sourceMappingURL=issueOAuthToken.js.map

package/dist/modules/auth/services/issueOAuthToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueOAuthToken.js","names":[],"sources":["../../../../src/modules/auth/services/issueOAuthToken.ts"],"sourcesContent":["import {\r\n  BadRequestError,\r\n  NotFoundError,\r\n  UnauthorizedError,\r\n} from \"../../../../src/errors.js\";\r\nimport { CoreContext } from \"../../../core.js\";\r\nimport { ExtendedRouteOptionsConfig } from \"../../../types/core.js\";\r\n\r\nimport checkJWT from \"../../../plugins/policy/funcs/checkJWT.js\";\r\nimport authorizeUser from \"../../../plugins/auth/funcs/authorizeUser.js\";\r\n\r\nconst expireMsec = 1000 * 60 * 60;\r\n\r\nexport default async function oauthToken(\r\n  {\r\n    ip,\r\n    req,\r\n    query,\r\n    body,\r\n    url,\r\n    originalUrl,\r\n    headers,\r\n    method,\r\n    routeOptions,\r\n    grant_type,\r\n    client_id,\r\n    code,\r\n    redirect_uri,\r\n    noredirect = true,\r\n  }: {\r\n    ip: string;\r\n    req: any;\r\n    query: Record<string, any>;\r\n    body: Record<string, any>;\r\n    url: string;\r\n    originalUrl: string;\r\n    headers: Record<string, any>;\r\n    method: string;\r\n    routeOptions: ExtendedRouteOptionsConfig;\r\n    grant_type: string;\r\n    client_id: string;\r\n    code: string;\r\n    redirect_uri?: string;\r\n    noredirect?: boolean;\r\n  },\r\n  { pg }: CoreContext\r\n) {\r\n  if (grant_type !== \"authorization_code\") {\r\n    throw BadRequestError(\"unsupported grant_type\");\r\n  }\r\n\r\n  if (!client_id) {\r\n    throw BadRequestError(\"not enough params: client_id\");\r\n  }\r\n\r\n  if (!code) {\r\n    throw BadRequestError(\"not enough params: code\");\r\n  }\r\n\r\n  const {\r\n    valid,\r\n    payload: jwtPayload,\r\n    redirectURIs,\r\n  } = (await checkJWT({\r\n    ip,\r\n    user: req.user || req.session?.passport?.user,\r\n    query,\r\n    body,\r\n    url,\r\n    originalUrl,\r\n    headers,\r\n    method,\r\n    routeOptions,\r\n  })) || {};\r\n\r\n  if (!valid) {\r\n    throw UnauthorizedError(\"unauthorized\");\r\n  }\r\n\r\n  if (redirect_uri && !(redirectURIs || []).includes(redirect_uri)) {\r\n    throw BadRequestError(\"invalid redirect_uri\");\r\n  }\r\n\r\n  const user = pg.pk?.[\"admin.users\"]\r\n    ? await pg\r\n        .query(\"select * from admin.users where uid=$1 and enabled limit 1\", [\r\n          jwtPayload.uid,\r\n        ])\r\n        .then((r: any) => r.rows[0])\r\n    : null;\r\n\r\n  if (!user) {\r\n    throw NotFoundError(\"user not found\");\r\n  }\r\n\r\n  const expire = Math.min(\r\n    jwtPayload.expires - jwtPayload.created || expireMsec,\r\n    expireMsec\r\n  );\r\n\r\n  const href1 = await authorizeUser(user, req, \"jwt\", expire);\r\n\r\n  const backUrl = redirect_uri ? `${redirect_uri}?code=${code}` : \"\";\r\n\r\n  const href =\r\n    redirect_uri && !redirect_uri.includes(\"?\")\r\n      ? backUrl\r\n      : backUrl?.replace?.(/\\?code=/, \"&code=\") || href1;\r\n\r\n  if (method === \"POST\" || noredirect || process.env.NODE_ENV === \"test\") {\r\n    return { message: \"auth success\", statusCode: 200 };\r\n  }\r\n\r\n  return { redirectUrl: href };\r\n}\r\n"],"mappings":"oNAWA,MAAM,EAAa,IAAO,GAAK,GAE/B,eAA8B,EAC5B,CACE,KACA,MACA,QACA,OACA,MACA,cACA,UACA,SACA,eACA,aACA,YACA,OACA,eACA,aAAa,IAiBf,CAAE,MACF,CACA,GAAI,IAAe,qBACjB,MAAM,EAAgB,wBAAwB,EAGhD,GAAI,CAAC,EACH,MAAM,EAAgB,8BAA8B,EAGtD,GAAI,CAAC,EACH,MAAM,EAAgB,yBAAyB,EAGjD,GAAM,CACJ,QACA,QAAS,EACT,gBACG,MAAM,EAAS,CAClB,KACA,KAAM,EAAI,MAAQ,EAAI,SAAS,UAAU,KACzC,QACA,OACA,MACA,cACA,UACA,SACA,cACF,CAAC,GAAM,CAAC,EAER,GAAI,CAAC,EACH,MAAM,EAAkB,cAAc,EAGxC,GAAI,GAAgB,EAAE,GAAgB,CAAC,GAAG,SAAS,CAAY,EAC7D,MAAM,EAAgB,sBAAsB,EAG9C,IAAM,EAAO,EAAG,KAAK,eACjB,MAAM,EACH,MAAM,6DAA8D,CACnE,EAAW,GACb,CAAC,EACA,KAAM,GAAW,EAAE,KAAK,EAAE,EAC7B,KAEJ,GAAI,CAAC,EACH,MAAM,EAAc,gBAAgB,EAQtC,IAAM,EAAQ,MAAM,EAAc,EAAM,EAAK,MAL9B,KAAK,IAClB,EAAW,QAAU,EAAW,SAAW,EAC3C,CAGuD,CAAC,EAEpD,EAAU,EAAe,GAAG,EAAa,QAAQ,IAAS,GAE1D,EACJ,GAAgB,CAAC,EAAa,SAAS,GAAG,EACtC,EACA,GAAS,UAAU,UAAW,QAAQ,GAAK,EAMjD,OAJI,IAAW,QAAU,GAAc,QAAQ,IAAI,WAAa,OACvD,CAAE,QAAS,eAAgB,WAAY,GAAI,EAG7C,CAAE,YAAa,CAAK,CAC7B"}

package/dist/modules/auth/services/login.js

@@ -0,0 +1,2 @@
+import e from"../../../config.js";import t from"../../../plugins/auth/funcs/loginUser.js";import n from"../../../plugins/auth/funcs/loginFile.js";import{existsSync as r}from"node:fs";async function i(i,a){return r(`passwd`)&&!e.auth?.[`2factor`]&&process.env.NODE_ENV!==`test`&&!process.env.VITEST&&!e.auth?.disablePasswd?await n(i,a):await t(i,a)}export{i as default};
+//# sourceMappingURL=login.js.map