@saltcorn/server 1.3.1-beta.1 → 1.3.1-beta.10

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Notable changes
 
+## 1.3.1 - In development
+
+* Real time collaboration for Edit views. Form fields will update in real time as they change in the database.
+
+* loop_rows action: repeat an action for a all or some rows in a table, including an option for a random selection of rows.
+
+* train_model_instance action: (re)train a (predictive analytics) model instance
+
+* Visibility toggle option for password fieldviews. Click an eye icon to show password
+
+* Enable/disable push notifications per-role in the Users role table.
+
+* Table triggers (Insert, Update, Delete) and Login and PageLoad can now be limited with an only-if formula.
+
+* Date fields with the day only attribute are now handled internally without time or timezone from the database to the client. This should lead to more reliable date handling.
+
+* The menu can now be fully customized from the menu editor, including the admin items (Tables, Vies, Pages and Settings) and the user items (login/signup and the user menu)
+
+* Events can now be sent from a running server scripts to the user's client page. Run the `emit_to_client()` function with the same objects that can be returned from a run_js_code action. For instance: `emit_to_client({notify: "hello admin"}, 1)` will make a toast appear on any tab loaded by the user with ID=1. This facility can be disabled for high performance, less interactive applications, under Event log settings.
+
+* Link, Action and Dropdonw menu buttons are now always the same height.
+
+* List views have a vertical aligment option under Layout options. Use this to adjust the vertical alignment of each cell. The default is middle.
+
+* Provided tables can no by writable (delete, insert and update). For an example of this see the history-control table provider
+
+* Imported CSVs rows can now have a blank in the primary key column, which will be treated as an insert.
+
+
 ## 1.3.0 - Released 2 July 2025
 
 * It is no longer necessary to restart the application when upgrading a plugin to a more recent version

package/auth/admin.js

@@ -356,7 +356,6 @@ const auth_settings_form = async (req) =>
     req,
     field_names: [
       "allow_signup",
-      "login_menu",
       "allow_forgot",
       {
         section_header: req.__("Signup and login views"),
@@ -374,6 +373,15 @@ const auth_settings_form = async (req) =>
       "elevate_verified",
       "email_mask",
       "plain_password_triggers",
+      { section_header: req.__("Password Policy") },
+      "min_password_length",
+      "check_common_passwords",
+      "password_require_uppercase",
+      "password_require_lowercase",
+      "password_require_number",
+      "password_require_special_char",
+      "password_complexity",
+      "password_complexity_error",
     ],
     action: "/useradmin/settings",
     submitLabel: req.__("Save"),

package/auth/routes.js

@@ -178,6 +178,14 @@ const resetForm = (body, req) => {
         name: "password",
         input_type: "password",
       }),
+      new Field({
+        label: req.__("Confirm password"),
+        name: "confirm_password",
+        input_type: "password",
+        attributes: {
+          autocomplete: "new-password",
+        },
+      }),
       new Field({
         name: "token",
         input_type: "hidden",
@@ -192,6 +200,8 @@ const resetForm = (body, req) => {
   });
   form.values.email = body && body.email;
   form.values.token = body && body.token;
+  form.values.password = body && body.password;
+  form.values.confirm_password = body && body.confirm_password;
   return form;
 };
 
@@ -475,16 +485,29 @@ router.post(
       email: (req.body || {}).email,
       reset_password_token: (req.body || {}).token,
       password: (req.body || {}).password,
+      confirm_password: (req.body || {}).confirm_password,
     });
     if (result.success) {
       req.flash(
         "success",
         req.__("Password reset. Log in with your new password")
       );
-    } else {
+      res.redirect("/auth/login");
+    } else if (result.error) {
+      console.log({
+        result,
+      });
       req.flash("danger", result.error);
+      const form = resetForm(req.body, req);
+      form.errors = { password: result.error, confirm_password: result.error };
+      res.sendAuthWrap(req.__(`Reset password`), form, {});
+    } else {
+      req.flash(
+        "danger",
+        req.__("Password reset not enabled. Contact your administrator.")
+      );
+      res.redirect("/auth/login");
     }
-    res.redirect("/auth/login");
   })
 );
 
@@ -1311,7 +1334,8 @@ router.post(
       null,
       req.user,
       resultCollector,
-      req.user
+      req.user,
+      { req }
     );
     if (resultCollector.notify) {
       req.flash("warning", resultCollector.notify);
@@ -1429,7 +1453,7 @@ router.post(
  * @param {object} res
  * @returns {void}
  */
-const loginCallback = (req, res) => () => {
+const loginCallback = (req, res) => async () => {
   if (!req.user) return;
   if (!req.user.id) {
     res.redirect("/auth/signup_final_ext");
@@ -1437,7 +1461,28 @@ const loginCallback = (req, res) => () => {
   if (!req.user.email) {
     res.redirect("/auth/set-email");
   } else {
-    Trigger.emitEvent("Login", null, req.user);
+    const resultCollector = {};
+    await Trigger.runTableTriggers(
+      "Login",
+      null,
+      req.user,
+      resultCollector,
+      req.user,
+      { req }
+    );
+    if (resultCollector.notify) {
+      req.flash("warning", resultCollector.notify);
+    }
+    if (resultCollector.error) {
+      req.flash("error", resultCollector.error);
+    }
+    if (resultCollector.notify_success) {
+      req.flash("success", resultCollector.notify_success);
+    }
+    if (resultCollector.goto) {
+      res.redirect(resultCollector.goto);
+      return;
+    }
     req.flash("success", req.__("Welcome, %s!", req.user.email));
     if (req.cookies["login_dest"]) {
       res.clearCookie("login_dest");