diff --git a/.env.production b/.env.example similarity index 55% rename from .env.production rename to .env.example index 2454b8a..3331251 100644 --- a/.env.production +++ b/.env.example @@ -1,4 +1,4 @@ # .env.production example NODE_ENV=production -JWT_SECRET=your-super-secure-minimum-32-character-secret-key-here +JWT_SECRET=your-secret-key DATABASE_PATH=/app/data/production.db \ No newline at end of file diff --git a/backend/package.json b/backend/package.json index 177565e..c98b1df 100644 --- a/backend/package.json +++ b/backend/package.json @@ -19,7 +19,10 @@ "express": "^4.18.2", "jsonwebtoken": "^9.0.2", "sqlite3": "^5.1.6", - "uuid": "^9.0.0" + "uuid": "^9.0.0", + "express-rate-limit": "8.1.0", + "helmet": "8.1.0", + "express-validator": "7.3.0" }, "devDependencies": { "@types/bcryptjs": "^2.4.2", diff --git a/backend/src/middleware/rateLimit.ts b/backend/src/middleware/rateLimit.ts new file mode 100644 index 0000000..5d9837e --- /dev/null +++ b/backend/src/middleware/rateLimit.ts @@ -0,0 +1,16 @@ +import rateLimit from 'express-rate-limit'; + +export const authLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, // 15 minutes + max: 5, // Limit each IP to 5 login requests per windowMs + message: { error: 'Zu viele Login-Versuche, bitte versuchen Sie es später erneut' }, + standardHeaders: true, + legacyHeaders: false, +}); + +export const apiLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, // 15 minutes + max: 100, // Limit each IP to 100 requests per windowMs + standardHeaders: true, + legacyHeaders: false, +}); \ No newline at end of file diff --git a/backend/src/middleware/validation.ts b/backend/src/middleware/validation.ts new file mode 100644 index 0000000..1199fc3 --- /dev/null +++ b/backend/src/middleware/validation.ts @@ -0,0 +1,457 @@ +import { body, validationResult, param, query } from 'express-validator'; +import { Request, Response, NextFunction } from 'express'; + +// ===== AUTH VALIDATION ===== +export const validateLogin = [ + body('email') + .isEmail() + .withMessage('Must be a valid email') + .normalizeEmail(), + + body('password') + .isLength({ min: 6 }) + .withMessage('Password must be at least 6 characters') + .trim() + .escape() +]; + +export const validateRegister = [ + body('firstname') + .isLength({ min: 1, max: 100 }) + .withMessage('First name must be between 1-100 characters') + .trim() + .escape(), + + body('lastname') + .isLength({ min: 1, max: 100 }) + .withMessage('Last name must be between 1-100 characters') + .trim() + .escape(), + + body('password') + .isLength({ min: 8 }) + .withMessage('Password must be at least 8 characters') + .matches(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/) + .withMessage('Password must contain uppercase, lowercase and number') +]; + +// ===== EMPLOYEE VALIDATION ===== +export const validateEmployee = [ + body('firstname') + .isLength({ min: 1, max: 100 }) + .withMessage('First name must be between 1-100 characters') + .trim() + .escape(), + + body('lastname') + .isLength({ min: 1, max: 100 }) + .withMessage('Last name must be between 1-100 characters') + .trim() + .escape(), + + body('password') + .optional() + .isLength({ min: 8 }) + .withMessage('Password must be at least 8 characters') + .matches(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/) + .withMessage('Password must contain uppercase, lowercase and number'), + + body('employeeType') + .isIn(['manager', 'personell', 'apprentice', 'guest']) + .withMessage('Employee type must be manager, personell, apprentice or guest'), + + body('contractType') + .optional() + .isIn(['small', 'large', 'flexible']) + .withMessage('Contract type must be small, large or flexible'), + + body('roles') + .optional() + .isArray() + .withMessage('Roles must be an array'), + + body('roles.*') + .optional() + .isIn(['admin', 'maintenance', 'user']) + .withMessage('Invalid role. Allowed: admin, maintenance, user'), + + body('canWorkAlone') + .optional() + .isBoolean() + .withMessage('canWorkAlone must be a boolean'), + + body('isTrainee') + .optional() + .isBoolean() + .withMessage('isTrainee must be a boolean'), + + body('isActive') + .optional() + .isBoolean() + .withMessage('isActive must be a boolean') +]; + +export const validateEmployeeUpdate = [ + body('firstname') + .optional() + .isLength({ min: 1, max: 100 }) + .withMessage('First name must be between 1-100 characters') + .trim() + .escape(), + + body('lastname') + .optional() + .isLength({ min: 1, max: 100 }) + .withMessage('Last name must be between 1-100 characters') + .trim() + .escape(), + + body('employeeType') + .optional() + .isIn(['manager', 'personell', 'apprentice', 'guest']) + .withMessage('Employee type must be manager, personell, apprentice or guest'), + + body('contractType') + .optional() + .isIn(['small', 'large', 'flexible']) + .withMessage('Contract type must be small, large or flexible'), + + body('roles') + .optional() + .isArray() + .withMessage('Roles must be an array'), + + body('roles.*') + .optional() + .isIn(['admin', 'maintenance', 'user']) + .withMessage('Invalid role. Allowed: admin, maintenance, user'), + + body('canWorkAlone') + .optional() + .isBoolean() + .withMessage('canWorkAlone must be a boolean'), + + body('isTrainee') + .optional() + .isBoolean() + .withMessage('isTrainee must be a boolean'), + + body('isActive') + .optional() + .isBoolean() + .withMessage('isActive must be a boolean') +]; + +export const validateChangePassword = [ + body('currentPassword') + .optional() + .isLength({ min: 6 }) + .withMessage('Current password must be at least 6 characters'), + + body('newPassword') + .isLength({ min: 8 }) + .withMessage('New password must be at least 8 characters') + .matches(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/) + .withMessage('New password must contain uppercase, lowercase and number') +]; + +// ===== SHIFT PLAN VALIDATION ===== +export const validateShiftPlan = [ + body('name') + .isLength({ min: 1, max: 200 }) + .withMessage('Name must be between 1-200 characters') + .trim() + .escape(), + + body('description') + .optional() + .isLength({ max: 1000 }) + .withMessage('Description cannot exceed 1000 characters') + .trim() + .escape(), + + body('startDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('endDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('isTemplate') + .optional() + .isBoolean() + .withMessage('isTemplate must be a boolean'), + + body('status') + .optional() + .isIn(['draft', 'published', 'archived', 'template']) + .withMessage('Status must be draft, published, archived or template'), + + body('timeSlots') + .optional() + .isArray() + .withMessage('Time slots must be an array'), + + body('timeSlots.*.name') + .isLength({ min: 1, max: 100 }) + .withMessage('Time slot name must be between 1-100 characters') + .trim() + .escape(), + + body('timeSlots.*.startTime') + .matches(/^([0-1]?[0-9]|2[0-3]):[0-5][0-9]$/) + .withMessage('Start time must be in HH:MM format'), + + body('timeSlots.*.endTime') + .matches(/^([0-1]?[0-9]|2[0-3]):[0-5][0-9]$/) + .withMessage('End time must be in HH:MM format'), + + body('timeSlots.*.description') + .optional() + .isLength({ max: 500 }) + .withMessage('Time slot description cannot exceed 500 characters') + .trim() + .escape(), + + body('shifts') + .optional() + .isArray() + .withMessage('Shifts must be an array'), + + body('shifts.*.dayOfWeek') + .isInt({ min: 1, max: 7 }) + .withMessage('Day of week must be between 1-7 (Monday-Sunday)'), + + body('shifts.*.timeSlotId') + .isUUID() + .withMessage('Time slot ID must be a valid UUID'), + + body('shifts.