@strapi/admin 0.0.0-experimental.62ce06180fe9a772eaeb3d43d238b26644f39f7c → 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282

package/dist/admin/admin/src/features/Auth.mjs

@@ -0,0 +1,309 @@
+import { jsx } from 'react/jsx-runtime';
+import * as React from 'react';
+import { useLocation, useNavigate } from 'react-router-dom';
+import { createContext } from '../components/Context.mjs';
+import { useTypedDispatch, useTypedSelector } from '../core/store/hooks.mjs';
+import { useStrapiApp } from './StrapiApp.mjs';
+import { useIdleSessionLogout } from '../hooks/useIdleSessionLogout.mjs';
+import { useQueryParams } from '../hooks/useQueryParams.mjs';
+import { logout, setToken, setLocale, login, getStoredToken } from '../reducer.mjs';
+import { adminApi } from '../services/api.mjs';
+import { useGetMeQuery, useGetMyPermissionsQuery, useLoginMutation, useLogoutMutation, useLazyCheckPermissionsQuery } from '../services/auth.mjs';
+import { normalizeAdminLocale } from '../translations/normalizeAdminLocale.mjs';
+import { getOrCreateDeviceId } from '../utils/deviceId.mjs';
+import { attemptTokenRefresh, setOnSessionExpired, setOnTokenUpdate } from '../utils/getFetchClient.mjs';
+
+/**
+ * ensure the Auth context never exposes a non-function for checkUserHasPermissions.
+ * When this is undefined (e.g. context timing in production builds), consumers would throw
+ * "p is not a function" / "checkUserHasPermissions is not a function". By always passing
+ * a function here, all current and future consumers are protected without per-call-site guards.
+ *
+ * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined
+ * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is
+ * always defined (useCallback), so the real function is passed and behavior is unchanged.
+ *
+ * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it
+ * as "no permission" for that render—under-permissive. On the next AuthProvider re-render we
+ * pass the real function again, so the context updates and the view corrects quickly.
+ * @see https://github.com/strapi/strapi/issues/24384
+ */ const NOOP_CHECK_USER_HAS_PERMISSIONS = async ()=>[];
+const [Provider, useAuth] = createContext('Auth');
+const STORAGE_KEYS = {
+    STATUS: 'isLoggedIn'
+};
+const AuthProvider = ({ children, _defaultPermissions = [], _disableRenewToken = false })=>{
+    const dispatch = useTypedDispatch();
+    const runRbacMiddleware = useStrapiApp('AuthProvider', (state)=>state.rbac.run);
+    const location = useLocation();
+    const [{ rawQuery }] = useQueryParams();
+    const locationRef = React.useRef(location);
+    // Update ref without causing re-render
+    React.useEffect(()=>{
+        locationRef.current = location;
+    }, [
+        location
+    ]);
+    const token = useTypedSelector((state)=>state.admin_app.token ?? null);
+    const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {
+        /**
+     * If there's no token, we don't try to fetch
+     * the user data because it will fail.
+     */ skip: !token
+    });
+    const { data: userPermissions = _defaultPermissions, refetch, isUninitialized, isLoading: isLoadingPermissions } = useGetMyPermissionsQuery(undefined, {
+        skip: !token
+    });
+    const navigate = useNavigate();
+    const [loginMutation] = useLoginMutation();
+    const [logoutMutation] = useLogoutMutation();
+    const clearStateAndLogout = React.useCallback(()=>{
+        dispatch(adminApi.util.resetApiState());
+        dispatch(logout());
+        navigate('/auth/login');
+    }, [
+        dispatch,
+        navigate
+    ]);
+    /**
+   * Clear *only this tab's* session and redirect to login, without removing the
+   * shared `isLoggedIn`/`jwtToken` storage keys. Unlike `clearStateAndLogout`,
+   * this does not dispatch `logoutAction`, so it does not fire the cross-tab
+   * `storage` event that logs every tab out. Used by the speculative idle timer,
+   * which fires per-tab at the access token's `exp`: an idle tab must never tear
+   * down a session that another tab is still actively using. A genuine logout
+   * (user-initiated, or a server-confirmed 401 via `setOnSessionExpired`) still
+   * goes through `clearStateAndLogout` and broadcasts to all tabs.
+   */ const clearLocalSessionAndRedirect = React.useCallback(()=>{
+        dispatch(adminApi.util.resetApiState());
+        dispatch(setToken(null));
+        navigate('/auth/login');
+    }, [
+        dispatch,
+        navigate
+    ]);
+    const resyncToken = React.useCallback((newToken)=>{
+        dispatch(setToken(newToken));
+    }, [
+        dispatch
+    ]);
+    /**
+   * Track the timestamp of the user's last interaction. This is the activity
+   * signal `useIdleSessionLogout` uses to tell an active user (silently renew
+   * their session) apart from a genuinely idle one (log out). Successful API
+   * calls don't refresh the short-lived access token on their own, so without
+   * this an actively-working user is logged out the moment the token expires.
+   */ const lastActivityRef = React.useRef(Date.now());
+    React.useEffect(()=>{
+        const markActivity = ()=>{
+            lastActivityRef.current = Date.now();
+        };
+        const events = [
+            'pointerdown',
+            'keydown',
+            'click',
+            'scroll',
+            'touchstart'
+        ];
+        events.forEach((event)=>window.addEventListener(event, markActivity, {
+                passive: true,
+                capture: true
+            }));
+        return ()=>{
+            events.forEach((event)=>window.removeEventListener(event, markActivity, {
+                    capture: true
+                }));
+        };
+    }, []);
+    const getLastActivityAt = React.useCallback(()=>lastActivityRef.current, []);
+    /**
+   * Silently rotate the refresh token and mint a new access token. Returns
+   * `true` on success (the resulting `setToken` re-arms the idle timer) and
+   * `false` when the server rejects it (session genuinely over).
+   */ const renewSession = React.useCallback(async ()=>{
+        try {
+            await attemptTokenRefresh();
+            return true;
+        } catch  {
+            return false;
+        }
+    }, []);
+    React.useEffect(()=>{
+        if (user) {
+            if (user.preferedLanguage) {
+                dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));
+            }
+        }
+    }, [
+        dispatch,
+        user
+    ]);
+    /**
+   * Register a callback to update Redux state when the token is refreshed.
+   * This ensures the app state stays in sync with the token stored in localStorage/cookies.
+   */ React.useEffect(()=>{
+        setOnTokenUpdate((newToken)=>{
+            dispatch(setToken(newToken));
+        });
+        return ()=>{
+            setOnTokenUpdate(null);
+        };
+    }, [
+        dispatch
+    ]);
+    /**
+   * Register the session-expired handler that the fetch layer / RTK baseQuery
+   * call when the server rejects the refresh token. This is what redirects
+   * the active tab to /auth/login on a 401, instead of leaving the user on
+   * a stale page until they click something.
+   */ React.useEffect(()=>{
+        setOnSessionExpired(()=>{
+            clearStateAndLogout();
+        });
+        return ()=>{
+            setOnSessionExpired(null);
+        };
+    }, [
+        clearStateAndLogout
+    ]);
+    /**
+   * Session lifecycle at access-token expiry. The timer fires per-tab; the hook
+   * then either (1) re-syncs from a token another tab refreshed, (2) silently
+   * renews when the user has been active, or (3) logs out. Idle logout is local
+   * so an idle tab can't force-logout an actively-used one; a server-confirmed
+   * dead session (renewal rejected) broadcasts globally. See
+   * `useIdleSessionLogout` for the full rationale.
+   */ useIdleSessionLogout({
+        token,
+        onExpired: clearLocalSessionAndRedirect,
+        onSessionDead: clearStateAndLogout,
+        getStoredToken,
+        onResync: resyncToken,
+        getLastActivityAt,
+        renewSession,
+        disabled: _disableRenewToken
+    });
+    React.useEffect(()=>{
+        /**
+     * This will log a user out of all tabs if they log out in one tab.
+     */ const handleUserStorageChange = (event)=>{
+            if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {
+                clearStateAndLogout();
+            }
+        };
+        window.addEventListener('storage', handleUserStorageChange);
+        return ()=>{
+            window.removeEventListener('storage', handleUserStorageChange);
+        };
+    });
+    const login$1 = React.useCallback(async ({ rememberMe, ...body })=>{
+        const res = await loginMutation({
+            ...body,
+            deviceId: getOrCreateDeviceId(),
+            rememberMe
+        });
+        /**
+       * There will always be a `data` key in the response
+       * because if something fails, it will throw an error.
+       */ if ('data' in res) {
+            const { token } = res.data;
+            dispatch(login({
+                token,
+                persist: rememberMe
+            }));
+        }
+        return res;
+    }, [
+        dispatch,
+        loginMutation
+    ]);
+    const logout$1 = React.useCallback(async ()=>{
+        await logoutMutation({
+            deviceId: getOrCreateDeviceId()
+        });
+        clearStateAndLogout();
+    }, [
+        clearStateAndLogout,
+        logoutMutation
+    ]);
+    const refetchPermissions = React.useCallback(async ()=>{
+        if (!isUninitialized) {
+            await refetch();
+        }
+    }, [
+        isUninitialized,
+        refetch
+    ]);
+    const [checkPermissions] = useLazyCheckPermissionsQuery();
+    const checkUserHasPermissions = React.useCallback(async (permissions, passedPermissions, // TODO:
+    // Here we have parameterised checkUserHasPermissions in order to pass
+    // query context from elsewhere in the application.
