@paroicms/server 1.84.1 → 1.85.0

package/dist/modules/core/account/account.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.resolver.js","sourceRoot":"","sources":["../../../../src/modules/core/account/account.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAGhE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,KAAK,EAAE;QACL,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACvD,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5D,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,QAAQ,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,MAAM,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5D,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;KACF;IACD,QAAQ,EAAE;QACR,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACjE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE;gBACtC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC;gBAClD,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE;gBACjD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACpE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACpF,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,qBAAqB,CAAC,WAAW,EAAE,SAAS,EAAE;gBAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;aACvC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;KACF;CACF,CAAC"}

package/dist/modules/core/account-auth/account-auth.service.d.ts

@@ -0,0 +1,3 @@
+import type { Profile } from "passport-google-oauth20";
+import type { LoginFailed, OAuthSuccess } from "../auth/auth.types.js";
+export declare function validateOAuthLogin(googleAccount: Profile): Promise<OAuthSuccess | LoginFailed>;

package/dist/modules/core/account-auth/account-auth.service.js

@@ -0,0 +1,25 @@
+import { platformLogger } from "../../../context.js";
+export async function validateOAuthLogin(googleAccount) {
+    try {
+        const email = googleAccount._json.email;
+        const emailVerified = googleAccount._json.email_verified;
+        if (!email || emailVerified !== true) {
+            platformLogger.error("Missing user email use scope:['email'] to retrieve email from google auth api");
+            return {
+                message: "Unauthorized",
+                statusCode: 401,
+            };
+        }
+        return {
+            email,
+        };
+    }
+    catch (error) {
+        platformLogger.error(error);
+        return {
+            message: "Unauthorized",
+            statusCode: 401,
+        };
+    }
+}
+//# sourceMappingURL=account-auth.service.js.map

package/dist/modules/core/account-auth/account-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-auth.service.js","sourceRoot":"","sources":["../../../../src/modules/core/account-auth/account-auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,cAAqC,CAAC;QAChF,IAAI,CAAC,KAAK,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACrC,cAAc,CAAC,KAAK,CAClB,+EAA+E,CAChF,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,cAAc;gBACvB,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;SACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/modules/core/account-auth/account-auth.strategy.d.ts

@@ -0,0 +1,3 @@
+import passport from "passport";
+declare const _default: passport.PassportStatic;
+export default _default;

package/dist/modules/core/account-auth/account-auth.strategy.js

@@ -0,0 +1,26 @@
+import passport from "passport";
+import { Strategy as GoogleStrategy } from "passport-google-oauth20";
+import { appConf, platformAuthUrl, platformLogger } from "../../../context.js";
+import { validateOAuthLogin } from "./account-auth.service.js";
+if (!appConf.googleAuth || appConf.googleAuth.disabled) {
+    throw new Error("Google auth is disabled");
+}
+export default passport.use(new GoogleStrategy({
+    clientID: appConf.googleAuth.clientId,
+    clientSecret: appConf.googleAuth.clientSecret,
+    callbackURL: `${platformAuthUrl}/google/callback`,
+    passReqToCallback: true,
+    scope: ["email"],
+}, async (req, accessToken, refreshToken, profile, done) => {
+    try {
+        if (!profile)
+            throw new Error(`Can't connect to Google`);
+        const user = await validateOAuthLogin(profile);
+        done(null, user);
+    }
+    catch (err) {
+        platformLogger.error(err);
+        done(err, false);
+    }
+}));
+//# sourceMappingURL=account-auth.strategy.js.map

package/dist/modules/core/account-auth/account-auth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-auth.strategy.js","sourceRoot":"","sources":["../../../../src/modules/core/account-auth/account-auth.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAgB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACvD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7C,CAAC;AAED,eAAe,QAAQ,CAAC,GAAG,CACzB,IAAI,cAAc,CAChB;IACE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ;IACrC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;IAC7C,WAAW,EAAE,GAAG,eAAe,kBAAkB;IACjD,iBAAiB,EAAE,IAAI;IACvB,KAAK,EAAE,CAAC,OAAO,CAAC;CACjB,EACD,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,OAAuB,EAAE,IAAI,EAAE,EAAE;IACtE,IAAI,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CACF,CACF,CAAC"}

