@vitnode/core 1.2.0-canary.59 → 1.2.0-canary.61

package/dist/src/api/models/device.js

@@ -1,61 +1 @@
-import { eq } from "drizzle-orm";
-import { getCookie, setCookie } from "hono/cookie";
-import { randomBytes } from "node:crypto";
-import { core_sessions_known_devices } from "../../database/sessions.js";
-import { CONFIG } from "../../lib/config.js";
-export class DeviceModel {
-    constructor(c){
-        this.c = c;
-    }
-    c;
-    async createDevice() {
-        const publicId = randomBytes(16).toString("hex");
-        const [device] = await this.c.get("db").insert(core_sessions_known_devices).values({
-            publicId,
-            ipAddress: this.c.get("ipAddress"),
-            userAgent: this.getUserAgent()
-        }).returning({
-            id: core_sessions_known_devices.id
-        });
-        this.setCookieDevice(publicId);
-        return {
-            id: device.id,
-            publicId
-        };
-    }
-    getUserAgent() {
-        return this.c.req.header("User-Agent") ?? "node";
-    }
-    setCookieDevice(publicDeviceId) {
-        setCookie(this.c, this.c.get("core").authorization.deviceCookieName, publicDeviceId, {
-            httpOnly: true,
-            secure: this.c.get("core").authorization.cookieSecure,
-            path: "/",
-            domain: CONFIG.web.hostname,
-            expires: new Date(Date.now() + this.c.get("core").authorization.deviceCookieExpires)
-        });
-    }
-    async getDeviceId() {
-        const deviceIdFromCookie = getCookie(this.c, this.c.get("core").authorization.deviceCookieName);
-        try {
-            if (deviceIdFromCookie) {
-                const [device] = await this.c.get("db").select({
-                    id: core_sessions_known_devices.id
-                }).from(core_sessions_known_devices).where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));
-                if (!device) {
-                    return await this.createDevice();
-                }
-                await this.c.get("db").update(core_sessions_known_devices).set({
-                    ipAddress: this.c.get("ipAddress"),
-                    userAgent: this.getUserAgent()
-                }).where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));
-                return {
-                    id: device.id,
-                    publicId: deviceIdFromCookie
-                };
-            }
-        } catch  {
-        /* empty */ }
-        return await this.createDevice();
-    }
-}
+import{eq}from"drizzle-orm";import{getCookie,setCookie}from"hono/cookie";import{randomBytes}from"node:crypto";import{core_sessions_known_devices}from"../../database/sessions.js";import{CONFIG}from"../../lib/config.js";export class DeviceModel{constructor(c){this.c=c}c;async createDevice(){const publicId=randomBytes(16).toString("hex");const[device]=await this.c.get("db").insert(core_sessions_known_devices).values({publicId,ipAddress:this.c.get("ipAddress"),userAgent:this.getUserAgent()}).returning({id:core_sessions_known_devices.id});this.setCookieDevice(publicId);return{id:device.id,publicId}}getUserAgent(){return this.c.req.header("User-Agent")??"node"}setCookieDevice(publicDeviceId){setCookie(this.c,this.c.get("core").authorization.deviceCookieName,publicDeviceId,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",domain:CONFIG.web.hostname,expires:new Date(Date.now()+this.c.get("core").authorization.deviceCookieExpires)})}async getDeviceId(){const deviceIdFromCookie=getCookie(this.c,this.c.get("core").authorization.deviceCookieName);try{if(deviceIdFromCookie){const[device]=await this.c.get("db").select({id:core_sessions_known_devices.id}).from(core_sessions_known_devices).where(eq(core_sessions_known_devices.publicId,deviceIdFromCookie));if(!device){return await this.createDevice()}await this.c.get("db").update(core_sessions_known_devices).set({ipAddress:this.c.get("ipAddress"),userAgent:this.getUserAgent()}).where(eq(core_sessions_known_devices.publicId,deviceIdFromCookie));return{id:device.id,publicId:deviceIdFromCookie}}}catch{}return await this.createDevice()}}

package/dist/src/api/models/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/api/models/email.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI/E,UAAU,0BAA0B;IAClC,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,2BAA2B;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,CACP,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAChD,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAC/B,KAAK,CAAC,SAAS,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EACH,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,GAC5D,MAAM,CAAC;CAEZ,GAAG,CAAC,2BAA2B,GAAG,0BAA0B,CAAC,CAAC;AAE/D,qBAAa,UAAU;gBACT,CAAC,EAAE,OAAO;IAItB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EACT,IAAI,EACJ,OAAO,EACP,OAAO,EACP,EAAE,EACF,IAAI,EACJ,OAAO,EACP,MAAM,EAAE,cAAc,GACvB,EAAE,kBAAkB;CA+EtB"}
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/api/models/email.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI/E,UAAU,0BAA0B;IAClC,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,2BAA2B;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,CACP,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAChD,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAC/B,KAAK,CAAC,SAAS,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EACH,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,GAC5D,MAAM,CAAC;CAEZ,GAAG,CAAC,2BAA2B,GAAG,0BAA0B,CAAC,CAAC;AAE/D,qBAAa,UAAU;gBACT,CAAC,EAAE,OAAO;IAItB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EACT,IAAI,EACJ,OAAO,EACP,OAAO,EACP,EAAE,EACF,IAAI,EACJ,OAAO,EACP,MAAM,EAAE,cAAc,GACvB,EAAE,kBAAkB;CAkFtB"}

