@sync-in/server 1.5.1 → 1.6.0

package/server/authentication/services/auth-methods/auth-method-two-fa.service.js

@@ -0,0 +1,251 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AuthMethod2FA", {
+    enumerable: true,
+    get: function() {
+        return AuthMethod2FA;
+    }
+});
+const _common = require("@nestjs/common");
+const _time2fa = require("time2fa");
+const _notifications = require("../../../applications/notifications/constants/notifications");
+const _notificationsmanagerservice = require("../../../applications/notifications/services/notifications-manager.service");
+const _usersmanagerservice = require("../../../applications/users/services/users-manager.service");
+const _constants = require("../../../common/constants");
+const _functions = require("../../../common/functions");
+const _qrcode = require("../../../common/qrcode");
+const _configenvironment = require("../../../configuration/config.environment");
+const _cacheservice = require("../../../infrastructure/cache/services/cache.service");
+const _auth = require("../../constants/auth");
+const _cryptsecret = require("../../utils/crypt-secret");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AuthMethod2FA = class AuthMethod2FA {
+    async initTwoFactor(user) {
+        const { secret, qrDataUrl } = this.generateSecretAndQr(user.email);
+        // store encrypted secret in cache for 5 minutes
+        await this.cache.set(this.getCacheKey(user.id), this.encryptSecret(secret), 300);
+        return {
+            secret,
+            qrDataUrl
+        };
+    }
+    async enableTwoFactor(body, req) {
+        // retrieve encrypted secret from cache
+        const secret = await this.cache.get(this.getCacheKey(req.user.id));
+        if (!secret) {
+            throw new _common.HttpException('The secret has expired', _common.HttpStatus.BAD_REQUEST);
+        }
+        // load user
+        const [auth, user] = await this.verify(body, req, true, secret);
+        if (!auth.success) {
+            throw new _common.HttpException(auth.message, _common.HttpStatus.FORBIDDEN);
+        }
+        // verify user password
+        await this.verifyUserPassword(user, body.password, req.ip);
+        // generate recovery codes
+        const recoveryCodes = this.generateRecoveryCodes();
+        // store and enable TwoFA & recovery codes
+        await this.usersManager.updateSecrets(user.id, {
+            twoFaSecret: secret,
+            recoveryCodes: recoveryCodes.map((code)=>this.encryptSecret(code))
+        });
+        this.sendEmailNotification(req, _constants.ACTION.ADD);
+        return {
+            ...auth,
+            recoveryCodes: recoveryCodes
+        };
+    }
+    async disableTwoFactor(body, req) {
+        // load user
+        const [auth, user] = await this.verify(body, req, true);
+        if (!auth.success) {
+            throw new _common.HttpException(auth.message, _common.HttpStatus.FORBIDDEN);
+        }
+        // verify user password
+        await this.verifyUserPassword(user, body.password, req.ip);
+        // store and disable TwoFA & recovery codes
+        await this.usersManager.updateSecrets(user.id, {
+            twoFaSecret: undefined,
+            recoveryCodes: undefined
+        });
+        this.sendEmailNotification(req, _constants.ACTION.DELETE);
+        return auth;
+    }
+    async verify(verifyDto, req, fromLogin = false, secret) {
+        const user = await this.loadUser(req.user.id, req.ip);
+        secret = secret || user.secrets.twoFaSecret;
+        const auth = verifyDto.isRecoveryCode ? await this.validateRecoveryCode(req.user.id, verifyDto.code, user.secrets.recoveryCodes) : this.validateTwoFactorCode(verifyDto.code, secret);
+        this.usersManager.updateAccesses(user, req.ip, auth.success, true).catch((e)=>this.logger.error(`${this.verify.name} - ${e}`));
+        return fromLogin ? [
+            auth,
+            user
+        ] : auth;
+    }
+    async adminResetUserTwoFa(userId) {
+        const auth = {
+            success: false,
+            message: ''
+        };
+        try {
+            await this.usersManager.updateSecrets(userId, {
+                twoFaSecret: undefined,
+                recoveryCodes: undefined
+            });
+            auth.success = true;
+        } catch (e) {
+            auth.success = false;
+            auth.message = e.message;
+            this.logger.error(`${this.adminResetUserTwoFa.name} - ${e}`);
+        }
+        return auth;
+    }
+    async loadUser(userId, ip) {
+        const user = await this.usersManager.fromUserId(userId);
+        if (!user) {
+            this.logger.warn(`User *${user.login}* (${user.id}) not found`);
+            throw new _common.HttpException(`User not found`, _common.HttpStatus.NOT_FOUND);
+        }
+        this.usersManager.validateUserAccess(user, ip);
+        return user;
+    }
+    async verifyUserPassword(user, password, ip) {
+        // This function works with any authentication method, provided that
+        // the authentication service implements proper user password updates in the database.
+        if (!await this.usersManager.compareUserPassword(user.id, password)) {
+            this.usersManager.updateAccesses(user, ip, false, true).catch((e)=>this.logger.error(`${this.enableTwoFactor.name} - ${e}`));
+            throw new _common.HttpException('Incorrect code or password', _common.HttpStatus.BAD_REQUEST);
+        }
+    }
+    validateTwoFactorCode(code, encryptedSecret) {
+        const auth = {
+            success: false,
+            message: ''
+        };
+        if (!encryptedSecret) {
+            auth.message = 'Incorrect code or password';
+            return auth;
+        }
+        try {
+            auth.success = _time2fa.Totp.validate({
+                passcode: code,
+                secret: this.decryptSecret(encryptedSecret),
+                drift: 1
+            });
+            if (!auth.success) auth.message = 'Incorrect code or password';
+        } catch (e) {
+            this.logger.error(`${this.validateTwoFactorCode.name} - ${e}`);
+            auth.message = e.message;
+        }
+        return auth;
+    }
+    async validateRecoveryCode(userId, code, encryptedCodes) {
+        const auth = {
+            success: false,
+            message: ''
+        };
+        if (!encryptedCodes || encryptedCodes.length === 0) {
+            auth.message = 'Invalid code';
+        } else {
+            try {
+                for (const encCode of encryptedCodes){
+                    if (code === this.decryptSecret(encCode)) {
+                        auth.success = true;
+                        // removed used code
+                        encryptedCodes.splice(encryptedCodes.indexOf(encCode), 1);
+                        break;
+                    }
+                }
+                if (auth.success) {
+                    // update recovery codes
+                    await this.usersManager.updateSecrets(userId, {
+                        recoveryCodes: encryptedCodes
+                    });
+                } else {
+                    auth.message = 'Invalid code';
+                }
+            } catch (e) {
+                this.logger.error(`${this.validateRecoveryCode.name} - ${e}`);
+                auth.message = e.message;
+            }
+        }
+        return auth;
+    }
+    generateSecretAndQr(userEmail) {
+        // Generate secret + otpauth URL + QR (DataURL)
+        // Totp.generateKey returns { issuer, user, config, secret, url }
+        const key = _time2fa.Totp.generateKey({
+            issuer: _configenvironment.configuration.auth.mfa.totp.issuer,
+            user: userEmail
+        }, {
+            digits: _auth.TWO_FA_CODE_LENGTH
+        });
+        const qrDataUrl = (0, _qrcode.qrcodeToDataURL)(key.url);
+        return {
+            secret: key.secret,
+            qrDataUrl: qrDataUrl
+        };
+    }
+    getCacheKey(userId) {
+        return `${this.cacheKeyPrefix}${userId}`;
+    }
+    encryptSecret(secret) {
+        if (_configenvironment.configuration.auth.encryptionKey) {
+            return (0, _cryptsecret.encryptSecret)(secret, _configenvironment.configuration.auth.encryptionKey);
+        }
+        return secret;
+    }
+    decryptSecret(secret) {
+        if (_configenvironment.configuration.auth.encryptionKey) {
+            return (0, _cryptsecret.decryptSecret)(secret, _configenvironment.configuration.auth.encryptionKey);
+        }
+        return secret;
+    }
+    generateRecoveryCodes(count = 5) {
+        return Array.from({
+            length: count
+        }, ()=>(0, _functions.generateShortUUID)());
+    }
+    sendEmailNotification(req, action) {
+        const notification = {
+            app: _notifications.NOTIFICATION_APP.AUTH_2FA,
+            event: _notifications.NOTIFICATION_APP_EVENT.AUTH_2FA[action],
+            element: req.headers['user-agent'],
+            url: req.ip
+        };
+        this.notificationsManager.sendEmailNotification([
+            req.user
+        ], notification).catch((e)=>this.logger.error(`${this.sendEmailNotification.name} - ${e}`));
+    }
+    constructor(cache, usersManager, notificationsManager){
+        this.cache = cache;
+        this.usersManager = usersManager;
+        this.notificationsManager = notificationsManager;
+        this.logger = new _common.Logger(AuthMethod2FA.name);
+        this.cacheKeyPrefix = 'auth-2fa-pending-user-';
+    }
+};
+AuthMethod2FA = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _cacheservice.Cache === "undefined" ? Object : _cacheservice.Cache,
+        typeof _usersmanagerservice.UsersManager === "undefined" ? Object : _usersmanagerservice.UsersManager,
+        typeof _notificationsmanagerservice.NotificationsManager === "undefined" ? Object : _notificationsmanagerservice.NotificationsManager
+    ])
+], AuthMethod2FA);
+
+//# sourceMappingURL=auth-method-two-fa.service.js.map