+    // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx
+    // This is in order to calculate permissions on accurate query params.
+    // We should be able to rely on the query params in this provider
+    // If we need to pass additional context to the RBAC middleware
+    // we should define a better context type.
+    rawQueryContext)=>{
+        /**
+       * If there's no permissions to check, then we allow it to
+       * pass to preserve existing behaviours.
+       *
+       * TODO: should we review this? it feels more dangerous than useful.
+       */ if (!permissions || permissions.length === 0) {
+            return [
+                {
+                    action: '',
+                    subject: ''
+                }
+            ];
+        }
+        /**
+       * Given the provided permissions, return the permissions from either passedPermissions
+       * or userPermissions as this is expected to be the full permission entity.
+       */ const actualUserPermissions = passedPermissions ?? userPermissions;
+        const matchingPermissions = actualUserPermissions.filter((permission)=>permissions.findIndex((perm)=>perm.action === permission.action && // Only check the subject if it's provided
+                (perm.subject == undefined || perm.subject === permission.subject)) >= 0);
+        const middlewaredPermissions = await runRbacMiddleware({
+            user,
+            permissions: userPermissions,
+            pathname: locationRef.current.pathname,
+            search: (rawQueryContext || rawQuery).split('?')[1] ?? ''
+        }, matchingPermissions);
+        const shouldCheckConditions = middlewaredPermissions.some((perm)=>Array.isArray(perm.conditions) && perm.conditions.length > 0);
+        if (!shouldCheckConditions) {
+            return middlewaredPermissions;
+        }
+        const { data, error } = await checkPermissions({
+            permissions: middlewaredPermissions.map((perm)=>({
+                    action: perm.action,
+                    subject: perm.subject
+                }))
+        });
+        if (error) {
+            throw error;
+        } else {
+            return middlewaredPermissions.filter((_, index)=>data?.data[index] === true);
+        }
+    }, [
+        checkPermissions,
+        rawQuery,
+        runRbacMiddleware,
+        user,
+        userPermissions
+    ]);
+    const isLoading = isLoadingUser || isLoadingPermissions;
+    return /*#__PURE__*/ jsx(Provider, {
+        token: token,
+        user: user,
+        login: login$1,
+        logout: logout$1,
+        permissions: userPermissions,
+        checkUserHasPermissions: checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS,
+        refetchPermissions: refetchPermissions,
+        isLoading: isLoading,
+        children: children
+    });
+};
+
+export { AuthProvider, STORAGE_KEYS, useAuth };
+//# sourceMappingURL=Auth.mjs.map

package/dist/admin/admin/src/features/Auth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth.mjs","sources":["../../../../../admin/src/features/Auth.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { useLocation, useNavigate } from 'react-router-dom';\n\nimport { Login } from '../../../shared/contracts/authentication';\nimport { createContext } from '../components/Context';\nimport { useTypedDispatch, useTypedSelector } from '../core/store/hooks';\nimport { useStrapiApp } from '../features/StrapiApp';\nimport { useIdleSessionLogout } from '../hooks/useIdleSessionLogout';\nimport { useQueryParams } from '../hooks/useQueryParams';\nimport {\n  getStoredToken,\n  login as loginAction,\n  logout as logoutAction,\n  setLocale,\n  setToken,\n} from '../reducer';\nimport { adminApi } from '../services/api';\nimport {\n  useGetMeQuery,\n  useGetMyPermissionsQuery,\n  useLazyCheckPermissionsQuery,\n  useLoginMutation,\n  useLogoutMutation,\n} from '../services/auth';\nimport { normalizeAdminLocale } from '../translations/normalizeAdminLocale';\nimport { getOrCreateDeviceId } from '../utils/deviceId';\nimport {\n  attemptTokenRefresh,\n  setOnSessionExpired,\n  setOnTokenUpdate,\n} from '../utils/getFetchClient';\n\nimport type {\n  Permission as PermissionContract,\n  SanitizedAdminUser,\n} from '../../../shared/contracts/shared';\n\ninterface Permission\n  extends Pick<PermissionContract, 'action' | 'subject'>,\n    Partial<Omit<PermissionContract, 'action' | 'subject'>> {}\n\ninterface User\n  extends Pick<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>,\n    Partial<Omit<SanitizedAdminUser, 'email' | 'firstname' | 'lastname' | 'username' | 'roles'>> {}\n\ninterface AuthContextValue {\n  login: (\n    body: Login.Request['body'] & { rememberMe: boolean }\n  ) => Promise<Awaited<ReturnType<ReturnType<typeof useLoginMutation>[0]>>>;\n  logout: () => Promise<void>;\n  /**\n   * @alpha\n   * @description given a list of permissions, this function checks\n   * those against the current user's permissions or those passed as\n   * the second argument, if the user has those permissions the complete\n   * permission object form the API is returned. Therefore, if the list is\n   * empty, the user does not have any of those permissions.\n   */\n  checkUserHasPermissions: (\n    permissions?: Array<Pick<Permission, 'action'> & Partial<Omit<Permission, 'action'>>>,\n    passedPermissions?: Permission[],\n    rawQueryContext?: string\n  ) => Promise<Permission[]>;\n  isLoading: boolean;\n  permissions: Permission[];\n  refetchPermissions: () => Promise<void>;\n  token: string | null;\n  user?: User;\n}\n\n/**\n * ensure the Auth context never exposes a non-function for checkUserHasPermissions.\n * When this is undefined (e.g. context timing in production builds), consumers would throw\n * \"p is not a function\" / \"checkUserHasPermissions is not a function\". By always passing\n * a function here, all current and future consumers are protected without per-call-site guards.\n *\n * When would the fallback run? Only if the real checkUserHasPermissions were ever undefined\n * when we pass to the Provider (e.g. a rare timing/build edge case). In normal runs it is\n * always defined (useCallback), so the real function is passed and behavior is unchanged.\n *\n * If the fallback ever did run: it returns [] so consumers (which use .length > 0) treat it\n * as \"no permission\" for that render—under-permissive. On the next AuthProvider re-render we\n * pass the real function again, so the context updates and the view corrects quickly.\n * @see https://github.com/strapi/strapi/issues/24384\n */\nconst NOOP_CHECK_USER_HAS_PERMISSIONS: AuthContextValue['checkUserHasPermissions'] = async () => [];\n\nconst [Provider, useAuth] = createContext<AuthContextValue>('Auth');\n\ninterface AuthProviderProps {\n  children: React.ReactNode;\n  /**\n   * @internal could be removed at any time.