@opengis/fastify-table 2.5.54 → 3.0.0-beta.0

package/dist/server/plugins/auth/funcs/jwt.js

@@ -1,78 +0,0 @@
-import { createHmac, scrypt, randomBytes } from "node:crypto";
-import util from "node:util";
-import config from "../../../../config.js";
-const scryptAsync = util.promisify(scrypt);
-const { jwtSecret = "65450754381cfaf768eeb4bb33326529b48a40ffdb6e15d84dc224dff527166f", } = config.auth || {};
-const jwtHeader = Buffer.from(JSON.stringify({
-    alg: "HS256",
-    type: "JWT",
-})).toString("base64");
-export async function scryptHash(code) {
-    const salt = randomBytes(16).toString("hex");
-    const derived = (await scryptAsync(code, salt, 64)); // 64 bytes
-    return `${salt}:${derived.toString("hex")}`;
-}
-export async function scryptVerify(stored, code) {
-    const [salt, keyHex] = stored.split(":");
-    const derived = (await scryptAsync(code, salt, 64));
-    return keyHex === derived.toString("hex");
-}
-export function sign(uid, secret, exp = 90000, scopes) {
-    if (typeof uid !== "string")
-        throw new Error("uid must be a string");
-    if (secret && typeof secret !== "string") {
-        throw new Error("secret must be a string");
-    }
-    if (typeof exp !== "number")
-        throw new Error("exp must be a number");
-    const jwtPayload = Buffer.from(JSON.stringify({
-        uid,
-        scopes,
-        expires: Date.now() + exp,
-        created: Date.now(),
-    })).toString("base64");
-    const jwtEncrypted = [jwtHeader, jwtPayload].join(".");
-    const signature = createHmac("sha256", secret || jwtSecret)
-        .update(jwtEncrypted)
-        .digest("base64");
-    return `${jwtEncrypted}.${signature}`;
-}
-export function verify(token, secret, scope) {
-    if (!token) {
-        return { valid: false, error: "not enough params: token" };
-    }
-    if (typeof token !== "string") {
-        return { valid: false, error: "invalid params: token" };
-    }
-    if (secret && typeof secret !== "string") {
-        return { valid: false, error: "invalid params: secret" };
-    }
-    if (scope && typeof scope !== "string") {
-        return { valid: false, error: "invalid params: scope" };
-    }
-    const split = token.split(".");
-    const signature = split[2];
-    try {
-        const header = JSON.parse(Buffer.from(split[0], "base64").toString());
-        const payload = JSON.parse(Buffer.from(split[1], "base64").toString());
-        const jwtEncryptedExpected = [split[0], split[1]].join(".");
-        const expectedSignature = createHmac("sha256", secret || jwtSecret)
-            .update(jwtEncryptedExpected)
-            .digest("base64");
-        const isScopeValid = !scope || !payload.scopes || payload.scopes?.includes?.(scope);
-        if (signature === expectedSignature && isScopeValid) {
-            return { valid: true, payload, header };
-        }
-        console.log("JWT: invalid token", payload, scope);
-        return {
-            valid: false,
-            payload,
-            header,
-            error: signature !== expectedSignature ? "invalid signature" : "invalid scope",
-        };
-    }
-    catch (err) {
-        return { valid: false, error: err.toString(), stack: err.stack };
-    }
-}
-export default null;

package/dist/server/plugins/auth/funcs/logAuth.d.ts

@@ -1,7 +0,0 @@
-export default function logAuth({ uid, type, data, ip, }: {
-    uid: string;
-    type?: string;
-    data?: any;
-    ip?: string;
-}, pg?: any): Promise<any>;
-//# sourceMappingURL=logAuth.d.ts.map

package/dist/server/plugins/auth/funcs/logAuth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logAuth.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/logAuth.ts"],"names":[],"mappings":"AAGA,wBAA8B,OAAO,CACnC,EACE,GAAG,EACH,IAAc,EACd,IAAI,EACJ,EAAE,GACH,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,EACD,EAAE,MAAmB,gBAetB"}

package/dist/server/plugins/auth/funcs/logAuth.js

@@ -1,17 +0,0 @@
-import pgClients from "../../pg/pgClients.js";
-import dataInsert from "../../crud/funcs/dataInsert.js";
-export default async function logAuth({ uid, type = "login", data, ip, }, pg = pgClients.client) {
-    const res = await dataInsert({
-        pg,
-        table: "log.user_auth",
-        uid,
-        data: {
-            user_id: uid,
-            auth_date: new Date().toISOString(),
-            auth_type: type,
-            auth_data: data,
-            ip,
-        },
-    });
-    return res;
-}