package/server/authentication/services/auth-methods/auth-method-two-fa.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/authentication/services/auth-methods/auth-method-two-fa.service.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport { Totp } from 'time2fa'\nimport { NOTIFICATION_APP, NOTIFICATION_APP_EVENT } from '../../../applications/notifications/constants/notifications'\nimport { NotificationContent } from '../../../applications/notifications/interfaces/notification-properties.interface'\nimport { NotificationsManager } from '../../../applications/notifications/services/notifications-manager.service'\nimport { UserModel } from '../../../applications/users/models/user.model'\nimport { UsersManager } from '../../../applications/users/services/users-manager.service'\nimport { ACTION } from '../../../common/constants'\nimport { generateShortUUID } from '../../../common/functions'\nimport { qrcodeToDataURL } from '../../../common/qrcode'\nimport { configuration } from '../../../configuration/config.environment'\nimport { Cache } from '../../../infrastructure/cache/services/cache.service'\nimport { TWO_FA_CODE_LENGTH } from '../../constants/auth'\nimport { TwoFaVerifyDto, TwoFaVerifyWithPasswordDto } from '../../dto/two-fa-verify.dto'\nimport { FastifyAuthenticatedRequest } from '../../interfaces/auth-request.interface'\nimport { TwoFaEnableResult, TwoFaSetup, TwoFaVerifyResult } from '../../interfaces/two-fa-setup.interface'\nimport { decryptSecret, encryptSecret } from '../../utils/crypt-secret'\n\n@Injectable()\nexport class AuthMethod2FA {\n  private readonly logger = new Logger(AuthMethod2FA.name)\n  private readonly cacheKeyPrefix = 'auth-2fa-pending-user-'\n\n  constructor(\n    private readonly cache: Cache,\n    private readonly usersManager: UsersManager,\n    private readonly notificationsManager: NotificationsManager\n  ) {}\n\n  async initTwoFactor(user: UserModel): Promise<TwoFaSetup> {\n    const { secret, qrDataUrl } = this.generateSecretAndQr(user.email)\n    // store encrypted secret in cache for 5 minutes\n    await this.cache.set(this.getCacheKey(user.id), this.encryptSecret(secret), 300)\n    return { secret, qrDataUrl }\n  }\n\n  async enableTwoFactor(body: TwoFaVerifyWithPasswordDto, req: FastifyAuthenticatedRequest): Promise<TwoFaEnableResult> {\n    // retrieve encrypted secret from cache\n    const secret: string = await this.cache.get(this.getCacheKey(req.user.id))\n    if (!secret) {\n      throw new HttpException('The secret has expired', HttpStatus.BAD_REQUEST)\n    }\n    // load user\n    const [auth, user] = await this.verify(body, req, true, secret)\n    if (!auth.success) {\n      throw new HttpException(auth.message, HttpStatus.FORBIDDEN)\n    }\n    // verify user password\n    await this.verifyUserPassword(user, body.password, req.ip)\n    // generate recovery codes\n    const recoveryCodes = this.generateRecoveryCodes()\n    // store and enable TwoFA & recovery codes\n    await this.usersManager.updateSecrets(user.id, {\n      twoFaSecret: secret,\n      recoveryCodes: recoveryCodes.map((code) => this.encryptSecret(code))\n    })\n    this.sendEmailNotification(req, ACTION.ADD)\n    return { ...auth, recoveryCodes: recoveryCodes }\n  }\n\n  async disableTwoFactor(body: TwoFaVerifyWithPasswordDto, req: FastifyAuthenticatedRequest): Promise<TwoFaVerifyResult> {\n    // load user\n    const [auth, user] = await this.verify(body, req, true)\n    if (!auth.success) {\n      throw new HttpException(auth.message, HttpStatus.FORBIDDEN)\n    }\n    // verify user password\n    await this.verifyUserPassword(user, body.password, req.ip)\n    // store and disable TwoFA & recovery codes\n    await this.usersManager.updateSecrets(user.id, { twoFaSecret: undefined, recoveryCodes: undefined })\n    this.sendEmailNotification(req, ACTION.DELETE)\n    return auth\n  }\n\n  async verify(verifyDto: TwoFaVerifyDto, req: FastifyAuthenticatedRequest, fromLogin?: false, secret?: string): Promise<TwoFaVerifyResult>\n  async verify(verifyDto: TwoFaVerifyDto, req: FastifyAuthenticatedRequest, fromLogin: true, secret?: string): Promise<[TwoFaVerifyResult, UserModel]>\n  async verify(\n    verifyDto: TwoFaVerifyDto,\n    req: FastifyAuthenticatedRequest,\n    fromLogin = false,\n    secret?: string\n  ): Promise<TwoFaVerifyResult | [TwoFaVerifyResult, UserModel]> {\n    const user = await this.loadUser(req.user.id, req.ip)\n    secret = secret || user.secrets.twoFaSecret\n    const auth = verifyDto.isRecoveryCode\n      ? await this.validateRecoveryCode(req.user.id, verifyDto.code, user.secrets.recoveryCodes)\n      : this.validateTwoFactorCode(verifyDto.code, secret)\n    this.usersManager.updateAccesses(user, req.ip, auth.success, true).catch((e: Error) => this.logger.error(`${this.verify.name} - ${e}`))\n    return fromLogin ? [auth, user] : auth\n  }\n\n  async adminResetUserTwoFa(userId: number) {\n    const auth: TwoFaVerifyResult = { success: false, message: '' }\n    try {\n      await this.usersManager.updateSecrets(userId, { twoFaSecret: undefined, recoveryCodes: undefined })\n      auth.success = true\n    } catch (e) {\n      auth.success = false\n      auth.message = e.message\n      this.logger.error(`${this.adminResetUserTwoFa.name} - ${e}`)\n    }\n    return auth\n  }\n\n  async loadUser(userId: number, ip: string) {\n    const user: UserModel = await this.usersManager.fromUserId(userId)\n    if (!user) {\n      this.logger.warn(`User *${user.login}* (${user.id}) not found`)\n      throw new HttpException(`User not found`, HttpStatus.NOT_FOUND)\n    }\n    this.usersManager.validateUserAccess(user, ip)\n    return user\n  }\n\n  async verifyUserPassword(user: UserModel, password: string, ip: string) {\n    // This function works with any authentication method, provided that\n    // the authentication service implements proper user password updates in the database.\n    if (!(await this.usersManager.compareUserPassword(user.id, password))) {\n      this.usersManager.updateAccesses(user, ip, false, true).catch((e: Error) => this.logger.error(`${this.enableTwoFactor.name} - ${e}`))\n      throw new HttpException('Incorrect code or password', HttpStatus.BAD_REQUEST)\n    }\n  }\n\n  validateTwoFactorCode(code: string, encryptedSecret: string): TwoFaVerifyResult {\n    const auth: TwoFaVerifyResult = { success: false, message: '' }\n    if (!encryptedSecret) {\n      auth.message = 'Incorrect code or password'\n      return auth\n    }\n    try {\n      auth.success = Totp.validate({ passcode: code, secret: this.decryptSecret(encryptedSecret), drift: 1 })\n      if (!auth.success) auth.message = 'Incorrect code or password'\n    } catch (e) {\n      this.logger.error(`${this.validateTwoFactorCode.name} - ${e}`)\n      auth.message = e.message\n    }\n    return auth\n  }\n\n  private async validateRecoveryCode(userId: number, code: string, encryptedCodes: string[]): Promise<TwoFaVerifyResult> {\n    const auth: TwoFaVerifyResult = { success: false, message: '' }\n    if (!encryptedCodes || encryptedCodes.length === 0) {\n      auth.message = 'Invalid code'\n    } else {\n      try {\n        for (const encCode of encryptedCodes) {\n          if (code === this.decryptSecret(encCode)) {\n            auth.success = true\n            // removed used code\n            encryptedCodes.splice(encryptedCodes.indexOf(encCode), 1)\n            break\n          }\n        }\n        if (auth.success) {\n          // update recovery codes\n          await this.usersManager.updateSecrets(userId, { recoveryCodes: encryptedCodes })\n        } else {\n          auth.message = 'Invalid code'\n        }\n      } catch (e) {\n        this.logger.error(`${this.validateRecoveryCode.name} - ${e}`)\n        auth.message = e.message\n      }\n    }\n    return auth\n  }\n\n  private generateSecretAndQr(userEmail: string): TwoFaSetup {\n    // Generate secret + otpauth URL + QR (DataURL)\n    // Totp.generateKey returns { issuer, user, config, secret, url }\n    const key = Totp.generateKey({ issuer: configuration.auth.mfa.totp.issuer, user: userEmail }, { digits: TWO_FA_CODE_LENGTH })\n    const qrDataUrl = qrcodeToDataURL(key.url)\n    return { secret: key.secret, qrDataUrl: qrDataUrl }\n  }\n\n  private getCacheKey(userId: number): string {\n    return `${this.cacheKeyPrefix}${userId}`\n  }\n\n  private encryptSecret(secret: string): string {\n    if (configuration.auth.encryptionKey) {\n      return encryptSecret(secret, configuration.auth.encryptionKey)\n    }\n    return secret\n  }\n\n  private decryptSecret(secret: string): string {\n    if (configuration.auth.encryptionKey) {\n      return decryptSecret(secret, configuration.auth.encryptionKey)\n    }\n    return secret\n  }\n\n  private generateRecoveryCodes(count = 5): string[] {\n    return Array.from({ length: count }, () => generateShortUUID())\n  }\n\n  private sendEmailNotification(req: FastifyAuthenticatedRequest, action: ACTION) {\n    const notification: NotificationContent = {\n      app: NOTIFICATION_APP.AUTH_2FA,\n      event: NOTIFICATION_APP_EVENT.AUTH_2FA[action],\n      element: req.headers['user-agent'],\n      url: req.ip\n    }\n    this.notificationsManager\n      .sendEmailNotification([req.user], notification)\n      .catch((e: Error) => this.logger.error(`${this.sendEmailNotification.name} - ${e}`))\n  }\n}\n"],"names":["AuthMethod2FA","initTwoFactor","user","secret","qrDataUrl","generateSecretAndQr","email","cache","set","getCacheKey","id","encryptSecret","enableTwoFactor","body","req","get","HttpException","HttpStatus","BAD_REQUEST","auth","verify","success","message","FORBIDDEN","verifyUserPassword","password","ip","recoveryCodes","generateRecoveryCodes","usersManager","updateSecrets","twoFaSecret","map","code","sendEmailNotification","ACTION","ADD","disableTwoFactor","undefined","DELETE","verifyDto","fromLogin","loadUser","secrets","isRecoveryCode","validateRecoveryCode","validateTwoFactorCode","updateAccesses","catch","e","logger","error","name","adminResetUserTwoFa","userId","fromUserId","warn","login","NOT_FOUND","validateUserAccess","compareUserPassword","encryptedSecret","Totp","validate","passcode","decryptSecret","drift","encryptedCodes","length","encCode","splice","indexOf","userEmail","key","generateKey","issuer","configuration","mfa","totp","digits","TWO_FA_CODE_LENGTH","qrcodeToDataURL","url","cacheKeyPrefix","encryptionKey","count","Array","from","generateShortUUID","action","notification","app","NOTIFICATION_APP","AUTH_2FA","event","NOTIFICATION_APP_EVENT","element","headers","notificationsManager","Logger"],"mappings":"AAAA;;;;CAIC;;;;+BAqBYA;;;eAAAA;;;wBAnBiD;yBACzC;+BACoC;6CAEpB;qCAER;2BACN;2BACW;wBACF;mCACF;8BACR;sBACa;6BAIU;;;;;;;;;;AAGtC,IAAA,AAAMA,gBAAN,MAAMA;IAUX,MAAMC,cAAcC,IAAe,EAAuB;QACxD,MAAM,EAAEC,MAAM,EAAEC,SAAS,EAAE,GAAG,IAAI,CAACC,mBAAmB,CAACH,KAAKI,KAAK;QACjE,gDAAgD;QAChD,MAAM,IAAI,CAACC,KAAK,CAACC,GAAG,CAAC,IAAI,CAACC,WAAW,CAACP,KAAKQ,EAAE,GAAG,IAAI,CAACC,aAAa,CAACR,SAAS;QAC5E,OAAO;YAAEA;YAAQC;QAAU;IAC7B;IAEA,MAAMQ,gBAAgBC,IAAgC,EAAEC,GAAgC,EAA8B;QACpH,uCAAuC;QACvC,MAAMX,SAAiB,MAAM,IAAI,CAACI,KAAK,CAACQ,GAAG,CAAC,IAAI,CAACN,WAAW,CAACK,IAAIZ,IAAI,CAACQ,EAAE;QACxE,IAAI,CAACP,QAAQ;YACX,MAAM,IAAIa,qBAAa,CAAC,0BAA0BC,kBAAU,CAACC,WAAW;QAC1E;QACA,YAAY;QACZ,MAAM,CAACC,MAAMjB,KAAK,GAAG,MAAM,IAAI,CAACkB,MAAM,CAACP,MAAMC,KAAK,MAAMX;QACxD,IAAI,CAACgB,KAAKE,OAAO,EAAE;YACjB,MAAM,IAAIL,qBAAa,CAACG,KAAKG,OAAO,EAAEL,kBAAU,CAACM,SAAS;QAC5D;QACA,uBAAuB;QACvB,MAAM,IAAI,CAACC,kBAAkB,CAACtB,MAAMW,KAAKY,QAAQ,EAAEX,IAAIY,EAAE;QACzD,0BAA0B;QAC1B,MAAMC,gBAAgB,IAAI,CAACC,qBAAqB;QAChD,0CAA0C;QAC1C,MAAM,IAAI,CAACC,YAAY,CAACC,aAAa,CAAC5B,KAAKQ,EAAE,EAAE;YAC7CqB,aAAa5B;YACbwB,eAAeA,cAAcK,GAAG,CAAC,CAACC,OAAS,IAAI,CAACtB,aAAa,CAACsB;QAChE;QACA,IAAI,CAACC,qBAAqB,CAACpB,KAAKqB,iBAAM,CAACC,GAAG;QAC1C,OAAO;YAAE,GAAGjB,IAAI;YAAEQ,eAAeA;QAAc;IACjD;IAEA,MAAMU,iBAAiBxB,IAAgC,EAAEC,GAAgC,EAA8B;QACrH,YAAY;QACZ,MAAM,CAACK,MAAMjB,KAAK,GAAG,MAAM,IAAI,CAACkB,MAAM,CAACP,MAAMC,KAAK;QAClD,IAAI,CAACK,KAAKE,OAAO,EAAE;YACjB,MAAM,IAAIL,qBAAa,CAACG,KAAKG,OAAO,EAAEL,kBAAU,CAACM,SAAS;QAC5D;QACA,uBAAuB;QACvB,MAAM,IAAI,CAACC,kBAAkB,CAACtB,MAAMW,KAAKY,QAAQ,EAAEX,IAAIY,EAAE;QACzD,2CAA2C;QAC3C,MAAM,IAAI,CAACG,YAAY,CAACC,aAAa,CAAC5B,KAAKQ,EAAE,EAAE;YAAEqB,aAAaO;YAAWX,eAAeW;QAAU;QAClG,IAAI,CAACJ,qBAAqB,CAACpB,KAAKqB,iBAAM,CAACI,MAAM;QAC7C,OAAOpB;IACT;IAIA,MAAMC,OACJoB,SAAyB,EACzB1B,GAAgC,EAChC2B,YAAY,KAAK,EACjBtC,MAAe,EAC8C;QAC7D,MAAMD,OAAO,MAAM,IAAI,CAACwC,QAAQ,CAAC5B,IAAIZ,IAAI,CAACQ,EAAE,EAAEI,IAAIY,EAAE;QACpDvB,SAASA,UAAUD,KAAKyC,OAAO,CAACZ,WAAW;QAC3C,MAAMZ,OAAOqB,UAAUI,cAAc,GACjC,MAAM,IAAI,CAACC,oBAAoB,CAAC/B,IAAIZ,IAAI,CAACQ,EAAE,EAAE8B,UAAUP,IAAI,EAAE/B,KAAKyC,OAAO,CAAChB,aAAa,IACvF,IAAI,CAACmB,qBAAqB,CAACN,UAAUP,IAAI,EAAE9B;QAC/C,IAAI,CAAC0B,YAAY,CAACkB,cAAc,CAAC7C,MAAMY,IAAIY,EAAE,EAAEP,KAAKE,OAAO,EAAE,MAAM2B,KAAK,CAAC,CAACC,IAAa,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAAC/B,MAAM,CAACgC,IAAI,CAAC,GAAG,EAAEH,GAAG;QACrI,OAAOR,YAAY;YAACtB;YAAMjB;SAAK,GAAGiB;IACpC;IAEA,MAAMkC,oBAAoBC,MAAc,EAAE;QACxC,MAAMnC,OAA0B;YAAEE,SAAS;YAAOC,SAAS;QAAG;QAC9D,IAAI;YACF,MAAM,IAAI,CAACO,YAAY,CAACC,aAAa,CAACwB,QAAQ;gBAAEvB,aAAaO;gBAAWX,eAAeW;YAAU;YACjGnB,KAAKE,OAAO,GAAG;QACjB,EAAE,OAAO4B,GAAG;YACV9B,KAAKE,OAAO,GAAG;YACfF,KAAKG,OAAO,GAAG2B,EAAE3B,OAAO;YACxB,IAAI,CAAC4B,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACE,mBAAmB,CAACD,IAAI,CAAC,GAAG,EAAEH,GAAG;QAC7D;QACA,OAAO9B;IACT;IAEA,MAAMuB,SAASY,MAAc,EAAE5B,EAAU,EAAE;QACzC,MAAMxB,OAAkB,MAAM,IAAI,CAAC2B,YAAY,CAAC0B,UAAU,CAACD;QAC3D,IAAI,CAACpD,MAAM;YACT,IAAI,CAACgD,MAAM,CAACM,IAAI,CAAC,CAAC,MAAM,EAAEtD,KAAKuD,KAAK,CAAC,GAAG,EAAEvD,KAAKQ,EAAE,CAAC,WAAW,CAAC;YAC9D,MAAM,IAAIM,qBAAa,CAAC,CAAC,cAAc,CAAC,EAAEC,kBAAU,CAACyC,SAAS;QAChE;QACA,IAAI,CAAC7B,YAAY,CAAC8B,kBAAkB,CAACzD,MAAMwB;QAC3C,OAAOxB;IACT;IAEA,MAAMsB,mBAAmBtB,IAAe,EAAEuB,QAAgB,EAAEC,EAAU,EAAE;QACtE,oEAAoE;QACpE,sFAAsF;QACtF,IAAI,CAAE,MAAM,IAAI,CAACG,YAAY,CAAC+B,mBAAmB,CAAC1D,KAAKQ,EAAE,EAAEe,WAAY;YACrE,IAAI,CAACI,YAAY,CAACkB,cAAc,CAAC7C,MAAMwB,IAAI,OAAO,MAAMsB,KAAK,CAAC,CAACC,IAAa,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACvC,eAAe,CAACwC,IAAI,CAAC,GAAG,EAAEH,GAAG;YACnI,MAAM,IAAIjC,qBAAa,CAAC,8BAA8BC,kBAAU,CAACC,WAAW;QAC9E;IACF;IAEA4B,sBAAsBb,IAAY,EAAE4B,eAAuB,EAAqB;QAC9E,MAAM1C,OAA0B;YAAEE,SAAS;YAAOC,SAAS;QAAG;QAC9D,IAAI,CAACuC,iBAAiB;YACpB1C,KAAKG,OAAO,GAAG;YACf,OAAOH;QACT;QACA,IAAI;YACFA,KAAKE,OAAO,GAAGyC,aAAI,CAACC,QAAQ,CAAC;gBAAEC,UAAU/B;gBAAM9B,QAAQ,IAAI,CAAC8D,aAAa,CAACJ;gBAAkBK,OAAO;YAAE;YACrG,IAAI,CAAC/C,KAAKE,OAAO,EAAEF,KAAKG,OAAO,GAAG;QACpC,EAAE,OAAO2B,GAAG;YACV,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACL,qBAAqB,CAACM,IAAI,CAAC,GAAG,EAAEH,GAAG;YAC7D9B,KAAKG,OAAO,GAAG2B,EAAE3B,OAAO;QAC1B;QACA,OAAOH;IACT;IAEA,MAAc0B,qBAAqBS,MAAc,EAAErB,IAAY,EAAEkC,cAAwB,EAA8B;QACrH,MAAMhD,OAA0B;YAAEE,SAAS;YAAOC,SAAS;QAAG;QAC9D,IAAI,CAAC6C,kBAAkBA,eAAeC,MAAM,KAAK,GAAG;YAClDjD,KAAKG,OAAO,GAAG;QACjB,OAAO;YACL,IAAI;gBACF,KAAK,MAAM+C,WAAWF,eAAgB;oBACpC,IAAIlC,SAAS,IAAI,CAACgC,aAAa,CAACI,UAAU;wBACxClD,KAAKE,OAAO,GAAG;wBACf,oBAAoB;wBACpB8C,eAAeG,MAAM,CAACH,eAAeI,OAAO,CAACF,UAAU;wBACvD;oBACF;gBACF;gBACA,IAAIlD,KAAKE,OAAO,EAAE;oBAChB,wBAAwB;oBACxB,MAAM,IAAI,CAACQ,YAAY,CAACC,aAAa,CAACwB,QAAQ;wBAAE3B,eAAewC;oBAAe;gBAChF,OAAO;oBACLhD,KAAKG,OAAO,GAAG;gBACjB;YACF,EAAE,OAAO2B,GAAG;gBACV,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACN,oBAAoB,CAACO,IAAI,CAAC,GAAG,EAAEH,GAAG;gBAC5D9B,KAAKG,OAAO,GAAG2B,EAAE3B,OAAO;YAC1B;QACF;QACA,OAAOH;IACT;IAEQd,oBAAoBmE,SAAiB,EAAc;QACzD,+CAA+C;QAC/C,iEAAiE;QACjE,MAAMC,MAAMX,aAAI,CAACY,WAAW,CAAC;YAAEC,QAAQC,gCAAa,CAACzD,IAAI,CAAC0D,GAAG,CAACC,IAAI,CAACH,MAAM;YAAEzE,MAAMsE;QAAU,GAAG;YAAEO,QAAQC,wBAAkB;QAAC;QAC3H,MAAM5E,YAAY6E,IAAAA,uBAAe,EAACR,IAAIS,GAAG;QACzC,OAAO;YAAE/E,QAAQsE,IAAItE,MAAM;YAAEC,WAAWA;QAAU;IACpD;IAEQK,YAAY6C,MAAc,EAAU;QAC1C,OAAO,GAAG,IAAI,CAAC6B,cAAc,GAAG7B,QAAQ;IAC1C;IAEQ3C,cAAcR,MAAc,EAAU;QAC5C,IAAIyE,gCAAa,CAACzD,IAAI,CAACiE,aAAa,EAAE;YACpC,OAAOzE,IAAAA,0BAAa,EAACR,QAAQyE,gCAAa,CAACzD,IAAI,CAACiE,aAAa;QAC/D;QACA,OAAOjF;IACT;IAEQ8D,cAAc9D,MAAc,EAAU;QAC5C,IAAIyE,gCAAa,CAACzD,IAAI,CAACiE,aAAa,EAAE;YACpC,OAAOnB,IAAAA,0BAAa,EAAC9D,QAAQyE,gCAAa,CAACzD,IAAI,CAACiE,aAAa;QAC/D;QACA,OAAOjF;IACT;IAEQyB,sBAAsByD,QAAQ,CAAC,EAAY;QACjD,OAAOC,MAAMC,IAAI,CAAC;YAAEnB,QAAQiB;QAAM,GAAG,IAAMG,IAAAA,4BAAiB;IAC9D;IAEQtD,sBAAsBpB,GAAgC,EAAE2E,MAAc,EAAE;QAC9E,MAAMC,eAAoC;YACxCC,KAAKC,+BAAgB,CAACC,QAAQ;YAC9BC,OAAOC,qCAAsB,CAACF,QAAQ,CAACJ,OAAO;YAC9CO,SAASlF,IAAImF,OAAO,CAAC,aAAa;YAClCf,KAAKpE,IAAIY,EAAE;QACb;QACA,IAAI,CAACwE,oBAAoB,CACtBhE,qBAAqB,CAAC;YAACpB,IAAIZ,IAAI;SAAC,EAAEwF,cAClC1C,KAAK,CAAC,CAACC,IAAa,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACjB,qBAAqB,CAACkB,IAAI,CAAC,GAAG,EAAEH,GAAG;IACtF;IAxLA,YACE,AAAiB1C,KAAY,EAC7B,AAAiBsB,YAA0B,EAC3C,AAAiBqE,oBAA0C,CAC3D;aAHiB3F,QAAAA;aACAsB,eAAAA;aACAqE,uBAAAA;aANFhD,SAAS,IAAIiD,cAAM,CAACnG,cAAcoD,IAAI;aACtC+B,iBAAiB;IAM/B;AAqLL"}