package/dist/src/api/models/email.js

@@ -1,77 +1 @@
-import { render } from "@react-email/components";
-import { HTTPException } from "hono/http-exception";
-import { CONFIG } from "../../lib/config.js";
-export class EmailModel {
-    constructor(c){
-        this.c = c;
-    }
-    c;
-    async send({ html, replyTo, subject, to, user, content, locale: localeFromArgs }) {
-        const core = this.c.get("core");
-        const provider = core.email?.adapter;
-        if (!provider) {
-            throw new HTTPException(500, {
-                message: "Email provider not found"
-            });
-        }
-        const locale = localeFromArgs ?? user?.language ?? "en";
-        const pluginIds = [
-            "@vitnode/core",
-            ...this.c.get("core").plugins.map((plugin)=>plugin.id)
-        ];
-        const messagesPromises = pluginIds.map(async (pluginId)=>{
-            try {
-                const path = `${pluginId}/${locale}.json`;
-                const messages = await core.pathToMessages(path);
-                return messages.default;
-            } catch  {
-                return {};
-            }
-        });
-        const allMessages = await Promise.all(messagesPromises);
-        const messages = allMessages.reduce((acc, curr)=>({
-                ...acc,
-                ...curr
-            }), {});
-        const htmlContent = html ?? content({
-            i18n: {
-                locale,
-                messages
-            },
-            templateProps: {
-                metadata: {
-                    ...core.metadata,
-                    url: CONFIG.web.href
-                },
-                logo: core.email?.logo
-            },
-            user
-        });
-        const emailTo = user?.email ?? to;
-        if (!emailTo) {
-            throw new HTTPException(400, {
-                message: "Email address is required"
-            });
-        }
-        try {
-            await provider.sendEmail({
-                html: await render(htmlContent),
-                to: emailTo,
-                subject: typeof subject === "function" ? subject({
-                    i18n: {
-                        locale,
-                        messages
-                    }
-                }) : subject,
-                replyTo,
-                metadata: core.metadata,
-                text: await render(htmlContent, {
-                    plainText: true
-                })
-            });
-        } catch (err) {
-            const error = err instanceof Error ? err : new Error("Unknown error from email provider");
-            await this.c.get("log").error(`Failed to send email: ${error.message}`);
-        }
-    }
-}
+import{render}from"@react-email/components";import{HTTPException}from"hono/http-exception";import{CONFIG}from"../../lib/config.js";export class EmailModel{constructor(c){this.c=c}c;async send({html,replyTo,subject,to,user,content,locale:localeFromArgs}){const core=this.c.get("core");const provider=core.email?.adapter;if(!provider){throw new HTTPException(500,{message:"Email provider not found"})}const locale=localeFromArgs??user?.language??"en";const pluginIds=["@vitnode/core",...this.c.get("core").plugins.map(plugin=>plugin.id)];const messagesPromises=pluginIds.map(async pluginId=>{try{const path=`${pluginId}/${locale}.json`;const messages=await core.pathToMessages(path);return messages.default}catch{return{}}});const allMessages=await Promise.all(messagesPromises);const messages=Object.assign({},...allMessages);const htmlContent=html??content({i18n:{locale,messages},templateProps:{metadata:{...core.metadata,url:CONFIG.web.href},logo:core.email?.logo},user});const emailTo=user?.email??to;if(!emailTo){throw new HTTPException(400,{message:"Email address is required"})}try{await provider.sendEmail({html:await render(htmlContent),to:emailTo,subject:typeof subject==="function"?subject({i18n:{locale,messages}}):subject,replyTo,metadata:core.metadata,text:await render(htmlContent,{plainText:true})})}catch(err){const error=err instanceof Error?err:new Error("Unknown error from email provider");await this.c.get("log").error(`Failed to send email: ${error.message}`)}}}

