@ruiapp/rapid-core 0.10.11 → 0.10.12

package/dist/core/response.d.ts

@@ -1,4 +1,5 @@
 import { HttpStatus } from "./http-types";
+import { Cookie } from "../deno-std/http/cookie";
 export declare const GlobalResponse: {
     new (body?: BodyInit, init?: ResponseInit): Response;
     prototype: Response;
@@ -13,5 +14,6 @@ export declare class RapidResponse {
     constructor(body?: BodyInit, init?: ResponseInit);
     json(obj: any, status?: HttpStatus, headers?: HeadersInit): void;
     redirect(location: string, status?: HttpStatus): void;
+    setCookie(cookie: Cookie): void;
     getResponse(): Response;
 }

package/dist/index.d.ts

@@ -37,6 +37,7 @@ export * from "./plugins/sequence/SequencePluginTypes";
 export { default as WebhooksPlugin } from "./plugins/webhooks/WebhooksPlugin";
 export { default as AuthPlugin } from "./plugins/auth/AuthPlugin";
 export * from "./plugins/auth/AuthPluginTypes";
+export { default as AuthService } from "./plugins/auth/services/AuthService";
 export { default as FileManagePlugin } from "./plugins/fileManage/FileManagePlugin";
 export { default as LicensePlugin } from "./plugins/license/LicensePlugin";
 export * from "./plugins/license/LicensePluginTypes";

package/dist/index.js

@@ -1072,158 +1072,509 @@ async function buildRoutes(server, applicationConfig) {
     return router.routes();
 }
 
