@strapi/admin 4.14.2 → 4.14.3

package/dist/server/services/api-token.js

@@ -0,0 +1,378 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBy = exports.getByName = exports.update = exports.getById = exports.revoke = exports.list = exports.hash = exports.checkSaltIsDefined = exports.exists = exports.regenerate = exports.create = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fp_1 = require("lodash/fp");
+const utils_1 = require("@strapi/utils");
+const constants_1 = __importDefault(require("./constants"));
+const { ValidationError, NotFoundError } = utils_1.errors;
+/**
+ * @typedef {'read-only'|'full-access'|'custom'} TokenType
+ */
+/**
+ * @typedef ApiToken
+ *
+ * @property {number|string} id
+ * @property {string} name
+ * @property {string} description
+ * @property {string} accessKey
+ * @property {number} lastUsedAt
+ * @property {number} lifespan
+ * @property {number} expiresAt
+ * @property {TokenType} type
+ * @property {(number|ApiTokenPermission)[]} permissions
+ */
+/**
+ * @typedef ApiTokenPermission
+ *
+ * @property {number|string} id
+ * @property {string} action
+ * @property {ApiToken|number} token
+ */
+/** @constant {Array<string>} */
+const SELECT_FIELDS = [
+    'id',
+    'name',
+    'description',
+    'lastUsedAt',
+    'type',
+    'lifespan',
+    'expiresAt',
+    'createdAt',
+    'updatedAt',
+];
+/** @constant {Array<string>} */
+const POPULATE_FIELDS = ['permissions'];
+// TODO: we need to ensure the permissions are actually valid registered permissions!
+/**
+ * Assert that a token's permissions attribute is valid for its type
+ *
+ * @param {ApiToken} token
+ */
+const assertCustomTokenPermissionsValidity = (attributes) => {
+    // Ensure non-custom tokens doesn't have permissions
+    if (attributes.type !== constants_1.default.API_TOKEN_TYPE.CUSTOM && !(0, fp_1.isEmpty)(attributes.permissions)) {
+        throw new ValidationError('Non-custom tokens should not reference permissions');
+    }
+    // Custom type tokens should always have permissions attached to them
+    if (attributes.type === constants_1.default.API_TOKEN_TYPE.CUSTOM && !(0, fp_1.isArray)(attributes.permissions)) {
+        throw new ValidationError('Missing permissions attribute for custom token');
+    }
+    // Permissions provided for a custom type token should be valid/registered permissions UID
+    if (attributes.type === constants_1.default.API_TOKEN_TYPE.CUSTOM) {
+        const validPermissions = strapi.contentAPI.permissions.providers.action.keys();
+        const invalidPermissions = (0, fp_1.difference)(attributes.permissions, validPermissions);
+        if (!(0, fp_1.isEmpty)(invalidPermissions)) {
+            throw new ValidationError(`Unknown permissions provided: ${invalidPermissions.join(', ')}`);
+        }
+    }
+};
+/**
+ * Assert that a token's lifespan is valid
+ *
+ * @param {ApiToken} token
+ */
+const assertValidLifespan = ({ lifespan }) => {
+    if ((0, fp_1.isNil)(lifespan)) {
+        return;
+    }
+    if (!Object.values(constants_1.default.API_TOKEN_LIFESPANS).includes(lifespan)) {
+        throw new ValidationError(`lifespan must be one of the following values: 
+      ${Object.values(constants_1.default.API_TOKEN_LIFESPANS).join(', ')}`);
+    }
+};
+/**
+ * Flatten a token's database permissions objects to an array of strings
+ *
+ * @param {ApiToken} token
+ *
+ * @returns {ApiToken}
+ */
+const flattenTokenPermissions = (token) => {
+    if (!token)
+        return token;
+    return {
+        ...token,
+        permissions: (0, fp_1.isArray)(token.permissions) ? (0, fp_1.map)('action', token.permissions) : token.permissions,
+    };
+};
+/**
+ *  Get a token
+ *
+ * @param {Object} whereParams
+ * @param {string|number} whereParams.id
+ * @param {string} whereParams.name
+ * @param {number} whereParams.lastUsedAt
+ * @param {string} whereParams.description
+ * @param {string} whereParams.accessKey
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'> | null>}
+ */
+const getBy = async (whereParams = {}) => {
+    if (Object.keys(whereParams).length === 0) {
+        return null;
+    }
+    const token = await strapi
+        .query('admin::api-token')
+        .findOne({ select: SELECT_FIELDS, populate: POPULATE_FIELDS, where: whereParams });
+    if (!token)
+        return token;
+    return flattenTokenPermissions(token);
+};
+exports.getBy = getBy;
+/**
+ * Check if token exists
+ *
+ * @param {Object} whereParams
+ * @param {string|number} whereParams.id
+ * @param {string} whereParams.name
+ * @param {number} whereParams.lastUsedAt
+ * @param {string} whereParams.description
+ * @param {string} whereParams.accessKey
+ *
+ * @returns {Promise<boolean>}
+ */
+const exists = async (whereParams = {}) => {