\n   */\n  _defaultPermissions?: Permission[];\n\n  // NOTE: this is used for testing purposed only\n  _disableRenewToken?: boolean;\n}\n\nconst STORAGE_KEYS = {\n  TOKEN: 'jwtToken',\n  STATUS: 'isLoggedIn',\n};\n\nconst AuthProvider = ({\n  children,\n  _defaultPermissions = [],\n  _disableRenewToken = false,\n}: AuthProviderProps) => {\n  const dispatch = useTypedDispatch();\n  const runRbacMiddleware = useStrapiApp('AuthProvider', (state) => state.rbac.run);\n  const location = useLocation();\n  const [{ rawQuery }] = useQueryParams();\n\n  const locationRef = React.useRef(location);\n\n  // Update ref without causing re-render\n  React.useEffect(() => {\n    locationRef.current = location;\n  }, [location]);\n\n  const token = useTypedSelector((state) => state.admin_app.token ?? null);\n\n  const { data: user, isLoading: isLoadingUser } = useGetMeQuery(undefined, {\n    /**\n     * If there's no token, we don't try to fetch\n     * the user data because it will fail.\n     */\n    skip: !token,\n  });\n\n  const {\n    data: userPermissions = _defaultPermissions,\n    refetch,\n    isUninitialized,\n    isLoading: isLoadingPermissions,\n  } = useGetMyPermissionsQuery(undefined, {\n    skip: !token,\n  });\n\n  const navigate = useNavigate();\n\n  const [loginMutation] = useLoginMutation();\n  const [logoutMutation] = useLogoutMutation();\n\n  const clearStateAndLogout = React.useCallback(() => {\n    dispatch(adminApi.util.resetApiState());\n    dispatch(logoutAction());\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  /**\n   * Clear *only this tab's* session and redirect to login, without removing the\n   * shared `isLoggedIn`/`jwtToken` storage keys. Unlike `clearStateAndLogout`,\n   * this does not dispatch `logoutAction`, so it does not fire the cross-tab\n   * `storage` event that logs every tab out. Used by the speculative idle timer,\n   * which fires per-tab at the access token's `exp`: an idle tab must never tear\n   * down a session that another tab is still actively using. A genuine logout\n   * (user-initiated, or a server-confirmed 401 via `setOnSessionExpired`) still\n   * goes through `clearStateAndLogout` and broadcasts to all tabs.\n   */\n  const clearLocalSessionAndRedirect = React.useCallback(() => {\n    dispatch(adminApi.util.resetApiState());\n    dispatch(setToken(null));\n    navigate('/auth/login');\n  }, [dispatch, navigate]);\n\n  const resyncToken = React.useCallback(\n    (newToken: string) => {\n      dispatch(setToken(newToken));\n    },\n    [dispatch]\n  );\n\n  /**\n   * Track the timestamp of the user's last interaction. This is the activity\n   * signal `useIdleSessionLogout` uses to tell an active user (silently renew\n   * their session) apart from a genuinely idle one (log out). Successful API\n   * calls don't refresh the short-lived access token on their own, so without\n   * this an actively-working user is logged out the moment the token expires.\n   */\n  const lastActivityRef = React.useRef(Date.now());\n  React.useEffect(() => {\n    const markActivity = () => {\n      lastActivityRef.current = Date.now();\n    };\n    const events = ['pointerdown', 'keydown', 'click', 'scroll', 'touchstart'];\n    events.forEach((event) =>\n      window.addEventListener(event, markActivity, { passive: true, capture: true })\n    );\n\n    return () => {\n      events.forEach((event) => window.removeEventListener(event, markActivity, { capture: true }));\n    };\n  }, []);\n  const getLastActivityAt = React.useCallback(() => lastActivityRef.current, []);\n\n  /**\n   * Silently rotate the refresh token and mint a new access token. Returns\n   * `true` on success (the resulting `setToken` re-arms the idle timer) and\n   * `false` when the server rejects it (session genuinely over).\n   */\n  const renewSession = React.useCallback(async () => {\n    try {\n      await attemptTokenRefresh();\n      return true;\n    } catch {\n      return false;\n    }\n  }, []);\n\n  React.useEffect(() => {\n    if (user) {\n      if (user.preferedLanguage) {\n        dispatch(setLocale(normalizeAdminLocale(user.preferedLanguage)));\n      }\n    }\n  }, [dispatch, user]);\n\n  /**\n   * Register a callback to update Redux state when the token is refreshed.\n   * This ensures the app state stays in sync with the token stored in localStorage/cookies.\n   */\n  React.useEffect(() => {\n    setOnTokenUpdate((newToken) => {\n      dispatch(setToken(newToken));\n    });\n\n    return () => {\n      setOnTokenUpdate(null);\n    };\n  }, [dispatch]);\n\n  /**\n   * Register the session-expired handler that the fetch layer / RTK baseQuery\n   * call when the server rejects the refresh token. This is what redirects\n   * the active tab to /auth/login on a 401, instead of leaving the user on\n   * a stale page until they click something.\n   */\n  React.useEffect(() => {\n    setOnSessionExpired(() => {\n      clearStateAndLogout();\n    });\n\n    return () => {\n      setOnSessionExpired(null);\n    };\n  }, [clearStateAndLogout]);\n\n  /**\n   * Session lifecycle at access-token expiry. The timer fires per-tab; the hook\n   * then either (1) re-syncs from a token another tab refreshed, (2) silently\n   * renews when the user has been active, or (3) logs out. Idle logout is local\n   * so an idle tab can't force-logout an actively-used one; a server-confirmed\n   * dead session (renewal rejected) broadcasts globally. See\n   * `useIdleSessionLogout` for the full rationale.\n   */\n  useIdleSessionLogout({\n    token,\n    onExpired: clearLocalSessionAndRedirect,\n    onSessionDead: clearStateAndLogout,\n    getStoredToken,\n    onResync: resyncToken,\n    getLastActivityAt,\n    renewSession,\n    disabled: _disableRenewToken,\n  });\n\n  React.useEffect(() => {\n    /**\n     * This will log a user out of all tabs if they log out in one tab.\n     */\n    const handleUserStorageChange = (event: StorageEvent) => {\n      if (event.key === STORAGE_KEYS.STATUS && event.newValue === null) {\n        clearStateAndLogout();\n      }\n    };\n\n    window.addEventListener('storage', handleUserStorageChange);\n\n    return () => {\n      window.removeEventListener('storage', handleUserStorageChange);\n    };\n  });\n\n  const login = React.useCallback<AuthContextValue['login']>(\n    async ({ rememberMe, ...body }) => {\n      const res = await loginMutation({ ...body, deviceId: getOrCreateDeviceId(), rememberMe });\n\n      /**\n       * There will always be a `data` key in the response\n       * because if something fails, it will throw an error.\n       */\n      if ('data' in res) {\n        const { token } = res.data;\n\n        dispatch(\n          loginAction({\n            token,\n            persist: rememberMe,\n          })\n        );\n      }\n\n      return res;\n    },\n    [dispatch, loginMutation]\n  );\n\n  const logout = React.useCallback(async () => {\n    await logoutMutation({ deviceId: getOrCreateDeviceId() });\n    clearStateAndLogout();\n  }, [clearStateAndLogout, logoutMutation]);\n\n  const refetchPermissions = React.useCallback(async () => {\n    if (!isUninitialized) {\n      await refetch();\n    }\n  }, [isUninitialized, refetch]);\n\n  const [checkPermissions] = useLazyCheckPermissionsQuery();\n  const checkUserHasPermissions: AuthContextValue['checkUserHasPermissions'] = React.useCallback(\n    async (\n      permissions,\n      passedPermissions,\n      // TODO:\n      // Here we have parameterised checkUserHasPermissions in order to pass\n      // query context from elsewhere in the application.