-function mergeHeaders(target, source) {
-    if (source instanceof Headers) {
-        for (const keyValuePair of source.entries()) {
-            target.set(keyValuePair[0], keyValuePair[1]);
-        }
+// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
+class AssertionError extends Error {
+    name = "AssertionError";
+    constructor(message) {
+        super(message);
     }
-    else if (lodash.isArray(source)) {
-        for (const keyValuePair of source) {
-            target.set(keyValuePair[0], keyValuePair[1]);
-        }
+}
+
+// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
+/** Make an assertion, error will be thrown if `expr` does not have truthy value. */
+function assert(expr, msg = "") {
+    if (!expr) {
+        throw new AssertionError(msg);
     }
-    else if (lodash.isObject(source)) {
-        Object.entries(source).forEach(([key, value]) => target.set(key, value));
+}
+
+// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
+// This module is browser compatible.
+/**
+ * Formats the given date to IMF date time format. (Reference:
+ * https://tools.ietf.org/html/rfc7231#section-7.1.1.1).
+ * IMF is the time format to use when generating times in HTTP
+ * headers. The time being formatted must be in UTC for Format to
+ * generate the correct format.
+ *
+ * @example
+ * ```ts
+ * import { toIMF } from "https://deno.land/std@$STD_VERSION/datetime/to_imf.ts";
+ *
+ * toIMF(new Date(0)); // => returns "Thu, 01 Jan 1970 00:00:00 GMT"
+ * ```
+ * @param date Date to parse
+ * @return IMF date formatted string
+ */
+function toIMF(date) {
+    function dtPad(v, lPad = 2) {
+        return v.padStart(lPad, "0");
     }
-}
-function newResponse(options) {
-    return new Response(options.body, {
-        headers: options.headers,
-        status: options.status || 200,
-    });
-}
-class RapidResponse {
-    // TODO: remove this field.
-    #response;
-    status;
-    body;
-    headers;
-    constructor(body, init) {
-        this.body = body;
-        this.headers = new Headers(init?.headers);
-        this.status = init?.status;
+    const d = dtPad(date.getUTCDate().toString());
+    const h = dtPad(date.getUTCHours().toString());
+    const min = dtPad(date.getUTCMinutes().toString());
+    const s = dtPad(date.getUTCSeconds().toString());
+    const y = date.getUTCFullYear();
+    const days = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+    const months = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
+    return `${days[date.getUTCDay()]}, ${d} ${months[date.getUTCMonth()]} ${y} ${h}:${min}:${s} GMT`;
+}
+
+// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
+const FIELD_CONTENT_REGEXP = /^(?=[\x20-\x7E]*$)[^()@<>,;:\\"\[\]?={}\s]+$/;
+function toString(cookie) {
+    if (!cookie.name) {
+        return "";
     }
-    json(obj, status, headers) {
-        let body = null;
-        if (obj) {
-            body = JSON.stringify(obj);
-        }
-        this.headers.set("Content-Type", "application/json");
-        const responseHeaders = new Headers(this.headers);
-        if (headers) {
-            mergeHeaders(responseHeaders, headers);
-        }
-        this.status = status || 200;
-        this.body = body;
-        this.#response = newResponse({ body, status: this.status, headers: responseHeaders });
+    const out = [];
+    validateName(cookie.name);
+    validateValue(cookie.name, cookie.value);
+    out.push(`${cookie.name}=${cookie.value}`);
+    // Fallback for invalid Set-Cookie
+    // ref: https://tools.ietf.org/html/draft-ietf-httpbis-cookie-prefixes-00#section-3.1
+    if (cookie.name.startsWith("__Secure")) {
+        cookie.secure = true;
     }
-    redirect(location, status) {
-        this.headers.set("Location", location);
-        this.status = status || 302;
-        this.#response = newResponse({
-            headers: this.headers,
-            status: this.status,
-        });
+    if (cookie.name.startsWith("__Host")) {
+        cookie.path = "/";
+        cookie.secure = true;
+        delete cookie.domain;
     }
-    getResponse() {
-        if (!this.#response) {
-            this.#response = new Response(this.body, {
-                status: this.status || 200,
-                headers: this.headers,
-            });
-        }
-        return this.#response;
+    if (cookie.secure) {
+        out.push("Secure");
     }
-}
-
-// TODO: should divide to RequestContext and OperationContext
-class RouteContext {
-    request;
-    response;
-    state;
-    databaseAccessor;
-    method;
-    path;
-    params;
-    routeConfig;
-    #server;
-    #dbTransactionClient;
-    #dbTransactionState;
-    static newSystemOperationContext(server) {
-        return new RouteContext(server);
+    if (cookie.httpOnly) {
+        out.push("HttpOnly");
     }
-    constructor(server, request) {
-        this.#server = server;
-        this.databaseAccessor = server.getDatabaseAccessor();
-        this.#dbTransactionState = "uninited";
-        this.request = request;
-        this.state = {};
-        this.response = new RapidResponse();
-        // `method` and `path` are used by `koa-tree-router` to match route
-        if (this.request) {
-            this.method = request.method;
-            this.path = request.url.pathname;
-        }
+    if (typeof cookie.maxAge === "number" && Number.isInteger(cookie.maxAge)) {
+        assert(cookie.maxAge >= 0, "Max-Age must be an integer superior or equal to 0");
+        out.push(`Max-Age=${cookie.maxAge}`);
     }
-    clone() {
-        const clonedContext = new RouteContext(this.#server);
-        clonedContext.method = this.method;
-        clonedContext.path = this.path;
-        clonedContext.params = this.params;
-        clonedContext.setState(this.state);
-        return clonedContext;
+    if (cookie.domain) {
+        validateDomain(cookie.domain);
+        out.push(`Domain=${cookie.domain}`);
     }
-    setState(state) {
-        Object.assign(this.state, state);
+    if (cookie.sameSite) {
+        out.push(`SameSite=${cookie.sameSite}`);
     }
-    // `koa-tree-router` uses this method to set headers
-    set(headerName, headerValue) {
-        this.response.headers.set(headerName, headerValue);
+    if (cookie.path) {
+        validatePath(cookie.path);
+        out.push(`Path=${cookie.path}`);
     }
-    json(obj, status, headers) {
-        this.response.json(obj, status, headers);
+    if (cookie.expires) {