package/dist/src/api/models/password.js

@@ -1,36 +1 @@
-import crypto from "node:crypto";
-export class PasswordModel {
-    async encryptPassword(password) {
-        return await new Promise((resolve, reject)=>{
-            const salt = crypto.randomBytes(8).toString("hex");
-            crypto.scrypt(password, salt, 64, (err, derivedKey)=>{
-                if (err) reject(err);
-                resolve(`${salt}:${derivedKey.toString("hex")}`);
-            });
-        });
-    }
-    async verifyPassword(password, hash) {
-        return await new Promise((resolve, reject)=>{
-            const [salt, key] = hash.split(":");
-            const keyBuffer = Buffer.from(key, "hex");
-            crypto.scrypt(password, salt, 64, (err, derivedKey)=>{
-                if (err) reject(err);
-                if (keyBuffer.length !== derivedKey.length) {
-                    crypto.timingSafeEqual(derivedKey, derivedKey);
-                    resolve(false);
-                } else {
-                    const areEqual = crypto.timingSafeEqual(keyBuffer, derivedKey);
-                    resolve(areEqual);
-                }
-            });
-        });
-    }
-}
-export class ForgotPasswordTokenModel {
-    generateResetToken() {
-        return crypto.randomBytes(32).toString("base64url");
-    }
-    hashResetToken(token) {
-        return crypto.createHash("sha256").update(token).digest("hex");
-    }
-}
+import crypto from"node:crypto";export class PasswordModel{async encryptPassword(password){return await new Promise((resolve,reject)=>{const salt=crypto.randomBytes(8).toString("hex");crypto.scrypt(password,salt,64,(err,derivedKey)=>{if(err)reject(err);resolve(`${salt}:${derivedKey.toString("hex")}`)})})}async verifyPassword(password,hash){return await new Promise((resolve,reject)=>{const[salt,key]=hash.split(":");const keyBuffer=Buffer.from(key,"hex");crypto.scrypt(password,salt,64,(err,derivedKey)=>{if(err)reject(err);if(keyBuffer.length!==derivedKey.length){crypto.timingSafeEqual(derivedKey,derivedKey);resolve(false)}else{const areEqual=crypto.timingSafeEqual(keyBuffer,derivedKey);resolve(areEqual)}})})}}export class ForgotPasswordTokenModel{generateResetToken(){return crypto.randomBytes(32).toString("base64url")}hashResetToken(token){return crypto.createHash("sha256").update(token).digest("hex")}}

package/dist/src/api/models/session-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-admin.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAYpC,qBAAa,iBAAiB;gBAChB,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,kBAAkB,CAAC,MAAM,EAAE,MAAM;IAmBjC,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAwCpC,aAAa;IAoBb,OAAO;;;;;;;;;;;;;CAiDd"}
+{"version":3,"file":"session-admin.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAYpC,qBAAa,iBAAiB;gBAChB,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IAejB,kBAAkB,CAAC,MAAM,EAAE,MAAM;IAmBjC,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IA2CpC,aAAa;IAoBb,OAAO;;;;;;;;;;;;;CAiDd"}