+    const apiToken = await getBy(whereParams);
+    return !!apiToken;
+};
+exports.exists = exists;
+/**
+ * Return a secure sha512 hash of an accessKey
+ *
+ * @param {string} accessKey
+ *
+ * @returns {string}
+ */
+const hash = (accessKey) => {
+    return crypto_1.default
+        .createHmac('sha512', strapi.config.get('admin.apiToken.salt'))
+        .update(accessKey)
+        .digest('hex');
+};
+exports.hash = hash;
+/**
+ * @param {number} lifespan
+ *
+ * @returns { { lifespan: null | number, expiresAt: null | number } }
+ */
+const getExpirationFields = (lifespan) => {
+    // it must be nil or a finite number >= 0
+    const isValidNumber = Number.isFinite(lifespan) && lifespan > 0;
+    if (!isValidNumber && !(0, fp_1.isNil)(lifespan)) {
+        throw new ValidationError('lifespan must be a positive number or null');
+    }
+    return {
+        lifespan: lifespan || null,
+        expiresAt: lifespan ? Date.now() + lifespan : null,
+    };
+};
+/**
+ * Create a token and its permissions
+ *
+ * @param {Object} attributes
+ * @param {TokenType} attributes.type
+ * @param {string} attributes.name
+ * @param {number} attributes.lifespan
+ * @param {string[]} attributes.permissions
+ * @param {string} attributes.description
+ *
+ * @returns {Promise<ApiToken>}
+ */
+const create = async (attributes) => {
+    const accessKey = crypto_1.default.randomBytes(128).toString('hex');
+    assertCustomTokenPermissionsValidity(attributes);
+    assertValidLifespan(attributes);
+    // Create the token
+    const apiToken = await strapi.query('admin::api-token').create({
+        select: SELECT_FIELDS,
+        populate: POPULATE_FIELDS,
+        data: {
+            ...(0, fp_1.omit)('permissions', attributes),
+            accessKey: hash(accessKey),
+            ...getExpirationFields(attributes.lifespan),
+        },
+    });
+    const result = { ...apiToken, accessKey };
+    // If this is a custom type token, create and the related permissions
+    if (attributes.type === constants_1.default.API_TOKEN_TYPE.CUSTOM) {
+        // TODO: createMany doesn't seem to create relation properly, implement a better way rather than a ton of queries
+        // const permissionsCount = await strapi.query('admin::api-token-permission').createMany({
+        //   populate: POPULATE_FIELDS,
+        //   data: attributes.permissions.map(action => ({ action, token: apiToken })),
+        // });
+        await Promise.all((0, fp_1.uniq)(attributes.permissions).map((action) => strapi.query('admin::api-token-permission').create({
+            data: { action, token: apiToken },
+        })));
+        const currentPermissions = await strapi.entityService.load('admin::api-token', apiToken, 'permissions');
+        if (currentPermissions) {
+            Object.assign(result, { permissions: (0, fp_1.map)('action', currentPermissions) });
+        }
+    }
+    return result;
+};
+exports.create = create;
+/**
+ * @param {string|number} id
+ *
+ * @returns {Promise<ApiToken>}
+ */
+const regenerate = async (id) => {
+    const accessKey = crypto_1.default.randomBytes(128).toString('hex');
+    const apiToken = await strapi.query('admin::api-token').update({
+        select: ['id', 'accessKey'],
+        where: { id },
+        data: {
+            accessKey: hash(accessKey),
+        },
+    });
+    if (!apiToken) {
+        throw new NotFoundError('The provided token id does not exist');
+    }
+    return {
+        ...apiToken,
+        accessKey,
+    };
+};
+exports.regenerate = regenerate;
+/**
+ * @returns {void}
+ */
+const checkSaltIsDefined = () => {
+    if (!strapi.config.get('admin.apiToken.salt')) {
+        // TODO V5: stop reading API_TOKEN_SALT
+        if (process.env.API_TOKEN_SALT) {
+            process.emitWarning(`[deprecated] In future versions, Strapi will stop reading directly from the environment variable API_TOKEN_SALT. Please set apiToken.salt in config/admin.js instead.
+For security reasons, keep storing the secret in an environment variable and use env() to read it in config/admin.js (ex: \`apiToken: { salt: env('API_TOKEN_SALT') }\`). See https://docs.strapi.io/developer-docs/latest/setup-deployment-guides/configurations/optional/environment.html#configuration-using-environment-variables.`);
+            strapi.config.set('admin.apiToken.salt', process.env.API_TOKEN_SALT);
+        }
+        else {
+            throw new Error(`Missing apiToken.salt. Please set apiToken.salt in config/admin.js (ex: you can generate one using Node with \`crypto.randomBytes(16).toString('base64')\`).
+For security reasons, prefer storing the secret in an environment variable and read it in config/admin.js. See https://docs.strapi.io/developer-docs/latest/setup-deployment-guides/configurations/optional/environment.html#configuration-using-environment-variables.`);
