@sync-in/server 1.3.0

package/server/applications/spaces/dto/space-roots.dto.js

@@ -0,0 +1,117 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get CheckRootExternalPathDto () {
+        return CheckRootExternalPathDto;
+    },
+    get SpaceRootDto () {
+        return SpaceRootDto;
+    },
+    get SpaceRootFileDto () {
+        return SpaceRootFileDto;
+    }
+});
+const _classtransformer = require("class-transformer");
+const _classvalidator = require("class-validator");
+const _files = require("../../files/utils/files");
+const _spaces = require("../constants/spaces");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let SpaceRootOwnerDto = class SpaceRootOwnerDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsInt)(),
+    _ts_metadata("design:type", Number)
+], SpaceRootOwnerDto.prototype, "id", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], SpaceRootOwnerDto.prototype, "login", void 0);
+let SpaceRootFileDto = class SpaceRootFileDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsInt)(),
+    _ts_metadata("design:type", Number)
+], SpaceRootFileDto.prototype, "id", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value ? (0, _files.sanitizePath)(value).replace(`${_spaces.SPACE_REPOSITORY.FILES}/${_spaces.SPACE_ALIAS.PERSONAL}/`, '') : ''),
+    _ts_metadata("design:type", String)
+], SpaceRootFileDto.prototype, "path", void 0);
+let SpaceRootDto = class SpaceRootDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsInt)(),
+    _ts_metadata("design:type", Number)
+], SpaceRootDto.prototype, "id", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value ? (0, _files.sanitizeName)(value.trim()) : ''),
+    _ts_metadata("design:type", String)
+], SpaceRootDto.prototype, "alias", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    (0, _classtransformer.Transform)(({ value })=>value ? (0, _files.sanitizeName)(value.trim()) : ''),
+    _ts_metadata("design:type", String)
+], SpaceRootDto.prototype, "name", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsDefined)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], SpaceRootDto.prototype, "permissions", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], SpaceRootDto.prototype, "externalPath", void 0);
+_ts_decorate([
+    (0, _classvalidator.IsOptional)(),
+    (0, _classvalidator.ValidateIf)((_, owner)=>!!owner?.id),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>SpaceRootOwnerDto),
+    _ts_metadata("design:type", typeof SpaceRootOwnerDto === "undefined" ? Object : SpaceRootOwnerDto)
+], SpaceRootDto.prototype, "owner", void 0);
+_ts_decorate([
+    (0, _classvalidator.ValidateIf)((_, file)=>!_.externalPath && file?.id),
+    (0, _classvalidator.IsNotEmptyObject)(),
+    (0, _classvalidator.IsObject)(),
+    (0, _classvalidator.ValidateNested)(),
+    (0, _classtransformer.Type)(()=>SpaceRootFileDto),
+    _ts_metadata("design:type", typeof SpaceRootFileDto === "undefined" ? Object : SpaceRootFileDto)
+], SpaceRootDto.prototype, "file", void 0);
+let CheckRootExternalPathDto = class CheckRootExternalPathDto {
+};
+_ts_decorate([
+    (0, _classvalidator.IsNotEmpty)(),
+    (0, _classvalidator.IsString)(),
+    _ts_metadata("design:type", String)
+], CheckRootExternalPathDto.prototype, "path", void 0);
+
+//# sourceMappingURL=space-roots.dto.js.map