package/dist/src/api/models/session-admin.js

@@ -1,97 +1 @@
-import { and, eq, gt, or } from "drizzle-orm"; // Removed 'or' as it's safer not to use it here
-import { deleteCookie, getCookie, setCookie } from "hono/cookie";
-import { HTTPException } from "hono/http-exception";
-import { core_admin_permissions, core_admin_sessions } from "../../database/admins.js";
-import { CONFIG } from "../../lib/config.js";
-import { DeviceModel } from "./device.js";
-import { UserModel } from "./user.js";
-export class SessionAdminModel {
-    constructor(c){
-        this.c = c;
-    }
-    c;
-    async hashToken(token) {
-        const encoder = new TextEncoder();
-        const data = encoder.encode(token);
-        const hashBuffer = await crypto.subtle.digest("SHA-256", data);
-        const hashArray = Array.from(new Uint8Array(hashBuffer));
-        return hashArray.map((b)=>b.toString(16).padStart(2, "0")).join("");
-    }
-    async checkIfUserIsAdmin(userId) {
-        const user = await new UserModel().getUserById({
-            id: userId,
-            c: this.c
-        });
-        if (!user) return false;
-        const [permission] = await this.c.get("db").select().from(core_admin_permissions).where(or(eq(core_admin_permissions.userId, user.id), eq(core_admin_permissions.roleId, user.roleId))).limit(1);
-        return !!permission;
-    }
-    async createSessionByUserId(userId) {
-        const isAdmin = await this.checkIfUserIsAdmin(userId);
-        if (!isAdmin) {
-            throw new HTTPException(403, {
-                message: "Forbidden"
-            });
-        }
-        const randomBytes = new Uint8Array(64);
-        crypto.getRandomValues(randomBytes);
-        const token = Array.from(randomBytes).map((b)=>b.toString(16).padStart(2, "0")).join("");
-        const hashedToken = await this.hashToken(token);
-        const device = await new DeviceModel(this.c).getDeviceId();
-        await this.c.get("db").insert(core_admin_sessions).values({
-            token: hashedToken,
-            userId,
-            expiresAt: new Date(Date.now() + this.c.get("core").authorization.adminCookieExpires),
-            deviceId: device.id
-        });
-        setCookie(this.c, this.c.get("core").authorization.adminCookieName, token, {
-            httpOnly: true,
-            secure: this.c.get("core").authorization.cookieSecure,
-            path: "/",
-            expires: new Date(Date.now() + this.c.get("core").authorization.adminCookieExpires),
-            domain: CONFIG.web.hostname
-        });
-        return {
-            token
-        };
-    }
-    async deleteSession() {
-        const token = getCookie(this.c, this.c.get("core").authorization.adminCookieName);
-        if (!token) return;
-        const hashedToken = await this.hashToken(token);
-        await this.c.get("db").delete(core_admin_sessions).where(eq(core_admin_sessions.token, hashedToken));
-        deleteCookie(this.c, this.c.get("core").authorization.adminCookieName, {
-            path: "/",
-            domain: CONFIG.web.hostname
-        });
-    }
-    async getUser() {
-        const { authorization } = this.c.get("core");
-        const token = getCookie(this.c, authorization.adminCookieName);
-        if (!token) return null;
-        const device = await new DeviceModel(this.c).getDeviceId();
-        if (!device) return null;
-        const hashedToken = await this.hashToken(token);
-        const [session] = await this.c.get("db").select({
-            userId: core_admin_sessions.userId
-        }).from(core_admin_sessions).where(and(eq(core_admin_sessions.token, hashedToken), eq(core_admin_sessions.deviceId, device.id), gt(core_admin_sessions.expiresAt, new Date()))).limit(1);
-        if (!session) {
-            deleteCookie(this.c, this.c.get("core").authorization.adminCookieName, {
-                path: "/",
-                domain: CONFIG.web.hostname
-            });
-            return null;
-        }
-        const user = await new UserModel().getUserById({
-            id: session.userId,
-            c: this.c
-        });
-        if (!user) return null;
-        const isStillAdmin = await this.checkIfUserIsAdmin(user.id);
-        if (!isStillAdmin) {
-            await this.deleteSession();
-            return null;
-        }
-        return user;
-    }
-}
+import{and,eq,gt,or}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{HTTPException}from"hono/http-exception";import{core_admin_permissions,core_admin_sessions}from"../../database/admins.js";import{CONFIG}from"../../lib/config.js";import{DeviceModel}from"./device.js";import{UserModel}from"./user.js";export class SessionAdminModel{constructor(c){this.c=c}c;async hashToken(token){const encoder=new TextEncoder;const data=encoder.encode(token);const hashBuffer=await crypto.subtle.digest("SHA-256",data);const bytes=new Uint8Array(hashBuffer);let result="";for(const byte of bytes){result+=byte.toString(16).padStart(2,"0")}return result}async checkIfUserIsAdmin(userId){const user=await new UserModel().getUserById({id:userId,c:this.c});if(!user)return false;const[permission]=await this.c.get("db").select().from(core_admin_permissions).where(or(eq(core_admin_permissions.userId,user.id),eq(core_admin_permissions.roleId,user.roleId))).limit(1);return!!permission}async createSessionByUserId(userId){const isAdmin=await this.checkIfUserIsAdmin(userId);if(!isAdmin){throw new HTTPException(403,{message:"Forbidden"})}const randomBytes=new Uint8Array(64);crypto.getRandomValues(randomBytes);let token="";for(const byte of randomBytes){token+=byte.toString(16).padStart(2,"0")}const hashedToken=await this.hashToken(token);const device=await new DeviceModel(this.c).getDeviceId();await this.c.get("db").insert(core_admin_sessions).values({token:hashedToken,userId,expiresAt:new Date(Date.now()+this.c.get("core").authorization.adminCookieExpires),deviceId:device.id});setCookie(this.c,this.c.get("core").authorization.adminCookieName,token,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",expires:new Date(Date.now()+this.c.get("core").authorization.adminCookieExpires),domain:CONFIG.web.hostname});return{token}}async deleteSession(){const token=getCookie(this.c,this.c.get("core").authorization.adminCookieName);if(!token)return;const hashedToken=await this.hashToken(token);await this.c.get("db").delete(core_admin_sessions).where(eq(core_admin_sessions.token,hashedToken));deleteCookie(this.c,this.c.get("core").authorization.adminCookieName,{path:"/",domain:CONFIG.web.hostname})}async getUser(){const{authorization}=this.c.get("core");const token=getCookie(this.c,authorization.adminCookieName);if(!token)return null;const device=await new DeviceModel(this.c).getDeviceId();if(!device)return null;const hashedToken=await this.hashToken(token);const[session]=await this.c.get("db").select({userId:core_admin_sessions.userId}).from(core_admin_sessions).where(and(eq(core_admin_sessions.token,hashedToken),eq(core_admin_sessions.deviceId,device.id),gt(core_admin_sessions.expiresAt,new Date))).limit(1);if(!session){deleteCookie(this.c,this.c.get("core").authorization.adminCookieName,{path:"/",domain:CONFIG.web.hostname});return null}const user=await new UserModel().getUserById({id:session.userId,c:this.c});if(!user)return null;const isStillAdmin=await this.checkIfUserIsAdmin(user.id);if(!isStillAdmin){await this.deleteSession();return null}return user}}

package/dist/src/api/models/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAWpC,qBAAa,YAAY;gBACX,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAsCpC,aAAa;IA8Bb,OAAO;;;;;;;;;;;;;CA0Cd"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAWpC,qBAAa,YAAY;gBACX,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IAejB,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IA0CpC,aAAa;IA8Bb,OAAO;;;;;;;;;;;;;CA0Cd"}