+        const { expires } = cookie;
+        const dateString = toIMF(typeof expires === "number" ? new Date(expires) : expires);
+        out.push(`Expires=${dateString}`);
     }
-    redirect(url, status) {
-        this.response.redirect(url, status);
+    if (cookie.unparsed) {
+        out.push(cookie.unparsed.join("; "));
     }
-    getDbTransactionClient() {
-        return this.#dbTransactionClient;
+    return out.join("; ");
+}
+/**
+ * Validate Cookie Name.
+ * @param name Cookie name.
+ */
+function validateName(name) {
+    if (name && !FIELD_CONTENT_REGEXP.test(name)) {
+        throw new TypeError(`Invalid cookie name: "${name}".`);
     }
-    async initDbTransactionClient() {
-        let dbClient = this.#dbTransactionClient;
-        if (dbClient) {
-            return dbClient;
-        }
-        dbClient = await this.databaseAccessor.getClient();
-        this.#dbTransactionState = "inited";
-        this.#dbTransactionClient = dbClient;
-        return dbClient;
+}
+/**
+ * Validate Path Value.
+ * See {@link https://tools.ietf.org/html/rfc6265#section-4.1.2.4}.
+ * @param path Path value.
+ */
+function validatePath(path) {
+    if (path == null) {
+        return;
     }
-    async beginDbTransaction() {
-        if (!this.#dbTransactionClient) {
-            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
-        }
-        if (this.#dbTransactionState === "started") {
-            throw new Error("Database transaction has been started. You can not begin a new transaction before you commit or rollback it.");
+    for (let i = 0; i < path.length; i++) {
+        const c = path.charAt(i);
+        if (c < String.fromCharCode(0x20) || c > String.fromCharCode(0x7e) || c == ";") {
+            throw new Error(path + ": Invalid cookie path char '" + c + "'");
         }
-        await this.databaseAccessor.queryDatabaseObject("BEGIN", [], this.#dbTransactionClient);
-        this.#dbTransactionState = "started";
     }
-    async commitDbTransaction() {
-        if (!this.#dbTransactionClient) {
-            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
+}
+/**
+ * Validate Cookie Value.
+ * See {@link https://tools.ietf.org/html/rfc6265#section-4.1}.
+ * @param value Cookie value.
+ */
+function validateValue(name, value) {
+    if (value == null || name == null)
+        return;
+    for (let i = 0; i < value.length; i++) {
+        const c = value.charAt(i);
+        if (c < String.fromCharCode(0x21) ||
+            c == String.fromCharCode(0x22) ||
+            c == String.fromCharCode(0x2c) ||
+            c == String.fromCharCode(0x3b) ||
+            c == String.fromCharCode(0x5c) ||
+            c == String.fromCharCode(0x7f)) {
+            throw new Error("RFC2616 cookie '" + name + "' cannot contain character '" + c + "'");
         }
-        if (this.#dbTransactionState !== "started") {
-            throw new Error("Database transaction has not been started. You should call beginDbTransaction() first.");
+        if (c > String.fromCharCode(0x80)) {
+            throw new Error("RFC2616 cookie '" + name + "' can only have US-ASCII chars as value" + c.charCodeAt(0).toString(16));
         }
-        await this.databaseAccessor.queryDatabaseObject("COMMIT", [], this.#dbTransactionClient);
-        this.#dbTransactionState = "inited";
     }
-    async rollbackDbTransaction() {
-        if (!this.#dbTransactionClient) {
-            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
-        }
+}
+/**
+ * Validate Cookie Domain.
+ * See {@link https://datatracker.ietf.org/doc/html/rfc6265#section-4.1.2.3}.
+ * @param domain Cookie domain.
+ */
+function validateDomain(domain) {
+    if (domain == null) {
+        return;
+    }
+    const char1 = domain.charAt(0);
+    const charN = domain.charAt(domain.length - 1);
+    if (char1 == "-" || charN == "." || charN == "-") {
+        throw new Error("Invalid first/last char in cookie domain: " + domain);
+    }
+}
+/**
+ * Parse cookies of a header
+ *
+ * @example
+ * ```ts
+ * import { getCookies } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
+ *
+ * const headers = new Headers();
+ * headers.set("Cookie", "full=of; tasty=chocolate");
+ *
+ * const cookies = getCookies(headers);
+ * console.log(cookies); // { full: "of", tasty: "chocolate" }
+ * ```
+ *
+ * @param headers The headers instance to get cookies from
+ * @return Object with cookie names as keys
+ */
+function getCookies(headers) {
+    const cookie = headers.get("Cookie");
+    if (cookie != null) {
+        const out = {};
+        const c = cookie.split(";");
+        for (const kv of c) {
+            const [cookieKey, ...cookieVal] = kv.split("=");
+            assert(cookieKey != null);
+            const key = cookieKey.trim();
+            out[key] = cookieVal.join("=");
+        }
+        return out;
+    }
+    return {};
+}
+/**
+ * Set the cookie header properly in the headers
+ *
+ * @example
+ * ```ts
+ * import {
+ *   Cookie,
+ *   setCookie,
+ * } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
+ *
+ * const headers = new Headers();
+ * const cookie: Cookie = { name: "Space", value: "Cat" };
+ * setCookie(headers, cookie);
+ *
+ * const cookieHeader = headers.get("set-cookie");
+ * console.log(cookieHeader); // Space=Cat
+ * ```
+ *
+ * @param headers The headers instance to set the cookie to
+ * @param cookie Cookie to set
+ */
+function setCookie(headers, cookie) {
+    // Parsing cookie headers to make consistent set-cookie header
+    // ref: https://tools.ietf.org/html/rfc6265#section-4.1.1
+    const v = toString(cookie);
+    if (v) {
+        headers.append("Set-Cookie", v);
+    }
+}
+/**
+ * Set the cookie header with empty value in the headers to delete it
+ *
+ * > Note: Deleting a `Cookie` will set its expiration date before now. Forcing
+ * > the browser to delete it.
+ *
+ * @example
+ * ```ts
+ * import { deleteCookie } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
+ *
+ * const headers = new Headers();
+ * deleteCookie(headers, "deno");
+ *
+ * const cookieHeader = headers.get("set-cookie");
+ * console.log(cookieHeader); // deno=; Expires=Thus, 01 Jan 1970 00:00:00 GMT
+ * ```
+ *
+ * @param headers The headers instance to delete the cookie from
+ * @param name Name of cookie
+ * @param attributes Additional cookie attributes
+ */
+function deleteCookie(headers, name, attributes) {
+    setCookie(headers, {
+        name: name,
+        value: "",
+        expires: new Date(0),