package/dist/modules/core/auth/auth.helper.d.ts

@@ -0,0 +1,15 @@
+import type { Request, Response } from "express";
+export interface BearerTokenPayload {
+    id: string;
+    email: string;
+    fqdn: string;
+}
+export declare function authGuard(req: Request): BearerTokenPayload;
+export interface GoogleUser {
+    email: string;
+}
+export declare function googleAuthGuard(req: Request, res: Response): Promise<GoogleUser>;
+export declare function verifyAccessToken(token: string): BearerTokenPayload;
+export declare function verifyPlatformToken(platformToken: string): GoogleUser;
+export declare function generateAccessToken(payload: BearerTokenPayload): string;
+export declare function generatePlatformToken(payload: GoogleUser): string;

package/dist/modules/core/auth/auth.helper.js

@@ -0,0 +1,69 @@
+import passport from "passport";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { jwtExpiresIn, jwtSecret, platformJwtSecret } from "../../../context.js";
+const { sign, verify } = (await import("jsonwebtoken")).default;
+export function authGuard(req) {
+    const authorization = req.headers.authorization;
+    if (!authorization || !authorization.startsWith("Bearer ")) {
+        throw new ApiError("Unauthorized", { status: 401 });
+    }
+    const token = authorization.substring(7);
+    let payload;
+    try {
+        payload = verify(token, jwtSecret);
+    }
+    catch (error) {
+        throw new ApiError("Unauthorized", { status: 401 });
+    }
+    if (payload.fqdn !== req.hostname) {
+        throw new ApiError("Not the right token", { status: 403 });
+    }
+    return payload;
+}
+function isGoogleUser(user) {
+    return typeof user.email === "string";
+}
+export function googleAuthGuard(req, res) {
+    return new Promise((resolve, reject) => {
+        passport.authenticate("google", { session: false }, (err, user, info) => {
+            if (err || !user || !isGoogleUser(user)) {
+                reject(new ApiError("Unauthorized", { status: 401 }));
+                return;
+            }
+            resolve(user);
+        })(req, res);
+    });
+}
+export function verifyAccessToken(token) {
+    try {
+        return verify(token, jwtSecret);
+    }
+    catch (error) {
+        throw new ApiError("Invalid token", { status: 401 });
+    }
+}
+export function verifyPlatformToken(platformToken) {
+    if (!platformJwtSecret) {
+        throw new ApiError("Platform token not set", { status: 401 });
+    }
+    try {
+        const payload = verify(platformToken, platformJwtSecret);
+        if (!payload?.email) {
+            throw new ApiError("email not found in token payload", { status: 500 });
+        }
+        return payload;
+    }
+    catch (error) {
+        throw new ApiError("Invalid  platform token", { status: 401 });
+    }
+}
+export function generateAccessToken(payload) {
+    return sign(payload, jwtSecret, { expiresIn: jwtExpiresIn });
+}
+export function generatePlatformToken(payload) {
+    if (!platformJwtSecret) {
+        throw new ApiError("Platform token not set", { status: 401 });
+    }
+    return sign(payload, platformJwtSecret, { expiresIn: "7d" });
+}
+//# sourceMappingURL=auth.helper.js.map

package/dist/modules/core/auth/auth.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.helper.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/auth.helper.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AAQhE,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAEhD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAEzC,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAuB,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD,SAAS,YAAY,CAAC,IAAS;IAC7B,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACtE,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,CAAuB,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAe,CAAC;QACvE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/modules/core/auth/auth.service.d.ts

