@littlebox/strapi-suite 1.0.31 → 1.0.33

package/dist/server/index.js

@@ -1181,15 +1181,63 @@ const controllers = {
   ParameterModuleController,
   TranslationModuleController
 };
-const middlewares = {};
-const policies = {};
+function getModuleName(url) {
+  if (url.includes("/pages")) return "slug";
+  if (url.includes("/parameters")) return "parameter";
+  if (url.includes("/translations")) return "translation";
+  if (url.includes("/menus")) return "menu";
+  throw new Error("Module not found");
+}
+const CheckModuleIsActive = (config2, { strapi: strapi2 }) => {
+  return async (ctx, next) => {
+    const module2 = getModuleName(ctx.request.url);
+    const config22 = strapi2.config.get(`plugin::${PLUGIN_ID}`);
+    const setting = await strapi2.db.query(config22.uuid.app.setting).findOne({
+      where: {
+        module: module2,
+        property: "active"
+      }
+    });
+    const isActive = setting.value === "true";
+    if (!isActive) {
+      return ctx.forbidden("Module is not active");
+    }
+    return next();
+  };
+};
+const middlewares = {
+  "check-module-is-active": CheckModuleIsActive
+};
+const CheckApiToken = async (policyContext, config2, { strapi: strapi2 }) => {
+  const bearerToken = policyContext.request.header?.authorization?.substring("Bearer ".length);
+  if (!bearerToken) {
+    return false;
+  }
+  const apiTokenService = strapi2.services["admin::api-token"];
+  const accessKey = await apiTokenService.hash(bearerToken);
+  const storedToken = await apiTokenService.getBy({ accessKey });
+  if (!storedToken) {
+    return false;
+  }
+  if (storedToken.expiresAt && storedToken.expiresAt < /* @__PURE__ */ new Date()) {
+    return false;
+  }
+  if (storedToken.type !== "read-only") {
+    return false;
+  }
+  return true;
+};
+const policies = {
+  "check-api-token": CheckApiToken
+};
 const contentAPIRoutes = [
   {
     method: "GET",
     path: "/modules/pages",
     handler: "SlugModuleController.getPages",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1198,7 +1246,8 @@ const contentAPIRoutes = [
     path: "/modules/menus",
     handler: "MenuModuleController.getMenus",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1207,7 +1256,8 @@ const contentAPIRoutes = [
     path: "/modules/translations",
     handler: "TranslationModuleController.getTranslations",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1216,7 +1266,8 @@ const contentAPIRoutes = [
     path: "/modules/parameters",
     handler: "ParameterModuleController.getParameters",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   }

