acsi-core 1.2.31 → 1.2.35

package/dist/index.modern.js

@@ -29,6 +29,7 @@ import { init as init$1, replayIntegration } from '@sentry/react';
 import { FaCaretDown } from 'react-icons/fa';
 import CreatableSelect from 'react-select/creatable';
 import moment$1 from 'moment-timezone';
+import DOMPurify from 'dompurify';
 
 var setLoading = createAction("common/setLoading");
 var setLoadingPage = createAction("common/setLoadingPage");
@@ -88,6 +89,7 @@ var COLORS = {
 var ORGANIZATION_TENANT = "ORGANIZATION_TENANT";
 var ORGANIZATION_TEAM = "ORGANIZATION_TEAM";
 var TIMEZONE_ID = "TIMEZONE_ID";
+var UID_TENANT = "uid";
 
 var styleGlobal = {"signup_wrap":"_1KLz9","box-signin":"_2Jo1o","signin_title":"_3egBO","signup_link":"_1DoIT","google_button":"_34hK_","microsoft_button":"_19ESb","box-field":"_2e9xO","box-input":"_3zXRp","box-text":"_8NJga","box-button-email":"_21FPk","box-signin-container":"_1QERu","box-signin-text":"_2-znH","box-signin-logo":"_1aB2m","box-right":"_3qndF","image-slideshow":"_1aM7m","active":"_Vx1zf","box-right-body":"_JzdCr","box-right-footer":"_19aCA","pr-30":"_2HB5r","width-400":"_4ehXP"};
 
@@ -1721,6 +1723,7 @@ var apiUpload = axios.create({
 [api, apiUpload].forEach(function (i) {
   return i.interceptors.request.use(function (config) {
     var token = getAccessToken();
+    var organizationTenant = localStorage.getItem(ORGANIZATION_TENANT);
     if (token) {
       config.headers.Authorization = "Bearer " + token;
       localStorage.setItem("LAST_TIME_REQUETST", moment().utc().format("YYYY-MM-DD HH:mm:ss"));
@@ -1729,9 +1732,8 @@ var apiUpload = axios.create({
     if (imPersonate) {
       config.headers.ImPersonate = imPersonate;
     }
-    var tenantId = localStorage.getItem(ORGANIZATION_TENANT);
-    if (tenantId) {
-      config.headers["X-TenantID"] = tenantId;
+    if (organizationTenant) {
+      config.headers["X-Tenant-ID"] = organizationTenant;
     }
     return config;
   }, function (error) {
@@ -1742,10 +1744,7 @@ var apiUpload = axios.create({
   return i.interceptors.response.use(function (response) {
     return response;
   }, function (error) {
-    if (error.response.status === 401) {
-      window.location.href = "/login";
-    }
-    if (error.response.status == 403) {
+    if ((error.response.status == 403 || error.response.status == 401) && window.location.pathname !== '/login') {
       var hostname = window.location.hostname;
       var parts = hostname.split('.');
       var domain = parts.slice(-2).join('.');
@@ -1753,6 +1752,7 @@ var apiUpload = axios.create({
       localStorage.removeItem(ORGANIZATION_TENANT);
       localStorage.removeItem(TIMEZONE_ID);
       localStorage.removeItem(ORGANIZATION_TEAM);
+      localStorage.removeItem(UID_TENANT);
       Cookies.remove('auth', {
         path: '/',
         domain: "." + domain
@@ -1839,7 +1839,8 @@ var msalConfig = function msalConfig(clientId, redirectUri) {
 };
 
