expressa 1.2.4 → 1.4.0

package/.circleci/config.yml

@@ -6,8 +6,8 @@ jobs:
     steps:
       - checkout
       - run:
-          name: update-npm
-          command: 'sudo npm install -g npm@latest'
+          name: set npm registry
+          command: 'npm config set registry https://registry.npmjs.org/'
       - run:
           name: install-npm
           command: npm install

package/auth/index.js

@@ -1,31 +1,45 @@
-const bcrypt = require('bcryptjs')
-const handler = require('./jwt')
-
-exports.createHash = function (password) {
-  const salt = bcrypt.genSaltSync(10)
-  return bcrypt.hashSync(password, salt)
-}
-
-exports.isValidPassword = function (password, hashedPassword) {
-  return bcrypt.compareSync(password, hashedPassword)
-}
-
-exports.doLogin = handler.doLogin
-
-exports.middleware = async function authMiddleware(req, res, next) {
-  try {
-    req.query = req.query || {}
-    const token = req.query['token'] || req.headers['x-access-token']
-    delete req.query['token']
-    delete req.headers['x-access-token']
-    const user = await handler.isLoggedIn(token, req.getSetting('jwt_secret'))
-    if (user) {
-      req.uid = user._id
-      req.ucollection = user.collection
-    }
-  }
-  catch(e) {
-    req.uerror = e.message === 'jwt expired' ? 'expired token' : 'jwt error'
-  }
-  next()
-}
+const bcrypt = require('bcryptjs')
+const handler = require('./jwt')
+const util = require('../util')
+
+exports.createHash = function (password) {
+  const salt = bcrypt.genSaltSync(10)
+  return bcrypt.hashSync(password, salt)
+}
+
+exports.isValidPassword = function (password, hashedPassword) {
+  return bcrypt.compareSync(password, hashedPassword)
+}
+
+exports.doLogin = handler.doLogin
+
+exports.middleware = async function authMiddleware(req, res, next) {
+  req.query = req.query || {}
+  const token = req.query['token'] || req.headers['x-access-token']
+  delete req.query['token']
+  delete req.headers['x-access-token']
+  let payload
+  try {
+    payload = await handler.isLoggedIn(token, req.getSetting('jwt_secret'))
+  }
+  catch(e) {
+    req.uerror = e.message
+  }
+  if (payload) {
+    let user
+    try {
+      user = await req.db[payload.collection].get(payload._id)
+    } catch (e) {
+      req.uerror = 'user no longer exists'
+    }
+    if (req.getSetting('jwt_expire_on_password_change') && user.meta.password_last_updated_at !== payload.timestamp) {
+      req.uerror = 'jwt expired'
+    }
+    if (!req.uerror) {
+      req.uid = payload._id
+      req.ucollection = payload.collection
+      req.user = user
+    }
+  }
+  next()
+}

package/auth/jwt.js

@@ -4,13 +4,14 @@ const util = require('../util')
 
 // User document already validated, created, and saved to database
 // The id of that document is given.
-exports.doLogin = function (id, collection, jwt_secret, jwt_options = {}) {
+exports.doLogin = function ({ id, collection, timestamp, jwt_secret, jwt_options = {} }) {
   if (!jwt_secret) {
     throw new util.ApiError(500, 'missing jwt_secret')
   }
   const token = jwt.sign({
     _id: id,
-    collection
+    collection,
+    timestamp,
   }, jwt_secret, jwt_options)
   return {
     token: token,

package/controllers/users.js

@@ -22,9 +22,16 @@ exports.login = async (req, collection) => {
     throw new util.ApiError(401, 'Incorrect password')
   }
   const jwt_options = req.settings.jwt_expires_in ? { expiresIn: req.settings.jwt_expires_in } : {}
-  const payload = auth.doLogin(user._id, collection, req.getSetting('jwt_secret'), jwt_options)
+  const payload = auth.doLogin({
+    id: user._id,
+    collection,
+    timestamp: user.meta.password_last_updated_at,
+    jwt_secret: req.getSetting('jwt_secret'),
+    jwt_options
+  })
   req.uid = user._id
   req.ucollection = collection
+  req.user = user
   await permissions.addRolePermissionsAsync(req)
   payload.canUseAdmin = req.hasPermission('login to admin')
   return payload