package/dist/server/plugins/auth/funcs/loginFile.d.ts

@@ -1,3 +0,0 @@
-import { FastifyReply } from "fastify";
-export default function loginFile(req: any, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=loginFile.d.ts.map

package/dist/server/plugins/auth/funcs/loginFile.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginFile.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/loginFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAcvC,wBAA8B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBAkDpE"}

package/dist/server/plugins/auth/funcs/loginFile.js

@@ -1,51 +0,0 @@
-import path from "node:path";
-import { existsSync, readFileSync } from "node:fs";
-import { createHash } from "node:crypto";
-import config from "../../../../config.js";
-import users from "./users.js";
-import authorizeUser from "./authorizeUser.js";
-import { BadRequestError } from "../../../../errors.js";
-import logger from "../../logger/getLogger.js";
-export default async function loginFile(req, reply) {
-    const { username, password } = req.method === "POST" ? req.body : req.query;
-    const filepath = path.join(process.cwd(), "passwd");
-    if (!users?.length) {
-        const fileExists = existsSync(filepath);
-        if (!fileExists) {
-            logger.error(req, "passwd file not exists");
-            throw new Error("passwd file not exists");
-        }
-        // parse file on start up
-        const data = readFileSync(filepath, "utf8");
-        const separator = data.indexOf("\\r\\n") !== -1 ? "\r\n" : "\n";
-        const rows = data.split(separator).map((row) => {
-            const [name, passwd, usertype = "regular", uid] = row.split(":");
-            return { username: name, password: passwd, usertype, uid };
-        });
-        rows.forEach((row) => users.push(row));
-    }
-    // check user / password
-    const user = users.find((el) => el.username === username);
-    const hashPasswd = createHash("sha1")
-        .update(`${password}${user?.salt || ""}`)
-        .digest("hex");
-    if (!user?.password || user.password !== hashPasswd) {
-        const txt = "Invalid user or password";
-        if (req.method !== "GET") {
-            throw BadRequestError(txt);
-        }
-        return reply
-            .status(302)
-            .redirect(`/login?confirm=wrong_pass&message=${txt}`);
-    }
-    const resultUser = {
-        uid: user?.uid || config?.auth?.uid || username,
-        user_name: username,
-        user_type: user.usertype || "regular",
-    };
-    const authType = "creds-" + (user.usertype === "admin" ? "admin" : "user");
-    const href = await authorizeUser(resultUser, req, authType); // creds-admin / creds-admin
-    return req.method === "GET"
-        ? reply.status(302).redirect(href)
-        : reply.status(200).send(href);
-}

package/dist/server/plugins/auth/funcs/loginUser.d.ts

@@ -1,3 +0,0 @@
-import { FastifyReply } from "fastify";
-export default function loginUser(req: any, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=loginUser.d.ts.map

package/dist/server/plugins/auth/funcs/loginUser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loginUser.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/loginUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAuBvC,wBAA8B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBA2DpE"}

package/dist/server/plugins/auth/funcs/loginUser.js

@@ -1,62 +0,0 @@
-import config from "../../../../config.js";
-import pgClients from "../../pg/pgClients.js";
-import logger from "../../logger/getLogger.js";
-import verifyPassword from "./verifyPassword.js";
-import authorizeUser from "./authorizeUser.js";
-import { BadRequestError } from "../../../../errors.js";
-const getIp = (req) => (req.headers?.["x-real-ip"] ||
-    req.headers?.["x-forwarded-for"] ||
-    req.ip ||
-    req.connection?.remoteAddress ||
-    "")
-    .split(":")
-    .pop();
-export default async function loginUser(req, reply) {
-    const { username, password } = (req.method === "POST" ? req.body : req.query) || {};
-    const { pg = pgClients.client } = req;
-    const ip = getIp(req);
-    if (!config.pg) {
-        if (req.method !== "GET") {
-            throw Error("empty pg");
-        }
-        return reply
-            .status(302)
-            .redirect("/login?confirm=wrong_pass&message=empty pg");
-    }
-    if (!config.redis) {
-        if (req.method !== "GET") {
-            throw Error("empty redis");
-        }
-        return reply
-            .status(302)
-            .redirect("/login?confirm=wrong_pass&message=empty redis");
-    }
-    const { user, message = "invalid user" } = (await verifyPassword({
-        pg,
-        username,
-        password,
-    })) || {};
-    if (!user) {
-        logger.file("auth/warn", { error: message, username, ip });
-        if (req.method !== "GET") {
-            throw BadRequestError(message);
-        }
-        return reply
-            .status(302)
-            .redirect(`/login?confirm=wrong_pass&message=${message}`);
-    }
-    if (!user && (req.query?.username || req.body?.username)) {
-        if (req.method !== "GET") {
-            throw BadRequestError(message);
-        }
-        return reply
-            .status(302)
-            .redirect(`/login?confirm=wrong_pass&message=${message}`);
-    }
-    logger.metrics("user.login");
-    const authType = "creds-" + (user.user_type === "admin" ? "admin" : "user");
-    const result = await authorizeUser(user, req, authType); // creds-admin / creds-admin
-    return req.method === "GET"
-        ? reply.status(302).redirect(result)
-        : reply.status(200).send(result);
-}