package/server/applications/spaces/dto/space-roots.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/spaces/dto/space-roots.dto.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Transform, Type } from 'class-transformer'\nimport { IsDefined, IsInt, IsNotEmpty, IsNotEmptyObject, IsObject, IsOptional, IsString, ValidateIf, ValidateNested } from 'class-validator'\nimport { sanitizeName, sanitizePath } from '../../files/utils/files'\nimport { SPACE_ALIAS, SPACE_REPOSITORY } from '../constants/spaces'\nimport type { SpaceRootProps } from '../models/space-root-props.model'\n\nclass SpaceRootOwnerDto {\n  @IsNotEmpty()\n  @IsInt()\n  id: number\n\n  @IsNotEmpty()\n  @IsString()\n  login: string\n}\n\nexport class SpaceRootFileDto {\n  @IsNotEmpty()\n  @IsInt()\n  id: number\n\n  @IsNotEmpty()\n  @IsString()\n  @Transform(({ value }) => (value ? sanitizePath(value).replace(`${SPACE_REPOSITORY.FILES}/${SPACE_ALIAS.PERSONAL}/`, '') : ''))\n  path: string\n}\n\nexport class SpaceRootDto implements SpaceRootProps {\n  @IsNotEmpty()\n  @IsInt()\n  id: number\n\n  @IsNotEmpty()\n  @IsString()\n  @Transform(({ value }) => (value ? sanitizeName(value.trim()) : ''))\n  alias: string\n\n  @IsNotEmpty()\n  @IsString()\n  @Transform(({ value }) => (value ? sanitizeName(value.trim()) : ''))\n  name: string\n\n  @IsDefined()\n  @IsString()\n  permissions: string\n\n  @IsOptional()\n  @IsString()\n  externalPath?: string\n\n  @IsOptional()\n  @ValidateIf((_, owner) => !!owner?.id)\n  @IsObject()\n  @ValidateNested()\n  @Type(() => SpaceRootOwnerDto)\n  owner?: SpaceRootOwnerDto\n\n  @ValidateIf((_, file) => !_.externalPath && file?.id)\n  // we hide file.id & file.path if not owned by the current user\n  @IsNotEmptyObject()\n  @IsObject()\n  @ValidateNested()\n  @Type(() => SpaceRootFileDto)\n  file: SpaceRootFileDto\n}\n\nexport class CheckRootExternalPathDto {\n  @IsNotEmpty()\n  @IsString()\n  path: string\n}\n"],"names":["CheckRootExternalPathDto","SpaceRootDto","SpaceRootFileDto","SpaceRootOwnerDto","value","sanitizePath","replace","SPACE_REPOSITORY","FILES","SPACE_ALIAS","PERSONAL","sanitizeName","trim","_","owner","id","file","externalPath"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAoEYA;eAAAA;;QAvCAC;eAAAA;;QAXAC;eAAAA;;;kCAhBmB;gCAC2F;uBAChF;wBACG;;;;;;;;;;AAG9C,IAAA,AAAMC,oBAAN,MAAMA;AAQN;;;;;;;;;;;AAEO,IAAA,AAAMD,mBAAN,MAAMA;AASb;;;;;;;;;sCAFc,EAAEE,KAAK,EAAE,GAAMA,QAAQC,IAAAA,mBAAY,EAACD,OAAOE,OAAO,CAAC,GAAGC,wBAAgB,CAACC,KAAK,CAAC,CAAC,EAAEC,mBAAW,CAACC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM;;;AAItH,IAAA,AAAMT,eAAN,MAAMA;AAqCb;;;;;;;;;sCA9Bc,EAAEG,KAAK,EAAE,GAAMA,QAAQO,IAAAA,mBAAY,EAACP,MAAMQ,IAAI,MAAM;;;;;;sCAKpD,EAAER,KAAK,EAAE,GAAMA,QAAQO,IAAAA,mBAAY,EAACP,MAAMQ,IAAI,MAAM;;;;;;;;;;;;;;;qCAYnDC,GAAGC,QAAU,CAAC,CAACA,OAAOC;;;oCAGvBZ;;;;qCAGCU,GAAGG,OAAS,CAACH,EAAEI,YAAY,IAAID,MAAMD;;;;oCAKtCb;;;AAIP,IAAA,AAAMF,2BAAN,MAAMA;AAIb"}

package/server/applications/spaces/guards/space.guard.js

@@ -0,0 +1,151 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SpaceGuard", {
+    enumerable: true,
+    get: function() {
+        return SpaceGuard;
+    }
+});
+const _common = require("@nestjs/common");
+const _core = require("@nestjs/core");
+const _applicationsconstants = require("../../applications.constants");