*.requiredEmployees') + .isInt({ min: 0 }) + .withMessage('Required employees must be a positive integer'), + + body('shifts.*.color') + .optional() + .isHexColor() + .withMessage('Color must be a valid hex color') +]; + +export const validateShiftPlanUpdate = [ + body('name') + .optional() + .isLength({ min: 1, max: 200 }) + .withMessage('Name must be between 1-200 characters') + .trim() + .escape(), + + body('description') + .optional() + .isLength({ max: 1000 }) + .withMessage('Description cannot exceed 1000 characters') + .trim() + .escape(), + + body('startDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('endDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('status') + .optional() + .isIn(['draft', 'published', 'archived', 'template']) + .withMessage('Status must be draft, published, archived or template'), + + body('timeSlots') + .optional() + .isArray() + .withMessage('Time slots must be an array'), + + body('shifts') + .optional() + .isArray() + .withMessage('Shifts must be an array') +]; + +export const validateCreateFromPreset = [ + body('presetName') + .isLength({ min: 1 }) + .withMessage('Preset name is required') + .isIn(['standardWeek', 'extendedWeek', 'weekendFocused', 'morningOnly', 'eveningOnly']) + .withMessage('Invalid preset name'), + + body('name') + .isLength({ min: 1, max: 200 }) + .withMessage('Name must be between 1-200 characters') + .trim() + .escape(), + + body('startDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('endDate') + .optional() + .isISO8601() + .withMessage('Must be a valid date (ISO format)'), + + body('isTemplate') + .optional() + .isBoolean() + .withMessage('isTemplate must be a boolean') +]; + +// ===== SCHEDULED SHIFTS VALIDATION ===== +export const validateScheduledShiftUpdate = [ + body('assignedEmployees') + .isArray() + .withMessage('assignedEmployees must be an array'), + + body('assignedEmployees.*') + .isUUID() + .withMessage('Each assigned employee must be a valid UUID'), + + body('requiredEmployees') + .optional() + .isInt({ min: 0 }) + .withMessage('Required employees must be a positive integer') +]; + +// ===== SETUP VALIDATION ===== +export const validateSetupAdmin = [ + body('firstname') + .isLength({ min: 1, max: 100 }) + .withMessage('First name must be between 1-100 characters') + .trim() + .escape(), + + body('lastname') + .isLength({ min: 1, max: 100 }) + .withMessage('Last name must be between 1-100 characters') + .trim() + .escape(), + + body('password') + .isLength({ min: 8 }) + .withMessage('Password must be at least 8 characters') + .matches(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/) + .withMessage('Password must contain uppercase, lowercase and number') +]; + +// ===== SCHEDULING VALIDATION ===== +export const validateSchedulingRequest = [ + body('shiftPlan') + .isObject() + .withMessage('Shift plan is required'), + + body('shiftPlan.id') + .isUUID() + .withMessage('Shift plan ID must be a valid UUID'), + + body('employees') + .isArray({ min: 1 }) + .withMessage('At least one employee is required'), + + body('employees.*.id') + .isUUID() + .withMessage('Each employee must have a valid UUID'), + + body('availabilities') + .isArray() + .withMessage('Availabilities must be an array'), + + body('constraints') + .optional() + .isArray() + .withMessage('Constraints must be an array') +]; + +// ===== AVAILABILITY VALIDATION ===== +export const validateAvailabilities = [ + body('planId') + .isUUID() + .withMessage('Plan ID must be a valid UUID'), + + body('availabilities') + .isArray() + .withMessage('Availabilities must be an array'), + + body('availabilities.*.shiftId') + .isUUID() + .withMessage('Each shift ID must be a valid UUID'), + + body('availabilities.*.preferenceLevel') + .isInt({ min: 0, max: 2 }) + .withMessage('Preference level must be 0 (unavailable), 1 (available), or 2 (preferred)'), + + body('availabilities.*.notes') + .optional() + .isLength({ max: 500 }) + .withMessage('Notes cannot exceed 500 characters') + .trim() + .escape() +]; + +// ===== COMMON VALIDATORS ===== +export const validateId = [ + param('id') + .isUUID() + .withMessage('Must be a valid UUID') +]; + +export const validateEmployeeId = [ + param('employeeId') + .isUUID() + .withMessage('Must be a valid UUID') +]; + +export const validatePlanId = [ + param('planId') + .isUUID() + .withMessage('Must be a valid UUID') +]; + +export const validatePagination = [ + query('page') + .optional() + .isInt({ min: 1 }) + .withMessage('Page must be a positive integer'), + + query('limit') + .optional() + .isInt({ min: 1, max: 100 }) + .withMessage('Limit must be between 1-100'), + + query('includeInactive') + .optional() + .isBoolean() + .withMessage('includeInactive must be a boolean') +]; + +// ===== MIDDLEWARE TO CHECK VALIDATION RESULTS ===== +export const handleValidationErrors = (req: Request, res: Response, next: NextFunction) => { + const errors = validationResult(req); + + if (!errors.isEmpty()) { + const errorMessages = errors.array().map(error => ({ + field: error.type === 'field' ? error.path : error.type, + message: error.msg, + value: error + })); + + return res.status(400).json({ + error: 'Validation failed', + details: errorMessages + }); + } + + next(); +}; \ No newline at end of file diff --git a/backend/src/routes/auth.ts b/backend/src/routes/auth.ts index dd78af6..df85873 100644 --- a/backend/src/routes/auth.ts +++ b/backend/src/routes/auth.ts @@ -8,12 +8,13 @@ import { validateToken } from '../controllers/authController.js'; import { authMiddleware } from '../middleware/auth.js'; +import { validateLogin, validateRegister, handleValidationErrors } from '../middleware/validation.js'; const router = express.Router(); // Public routes -router.post('/login', login); -router.post('/register', register); +router.post('/login', validateLogin, handleValidationErrors, login); +router.post('/register', validateRegister, handleValidationErrors, register); router.get('/validate', validateToken); // Protected routes (require authentication) diff --git a/backend/src/routes/employees.ts b/backend/src/routes/employees.ts index f2ceeff..7c65a54 100644 --- a/backend/src/routes/employees.ts +++ b/backend/src/routes/employees.ts @@ -1,4 +1,3 @@ -// backend/src/routes/employees.ts import express from 'express'; import { authMiddleware, requireRole } from '../middleware/auth.js'; import { @@ -12,6 +11,16 @@ import { changePassword, updateLastLogin } from '../controllers/employeeController.js'; +import { + handleValidationErrors, + validateEmployee, + validateEmployeeUpdate, + validateChangePassword, + validateId, + validateEmployeeId, + validateAvailabilities, + validatePagination +} from '../middleware/validation.js'; const router = express.Router(); @@ -19,16 +28,18 @@ const router = express.Router(); router.use(authMiddleware); // Employee CRUD Routes -router.get('/', authMiddleware, getEmployees); -router.get('/:id', requireRole(['admin', 'maintenance']), getEmployee); -router.post('/', requireRole(['admin']), createEmployee); -router.put('/:id', requireRole(['admin', 'maintenance']), updateEmployee); -router.delete('/:id', requireRole(['admin']), deleteEmployee); -router.put('/:id/password', authMiddleware, changePassword); -router.put('/:id/last-login', authMiddleware, updateLastLogin); +router.get('/', validatePagination, handleValidationErrors, getEmployees); +router.get('/:id', validateId, handleValidationErrors, requireRole(['admin', 'maintenance']), getEmployee); +router.post('/', validateEmployee, handleValidationErrors, requireRole(['admin']), createEmployee); +router.put('/:id', validateId, validateEmployeeUpdate, handleValidationErrors, requireRole(['admin', 