package/index.js

@@ -93,7 +93,8 @@ function ph (requestHandler) {
       }
       req.returnedError = err
       res.status(err.status).send({
-        error: err.result || err.message || err, tokenError: req.uerror
+        error: err.result || err.message || err,
+        tokenError: req.uerror ?  (req.uerror === 'jwt expired' ? 'expired token' : 'jwt error') : undefined
       })
     }
   }
@@ -112,13 +113,8 @@ module.exports.api = function (settings) {
     get pgpool() {
       return util.getPgPool(router.settings.postgresql_uri)
     },
-    ApiError: util.ApiError,
-    generateDocumentId: util.generateDocumentId,
     doLogin: auth.doLogin,
-    createPagination: util.createPagination,
-    createPagePagination: util.createPagePagination,
-    normalizeOrderBy: util.normalizeOrderBy,
-    getDatabaseOffset: util.getDatabaseOffset,
+    ...util,
   }
   router.eventListeners = {}
 

package/listeners.js

@@ -1,59 +1,64 @@
-const debug = require('debug')('expressa')
-const util = require('./util')
-
-module.exports = function (api) {
-  /* Listeners to avoid the need for a server restart */
-  api.addCollectionListener('changed', 'collection', async function setupCollectionStorage (req, collection, data) {
-    if (!(data.storage === 'memory' && util.getPath(api.db[data._id], 'type') === 'memory')) {
-      await api.setupCollectionDb(data)
-    }
-    debug('updated ' + data._id + ' collection storage')
-  })
-  api.addCollectionListener('delete', 'collection', function cleanupCollectionStorage (req, collection, data) {
-    delete api.db[data._id]
-    debug('removed ' + data._id + ' collection storage')
-  })
-  api.addCollectionListener('changed', 'settings', function updateInMemorySettings (req, collection, data) {
-    // TODO: only reload if current environment is updated
-    Object.assign(req.settings, data)
-  })
-
-  api.addListener(['put', 'post'], function updateMetadata (req, collection, data, { event }) {
-    data.meta = data.meta || {}
-    data.meta.updated = new Date().toISOString()
-    if (event === 'post') {
-      data.meta.created = new Date().toISOString()
-      if (req.user) {
-        data.meta.owner = req.user._id
-      }
-    }
-  })
-
-  api.addCollectionListener('get', 'schemas', function addMetaToSchema (req, collection, data) {
-    const schema = data.schema
-    schema.properties.meta = {
-      type: 'object',
-      propertyOrder: 2000,
-      properties: {
-        created: {
-          type: 'string'
-        },
-        updated: {
-          type: 'string'
-        }
-      }
-    }
-    if (data.documentsHaveOwners) {
-      schema.properties.meta.properties.owner = {
-        type: 'string',
-        links: [
-          {
-            rel: '» view owner user',
-            href: '/admin/#/edit/users/{{self}}',
-            class: 'comment-link'
-          }
-        ]
-      }
-    }
-  })
-}
+const debug = require('debug')('expressa')
+const util = require('./util')
+
+module.exports = function (api) {
+  /* Listeners to avoid the need for a server restart */
+  api.addCollectionListener('changed', 'collection', async function setupCollectionStorage (req, collection, data) {
+    if (!(data.storage === 'memory' && util.getPath(api.db[data._id], 'type') === 'memory')) {
+      await api.setupCollectionDb(data)
+    }
+    debug('updated ' + data._id + ' collection storage')
+  })
+  api.addCollectionListener('delete', 'collection', function cleanupCollectionStorage (req, collection, data) {
+    delete api.db[data._id]
+    debug('removed ' + data._id + ' collection storage')
+  })
+  api.addCollectionListener('changed', 'settings', function updateInMemorySettings (req, collection, data) {
+    // TODO: only reload if current environment is updated
+    Object.assign(req.settings, data)
+  })
+
+  api.addListener(['put', 'post'], function updateMetadata (req, collection, data, { event }) {
+    data.meta = data.meta || {}
+    data.meta.updated = new Date().toISOString()
+    if (event === 'post') {
+      data.meta.created = new Date().toISOString()
+      if (req.user) {
+        if (req.hasPermission('login to admin')) {
+          data.meta.owner = data.meta.owner || req.user._id
+        }
+        else {
+          data.meta.owner = req.user._id
+        }
+      }
+    }
+  })
+
+  api.addCollectionListener('get', 'schemas', function addMetaToSchema (req, collection, data) {
+    const schema = data.schema
+    schema.properties.meta = {
+      type: 'object',
+      propertyOrder: 2000,
+      properties: {
+        created: {
+          type: 'string'
+        },
+        updated: {
+          type: 'string'
+        }
+      }
+    }
+    if (data.documentsHaveOwners) {
+      schema.properties.meta.properties.owner = {
+        type: 'string',
+        links: [
+          {
+            rel: '» view owner user',
+            href: '/admin/#/edit/users/{{self}}',
+            class: 'comment-link'
+          }
+        ]
+      }
+    }
+  })
+}

