@sync-in/server 1.8.0 → 1.9.0

package/CHANGELOG.md

@@ -1,16 +1,70 @@
-## [1.8.0](https://github.com/Sync-in/server/compare/v1.7.0...v1.8.0) (2025-10-26)
 
-### Highlights
+## [1.9.0](https://github.com/Sync-in/server/compare/v1.8.1...v1.9.0) (2025-11-24)
+
+### Highlights 1.9
+
+* 🎨 **Visual identity updated** — refreshed branding.
+* 🖼️ **Enhanced image viewer** — browse all images in a directory, start slideshows, use fullscreen mode, and view detailed properties.
+* ✏️ **Native text editor** — search, syntax highlighting, undo/redo, and lock/unlock capabilities built directly into the UI.
+* 🔐 **Improved file lock management** — users can request unlocks from lock owners, and file owners can now remove locks themselves.
+* ⚠️ **Overwrite confirmation dialogs** — added confirmation prompts for uploads, renaming, copying, and moving files to prevent accidental overwrites.
+
+➡️ [More details](https://sync-in.com/news/sync-in-server-1-9)
+
+
+### Features
+
+* **admin:** add server update notification support ([fc72430](https://github.com/Sync-in/server/commit/fc72430d69b9d2fb31d24ef680efd602a2c94d87))
+* **backend:auth:** allow cn LDAP attribute and add AD-specific logic ([6998b1a](https://github.com/Sync-in/server/commit/6998b1af24bc6a360a146f71d8d264c582e89edc))
+* **backend:auth:** Allow the LDAP `mail` attribute to be used as the login attribute, and allow users to authenticate using either the login attribute or their email address ([a683b57](https://github.com/Sync-in/server/commit/a683b5760ce9386b51c7e21e8699bb8a8d9335c5))
+* **backend:files:** improve file upload handling with comprehensive overwrite support and directory conflict resolution ([e69a687](https://github.com/Sync-in/server/commit/e69a687071c0d5e7fc8bd76cef820c87a35e852c))
+* **docker:onlyoffice:** update DocumentServer image to v9.1 ([c64a3ae](https://github.com/Sync-in/server/commit/c64a3aeafc70b275acc9d2fa50a5b30517325673))
+* **files:** add directory size retrieval with UI and API integration ([4528b43](https://github.com/Sync-in/server/commit/4528b438e0819d3e6d9f72c11fab931257cadad0))
+* **files:** add overwrite confirmation dialog for file rename and update API to support overwrite behavior ([c7c0d96](https://github.com/Sync-in/server/commit/c7c0d96d46144062cda739e8f32726f27deb8911))
+* **files:** add overwrite confirmation dialog for file uploads and adapt API to support overwrite functionality ([d39822f](https://github.com/Sync-in/server/commit/d39822fd2d787b2b3477214c5ab885e7f712264e))
+* **files:** add unlock request feature and enable force unlock for file owners ([7441337](https://github.com/Sync-in/server/commit/7441337dd0035ef681ece616d3e21870134ea511))
+* **files:** enable locking and unlocking of edited files with improved handling and UI integration ([24ad66b](https://github.com/Sync-in/server/commit/24ad66b034e3287a5bc81c504b383539e025fc10))
+* **files:** improve file handling with edit mode toggle, unsaved changes warning, enhanced modal logic, and updated constants ([bcc3ad2](https://github.com/Sync-in/server/commit/bcc3ad28bd26b042de50506c6a5bb71aa1e720ca))
+* **frontend:config:** enhance notifications with `maxOpened` and `autoDismiss` properties ([cf850bf](https://github.com/Sync-in/server/commit/cf850bf43f61306e7bb2ee5306741f2628f2d89a))
+* **frontend:files:** add ability to edit basic text files ([85b56e2](https://github.com/Sync-in/server/commit/85b56e23d5c8c11ed62ef281bc2370965090305f))
+* **frontend:files:** add fulscreen button in image viewer ([b834618](https://github.com/Sync-in/server/commit/b8346182fd3d01061573111bf80ba9aecca86e23))
+* **frontend:files:** add new translations and improve text viewer with updated read-only state handling and line wrapping ([e90c91e](https://github.com/Sync-in/server/commit/e90c91ec48e0d46cbbb4245a0e2fc53549cc8e3a))
+* **frontend:files:** add overwrite confirmation dialog for copy/move actions ([fa2d601](https://github.com/Sync-in/server/commit/fa2d601aba4aa0ad1e4f7142212ee64db3e73a96))
+* **frontend:files:** add undo and redo functionality with i18n updates and improved editor error handling ([daccfbc](https://github.com/Sync-in/server/commit/daccfbcf7c01fe71421c696a4857a966f9bfef9b))
+* **frontend:files:** enhance overwrite handling by updating MIME type on rename and improving file model consistency and UI visuals ([f68a073](https://github.com/Sync-in/server/commit/f68a07395487dd27779fa9ec52943ccbd7e1f722))
+* **frontend:files:** enhance text viewer with search panel toggle and keyboard shortcuts handling ([5b411f0](https://github.com/Sync-in/server/commit/5b411f084913ab2ece2d499d85e3fab3b1c26f29))
+* **frontend:files:** image viewer slideshow ([49bbd4e](https://github.com/Sync-in/server/commit/49bbd4e2ea325832e30a97b969b3043c8d294ebc))
+* **frontend:files:** improve text viewer with line wrapping, saving state, and enhanced search panel handling ([e5f0863](https://github.com/Sync-in/server/commit/e5f0863bbd921ef97879ff076475aaa46a21d051))
+* **frontend:files:** improve text viewer with save error handling and updated file upload logic ([034c7a4](https://github.com/Sync-in/server/commit/034c7a4db4961433c2d9223229edbee345f2ee67))
+* **frontend:files:** start implementing image viewer and folder slideshow ([7a65927](https://github.com/Sync-in/server/commit/7a65927bc3bcfee88372f0a913db68c0daa1f768))
+* **frontend:links:** update navigation to enter spaces and shares directly instead of selecting them ([fd64265](https://github.com/Sync-in/server/commit/fd6426566c0275daaf82dc4ae21809e6682b90b8))
+* **frontend:modals:** improve modal animations, lifecycle handling, and state management ([bad0696](https://github.com/Sync-in/server/commit/bad06964b65586b751ce0c9cd4e163d921828a63))
 
-* 🌍 **14 languages supported** — added 12 new ones: 🇩🇪 🇪🇸 🇵🇹 🇧🇷 🇮🇹 🇨🇳 🇮🇳 🇹🇷 🇯🇵 🇰🇷 🇵🇱 🇷🇺
-* ⚡ **Better suited for small systems** – reduced the default number of backend workers from **2 to 1** to improve memory efficiency on lightweight
-  setups (e.g. Raspberry Pi).
-* 🔍 **Indexing & search controls** — new config to enable/disable indexing, per-space toggles, and full-text search preferences.
-* 📊 **Quotas** — define storage quotas for external shares; storage from anchored external locations now counts toward the space’s total usage.
-* 🖼️ **Thumbnails** — photo thumbnail generation is now **3× faster**.
-* 🐳 **Docker** — minimized system dependencies for a **lighter and more efficient image**.
 