+        }
+    }
+};
+exports.checkSaltIsDefined = checkSaltIsDefined;
+/**
+ * Return a list of all tokens and their permissions
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'>>}
+ */
+const list = async () => {
+    const tokens = await strapi.query('admin::api-token').findMany({
+        select: SELECT_FIELDS,
+        populate: POPULATE_FIELDS,
+        orderBy: { name: 'ASC' },
+    });
+    if (!tokens)
+        return tokens;
+    return tokens.map((token) => flattenTokenPermissions(token));
+};
+exports.list = list;
+/**
+ * Revoke (delete) a token
+ *
+ * @param {string|number} id
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'>>}
+ */
+const revoke = async (id) => {
+    return strapi
+        .query('admin::api-token')
+        .delete({ select: SELECT_FIELDS, populate: POPULATE_FIELDS, where: { id } });
+};
+exports.revoke = revoke;
+/**
+ * Retrieve a token by id
+ *
+ * @param {string|number} id
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'>>}
+ */
+const getById = async (id) => {
+    return getBy({ id });
+};
+exports.getById = getById;
+/**
+ * Retrieve a token by name
+ *
+ * @param {string} name
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'>>}
+ */
+const getByName = async (name) => {
+    return getBy({ name });
+};
+exports.getByName = getByName;
+/**
+ * Update a token and its permissions
+ *
+ * @param {string|number} id
+ * @param {Object} attributes
+ * @param {TokenType} attributes.type
+ * @param {string} attributes.name
+ * @param {number} attributes.lastUsedAt
+ * @param {string[]} attributes.permissions
+ * @param {string} attributes.description
+ *
+ * @returns {Promise<Omit<ApiToken, 'accessKey'>>}
+ */
+const update = async (id, attributes) => {
+    // retrieve token without permissions
+    const originalToken = await strapi.query('admin::api-token').findOne({ where: { id } });
+    if (!originalToken) {
+        throw new NotFoundError('Token not found');
+    }
+    const changingTypeToCustom = attributes.type === constants_1.default.API_TOKEN_TYPE.CUSTOM &&
+        originalToken.type !== constants_1.default.API_TOKEN_TYPE.CUSTOM;
+    // if we're updating the permissions on any token type, or changing from non-custom to custom, ensure they're still valid
+    // if neither type nor permissions are changing, we don't need to validate again or else we can't allow partial update
+    if (attributes.permissions || changingTypeToCustom) {
+        assertCustomTokenPermissionsValidity({
+            ...originalToken,
+            ...attributes,
+            type: attributes.type || originalToken.type,
+        });
+    }
+    assertValidLifespan(attributes);
+    const updatedToken = await strapi.query('admin::api-token').update({
+        select: SELECT_FIELDS,
+        where: { id },
+        data: (0, fp_1.omit)('permissions', attributes),
+    });
+    // custom tokens need to have their permissions updated as well
+    if (updatedToken.type === constants_1.default.API_TOKEN_TYPE.CUSTOM && attributes.permissions) {
+        const currentPermissionsResult = await strapi.entityService.load('admin::api-token', updatedToken, 'permissions');
+        const currentPermissions = (0, fp_1.map)('action', currentPermissionsResult || []);
+        const newPermissions = (0, fp_1.uniq)(attributes.permissions);
+        const actionsToDelete = (0, fp_1.difference)(currentPermissions, newPermissions);
+        const actionsToAdd = (0, fp_1.difference)(newPermissions, currentPermissions);
+        // TODO: improve efficiency here
+        // method using a loop -- works but very inefficient
+        await Promise.all(actionsToDelete.map((action) => strapi.query('admin::api-token-permission').delete({
+            where: { action, token: id },
+        })));
+        // TODO: improve efficiency here
+        // using a loop -- works but very inefficient
+        await Promise.all(actionsToAdd.map((action) => strapi.query('admin::api-token-permission').create({
+            data: { action, token: id },
+        })));
+    }
+    // if type is not custom, make sure any old permissions get removed
+    else if (updatedToken.type !== constants_1.default.API_TOKEN_TYPE.CUSTOM) {
+        await strapi.query('admin::api-token-permission').delete({
+            where: { token: id },
+        });
+    }
+    // retrieve permissions
+    const permissionsFromDb = await strapi.entityService.load('admin::api-token', updatedToken, 'permissions');
+    return {
+        ...updatedToken,
+        permissions: permissionsFromDb ? permissionsFromDb.map((p) => p.action) : undefined,
+    };
+};
+exports.update = update;
+//# sourceMappingURL=api-token.js.map

