@localazy/strapi-plugin 1.0.0-beta.0 → 1.0.0-beta.2

package/dist/server/index.mjs

@@ -826,7 +826,7 @@ var merge = createAssigner(function(object, source, srcIndex) {
   baseMerge(object, source, srcIndex);
 });
 const name = "@localazy/strapi-plugin";
-const version$1 = "1.0.0-beta.0";
+const version$1 = "1.0.0-beta.1";
 const description = "The official Strapi Plugin by Localazy.";
 const keywords = [
   "strapi",
@@ -986,7 +986,7 @@ const _package$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.definePr
   type,
   version: version$1
 }, Symbol.toStringTag, { value: "Module" }));
-const PLUGIN_NAME = name;
+const PLUGIN_NAME = strapi$1.name;
 const DEFAULT_MAX_POPULATE_DEPTH = 10;
 const DEFAULT_POPULATE_DEPTH$1 = 5;
 const getModelPopulationAttributes$2 = (model) => {
@@ -24195,13 +24195,66 @@ const controllers = {
   PluginSettingsController,
   LocalazyTransferController
 };
-const middlewares = {};
+const verifyWebhook = (config2, { strapi: strapi2 }) => {
+  return async (ctx, next) => {
+    try {
+      const pluginSettingsServiceHelper = new PluginSettingsServiceHelper();
+      await pluginSettingsServiceHelper.setup();
+      if (!pluginSettingsServiceHelper.shouldAllowWebhookDownloadProcess()) {
+        throw new Error("Localazy Plugin: Webhook download process is disabled; terminating execution");
+      }
+      const requestBody = ctx.request.body;
+      strapi2.log.info(`Localazy Plugin: Webhook of type '${requestBody.type}' procedure started`);
+      const LocalazyPubApiService = getLocalazyPubAPIService();
+      const LocalazyUserService2 = getLocalazyUserService();
+      const user = await LocalazyUserService2.getUser();
+      const secret = await LocalazyPubApiService.getWebhooksSecret(user.project.id);
+      const xLocalazyHmac = ctx.request.header["x-localazy-hmac"];
+      const xLocalazyTimestamp = ctx.request.header["x-localazy-timestamp"];
+      const THRESHOLD = 9e5;
+      const intXLocalazyTimestamp = parseInt(xLocalazyTimestamp);
+      if (Number.isNaN(intXLocalazyTimestamp)) {
+        throw new Error("Localazy Plugin: Webhook request invalid timestamp provided; terminating execution");
+      }
+      if (intXLocalazyTimestamp * 1e3 + THRESHOLD < Date.now()) {
+        throw new Error("Localazy Plugin: Webhook request is older than threshold; terminating execution");
+      }
+      const strapiHmac = require$$0$2.createHmac("sha256", secret);
+      const signedMessage = strapiHmac.update(`${xLocalazyTimestamp}-${JSON.stringify(requestBody)}`).digest("hex");
+      if (xLocalazyHmac !== signedMessage) {
+        throw new Error("Localazy Plugin: Webhook verification did not pass; terminating execution");
+      } else {
+        strapi2.log.info("Localazy Plugin: Webhook verification passed");
+      }
+      if (!ctx.state.user) {
+        const webhookAuthorId = pluginSettingsServiceHelper.getWebhookAuthorId();
+        if (Number.isNaN(webhookAuthorId)) {
+          throw new Error("Localazy Plugin: Webhook author is not set; terminating execution");
+        }
+        ctx.state.user = {
+          id: webhookAuthorId
+        };
+      }
+      await next();
+      strapi2.log.info(`Localazy Plugin: Webhook of type '${requestBody.type}' procedure finished`);
+    } catch (e3) {
+      strapi2.log.warn(e3.message);
+      ctx.body = {
+        success: false,
+        message: e3.message
+      };
+    }
+  };
+};
+const middlewares = {
+  verifyWebhook
+};
 const policies = {};
-const ROUTE_PREFIX$5 = "/user";
+const ROUTE_PREFIX$6 = "/user";
 const LocalazyUserRoutes = [
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$5}`,
+    path: `${ROUTE_PREFIX$6}`,
     handler: "LocalazyUserController.getUser",
     config: {
       policies: []
@@ -24209,7 +24262,7 @@ const LocalazyUserRoutes = [
   },
   {
     method: "PUT",
-    path: `${ROUTE_PREFIX$5}`,
+    path: `${ROUTE_PREFIX$6}`,
     handler: "LocalazyUserController.updateUser",
     config: {
       policies: []
@@ -24217,18 +24270,18 @@ const LocalazyUserRoutes = [
   },
   {
     method: "DELETE",
-    path: `${ROUTE_PREFIX$5}`,
+    path: `${ROUTE_PREFIX$6}`,
     handler: "LocalazyUserController.deleteUser",
     config: {
       policies: []
     }
   }
 ];
-const ROUTE_PREFIX$4 = "/auth";
+const ROUTE_PREFIX$5 = "/auth";
 const LocalazyAuthRoutes = [
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$4}/generate-keys`,
+    path: `${ROUTE_PREFIX$5}/generate-keys`,
     handler: "LocalazyAuthController.generateKeys",
     config: {
       policies: []
@@ -24236,18 +24289,18 @@ const LocalazyAuthRoutes = [
   },
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$4}/continuous-poll`,
+    path: `${ROUTE_PREFIX$5}/continuous-poll`,
     handler: "LocalazyAuthController.continuousPoll",
     config: {
       policies: []
     }
   }
 ];
-const ROUTE_PREFIX$3 = "/plugin-settings";
+const ROUTE_PREFIX$4 = "/plugin-settings";
 const PluginSettingsRoutes = [
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$3}/content-transfer-setup`,
+    path: `${ROUTE_PREFIX$4}/content-transfer-setup`,
     handler: "PluginSettingsController.getContentTransferSetup",
