@paroicms/server 0.151.0 → 0.151.2

package/dist/modules/core/auth/auth.service.js

@@ -0,0 +1,163 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const common_1 = require("@nestjs/common");
+const data_formatters_lib_1 = require("@paroi/data-formatters-lib");
+const data_format_1 = require("../../../common/data-format");
+const context_1 = require("../../../context");
+const passwordEncrypt_helper_1 = require("../../../helpers/passwordEncrypt-helper");
+const special_account_helpers_1 = require("../../../helpers/special-account.helpers");
+const account_queries_1 = require("../account/account.queries");
+let AuthService = class AuthService {
+    jwtService;
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async login(siteContext, user) {
+        const defaultLang = siteContext.siteSchema.defaultLang;
+        let account;
+        if (context_1.appConf.devAccount?.email === user.email) {
+            account = this.#validateDevAccount({
+                user,
+                devAccount: context_1.appConf.devAccount,
+            });
+        }
+        else {
+            account = await this.#validateUser(siteContext, user);
+        }
+        if (!account) {
+            return {
+                message: "Unauthorized",
+                statusCode: 401,
+            };
+        }
+        const parsedPreferences = account.preferences
+            ? (0, data_format_1.formatAccountPreferences)(account.preferences)
+            : undefined;
+        return {
+            id: account.id,
+            email: account.email,
+            lang: parsedPreferences?.lang ?? defaultLang,
+            name: account.name,
+            token: this.jwtService.sign({
+                email: account.email,
+                id: account.id,
+            }),
+        };
+    }
+    async verifyToken(siteContext, token) {
+        try {
+            const payload = await this.jwtService.verifyAsync(token);
+            const defaultLang = siteContext.siteSchema.defaultLang;
+            let account;
+            const parsedPlatformAccountId = (0, special_account_helpers_1.parsePlatformAdminAccountId)(payload.id);
+            if ((0, special_account_helpers_1.isDevAccountId)(payload.id)) {
+                account = (0, special_account_helpers_1.getDevAccount)(payload.id);
+            }
+            else if (parsedPlatformAccountId) {
+                account = (0, special_account_helpers_1.getPlatformAdminAccount)(parsedPlatformAccountId);
+            }
+            else {
+                account = await (0, account_queries_1.findAccountByIdAndEmail)(siteContext, {
+                    id: (0, data_formatters_lib_1.strVal)(payload.id),
+                    email: (0, data_formatters_lib_1.strVal)(payload.email),
+                });
+            }
+            const parsedPreferences = account.preferences
+                ? (0, data_format_1.formatAccountPreferences)(account.preferences)
+                : undefined;
+            return {
+                email: account.email,
+                id: account.id,
+                lang: parsedPreferences?.lang ?? defaultLang,
+                name: account.name,
+                token,
+            };
+        }
+        catch (error) {
+            siteContext.siteLog.error(error);
+            return {
+                statusCode: 401,
+                message: "Invalid account",
+            };
+        }
+    }
+    async loginByPlatformToken(siteContext, token) {
+        try {
+            const payload = await this.jwtService.verifyAsync(token, {
+                secret: context_1.platformJwtSecret,
+            });
+            if (!payload?.email) {
+                throw new common_1.BadRequestException("email not found in token payload");
+            }
+            const defaultLang = siteContext.siteSchema.defaultLang;
+            let account;
+            const platAdmAccountIndex = (context_1.appConf.platformAdminAccounts ?? []).findIndex((account) => account.email === payload.email);
+            if (platAdmAccountIndex !== -1) {
+                account = (0, special_account_helpers_1.getPlatformAdminAccount)({ index: platAdmAccountIndex });
+            }
+            else {
+                const foundAccount = await (0, account_queries_1.findAccountByEmail)(siteContext, payload.email);
+                if (!foundAccount) {
+                    throw new common_1.NotFoundException();
+                }
+                account = foundAccount;
+            }
+            const parsedPreferences = account.preferences
+                ? (0, data_format_1.formatAccountPreferences)(account.preferences)
+                : undefined;
+            return {
+                id: account.id,
+                email: payload.email,
+                lang: parsedPreferences?.lang ?? defaultLang,
+                name: account.name,
+                token: this.jwtService.sign({
+                    email: payload.email,
+                    id: account.id,
+                }),
+            };
+        }
+        catch (error) {
+            siteContext.siteLog.error(error);
+            return {
+                statusCode: 401,
+                message: "Invalid account",
+            };
+        }
+    }
+    async #validateUser(siteContext, { email, password }) {
+        const user = await (0, account_queries_1.findAccountByEmail)(siteContext, email);
+        let samePassword = false;
+        if (user?.passwordHash) {
+            samePassword = await (0, passwordEncrypt_helper_1.comparePassword)(password, user.passwordHash);
+        }
+        const canPass = user?.passwordHash && samePassword;
+        if (!canPass)
+            return;
+        return user;
+    }
+    #validateDevAccount({ user, devAccount, }) {
+        if (user.email !== devAccount.email || user.password !== devAccount.password)
+            return;
+        const { password, ...others } = devAccount;
+        return {
+            ...others,
+            id: special_account_helpers_1.devAccountId,
+        };
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [Function])
+], AuthService);
+//# sourceMappingURL=auth.service.js.map