 var BlockLogin = function BlockLogin(_ref) {
-  var role = _ref.role,
+  var onNavigate = _ref.onNavigate,
+    role = _ref.role,
     hiddenSignup = _ref.hiddenSignup,
     email = _ref.email,
     setEmail = _ref.setEmail,
@@ -1955,15 +1956,9 @@ var BlockLogin = function BlockLogin(_ref) {
                   var redirectUrl = getRedirectUrl(authResult.data.role);
                   window.location.href = redirectUrl + "/dashboard";
                   dispatch(setLoading(false));
-                } else {
-                  var _authResult$data2, _authResult$data2$rol, _authResult$data3;
-                  localStorage.setItem(ACCESS_TOKEN, tokenJWT);
-                  var domain = "/teacher";
-                  if ((_authResult$data2 = authResult.data) !== null && _authResult$data2 !== void 0 && (_authResult$data2$rol = _authResult$data2.roles) !== null && _authResult$data2$rol !== void 0 && _authResult$data2$rol.includes("Admin") || ((_authResult$data3 = authResult.data) === null || _authResult$data3 === void 0 ? void 0 : _authResult$data3.role) === "Admin") {
-                    domain = "/admin";
-                  }
-                  window.location.href = domain + "/dashboard";
                 }
+                localStorage.setItem(ACCESS_TOKEN, tokenJWT);
+                onNavigate("/dashboard");
                 dispatch(setLoading(false));
               });
             }
@@ -2012,8 +2007,8 @@ var BlockLogin = function BlockLogin(_ref) {
                 };
                 dispatch(setLoading(true));
                 return Promise.resolve(apiLoginGoogle(infoLogin)).then(function (authResult) {
-                  var _authResult$data4;
-                  if (((_authResult$data4 = authResult.data) === null || _authResult$data4 === void 0 ? void 0 : _authResult$data4.id) == null) {
+                  var _authResult$data2;
+                  if (((_authResult$data2 = authResult.data) === null || _authResult$data2 === void 0 ? void 0 : _authResult$data2.id) == null) {
                     dispatch(setLoading(false));
                     alert("Please contact admin.");
                     return;
@@ -2048,15 +2043,9 @@ var BlockLogin = function BlockLogin(_ref) {
                     var redirectUrl = getRedirectUrl(authResult.data.role);
                     window.location.href = redirectUrl + "/dashboard";
                     dispatch(setLoading(false));
-                  } else {
-                    var _authResult$data5, _authResult$data5$rol, _authResult$data6;
-                    localStorage.setItem(ACCESS_TOKEN, tokenJWT);
-                    var domain = "/teacher";
-                    if ((_authResult$data5 = authResult.data) !== null && _authResult$data5 !== void 0 && (_authResult$data5$rol = _authResult$data5.roles) !== null && _authResult$data5$rol !== void 0 && _authResult$data5$rol.includes("Admin") || ((_authResult$data6 = authResult.data) === null || _authResult$data6 === void 0 ? void 0 : _authResult$data6.role) === "Admin") {
-                      domain = "/admin";
-                    }
-                    window.location.href = domain + "/dashboard";
                   }
+                  localStorage.setItem(ACCESS_TOKEN, tokenJWT);
+                  onNavigate("/dashboard");
                   dispatch(setLoading(false));
                 });
               }
@@ -2521,14 +2510,9 @@ var useLogin = function useLogin(onNavigate, trackEvent) {
               if ((_data$data$roles = data.data.roles) !== null && _data$data$roles !== void 0 && _data$data$roles.includes("Admin")) {
                 domain = ADMIN_ORIGIN;
               }
-              onNavigate(domain + "/dashboard");
+              window.location.href = domain + "/dashboard";
             } else {
-              var _data$data$roles2;
-              var _domain = "/teacher";
-              if ((_data$data$roles2 = data.data.roles) !== null && _data$data$roles2 !== void 0 && _data$data$roles2.includes("Admin")) {
-                _domain = "/admin";
-              }
-              onNavigate(_domain + "/dashboard");
+              onNavigate("/dashboard");
             }
           } else {
             toast.error("The code is not correct. Please check again.");
@@ -3641,7 +3625,57 @@ var timeSpanToUtc = (function (time, timezone, format) {
   }
 });
 