     config: {
       policies: []
@@ -24255,7 +24308,7 @@ const PluginSettingsRoutes = [
   },
   {
     method: "PUT",
-    path: `${ROUTE_PREFIX$3}/content-transfer-setup`,
+    path: `${ROUTE_PREFIX$4}/content-transfer-setup`,
     handler: "PluginSettingsController.updateContentTransferSetup",
     config: {
       policies: []
@@ -24263,7 +24316,7 @@ const PluginSettingsRoutes = [
   },
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$3}/plugin-settings`,
+    path: `${ROUTE_PREFIX$4}/plugin-settings`,
     handler: "PluginSettingsController.getPluginSettings",
     config: {
       policies: []
@@ -24271,18 +24324,18 @@ const PluginSettingsRoutes = [
   },
   {
     method: "PUT",
-    path: `${ROUTE_PREFIX$3}/plugin-settings`,
+    path: `${ROUTE_PREFIX$4}/plugin-settings`,
     handler: "PluginSettingsController.updatePluginSettings",
     config: {
       policies: []
     }
   }
 ];
-const ROUTE_PREFIX$2 = "/strapi";
+const ROUTE_PREFIX$3 = "/strapi";
 const StrapiRoutes = [
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$2}/models`,
+    path: `${ROUTE_PREFIX$3}/models`,
     handler: "StrapiController.getModels",
     config: {
       policies: []
@@ -24290,7 +24343,7 @@ const StrapiRoutes = [
   },
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$2}/localizable-models`,
+    path: `${ROUTE_PREFIX$3}/localizable-models`,
     handler: "StrapiController.getLocalizableModels",
     config: {
       policies: []
@@ -24298,7 +24351,7 @@ const StrapiRoutes = [
   },
   {
     method: "POST",
-    path: `${ROUTE_PREFIX$2}/lifecycle/localazy-webhooks`,
+    path: `${ROUTE_PREFIX$3}/lifecycle/localazy-webhooks`,
     handler: "StrapiController.postLifecycleLocalazyWebhooks",
     config: {
       policies: []
@@ -24306,18 +24359,18 @@ const StrapiRoutes = [
   },
   {
     method: "GET",
-    path: `${ROUTE_PREFIX$2}/version`,
+    path: `${ROUTE_PREFIX$3}/version`,
     handler: "StrapiController.getPluginVersion",
     config: {
       policies: []
     }
   }
 ];
-const ROUTE_PREFIX$1 = "/transfer";
+const ROUTE_PREFIX$2 = "/transfer";
 const LocalazyTransferRoutes = [
   {
     method: "POST",
-    path: `${ROUTE_PREFIX$1}/upload`,
+    path: `${ROUTE_PREFIX$2}/upload`,
     handler: "LocalazyTransferController.upload",
     config: {
       policies: []
@@ -24325,27 +24378,40 @@ const LocalazyTransferRoutes = [
   },
   {
     method: "POST",
-    path: `${ROUTE_PREFIX$1}/download`,
+    path: `${ROUTE_PREFIX$2}/download`,
     handler: "LocalazyTransferController.download",
     config: {
       policies: []
     }
   }
 ];
-const ROUTE_PREFIX = "/project";
+const ROUTE_PREFIX$1 = "/project";
 const LocalazyProjectRoutes = [
   {
     method: "GET",
-    path: `${ROUTE_PREFIX}`,
+    path: `${ROUTE_PREFIX$1}`,
     handler: "LocalazyProjectController.getConnectedProject",
     config: {
       policies: []
     }
   }
 ];
+const ROUTE_PREFIX = "/public/transfer";
+const LocalazyPublicTransferRoutes = [
+  {
+    method: "POST",
+    path: `${ROUTE_PREFIX}/download`,
+    handler: "LocalazyTransferController.download",
+    config: {
+      policies: [],
+      auth: false,
+      // make the route public
+      middlewares: [`plugin::${PLUGIN_NAME}.verifyWebhook`]
+    }
+  }
+];
 const routes = {
   "content-api": {
-    type: "content-api",
     routes: [...StrapiRoutes]
   },
   admin: {
@@ -24358,8 +24424,10 @@ const routes = {
       ...LocalazyTransferRoutes,
       ...LocalazyProjectRoutes
     ]
+  },
+  LocalazyPublicTransferRoutes: {
+    routes: [...LocalazyPublicTransferRoutes]
   }
-  // localazyPublicTransferRoutes,
 };
 const KEY$2 = "identity";
 const emptyIdentity = {
@@ -24499,13 +24567,23 @@ const LocalazyPubAPIService = ({ strapi: strapi2 }) => ({
     }
   },
   async getProject(projectId, addOrganization = true, addLanguages = true) {
-    const projects = await this.listProjects(addOrganization, addLanguages);
-    return projects.find((project) => project.id === projectId);
+    try {
+      const projects = await this.listProjects(addOrganization, addLanguages);
+      return projects.find((project) => project.id === projectId) || null;
+    } catch (e3) {
+      strapi2.log.error(e3);
+      return null;
+    }
   },
   async getWebhooksSecret(projectId) {
-    const LocalazyApi = await LocalazyApiClientFactory();
-    const result = await LocalazyApi.webhooks.getSecret({ project: projectId });
-    return result;
+    try {
+      const LocalazyApi = await LocalazyApiClientFactory();
+      const result = await LocalazyApi.webhooks.getSecret({ project: projectId });
+      return result;
+    } catch (e3) {
+      strapi2.log.error(e3);
+      return null;
+    }
   }
 });
 const KEY$1 = "content-transfer-setup";
@@ -25951,11 +26029,10 @@ const StrapiLocalazyI18nService = ({ strapi: strapi2 }) => ({
       uid,
       isoStrapi
     );
-    const filteredUpdateEntry = dropPropertyDeep(updateEntry, "documentId");
     const updatedEntry = await StrapiI18nService2.updateLocalizationForAnExistingEntry(
       uid,
       localizedDocumentId,
-      filteredUpdateEntry,
+      updateEntry,
       isoStrapi
     );
     return updatedEntry;