package/dist/src/api/models/session.js

@@ -1,76 +1 @@
-import { and, eq, gt } from "drizzle-orm";
-import { deleteCookie, getCookie, setCookie } from "hono/cookie";
-import { core_sessions } from "../../database/sessions.js";
-import { CONFIG } from "../../lib/config.js";
-import { DeviceModel } from "./device.js";
-import { UserModel } from "./user.js";
-export class SessionModel {
-    constructor(c){
-        this.c = c;
-    }
-    c;
-    async hashToken(token) {
-        const encoder = new TextEncoder();
-        const data = encoder.encode(token);
-        const hashBuffer = await crypto.subtle.digest("SHA-256", data);
-        const hashArray = Array.from(new Uint8Array(hashBuffer));
-        return hashArray.map((b)=>b.toString(16).padStart(2, "0")).join("");
-    }
-    async createSessionByUserId(userId) {
-        // Generate secure random bytes using Web Crypto API
-        const randomBytes = new Uint8Array(64);
-        crypto.getRandomValues(randomBytes);
-        const token = Array.from(randomBytes).map((b)=>b.toString(16).padStart(2, "0")).join("");
-        const device = await new DeviceModel(this.c).getDeviceId();
-        const hashedToken = await this.hashToken(token);
-        await this.c.get("db").insert(core_sessions).values({
-            token: hashedToken,
-            userId,
-            expiresAt: new Date(Date.now() + this.c.get("core").authorization.cookie_expires),
-            deviceId: device.id
-        });
-        setCookie(this.c, this.c.get("core").authorization.cookieName, token, {
-            httpOnly: true,
-            secure: this.c.get("core").authorization.cookieSecure,
-            path: "/",
-            expires: this.c.get("core").authorization.cookie_expires > 0 ? new Date(Date.now() + this.c.get("core").authorization.cookie_expires) : undefined,
-            domain: CONFIG.web.hostname
-        });
-        return {
-            token
-        };
-    }
-    async deleteSession() {
-        const token = getCookie(this.c, this.c.get("core").authorization.cookieName);
-        const device = await new DeviceModel(this.c).getDeviceId();
-        // Ensure both token and deviceId exist before proceeding
-        if (!(token && device.id)) {
-            deleteCookie(this.c, this.c.get("core").authorization.cookieName);
-            return;
-        }
-        const hashedToken = await this.hashToken(token);
-        await this.c.get("db").delete(core_sessions)// Harden the query to ensure a user can only delete their own device's session
-        .where(and(eq(core_sessions.token, hashedToken), eq(core_sessions.deviceId, device.id)));
-        deleteCookie(this.c, this.c.get("core").authorization.cookieName);
-    }
-    async getUser() {
-        const token = getCookie(this.c, this.c.get("core").authorization.cookieName);
-        if (!token) return null;
-        const device = await new DeviceModel(this.c).getDeviceId();
-        if (!device) return null;
-        const hashedToken = await this.hashToken(token);
-        const [session] = await this.c.get("db").select({
-            userId: core_sessions.userId
-        }).from(core_sessions).where(and(eq(core_sessions.token, hashedToken), eq(core_sessions.deviceId, device.id), gt(core_sessions.expiresAt, new Date()))).limit(1);
-        if (!session) {
-            deleteCookie(this.c, this.c.get("core").authorization.cookieName);
-            return null;
-        }
-        const user = await new UserModel().getUserById({
-            id: session.userId,
-            c: this.c
-        });
-        if (!user) return null;
-        return user;
-    }
-}
+import{and,eq,gt}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{core_sessions}from"../../database/sessions.js";import{CONFIG}from"../../lib/config.js";import{DeviceModel}from"./device.js";import{UserModel}from"./user.js";export class SessionModel{constructor(c){this.c=c}c;async hashToken(token){const encoder=new TextEncoder;const data=encoder.encode(token);const hashBuffer=await crypto.subtle.digest("SHA-256",data);const bytes=new Uint8Array(hashBuffer);let result="";for(const byte of bytes){result+=byte.toString(16).padStart(2,"0")}return result}async createSessionByUserId(userId){const randomBytes=new Uint8Array(64);crypto.getRandomValues(randomBytes);let token="";for(const byte of randomBytes){token+=byte.toString(16).padStart(2,"0")}const device=await new DeviceModel(this.c).getDeviceId();const hashedToken=await this.hashToken(token);await this.c.get("db").insert(core_sessions).values({token:hashedToken,userId,expiresAt:new Date(Date.now()+this.c.get("core").authorization.cookie_expires),deviceId:device.id});setCookie(this.c,this.c.get("core").authorization.cookieName,token,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",expires:this.c.get("core").authorization.cookie_expires>0?new Date(Date.now()+this.c.get("core").authorization.cookie_expires):undefined,domain:CONFIG.web.hostname});return{token}}async deleteSession(){const token=getCookie(this.c,this.c.get("core").authorization.cookieName);const device=await new DeviceModel(this.c).getDeviceId();if(!(token&&device.id)){deleteCookie(this.c,this.c.get("core").authorization.cookieName);return}const hashedToken=await this.hashToken(token);await this.c.get("db").delete(core_sessions).where(and(eq(core_sessions.token,hashedToken),eq(core_sessions.deviceId,device.id)));deleteCookie(this.c,this.c.get("core").authorization.cookieName)}async getUser(){const token=getCookie(this.c,this.c.get("core").authorization.cookieName);if(!token)return null;const device=await new DeviceModel(this.c).getDeviceId();if(!device)return null;const hashedToken=await this.hashToken(token);const[session]=await this.c.get("db").select({userId:core_sessions.userId}).from(core_sessions).where(and(eq(core_sessions.token,hashedToken),eq(core_sessions.deviceId,device.id),gt(core_sessions.expiresAt,new Date))).limit(1);if(!session){deleteCookie(this.c,this.c.get("core").authorization.cookieName);return null}const user=await new UserModel().getUserById({id:session.userId,c:this.c});if(!user)return null;return user}}

