solid-server 5.8.2 → 5.8.4

package/.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [ '>=20.17.0' ]
+        node-version: [ '^20.17.0' ]
         os: [ubuntu-latest]
 
     steps:

package/default-templates/new-account/.well-known/.acl

@@ -7,7 +7,7 @@
     a acl:Authorization;
     acl:agent <{{webId}}>;
     acl:accessTo <./>;
-    acl:defaultForNew <./>;
+    acl:default <./>;
     acl:mode acl:Read, acl:Write, acl:Control.
 
 # The public has read permissions
@@ -15,5 +15,5 @@
     a acl:Authorization;
     acl:agentClass foaf:Agent;
     acl:accessTo <./>;
-    acl:defaultForNew <./>;
+    acl:default <./>;
     acl:mode acl:Read.

package/lib/handlers/delete.js

@@ -6,12 +6,9 @@ async function handler (req, res, next) {
   debug('DELETE -- Request on' + req.originalUrl)
 
   const ldp = req.app.locals.ldp
-  const prep = req.app.locals.prep
   try {
     await ldp.delete(req)
     debug('DELETE -- Ok.')
-    // Add event-id for notifications
-    prep && res.setHeader('Event-ID', res.setEventID())
     res.sendStatus(200)
     next()
   } catch (err) {

package/lib/handlers/get.js

@@ -101,7 +101,7 @@ async function handler (req, res, next) {
       RDFs.includes(contentType) && !isHtmlResource && !ldp.suppressDataBrowser)
 
     if (useDataBrowser) {
-      res.set('Content-Type', 'text/html')
+      res.setHeader('Content-Type', 'text/html')
       const defaultDataBrowser = require.resolve('mashlib/dist/databrowser.html')
       const dataBrowserPath = ldp.dataBrowserPath === 'default' ? defaultDataBrowser : ldp.dataBrowserPath
       debug('   sending data browser file: ' + dataBrowserPath)
@@ -118,6 +118,7 @@ async function handler (req, res, next) {
     let headers = {
       'Content-Type': contentType
     }
+
     if (contentRange) {
       headers = {
         ...headers,
@@ -125,16 +126,17 @@ async function handler (req, res, next) {
         'Accept-Ranges': 'bytes',
         'Content-Length': chunksize
       }
-      res.statusCode = 206
+      res.status(206)
     }
 
-    if (prep & isRdf(contentType) && !res.sendEvents({
+    if (prep && isRdf(contentType) && !res.sendEvents({
       config: { prep: prepConfig },
       body: stream,
       isBodyStream: true,
       headers
     })) return
-    res.set(headers)
+
+    res.writeHead(res.statusCode, headers) // res.set sneds 'charset'
     return stream.pipe(res)
   }
 

package/lib/handlers/notify.js

@@ -38,18 +38,32 @@ function getParentActivity (method, status) {
   return 'Update'
 }
 
+function filterMillseconds (isoDate) {
+  return `${isoDate.substring(0, 19)}${isoDate.substring(23)}`
+}
+
+function getDate (date) {
+  if (date) {
+    const eventDate = new Date(date)
+    if (!isNaN(eventDate.valueOf())) {
+      return filterMillseconds(eventDate.toISOString())
+    }
+  }
+  const now = new Date()
+  return filterMillseconds(now.toISOString())
+}
+
 function handler (req, res, next) {
   const { trigger, defaultNotification } = res.events.prep
 
   const { method, path } = req
   const { statusCode } = res
-  const eventID = res.getHeader('event-id')
+  const eventID = res.setEventID()
   const fullUrl = new URL(path, `${req.protocol}://${req.hostname}/`)
 
   // Date is a hack since node does not seem to provide access to send date.
   // Date needs to be shared with parent notification
-  const eventDate = res._header.match(/^Date: (.*?)$/m)?.[1] ||
-    new Date().toUTCString()
+  const eventDate = getDate(res._header.match(/^Date: (.*?)$/m)?.[1])
 
