dsql-admin/dsql-app/.local_dist/server/pages/api/changeDbUserPassword.js

1 line
5.0 KiB
JavaScript
Raw Normal View History

2024-12-15 11:27:16 +00:00
"use strict";(()=>{var e={};e.id=7963,e.ids=[7963],e.modules={75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},9973:e=>{e.exports=require("serverless-mysql")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},81630:e=>{e.exports=require("http")},96762:(e,r)=>{Object.defineProperty(r,"M",{enumerable:!0,get:function(){return function e(r,s){return s in r?r[s]:"then"in r&&"function"==typeof r.then?r.then(r=>e(r,s)):"function"==typeof r&&"default"===s?r:void 0}}})},6523:(e,r,s)=>{s.r(r),s.d(r,{config:()=>E,default:()=>S,routeModule:()=>f});var t={};s.r(t),s.d(t,{default:()=>p});var n=s(89947),o=s(2706),a=s(96762),i=s(51348),c=s.n(i),u=s(6420),l=s.n(u),_=s(14533),d=s.n(_);async function p(e,r){if("POST"!==e.method)return r.json({msg:"Failed!"});if(!await l()(e,r,!0))return r.json({success:!1,msg:"Unauthorized"});let{userId:s,password:t,dbId:n}=e.body;try{let e=!!String(n).match(/^\d+$/),o=!!String(s).match(/^\d+$/),a=!!String(t).match(/ /);if(!e||!o)throw Error("Invalud Parameters!");if(a)throw Error("Invalid Password!");let i=await c()("SELECT * FROM user_databases WHERE id = ?",[n]),u=i?.[0]?.db_full_name,l=d()({encryptionKey:process.env.DSQL_ENCRYPTION_PASSWORD||"",password:t});await c()(`UPDATE \`${u}\`.\`users\` SET password = ? WHERE id = ?`,[l,s]),r.json({success:!0,msg:"DB user Password Changed!"})}catch(e){r.json({success:!1,msg:e.message})}}let S=(0,a.M)(t,"default"),E=(0,a.M)(t,"config"),f=new n.PagesAPIRouteModule({definition:{kind:o.A.PAGES_API,page:"/api/changeDbUserPassword",pathname:"/api/changeDbUserPassword",bundlePath:"",filename:""},userland:t})},6420:(e,r,s)=>{s(81630);let t=s(51348),n=s(72835),o=s(29021),a=s(31341);async function i(e,r,s,i){let{keyCookieName:c,csrfCookieName:u}=a();if(!e.cookies?.[c]?.match(/./))return null;let l=n({encryptedString:e.cookies[c]});if(!l)return null;let _=JSON.parse(l);if(!_.csrf_k||s&&!e.headers["x-csrf-auth"]?.match(RegExp(`${_.csrf_k}`)))return null;let d=process.env.DSQL_USER_LOGIN_KEYS_PATH;if(!d)return console.log("DSQL_USER_LOGIN_KEYS_PATH env variable not found. Please set this variable."),null;if(s&&!o.existsSync(`${d}/${_.csrf_k}`))return null;if(0==_.verification_status&&!s){let e=await t(`SELECT verification_status FROM users WHERE id='${_.id}'`);e&&e[0]&&1==e[0].verification_status&&r.setHeader("Set-Cookie",["user_refresh=1"])}return _?.date&&Date.now()-_.date>6048e5?null:_}e.exports=i},31341:e=>{e.exports=function(e){let r=process.env.DSQL_COOKIES_PREFIX||"dsql_",s=process.env.DSQL_COOKIES_KEY_NAME||"key",t=process.env.DSQL_COOKIES_CSRF_NAME||"csrf",n=process.env.DSQL_COOKIES_ONE_TIME_CODE_NAME||"one-time-code",o=e?.database?.replace(/^datasquirel_user_\d+_/,"")||process.env.DSQL_DB_NAME?.replace(/^datasquirel_user_\d+_/,""),a=r;e?.userId&&(a+=`user_${e.userId}_`),o&&(a+=`${o}_`),a+=s;let i=r;e?.userId&&(i+=`user_${e.userId}_`),o&&(i+=`${o}_`),i+=t;let c=r;return e?.userId&&(c+=`user_${e.userId}_`),o&&(c+=`${o}_`),{keyCookieName:a,csrfCookieName:i,oneTimeCodeName:c+=n}}},72835:(e,r,s)=>{let{scryptSync:t,createDecipheriv:n}=s(55511),{Buffer:o}=s(79428);e.exports=({encryptedString:e,encryptionKey:r,encryptionSalt:s})=>{if(!e?.match(/./))return console.log("Encrypted string is invalid"),e;let a=r||process.env.DSQL_ENCRYPTION_PASSWORD,i=s||process.env.DSQL_ENCRYPTION_SALT,c=process.env.DSQL_ENCRYPTION_KEY_LENGTH?Number(process.env.DSQL_ENCRYPTION_KEY_LENGTH):24;if(!a?.match(/.{8,}/))return console.log("Decrption key is invalid"),e;if(!i?.match(/.{8,}/))return console.log("Decrption salt is invalid"),e;let u=n("aes-192-cbc",t(a,i,c),o.alloc(16,0));try{let r=u.update(e,"hex","utf8");return r+=u.final("utf8")}catch(r){return console.log("Error in decrypting =>",r.message),e}}},14533:(e,r,s)=>{let{createHmac:t}=s(55511);e.exports=function({password:e,encryptionKey:r}){let s=r||process.env.DSQL_ENCRYPTION_PASSWORD;if(!s?.match(/.{8,}/))throw Error("Encryption key is invalid");let n=t("sha512",s);return n.update(e),n.digest("base64")}},51348:(e,r,s)=>{let t=s(9973),n