+        ...attributes,
+    });
+}
+function parseSetCookie(value) {
+    const attrs = value.split(";").map((attr) => {
+        const [key, ...values] = attr.trim().split("=");
+        return [key, values.join("=")];
+    });
+    const cookie = {
+        name: attrs[0][0],
+        value: attrs[0][1],
+    };
+    for (const [key, value] of attrs.slice(1)) {
+        switch (key.toLocaleLowerCase()) {
+            case "expires":
+                cookie.expires = new Date(value);
+                break;
+            case "max-age":
+                cookie.maxAge = Number(value);
+                if (cookie.maxAge < 0) {
+                    console.warn("Max-Age must be an integer superior or equal to 0. Cookie ignored.");
+                    return null;
+                }
+                break;
+            case "domain":
+                cookie.domain = value;
+                break;
+            case "path":
+                cookie.path = value;
+                break;
+            case "secure":
+                cookie.secure = true;
+                break;
+            case "httponly":
+                cookie.httpOnly = true;
+                break;
+            case "samesite":
+                cookie.sameSite = value;
+                break;
+            default:
+                if (!Array.isArray(cookie.unparsed)) {
+                    cookie.unparsed = [];
+                }
+                cookie.unparsed.push([key, value].join("="));
+        }
+    }
+    if (cookie.name.startsWith("__Secure-")) {
+        /** This requirement is mentioned in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie but not the RFC. */
+        if (!cookie.secure) {
+            console.warn("Cookies with names starting with `__Secure-` must be set with the secure flag. Cookie ignored.");
+            return null;
+        }
+    }
+    if (cookie.name.startsWith("__Host-")) {
+        if (!cookie.secure) {
+            console.warn("Cookies with names starting with `__Host-` must be set with the secure flag. Cookie ignored.");
+            return null;
+        }
+        if (cookie.domain !== undefined) {
+            console.warn("Cookies with names starting with `__Host-` must not have a domain specified. Cookie ignored.");
+            return null;
+        }
+        if (cookie.path !== "/") {
+            console.warn("Cookies with names starting with `__Host-` must have path be `/`. Cookie has been ignored.");
+            return null;
+        }
+    }
+    return cookie;
+}
+/**
+ * Parse set-cookies of a header
+ *
+ * @example
+ * ```ts
+ * import { getSetCookies } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
+ *
+ * const headers = new Headers([
+ *   ["Set-Cookie", "lulu=meow; Secure; Max-Age=3600"],
+ *   ["Set-Cookie", "booya=kasha; HttpOnly; Path=/"],
+ * ]);
+ *
+ * const cookies = getSetCookies(headers);
+ * console.log(cookies); // [{ name: "lulu", value: "meow", secure: true, maxAge: 3600 }, { name: "booya", value: "kahsa", httpOnly: true, path: "/ }]
+ * ```
+ *
+ * @param headers The headers instance to get set-cookies from
+ * @return List of cookies
+ */
+function getSetCookies(headers) {
+    // TODO(lino-levan): remove this ts-ignore when Typescript 5.2 lands in Deno
+    // @ts-ignore Typescript's TS Dom types will be out of date until 5.2
+    return headers
+        .getSetCookie()
+        /** Parse each `set-cookie` header separately */
+        .map(parseSetCookie)
+        /** Skip empty cookies */
+        .filter(Boolean);
+}
+
+function mergeHeaders(target, source) {
+    if (source instanceof Headers) {
+        for (const keyValuePair of source.entries()) {
+            target.set(keyValuePair[0], keyValuePair[1]);
+        }
+    }
+    else if (lodash.isArray(source)) {
+        for (const keyValuePair of source) {
+            target.set(keyValuePair[0], keyValuePair[1]);
+        }
+    }
+    else if (lodash.isObject(source)) {
+        Object.entries(source).forEach(([key, value]) => target.set(key, value));
+    }
+}
+function newResponse(options) {
+    return new Response(options.body, {
+        headers: options.headers,
+        status: options.status || 200,
+    });
+}
+class RapidResponse {
+    // TODO: remove this field.
+    #response;
+    status;
+    body;
+    headers;
+    constructor(body, init) {
+        this.body = body;
+        this.headers = new Headers(init?.headers);
+        this.status = init?.status;
+    }
+    json(obj, status, headers) {
+        let body = null;
+        if (obj) {
+            body = JSON.stringify(obj);
+        }
+        this.headers.set("Content-Type", "application/json");
+        const responseHeaders = new Headers(this.headers);
+        if (headers) {
+            mergeHeaders(responseHeaders, headers);
+        }
+        this.status = status || 200;
+        this.body = body;
+        this.#response = newResponse({ body, status: this.status, headers: responseHeaders });
+    }
+    redirect(location, status) {
+        this.headers.set("Location", location);
+        this.status = status || 302;
+        this.#response = newResponse({
+            headers: this.headers,
+            status: this.status,
+        });
+    }
+    setCookie(cookie) {
+        setCookie(this.headers, cookie);
+    }
+    getResponse() {
+        if (!this.#response) {
+            this.#response = new Response(this.body, {
+                status: this.status || 200,
+                headers: this.headers,
+            });
+        }
+        return this.#response;
+    }
+}
+
+// TODO: should divide to RequestContext and OperationContext
+class RouteContext {
+    request;
+    response;
+    state;
+    databaseAccessor;
+    method;
+    path;
+    params;
+    routeConfig;
+    #server;
+    #dbTransactionClient;
+    #dbTransactionState;
+    static newSystemOperationContext(server) {
+        return new RouteContext(server);
+    }
+    constructor(server, request) {
+        this.#server = server;
+        this.databaseAccessor = server.getDatabaseAccessor();
+        this.#dbTransactionState = "uninited";
+        this.request = request;
+        this.state = {};
+        this.response = new RapidResponse();
+        // `method` and `path` are used by `koa-tree-router` to match route
+        if (this.request) {
+            this.method = request.method;
+            this.path = request.url.pathname;
+        }
+    }
+    clone() {