package/dist/server/services/api-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-token.js","sourceRoot":"","sources":["../../../server/src/services/api-token.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,kCAAiF;AACjF,yCAAuC;AACvC,4DAAoC;AAEpC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,cAAM,CAAC;AAElD;;GAEG;AAEH;;;;;;;;;;;;GAYG;AAEH;;;;;;GAMG;AAEH,gCAAgC;AAChC,MAAM,aAAa,GAAG;IACpB,IAAI;IACJ,MAAM;IACN,aAAa;IACb,YAAY;IACZ,MAAM;IACN,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,gCAAgC;AAChC,MAAM,eAAe,GAAG,CAAC,aAAa,CAAC,CAAC;AAExC,qFAAqF;AAErF;;;;GAIG;AACH,MAAM,oCAAoC,GAAG,CAAC,UAAe,EAAE,EAAE;IAC/D,oDAAoD;IACpD,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,IAAA,YAAO,EAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC3F,MAAM,IAAI,eAAe,CAAC,oDAAoD,CAAC,CAAC;KACjF;IAED,qEAAqE;IACrE,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,IAAA,YAAO,EAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC3F,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;KAC7E;IAED,0FAA0F;IAC1F,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,EAAE;QACvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,kBAAkB,GAAG,IAAA,eAAU,EAAC,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAQ,CAAC;QAEvF,IAAI,CAAC,IAAA,YAAO,EAAC,kBAAkB,CAAC,EAAE;YAChC,MAAM,IAAI,eAAe,CAAC,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC7F;KACF;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,EAAE,QAAQ,EAAO,EAAE,EAAE;IAChD,IAAI,IAAA,UAAK,EAAC,QAAQ,CAAC,EAAE;QACnB,OAAO;KACR;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAS,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACpE,MAAM,IAAI,eAAe,CACvB;QACE,MAAM,CAAC,MAAM,CAAC,mBAAS,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;KACH;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,CAAC,KAAU,EAAE,EAAE;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO;QACL,GAAG,KAAK;QACR,WAAW,EAAE,IAAA,YAAO,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAA,QAAG,EAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;KAC/F,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,GAAG,EAAE,EAAE,EAAE;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;QACzC,OAAO,IAAI,CAAC;KACb;IAED,MAAM,KAAK,GAAG,MAAM,MAAM;SACvB,KAAK,CAAC,kBAAkB,CAAC;SACzB,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAErF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC;AA6TA,sBAAK;AA3TP;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,GAAG,KAAK,EAAE,WAAW,GAAG,EAAE,EAAE,EAAE;IACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAE1C,OAAO,CAAC,CAAC,QAAQ,CAAC;AACpB,CAAC,CAAC;AAmSA,wBAAM;AAjSR;;;;;;GAMG;AACH,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE;IACjC,OAAO,gBAAM;SACV,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;SAC9D,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC,CAAC;AAuRA,oBAAI;AArRN;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,QAAa,EAAE,EAAE;IAC5C,yCAAyC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,aAAa,IAAI,CAAC,IAAA,UAAK,EAAC,QAAQ,CAAC,EAAE;QACtC,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;KACzE;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,IAAI,IAAI;QAC1B,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,GAAG,KAAK,EAAE,UAAe,EAAE,EAAE;IACvC,MAAM,SAAS,GAAG,gBAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1D,oCAAoC,CAAC,UAAU,CAAC,CAAC;IACjD,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEhC,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAC7D,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE;YACJ,GAAG,IAAA,SAAI,EAAC,aAAa,EAAE,UAAU,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;YAC1B,GAAG,mBAAmB,CAAC,UAAU,CAAC,QAAQ,CAAC;SAC5C;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;IAE1C,qEAAqE;IACrE,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,EAAE;QACvD,iHAAiH;QACjH,0FAA0F;QAC1F,+BAA+B;QAC/B,+EAA+E;QAC/E,MAAM;QACN,MAAM,OAAO,CAAC,GAAG,CACf,IAAA,SAAI,EAAC,UAAU,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC;YACjD,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SAClC,CAAC,CACH,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CACxD,kBAAkB,EAClB,QAAQ,EACR,aAAa,CACd,CAAC;QAEF,IAAI,kBAAkB,EAAE;YACtB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAA,QAAG,EAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;SAC3E;KACF;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAqMA,wBAAM;AAnMR;;;;GAIG;AACH,MAAM,UAAU,GAAG,KAAK,EAAE,EAAO,EAAE,EAAE;IACnC,MAAM,SAAS,GAAG,gBAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAC7D,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;SAC3B;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;KACjE;IAED,OAAO;QACL,GAAG,QAAQ;QACX,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AA4KA,gCAAU;AA1KZ;;GAEG;AACH,MAAM,kBAAkB,GAAG,GAAG,EAAE;IAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE;QAC7C,uCAAuC;QACvC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAC9B,OAAO,CAAC,WAAW,CAAC;uUAC6S,CAAC,CAAC;YAEnU,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;SACtE;aAAM;YACL,MAAM,IAAI,KAAK,CACb;wQACgQ,CACjQ,CAAC;SACH;KACF;AACH,CAAC,CAAC;AA0JA,gDAAkB;AAxJpB;;;;GAIG;AACH,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QAC7D,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;KACzB,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC;AA4IA,oBAAI;AA1IN;;;;;;GAMG;AACH,MAAM,MAAM,GAAG,KAAK,EAAE,EAAO,EAAE,EAAE;IAC/B,OAAO,MAAM;SACV,KAAK,CAAC,kBAAkB,CAAC;SACzB,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC,CAAC;AAgIA,wBAAM;AA9HR;;;;;;GAMG;AACH,MAAM,OAAO,GAAG,KAAK,EAAE,EAAO,EAAE,EAAE;IAChC,OAAO,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC,CAAC;AAsHA,0BAAO;AApHT;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,KAAK,EAAE,IAAS,EAAE,EAAE;IACpC,OAAO,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AACzB,CAAC,CAAC;AA6GA,8BAAS;AA3GX;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,GAAG,KAAK,EAAE,EAAO,EAAE,UAAe,EAAE,EAAE;IAChD,qCAAqC;IACrC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAExF,IAAI,CAAC,aAAa,EAAE;QAClB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC;KAC5C;IAED,MAAM,oBAAoB,GACxB,UAAU,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM;QACnD,aAAa,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,CAAC;IAEzD,yHAAyH;IACzH,sHAAsH;IACtH,IAAI,UAAU,CAAC,WAAW,IAAI,oBAAoB,EAAE;QAClD,oCAAoC,CAAC;YACnC,GAAG,aAAa;YAChB,GAAG,UAAU;YACb,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI;SAC5C,CAAC,CAAC;KACJ;IAED,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEhC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE,IAAA,SAAI,EAAC,aAAa,EAAE,UAAU,CAAC;KACtC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,IAAI,YAAY,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE;QACnF,MAAM,wBAAwB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAC9D,kBAAkB,EAClB,YAAY,EACZ,aAAa,CACd,CAAC;QAEF,MAAM,kBAAkB,GAAG,IAAA,QAAG,EAAC,QAAQ,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,IAAA,SAAI,EAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAEpD,MAAM,eAAe,GAAG,IAAA,eAAU,EAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,IAAA,eAAU,EAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAEpE,gCAAgC;QAChC,oDAAoD;QACpD,MAAM,OAAO,CAAC,GAAG,CACf,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAC7B,CAAC,CACH,CACF,CAAC;QAEF,gCAAgC;QAChC,6CAA6C;QAC7C,MAAM,OAAO,CAAC,GAAG,CACf,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1B,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC;YACjD,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAC5B,CAAC,CACH,CACF,CAAC;KACH;IACD,mEAAmE;SAC9D,IAAI,YAAY,CAAC,IAAI,KAAK,mBAAS,CAAC,cAAc,CAAC,MAAM,EAAE;QAC9D,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;SACrB,CAAC,CAAC;KACJ;IAED,uBAAuB;IACvB,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CACvD,kBAAkB,EAClB,YAAY,EACZ,aAAa,CACd,CAAC;IAEF,OAAO;QACL,GAAG,YAAY;QACf,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KACzF,CAAC;AACJ,CAAC,CAAC;AAWA,wBAAM"}