\n      // See packages/core/content-manager/admin/src/features/DocumentRBAC.tsx\n\n      // This is in order to calculate permissions on accurate query params.\n      // We should be able to rely on the query params in this provider\n      // If we need to pass additional context to the RBAC middleware\n      // we should define a better context type.\n      rawQueryContext\n    ) => {\n      /**\n       * If there's no permissions to check, then we allow it to\n       * pass to preserve existing behaviours.\n       *\n       * TODO: should we review this? it feels more dangerous than useful.\n       */\n      if (!permissions || permissions.length === 0) {\n        return [{ action: '', subject: '' }];\n      }\n\n      /**\n       * Given the provided permissions, return the permissions from either passedPermissions\n       * or userPermissions as this is expected to be the full permission entity.\n       */\n      const actualUserPermissions = passedPermissions ?? userPermissions;\n\n      const matchingPermissions = actualUserPermissions.filter(\n        (permission) =>\n          permissions.findIndex(\n            (perm) =>\n              perm.action === permission.action &&\n              // Only check the subject if it's provided\n              (perm.subject == undefined || perm.subject === permission.subject)\n          ) >= 0\n      );\n\n      const middlewaredPermissions = await runRbacMiddleware(\n        {\n          user,\n          permissions: userPermissions,\n          pathname: locationRef.current.pathname,\n          search: (rawQueryContext || rawQuery).split('?')[1] ?? '',\n        },\n        matchingPermissions\n      );\n\n      const shouldCheckConditions = middlewaredPermissions.some(\n        (perm) => Array.isArray(perm.conditions) && perm.conditions.length > 0\n      );\n\n      if (!shouldCheckConditions) {\n        return middlewaredPermissions;\n      }\n\n      const { data, error } = await checkPermissions({\n        permissions: middlewaredPermissions.map((perm) => ({\n          action: perm.action,\n          subject: perm.subject,\n        })),\n      });\n\n      if (error) {\n        throw error;\n      } else {\n        return middlewaredPermissions.filter((_, index) => data?.data[index] === true);\n      }\n    },\n    [checkPermissions, rawQuery, runRbacMiddleware, user, userPermissions]\n  );\n\n  const isLoading = isLoadingUser || isLoadingPermissions;\n\n  return (\n    <Provider\n      token={token}\n      user={user}\n      login={login}\n      logout={logout}\n      permissions={userPermissions}\n      checkUserHasPermissions={checkUserHasPermissions ?? NOOP_CHECK_USER_HAS_PERMISSIONS}\n      refetchPermissions={refetchPermissions}\n      isLoading={isLoading}\n    >\n      {children}\n    </Provider>\n  );\n};\n\nexport { AuthProvider, useAuth, STORAGE_KEYS };\nexport type { AuthContextValue, Permission, User };\n"],"names":["NOOP_CHECK_USER_HAS_PERMISSIONS","Provider","useAuth","createContext","STORAGE_KEYS","STATUS","AuthProvider","children","_defaultPermissions","_disableRenewToken","dispatch","useTypedDispatch","runRbacMiddleware","useStrapiApp","state","rbac","run","location","useLocation","rawQuery","useQueryParams","locationRef","React","useRef","useEffect","current","token","useTypedSelector","admin_app","data","user","isLoading","isLoadingUser","useGetMeQuery","undefined","skip","userPermissions","refetch","isUninitialized","isLoadingPermissions","useGetMyPermissionsQuery","navigate","useNavigate","loginMutation","useLoginMutation","logoutMutation","useLogoutMutation","clearStateAndLogout","useCallback","adminApi","util","resetApiState","logoutAction","clearLocalSessionAndRedirect","setToken","resyncToken","newToken","lastActivityRef","Date","now","markActivity","events","forEach","event","window","addEventListener","passive","capture","removeEventListener","getLastActivityAt","renewSession","attemptTokenRefresh","preferedLanguage","setLocale","normalizeAdminLocale","setOnTokenUpdate","setOnSessionExpired","useIdleSessionLogout","onExpired","onSessionDead","getStoredToken","onResync","disabled","handleUserStorageChange","key","newValue","login","rememberMe","body","res","deviceId","getOrCreateDeviceId","loginAction","persist","logout","refetchPermissions","checkPermissions","useLazyCheckPermissionsQuery","checkUserHasPermissions","permissions","passedPermissions","rawQueryContext","length","action","subject","actualUserPermissions","matchingPermissions","filter","permission","findIndex","perm","middlewaredPermissions","pathname","search","split","shouldCheckConditions","some","Array","isArray","conditions","error","map","_","index","_jsx"],"mappings":";;;;;;;;;;;;;;;AAuEA;;;;;;;;;;;;;;IAeA,MAAMA,+BAAAA,GAA+E,UAAY,EAAE;AAEnG,MAAM,CAACC,QAAAA,EAAUC,OAAAA,CAAQ,GAAGC,aAAAA,CAAgC,MAAA;AAa5D,MAAMC,YAAAA,GAAe;IAEnBC,MAAAA,EAAQ;AACV;AAEA,MAAMC,YAAAA,GAAe,CAAC,EACpBC,QAAQ,EACRC,sBAAsB,EAAE,EACxBC,kBAAAA,GAAqB,KAAK,EACR,GAAA;AAClB,IAAA,MAAMC,QAAAA,GAAWC,gBAAAA,EAAAA;IACjB,MAAMC,iBAAAA,GAAoBC,aAAa,cAAA,EAAgB,CAACC,QAAUA,KAAAA,CAAMC,IAAI,CAACC,GAAG,CAAA;AAChF,IAAA,MAAMC,QAAAA,GAAWC,WAAAA,EAAAA;AACjB,IAAA,MAAM,CAAC,EAAEC,QAAQ,EAAE,CAAC,GAAGC,cAAAA,EAAAA;IAEvB,MAAMC,WAAAA,GAAcC,KAAAA,CAAMC,MAAM,CAACN,QAAAA,CAAAA;;AAGjCK,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdH,QAAAA,WAAAA,CAAYI,OAAO,GAAGR,QAAAA;IACxB,CAAA,EAAG;AAACA,QAAAA;AAAS,KAAA,CAAA;IAEb,MAAMS,KAAAA,GAAQC,iBAAiB,CAACb,KAAAA,GAAUA,MAAMc,SAAS,CAACF,KAAK,IAAI,IAAA,CAAA;IAEnE,MAAM,EAAEG,MAAMC,IAAI,EAAEC,WAAWC,aAAa,EAAE,GAAGC,aAAAA,CAAcC,SAAAA,EAAW;AACxE;;;AAGC,QACDC,MAAM,CAACT;AACT,KAAA,CAAA;AAEA,IAAA,MAAM,EACJG,IAAAA,EAAMO,eAAAA,GAAkB5B,mBAAmB,EAC3C6B,OAAO,EACPC,eAAe,EACfP,SAAAA,EAAWQ,oBAAoB,EAChC,GAAGC,yBAAyBN,SAAAA,EAAW;AACtCC,QAAAA,IAAAA,EAAM,CAACT;AACT,KAAA,CAAA;AAEA,IAAA,MAAMe,QAAAA,GAAWC,WAAAA,EAAAA;IAEjB,MAAM,CAACC,cAAc,GAAGC,gBAAAA,EAAAA;IACxB,MAAM,CAACC,eAAe,GAAGC,iBAAAA,EAAAA;IAEzB,MAAMC,mBAAAA,GAAsBzB,KAAAA,CAAM0B,WAAW,CAAC,IAAA;QAC5CtC,QAAAA,CAASuC,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;QACpCzC,QAAAA,CAAS0C,MAAAA,EAAAA,CAAAA;QACTX,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC/B,QAAAA,QAAAA;AAAU+B,QAAAA;AAAS,KAAA,CAAA;AAEvB;;;;;;;;;AASC,MACD,MAAMY,4BAAAA,GAA+B/B,KAAAA,CAAM0B,WAAW,CAAC,IAAA;QACrDtC,QAAAA,CAASuC,QAAAA,CAASC,IAAI,CAACC,aAAa,EAAA,CAAA;AACpCzC,QAAAA,QAAAA,CAAS4C,QAAAA,CAAS,IAAA,CAAA,CAAA;QAClBb,QAAAA,CAAS,aAAA,CAAA;IACX,CAAA,EAAG;AAAC/B,QAAAA,QAAAA;AAAU+B,QAAAA;AAAS,KAAA,CAAA;AAEvB,IAAA,MAAMc,WAAAA,GAAcjC,KAAAA,CAAM0B,WAAW,CACnC,CAACQ,QAAAA,GAAAA;AACC9C,QAAAA,QAAAA,CAAS4C,QAAAA,CAASE,QAAAA,CAAAA,CAAAA;IACpB,CAAA,EACA;AAAC9C,QAAAA;AAAS,KAAA,CAAA;AAGZ;;;;;;AAMC,MACD,MAAM+C,eAAAA,GAAkBnC,KAAAA,CAAMC,MAAM,CAACmC,KAAKC,GAAG,EAAA,CAAA;AAC7CrC,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,MAAMoC,YAAAA,GAAe,IAAA;YACnBH,eAAAA,CAAgBhC,OAAO,GAAGiC,IAAAA,CAAKC,GAAG,EAAA;AACpC,QAAA,CAAA;AACA,QAAA,MAAME,MAAAA,GAAS;AAAC,YAAA,aAAA;AAAe,YAAA,SAAA;AAAW,YAAA,OAAA;AAAS,YAAA,QAAA;AAAU,YAAA;AAAa,SAAA;QAC1EA,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GACdC,OAAOC,gBAAgB,