'maintenance']), updateEmployee); +router.delete('/:id', validateId, handleValidationErrors, requireRole(['admin']), deleteEmployee); + +// Password & Login Routes +router.put('/:id/password', validateId, validateChangePassword, handleValidationErrors, changePassword); +router.put('/:id/last-login', validateId, handleValidationErrors, updateLastLogin); // Availability Routes -router.get('/:employeeId/availabilities', authMiddleware, getAvailabilities); -router.put('/:employeeId/availabilities', authMiddleware, updateAvailabilities); +router.get('/:employeeId/availabilities', validateEmployeeId, handleValidationErrors, getAvailabilities); +router.put('/:employeeId/availabilities', validateEmployeeId, validateAvailabilities, handleValidationErrors, updateAvailabilities); export default router; \ No newline at end of file diff --git a/backend/src/routes/scheduledShifts.ts b/backend/src/routes/scheduledShifts.ts index 3ca8e20..c0249cc 100644 --- a/backend/src/routes/scheduledShifts.ts +++ b/backend/src/routes/scheduledShifts.ts @@ -1,4 +1,3 @@ -// backend/src/routes/scheduledShifts.ts import express from 'express'; import { authMiddleware, requireRole } from '../middleware/auth.js'; import { @@ -8,23 +7,21 @@ import { getScheduledShiftsFromPlan, updateScheduledShift } from '../controllers/shiftPlanController.js'; +import { + validateId, + validatePlanId, + validateScheduledShiftUpdate, + handleValidationErrors +} from '../middleware/validation.js'; const router = express.Router(); router.use(authMiddleware); - -router.post('/:id/generate-shifts', requireRole(['admin', 'maintenance']), generateScheduledShiftsForPlan); - -router.post('/:id/regenerate-shifts', requireRole(['admin', 'maintenance']), regenerateScheduledShifts); - -// GET all scheduled shifts for a plan -router.get('/plan/:planId', authMiddleware, getScheduledShiftsFromPlan); - -// GET specific scheduled shift -router.get('/:id', authMiddleware, getScheduledShift); - -// UPDATE scheduled shift -router.put('/:id', authMiddleware, updateScheduledShift); +router.post('/:id/generate-shifts', validateId, handleValidationErrors, requireRole(['admin', 'maintenance']), generateScheduledShiftsForPlan); +router.post('/:id/regenerate-shifts', validateId, handleValidationErrors, requireRole(['admin', 'maintenance']), regenerateScheduledShifts); +router.get('/plan/:planId', validatePlanId, handleValidationErrors, getScheduledShiftsFromPlan); +router.get('/:id', validateId, handleValidationErrors, getScheduledShift); +router.put('/:id', validateId, validateScheduledShiftUpdate, handleValidationErrors, updateScheduledShift); export default router; \ No newline at end of file diff --git a/backend/src/routes/scheduling.ts b/backend/src/routes/scheduling.ts index 320e07a..654db89 100644 --- a/backend/src/routes/scheduling.ts +++ b/backend/src/routes/scheduling.ts @@ -1,9 +1,10 @@ import express from 'express'; import { SchedulingService } from '../services/SchedulingService.js'; +import { validateSchedulingRequest, handleValidationErrors } from '../middleware/validation.js'; const router = express.Router(); -router.post('/generate-schedule', async (req, res) => { +router.post('/generate-schedule', validateSchedulingRequest, handleValidationErrors, async (req: express.Request, res: express.Response) => { try { const { shiftPlan, employees, availabilities, constraints } = req.body; @@ -14,18 +15,6 @@ router.post('/generate-schedule', async (req, res) => { constraintCount: constraints?.length }); - // Validate required data - if (!shiftPlan || !employees || !availabilities) { - return res.status(400).json({ - error: 'Missing required data', - details: { - shiftPlan: !!shiftPlan, - employees: !!employees, - availabilities: !!availabilities - } - }); - } - const scheduler = new SchedulingService(); const result = await scheduler.generateOptimalSchedule({ shiftPlan, diff --git a/backend/src/routes/setup.ts b/backend/src/routes/setup.ts index 22281c5..5ff2154 100644 --- a/backend/src/routes/setup.ts +++ b/backend/src/routes/setup.ts @@ -1,10 +1,10 @@ -// backend/src/routes/setup.ts import express from 'express'; import { checkSetupStatus, setupAdmin } from '../controllers/setupController.js'; +import { validateSetupAdmin, handleValidationErrors } from '../middleware/validation.js'; const router = express.Router(); router.get('/status', checkSetupStatus); -router.post('/admin', setupAdmin); +router.post('/admin', validateSetupAdmin, handleValidationErrors, setupAdmin); export default router; \ No newline at end of file diff --git a/backend/src/routes/shiftPlans.ts b/backend/src/routes/shiftPlans.ts index 164b3ad..de6dfe0 100644 --- a/backend/src/routes/shiftPlans.ts +++ b/backend/src/routes/shiftPlans.ts @@ -1,4 +1,3 @@ -// backend/src/routes/shiftPlans.ts import express from 'express'; import { authMiddleware, requireRole } from '../middleware/auth.js'; import { @@ -10,32 +9,25 @@ import { createFromPreset, clearAssignments } from '../controllers/shiftPlanController.js'; +import { + validateShiftPlan, + validateShiftPlanUpdate, + validateCreateFromPreset, + handleValidationErrors, + validateId +} from '../middleware/validation.js'; const router = express.Router(); router.use(authMiddleware); // Combined routes for both shift plans and templates - -// GET all shift plans (including templates) -router.get('/' , authMiddleware, getShiftPlans); - -// GET specific shift plan or template -router.get('/:id', authMiddleware, getShiftPlan); - -// POST create new shift plan -router.post('/', requireRole(['admin', 'maintenance']), createShiftPlan); - -// POST create new plan from preset -router.post('/from-preset', requireRole(['admin', 'maintenance']), createFromPreset); - -// PUT update shift plan or template -router.put('/:id', requireRole(['admin', 'maintenance']), updateShiftPlan); - -// DELETE shift plan or template -router.delete('/:id', requireRole(['admin', 'maintenance']), deleteShiftPlan); - -// POST clear assignments and reset to draft -router.post('/:id/clear-assignments', requireRole(['admin', 'maintenance']), clearAssignments); +router.get('/', getShiftPlans); +router.get('/:id', validateId, handleValidationErrors, getShiftPlan); +router.post('/', validateShiftPlan, handleValidationErrors, requireRole(['admin', 'maintenance']), createShiftPlan); +router.post('/from-preset', validateCreateFromPreset, handleValidationErrors, requireRole(['admin', 'maintenance']), createFromPreset); +router.put('/:id', validateId, validateShiftPlanUpdate, handleValidationErrors, requireRole(['admin', 'maintenance']), updateShiftPlan); +router.delete('/:id', validateId, handleValidationErrors, requireRole(['admin', 'maintenance']), deleteShiftPlan); +router.post('/:id/clear-assignments', validateId, handleValidationErrors, requireRole(['admin', 'maintenance']), clearAssignments); export default router; \ No newline at end of file diff --git a/backend/src/server.ts b/backend/src/server.ts index f24f122..46d8b75 100644 --- a/backend/src/server.ts +++ b/backend/src/server.ts @@ -1,9 +1,9 @@ // backend/src/server.ts import express from 'express'; import path from 'path'; -import { fileURLToPath } from 'url'; import { initializeDatabase } from './scripts/initializeDatabase.js'; import fs from 'fs'; +import helmet from 'helmet'; // Route imports import authRoutes from './routes/auth.js'; @@ -12,16 +12,50 @@ import shiftPlanRoutes from './routes/shiftPlans.js'; import setupRoutes from './routes/setup.js'; import scheduledShifts from './routes/scheduledShifts.js'; import schedulingRoutes from './routes/scheduling.js'; +import { authLimiter, apiLimiter } from './middleware/rateLimit.js'; const app = express(); const PORT = 3002; +if (process.env.NODE_ENV === 'production') { + console.info('Checking for JWT_SECRET'); + const JWT_SECRET = process.env.JWT_SECRET; + if (!JWT_SECRET || JWT_SECRET === 'your-secret-key') { + console.error('❌ Fatal: JWT_SECRET not set or using default value'); + process.exit(1); + } +} + + +// Security headers +app.use(helmet({ + contentSecurityPolicy: { + directives: { + defaultSrc: ["'self'"], + scriptSrc: ["'self'", "'unsafe-inline'"], + styleSrc: ["'self'", "'unsafe-inline'"], + imgSrc: ["'self'", "data:", "https:"], + }, + }, + crossOriginEmbedderPolicy: false // Required for Vite dev +})); + +// Additional security headers +app.use((req, res, next) => { + res.setHeader('X-Content-Type-Options', 'nosniff'); + res.setHeader('X-Frame-Options', 'DENY'); + res.setHeader('X-XSS-Protection', '1; mode=block'); + next(); +}); + // Middleware app.use(express.json()); // API Routes +app.use('/api/', apiLimiter); + app.use('/api/setup', setupRoutes); -app.use('/api/auth', authRoutes); +app.use('/api/auth', authLimiter, authRoutes); app.use('/api/employees', employeeRoutes); app.use('/api/shift-plans', shiftPlanRoutes); app.use('/api/scheduled-shifts', scheduledShifts); diff --git a/package-lock.json b/package-lock.json index af65175..1f42484 100644 --- a/package-lock.json +++ b/package-lock.json @@ -22,6 +22,9 @@ "bcrypt": "^6.0.0", "bcryptjs": "^2.4.3", "express": "^4.18.2", + "express-rate-limit": "8.1.0", + "express-validator": "7.3.0", + "helmet": "8.1.0", "jsonwebtoken": "^9.0.2", "sqlite3": "^5.1.6", "uuid": "^9.0.0" @@ -346,17 +349,6 @@ "license": "ISC", "optional": true }, - "backend/node_modules/accepts": { - "version": "1.3.8", - "license": "MIT", - "dependencies": { - "mime-types": "~2.1.34", - "negotiator": "0.6.3" - }, - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/acorn": { "version": "8.15.0", "dev": true, @@ -457,10 +449,6 @@ "dev": true, "license": "MIT" }, - "backend/node_modules/array-flatten": { - "version": "1.1.1", - "license": "MIT" - }, "backend/node_modules/balanced-match": { "version": "1.0.2", "license": "MIT", @@ -523,49 +511,6 @@ "readable-stream": "^3.4.0" } }, - "backend/node_modules/body-parser": { - "version": "1.20.3", - "license": "MIT", - "dependencies": { - "bytes": "3.1.2", - "content-type": "~1.0.5", - "debug": "2.6.9", - "depd": "2.0.0", - "destroy": "1.2.0", - "http-errors": "2.0.0", - "iconv-lite": "0.4.24", - "on-finished": "2.4.1", - "qs": "6.13.0", - "raw-body": "2.5.2", - "type-is": "~1.6.18", - "unpipe": "1.0.0" - }, - "engines": { - "node": ">= 0.8", - "npm": "1.2.8000 || >= 1.4.16" - } - }, - "backend/node_modules/body-parser/node_modules/debug": { - "version": "2.6.9", - "license": "MIT", - "dependencies": { - "ms": "2.0.0" - } - }, - "backend/node_modules/body-parser/node_modules/iconv-lite": { - "version": "0.4.24", - "license": "MIT", - "dependencies": { - "safer-buffer": ">= 2.1.2 < 3" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "backend/node_modules/body-parser/node_modules/ms": { - "version": "2.0.0", - "license": "MIT" - }, "backend/node_modules/brace-expansion": { "version": "1.1.12", "license": "MIT", @@ -612,13 +557,6 @@ "version": "1.0.1", "license": "BSD-3-Clause" }, - "backend/node_modules/bytes": { - "version": "3.1.2", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/cacache": { "version": "15.3.0", "license": "ISC", @@ -647,31 +585,6 @@ "node": ">= 10" } }, - "backend/node_modules/call-bind-apply-helpers": { - "version": "1.0.2", - "license": "MIT", - "dependencies": { - "es-errors": "^1.3.0", - "function-bind": "^1.1.2" - }, - "engines": { - "node": ">= 0.4" - } - }, - "backend/node_modules/call-bound": { - "version": "1.0.4", - "license": "MIT", - "dependencies": { - "call-bind-apply-helpers": "^1.0.2", - "get-intrinsic": "^1.3.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, "backend/node_modules/chalk": { "version": "4.1.2", "dev": true, @@ -750,34 +663,6 @@ "license": "ISC", "optional": true }, - "backend/node_modules/content-disposition": { - "version": "0.5.4", - "license": "MIT", - "dependencies": { - "safe-buffer": "5.2.1" - }, - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/content-type": { - "version": "1.0.5", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/cookie": { - "version": "0.7.1", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/cookie-signature": { - "version": "1.0.6", - "license": "MIT" - }, "backend/node_modules/create-require": { "version": "1.1.1", "dev": true, @@ -808,21 +693,6 @@ "license": "MIT", "optional": true }, - "backend/node_modules/depd": { - "version": "2.0.0", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, - "backend/node_modules/destroy": { - "version": "1.2.0", - "license": "MIT", - "engines": { - "node": ">= 0.8", - "npm": "1.2.8000 || >= 1.4.16" - } - }, "backend/node_modules/detect-libc": { "version": "2.1.2", "license": "Apache-2.0", @@ -846,18 +716,6 @@ "node": "^14.15.0 || ^16.10.0 || >=18.0.0" } }, - "backend/node_modules/dunder-proto": { - "version": "1.0.1", - "license": "MIT", - "dependencies": { - "call-bind-apply-helpers": "^1.0.1", - "es-errors": "^1.3.0", - "gopd": "^1.2.0" - }, - "engines": { - "node": ">= 0.4" - } - }, "backend/node_modules/ecdsa-sig-formatter": { "version": "1.0.11", "license": "Apache-2.0", @@ -865,22 +723,11 @@ "safe-buffer": "^5.0.1" } }, - "backend/node_modules/ee-first": { - "version": "1.1.1", - "license": "MIT" - }, "backend/node_modules/emoji-regex": { "version": "8.0.0", "license": "MIT", "optional": true }, - "backend/node_modules/encodeurl": { - "version": "2.0.0", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/encoding": { "version": "0.1.13", "license": "MIT", @@ -909,30 +756,6 @@ "license": "MIT", "optional": true }, - "backend/node_modules/es-define-property": { - "version": "1.0.1", - "license": "MIT", - "engines": { - "node": ">= 0.4" - } - }, - "backend/node_modules/es-errors": { - "version": "1.3.0", - "license": "MIT", - "engines": { - "node": ">= 0.4" - } - }, - "backend/node_modules/es-object-atoms": { - "version": "1.1.1", - "license": "MIT", - "dependencies": { - "es-errors": "^1.3.0" - }, - "engines": { - "node": ">= 0.4" - } - }, "backend/node_modules/esbuild": { "version": "0.25.11", "dev": true, @@ -973,10 +796,6 @@ "@esbuild/win32-x64": "0.25.11" } }, - "backend/node_modules/escape-html": { - "version": "1.0.3", - "license": "MIT" - }, "backend/node_modules/escape-string-regexp": { "version": "2.0.0", "dev": true, @@ -985,13 +804,6 @@ "node": ">=8" } }, - "backend/node_modules/etag": { - "version": "1.8.1", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/expand-template": { "version": "2.0.3", "license": "(MIT OR WTFPL)", @@ -1014,61 +826,6 @@ "node": "^14.15.0 || ^16.10.0 || >=18.0.0" } }, - "backend/node_modules/express": { - "version": "4.21.2", - "license": "MIT", - "dependencies": { - "accepts": "~1.3.8", - "array-flatten": "1.1.1", - "body-parser": "1.20.3", - "content-disposition": "0.5.4", - "content-type": "~1.0.4", - "cookie": "0.7.1", - "cookie-signature": "1.0.6", - "debug": "2.6.9", - "depd": "2.0.0", - "encodeurl": "~2.0.0", - "escape-html": "~1.0.3", - "etag": "~1.8.1", - "finalhandler": "1.3.1", - "fresh": "0.5.2", - "http-errors": "2.0.0", - "merge-descriptors": "1.0.3", - "methods": "~1.1.2", - "on-finished": "2.4.1", - "parseurl": "~1.3.3", - "path-to-regexp": "0.1.12", - "proxy-addr": "~2.0.7", - "qs": "6.13.0", - "range-parser": "~1.2.1", - "safe-buffer": "5.2.1", - "send": "0.19.0", - "serve-static": "1.16.2", - "setprototypeof": "1.2.0", - "statuses": "2.0.1", - "type-is": "~1.6.18", - "utils-merge": "1.0.1", - "vary": "~1.1.2" - }, - "engines": { - "node": ">= 