+const _onlyoffice = require("../../files/constants/only-office");
+const _routes = require("../../files/constants/routes");
+const _synccontextdecorator = require("../../sync/decorators/sync-context.decorator");
+const _routes1 = require("../../sync/utils/routes");
+const _webdavcontextdecorator = require("../../webdav/decorators/webdav-context.decorator");
+const _routes2 = require("../../webdav/utils/routes");
+const _spaces = require("../constants/spaces");
+const _spaceskipguarddecorator = require("../decorators/space-skip-guard.decorator");
+const _spaceskippermissionsdecorator = require("../decorators/space-skip-permissions.decorator");
+const _spacesmanagerservice = require("../services/spaces-manager.service");
+const _permissions = require("../utils/permissions");
+const _routes3 = require("../utils/routes");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let SpaceGuard = class SpaceGuard {
+    static checkPermissions(req, logger, onlyOfficeContext = false) {
+        let permission;
+        if (onlyOfficeContext && req.method === _applicationsconstants.HTTP_METHOD.POST && req.originalUrl.startsWith(_routes.API_FILES_ONLY_OFFICE_CALLBACK)) {
+            // special case : onlyoffice callback use post method to update documents
+            permission = _spaces.SPACE_OPERATION.MODIFY;
+        } else {
+            permission = _spaces.SPACE_HTTP_PERMISSION[req.method];
+        }
+        if (!(0, _permissions.haveSpaceEnvPermissions)(req.space, permission)) {
+            logger.warn(`is not allowed to ${req.method} on this space path : *${req.space.alias}* (${req.space.id}) : ${req.space.url}`);
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        if ([
+            _spaces.SPACE_OPERATION.ADD,
+            _spaces.SPACE_OPERATION.MODIFY
+        ].indexOf(permission) > -1) {
+            if (req.space.quotaIsExceeded) {
+                logger.warn(`Space quota is exceeded for *${req.space.alias}* (${req.space.id})`);
+                throw new _common.HttpException('Space quota is exceeded', _common.HttpStatus.INSUFFICIENT_STORAGE);
+            } else if (req.space.storageQuota) {
+                const contentLength = parseInt(req.headers['content-length'] || '0', 10) || 0;
+                if (req.space.willExceedQuota(contentLength)) {
+                    throw new _common.HttpException('Quota will be exceeded', _common.HttpStatus.INSUFFICIENT_STORAGE);
+                }
+            }
+        }
+    }
+    async canActivate(ctx) {
+        const skipSpaceGuard = this.reflector.getAllAndOverride(_spaceskipguarddecorator.SKIP_SPACE_GUARD, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        if (skipSpaceGuard) {
+            return true;
+        }
+        const skipSpacePermissionsCheck = this.reflector.getAllAndOverride(_spaceskippermissionsdecorator.SKIP_SPACE_PERMISSIONS_CHECK, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        const req = ctx.switchToHttp().getRequest();
+        const onlyOfficeContext = this.reflector.getAllAndOverride(_onlyoffice.ONLY_OFFICE_CONTEXT, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        const webDAVContext = this.reflector.getAllAndOverride(_webdavcontextdecorator.WEB_DAV_CONTEXT, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        const syncContext = this.reflector.getAllAndOverride(_synccontextdecorator.SYNC_CONTEXT, [