package/dist/modules/core/auth/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAoF;AAEpF,oEAAoD;AACpD,6DAAuE;AACvE,8CAA8D;AAC9D,oFAA0E;AAC1E,sFAMkD;AAIlD,gEAAyF;AAIlF,IAAM,WAAW,GAAjB,MAAM,WAAW;IACF;IAApB,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9C,KAAK,CAAC,KAAK,CAAC,WAAwB,EAAE,IAAgB;QACpD,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC;QAEvD,IAAI,OAAiC,CAAC;QACtC,IAAI,iBAAO,CAAC,UAAU,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC;gBACjC,IAAI;gBACJ,UAAU,EAAE,iBAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,cAAc;gBACvB,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,IAAA,sCAAwB,EAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,iBAAiB,EAAE,IAAI,IAAI,WAAW;YAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;aACf,CAAC;SACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAwB,EAAE,KAAa;QACvD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC;YAEvD,IAAI,OAAqB,CAAC;YAC1B,MAAM,uBAAuB,GAAG,IAAA,qDAA2B,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,IAAA,wCAAc,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/B,OAAO,GAAG,IAAA,uCAAa,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,uBAAuB,EAAE,CAAC;gBACnC,OAAO,GAAG,IAAA,iDAAuB,EAAC,uBAAuB,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,MAAM,IAAA,yCAAuB,EAAC,WAAW,EAAE;oBACnD,EAAE,EAAE,IAAA,4BAAM,EAAC,OAAO,CAAC,EAAE,CAAC;oBACtB,KAAK,EAAE,IAAA,4BAAM,EAAC,OAAO,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;gBAC3C,CAAC,CAAC,IAAA,sCAAwB,EAAC,OAAO,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO;gBACL,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,iBAAiB,EAAE,IAAI,IAAI,WAAW;gBAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,iBAAiB;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,WAAwB,EACxB,KAAa;QAEb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE;gBACvD,MAAM,EAAE,2BAAiB;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,4BAAmB,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC;YAEvD,IAAI,OAAqB,CAAC;YAC1B,MAAM,mBAAmB,GAAG,CAAC,iBAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,SAAS,CACzE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAC7C,CAAC;YACF,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/B,OAAO,GAAG,IAAA,iDAAuB,EAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,MAAM,IAAA,oCAAkB,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,0BAAiB,EAAE,CAAC;gBAChC,CAAC;gBACD,OAAO,GAAG,YAAY,CAAC;YACzB,CAAC;YAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;gBAC3C,CAAC,CAAC,IAAA,sCAAwB,EAAC,OAAO,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,iBAAiB,EAAE,IAAI,IAAI,WAAW;gBAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,iBAAiB;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAwB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAc;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAA,oCAAkB,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAE1D,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;YACvB,YAAY,GAAG,MAAM,IAAA,wCAAe,EAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,YAAY,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB,CAAC,EAClB,IAAI,EACJ,UAAU,GACmC;QAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;YAAE,OAAO;QACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC;QAC3C,OAAO;YACL,GAAG,MAAM;YACT,EAAE,EAAE,sCAAY;SACjB,CAAC;IACJ,CAAC;CACF,CAAA;AA1JY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CA0JvB"}