0.10.0" - }, - "funding": { - "type": "opencollective", - "url": "https://opencollective.com/express" - } - }, - "backend/node_modules/express/node_modules/debug": { - "version": "2.6.9", - "license": "MIT", - "dependencies": { - "ms": "2.0.0" - } - }, - "backend/node_modules/express/node_modules/ms": { - "version": "2.0.0", - "license": "MIT" - }, "backend/node_modules/file-uri-to-path": { "version": "1.0.0", "license": "MIT" @@ -1084,47 +841,6 @@ "node": ">=8" } }, - "backend/node_modules/finalhandler": { - "version": "1.3.1", - "license": "MIT", - "dependencies": { - "debug": "2.6.9", - "encodeurl": "~2.0.0", - "escape-html": "~1.0.3", - "on-finished": "2.4.1", - "parseurl": "~1.3.3", - "statuses": "2.0.1", - "unpipe": "~1.0.0" - }, - "engines": { - "node": ">= 0.8" - } - }, - "backend/node_modules/finalhandler/node_modules/debug": { - "version": "2.6.9", - "license": "MIT", - "dependencies": { - "ms": "2.0.0" - } - }, - "backend/node_modules/finalhandler/node_modules/ms": { - "version": "2.0.0", - "license": "MIT" - }, - "backend/node_modules/forwarded": { - "version": "0.2.0", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/fresh": { - "version": "0.5.2", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/fs-constants": { "version": "1.0.0", "license": "MIT" @@ -1144,13 +860,6 @@ "license": "ISC", "optional": true }, - "backend/node_modules/function-bind": { - "version": "1.1.2", - "license": "MIT", - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, "backend/node_modules/gauge": { "version": "4.0.4", "license": "ISC", @@ -1169,39 +878,6 @@ "node": "^12.13.0 || ^14.15.0 || >=16.0.0" } }, - "backend/node_modules/get-intrinsic": { - "version": "1.3.0", - "license": "MIT", - "dependencies": { - "call-bind-apply-helpers": "^1.0.2", - "es-define-property": "^1.0.1", - "es-errors": "^1.3.0", - "es-object-atoms": "^1.1.1", - "function-bind": "^1.1.2", - "get-proto": "^1.0.1", - "gopd": "^1.2.0", - "has-symbols": "^1.1.0", - "hasown": "^2.0.2", - "math-intrinsics": "^1.1.0" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/get-proto": { - "version": "1.0.1", - "license": "MIT", - "dependencies": { - "dunder-proto": "^1.0.1", - "es-object-atoms": "^1.0.0" - }, - "engines": { - "node": ">= 0.4" - } - }, "backend/node_modules/get-tsconfig": { "version": "4.12.0", "dev": true, @@ -1236,16 +912,6 @@ "url": "https://github.com/sponsors/isaacs" } }, - "backend/node_modules/gopd": { - "version": "1.2.0", - "license": "MIT", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, "backend/node_modules/graceful-fs": { "version": "4.2.11", "devOptional": true, @@ -1259,50 +925,16 @@ "node": ">=8" } }, - "backend/node_modules/has-symbols": { - "version": "1.1.0", - "license": "MIT", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, "backend/node_modules/has-unicode": { "version": "2.0.1", "license": "ISC", "optional": true }, - "backend/node_modules/hasown": { - "version": "2.0.2", - "license": "MIT", - "dependencies": { - "function-bind": "^1.1.2" - }, - "engines": { - "node": ">= 0.4" - } - }, "backend/node_modules/http-cache-semantics": { "version": "4.2.0", "license": "BSD-2-Clause", "optional": true }, - "backend/node_modules/http-errors": { - "version": "2.0.0", - "license": "MIT", - "dependencies": { - "depd": "2.0.0", - "inherits": "2.0.4", - "setprototypeof": "1.2.0", - "statuses": "2.0.1", - "toidentifier": "1.0.1" - }, - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/http-proxy-agent": { "version": "4.0.1", "license": "MIT", @@ -1395,29 +1027,10 @@ "wrappy": "1" } }, - "backend/node_modules/inherits": { - "version": "2.0.4", - "license": "ISC" - }, "backend/node_modules/ini": { "version": "1.3.8", "license": "ISC" }, - "backend/node_modules/ip-address": { - "version": "10.0.1", - "license": "MIT", - "optional": true, - "engines": { - "node": ">= 12" - } - }, - "backend/node_modules/ipaddr.js": { - "version": "1.9.1", - "license": "MIT", - "engines": { - "node": ">= 0.10" - } - }, "backend/node_modules/is-fullwidth-code-point": { "version": "3.0.0", "license": "MIT", @@ -1630,34 +1243,6 @@ "node": ">= 0.6" } }, - "backend/node_modules/math-intrinsics": { - "version": "1.1.0", - "license": "MIT", - "engines": { - "node": ">= 0.4" - } - }, - "backend/node_modules/media-typer": { - "version": "0.3.0", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/merge-descriptors": { - "version": "1.0.3", - "license": "MIT", - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "backend/node_modules/methods": { - "version": "1.1.2", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/micromatch": { "version": "4.0.8", "dev": true, @@ -1670,33 +1255,6 @@ "node": ">=8.6" } }, - "backend/node_modules/mime": { - "version": "1.6.0", - "license": "MIT", - "bin": { - "mime": "cli.js" - }, - "engines": { - "node": ">=4" - } - }, - "backend/node_modules/mime-db": { - "version": "1.52.0", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/mime-types": { - "version": "2.1.35", - "license": "MIT", - "dependencies": { - "mime-db": "1.52.0" - }, - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/mimic-response": { "version": "3.1.0", "license": "MIT", @@ -1824,13 +1382,6 @@ "version": "2.0.0", "license": "MIT" }, - "backend/node_modules/negotiator": { - "version": "0.6.3", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/node-abi": { "version": "3.78.0", "license": "MIT", @@ -1905,26 +1456,6 @@ "node": "^12.13.0 || ^14.15.0 || >=16.0.0" } }, - "backend/node_modules/object-inspect": { - "version": "1.13.4", - "license": "MIT", - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/on-finished": { - "version": "2.4.1", - "license": "MIT", - "dependencies": { - "ee-first": "1.1.1" - }, - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/once": { "version": "1.4.0", "license": "ISC", @@ -1946,13 +1477,6 @@ "url": "https://github.com/sponsors/sindresorhus" } }, - "backend/node_modules/parseurl": { - "version": "1.3.3", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/path-is-absolute": { "version": "1.0.1", "license": "MIT", @@ -1961,10 +1485,6 @@ "node": ">=0.10.0" } }, - "backend/node_modules/path-to-regexp": { - "version": "0.1.12", - "license": "MIT" - }, "backend/node_modules/picomatch": { "version": "2.3.1", "dev": true, @@ -2041,17 +1561,6 @@ "node": ">=10" } }, - "backend/node_modules/proxy-addr": { - "version": "2.0.7", - "license": "MIT", - "dependencies": { - "forwarded": "0.2.0", - "ipaddr.js": "1.9.1" - }, - "engines": { - "node": ">= 0.10" - } - }, "backend/node_modules/pump": { "version": "3.0.3", "license": "MIT", @@ -2060,49 +1569,6 @@ "once": "^1.3.1" } }, - "backend/node_modules/qs": { - "version": "6.13.0", - "license": "BSD-3-Clause", - "dependencies": { - "side-channel": "^1.0.6" - }, - "engines": { - "node": ">=0.6" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/range-parser": { - "version": "1.2.1", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, - "backend/node_modules/raw-body": { - "version": "2.5.2", - "license": "MIT", - "dependencies": { - "bytes": "3.1.2", - "http-errors": "2.0.0", - "iconv-lite": "0.4.24", - "unpipe": "1.0.0" - }, - "engines": { - "node": ">= 0.8" - } - }, - "backend/node_modules/raw-body/node_modules/iconv-lite": { - "version": "0.4.24", - "license": "MIT", - "dependencies": { - "safer-buffer": ">= 2.1.2 < 3" - }, - "engines": { - "node": ">=0.10.0" - } - }, "backend/node_modules/rc": { "version": "1.2.8", "license": "(BSD-2-Clause OR MIT OR Apache-2.0)", @@ -2163,28 +1629,6 @@ "url": "https://github.com/sponsors/isaacs" } }, - "backend/node_modules/safe-buffer": { - "version": "5.2.1", - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/feross" - }, - { - "type": "patreon", - "url": "https://www.patreon.com/feross" - }, - { - "type": "consulting", - "url": "https://feross.org/support" - } - ], - "license": "MIT" - }, - "backend/node_modules/safer-buffer": { - "version": "2.1.2", - "license": "MIT" - }, "backend/node_modules/semver": { "version": "7.7.3", "license": "ISC", @@ -2195,132 +1639,11 @@ "node": ">=10" } }, - "backend/node_modules/send": { - "version": "0.19.0", - "license": "MIT", - "dependencies": { - "debug": "2.6.9", - "depd": "2.0.0", - "destroy": "1.2.0", - "encodeurl": "~1.0.2", - "escape-html": "~1.0.3", - "etag": "~1.8.1", - "fresh": "0.5.2", - "http-errors": "2.0.0", - "mime": "1.6.0", - "ms": "2.1.3", - "on-finished": "2.4.1", - "range-parser": "~1.2.1", - "statuses": "2.0.1" - }, - "engines": { - "node": ">= 0.8.0" - } - }, - "backend/node_modules/send/node_modules/debug": { - "version": "2.6.9", - "license": "MIT", - "dependencies": { - "ms": "2.0.0" - } - }, - "backend/node_modules/send/node_modules/debug/node_modules/ms": { - "version": "2.0.0", - "license": "MIT" - }, - "backend/node_modules/send/node_modules/encodeurl": { - "version": "1.0.2", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, - "backend/node_modules/serve-static": { - "version": "1.16.2", - "license": "MIT", - "dependencies": { - "encodeurl": "~2.0.0", - "escape-html": "~1.0.3", - "parseurl": "~1.3.3", - "send": "0.19.0" - }, - "engines": { - "node": ">= 0.8.0" - } - }, "backend/node_modules/set-blocking": { "version": "2.0.0", "license": "ISC", "optional": true }, - "backend/node_modules/setprototypeof": { - "version": "1.2.0", - "license": "ISC" - }, - "backend/node_modules/side-channel": { - "version": "1.1.0", - "license": "MIT", - "dependencies": { - "es-errors": "^1.3.0", - "object-inspect": "^1.13.3", - "side-channel-list": "^1.0.0", - "side-channel-map": "^1.0.1", - "side-channel-weakmap": "^1.0.2" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/side-channel-list": { - "version": "1.0.0", - "license": "MIT", - "dependencies": { - "es-errors": "^1.3.0", - "object-inspect": "^1.13.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/side-channel-map": { - "version": "1.0.1", - "license": "MIT", - "dependencies": { - "call-bound": "^1.0.2", - "es-errors": "^1.3.0", - "get-intrinsic": "^1.2.5", - "object-inspect": "^1.13.3" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, - "backend/node_modules/side-channel-weakmap": { - "version": "1.0.2", - "license": "MIT", - "dependencies": { - "call-bound": "^1.0.2", - "es-errors": "^1.3.0", - "get-intrinsic": "^1.2.5", - "object-inspect": "^1.13.3", - "side-channel-map": "^1.0.1" - }, - "engines": { - "node": ">= 0.4" - }, - "funding": { - "url": "https://github.com/sponsors/ljharb" - } - }, "backend/node_modules/signal-exit": { "version": "3.0.7", "license": "ISC", @@ -2454,13 +1777,6 @@ "node": ">=10" } }, - "backend/node_modules/statuses": { - "version": "2.0.1", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/string_decoder": { "version": "1.3.0", "license": "MIT", @@ -2571,13 +1887,6 @@ "node": ">=8.0" } }, - "backend/node_modules/toidentifier": { - "version": "1.0.1", - "license": "MIT", - "engines": { - "node": ">=0.6" - } - }, "backend/node_modules/ts-node": { "version": "10.9.2", "dev": true, @@ -2648,17 +1957,6 @@ "node": "*" } }, - "backend/node_modules/type-is": { - "version": "1.6.18", - "license": "MIT", - "dependencies": { - "media-typer": "0.3.0", - "mime-types": "~2.1.24" - }, - "engines": { - "node": ">= 0.6" - } - }, "backend/node_modules/undici-types": { "version": "7.14.0", "license": "MIT" @@ -2679,24 +1977,10 @@ "imurmurhash": "^0.1.4" } }, - "backend/node_modules/unpipe": { - "version": "1.0.0", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/util-deprecate": { "version": "1.0.2", "license": "MIT" }, - "backend/node_modules/utils-merge": { - "version": "1.0.1", - "license": "MIT", - "engines": { - "node": ">= 0.4.0" - } - }, "backend/node_modules/uuid": { "version": "9.0.1", "funding": [ @@ -2713,13 +1997,6 @@ "dev": true, "license": "MIT" }, - "backend/node_modules/vary": { - "version": "1.1.2", - "license": "MIT", - "engines": { - "node": ">= 0.8" - } - }, "backend/node_modules/which": { "version": "2.0.2", "license": "ISC", @@ -3224,6 +2501,25 @@ "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" } }, + "node_modules/accepts": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", + "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==", + "license": "MIT", + "dependencies": { + "mime-types": "~2.1.34", + "negotiator": "0.6.3" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/array-flatten": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", + "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==", + "license": "MIT" + }, "node_modules/baseline-browser-mapping": { "version": "2.8.20", "dev": true, @@ -3232,6 +2528,45 @@ "baseline-browser-mapping": "dist/cli.js" } }, + "node_modules/body-parser": { + "version": "1.20.3", + "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz", + "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==", + "license": "MIT", + "dependencies": { + "bytes": "3.1.2", + "content-type": "~1.0.5", + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "http-errors": "2.0.0", + "iconv-lite": "0.4.24", + "on-finished": "2.4.1", + "qs": "6.13.0", + "raw-body": "2.5.2", + "type-is": "~1.6.18", + "unpipe": "1.0.0" + }, + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/body-parser/node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/body-parser/node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, "node_modules/browserslist": { "version": "4.27.0", "dev": true, @@ -3264,6 +2599,44 @@ "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7" } }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/call-bind-apply-helpers": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", + "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/call-bound": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", + "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "get-intrinsic": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, "node_modules/caniuse-lite": { "version": "1.0.30001751", "dev": true, @@ -3283,11 +2656,47 @@ ], "license": "CC-BY-4.0" }, + "node_modules/content-disposition": { + "version": "0.5.4", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", + "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==", + "license": "MIT", + "dependencies": { + "safe-buffer": "5.2.1" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/content-type": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", + "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, "node_modules/convert-source-map": { "version": "2.0.0", "dev": true, "license": "MIT" }, + "node_modules/cookie": { + "version": "0.7.1", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz", + "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cookie-signature": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz", + "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==", + "license": "MIT" + }, "node_modules/csstype": { "version": "3.1.3", "dev": true, @@ -3309,11 +2718,89 @@ } } }, + "node_modules/depd": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", + "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/destroy": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", + "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==", + "license": "MIT", + "engines": { + "node": ">= 0.8", + "npm": "1.2.8000 || >= 1.4.16" + } + }, + "node_modules/dunder-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", + "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.1", + "es-errors": "^1.3.0", + "gopd": "^1.2.