@@ -0,0 +1,5 @@
+import type { SiteContext } from "../../../site-context/site-context.types.js";
+import type { LoginFailed, LoginInput, LoginSuccess } from "./auth.types.js";
+export declare function loginUser(siteContext: SiteContext, user: LoginInput): Promise<LoginSuccess | LoginFailed>;
+export declare function getVerifiedAccountFromToken(siteContext: SiteContext, token: string): Promise<LoginSuccess | LoginFailed>;
+export declare function loginByPlatformToken(siteContext: SiteContext, token: string): Promise<LoginSuccess | LoginFailed>;

package/dist/modules/core/auth/auth.service.js

@@ -0,0 +1,144 @@
+import { strVal } from "@paroi/data-formatters-lib";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { formatAccountPreferences } from "../../../common/data-format.js";
+import { appConf } from "../../../context.js";
+import { comparePassword } from "../../../helpers/passwordEncrypt-helper.js";
+import { devAccountId, getDevAccount, getPlatformAdminAccount, isDevAccountId, parsePlatformAdminAccountId, } from "../../../helpers/special-account.helpers.js";
+import { findAccountByEmail, findAccountByIdAndEmail } from "../account/account.queries.js";
+import { generateAccessToken, verifyAccessToken, verifyPlatformToken, } from "./auth.helper.js";
+export async function loginUser(siteContext, user) {
+    const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+    let account;
+    if (appConf.devAccount?.email === user.email) {
+        account = validateDevAccount({
+            user,
+            devAccount: appConf.devAccount,
+        });
+    }
+    else {
+        account = await validateUser(siteContext, user);
+    }
+    if (!account) {
+        return {
+            message: "Unauthorized",
+            statusCode: 401,
+        };
+    }
+    const parsedPreferences = account.preferences
+        ? formatAccountPreferences(account.preferences)
+        : undefined;
+    return {
+        id: account.id,
+        email: account.email,
+        language: parsedPreferences?.language ?? defaultLanguage,
+        name: account.name,
+        token: generateAccessToken({
+            email: account.email,
+            id: account.id,
+            fqdn: siteContext.fqdn,
+        }),
+    };
+}
+export async function getVerifiedAccountFromToken(siteContext, token) {
+    let payload;
+    try {
+        payload = verifyAccessToken(token);
+        if (payload.fqdn !== siteContext.fqdn) {
+            throw new ApiError("Not the right token", { status: 403 });
+        }
+        const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+        let account;
+        const parsedPlatformAccountId = parsePlatformAdminAccountId(payload.id);
+        if (isDevAccountId(payload.id)) {
+            account = getDevAccount(payload.id);
+        }
+        else if (parsedPlatformAccountId) {
+            account = getPlatformAdminAccount(parsedPlatformAccountId);
+        }
+        else {
+            account = await findAccountByIdAndEmail(siteContext, {
+                id: strVal(payload.id),
+                email: strVal(payload.email),
+            });
+        }
+        const parsedPreferences = account.preferences
+            ? formatAccountPreferences(account.preferences)
+            : undefined;
+        return {
+            email: account.email,
+            id: account.id,
+            language: parsedPreferences?.language ?? defaultLanguage,
+            name: account.name,
+            token,
+        };
+    }
+    catch (error) {
+        if (payload) {
+            siteContext.logger.warn(`Invalid token: ${JSON.stringify(payload)}`);
+        }
+        return {
+            statusCode: 401,
+            message: "Unauthorized",
+        };
+    }
+}
+export async function loginByPlatformToken(siteContext, token) {
+    try {
+        const payload = await verifyPlatformToken(token);
+        const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+        let account;
+        const platAdmAccountIndex = (appConf.platformAdminAccounts ?? []).findIndex((account) => account.email === payload.email);
+        if (platAdmAccountIndex !== -1) {
+            account = getPlatformAdminAccount({ index: platAdmAccountIndex });
+        }
+        else {
+            const foundAccount = await findAccountByEmail(siteContext, payload.email);
+            if (!foundAccount) {
+                throw new ApiError("Account not found", { status: 404 });
+            }
+            account = foundAccount;
+        }
+        const parsedPreferences = account.preferences
+            ? formatAccountPreferences(account.preferences)
+            : undefined;
+        return {
+            id: account.id,
+            email: payload.email,
+            language: parsedPreferences?.language ?? defaultLanguage,
+            name: account.name,
+            token: generateAccessToken({
+                email: payload.email,
+                id: account.id,
+                fqdn: siteContext.fqdn,
+            }),
+        };
+    }
+    catch (error) {
+        siteContext.logger.error(error);
+        return {
+            statusCode: 401,
+            message: "Invalid account",
+        };
+    }
+}
+async function validateUser(siteContext, { email, password }) {
+    const user = await findAccountByEmail(siteContext, email);
+    let samePassword = false;
+    if (user?.passwordHash) {
+        samePassword = await comparePassword(password, user.passwordHash);
+    }
+    const canPass = user?.passwordHash && samePassword;
+    if (!canPass)
+        return;
+    return user;
+}
+function validateDevAccount({ user, devAccount, }) {
+    if (user.email !== devAccount.email || user.password !== devAccount.password)
+        return;
+    const { password, ...others } = devAccount;
+    return {
+        ...others,
+        id: devAccountId,
+    };
+}
+//# sourceMappingURL=auth.service.js.map