package/dist/modules/core/auth/auth.types.d.ts

@@ -0,0 +1,27 @@
+export type LoginAction = SignInLoginAction | VerifyLoginAction;
+export interface SignInLoginAction {
+    action: "signIn";
+    email: string;
+    password: string;
+}
+export interface VerifyLoginAction {
+    action: "verify" | "loginWithPlatformToken";
+    token: string;
+}
+export interface LoginInput {
+    email: string;
+    password: string;
+}
+export interface OAuthSuccess {
+    email: string;
+}
+export interface LoginSuccess extends OAuthSuccess {
+    id: string;
+    name?: string;
+    lang: string;
+    token: string;
+}
+export interface LoginFailed {
+    statusCode: 401;
+    message: string;
+}

package/dist/modules/core/auth/auth.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth.types.js.map

package/dist/modules/core/auth/auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/auth.types.ts"],"names":[],"mappings":""}

package/dist/modules/core/auth/jwt.auth.guard.d.ts

@@ -0,0 +1,6 @@
+import { type ExecutionContext } from "@nestjs/common";
+declare const JwtAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class JwtAuthGuard extends JwtAuthGuard_base {
+    getRequest(context: ExecutionContext): any;
+}
+export {};

package/dist/modules/core/auth/jwt.auth.guard.js

@@ -0,0 +1,23 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const graphql_1 = require("@nestjs/graphql");
+const passport_1 = require("@nestjs/passport");
+let JwtAuthGuard = class JwtAuthGuard extends (0, passport_1.AuthGuard)("jwt") {
+    getRequest(context) {
+        const ctx = graphql_1.GqlExecutionContext.create(context);
+        return ctx.getContext().req;
+    }
+};
+exports.JwtAuthGuard = JwtAuthGuard;
+exports.JwtAuthGuard = JwtAuthGuard = __decorate([
+    (0, common_1.Injectable)()
+], JwtAuthGuard);
+//# sourceMappingURL=jwt.auth.guard.js.map

package/dist/modules/core/auth/jwt.auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.auth.guard.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/jwt.auth.guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAmE;AACnE,6CAAsD;AACtD,+CAA6C;AAGtC,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,IAAA,oBAAS,EAAC,KAAK,CAAC;IAChD,UAAU,CAAC,OAAyB;QAClC,MAAM,GAAG,GAAG,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC;IAC9B,CAAC;CACF,CAAA;AALY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CAKxB"}

package/dist/modules/core/auth/jwt.strategy.d.ts

@@ -0,0 +1,10 @@
+import { Strategy } from "passport-jwt";
+declare const JwtStrategy_base: new (...args: any[]) => Strategy;
+export declare class JwtStrategy extends JwtStrategy_base {
+    constructor();
+    validate(payload: any): {
+        userId: any;
+        email: any;
+    };
+}
+export {};

package/dist/modules/core/auth/jwt.strategy.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_jwt_1 = require("passport-jwt");
+const context_1 = require("../../../context");
+let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+    constructor() {
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKey: context_1.jwtSecret,
+            logging: true,
+        });
+    }
+    validate(payload) {
+        return { userId: payload.sub, email: payload.email };
+    }
+};
+exports.JwtStrategy = JwtStrategy;
+exports.JwtStrategy = JwtStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], JwtStrategy);
+//# sourceMappingURL=jwt.strategy.js.map

package/dist/modules/core/auth/jwt.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,+CAAoD;AACpD,+CAAoD;AACpD,8CAA6C;AAGtC,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IACzD;QACE,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,2BAA2B,EAAE;YACxD,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,mBAAS;YACtB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAY;QACnB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAbY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CAavB"}

package/dist/modules/core/backup/backup.controller.d.ts

@@ -0,0 +1,7 @@
+import type { JwtService } from "@nestjs/jwt";
+import type { Request, Response } from "express";
+export declare class BackupController {
+    private readonly jwtService;
+    constructor(jwtService: JwtService);
+    downloadBackup(backupName: string, req: Request, res: Response, token: string): Promise<Response<any, Record<string, any>>>;
+}