CAACF,OAAOH,YAAAA,EAAc;gBAAEM,OAAAA,EAAS,IAAA;gBAAMC,OAAAA,EAAS;AAAK,aAAA,CAAA,CAAA;QAG9E,OAAO,IAAA;YACLN,MAAAA,CAAOC,OAAO,CAAC,CAACC,KAAAA,GAAUC,OAAOI,mBAAmB,CAACL,OAAOH,YAAAA,EAAc;oBAAEO,OAAAA,EAAS;AAAK,iBAAA,CAAA,CAAA;AAC5F,QAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IACL,MAAME,iBAAAA,GAAoB/C,MAAM0B,WAAW,CAAC,IAAMS,eAAAA,CAAgBhC,OAAO,EAAE,EAAE,CAAA;AAE7E;;;;AAIC,MACD,MAAM6C,YAAAA,GAAehD,KAAAA,CAAM0B,WAAW,CAAC,UAAA;QACrC,IAAI;YACF,MAAMuB,mBAAAA,EAAAA;YACN,OAAO,IAAA;AACT,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,KAAA;AACT,QAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;AAELjD,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd,QAAA,IAAIM,IAAAA,EAAM;YACR,IAAIA,IAAAA,CAAK0C,gBAAgB,EAAE;gBACzB9D,QAAAA,CAAS+D,SAAAA,CAAUC,oBAAAA,CAAqB5C,IAAAA,CAAK0C,gBAAgB,CAAA,CAAA,CAAA;AAC/D,YAAA;AACF,QAAA;IACF,CAAA,EAAG;AAAC9D,QAAAA,QAAAA;AAAUoB,QAAAA;AAAK,KAAA,CAAA;AAEnB;;;MAIAR,KAAAA,CAAME,SAAS,CAAC,IAAA;AACdmD,QAAAA,gBAAAA,CAAiB,CAACnB,QAAAA,GAAAA;AAChB9C,YAAAA,QAAAA,CAAS4C,QAAAA,CAASE,QAAAA,CAAAA,CAAAA;AACpB,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACLmB,gBAAAA,CAAiB,IAAA,CAAA;AACnB,QAAA,CAAA;IACF,CAAA,EAAG;AAACjE,QAAAA;AAAS,KAAA,CAAA;AAEb;;;;;MAMAY,KAAAA,CAAME,SAAS,CAAC,IAAA;QACdoD,mBAAAA,CAAoB,IAAA;AAClB7B,YAAAA,mBAAAA,EAAAA;AACF,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACL6B,mBAAAA,CAAoB,IAAA,CAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AAAC7B,QAAAA;AAAoB,KAAA,CAAA;AAExB;;;;;;;AAOC,MACD8B,oBAAAA,CAAqB;AACnBnD,QAAAA,KAAAA;QACAoD,SAAAA,EAAWzB,4BAAAA;QACX0B,aAAAA,EAAehC,mBAAAA;AACfiC,QAAAA,cAAAA;QACAC,QAAAA,EAAU1B,WAAAA;AACVc,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;QACAY,QAAAA,EAAUzE;AACZ,KAAA,CAAA;AAEAa,IAAAA,KAAAA,CAAME,SAAS,CAAC,IAAA;AACd;;QAGA,MAAM2D,0BAA0B,CAACpB,KAAAA,GAAAA;YAC/B,IAAIA,KAAAA,CAAMqB,GAAG,KAAKhF,YAAAA,CAAaC,MAAM,IAAI0D,KAAAA,CAAMsB,QAAQ,KAAK,IAAA,EAAM;AAChEtC,gBAAAA,mBAAAA,EAAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEAiB,MAAAA,CAAOC,gBAAgB,CAAC,SAAA,EAAWkB,uBAAAA,CAAAA;QAEnC,OAAO,IAAA;YACLnB,MAAAA,CAAOI,mBAAmB,CAAC,SAAA,EAAWe,uBAAAA,CAAAA;AACxC,QAAA,CAAA;AACF,IAAA,CAAA,CAAA;IAEA,MAAMG,OAAAA,GAAQhE,MAAM0B,WAAW,CAC7B,OAAO,EAAEuC,UAAU,EAAE,GAAGC,IAAAA,EAAM,GAAA;QAC5B,MAAMC,GAAAA,GAAM,MAAM9C,aAAAA,CAAc;AAAE,YAAA,GAAG6C,IAAI;YAAEE,QAAAA,EAAUC,mBAAAA,EAAAA;AAAuBJ,YAAAA;AAAW,SAAA,CAAA;AAEvF;;;UAIA,IAAI,UAAUE,GAAAA,EAAK;AACjB,YAAA,MAAM,EAAE/D,KAAK,EAAE,GAAG+D,IAAI5D,IAAI;AAE1BnB,YAAAA,QAAAA,CACEkF,KAAAA,CAAY;AACVlE,gBAAAA,KAAAA;gBACAmE,OAAAA,EAASN;AACX,aAAA,CAAA,CAAA;AAEJ,QAAA;QAEA,OAAOE,GAAAA;IACT,CAAA,EACA;AAAC/E,QAAAA,QAAAA;AAAUiC,QAAAA;AAAc,KAAA,CAAA;IAG3B,MAAMmD,QAAAA,GAASxE,KAAAA,CAAM0B,WAAW,CAAC,UAAA;AAC/B,QAAA,MAAMH,cAAAA,CAAe;YAAE6C,QAAAA,EAAUC,mBAAAA;AAAsB,SAAA,CAAA;AACvD5C,QAAAA,mBAAAA,EAAAA;IACF,CAAA,EAAG;AAACA,QAAAA,mBAAAA;AAAqBF,QAAAA;AAAe,KAAA,CAAA;IAExC,MAAMkD,kBAAAA,GAAqBzE,KAAAA,CAAM0B,WAAW,CAAC,UAAA;AAC3C,QAAA,IAAI,CAACV,eAAAA,EAAiB;YACpB,MAAMD,OAAAA,EAAAA;AACR,QAAA;IACF,CAAA,EAAG;AAACC,QAAAA,eAAAA;AAAiBD,QAAAA;AAAQ,KAAA,CAAA;IAE7B,MAAM,CAAC2D,iBAAiB,GAAGC,4BAAAA,EAAAA;AAC3B,IAAA,MAAMC,0BAAuE5E,KAAAA,CAAM0B,WAAW,CAC5F,OACEmD,WAAAA,EACAC;;;;;;;;AAUAC,IAAAA,eAAAA,GAAAA;AAEA;;;;;AAKC,UACD,IAAI,CAACF,WAAAA,IAAeA,WAAAA,CAAYG,MAAM,KAAK,CAAA,EAAG;YAC5C,OAAO;AAAC,gBAAA;oBAAEC,MAAAA,EAAQ,EAAA;oBAAIC,OAAAA,EAAS;AAAG;AAAE,aAAA;AACtC,QAAA;AAEA;;;UAIA,MAAMC,wBAAwBL,iBAAAA,IAAqBhE,eAAAA;AAEnD,QAAA,MAAMsE,sBAAsBD,qBAAAA,CAAsBE,MAAM,CACtD,CAACC,aACCT,WAAAA,CAAYU,SAAS,CACnB,CAACC,OACCA,IAAAA,CAAKP,MAAM,KAAKK,UAAAA,CAAWL,MAAM;iBAEhCO,IAAAA,CAAKN,OAAO,IAAItE,SAAAA,IAAa4E,IAAAA,CAAKN,OAAO,KAAKI,UAAAA,CAAWJ,OAAM,CAAA,CAAA,IAC/D,CAAA,CAAA;QAGT,MAAMO,sBAAAA,GAAyB,MAAMnG,iBAAAA,CACnC;AACEkB,YAAAA,IAAAA;YACAqE,WAAAA,EAAa/D,eAAAA;YACb4E,QAAAA,EAAU3F,WAAAA,CAAYI,OAAO,CAACuF,QAAQ;YACtCC,MAAAA,EAASZ,CAAAA,eAAAA,IAAmBlF,QAAO,EAAG+F,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI;SACzD,EACAR,mBAAAA,CAAAA;AAGF,QAAA,MAAMS,wBAAwBJ,sBAAAA,CAAuBK,IAAI,CACvD,CAACN,OAASO,KAAAA,CAAMC,OAAO,CAACR,IAAAA,CAAKS,UAAU,CAAA,IAAKT,IAAAA,CAAKS,UAAU,CAACjB,MAAM,GAAG,CAAA,CAAA;AAGvE,QAAA,IAAI,CAACa,qBAAAA,EAAuB;YAC1B,OAAOJ,sBAAAA;AACT,QAAA;AAEA,QAAA,MAAM,EAAElF,IAAI,EAAE2F,KAAK,EAAE,GAAG,MAAMxB,gBAAAA,CAAiB;AAC7CG,YAAAA,WAAAA,EAAaY,sBAAAA,CAAuBU,GAAG,CAAC,CAACX,QAAU;AACjDP,oBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBC,oBAAAA,OAAAA,EAASM,KAAKN;iBAChB,CAAA;AACF,SAAA,CAAA;AAEA,QAAA,IAAIgB,KAAAA,EAAO;YACT,MAAMA,KAAAA;QACR,CAAA,MAAO;YACL,OAAOT,sBAAAA,CAAuBJ,MAAM,CAAC,CAACe,CAAAA,EAAGC,QAAU9F,IAAAA,EAAMA,IAAI,CAAC8F,KAAAA,CAAM,KAAK,IAAA,CAAA;AAC3E,QAAA;IACF,CAAA,EACA;AAAC3B,QAAAA,gBAAAA;AAAkB7E,QAAAA,QAAAA;AAAUP,QAAAA,iBAAAA;AAAmBkB,QAAAA,IAAAA;AAAMM,QAAAA;AAAgB,KAAA,CAAA;AAGxE,IAAA,MAAML,YAAYC,aAAAA,IAAiBO,oBAAAA;AAEnC,IAAA,qBACEqF,GAAA,CAAC3H,QAAAA,EAAAA;QACCyB,KAAAA,EAAOA,KAAAA;QACPI,IAAAA,EAAMA,IAAAA;QACNwD,KAAAA,EAAOA,OAAAA;QACPQ,MAAAA,EAAQA,QAAAA;QACRK,WAAAA,EAAa/D,eAAAA;AACb8D,QAAAA,uBAAAA,EAAyBA,uBAAAA,IAA2BlG,+BAAAA;QACpD+F,kBAAAA,EAAoBA,kBAAAA;QACpBhE,SAAAA,EAAWA,SAAAA;AAEVxB,QAAAA,QAAAA,EAAAA;;AAGP;;;;"}

package/dist/admin/admin/src/features/BackButton.js

@@ -0,0 +1,221 @@
+'use strict';
+
+var jsxRuntime = require('react/jsx-runtime');
+var React = require('react');
+var designSystem = require('@strapi/design-system');
+var icons = require('@strapi/icons');
+var immer = require('immer');
+var reactIntl = require('react-intl');
+var reactRouterDom = require('react-router-dom');
+var Context = require('../components/Context.js');
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var React__namespace = /*#__PURE__*/_interopNamespace(React);
+
+const [Provider, useHistory] = Context.createContext('History', {
+    history: [],
+    currentLocationIndex: 0,
+    currentLocation: '',
+    canGoBack: false,
+    pushState: ()=>{
+        throw new Error('You must use the `HistoryProvider` to access the `pushState` function.');
+    },
+    goBack: ()=>{
+        throw new Error('You must use the `HistoryProvider` to access the `goBack` function.');
+    }
+});
+const HistoryProvider = ({ children })=>{
+    const location = reactRouterDom.useLocation();
+    const navigationType = reactRouterDom.useNavigationType();
+    const navigate = reactRouterDom.useNavigate();
+    const [state, dispatch] = React__namespace.useReducer(reducer, {
+        history: [],
+        currentLocationIndex: 0,
+        currentLocation: '',
+        canGoBack: false
+    });
+    const isGoingBack = React__namespace.useRef(false);
+    const pushState = React__namespace.useCallback((path)=>{
+        dispatch({
+            type: 'PUSH_STATE',
+            payload: typeof path === 'string' ? {
+                to: path,
+                search: ''
+            } : path
+        });
+    }, []);
+    const goBack = React__namespace.useCallback(()=>{
+        /**
+     * Perform the browser back action, dispatch the goBack action to keep the state in sync
+     * and set the ref to avoid an infinite loop and incorrect state pushing
+     */ navigate(-1);
+        dispatch({
+            type: 'GO_BACK'
+        });
+        isGoingBack.current = true;
+    }, [
+        navigate
+    ]);
+    /**
+   * This is a semi-listener pattern to keep the `canGoBack` state in sync.