package/listeners_users.js

@@ -1,87 +1,88 @@
-const auth = require('./auth')
-const util = require('./util.js')
-const debug = require('debug')('expressa')
-
-module.exports = async function(api) {
-
-  const loginCollections = (await util.getLoginCollections(api)).map((coll) => coll._id)
-
-  api.addCollectionListener(['post', 'put'], loginCollections, async function updatePassword(req, collection, data) {
-    if (req.method === 'PUT') {
-      const oldData = await api.db[collection].get(data._id)
-      if (!data.password) {
-        data.password = oldData.password // preserve password if not explicitly set
-      }
-    }
-    if (data.password && data.password.length !== 60 && data.password[0] !== '$') {
-      debug('hashing and replacing password in the user document.')
-      data.password = auth.createHash(data.password)
-    }
-  })
-
-  api.addCollectionListener('post', loginCollections, async function roleCreateCheck(req, collection, data) {
-    if (!data.roles) {
-      data.roles = []
-    }
-    // user special case to allow first user to be admin
-    if (collection === 'users') {
-      const hasUsers = (await api.db.users.find({}, 0, 1)).length === 1
-      if (!hasUsers && !data.roles.includes('Admin')) {
-        throw new util.ApiError(400, 'first user must have role Admin')
-      }
-      if (hasUsers && data.roles.length > 0 && !req.hasPermission('users: modify roles')) {
-        throw new util.ApiError(400, 'insufficient permissions to create user with roles')
-      }
-    }
-    else {
-      if (data.roles.length > 0 && !req.hasPermission(`${collection}: modify roles`)) {
-        throw new util.ApiError(400, `insufficient permissions to create ${collection} with roles`)
-      }
-    }
-  })
-
-  api.addLateCollectionListener('put', loginCollections, async function roleChangeCheck(req, collection, data) {
-    if (!req.hasPermission(`${collection}: modify roles`)) {
-      const oldData = await api.db[collection].get(data._id)
-      data.roles = oldData.roles
-    }
-  })
-
-  api.addCollectionListenerWithPriority(['get', 'changed', 'deleted'], loginCollections, 100, function hidePasswordHashes(req, collection, data) {
-    if (!req.hasPermission(`${collection}: view hashed passwords`)) {
-      debug(`deleting password because "${collection}: view hashed passwords"-permission is not set`)
-      delete data.password
-    }
-  })
-
-  api.addCollectionListener('post', loginCollections, async function userUniquenessCheck(req, collection, data) {
-    const result = await api.db[collection].find({email: data.email})
-    if (result.length > 0) {
-      throw new util.ApiError(409, 'This email is already registered.')
-    }
-  })
-
-  /* Mantain users-roles reference */
-  api.addCollectionListener('changed', 'role', async function addRoleToUserSchema(req, collection, data) {
-    for (const coll of loginCollections) {
-      const doc = await api.db.collection.get(coll)
-      if (!doc.schema.properties.roles.items.enum.includes(data._id)) {
-        doc.schema.properties.roles.items.enum.push(data._id)
-        await api.db.collection.update(coll, doc)
-        await api.notify('changed', req, coll, doc)
-      }
-    }
-  })
-
-  api.addCollectionListener('deleted', 'role', async function removeRoleToUserSchema(req, collection, data) {
-    for (const coll of loginCollections) {
-      const doc = await api.db.collection.get(coll)
-      const roles = doc.schema.properties.roles.items.enum
-      if (roles.includes(data._id)) {
-        roles.splice(roles.indexOf(data._id), 1)
-        await api.db.collection.update(coll, doc)
-        await api.notify('changed', req, coll, doc)
-      }
-    }
-  })
-}
