ghost 5.8.1 → 5.9.0

package/core/server/api/shared/validators/input/all.js

@@ -1,213 +0,0 @@
-const debug = require('@tryghost/debug')('api:shared:validators:input:all');
-const _ = require('lodash');
-const Promise = require('bluebird');
-const tpl = require('@tryghost/tpl');
-const {BadRequestError, ValidationError} = require('@tryghost/errors');
-const validator = require('@tryghost/validator');
-
-const messages = {
-    validationFailed: 'Validation ({validationName}) failed for {key}',
-    noRootKeyProvided: 'No root key (\'{docName}\') provided.',
-    invalidIdProvided: 'Invalid id provided.'
-};
-
-const GLOBAL_VALIDATORS = {
-    id: {matches: /^[a-f\d]{24}$|^1$|me/i},
-    page: {matches: /^\d+$/},
-    limit: {matches: /^\d+|all$/},
-    from: {isDate: true},
-    to: {isDate: true},
-    columns: {matches: /^[\w, ]+$/},
-    order: {matches: /^[a-z0-9_,. ]+$/i},
-    uuid: {isUUID: true},
-    slug: {isSlug: true},
-    name: {},
-    email: {isEmail: true},
-    filter: false,
-    context: false,
-    forUpdate: false,
-    transacting: false,
-    include: false,
-    formats: false
-};
-
-const validate = (config, attrs) => {
-    let errors = [];
-
-    _.each(config, (value, key) => {
-        if (value.required && !attrs[key]) {
-            errors.push(new ValidationError({
-                message: tpl(messages.validationFailed, {
-                    validationName: 'FieldIsRequired',
-                    key: key
-                })
-            }));
-        }
-    });
-
-    _.each(attrs, (value, key) => {
-        debug(key, value);
-
-        if (GLOBAL_VALIDATORS[key]) {
-            debug('global validation');
-            errors = errors.concat(validator.validate(value, key, GLOBAL_VALIDATORS[key]));
-        }
-
-        if (config && config[key]) {
-            const allowedValues = Array.isArray(config[key]) ? config[key] : config[key].values;
-
-            if (allowedValues) {
-                debug('ctrl validation');
-
-                // CASE: we allow e.g. `formats=`
-                if (!value || !value.length) {
-                    return;
-                }
-
-                const valuesAsArray = Array.isArray(value) ? value : value.trim().toLowerCase().split(',');
-                const unallowedValues = _.filter(valuesAsArray, (valueToFilter) => {
-                    return !allowedValues.includes(valueToFilter);
-                });
-
-                if (unallowedValues.length) {
-                    // CASE: we do not error for invalid includes, just silently remove
-                    if (key === 'include') {
-                        attrs.include = valuesAsArray.filter(x => allowedValues.includes(x));
-                        return;
-                    }
-
-                    errors.push(new ValidationError({
-                        message: tpl(messages.validationFailed, {
-                            validationName: 'AllowedValues',
-                            key: key
-                        })
-                    }));
-                }
-            }
-        }
-    });
-
-    return errors;
-};
-
-module.exports = {
-    all(apiConfig, frame) {
-        debug('validate all');
-
-        let validationErrors = validate(apiConfig.options, frame.options);
-
-        if (!_.isEmpty(validationErrors)) {
-            return Promise.reject(validationErrors[0]);
-        }
-
-        return Promise.resolve();
-    },
-
-    browse(apiConfig, frame) {
-        debug('validate browse');
-
-        let validationErrors = [];