package/dist/src/api/models/sso.js

@@ -1,120 +1 @@
-import { and, eq } from "drizzle-orm";
-import { deleteCookie, getCookie, setCookie } from "hono/cookie";
-import { HTTPException } from "hono/http-exception";
-import crypto from "node:crypto";
-import { core_users, core_users_sso } from "../../database/users.js";
-import { CONFIG } from "../../lib/config.js";
-import { removeSpecialCharacters } from "../../lib/special-characters.js";
-import { UserModel } from "./user.js";
-export const getRedirectUri = (code)=>new URL(`${CONFIG.web.href}login/sso/${code}`).toString();
-export class SSOModel {
-    constructor(c){
-        this.c = c;
-        this.plugins = c.get("core").authorization.ssoAdapters;
-    }
-    c;
-    plugins;
-    signUpUser = async ({ providerId, user, c })=>{
-        const data = await new UserModel().signUp({
-            email: user.email,
-            name: removeSpecialCharacters(user.username, false),
-            newsletter: false,
-            hashedPassword: undefined
-        }, c);
-        await c.get("db").insert(core_users_sso).values({
-            userId: data.id,
-            providerId: providerId,
-            providerAccountId: user.id
-        });
-        return {
-            userId: data.id
-        };
-    };
-    async callback({ code, providerId, state }) {
-        await this.verifyState(state);
-        const provider = this.plugins.find((p)=>p.id === providerId);
-        if (!provider) {
-            throw new HTTPException(404);
-        }
-        const ssoToken = await provider.fetchToken(code);
-        const userFromSSO = await provider.fetchUser(ssoToken);
-        return await this.c.get("db").transaction(async (tx)=>{
-            const [dataSSOFromDb] = await tx.select({
-                userId: core_users_sso.userId
-            }).from(core_users_sso).leftJoin(core_users, eq(core_users.id, core_users_sso.userId)).where(and(eq(core_users_sso.providerId, providerId), eq(core_users_sso.providerAccountId, userFromSSO.id))).limit(1);
-            if (!dataSSOFromDb) {
-                const [userWithEmail] = await tx.select({
-                    id: core_users.id,
-                    email: core_users.email
-                }).from(core_users).where(eq(core_users.email, userFromSSO.email)).limit(1);
-                if (!userWithEmail) {
-                    const signUpUser = await this.signUpUser({
-                        providerId,
-                        user: userFromSSO,
-                        c: this.c
-                    });
-                    return signUpUser;
-                }
-                // If email exists, throw an error
-                throw new HTTPException(409, {
-                    message: "Email already exists"
-                });
-            // await tx.insert(core_users_sso).values({
-            //   providerId: providerId,
-            //   providerAccountId: userFromSSO.id,
-            //   userId: userWithEmail.id,
-            // });
-            }
-            return {
-                userId: dataSSOFromDb.userId
-            };
-        });
-    }
-    async encryptState() {
-        const state = crypto.randomBytes(8).toString("hex");
-        const encryptedState = await new Promise((resolve, reject)=>{
-            const salt = crypto.randomBytes(4).toString("hex");
-            crypto.scrypt(state, salt, 16, (err, derivedKey)=>{
-                if (err) reject(err);
-                resolve(`${salt}:${derivedKey.toString("hex")}`);
-            });
-        });
-        setCookie(this.c, `${this.c.get("core").authorization.cookieName}--state-sso`, encryptedState, {
-            httpOnly: true,
-            secure: this.c.get("core").authorization.cookieSecure,
-            path: "/",
-            domain: CONFIG.web.hostname
-        });
-        return state;
-    }
-    async getUrl(providerId) {
-        const provider = this.plugins.find((p)=>p.id === providerId);
-        if (!provider) {
-            throw new HTTPException(404);
-        }
-        return provider.getUrl({
-            state: await this.encryptState()
-        });
-    }
-    async verifyState(state) {
-        const storedState = getCookie(this.c, `${this.c.get("core").authorization.cookieName}--state-sso`);
-        if (!storedState) {
-            throw new HTTPException(400, {
-                message: "Invalid state"
-            });
-        }
-        const isValid = await new Promise((resolve, reject)=>{
-            const [salt, storedHash] = storedState.split(":");
-            crypto.scrypt(state, salt, 16, (err, derivedKey)=>{
-                if (err) reject(err);
-                resolve(storedHash === derivedKey.toString("hex"));
-            });
-        });
-        if (!isValid) {
-            throw new HTTPException(400, {
-                message: "Invalid state"
-            });
-        }
-        deleteCookie(this.c, `${this.c.get("core").authorization.cookieName}--state-sso`);
-    }
-}
+import{and,eq}from"drizzle-orm";import{deleteCookie,getCookie,setCookie}from"hono/cookie";import{HTTPException}from"hono/http-exception";import crypto from"node:crypto";import{core_users,core_users_sso}from"../../database/users.js";import{CONFIG}from"../../lib/config.js";import{removeSpecialCharacters}from"../../lib/special-characters.js";import{UserModel}from"./user.js";export const getRedirectUri=code=>new URL(`${CONFIG.web.href}login/sso/${code}`).toString();export class SSOModel{constructor(c){this.c=c;this.plugins=c.get("core").authorization.ssoAdapters}c;plugins;signUpUser=async({providerId,user,c})=>{const data=await new UserModel().signUp({email:user.email,name:removeSpecialCharacters(user.username,false),newsletter:false,hashedPassword:undefined},c);await c.get("db").insert(core_users_sso).values({userId:data.id,providerId:providerId,providerAccountId:user.id});return{userId:data.id}};async callback({code,providerId,state}){await this.verifyState(state);const provider=this.plugins.find(p=>p.id===providerId);if(!provider){throw new HTTPException(404)}const ssoToken=await provider.fetchToken(code);const userFromSSO=await provider.fetchUser(ssoToken);return await this.c.get("db").transaction(async tx=>{const[dataSSOFromDb]=await tx.select({userId:core_users_sso.userId}).from(core_users_sso).leftJoin(core_users,eq(core_users.id,core_users_sso.userId)).where(and(eq(core_users_sso.providerId,providerId),eq(core_users_sso.providerAccountId,userFromSSO.id))).limit(1);if(!dataSSOFromDb){const[userWithEmail]=await tx.select({id:core_users.id,email:core_users.email}).from(core_users).where(eq(core_users.email,userFromSSO.email)).limit(1);if(!userWithEmail){const signUpUser=await this.signUpUser({providerId,user:userFromSSO,c:this.c});return signUpUser}throw new HTTPException(409,{message:"Email already exists"})}return{userId:dataSSOFromDb.userId}})}async encryptState(){const state=crypto.randomBytes(8).toString("hex");const encryptedState=await new Promise((resolve,reject)=>{const salt=crypto.randomBytes(4).toString("hex");crypto.scrypt(state,salt,16,(err,derivedKey)=>{if(err)reject(err);resolve(`${salt}:${derivedKey.toString("hex")}`)})});setCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`,encryptedState,{httpOnly:true,secure:this.c.get("core").authorization.cookieSecure,path:"/",domain:CONFIG.web.hostname});return state}async getUrl(providerId){const provider=this.plugins.find(p=>p.id===providerId);if(!provider){throw new HTTPException(404)}return provider.getUrl({state:await this.encryptState()})}async verifyState(state){const storedState=getCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`);if(!storedState){throw new HTTPException(400,{message:"Invalid state"})}const isValid=await new Promise((resolve,reject)=>{const[salt,storedHash]=storedState.split(":");crypto.scrypt(state,salt,16,(err,derivedKey)=>{if(err)reject(err);resolve(storedHash===derivedKey.toString("hex"))})});if(!isValid){throw new HTTPException(400,{message:"Invalid state"})}deleteCookie(this.c,`${this.c.get("core").authorization.cookieName}--state-sso`)}}