+            ctx.getHandler(),
+            ctx.getClass()
+        ]);
+        const urlSegments = this.urlSegmentsFromContext(req, webDAVContext, syncContext);
+        this.checkAccessToSpace(req, urlSegments);
+        let space;
+        try {
+            space = await this.spacesManager.spaceEnv(req.user, urlSegments);
+        } catch (e) {
+            this.logger.warn(`${this.canActivate.name} - ${e}`);
+            throw new _common.HttpException('Space path is not valid', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (!space) {
+            this.logger.warn(`${this.canActivate.name} - space not authorized or not found : ${req.params['*']}`);
+            throw new _common.HttpException('Space not found', _common.HttpStatus.NOT_FOUND);
+        }
+        if (!space.enabled) {
+            throw new _common.HttpException('Space is disabled', _common.HttpStatus.FORBIDDEN);
+        }
+        // assign space to request
+        req.space = space;
+        if (skipSpacePermissionsCheck === undefined) {
+            SpaceGuard.checkPermissions(req, this.logger, onlyOfficeContext);
+        }
+        return true;
+    }
+    urlSegmentsFromContext(req, webDAVContext, syncContext) {
+        if (webDAVContext || syncContext) {
+            try {
+                if (webDAVContext) {
+                    return (0, _routes2.WEBDAV_PATH_TO_SPACE_SEGMENTS)(req.params['*']);
+                } else {
+                    return (0, _routes1.SYNC_PATH_TO_SPACE_SEGMENTS)(req.params['*']);
+                }
+            } catch (e) {
+                this.logger.warn(`${this.canActivate.name} - ${e}`);
+                throw new _common.HttpException(e.message, _common.HttpStatus.NOT_FOUND);
+            }
+        }
+        return (0, _routes3.PATH_TO_SPACE_SEGMENTS)(req.params['*']);
+    }
+    checkAccessToSpace(req, urlSegments) {
+        if (!(0, _permissions.canAccessToSpaceUrl)(req.user, urlSegments)) {
+            this.logger.warn(`is not allowed to access to this space repository : ${req.params['*']}`);
+            throw new _common.HttpException('You are not allowed to access to this repository', _common.HttpStatus.FORBIDDEN);
+        }
+    }
+    constructor(reflector, spacesManager){
+        this.reflector = reflector;
+        this.spacesManager = spacesManager;
+        this.logger = new _common.Logger(SpaceGuard.name);
+    }
+};
+SpaceGuard = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _core.Reflector === "undefined" ? Object : _core.Reflector,
+        typeof _spacesmanagerservice.SpacesManager === "undefined" ? Object : _spacesmanagerservice.SpacesManager
+    ])
+], SpaceGuard);
+
+//# sourceMappingURL=space.guard.js.map

