acsi-core 1.2.32 → 1.2.35

package/dist/index.modern.js

@@ -29,6 +29,7 @@ import { init as init$1, replayIntegration } from '@sentry/react';
 import { FaCaretDown } from 'react-icons/fa';
 import CreatableSelect from 'react-select/creatable';
 import moment$1 from 'moment-timezone';
+import DOMPurify from 'dompurify';
 
 var setLoading = createAction("common/setLoading");
 var setLoadingPage = createAction("common/setLoadingPage");
@@ -88,6 +89,7 @@ var COLORS = {
 var ORGANIZATION_TENANT = "ORGANIZATION_TENANT";
 var ORGANIZATION_TEAM = "ORGANIZATION_TEAM";
 var TIMEZONE_ID = "TIMEZONE_ID";
+var UID_TENANT = "uid";
 
 var styleGlobal = {"signup_wrap":"_1KLz9","box-signin":"_2Jo1o","signin_title":"_3egBO","signup_link":"_1DoIT","google_button":"_34hK_","microsoft_button":"_19ESb","box-field":"_2e9xO","box-input":"_3zXRp","box-text":"_8NJga","box-button-email":"_21FPk","box-signin-container":"_1QERu","box-signin-text":"_2-znH","box-signin-logo":"_1aB2m","box-right":"_3qndF","image-slideshow":"_1aM7m","active":"_Vx1zf","box-right-body":"_JzdCr","box-right-footer":"_19aCA","pr-30":"_2HB5r","width-400":"_4ehXP"};
 
@@ -1721,6 +1723,7 @@ var apiUpload = axios.create({
 [api, apiUpload].forEach(function (i) {
   return i.interceptors.request.use(function (config) {
     var token = getAccessToken();
+    var organizationTenant = localStorage.getItem(ORGANIZATION_TENANT);
     if (token) {
       config.headers.Authorization = "Bearer " + token;
       localStorage.setItem("LAST_TIME_REQUETST", moment().utc().format("YYYY-MM-DD HH:mm:ss"));
@@ -1729,9 +1732,8 @@ var apiUpload = axios.create({
     if (imPersonate) {
       config.headers.ImPersonate = imPersonate;
     }
-    var tenantId = localStorage.getItem(ORGANIZATION_TENANT);
-    if (tenantId) {
-      config.headers["X-TenantID"] = tenantId;
+    if (organizationTenant) {
+      config.headers["X-Tenant-ID"] = organizationTenant;
     }
     return config;
   }, function (error) {
@@ -1742,10 +1744,7 @@ var apiUpload = axios.create({
   return i.interceptors.response.use(function (response) {
     return response;
   }, function (error) {
-    if (error.response.status === 401) {
-      window.location.href = "/login";
-    }
-    if (error.response.status == 403) {
+    if ((error.response.status == 403 || error.response.status == 401) && window.location.pathname !== '/login') {
       var hostname = window.location.hostname;
       var parts = hostname.split('.');
       var domain = parts.slice(-2).join('.');
@@ -1753,6 +1752,7 @@ var apiUpload = axios.create({
       localStorage.removeItem(ORGANIZATION_TENANT);
       localStorage.removeItem(TIMEZONE_ID);
       localStorage.removeItem(ORGANIZATION_TEAM);
+      localStorage.removeItem(UID_TENANT);
       Cookies.remove('auth', {
         path: '/',
         domain: "." + domain
@@ -1839,8 +1839,8 @@ var msalConfig = function msalConfig(clientId, redirectUri) {
 };
 