package/dist/server/plugins/auth/funcs/sendNotification.d.ts

@@ -1,15 +0,0 @@
-import type { ExtendedPG } from "../../../types/core.js";
-export default function notification({ pg, provider, from, to, template, table, message, title, data, id, nocache, }: {
-    pg: ExtendedPG;
-    provider?: string[];
-    from?: string;
-    to: string;
-    template?: string;
-    table?: string;
-    message?: string;
-    title?: string;
-    data?: Record<string, any>;
-    id?: string;
-    nocache?: any;
-}, unittest?: boolean): Promise<string | import("nodemailer/lib/smtp-pool/index.js").SentMessageInfo | null>;
-//# sourceMappingURL=sendNotification.d.ts.map

package/dist/server/plugins/auth/funcs/sendNotification.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sendNotification.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/sendNotification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA8EzD,wBAA8B,YAAY,CACxC,EACE,EAAqB,EACrB,QAAoB,EACpB,IAAI,EACJ,EAAE,EACF,QAAQ,EACR,KAAK,EACL,OAAO,EACP,KAAK,EACL,IAAI,EACJ,EAAE,EACF,OAAO,GACR,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,GAAG,CAAC;CACf,EACD,QAAQ,CAAC,EAAE,OAAO,wFAwDnB"}

package/dist/server/plugins/auth/funcs/sendNotification.js

@@ -1,96 +0,0 @@
-import nodemailer from "nodemailer";
-import config from "../../../../config.js";
-import { handlebars } from "../../../helpers/index.js";
-import pgClients from "../../pg/pgClients.js";
-import getTemplate from "../../table/funcs/getTemplate.js";
-import getRedis from "../../redis/funcs/getRedis.js";
-import logger from "../../logger/getLogger.js";
-const rclient = getRedis();
-// eslint-disable-next-line max-len, no-control-regex
-const emailReg = /(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21\x23-\x5b\x5d-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])*")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])/g;
-async function generateNotificationContent({ pg, table, template, id, message, data: data1, }) {
-    if (template) {
-        const data = table && id && config.pg
-            ? await pg
-                .query(`select * from ${table} where ${pg.pk[table]}=$1`, [id])
-                .then((el) => el.rows?.[0] || {})
-            : data1;
-        const body = await getTemplate("pt", template);
-        const html = handlebars.compile(body || template || "template not found")(data || {});
-        return html;
-    }
-    return message;
-}
-async function sendEmail({ to, from, subject, html, attachments }) {
-    if (!to?.length) {
-        throw new Error("empty to list");
-    }
-    const { mailSetting = {} } = config;
-    /*= == check service and setting === */
-    if (!mailSetting.service) {
-        logger.file("notification/warn", {
-            to,
-            from,
-            message: "service is not defined in config",
-        });
-        return null;
-    }
-    Object.assign(mailSetting, { rejectUnauthorized: false });
-    if (mailSetting.port === 465) {
-        Object.assign(mailSetting, { secure: true });
-    }
-    const transport = nodemailer.createTransport(mailSetting);
-    const result = await transport.sendMail({
-        from: from || mailSetting.from,
-        to,
-        subject,
-        html,
-        attachments,
-    });
-    return result;
-}
-export default async function notification({ pg = pgClients.client, provider = ["email"], from, to, template, table, message, title, data, id, nocache, }, unittest) {
-    if (pg?.readonly) {
-        return null;
-    }
-    const keyTo = `${pg?.options?.database}:mail:${provider[0]}:${to || ""}${id || ""}${table || ""}${title || ""}`;
-    const uniqueTo = config.redis ? await rclient.setnx(keyTo, 1) : true;
-    if (!uniqueTo && !nocache) {
-        logger.file("notification/sent", { keyTo, send: uniqueTo, nocache });
-        return `already sent: ${keyTo}`;
-    }
-    if (config.redis) {
-        await rclient.expire(keyTo, 1000 * 600);
-    }
-    if (!to.length) {
-        return null;
-    }
-    if (!(Array.isArray(provider) && provider.length)) {
-        return "notification provider - must be array and not empty";
-    }
-    const html = await generateNotificationContent({
-        pg,
-        table,
-        template,
-        id,
-        message,
-        data,
-    });
-    if (provider.includes("email")) {
-        const toEmail = Array.isArray(to)
-            ? to.map((emails) => emails.match(emailReg)?.join(","))
-            : to;
-        const result = await sendEmail({
-            attachments: [],
-            html,
-            subject: title,
-            from,
-            to: unittest && config.mailSetting?.to ? config.mailSetting?.to : toEmail,
-        });
-        if (config.debug) {
-            console.log(result);
-        }
-        return result;
-    }
-    return null;
-}