package/dist/server/services/auth.d.ts

@@ -0,0 +1,42 @@
+/**
+ * hashes a password
+ * @param {string} password - password to hash
+ * @returns {string} hashed password
+ */
+declare const hashPassword: (password: string) => Promise<string>;
+/**
+ * Validate a password
+ * @param {string} password
+ * @param {string} hash
+ * @returns {Promise<boolean>} is the password valid
+ */
+declare const validatePassword: (password: string, hash: string) => Promise<boolean>;
+/**
+ * Check login credentials
+ * @param {Object} options
+ * @param {string} options.email
+ * @param {string} options.password
+ */
+declare const checkCredentials: ({ email, password }: {
+    email: string;
+    password: string;
+}) => Promise<any[]>;
+/**
+ * Send an email to the user if it exists or do nothing
+ * @param {Object} param params
+ * @param {string} param.email user email for which to reset the password
+ */
+declare const forgotPassword: ({ email }?: {
+    email: string;
+}) => Promise<any>;
+/**
+ * Reset a user password
+ * @param {Object} param params
+ * @param {string} param.resetPasswordToken token generated to request a password reset
+ * @param {string} param.password new user password
+ */
+declare const resetPassword: ({ resetPasswordToken, password }?: {
+    resetPasswordToken: string;
+    password: string;
+}) => Promise<any>;
+export { checkCredentials, validatePassword, hashPassword, forgotPassword, resetPassword };

package/dist/server/services/auth.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetPassword = exports.forgotPassword = exports.hashPassword = exports.validatePassword = exports.checkCredentials = void 0;
+const bcryptjs_1 = __importDefault(require("bcryptjs"));
+const lodash_1 = __importDefault(require("lodash"));
+const utils_1 = require("@strapi/utils");
+const utils_2 = require("../utils");
+const { ApplicationError } = utils_1.errors;
+/**
+ * hashes a password
+ * @param {string} password - password to hash
+ * @returns {string} hashed password
+ */
+const hashPassword = (password) => bcryptjs_1.default.hash(password, 10);
+exports.hashPassword = hashPassword;
+/**
+ * Validate a password
+ * @param {string} password
+ * @param {string} hash
+ * @returns {Promise<boolean>} is the password valid
+ */
+const validatePassword = (password, hash) => bcryptjs_1.default.compare(password, hash);
+exports.validatePassword = validatePassword;
+/**
+ * Check login credentials
+ * @param {Object} options
+ * @param {string} options.email
+ * @param {string} options.password
+ */
+const checkCredentials = async ({ email, password }) => {
+    const user = await strapi.query('admin::user').findOne({ where: { email } });
+    if (!user || !user.password) {
+        return [null, false, { message: 'Invalid credentials' }];
+    }
+    const isValid = await validatePassword(password, user.password);
+    if (!isValid) {
+        return [null, false, { message: 'Invalid credentials' }];
+    }
+    if (!(user.isActive === true)) {
+        return [null, false, { message: 'User not active' }];
+    }
+    return [null, user];
+};
+exports.checkCredentials = checkCredentials;
+/**
+ * Send an email to the user if it exists or do nothing
+ * @param {Object} param params
+ * @param {string} param.email user email for which to reset the password
+ */
+const forgotPassword = async ({ email } = {}) => {
+    const user = await strapi.query('admin::user').findOne({ where: { email, isActive: true } });
+    if (!user) {
+        return;
+    }
+    const resetPasswordToken = (0, utils_2.getService)('token').createToken();
+    await (0, utils_2.getService)('user').updateById(user.id, { resetPasswordToken });
+    // Send an email to the admin.
+    const url = `${(0, utils_1.getAbsoluteAdminUrl)(strapi.config)}/auth/reset-password?code=${resetPasswordToken}`;
+    return strapi
+        .plugin('email')
+        .service('email')
+        .sendTemplatedEmail({
+        to: user.email,
+        from: strapi.config.get('admin.forgotPassword.from'),
+        replyTo: strapi.config.get('admin.forgotPassword.replyTo'),
+    }, strapi.config.get('admin.forgotPassword.emailTemplate'), {
+        url,
+        user: lodash_1.default.pick(user, ['email', 'firstname', 'lastname', 'username']),
+    })
+        .catch((err) => {
+        // log error server side but do not disclose it to the user to avoid leaking informations
+        strapi.log.error(err);
+    });
+};
+exports.forgotPassword = forgotPassword;
+/**
+ * Reset a user password
+ * @param {Object} param params
+ * @param {string} param.resetPasswordToken token generated to request a password reset
+ * @param {string} param.password new user password
+ */
+const resetPassword = async ({ resetPasswordToken, password } = {}) => {
+    const matchingUser = await strapi
+        .query('admin::user')
+        .findOne({ where: { resetPasswordToken, isActive: true } });
+    if (!matchingUser) {
+        throw new ApplicationError();
+    }
+    return (0, utils_2.getService)('user').updateById(matchingUser.id, {
+        password,
+        resetPasswordToken: null,
+    });
+};
+exports.resetPassword = resetPassword;
+//# sourceMappingURL=auth.js.map