+const auth = require('./auth')
+const util = require('./util.js')
+const debug = require('debug')('expressa')
+
+module.exports = async function(api) {
+
+  const loginCollections = (await util.getLoginCollections(api)).map((coll) => coll._id)
+
+  api.addCollectionListener(['post', 'put'], loginCollections, async function updatePassword(req, collection, data) {
+    if (req.method === 'PUT') {
+      if (!data.password) {
+        const oldData = await api.db[collection].get(data._id)
+        data.password = oldData.password // preserve password if not explicitly set
+      }
+    }
+    if (data.password && data.password.length !== 60 && data.password[0] !== '$') {
+      debug('hashing and replacing password in the user document.')
+      data.password = auth.createHash(data.password)
+      data.meta.password_last_updated_at = new Date().toISOString()
+    }
+  })
+
+  api.addCollectionListener('post', loginCollections, async function roleCreateCheck(req, collection, data) {
+    if (!data.roles) {
+      data.roles = []
+    }
+    // user special case to allow first user to be admin
+    if (collection === 'users') {
+      const hasUsers = (await api.db.users.find({}, 0, 1)).length === 1
+      if (!hasUsers && !data.roles.includes('Admin')) {
+        throw new util.ApiError(400, 'first user must have role Admin')
+      }
+      if (hasUsers && data.roles.length > 0 && !req.hasPermission('users: modify roles')) {
+        throw new util.ApiError(400, 'insufficient permissions to create user with roles')
+      }
+    }
+    else {
+      if (data.roles.length > 0 && !req.hasPermission(`${collection}: modify roles`)) {
+        throw new util.ApiError(400, `insufficient permissions to create ${collection} with roles`)
+      }
+    }
+  })
+
+  api.addLateCollectionListener('put', loginCollections, async function roleChangeCheck(req, collection, data) {
+    if (!req.hasPermission(`${collection}: modify roles`)) {
+      const oldData = await api.db[collection].get(data._id)
+      data.roles = oldData.roles
+    }
+  })
+
+  api.addCollectionListenerWithPriority(['get', 'changed', 'deleted'], loginCollections, 100, function hidePasswordHashes(req, collection, data) {
+    if (!req.hasPermission(`${collection}: view hashed passwords`)) {
+      debug(`deleting password because "${collection}: view hashed passwords"-permission is not set`)
+      delete data.password
+    }
+  })
+
+  api.addCollectionListener('post', loginCollections, async function userUniquenessCheck(req, collection, data) {
+    const result = await api.db[collection].find({email: data.email})
+    if (result.length > 0) {
+      throw new util.ApiError(409, 'This email is already registered.')
+    }
+  })
+
+  /* Mantain users-roles reference */
+  api.addCollectionListener('changed', 'role', async function addRoleToUserSchema(req, collection, data) {
+    for (const coll of loginCollections) {
+      const doc = await api.db.collection.get(coll)
+      if (!doc.schema.properties.roles.items.enum.includes(data._id)) {
+        doc.schema.properties.roles.items.enum.push(data._id)
+        await api.db.collection.update(coll, doc)
+        await api.notify('changed', req, coll, doc)
+      }
+    }
+  })
+
+  api.addCollectionListener('deleted', 'role', async function removeRoleToUserSchema(req, collection, data) {
+    for (const coll of loginCollections) {
+      const doc = await api.db.collection.get(coll)
+      const roles = doc.schema.properties.roles.items.enum
+      if (roles.includes(data._id)) {
+        roles.splice(roles.indexOf(data._id), 1)
+        await api.db.collection.update(coll, doc)
+        await api.notify('changed', req, coll, doc)
+      }
+    }
+  })
+}