-
-        if (frame.data) {
-            validationErrors = validate(apiConfig.data, frame.data);
-        }
-
-        if (!_.isEmpty(validationErrors)) {
-            return Promise.reject(validationErrors[0]);
-        }
-    },
-
-    read() {
-        debug('validate read');
-        return this.browse(...arguments);
-    },
-
-    add(apiConfig, frame) {
-        debug('validate add');
-
-        // NOTE: this block should be removed completely once JSON Schema validations
-        //       are introduced for all of the endpoints
-        if (!['posts', 'tags'].includes(apiConfig.docName)) {
-            if (_.isEmpty(frame.data) || _.isEmpty(frame.data[apiConfig.docName]) || _.isEmpty(frame.data[apiConfig.docName][0])) {
-                return Promise.reject(new BadRequestError({
-                    message: tpl(messages.noRootKeyProvided, {docName: apiConfig.docName})
-                }));
-            }
-        }
-
-        const jsonpath = require('jsonpath');
-
-        if (apiConfig.data) {
-            const missedDataProperties = [];
-            const nilDataProperties = [];
-
-            _.each(apiConfig.data, (value, key) => {
-                if (jsonpath.query(frame.data[apiConfig.docName][0], key).length === 0) {
-                    missedDataProperties.push(key);
-                } else if (_.isNil(frame.data[apiConfig.docName][0][key])) {
-                    nilDataProperties.push(key);
-                }
-            });
-
-            if (missedDataProperties.length) {
-                return Promise.reject(new ValidationError({
-                    message: tpl(messages.validationFailed, {
-                        validationName: 'FieldIsRequired',
-                        key: JSON.stringify(missedDataProperties)
-                    })
-                }));
-            }
-
-            if (nilDataProperties.length) {
-                return Promise.reject(new ValidationError({
-                    message: tpl(messages.validationFailed, {
-                        validationName: 'FieldIsInvalid',
-                        key: JSON.stringify(nilDataProperties)
-                    })
-                }));
-            }
-        }
-    },
-
-    edit(apiConfig, frame) {
-        debug('validate edit');
-        const result = this.add(...arguments);
-
-        if (result instanceof Promise) {
-            return result;
-        }
-
-        // NOTE: this block should be removed completely once JSON Schema validations
-        //       are introduced for all of the endpoints. `id` property is currently
-        //       stripped from the request body and only the one provided in `options`
-        //       is used in later logic
-        if (!['posts', 'tags'].includes(apiConfig.docName)) {
-            if (frame.options.id && frame.data[apiConfig.docName][0].id
-                && frame.options.id !== frame.data[apiConfig.docName][0].id) {
-                return Promise.reject(new BadRequestError({
-                    message: tpl(messages.invalidIdProvided)
-                }));
-            }
-        }
-    },
-
-    changePassword() {
-        debug('validate changePassword');
-        return this.add(...arguments);
-    },
-
-    resetPassword() {
-        debug('validate resetPassword');
-        return this.add(...arguments);
-    },
-
-    setup() {
-        debug('validate setup');
-        return this.add(...arguments);
-    },
-
-    publish() {
-        debug('validate schedule');
-        return this.browse(...arguments);
-    }
-};