+   */ const prevIndex = React__namespace.useRef(state.currentLocationIndex);
+    React__namespace.useEffect(()=>{
+        if (state.currentLocationIndex !== prevIndex.current) {
+            dispatch({
+                type: 'SET_CAN_GO_BACK',
+                payload: state.currentLocationIndex > 1 && state.history.length > 1
+            });
+            prevIndex.current = state.currentLocationIndex;
+        }
+    }, [
+        prevIndex,
+        state.currentLocationIndex,
+        state.history.length
+    ]);
+    /**
+   * This effect is responsible for pushing the new state to the history
+   * when the user navigates to a new location assuming they're not going back.
+   */ React__namespace.useLayoutEffect(()=>{
+        if (isGoingBack.current) {
+            isGoingBack.current = false;
+        } else if (navigationType === 'REPLACE') {
+            // Prevent appending to the history when the location changes via a replace:true navigation
+            dispatch({
+                type: 'REPLACE_STATE',
+                payload: {
+                    to: location.pathname,
+                    search: location.search
+                }
+            });
+        } else {
+            // this should only occur on link movements, not back/forward clicks
+            dispatch({
+                type: 'PUSH_STATE',
+                payload: {
+                    to: location.pathname,
+                    search: location.search
+                }
+            });
+        }
+    }, [
+        dispatch,
+        location.pathname,
+        location.search,
+        navigationType
+    ]);
+    return /*#__PURE__*/ jsxRuntime.jsx(Provider, {
+        pushState: pushState,
+        goBack: goBack,
+        ...state,
+        children: children
+    });
+};
+const reducer = (state, action)=>immer.produce(state, (draft)=>{
+        switch(action.type){
+            case 'PUSH_STATE':
+                {
+                    const path = `${action.payload.to}${action.payload.search}`;
+                    if (state.currentLocationIndex === state.history.length) {
+                        // add the new place
+                        draft.history = [
+                            ...state.history,
+                            path
+                        ];
+                    } else {
+                        // delete all the history after the current place and then add the new place
+                        draft.history = [
+                            ...state.history.slice(0, state.currentLocationIndex),
+                            path
+                        ];
+                    }
+                    draft.currentLocation = path;
+                    draft.currentLocationIndex += 1;
+                    break;
+                }
+            case 'REPLACE_STATE':
+                {
+                    const path = `${action.payload.to}${action.payload.search}`;
+                    draft.history = [
+                        ...state.history.slice(0, state.currentLocationIndex - 1),
+                        path
+                    ];
+                    draft.currentLocation = path;
+                    break;
+                }
+            case 'GO_BACK':
+                {
+                    const newIndex = state.currentLocationIndex - 1;
+                    draft.currentLocation = state.history[newIndex - 1];
+                    draft.currentLocationIndex = newIndex;
+                    break;
+                }
+            case 'SET_CAN_GO_BACK':
+                {
+                    draft.canGoBack = action.payload;
+                    break;
+                }
+        }
+    });
+/**
+ * @beta
+ * @description The universal back button for the Strapi application. This uses the internal history
+ * context to navigate the user back to the previous location. It can be completely disabled in a
+ * specific user case. When no history is available, you can provide a fallback destination,
+ * otherwise the link will be disabled.
+ */ const BackButton = /*#__PURE__*/ React__namespace.forwardRef(({ disabled, fallback = '' }, ref)=>{
+    const { formatMessage } = reactIntl.useIntl();
+    const navigate = reactRouterDom.useNavigate();
+    const canGoBack = useHistory('BackButton', (state)=>state.canGoBack);
+    const goBack = useHistory('BackButton', (state)=>state.goBack);
+    const history = useHistory('BackButton', (state)=>state.history);
+    const currentLocationIndex = useHistory('BackButton', (state)=>state.currentLocationIndex);
+    const hasFallback = fallback !== '';
+    const shouldBeDisabled = disabled || !canGoBack && !hasFallback;
+    const handleClick = (e)=>{
+        e.preventDefault();
+        if (canGoBack) {
+            goBack();
+        } else if (hasFallback) {
+            navigate(fallback);
+        }
+    };
+    // The link destination from the history. Undefined if there is only 1 location in the history.
+    const historyTo = canGoBack ? history.at(currentLocationIndex - 2) : undefined;
+    // If no link destination from the history, use the fallback.
+    const toWithFallback = historyTo ?? fallback;
+    return /*#__PURE__*/ jsxRuntime.jsx(designSystem.Link, {
+        ref: ref,
+        tag: reactRouterDom.NavLink,
+        to: toWithFallback,
+        onClick: handleClick,
+        disabled: shouldBeDisabled,
+        "aria-disabled": shouldBeDisabled,
+        startIcon: /*#__PURE__*/ jsxRuntime.jsx(icons.ArrowLeft, {}),
+        children: formatMessage({
+            id: 'global.back',
+            defaultMessage: 'Back'
+        })
+    });
+});
+
+exports.BackButton = BackButton;
+exports.HistoryProvider = HistoryProvider;
+exports.useHistory = useHistory;
+//# sourceMappingURL=BackButton.js.map

package/dist/admin/admin/src/features/BackButton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BackButton.js","sources":["../../../../../admin/src/features/BackButton.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { Link, LinkProps } from '@strapi/design-system';\nimport { ArrowLeft } from '@strapi/icons';\nimport { produce } from 'immer';\nimport { useIntl } from 'react-intl';\nimport { NavLink, type To, useLocation, useNavigate, useNavigationType } from 'react-router-dom';\n\nimport { createContext } from '../components/Context';\n\n/* -------------------------------------------------------------------------------------------------\n * HistoryProvider\n * -----------------------------------------------------------------------------------------------*/\ninterface HistoryState {\n  /**\n   * The history of the user's navigation within our application\n   * during their current session.\n   */\n  history: string[];\n  /**\n   * The index of the current location in the history array.\n   */\n  currentLocationIndex: number;\n  /**\n   * The current location of the user within our application.