package/server/applications/spaces/guards/space.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/spaces/guards/space.guard.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { CanActivate, ExecutionContext, HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport { Reflector } from '@nestjs/core'\nimport { HTTP_METHOD } from '../../applications.constants'\nimport { ONLY_OFFICE_CONTEXT } from '../../files/constants/only-office'\nimport { API_FILES_ONLY_OFFICE_CALLBACK } from '../../files/constants/routes'\nimport { SYNC_CONTEXT } from '../../sync/decorators/sync-context.decorator'\nimport { SYNC_PATH_TO_SPACE_SEGMENTS } from '../../sync/utils/routes'\nimport { WEB_DAV_CONTEXT } from '../../webdav/decorators/webdav-context.decorator'\nimport { WEBDAV_PATH_TO_SPACE_SEGMENTS } from '../../webdav/utils/routes'\nimport { SPACE_HTTP_PERMISSION, SPACE_OPERATION } from '../constants/spaces'\nimport { SKIP_SPACE_GUARD } from '../decorators/space-skip-guard.decorator'\nimport { SKIP_SPACE_PERMISSIONS_CHECK } from '../decorators/space-skip-permissions.decorator'\nimport { FastifySpaceRequest } from '../interfaces/space-request.interface'\nimport { SpaceEnv } from '../models/space-env.model'\nimport { SpacesManager } from '../services/spaces-manager.service'\nimport { canAccessToSpaceUrl, haveSpaceEnvPermissions } from '../utils/permissions'\nimport { PATH_TO_SPACE_SEGMENTS } from '../utils/routes'\n\n@Injectable()\nexport class SpaceGuard implements CanActivate {\n  private readonly logger = new Logger(SpaceGuard.name)\n\n  constructor(\n    private readonly reflector: Reflector,\n    private readonly spacesManager: SpacesManager\n  ) {}\n\n  static checkPermissions(req: FastifySpaceRequest, logger: Logger, onlyOfficeContext = false) {\n    let permission: SPACE_OPERATION\n    if (onlyOfficeContext && req.method === HTTP_METHOD.POST && req.originalUrl.startsWith(API_FILES_ONLY_OFFICE_CALLBACK)) {\n      // special case : onlyoffice callback use post method to update documents\n      permission = SPACE_OPERATION.MODIFY\n    } else {\n      permission = SPACE_HTTP_PERMISSION[req.method]\n    }\n    if (!haveSpaceEnvPermissions(req.space, permission)) {\n      logger.warn(`is not allowed to ${req.method} on this space path : *${req.space.alias}* (${req.space.id}) : ${req.space.url}`)\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    if ([SPACE_OPERATION.ADD, SPACE_OPERATION.MODIFY].indexOf(permission) > -1) {\n      if (req.space.quotaIsExceeded) {\n        logger.warn(`Space quota is exceeded for *${req.space.alias}* (${req.space.id})`)\n        throw new HttpException('Space quota is exceeded', HttpStatus.INSUFFICIENT_STORAGE)\n      } else if (req.space.storageQuota) {\n        const contentLength = parseInt(req.headers['content-length'] || '0', 10) || 0\n        if (req.space.willExceedQuota(contentLength)) {\n          throw new HttpException('Quota will be exceeded', HttpStatus.INSUFFICIENT_STORAGE)\n        }\n      }\n    }\n  }\n\n  async canActivate(ctx: ExecutionContext): Promise<boolean> {\n    const skipSpaceGuard = this.reflector.getAllAndOverride(SKIP_SPACE_GUARD, [ctx.getHandler(), ctx.getClass()])\n    if (skipSpaceGuard) {\n      return true\n    }\n    const skipSpacePermissionsCheck = this.reflector.getAllAndOverride(SKIP_SPACE_PERMISSIONS_CHECK, [ctx.getHandler(), ctx.getClass()])\n    const req: FastifySpaceRequest = ctx.switchToHttp().getRequest()\n    const onlyOfficeContext = this.reflector.getAllAndOverride(ONLY_OFFICE_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const webDAVContext = this.reflector.getAllAndOverride(WEB_DAV_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const syncContext = this.reflector.getAllAndOverride(SYNC_CONTEXT, [ctx.getHandler(), ctx.getClass()])\n    