package/dist/server/index.mjs

@@ -1180,15 +1180,63 @@ const controllers = {
   ParameterModuleController,
   TranslationModuleController
 };
-const middlewares = {};
-const policies = {};
+function getModuleName(url) {
+  if (url.includes("/pages")) return "slug";
+  if (url.includes("/parameters")) return "parameter";
+  if (url.includes("/translations")) return "translation";
+  if (url.includes("/menus")) return "menu";
+  throw new Error("Module not found");
+}
+const CheckModuleIsActive = (config2, { strapi: strapi2 }) => {
+  return async (ctx, next) => {
+    const module = getModuleName(ctx.request.url);
+    const config22 = strapi2.config.get(`plugin::${PLUGIN_ID}`);
+    const setting = await strapi2.db.query(config22.uuid.app.setting).findOne({
+      where: {
+        module,
+        property: "active"
+      }
+    });
+    const isActive = setting.value === "true";
+    if (!isActive) {
+      return ctx.forbidden("Module is not active");
+    }
+    return next();
+  };
+};
+const middlewares = {
+  "check-module-is-active": CheckModuleIsActive
+};
+const CheckApiToken = async (policyContext, config2, { strapi: strapi2 }) => {
+  const bearerToken = policyContext.request.header?.authorization?.substring("Bearer ".length);
+  if (!bearerToken) {
+    return false;
+  }
+  const apiTokenService = strapi2.services["admin::api-token"];
+  const accessKey = await apiTokenService.hash(bearerToken);
+  const storedToken = await apiTokenService.getBy({ accessKey });
+  if (!storedToken) {
+    return false;
+  }
+  if (storedToken.expiresAt && storedToken.expiresAt < /* @__PURE__ */ new Date()) {
+    return false;
+  }
+  if (storedToken.type !== "read-only") {
+    return false;
+  }
+  return true;
+};
+const policies = {
+  "check-api-token": CheckApiToken
+};
 const contentAPIRoutes = [
   {
     method: "GET",
     path: "/modules/pages",
     handler: "SlugModuleController.getPages",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1197,7 +1245,8 @@ const contentAPIRoutes = [
     path: "/modules/menus",
     handler: "MenuModuleController.getMenus",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1206,7 +1255,8 @@ const contentAPIRoutes = [
     path: "/modules/translations",
     handler: "TranslationModuleController.getTranslations",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   },
@@ -1215,7 +1265,8 @@ const contentAPIRoutes = [
     path: "/modules/parameters",
     handler: "ParameterModuleController.getParameters",
     config: {
-      policies: [],
+      middlewares: [`plugin::${PLUGIN_ID}.check-module-is-active`],
+      policies: ["check-api-token"],
       auth: false
     }
   }

package/dist/server/src/index.d.ts

@@ -121,7 +121,8 @@ declare const _default: {
                 path: string;
                 handler: string;
                 config: {
-                    policies: any[];
+                    middlewares: string[];
+                    policies: string[];
                     auth: boolean;
                 };
             }[];
@@ -648,7 +649,15 @@ declare const _default: {
             };
         };
     };
-    policies: {};
-    middlewares: {};
+    policies: {
+        'check-api-token': (policyContext: any, config: any, { strapi }: {
+            strapi: any;
+        }) => Promise<boolean>;
+    };
+    middlewares: {
+        'check-module-is-active': (config: any, { strapi }: {
+            strapi: any;
+        }) => (ctx: any, next: any) => Promise<any>;
+    };
 };
 export default _default;

package/dist/server/src/middlewares/checkModuleIsActive.d.ts

@@ -0,0 +1,4 @@
+declare const _default: (config: any, { strapi }: {
+    strapi: any;
+}) => (ctx: any, next: any) => Promise<any>;
+export default _default;

package/dist/server/src/middlewares/index.d.ts

@@ -1,2 +1,6 @@
-declare const _default: {};
+declare const _default: {
+    'check-module-is-active': (config: any, { strapi }: {
+        strapi: any;
+    }) => (ctx: any, next: any) => Promise<any>;
+};
 export default _default;

package/dist/server/src/policies/check-api-token.d.ts

@@ -0,0 +1,4 @@
+declare const _default: (policyContext: any, config: any, { strapi }: {
+    strapi: any;
+}) => Promise<boolean>;
+export default _default;

package/dist/server/src/policies/index.d.ts

@@ -1,2 +1,6 @@
-declare const _default: {};
+declare const _default: {
+    'check-api-token': (policyContext: any, config: any, { strapi }: {
+        strapi: any;
+    }) => Promise<boolean>;
+};
 export default _default;

package/dist/server/src/routes/content-api.d.ts

@@ -3,7 +3,8 @@ declare const _default: {
     path: string;
     handler: string;
     config: {
-        policies: any[];
+        middlewares: string[];
+        policies: string[];
         auth: boolean;
     };
 }[];

package/dist/server/src/routes/index.d.ts

@@ -17,7 +17,8 @@ declare const routes: {
             path: string;
             handler: string;
             config: {
-                policies: any[];
+                middlewares: string[];
+                policies: string[];
                 auth: boolean;
             };
         }[];

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.31",
+  "version": "1.0.33",
   "keywords": [
     "strapi",
     "strapi plugin",