-➡️ [More details](https://sync-in.com/news/sync-in-server-1-8)
+### Bug Fixes
+
+* **backend:common:** prevent errors on invalid image metadata with `failOn: 'none'` option in sharp ([901fdf8](https://github.com/Sync-in/server/commit/901fdf8cf9ede111cd821363a2a28470c5d9d314))
+* **backend:files:** avoid copy failures when sample documents are read-only and files are written to a CIFS share by falling back to stream copy ([3b734b8](https://github.com/Sync-in/server/commit/3b734b82b8d02072aa09d941ffd7b911cfcf3950))
+* **backend:files:** correct `isDir` SQL logic to handle external paths without associated file IDs ([b3ce7d4](https://github.com/Sync-in/server/commit/b3ce7d4ae66556d455bc5d5495ed2fe070c15efc))
+* **backend:files:** correct directory flag and ensure consistent file move operation in trash handling ([e85ead7](https://github.com/Sync-in/server/commit/e85ead7e7f8a327466279af2d103d3a4d5644b80))
+* **backend:files:** enable `cacheControl` to ensure consistent client-side caching behavior ([25ab568](https://github.com/Sync-in/server/commit/25ab56808b7f4507a09c570bc7e7623077d5c594))
+* **backend:files:** ensure locks are visible on anchored and shared files ([6445333](https://github.com/Sync-in/server/commit/64453339e1ae7f4e8a8e8f061effbccaf5070aa6))
+* **backend:files:** set `maxAge` to 0 to enforce immediate cache invalidation ([293f34c](https://github.com/Sync-in/server/commit/293f34cb0e4bf7ac46bde6b4dc2a2432c57c04ec))
+* **backend:links:** restore access to anchored files from an external location when shared via a link ([f61f09f](https://github.com/Sync-in/server/commit/f61f09fdeefaff2492ae39423ef0958962562db3))
+* **backend:shares:** ensure correct file path for root space shares owned by user ([f5adb55](https://github.com/Sync-in/server/commit/f5adb55612622875ccfcb29ebcc754c974f186fd))
+* **backend:websocket:** prevent server connection from closing on shutdown hooks ([8714644](https://github.com/Sync-in/server/commit/8714644f4d6d35d8d9297bc2f47e2e3eed485938))
+* **frontend:drag:** prevent drag-and-drop actions in the shares list and ensure proper drag event handling ([f19ab4f](https://github.com/Sync-in/server/commit/f19ab4f7ed976d909cda323f1839d458a895ec3d))
+* **frontend:files:** sync read-only value with opening mode in the text editor ([dfff2dc](https://github.com/Sync-in/server/commit/dfff2dcf152e049e25a3f07f92a41ea4a8af4805))
+
+## [1.8.1](https://github.com/Sync-in/server/compare/v1.8.0...v1.8.1) (2025-10-30)
+
+### Bug Fixes
+
+* **backend:files:** lower PDF.js verbosity to reduce logging noise ([336fce8](https://github.com/Sync-in/server/commit/336fce8d6b9f2873c10bfaf3a7ca226eb3cb6069))
+* **backend:users:** handle graceful shutdown in WebSocket gateway to prevent new connections during app termination ([0f02820](https://github.com/Sync-in/server/commit/0f02820a291fd5764e928a00cd540514ddfc5ad3))
+* **backend:** update router options access to use `options.routerOptions` instead of deprecated `constraints` property (Fastify v6 compatibility) ([2d74512](https://github.com/Sync-in/server/commit/2d74512a800ba7d80e043679249ec98d3ab6f180))
+
+## [1.8.0](https://github.com/Sync-in/server/compare/v1.7.0...v1.8.0) (2025-10-26)
 
 ### Features
 

package/environment/environment.dist.yaml

@@ -19,10 +19,10 @@ logger:
   # stdout: if false logs are written to the run directory
   # default: `true`
   stdout: true
-  # colorize output
+  # Colorize output.
   # default: `true`
   colorize: true
-  # path to the log file used when stdout is set to false
+  # Path to the log file used when stdout is set to false
   filePath:
 mysql:
   # required
@@ -33,20 +33,20 @@ cache:
   # adapter: `mysql` | `redis`
   # default: `mysql`
   adapter: mysql
-  # ttl in seconds
+  # TTL in seconds
   # default: `60`
   ttl: 60
-  # redis adapter url
+  # Redis adapter url
   # default: `redis://127.0.0.1:6379`
   redis: redis://127.0.0.1:6379
 websocket:
   # adapter: `cluster` (Node.js Workers: default) | `redis`
   # default: `cluster`
   adapter: cluster
-  # cors origin allowed
+  # Cors origin allowed
   # default: `*`
   corsOrigin: '*'
-  # redis adapter url
+  # Redis adapter url
   # default: `redis://127.0.0.1:6379`
   redis: redis://127.0.0.1:6379
 mail:
@@ -59,9 +59,9 @@ mail:
   auth:
     user: user
     pass: password
-  # secure: defines if the connection should use SSL (if true) or not (if false)
-  # note: setting `secure: false` does not necessarily mean messages are sent in plaintext
-  # if the server supports STARTTLS, the connection is usually upgraded to TLS automatically
+  # Defines if the connection should use SSL (if true) or not (if false)
+  # Note: setting `secure: false` does not necessarily mean messages are sent in plaintext
+  # If the server supports STARTTLS, the connection is usually upgraded to TLS automatically
   # default: `false`
   secure: false
   # ignoreTLS: if true, disables the use of STARTTLS even if the server advertises it
@@ -70,28 +70,28 @@ mail:
   # rejectUnauthorized: reject the connection if the server's TLS certificate is invalid
   # default: false
   rejectUnauthorized: false
-  # enable logger
+  # Enable logger
   # default: `false`
   logger: false
-  # set log level to debug
+  # Set log level to debug
   # default: `false`
   debug: false
 auth:
   # adapter : `mysql` | `ldap`
   # default: `mysql`
   method: mysql
-  # key used to encrypt user secret keys in the database
-  # optional, but strongly recommended
-  # warning: do not change or remove the encryption key after MFA activation, or the codes will become invalid
+  # Key used to encrypt user secret keys in the database
+  # Optional but strongly recommended
+  # Warning: do not change or remove the encryption key after MFA activation, or the codes will become invalid
   encryptionKey: changeEncryptionKeyWithStrongKey
-  # multifactor authentication
+  # Multifactor authentication
   mfa:
-    # totp configuration
+    # TOTP configuration
     totp:
-      # enable TOTP authentication
+      # Enable TOTP authentication
       # default: true
       enabled: true
-      # name displayed in the authentication app (FreeOTP, Proton Authenticator, Aegis Authenticator etc.)
+      # Name displayed in the authentication app (FreeOTP, Proton Authenticator, Aegis Authenticator etc.)
       # default: Sync-in
       issuer: Sync-in
   # cookie sameSite setting: `lax` | `strict`
@@ -99,14 +99,14 @@ auth:
   cookieSameSite: strict
   token:
     access:
-      # used for token and cookie signatures
+      # Used for token and cookie signatures
       # required
       secret: changeAccessWithStrongSecret
       # token expiration = cookie maxAge
       # default: `30m`
       expiration: 30m
     refresh:
-      # used for token and cookie signatures
+      # Used for token and cookie signatures
       # required
       secret: changeRefreshWithStrongSecret
       # token expiration = cookie maxAge
@@ -120,10 +120,13 @@ auth:
     # filter, e.g: (acl=admin)
     filter:
     attributes:
-      # login attribute: `uid` | `sAMAccountName` | `userPrincipalName`, used to authenticate the user
+      # Login attribute used to construct the user's DN for binding.
+      # The value of this attribute is used as the naming attribute (first RDN) when forming the Distinguished Name (DN) during authentication
+      # login: `uid` | `cn` | `mail` | `sAMAccountName` | `userPrincipalName`, used to authenticate the user
       # default: `uid`
       login: uid
-      # email attribute: `mail` or `email`
+      # Attribute used to retrieve the user's email address
+      # email: `mail` or `email`
       # default: `mail`
       email: mail
     # adminGroup: The CN of a group containing Sync-in administrators (e.g., administrators)
@@ -148,14 +151,14 @@ applications:
       # enable onlyoffice integration
       # default: false
       enabled: false
-      # for an external server (e.g., https://onlyoffice.domain.com), remember the url must be accessible from browser !
-      # if externalServer is empty (case of official docker compose), we use the local instance
+      # For an external server (e.g., https://onlyoffice.domain.com), remember the url must be accessible from browser!
+      # If externalServer is empty (case of official docker compose), we use the local instance
       # default: null
       externalServer:
-      # secret used for jwt tokens, it must be the same on the onlyoffice server
+      # Secret used for jwt tokens, it must be the same on the onlyoffice server
       # required
       secret: onlyOfficeSecret
-      # if you use https, set to `true`
+      # If you use https, set to `true`.
       # default: `false`
       verifySSL: false
   appStore:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sync-in/server",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "The secure, open-source platform for file storage, sharing, collaboration, and sync",
   "author": {
     "name": "Johan Legrand",
@@ -74,35 +74,35 @@
   "dependencies": {
     "@fastify/cookie": "11.0.2",
     "@fastify/helmet": "13.0.2",
-    "@fastify/multipart": "9.2.1",
+    "@fastify/multipart": "9.3.0",
     "@fastify/send": "4.1.0",
     "@fastify/static": "8.3.0",
     "@knaadh/nestjs-drizzle-mysql2": "1.2.0",
     "@lukeed/ms": "2.0.2",
     "@nestjs/axios": "4.0.1",
-    "@nestjs/common": "11.1.7",
+    "@nestjs/common": "11.1.9",
     "@nestjs/config": "4.0.2",
-    "@nestjs/core": "11.1.7",
+    "@nestjs/core": "11.1.9",
     "@nestjs/jwt": "11.0.1",
     "@nestjs/passport": "11.0.5",
-    "@nestjs/platform-fastify": "11.1.7",
-    "@nestjs/platform-socket.io": "11.1.7",
+    "@nestjs/platform-fastify": "11.1.9",
+    "@nestjs/platform-socket.io": "11.1.9",
     "@nestjs/schedule": "6.0.1",
-    "@nestjs/websockets": "11.1.7",
-    "@resvg/resvg-js": "2.6.2",
+    "@nestjs/websockets": "11.1.9",
     "@socket.io/cluster-adapter": "0.3.0",
     "@socket.io/redis-adapter": "8.3.0",
+    "@types/text-to-svg": "3.1.4",
     "archiver": "7.0.1",
-    "bcryptjs": "3.0.2",
+    "bcryptjs": "3.0.3",
     "class-transformer": "0.5.1",
     "class-validator": "0.14.2",
     "deepmerge": "4.3.1",
-    "drizzle-kit": "0.31.5",
+    "drizzle-kit": "0.31.7",
     "drizzle-orm": "0.44.7",
-    "fast-xml-parser": "5.3.0",
+    "fast-xml-parser": "5.3.2",
     "fs-extra": "11.3.2",
     "html-to-text": "9.0.5",
-    "js-yaml": "4.1.0",
+    "js-yaml": "4.1.1",
     "ldapts": "8.0.9",
     "mime-types": "3.0.1",
     "mysql2": "3.15.3",
@@ -112,15 +112,16 @@
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
     "passport": "0.7.0",
-    "pdfjs-dist": "5.4.296",
     "pino-pretty": "13.1.2",
     "qrcode-generator": "2.0.4",
-    "redis": "5.9.0",
-    "sax": "1.4.1",
-    "sharp": "0.34.4",
+    "redis": "5.10.0",
+    "sax": "1.4.3",
+    "sharp": "0.34.5",
     "socket.io": "4.8.1",
-    "tar": "7.5.1",
+    "tar": "7.5.2",
+    "text-to-svg": "3.1.5",
     "time2fa": "1.4.2",
+    "unpdf": "1.4.0",
     "yauzl": "3.2.0"
   }
 }