package/server/authentication/services/auth-methods/auth-method-two-fa.service.spec.js

@@ -0,0 +1,41 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+const _testing = require("@nestjs/testing");
+const _notificationsmanagerservice = require("../../../applications/notifications/services/notifications-manager.service");
+const _usersmanagerservice = require("../../../applications/users/services/users-manager.service");
+const _cacheservice = require("../../../infrastructure/cache/services/cache.service");
+const _authmethodtwofaservice = require("./auth-method-two-fa.service");
+describe(_authmethodtwofaservice.AuthMethod2FA.name, ()=>{
+    let service;
+    beforeAll(async ()=>{
+        const module = await _testing.Test.createTestingModule({
+            providers: [
+                _authmethodtwofaservice.AuthMethod2FA,
+                {
+                    provide: _cacheservice.Cache,
+                    useValue: {}
+                },
+                {
+                    provide: _usersmanagerservice.UsersManager,
+                    useValue: {}
+                },
+                {
+                    provide: _notificationsmanagerservice.NotificationsManager,
+                    useValue: {}
+                }
+            ]
+        }).compile();
+        service = module.get(_authmethodtwofaservice.AuthMethod2FA);
+    });
+    it('should be defined', ()=>{
+        expect(service).toBeDefined();
+    });
+});
+
+//# sourceMappingURL=auth-method-two-fa.service.spec.js.map

package/server/authentication/services/auth-methods/auth-method-two-fa.service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/authentication/services/auth-methods/auth-method-two-fa.service.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { NotificationsManager } from '../../../applications/notifications/services/notifications-manager.service'\nimport { UsersManager } from '../../../applications/users/services/users-manager.service'\nimport { Cache } from '../../../infrastructure/cache/services/cache.service'\nimport { AuthMethod2FA } from './auth-method-two-fa.service'\n\ndescribe(AuthMethod2FA.name, () => {\n  let service: AuthMethod2FA\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthMethod2FA,\n        { provide: Cache, useValue: {} },\n        { provide: UsersManager, useValue: {} },\n        { provide: NotificationsManager, useValue: {} }\n      ]\n    }).compile()\n\n    service = module.get<AuthMethod2FA>(AuthMethod2FA)\n  })\n\n  it('should be defined', () => {\n    expect(service).toBeDefined()\n  })\n})\n"],"names":["describe","AuthMethod2FA","name","service","beforeAll","module","Test","createTestingModule","providers","provide","Cache","useValue","UsersManager","NotificationsManager","compile","get","it","expect","toBeDefined"],"mappings":"AAAA;;;;CAIC;;;;yBAEmC;6CACC;qCACR;8BACP;wCACQ;AAE9BA,SAASC,qCAAa,CAACC,IAAI,EAAE;IAC3B,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTP,qCAAa;gBACb;oBAAEQ,SAASC,mBAAK;oBAAEC,UAAU,CAAC;gBAAE;gBAC/B;oBAAEF,SAASG,iCAAY;oBAAED,UAAU,CAAC;gBAAE;gBACtC;oBAAEF,SAASI,iDAAoB;oBAAEF,UAAU,CAAC;gBAAE;aAC/C;QACH,GAAGG,OAAO;QAEVX,UAAUE,OAAOU,GAAG,CAAgBd,qCAAa;IACnD;IAEAe,GAAG,qBAAqB;QACtBC,OAAOd,SAASe,WAAW;IAC7B;AACF"}