package/dist/modules/core/backup/backup.controller.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupController = void 0;
+const node_stream_1 = require("node:stream");
+const common_1 = require("@nestjs/common");
+const backup_1 = require("../../../site-backup/backup");
+const backup_helper_1 = require("../../../site-backup/backup.helper");
+const site_context_1 = require("../../../site-context/site-context");
+let BackupController = class BackupController {
+    jwtService;
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async downloadBackup(backupName, req, res, token) {
+        if (!token)
+            throw new Error("missing user token");
+        const { backupFile } = await this.jwtService.verifyAsync(token, { ignoreExpiration: false });
+        if (!(0, backup_helper_1.checkBackupFileName)({ fqdn: req.hostname }, backupName)) {
+            throw new common_1.NotFoundException("invalid payload");
+        }
+        if (backupFile !== backupName) {
+            throw new common_1.BadRequestException("invalid token provided");
+        }
+        const siteContext = await (0, site_context_1.getSiteContext)(req.hostname);
+        const { fileStream, fileWeight } = await (0, backup_1.getBackup)(siteContext, backupName);
+        res.setHeader("Content-Transfer-Encoding", "Binary");
+        res.setHeader("Content-Length", fileWeight);
+        res.setHeader("Content-disposition", `attachment; filename=${backupName}`);
+        return node_stream_1.Readable.from(fileStream).pipe(res);
+    }
+};
+exports.BackupController = BackupController;
+__decorate([
+    (0, common_1.Get)(":backupName"),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Param)("backupName")),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __param(3, (0, common_1.Query)("t")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], BackupController.prototype, "downloadBackup", null);
+exports.BackupController = BackupController = __decorate([
+    (0, common_1.Controller)("adm/api/v1/backup"),
+    __metadata("design:paramtypes", [Function])
+], BackupController);
+//# sourceMappingURL=backup.controller.js.map

package/dist/modules/core/backup/backup.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.controller.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAuC;AACvC,2CAUwB;AAGxB,wDAAwD;AACxD,sEAAyE;AACzE,qEAAoE;AAG7D,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAIjD,AAAN,KAAK,CAAC,cAAc,CACG,UAAkB,EAChC,GAAY,EACZ,GAAa,EACR,KAAa;QAEzB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAErD,KAAK,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,IAAA,mCAAmB,EAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAA,6BAAc,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,kBAAS,EAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAE5E,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QAC5C,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,wBAAwB,UAAU,EAAE,CAAC,CAAC;QAC3E,OAAO,sBAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;CACF,CAAA;AAhCY,4CAAgB;AAKrB;IAFL,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,GAAG,CAAC,CAAA;;;;sDAsBZ;2BA/BU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,mBAAmB,CAAC;;GACnB,gBAAgB,CAgC5B"}

package/dist/modules/core/backup/backup.module.d.ts

@@ -0,0 +1,2 @@
+export declare class BackupModule {
+}

package/dist/modules/core/backup/backup.module.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupModule = void 0;
+const common_1 = require("@nestjs/common");
+const backup_controller_1 = require("./backup.controller");
+const backup_resolver_1 = require("./backup.resolver");
+let BackupModule = class BackupModule {
+};
+exports.BackupModule = BackupModule;
+exports.BackupModule = BackupModule = __decorate([
+    (0, common_1.Module)({
+        providers: [backup_resolver_1.BackupResolver],
+        controllers: [backup_controller_1.BackupController],
+    })
+], BackupModule);
+//# sourceMappingURL=backup.module.js.map

package/dist/modules/core/backup/backup.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.module.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2DAAuD;AACvD,uDAAmD;AAM5C,IAAM,YAAY,GAAlB,MAAM,YAAY;CAAG,CAAA;AAAf,oCAAY;uBAAZ,YAAY;IAJxB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,gCAAc,CAAC;QAC3B,WAAW,EAAE,CAAC,oCAAgB,CAAC;KAChC,CAAC;GACW,YAAY,CAAG"}

package/dist/modules/core/backup/backup.resolver.d.ts

@@ -0,0 +1,8 @@
+import type { JwtService } from "@nestjs/jwt";
+import type { GraphqlContext } from "../../graphql.types";
+import { BackupInfoObjectType } from "./backup.shema";
+export declare class BackupResolver {
+    private jwtService;
+    constructor(jwtService: JwtService);
+    initializeBackup({ fqdn, req }: GraphqlContext): Promise<BackupInfoObjectType>;
+}

