dbgate-api-premium 7.0.3 → 7.0.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dbgate-api-premium",
   "main": "src/index.js",
-  "version": "7.0.3",
+  "version": "7.0.6",
   "homepage": "https://dbgate.org/",
   "repository": {
     "type": "git",
@@ -30,10 +30,10 @@
     "compare-versions": "^3.6.0",
     "cors": "^2.8.5",
     "cross-env": "^6.0.3",
-    "dbgate-datalib": "^7.0.3",
+    "dbgate-datalib": "^7.0.6",
     "dbgate-query-splitter": "^4.11.9",
-    "dbgate-sqltree": "^7.0.3",
-    "dbgate-tools": "^7.0.3",
+    "dbgate-sqltree": "^7.0.6",
+    "dbgate-tools": "^7.0.6",
     "debug": "^4.3.4",
     "diff": "^5.0.0",
     "diff2html": "^3.4.13",
@@ -87,7 +87,7 @@
   "devDependencies": {
     "@types/fs-extra": "^9.0.11",
     "@types/lodash": "^4.14.149",
-    "dbgate-types": "^7.0.3",
+    "dbgate-types": "^7.0.6",
     "env-cmd": "^10.1.0",
     "jsdoc-to-markdown": "^9.0.5",
     "node-loader": "^1.0.2",

package/src/controllers/auth.js

@@ -55,6 +55,8 @@ function authMiddleware(req, res, next) {
     '/stream',
     '/storage/get-connections-for-login-page',
     '/storage/set-admin-password',
+    '/storage/request-password-reset',
+    '/storage/reset-password',
     '/auth/get-providers',
     '/connections/dblogin-web',
     '/connections/dblogin-app',

package/src/controllers/connections.js

@@ -205,7 +205,7 @@ module.exports = {
       return storageConnections;
     }
     if (portalConnections) {
-      if (platformInfo.allowShellConnection) return portalConnections;
+      if (platformInfo.allowShellConnection) return portalConnections.map(x => encryptConnection(x));
       return portalConnections.map(maskConnection).filter(x => connectionHasPermission(x, loadedPermissions));
     }
     return (await this.datastore.find()).filter(x => connectionHasPermission(x, loadedPermissions));
@@ -243,13 +243,13 @@ module.exports = {
     subprocess.send({ ...connection, requestDbList });
     return new Promise((resolve, reject) => {
       let isWaitingForVolatile = false;
-      
+
       const cleanup = () => {
         if (connection._id && pendingTestSubprocesses[connection._id]) {
           delete pendingTestSubprocesses[connection._id];
         }
       };
-      
+
       subprocess.on('message', resp => {
         if (handleProcessCommunication(resp, subprocess)) return;
         // @ts-ignore
@@ -279,8 +279,8 @@ module.exports = {
           reject(new MissingCredentialsError(missingCredentialsDetail));
         }
       });
-      
-      subprocess.on('exit', (code) => {
+
+      subprocess.on('exit', code => {
         // If exit happens while waiting for volatile, that's expected
         if (isWaitingForVolatile && code === 0) {
           cleanup();
@@ -291,8 +291,8 @@ module.exports = {
           reject(new Error(`Test subprocess exited with code ${code}`));
         }
       });
-      
-      subprocess.on('error', (err) => {
+
+      subprocess.on('error', err => {
         cleanup();
         reject(err);
       });
@@ -327,7 +327,7 @@ module.exports = {
       return testRes;
     } else {
       volatileConnections[res._id] = res;
-      
+
       // Check if there's a pending test subprocess waiting for this volatile connection
       const pendingTest = pendingTestSubprocesses[conid];
       if (pendingTest) {
@@ -335,7 +335,7 @@ module.exports = {
         try {
           // Send the volatile connection to the waiting subprocess
           subprocess.send({ ...res, requestDbList, isVolatileResolved: true });
-          
+
           // Wait for the test result and emit it as an event
           subprocess.once('message', resp => {
             if (handleProcessCommunication(resp, subprocess)) return;
@@ -358,7 +358,7 @@ module.exports = {
           delete pendingTestSubprocesses[conid];
         }
       }
-      
+
       return res;
     }
   },
@@ -489,7 +489,7 @@ module.exports = {
 
     if (portalConnections) {
       const res = portalConnections.find(x => x._id == conid) || null;
-      return mask && !platformInfo.allowShellConnection ? maskConnection(res) : res;
+      return mask && !platformInfo.allowShellConnection ? maskConnection(res) : encryptConnection(res);
     }
     const res = await this.datastore.get(conid);
     return res || null;