package/dist/server/plugins/auth/funcs/users.d.ts

@@ -1,3 +0,0 @@
-declare const users: any[];
-export default users;
-//# sourceMappingURL=users.d.ts.map

package/dist/server/plugins/auth/funcs/users.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/users.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,KAAK,EAAE,GAAG,EAAO,CAAC;AACxB,eAAe,KAAK,CAAC"}

package/dist/server/plugins/auth/funcs/users.js

@@ -1,2 +0,0 @@
-const users = [];
-export default users;

package/dist/server/plugins/auth/funcs/verifyPassword.d.ts

@@ -1,13 +0,0 @@
-import { ExtendedPG } from "../../../types/core.js";
-export default function verifyPassword({ pg, username, password, }: {
-    pg: ExtendedPG;
-    username: string;
-    password: string;
-}): Promise<{
-    message: string;
-    user?: undefined;
-} | {
-    user: any;
-    message?: undefined;
-} | undefined>;
-//# sourceMappingURL=verifyPassword.d.ts.map

package/dist/server/plugins/auth/funcs/verifyPassword.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyPassword.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/auth/funcs/verifyPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAYpD,wBAA8B,cAAc,CAAC,EAC3C,EAAE,EACF,QAAQ,EACR,QAAQ,GACT,EAAE;IACD,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;;;;;;eA6CA"}

package/dist/server/plugins/auth/funcs/verifyPassword.js

@@ -1,45 +0,0 @@
-import crypt from "apache-crypt";
-import crypto from "node:crypto";
-import config from "../../../../config.js";
-function md5(string) {
-    return crypto.createHash("md5").update(string).digest("hex");
-}
-export default async function verifyPassword({ pg, username, password, }) {
-    if (!config.pg)
-        return;
-    if (!username || username === "")
-        return { message: "not enough params: username" };
-    if (!password || password === "")
-        return { message: "not enough params: password" };
-    const query = "select * from admin.users where $1 in (login,email,phone) and enabled and salt is not null limit 1";
-    const json = await pg
-        .query(query, [username])
-        .then((r) => r.rows?.[0] || {});
-    if (!json) {
-        return { message: "user not found" };
-    }
-    if (json.password_new_hash_algorithm === true) {
-        const hash = await pg
-            .query(`SELECT public.crypt($1, $2)`, [password, json.salt])
-            .then((r) => r.rows?.[0]?.crypt);
-        if (json.password === hash) {
-            return { user: json };
-        }
-        return { message: "Wrong password" };
-    }
-    let hash = "";
-    for (let i = 0; i < 10; i += 1) {
-        hash = md5(password + hash + json.salt);
-    }
-    hash = crypt(hash, json.salt);
-    if (json.password === hash) {
-        if (username === "admin" && password === "admin") {
-            await pg.query("update admin.users set password=$2 where uid=$1", [
-                json.uid,
-                config.adminPassword || "6Z4gu2mG8R",
-            ]);
-        }
-        return { user: json };
-    }
-    return { message: "Wrong password" };
-}