package/dist/src/api/models/user/get-user-by-id.js

@@ -1,19 +1 @@
-import { eq } from "drizzle-orm";
-import { core_users } from "../../../database/users.js";
-export const getUserById = async ({ id, c })=>{
-    const [user] = await c.get("db").select({
-        id: core_users.id,
-        email: core_users.email,
-        name: core_users.name,
-        nameCode: core_users.nameCode,
-        createdAt: core_users.createdAt,
-        newsletter: core_users.newsletter,
-        avatarColor: core_users.avatarColor,
-        emailVerified: core_users.emailVerified,
-        roleId: core_users.roleId,
-        birthday: core_users.birthday,
-        language: core_users.language
-    }).from(core_users).where(eq(core_users.id, id)).limit(1);
-    if (!user) return null;
-    return user;
-};
+import{eq}from"drizzle-orm";import{core_users}from"../../../database/users.js";export const getUserById=async({id,c})=>{const[user]=await c.get("db").select({id:core_users.id,email:core_users.email,name:core_users.name,nameCode:core_users.nameCode,createdAt:core_users.createdAt,newsletter:core_users.newsletter,avatarColor:core_users.avatarColor,emailVerified:core_users.emailVerified,roleId:core_users.roleId,birthday:core_users.birthday,language:core_users.language}).from(core_users).where(eq(core_users.id,id)).limit(1);if(!user)return null;return user};

package/dist/src/api/models/user/sign-in-with-passwords.js

@@ -1,22 +1 @@
-import { eq } from "drizzle-orm";
-import { HTTPException } from "hono/http-exception";
-import { core_users } from "../../../database/users.js";
-import { PasswordModel } from "../password.js";
-export const signInWithPassword = async ({ email, password, c })=>{
-    const [user] = await c.get("db").select({
-        id: core_users.id,
-        email: core_users.email,
-        password: core_users.password
-    }).from(core_users).where(eq(core_users.email, email)).limit(1);
-    if (!user?.password) {
-        throw new HTTPException(403);
-    }
-    const validPassword = await new PasswordModel().verifyPassword(password, user.password);
-    if (!validPassword) {
-        throw new HTTPException(403);
-    }
-    return {
-        id: user.id,
-        email: user.email
-    };
-};
+import{eq}from"drizzle-orm";import{HTTPException}from"hono/http-exception";import{core_users}from"../../../database/users.js";import{PasswordModel}from"../password.js";export const signInWithPassword=async({email,password,c})=>{const[user]=await c.get("db").select({id:core_users.id,email:core_users.email,password:core_users.password}).from(core_users).where(eq(core_users.email,email)).limit(1);if(!user?.password){throw new HTTPException(403)}const validPassword=await new PasswordModel().verifyPassword(password,user.password);if(!validPassword){throw new HTTPException(403)}return{id:user.id,email:user.email}};