package/middleware/permissions.js

@@ -1,53 +1,47 @@
-const util = require('../util')
-let authenticatedRoleExists
-
-async function addRolePermissions (req, roles) {
-  req.permissions = req.permissions || {}
-  const roleDocs = await Promise.all(roles.map((name) => req.db.role.get(name)))
-  roleDocs.forEach((roleDoc) => {
-    for (const permission in roleDoc.permissions) {
-      if (roleDoc.permissions[permission]) {
-        req.permissions[permission] = true
-      }
-    }
-  })
-}
-
-async function doesAuthenticatedRoleExist(req) {
-  if (typeof authenticatedRoleExists === 'undefined') {
-    try {
-      await req.db.role.get('Authenticated')
-      authenticatedRoleExists = true
-    } catch (e) {
-      authenticatedRoleExists = false
-    }
-  }
-  return authenticatedRoleExists
-}
-
-module.exports.addRolePermissionsAsync = async function addRolePermissionsMiddlewareAsync(req) {
-  if (!req.settings || !req.settings.enforce_permissions) {
-    // Use a dummy permission getter
-    req.hasPermission = () => true
-    return
-  }
-  req.hasPermission = (permission) => req.permissions && req.permissions[permission]
-  let roles = ['Anonymous']
-  const isAuthenticatedRole = await doesAuthenticatedRoleExist(req)
-  if (req.uid) {
-    try {
-      const user = await req.db[req.ucollection].get(req.uid)
-      req.user = user
-      roles = (user.roles || []).concat(isAuthenticatedRole ? ['Authenticated'] : [])
-    } catch (e) {
-      throw new util.ApiError(404, 'User no longer exists')
-    }
-  } else {
-    req.user = {}
-  }
-  await addRolePermissions(req, roles)
-}
-
-module.exports.middleware = function addRolePermissionsMiddleware (req, res, next) {
-  module.exports.addRolePermissionsAsync(req).then(next).catch(next)
-}
+const util = require('../util')
+let authenticatedRoleExists
+
+async function addRolePermissions (req, roles) {
+  req.permissions = req.permissions || {}
+  const roleDocs = await Promise.all(roles.map((name) => req.db.role.get(name)))
+  roleDocs.forEach((roleDoc) => {
+    for (const permission in roleDoc.permissions) {
+      if (roleDoc.permissions[permission]) {
+        req.permissions[permission] = true
+      }
+    }
+  })
+}
+
+async function doesAuthenticatedRoleExist(req) {
+  if (typeof authenticatedRoleExists === 'undefined') {
+    try {
+      await req.db.role.get('Authenticated')
+      authenticatedRoleExists = true
+    } catch (e) {
+      authenticatedRoleExists = false
+    }
+  }
+  return authenticatedRoleExists
+}
+
+module.exports.addRolePermissionsAsync = async function addRolePermissionsMiddlewareAsync(req) {
+  if (!req.settings || !req.settings.enforce_permissions) {
+    // Use a dummy permission getter
+    req.hasPermission = () => true
+    return
+  }
+  req.hasPermission = (permission) => req.permissions && req.permissions[permission]
+  let roles = ['Anonymous']
+  const isAuthenticatedRole = await doesAuthenticatedRoleExist(req)
+  if (req.uid) {
+    roles = (req.user.roles || []).concat(isAuthenticatedRole ? ['Authenticated'] : [])
+  } else {
+    req.user = {}
+  }
+  await addRolePermissions(req, roles)
+}
+
+module.exports.middleware = function addRolePermissionsMiddleware (req, res, next) {
+  module.exports.addRolePermissionsAsync(req).then(next).catch(next)
+}