package/server/app.bootstrap.js

@@ -35,8 +35,10 @@ async function appBootstrap() {
     /* APP */ const fastifyAdapter = new _platformfastify.FastifyAdapter({
         logger: false,
         trustProxy: _configenvironment.configuration.server.trustProxy,
-        ignoreTrailingSlash: true,
-        maxParamLength: 256,
+        routerOptions: {
+            ignoreTrailingSlash: true,
+            maxParamLength: 256
+        },
         bodyLimit: 26214400 /* 25 MB */ 
     });
     const app = await _core.NestFactory.create(_appmodule.AppModule, fastifyAdapter, {

package/server/app.bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../backend/src/app.bootstrap.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport fastifyCookie from '@fastify/cookie'\nimport fastifyHelmet from '@fastify/helmet'\nimport multipart from '@fastify/multipart'\nimport { ClassSerializerInterceptor, ValidationPipe } from '@nestjs/common'\nimport { NestFactory, Reflector } from '@nestjs/core'\nimport { FastifyAdapter, NestFastifyApplication } from '@nestjs/platform-fastify'\nimport { FastifyRequest } from 'fastify'\nimport { Logger, LoggerErrorInterceptor } from 'nestjs-pino'\nimport { CONTENT_SECURITY_POLICY } from './app.constants'\nimport { AppModule } from './app.module'\nimport { HTTP_WEBDAV_METHOD } from './applications/applications.constants'\nimport { WEBDAV_NS, WEBDAV_SPACES } from './applications/webdav/constants/routes'\nimport { IS_TEST_ENV, STATIC_PATH } from './configuration/config.constants'\nimport { configuration } from './configuration/config.environment'\nimport { WebSocketAdapter } from './infrastructure/websocket/adapters/web-socket.adapter'\n\nexport async function appBootstrap(): Promise<NestFastifyApplication> {\n  /* APP */\n  const fastifyAdapter = new FastifyAdapter({\n    logger: false,\n    trustProxy: configuration.server.trustProxy,\n    ignoreTrailingSlash: true,\n    maxParamLength: 256,\n    bodyLimit: 26214400 /* 25 MB */\n  })\n  const app: NestFastifyApplication = await NestFactory.create<NestFastifyApplication>(AppModule, fastifyAdapter, {\n    bufferLogs: true\n  })\n\n  /* NestJS starts listening for shutdown hooks */\n  app.enableShutdownHooks()\n\n  /* Fastify instance */\n  const fastifyInstance = fastifyAdapter.getInstance()\n\n  /* LOGGER */\n  app.useLogger(IS_TEST_ENV ? ['fatal'] : app.get(Logger))\n\n  /* PARSER */\n  // xml body parser is used for webdav methods\n  app.useBodyParser(['application/xml', 'text/xml'])\n  // add webdav methods\n  for (const method of Object.values(HTTP_WEBDAV_METHOD)) {\n    fastifyInstance.addHttpMethod(method, { hasBody: true })\n  }\n  // '*' body parser allow binary data as stream (unlimited body size)\n  fastifyInstance.addContentTypeParser('*', { bodyLimit: 0 }, (_req: FastifyRequest, _payload: FastifyRequest['raw'], done) => done(null))\n\n  // Joplin clients send incorrect `Content-Type` headers when syncing over WebDAV (issue: https://github.com/laurent22/joplin/issues/122499)\n  // This hook intercepts matching requests and sets `application/octet-stream` to ensure compatibility and successful sync.\n  // todo: remove it when fixed on Joplin side\n  fastifyInstance.addHook('onRequest', async (req, _reply) => {\n    if ((req.headers['user-agent'] || '').indexOf('Joplin') !== -1 && req.originalUrl.startsWith(WEBDAV_SPACES[WEBDAV_NS.WEBDAV].route)) {\n      req.headers['content-type'] = 'application/octet-stream'\n    }\n  })\n\n  /* INTERCEPTORS */\n  app.useGlobalInterceptors(\n    new LoggerErrorInterceptor(),\n    new ClassSerializerInterceptor(app.get(Reflector), {\n      excludePrefixes: ['_']\n    })\n  )\n  /* VALIDATION */\n  app.useGlobalPipes(new ValidationPipe({ transform: true, whitelist: true }))\n\n  /* STATIC */\n  app.useStaticAssets({ root: STATIC_PATH, prefixAvoidTrailingSlash: true })\n\n  /* SECURITY */\n  await app.register(fastifyHelmet, { contentSecurityPolicy: CONTENT_SECURITY_POLICY(configuration.applications.files.onlyoffice.externalServer) })\n\n  /* COOKIES */\n  // we use csrf secret to unsign csrf cookie\n  await app.register(fastifyCookie, {\n    secret: configuration.auth.token.csrf.secret,\n    parseOptions: {\n      secure: 'auto',\n      sameSite: configuration.auth.cookieSameSite,\n      httpOnly: true\n    }\n  })\n\n  /* UPLOAD */\n  await app.register(multipart, {\n    preservePath: true,\n    limits: { parts: Infinity, fileSize: configuration.applications.files.maxUploadSize }\n  })\n\n  /* WEBSOCKET */\n  if (!IS_TEST_ENV) {\n    const webSocketAdapter = new WebSocketAdapter(app)\n    await webSocketAdapter.initAdapter()\n    app.useWebSocketAdapter(webSocketAdapter)\n  }\n\n  return