+        const clonedContext = new RouteContext(this.#server);
+        clonedContext.method = this.method;
+        clonedContext.path = this.path;
+        clonedContext.params = this.params;
+        clonedContext.setState(this.state);
+        return clonedContext;
+    }
+    setState(state) {
+        Object.assign(this.state, state);
+    }
+    // `koa-tree-router` uses this method to set headers
+    set(headerName, headerValue) {
+        this.response.headers.set(headerName, headerValue);
+    }
+    json(obj, status, headers) {
+        this.response.json(obj, status, headers);
+    }
+    redirect(url, status) {
+        this.response.redirect(url, status);
+    }
+    getDbTransactionClient() {
+        return this.#dbTransactionClient;
+    }
+    async initDbTransactionClient() {
+        let dbClient = this.#dbTransactionClient;
+        if (dbClient) {
+            return dbClient;
+        }
+        dbClient = await this.databaseAccessor.getClient();
+        this.#dbTransactionState = "inited";
+        this.#dbTransactionClient = dbClient;
+        return dbClient;
+    }
+    async beginDbTransaction() {
+        if (!this.#dbTransactionClient) {
+            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
+        }
+        if (this.#dbTransactionState === "started") {
+            throw new Error("Database transaction has been started. You can not begin a new transaction before you commit or rollback it.");
+        }
+        await this.databaseAccessor.queryDatabaseObject("BEGIN", [], this.#dbTransactionClient);
+        this.#dbTransactionState = "started";
+    }
+    async commitDbTransaction() {
+        if (!this.#dbTransactionClient) {
+            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
+        }
+        if (this.#dbTransactionState !== "started") {
+            throw new Error("Database transaction has not been started. You should call beginDbTransaction() first.");
+        }
+        await this.databaseAccessor.queryDatabaseObject("COMMIT", [], this.#dbTransactionClient);
+        this.#dbTransactionState = "inited";
+    }
+    async rollbackDbTransaction() {
+        if (!this.#dbTransactionClient) {
+            throw new Error("Database transaction has not been inited. You should call initDbTransactionClient() first.");
+        }
         if (this.#dbTransactionState !== "started") {
             throw new Error("Database transaction has not been started. You should call beginDbTransaction() first.");
         }
@@ -4584,434 +4935,86 @@ class RapidServer {
             emitter = this.#entityCreateEventEmitters;
         }
         else if (eventName === "entity.beforeUpdate") {
-            emitter = this.#entityBeforeUpdateEventEmitters;
-        }
-        else if (eventName === "entity.update") {
-            emitter = this.#entityUpdateEventEmitters;
-        }
-        else if (eventName === "entity.beforeDelete") {
-            emitter = this.#entityBeforeDeleteEventEmitters;
-        }
-        else if (eventName === "entity.delete") {
-            emitter = this.#entityDeleteEventEmitters;
-        }
-        else if (eventName === "entity.addRelations") {
-            emitter = this.#entityAddRelationsEventEmitters;
-        }
-        else if (eventName === "entity.removeRelations") {
-            emitter = this.#entityRemoveRelationsEventEmitters;
-        }
-        else if (eventName === "entity.beforeResponse") {
-            emitter = this.#entityBeforeResponseEventEmitters;
-        }
-        await emitter.emit(modelSingularCode, entityWatchHandlerContext);
-        if (baseModelSingularCode) {
-            await emitter.emit(baseModelSingularCode, entityWatchHandlerContext);
-        }
-    }
-}
-
-const parseFormDataBody = async (request, options = { all: false }) => {
-    const contentType = request.headers.get("Content-Type");
-    if (isFormDataContent(contentType)) {
-        return parseFormData(request, options);
-    }
-    return {};
-};
-function isFormDataContent(contentType) {
-    if (contentType === null) {
-        return false;
-    }
-    return contentType.startsWith("multipart/form-data") || contentType.startsWith("application/x-www-form-urlencoded");
-}
-async function parseFormData(request, options) {
-    const formData = await request.formData();
-    if (formData) {
-        return convertFormDataToBodyData(formData, options);
-    }
-    return {};
-}
-function convertFormDataToBodyData(formData, options) {
-    const form = {};
-    formData.forEach((value, key) => {
-        const shouldParseAllValues = options.all || key.endsWith("[]");
-        if (!shouldParseAllValues) {
-            form[key] = value;
-        }
-        else {
-            handleParsingAllValues(form, key, value);
-        }
-    });
-    return form;
-}
-const handleParsingAllValues = (form, key, value) => {
-    if (form[key] && isArrayField(form[key])) {
-        appendToExistingArray(form[key], value);
-    }
-    else if (form[key]) {
-        convertToNewArray(form, key, value);
-    }
-    else {
-        form[key] = value;
-    }
-};
-function isArrayField(field) {
-    return Array.isArray(field);
-}
-const appendToExistingArray = (arr, value) => {
-    arr.push(value);
-};
-const convertToNewArray = (form, key, value) => {
-    form[key] = [form[key], value];
-};
-
-// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
-class AssertionError extends Error {
-    name = "AssertionError";
-    constructor(message) {
-        super(message);
-    }
-}
-
-// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
-/** Make an assertion, error will be thrown if `expr` does not have truthy value. */
-function assert(expr, msg = "") {
-    if (!expr) {
-        throw new AssertionError(msg);
-    }
-}
-
-// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
-// This module is browser compatible.
-/**
- * Formats the given date to IMF date time format. (Reference:
- * https://tools.ietf.org/html/rfc7231#section-7.1.1.1).
- * IMF is the time format to use when generating times in HTTP
- * headers. The time being formatted must be in UTC for Format to
- * generate the correct format.
- *
- * @example
- * ```ts
- * import { toIMF } from "https://deno.land/std@$STD_VERSION/datetime/to_imf.ts";
- *
- * toIMF(new Date(0)); // => returns "Thu, 01 Jan 1970 00:00:00 GMT"
- * ```
- * @param date Date to parse
- * @return IMF date formatted string
- */
-function toIMF(date) {
-    function dtPad(v, lPad = 2) {