package/server/authentication/utils/crypt-secret.js

@@ -0,0 +1,68 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get decryptSecret () {
+        return decryptSecret;
+    },
+    get encryptSecret () {
+        return encryptSecret;
+    }
+});
+const _crypto = /*#__PURE__*/ _interop_require_default(require("crypto"));
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+function encryptSecret(plaintext, passphrase) {
+    const salt = _crypto.default.randomBytes(16) // for key derivation (scrypt)
+    ;
+    const iv = _crypto.default.randomBytes(12) // recommended IV length for GCM
+    ;
+    const key = _crypto.default.scryptSync(passphrase, salt, 32);
+    const cipher = _crypto.default.createCipheriv('aes-256-gcm', key, iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext, 'utf8'),
+        cipher.final()
+    ]);
+    const tag = cipher.getAuthTag();
+    // Encode everything in base64 and concatenate: salt.iv.tag.cipher
+    return [
+        salt.toString('base64'),
+        iv.toString('base64'),
+        tag.toString('base64'),
+        ciphertext.toString('base64')
+    ].join('.');
+}
+function decryptSecret(payload, passphrase) {
+    const [saltB64, ivB64, tagB64, ctB64] = payload.split('.');
+    if (!saltB64 || !ivB64 || !tagB64 || !ctB64) {
+        throw new Error('Invalid payload format');
+    }
+    const salt = Buffer.from(saltB64, 'base64');
+    const iv = Buffer.from(ivB64, 'base64');
+    const tag = Buffer.from(tagB64, 'base64');
+    const ct = Buffer.from(ctB64, 'base64');
+    const key = _crypto.default.scryptSync(passphrase, salt, 32);
+    const decipher = _crypto.default.createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(tag);
+    const plaintext = Buffer.concat([
+        decipher.update(ct),
+        decipher.final()
+    ]);
+    return plaintext.toString('utf8');
+}
+
+//# sourceMappingURL=crypt-secret.js.map

package/server/authentication/utils/crypt-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../backend/src/authentication/utils/crypt-secret.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport crypto from 'crypto'\n\n// Encrypt a plaintext string with a passphrase. Returns a compact string.\nexport function encryptSecret(plaintext: string, passphrase: string) {\n  const salt = crypto.randomBytes(16) // for key derivation (scrypt)\n  const iv = crypto.randomBytes(12) // recommended IV length for GCM\n  const key = crypto.scryptSync(passphrase, salt, 32)\n\n  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv)\n  const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()])\n  const tag = cipher.getAuthTag()\n\n  // Encode everything in base64 and concatenate: salt.iv.tag.cipher\n  return [salt.toString('base64'), iv.toString('base64'), tag.toString('base64'), ciphertext.toString('base64')].join('.')\n}\n\n// Decrypt the string generated by encryptSecret with the same passphrase.\nexport function decryptSecret(payload: string, passphrase: string) {\n  const [saltB64, ivB64, tagB64, ctB64] = payload.split('.')\n  if (!saltB64 || !ivB64 || !tagB64 || !ctB64) {\n    throw new Error('Invalid payload format')\n  }\n\n  const salt = Buffer.from(saltB64, 'base64')\n  const iv = Buffer.from(ivB64, 'base64')\n  const tag = Buffer.from(tagB64, 'base64')\n  const ct = Buffer.from(ctB64, 'base64')\n\n  const key = crypto.scryptSync(passphrase, salt, 32)\n  const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv)\n  decipher.setAuthTag(tag)\n\n  const plaintext = Buffer.concat([decipher.update(ct), decipher.final()])\n  return plaintext.toString('utf8')\n}\n"],"names":["decryptSecret","encryptSecret","plaintext","passphrase","salt","crypto","randomBytes","iv","key","scryptSync","cipher","createCipheriv","ciphertext","Buffer","concat","update","final","tag","getAuthTag","toString","join","payload","saltB64","ivB64","tagB64","ctB64","split","Error","from","ct","decipher","createDecipheriv","setAuthTag"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAmBeA;eAAAA;;QAdAC;eAAAA;;;+DAHG;;;;;;AAGZ,SAASA,cAAcC,SAAiB,EAAEC,UAAkB;IACjE,MAAMC,OAAOC,eAAM,CAACC,WAAW,CAAC,IAAI,8BAA8B;;IAClE,MAAMC,KAAKF,eAAM,CAACC,WAAW,CAAC,IAAI,gCAAgC;;IAClE,MAAME,MAAMH,eAAM,CAACI,UAAU,CAACN,YAAYC,MAAM;IAEhD,MAAMM,SAASL,eAAM,CAACM,cAAc,CAAC,eAAeH,KAAKD;IACzD,MAAMK,aAAaC,OAAOC,MAAM,CAAC;QAACJ,OAAOK,MAAM,CAACb,WAAW;QAASQ,OAAOM,KAAK;KAAG;IACnF,MAAMC,MAAMP,OAAOQ,UAAU;IAE7B,kEAAkE;IAClE,OAAO;QAACd,KAAKe,QAAQ,CAAC;QAAWZ,GAAGY,QAAQ,CAAC;QAAWF,IAAIE,QAAQ,CAAC;QAAWP,WAAWO,QAAQ,CAAC;KAAU,CAACC,IAAI,CAAC;AACtH;AAGO,SAASpB,cAAcqB,OAAe,EAAElB,UAAkB;IAC/D,MAAM,CAACmB,SAASC,OAAOC,QAAQC,MAAM,GAAGJ,QAAQK,KAAK,CAAC;IACtD,IAAI,CAACJ,WAAW,CAACC,SAAS,CAACC,UAAU,CAACC,OAAO;QAC3C,MAAM,IAAIE,MAAM;IAClB;IAEA,MAAMvB,OAAOS,OAAOe,IAAI,CAACN,SAAS;IAClC,MAAMf,KAAKM,OAAOe,IAAI,CAACL,OAAO;IAC9B,MAAMN,MAAMJ,OAAOe,IAAI,CAACJ,QAAQ;IAChC,MAAMK,KAAKhB,OAAOe,IAAI,CAACH,OAAO;IAE9B,MAAMjB,MAAMH,eAAM,CAACI,UAAU,CAACN,YAAYC,MAAM;IAChD,MAAM0B,WAAWzB,eAAM,CAAC0B,gBAAgB,CAAC,eAAevB,KAAKD;IAC7DuB,SAASE,UAAU,CAACf;IAEpB,MAAMf,YAAYW,OAAOC,MAAM,CAAC;QAACgB,SAASf,MAAM,CAACc;QAAKC,SAASd,KAAK;KAAG;IACvE,OAAOd,UAAUiB,QAAQ,CAAC;AAC5B"}

package/server/common/functions.js

@@ -188,19 +188,34 @@ async function hashPassword(password) {
 async function comparePassword(password, hash) {
     return await _bcryptjs.default.compare(password, hash);
 }
-function generateShortUUID(length = 16) {
-    return _nodecrypto.default.randomBytes(length).toString('base64url');
+function generateShortUUID(length = 32, encoding = 'base64url') {
+    const bytes = Math.ceil(length * 3 / 4) // adapt to real length
+    ;
+    return _nodecrypto.default.randomBytes(bytes).toString(encoding);
 }
 function anonymizePassword(obj) {
     return {
         ...obj,
         ...obj?.password && {
             password: '********'
+        },
+        ...obj?.secrets && {
+            secrets: '********'
         }
     };
 }
 function splitFullName(fullName) {
+    if (!fullName || !fullName.trim()) return {
+        firstName: '',
+        lastName: ''
+    };
     const parts = fullName.trim().split(/\s+/);
+    if (parts.length === 1) {
+        return {
+            firstName: '',
+            lastName: parts[0]
+        };
+    }
     const lastName = parts.pop();
     const firstName = parts.join(' ');
     return {
@@ -209,6 +224,7 @@ function splitFullName(fullName) {
     };
 }
 function transformAndValidate(schema, object, transformOptions = {}, validatorOptions = {}) {
+    // warning: plainToInstance do not use constructor to instantiate class
     const instance = (0, _classtransformer.plainToInstance)(schema, object, transformOptions);
     const errors = (0, _classvalidator.validateSync)(instance, validatorOptions);
     if (errors.length > 0) {

