watchbell 1.2.1 → 1.2.2

package/server/.next/server/chunks/ssr/_next-internal_server_app_account_password_page_actions_1v4e71_oifbx9.js

@@ -1,3 +1,3 @@
-module.exports=[415580,a=>{"use strict";var b=a.i(903769),c=a.i(137936),d=a.i(905246);a.i(570396);var e=a.i(673727),f=a.i(109307),g=a.i(93321),h=a.i(548734),i=a.i(837137),j=a.i(312573),k=a.i(323878),l=a.i(473483),m=a.i(490021);class n extends Error{}let o=a=>({status:"error",message:`Too many wrong passwords. Try again in ${(0,j.H)(a)}.`,field:"current"});async function p(a){let b=await (0,m.S)(a.token);if(!b)return{status:"signed-out"};let{userId:c}=b;if(!a.current)return{status:"error",message:"Enter your current password.",field:"current"};let d=(0,l.H)(a.password);if(d)return{status:"error",message:d,field:"password"};if(a.password!==a.confirm)return{status:"error",message:"The new passwords don't match.",field:"confirm"};if(a.password===a.current)return{status:"error",message:"Pick a password different from the current one.",field:"password"};let e=await (0,k.H)(j.t.passwordChange,c);if(!e.allowed)return o(e.retryAfter);let f=await (0,k.j)(j.t.passwordChange,c),p=()=>(0,k.K)(j.t.passwordChange,c,f.windowStart);if(!f.allowed)return await p(),o(f.retryAfter);let[q]=await (0,h.f)().select({passwordHash:i.localUsers.passwordHash,tempPasswordExpiresAt:i.localUsers.tempPasswordExpiresAt}).from(i.localUsers).where((0,g.u)(i.localUsers.id,c)).limit(1);if(!q)return await p(),{status:"signed-out"};if(a.current.length>1024||!await (0,l.B)(a.current,q.passwordHash))return{status:"error",message:"That isn't your current password.",field:"current"};if(await p(),q.tempPasswordExpiresAt&&q.tempPasswordExpiresAt.getTime()<=Date.now())return{status:"error",message:l.T,field:"current"};let r=await (0,l.Z)(a.password);try{let d=await (0,h.f)().transaction(async d=>{let e=await (0,m.h)(a.token,{aal:b.aal,userAgent:a.userAgent},new Date,d);if(!e||e.userId!==c)throw new n;return await d.update(i.localUsers).set({passwordHash:r,mustChangePassword:!1,tempPasswordExpiresAt:null,updatedAt:new Date}).where((0,g.u)(i.localUsers.id,c)),await (0,m.T)(c,e.token,d),e.token});return{status:"ok",token:d}}catch(a){if(a instanceof n)return{status:"signed-out"};throw a}}var q=a.i(32950),r=a.i(371289),s=a.i(713095);let t=(a,b)=>String(a.get(b)??"");async function u(a,b){let c;"selfhost"!==(0,r.c)()&&(0,e.notFound)();let{step:g}=await (0,f.F)();"setup"===g&&(0,e.redirect)("/mfa/setup"),"challenge"===g&&(0,e.redirect)("/mfa");let h=await (0,d.cookies)();try{c=await p({token:h.get(q.J)?.value??"",current:t(b,"current"),password:t(b,"password"),confirm:t(b,"confirm"),userAgent:(await (0,d.headers)()).get("user-agent")})}catch{return console.warn("password change failed: database unavailable or the password could not be saved"),{status:"error",message:"The password wasn't changed. Try again in a minute."}}if("signed-out"===c.status&&(0,e.redirect)("/signin"),"error"===c.status)return c;(0,q.V)(h,c.token),(0,e.redirect)("/")}(0,s.ensureServerEntryExports)([u]),(0,c.registerServerReference)(u,"6081a15af0ceb67b8c46b07886d6e6216022bd7542",null),a.s(["00ca79d04283ceeab96fac38413551fb6530d42bee",()=>b.f,"6081a15af0ceb67b8c46b07886d6e6216022bd7542",0,u],415580)}];