   // If the resource itself newly created,
   // it could not have been subscribed for notifications already
@@ -61,18 +75,19 @@ function handler (req, res, next) {
         ) {
           const mediaType = negotiatedFields['content-type']
           const activity = getActivity(method, path)
-          const target = activity === 'Add'
+          const object = activity === 'Add'
             ? res.getHeader('location')
+            : String(fullUrl)
+          const target = activity === 'Add'
+            ? String(fullUrl)
             : undefined
           if (ALLOWED_RDF_MIME_TYPES.includes(mediaType?.[0])) {
             return `${headerTemplate(negotiatedFields)}\r\n${solidRDFTemplate({
               activity,
               eventID,
-              object: String(fullUrl),
+              object,
               target,
               date: eventDate,
-              // We use eTag as a proxy for state for now
-              state: res.getHeader('ETag'),
               mediaType
             })}`
           } else {
@@ -93,7 +108,10 @@ function handler (req, res, next) {
   // POST in Solid creates a child resource
   const parent = getParent(path)
   if (parent && method !== 'POST') {
-    const parentID = res.setEventID(parent)
+    res.setEventID({
+      path: parent,
+      id: eventID
+    })
     const parentUrl = new URL(parent, fullUrl)
     try {
       trigger({
@@ -103,15 +121,15 @@ function handler (req, res, next) {
         ) {
           const mediaType = negotiatedFields['content-type']
           const activity = getParentActivity(method, statusCode)
-          const target = activity !== 'Update' ? String(fullUrl) : undefined
+          const object = activity === 'Update' ? String(parentUrl) : String(fullUrl)
+          const target = activity === 'Update' ? undefined : String(parentUrl)
           if (ALLOWED_RDF_MIME_TYPES.includes(mediaType?.[0])) {
             return `${headerTemplate(negotiatedFields)}\r\n${solidRDFTemplate({
               activity,
-              eventID: parentID,
+              eventID,
               date: eventDate,
-              object: String(parentUrl),
+              object,
               target,
-              eTag: undefined,
               mediaType
             })}`
           }

package/lib/handlers/patch.js

@@ -39,7 +39,6 @@ function contentForNew (contentType) {
 // Handles a PATCH request
 async function patchHandler (req, res, next) {
   debug(`PATCH -- ${req.originalUrl}`)
-  const prep = req.app.locals.prep
   try {
     // Obtain details of the target resource
     const ldp = req.app.locals.ldp
@@ -91,9 +90,6 @@ async function patchHandler (req, res, next) {
       await applyPatch(patchObject, graph, url)
       return writeGraph(graph, resource, ldp.resourceMapper.resolveFilePath(req.hostname), ldp.serverUri)
     })
-
-    // Add event-id for notifications
-    prep && res.setHeader('Event-ID', res.setEventID())
     // Send the status and result to the client
     res.status(resourceExists ? 200 : 201)
     res.send(result)

package/lib/handlers/post.js

@@ -11,7 +11,6 @@ const getContentType = require('../utils').getContentType
 
 async function handler (req, res, next) {
   const ldp = req.app.locals.ldp
-  const prep = req.app.locals.prep
   const contentType = getContentType(req.headers)
   debug('content-type is ', contentType)
   // Handle SPARQL(-update?) query
@@ -73,8 +72,6 @@ async function handler (req, res, next) {
     // Handled by backpressure of streams!
     busboy.on('finish', function () {
       debug('Done storing files')
-      // Add event-id for notifications
-      prep && res.setHeader('Event-ID', res.setEventID())
       res.sendStatus(200)
       next()
     })
@@ -94,8 +91,6 @@ async function handler (req, res, next) {
         debug('File stored in ' + resourcePath)
         header.addLinks(res, links)
         res.set('Location', resourcePath)
-        // Add event-id for notifications
-        prep && res.setHeader('Event-ID', res.setEventID())
         res.sendStatus(201)
         next()
       },