\n   */\n  currentLocation: string;\n  /**\n   * Whether the user can go back in the history.\n   */\n  canGoBack: boolean;\n}\n\ninterface HistoryContextValue extends HistoryState {\n  /**\n   * @description Push a new state to the history. You can\n   * either pass a string or an object.\n   */\n  pushState: (\n    path:\n      | {\n          to: string;\n          search: string;\n        }\n      | string\n  ) => void;\n  /**\n   * @description Go back in the history. This calls `navigate(-1)` internally\n   * to keep the browser in sync with the application state.\n   */\n  goBack: () => void;\n}\n\nconst [Provider, useHistory] = createContext<HistoryContextValue>('History', {\n  history: [],\n  currentLocationIndex: 0,\n  currentLocation: '',\n  canGoBack: false,\n  pushState: () => {\n    throw new Error('You must use the `HistoryProvider` to access the `pushState` function.');\n  },\n  goBack: () => {\n    throw new Error('You must use the `HistoryProvider` to access the `goBack` function.');\n  },\n});\n\ninterface HistoryProviderProps {\n  children: React.ReactNode;\n}\n\nconst HistoryProvider = ({ children }: HistoryProviderProps) => {\n  const location = useLocation();\n  const navigationType = useNavigationType();\n  const navigate = useNavigate();\n  const [state, dispatch] = React.useReducer(reducer, {\n    history: [],\n    currentLocationIndex: 0,\n    currentLocation: '',\n    canGoBack: false,\n  });\n\n  const isGoingBack = React.useRef(false);\n\n  const pushState: HistoryContextValue['pushState'] = React.useCallback((path) => {\n    dispatch({\n      type: 'PUSH_STATE',\n      payload: typeof path === 'string' ? { to: path, search: '' } : path,\n    });\n  }, []);\n\n  const goBack: HistoryContextValue['goBack'] = React.useCallback(() => {\n    /**\n     * Perform the browser back action, dispatch the goBack action to keep the state in sync\n     * and set the ref to avoid an infinite loop and incorrect state pushing\n     */\n    navigate(-1);\n    dispatch({ type: 'GO_BACK' });\n    isGoingBack.current = true;\n  }, [navigate]);\n\n  /**\n   * This is a semi-listener pattern to keep the `canGoBack` state in sync.\n   */\n  const prevIndex = React.useRef(state.currentLocationIndex);\n  React.useEffect(() => {\n    if (state.currentLocationIndex !== prevIndex.current) {\n      dispatch({\n        type: 'SET_CAN_GO_BACK',\n        payload: state.currentLocationIndex > 1 && state.history.length > 1,\n      });\n      prevIndex.current = state.currentLocationIndex;\n    }\n  }, [prevIndex, state.currentLocationIndex, state.history.length]);\n\n  /**\n   * This effect is responsible for pushing the new state to the history\n   * when the user navigates to a new location assuming they're not going back.\n   */\n  React.useLayoutEffect(() => {\n    if (isGoingBack.current) {\n      isGoingBack.current = false;\n    } else if (navigationType === 'REPLACE') {\n      // Prevent appending to the history when the location changes via a replace:true navigation\n      dispatch({\n        type: 'REPLACE_STATE',\n        payload: { to: location.pathname, search: location.search },\n      });\n    } else {\n      // this should only occur on link movements, not back/forward clicks\n      dispatch({\n        type: 'PUSH_STATE',\n        payload: { to: location.pathname, search: location.search },\n      });\n    }\n  }, [dispatch, location.pathname, location.search, navigationType]);\n\n  return (\n    <Provider pushState={pushState} goBack={goBack} {...state}>\n      {children}\n    </Provider>\n  );\n};\n\ntype HistoryActions =\n  | {\n      type: 'PUSH_STATE';\n      payload: {\n        to: string;\n        search: string;\n      };\n    }\n  | {\n      type: 'REPLACE_STATE';\n      payload: {\n        to: string;\n        search: string;\n      };\n    }\n  | {\n      type: 'GO_BACK';\n    }\n  | {\n      type: 'SET_CAN_GO_BACK';\n      payload: boolean;\n    };\n\nconst reducer = (state: HistoryState, action: HistoryActions) =>\n  produce(state, (draft) => {\n    switch (action.type) {\n      case 'PUSH_STATE': {\n        const path = `${action.payload.to}${action.payload.search}`;\n        if (state.currentLocationIndex === state.history.length) {\n          // add the new place\n          draft.history = [...state.history, path];\n        } else {\n          // delete all the history after the current place and then add the new place\n          draft.history = [...state.history.slice(0, state.currentLocationIndex), path];\n        }\n\n        draft.currentLocation = path;\n        draft.currentLocationIndex += 1;\n\n        break;\n      }\n      case 'REPLACE_STATE': {\n        const path = `${action.payload.to}${action.payload.search}`;\n        draft.history = [...state.history.slice(0, state.currentLocationIndex - 1), path];\n        draft.currentLocation = path;\n        break;\n      }\n      case 'GO_BACK': {\n        const newIndex = state.currentLocationIndex - 1;\n\n        draft.currentLocation = state.history[newIndex - 1];\n        draft.currentLocationIndex = newIndex;\n        break;\n      }\n      case 'SET_CAN_GO_BACK': {\n        draft.canGoBack = action.payload;\n        break;\n      }\n      default:\n        break;\n    }\n  });\n\n/* -------------------------------------------------------------------------------------------------\n * BackButton\n * -----------------------------------------------------------------------------------------------*/\ninterface BackButtonProps extends Pick<LinkProps, 'disabled'> {\n  fallback?: To;\n}\n\n/**\n * @beta\n * @description The universal back button for the Strapi application. This uses the internal history\n * context to navigate the user back to the previous location. It can be completely disabled in a\n * specific user case. When no history is available, you can provide a fallback destination,\n * otherwise the link will be disabled.\n */\nconst BackButton = React.forwardRef<HTMLAnchorElement, BackButtonProps>(\n  ({ disabled, fallback = '' }, ref) => {\n    const { formatMessage } = useIntl();\n    const navigate = useNavigate();\n\n    const canGoBack = useHistory('BackButton', (state) => state.canGoBack);\n    const goBack = useHistory('BackButton', (state) => state.goBack);\n    const history = useHistory('BackButton', (state) => state.history);\n    const currentLocationIndex = useHistory('BackButton', (state) => state.currentLocationIndex);\n    const hasFallback = fallback !== '';\n    const shouldBeDisabled = disabled || (!canGoBack && !hasFallback);\n\n    const handleClick = (e: React.MouseEvent<HTMLAnchorElement>) => {\n      e.preventDefault();\n\n      if (canGoBack) {\n        goBack();\n      } else if (hasFallback) {\n        navigate(fallback);\n      }\n    };\n\n    // The link destination from the history. Undefined if there is only 1 location in the history.