+module.exports=[415580,a=>{"use strict";var b=a.i(903769),c=a.i(137936),d=a.i(905246);a.i(570396);var e=a.i(673727),f=a.i(109307),g=a.i(93321),h=a.i(548734),i=a.i(837137),j=a.i(312573),k=a.i(323878),l=a.i(473483),m=a.i(490021);class n extends Error{}let o=a=>({status:"error",message:`Too many wrong passwords. Try again in ${(0,j.H)(a)}.`,field:"current"});async function p(a){let b=await (0,m.S)(a.token);if(!b)return{status:"signed-out"};let{userId:c}=b;if(!a.current)return{status:"error",message:"Enter your current password.",field:"current"};let d=(0,l.H)(a.password);if(d)return{status:"error",message:d,field:"password"};if(a.password!==a.confirm)return{status:"error",message:"The new passwords don't match.",field:"confirm"};if(a.password===a.current)return{status:"error",message:"Pick a password different from the current one.",field:"password"};let e=await (0,k.H)(j.t.passwordChange,c);if(!e.allowed)return o(e.retryAfter);let f=await (0,k.j)(j.t.passwordChange,c),p=()=>(0,k.K)(j.t.passwordChange,c,f.windowStart);if(!f.allowed)return await p(),o(f.retryAfter);let[q]=await (0,h.f)().select({passwordHash:i.localUsers.passwordHash,tempPasswordExpiresAt:i.localUsers.tempPasswordExpiresAt}).from(i.localUsers).where((0,g.u)(i.localUsers.id,c)).limit(1);if(!q)return await p(),{status:"signed-out"};if(a.current.length>1024||!await (0,l.B)(a.current,q.passwordHash))return{status:"error",message:"That isn't your current password.",field:"current"};if(await p(),q.tempPasswordExpiresAt&&q.tempPasswordExpiresAt.getTime()<=Date.now())return{status:"error",message:l.T,field:"current"};let r=await (0,l.Z)(a.password);try{let d=await (0,h.f)().transaction(async d=>{let e=await (0,m.h)(a.token,{aal:b.aal,userAgent:a.userAgent},new Date,d);if(!e||e.userId!==c)throw new n;return await d.update(i.localUsers).set({passwordHash:r,mustChangePassword:!1,tempPasswordExpiresAt:null,updatedAt:new Date}).where((0,g.u)(i.localUsers.id,c)),await (0,m.T)(c,e.token,d),e.token});return{status:"ok",token:d}}catch(a){if(a instanceof n)return{status:"signed-out"};throw a}}var q=a.i(32950),r=a.i(371289),s=a.i(713095);let t=(a,b)=>String(a.get(b)??"");async function u(a,b){let c;"selfhost"!==(0,r.c)()&&(0,e.notFound)();let{step:g}=await (0,f.F)();"setup"===g&&(0,e.redirect)("/mfa/setup"),"challenge"===g&&(0,e.redirect)("/mfa");let h=await (0,d.cookies)();try{c=await p({token:h.get(q.J)?.value??"",current:t(b,"current"),password:t(b,"password"),confirm:t(b,"confirm"),userAgent:(await (0,d.headers)()).get("user-agent")})}catch{return console.warn("password change failed: database unavailable or the password could not be saved"),{status:"error",message:"The password wasn't changed. Try again in a minute."}}if("signed-out"===c.status&&(0,e.redirect)("/signin"),"error"===c.status)return c;(0,q.V)(h,c.token),(0,e.redirect)("/")}(0,s.ensureServerEntryExports)([u]),(0,c.registerServerReference)(u,"60d8ab0300c8e02f8540b2f5d9cfbd5c9fd3c6d297",null),a.s(["0004bc8f70189e3081681fbee4c916e42033313963",()=>b.f,"60d8ab0300c8e02f8540b2f5d9cfbd5c9fd3c6d297",0,u],415580)}];
 
