This commit is contained in:
Benjamin Toby
2025-01-14 07:42:13 +01:00
parent 5900263b62
commit 885c11f674
167 changed files with 345 additions and 348 deletions
@@ -1 +1 @@
"use strict";(()=>{var e={};e.id=7889,e.ids=[7889],e.modules={60818:e=>{e.exports=require("dotenv")},47795:e=>{e.exports=require("generate-password")},75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},33873:e=>{e.exports=require("path")},52795:(e,r,s)=>{s.r(r),s.d(r,{config:()=>f,default:()=>h,routeModule:()=>E});var t={};s.r(t),s.d(t,{default:()=>g});var a=s(89947),i=s(2706),o=s(96762),u=s(47795),n=s.n(u),d=s(69842),l=s(67619),c=s(48786),m=s(68829),p=s(5437);async function g(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let s=await (0,d.A)(e,r,!0);if(!s)return r.json({success:!1,msg:"Unauthorized"});let{data:t,edit:a,grants:i}=e.body;try{let e=process.env.DSQL_DB_HOST||"127.0.0.1",a=s?.id==Number(process.env.DSQL_SU_USER_ID),{host:o,password:u,username:d}=t,l=a&&d?.match(/./)?d:`dsql_user_${s.id}`;if(!o.match(/./))throw Error("Invalid host");let g=String(o).replace(/[^a-zA-Z0-9-\.\:\/\%]/g,""),h=u?.match(/./)?u:n().generate({length:16,numbers:!0,symbols:!0,uppercase:!0,exclude:"*#.'`\""}),f=await (0,c.A)("SELECT * FROM mysql.user WHERE User = ? AND (Host = ? OR Host = ?)",[l,g,e]);if(f?.[0]?.User)throw Error("SQL User already exists. Remember if you have the '%' host on your primary user, it catches all other hosts.");let E=await (0,c.A)("SELECT COUNT(*) FROM mariadb_users WHERE user_id = ?",[s.id]);if(E?.[0]?.["COUNT(*)"]>=10)throw Error("User limit reached");let S=(0,m.default)({data:h}),w=await (0,c.A)("INSERT INTO mariadb_users (user_id, username, host, password, grants) VALUES (?, ?, ?, ?, ?)",[s.id,l,g,S,JSON.stringify(i)]);if(!w?.insertId)throw Error("Error in adding SQL user");await (0,p.A)({userId:s.id,mariadbUsername:l,mariadbUserHost:g}),r.json({success:!0})}catch(e){console.log("Create MariaDB user ERROR:",e.message),(0,l.default)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:s}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}let h=(0,o.M)(t,"default"),f=(0,o.M)(t,"config"),E=new a.PagesAPIRouteModule({definition:{kind:i.A.PAGES_API,page:"/api/sql-users/create",pathname:"/api/sql-users/create",bundlePath:"",filename:""},userland:t})}};var r=require("../../../webpack-api-runtime.js");r.C(e);var s=e=>r(r.s=e),t=r.X(0,[3496],()=>s(52795));module.exports=t})();
"use strict";(()=>{var e={};e.id=7889,e.ids=[7889],e.modules={60818:e=>{e.exports=require("dotenv")},47795:e=>{e.exports=require("generate-password")},75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},33873:e=>{e.exports=require("path")},52795:(e,r,s)=>{s.r(r),s.d(r,{config:()=>f,default:()=>h,routeModule:()=>E});var t={};s.r(t),s.d(t,{default:()=>g});var a=s(89947),i=s(2706),o=s(96762),u=s(47795),n=s.n(u),d=s(69842),l=s(67619),c=s(48786),m=s(68829),p=s(5437);async function g(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let s=await (0,d.A)(e,r,!0);if(!s)return r.json({success:!1,msg:"Unauthorized"});let{data:t,edit:a,grants:i}=e.body;try{let e=process.env.DSQL_DB_HOST||"127.0.0.1",a=s?.id==Number(process.env.DSQL_SU_USER_ID),{host:o,password:u,username:d}=t,l=a&&d?.match(/./)?d:`dsql_user_${s.id}`;if(!o.match(/./))throw Error("Invalid host");let g=String(o).replace(/[^a-zA-Z0-9-\.