package/dist/server/plugins/auth/index.d.ts

@@ -1,6 +0,0 @@
-import { FastifyInstance, FastifyReply } from "fastify";
-import { ExtendedRequest } from "../../types/core.js";
-export declare function onRequest(req: ExtendedRequest, reply: FastifyReply): Promise<null>;
-declare function plugin(fastify: FastifyInstance): void;
-export default plugin;
-//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/plugins/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAYxD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAOtD,wBAAsB,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,iBAoIxE;AAED,iBAAS,MAAM,CAAC,OAAO,EAAE,eAAe,QAmCvC;AAED,eAAe,MAAM,CAAC"}

package/dist/server/plugins/auth/index.js

@@ -1,145 +0,0 @@
-import { existsSync } from "node:fs";
-import cookie from "@fastify/cookie";
-import session from "@fastify/session";
-import { Authenticator } from "@fastify/passport";
-import RedisStore from "fastify-session-redis-store";
-import config from "../../../config.js";
-import getRedis from "../redis/funcs/getRedis.js";
-import { ForbiddenError } from "../../../errors.js";
-const fastifyPassport = new Authenticator();
-const { prefix = "/api" } = config;
-export async function onRequest(req, reply) {
-    const { hostname, headers, routeOptions } = req;
-    const { config: routeConfig, method, handler, url } = routeOptions || {};
-    const { policy } = routeConfig || {};
-    const isApi = method && url && typeof handler === "function" && url !== "*";
-    // handle non-api at vite/vike
-    if (!isApi) {
-        return null;
-    }
-    // proxy from old apps to editor, bi etc.
-    const debugAuth = config.debugAuth
-        ? !!req.headers?.uid &&
-            (process.env.NODE_ENV === "test" || process.env.VITEST)
-        : undefined;
-    const validToken = (req.ip === "193.239.152.181" ||
-        req.ip === "127.0.0.1" ||
-        req.ip?.startsWith?.("192.168.") ||
-        config.debug) &&
-        (debugAuth ||
-            (req.headers?.token && config.auth?.tokens?.includes?.(headers.token)));
-    if (validToken && !req?.user?.uid) {
-        req.user = {
-            uid: req.headers?.uid?.toString?.() || "1",
-            user_type: req.headers?.user_type?.toString?.() || "regular",
-        };
-    }
-    const isAdmin = process.env.NODE_ENV === "admin" ||
-        hostname?.split?.(":")?.shift?.() === config.adminDomain ||
-        config.admin ||
-        hostname?.startsWith?.("admin");
-    const isPublic = Array.isArray(policy)
-        ? policy.includes("public")
-        : policy === "L0";
-    // local development only, example: upload file via postman
-    if (process.platform === "win32" && !req.cookies) {
-        req.cookies = {};
-        req.cookies["session_auth"] = "test";
-    }
-    if (req.cookies?.["session_auth"] &&
-        !req.session?.passport?.user?.uid &&
-        (config.auth?.disable || config.auth?.user)) {
-        req.session = req.session || {};
-        req.session.passport = req.session.passport || {}; // ensure passport session exists
-        req.session.passport.user = {
-            ...(config.auth?.user || {}),
-            uid: config.auth?.user?.uid?.toString?.() || "1",
-            user_rnokpp: config.auth?.user?.rnokpp,
-            user_type: config.auth?.user?.type || "regular",
-        };
-        req.user = req.session.passport.user;
-    }
-    // ! intentional: null || undefined > undefined
-    req.user = req.user || req.session?.passport?.user || undefined; // fix for user.uid errors, by default user is null, while with express passport it was {}, unauthorized user does not trigger serializer
-    // currently 2factor + auth with passwd file not supported
-    const ispasswd = (existsSync("passwd") && !config.auth?.["2factor"]) || config.auth?.passwd;
-    const loginPageUrl = config.auth?.link?.core?.login || config?.auth?.redirect || "/login";
-    if (!req.user?.uid &&
-        !config.auth?.disable &&
-        isAdmin &&
-        !isPublic &&
-        !isApi &&
-        !config.auth?.disableRedirect &&
-        !req.url.startsWith(prefix) &&
-        !req.url.startsWith("/api") &&
-        !req.url.includes(loginPageUrl) &&
-        !req.url.includes(".") &&
-        !req.url.includes("@")) {
-        return reply.redirect(`${loginPageUrl}` + `?redirect=${req.url}`);
-    }
-    // by default, disable 2factor for id.gov.ua auth
-    const check = req.user?.auth_type === "govid" ? config.auth?.["2factor"]?.govid : true;
-    const login2faPage = config.auth?.link?.["2fa"]?.login || "/2factor";
-    // example: 2factor for admin env only, while public env does not require it
-    const checkEnv = () => {
-        if (!config.auth?.["2factorEnv"])
-            return true;
-        if ((config.auth?.["2factorEnv"] &&
-            process.env.NODE_ENV === config.auth?.["2factorEnv"]) ||
-            (config.auth?.["2factorEnv"] === "admin" && isAdmin)) {
-            return true;
-        }
-        return false;
-    };
-    // if 2factor is enabled globally + for user and secondFactorPassed not true => redirect to 2factor login page
-    if (req.user?.uid &&
-        req.user?.twofa &&
-        // config.auth?.["2factor"] &&
-        // !isPublic &&
-        (routeOptions?.method || "GET") === "GET" &&
-        !req.session?.secondFactorPassed &&
-        !ispasswd &&
-        !config.auth?.disableRedirect &&
-        !config.auth?.disable &&
-        check &&
-        checkEnv() &&
-        !req.url.startsWith(login2faPage) &&
-        !routeOptions.url?.includes?.("/logout") &&
-        !routeOptions.url?.includes?.("/2fa") &&
-        !routeOptions.url?.includes?.("/assets")) {
-        if (isApi) {
-            throw ForbiddenError("access restricted: twofa");
-        }
-        return reply.redirect(login2faPage);
-    }
-    return null;
-}
-function plugin(fastify) {
-    if (!config.redis) {
-        return;
-    }
-    fastify.addHook("onRequest", onRequest);
-    if (process.env.NODE_ENV === "test" || process.env.VITEST) {
-        return;
-    }
-    fastify.register(cookie, {
-        parseOptions: config?.auth?.cookieOptions || { secure: false },
-    });
-    fastify.register(session, {
-        secret: config?.auth?.secret || "61b820e12858570a4b0633020d4394a17903d9a9",
-        cookieName: "session_auth",
-        cookie: config?.auth?.cookieOptions || { secure: false },
-        store: new RedisStore({
-            prefix: `session_auth:${config.pg?.database || "db"}:`,
-            client: getRedis({ db: 2 }),
-        }),
-    });
-    // register passport AFTER session is ready
-    fastify.register(fastifyPassport.initialize());
-    fastify.register(fastifyPassport.secureSession());
-    // serialize user used to store user info in session store
-    fastifyPassport.registerUserSerializer(async (user) => ({ user }));
-    // deserialize user used to add user info from session store to req
-    fastifyPassport.registerUserDeserializer(async (passport) => passport?.user || passport);
-}
-export default plugin;