package/server/common/functions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/common/functions.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { parse as parseMs } from '@lukeed/ms'\nimport bcrypt from 'bcryptjs'\nimport { ClassTransformOptions, plainToInstance } from 'class-transformer'\nimport { validateSync } from 'class-validator'\nimport { ValidationError } from 'class-validator/types/validation/ValidationError'\nimport { ValidatorOptions } from 'class-validator/types/validation/ValidatorOptions'\nimport crypto from 'node:crypto'\nimport { setTimeout } from 'node:timers/promises'\nimport { SPACE_PERMS_SEP } from '../applications/spaces/constants/spaces'\n\nexport const regexpEscape = /[.*+?^${}()|[\\]\\\\]/g\nexport const regexSpecialChars = /[-[\\]{}()*+!<=:?./\\\\^$|#,]/g\nexport const regexSpecialCharsWithSpace = /[-[\\]{}()*+!<=:?./\\\\^$|#\\s,]/g\n\nexport async function loadOptionalModule(moduleName: string): Promise<any> {\n  return await import(moduleName)\n}\n\nexport async function sleep(ms: number): Promise<void> {\n  await setTimeout(ms)\n}\n\nexport function escapeSQLRegexp(input: string): string {\n  return input.replace(regexSpecialCharsWithSpace, '\\\\\\\\$&').replaceAll(\"'\", \"''\")\n}\n\nexport function escapeString(input: string): string {\n  return input.replace(regexSpecialChars, '\\\\$&')\n}\n\nexport function escapePath(path: string): string {\n  return path.replace(regexpEscape, '\\\\$&')\n}\n\nexport function regExpPathPattern(path: string): RegExp {\n  return new RegExp(`^${escapePath(path)}[/\\\\\\\\]`)\n}\n\nexport function convertHumanTimeToSeconds(value: string): number {\n  return parseMs(value) / 1000\n}\n\nexport function convertHumanTimeToMs(value: string): number {\n  return parseMs(value)\n}\n\nexport function formatDateISOString(date: Date): string {\n  return date.toISOString().replaceAll('-', '.').replaceAll(':', '-').replace('T', ' ').replace('Z', '')\n}\n\nexport function urlToPath(url: string): string {\n  // transform https://sync-in.com/webdav/ to /webdav/\n  try {\n    // transform https://sync-in.com/webdav/ to /webdav/\n    return new URL(url).pathname\n  } catch {\n    // or allows uri like : /webdav/\n    return url\n  }\n}\n\nexport async function hashPassword(password: string): Promise<string> {\n  return await bcrypt.hash(password, 10)\n}\n\nexport async function comparePassword(password: string, hash: string): Promise<boolean> {\n  return await bcrypt.compare(password, hash)\n}\n\nexport function generateShortUUID(length: number = 16): string {\n  return crypto.randomBytes(length).toString('base64url')\n}\n\nexport function anonymizePassword(obj: { password?: string }) {\n  return { ...obj, ...(obj?.password && { password: '********' }) }\n}\n\nexport function splitFullName(fullName: string): { firstName: string; lastName: string } {\n  const parts = fullName.trim().split(/\\s+/)\n  const lastName = parts.pop()\n  const firstName = parts.join(' ')\n  return { firstName, lastName }\n}\n\nexport function transformAndValidate<T extends object>(\n  schema: new () => T,\n  object: any,\n  transformOptions: ClassTransformOptions = {},\n  validatorOptions: ValidatorOptions = {}\n): T {\n  const instance: T = plainToInstance(schema, object, transformOptions)\n  const errors: ValidationError[] = validateSync(instance, validatorOptions)\n  if (errors.length > 0) {\n    throw new Error(errors.toString())\n  }\n  return instance\n}\n\nexport function uniquePermissions(permissions: string, permissionsSeparator: string = SPACE_PERMS_SEP) {\n  /*\n    Returns unique permissions : 'c:r:w:c:r' -> 'c:r:w'\n  */\n  if (permissions.length === 0) return permissions\n  return [\n    ...new Set(\n      permissions\n        .split(permissionsSeparator)\n        .filter((p: string) => p && p !== 'null')\n        .sort()\n    )\n  ].join(permissionsSeparator)\n}\n\nexport function intersectPermissions(aPermissions: string, bPermissions: string, permissionsSeparator: string = SPACE_PERMS_SEP): string {\n  const aPerms = aPermissions.split(permissionsSeparator)\n  const bPerms = bPermissions.split(permissionsSeparator)\n  return aPerms\n    .filter((p: string) => p !== '' && p !== 'null' && bPerms.indexOf(p) > -1)\n    .sort()\n    .join(permissionsSeparator)\n}\n\nexport function differencePermissions(aPermissions: string, bPermissions: string, permissionsSeparator: string = SPACE_PERMS_SEP): string[] {\n  const aPerms = aPermissions.split(permissionsSeparator)\n  const bPerms = bPermissions.split(permissionsSeparator)\n  return aPerms.filter((p: string) => p !== '' && bPerms.indexOf(p) === -1).sort()\n}\n\nexport function sortObjByName(a: { name: string }, b: { name: string }, asc = false): 0 | 1 | -1 {\n  const aN = a.name.toLowerCase()\n  const bN = b.name.toLowerCase()\n  if (asc) {\n    return aN < bN ? 1 : aN > bN ? -1 : 0\n  } else {\n    return aN < bN ? -1 : aN > bN ? 1 : 0\n  }\n}\n\nfunction diffProperties(a: any, b: any, props: string[]): boolean {\n  for (const p of props) {\n    if (a[p] !== b[p]) {\n      return false\n    }\n  }\n  return true\n}\n\nexport function diffCollection<T>(\n  curCollection: T[],\n  newCollection: T[],\n  updateProps: string[],\n  compareProps: string[] = ['id']\n): [T[], Record<string | 'object', { old: any; new: any } | T>[], T[]] {\n  const toAdd: T[] = []\n  const toUpdate: Record<string | 'object', { old: any; new: any } | T>[] = []\n  const toRemove: T[] = curCollection.filter((c: T) => !newCollection.find((n: T) => diffProperties(c, n, compareProps)))\n  for (const n of newCollection) {\n    const o = curCollection.find((c: T) => diffProperties(c, n, compareProps))\n    if (o) {\n      const diff: Record<string | 'object', { old: any; new: any } | T> = {}\n      for (const p of updateProps.filter((p: string) => n[p] !== o[p])) {\n        diff[p] = { old: o[p], new: n[p] }\n      }\n      if (Object.keys(diff).length) {\n        diff['object'] = n\n        toUpdate.push(diff)\n      }\n    } else {\n      toAdd.push(n)\n    }\n  }\n  return [toAdd, toUpdate, toRemove]\n}\n\nexport function convertDiffUpdate(update: Record<string | 'object', { old: any; new: any } | any>[]): Record<string | 'object', any>[] {\n  // only keep the new values\n  return update.map((o) => Object.fromEntries(Object.entries(o).map(([p, v]) => [p, p === 'object' ? v : v.new])))\n}\n"],"names":["anonymizePassword","comparePassword","convertDiffUpdate","convertHumanTimeToMs","convertHumanTimeToSeconds","diffCollection","differencePermissions","escapePath","escapeSQLRegexp","escapeString","formatDateISOString","generateShortUUID","hashPassword","intersectPermissions","loadOptionalModule","regExpPathPattern","regexSpecialChars","regexSpecialCharsWithSpace","regexpEscape","sleep","sortObjByName","splitFullName","transformAndValidate","uniquePermissions","urlToPath","moduleName","ms","setTimeout","input","replace","replaceAll","path","RegExp","value","parseMs","date","toISOString","url","URL","pathname","password","bcrypt","hash","compare","length","crypto","randomBytes","toString","obj","fullName","parts","trim","split","lastName","pop","firstName","join","schema","object","transformOptions","validatorOptions","instance","plainToInstance","errors","validateSync","Error","permissions","permissionsSeparator","SPACE_PERMS_SEP","Set","filter","p","sort","aPermissions","bPermissions","aPerms","bPerms","indexOf","a","b","asc","aN","name","toLowerCase","bN","diffProperties","props","curCollection","newCollection","updateProps","compareProps","toAdd","toUpdate","toRemove","c","find","n","o","diff","old","new","Object","keys","push","update","map","fromEntries","entries","v"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QA2EeA;eAAAA;;QARMC;eAAAA;;QA6GNC;eAAAA;;QApIAC;eAAAA;;QAJAC;eAAAA;;QA6GAC;eAAAA;;QAzBAC;eAAAA;;QA5FAC;eAAAA;;QARAC;eAAAA;;QAIAC;eAAAA;;QAoBAC;eAAAA;;QAuBAC;eAAAA;;QARMC;eAAAA;;QAoDNC;eAAAA;;QAnGMC;eAAAA;;QAoBNC;eAAAA;;QAvBHC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAQSC;eAAAA;;QA8GNC;eAAAA;;QAnDAC;eAAAA;;QAOAC;eAAAA;;QAcAC;eAAAA;;QAhDAC;eAAAA;;;oBAlDiB;iEACd;kCACoC;gCAC1B;mEAGV;0BACQ;wBACK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEzB,MAAMN,eAAe;AACrB,MAAMF,oBAAoB;AAC1B,MAAMC,6BAA6B;AAEnC,eAAeH,mBAAmBW,UAAkB;IACzD,OAAO,MAAM,gBAAOA,8DAAP;AACf;AAEO,eAAeN,MAAMO,EAAU;IACpC,MAAMC,IAAAA,oBAAU,EAACD;AACnB;AAEO,SAASlB,gBAAgBoB,KAAa;IAC3C,OAAOA,MAAMC,OAAO,CAACZ,4BAA4B,UAAUa,UAAU,CAAC,KAAK;AAC7E;AAEO,SAASrB,aAAamB,KAAa;IACxC,OAAOA,MAAMC,OAAO,CAACb,mBAAmB;AAC1C;AAEO,SAAST,WAAWwB,IAAY;IACrC,OAAOA,KAAKF,OAAO,CAACX,cAAc;AACpC;AAEO,SAASH,kBAAkBgB,IAAY;IAC5C,OAAO,IAAIC,OAAO,CAAC,CAAC,EAAEzB,WAAWwB,MAAM,OAAO,CAAC;AACjD;AAEO,SAAS3B,0BAA0B6B,KAAa;IACrD,OAAOC,IAAAA,SAAO,EAACD,SAAS;AAC1B;AAEO,SAAS9B,qBAAqB8B,KAAa;IAChD,OAAOC,IAAAA,SAAO,EAACD;AACjB;AAEO,SAASvB,oBAAoByB,IAAU;IAC5C,OAAOA,KAAKC,WAAW,GAAGN,UAAU,CAAC,KAAK,KAAKA,UAAU,CAAC,KAAK,KAAKD,OAAO,CAAC,KAAK,KAAKA,OAAO,CAAC,KAAK;AACrG;AAEO,SAASL,UAAUa,GAAW;IACnC,oDAAoD;IACpD,IAAI;QACF,oDAAoD;QACpD,OAAO,IAAIC,IAAID,KAAKE,QAAQ;IAC9B,EAAE,OAAM;QACN,gCAAgC;QAChC,OAAOF;IACT;AACF;AAEO,eAAezB,aAAa4B,QAAgB;IACjD,OAAO,MAAMC,iBAAM,CAACC,IAAI,CAACF,UAAU;AACrC;AAEO,eAAevC,gBAAgBuC,QAAgB,EAAEE,IAAY;IAClE,OAAO,MAAMD,iBAAM,CAACE,OAAO,CAACH,UAAUE;AACxC;AAEO,SAAS/B,kBAAkBiC,SAAiB,EAAE;IACnD,OAAOC,mBAAM,CAACC,WAAW,CAACF,QAAQG,QAAQ,CAAC;AAC7C;AAEO,SAAS/C,kBAAkBgD,GAA0B;IAC1D,OAAO;QAAE,GAAGA,GAAG;QAAE,GAAIA,KAAKR,YAAY;YAAEA,UAAU;QAAW,CAAC;IAAE;AAClE;AAEO,SAASnB,cAAc4B,QAAgB;IAC5C,MAAMC,QAAQD,SAASE,IAAI,GAAGC,KAAK,CAAC;IACpC,MAAMC,WAAWH,MAAMI,GAAG;IAC1B,MAAMC,YAAYL,MAAMM,IAAI,CAAC;IAC7B,OAAO;QAAED;QAAWF;IAAS;AAC/B;AAEO,SAAS/B,qBACdmC,MAAmB,EACnBC,MAAW,EACXC,mBAA0C,CAAC,CAAC,EAC5CC,mBAAqC,CAAC,CAAC;IAEvC,MAAMC,WAAcC,IAAAA,iCAAe,EAACL,QAAQC,QAAQC;IACpD,MAAMI,SAA4BC,IAAAA,4BAAY,EAACH,UAAUD;IACzD,IAAIG,OAAOnB,MAAM,GAAG,GAAG;QACrB,MAAM,IAAIqB,MAAMF,OAAOhB,QAAQ;IACjC;IACA,OAAOc;AACT;AAEO,SAAStC,kBAAkB2C,WAAmB,EAAEC,uBAA+BC,uBAAe;IACnG;;EAEA,GACA,IAAIF,YAAYtB,MAAM,KAAK,GAAG,OAAOsB;IACrC,OAAO;WACF,IAAIG,IACLH,YACGd,KAAK,CAACe,sBACNG,MAAM,CAAC,CAACC,IAAcA,KAAKA,MAAM,QACjCC,IAAI;KAEV,CAAChB,IAAI,CAACW;AACT;AAEO,SAAStD,qBAAqB4D,YAAoB,EAAEC,YAAoB,EAAEP,uBAA+BC,uBAAe;IAC7H,MAAMO,SAASF,aAAarB,KAAK,CAACe;IAClC,MAAMS,SAASF,aAAatB,KAAK,CAACe;IAClC,OAAOQ,OACJL,MAAM,CAAC,CAACC,IAAcA,MAAM,MAAMA,MAAM,UAAUK,OAAOC,OAAO,CAACN,KAAK,CAAC,GACvEC,IAAI,GACJhB,IAAI,CAACW;AACV;AAEO,SAAS7D,sBAAsBmE,YAAoB,EAAEC,YAAoB,EAAEP,uBAA+BC,uBAAe;IAC9H,MAAMO,SAASF,aAAarB,KAAK,CAACe;IAClC,MAAMS,SAASF,aAAatB,KAAK,CAACe;IAClC,OAAOQ,OAAOL,MAAM,CAAC,CAACC,IAAcA,MAAM,MAAMK,OAAOC,OAAO,CAACN,OAAO,CAAC,GAAGC,IAAI;AAChF;AAEO,SAASpD,cAAc0D,CAAmB,EAAEC,CAAmB,EAAEC,MAAM,KAAK;IACjF,MAAMC,KAAKH,EAAEI,IAAI,CAACC,WAAW;IAC7B,MAAMC,KAAKL,EAAEG,IAAI,CAACC,WAAW;IAC7B,IAAIH,KAAK;QACP,OAAOC,KAAKG,KAAK,IAAIH,KAAKG,KAAK,CAAC,IAAI;IACtC,OAAO;QACL,OAAOH,KAAKG,KAAK,CAAC,IAAIH,KAAKG,KAAK,IAAI;IACtC;AACF;AAEA,SAASC,eAAeP,CAAM,EAAEC,CAAM,EAAEO,KAAe;IACrD,KAAK,MAAMf,KAAKe,MAAO;QACrB,IAAIR,CAAC,CAACP,EAAE,KAAKQ,CAAC,CAACR,EAAE,EAAE;YACjB,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEO,SAASlE,eACdkF,aAAkB,EAClBC,aAAkB,EAClBC,WAAqB,EACrBC,eAAyB;IAAC;CAAK;IAE/B,MAAMC,QAAa,EAAE;IACrB,MAAMC,WAAoE,EAAE;IAC5E,MAAMC,WAAgBN,cAAcjB,MAAM,CAAC,CAACwB,IAAS,CAACN,cAAcO,IAAI,CAAC,CAACC,IAASX,eAAeS,GAAGE,GAAGN;IACxG,KAAK,MAAMM,KAAKR,cAAe;QAC7B,MAAMS,IAAIV,cAAcQ,IAAI,CAAC,CAACD,IAAST,eAAeS,GAAGE,GAAGN;QAC5D,IAAIO,GAAG;YACL,MAAMC,OAA8D,CAAC;YACrE,KAAK,MAAM3B,KAAKkB,YAAYnB,MAAM,CAAC,CAACC,IAAcyB,CAAC,CAACzB,EAAE,KAAK0B,CAAC,CAAC1B,EAAE,EAAG;gBAChE2B,IAAI,CAAC3B,EAAE,GAAG;oBAAE4B,KAAKF,CAAC,CAAC1B,EAAE;oBAAE6B,KAAKJ,CAAC,CAACzB,EAAE;gBAAC;YACnC;YACA,IAAI8B,OAAOC,IAAI,CAACJ,MAAMtD,MAAM,EAAE;gBAC5BsD,IAAI,CAAC,SAAS,GAAGF;gBACjBJ,SAASW,IAAI,CAACL;YAChB;QACF,OAAO;YACLP,MAAMY,IAAI,CAACP;QACb;IACF;IACA,OAAO;QAACL;QAAOC;QAAUC;KAAS;AACpC;AAEO,SAAS3F,kBAAkBsG,MAAiE;IACjG,2BAA2B;IAC3B,OAAOA,OAAOC,GAAG,CAAC,CAACR,IAAMI,OAAOK,WAAW,CAACL,OAAOM,OAAO,CAACV,GAAGQ,GAAG,CAAC,CAAC,CAAClC,GAAGqC,EAAE,GAAK;gBAACrC;gBAAGA,MAAM,WAAWqC,IAAIA,EAAER,GAAG;aAAC;AAC/G"}