\:\/\%]/g,""),h=u?.match(/./)?u:n().generate({length:16,numbers:!0,symbols:!0,uppercase:!0,exclude:"*#.'`\""}),f=await (0,c.A)("SELECT * FROM mysql.user WHERE User = ? AND (Host = ? OR Host = ?)",[l,g,e]);if(f?.[0]?.User)throw Error("SQL User already exists. Remember if you have the '%' host on your primary user, it catches all other hosts.");let E=await (0,c.A)("SELECT COUNT(*) FROM mariadb_users WHERE user_id = ?",[s.id]);if(E?.[0]?.["COUNT(*)"]>=10)throw Error("User limit reached");let S=(0,m.A)({data:h}),A=await (0,c.A)("INSERT INTO mariadb_users (user_id, username, host, password, grants) VALUES (?, ?, ?, ?, ?)",[s.id,l,g,S,JSON.stringify(i)]);if(!A?.insertId)throw Error("Error in adding SQL user");await (0,p.A)({userId:s.id,mariadbUsername:l,mariadbUserHost:g}),r.json({success:!0})}catch(e){console.log("Create MariaDB user ERROR:",e.message),(0,l.A)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:s}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}let h=(0,o.M)(t,"default"),f=(0,o.M)(t,"config"),E=new a.PagesAPIRouteModule({definition:{kind:i.A.PAGES_API,page:"/api/sql-users/create",pathname:"/api/sql-users/create",bundlePath:"",filename:""},userland:t})}};var r=require("../../../webpack-api-runtime.js");r.C(e);var s=e=>r(r.s=e),t=r.X(0,[3496],()=>s(52795));module.exports=t})();
@@ -1,4 +1,4 @@
"use strict";(()=>{var e={};e.id=536,e.ids=[536],e.modules={75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},96762:(e,r)=>{Object.defineProperty(r,"M",{enumerable:!0,get:function(){return function e(r,t){return t in r?r[t]:"then"in r&&"function"==typeof r.then?r.then(r=>e(r,t)):"function"==typeof r&&"default"===t?r:void 0}}})},56625:(e,r,t)=>{t.r(r),t.d(r,{config:()=>f,default:()=>d,routeModule:()=>_});var s={};t.r(s),t.d(s,{default:()=>l});var n=t(89947),o=t(2706),i=t(96762),a=t(69842),u=t(67619),c=t(48786);async function l(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let t=await (0,a.A)(e,r,!0);if(!t)return r.json({success:!1,msg:"Unauthorized"});let{id:s}=e.body;try{let e=await (0,c.A)("SELECT * FROM mariadb_users WHERE id = ? AND user_id = ?",[s,t.id]),n=e?.[0];if(!n?.id)throw Error("Active User couldn't be verified");if(String(n.primary)?.match(/1/))throw Error("Cannot Delete Primary User");let o=n.username,i=n.host;await (0,c.A)("DELETE FROM mariadb_users WHERE user_id = ? AND id = ?",[t.id,n.id]),await (0,c.A)(`DROP USER '${o}'@'${i}'`),r.json({success:!0})}catch(e){(0,u.default)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:t}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}let d=(0,i.M)(s,"default"),f=(0,i.M)(s,"config"),_=new n.PagesAPIRouteModule({definition:{kind:o.A.PAGES_API,page:"/api/sql-users/delete",pathname:"/api/sql-users/delete",bundlePath:"",filename:""},userland:s})},69842:(e,r,t)=>{t.d(r,{A:()=>u});var s=t(48786),n=t(95969),o=t(29021),i=t.n(o),a=t(89159);async function u(e,r,t){try{let{keyCookieName:o,csrfCookieName:u}=(0,a.A)();if(!e.cookies?.