const urlSegments = this.urlSegmentsFromContext(req, webDAVContext, syncContext)\n    this.checkAccessToSpace(req, urlSegments)\n    let space: SpaceEnv\n    try {\n      space = await this.spacesManager.spaceEnv(req.user, urlSegments)\n    } catch (e) {\n      this.logger.warn(`${this.canActivate.name} - ${e}`)\n      throw new HttpException('Space path is not valid', HttpStatus.BAD_REQUEST)\n    }\n    if (!space) {\n      this.logger.warn(`${this.canActivate.name} - space not authorized or not found : ${req.params['*']}`)\n      throw new HttpException('Space not found', HttpStatus.NOT_FOUND)\n    }\n    if (!space.enabled) {\n      throw new HttpException('Space is disabled', HttpStatus.FORBIDDEN)\n    }\n    // assign space to request\n    req.space = space\n    if (skipSpacePermissionsCheck === undefined) {\n      SpaceGuard.checkPermissions(req, this.logger, onlyOfficeContext)\n    }\n    return true\n  }\n\n  private urlSegmentsFromContext(req: FastifySpaceRequest, webDAVContext: boolean, syncContext: boolean): string[] {\n    if (webDAVContext || syncContext) {\n      try {\n        if (webDAVContext) {\n          return WEBDAV_PATH_TO_SPACE_SEGMENTS(req.params['*'])\n        } else {\n          return SYNC_PATH_TO_SPACE_SEGMENTS(req.params['*'])\n        }\n      } catch (e) {\n        this.logger.warn(`${this.canActivate.name} - ${e}`)\n        throw new HttpException(e.message, HttpStatus.NOT_FOUND)\n      }\n    }\n    return PATH_TO_SPACE_SEGMENTS(req.params['*'])\n  }\n\n  private checkAccessToSpace(req: FastifySpaceRequest, urlSegments: string[]) {\n    if (!canAccessToSpaceUrl(req.user, urlSegments)) {\n      this.logger.warn(`is not allowed to access to this space repository : ${req.params['*']}`)\n      throw new HttpException('You are not allowed to access to this repository', HttpStatus.FORBIDDEN)\n    }\n  }\n}\n"],"names":["SpaceGuard","checkPermissions","req","logger","onlyOfficeContext","permission","method","HTTP_METHOD","POST","originalUrl","startsWith","API_FILES_ONLY_OFFICE_CALLBACK","SPACE_OPERATION","MODIFY","SPACE_HTTP_PERMISSION","haveSpaceEnvPermissions","space","warn","alias","id","url","HttpException","HttpStatus","FORBIDDEN","ADD","indexOf","quotaIsExceeded","INSUFFICIENT_STORAGE","storageQuota","contentLength","parseInt","headers","willExceedQuota","canActivate","ctx","skipSpaceGuard","reflector","getAllAndOverride","SKIP_SPACE_GUARD","getHandler","getClass","skipSpacePermissionsCheck","SKIP_SPACE_PERMISSIONS_CHECK","switchToHttp","getRequest","ONLY_OFFICE_CONTEXT","webDAVContext","WEB_DAV_CONTEXT","syncContext","SYNC_CONTEXT","urlSegments","urlSegmentsFromContext","checkAccessToSpace","spacesManager","spaceEnv","user","e","name","BAD_REQUEST","params","NOT_FOUND","enabled","undefined","WEBDAV_PATH_TO_SPACE_SEGMENTS","SYNC_PATH_TO_SPACE_SEGMENTS","message","PATH_TO_SPACE_SEGMENTS","canAccessToSpaceUrl","Logger"],"mappings":"AAAA;;;;CAIC;;;;+BAqBYA;;;eAAAA;;;wBAnBgF;sBACnE;uCACE;4BACQ;wBACW;sCAClB;yBACe;wCACZ;yBACc;wBACS;yCACtB;+CACY;sCAGf;6BAC+B;yBACtB;;;;;;;;;;AAGhC,IAAA,AAAMA,aAAN,MAAMA;IAQX,OAAOC,iBAAiBC,GAAwB,EAAEC,MAAc,EAAEC,oBAAoB,KAAK,EAAE;QAC3F,IAAIC;QACJ,IAAID,qBAAqBF,IAAII,MAAM,KAAKC,kCAAW,CAACC,IAAI,IAAIN,IAAIO,WAAW,CAACC,UAAU,CAACC,sCAA8B,GAAG;YACtH,yEAAyE;YACzEN,aAAaO,uBAAe,CAACC,MAAM;QACrC,OAAO;YACLR,aAAaS,6BAAqB,CAACZ,IAAII,MAAM,CAAC;QAChD;QACA,IAAI,CAACS,IAAAA,oCAAuB,EAACb,IAAIc,KAAK,EAAEX,aAAa;YACnDF,OAAOc,IAAI,CAAC,CAAC,kBAAkB,EAAEf,IAAII,MAAM,CAAC,uBAAuB,EAAEJ,IAAIc,KAAK,CAACE,KAAK,CAAC,GAAG,EAAEhB,IAAIc,KAAK,CAACG,EAAE,CAAC,IAAI,EAAEjB,IAAIc,KAAK,CAACI,GAAG,EAAE;YAC5H,MAAM,IAAIC,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,IAAI;YAACX,uBAAe,CAACY,GAAG;YAAEZ,uBAAe,CAACC,MAAM;SAAC,CAACY,OAAO,CAACpB,cAAc,CAAC,GAAG;YAC1E,IAAIH,IAAIc,KAAK,CAACU,eAAe,EAAE;gBAC7BvB,OAAOc,IAAI,CAAC,CAAC,6BAA6B,EAAEf,IAAIc,KAAK,CAACE,KAAK,CAAC,GAAG,EAAEhB,IAAIc,KAAK,CAACG,EAAE,CAAC,CAAC,CAAC;gBAChF,MAAM,IAAIE,qBAAa,CAAC,2BAA2BC,kBAAU,CAACK,oBAAoB;YACpF,OAAO,IAAIzB,IAAIc,KAAK,CAACY,YAAY,EAAE;gBACjC,MAAMC,gBAAgBC,SAAS5B,IAAI6B,OAAO,CAAC,iBAAiB,IAAI,KAAK,OAAO;gBAC5E,IAAI7B,IAAIc,KAAK,CAACgB,eAAe,CAACH,gBAAgB;oBAC5C,MAAM,IAAIR,qBAAa,CAAC,0BAA0BC,kBAAU,CAACK,oBAAoB;gBACnF;YACF;QACF;IACF;IAEA,MAAMM,YAAYC,GAAqB,EAAoB;QACzD,MAAMC,iBAAiB,IAAI,CAACC,SAAS,CAACC,iBAAiB,CAACC,yCAAgB,EAAE;YAACJ,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC5G,IAAIL,gBAAgB;YAClB,OAAO;QACT;QACA,MAAMM,4BAA4B,IAAI,CAACL,SAAS,CAACC,iBAAiB,CAACK,2DAA4B,EAAE;YAACR,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACnI,MAAMtC,MAA2BgC,IAAIS,YAAY,GAAGC,UAAU;QAC9D,MAAMxC,oBAAoB,IAAI,CAACgC,SAAS,CAACC,iBAAiB,CAACQ,+BAAmB,EAAE;YAACX,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAClH,MAAMM,gBAAgB,IAAI,CAACV,SAAS,CAACC,iBAAiB,CAACU,uCAAe,EAAE;YAACb,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QAC1G,MAAMQ,cAAc,IAAI,CAACZ,SAAS,CAACC,iBAAiB,CAACY,kCAAY,EAAE;YAACf,IAAIK,UAAU;YAAIL,IAAIM,QAAQ;SAAG;QACrG,MAAMU,cAAc,IAAI,CAACC,sBAAsB,CAACjD,KAAK4C,eAAeE;QACpE,IAAI,CAACI,kBAAkB,CAAClD,KAAKgD;QAC7B,IAAIlC;QACJ,IAAI;YACFA,QAAQ,MAAM,IAAI,CAACqC,aAAa,CAACC,QAAQ,CAACpD,IAAIqD,IAAI,EAAEL;QACtD,EAAE,OAAOM,GAAG;YACV,IAAI,CAACrD,MAAM,CAACc,IAAI,CAAC,GAAG,IAAI,CAACgB,WAAW,CAACwB,IAAI,CAAC,GAAG,EAAED,GAAG;YAClD,MAAM,IAAInC,qBAAa,CAAC,2BAA2BC,kBAAU,CAACoC,WAAW;QAC3E;QACA,IAAI,CAAC1C,OAAO;YACV,IAAI,CAACb,MAAM,CAACc,IAAI,CAAC,GAAG,IAAI,CAACgB,WAAW,CAACwB,IAAI,CAAC,uCAAuC,EAAEvD,IAAIyD,MAAM,CAAC,IAAI,EAAE;YACpG,MAAM,IAAItC,qBAAa,CAAC,mBAAmBC,kBAAU,CAACsC,SAAS;QACjE;QACA,IAAI,CAAC5C,MAAM6C,OAAO,EAAE;YAClB,MAAM,IAAIxC,qBAAa,CAAC,qBAAqBC,kBAAU,CAACC,SAAS;QACnE;QACA,0BAA0B;QAC1BrB,IAAIc,KAAK,GAAGA;QACZ,IAAIyB,8BAA8BqB,WAAW;YAC3C9D,WAAWC,gBAAgB,CAACC,KAAK,IAAI,CAACC,MAAM,EAAEC;QAChD;QACA,OAAO;IACT;IAEQ+C,uBAAuBjD,GAAwB,EAAE4C,aAAsB,EAAEE,WAAoB,EAAY;QAC/G,IAAIF,iBAAiBE,aAAa;YAChC,IAAI;gBACF,IAAIF,eAAe;oBACjB,OAAOiB,IAAAA,sCAA6B,EAAC7D,IAAIyD,MAAM,CAAC,IAAI;gBACtD,OAAO;oBACL,OAAOK,IAAAA,oCAA2B,EAAC9D,IAAIyD,MAAM,CAAC,IAAI;gBACpD;YACF,EAAE,OAAOH,GAAG;gBACV,IAAI,CAACrD,MAAM,CAACc,IAAI,CAAC,GAAG,IAAI,CAACgB,WAAW,CAACwB,IAAI,CAAC,GAAG,EAAED,GAAG;gBAClD,MAAM,IAAInC,qBAAa,CAACmC,EAAES,OAAO,EAAE3C,kBAAU,CAACsC,SAAS;YACzD;QACF;QACA,OAAOM,IAAAA,+BAAsB,EAAChE,IAAIyD,MAAM,CAAC,IAAI;IAC/C;IAEQP,mBAAmBlD,GAAwB,EAAEgD,WAAqB,EAAE;QAC1E,IAAI,CAACiB,IAAAA,gCAAmB,EAACjE,IAAIqD,IAAI,EAAEL,cAAc;YAC/C,IAAI,CAAC/C,MAAM,CAACc,IAAI,CAAC,CAAC,oDAAoD,EAAEf,IAAIyD,MAAM,CAAC,IAAI,EAAE;YACzF,MAAM,IAAItC,qBAAa,CAAC,oDAAoDC,kBAAU,CAACC,SAAS;QAClG;IACF;IArFA,YACE,AAAiBa,SAAoB,EACrC,AAAiBiB,aAA4B,CAC7C;aAFiBjB,YAAAA;aACAiB,gBAAAA;aAJFlD,SAAS,IAAIiE,cAAM,CAACpE,WAAWyD,IAAI;IAKjD;AAmFL"}