app\n}\n"],"names":["appBootstrap","fastifyAdapter","FastifyAdapter","logger","trustProxy","configuration","server","ignoreTrailingSlash","maxParamLength","bodyLimit","app","NestFactory","create","AppModule","bufferLogs","enableShutdownHooks","fastifyInstance","getInstance","useLogger","IS_TEST_ENV","get","Logger","useBodyParser","method","Object","values","HTTP_WEBDAV_METHOD","addHttpMethod","hasBody","addContentTypeParser","_req","_payload","done","addHook","req","_reply","headers","indexOf","originalUrl","startsWith","WEBDAV_SPACES","WEBDAV_NS","WEBDAV","route","useGlobalInterceptors","LoggerErrorInterceptor","ClassSerializerInterceptor","Reflector","excludePrefixes","useGlobalPipes","ValidationPipe","transform","whitelist","useStaticAssets","root","STATIC_PATH","prefixAvoidTrailingSlash","register","fastifyHelmet","contentSecurityPolicy","CONTENT_SECURITY_POLICY","applications","files","onlyoffice","externalServer","fastifyCookie","secret","auth","token","csrf","parseOptions","secure","sameSite","cookieSameSite","httpOnly","multipart","preservePath","limits","parts","Infinity","fileSize","maxUploadSize","webSocketAdapter","WebSocketAdapter","initAdapter","useWebSocketAdapter"],"mappings":"AAAA;;;;CAIC;;;;+BAkBqBA;;;eAAAA;;;+DAhBI;+DACA;kEACJ;wBACqC;sBACpB;iCACgB;4BAER;8BACP;2BACd;uCACS;wBACM;iCACA;mCACX;kCACG;;;;;;AAE1B,eAAeA;IACpB,OAAO,GACP,MAAMC,iBAAiB,IAAIC,+BAAc,CAAC;QACxCC,QAAQ;QACRC,YAAYC,gCAAa,CAACC,MAAM,CAACF,UAAU;QAC3CG,qBAAqB;QACrBC,gBAAgB;QAChBC,WAAW,SAAS,SAAS;IAC/B;IACA,MAAMC,MAA8B,MAAMC,iBAAW,CAACC,MAAM,CAAyBC,oBAAS,EAAEZ,gBAAgB;QAC9Ga,YAAY;IACd;IAEA,8CAA8C,GAC9CJ,IAAIK,mBAAmB;IAEvB,oBAAoB,GACpB,MAAMC,kBAAkBf,eAAegB,WAAW;IAElD,UAAU,GACVP,IAAIQ,SAAS,CAACC,4BAAW,GAAG;QAAC;KAAQ,GAAGT,IAAIU,GAAG,CAACC,kBAAM;IAEtD,UAAU,GACV,6CAA6C;IAC7CX,IAAIY,aAAa,CAAC;QAAC;QAAmB;KAAW;IACjD,qBAAqB;IACrB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAACC,yCAAkB,EAAG;QACtDV,gBAAgBW,aAAa,CAACJ,QAAQ;YAAEK,SAAS;QAAK;IACxD;IACA,oEAAoE;IACpEZ,gBAAgBa,oBAAoB,CAAC,KAAK;QAAEpB,WAAW;IAAE,GAAG,CAACqB,MAAsBC,UAAiCC,OAASA,KAAK;IAElI,2IAA2I;IAC3I,0HAA0H;IAC1H,4CAA4C;IAC5ChB,gBAAgBiB,OAAO,CAAC,aAAa,OAAOC,KAAKC;QAC/C,IAAI,AAACD,CAAAA,IAAIE,OAAO,CAAC,aAAa,IAAI,EAAC,EAAGC,OAAO,CAAC,cAAc,CAAC,KAAKH,IAAII,WAAW,CAACC,UAAU,CAACC,qBAAa,CAACC,iBAAS,CAACC,MAAM,CAAC,CAACC,KAAK,GAAG;YACnIT,IAAIE,OAAO,CAAC,eAAe,GAAG;QAChC;IACF;IAEA,gBAAgB,GAChB1B,IAAIkC,qBAAqB,CACvB,IAAIC,kCAAsB,IAC1B,IAAIC,kCAA0B,CAACpC,IAAIU,GAAG,CAAC2B,eAAS,GAAG;QACjDC,iBAAiB;YAAC;SAAI;IACxB;IAEF,cAAc,GACdtC,IAAIuC,cAAc,CAAC,IAAIC,sBAAc,CAAC;QAAEC,WAAW;QAAMC,WAAW;IAAK;IAEzE,UAAU,GACV1C,IAAI2C,eAAe,CAAC;QAAEC,MAAMC,4BAAW;QAAEC,0BAA0B;IAAK;IAExE,YAAY,GACZ,MAAM9C,IAAI+C,QAAQ,CAACC,eAAa,EAAE;QAAEC,uBAAuBC,IAAAA,qCAAuB,EAACvD,gCAAa,CAACwD,YAAY,CAACC,KAAK,CAACC,UAAU,CAACC,cAAc;IAAE;IAE/I,WAAW,GACX,2CAA2C;IAC3C,MAAMtD,IAAI+C,QAAQ,CAACQ,eAAa,EAAE;QAChCC,QAAQ7D,gCAAa,CAAC8D,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,MAAM;QAC5CI,cAAc;YACZC,QAAQ;YACRC,UAAUnE,gCAAa,CAAC8D,IAAI,CAACM,cAAc;YAC3CC,UAAU;QACZ;IACF;IAEA,UAAU,GACV,MAAMhE,IAAI+C,QAAQ,CAACkB,kBAAS,EAAE;QAC5BC,cAAc;QACdC,QAAQ;YAAEC,OAAOC;YAAUC,UAAU3E,gCAAa,CAACwD,YAAY,CAACC,KAAK,CAACmB,aAAa;QAAC;IACtF;IAEA,aAAa,GACb,IAAI,CAAC9D,4BAAW,EAAE;QAChB,MAAM+D,mBAAmB,IAAIC,kCAAgB,CAACzE;QAC9C,MAAMwE,iBAAiBE,WAAW;QAClC1E,IAAI2E,mBAAmB,CAACH;IAC1B;IAEA,OAAOxE;AACT"}
+{"version":3,"sources":["../../backend/src/app.bootstrap.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport fastifyCookie from '@fastify/cookie'\nimport fastifyHelmet from '@fastify/helmet'\nimport multipart from '@fastify/multipart'\nimport { ClassSerializerInterceptor, ValidationPipe } from '@nestjs/common'\nimport { NestFactory, Reflector } from '@nestjs/core'\nimport { FastifyAdapter, NestFastifyApplication } from '@nestjs/platform-fastify'\nimport { FastifyRequest } from 'fastify'\nimport { Logger, LoggerErrorInterceptor } from 'nestjs-pino'\nimport { CONTENT_SECURITY_POLICY } from './app.constants'\nimport { AppModule } from './app.module'\nimport { HTTP_WEBDAV_METHOD } from './applications/applications.constants'\nimport { WEBDAV_NS, WEBDAV_SPACES } from './applications/webdav/constants/routes'\nimport { IS_TEST_ENV, STATIC_PATH } from './configuration/config.constants'\nimport { configuration } from './configuration/config.environment'\nimport { WebSocketAdapter } from './infrastructure/websocket/adapters/web-socket.adapter'\n\nexport async function appBootstrap(): Promise<NestFastifyApplication> {\n  /* APP */\n  const fastifyAdapter = new FastifyAdapter({\n    logger: false,\n    trustProxy: configuration.server.trustProxy,\n    routerOptions: {\n      ignoreTrailingSlash: true,\n      maxParamLength: 256\n    },\n    bodyLimit: 26214400 /* 25 MB */\n  })\n  const app: NestFastifyApplication = await NestFactory.create<NestFastifyApplication>(AppModule, fastifyAdapter, {\n    bufferLogs: true\n  })\n\n  /* NestJS starts listening for shutdown hooks */\n  app.enableShutdownHooks()\n\n  /* Fastify instance */\n  const fastifyInstance = fastifyAdapter.getInstance()\n\n  /* LOGGER */\n  app.useLogger(IS_TEST_ENV ? ['fatal'] : app.get(Logger))\n\n  /* PARSER */\n  // xml body parser is used for webdav methods\n  app.useBodyParser(['application/xml', 'text/xml'])\n  // add webdav methods\n  for (const method of Object.values(HTTP_WEBDAV_METHOD)) {\n    fastifyInstance.addHttpMethod(method, { hasBody: true })\n  }\n  // '*' body parser allow binary data as stream (unlimited body size)\n  fastifyInstance.addContentTypeParser('*', { bodyLimit: 0 }, (_req: FastifyRequest, _payload: FastifyRequest['raw'], done) => done(null))\n\n  // Joplin clients send incorrect `Content-Type` headers when syncing over WebDAV (issue: https://github.com/laurent22/joplin/issues/122499)\n  // This hook intercepts matching requests and sets `application/octet-stream` to ensure compatibility and successful sync.