[o]?.match(/./))throw Error("Request Cookies not Found!");let c=(0,n.A)({encryptedString:e.cookies[o]});if(!c)throw Error("Couldn't decrypt auth cookie!");let l=JSON.parse(c);if(!l.csrf_k)throw Error("No `csrf_k` present in user Object!");if(t&&!Object.keys(e.headers).find(e=>e.includes(l.csrf_k)))throw Error("Deep Auth Failed. `csrf` key not found in request headers!");let d=process.env.DSQL_USER_LOGIN_KEYS_PATH;if(!d)throw Error("DSQL_USER_LOGIN_KEYS_PATH env variable not found. Please set this variable.");if(t&&!i().existsSync(`${d}/${l.csrf_k}`))throw Error("Key not found in Auth Keys Folder!");if(0==l.verification_status&&!t){let e=await (0,s.A)(`SELECT verification_status FROM users WHERE id='${l.id}'`);e&&e[0]&&1==e[0].verification_status&&r.setHeader("Set-Cookie",["user_refresh=1"])}if(l?.date&&Date.now()-l.date>6048e5)throw Error("Key expired!");return l}catch(e){return console.log(`userAuth Error: ${e.message}`),null}}},89159:(e,r,t)=>{t.d(r,{A:()=>s});function s(e){let r=process.env.DSQL_COOKIES_PREFIX||"dsql_",t=process.env.DSQL_COOKIES_KEY_NAME||"key",s=process.env.DSQL_COOKIES_CSRF_NAME||"csrf",n=process.env.DSQL_COOKIES_ONE_TIME_CODE_NAME||"one-time-code",o=e?.database?.replace(/^datasquirel_user_\d+_/,"")||process.env.DSQL_DB_NAME?.replace(/^datasquirel_user_\d+_/,""),i=r;e?.userId&&(i+=`user_${e.userId}_`),o&&(i+=`${o}_`),i+=t;let a=r;e?.userId&&(a+=`user_${e.userId}_`),o&&(a+=`${o}_`),a+=s;let u=r;return e?.userId&&(u+=`user_${e.userId}_`),o&&(u+=`${o}_`),{keyCookieName:i,csrfCookieName:a,oneTimeCodeName:u+=n}}},67619:(e,r,t)=>{t.r(r),t.d(r,{default:()=>o});var s=t(29021),n=t.n(s);async function o({user:e,message:r,component:t,noMail:s,req:o}){let i=new Date,a=(()=>{if(!o)return null;try{let e=o.headers["x-forwarded-for"],r=o.headers["x-real-ip"],t=o.headers["cf-connecting-ip"],s=Array.isArray(e)?e[0]:e?.split(",")[0],n=t||s||r||o.socket.remoteAddress;if(!n)return null;return String(n)}catch(e){return null}})();try{let s=`🚀 SERVER ERROR ===========================
"use strict";(()=>{var e={};e.id=536,e.ids=[536],e.modules={75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},96762:(e,r)=>{Object.defineProperty(r,"M",{enumerable:!0,get:function(){return function e(r,t){return t in r?r[t]:"then"in r&&"function"==typeof r.then?r.then(r=>e(r,t)):"function"==typeof r&&"default"===t?r:void 0}}})},56625:(e,r,t)=>{t.r(r),t.d(r,{config:()=>f,default:()=>d,routeModule:()=>_});var s={};t.r(s),t.d(s,{default:()=>l});var n=t(89947),o=t(2706),i=t(96762),a=t(69842),u=t(67619),c=t(48786);async function l(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let t=await (0,a.A)(e,r,!0);if(!t)return r.json({success:!1,msg:"Unauthorized"});let{id:s}=e.body;try{let e=await (0,c.A)("SELECT * FROM mariadb_users WHERE id = ? AND user_id = ?",[s,t.id]),n=e?.[0];if(!n?.id)throw Error("Active User couldn't be verified");if(String(n.primary)?.match(/1/))throw Error("Cannot Delete Primary User");let o=n.username,i=n.host;await (0,c.A)("DELETE FROM mariadb_users WHERE user_id = ? AND id = ?",[t.id,n.id]),await (0,c.A)(`DROP USER '${o}'@'${i}'`),r.json({success:!0})}catch(e){(0,u.A)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:t}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}let d=(0,i.M)(s,"default"),f=(0,i.M)(s,"config"),_=new n.PagesAPIRouteModule({definition:{kind:o.A.PAGES_API,page:"/api/sql-users/delete",pathname:"/api/sql-users/delete",bundlePath:"",filename:""},userland:s})},69842:(e,r,t)=>{t.d(r,{A:()=>u});var s=t(48786),n=t(95969),o=t(29021),i=t.n(o),a=t(89159);async function u(e,r,t){try{let{keyCookieName:o,csrfCookieName:u}=(0,a.A)();if(!e.cookies?.