 //# sourceMappingURL=_next-internal_server_app_account_password_page_actions_1v4e71_oifbx9.js.map

package/server/.next/server/chunks/ssr/_next-internal_server_app_signin_page_actions_11wzk446p6_zi.js

@@ -1,3 +1,3 @@
-module.exports=[595157,a=>{"use strict";var b=a.i(903769),c=a.i(137936),d=a.i(905246);a.i(570396);var e=a.i(673727),f=a.i(492665),g=a.i(963499),h=a.i(32950),i=a.i(93321),j=a.i(548734),k=a.i(837137),l=a.i(753682),m=a.i(828215),n=a.i(733506),o=a.i(619902),p=a.i(108294),q=a.i(312573),r=a.i(323878),s=a.i(473483),t=a.i(490021);let u="Email or password is wrong.",v=a=>({ok:!1,message:`Too many attempts. Try again in ${Math.max(1,Math.ceil(a/60))} min.`});async function w(a,b){let[c]=await (0,j.f)().select({role:k.members.role}).from(k.members).where((0,i.u)(k.members.userId,a.id)).limit(1);if(!c)return"/";let d=(0,l.f)({role:c.role,aal:"aal1",hasVerifiedFactor:null!==a.totpConfirmedAt});return"challenge"===d?"/mfa":"setup"===d?"/mfa/setup":a.mustChangePassword?"/account/password":(0,m.f)(b)}async function x(a){a&&await (0,o.H)(n.h.ip,a),(await (0,r.j)(q.t.passwordFailuresAll,"all")).count===q.t.passwordFailuresAll.max+1&&console.warn("many failed sign-ins; consider a trusted proxy / firewall in front of Watchbell")}async function y(a){let b=a.email.trim().toLowerCase(),c=a.password;if(!b||!c||b.length>254||c.length>1024)return{ok:!1,message:u};let d=a.ip?[n.h.accountIp,`${b} ${a.ip}`]:[n.h.account,b];for(let[b,c]of a.ip?[d,[n.h.ip,a.ip]]:[d]){let a=await (0,o.G)(b,c);if(a>0)return v(a)}let e=null!==a.ip&&!await (0,o.Q)(b,a.ip);if(e){let a=await (0,o.G)(n.h.accountAll,b,new Date,n.c);if(a>0)return v(a)}let f=[],g=a.ip?[[q.t.passwordBurst,d[1]],[q.t.passwordIp,a.ip]]:[[q.t.passwordBurst,d[1]]];for(let[a,c]of(e&&g.push([q.t.passwordAccountBurst,b]),g)){let b=await (0,r.j)(a,c);if(f.push({l:a,subject:c,windowStart:b.windowStart}),!b.allowed){for(let a of f)await (0,r.K)(a.l,a.subject,a.windowStart);return v(b.retryAfter)}}await (0,o.H)(d[0],d[1]);let[h]=await (0,j.f)().select({id:k.localUsers.id,passwordHash:k.localUsers.passwordHash,totpConfirmedAt:k.localUsers.totpConfirmedAt,mustChangePassword:k.localUsers.mustChangePassword,tempPasswordExpiresAt:k.localUsers.tempPasswordExpiresAt}).from(k.localUsers).where((0,i.u)(k.localUsers.email,b)).limit(1);if(!h)return await (0,s.u)(),await x(a.ip),await (0,o.H)(n.h.accountAll,b),{ok:!1,message:u};if(!await (0,s.B)(c,h.passwordHash)){await x(a.ip);let c=await (0,o.H)(n.h.accountAll,b);return(0,n.S)(c)&&await (0,p.f)("password",b,c),{ok:!1,message:u}}for(let a of(await (0,o.d)(d[0],d[1]),f))await (0,r.K)(a.l,a.subject,a.windowStart);if(a.ip&&await (0,o.Y)(b,a.ip),h.tempPasswordExpiresAt&&h.tempPasswordExpiresAt.getTime()<=Date.now())return{ok:!1,message:s.T};a.presentedToken&&await (0,t.P)(a.presentedToken);let{token:l}=await (0,t.t)(h.id,{aal:"aal1",userAgent:a.userAgent});return{ok:!0,token:l,redirectTo:await w(h,a.next)}}var z=a.i(371289),A=a.i(61675),B=a.i(50519);let C=globalThis.