\n    const historyTo = canGoBack ? history.at(currentLocationIndex - 2) : undefined;\n    // If no link destination from the history, use the fallback.\n    const toWithFallback = historyTo ?? fallback;\n\n    return (\n      <Link\n        ref={ref}\n        tag={NavLink}\n        to={toWithFallback}\n        onClick={handleClick}\n        disabled={shouldBeDisabled}\n        aria-disabled={shouldBeDisabled}\n        startIcon={<ArrowLeft />}\n      >\n        {formatMessage({\n          id: 'global.back',\n          defaultMessage: 'Back',\n        })}\n      </Link>\n    );\n  }\n);\n\nexport { BackButton, HistoryProvider, useHistory };\nexport type { BackButtonProps, HistoryProviderProps, HistoryContextValue, HistoryState };\n"],"names":["Provider","useHistory","createContext","history","currentLocationIndex","currentLocation","canGoBack","pushState","Error","goBack","HistoryProvider","children","location","useLocation","navigationType","useNavigationType","navigate","useNavigate","state","dispatch","React","useReducer","reducer","isGoingBack","useRef","useCallback","path","type","payload","to","search","current","prevIndex","useEffect","length","useLayoutEffect","pathname","_jsx","action","produce","draft","slice","newIndex","BackButton","forwardRef","disabled","fallback","ref","formatMessage","useIntl","hasFallback","shouldBeDisabled","handleClick","e","preventDefault","historyTo","at","undefined","toWithFallback","Link","tag","NavLink","onClick","aria-disabled","startIcon","ArrowLeft","id","defaultMessage"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,MAAM,CAACA,QAAAA,EAAUC,UAAAA,CAAW,GAAGC,sBAAmC,SAAA,EAAW;AAC3EC,IAAAA,OAAAA,EAAS,EAAE;IACXC,oBAAAA,EAAsB,CAAA;IACtBC,eAAAA,EAAiB,EAAA;IACjBC,SAAAA,EAAW,KAAA;IACXC,SAAAA,EAAW,IAAA;AACT,QAAA,MAAM,IAAIC,KAAAA,CAAM,wEAAA,CAAA;AAClB,IAAA,CAAA;IACAC,MAAAA,EAAQ,IAAA;AACN,QAAA,MAAM,IAAID,KAAAA,CAAM,qEAAA,CAAA;AAClB,IAAA;AACF,CAAA;AAMA,MAAME,eAAAA,GAAkB,CAAC,EAAEC,QAAQ,EAAwB,GAAA;AACzD,IAAA,MAAMC,QAAAA,GAAWC,0BAAAA,EAAAA;AACjB,IAAA,MAAMC,cAAAA,GAAiBC,gCAAAA,EAAAA;AACvB,IAAA,MAAMC,QAAAA,GAAWC,0BAAAA,EAAAA;AACjB,IAAA,MAAM,CAACC,KAAAA,EAAOC,QAAAA,CAAS,GAAGC,gBAAAA,CAAMC,UAAU,CAACC,OAAAA,EAAS;AAClDnB,QAAAA,OAAAA,EAAS,EAAE;QACXC,oBAAAA,EAAsB,CAAA;QACtBC,eAAAA,EAAiB,EAAA;QACjBC,SAAAA,EAAW;AACb,KAAA,CAAA;IAEA,MAAMiB,WAAAA,GAAcH,gBAAAA,CAAMI,MAAM,CAAC,KAAA,CAAA;AAEjC,IAAA,MAAMjB,SAAAA,GAA8Ca,gBAAAA,CAAMK,WAAW,CAAC,CAACC,IAAAA,GAAAA;QACrEP,QAAAA,CAAS;YACPQ,IAAAA,EAAM,YAAA;YACNC,OAAAA,EAAS,OAAOF,SAAS,QAAA,GAAW;gBAAEG,EAAAA,EAAIH,IAAAA;gBAAMI,MAAAA,EAAQ;aAAG,GAAIJ;AACjE,SAAA,CAAA;AACF,IAAA,CAAA,EAAG,EAAE,CAAA;IAEL,MAAMjB,MAAAA,GAAwCW,gBAAAA,CAAMK,WAAW,CAAC,IAAA;AAC9D;;;AAGC,QACDT,SAAS,EAAC,CAAA;QACVG,QAAAA,CAAS;YAAEQ,IAAAA,EAAM;AAAU,SAAA,CAAA;AAC3BJ,QAAAA,WAAAA,CAAYQ,OAAO,GAAG,IAAA;IACxB,CAAA,EAAG;AAACf,QAAAA;AAAS,KAAA,CAAA;AAEb;;AAEC,MACD,MAAMgB,SAAAA,GAAYZ,gBAAAA,CAAMI,MAAM,CAACN,MAAMd,oBAAoB,CAAA;AACzDgB,IAAAA,gBAAAA,CAAMa,SAAS,CAAC,IAAA;AACd,QAAA,IAAIf,KAAAA,CAAMd,oBAAoB,KAAK4B,SAAAA,CAAUD,OAAO,EAAE;YACpDZ,QAAAA,CAAS;gBACPQ,IAAAA,EAAM,iBAAA;gBACNC,OAAAA,EAASV,KAAAA,CAAMd,oBAAoB,GAAG,CAAA,IAAKc,MAAMf,OAAO,CAAC+B,MAAM,GAAG;AACpE,aAAA,CAAA;YACAF,SAAAA,CAAUD,OAAO,GAAGb,KAAAA,CAAMd,oBAAoB;AAChD,QAAA;IACF,CAAA,EAAG;AAAC4B,QAAAA,SAAAA;AAAWd,QAAAA,KAAAA,CAAMd,oBAAoB;QAAEc,KAAAA,CAAMf,OAAO,CAAC+B;AAAO,KAAA,CAAA;AAEhE;;;MAIAd,gBAAAA,CAAMe,eAAe,CAAC,IAAA;QACpB,IAAIZ,WAAAA,CAAYQ,OAAO,EAAE;AACvBR,YAAAA,WAAAA,CAAYQ,OAAO,GAAG,KAAA;QACxB,CAAA,MAAO,IAAIjB,mBAAmB,SAAA,EAAW;;YAEvCK,QAAAA,CAAS;gBACPQ,IAAAA,EAAM,eAAA;gBACNC,OAAAA,EAAS;AAAEC,oBAAAA,EAAAA,EAAIjB,SAASwB,QAAQ;AAAEN,oBAAAA,MAAAA,EAAQlB,SAASkB;AAAO;AAC5D,aAAA,CAAA;QACF,CAAA,MAAO;;YAELX,QAAAA,CAAS;gBACPQ,IAAAA,EAAM,YAAA;gBACNC,OAAAA,EAAS;AAAEC,oBAAAA,EAAAA,EAAIjB,SAASwB,QAAQ;AAAEN,oBAAAA,MAAAA,EAAQlB,SAASkB;AAAO;AAC5D,aAAA,CAAA;AACF,QAAA;IACF,CAAA,EAAG;AAACX,QAAAA,QAAAA;AAAUP,QAAAA,QAAAA,CAASwB,QAAQ;AAAExB,QAAAA,QAAAA,CAASkB,MAAM;AAAEhB,QAAAA;AAAe,KAAA,CAAA;AAEjE,IAAA,qBACEuB,cAAA,CAACrC,QAAAA,EAAAA;QAASO,SAAAA,EAAWA,SAAAA;QAAWE,MAAAA,EAAQA,MAAAA;AAAS,QAAA,GAAGS,KAAK;AACtDP,QAAAA,QAAAA,EAAAA;;AAGP;AAyBA,MAAMW,UAAU,CAACJ,KAAAA,EAAqBoB,MAAAA,GACpCC,aAAAA,CAAQrB,OAAO,CAACsB,KAAAA,GAAAA;AACd,QAAA,OAAQF,OAAOX,IAAI;YACjB,KAAK,YAAA;AAAc,gBAAA;oBACjB,MAAMD,IAAAA,GAAO,CAAA,EAAGY,MAAAA,CAAOV,OAAO,CAACC,EAAE,CAAA,EAAGS,MAAAA,CAAOV,OAAO,CAACE,MAAM,CAAA,CAAE;AAC3D,oBAAA,IAAIZ,MAAMd,oBAAoB,KAAKc,MAAMf,OAAO,CAAC+B,MAAM,EAAE;;AAEvDM,wBAAAA,KAAAA,CAAMrC,OAAO,GAAG;AAAIe,4BAAAA,GAAAA,KAAAA,CAAMf,OAAO;AAAEuB,4BAAAA;AAAK,yBAAA;oBAC1C,CAAA,MAAO;;AAELc,wBAAAA,KAAAA,CAAMrC,OAAO,GAAG;AAAIe,4BAAAA,GAAAA,KAAAA,CAAMf,OAAO,CAACsC,KAAK,CAAC,CAAA,EAAGvB,MAAMd,oBAAoB,CAAA;AAAGsB,4BAAAA;AAAK,yBAAA;AAC/E,oBAAA;AAEAc,oBAAAA,KAAAA,CAAMnC,eAAe,GAAGqB,IAAAA;AACxBc,oBAAAA,KAAAA,CAAMpC,oBAAoB,IAAI,CAAA;AAE9B,oBAAA;AACF,gBAAA;YACA,KAAK,eAAA;AAAiB,gBAAA;oBACpB,MAAMsB,IAAAA,GAAO,CAAA,EAAGY,MAAAA,CAAOV,OAAO,CAACC,EAAE,CAAA,EAAGS,MAAAA,CAAOV,OAAO,CAACE,MAAM,CAAA,CAAE;AAC3DU,oBAAAA,KAAAA,CAAMrC,OAAO,GAAG;AAAIe,wBAAAA,GAAAA,KAAAA,CAAMf,OAAO,CAACsC,KAAK,CAAC,CAAA,EAAGvB,KAAAA,CAAMd,oBAAoB,GAAG,CAAA,CAAA;AAAIsB,wBAAAA;AAAK,qBAAA;AACjFc,oBAAAA,KAAAA,CAAMnC,eAAe,GAAGqB,IAAAA;AACxB,oBAAA;AACF,gBAAA;YACA,KAAK,SAAA;AAAW,gBAAA;oBACd,MAAMgB,QAAAA,GAAWxB,KAAAA,CAAMd,oBAAoB,GAAG,CAAA;AAE9CoC,oBAAAA,KAAAA,CAAMnC,eAAe,GAAGa,KAAAA,CAAMf,OAAO,CAACuC,WAAW,CAAA,CAAE;AACnDF,oBAAAA,KAAAA,CAAMpC,oBAAoB,GAAGsC,QAAAA;AAC7B,oBAAA;AACF,gBAAA;YACA,KAAK,iBAAA;AAAmB,gBAAA;oBACtBF,KAAAA,CAAMlC,SAAS,GAAGgC,MAAAA,CAAOV,OAAO;AAChC,oBAAA;AACF,gBAAA;AAGF;AACF,IAAA,CAAA,CAAA;AASF;;;;;;AAMC,IACD,MAAMe,UAAAA,iBAAavB,gBAAAA,CAAMwB,UAAU,CACjC,CAAC,EAAEC,QAAQ,EAAEC,QAAAA,GAAW,EAAE,EAAE,EAAEC,GAAAA,GAAAA;IAC5B,MAAM,EAAEC,aAAa,EAAE,GAAGC,iBAAAA,EAAAA;AAC1B,IAAA,MAAMjC,QAAAA,GAAWC,0BAAAA,EAAAA;AAEjB,IAAA,MAAMX,YAAYL,UAAAA,CAAW,YAAA,EAAc,CAACiB,KAAAA,GAAUA,MAAMZ,SAAS,CAAA;AACrE,IAAA,MAAMG,SAASR,UAAAA,CAAW,YAAA,EAAc,CAACiB,KAAAA,GAAUA,MAAMT,MAAM,CAAA;AAC/D,IAAA,MAAMN,UAAUF,UAAAA,CAAW,YAAA,EAAc,CAACiB,KAAAA,GAAUA,MAAMf,OAAO,CAAA;AACjE,IAAA,MAAMC,uBAAuBH,UAAAA,CAAW,YAAA,EAAc,CAACiB,KAAAA,GAAUA,MAAMd,oBAAoB,CAAA;AAC3F,IAAA,MAAM8C,cAAcJ,QAAAA,KAAa,EAAA;AACjC,IAAA,MAAMK,gBAAAA,GAAmBN,QAAAA,IAAa,CAACvC,SAAAA,IAAa,CAAC4C,WAAAA;AAErD,IAAA,MAAME,cAAc,CAACC,CAAAA,GAAAA;AACnBA,QAAAA,CAAAA,CAAEC,cAAc,EAAA;AAEhB,QAAA,IAAIhD,SAAAA,EAAW;AACbG,YAAAA,MAAAA,EAAAA;AACF,QAAA,CAAA,MAAO,IAAIyC,WAAAA,EAAa;YACtBlC,QAAAA,CAAS8B,QAAAA,CAAAA;AACX,QAAA;AACF,IAAA,CAAA;;AAGA,IAAA,MAAMS,YAAYjD,SAAAA,GAAYH,OAAAA,CAAQqD,EAAE,CAACpD,uBAAuB,CAAA,CAAA,GAAKqD,SAAAA;;AAErE,IAAA,MAAMC,iBAAiBH,SAAAA,IAAaT,QAAAA;AAEpC,IAAA,qBACET,cAAA,CAACsB,iBAAAA,EAAAA;QACCZ,GAAAA,EAAKA,GAAAA;QACLa,GAAAA,EAAKC,sBAAAA;QACLhC,EAAAA,EAAI6B,cAAAA;QACJI,OAAAA,EAASV,WAAAA;QACTP,QAAAA,EAAUM,gBAAAA;QACVY,eAAAA,EAAeZ,gBAAAA;AACfa,QAAAA,SAAAA,gBAAW3B,cAAA,CAAC4B,eAAAA,EAAAA,EAAAA,CAAAA;kBAEXjB,aAAAA,CAAc;YACbkB,EAAAA,EAAI,aAAA;YACJC,cAAAA,EAAgB;AAClB,SAAA;;AAGN,CAAA;;;;;;"}