[o]?.match(/./))throw Error("Request Cookies not Found!");let c=(0,n.A)({encryptedString:e.cookies[o]});if(!c)throw Error("Couldn't decrypt auth cookie!");let l=JSON.parse(c);if(!l.csrf_k)throw Error("No `csrf_k` present in user Object!");if(t&&!Object.keys(e.headers).find(e=>e.includes(l.csrf_k)))throw console.log("req.headers",e.headers),console.log("userObject",l),Error("Deep Auth Failed. `csrf` key not found in request headers!");let d=process.env.DSQL_USER_LOGIN_KEYS_PATH;if(!d)throw Error("DSQL_USER_LOGIN_KEYS_PATH env variable not found. Please set this variable.");if(t&&!i().existsSync(`${d}/${l.csrf_k}`))throw Error("Key not found in Auth Keys Folder!");if(0==l.verification_status&&!t){let e=await (0,s.A)(`SELECT verification_status FROM users WHERE id='${l.id}'`);e&&e[0]&&1==e[0].verification_status&&r.setHeader("Set-Cookie",["user_refresh=1"])}if(l?.date&&Date.now()-l.date>6048e5)throw Error("Key expired!");return l}catch(e){return console.log(`userAuth Error: ${e.message}`),null}}},89159:(e,r,t)=>{t.d(r,{A:()=>s});function s(e){let r=process.env.DSQL_COOKIES_PREFIX||"dsql_",t=process.env.DSQL_COOKIES_KEY_NAME||"key",s=process.env.DSQL_COOKIES_CSRF_NAME||"csrf",n=process.env.DSQL_COOKIES_ONE_TIME_CODE_NAME||"one-time-code",o=e?.database?.replace(/^datasquirel_user_\d+_/,"")||process.env.DSQL_DB_NAME?.replace(/^datasquirel_user_\d+_/,""),i=r;e?.userId&&(i+=`user_${e.userId}_`),o&&(i+=`${o}_`),i+=t;let a=r;e?.userId&&(a+=`user_${e.userId}_`),o&&(a+=`${o}_`),a+=s;let u=r;return e?.userId&&(u+=`user_${e.userId}_`),o&&(u+=`${o}_`),{keyCookieName:i,csrfCookieName:a,oneTimeCodeName:u+=n}}},67619:(e,r,t)=>{t.d(r,{A:()=>o});var s=t(29021),n=t.n(s);async function o({user:e,message:r,component:t,noMail:s,req:o}){let i=new Date,a=(()=>{if(!o)return null;try{let e=o.headers["x-forwarded-for"],r=o.headers["x-real-ip"],t=o.headers["cf-connecting-ip"],s=Array.isArray(e)?e[0]:e?.split(",")[0],n=t||s||r||o.socket.remoteAddress;if(!n)return null;return String(n)}catch(e){return null}})();try{let s=`🚀 SERVER ERROR ===========================
Error Message: ${r}
Component: ${t}`;e?.id&&e?.first_name&&e?.last_name&&e?.email&&(s+=`
User Id: ${e?.id}
@@ -1 +1 @@
"use strict";(()=>{var e={};e.id=2350,e.ids=[2350],e.modules={60818:e=>{e.exports=require("dotenv")},47795:e=>{e.exports=require("generate-password")},75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},33873:e=>{e.exports=require("path")},49844:(e,r,s)=>{s.r(r),s.d(r,{config:()=>E,default:()=>c,routeModule:()=>f});var a={};s.r(a),s.d(a,{default:()=>m});var i=s(89947),t=s(2706),d=s(96762),o=s(69842),u=s(67619),n=s(48786),p=s(68829),l=s(5437);async function m(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let s=await (0,o.A)(e,r,!0);if(!s)return r.json({success:!1,msg:"Unauthorized"});let{data:a,edit:i,prev:t,grants:d}=e.body;try{if(!t?.id)throw Error("Invalid existing DB entry");let e=await (0,n.A)("SELECT * FROM mariadb_users WHERE id = ? AND user_id = ?",[t.id,s.id]),i=s?.id==Number(process.env.DSQL_SU_USER_ID),o=e?.[0];if(!o?.id)throw Error("Active User couldn't be verified");let{host:u,password:m,username:c}=a,E=i&&c||`dsql_user_${s.id}`;if(!u)throw Error("No host provided");let f=String(u).replace(/[^a-zA-Z0-9-\.\:\/\%]/g,"");if(o.host!=a.host||o.username!