@akemona-org/strapi-plugin-users-permissions 3.7.0

package/config/routes.json

@@ -0,0 +1,397 @@
+{
+  "routes": [
+    {
+      "method": "GET",
+      "path": "/",
+      "handler": "UsersPermissions.index",
+      "config": {
+        "policies": []
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/search/:id",
+      "handler": "UsersPermissions.searchUsers",
+      "config": {
+        "policies": [],
+        "description": "Search for users",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "find"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/policies",
+      "handler": "UsersPermissions.getPolicies",
+      "config": {
+        "policies": []
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/roles/:id",
+      "handler": "UsersPermissions.getRole",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.roles.read"]]
+        ],
+        "description": "Retrieve a role depending on its id",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "Role",
+          "actionType": "findOne"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/roles",
+      "handler": "UsersPermissions.getRoles",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.roles.read"]]
+        ],
+        "description": "Retrieve all role documents",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "Role",
+          "actionType": "find"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/routes",
+      "handler": "UsersPermissions.getRoutes",
+      "config": {
+        "policies": []
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/email-templates",
+      "handler": "UsersPermissions.getEmailTemplate",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.email-templates.read"]]
+        ]
+      }
+    },
+    {
+      "method": "PUT",
+      "path": "/email-templates",
+      "handler": "UsersPermissions.updateEmailTemplate",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.email-templates.update"]]
+        ]
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/advanced",
+      "handler": "UsersPermissions.getAdvancedSettings",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.advanced-settings.read"]]
+        ]
+      }
+    },
+    {
+      "method": "PUT",
+      "path": "/advanced",
+      "handler": "UsersPermissions.updateAdvancedSettings",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.advanced-settings.update"]]
+        ]
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/permissions",
+      "handler": "UsersPermissions.getPermissions",
+      "config": {
+        "policies": []
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/providers",
+      "handler": "UsersPermissions.getProviders",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.providers.read"]]
+        ]
+      }
+    },
+
+    {
+      "method": "PUT",
+      "path": "/providers",
+      "handler": "UsersPermissions.updateProviders",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.providers.update"]]
+        ]
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/roles",
+      "handler": "UsersPermissions.createRole",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.roles.create"]]
+        ],
+        "description": "Create a new role",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "Role",
+          "actionType": "create"
+        }
+      }
+    },
+    {
+      "method": "PUT",
+      "path": "/roles/:role",
+      "handler": "UsersPermissions.updateRole",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.roles.update"]]
+        ],
+        "description": "Update a role",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "Role",
+          "actionType": "update"
+        }
+      }
+    },
+    {
+      "method": "DELETE",
+      "path": "/roles/:role",
+      "handler": "UsersPermissions.deleteRole",
+      "config": {
+        "policies": [
+          ["admin::hasPermissions", ["plugins::users-permissions.roles.delete"]]
+        ],
+        "description": "Delete a role",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "Role",
+          "actionType": "destroy"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/connect/*",
+      "handler": "Auth.connect",
+      "config": {
+        "policies": ["plugins::users-permissions.ratelimit"],
+        "prefix": "",
+        "description": "Connect a provider",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/auth/local",
+      "handler": "Auth.callback",
+      "config": {
+        "policies": ["plugins::users-permissions.ratelimit"],
+        "prefix": "",
+        "description": "Login a user using the identifiers email and password",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/auth/local/register",
+      "handler": "Auth.register",
+      "config": {
+        "policies": ["plugins::users-permissions.ratelimit"],
+        "prefix": "",
+        "description": "Register a new user with the default role",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "create"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/auth/:provider/callback",
+      "handler": "Auth.callback",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Successfull redirection after approving a provider",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/auth/forgot-password",
+      "handler": "Auth.forgotPassword",
+      "config": {
+        "policies": ["plugins::users-permissions.ratelimit"],
+        "prefix": "",
+        "description": "Send the reset password email link",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/auth/reset-password",
+      "handler": "Auth.resetPassword",
+      "config": {
+        "policies": ["plugins::users-permissions.ratelimit"],
+        "prefix": "",
+        "description": "Reset user password with a code (resetToken)",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/auth/email-confirmation",
+      "handler": "Auth.emailConfirmation",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Validate a user account",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/auth/send-email-confirmation",
+      "handler": "Auth.sendEmailConfirmation",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Send a confirmation email to user",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/users/count",
+      "handler": "User.count",
+      "config": {
+        "prefix": "",
+        "policies": []
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/users",
+      "handler": "User.find",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Retrieve all user documents",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "find"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/users/me",
+      "handler": "User.me",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Retrieve the logged in user information",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "findOne"
+        }
+      }
+    },
+    {
+      "method": "GET",
+      "path": "/users/:id",
+      "handler": "User.findOne",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Retrieve a single user depending on his id",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "findOne"
+        }
+      }
+    },
+    {
+      "method": "POST",
+      "path": "/users",
+      "handler": "User.create",
+      "config": {
+        "policies": [],
+        "prefix": ""
+      }
+    },
+    {
+      "method": "PUT",
+      "path": "/users/:id",
+      "handler": "User.update",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Update an existing user",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "update"
+        }
+      }
+    },
+    {
+      "method": "DELETE",
+      "path": "/users/:id",
+      "handler": "User.destroy",
+      "config": {
+        "policies": [],
+        "prefix": "",
+        "description": "Delete an existing user",
+        "tag": {
+          "plugin": "users-permissions",
+          "name": "User",
+          "actionType": "destroy"
+        }
+      }
+    }
+  ]
+}

