beech-api 3.9.0-beta.9-rc → 3.9.80

package/packages/cli/core/middleware/express/jwtCheckAllow.js

@@ -1,86 +1,86 @@
-const passport = require("passport");
-
-const checkRoleMiddleware = (options) => {
-  return (req, res, next) => {
-    if(!Array.isArray(options)) {
-      // Perfectly with options is not type Array
-      return next();
-    } else {
-      passport.authenticate("jwt", {
-        session: false,
-      }, (err, user, info) => {
-        // error check
-        if (err) {
-          //console.log(err, info);
-          return res.status(403).json({
-            code: 403,
-            status: "FORBIDDEN",
-            message: "Forbidden: Insufficient role",
-            info: {
-              error: err,
-            },
-          });
-        } else {
-          if(!options.length) {
-            // Perfectly with no options
-            return next();
-          } else {
-            const allowed = options.some(rule => {
-              return Object.entries(rule).every(([key, condition]) => {
-                //console.log('----matchCondition(user?.[key], condition, user)-->>', matchCondition(user?.[key], condition, user));
-                return matchCondition(user?.[key], condition, user);
-              });
-            });
-            if (allowed) {
-              return next();
-            } else {
-              res.status(403).json({
-                code: 403,
-                status: "FORBIDDEN",
-                message: "Forbidden: Insufficient role",
-                info: {
-                  status: "ROLE_NOT_ALLOWED",
-                  error: "Insufficient role or User token does not have sufficient role.",
-                },
-              });
-            }
-          }
-        }
-      })(req, res, next);
-    }
-  }
-}
-
-const operators = {
-  $eq: (userValue, expected) => userValue === expected,
-  $ne: (userValue, expected) => userValue !== expected,
-  $in: (userValue, expected) => Array.isArray(expected) && expected.includes(userValue),
-  $not: (userValue, expected) => Array.isArray(expected) && !expected.includes(userValue),
-  $regex: (userValue, expected) =>
-    typeof userValue === 'string' && expected instanceof RegExp
-      ? expected.test(userValue)
-      : false,
-  $fn: (userValue, fn, user) => typeof fn === 'function' && fn(userValue, user),
-};
-
-const matchCondition = (userValue, condition, user) => {
-  if (typeof condition !== 'object' || condition instanceof RegExp || Array.isArray(condition)) {
-    return Array.isArray(condition)
-      ? operators.$in(userValue, condition)
-      : operators.$eq(userValue, condition);
-  }
-  // operator object
-  return Object.entries(condition).every(([op, expected]) => {
-    const handler = operators[op];
-    if (!handler) return false;
-    return handler(userValue, expected, user);
-  });
-};
-
-const checkRoleMiddlewareWithDefaultProject = (options) => {
-  return function (req, res, next) {
-    return checkRoleMiddleware(options)(req, res, next);
-  }
-}
-
+const passport = require("passport");
+
+const checkRoleMiddleware = (options) => {
+  return (req, res, next) => {
+    if(!Array.isArray(options)) {
+      // Perfectly with options is not type Array
+      return next();
+    } else {
+      passport.authenticate("jwt", {
+        session: false,
+      }, (err, user, info) => {
+        // error check
+        if (err) {
+          //console.log(err, info);
+          return res.status(403).json({
+            code: 403,
+            status: "FORBIDDEN",
+            message: "Forbidden: Insufficient role",
+            info: {
+              error: err,
+            },
+          });
+        } else {
+          if(!options.length) {
+            // Perfectly with no options
+            return next();
+          } else {
+            const allowed = options.some(rule => {
+              return Object.entries(rule).every(([key, condition]) => {
+                //console.log('----matchCondition(user?.[key], condition, user)-->>', matchCondition(user?.[key], condition, user));
+                return matchCondition(user?.[key], condition, user);
+              });
+            });
+            if (allowed) {
+              return next();
+            } else {
+              res.status(403).json({
+                code: 403,
+                status: "FORBIDDEN",
+                message: "Forbidden: Insufficient role",
+                info: {
+                  status: "ROLE_NOT_ALLOWED",
+                  error: "Insufficient role or User token does not have sufficient role.",
+                },
+              });
+            }
+          }
+        }
+      })(req, res, next);
+    }
+  }
+}
+
+const operators = {
+  $eq: (userValue, expected) => userValue === expected,
+  $ne: (userValue, expected) => userValue !== expected,
+  $in: (userValue, expected) => Array.isArray(expected) && expected.includes(userValue),
+  $not: (userValue, expected) => Array.isArray(expected) && !expected.includes(userValue),
+  $regex: (userValue, expected) =>
+    typeof userValue === 'string' && expected instanceof RegExp
+      ? expected.test(userValue)
+      : false,
+  $fn: (userValue, fn, user) => typeof fn === 'function' && fn(userValue, user),
+};
+
+const matchCondition = (userValue, condition, user) => {
+  if (typeof condition !== 'object' || condition instanceof RegExp || Array.isArray(condition)) {
+    return Array.isArray(condition)
+      ? operators.$in(userValue, condition)
+      : operators.$eq(userValue, condition);
+  }
+  // operator object
+  return Object.entries(condition).every(([op, expected]) => {
+    const handler = operators[op];
+    if (!handler) return false;
+    return handler(userValue, expected, user);
+  });
+};
+
+const checkRoleMiddlewareWithDefaultProject = (options) => {
+  return function (req, res, next) {
+    return checkRoleMiddleware(options)(req, res, next);
+  }
+}
+
 module.exports = { checkRoleMiddleware, checkRoleMiddlewareWithDefaultProject };