package/modules/admin/dist/index.html

@@ -1 +1 @@
-<!DOCTYPE html><html><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><script crossorigin src=https://cdnjs.cloudflare.com/ajax/libs/react/15.3.2/react.min.js></script><script crossorigin src=https://cdnjs.cloudflare.com/ajax/libs/react/15.3.2/react-dom.min.js></script><link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel=stylesheet><script src=settings.js></script><title>Expressa Admin</title><link rel=icon href=/admin/favicon.ico><link href=/admin/static/css/chunk-elementUI.3d004d9f.css rel=stylesheet><link href=/admin/static/css/chunk-libs.327ad89e.css rel=stylesheet><link href=/admin/static/css/app.9dd57eea.css rel=stylesheet></head><body><div id=app></div><script>!function(e){function n(n){for(var r,c,a=n[0],f=n[1],i=n[2],h=0,s=[];h<a.length;h++)c=a[h],Object.prototype.hasOwnProperty.call(u,c)&&u[c]&&s.push(u[c][0]),u[c]=0;for(r in f)Object.prototype.hasOwnProperty.call(f,r)&&(e[r]=f[r]);for(l&&l(n);s.length;)s.shift()();return o.push.apply(o,i||[]),t()}function t(){for(var e,n=0;n<o.length;n++){for(var t=o[n],r=!0,c=1;c<t.length;c++){var f=t[c];0!==u[f]&&(r=!1)}r&&(o.splice(n--,1),e=a(a.s=t[0]))}return e}var r={},c={runtime:0},u={runtime:0},o=[];function a(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,a),t.l=!0,t.exports}a.e=function(e){var n=[];c[e]?n.push(c[e]):0!==c[e]&&{"chunk-621e":1,"chunk-e375":1,"chunk-3bc2":1,"chunk-5cee":1,"chunk-7291":1,"chunk-b423":1,"chunk-bd5f":1,"chunk-f075":1,"chunk-f691":1,"chunk-1dff":1}[e]&&n.push(c[e]=new Promise((function(n,t){for(var r="static/css/"+({}[e]||e)+"."+{"chunk-09d8":"31d6cfe0","chunk-621e":"f3d0eab6","chunk-e375":"1d849865","chunk-3bc2":"89632b9d","chunk-5cee":"9685afb8","chunk-7291":"13514e45","chunk-b423":"5f239333","chunk-bd5f":"6ab011ba","chunk-e7c3":"31d6cfe0","chunk-f075":"3a895a1e","chunk-f691":"4817ca73","chunk-1dff":"39c7634b"}[e]+".css",c=a.p+r,u=document.getElementsByTagName("link"),o=0;o<u.length;o++){var f=(h=u[o]).getAttribute("data-href")||h.getAttribute("href");if("stylesheet"===h.rel&&(f===r||f===c))return n()}var i=document.getElementsByTagName("style");for(o=0;o<i.length;o++){var h;if((f=(h=i[o]).getAttribute("data-href"))===r||f===c)return n()}var l=document.createElement("link");l.rel="stylesheet",l.type="text/css",l.onload=n,l.onerror=function(n){var r=n&&n.target&&n.target.src||c,u=new Error("Loading CSS chunk "+e+" failed.\n("+r+")");u.request=r,t(u)},l.href=c,document.getElementsByTagName("head")[0].appendChild(l)})).then((function(){c[e]=0})));var t=u[e];if(0!==t)if(t)n.push(t[2]);else{var r=new Promise((function(n,r){t=u[e]=[n,r]}));n.push(t[2]=r);var o,f=document.createElement("script");f.charset="utf-8",f.timeout=120,a.nc&&f.setAttribute("nonce",a.nc),f.src=function(e){return a.p+"static/js/"+({}[e]||e)+"."+{"chunk-09d8":"561880e0","chunk-621e":"6fe293e9","chunk-e375":"089d85cd","chunk-3bc2":"028748b7","chunk-5cee":"a6f0e769","chunk-7291":"590524e9","chunk-b423":"387c504c","chunk-bd5f":"af5f2197","chunk-e7c3":"e5df8ceb","chunk-f075":"315ceec1","chunk-f691":"c0cbf5c1","chunk-1dff":"1f1c0999"}[e]+".js"}(e);var i=new Error;o=function(n){f.onerror=f.onload=null,clearTimeout(h);var t=u[e];if(0!