@strapi/admin 4.16.2 → 4.17.1

package/ee/server/constants/workflows.js

@@ -1,33 +0,0 @@
-'use strict';
-
-// TODO concatenate admin + content type singular name
-module.exports = {
-  WORKFLOW_MODEL_UID: 'admin::workflow',
-  STAGE_MODEL_UID: 'admin::workflow-stage',
-  STAGE_TRANSITION_UID: 'admin::review-workflows.stage.transition',
-  STAGE_DEFAULT_COLOR: '#4945FF',
-  ENTITY_STAGE_ATTRIBUTE: 'strapi_stage',
-  ENTITY_ASSIGNEE_ATTRIBUTE: 'strapi_assignee',
-  MAX_WORKFLOWS: 200,
-  MAX_STAGES_PER_WORKFLOW: 200,
-  ERRORS: {
-    WORKFLOW_WITHOUT_STAGES: 'A workflow must have at least one stage.',
-    WORKFLOWS_LIMIT:
-      'You’ve reached the limit of workflows in your plan. Delete a workflow or contact Sales to enable more workflows.',
-    STAGES_LIMIT:
-      'You’ve reached the limit of stages for this workflow in your plan. Try deleting some stages or contact Sales to enable more stages.',
-    DUPLICATED_STAGE_NAME: 'Stage names must be unique.',
-  },
-  WORKFLOW_POPULATE: {
-    stages: {
-      populate: {
-        permissions: {
-          fields: ['action', 'actionParameters'],
-          populate: {
-            role: { fields: ['id', 'name'] },
-          },
-        },
-      },
-    },
-  },
-};

package/ee/server/content-types/index.js

@@ -1,9 +0,0 @@
-'use strict';
-
-const workflow = require('./workflow');
-const workflowStage = require('./workflow-stage');
-
-module.exports = {
-  workflow,
-  'workflow-stage': workflowStage,
-};

package/ee/server/content-types/workflow/index.js

@@ -1,41 +0,0 @@
-'use strict';
-
-module.exports = {
-  schema: {
-    collectionName: 'strapi_workflows',
-    info: {
-      name: 'Workflow',
-      description: '',
-      singularName: 'workflow',
-      pluralName: 'workflows',
-      displayName: 'Workflow',
-    },
-    options: {},
-    pluginOptions: {
-      'content-manager': {
-        visible: false,
-      },
-      'content-type-builder': {
-        visible: false,
-      },
-    },
-    attributes: {
-      name: {
-        type: 'string',
-        required: true,
-        unique: true,
-      },
-      stages: {
-        type: 'relation',
-        target: 'admin::workflow-stage',
-        relation: 'oneToMany',
-        mappedBy: 'workflow',
-      },
-      contentTypes: {
-        type: 'json',
-        required: true,
-        default: [],
-      },
-    },
-  },
-};

package/ee/server/content-types/workflow-stage/index.js

@@ -1,51 +0,0 @@
-'use strict';
-
-const { STAGE_DEFAULT_COLOR } = require('../../constants/workflows');
-
-module.exports = {
-  schema: {
-    collectionName: 'strapi_workflows_stages',
-    info: {
-      name: 'Workflow Stage',
-      description: '',
-      singularName: 'workflow-stage',
-      pluralName: 'workflow-stages',
-      displayName: 'Stages',
-    },
-    options: {
-      version: '1.1.0',
-    },
-    pluginOptions: {
-      'content-manager': {
-        visible: false,
-      },
-      'content-type-builder': {
-        visible: false,
-      },
-    },
-    attributes: {
-      name: {
-        type: 'string',
-        configurable: false,
-      },
-      color: {
-        type: 'string',
-        configurable: false,
-        default: STAGE_DEFAULT_COLOR,
-      },
-      workflow: {
-        type: 'relation',
-        target: 'admin::workflow',
-        relation: 'manyToOne',
-        inversedBy: 'stages',
-        configurable: false,
-      },
-      permissions: {
-        type: 'relation',
-        target: 'admin::permission',
-        relation: 'manyToMany',
-        configurable: false,
-      },
-    },
-  },
-};