package/config/schema.graphql.js

@@ -0,0 +1,280 @@
+'use strict';
+
+const _ = require('lodash');
+
+/**
+ * Throws an ApolloError if context body contains a bad request
+ * @param contextBody - body of the context object given to the resolver
+ * @throws ApolloError if the body is a bad request
+ */
+function checkBadRequest(contextBody) {
+  if (_.get(contextBody, 'statusCode', 200) !== 200) {
+    const message = _.get(contextBody, 'error', 'Bad Request');
+    const exception = new Error(message);
+    exception.code = _.get(contextBody, 'statusCode', 400);
+    exception.data = contextBody;
+    throw exception;
+  }
+}
+
+module.exports = {
+  type: {
+    UsersPermissionsPermission: false, // Make this type NOT queriable.
+  },
+  definition: /* GraphQL */ `
+    type UsersPermissionsMe {
+      id: ID!
+      username: String!
+      email: String!
+      confirmed: Boolean
+      blocked: Boolean
+      role: UsersPermissionsMeRole
+    }
+
+    type UsersPermissionsMeRole {
+      id: ID!
+      name: String!
+      description: String
+      type: String
+    }
+
+    input UsersPermissionsRegisterInput {
+      username: String!
+      email: String!
+      password: String!
+    }
+
+    input UsersPermissionsLoginInput {
+      identifier: String!
+      password: String!
+      provider: String = "local"
+    }
+
+    type UsersPermissionsLoginPayload {
+      jwt: String
+      user: UsersPermissionsMe!
+    }
+
+    type UserPermissionsPasswordPayload {
+      ok: Boolean!
+    }
+  `,
+  query: `
+    me: UsersPermissionsMe
+  `,
+  mutation: `
+    login(input: UsersPermissionsLoginInput!): UsersPermissionsLoginPayload!
+    register(input: UsersPermissionsRegisterInput!): UsersPermissionsLoginPayload!
+    forgotPassword(email: String!): UserPermissionsPasswordPayload
+    resetPassword(password: String!, passwordConfirmation: String!, code: String!): UsersPermissionsLoginPayload
+    emailConfirmation(confirmation: String!): UsersPermissionsLoginPayload
+  `,
+  resolver: {
+    Query: {
+      me: {
+        resolver: 'plugins::users-permissions.user.me',
+      },
+      role: {
+        resolverOf: 'plugins::users-permissions.userspermissions.getRole',
+        resolver: async (obj, options, { context }) => {
+          context.params = { ...context.params, ...options.input };
+
+          await strapi.plugins['users-permissions'].controllers.userspermissions.getRole(context);
+
+          return context.body.role;
+        },
+      },
+      roles: {
+        description: `Retrieve all the existing roles. You can't apply filters on this query.`,
+        resolverOf: 'plugins::users-permissions.userspermissions.getRoles', // Apply the `getRoles` permissions on the resolver.
+        resolver: async (obj, options, { context }) => {
+          context.params = { ...context.params, ...options.input };
+
+          await strapi.plugins['users-permissions'].controllers.userspermissions.getRoles(context);
+
+          return context.body.roles;
+        },
+      },
+    },
+    Mutation: {
+      createRole: {
+        description: 'Create a new role',
+        resolverOf: 'plugins::users-permissions.userspermissions.createRole',
+        resolver: async (obj, options, { context }) => {
+          await strapi.plugins['users-permissions'].controllers.userspermissions.createRole(
+            context
+          );
+
+          return { ok: true };
+        },
+      },
+      updateRole: {
+        description: 'Update an existing role',
+        resolverOf: 'plugins::users-permissions.userspermissions.updateRole',
+        resolver: async (obj, options, { context }) => {
+          context.params = { ...context.params, ...options.input };
+          context.params.role = context.params.id;
+
+          await strapi.plugins['users-permissions'].controllers.userspermissions.updateRole(
+            context
+          );
+
+          return { ok: true };
+        },
+      },
+      deleteRole: {
+        description: 'Delete an existing role',
+        resolverOf: 'plugins::users-permissions.userspermissions.deleteRole',
+        resolver: async (obj, options, { context }) => {
+          context.params = { ...context.params, ...options.input };
+          context.params.role = context.params.id;
+
+          await strapi.plugins['users-permissions'].controllers.userspermissions.deleteRole(
+            context
+          );
+
+          return { ok: true };
+        },
+      },
+      createUser: {
+        description: 'Create a new user',
+        resolverOf: 'plugins::users-permissions.user.create',
+        resolver: async (obj, options, { context }) => {
+          context.params = _.toPlainObject(options.input.where);
+          context.request.body = _.toPlainObject(options.input.data);
+
+          await strapi.plugins['users-permissions'].controllers.user.create(context);