package/dist/modules/core/auth/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EACL,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAEL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAwB,EACxB,IAAgB;IAEhB,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;IAE/D,IAAI,OAA+B,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,GAAG,kBAAkB,CAAC;YAC3B,IAAI;YACJ,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;QAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;QACxD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,mBAAmB,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,WAAW,CAAC,IAAI;SACvB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAwB,EACxB,KAAa;IAEb,IAAI,OAAuC,CAAC;IAE5C,IAAI,CAAC;QACH,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;QAE/D,IAAI,OAAmB,CAAC;QACxB,MAAM,uBAAuB,GAAG,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,OAAO,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE;gBACnD,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;SACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;YACL,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,cAAc;SACxB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAwB,EACxB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAEjD,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;QAE/D,IAAI,OAAmB,CAAC;QACxB,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,SAAS,CACzE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAC7C,CAAC;QACF,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,GAAG,YAAY,CAAC;QACzB,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,mBAAmB,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO;YACL,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,iBAAiB;SAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,WAAwB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAc;IACnF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAE1D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;QACvB,YAAY,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,YAAY,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,EAC1B,IAAI,EACJ,UAAU,GACuC;IACjD,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;QAAE,OAAO;IACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,GAAG,MAAM;QACT,EAAE,EAAE,YAAY;KACjB,CAAC;AACJ,CAAC"}

package/dist/modules/core/auth/auth.types.d.ts

@@ -0,0 +1,27 @@
+export type LoginAction = SignInLoginAction | VerifyLoginAction;
+export interface SignInLoginAction {
+    action: "signIn";
+    email: string;
+    password: string;
+}
+export interface VerifyLoginAction {
+    action: "verify" | "loginWithPlatformToken";
+    token: string;
+}
+export interface LoginInput {
+    email: string;
+    password: string;
+}
+export interface OAuthSuccess {
+    email: string;
+}
+export interface LoginSuccess extends OAuthSuccess {
+    id: string;
+    name?: string;
+    language: string;
+    token: string;
+}
+export interface LoginFailed {
+    statusCode: 401;
+    message: string;
+}

package/dist/modules/core/auth/auth.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.types.js.map

package/dist/modules/core/auth/auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../src/modules/core/auth/auth.types.ts"],"names":[],"mappings":""}

package/dist/modules/core/backup/backup.controller.d.ts

@@ -0,0 +1,2 @@
+import type { Request, Response } from "express";
+export declare function downloadBackupController(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;