 var BlockLogin = function BlockLogin(_ref) {
-  var _ref$role = _ref.role,
-    role = _ref$role === void 0 ? "LandingPage" : _ref$role,
+  var onNavigate = _ref.onNavigate,
+    role = _ref.role,
     hiddenSignup = _ref.hiddenSignup,
     email = _ref.email,
     setEmail = _ref.setEmail,
@@ -1920,7 +1920,7 @@ var BlockLogin = function BlockLogin(_ref) {
               };
               dispatch(setLoading(true));
               return Promise.resolve(apiLoginGoogle(infoLogin)).then(function (authResult) {
-                var _authResult$data, _authResult$data2, _authResult$data2$rol, _authResult$data3;
+                var _authResult$data;
                 if (((_authResult$data = authResult.data) === null || _authResult$data === void 0 ? void 0 : _authResult$data.id) == null) {
                   dispatch(setLoading(false));
                   alert("Please contact admin.");
@@ -1938,16 +1938,27 @@ var BlockLogin = function BlockLogin(_ref) {
                     timestamp: new Date().toISOString()
                   }
                 });
-                CookieService.setAuthCookie({
-                  token: tokenJWT,
-                  expiresAt: Date.now() + 24 * 60 * 60 * 1000
-                });
-                localStorage.setItem(ACCESS_TOKEN, tokenJWT);
-                var domain = "/teacher";
-                if ((_authResult$data2 = authResult.data) !== null && _authResult$data2 !== void 0 && (_authResult$data2$rol = _authResult$data2.roles) !== null && _authResult$data2$rol !== void 0 && _authResult$data2$rol.includes("Admin") || ((_authResult$data3 = authResult.data) === null || _authResult$data3 === void 0 ? void 0 : _authResult$data3.role) === "Admin") {
-                  domain = "/admin";
+                if (role === "LandingPage") {
+                  CookieService.setAuthCookie({
+                    token: tokenJWT,
+                    expiresAt: Date.now() + 24 * 60 * 60 * 1000
+                  });
+                  var getRedirectUrl = function getRedirectUrl(role) {
+                    switch (role) {
+                      case "Admin":
+                        return ADMIN_ORIGIN;
+                      case "Teacher":
+                        return TEACHER_ORIGIN;
+                      default:
+                        return role + "." + REQUEST_ORIGIN;
+                    }
+                  };
+                  var redirectUrl = getRedirectUrl(authResult.data.role);
+                  window.location.href = redirectUrl + "/dashboard";
+                  dispatch(setLoading(false));
                 }
-                window.location.href = domain + "/dashboard";
+                localStorage.setItem(ACCESS_TOKEN, tokenJWT);
+                onNavigate("/dashboard");
                 dispatch(setLoading(false));
               });
             }
@@ -1996,8 +2007,8 @@ var BlockLogin = function BlockLogin(_ref) {
                 };
                 dispatch(setLoading(true));
                 return Promise.resolve(apiLoginGoogle(infoLogin)).then(function (authResult) {
-                  var _authResult$data4, _authResult$data5, _authResult$data5$rol, _authResult$data6;
-                  if (((_authResult$data4 = authResult.data) === null || _authResult$data4 === void 0 ? void 0 : _authResult$data4.id) == null) {
+                  var _authResult$data2;
+                  if (((_authResult$data2 = authResult.data) === null || _authResult$data2 === void 0 ? void 0 : _authResult$data2.id) == null) {
                     dispatch(setLoading(false));
                     alert("Please contact admin.");
                     return;
@@ -2014,16 +2025,27 @@ var BlockLogin = function BlockLogin(_ref) {
                       timestamp: new Date().toISOString()
                     }
                   });
-                  CookieService.setAuthCookie({
-                    token: tokenJWT,
-                    expiresAt: Date.now() + 24 * 60 * 60 * 1000
-                  });
-                  localStorage.setItem(ACCESS_TOKEN, tokenJWT);
-                  var domain = "/teacher";
-                  if ((_authResult$data5 = authResult.data) !== null && _authResult$data5 !== void 0 && (_authResult$data5$rol = _authResult$data5.roles) !== null && _authResult$data5$rol !== void 0 && _authResult$data5$rol.includes("Admin") || ((_authResult$data6 = authResult.data) === null || _authResult$data6 === void 0 ? void 0 : _authResult$data6.role) === "Admin") {
-                    domain = "/admin";
+                  if (role === "LandingPage") {
+                    CookieService.setAuthCookie({
+                      token: tokenJWT,
+                      expiresAt: Date.now() + 24 * 60 * 60 * 1000
+                    });
+                    var getRedirectUrl = function getRedirectUrl(role) {
+                      switch (role) {
+                        case "Admin":
+                          return ADMIN_ORIGIN;
+                        case "Teacher":
+                          return TEACHER_ORIGIN;
+                        default:
+                          return role + "." + REQUEST_ORIGIN;
+                      }
+                    };
+                    var redirectUrl = getRedirectUrl(authResult.data.role);
+                    window.location.href = redirectUrl + "/dashboard";
+                    dispatch(setLoading(false));
                   }
-                  window.location.href = domain + "/dashboard";
+                  localStorage.setItem(ACCESS_TOKEN, tokenJWT);
+                  onNavigate("/dashboard");
                   dispatch(setLoading(false));
                 });
               }
@@ -2399,7 +2421,7 @@ var defaultInfo = {
   rememberMe: false
 };
 var minutes = 15;
-var useLogin = function useLogin(_onNavigate, trackEvent) {
+var useLogin = function useLogin(onNavigate, trackEvent) {
   var _useState = useState(false),
     openLogin = _useState[0],
     setOpenLogin = _useState[1];
@@ -2466,7 +2488,6 @@ var useLogin = function useLogin(_onNavigate, trackEvent) {
         })).then(function (res) {
           var data = res.data;
           if (data.success) {
-            var _data$data$roles;
             localStorage.clear();
             var tokenJWT = data.data.token;
             localStorage.setItem(ACCESS_TOKEN, tokenJWT);
@@ -2478,15 +2499,21 @@ var useLogin = function useLogin(_onNavigate, trackEvent) {
                 timestamp: new Date().toISOString()
               }
             });
-            CookieService.setAuthCookie({
-              token: tokenJWT,
-              expiresAt: Date.now() + 24 * 60 * 60 * 1000
-            });
-            var domain = "/teacher";
-            if ((_data$data$roles = data.data.roles) !== null && _data$data$roles !== void 0 && _data$data$roles.includes("Admin") || data.data.role === "Admin") {
-              domain = "/admin";
+            var isRootDomain = window.location.hostname === REQUEST_ORIGIN || window.location.hostname === "www." + REQUEST_ORIGIN;
+            if (isRootDomain) {
+              var _data$data$roles;
+              CookieService.setAuthCookie({
+                token: tokenJWT,
+                expiresAt: Date.now() + 24 * 60 * 60 * 1000
+              });
+              var domain = TEACHER_ORIGIN;
+              if ((_data$data$roles = data.data.roles) !== null && _data$data$roles !== void 0 && _data$data$roles.includes("Admin")) {
+                domain = ADMIN_ORIGIN;
+              }
+              window.location.href = domain + "/dashboard";
+            } else {
+              onNavigate("/dashboard");
             }
-            window.location.href = domain + "/dashboard";
           } else {
             toast.error("The code is not correct. Please check again.");
           }
@@ -3598,7 +3625,57 @@ var timeSpanToUtc = (function (time, timezone, format) {
   }
 });
 