+{"version":3,"sources":["../../../backend/src/common/functions.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { parse as parseMs } from '@lukeed/ms'\nimport bcrypt from 'bcryptjs'\nimport { ClassTransformOptions, plainToInstance } from 'class-transformer'\nimport { validateSync } from 'class-validator'\nimport { ValidationError } from 'class-validator/types/validation/ValidationError'\nimport { ValidatorOptions } from 'class-validator/types/validation/ValidatorOptions'\nimport crypto from 'node:crypto'\nimport { setTimeout } from 'node:timers/promises'\nimport { SPACE_PERMS_SEP } from '../applications/spaces/constants/spaces'\n\nexport const regexpEscape = /[.*+?^${}()|[\\]\\\\]/g\nexport const regexSpecialChars = /[-[\\]{}()*+!<=:?./\\\\^$|#,]/g\nexport const regexSpecialCharsWithSpace = /[-[\\]{}()*+!<=:?./\\\\^$|#\\s,]/g\n\nexport async function loadOptionalModule(moduleName: string): Promise<any> {\n  return await import(moduleName)\n}\n\nexport async function sleep(ms: number): Promise<void> {\n  await setTimeout(ms)\n}\n\nexport function escapeSQLRegexp(input: string): string {\n  return input.replace(regexSpecialCharsWithSpace, '\\\\\\\\$&').replaceAll(\"'\", \"''\")\n}\n\nexport function escapeString(input: string): string {\n  return input.replace(regexSpecialChars, '\\\\$&')\n}\n\nexport function escapePath(path: string): string {\n  return path.replace(regexpEscape, '\\\\$&')\n}\n\nexport function regExpPathPattern(path: string): RegExp {\n  return new RegExp(`^${escapePath(path)}[/\\\\\\\\]`)\n}\n\nexport function convertHumanTimeToSeconds(value: string): number {\n  return parseMs(value) / 1000\n}\n\nexport function convertHumanTimeToMs(value: string): number {\n  return parseMs(value)\n}\n\nexport function formatDateISOString(date: Date): string {\n  return date.toISOString().replaceAll('-', '.').replaceAll(':', '-').replace('T', ' ').replace('Z', '')\n}\n\nexport function urlToPath(url: string): string {\n  // transform https://sync-in.com/webdav/ to /webdav/\n  try {\n    // transform https://sync-in.com/webdav/ to /webdav/\n    return new URL(url).pathname\n  } catch {\n    // or allows uri like : /webdav/\n    return url\n  }\n}\n\nexport async function hashPassword(password: string): Promise<string> {\n  return await bcrypt.hash(password, 10)\n}\n\nexport async function comparePassword(password: string, hash: string): Promise<boolean> {\n  return await bcrypt.compare(password, hash)\n}\n\nexport function generateShortUUID(length: number = 32, encoding: BufferEncoding = 'base64url'): string {\n  const bytes = Math.ceil((length * 3) / 4) // adapt to real length\n  return crypto.randomBytes(bytes).toString(encoding)\n}\n\nexport function anonymizePassword(obj: { password?: string; secrets?: string }) {\n  return { ...obj, ...(obj?.password && { password: '********' }), ...(obj?.secrets && { secrets: '********' }) }\n}\n\nexport function splitFullName(fullName?: string): { firstName: string; lastName: string } {\n  if (!fullName || !fullName.trim()) return { firstName: '', lastName: '' }\n  const parts = fullName.trim().split(/\\s+/)\n  if (parts.length === 1) {\n    return { firstName: '', lastName: parts[0] }\n  }\n  const lastName = parts.pop()!\n  const firstName = parts.join(' ')\n  return { firstName, lastName }\n}\n\nexport function transformAndValidate<T extends object>(\n  schema: new () => T,\n  object: any,\n  transformOptions: ClassTransformOptions = {},\n  validatorOptions: ValidatorOptions = {}\n): T {\n  // warning: plainToInstance do not use constructor to instantiate class\n  const instance: T = plainToInstance(schema, object, transformOptions)\n  const errors: ValidationError[] = validateSync(instance, validatorOptions)\n  if (errors.length > 0) {\n    throw new Error(errors.toString())\n  }\n  return instance\n}\n\nexport function uniquePermissions(permissions: string, permissionsSeparator: string = SPACE_PERMS_SEP) {\n  /*\n    Returns unique permissions : 'c:r:w:c:r' -> 'c:r:w'\n  */\n  if (permissions.length === 0) return permissions\n  return [\n    ...new Set(\n      permissions\n        .split(permissionsSeparator)\n        .filter((p: string) => p && p !== 'null')\n        .sort()\n    )\n  ].join(permissionsSeparator)\n}\n\nexport function intersectPermissions(aPermissions: string, bPermissions: string, permissionsSeparator: string = SPACE_PERMS_SEP): string {\n  const aPerms = aPermissions.split(permissionsSeparator)\n  const bPerms = bPermissions.split(permissionsSeparator)\n  return aPerms\n    .filter((p: string) => p !== '' && p !== 'null' && bPerms.indexOf(p) > -1)\n    .sort()\n    .join(permissionsSeparator)\n}\n\nexport function differencePermissions(aPermissions: string, bPermissions: string, permissionsSeparator: string = SPACE_PERMS_SEP): string[] {\n  const aPerms = aPermissions.split(permissionsSeparator)\n  const bPerms = bPermissions.split(permissionsSeparator)\n  return aPerms.filter((p: string) => p !== '' && bPerms.indexOf(p) === -1).sort()\n}\n\nexport function sortObjByName(a: { name: string }, b: { name: string }, asc = false): 0 | 1 | -1 {\n  const aN = a.name.toLowerCase()\n  const bN = b.name.toLowerCase()\n  if (asc) {\n    return aN < bN ? 1 : aN > bN ? -1 : 0\n  } else {\n    return aN < bN ? -1 : aN > bN ? 1 : 0\n  }\n}\n\nfunction diffProperties(a: any, b: any, props: string[]): boolean {\n  for (const p of props) {\n    if (a[p] !== b[p]) {\n      return false\n    }\n  }\n  return true\n}\n\nexport function diffCollection<T>(\n  curCollection: T[],\n  newCollection: T[],\n  updateProps: string[],\n  compareProps: string[] = ['id']\n): [T[], Record<string | 'object', { old: any; new: any } | T>[], T[]] {\n  const toAdd: T[] = []\n  const toUpdate: Record<string | 'object', { old: any; new: any } | T>[] = []\n  const toRemove: T[] = curCollection.filter((c: T) => !newCollection.find((n: T) => diffProperties(c, n, compareProps)))\n  for (const n of newCollection) {\n    const o = curCollection.find((c: T) => diffProperties(c, n, compareProps))\n    if (o) {\n      const diff: Record<string | 'object', { old: any; new: any } | T> = {}\n      for (const p of updateProps.filter((p: string) => n[p] !== o[p])) {\n        diff[p] = { old: o[p], new: n[p] }\n      }\n      if (Object.keys(diff).length) {\n        diff['object'] = n\n        toUpdate.push(diff)\n      }\n    } else {\n      toAdd.push(n)\n    }\n  }\n  return [toAdd, toUpdate, toRemove]\n}\n\nexport function convertDiffUpdate(update: Record<string | 'object', { old: any; new: any } | any>[]): Record<string | 'object', any>[] {\n  // only keep the new values\n  return update.map((o) => Object.fromEntries(Object.entries(o).map(([p, v]) => [p, p === 'object' ? v : v.new])))\n}\n"],"names":["anonymizePassword","comparePassword","convertDiffUpdate","convertHumanTimeToMs","convertHumanTimeToSeconds","diffCollection","differencePermissions","escapePath","escapeSQLRegexp","escapeString","formatDateISOString","generateShortUUID","hashPassword","intersectPermissions","loadOptionalModule","regExpPathPattern","regexSpecialChars","regexSpecialCharsWithSpace","regexpEscape","sleep","sortObjByName","splitFullName","transformAndValidate","uniquePermissions","urlToPath","moduleName","ms","setTimeout","input","replace","replaceAll","path","RegExp","value","parseMs","date","toISOString","url","URL","pathname","password","bcrypt","hash","compare","length","encoding","bytes","Math","ceil","crypto","randomBytes","toString","obj","secrets","fullName","trim","firstName","lastName","parts","split","pop","join","schema","object","transformOptions","validatorOptions","instance","plainToInstance","errors","validateSync","Error","permissions","permissionsSeparator","SPACE_PERMS_SEP","Set","filter","p","sort","aPermissions","bPermissions","aPerms","bPerms","indexOf","a","b","asc","aN","name","toLowerCase","bN","diffProperties","props","curCollection","newCollection","updateProps","compareProps","toAdd","toUpdate","toRemove","c","find","n","o","diff","old","new","Object","keys","push","update","map","fromEntries","entries","v"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QA4EeA;eAAAA;;QATMC;eAAAA;;QAmHNC;eAAAA;;QA1IAC;eAAAA;;QAJAC;eAAAA;;QAmHAC;eAAAA;;QAzBAC;eAAAA;;QAlGAC;eAAAA;;QARAC;eAAAA;;QAIAC;eAAAA;;QAoBAC;eAAAA;;QAuBAC;eAAAA;;QARMC;eAAAA;;QA0DNC;eAAAA;;QAzGMC;eAAAA;;QAoBNC;eAAAA;;QAvBHC;eAAAA;;QACAC;eAAAA;;QAFAC;eAAAA;;QAQSC;eAAAA;;QAoHNC;eAAAA;;QAxDAC;eAAAA;;QAWAC;eAAAA;;QAeAC;eAAAA;;QAtDAC;eAAAA;;;oBAlDiB;iEACd;kCACoC;gCAC1B;mEAGV;0BACQ;wBACK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEzB,MAAMN,eAAe;AACrB,MAAMF,oBAAoB;AAC1B,MAAMC,6BAA6B;AAEnC,eAAeH,mBAAmBW,UAAkB;IACzD,OAAO,MAAM,gBAAOA,8DAAP;AACf;AAEO,eAAeN,MAAMO,EAAU;IACpC,MAAMC,IAAAA,oBAAU,EAACD;AACnB;AAEO,SAASlB,gBAAgBoB,KAAa;IAC3C,OAAOA,MAAMC,OAAO,CAACZ,4BAA4B,UAAUa,UAAU,CAAC,KAAK;AAC7E;AAEO,SAASrB,aAAamB,KAAa;IACxC,OAAOA,MAAMC,OAAO,CAACb,mBAAmB;AAC1C;AAEO,SAAST,WAAWwB,IAAY;IACrC,OAAOA,KAAKF,OAAO,CAACX,cAAc;AACpC;AAEO,SAASH,kBAAkBgB,IAAY;IAC5C,OAAO,IAAIC,OAAO,CAAC,CAAC,EAAEzB,WAAWwB,MAAM,OAAO,CAAC;AACjD;AAEO,SAAS3B,0BAA0B6B,KAAa;IACrD,OAAOC,IAAAA,SAAO,EAACD,SAAS;AAC1B;AAEO,SAAS9B,qBAAqB8B,KAAa;IAChD,OAAOC,IAAAA,SAAO,EAACD;AACjB;AAEO,SAASvB,oBAAoByB,IAAU;IAC5C,OAAOA,KAAKC,WAAW,GAAGN,UAAU,CAAC,KAAK,KAAKA,UAAU,CAAC,KAAK,KAAKD,OAAO,CAAC,KAAK,KAAKA,OAAO,CAAC,KAAK;AACrG;AAEO,SAASL,UAAUa,GAAW;IACnC,oDAAoD;IACpD,IAAI;QACF,oDAAoD;QACpD,OAAO,IAAIC,IAAID,KAAKE,QAAQ;IAC9B,EAAE,OAAM;QACN,gCAAgC;QAChC,OAAOF;IACT;AACF;AAEO,eAAezB,aAAa4B,QAAgB;IACjD,OAAO,MAAMC,iBAAM,CAACC,IAAI,CAACF,UAAU;AACrC;AAEO,eAAevC,gBAAgBuC,QAAgB,EAAEE,IAAY;IAClE,OAAO,MAAMD,iBAAM,CAACE,OAAO,CAACH,UAAUE;AACxC;AAEO,SAAS/B,kBAAkBiC,SAAiB,EAAE,EAAEC,WAA2B,WAAW;IAC3F,MAAMC,QAAQC,KAAKC,IAAI,CAAC,AAACJ,SAAS,IAAK,GAAG,uBAAuB;;IACjE,OAAOK,mBAAM,CAACC,WAAW,CAACJ,OAAOK,QAAQ,CAACN;AAC5C;AAEO,SAAS7C,kBAAkBoD,GAA4C;IAC5E,OAAO;QAAE,GAAGA,GAAG;QAAE,GAAIA,KAAKZ,YAAY;YAAEA,UAAU;QAAW,CAAC;QAAG,GAAIY,KAAKC,WAAW;YAAEA,SAAS;QAAW,CAAC;IAAE;AAChH;AAEO,SAAShC,cAAciC,QAAiB;IAC7C,IAAI,CAACA,YAAY,CAACA,SAASC,IAAI,IAAI,OAAO;QAAEC,WAAW;QAAIC,UAAU;IAAG;IACxE,MAAMC,QAAQJ,SAASC,IAAI,GAAGI,KAAK,CAAC;IACpC,IAAID,MAAMd,MAAM,KAAK,GAAG;QACtB,OAAO;YAAEY,WAAW;YAAIC,UAAUC,KAAK,CAAC,EAAE;QAAC;IAC7C;IACA,MAAMD,WAAWC,MAAME,GAAG;IAC1B,MAAMJ,YAAYE,MAAMG,IAAI,CAAC;IAC7B,OAAO;QAAEL;QAAWC;IAAS;AAC/B;AAEO,SAASnC,qBACdwC,MAAmB,EACnBC,MAAW,EACXC,mBAA0C,CAAC,CAAC,EAC5CC,mBAAqC,CAAC,CAAC;IAEvC,uEAAuE;IACvE,MAAMC,WAAcC,IAAAA,iCAAe,EAACL,QAAQC,QAAQC;IACpD,MAAMI,SAA4BC,IAAAA,4BAAY,EAACH,UAAUD;IACzD,IAAIG,OAAOxB,MAAM,GAAG,GAAG;QACrB,MAAM,IAAI0B,MAAMF,OAAOjB,QAAQ;IACjC;IACA,OAAOe;AACT;AAEO,SAAS3C,kBAAkBgD,WAAmB,EAAEC,uBAA+BC,uBAAe;IACnG;;EAEA,GACA,IAAIF,YAAY3B,MAAM,KAAK,GAAG,OAAO2B;IACrC,OAAO;WACF,IAAIG,IACLH,YACGZ,KAAK,CAACa,sBACNG,MAAM,CAAC,CAACC,IAAcA,KAAKA,MAAM,QACjCC,IAAI;KAEV,CAAChB,IAAI,CAACW;AACT;AAEO,SAAS3D,qBAAqBiE,YAAoB,EAAEC,YAAoB,EAAEP,uBAA+BC,uBAAe;IAC7H,MAAMO,SAASF,aAAanB,KAAK,CAACa;IAClC,MAAMS,SAASF,aAAapB,KAAK,CAACa;IAClC,OAAOQ,OACJL,MAAM,CAAC,CAACC,IAAcA,MAAM,MAAMA,MAAM,UAAUK,OAAOC,OAAO,CAACN,KAAK,CAAC,GACvEC,IAAI,GACJhB,IAAI,CAACW;AACV;AAEO,SAASlE,sBAAsBwE,YAAoB,EAAEC,YAAoB,EAAEP,uBAA+BC,uBAAe;IAC9H,MAAMO,SAASF,aAAanB,KAAK,CAACa;IAClC,MAAMS,SAASF,aAAapB,KAAK,CAACa;IAClC,OAAOQ,OAAOL,MAAM,CAAC,CAACC,IAAcA,MAAM,MAAMK,OAAOC,OAAO,CAACN,OAAO,CAAC,GAAGC,IAAI;AAChF;AAEO,SAASzD,cAAc+D,CAAmB,EAAEC,CAAmB,EAAEC,MAAM,KAAK;IACjF,MAAMC,KAAKH,EAAEI,IAAI,CAACC,WAAW;IAC7B,MAAMC,KAAKL,EAAEG,IAAI,CAACC,WAAW;IAC7B,IAAIH,KAAK;QACP,OAAOC,KAAKG,KAAK,IAAIH,KAAKG,KAAK,CAAC,IAAI;IACtC,OAAO;QACL,OAAOH,KAAKG,KAAK,CAAC,IAAIH,KAAKG,KAAK,IAAI;IACtC;AACF;AAEA,SAASC,eAAeP,CAAM,EAAEC,CAAM,EAAEO,KAAe;IACrD,KAAK,MAAMf,KAAKe,MAAO;QACrB,IAAIR,CAAC,CAACP,EAAE,KAAKQ,CAAC,CAACR,EAAE,EAAE;YACjB,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEO,SAASvE,eACduF,aAAkB,EAClBC,aAAkB,EAClBC,WAAqB,EACrBC,eAAyB;IAAC;CAAK;IAE/B,MAAMC,QAAa,EAAE;IACrB,MAAMC,WAAoE,EAAE;IAC5E,MAAMC,WAAgBN,cAAcjB,MAAM,CAAC,CAACwB,IAAS,CAACN,cAAcO,IAAI,CAAC,CAACC,IAASX,eAAeS,GAAGE,GAAGN;IACxG,KAAK,MAAMM,KAAKR,cAAe;QAC7B,MAAMS,IAAIV,cAAcQ,IAAI,CAAC,CAACD,IAAST,eAAeS,GAAGE,GAAGN;QAC5D,IAAIO,GAAG;YACL,MAAMC,OAA8D,CAAC;YACrE,KAAK,MAAM3B,KAAKkB,YAAYnB,MAAM,CAAC,CAACC,IAAcyB,CAAC,CAACzB,EAAE,KAAK0B,CAAC,CAAC1B,EAAE,EAAG;gBAChE2B,IAAI,CAAC3B,EAAE,GAAG;oBAAE4B,KAAKF,CAAC,CAAC1B,EAAE;oBAAE6B,KAAKJ,CAAC,CAACzB,EAAE;gBAAC;YACnC;YACA,IAAI8B,OAAOC,IAAI,CAACJ,MAAM3D,MAAM,EAAE;gBAC5B2D,IAAI,CAAC,SAAS,GAAGF;gBACjBJ,SAASW,IAAI,CAACL;YAChB;QACF,OAAO;YACLP,MAAMY,IAAI,CAACP;QACb;IACF;IACA,OAAO;QAACL;QAAOC;QAAUC;KAAS;AACpC;AAEO,SAAShG,kBAAkB2G,MAAiE;IACjG,2BAA2B;IAC3B,OAAOA,OAAOC,GAAG,CAAC,CAACR,IAAMI,OAAOK,WAAW,CAACL,OAAOM,OAAO,CAACV,GAAGQ,GAAG,CAAC,CAAC,CAAClC,GAAGqC,EAAE,GAAK;gBAACrC;gBAAGA,MAAM,WAAWqC,IAAIA,EAAER,GAAG;aAAC;AAC/G"}