package/dist/modules/core/backup/backup.controller.js

@@ -0,0 +1,26 @@
+import { checkBackupFileName, getBackup } from "@paroicms/connector";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { getHttpRequestParameter, getReqSiteContext } from "../../../express/http-helpers.js";
+import { verifyDownloadToken } from "./backup.helper.js";
+export async function downloadBackupController(req, res) {
+    const siteContext = getReqSiteContext(req);
+    const backupName = getHttpRequestParameter(req, "backupName");
+    const token = req.query.t;
+    if (!token)
+        throw new Error("missing user token");
+    const { backupFile, contentType } = verifyDownloadToken(token);
+    if (!checkBackupFileName({ fqdn: req.hostname }, backupName)) {
+        throw new ApiError("Invalid payload", { status: 404 });
+    }
+    if (backupFile !== backupName) {
+        throw new ApiError("invalid token provided", { status: 400 });
+    }
+    const { fileStream, fileWeight } = await getBackup(siteContext, backupName);
+    res.status(200);
+    res.append("Cache-Control", "no-store");
+    res.append("Content-Type", contentType);
+    res.append("Content-Length", fileWeight.toString());
+    res.append("Content-Disposition", `attachment; filename=${backupName}`);
+    return fileStream.pipe(res);
+}
+//# sourceMappingURL=backup.controller.js.map

package/dist/modules/core/backup/backup.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.controller.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAW,CAAC;IAEpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE/D,IAAI,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/modules/core/backup/backup.helper.d.ts

@@ -0,0 +1,6 @@
+export interface DownloadTokenPayload {
+    backupFile: string;
+    contentType: string;
+}
+export declare function createDownloadToken(payload: DownloadTokenPayload): string;
+export declare function verifyDownloadToken(token: string): DownloadTokenPayload;

package/dist/modules/core/backup/backup.helper.js

@@ -0,0 +1,15 @@
+import { ApiError } from "../../../common/api-error-handler.js";
+import { jwtSecret } from "../../../context.js";
+const { sign, verify } = (await import("jsonwebtoken")).default;
+export function createDownloadToken(payload) {
+    return sign(payload, jwtSecret, { expiresIn: "30m" });
+}
+export function verifyDownloadToken(token) {
+    try {
+        return verify(token, jwtSecret, { ignoreExpiration: true });
+    }
+    catch (error) {
+        throw new ApiError("Invalid token", { status: 401 });
+    }
+}
+//# sourceMappingURL=backup.helper.js.map

package/dist/modules/core/backup/backup.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.helper.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AAOhE,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAyB,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/modules/core/backup/backup.resolver.d.ts

@@ -0,0 +1,7 @@
+import type { GqlResolvers } from "../../../graphql/generated-graphql-types.js";
+import type { GraphqlContext } from "../../graphql.types.js";
+export interface BackupInfo {
+    fileWeight: number;
+    downloadUrl: string;
+}
+export declare const backupResolvers: GqlResolvers<GraphqlContext>;

package/dist/modules/core/backup/backup.resolver.js

@@ -0,0 +1,24 @@
+import { initNewBackup } from "@paroicms/connector";
+import { appVersion } from "../../../context.js";
+import { authGuard } from "../auth/auth.helper.js";
+import { createDownloadToken } from "./backup.helper.js";
+export const backupResolvers = {
+    Mutation: {
+        initializeBackup: async (_parent, _values, { siteContext, req }) => {
+            authGuard(req);
+            const { zipFileWeight, zipFileName } = await initNewBackup(siteContext, {
+                serverVersion: appVersion,
+            });
+            const accessToken = createDownloadToken({
+                backupFile: zipFileName,
+                contentType: "application/zip",
+            });
+            const downloadUrl = `/adm/backend/backup/${zipFileName}/?t=${accessToken}`;
+            return {
+                downloadUrl,
+                fileWeight: zipFileWeight,
+            };
+        },
+    },
+};
+//# sourceMappingURL=backup.resolver.js.map

package/dist/modules/core/backup/backup.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.resolver.js","sourceRoot":"","sources":["../../../../src/modules/core/backup/backup.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAOzD,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D,QAAQ,EAAE;QACR,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAuB,EAAE;YACtF,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE;gBACtE,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,mBAAmB,CAAC;gBACtC,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,iBAAiB;aAC/B,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,uBAAuB,WAAW,OAAO,WAAW,EAAE,CAAC;YAE3E,OAAO;gBACL,WAAW;gBACX,UAAU,EAAE,aAAa;aAC1B,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/modules/core/document/document.helper.d.ts

