sumba 2.33.5 → 2.34.1

package/extend/bajo/hook.js

@@ -418,11 +418,12 @@ async function hook () {
       ctx.decorateRequest('user', null)
     }
   }, {
-    level: 5,
+    level: 10,
     name: 'waibu:preParsing',
     handler: async function (req, reply) {
       const { getHostname } = this.app.waibu
       req.site = await this.getSite(getHostname(req))
+      await this.checkRoute(req)
     }
   }, {
     name: 'waibu:beforeStart',

package/index.js

@@ -690,8 +690,9 @@ async function factory (pkgName) {
     }
 
     pathsToCheck = (req) => {
+      const { isSet } = this.app.lib.aneka
       const { uniq, without } = this.app.lib._
-      const items = [req.routeOptions.url, req.url].map(url => url.split('?')[0].split('#')[0])
+      const items = [req.routeOptions.url, req.url].filter(url => isSet(url)).map(url => url.split('?')[0].split('#')[0])
       return uniq(without(items, undefined, null))
     }
 
@@ -810,6 +811,16 @@ async function factory (pkgName) {
       if (!get(req, 'user.isXSiteAdmin')) throw this.error('accessDenied', { statusCode: 403 })
     }
 
+    checkRoute = async (req) => {
+      const { routePath } = this.app.waibu
+      const { outmatch } = this.app.lib
+      const routes = req.getSetting('waibu:route.disabled', []).map(item => routePath(item, false))
+      if (routes.length === 0) return
+      const isMatch = outmatch(routes)
+      const paths = this.pathsToCheck(req)
+      if (paths.find(isMatch)) throw this.error('_notFound')
+    }
+
     parseNsSettings = (ns, setting, items) => {
       const { trim, set, isPlainObject, isArray, isEmpty, find } = this.app.lib._
       const { parseObject, dayjs } = this.app.lib
@@ -828,7 +839,6 @@ async function factory (pkgName) {
           } catch (err) {}
         } else if (Number(value)) value = Number(value)
         else if (['true', 'false'].includes(value)) value = value === 'true'
-        else if (item.key.endsWith('$in')) value = value.split('\n').map(v => v.trim())
         else {
           const dt = dayjs(value)
           if (dt.isValid()) value = dt.toDate()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sumba",
-  "version": "2.33.5",
+  "version": "2.34.1",
   "description": "Biz Suite for Bajo Framework",
   "main": "index.js",
   "scripts": {

package/wiki/CHANGES.md

@@ -3,6 +3,10 @@
 ## 2026-06-19
 
 - [2.33.5] Bug fix in ```team-user.json```
+- [2.34.0] Add ```checkRoute()```
+- [2.34.0] Add route checking to ```waibu:preParsing``` hook
+- [2.34.1] Bug fix in ```pathsToCheck()```
+- [2.34.1] Bug fix in ```hook.js```
 
 ## 2026-06-18