package/packages/cli/core/middleware/express/rateLimit.js

@@ -1,29 +1,29 @@
-const _beech_ = require(appRoot + "/beech.config.js");
-const rateLimit = require("express-rate-limit");
-const tooManyMsg = {
-  code: 429,
-  status: "TOO_MANY_REQUEST",
-  message: "Too Many Requests.",
-};
-let configure = {
-  windowMs: (_beech_.defineConfig.server.rateLimit) ? _beech_.defineConfig.server.rateLimit.windowMs : 0,
-  standardHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.standardHeaders || "draft-7") : "draft-7",
-  legacyHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.legacyHeaders || false) : false,
-  message: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.message || tooManyMsg) : tooManyMsg,
-};
-configure = {
-  ..._beech_.defineConfig.server.rateLimit, // Override default configure with user configure.
-  ...configure,
-  keyGenerator: (req) => `${req.ip}:${req.params.hash}${req.params['0']}`,
-};
-const Limiter = (more_configure = {}) => {
-  const middleware = rateLimit({
-    ...configure,
-    ...more_configure,
-  });
-  return (req, res, next) => {
-    middleware(req, res, next);
-  };
-};
-
-module.exports = { Limiter, rateLimit };
+const _beech_ = require(appRoot + "/beech.config.js");
+const rateLimit = require("express-rate-limit");
+const tooManyMsg = {
+  code: 429,
+  status: "TOO_MANY_REQUEST",
+  message: "Too Many Requests.",
+};
+let configure = {
+  windowMs: (_beech_.defineConfig.server.rateLimit) ? _beech_.defineConfig.server.rateLimit.windowMs : 0,
+  standardHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.standardHeaders || "draft-7") : "draft-7",
+  legacyHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.legacyHeaders || false) : false,
+  message: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.message || tooManyMsg) : tooManyMsg,
+};
+configure = {
+  ..._beech_.defineConfig.server.rateLimit, // Override default configure with user configure.
+  ...configure,
+  keyGenerator: (req) => `${req.ip}:${req.params.hash}${req.params['0']}`,
+};
+const Limiter = (more_configure = {}) => {
+  const middleware = rateLimit({
+    ...configure,
+    ...more_configure,
+  });
+  return (req, res, next) => {
+    middleware(req, res, next);
+  };
+};
+
+module.exports = { Limiter, rateLimit };

package/packages/cli/core/middleware/express/slowDown.js

@@ -1,2 +1,2 @@
-const { slowDown } = require("express-slow-down");
-module.exports = { slowDown };
+const { slowDown } = require("express-slow-down");
+module.exports = { slowDown };