@@ -0,0 +1,2 @@
+import type { ScSiteSchema } from "@paroicms/public-anywhere-lib";
+export declare function isAutoPublishDocument(siteSchema: ScSiteSchema, typeName: string): boolean | undefined;

package/dist/modules/core/document/document.helper.js

@@ -0,0 +1,6 @@
+import { getDocumentTypeByName } from "@paroicms/internal-anywhere-lib";
+export function isAutoPublishDocument(siteSchema, typeName) {
+    const documentType = getDocumentTypeByName(siteSchema, typeName);
+    return documentType.documentKind === "regular" && documentType.autoPublish;
+}
+//# sourceMappingURL=document.helper.js.map

package/dist/modules/core/document/document.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.helper.js","sourceRoot":"","sources":["../../../../src/modules/core/document/document.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,UAAU,qBAAqB,CAAC,UAAwB,EAAE,QAAgB;IAC9E,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,YAAY,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,WAAW,CAAC;AAC7E,CAAC"}

package/dist/modules/core/document/document.resolver.d.ts

@@ -0,0 +1,3 @@
+import type { GqlResolvers } from "../../../graphql/generated-graphql-types.js";
+import type { GraphqlContext } from "../../graphql.types.js";
+export declare const documentResolvers: GqlResolvers<GraphqlContext>;

package/dist/modules/core/document/document.resolver.extend.d.ts

@@ -0,0 +1,3 @@
+import type { GqlResolvers } from "../../../graphql/generated-graphql-types.js";
+import type { GraphqlContext } from "../../graphql.types.js";
+export declare const extendWithDocumentResolver: GqlResolvers<GraphqlContext>;

package/dist/modules/core/document/document.resolver.extend.js

@@ -0,0 +1,25 @@
+import { documentToObjectType } from "../../../common/data-format.js";
+import { authGuard } from "../auth/auth.helper.js";
+import { findOneDocument, findOneTermDocument } from "./load-documents.queries.js";
+export const extendWithDocumentResolver = {
+    NodelWrap: {
+        document: async (parent, _args, { req, siteContext }) => {
+            authGuard(req);
+            const document = await findOneDocument(siteContext, {
+                nodeId: parent.nodeId,
+                language: parent.language,
+            });
+            return document ? documentToObjectType(document) : null;
+        },
+    },
+    Labeling: {
+        document: async (parent, args, { req, siteContext }) => {
+            authGuard(req);
+            return ((await findOneTermDocument(siteContext, {
+                nodeId: parent.termId,
+                language: args.language,
+            })) ?? null);
+        },
+    },
+};
+//# sourceMappingURL=document.resolver.extend.js.map

package/dist/modules/core/document/document.resolver.extend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.resolver.extend.js","sourceRoot":"","sources":["../../../../src/modules/core/document/document.resolver.extend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAGtE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEnF,MAAM,CAAC,MAAM,0BAA0B,GAAiC;IACtE,SAAS,EAAE;QACT,QAAQ,EAAE,KAAK,EAAE,MAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACrE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE;gBAClD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;KACF;IAED,QAAQ,EAAE;QACR,QAAQ,EAAE,KAAK,EAAE,MAAoB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACnE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,CACL,CAAC,MAAM,mBAAmB,CAAC,WAAW,EAAE;gBACtC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC,IAAI,IAAI,CACZ,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/modules/core/document/document.resolver.js