package/dist/modules/core/backup/backup.resolver.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupResolver = void 0;
+const common_1 = require("@nestjs/common");
+const graphql_1 = require("@nestjs/graphql");
+const backup_1 = require("../../../site-backup/backup");
+const site_context_1 = require("../../../site-context/site-context");
+const jwt_auth_guard_1 = require("../auth/jwt.auth.guard");
+const backup_shema_1 = require("./backup.shema");
+let BackupResolver = class BackupResolver {
+    jwtService;
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async initializeBackup({ fqdn, req }) {
+        const siteContext = await (0, site_context_1.getSiteContext)(fqdn);
+        const { zipFileWeight, zipFileName } = await (0, backup_1.initNewBackup)(siteContext);
+        const accessToken = this.jwtService.sign({
+            backupFile: zipFileName,
+        }, { expiresIn: "30m" });
+        const downloadUrl = `/adm/api/v1/backup/${zipFileName}/?t=${accessToken}`;
+        return {
+            downloadUrl,
+            fileWeight: zipFileWeight,
+        };
+    }
+};
+exports.BackupResolver = BackupResolver;
+__decorate([
+    (0, graphql_1.Mutation)(() => backup_shema_1.BackupInfoObjectType),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackupResolver.prototype, "initializeBackup", null);
+exports.BackupResolver = BackupResolver = __decorate([
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
+    (0, graphql_1.Resolver)(() => backup_shema_1.BackupInfoObjectType),
+    __metadata("design:paramtypes", [Function])
+], BackupResolver);
+//# sourceMappingURL=backup.resolver.js.map

package/dist/modules/core/backup/backup.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.resolver.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2C;AAC3C,6CAA8D;AAE9D,wDAA4D;AAC5D,qEAAoE;AAEpE,2DAAsD;AACtD,iDAAsD;AAI/C,IAAM,cAAc,GAApB,MAAM,cAAc;IACL;IAApB,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAGxC,AAAN,KAAK,CAAC,gBAAgB,CAAY,EAAE,IAAI,EAAE,GAAG,EAAkB;QAC7D,MAAM,WAAW,GAAG,MAAM,IAAA,6BAAc,EAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,sBAAa,EAAC,WAAW,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CACtC;YACE,UAAU,EAAE,WAAW;SACxB,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,MAAM,WAAW,GAAG,sBAAsB,WAAW,OAAO,WAAW,EAAE,CAAC;QAE1E,OAAO;YACL,WAAW;YACX,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AApBY,wCAAc;AAInB;IADL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,mCAAoB,CAAC;IACb,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;sDAehC;yBAnBU,cAAc;IAF1B,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,mCAAoB,CAAC;;GACxB,cAAc,CAoB1B"}

package/dist/modules/core/backup/backup.shema.d.ts

@@ -0,0 +1,4 @@
+export declare class BackupInfoObjectType {
+    fileWeight: number;
+    downloadUrl: string;
+}

package/dist/modules/core/backup/backup.shema.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupInfoObjectType = void 0;
+const graphql_1 = require("@nestjs/graphql");
+let BackupInfoObjectType = class BackupInfoObjectType {
+    fileWeight;
+    downloadUrl;
+};
+exports.BackupInfoObjectType = BackupInfoObjectType;
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int),
+    __metadata("design:type", Number)
+], BackupInfoObjectType.prototype, "fileWeight", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => String),
+    __metadata("design:type", String)
+], BackupInfoObjectType.prototype, "downloadUrl", void 0);
+exports.BackupInfoObjectType = BackupInfoObjectType = __decorate([
+    (0, graphql_1.ObjectType)("BackupInfo")
+], BackupInfoObjectType);
+//# sourceMappingURL=backup.shema.js.map

package/dist/modules/core/backup/backup.shema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.shema.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.shema.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAyD;AAGlD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAE/B,UAAU,CAAU;IAGpB,WAAW,CAAU;CACtB,CAAA;AANY,oDAAoB;AAE/B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,CAAC;;wDACG;AAGpB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;yDACC;+BALV,oBAAoB;IADhC,IAAA,oBAAU,EAAC,YAAY,CAAC;GACZ,oBAAoB,CAMhC"}

