@selvajs/selva 2.0.10 → 3.0.0

package/build/server/chunks/resolve.server2-BnfeaGcZ.js

@@ -0,0 +1,50 @@
+import { error } from '@sveltejs/kit';
+import { S as SYSTEM_CONTEXT } from './context-WcuX1UXU.js';
+import { s as providers, i as getDefinitionMeta, n as getProjectProvider, f as flag } from './providers.server-DOymvucH.js';
+import { h as hashToken, l as looksLikeShareToken } from './token.server-BGL9vwYS.js';
+
+function readShareToken(request, url) {
+  if (!flag("ENABLE_SHARING")) return null;
+  const q = url.searchParams.get("token");
+  if (q && looksLikeShareToken(q)) return q;
+  const auth = request.headers.get("authorization");
+  if (auth?.startsWith("Bearer ")) {
+    const candidate = auth.slice("Bearer ".length).trim();
+    if (looksLikeShareToken(candidate)) return candidate;
+  }
+  return null;
+}
+async function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {
+  const raw = readShareToken(request, url);
+  if (!raw) return null;
+  const tokenHash = hashToken(raw);
+  const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);
+  if (!link) throw error(401, "Invalid or revoked share token.");
+  if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) {
+    throw error(401, "Share token has expired.");
+  }
+  if (link.definitionId !== requestedDefinitionId) {
+    throw error(403, "Share token is not valid for this definition.");
+  }
+  if (link.channel !== requestedChannel) {
+    throw error(403, `Share token is for the '${link.channel}' channel only.`);
+  }
+  if (opts.requireSolve && !link.allowSolve) {
+    throw error(403, "Share token grants view-only access.");
+  }
+  const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);
+  if (!def) throw error(401, "Share token target no longer exists.");
+  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);
+  if (!project) throw error(401, "Share token target no longer exists.");
+  const ctx = {
+    userId: "",
+    actingOrgId: project.orgId,
+    platformPermissions: [],
+    orgPermissions: [],
+    system: true
+  };
+  return { link, ctx };
+}
+
+export { tryResolveShareToken as t };
+//# sourceMappingURL=resolve.server2-BnfeaGcZ.js.map

package/build/server/chunks/resolve.server2-BnfeaGcZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.server2-BnfeaGcZ.js","sources":["../../../.svelte-kit/adapter-node/chunks/resolve.server2.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { S as SYSTEM_CONTEXT } from \"./context.js\";\nimport { s as providers, i as getDefinitionMeta, n as getProjectProvider, f as flag } from \"./providers.server.js\";\nimport { h as hashToken, l as looksLikeShareToken } from \"./token.server.js\";\nfunction readShareToken(request, url) {\n  if (!flag(\"ENABLE_SHARING\")) return null;\n  const q = url.searchParams.get(\"token\");\n  if (q && looksLikeShareToken(q)) return q;\n  const auth = request.headers.get(\"authorization\");\n  if (auth?.startsWith(\"Bearer \")) {\n    const candidate = auth.slice(\"Bearer \".length).trim();\n    if (looksLikeShareToken(candidate)) return candidate;\n  }\n  return null;\n}\nasync function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {\n  const raw = readShareToken(request, url);\n  if (!raw) return null;\n  const tokenHash = hashToken(raw);\n  const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);\n  if (!link) throw error(401, \"Invalid or revoked share token.\");\n  if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) {\n    throw error(401, \"Share token has expired.\");\n  }\n  if (link.definitionId !== requestedDefinitionId) {\n    throw error(403, \"Share token is not valid for this definition.\");\n  }\n  if (link.channel !== requestedChannel) {\n    throw error(403, `Share token is for the '${link.channel}' channel only.`);\n  }\n  if (opts.requireSolve && !link.allowSolve) {\n    throw error(403, \"Share token grants view-only access.\");\n  }\n  const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);\n  if (!def) throw error(401, \"Share token target no longer exists.\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);\n  if (!project) throw error(401, \"Share token target no longer exists.\");\n  const ctx = {\n    userId: \"\",\n    actingOrgId: project.orgId,\n    platformPermissions: [],\n    orgPermissions: [],\n    system: true\n  };\n  return { link, ctx };\n}\nexport {\n  tryResolveShareToken as t\n};\n"],"names":[],"mappings":";;;;;AAIA,SAAS,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;AACtC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AAC1C,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AAC3C,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AACnD,EAAE,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;AACnC,IAAI,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;AACzD,IAAI,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AACxD,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACA,eAAe,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,IAAI,EAAE;AACjG,EAAE,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;AAC1C,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACvB,EAAE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;AAClC,EAAE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC;AACxF,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC;AAChE,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;AAC1E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AAChD,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,EAAE;AACnD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC;AACrE,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,EAAE;AACzC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC9E,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AAC7C,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AAC5D,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC;AAC9E,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACpE,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;AACtF,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACxE,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,WAAW,EAAE,OAAO,CAAC,KAAK;AAC9B,IAAI,mBAAmB,EAAE,EAAE;AAC3B,IAAI,cAAc,EAAE,EAAE;AACtB,IAAI,MAAM,EAAE;AACZ,GAAG;AACH,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE;AACtB;;;;"}