@@ -0,0 +1,83 @@
+import { isDef } from "@paroi/data-formatters-lib";
+import { createNoTracker } from "@paroicms/internal-server-lib";
+import { parseNodelId } from "@paroicms/public-anywhere-lib";
+import { toAbsoluteUrl } from "@paroicms/public-server-lib";
+import { documentToObjectType } from "../../../common/data-format.js";
+import { getUrlOfDocument } from "../../public-site/public-route/make-url.js";
+import { authGuard } from "../auth/auth.helper.js";
+import { getOneDocument } from "./load-documents.queries.js";
+import { createDocumentOnNode, createNodeWithDocument, deleteDocument, deleteNodeAndDocuments, updateDocument, } from "./save-documents.queries.js";
+export const documentResolvers = {
+    Query: {
+        document: async (_parent, { id }, { req, siteContext }) => {
+            authGuard(req);
+            return documentToObjectType(await getOneDocument(siteContext, parseNodelId(id)));
+        },
+    },
+    Mutation: {
+        updateDocumentTitle: async (_parent, { values, id }, { req, siteContext }) => {
+            authGuard(req);
+            const nodelId = parseNodelId(id);
+            const empty = Object.values(values).every((v) => !isDef(v));
+            if (!empty) {
+                await updateDocument(siteContext, nodelId, {
+                    title: values.title ?? undefined,
+                    slug: values.slug ?? undefined,
+                });
+            }
+            return documentToObjectType(await getOneDocument(siteContext, nodelId));
+        },
+        updateDocumentMeta: async (_parent, { values, id }, { req, siteContext }) => {
+            authGuard(req);
+            const nodelId = parseNodelId(id);
+            const empty = Object.values(values).every((v) => !isDef(v));
+            if (!empty) {
+                await updateDocument(siteContext, nodelId, values);
+            }
+            return documentToObjectType(await getOneDocument(siteContext, nodelId));
+        },
+        deleteDocument: async (_parent, { nodelId }, { req, siteContext }) => {
+            authGuard(req);
+            const parsedId = parseNodelId(nodelId);
+            await deleteDocument(siteContext, parsedId);
+            return true;
+        },
+        deleteNodeAndDocuments: async (_parent, { nodelId }, { req, siteContext }) => {
+            authGuard(req);
+            await deleteNodeAndDocuments(siteContext, parseNodelId(nodelId).nodeId);
+            return true;
+        },
+        createNodeWithDocument: async (_parent, { values, parentNodelId }, { req, siteContext }) => {
+            authGuard(req);
+            const documentId = await createNodeWithDocument(siteContext, {
+                parentId: parseNodelId(parentNodelId),
+                values: {
+                    title: values.title ?? undefined,
+                    slug: values.slug ?? undefined,
+                    typeName: values.typeName,
+                },
+            });
+            return documentToObjectType(await getOneDocument(siteContext, documentId));
+        },
+        createDocumentOnNode: async (_parent, { values, language, nodeId }, { req, siteContext }) => {
+            authGuard(req);
+            const documentId = await createDocumentOnNode(siteContext, {
+                language,
+                nodeId,
+                values: values
+                    ? { title: values.title ?? undefined, slug: values.slug ?? undefined }
+                    : undefined,
+            });
+            return documentToObjectType(await getOneDocument(siteContext, documentId));
+        },
+    },
+    Document: {
+        async url(parent, _values, { req, siteContext }) {
+            return toAbsoluteUrl(siteContext, await getUrlOfDocument(siteContext, createNoTracker(), {
+                language: parent.language,
+                nodeId: parent.nodeId,
+            }));
+        },
+    },
+};
+//# sourceMappingURL=document.resolver.js.map

package/dist/modules/core/document/document.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.resolver.js","sourceRoot":"","sources":["../../../../src/modules/core/document/document.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAGtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,KAAK,EAAE;QACL,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACxD,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;KACF;IAED,QAAQ,EAAE;QACR,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE;oBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC1E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACnE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACzF,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE;gBAC3D,QAAQ,EAAE,YAAY,CAAC,aAAa,CAAC;gBACrC,MAAM,EAAE;oBACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;oBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC1F,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE;gBACzD,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;oBACtE,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF;IAED,QAAQ,EAAE;QACR,KAAK,CAAC,GAAG,CAAC,MAA4C,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;YACnF,OAAO,aAAa,CAClB,WAAW,EACX,MAAM,gBAAgB,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE;gBACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}