package/dist/modules/core/core.module.d.ts

@@ -0,0 +1,2 @@
+export declare class CoreModule {
+}

package/dist/modules/core/core.module.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreModule = void 0;
+const common_1 = require("@nestjs/common");
+const account_auth_module_1 = require("./account-auth/account-auth.module");
+const account_module_1 = require("./account/account.module");
+const auth_module_1 = require("./auth/auth.module");
+const backup_module_1 = require("./backup/backup.module");
+const document_module_1 = require("./document/document.module");
+const fields_module_1 = require("./fields/fields.module");
+const leaf_module_1 = require("./leaf/leaf.module");
+const login_module_1 = require("./login/login.module");
+const media_module_1 = require("./media/media.module");
+const part_module_1 = require("./part/part.module");
+const section_module_1 = require("./section/section.module");
+const site_info_module_1 = require("./site-info/site-info.module");
+const site_schema_module_1 = require("./site-schema/site-schema.module");
+const term_flag_module_1 = require("./term-flag/term-flag.module");
+const unprotected_module_1 = require("./unprotected/unprotected.module");
+let CoreModule = class CoreModule {
+};
+exports.CoreModule = CoreModule;
+exports.CoreModule = CoreModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            unprotected_module_1.UnprotectedModule,
+            site_info_module_1.SiteInfoModule,
+            section_module_1.SectionModule,
+            document_module_1.DocumentModule,
+            leaf_module_1.LeafModule,
+            account_module_1.AccountModule,
+            account_auth_module_1.AccountAuthModule,
+            auth_module_1.AuthModule,
+            login_module_1.LoginModule,
+            fields_module_1.LeafJsonFieldModule,
+            site_schema_module_1.SiteSchemaModule,
+            term_flag_module_1.TermFlagModule,
+            part_module_1.PartModule,
+            media_module_1.MediaModule,
+            backup_module_1.BackupModule,
+        ],
+    })
+], CoreModule);
+//# sourceMappingURL=core.module.js.map

package/dist/modules/core/core.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.module.js","sourceRoot":"","sources":["../../../src/modules/core/core.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,4EAAuE;AACvE,6DAAyD;AACzD,oDAAgD;AAChD,0DAAsD;AACtD,gEAA4D;AAC5D,0DAA6D;AAC7D,oDAAgD;AAChD,uDAAmD;AACnD,uDAAmD;AACnD,oDAAgD;AAChD,6DAAyD;AACzD,mEAA8D;AAC9D,yEAAoE;AACpE,mEAA8D;AAC9D,yEAAqE;AAqB9D,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IAnBtB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,sCAAiB;YACjB,iCAAc;YACd,8BAAa;YACb,gCAAc;YACd,wBAAU;YACV,8BAAa;YACb,uCAAiB;YACjB,wBAAU;YACV,0BAAW;YACX,mCAAmB;YACnB,qCAAgB;YAChB,iCAAc;YACd,wBAAU;YACV,0BAAW;YACX,4BAAY;SACb;KACF,CAAC;GACW,UAAU,CAAG"}

package/dist/modules/core/document/document.helper.d.ts

@@ -0,0 +1,2 @@
+import { type SiteSchema } from "@paroicms/anywhere-lib";
+export declare function isAutoPublishDocument(siteSchema: SiteSchema, leafType: string): boolean | undefined;

package/dist/modules/core/document/document.helper.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAutoPublishDocument = void 0;
+const anywhere_lib_1 = require("@paroicms/anywhere-lib");
+function isAutoPublishDocument(siteSchema, leafType) {
+    const documentType = (0, anywhere_lib_1.getDocumentTypeByLeafType)(siteSchema, leafType);
+    return documentType.kind === "classic" && documentType.autoPublish;
+}
+exports.isAutoPublishDocument = isAutoPublishDocument;
+//# sourceMappingURL=document.helper.js.map

package/dist/modules/core/document/document.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.helper.js","sourceRoot":"","sources":["../../../../src/modules/core/document/document.helper.ts"],"names":[],"mappings":";;;AAAA,yDAAoF;AAEpF,SAAgB,qBAAqB,CAAC,UAAsB,EAAE,QAAgB;IAC5E,MAAM,YAAY,GAAG,IAAA,wCAAyB,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrE,OAAO,YAAY,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,WAAW,CAAC;AACrE,CAAC;AAHD,sDAGC"}

package/dist/modules/core/document/document.model.d.ts

@@ -0,0 +1,9 @@
+export declare class DocumentEntity {
+    leafId: string;
+    lang: string;
+    title?: string;
+    slug?: string;
+    metaDescription?: string;
+    metaKeywords?: string;
+    idToString(): void;
+}