package/server/common/qrcode.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "qrcodeToDataURL", {
+    enumerable: true,
+    get: function() {
+        return qrcodeToDataURL;
+    }
+});
+const _qrcodegenerator = /*#__PURE__*/ _interop_require_default(require("qrcode-generator"));
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+function qrcodeToDataURL(text) {
+    const qr = (0, _qrcodegenerator.default)(0, 'M') // version auto, correction M
+    ;
+    qr.addData(text);
+    qr.make();
+    const svg = qr.createSvgTag({
+        margin: 2,
+        scalable: true
+    });
+    const base64 = Buffer.from(svg).toString('base64');
+    return `data:image/svg+xml;base64,${base64}`;
+}
+
+//# sourceMappingURL=qrcode.js.map

package/server/common/qrcode.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../backend/src/common/qrcode.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport qrcode from 'qrcode-generator'\n\nexport function qrcodeToDataURL(text: string) {\n  const qr = qrcode(0, 'M') // version auto, correction M\n  qr.addData(text)\n  qr.make()\n\n  const svg = qr.createSvgTag({ margin: 2, scalable: true })\n\n  const base64 = Buffer.from(svg).toString('base64')\n  return `data:image/svg+xml;base64,${base64}`\n}\n"],"names":["qrcodeToDataURL","text","qr","qrcode","addData","make","svg","createSvgTag","margin","scalable","base64","Buffer","from","toString"],"mappings":"AAAA;;;;CAIC;;;;+BAIeA;;;eAAAA;;;wEAFG;;;;;;AAEZ,SAASA,gBAAgBC,IAAY;IAC1C,MAAMC,KAAKC,IAAAA,wBAAM,EAAC,GAAG,KAAK,6BAA6B;;IACvDD,GAAGE,OAAO,CAACH;IACXC,GAAGG,IAAI;IAEP,MAAMC,MAAMJ,GAAGK,YAAY,CAAC;QAAEC,QAAQ;QAAGC,UAAU;IAAK;IAExD,MAAMC,SAASC,OAAOC,IAAI,CAACN,KAAKO,QAAQ,CAAC;IACzC,OAAO,CAAC,0BAA0B,EAAEH,QAAQ;AAC9C"}

package/server/common/shared.js

@@ -17,6 +17,9 @@ _export(exports, {
     get capitalizeString () {
         return capitalizeString;
     },
+    get createLightSlug () {
+        return createLightSlug;
+    },
     get createSlug () {
         return createSlug;
     },
@@ -35,6 +38,9 @@ _export(exports, {
     get forbiddenChars () {
         return forbiddenChars;
     },
+    get genPassword () {
+        return genPassword;
+    },
     get isValidFileName () {
         return isValidFileName;
     },
@@ -74,6 +80,18 @@ function createSlug(input, replaceCount = false) {
     if (replaceCount) return r.replace(regExpNumberSuffix, '');
     return r;
 }
+function createLightSlug(input) {
+    return input.toLowerCase().trim().normalize('NFD').replace(/[\u0300-\u036f]/g, '');
+}
+function genPassword(length = 12) {
+    const chars = '0123456789abcdefghijklmnopqrstuvwxyz!@#$%^&*()ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+    let password = '';
+    for(let i = 0; i <= length; i++){
+        const randomNumber = Math.floor(Math.random() * chars.length);
+        password += chars.substring(randomNumber, randomNumber + 1);
+    }
+    return password;
+}
 function popFromObject(key, object) {
     const item = object[key];
     delete object[key];