+
+          return {
+            user: context.body.toJSON ? context.body.toJSON() : context.body,
+          };
+        },
+      },
+      updateUser: {
+        description: 'Update an existing user',
+        resolverOf: 'plugins::users-permissions.user.update',
+        resolver: async (obj, options, { context }) => {
+          context.params = _.toPlainObject(options.input.where);
+          context.request.body = _.toPlainObject(options.input.data);
+
+          await strapi.plugins['users-permissions'].controllers.user.update(context);
+
+          return {
+            user: context.body.toJSON ? context.body.toJSON() : context.body,
+          };
+        },
+      },
+      deleteUser: {
+        description: 'Delete an existing user',
+        resolverOf: 'plugins::users-permissions.user.destroy',
+        resolver: async (obj, options, { context }) => {
+          // Set parameters to context.
+          context.params = _.toPlainObject(options.input.where);
+          context.request.body = _.toPlainObject(options.input.data);
+
+          // Retrieve user to be able to return it because
+          // Bookshelf doesn't return the row once deleted.
+          await strapi.plugins['users-permissions'].controllers.user.findOne(context);
+          // Assign result to user.
+          const user = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          // Run destroy query.
+          await strapi.plugins['users-permissions'].controllers.user.destroy(context);
+
+          return {
+            user,
+          };
+        },
+      },
+      register: {
+        description: 'Register a user',
+        resolverOf: 'plugins::users-permissions.auth.register',
+        resolver: async (obj, options, { context }) => {
+          context.request.body = _.toPlainObject(options.input);
+
+          await strapi.plugins['users-permissions'].controllers.auth.register(context);
+          let output = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          checkBadRequest(output);
+          return {
+            user: output.user || output,
+            jwt: output.jwt,
+          };
+        },
+      },
+      login: {
+        resolverOf: 'plugins::users-permissions.auth.callback',
+        resolver: async (obj, options, { context }) => {
+          context.params = {
+            ...context.params,
+            provider: options.input.provider,
+          };
+          context.request.body = _.toPlainObject(options.input);
+
+          await strapi.plugins['users-permissions'].controllers.auth.callback(context);
+          let output = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          checkBadRequest(output);
+          return {
+            user: output.user || output,
+            jwt: output.jwt,
+          };
+        },
+      },
+      forgotPassword: {
+        description: 'Request a reset password token',
+        resolverOf: 'plugins::users-permissions.auth.forgotPassword',
+        resolver: async (obj, options, { context }) => {
+          context.request.body = _.toPlainObject(options);
+
+          await strapi.plugins['users-permissions'].controllers.auth.forgotPassword(context);
+          let output = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          checkBadRequest(output);
+
+          return {
+            ok: output.ok || output,
+          };
+        },
+      },
+      resetPassword: {
+        description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',
+        resolverOf: 'plugins::users-permissions.auth.resetPassword',
+        resolver: async (obj, options, { context }) => {
+          context.request.body = _.toPlainObject(options);
+
+          await strapi.plugins['users-permissions'].controllers.auth.resetPassword(context);
+          let output = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          checkBadRequest(output);
+
+          return {
+            user: output.user || output,
+            jwt: output.jwt,
+          };
+        },
+      },
+      emailConfirmation: {
+        description: 'Confirm an email users email address',
+        resolverOf: 'plugins::users-permissions.auth.emailConfirmation',
+        resolver: async (obj, options, { context }) => {
+          context.query = _.toPlainObject(options);
+
+          await strapi.plugins['users-permissions'].controllers.auth.emailConfirmation(
+            context,
+            null,
+            true
+          );
+          let output = context.body.toJSON ? context.body.toJSON() : context.body;
+
+          checkBadRequest(output);
+
+          return {
+            user: output.user || output,
+            jwt: output.jwt,
+          };
+        },
+      },
+    },
+  },
+};

package/config/security.json

@@ -0,0 +1,5 @@
+{
+  "jwt": {
+    "expiresIn": "30d"
+  }
+}