-        return v.padStart(lPad, "0");
-    }
-    const d = dtPad(date.getUTCDate().toString());
-    const h = dtPad(date.getUTCHours().toString());
-    const min = dtPad(date.getUTCMinutes().toString());
-    const s = dtPad(date.getUTCSeconds().toString());
-    const y = date.getUTCFullYear();
-    const days = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
-    const months = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
-    return `${days[date.getUTCDay()]}, ${d} ${months[date.getUTCMonth()]} ${y} ${h}:${min}:${s} GMT`;
-}
-
-// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
-const FIELD_CONTENT_REGEXP = /^(?=[\x20-\x7E]*$)[^()@<>,;:\\"\[\]?={}\s]+$/;
-function toString(cookie) {
-    if (!cookie.name) {
-        return "";
-    }
-    const out = [];
-    validateName(cookie.name);
-    validateValue(cookie.name, cookie.value);
-    out.push(`${cookie.name}=${cookie.value}`);
-    // Fallback for invalid Set-Cookie
-    // ref: https://tools.ietf.org/html/draft-ietf-httpbis-cookie-prefixes-00#section-3.1
-    if (cookie.name.startsWith("__Secure")) {
-        cookie.secure = true;
-    }
-    if (cookie.name.startsWith("__Host")) {
-        cookie.path = "/";
-        cookie.secure = true;
-        delete cookie.domain;
-    }
-    if (cookie.secure) {
-        out.push("Secure");
-    }
-    if (cookie.httpOnly) {
-        out.push("HttpOnly");
-    }
-    if (typeof cookie.maxAge === "number" && Number.isInteger(cookie.maxAge)) {
-        assert(cookie.maxAge >= 0, "Max-Age must be an integer superior or equal to 0");
-        out.push(`Max-Age=${cookie.maxAge}`);
-    }
-    if (cookie.domain) {
-        validateDomain(cookie.domain);
-        out.push(`Domain=${cookie.domain}`);
-    }
-    if (cookie.sameSite) {
-        out.push(`SameSite=${cookie.sameSite}`);
-    }
-    if (cookie.path) {
-        validatePath(cookie.path);
-        out.push(`Path=${cookie.path}`);
-    }
-    if (cookie.expires) {
-        const { expires } = cookie;
-        const dateString = toIMF(typeof expires === "number" ? new Date(expires) : expires);
-        out.push(`Expires=${dateString}`);
-    }
-    if (cookie.unparsed) {
-        out.push(cookie.unparsed.join("; "));
-    }
-    return out.join("; ");
-}
-/**
- * Validate Cookie Name.
- * @param name Cookie name.
- */
-function validateName(name) {
-    if (name && !FIELD_CONTENT_REGEXP.test(name)) {
-        throw new TypeError(`Invalid cookie name: "${name}".`);
-    }
-}
-/**
- * Validate Path Value.
- * See {@link https://tools.ietf.org/html/rfc6265#section-4.1.2.4}.
- * @param path Path value.
- */
-function validatePath(path) {
-    if (path == null) {
-        return;
-    }
-    for (let i = 0; i < path.length; i++) {
-        const c = path.charAt(i);
-        if (c < String.fromCharCode(0x20) || c > String.fromCharCode(0x7e) || c == ";") {
-            throw new Error(path + ": Invalid cookie path char '" + c + "'");
-        }
-    }
-}
-/**
- * Validate Cookie Value.
- * See {@link https://tools.ietf.org/html/rfc6265#section-4.1}.
- * @param value Cookie value.
- */
-function validateValue(name, value) {
-    if (value == null || name == null)
-        return;
-    for (let i = 0; i < value.length; i++) {
-        const c = value.charAt(i);
-        if (c < String.fromCharCode(0x21) ||
-            c == String.fromCharCode(0x22) ||
-            c == String.fromCharCode(0x2c) ||
-            c == String.fromCharCode(0x3b) ||
-            c == String.fromCharCode(0x5c) ||
-            c == String.fromCharCode(0x7f)) {
-            throw new Error("RFC2616 cookie '" + name + "' cannot contain character '" + c + "'");
+            emitter = this.#entityBeforeUpdateEventEmitters;
         }
-        if (c > String.fromCharCode(0x80)) {
-            throw new Error("RFC2616 cookie '" + name + "' can only have US-ASCII chars as value" + c.charCodeAt(0).toString(16));
+        else if (eventName === "entity.update") {
+            emitter = this.#entityUpdateEventEmitters;
+        }
+        else if (eventName === "entity.beforeDelete") {
+            emitter = this.#entityBeforeDeleteEventEmitters;
+        }
+        else if (eventName === "entity.delete") {
+            emitter = this.#entityDeleteEventEmitters;
+        }
+        else if (eventName === "entity.addRelations") {
+            emitter = this.#entityAddRelationsEventEmitters;
+        }
+        else if (eventName === "entity.removeRelations") {
+            emitter = this.#entityRemoveRelationsEventEmitters;
+        }
+        else if (eventName === "entity.beforeResponse") {
+            emitter = this.#entityBeforeResponseEventEmitters;
+        }
+        await emitter.emit(modelSingularCode, entityWatchHandlerContext);
+        if (baseModelSingularCode) {
+            await emitter.emit(baseModelSingularCode, entityWatchHandlerContext);
         }
     }
-}
-/**
- * Validate Cookie Domain.
- * See {@link https://datatracker.ietf.org/doc/html/rfc6265#section-4.1.2.3}.
- * @param domain Cookie domain.
- */
-function validateDomain(domain) {
-    if (domain == null) {
-        return;
+}
+
+const parseFormDataBody = async (request, options = { all: false }) => {
+    const contentType = request.headers.get("Content-Type");
+    if (isFormDataContent(contentType)) {
+        return parseFormData(request, options);
     }
-    const char1 = domain.charAt(0);
-    const charN = domain.charAt(domain.length - 1);
-    if (char1 == "-" || charN == "." || charN == "-") {
-        throw new Error("Invalid first/last char in cookie domain: " + domain);
+    return {};
+};
+function isFormDataContent(contentType) {
+    if (contentType === null) {
+        return false;
     }
+    return contentType.startsWith("multipart/form-data") || contentType.startsWith("application/x-www-form-urlencoded");
 }
-/**
- * Parse cookies of a header
- *
- * @example
- * ```ts
- * import { getCookies } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
- *
- * const headers = new Headers();
- * headers.set("Cookie", "full=of; tasty=chocolate");
- *
- * const cookies = getCookies(headers);
- * console.log(cookies); // { full: "of", tasty: "chocolate" }
- * ```
- *
- * @param headers The headers instance to get cookies from
- * @return Object with cookie names as keys
- */
-function getCookies(headers) {
-    const cookie = headers.get("Cookie");
-    if (cookie != null) {
-        const out = {};
-        const c = cookie.split(";");