__watchbellSigninIp??=(0,B.d)({max:10,windowMs:9e5}),D={status:"error",message:"We couldn't send the email right now. Try again in a minute."},E=a=>({status:"error",message:`Too many sign-in attempts. Try again in ${(0,q.H)(a.retryAfter)}.`});async function F(a,b){let c=a.trim().toLowerCase();if(!A.z.email().safeParse(c).success)return{status:"error",message:"Enter a valid email address.",field:!0};if(!b.captchaToken)return{status:"error",message:"Complete the bot check below first."};if(b.memory&&"unknown"!==b.ip){let a=b.memory.hit(b.ip);if(!a.allowed)return E(a)}try{let a=await b.limit(q.t.signinIp,b.ip);if(!a.allowed)return E(a);let d=await b.peek(q.t.signinEmail,c);if(!d.allowed)return E(d);let{error:e}=await b.signInWithOtp({email:c,options:{shouldCreateUser:!1,emailRedirectTo:`${b.siteUrl}/auth/confirm`,captchaToken:b.captchaToken}});if(e&&(!e.status||e.status>=500||"AuthRetryableFetchError"===e.name))return D;if(e?.code==="captcha_failed")return{status:"error",message:"The bot check didn't pass. Try again."};e&&console.warn(`sign-in request refused: ${e.code??e.status??"unknown"}`),await b.limit(q.t.signinEmail,c)}catch{return console.warn("sign-in request failed: limiter or Supabase unavailable"),D}return{status:"sent",email:c}}var G=a.i(616349);async function H(a,b){var c;let e;if((0,z.F)())return{status:"error",message:"Email sign-in links are not available here."};let g=await (0,G.f)();return F(String(b.get("email")??""),{signInWithOtp:a=>g.auth.signInWithOtp(a),siteUrl:(0,f.f)().SITE_URL,captchaToken:String(b.get("cf-turnstile-response")??""),ip:(c=await (0,d.headers)(),(e=c.get("x-real-ip")?.trim())||c.get("x-forwarded-for")?.split(",")[0]?.trim()||"unknown"),limit:r.C,peek:r.H,memory:C})}async function I(a,b){let c=String(b.get("email")??"").slice(0,254);if((0,z.W)())return J(b);if("selfhost"!==(0,z.c)())return{status:"error",message:"Password sign-in is not available here.",email:c};let f=await (0,d.headers)(),i=await (0,d.cookies)(),j=await y({email:c,password:String(b.get("password")??""),ip:(0,g.f)(f),userAgent:f.get("user-agent"),presentedToken:i.get(h.J)?.value,next:String(b.get("next")??"")});if(!j.ok)return{status:"error",message:j.message,email:c};(0,h.V)(i,j.token),(0,e.redirect)(j.redirectTo)}async function J(b){let c=String(b.get("email")??""),[{demoSignIn:f},{serverDemoCookieKey:g},{setDemoCookie:h},i]=await Promise.all([a.A(517930),a.A(372153),a.A(73710),a.A(636029)]),j=f({email:c,password:String(b.get("password")??""),next:String(b.get("next")??"")},g());return j.ok?i.demoSignIns.take(i.demoClientKey(await (0,d.headers)()),crypto.randomUUID())?void(h(await (0,d.cookies)(),j.cookie),(0,e.redirect)(j.redirectTo)):{status:"error",message:i.DEMO_SIGN_IN_LIMITED,email:c.slice(0,254)}:{status:"error",message:j.message,email:c.slice(0,254),field:j.field}}(0,a.i(713095).ensureServerEntryExports)([H,I]),(0,c.registerServerReference)(H,"60793405379cb9b9a62508865aa962e165502baca7",null),(0,c.registerServerReference)(I,"602d4cd61024107c7e6c29239dba1b537ad075ac50",null),a.s(["00ca79d04283ceeab96fac38413551fb6530d42bee",()=>b.f,"602d4cd61024107c7e6c29239dba1b537ad075ac50",0,I,"60793405379cb9b9a62508865aa962e165502baca7",0,H],595157)}];