package/lib/handlers/put.js

@@ -59,7 +59,6 @@ async function checkPermission (request, resourceExists) {
 // TODO could be renamed as putResource (it now covers container and non-container)
 async function putStream (req, res, next, stream = req) {
   const ldp = req.app.locals.ldp
-  const prep = req.app.locals.prep
   // try {
   // Obtain details of the target resource
   let resourceExists = true
@@ -78,8 +77,6 @@ async function putStream (req, res, next, stream = req) {
     // Fails with Append on existing resource
     if (!req.originalUrl.endsWith('.acl')) await checkPermission(req, resourceExists)
     await ldp.put(req, stream, getContentType(req.headers))
-    // Add event-id for notifications
-    prep && res.setHeader('Event-ID', res.setEventID())
     res.sendStatus(resourceExists ? 204 : 201)
     return next()
   } catch (err) {

package/lib/rdf-notification-template.js

@@ -1,10 +1,12 @@
+const uuid = require('uuid')
+
 const CONTEXT_ACTIVITYSTREAMS = 'https://www.w3.org/ns/activitystreams'
 const CONTEXT_NOTIFICATION = 'https://www.w3.org/ns/solid/notification/v1'
 const CONTEXT_XML_SCHEMA = 'http://www.w3.org/2001/XMLSchema'
 
 function generateJSONNotification ({
   activity: type,
-  eventId: id,
+  eventID,
   date: published,
   object,
   target,
@@ -13,30 +15,40 @@ function generateJSONNotification ({
   return {
     published,
     type,
-    id,
+    id: `urn:uuid:${uuid.v4()}`,
+    ...(eventID) && { state: eventID },
     object,
     ...(type === 'Add') && { target },
-    ...(type === 'Remove') && { origin: target },
-    ...(state) && { state }
+    ...(type === 'Remove') && { origin: target }
   }
 }
 
 function generateTurtleNotification ({
   activity,
-  eventId,
+  eventID,
   date,
   object,
-  target,
-  state = undefined
+  target
 }) {
-  const stateLine = `\n    notify:state "${state}" ;`
+  let targetLine = ''
+  let stateLine = ''
+
+  if (activity === 'Add') {
+    targetLine = `\n    as:target <${target}> ;`
+  }
+  if (activity === 'Remove') {
+    targetLine = `\n    as:origin <${target}> ;`
+  }
+  if (eventID) {
+    stateLine = `\n    notify:state "${eventID}" ;`
+  }
 
   return `@prefix as: <${CONTEXT_ACTIVITYSTREAMS}#> .
 @prefix notify: <${CONTEXT_NOTIFICATION}#> .
 @prefix xsd: <${CONTEXT_XML_SCHEMA}#> .
 
-<${eventId}> a as:${activity} ;${state && stateLine}
-    as:object ${object} ;
+<urn:uuid:${uuid.v4()}> a as:${activity} ;
+    as:object <${object}> ;${targetLine}${stateLine}
     as:published "${date}"^^xsd:dateTime .`.replaceAll('\n', '\r\n')
 }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "solid-server",
   "description": "Solid server on top of the file-system",
-  "version": "5.8.2",
+  "version": "5.8.4",
   "author": {
     "name": "Tim Berners-Lee",
     "email": "timbl@w3.org"
@@ -77,7 +77,7 @@
     "express-accept-events": "^0.3.0",
     "express-handlebars": "^5.3.5",
     "express-negotiate-events": "^0.3.0",
-    "express-prep": "^0.6.3",
+    "express-prep": "^0.6.4",
     "express-session": "^1.18.0",
     "extend": "^3.0.2",
     "from2": "^2.3.0",
@@ -92,7 +92,7 @@
     "ip-range-check": "0.2.0",
     "is-ip": "^3.1.0",
     "li": "^1.3.0",
-    "mashlib": "^1.8.11",
+    "mashlib": "^1.10.2",
     "mime-types": "^2.1.35",
     "negotiator": "^0.6.3",
     "node-fetch": "^2.7.0",