package/src/controllers/storage.js

@@ -16,6 +16,7 @@ const {
   storageSaveDetailPermissionsDiff,
   saveStorageTeamFilesPermissions,
   saveStorageTeamFoldersPermissions,
+  storageSqlCommandFmt,
 } = require('./storageDb');
 const { hasPermission, loadPermissionsFromRequest } = require('../utility/hasPermission');
 const { changeSetToSql, removeSchemaFromChangeSet } = require('dbgate-datalib');
@@ -28,9 +29,10 @@ const {
   getPredefinedPermissions,
   runQueryOnDriver,
   safeJsonParse,
+  extractErrorLogData,
 } = require('dbgate-tools');
 const socket = require('../utility/socket');
-const { obtainRefreshedLicense } = require('../utility/authProxy');
+const { obtainRefreshedLicense, sendEmailViaApi } = require('../utility/authProxy');
 const { datadir } = require('../utility/directories');
 const {
   loadEncryptionKeyFromExternal,
@@ -43,6 +45,7 @@ const dataReplicator = require('../shell/dataReplicator');
 const storageReplicatorItems = require('../utility/storageReplicatorItems');
 const { sendToAuditLog } = require('../utility/auditlog');
 const { extractImportEntitiesFromEnv, createStorageFromEnvReplicatorItems } = require('../utility/envtools');
+const { format } = require('date-fns');
 
 const logger = getLogger('storage');
 
@@ -1150,4 +1153,133 @@ module.exports = {
     });
     socket.emitChanged('connection-list-changed');
   },
+
+  requestPasswordReset_meta: true,
+  async requestPasswordReset({ email }, req) {
+    // Check if user exists with this email
+    const users = await storageSelectFmt('select * from ~users where ~email = %v', email);
+
+    if (users.length === 0) {
+      // Don't reveal whether user exists or not for security reasons
+      return { success: true };
+    }
+
+    const user = users[0];
+
+    // Generate a secure random token
+    const token = crypto.randomBytes(32).toString('hex');
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + 60 * 60 * 1000); // 1 hour expiry
+
+    // Store token in database
+    await storageSqlCommandFmt(
+      'insert into ~password_reset_tokens (~user_id, ~token, ~created_at, ~expires_at) values (%v, %v, %v, %v)',
+      user.id,
+      token,
+      format(now, "yyyy-MM-dd'T'HH:mm:ss"),
+      format(expiresAt, "yyyy-MM-dd'T'HH:mm:ss")
+    );
+
+    // Generate reset link
+    const resetUrl = `${req.headers.origin || 'http://localhost:3000'}/reset-password.html?token=${token}`;
+
+    // Send email via api.dbgate.io
+    try {
+      await sendEmailViaApi({
+        receiver: email,
+        subject: 'DbGate Password Reset',
+        body: `
+Hello,
+
+You requested a password reset for your DbGate account.
+
+Click the following link to reset your password:
+${resetUrl}
+
+This link will expire in 1 hour.
+
+If you did not request this password reset, please ignore this email.
+
+Best regards,
+DbGate Team
+        `.trim(),
+      });
+
+      sendToAuditLog(req, {
+        category: 'auth',
+        component: 'StorageController',
+        action: 'requestPasswordReset',
+        event: 'password.resetRequested',
+        severity: 'info',
+        detail: { email },
+        message: 'Password reset requested',
+      });
+    } catch (err) {
+      logger.error(extractErrorLogData(err), 'DBGM-00270 Failed to send password reset email');
+      // Cleanup: delete the password reset token that was inserted before sending the email
+      try {
+        await storageSqlCommandFmt(
+          'delete from ~password_reset_tokens where ~token = %v and ~used_at is null',
+          token
+        );
+      } catch (cleanupErr) {
+        logger.error(
+          extractErrorLogData(cleanupErr),
+          'DBGM-00274 Failed to clean up password reset token after email failure'
+        );
+      }
+      return { error: 'Failed to send email' };
+    }
+
+    return { success: true };
+  },
+
+  resetPassword_meta: true,
+  async resetPassword({ token, newPassword }, req) {
+    // Find valid token
+    const tokens = await storageSelectFmt(
+      'select * from ~password_reset_tokens where ~token = %v and ~used_at is null and ~expires_at > %v',
+      token,
+      format(new Date(), "yyyy-MM-dd'T'HH:mm:ss")
+    );
+
+    if (tokens.length === 0) {
+      return { error: 'Invalid or expired token' };
+    }
+
+    const resetToken = tokens[0];
+
+    // Get user
+    const users = await storageSelectFmt('select * from ~users where ~id = %v', resetToken.user_id);
+    if (users.length === 0) {
+      return { error: 'User not found' };
+    }
+
+    const user = users[0];
+
+    await storageSqlCommandFmt(
+      'update ~users set ~password = %v where ~id = %v',
+      encryptPasswordString(newPassword),
+      user.id
+    );
+
+    // Mark token as used
+    await storageSqlCommandFmt(
+      'update ~password_reset_tokens set ~used_at = %v where ~id = %v',
+      format(new Date(), "yyyy-MM-dd'T'HH:mm:ss"),
+      resetToken.id
+    );
+
+    sendToAuditLog(req, {
+      category: 'auth',
+      component: 'StorageController',
+      action: 'resetPassword',
+      event: 'password.resetCompleted',
+      severity: 'info',
+      detail: { userId: user.id, login: user.login },
+      message: 'Password reset completed',
+    });
+
+    return { success: true };
+  },
 };