package/server/common/shared.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/common/shared.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// eslint-disable-next-line no-control-regex\nexport const regExpInvalidFileName = /^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$|[<>:\"/\\\\|?*\\x00-\\x1f\\x80-\\x9f]/\nexport const regExpPreventPathTraversal = /^(\\.\\.(\\/|\\\\|$))+/\nexport const regExpNumberSuffix = /-\\d+$/\nexport const forbiddenChars = '\\\\ / : * ? \" < > |'\n\nexport function isValidFileName(fileName: string) {\n  if (regExpInvalidFileName.test(fileName)) {\n    throw new Error('Forbidden characters')\n  }\n}\n\nexport function currentTimeStamp(date?: Date, ms = false): number {\n  return Math.floor((date ? date : new Date()).getTime() / (ms ? 1 : 1000))\n}\n\nexport function currentDate(value?: string): Date {\n  return new Date((value ? value : new Date().toISOString()).split('T')[0])\n}\n\nexport function createSlug(input: string, replaceCount = false): string {\n  const r = input\n    .toLowerCase()\n    .trim()\n    .replace(/[\\s_-]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .normalize('NFD')\n    .replace(/[\\u0300-\\u036f]/g, '')\n  if (replaceCount) return r.replace(regExpNumberSuffix, '')\n  return r\n}\n\nexport function popFromObject(key: string, object: any): any {\n  const item = object[key]\n  delete object[key]\n  return item\n}\n\nexport function encodeUrl(url: string): string {\n  return url\n    .split('/')\n    .map((e) => encodeURIComponent(e))\n    .join('/')\n}\n\nexport function decodeUrl(url: string): string {\n  return url\n    .split('/')\n    .map((e) => decodeURIComponent(e))\n    .join('/')\n}\n\nexport function objectPropertyFromString(obj: any, property: string): any {\n  const a = property.split('.')\n  let o = obj\n  for (let i = 0, n = a.length; i < n; i++) {\n    const k = a[i]\n    if (k in o) {\n      o = o[k]\n    } else {\n      return null\n    }\n  }\n  return o\n}\n\nexport function capitalizeString(value: string): string {\n  return value.charAt(0).toUpperCase() + value.slice(1)\n}\n"],"names":["capitalizeString","createSlug","currentDate","currentTimeStamp","decodeUrl","encodeUrl","forbiddenChars","isValidFileName","objectPropertyFromString","popFromObject","regExpInvalidFileName","regExpNumberSuffix","regExpPreventPathTraversal","fileName","test","Error","date","ms","Math","floor","Date","getTime","value","toISOString","split","input","replaceCount","r","toLowerCase","trim","replace","normalize","key","object","item","url","map","e","encodeURIComponent","join","decodeURIComponent","obj","property","a","o","i","n","length","k","charAt","toUpperCase","slice"],"mappings":"AAAA;;;;CAIC,GAED,4CAA4C;;;;;;;;;;;;QAkE5BA;eAAAA;;QA9CAC;eAAAA;;QAJAC;eAAAA;;QAJAC;eAAAA;;QAiCAC;eAAAA;;QAPAC;eAAAA;;QAlCHC;eAAAA;;QAEGC;eAAAA;;QA8CAC;eAAAA;;QApBAC;eAAAA;;QA/BHC;eAAAA;;QAEAC;eAAAA;;QADAC;eAAAA;;;AADN,MAAMF,wBAAwB;AAC9B,MAAME,6BAA6B;AACnC,MAAMD,qBAAqB;AAC3B,MAAML,iBAAiB;AAEvB,SAASC,gBAAgBM,QAAgB;IAC9C,IAAIH,sBAAsBI,IAAI,CAACD,WAAW;QACxC,MAAM,IAAIE,MAAM;IAClB;AACF;AAEO,SAASZ,iBAAiBa,IAAW,EAAEC,KAAK,KAAK;IACtD,OAAOC,KAAKC,KAAK,CAAC,AAACH,CAAAA,OAAOA,OAAO,IAAII,MAAK,EAAGC,OAAO,KAAMJ,CAAAA,KAAK,IAAI,IAAG;AACxE;AAEO,SAASf,YAAYoB,KAAc;IACxC,OAAO,IAAIF,KAAK,AAACE,CAAAA,QAAQA,QAAQ,IAAIF,OAAOG,WAAW,EAAC,EAAGC,KAAK,CAAC,IAAI,CAAC,EAAE;AAC1E;AAEO,SAASvB,WAAWwB,KAAa,EAAEC,eAAe,KAAK;IAC5D,MAAMC,IAAIF,MACPG,WAAW,GACXC,IAAI,GACJC,OAAO,CAAC,YAAY,KACpBA,OAAO,CAAC,YAAY,IACpBC,SAAS,CAAC,OACVD,OAAO,CAAC,oBAAoB;IAC/B,IAAIJ,cAAc,OAAOC,EAAEG,OAAO,CAACnB,oBAAoB;IACvD,OAAOgB;AACT;AAEO,SAASlB,cAAcuB,GAAW,EAAEC,MAAW;IACpD,MAAMC,OAAOD,MAAM,CAACD,IAAI;IACxB,OAAOC,MAAM,CAACD,IAAI;IAClB,OAAOE;AACT;AAEO,SAAS7B,UAAU8B,GAAW;IACnC,OAAOA,IACJX,KAAK,CAAC,KACNY,GAAG,CAAC,CAACC,IAAMC,mBAAmBD,IAC9BE,IAAI,CAAC;AACV;AAEO,SAASnC,UAAU+B,GAAW;IACnC,OAAOA,IACJX,KAAK,CAAC,KACNY,GAAG,CAAC,CAACC,IAAMG,mBAAmBH,IAC9BE,IAAI,CAAC;AACV;AAEO,SAAS/B,yBAAyBiC,GAAQ,EAAEC,QAAgB;IACjE,MAAMC,IAAID,SAASlB,KAAK,CAAC;IACzB,IAAIoB,IAAIH;IACR,IAAK,IAAII,IAAI,GAAGC,IAAIH,EAAEI,MAAM,EAAEF,IAAIC,GAAGD,IAAK;QACxC,MAAMG,IAAIL,CAAC,CAACE,EAAE;QACd,IAAIG,KAAKJ,GAAG;YACVA,IAAIA,CAAC,CAACI,EAAE;QACV,OAAO;YACL,OAAO;QACT;IACF;IACA,OAAOJ;AACT;AAEO,SAAS5C,iBAAiBsB,KAAa;IAC5C,OAAOA,MAAM2B,MAAM,CAAC,GAAGC,WAAW,KAAK5B,MAAM6B,KAAK,CAAC;AACrD"}
+{"version":3,"sources":["../../../backend/src/common/shared.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\n// eslint-disable-next-line no-control-regex\nexport const regExpInvalidFileName = /^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$|[<>:\"/\\\\|?*\\x00-\\x1f\\x80-\\x9f]/\nexport const regExpPreventPathTraversal = /^(\\.\\.(\\/|\\\\|$))+/\nexport const regExpNumberSuffix = /-\\d+$/\nexport const forbiddenChars = '\\\\ / : * ? \" < > |'\n\nexport function isValidFileName(fileName: string) {\n  if (regExpInvalidFileName.test(fileName)) {\n    throw new Error('Forbidden characters')\n  }\n}\n\nexport function currentTimeStamp(date?: Date, ms = false): number {\n  return Math.floor((date ? date : new Date()).getTime() / (ms ? 1 : 1000))\n}\n\nexport function currentDate(value?: string): Date {\n  return new Date((value ? value : new Date().toISOString()).split('T')[0])\n}\n\nexport function createSlug(input: string, replaceCount = false): string {\n  const r = input\n    .toLowerCase()\n    .trim()\n    .replace(/[\\s_-]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .normalize('NFD')\n    .replace(/[\\u0300-\\u036f]/g, '')\n  if (replaceCount) return r.replace(regExpNumberSuffix, '')\n  return r\n}\n\nexport function createLightSlug(input: string) {\n  return input\n    .toLowerCase()\n    .trim()\n    .normalize('NFD')\n    .replace(/[\\u0300-\\u036f]/g, '')\n}\n\nexport function genPassword(length = 12) {\n  const chars = '0123456789abcdefghijklmnopqrstuvwxyz!@#$%^&*()ABCDEFGHIJKLMNOPQRSTUVWXYZ'\n  let password = ''\n  for (let i = 0; i <= length; i++) {\n    const randomNumber = Math.floor(Math.random() * chars.length)\n    password += chars.substring(randomNumber, randomNumber + 1)\n  }\n  return password\n}\n\nexport function popFromObject(key: string, object: any): any {\n  const item = object[key]\n  delete object[key]\n  return item\n}\n\nexport function encodeUrl(url: string): string {\n  return url\n    .split('/')\n    .map((e) => encodeURIComponent(e))\n    .join('/')\n}\n\nexport function decodeUrl(url: string): string {\n  return url\n    .split('/')\n    .map((e) => decodeURIComponent(e))\n    .join('/')\n}\n\nexport function objectPropertyFromString(obj: any, property: string): any {\n  const a = property.split('.')\n  let o = obj\n  for (let i = 0, n = a.length; i < n; i++) {\n    const k = a[i]\n    if (k in o) {\n      o = o[k]\n    } else {\n      return null\n    }\n  }\n  return o\n}\n\nexport function capitalizeString(value: string): string {\n  return value.charAt(0).toUpperCase() + value.slice(1)\n}\n"],"names":["capitalizeString","createLightSlug","createSlug","currentDate","currentTimeStamp","decodeUrl","encodeUrl","forbiddenChars","genPassword","isValidFileName","objectPropertyFromString","popFromObject","regExpInvalidFileName","regExpNumberSuffix","regExpPreventPathTraversal","fileName","test","Error","date","ms","Math","floor","Date","getTime","value","toISOString","split","input","replaceCount","r","toLowerCase","trim","replace","normalize","length","chars","password","i","randomNumber","random","substring","key","object","item","url","map","e","encodeURIComponent","join","decodeURIComponent","obj","property","a","o","n","k","charAt","toUpperCase","slice"],"mappings":"AAAA;;;;CAIC,GAED,4CAA4C;;;;;;;;;;;;QAoF5BA;eAAAA;;QApDAC;eAAAA;;QAZAC;eAAAA;;QAJAC;eAAAA;;QAJAC;eAAAA;;QAmDAC;eAAAA;;QAPAC;eAAAA;;QApDHC;eAAAA;;QAoCGC;eAAAA;;QAlCAC;eAAAA;;QAgEAC;eAAAA;;QApBAC;eAAAA;;QAjDHC;eAAAA;;QAEAC;eAAAA;;QADAC;eAAAA;;;AADN,MAAMF,wBAAwB;AAC9B,MAAME,6BAA6B;AACnC,MAAMD,qBAAqB;AAC3B,MAAMN,iBAAiB;AAEvB,SAASE,gBAAgBM,QAAgB;IAC9C,IAAIH,sBAAsBI,IAAI,CAACD,WAAW;QACxC,MAAM,IAAIE,MAAM;IAClB;AACF;AAEO,SAASb,iBAAiBc,IAAW,EAAEC,KAAK,KAAK;IACtD,OAAOC,KAAKC,KAAK,CAAC,AAACH,CAAAA,OAAOA,OAAO,IAAII,MAAK,EAAGC,OAAO,KAAMJ,CAAAA,KAAK,IAAI,IAAG;AACxE;AAEO,SAAShB,YAAYqB,KAAc;IACxC,OAAO,IAAIF,KAAK,AAACE,CAAAA,QAAQA,QAAQ,IAAIF,OAAOG,WAAW,EAAC,EAAGC,KAAK,CAAC,IAAI,CAAC,EAAE;AAC1E;AAEO,SAASxB,WAAWyB,KAAa,EAAEC,eAAe,KAAK;IAC5D,MAAMC,IAAIF,MACPG,WAAW,GACXC,IAAI,GACJC,OAAO,CAAC,YAAY,KACpBA,OAAO,CAAC,YAAY,IACpBC,SAAS,CAAC,OACVD,OAAO,CAAC,oBAAoB;IAC/B,IAAIJ,cAAc,OAAOC,EAAEG,OAAO,CAACnB,oBAAoB;IACvD,OAAOgB;AACT;AAEO,SAAS5B,gBAAgB0B,KAAa;IAC3C,OAAOA,MACJG,WAAW,GACXC,IAAI,GACJE,SAAS,CAAC,OACVD,OAAO,CAAC,oBAAoB;AACjC;AAEO,SAASxB,YAAY0B,SAAS,EAAE;IACrC,MAAMC,QAAQ;IACd,IAAIC,WAAW;IACf,IAAK,IAAIC,IAAI,GAAGA,KAAKH,QAAQG,IAAK;QAChC,MAAMC,eAAelB,KAAKC,KAAK,CAACD,KAAKmB,MAAM,KAAKJ,MAAMD,MAAM;QAC5DE,YAAYD,MAAMK,SAAS,CAACF,cAAcA,eAAe;IAC3D;IACA,OAAOF;AACT;AAEO,SAASzB,cAAc8B,GAAW,EAAEC,MAAW;IACpD,MAAMC,OAAOD,MAAM,CAACD,IAAI;IACxB,OAAOC,MAAM,CAACD,IAAI;IAClB,OAAOE;AACT;AAEO,SAASrC,UAAUsC,GAAW;IACnC,OAAOA,IACJlB,KAAK,CAAC,KACNmB,GAAG,CAAC,CAACC,IAAMC,mBAAmBD,IAC9BE,IAAI,CAAC;AACV;AAEO,SAAS3C,UAAUuC,GAAW;IACnC,OAAOA,IACJlB,KAAK,CAAC,KACNmB,GAAG,CAAC,CAACC,IAAMG,mBAAmBH,IAC9BE,IAAI,CAAC;AACV;AAEO,SAAStC,yBAAyBwC,GAAQ,EAAEC,QAAgB;IACjE,MAAMC,IAAID,SAASzB,KAAK,CAAC;IACzB,IAAI2B,IAAIH;IACR,IAAK,IAAIb,IAAI,GAAGiB,IAAIF,EAAElB,MAAM,EAAEG,IAAIiB,GAAGjB,IAAK;QACxC,MAAMkB,IAAIH,CAAC,CAACf,EAAE;QACd,IAAIkB,KAAKF,GAAG;YACVA,IAAIA,CAAC,CAACE,EAAE;QACV,OAAO;YACL,OAAO;QACT;IACF;IACA,OAAOF;AACT;AAEO,SAASrD,iBAAiBwB,KAAa;IAC5C,OAAOA,MAAMgC,MAAM,CAAC,GAAGC,WAAW,KAAKjC,MAAMkC,KAAK,CAAC;AACrD"}