package/packages/cli/core/middleware/index.js

@@ -1,6 +1,6 @@
-const { whitelist, sign } = require("./origin/whitelist/cors");
-const { avg } = require("./origin/guard/advance");
-const { Limiter } = require("./express/rateLimit");
-const { Duplicater } = require("./express/duplicateRequest");
-
-module.exports = { whitelist, sign, Limiter, Duplicater, avg };
+const { whitelist, sign } = require("./origin/whitelist/cors");
+const { avg } = require("./origin/guard/advance");
+const { Limiter } = require("./express/rateLimit");
+const { Duplicater } = require("./express/duplicateRequest");
+
+module.exports = { whitelist, sign, Limiter, Duplicater, avg };

package/packages/cli/core/middleware/origin/guard/advance.js

@@ -1,75 +1,75 @@
-const fs = require("fs");
-const passport_config_file = "/passport.config.js";
-const { avgDeHashIt } = require(__dirname + "/../../../helpers/math");
-const moment = require("moment");
-
-function avg(req, res, next) {
-  // check passport file ?
-  const checkPassport = new Promise((resolve) => {
-    if (fs.existsSync(appRoot + "/passport.config.js")) {
-      resolve([true, require(appRoot + passport_config_file)]);
-    } else {
-      resolve([false, null]);
-    }
-  });
-  // promise all
-  Promise.all([checkPassport]).then((final) => {
-    /**
-     * item[0] : Boolean = passport file found.
-     * item[1] : Object  = passport object. (for check on/off)
-     */
-    let item = final[0];
-    let passport_config = item[1];
-    // check passport file exists ?, when not exists go to next
-    if(item[0]) {
-      if ((passport_config.model.guard.advanced_guard) ? passport_config.model.guard.advanced_guard.allow : false) {
-        let advanced_guard_entity = req.headers[passport_config.model.guard.advanced_guard.entity || "timing"];
-        if (advanced_guard_entity) {
-          if(advanced_guard_entity.length > 60) {
-            //logic check advanced guard
-            avgDeHashIt(advanced_guard_entity, (err, unixTime) => {
-              if (err) {
-                res.status(502).json({ code: 502, status: "BAD_GATEWAY", message: String(err) });
-                return;
-              }
-              // prepare date & check it.
-              let unixTimeNow = moment(new Date()).unix();
-              let unixTiming = moment(new Date(unixTime * 1000)).add((passport_config.model.guard.advanced_guard.time_expired.minutes || 0), "minutes").add((passport_config.model.guard.advanced_guard.time_expired.seconds || 0), "seconds").unix();
-              if((String(unixTimeNow).length == String(unixTiming).length) && unixTimeNow < unixTiming) {
-                next();
-              } else {
-                res.status(408).json({ code: 408 , status: "REQUEST_TIMEOUT", message: "Request Timeout." });
-              }
-            });
-          } else {
-            res.status(400).json({
-              code: 400,
-              status: 'BAD_REQUEST',
-              message: "Bad request.",
-              info: {
-                status: "BAD_VALUE",
-                message: "Bad with wrong Advance guard key."
-              },
-            });
-          }
-        } else {
-          res.status(400).json({
-            code: 400,
-            status: 'BAD_REQUEST',
-            message: "Bad request.",
-            info: {
-              status: "BAD_ENTITY",
-              message: "Bad Advanced guard Entity."
-            },
-          });
-        }
-      } else {
-        next();
-      }
-    } else {
-      next();
-    }
-  });
-}
-
-module.exports = { avg };
+const fs = require("fs");
+const passport_config_file = "/passport.config.js";
+const { avgDeHashIt } = require(__dirname + "/../../../helpers/math");
+const moment = require("moment");
+
+function avg(req, res, next) {
+  // check passport file ?
+  const checkPassport = new Promise((resolve) => {
+    if (fs.existsSync(appRoot + "/passport.config.js")) {
+      resolve([true, require(appRoot + passport_config_file)]);
+    } else {
+      resolve([false, null]);
+    }
+  });
+  // promise all
+  Promise.all([checkPassport]).then((final) => {
+    /**
+     * item[0] : Boolean = passport file found.
+     * item[1] : Object  = passport object. (for check on/off)
+     */
+    let item = final[0];
+    let passport_config = item[1];
+    // check passport file exists ?, when not exists go to next
+    if(item[0]) {
+      if ((passport_config.model.guard.advanced_guard) ? passport_config.model.guard.advanced_guard.allow : false) {
+        let advanced_guard_entity = req.headers[passport_config.model.guard.advanced_guard.entity || "timing"];
+        if (advanced_guard_entity) {
+          if(advanced_guard_entity.length > 60) {
+            //logic check advanced guard
+            avgDeHashIt(advanced_guard_entity, (err, unixTime) => {
+              if (err) {
+                res.status(502).json({ code: 502, status: "BAD_GATEWAY", message: String(err) });
+                return;
+              }
+              // prepare date & check it.
+              let unixTimeNow = moment(new Date()).unix();
+              let unixTiming = moment(new Date(unixTime * 1000)).add((passport_config.model.guard.advanced_guard.time_expired.minutes || 0), "minutes").add((passport_config.model.guard.advanced_guard.time_expired.seconds || 0), "seconds").unix();
+              if((String(unixTimeNow).length == String(unixTiming).length) && unixTimeNow < unixTiming) {
+                next();
+              } else {
+                res.status(408).json({ code: 408 , status: "REQUEST_TIMEOUT", message: "Request Timeout." });
+              }
+            });
+          } else {
+            res.status(400).json({
+              code: 400,
+              status: 'BAD_REQUEST',
+              message: "Bad request.",
+              info: {
+                status: "BAD_VALUE",
+                message: "Bad with wrong Advance guard key."
+              },
+            });
+          }
+        } else {
+          res.status(400).json({
+            code: 400,
+            status: 'BAD_REQUEST',
+            message: "Bad request.",
+            info: {
+              status: "BAD_ENTITY",
+              message: "Bad Advanced guard Entity."
+            },
+          });
+        }
+      } else {
+        next();
+      }
+    } else {
+      next();
+    }
+  });
+}
+
+module.exports = { avg };