+var sanitizeSrc = function sanitizeSrc(url) {
+  if (!url || typeof url !== 'string') {
+    return '';
+  }
+  url = url.trim().replace(/[\s\n\r\t]+/g, '');
+  if (url.length > 2048) {
+    return '';
+  }
+  var dangerousProtocols = ['javascript:', 'data:text/html', 'vbscript:', 'file:', 'about:', 'blob:'];
+  var lowerUrl = url.toLowerCase();
+  for (var _i = 0, _dangerousProtocols = dangerousProtocols; _i < _dangerousProtocols.length; _i++) {
+    var protocol = _dangerousProtocols[_i];
+    if (lowerUrl.startsWith(protocol)) {
+      return '';
+    }
+  }
+  var decoded = decodeURIComponent(url);
+  var decodedLower = decoded.toLowerCase();
+  for (var _i2 = 0, _dangerousProtocols2 = dangerousProtocols; _i2 < _dangerousProtocols2.length; _i2++) {
+    var _protocol = _dangerousProtocols2[_i2];
+    if (decodedLower.includes(_protocol)) {
+      return '';
+    }
+  }
+  try {
+    if (url.startsWith('data:')) {
+      if (/^data:image\/(png|jpeg|jpg|gif|webp|bmp|ico);base64,[A-Za-z0-9+/]+=*$/.test(url)) {
+        return url;
+      }
+      return '';
+    }
+    var parsed = new URL(url, window.location.origin);
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+      return '';
+    }
+    if (parsed.username || parsed.password) {
+      return '';
+    }
+    return parsed.href;
+  } catch (error) {
+    return '';
+  }
+};
+
+var sanitizeHTMLText = function sanitizeHTMLText(text) {
+  var _DOMPurify$sanitize;
+  if (!text) return "";
+  return (_DOMPurify$sanitize = DOMPurify.sanitize(text)) != null ? _DOMPurify$sanitize : "";
+};
+
 var historyCore = createBrowserHistory();
 