==t){if(t){var r=n&&("load"===n.type?"missing":n.type),c=n&&n.target&&n.target.src;i.message="Loading chunk "+e+" failed.\n("+r+": "+c+")",i.name="ChunkLoadError",i.type=r,i.request=c,t[1](i)}u[e]=void 0}};var h=setTimeout((function(){o({type:"timeout",target:f})}),12e4);f.onerror=f.onload=o,document.head.appendChild(f)}return Promise.all(n)},a.m=e,a.c=r,a.d=function(e,n,t){a.o(e,n)||Object.defineProperty(e,n,{enumerable:!0,get:t})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,n){if(1&n&&(e=a(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(a.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)a.d(t,r,function(n){return e[n]}.bind(null,r));return t},a.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(n,"a",n),n},a.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},a.p="/admin/",a.oe=function(e){throw console.error(e),e};var f=window.webpackJsonp=window.webpackJsonp||[],i=f.push.bind(f);f.push=n,f=f.slice();for(var h=0;h<f.length;h++)n(f[h]);var l=i;t()}([]);</script><script src=/admin/static/js/chunk-elementUI.b0c99c08.js></script><script src=/admin/static/js/chunk-libs.06c38828.js></script><script src=/admin/static/js/app.ebe90d64.js></script></body></html>
+<!DOCTYPE html><html><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><script crossorigin src=https://cdnjs.cloudflare.com/ajax/libs/react/15.3.2/react.min.js></script><script crossorigin src=https://cdnjs.cloudflare.com/ajax/libs/react/15.3.2/react-dom.min.js></script><link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel=stylesheet><script src=settings.js></script><title>Expressa Admin</title><link rel=icon href=/admin/favicon.ico><link href=/admin/static/css/chunk-elementUI.3d004d9f.css rel=stylesheet><link href=/admin/static/css/chunk-libs.327ad89e.css rel=stylesheet><link href=/admin/static/css/app.9dd57eea.css rel=stylesheet></head><body><div id=app></div><script>!function(e){function n(n){for(var r,c,a=n[0],f=n[1],i=n[2],h=0,d=[];h<a.length;h++)c=a[h],Object.prototype.hasOwnProperty.call(u,c)&&u[c]&&d.push(u[c][0]),u[c]=0;for(r in f)Object.prototype.hasOwnProperty.call(f,r)&&(e[r]=f[r]);for(l&&l(n);d.length;)d.shift()();return o.push.apply(o,i||[]),t()}function t(){for(var e,n=0;n<o.length;n++){for(var t=o[n],r=!0,c=1;c<t.length;c++){var f=t[c];0!==u[f]&&(r=!1)}r&&(o.splice(n--,1),e=a(a.s=t[0]))}return e}var r={},c={runtime:0},u={runtime:0},o=[];function a(n){if(r[n])return r[n].exports;var t=r[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,a),t.l=!0,t.exports}a.e=function(e){var n=[];c[e]?n.push(c[e]):0!==c[e]&&{"chunk-621e":1,"chunk-e374":1,"chunk-5061":1,"chunk-5e50":1,"chunk-7109":1,"chunk-7291":1,"chunk-7f4f":1,"chunk-9a95":1,"chunk-b423":1,"chunk-bd5f":1,"chunk-f075":1}[e]&&n.push(c[e]=new Promise((function(n,t){for(var r="static/css/"+({}[e]||e)+"."+{"chunk-09d8":"31d6cfe0","chunk-621e":"b826be8d","chunk-e374":"025d58bb","chunk-5061":"ce0e4bdb","chunk-5e17":"31d6cfe0","chunk-5e50":"f67eeaed","chunk-7109":"2bd6f37e","chunk-7291":"13514e45","chunk-7f4f":"f67eeaed","chunk-9a95":"c647a2ef","chunk-b423":"5f239333","chunk-bd5f":"aefa49d7","chunk-e7c3":"31d6cfe0","chunk-f075":"3a895a1e"}[e]+".css",c=a.p+r,u=document.getElementsByTagName("link"),o=0;o<u.length;o++){var f=(h=u[o]).getAttribute("data-href")||h.getAttribute("href");if("stylesheet"===h.rel&&(f===r||f===c))return n()}var i=document.getElementsByTagName("style");for(o=0;o<i.length;o++){var h;if((f=(h=i[o]).getAttribute("data-href"))===r||f===c)return n()}var l=document.createElement("link");l.rel="stylesheet",l.type="text/css",l.onload=n,l.onerror=function(n){var r=n&&n.target&&n.target.src||c,u=new Error("Loading CSS chunk "+e+" failed.