package/dist/server/plugins/cron/cronList.d.ts

@@ -1,5 +0,0 @@
-declare const cronList: Record<string, Function>;
-declare const cronTime: Record<string, string | number>;
-export { cronList, cronTime };
-export default cronList;
-//# sourceMappingURL=cronList.d.ts.map

package/dist/server/plugins/cron/cronList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cronList.d.ts","sourceRoot":"","sources":["../../../../server/plugins/cron/cronList.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAM,CAAC;AAC9C,QAAA,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAM,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAE9B,eAAe,QAAQ,CAAC"}

package/dist/server/plugins/cron/cronList.js

@@ -1,4 +0,0 @@
-const cronList = {};
-const cronTime = {};
-export { cronList, cronTime };
-export default cronList;

package/dist/server/plugins/cron/funcs/addCron.d.ts

@@ -1,13 +0,0 @@
-/**
- * interval:
- * -   02:54 - every day
- * -    2:03 - every day
- * -   *1:43 - 2 times a day
- * -  *12:03 - 2 times a day
- * -   **:54 - every hour
- * -   **:*3 - every 10 minutes
- * -      60 - every minute
- * - 10 * 60 - every 10 minutes
- */
-export default function addCron(func: any, interval: number | string, pg?: any): Promise<void>;
-//# sourceMappingURL=addCron.d.ts.map

package/dist/server/plugins/cron/funcs/addCron.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addCron.d.ts","sourceRoot":"","sources":["../../../../../server/plugins/cron/funcs/addCron.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AAEH,wBAA8B,OAAO,CACnC,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,MAAM,GAAG,MAAM,EACzB,EAAE,MAAmB,iBAkCtB"}