\n  // todo: remove it when fixed on Joplin side\n  fastifyInstance.addHook('onRequest', async (req, _reply) => {\n    if ((req.headers['user-agent'] || '').indexOf('Joplin') !== -1 && req.originalUrl.startsWith(WEBDAV_SPACES[WEBDAV_NS.WEBDAV].route)) {\n      req.headers['content-type'] = 'application/octet-stream'\n    }\n  })\n\n  /* INTERCEPTORS */\n  app.useGlobalInterceptors(\n    new LoggerErrorInterceptor(),\n    new ClassSerializerInterceptor(app.get(Reflector), {\n      excludePrefixes: ['_']\n    })\n  )\n  /* VALIDATION */\n  app.useGlobalPipes(new ValidationPipe({ transform: true, whitelist: true }))\n\n  /* STATIC */\n  app.useStaticAssets({ root: STATIC_PATH, prefixAvoidTrailingSlash: true })\n\n  /* SECURITY */\n  await app.register(fastifyHelmet, { contentSecurityPolicy: CONTENT_SECURITY_POLICY(configuration.applications.files.onlyoffice.externalServer) })\n\n  /* COOKIES */\n  // we use csrf secret to unsign csrf cookie\n  await app.register(fastifyCookie, {\n    secret: configuration.auth.token.csrf.secret,\n    parseOptions: {\n      secure: 'auto',\n      sameSite: configuration.auth.cookieSameSite,\n      httpOnly: true\n    }\n  })\n\n  /* UPLOAD */\n  await app.register(multipart, {\n    preservePath: true,\n    limits: { parts: Infinity, fileSize: configuration.applications.files.maxUploadSize }\n  })\n\n  /* WEBSOCKET */\n  if (!IS_TEST_ENV) {\n    const webSocketAdapter = new WebSocketAdapter(app)\n    await webSocketAdapter.initAdapter()\n    app.useWebSocketAdapter(webSocketAdapter)\n  }\n\n  return app\n}\n"],"names":["appBootstrap","fastifyAdapter","FastifyAdapter","logger","trustProxy","configuration","server","routerOptions","ignoreTrailingSlash","maxParamLength","bodyLimit","app","NestFactory","create","AppModule","bufferLogs","enableShutdownHooks","fastifyInstance","getInstance","useLogger","IS_TEST_ENV","get","Logger","useBodyParser","method","Object","values","HTTP_WEBDAV_METHOD","addHttpMethod","hasBody","addContentTypeParser","_req","_payload","done","addHook","req","_reply","headers","indexOf","originalUrl","startsWith","WEBDAV_SPACES","WEBDAV_NS","WEBDAV","route","useGlobalInterceptors","LoggerErrorInterceptor","ClassSerializerInterceptor","Reflector","excludePrefixes","useGlobalPipes","ValidationPipe","transform","whitelist","useStaticAssets","root","STATIC_PATH","prefixAvoidTrailingSlash","register","fastifyHelmet","contentSecurityPolicy","CONTENT_SECURITY_POLICY","applications","files","onlyoffice","externalServer","fastifyCookie","secret","auth","token","csrf","parseOptions","secure","sameSite","cookieSameSite","httpOnly","multipart","preservePath","limits","parts","Infinity","fileSize","maxUploadSize","webSocketAdapter","WebSocketAdapter","initAdapter","useWebSocketAdapter"],"mappings":"AAAA;;;;CAIC;;;;+BAkBqBA;;;eAAAA;;;+DAhBI;+DACA;kEACJ;wBACqC;sBACpB;iCACgB;4BAER;8BACP;2BACd;uCACS;wBACM;iCACA;mCACX;kCACG;;;;;;AAE1B,eAAeA;IACpB,OAAO,GACP,MAAMC,iBAAiB,IAAIC,+BAAc,CAAC;QACxCC,QAAQ;QACRC,YAAYC,gCAAa,CAACC,MAAM,CAACF,UAAU;QAC3CG,eAAe;YACbC,qBAAqB;YACrBC,gBAAgB;QAClB;QACAC,WAAW,SAAS,SAAS;IAC/B;IACA,MAAMC,MAA8B,MAAMC,iBAAW,CAACC,MAAM,CAAyBC,oBAAS,EAAEb,gBAAgB;QAC9Gc,YAAY;IACd;IAEA,8CAA8C,GAC9CJ,IAAIK,mBAAmB;IAEvB,oBAAoB,GACpB,MAAMC,kBAAkBhB,eAAeiB,WAAW;IAElD,UAAU,GACVP,IAAIQ,SAAS,CAACC,4BAAW,GAAG;QAAC;KAAQ,GAAGT,IAAIU,GAAG,CAACC,kBAAM;IAEtD,UAAU,GACV,6CAA6C;IAC7CX,IAAIY,aAAa,CAAC;QAAC;QAAmB;KAAW;IACjD,qBAAqB;IACrB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAACC,yCAAkB,EAAG;QACtDV,gBAAgBW,aAAa,CAACJ,QAAQ;YAAEK,SAAS;QAAK;IACxD;IACA,oEAAoE;IACpEZ,gBAAgBa,oBAAoB,CAAC,KAAK;QAAEpB,WAAW;IAAE,GAAG,CAACqB,MAAsBC,UAAiCC,OAASA,KAAK;IAElI,2IAA2I;IAC3I,0HAA0H;IAC1H,4CAA4C;IAC5ChB,gBAAgBiB,OAAO,CAAC,aAAa,OAAOC,KAAKC;QAC/C,IAAI,AAACD,CAAAA,IAAIE,OAAO,CAAC,aAAa,IAAI,EAAC,EAAGC,OAAO,CAAC,cAAc,CAAC,KAAKH,IAAII,WAAW,CAACC,UAAU,CAACC,qBAAa,CAACC,iBAAS,CAACC,MAAM,CAAC,CAACC,KAAK,GAAG;YACnIT,IAAIE,OAAO,CAAC,eAAe,GAAG;QAChC;IACF;IAEA,gBAAgB,GAChB1B,IAAIkC,qBAAqB,CACvB,IAAIC,kCAAsB,IAC1B,IAAIC,kCAA0B,CAACpC,IAAIU,GAAG,CAAC2B,eAAS,GAAG;QACjDC,iBAAiB;YAAC;SAAI;IACxB;IAEF,cAAc,GACdtC,IAAIuC,cAAc,CAAC,IAAIC,sBAAc,CAAC;QAAEC,WAAW;QAAMC,WAAW;IAAK;IAEzE,UAAU,GACV1C,IAAI2C,eAAe,CAAC;QAAEC,MAAMC,4BAAW;QAAEC,0BAA0B;IAAK;IAExE,YAAY,GACZ,MAAM9C,IAAI+C,QAAQ,CAACC,eAAa,EAAE;QAAEC,uBAAuBC,IAAAA,qCAAuB,EAACxD,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACC,UAAU,CAACC,cAAc;IAAE;IAE/I,WAAW,GACX,2CAA2C;IAC3C,MAAMtD,IAAI+C,QAAQ,CAACQ,eAAa,EAAE;QAChCC,QAAQ9D,gCAAa,CAAC+D,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,MAAM;QAC5CI,cAAc;YACZC,QAAQ;YACRC,UAAUpE,gCAAa,CAAC+D,IAAI,CAACM,cAAc;YAC3CC,UAAU;QACZ;IACF;IAEA,UAAU,GACV,MAAMhE,IAAI+C,QAAQ,CAACkB,kBAAS,EAAE;QAC5BC,cAAc;QACdC,QAAQ;YAAEC,OAAOC;YAAUC,UAAU5E,gCAAa,CAACyD,YAAY,CAACC,KAAK,CAACmB,aAAa;QAAC;IACtF;IAEA,aAAa,GACb,IAAI,CAAC9D,4BAAW,EAAE;QAChB,MAAM+D,mBAAmB,IAAIC,kCAAgB,CAACzE;QAC9C,MAAMwE,iBAAiBE,WAAW;QAClC1E,IAAI2E,mBAAmB,CAACH;IAC1B;IAEA,OAAOxE;AACT"}