package/src/currentVersion.js

@@ -1,5 +1,5 @@
 
 module.exports = { 
-  version: '7.0.3',
-  buildTime: '2026-02-05T12:32:21.606Z'
+  version: '7.0.6',
+  buildTime: '2026-02-13T08:57:35.650Z'
 };

package/src/storageModel.js

@@ -850,6 +850,84 @@ module.exports = {
         }
       ]
     },
+    {
+      "pureName": "password_reset_tokens",
+      "columns": [
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "id",
+          "dataType": "int",
+          "autoIncrement": true,
+          "notNull": true
+        },
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "user_id",
+          "dataType": "int",
+          "notNull": true
+        },
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "token",
+          "dataType": "varchar(500)",
+          "notNull": true
+        },
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "created_at",
+          "dataType": "datetime",
+          "notNull": true
+        },
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "expires_at",
+          "dataType": "datetime",
+          "notNull": true
+        },
+        {
+          "pureName": "password_reset_tokens",
+          "columnName": "used_at",
+          "dataType": "datetime",
+          "notNull": false
+        }
+      ],
+      "foreignKeys": [
+        {
+          "constraintType": "foreignKey",
+          "constraintName": "FK_password_reset_tokens_user_id",
+          "pureName": "password_reset_tokens",
+          "refTableName": "users",
+          "columns": [
+            {
+              "columnName": "user_id",
+              "refColumnName": "id"
+            }
+          ]
+        }
+      ],
+      "indexes": [
+        {
+          "constraintName": "idx_token",
+          "pureName": "password_reset_tokens",
+          "constraintType": "index",
+          "columns": [
+            {
+              "columnName": "token"
+            }
+          ]
+        }
+      ],
+      "primaryKey": {
+        "pureName": "password_reset_tokens",
+        "constraintType": "primaryKey",
+        "constraintName": "PK_password_reset_tokens",
+        "columns": [
+          {
+            "columnName": "id"
+          }
+        ]
+      }
+    },
     {
       "pureName": "roles",
       "columns": [

package/src/utility/authProxy.js

@@ -23,6 +23,14 @@ const AI_GATEWAY_URL = process.env.LOCAL_AI_GATEWAY
   ? 'https://aigw.dbgate.udolni.net'
   : 'https://aigw.dbgate.io';
 
+const DBGATE_API_URL = process.env.LOCAL_DBGATE_API
+  ? 'http://localhost:3115'
+  : process.env.PROD_DBGATE_API
+  ? 'https://api.dbgate.io'
+  : process.env.DEVWEB || process.env.DEVMODE
+  ? 'https://api.dbgate.udolni.net'
+  : 'https://api.dbgate.io';
+
 let licenseKey = null;
 
 function setAuthProxyLicense(value) {
@@ -339,6 +347,22 @@ function getAiGatewayServer() {
   };
 }
 
+async function sendEmailViaApi({ receiver, subject, body }) {
+  await axios.default.post(
+    `${DBGATE_API_URL}/send-email`,
+    {
+      receiver,
+      subject,
+      body,
+    },
+    {
+      headers: {
+        'x-api-key': '88506e22-3b01-4fe7-b1c3-e8779fc8cb90',
+      },
+    }
+  );
+}
+
 module.exports = {
   isAuthProxySupported,
   authProxyGetRedirectUrl,
@@ -355,5 +379,6 @@ module.exports = {
   getLicenseHttpHeaders,
   tryToGetRefreshedLicense,
   getAiGatewayServer,
+  sendEmailViaApi,
   // callChatStream,
 };