package/dist/server/services/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../server/src/services/auth.ts"],"names":[],"mappings":";;;;;;AAAA,wDAA8B;AAC9B,oDAAuB;AACvB,yCAA4D;AAC5D,oCAAsC;AAEtC,MAAM,EAAE,gBAAgB,EAAE,GAAG,cAAM,CAAC;AAEpC;;;;GAIG;AACH,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,kBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAmGxB,oCAAY;AAjGzD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,kBAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AA2FjE,4CAAgB;AAzF3C;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAuC,EAAE,EAAE;IAC1F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;KAC1D;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEhE,IAAI,CAAC,OAAO,EAAE;QACZ,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;KAC1D;IAED,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE;QAC7B,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;KACtD;IAED,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC;AAiEO,4CAAgB;AA/DzB;;;;GAIG;AACH,MAAM,cAAc,GAAG,KAAK,EAAE,EAAE,KAAK,KAAK,EAAuB,EAAE,EAAE;IACnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE7F,IAAI,CAAC,IAAI,EAAE;QACT,OAAO;KACR;IAED,MAAM,kBAAkB,GAAG,IAAA,kBAAU,EAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,IAAA,kBAAU,EAAC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAErE,8BAA8B;IAC9B,MAAM,GAAG,GAAG,GAAG,IAAA,2BAAmB,EAChC,MAAM,CAAC,MAAM,CACd,6BAA6B,kBAAkB,EAAE,CAAC;IACnD,OAAO,MAAM;SACV,MAAM,CAAC,OAAO,CAAC;SACf,OAAO,CAAC,OAAO,CAAC;SAChB,kBAAkB,CACjB;QACE,EAAE,EAAE,IAAI,CAAC,KAAK;QACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACpD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC;KAC3D,EACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,EACvD;QACE,GAAG;QACH,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;KACnE,CACF;SACA,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;QAClB,yFAAyF;QACzF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAyByD,wCAAc;AAvBzE;;;;;GAKG;AACH,MAAM,aAAa,GAAG,KAAK,EACzB,EAAE,kBAAkB,EAAE,QAAQ,KAAK,EAAsD,EACzF,EAAE;IACF,MAAM,YAAY,GAAG,MAAM,MAAM;SAC9B,KAAK,CAAC,aAAa,CAAC;SACpB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE9D,IAAI,CAAC,YAAY,EAAE;QACjB,MAAM,IAAI,gBAAgB,EAAE,CAAC;KAC9B;IAED,OAAO,IAAA,kBAAU,EAAC,MAAM,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE;QACpD,QAAQ;QACR,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AAEyE,sCAAa"}

package/dist/server/services/condition.d.ts

@@ -0,0 +1,2 @@
+declare const isValidCondition: (condition: any) => boolean;
+export { isValidCondition };

package/dist/server/services/condition.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidCondition = void 0;
+const fp_1 = require("lodash/fp");
+const utils_1 = require("../utils");
+const isValidCondition = (condition) => {
+    const { conditionProvider } = (0, utils_1.getService)('permission');
+    return (0, fp_1.isString)(condition) && conditionProvider.has(condition);
+};
+exports.isValidCondition = isValidCondition;
+//# sourceMappingURL=condition.js.map