-export { ACCESS_TOKEN, AmplitudeEvent, BASE_URL, CommonDialog, ConfirmDialog, CoreButton, CoreInput$1 as CoreCheckbox, CoreError, CoreInput, CoreInputCompact, CoreModal, CoreRadio, CoreRange, CoreSearch, CoreSelect, CoreSelectCompact, CoreTextArea, CoreTitleInput, CoreTooltip, CustomAsyncSelect, CustomCreatable, CustomPagination, CustomSelect, CustomSelectOption, DATE_TIME_MIN_VALUE, LayoutContext, Loading, Login, MarkdownRenderer as MarkdownLatexRender, NotFound, OPENSALT_BASE_URL, ORGANIZATION_TEAM, ORGANIZATION_TENANT, RichContentRenderer, Role, TIMEZONE_ID, api, apiUpload, firstCheckToken, getAccessToken, getErrorMessage, getImageUrl, getTimeZoneId, historyCore, initSentry, initializeAmplitude, setAddTenant, setAlert, setIsFirstCalendar, setIsRefetchSidebar, setLoading, setLoadingPage, setMenuCollapse, setTeam, setTenant, setUser, store, timeSpanToLocalMoment, timeSpanToUtc, useAmplitude, useGoogleSignOut, utcToLocalTime };
+export { ACCESS_TOKEN, AmplitudeEvent, BASE_URL, CommonDialog, ConfirmDialog, CoreButton, CoreInput$1 as CoreCheckbox, CoreError, CoreInput, CoreInputCompact, CoreModal, CoreRadio, CoreRange, CoreSearch, CoreSelect, CoreSelectCompact, CoreTextArea, CoreTitleInput, CoreTooltip, CustomAsyncSelect, CustomCreatable, CustomPagination, CustomSelect, CustomSelectOption, DATE_TIME_MIN_VALUE, LayoutContext, Loading, Login, MarkdownRenderer as MarkdownLatexRender, NotFound, OPENSALT_BASE_URL, ORGANIZATION_TEAM, ORGANIZATION_TENANT, RichContentRenderer, Role, TIMEZONE_ID, UID_TENANT, api, apiUpload, firstCheckToken, getAccessToken, getErrorMessage, getImageUrl, getTimeZoneId, historyCore, initSentry, initializeAmplitude, sanitizeHTMLText, sanitizeSrc, setAddTenant, setAlert, setIsFirstCalendar, setIsRefetchSidebar, setLoading, setLoadingPage, setMenuCollapse, setTeam, setTenant, setUser, store, timeSpanToLocalMoment, timeSpanToUtc, useAmplitude, useGoogleSignOut, utcToLocalTime };
 //# sourceMappingURL=index.modern.js.map