package/server/app.constants.js

@@ -18,8 +18,17 @@ _export(exports, {
     },
     get CONTENT_SECURITY_POLICY () {
         return CONTENT_SECURITY_POLICY;
+    },
+    get USER_AGENT () {
+        return USER_AGENT;
+    },
+    get VERSION () {
+        return VERSION;
     }
 });
+const _packagejson = require("../../package.json");
+const VERSION = _packagejson.version;
+const USER_AGENT = `sync-in-server/${_packagejson.version}`;
 const CONTENT_SECURITY_POLICY = (onlyOfficeServer)=>({
         useDefaults: false,
         directives: {

package/server/app.constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../backend/src/app.constants.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport const CONTENT_SECURITY_POLICY = (onlyOfficeServer: string) => ({\n  useDefaults: false,\n  directives: {\n    defaultSrc: [\"'self'\", onlyOfficeServer || ''],\n    scriptSrc: [\"'self'\", \"'unsafe-inline'\", onlyOfficeServer || ''],\n    styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n    imgSrc: [\"'self'\", 'data:'],\n    fontSrc: [\"'self'\"]\n  }\n})\n\nexport const CONNECT_ERROR_CODE = new Set(['ECONNREFUSED', 'ETIMEDOUT', 'ENOTFOUND'])\n"],"names":["CONNECT_ERROR_CODE","CONTENT_SECURITY_POLICY","onlyOfficeServer","useDefaults","directives","defaultSrc","scriptSrc","styleSrc","imgSrc","fontSrc","Set"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAaYA;eAAAA;;QAXAC;eAAAA;;;AAAN,MAAMA,0BAA0B,CAACC,mBAA8B,CAAA;QACpEC,aAAa;QACbC,YAAY;YACVC,YAAY;gBAAC;gBAAUH,oBAAoB;aAAG;YAC9CI,WAAW;gBAAC;gBAAU;gBAAmBJ,oBAAoB;aAAG;YAChEK,UAAU;gBAAC;gBAAU;aAAkB;YACvCC,QAAQ;gBAAC;gBAAU;aAAQ;YAC3BC,SAAS;gBAAC;aAAS;QACrB;IACF,CAAA;AAEO,MAAMT,qBAAqB,IAAIU,IAAI;IAAC;IAAgB;IAAa;CAAY"}
+{"version":3,"sources":["../../backend/src/app.constants.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\nimport { version } from '../../package.json'\n\nexport const VERSION = version\nexport const USER_AGENT = `sync-in-server/${version}`\nexport const CONTENT_SECURITY_POLICY = (onlyOfficeServer: string) => ({\n  useDefaults: false,\n  directives: {\n    defaultSrc: [\"'self'\", onlyOfficeServer || ''],\n    scriptSrc: [\"'self'\", \"'unsafe-inline'\", onlyOfficeServer || ''],\n    styleSrc: [\"'self'\", \"'unsafe-inline'\"],\n    imgSrc: [\"'self'\", 'data:'],\n    fontSrc: [\"'self'\"]\n  }\n})\n\nexport const CONNECT_ERROR_CODE = new Set(['ECONNREFUSED', 'ETIMEDOUT', 'ENOTFOUND'])\n"],"names":["CONNECT_ERROR_CODE","CONTENT_SECURITY_POLICY","USER_AGENT","VERSION","version","onlyOfficeServer","useDefaults","directives","defaultSrc","scriptSrc","styleSrc","imgSrc","fontSrc","Set"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAgBYA;eAAAA;;QAXAC;eAAAA;;QADAC;eAAAA;;QADAC;eAAAA;;;6BAFW;AAEjB,MAAMA,UAAUC,oBAAO;AACvB,MAAMF,aAAa,CAAC,eAAe,EAAEE,oBAAO,EAAE;AAC9C,MAAMH,0BAA0B,CAACI,mBAA8B,CAAA;QACpEC,aAAa;QACbC,YAAY;YACVC,YAAY;gBAAC;gBAAUH,oBAAoB;aAAG;YAC9CI,WAAW;gBAAC;gBAAU;gBAAmBJ,oBAAoB;aAAG;YAChEK,UAAU;gBAAC;gBAAU;aAAkB;YACvCC,QAAQ;gBAAC;gBAAU;aAAQ;YAC3BC,SAAS;gBAAC;aAAS;QACrB;IACF,CAAA;AAEO,MAAMZ,qBAAqB,IAAIa,IAAI;IAAC;IAAgB;IAAa;CAAY"}

package/server/app.module.js

@@ -16,6 +16,7 @@ const _axios = require("@nestjs/axios");
 const _common = require("@nestjs/common");
 const _config = require("@nestjs/config");
 const _nestjspino = require("nestjs-pino");
+const _appconstants = require("./app.constants");
 const _appservice = require("./app.service");
 const _applicationsmodule = require("./applications/applications.module");
 const _authmodule = require("./authentication/auth.module");
@@ -59,6 +60,9 @@ AppModule = _ts_decorate([
             _applicationsmodule.ApplicationsModule,
             _axios.HttpModule.register({
                 global: true,
+                headers: {
+                    'User-Agent': _appconstants.USER_AGENT
+                },
                 timeout: 5000,
                 maxRedirects: 5
             })