package/dist/server/services/condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../server/src/services/condition.ts"],"names":[],"mappings":";;;AAAA,kCAAqC;AACrC,oCAAsC;AAEtC,MAAM,gBAAgB,GAAG,CAAC,SAAc,EAAE,EAAE;IAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAA,kBAAU,EAAC,YAAY,CAAC,CAAC;IAEvD,OAAO,IAAA,aAAQ,EAAC,SAAS,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC;AAEO,4CAAgB"}

package/dist/server/services/constants.d.ts

@@ -0,0 +1,33 @@
+declare const constants: {
+    CONTENT_TYPE_SECTION: string;
+    SUPER_ADMIN_CODE: string;
+    EDITOR_CODE: string;
+    AUTHOR_CODE: string;
+    READ_ACTION: string;
+    CREATE_ACTION: string;
+    UPDATE_ACTION: string;
+    DELETE_ACTION: string;
+    PUBLISH_ACTION: string;
+    API_TOKEN_TYPE: {
+        READ_ONLY: string;
+        FULL_ACCESS: string;
+        CUSTOM: string;
+    };
+    API_TOKEN_LIFESPANS: {
+        UNLIMITED: null;
+        DAYS_7: number;
+        DAYS_30: number;
+        DAYS_90: number;
+    };
+    TRANSFER_TOKEN_TYPE: {
+        PUSH: string;
+        PULL: string;
+    };
+    TRANSFER_TOKEN_LIFESPANS: {
+        UNLIMITED: null;
+        DAYS_7: number;
+        DAYS_30: number;
+        DAYS_90: number;
+    };
+};
+export = constants;

package/dist/server/services/constants.js

@@ -0,0 +1,37 @@
+"use strict";
+const DAY_IN_MS = 24 * 60 * 60 * 1000;
+const constants = {
+    CONTENT_TYPE_SECTION: 'contentTypes',
+    SUPER_ADMIN_CODE: 'strapi-super-admin',
+    EDITOR_CODE: 'strapi-editor',
+    AUTHOR_CODE: 'strapi-author',
+    READ_ACTION: 'plugin::content-manager.explorer.read',
+    CREATE_ACTION: 'plugin::content-manager.explorer.create',
+    UPDATE_ACTION: 'plugin::content-manager.explorer.update',
+    DELETE_ACTION: 'plugin::content-manager.explorer.delete',
+    PUBLISH_ACTION: 'plugin::content-manager.explorer.publish',
+    API_TOKEN_TYPE: {
+        READ_ONLY: 'read-only',
+        FULL_ACCESS: 'full-access',
+        CUSTOM: 'custom',
+    },
+    // The front-end only displays these values
+    API_TOKEN_LIFESPANS: {
+        UNLIMITED: null,
+        DAYS_7: 7 * DAY_IN_MS,
+        DAYS_30: 30 * DAY_IN_MS,
+        DAYS_90: 90 * DAY_IN_MS,
+    },
+    TRANSFER_TOKEN_TYPE: {
+        PUSH: 'push',
+        PULL: 'pull',
+    },
+    TRANSFER_TOKEN_LIFESPANS: {
+        UNLIMITED: null,
+        DAYS_7: 7 * DAY_IN_MS,
+        DAYS_30: 30 * DAY_IN_MS,
+        DAYS_90: 90 * DAY_IN_MS,
+    },
+};
+module.exports = constants;
+//# sourceMappingURL=constants.js.map

package/dist/server/services/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../server/src/services/constants.ts"],"names":[],"mappings":";AAAA,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAM,SAAS,GAAG;IAChB,oBAAoB,EAAE,cAAc;IACpC,gBAAgB,EAAE,oBAAoB;IACtC,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,uCAAuC;IACpD,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,yCAAyC;IACxD,cAAc,EAAE,0CAA0C;IAC1D,cAAc,EAAE;QACd,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,QAAQ;KACjB;IACD,2CAA2C;IAC3C,mBAAmB,EAAE;QACnB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,SAAS;QACrB,OAAO,EAAE,EAAE,GAAG,SAAS;QACvB,OAAO,EAAE,EAAE,GAAG,SAAS;KACxB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;KACb;IACD,wBAAwB,EAAE;QACxB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,SAAS;QACrB,OAAO,EAAE,EAAE,GAAG,SAAS;QACvB,OAAO,EAAE,EAAE,GAAG,SAAS;KACxB;CACF,CAAC;AAEF,iBAAS,SAAS,CAAC"}