package/packages/cli/core/middleware/origin/whitelist/cors.js

@@ -1,94 +1,94 @@
-const fs = require("fs");
-
-function whitelist(cb) {
-  var whitelists = [];
-  const getWhitelists = new Promise((resolve) => {
-    if (fs.existsSync(appRoot + "/beech.config.js")) {
-      fs.readFile(appRoot + "/beech.config.js", "utf8", (err, e) => {
-        if (!err) {
-          let defineConfig = eval(e).defineConfig;
-          let origin = defineConfig.server.origin;
-          let originSensitive = defineConfig.server.originSensitive;
-          let allAllow = origin.filter((allow) => {
-            return allow == "*";
-          });
-          if (allAllow.length) {
-            resolve([whitelists, originSensitive]);
-          } else {
-            resolve([origin, originSensitive]);
-          }
-        } else {
-          // error resolve default whitelist
-          resolve([whitelists, originSensitive]);
-        }
-      });
-    } else {
-      resolve([whitelists, originSensitive]);
-    }
-  });
-  // promise all
-  Promise.all([getWhitelists]).then((final) => {
-    cb(final[0][0], final[0][1]);
-  });
-}
-
-function sign(req, res, whitelist, originSensitive, cb) {
-  try {
-    const origin = req.headers.origin;
-    let doYouSignSomeOrigin = false;
-    //var host = req.get("host");
-    console.log(`[${_requestTime_}] : From origin: ${origin || 'http://localhost'}`);
-    // check whitelist length ?
-    if (whitelist.length > 0) {
-      whitelist.forEach((val, k) => {
-        if (origin) {
-          if (origin.indexOf(val) > -1) {
-            doYouSignSomeOrigin = true;
-            if (originSensitive) {
-              res.setHeader("Access-Control-Allow-Origin", val);
-            } else {
-              res.setHeader("Access-Control-Allow-Origin", origin);
-            }
-          }
-        }
-        if (whitelist.length == k + 1) {
-          if (!doYouSignSomeOrigin) {
-            setLocalHeader(res);
-          }
-        }
-      });
-    } else {
-      if(origin) {
-        res.setHeader("Access-Control-Allow-Origin", origin); // add origin when not sign origin: []|["*"]
-      } else {
-        setLocalHeader(res);
-      }
-    }
-    // Request methods you wish to allow
-    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, PATCH, DELETE");
-    // Request headers you wish to allow
-    res.setHeader(
-      "Access-Control-Allow-Headers",
-      "X-Requested-With",
-      "Content-Type",
-      "Accept",
-      "Authorization",
-      "Origin",
-      "application/json; charset=utf-8"
-    );
-    // Set to true if you need the website to include cookies in the requests sent
-    // to the API (e.g. in case you use sessions)
-    res.setHeader("Access-Control-Allow-Credentials", true);
-    // callback
-    cb(null);
-  } catch (error) {
-    cb(error);
-  }
-}
-
-function setLocalHeader(res) {
-  res.setHeader("Access-Control-Allow-Origin", "http://localhost:" + _config_.main_config.app_port);
-  res.setHeader("Access-Control-Allow-Origin", "http://127.0.0.1:" + _config_.main_config.app_port);