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/ee-first": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", + "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", + "license": "MIT" + }, "node_modules/electron-to-chromium": { "version": "1.5.240", "dev": true, "license": "ISC" }, + "node_modules/encodeurl": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", + "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/es-define-property": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", + "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-errors": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", + "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/es-object-atoms": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz", + "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0" + }, + "engines": { + "node": ">= 0.4" + } + }, "node_modules/esbuild": { "version": "0.21.5", "dev": true, @@ -3359,6 +2846,113 @@ "node": ">=6" } }, + "node_modules/escape-html": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", + "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==", + "license": "MIT" + }, + "node_modules/etag": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", + "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/express": { + "version": "4.21.2", + "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz", + "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==", + "license": "MIT", + "dependencies": { + "accepts": "~1.3.8", + "array-flatten": "1.1.1", + "body-parser": "1.20.3", + "content-disposition": "0.5.4", + "content-type": "~1.0.4", + "cookie": "0.7.1", + "cookie-signature": "1.0.6", + "debug": "2.6.9", + "depd": "2.0.0", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "finalhandler": "1.3.1", + "fresh": "0.5.2", + "http-errors": "2.0.0", + "merge-descriptors": "1.0.3", + "methods": "~1.1.2", + "on-finished": "2.4.1", + "parseurl": "~1.3.3", + "path-to-regexp": "0.1.12", + "proxy-addr": "~2.0.7", + "qs": "6.13.0", + "range-parser": "~1.2.1", + "safe-buffer": "5.2.1", + "send": "0.19.0", + "serve-static": "1.16.2", + "setprototypeof": "1.2.0", + "statuses": "2.0.1", + "type-is": "~1.6.18", + "utils-merge": "1.0.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.10.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/express-rate-limit": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.1.0.tgz", + "integrity": "sha512-4nLnATuKupnmwqiJc27b4dCFmB/T60ExgmtDD7waf4LdrbJ8CPZzZRHYErDYNhoz+ql8fUdYwM/opf90PoPAQA==", + "license": "MIT", + "dependencies": { + "ip-address": "10.0.1" + }, + "engines": { + "node": ">= 16" + }, + "funding": { + "url": "https://github.com/sponsors/express-rate-limit" + }, + "peerDependencies": { + "express": ">= 4.11" + } + }, + "node_modules/express-validator": { + "version": "7.3.0", + "resolved": "https://registry.npmjs.org/express-validator/-/express-validator-7.3.0.tgz", + "integrity": "sha512-ujK2BX5JUun5NR4JuBo83YSXoDDIpoGz3QxgHTzQcHFevkKnwV1in4K7YNuuXQ1W3a2ObXB/P4OTnTZpUyGWiw==", + "license": "MIT", + "dependencies": { + "lodash": "^4.17.21", + "validator": "~13.15.15" + }, + "engines": { + "node": ">= 8.0.0" + } + }, + "node_modules/express/node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/express/node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, "node_modules/fdir": { "version": "6.5.0", "dev": true, @@ -3375,10 +2969,70 @@ } } }, + "node_modules/finalhandler": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz", + "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "on-finished": "2.4.1", + "parseurl": "~1.3.3", + "statuses": "2.0.1", + "unpipe": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/finalhandler/node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/finalhandler/node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, + "node_modules/forwarded": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", + "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/fresh": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", + "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, "node_modules/frontend": { "resolved": "frontend", "link": true }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, "node_modules/gensync": { "version": "1.0.0-beta.2", "dev": true, @@ -3387,6 +3041,140 @@ "node": ">=6.9.0" } }, + "node_modules/get-intrinsic": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", + "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", + "license": "MIT", + "dependencies": { + "call-bind-apply-helpers": "^1.0.2", + "es-define-property": "^1.0.1", + "es-errors": "^1.3.0", + "es-object-atoms": "^1.1.1", + "function-bind": "^1.1.2", + "get-proto": "^1.0.1", + "gopd": "^1.2.0", + "has-symbols": "^1.1.0", + "hasown": "^2.0.2", + "math-intrinsics": "^1.1.0" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-proto": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", + "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", + "license": "MIT", + "dependencies": { + "dunder-proto": "^1.0.1", + "es-object-atoms": "^1.0.0" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/gopd": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", + "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/has-symbols": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", + "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/hasown": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", + "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "license": "MIT", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/helmet": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz", + "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==", + "license": "MIT", + "engines": { + "node": ">=18.0.0" + } + }, + "node_modules/http-errors": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz", + "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==", + "license": "MIT", + "dependencies": { + "depd": "2.0.0", + "inherits": "2.0.4", + "setprototypeof": "1.2.0", + "statuses": "2.0.1", + "toidentifier": "1.0.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/iconv-lite": { + "version": "0.4.24", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", + "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", + "license": "MIT", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "license": "ISC" + }, + "node_modules/ip-address": { + "version": "10.0.1", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz", + "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==", + "license": "MIT", + "engines": { + "node": ">= 12" + } + }, + "node_modules/ipaddr.js": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", + "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", + "license": "MIT", + "engines": { + "node": ">= 0.10" + } + }, "node_modules/js-tokens": { "version": "4.0.0", "dev": true, @@ -3414,6 +3202,12 @@ "node": ">=6" } }, + "node_modules/lodash": { + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "license": "MIT" + }, "node_modules/lru-cache": { "version": "5.1.1", "dev": true, @@ -3422,6 +3216,75 @@ "yallist": "^3.0.2" } }, + "node_modules/math-intrinsics": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", + "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/media-typer": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz", + "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/merge-descriptors": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz", + "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/methods": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz", + "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz", + "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==", + "license": "MIT", + "bin": { + "mime": "cli.