\n("+r+")");u.request=r,t(u)},l.href=c,document.getElementsByTagName("head")[0].appendChild(l)})).then((function(){c[e]=0})));var t=u[e];if(0!==t)if(t)n.push(t[2]);else{var r=new Promise((function(n,r){t=u[e]=[n,r]}));n.push(t[2]=r);var o,f=document.createElement("script");f.charset="utf-8",f.timeout=120,a.nc&&f.setAttribute("nonce",a.nc),f.src=function(e){return a.p+"static/js/"+({}[e]||e)+"."+{"chunk-09d8":"561880e0","chunk-621e":"ccf42393","chunk-e374":"7c87a0dd","chunk-5061":"83e6ccfa","chunk-5e17":"a2b69611","chunk-5e50":"6820e69c","chunk-7109":"10cb4860","chunk-7291":"590524e9","chunk-7f4f":"ae4400a8","chunk-9a95":"bdd76583","chunk-b423":"387c504c","chunk-bd5f":"e9509f10","chunk-e7c3":"e5df8ceb","chunk-f075":"315ceec1"}[e]+".js"}(e);var i=new Error;o=function(n){f.onerror=f.onload=null,clearTimeout(h);var t=u[e];if(0!==t){if(t){var r=n&&("load"===n.type?"missing":n.type),c=n&&n.target&&n.target.src;i.message="Loading chunk "+e+" failed.\n("+r+": "+c+")",i.name="ChunkLoadError",i.type=r,i.request=c,t[1](i)}u[e]=void 0}};var h=setTimeout((function(){o({type:"timeout",target:f})}),12e4);f.onerror=f.onload=o,document.head.appendChild(f)}return Promise.all(n)},a.m=e,a.c=r,a.d=function(e,n,t){a.o(e,n)||Object.defineProperty(e,n,{enumerable:!0,get:t})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,n){if(1&n&&(e=a(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(a.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)a.d(t,r,function(n){return e[n]}.bind(null,r));return t},a.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(n,"a",n),n},a.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},a.p="/admin/",a.oe=function(e){throw console.error(e),e};var f=window.webpackJsonp=window.webpackJsonp||[],i=f.push.bind(f);f.push=n,f=f.slice();for(var h=0;h<f.length;h++)n(f[h]);var l=i;t()}([]);</script><script src=/admin/static/js/chunk-elementUI.b0c99c08.js></script><script src=/admin/static/js/chunk-libs.06c38828.js></script><script src=/admin/static/js/app.da5e53a7.js></script></body></html>

package/modules/admin/dist/static/css/chunk-5e50.f67eeaed.css

@@ -0,0 +1 @@
+.el-table[data-v-03853e97] th{background-color:#343a40!important;border-color:#454d55;color:#fff}

package/modules/admin/dist/static/css/chunk-7109.2bd6f37e.css

@@ -0,0 +1 @@
+.el-table[data-v-03853e97] th{background-color:#343a40!important;border-color:#454d55;color:#fff}.dashboard-container[data-v-5d163182]{margin:30px}.dashboard-text[data-v-5d163182]{font-size:30px;line-height:46px}a#settings-link[data-v-5d163182]{color:#35a;padding-left:25px}

package/modules/admin/dist/static/css/chunk-7f4f.f67eeaed.css

@@ -0,0 +1 @@
+.el-table[data-v-03853e97] th{background-color:#343a40!important;border-color:#454d55;color:#fff}

package/modules/admin/dist/static/css/chunk-9a95.c647a2ef.css

@@ -0,0 +1 @@
+.side-panel[data-v-c8717050]{-webkit-box-flex:1;-ms-flex-positive:1;flex-grow:1}