+module.exports=[595157,a=>{"use strict";var b=a.i(903769),c=a.i(137936),d=a.i(905246);a.i(570396);var e=a.i(673727),f=a.i(492665),g=a.i(963499),h=a.i(32950),i=a.i(93321),j=a.i(548734),k=a.i(837137),l=a.i(753682),m=a.i(828215),n=a.i(733506),o=a.i(619902),p=a.i(108294),q=a.i(312573),r=a.i(323878),s=a.i(473483),t=a.i(490021);let u="Email or password is wrong.",v=a=>({ok:!1,message:`Too many attempts. Try again in ${Math.max(1,Math.ceil(a/60))} min.`});async function w(a,b){let[c]=await (0,j.f)().select({role:k.members.role}).from(k.members).where((0,i.u)(k.members.userId,a.id)).limit(1);if(!c)return"/";let d=(0,l.f)({role:c.role,aal:"aal1",hasVerifiedFactor:null!==a.totpConfirmedAt});return"challenge"===d?"/mfa":"setup"===d?"/mfa/setup":a.mustChangePassword?"/account/password":(0,m.f)(b)}async function x(a){a&&await (0,o.H)(n.h.ip,a),(await (0,r.j)(q.t.passwordFailuresAll,"all")).count===q.t.passwordFailuresAll.max+1&&console.warn("many failed sign-ins; consider a trusted proxy / firewall in front of Watchbell")}async function y(a){let b=a.email.trim().toLowerCase(),c=a.password;if(!b||!c||b.length>254||c.length>1024)return{ok:!1,message:u};let d=a.ip?[n.h.accountIp,`${b} ${a.ip}`]:[n.h.account,b];for(let[b,c]of a.ip?[d,[n.h.ip,a.ip]]:[d]){let a=await (0,o.G)(b,c);if(a>0)return v(a)}let e=null!==a.ip&&!await (0,o.Q)(b,a.ip);if(e){let a=await (0,o.G)(n.h.accountAll,b,new Date,n.c);if(a>0)return v(a)}let f=[],g=a.ip?[[q.t.passwordBurst,d[1]],[q.t.passwordIp,a.ip]]:[[q.t.passwordBurst,d[1]]];for(let[a,c]of(e&&g.push([q.t.passwordAccountBurst,b]),g)){let b=await (0,r.j)(a,c);if(f.push({l:a,subject:c,windowStart:b.windowStart}),!b.allowed){for(let a of f)await (0,r.K)(a.l,a.subject,a.windowStart);return v(b.retryAfter)}}await (0,o.H)(d[0],d[1]);let[h]=await (0,j.f)().select({id:k.localUsers.id,passwordHash:k.localUsers.passwordHash,totpConfirmedAt:k.localUsers.totpConfirmedAt,mustChangePassword:k.localUsers.mustChangePassword,tempPasswordExpiresAt:k.localUsers.tempPasswordExpiresAt}).from(k.localUsers).where((0,i.u)(k.localUsers.email,b)).limit(1);if(!h)return await (0,s.u)(),await x(a.ip),await (0,o.H)(n.h.accountAll,b),{ok:!1,message:u};if(!await (0,s.B)(c,h.passwordHash)){await x(a.ip);let c=await (0,o.H)(n.h.accountAll,b);return(0,n.S)(c)&&await (0,p.f)("password",b,c),{ok:!1,message:u}}for(let a of(await (0,o.d)(d[0],d[1]),f))await (0,r.K)(a.l,a.subject,a.windowStart);if(a.ip&&await (0,o.Y)(b,a.ip),h.tempPasswordExpiresAt&&h.tempPasswordExpiresAt.getTime()<=Date.now())return{ok:!1,message:s.T};a.presentedToken&&await (0,t.P)(a.presentedToken);let{token:l}=await (0,t.t)(h.id,{aal:"aal1",userAgent:a.userAgent});return{ok:!0,token:l,redirectTo:await w(h,a.next)}}var z=a.i(371289),A=a.i(61675),B=a.i(50519);let C=globalThis.__watchbellSigninIp??=(0,B.d)({max:10,windowMs:9e5}),D={status:"error",message:"We couldn't send the email right now. Try again in a minute."},E=a=>({status:"error",message:`Too many sign-in attempts. Try again in ${(0,q.H)(a.retryAfter)}.