package/dist/server/src/core/index.d.ts

@@ -4,11 +4,11 @@ export declare const getLocalazyUserService: () => {
     deleteUser(): Promise<import("../db/model/localazy-user").Identity>;
 };
 export declare const getLocalazyPubAPIService: () => {
-    listFiles(projectId: any): Promise<import("@localazy/api-client").File[]>;
-    getStrapiFile(projectId: any): Promise<import("@localazy/api-client").File>;
+    listFiles(projectId: string): Promise<import("@localazy/api-client").File[]>;
+    getStrapiFile(projectId: string): Promise<import("@localazy/api-client").File>;
     listProjects(addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project[]>;
     getProject(projectId: string, addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project>;
-    getWebhooksSecret(projectId: any): Promise<string>;
+    getWebhooksSecret(projectId: string): Promise<string>;
 };
 export declare const getLocalazyTransferUploadService: () => {
     upload({ notificationService }: {

package/dist/server/src/index.d.ts

@@ -69,7 +69,6 @@ declare const _default: {
     };
     routes: {
         'content-api': {
-            type: string;
             routes: {
                 method: string;
                 path: string;
@@ -90,6 +89,18 @@ declare const _default: {
                 };
             }[];
         };
+        LocalazyPublicTransferRoutes: {
+            routes: {
+                method: string;
+                path: string;
+                handler: string;
+                config: {
+                    policies: any[];
+                    auth: boolean;
+                    middlewares: string[];
+                };
+            }[];
+        };
     };
     services: {
         LocalazyUserService: ({ strapi }: {
@@ -109,11 +120,11 @@ declare const _default: {
         LocalazyPubAPIService: ({ strapi }: {
             strapi: import("@strapi/types/dist/core").Strapi;
         }) => {
-            listFiles(projectId: any): Promise<import("@localazy/api-client").File[]>;
-            getStrapiFile(projectId: any): Promise<import("@localazy/api-client").File>;
+            listFiles(projectId: string): Promise<import("@localazy/api-client").File[]>;
+            getStrapiFile(projectId: string): Promise<import("@localazy/api-client").File>;
             listProjects(addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project[]>;
             getProject(projectId: string, addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project>;
-            getWebhooksSecret(projectId: any): Promise<string>;
+            getWebhooksSecret(projectId: string): Promise<string>;
         };
         PluginSettingsService: ({ strapi }: {
             strapi: import("@strapi/types/dist/core").Strapi;
@@ -184,6 +195,10 @@ declare const _default: {
     };
     contentTypes: {};
     policies: {};
-    middlewares: {};
+    middlewares: {
+        verifyWebhook: (config: any, { strapi }: {
+            strapi: import("@strapi/types/dist/core").Strapi;
+        }) => (ctx: any, next: any) => Promise<void>;
+    };
 };
 export default _default;