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "license": "MIT", + "dependencies": { + "mime-db": "1.52.0" + }, + "engines": { + "node": ">= 0.6" + } + }, "node_modules/ms": { "version": "2.1.3", "license": "MIT" @@ -3443,11 +3306,59 @@ "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" } }, + "node_modules/negotiator": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz", + "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, "node_modules/node-releases": { "version": "2.0.26", "dev": true, "license": "MIT" }, + "node_modules/object-inspect": { + "version": "1.13.4", + "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", + "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/on-finished": { + "version": "2.4.1", + "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", + "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", + "license": "MIT", + "dependencies": { + "ee-first": "1.1.1" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/parseurl": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", + "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/path-to-regexp": { + "version": "0.1.12", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz", + "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==", + "license": "MIT" + }, "node_modules/picocolors": { "version": "1.1.1", "dev": true, @@ -3491,6 +3402,58 @@ "node": "^10 || ^12 || >=14" } }, + "node_modules/proxy-addr": { + "version": "2.0.7", + "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", + "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", + "license": "MIT", + "dependencies": { + "forwarded": "0.2.0", + "ipaddr.js": "1.9.1" + }, + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/qs": { + "version": "6.13.0", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz", + "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==", + "license": "BSD-3-Clause", + "dependencies": { + "side-channel": "^1.0.6" + }, + "engines": { + "node": ">=0.6" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/range-parser": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz", + "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/raw-body": { + "version": "2.5.2", + "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz", + "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==", + "license": "MIT", + "dependencies": { + "bytes": "3.1.2", + "http-errors": "2.0.0", + "iconv-lite": "0.4.24", + "unpipe": "1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, "node_modules/react": { "version": "19.2.0", "license": "MIT", @@ -3584,6 +3547,32 @@ "fsevents": "~2.3.2" } }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/safer-buffer": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", + "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", + "license": "MIT" + }, "node_modules/scheduler": { "version": "0.27.0", "license": "MIT" @@ -3600,6 +3589,147 @@ "semver": "bin/semver.js" } }, + "node_modules/send": { + "version": "0.19.0", + "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz", + "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==", + "license": "MIT", + "dependencies": { + "debug": "2.6.9", + "depd": "2.0.0", + "destroy": "1.2.0", + "encodeurl": "~1.0.2", + "escape-html": "~1.0.3", + "etag": "~1.8.1", + "fresh": "0.5.2", + "http-errors": "2.0.0", + "mime": "1.6.0", + "ms": "2.1.3", + "on-finished": "2.4.1", + "range-parser": "~1.2.1", + "statuses": "2.0.1" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/send/node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/send/node_modules/debug/node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "license": "MIT" + }, + "node_modules/send/node_modules/encodeurl": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz", + "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/serve-static": { + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz", + "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==", + "license": "MIT", + "dependencies": { + "encodeurl": "~2.0.0", + "escape-html": "~1.0.3", + "parseurl": "~1.3.3", + "send": "0.19.0" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/setprototypeof": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", + "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", + "license": "ISC" + }, + "node_modules/side-channel": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz", + "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.3", + "side-channel-list": "^1.0.0", + "side-channel-map": "^1.0.1", + "side-channel-weakmap": "^1.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-list": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz", + "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==", + "license": "MIT", + "dependencies": { + "es-errors": "^1.3.0", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-map": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", + "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/side-channel-weakmap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", + "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", + "license": "MIT", + "dependencies": { + "call-bound": "^1.0.2", + "es-errors": "^1.3.0", + "get-intrinsic": "^1.2.5", + "object-inspect": "^1.13.3", + "side-channel-map": "^1.0.1" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, "node_modules/source-map-js": { "version": "1.2.1", "dev": true, @@ -3608,6 +3738,15 @@ "node": ">=0.10.0" } }, + "node_modules/statuses": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz", + "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, "node_modules/tinyglobby": { "version": "0.2.15", "dev": true, @@ -3623,6 +3762,28 @@ "url": "https://github.com/sponsors/SuperchupuDev" } }, + "node_modules/toidentifier": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", + "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", + "license": "MIT", + "engines": { + "node": ">=0.6" + } + }, + "node_modules/type-is": { + "version": "1.6.18", + "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", + "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==", + "license": "MIT", + "dependencies": { + "media-typer": "0.3.0", + "mime-types": "~2.1.24" + }, + "engines": { + "node": ">= 0.6" + } + }, "node_modules/typescript": { "version": "5.9.3", "dev": true, @@ -3640,6 +3801,15 @@ "dev": true, "license": "MIT" }, + "node_modules/unpipe": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", + "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, "node_modules/update-browserslist-db": { "version": "1.1.4", "dev": true, @@ -3669,6 +3839,33 @@ "browserslist": ">= 4.21.0" } }, + "node_modules/utils-merge": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz", + "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==", + "license": "MIT", + "engines": { + "node": ">= 0.4.0" + } + }, + "node_modules/validator": { + "version": "13.15.20", + "resolved": "https://registry.npmjs.org/validator/-/validator-13.15.20.tgz", + "integrity": "sha512-KxPOq3V2LmfQPP4eqf3Mq/zrT0Dqp2Vmx2Bn285LwVahLc+CsxOM0crBHczm8ijlcjZ0Q5Xd6LW3z3odTPnlrw==", + "license": "MIT", + "engines": { + "node": ">= 0.10" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, "node_modules/vite": { "version": "6.4.1", "dev": true,