@saltcorn/server 0.8.1-rc.2 → 0.8.1-rc.3

package/auth/admin.js

@@ -336,6 +336,7 @@ const http_settings_form = async (req) =>
       "cookie_duration",
       "cookie_duration_remember",
       "cookie_sessions",
+      "public_cache_maxage",
       "custom_http_headers",
     ],
     action: "/useradmin/http",

package/auth/routes.js

@@ -1061,6 +1061,7 @@ router.post(
         else req.session.cookie.expires = false;
       }
     Trigger.emitEvent("Login", null, req.user);
+    res?.cookie?.("loggedin", "true");
     req.flash("success", req.__("Welcome, %s!", req.user.email));
     if (req.smr) {
       const dbUser = await User.findOne({ id: req.user.id });

package/auth/testhelp.js

@@ -88,6 +88,9 @@ const toNotInclude =
     }
   };
 
+const resToLoginCookie = (res) =>
+  res.headers["set-cookie"].find((c) => c.includes("connect.sid"));
+
 /**
  *
  * @returns {Promise<void>}
@@ -99,7 +102,7 @@ const getStaffLoginCookie = async () => {
     .send("email=staff@foo.com")
     .send("password=ghrarhr54hg");
   if (res.statusCode !== 302) console.log(res.text);
-  return res.headers["set-cookie"][0];
+  return resToLoginCookie(res);
 };
 
 /**
@@ -113,8 +116,7 @@ const getAdminLoginCookie = async () => {
     .send("email=admin@foo.com")
     .send("password=AhGGr6rhu45");
   if (res.statusCode !== 302) console.log(res.text);
-
-  return res.headers["set-cookie"][0];
+  return resToLoginCookie(res);
 };
 
 /**

package/locales/da.json

@@ -555,5 +555,8 @@
 	"Create database view": "Create database view",
 	"Create an SQL view in the database with the fields in this list": "Create an SQL view in the database with the fields in this list",
 	"Rows per page": "Rows per page",
-	"List options": "List options"
+	"List options": "List options",
+	"Modules": "Modules",
+	"File not found": "File not found",
+	"Welcome, %s!": "Welcome, %s!"
 }

package/locales/en.json

@@ -1077,5 +1077,8 @@
 	"Saved 2FA policy for role": "Saved 2FA policy for role",
 	"HTTP settings updated": "HTTP settings updated",
 	"%s configuration": "%s configuration",
-	"Save indicator": "Save indicator"
+	"Save indicator": "Save indicator",
+	"Public cache TTL (minutes)": "Public cache TTL (minutes)",
+	"Cache-control max-age for public views and pages. 0 to disable": "Cache-control max-age for public views and pages. 0 to disable",
+	"Files accept filter": "Files accept filter"
 }

package/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@saltcorn/server",
-  "version": "0.8.1-rc.2",
+  "version": "0.8.1-rc.3",
   "description": "Server app for Saltcorn, open-source no-code platform",
   "homepage": "https://saltcorn.com",
   "main": "index.js",
   "license": "MIT",
   "dependencies": {
-    "@saltcorn/base-plugin": "0.8.1-rc.2",
-    "@saltcorn/builder": "0.8.1-rc.2",
-    "@saltcorn/data": "0.8.1-rc.2",
-    "@saltcorn/admin-models": "0.8.1-rc.2",
-    "@saltcorn/filemanager": "0.8.1-rc.2",
-    "@saltcorn/markup": "0.8.1-rc.2",
-    "@saltcorn/sbadmin2": "0.8.1-rc.2",
+    "@saltcorn/base-plugin": "0.8.1-rc.3",
+    "@saltcorn/builder": "0.8.1-rc.3",
+    "@saltcorn/data": "0.8.1-rc.3",
+    "@saltcorn/admin-models": "0.8.1-rc.3",
+    "@saltcorn/filemanager": "0.8.1-rc.3",
+    "@saltcorn/markup": "0.8.1-rc.3",
+    "@saltcorn/sbadmin2": "0.8.1-rc.3",
     "@socket.io/cluster-adapter": "^0.1.0",
     "@socket.io/sticky": "^1.0.1",
     "aws-sdk": "^2.1037.0",