package/dist/server/src/middlewares/index.d.ts

@@ -1,2 +1,6 @@
-declare const _default: {};
+declare const _default: {
+    verifyWebhook: (config: any, { strapi }: {
+        strapi: import("@strapi/types/dist/core").Strapi;
+    }) => (ctx: any, next: any) => Promise<void>;
+};
 export default _default;

package/dist/server/src/middlewares/verify-webhook.d.ts

@@ -0,0 +1,5 @@
+import type { Core } from '@strapi/strapi';
+declare const _default: (config: any, { strapi }: {
+    strapi: Core.Strapi;
+}) => (ctx: any, next: any) => Promise<void>;
+export default _default;

package/dist/server/src/routes/index.d.ts

@@ -1,6 +1,5 @@
 declare const _default: {
     'content-api': {
-        type: string;
         routes: {
             method: string;
             path: string;
@@ -21,5 +20,17 @@ declare const _default: {
             };
         }[];
     };
+    LocalazyPublicTransferRoutes: {
+        routes: {
+            method: string;
+            path: string;
+            handler: string;
+            config: {
+                policies: any[];
+                auth: boolean;
+                middlewares: string[];
+            };
+        }[];
+    };
 };
 export default _default;

package/dist/server/src/routes/localazy-public-transfer-routes.d.ts

@@ -0,0 +1,11 @@
+declare const LocalazyPublicTransferRoutes: {
+    method: string;
+    path: string;
+    handler: string;
+    config: {
+        policies: any[];
+        auth: boolean;
+        middlewares: string[];
+    };
+}[];
+export default LocalazyPublicTransferRoutes;

package/dist/server/src/services/index.d.ts

@@ -16,11 +16,11 @@ declare const _default: {
     LocalazyPubAPIService: ({ strapi }: {
         strapi: import("@strapi/types/dist/core").Strapi;
     }) => {
-        listFiles(projectId: any): Promise<import("@localazy/api-client").File[]>;
-        getStrapiFile(projectId: any): Promise<import("@localazy/api-client").File>;
+        listFiles(projectId: string): Promise<import("@localazy/api-client").File[]>;
+        getStrapiFile(projectId: string): Promise<import("@localazy/api-client").File>;
         listProjects(addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project[]>;
         getProject(projectId: string, addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project>;
-        getWebhooksSecret(projectId: any): Promise<string>;
+        getWebhooksSecret(projectId: string): Promise<string>;
     };
     PluginSettingsService: ({ strapi }: {
         strapi: import("@strapi/types/dist/core").Strapi;

package/dist/server/src/services/localazy-pubapi-service.d.ts

@@ -1,12 +1,13 @@
 import { Core } from '@strapi/strapi';
+import { Project } from '@localazy/api-client';
 declare const LocalazyPubAPIService: ({ strapi }: {
     strapi: Core.Strapi;
 }) => {
-    listFiles(projectId: any): Promise<import("@localazy/api-client").File[]>;
-    getStrapiFile(projectId: any): Promise<import("@localazy/api-client").File>;
-    listProjects(addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project[]>;
-    getProject(projectId: string, addOrganization?: boolean, addLanguages?: boolean): Promise<import("@localazy/api-client").Project>;
-    getWebhooksSecret(projectId: any): Promise<string>;
+    listFiles(projectId: string): Promise<import("@localazy/api-client").File[]>;
+    getStrapiFile(projectId: string): Promise<import("@localazy/api-client").File>;
+    listProjects(addOrganization?: boolean, addLanguages?: boolean): Promise<Project[]>;
+    getProject(projectId: string, addOrganization?: boolean, addLanguages?: boolean): Promise<Project | null>;
+    getWebhooksSecret(projectId: string): Promise<string>;
 };
 export type LocalazyPubAPIServiceReturnType = ReturnType<typeof LocalazyPubAPIService>;
 export default LocalazyPubAPIService;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@localazy/strapi-plugin",
-  "version": "1.0.0-beta.0",
+  "version": "1.0.0-beta.2",
   "description": "The official Strapi Plugin by Localazy.",
   "keywords": [
     "strapi",

package/dist/admin/src/modules/@common/utils/is-plugin-route.d.ts

@@ -1,2 +0,0 @@
-declare const _default: (location: Pick<Location, 'pathname'>, path?: string) => boolean;
-export default _default;