package/server/app.module.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../backend/src/app.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { HttpModule } from '@nestjs/axios'\nimport { Module } from '@nestjs/common'\nimport { ConfigModule } from '@nestjs/config'\nimport { LoggerModule } from 'nestjs-pino'\nimport { AppService } from './app.service'\nimport { ApplicationsModule } from './applications/applications.module'\nimport { AuthModule } from './authentication/auth.module'\nimport { configuration, exportConfiguration } from './configuration/config.environment'\nimport { configLogger } from './configuration/config.logger'\nimport { CacheModule } from './infrastructure/cache/cache.module'\nimport { ContextModule } from './infrastructure/context/context.module'\nimport { DatabaseModule } from './infrastructure/database/database.module'\nimport { MailerModule } from './infrastructure/mailer/mailer.module'\nimport { SchedulerModule } from './infrastructure/scheduler/scheduler.module'\n\n@Module({\n  imports: [\n    ConfigModule.forRoot({ load: [exportConfiguration], validatePredefined: false, ignoreEnvFile: true, isGlobal: true }),\n    LoggerModule.forRootAsync({\n      useFactory: async () => ({\n        pinoHttp: configLogger(configuration.logger)\n      })\n    }),\n    AuthModule,\n    DatabaseModule,\n    CacheModule,\n    MailerModule,\n    ContextModule,\n    SchedulerModule.register(),\n    ApplicationsModule,\n    HttpModule.register({\n      global: true,\n      timeout: 5000,\n      maxRedirects: 5\n    })\n  ],\n  providers: [AppService]\n})\nexport class AppModule {}\n"],"names":["AppModule","imports","ConfigModule","forRoot","load","exportConfiguration","validatePredefined","ignoreEnvFile","isGlobal","LoggerModule","forRootAsync","useFactory","pinoHttp","configLogger","configuration","logger","AuthModule","DatabaseModule","CacheModule","MailerModule","ContextModule","SchedulerModule","register","ApplicationsModule","HttpModule","global","timeout","maxRedirects","providers","AppService"],"mappings":"AAAA;;;;CAIC;;;;+BAwCYA;;;eAAAA;;;uBAtCc;wBACJ;wBACM;4BACA;4BACF;oCACQ;4BACR;mCACwB;8BACtB;6BACD;+BACE;gCACC;8BACF;iCACG;;;;;;;AAyBzB,IAAA,AAAMA,YAAN,MAAMA;AAAW;;;QAtBtBC,SAAS;YACPC,oBAAY,CAACC,OAAO,CAAC;gBAAEC,MAAM;oBAACC,sCAAmB;iBAAC;gBAAEC,oBAAoB;gBAAOC,eAAe;gBAAMC,UAAU;YAAK;YACnHC,wBAAY,CAACC,YAAY,CAAC;gBACxBC,YAAY,UAAa,CAAA;wBACvBC,UAAUC,IAAAA,0BAAY,EAACC,gCAAa,CAACC,MAAM;oBAC7C,CAAA;YACF;YACAC,sBAAU;YACVC,8BAAc;YACdC,wBAAW;YACXC,0BAAY;YACZC,4BAAa;YACbC,gCAAe,CAACC,QAAQ;YACxBC,sCAAkB;YAClBC,iBAAU,CAACF,QAAQ,CAAC;gBAClBG,QAAQ;gBACRC,SAAS;gBACTC,cAAc;YAChB;SACD;QACDC,WAAW;YAACC,sBAAU;SAAC"}
+{"version":3,"sources":["../../backend/src/app.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { HttpModule } from '@nestjs/axios'\nimport { Module } from '@nestjs/common'\nimport { ConfigModule } from '@nestjs/config'\nimport { LoggerModule } from 'nestjs-pino'\nimport { USER_AGENT } from './app.constants'\nimport { AppService } from './app.service'\nimport { ApplicationsModule } from './applications/applications.module'\nimport { AuthModule } from './authentication/auth.module'\nimport { configuration, exportConfiguration } from './configuration/config.environment'\nimport { configLogger } from './configuration/config.logger'\nimport { CacheModule } from './infrastructure/cache/cache.module'\nimport { ContextModule } from './infrastructure/context/context.module'\nimport { DatabaseModule } from './infrastructure/database/database.module'\nimport { MailerModule } from './infrastructure/mailer/mailer.module'\nimport { SchedulerModule } from './infrastructure/scheduler/scheduler.module'\n\n@Module({\n  imports: [\n    ConfigModule.forRoot({ load: [exportConfiguration], validatePredefined: false, ignoreEnvFile: true, isGlobal: true }),\n    LoggerModule.forRootAsync({\n      useFactory: async () => ({\n        pinoHttp: configLogger(configuration.logger)\n      })\n    }),\n    AuthModule,\n    DatabaseModule,\n    CacheModule,\n    MailerModule,\n    ContextModule,\n    SchedulerModule.register(),\n    ApplicationsModule,\n    HttpModule.register({\n      global: true,\n      headers: {\n        'User-Agent': USER_AGENT\n      },\n      timeout: 5000,\n      maxRedirects: 5\n    })\n  ],\n  providers: [AppService]\n})\nexport class AppModule {}\n"],"names":["AppModule","imports","ConfigModule","forRoot","load","exportConfiguration","validatePredefined","ignoreEnvFile","isGlobal","LoggerModule","forRootAsync","useFactory","pinoHttp","configLogger","configuration","logger","AuthModule","DatabaseModule","CacheModule","MailerModule","ContextModule","SchedulerModule","register","ApplicationsModule","HttpModule","global","headers","USER_AGENT","timeout","maxRedirects","providers","AppService"],"mappings":"AAAA;;;;CAIC;;;;+BA4CYA;;;eAAAA;;;uBA1Cc;wBACJ;wBACM;4BACA;8BACF;4BACA;oCACQ;4BACR;mCACwB;8BACtB;6BACD;+BACE;gCACC;8BACF;iCACG;;;;;;;AA4BzB,IAAA,AAAMA,YAAN,MAAMA;AAAW;;;QAzBtBC,SAAS;YACPC,oBAAY,CAACC,OAAO,CAAC;gBAAEC,MAAM;oBAACC,sCAAmB;iBAAC;gBAAEC,oBAAoB;gBAAOC,eAAe;gBAAMC,UAAU;YAAK;YACnHC,wBAAY,CAACC,YAAY,CAAC;gBACxBC,YAAY,UAAa,CAAA;wBACvBC,UAAUC,IAAAA,0BAAY,EAACC,gCAAa,CAACC,MAAM;oBAC7C,CAAA;YACF;YACAC,sBAAU;YACVC,8BAAc;YACdC,wBAAW;YACXC,0BAAY;YACZC,4BAAa;YACbC,gCAAe,CAACC,QAAQ;YACxBC,sCAAkB;YAClBC,iBAAU,CAACF,QAAQ,CAAC;gBAClBG,QAAQ;gBACRC,SAAS;oBACP,cAAcC,wBAAU;gBAC1B;gBACAC,SAAS;gBACTC,cAAc;YAChB;SACD;QACDC,WAAW;YAACC,sBAAU;SAAC"}

package/server/applications/admin/admin.module.js

@@ -13,6 +13,8 @@ Object.defineProperty(exports, "AdminModule", {
     }
 });
 const _common = require("@nestjs/common");
+const _adminschedulerservice = require("./services/admin-scheduler.service");
+const _adminservice = require("./services/admin.service");
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -24,7 +26,10 @@ let AdminModule = class AdminModule {
 AdminModule = _ts_decorate([
     (0, _common.Module)({
         controllers: [],
-        providers: []
+        providers: [
+            _adminservice.AdminService,
+            _adminschedulerservice.AdminSchedulerService
+        ]
     })
 ], AdminModule);
 

package/server/applications/admin/admin.module.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../backend/src/applications/admin/admin.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Module } from '@nestjs/common'\n\n@Module({\n  controllers: [],\n  providers: []\n})\nexport class AdminModule {}\n"],"names":["AdminModule","controllers","providers"],"mappings":"AAAA;;;;CAIC;;;;+BAQYA;;;eAAAA;;;wBANU;;;;;;;AAMhB,IAAA,AAAMA,cAAN,MAAMA;AAAa;;;QAHxBC,aAAa,EAAE;QACfC,WAAW,EAAE"}
+{"version":3,"sources":["../../../../backend/src/applications/admin/admin.module.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Module } from '@nestjs/common'\nimport { AdminSchedulerService } from './services/admin-scheduler.service'\nimport { AdminService } from './services/admin.service'\n\n@Module({\n  controllers: [],\n  providers: [AdminService, AdminSchedulerService]\n})\nexport class AdminModule {}\n"],"names":["AdminModule","controllers","providers","AdminService","AdminSchedulerService"],"mappings":"AAAA;;;;CAIC;;;;+BAUYA;;;eAAAA;;;wBARU;uCACe;8BACT;;;;;;;AAMtB,IAAA,AAAMA,cAAN,MAAMA;AAAa;;;QAHxBC,aAAa,EAAE;QACfC,WAAW;YAACC,0BAAY;YAAEC,4CAAqB;SAAC"}

package/server/applications/{notifications/interfaces/user-mail-notification.js → admin/interfaces/check-update.interfaces.js}