+var sanitizeSrc = function sanitizeSrc(url) {
+  if (!url || typeof url !== 'string') {
+    return '';
+  }
+  url = url.trim().replace(/[\s\n\r\t]+/g, '');
+  if (url.length > 2048) {
+    return '';
+  }
+  var dangerousProtocols = ['javascript:', 'data:text/html', 'vbscript:', 'file:', 'about:', 'blob:'];
+  var lowerUrl = url.toLowerCase();
+  for (var _i = 0, _dangerousProtocols = dangerousProtocols; _i < _dangerousProtocols.length; _i++) {
+    var protocol = _dangerousProtocols[_i];
+    if (lowerUrl.startsWith(protocol)) {
+      return '';
+    }
+  }
+  var decoded = decodeURIComponent(url);
+  var decodedLower = decoded.toLowerCase();
+  for (var _i2 = 0, _dangerousProtocols2 = dangerousProtocols; _i2 < _dangerousProtocols2.length; _i2++) {
+    var _protocol = _dangerousProtocols2[_i2];
+    if (decodedLower.includes(_protocol)) {
+      return '';
+    }
+  }
+  try {
+    if (url.startsWith('data:')) {
+      if (/^data:image\/(png|jpeg|jpg|gif|webp|bmp|ico);base64,[A-Za-z0-9+/]+=*$/.test(url)) {
+        return url;
+      }
+      return '';
+    }
+    var parsed = new URL(url, window.location.origin);
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+      return '';
+    }
+    if (parsed.username || parsed.password) {
+      return '';
+    }
+    return parsed.href;
+  } catch (error) {
+    return '';
+  }
+};
+
+var sanitizeHTMLText = function sanitizeHTMLText(text) {
+  var _DOMPurify$sanitize;
+  if (!text) return "";
+  return (_DOMPurify$sanitize = DOMPurify.sanitize(text)) != null ? _DOMPurify$sanitize : "";
+};
+
 var historyCore = createBrowserHistory();
 
-export { ACCESS_TOKEN, AmplitudeEvent, BASE_URL, CommonDialog, ConfirmDialog, CoreButton, CoreInput$1 as CoreCheckbox, CoreError, CoreInput, CoreInputCompact, CoreModal, CoreRadio, CoreRange, CoreSearch, CoreSelect, CoreSelectCompact, CoreTextArea, CoreTitleInput, CoreTooltip, CustomAsyncSelect, CustomCreatable, CustomPagination, CustomSelect, CustomSelectOption, DATE_TIME_MIN_VALUE, LayoutContext, Loading, Login, MarkdownRenderer as MarkdownLatexRender, NotFound, OPENSALT_BASE_URL, ORGANIZATION_TEAM, ORGANIZATION_TENANT, RichContentRenderer, Role, TIMEZONE_ID, api, apiUpload, firstCheckToken, getAccessToken, getErrorMessage, getImageUrl, getTimeZoneId, historyCore, initSentry, initializeAmplitude, setAddTenant, setAlert, setIsFirstCalendar, setIsRefetchSidebar, setLoading, setLoadingPage, setMenuCollapse, setTeam, setTenant, setUser, store, timeSpanToLocalMoment, timeSpanToUtc, useAmplitude, useGoogleSignOut, utcToLocalTime };
+export { ACCESS_TOKEN, AmplitudeEvent, BASE_URL, CommonDialog, ConfirmDialog, CoreButton, CoreInput$1 as CoreCheckbox, CoreError, CoreInput, CoreInputCompact, CoreModal, CoreRadio, CoreRange, CoreSearch, CoreSelect, CoreSelectCompact, CoreTextArea, CoreTitleInput, CoreTooltip, CustomAsyncSelect, CustomCreatable, CustomPagination, CustomSelect, CustomSelectOption, DATE_TIME_MIN_VALUE, LayoutContext, Loading, Login, MarkdownRenderer as MarkdownLatexRender, NotFound, OPENSALT_BASE_URL, ORGANIZATION_TEAM, ORGANIZATION_TENANT, RichContentRenderer, Role, TIMEZONE_ID, UID_TENANT, api, apiUpload, firstCheckToken, getAccessToken, getErrorMessage, getImageUrl, getTimeZoneId, historyCore, initSentry, initializeAmplitude, sanitizeHTMLText, sanitizeSrc, setAddTenant, setAlert, setIsFirstCalendar, setIsRefetchSidebar, setLoading, setLoadingPage, setMenuCollapse, setTeam, setTenant, setUser, store, timeSpanToLocalMoment, timeSpanToUtc, useAmplitude, useGoogleSignOut, utcToLocalTime };
 //# sourceMappingURL=index.modern.js.map