-        for (const kv of c) {
-            const [cookieKey, ...cookieVal] = kv.split("=");
-            assert(cookieKey != null);
-            const key = cookieKey.trim();
-            out[key] = cookieVal.join("=");
-        }
-        return out;
+async function parseFormData(request, options) {
+    const formData = await request.formData();
+    if (formData) {
+        return convertFormDataToBodyData(formData, options);
     }
     return {};
 }
-/**
- * Set the cookie header properly in the headers
- *
- * @example
- * ```ts
- * import {
- *   Cookie,
- *   setCookie,
- * } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
- *
- * const headers = new Headers();
- * const cookie: Cookie = { name: "Space", value: "Cat" };
- * setCookie(headers, cookie);
- *
- * const cookieHeader = headers.get("set-cookie");
- * console.log(cookieHeader); // Space=Cat
- * ```
- *
- * @param headers The headers instance to set the cookie to
- * @param cookie Cookie to set
- */
-function setCookie(headers, cookie) {
-    // Parsing cookie headers to make consistent set-cookie header
-    // ref: https://tools.ietf.org/html/rfc6265#section-4.1.1
-    const v = toString(cookie);
-    if (v) {
-        headers.append("Set-Cookie", v);
-    }
-}
-/**
- * Set the cookie header with empty value in the headers to delete it
- *
- * > Note: Deleting a `Cookie` will set its expiration date before now. Forcing
- * > the browser to delete it.
- *
- * @example
- * ```ts
- * import { deleteCookie } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
- *
- * const headers = new Headers();
- * deleteCookie(headers, "deno");
- *
- * const cookieHeader = headers.get("set-cookie");
- * console.log(cookieHeader); // deno=; Expires=Thus, 01 Jan 1970 00:00:00 GMT
- * ```
- *
- * @param headers The headers instance to delete the cookie from
- * @param name Name of cookie
- * @param attributes Additional cookie attributes
- */
-function deleteCookie(headers, name, attributes) {
-    setCookie(headers, {
-        name: name,
-        value: "",
-        expires: new Date(0),
-        ...attributes,
+function convertFormDataToBodyData(formData, options) {
+    const form = {};
+    formData.forEach((value, key) => {
+        const shouldParseAllValues = options.all || key.endsWith("[]");
+        if (!shouldParseAllValues) {
+            form[key] = value;
+        }
+        else {
+            handleParsingAllValues(form, key, value);
+        }
     });
+    return form;
 }
-function parseSetCookie(value) {
-    const attrs = value.split(";").map((attr) => {
-        const [key, ...values] = attr.trim().split("=");
-        return [key, values.join("=")];
-    });
-    const cookie = {
-        name: attrs[0][0],
-        value: attrs[0][1],
-    };
-    for (const [key, value] of attrs.slice(1)) {
-        switch (key.toLocaleLowerCase()) {
-            case "expires":
-                cookie.expires = new Date(value);
-                break;
-            case "max-age":
-                cookie.maxAge = Number(value);
-                if (cookie.maxAge < 0) {
-                    console.warn("Max-Age must be an integer superior or equal to 0. Cookie ignored.");
-                    return null;
-                }
-                break;
-            case "domain":
-                cookie.domain = value;
-                break;
-            case "path":
-                cookie.path = value;
-                break;
-            case "secure":
-                cookie.secure = true;
-                break;
-            case "httponly":
-                cookie.httpOnly = true;
-                break;
-            case "samesite":
-                cookie.sameSite = value;
-                break;
-            default:
-                if (!Array.isArray(cookie.unparsed)) {
-                    cookie.unparsed = [];
-                }
-                cookie.unparsed.push([key, value].join("="));
-        }
+const handleParsingAllValues = (form, key, value) => {
+    if (form[key] && isArrayField(form[key])) {
+        appendToExistingArray(form[key], value);
     }
-    if (cookie.name.startsWith("__Secure-")) {
-        /** This requirement is mentioned in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie but not the RFC. */
-        if (!cookie.secure) {
-            console.warn("Cookies with names starting with `__Secure-` must be set with the secure flag. Cookie ignored.");
-            return null;
-        }
+    else if (form[key]) {
+        convertToNewArray(form, key, value);
     }
-    if (cookie.name.startsWith("__Host-")) {
-        if (!cookie.secure) {
-            console.warn("Cookies with names starting with `__Host-` must be set with the secure flag. Cookie ignored.");
-            return null;
-        }
-        if (cookie.domain !== undefined) {
-            console.warn("Cookies with names starting with `__Host-` must not have a domain specified. Cookie ignored.");
-            return null;
-        }
-        if (cookie.path !== "/") {
-            console.warn("Cookies with names starting with `__Host-` must have path be `/`. Cookie has been ignored.");
-            return null;
-        }
+    else {
+        form[key] = value;
     }
-    return cookie;
+};
+function isArrayField(field) {
+    return Array.isArray(field);
 }
-/**
- * Parse set-cookies of a header
- *
- * @example
- * ```ts
- * import { getSetCookies } from "https://deno.land/std@$STD_VERSION/http/cookie.ts";
- *
- * const headers = new Headers([
- *   ["Set-Cookie", "lulu=meow; Secure; Max-Age=3600"],
- *   ["Set-Cookie", "booya=kasha; HttpOnly; Path=/"],
- * ]);
- *
- * const cookies = getSetCookies(headers);
- * console.log(cookies); // [{ name: "lulu", value: "meow", secure: true, maxAge: 3600 }, { name: "booya", value: "kahsa", httpOnly: true, path: "/ }]
- * ```
- *
- * @param headers The headers instance to get set-cookies from
- * @return List of cookies
- */
-function getSetCookies(headers) {
-    // TODO(lino-levan): remove this ts-ignore when Typescript 5.2 lands in Deno
-    // @ts-ignore Typescript's TS Dom types will be out of date until 5.2
-    return headers
-        .getSetCookie()
-        /** Parse each `set-cookie` header separately */
-        .map(parseSetCookie)
-        /** Skip empty cookies */
-        .filter(Boolean);
-}
+const appendToExistingArray = (arr, value) => {
+    arr.push(value);
+};
+const convertToNewArray = (form, key, value) => {
+    form[key] = [form[key], value];
+};
 