`});async function F(a,b){let c=a.trim().toLowerCase();if(!A.z.email().safeParse(c).success)return{status:"error",message:"Enter a valid email address.",field:!0};if(!b.captchaToken)return{status:"error",message:"Complete the bot check below first."};if(b.memory&&"unknown"!==b.ip){let a=b.memory.hit(b.ip);if(!a.allowed)return E(a)}try{let a=await b.limit(q.t.signinIp,b.ip);if(!a.allowed)return E(a);let d=await b.peek(q.t.signinEmail,c);if(!d.allowed)return E(d);let{error:e}=await b.signInWithOtp({email:c,options:{shouldCreateUser:!1,emailRedirectTo:`${b.siteUrl}/auth/confirm`,captchaToken:b.captchaToken}});if(e&&(!e.status||e.status>=500||"AuthRetryableFetchError"===e.name))return D;if(e?.code==="captcha_failed")return{status:"error",message:"The bot check didn't pass. Try again."};e&&console.warn(`sign-in request refused: ${e.code??e.status??"unknown"}`),await b.limit(q.t.signinEmail,c)}catch{return console.warn("sign-in request failed: limiter or Supabase unavailable"),D}return{status:"sent",email:c}}var G=a.i(616349);async function H(a,b){var c;let e;if((0,z.F)())return{status:"error",message:"Email sign-in links are not available here."};let g=await (0,G.f)();return F(String(b.get("email")??""),{signInWithOtp:a=>g.auth.signInWithOtp(a),siteUrl:(0,f.f)().SITE_URL,captchaToken:String(b.get("cf-turnstile-response")??""),ip:(c=await (0,d.headers)(),(e=c.get("x-real-ip")?.trim())||c.get("x-forwarded-for")?.split(",")[0]?.trim()||"unknown"),limit:r.C,peek:r.H,memory:C})}async function I(a,b){let c=String(b.get("email")??"").slice(0,254);if((0,z.W)())return J(b);if("selfhost"!==(0,z.c)())return{status:"error",message:"Password sign-in is not available here.",email:c};let f=await (0,d.headers)(),i=await (0,d.cookies)(),j=await y({email:c,password:String(b.get("password")??""),ip:(0,g.f)(f),userAgent:f.get("user-agent"),presentedToken:i.get(h.J)?.value,next:String(b.get("next")??"")});if(!j.ok)return{status:"error",message:j.message,email:c};(0,h.V)(i,j.token),(0,e.redirect)(j.redirectTo)}async function J(b){let c=String(b.get("email")??""),[{demoSignIn:f},{serverDemoCookieKey:g},{setDemoCookie:h},i]=await Promise.all([a.A(517930),a.A(372153),a.A(73710),a.A(636029)]),j=f({email:c,password:String(b.get("password")??""),next:String(b.get("next")??"")},g());return j.ok?i.demoSignIns.take(i.demoClientKey(await (0,d.headers)()),crypto.randomUUID())?void(h(await (0,d.cookies)(),j.cookie),(0,e.redirect)(j.redirectTo)):{status:"error",message:i.DEMO_SIGN_IN_LIMITED,email:c.slice(0,254)}:{status:"error",message:j.message,email:c.slice(0,254),field:j.field}}(0,a.i(713095).ensureServerEntryExports)([H,I]),(0,c.registerServerReference)(H,"6080237ec09bb832f2fa84fb0019d504c4db3be3e4",null),(0,c.registerServerReference)(I,"6087173b9817b60f95a56bcfa79531e6d9c5e02022",null),a.s(["0004bc8f70189e3081681fbee4c916e42033313963",()=>b.f,"6080237ec09bb832f2fa84fb0019d504c4db3be3e4",0,H,"6087173b9817b60f95a56bcfa79531e6d9c5e02022",0,I],595157)}];
 
 //# sourceMappingURL=_next-internal_server_app_signin_page_actions_11wzk446p6_zi.js.map