package/routes/admin.js

@@ -97,6 +97,7 @@ const View = require("@saltcorn/data/models/view");
 const { getConfigFile } = require("@saltcorn/data/db/connect");
 const os = require("os");
 const Page = require("@saltcorn/data/models/page");
+const { getSafeSaltcornCmd } = require("@saltcorn/data/utils");
 
 const router = new Router();
 module.exports = router;
@@ -1659,7 +1660,7 @@ router.post(
     // end http call, return the out directory name
     // the gui polls for results
     res.json({ build_dir_name: outDirName });
-    const child = spawn("saltcorn", spawnParams, {
+    const child = spawn(getSafeSaltcornCmd(), spawnParams, {
       stdio: ["ignore", "pipe", "pipe"],
       cwd: ".",
     });

package/routes/fields.js

@@ -996,7 +996,8 @@ router.post(
       formStyle: "vert",
       fields: formFields,
     });
-    if (_columndef) form.values = JSON.parse(_columndef);
+    if (_columndef && _columndef !== "undefined")
+      form.values = JSON.parse(_columndef);
     res.send(mkFormContentNoLayout(form));
   })
 );

package/routes/files.js

@@ -393,6 +393,13 @@ router.post(
       f.s3_store ? s3storage.unlinkObject : undefined
     );
     if (result && result.error) {
+      if (req.xhr) {
+        const root = path.join(db.connectObj.file_store, db.getTenantSchema());
+        res.json({
+          error: result.error.replaceAll(root, ""),
+        });
+        return;
+      }
       req.flash("error", result.error);
     }
     res.redirect(`/files?dir=${encodeURIComponent(f.current_folder)}`);

package/routes/utils.js

@@ -76,7 +76,7 @@ const setLanguage = (req, res, state) => {
   } else if (req.cookies?.lang) {
     req.setLocale(req.cookies?.lang);
   }
-  set_custom_http_headers(res, state);
+  set_custom_http_headers(res, req, state);
 };
 
 /**
@@ -85,8 +85,17 @@ const setLanguage = (req, res, state) => {
  * @param {string} state
  * @returns {void}
  */
-const set_custom_http_headers = (res, state) => {
-  const hdrs = (state || getState()).getConfig("custom_http_headers");
+const set_custom_http_headers = (res, req, state) => {
+  const state1 = state || getState();
+  const hdrs = state1.getConfig("custom_http_headers");
+  if (!req.user) {
+    const public_cache_maxage = +state1.getConfig("public_cache_maxage", 0);
+    if (public_cache_maxage)
+      res.header(
+        "Cache-Control",
+        `public, max-age=${public_cache_maxage * 60}`
+      );
+  }
   if (!hdrs) return;
   for (const ln of hdrs.split("\n")) {
     const [k, v] = ln.split(":");

package/routes/viewedit.js

@@ -464,7 +464,7 @@ const respondWorkflow = (view, wf, wfres, req, res) => {
         type: "breadcrumbs",
         crumbs: [
           { text: req.__("Views"), href: "/viewedit" },
-          { href: `/viewedit/edit/${view.name}`, text: view.name },
+          { href: `/view/${view.name}`, text: view.name },
           { workflow: wf, step: wfres },
         ],
       },

package/serve.js

@@ -377,7 +377,7 @@ const setupSocket = (...servers) => {
           const view = View.findOne({ name: viewname });
           if (view.viewtemplateObj.authorize_join) {
             view.viewtemplateObj
-              .authorize_join(view.configuration, room_id, socket.request.user)
+              .authorize_join(view, room_id, socket.request.user)
               .then((authorized) => {
                 if (authorized) socket.join(`${ten}_${viewname}_${room_id}`);
               });