Release 1.3.0: adopt shared @simpleworkjs/* packages; fix LDAP filter injection

Rewire onto the shared @simpleworkjs/oidc-client, /ldap, and /app-stack
packages (deleting the byte-identical local forks of the same code), close the
LDAP filter-injection in User.get by routing the username through escapeFilter
(RFC 4515), align model-redis ^1.6.0 and ldapts ^8.1.8, and unify build_info to
{buildVersion, buildHash, buildYear}. package-lock regenerated from the npm
registry (no file:/link:), so npm ci is clean in docker builds.

Co-Authored-By: Claude <noreply@anthropic.com>

This commit is contained in:

William Mantly

2026-07-25 15:53:30 -04:00

parent 60dbfe5b9b

commit f4efdfb957

20 changed files with 121 additions and 587 deletions

									
										nodejs/middleware/auth.js
									
		+1
		-1
	
												View File
												
				@@ -1,6 +1,6 @@

				'use strict';

				const {Auth} = require('../models/auth');

				const {Auth} = require('../models');

				async function auth(req, res, next){

					try{