@@ -7,4 +7,4 @@ Object.defineProperty(exports, "__esModule", {
     value: true
 });
 
-//# sourceMappingURL=user-mail-notification.js.map
+//# sourceMappingURL=check-update.interfaces.js.map

package/server/applications/admin/interfaces/check-update.interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/admin/interfaces/check-update.interfaces.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport interface ServerReleaseVersionManifest {\n  // tag_name: `v1.0.0`\n  tag_name: string\n}\n\nexport interface ServerReleaseNotification {\n  version: string\n}\n"],"names":[],"mappings":"AAAA;;;;CAIC"}

package/server/applications/admin/services/admin-scheduler.service.js

@@ -0,0 +1,53 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AdminSchedulerService", {
+    enumerable: true,
+    get: function() {
+        return AdminSchedulerService;
+    }
+});
+const _common = require("@nestjs/common");
+const _schedule = require("@nestjs/schedule");
+const _promises = require("node:timers/promises");
+const _adminservice = require("./admin.service");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AdminSchedulerService = class AdminSchedulerService {
+    async checkServerUpdateAndNotify() {
+        // Apply a random delay so instances don't trigger the check simultaneously
+        const randomDelay = Math.floor(Math.random() * 900 * 1000);
+        await (0, _promises.setTimeout)(randomDelay);
+        await this.adminService.checkServerUpdateAndNotify();
+    }
+    constructor(adminService){
+        this.adminService = adminService;
+    }
+};
+_ts_decorate([
+    (0, _schedule.Cron)(_schedule.CronExpression.EVERY_DAY_AT_9AM),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", []),
+    _ts_metadata("design:returntype", Promise)
+], AdminSchedulerService.prototype, "checkServerUpdateAndNotify", null);
+AdminSchedulerService = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _adminservice.AdminService === "undefined" ? Object : _adminservice.AdminService
+    ])
+], AdminSchedulerService);
+
+//# sourceMappingURL=admin-scheduler.service.js.map

package/server/applications/admin/services/admin-scheduler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/admin/services/admin-scheduler.service.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { Cron, CronExpression } from '@nestjs/schedule'\nimport { setTimeout } from 'node:timers/promises'\nimport { AdminService } from './admin.service'\n\n@Injectable()\nexport class AdminSchedulerService {\n  constructor(private readonly adminService: AdminService) {}\n\n  @Cron(CronExpression.EVERY_DAY_AT_9AM)\n  async checkServerUpdateAndNotify() {\n    // Apply a random delay so instances don't trigger the check simultaneously\n    const randomDelay = Math.floor(Math.random() * 900 * 1000)\n    await setTimeout(randomDelay)\n    await this.adminService.checkServerUpdateAndNotify()\n  }\n}\n"],"names":["AdminSchedulerService","checkServerUpdateAndNotify","randomDelay","Math","floor","random","setTimeout","adminService","EVERY_DAY_AT_9AM"],"mappings":"AAAA;;;;CAIC;;;;+BAQYA;;;eAAAA;;;wBANc;0BACU;0BACV;8BACE;;;;;;;;;;AAGtB,IAAA,AAAMA,wBAAN,MAAMA;IAGX,MACMC,6BAA6B;QACjC,2EAA2E;QAC3E,MAAMC,cAAcC,KAAKC,KAAK,CAACD,KAAKE,MAAM,KAAK,MAAM;QACrD,MAAMC,IAAAA,oBAAU,EAACJ;QACjB,MAAM,IAAI,CAACK,YAAY,CAACN,0BAA0B;IACpD;IARA,YAAY,AAAiBM,YAA0B,CAAE;aAA5BA,eAAAA;IAA6B;AAS5D;;iDAPuBC"}

package/server/applications/admin/services/admin.service.js

@@ -0,0 +1,102 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "AdminService", {
+    enumerable: true,
+    get: function() {
+        return AdminService;
+    }
+});
+const _axios = require("@nestjs/axios");
+const _common = require("@nestjs/common");
+const _appconstants = require("../../../app.constants");
+const _shared = require("../../../common/shared");
+const _cacheservice = require("../../../infrastructure/cache/services/cache.service");
+const _applicationsconstants = require("../../applications.constants");
+const _notifications = require("../../notifications/constants/notifications");
+const _notificationsmanagerservice = require("../../notifications/services/notifications-manager.service");
+const _adminusersqueriesservice = require("../../users/services/admin-users-queries.service");
+const _checkupdate = require("../utils/check-update");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let AdminService = class AdminService {
+    async checkServerUpdateAndNotify() {
+        let lastVersion;
+        try {
+            const res = await this.http.axiosRef({
+                method: _applicationsconstants.HTTP_METHOD.GET,
+                url: _shared.APP_URL.SERVER_VERSION_MANIFEST
+            });
+            lastVersion = res.data?.tag_name || '';
+        } catch (e) {
+            this.logger.warn(`${this.checkServerUpdateAndNotify.name} - unable to check update: ${e}`);
+            return;
+        }
+        if (!lastVersion.startsWith('v')) {
+            this.logger.warn(`${this.checkServerUpdateAndNotify.name} - unable to check version: ${lastVersion}`);
+            return;
+        }
+        lastVersion = lastVersion.slice(1); // remove 'v' to compare with the current version
+        if (!(0, _checkupdate.isServerUpdateAvailable)(_appconstants.VERSION, lastVersion)) {
+            return;
+        }
+        // Get the last version that was notified to administrators
+        const notifiedVersion = await this.cache.get(this.checkServerUpdateAndNotify.name);
+        if (!notifiedVersion?.version) {
+            // The version was never stored, do it
+            await this.cache.set(this.checkServerUpdateAndNotify.name, {
+                version: _appconstants.VERSION
+            }, 0);
+            return;
+        }
+        if (notifiedVersion.version === lastVersion) {
+            // Notification was already sent to administrators
+            return;
+        }
+        const adminsToNotify = await this.adminUsersQueries.listAdminsToNotify();
+        if (!adminsToNotify.length) {
+            return;
+        }
+        const notification = {
+            app: _notifications.NOTIFICATION_APP.UPDATE_AVAILABLE,
+            event: _notifications.NOTIFICATION_APP_EVENT.UPDATE_AVAILABLE,
+            element: lastVersion,
+            externalUrl: _shared.APP_URL.RELEASES,
+            url: null
+        };
+        this.notificationsManager.create(adminsToNotify, notification).then(()=>this.cache.set(this.checkServerUpdateAndNotify.name, {
+                version: lastVersion
+            }, 0)).catch((e)=>this.logger.error(`${this.checkServerUpdateAndNotify.name} - ${e}`));
+    }
+    constructor(http, cache, notificationsManager, adminUsersQueries){
+        this.http = http;
+        this.cache = cache;
+        this.notificationsManager = notificationsManager;
+        this.adminUsersQueries = adminUsersQueries;
+        this.logger = new _common.Logger(AdminService.name);
+    }
+};
+AdminService = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _axios.HttpService === "undefined" ? Object : _axios.HttpService,
+        typeof _cacheservice.Cache === "undefined" ? Object : _cacheservice.Cache,
+        typeof _notificationsmanagerservice.NotificationsManager === "undefined" ? Object : _notificationsmanagerservice.NotificationsManager,
+        typeof _adminusersqueriesservice.AdminUsersQueries === "undefined" ? Object : _adminusersqueriesservice.AdminUsersQueries
+    ])
+], AdminService);
+
+//# sourceMappingURL=admin.service.js.map