package/core/server/api/shared/validators/input/index.js

@@ -1,5 +0,0 @@
-module.exports = {
-    get all() {
-        return require('./all');
-    }
-};

package/core/server/services/bulk-email/mailgun.js

@@ -1,122 +0,0 @@
-const _ = require('lodash');
-const {URL} = require('url');
-const logging = require('@tryghost/logging');
-const configService = require('../../../shared/config');
-const settingsCache = require('../../../shared/settings-cache');
-
-const BATCH_SIZE = 1000;
-
-function createMailgun(config) {
-    const mailgun = require('mailgun-js');
-    const baseUrl = new URL(config.baseUrl);
-
-    return mailgun({
-        apiKey: config.apiKey,
-        domain: config.domain,
-        protocol: baseUrl.protocol,
-        host: baseUrl.hostname,
-        port: baseUrl.port,
-        endpoint: baseUrl.pathname,
-        retry: 5
-    });
-}
-
-function getInstance() {
-    const bulkEmailConfig = configService.get('bulkEmail');
-    const bulkEmailSetting = {
-        apiKey: settingsCache.get('mailgun_api_key'),
-        domain: settingsCache.get('mailgun_domain'),
-        baseUrl: settingsCache.get('mailgun_base_url')
-    };
-    const hasMailgunConfig = !!(bulkEmailConfig && bulkEmailConfig.mailgun);
-    const hasMailgunSetting = !!(bulkEmailSetting && bulkEmailSetting.apiKey && bulkEmailSetting.baseUrl && bulkEmailSetting.domain);
-
-    if (!hasMailgunConfig && !hasMailgunSetting) {
-        logging.warn(`Bulk email service is not configured`);
-    } else {
-        let mailgunConfig = hasMailgunConfig ? bulkEmailConfig.mailgun : bulkEmailSetting;
-        return createMailgun(mailgunConfig);
-    }
-    return null;
-}
-
-// recipientData format:
-// {
-//     'test@example.com': {
-//         name: 'Test User',
-//         unique_id: '12345abcde',
-//         unsubscribe_url: 'https://example.com/unsub/me'
-//     }
-// }
-function send(message, recipientData, replacements) {
-    if (recipientData.length > BATCH_SIZE) {
-        // err - too many recipients
-    }
-
-    let messageData = {};
-
-    try {
-        const bulkEmailConfig = configService.get('bulkEmail');
-        const mailgunInstance = getInstance();
-
-        const messageContent = _.pick(message, 'subject', 'html', 'plaintext');
-
-        // update content to use Mailgun variable syntax for replacements
-        replacements.forEach((replacement) => {
-            messageContent[replacement.format] = messageContent[replacement.format].replace(
-                replacement.match,
-                `%recipient.${replacement.id}%`
-            );
-        });
-
-        messageData = {
-            to: Object.keys(recipientData),
-            from: message.from,
-            'h:Reply-To': message.replyTo || message.reply_to,
-            subject: messageContent.subject,
-            html: messageContent.html,
-            text: messageContent.plaintext,
-            'recipient-variables': recipientData
-        };
-
-        // add a reference to the original email record for easier mapping of mailgun event -> email
-        if (message.id) {
-            messageData['v:email-id'] = message.id;
-        }
-
-        const tags = ['bulk-email'];
-        if (bulkEmailConfig && bulkEmailConfig.mailgun && bulkEmailConfig.mailgun.tag) {
-            tags.push(bulkEmailConfig.mailgun.tag);
-        }
-        messageData['o:tag'] = tags;
-
-        if (bulkEmailConfig && bulkEmailConfig.mailgun && bulkEmailConfig.mailgun.testmode) {
-            messageData['o:testmode'] = true;
-        }
-
-        // enable tracking if turned on for this email
-        if (message.track_opens) {
-            messageData['o:tracking-opens'] = true;
-        }
-
-        return new Promise((resolve, reject) => {
-            mailgunInstance.messages().send(messageData, (error, body) => {
-                if (error || !body) {
-                    return reject(error);
-                }
-
-                return resolve({
-                    id: body.id
-                });
-            });
-        });
-    } catch (error) {
-        return Promise.reject({error, messageData});
-    }
-}
-
-module.exports = {
-    BATCH_SIZE,
-    getInstance,
-    send
-};

package/core/server/web/shared/middleware/cache-control.js

@@ -1,43 +0,0 @@
-// # CacheControl Middleware
-// Usage: cacheControl(profile), where profile is one of 'public' or 'private'
-// After: checkIsPrivate
-// Before: routes
-// App: Admin|Site|API
-//
-// Allows each app to declare its own default caching rules
-
-const isString = require('lodash/isString');
-
-/**
- * @param {'public'|'private'} profile Use "private" if you do not want caching
- * @param {object} [options]
- * @param {number} [options.maxAge] The max-age in seconds to use when profile is "public"
- */
-const cacheControl = (profile, options = {maxAge: 0}) => {
-    const profiles = {
-        public: `public, max-age=${options.maxAge}`,
-        private: 'no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0'
-    };
-
-    let output;
-
-    if (isString(profile) && Object.prototype.hasOwnProperty.call(profiles, profile)) {
-        output = profiles[profile];
-    }
-
-    /**
-     * @param {import('express').Request} req
-     * @param {import('express').Response} res
-     * @param {() => void} next
-     *
-     * @returns {void}
-     */
-    return function cacheControlHeaders(req, res, next) {
-        if (output) {
-            res.set({'Cache-Control': output});
-        }
-        next();
-    };
-};
-
-module.exports = cacheControl;