-}
-
-module.exports = { whitelist, sign };
+const fs = require("fs");
+
+function whitelist(cb) {
+  var whitelists = [];
+  const getWhitelists = new Promise((resolve) => {
+    if (fs.existsSync(appRoot + "/beech.config.js")) {
+      fs.readFile(appRoot + "/beech.config.js", "utf8", (err, e) => {
+        if (!err) {
+          let defineConfig = eval(e).defineConfig;
+          let origin = defineConfig.server.origin;
+          let originSensitive = defineConfig.server.originSensitive;
+          let allAllow = origin.filter((allow) => {
+            return allow == "*";
+          });
+          if (allAllow.length) {
+            resolve([whitelists, originSensitive]);
+          } else {
+            resolve([origin, originSensitive]);
+          }
+        } else {
+          // error resolve default whitelist
+          resolve([whitelists, originSensitive]);
+        }
+      });
+    } else {
+      resolve([whitelists, originSensitive]);
+    }
+  });
+  // promise all
+  Promise.all([getWhitelists]).then((final) => {
+    cb(final[0][0], final[0][1]);
+  });
+}
+
+function sign(req, res, whitelist, originSensitive, cb) {
+  try {
+    const origin = req.headers.origin;
+    let doYouSignSomeOrigin = false;
+    //var host = req.get("host");
+    console.log(`[${_requestTime_}] : From origin: ${origin || 'http://localhost'}`);
+    // check whitelist length ?
+    if (whitelist.length > 0) {
+      whitelist.forEach((val, k) => {
+        if (origin) {
+          if (origin.indexOf(val) > -1) {
+            doYouSignSomeOrigin = true;
+            if (originSensitive) {
+              res.setHeader("Access-Control-Allow-Origin", val);
+            } else {
+              res.setHeader("Access-Control-Allow-Origin", origin);
+            }
+          }
+        }
+        if (whitelist.length == k + 1) {
+          if (!doYouSignSomeOrigin) {
+            setLocalHeader(res);
+          }
+        }
+      });
+    } else {
+      if(origin) {
+        res.setHeader("Access-Control-Allow-Origin", origin); // add origin when not sign origin: []|["*"]
+      } else {
+        setLocalHeader(res);
+      }
+    }
+    // Request methods you wish to allow
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, PATCH, DELETE");
+    // Request headers you wish to allow
+    res.setHeader(
+      "Access-Control-Allow-Headers",
+      "X-Requested-With",
+      "Content-Type",
+      "Accept",
+      "Authorization",
+      "Origin",
+      "application/json; charset=utf-8"
+    );
+    // Set to true if you need the website to include cookies in the requests sent
+    // to the API (e.g. in case you use sessions)
+    res.setHeader("Access-Control-Allow-Credentials", true);
+    // callback
+    cb(null);
+  } catch (error) {
+    cb(error);
+  }
+}
+
+function setLocalHeader(res) {
+  res.setHeader("Access-Control-Allow-Origin", "http://localhost:" + _config_.main_config.app_port);
+  res.setHeader("Access-Control-Allow-Origin", "http://127.0.0.1:" + _config_.main_config.app_port);
+}
+
+module.exports = { whitelist, sign };