 const GlobalRequest = global.Request;
 class RapidRequest {
@@ -10075,6 +10078,7 @@ class EntityAccessControlPlugin {
 fixBigIntJSONSerialize();
 
 exports.AuthPlugin = AuthPlugin;
+exports.AuthService = AuthService;
 exports.CacheFactory = CacheFactory;
 exports.CronJobPlugin = CronJobPlugin;
 exports.DataAccessor = DataAccessor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ruiapp/rapid-core",
-  "version": "0.10.11",
+  "version": "0.10.12",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/core/response.ts

@@ -1,5 +1,6 @@
 import { isArray, isObject } from "lodash";
 import { HttpStatus, ResponseData } from "./http-types";
+import { Cookie, setCookie } from "~/deno-std/http/cookie";
 
 export const GlobalResponse = global.Response;
 
@@ -67,6 +68,10 @@ export class RapidResponse {
     });
   }
 
+  setCookie(cookie: Cookie) {
+    setCookie(this.headers, cookie);
+  }
+
   getResponse() {
     if (!this.#response) {
       this.#response = new Response(this.body, {

package/src/index.ts

@@ -55,6 +55,7 @@ export { default as WebhooksPlugin } from "./plugins/webhooks/WebhooksPlugin";
 
 export { default as AuthPlugin } from "./plugins/auth/AuthPlugin";
 export * from "./plugins/auth/AuthPluginTypes";
+export { default as AuthService } from "./plugins/auth/services/AuthService";
 
 export { default as FileManagePlugin } from "./plugins/fileManage/FileManagePlugin";