=E){let e=await (0,n.A)("SELECT * FROM mariadb_users WHERE user_id=? AND username=? AND host=?",[s.id,E,f]);e?.[0]?.id||await (0,n.A)(`RENAME USER '${t.username}'@'${o.host}' TO '${E}'@'${f}'`)}let g=(0,p.default)({data:m}),A=g==o.password?o.password:g;await (0,n.A)("UPDATE mariadb_users SET username=?, host=?, password=?, grants=? WHERE id=?",[E,f,A,JSON.stringify(d),o.id]),await (0,n.A)(`SET PASSWORD FOR '${E}'@'${f}' = PASSWORD('${m}');`),await (0,l.A)({userId:s.id,mariadbUsername:E,mariadbUserHost:f,sqlUserID:o.id}),r.json({success:!0})}catch(e){(0,u.default)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:s}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}s(29021);let c=(0,d.M)(a,"default"),E=(0,d.M)(a,"config"),f=new i.PagesAPIRouteModule({definition:{kind:t.A.PAGES_API,page:"/api/sql-users/update",pathname:"/api/sql-users/update",bundlePath:"",filename:""},userland:a})}};var r=require("../../../webpack-api-runtime.js");r.C(e);var s=e=>r(r.s=e),a=r.X(0,[3496],()=>s(49844));module.exports=a})();
"use strict";(()=>{var e={};e.id=2350,e.ids=[2350],e.modules={60818:e=>{e.exports=require("dotenv")},47795:e=>{e.exports=require("generate-password")},75600:e=>{e.exports=require("next/dist/compiled/next-server/pages-api.runtime.prod.js")},79428:e=>{e.exports=require("buffer")},55511:e=>{e.exports=require("crypto")},29021:e=>{e.exports=require("fs")},33873:e=>{e.exports=require("path")},49844:(e,r,s)=>{s.r(r),s.d(r,{config:()=>A,default:()=>c,routeModule:()=>E});var i={};s.r(i),s.d(i,{default:()=>m});var a=s(89947),t=s(2706),d=s(96762),o=s(69842),u=s(67619),n=s(48786),p=s(68829),l=s(5437);async function m(e,r){if("POST"!==e.method)return r.json({user:null,msg:"Registration Failed!"});let s=await (0,o.A)(e,r,!0);if(!s)return r.json({success:!1,msg:"Unauthorized"});let{data:i,edit:a,prev:t,grants:d}=e.body;try{if(!t?.id)throw Error("Invalid existing DB entry");let e=await (0,n.A)("SELECT * FROM mariadb_users WHERE id = ? AND user_id = ?",[t.id,s.id]),a=s?.id==Number(process.env.DSQL_SU_USER_ID),o=e?.[0];if(!o?.id)throw Error("Active User couldn't be verified");let{host:u,password:m,username:c}=i,A=a&&c||`dsql_user_${s.id}`;if(!u)throw Error("No host provided");let E=String(u).replace(/[^a-zA-Z0-9-\.\:\/\%]/g,"");if(o.host!=i.host||o.username!=A){let e=await (0,n.A)("SELECT * FROM mariadb_users WHERE user_id=? AND username=? AND host=?",[s.id,A,E]);e?.[0]?.id||await (0,n.A)(`RENAME USER '${t.username}'@'${o.host}' TO '${A}'@'${E}'`)}let g=(0,p.A)({data:m}),f=g==o.password?o.password:g;await (0,n.A)("UPDATE mariadb_users SET username=?, host=?, password=?, grants=? WHERE id=?",[A,E,f,JSON.stringify(d),o.id]),await (0,n.A)(`SET PASSWORD FOR '${A}'@'${E}' = PASSWORD('${m}');`),await (0,l.A)({userId:s.id,mariadbUsername:A,mariadbUserHost:E,sqlUserID:o.id}),r.json({success:!0})}catch(e){(0,u.A)({component:"/api/acceptUserInvitation/catch-error",message:e.message,user:s}),r.json({success:!1,msg:"Error in adding SQL user =>"+e.message,err:e.message})}}let c=(0,d.M)(i,"default"),A=(0,d.M)(i,"config"),E=new a.PagesAPIRouteModule({definition:{kind:t.A.PAGES_API,page:"/api/sql-users/update",pathname:"/api/sql-users/update",bundlePath:"",filename:""},userland:i})}};var r=require("../../../webpack-api-runtime.js");r.C(e);var s=e=>r(r.s=e),i=r.X(0,[3496],()=>s(49844));module.exports=i})();