package/dist/src/api/models/user/sign-up.js

@@ -1,73 +1 @@
-import { and, count, eq, or } from "drizzle-orm";
-import { HTTPException } from "hono/http-exception";
-import { generateAvatarColor } from "../../modules/users/avatar-color.js";
-import { core_roles } from "../../../database/roles.js";
-import { core_users } from "../../../database/users.js";
-import { removeSpecialCharacters } from "../../../lib/special-characters.js";
-const getDefaultData = async (c)=>{
-    const [countUsers] = await c.get("db").select({
-        count: count()
-    }).from(core_users);
-    // If no users, return root group
-    if (countUsers.count === 0) {
-        const [defaultRole] = await c.get("db").select({
-            id: core_roles.id
-        }).from(core_roles).where(and(eq(core_roles.default, false), eq(core_roles.root, true))).limit(1);
-        if (!defaultRole) {
-            throw new HTTPException(400, {
-                message: "Default group not found."
-            });
-        }
-        return {
-            roleId: defaultRole.id,
-            emailVerified: true
-        };
-    }
-    const [defaultRole] = await c.get("db").select({
-        id: core_roles.id
-    }).from(core_roles).where(and(eq(core_roles.default, true), eq(core_roles.root, false))).limit(1);
-    if (!defaultRole) {
-        throw new HTTPException(400, {
-            message: "Default role not found."
-        });
-    }
-    return {
-        roleId: defaultRole.id,
-        emailVerified: !c.get("core").email?.adapter
-    };
-};
-export const signUp = async ({ email, name, newsletter, hashedPassword }, c)=>{
-    const convertToNameSEO = removeSpecialCharacters(name);
-    const checkIfUserExist = await c.get("db").select({
-        email: core_users.email,
-        name_code: core_users.nameCode
-    }).from(core_users).where(or(eq(core_users.email, email), eq(core_users.nameCode, convertToNameSEO)));
-    const findEmail = checkIfUserExist.find((user)=>user.email === email);
-    if (findEmail) {
-        throw new HTTPException(409, {
-            message: "Email already exists"
-        });
-    }
-    const findName = checkIfUserExist.find((user)=>user.name_code === convertToNameSEO);
-    if (findName) {
-        throw new HTTPException(409, {
-            message: "Name already exists"
-        });
-    }
-    const { roleId, emailVerified } = await getDefaultData(c);
-    const [data] = await c.get("db").insert(core_users).values({
-        email,
-        name,
-        nameCode: convertToNameSEO,
-        // TODO: Handle newsletter only if email is allowed
-        newsletter,
-        password: hashedPassword,
-        avatarColor: generateAvatarColor(name),
-        roleId,
-        emailVerified,
-        ipAddress: c.get("ipAddress")
-    }).returning();
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
-    const { password: _, ...user } = data;
-    return user;
-};
+import{and,count,eq,or}from"drizzle-orm";import{HTTPException}from"hono/http-exception";import{generateAvatarColor}from"../../modules/users/avatar-color.js";import{core_roles}from"../../../database/roles.js";import{core_users}from"../../../database/users.js";import{removeSpecialCharacters}from"../../../lib/special-characters.js";const getDefaultData=async c=>{const[countUsers]=await c.get("db").select({count:count()}).from(core_users);if(countUsers.count===0){const[defaultRole]=await c.get("db").select({id:core_roles.id}).from(core_roles).where(and(eq(core_roles.default,false),eq(core_roles.root,true))).limit(1);if(!defaultRole){throw new HTTPException(400,{message:"Default group not found."})}return{roleId:defaultRole.id,emailVerified:true}}const[defaultRole]=await c.get("db").select({id:core_roles.id}).from(core_roles).where(and(eq(core_roles.default,true),eq(core_roles.root,false))).limit(1);if(!defaultRole){throw new HTTPException(400,{message:"Default role not found."})}return{roleId:defaultRole.id,emailVerified:!c.get("core").email?.adapter}};export const signUp=async({email,name,newsletter,hashedPassword},c)=>{const convertToNameSEO=removeSpecialCharacters(name);const checkIfUserExist=await c.get("db").select({email:core_users.email,name_code:core_users.nameCode}).from(core_users).where(or(eq(core_users.email,email),eq(core_users.nameCode,convertToNameSEO)));const findEmail=checkIfUserExist.find(user=>user.email===email);if(findEmail){throw new HTTPException(409,{message:"Email already exists"})}const findName=checkIfUserExist.find(user=>user.name_code===convertToNameSEO);if(findName){throw new HTTPException(409,{message:"Name already exists"})}const{roleId,emailVerified}=await getDefaultData(c);const[data]=await c.get("db").insert(core_users).values({email,name,nameCode:convertToNameSEO,newsletter,password:hashedPassword,avatarColor:generateAvatarColor(name),roleId,emailVerified,ipAddress:c.get("ipAddress")}).returning();const{password:_,...user}=data;return user};