package/ee/server/controllers/__tests__/stages.test.js

@@ -1,174 +0,0 @@
-'use strict';
-
-const { ENTITY_STAGE_ATTRIBUTE } = require('../../constants/workflows');
-const stages = require('../workflows/stages');
-
-describe('Stages', () => {
-  const nonExistantEntityId = 1;
-  const entityId = 2;
-
-  const numberOfStages = 4;
-  const entityStageId = 1;
-
-  const readMock = jest.fn(() => false);
-
-  global.strapi = {
-    admin: {
-      services: {
-        'stage-permissions': {
-          can: jest.fn(() => true),
-        },
-        workflows: {
-          count() {
-            return 1;
-          },
-          getAssignedWorkflow() {
-            return {
-              stages: Array.from({ length: numberOfStages }, (_, i) => ({ id: i + 1 })),
-            };
-          },
-        },
-      },
-    },
-    plugins: {
-      'content-manager': {
-        services: {
-          'permission-checker': {
-            create() {
-              return {
-                cannot: {
-                  read: readMock,
-                },
-              };
-            },
-          },
-        },
-        service(name) {
-          return this.services[name];
-        },
-      },
-    },
-    plugin(name) {
-      return this.plugins[name];
-    },
-    entityService: {
-      findOne: jest.fn((_, id) => {
-        if (id === nonExistantEntityId) {
-          return Promise.resolve(null);
-        }
-
-        return Promise.resolve({
-          id: entityId,
-          [ENTITY_STAGE_ATTRIBUTE]: { id: entityStageId },
-        });
-      }),
-    },
-  };
-
-  const modelUID = 'UID';
-
-  const baseCtx = {
-    state: {
-      userAbility: {},
-    },
-  };
-
-  describe('listAvailableStages', () => {
-    test('non existant entity', async () => {
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: nonExistantEntityId,
-        },
-        throw(status, message) {
-          const error = new Error(message);
-          error.status = status;
-          throw error;
-        },
-      };
-
-      let error;
-      try {
-        await stages.listAvailableStages(ctx);
-      } catch (e) {
-        error = e;
-      }
-
-      expect(error).toBeDefined();
-      expect(error.status).toBe(404);
-    });
-
-    test('cannot transition', async () => {
-      global.strapi.admin.services['stage-permissions'].can.mockReturnValueOnce(false);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(0);
-    });
-
-    test('cannot read', async () => {
-      readMock.mockReturnValueOnce(true);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-        forbidden() {
-          const error = new Error();
-          error.status = 403;
-          throw error;
-        },
-      };
-
-      let error;
-      try {
-        await stages.listAvailableStages(ctx);
-      } catch (e) {
-        error = e;
-      }
-      expect(error.status).toBe(403);
-    });
-
-    test('cannot transition', async () => {
-      global.strapi.admin.services['stage-permissions'].can.mockReturnValueOnce(false);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(0);
-    });
-
-    test('can transition', async () => {
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(numberOfStages - 1);
-      expect(ctx.body.data).not.toContainEqual({ id: entityStageId });
-    });
-  });
-});

package/ee/server/controllers/admin.js

@@ -1,50 +0,0 @@
-'use strict';
-
-const { isNil } = require('lodash/fp');
-// eslint-disable-next-line node/no-extraneous-require
-const ee = require('@strapi/strapi/dist/utils/ee');
-const { env } = require('@strapi/utils');
-const { getService } = require('../../../server/utils');
-
-module.exports = {
-  async licenseLimitInformation() {
-    const permittedSeats = ee.seats;
-
-    let shouldNotify = false;
-    let licenseLimitStatus = null;
-    let enforcementUserCount;
-
-    const currentActiveUserCount = await getService('user').getCurrentActiveUserCount();
-
-    const eeDisabledUsers = await getService('seat-enforcement').getDisabledUserList();
-
-    if (eeDisabledUsers) {
-      enforcementUserCount = currentActiveUserCount + eeDisabledUsers.length;
-    } else {
-      enforcementUserCount = currentActiveUserCount;
-    }
-
-    if (!isNil(permittedSeats) && enforcementUserCount > permittedSeats) {
-      shouldNotify = true;
-      licenseLimitStatus = 'OVER_LIMIT';
-    }
-
-    if (!isNil(permittedSeats) && enforcementUserCount === permittedSeats) {
-      shouldNotify = true;
-      licenseLimitStatus = 'AT_LIMIT';
-    }
-
-    const data = {
-      enforcementUserCount,
-      currentActiveUserCount,
-      permittedSeats,
-      shouldNotify,
-      shouldStopCreate: isNil(permittedSeats) ? false : currentActiveUserCount >= permittedSeats,
-      licenseLimitStatus,
-      isHostedOnStrapiCloud: env('STRAPI_HOSTING', null) === 'strapi.cloud',
-      features: ee.features.list() ?? [],
-    };
-
-    return { data };
-  },
-};

package/ee/server/controllers/audit-logs.js

@@ -1,24 +0,0 @@
-'use strict';
-
-const { validateFindMany } = require('../validation/audit-logs');
-
-module.exports = {
-  async findMany(ctx) {
-    const { query } = ctx.request;
-    await validateFindMany(query);
-
-    const auditLogs = strapi.container.get('audit-logs');
-    const body = await auditLogs.findMany(query);
-
-    ctx.body = body;
-  },
-
-  async findOne(ctx) {
-    const { id } = ctx.params;
-
-    const auditLogs = strapi.container.get('audit-logs');
-    const body = await auditLogs.findOne(id);
-
-    ctx.body = body;
-  },
-};

package/ee/server/controllers/authentication/constants.js

@@ -1,11 +0,0 @@
-'use strict';
-
-const PROVIDER_REDIRECT_BASE = '/auth/login';
-const PROVIDER_REDIRECT_SUCCESS = `${PROVIDER_REDIRECT_BASE}/success`;
-const PROVIDER_REDIRECT_ERROR = `${PROVIDER_REDIRECT_BASE}/error`;
-
-module.exports = {
-  PROVIDER_REDIRECT_BASE,
-  PROVIDER_REDIRECT_SUCCESS,
-  PROVIDER_REDIRECT_ERROR,
-};

package/ee/server/controllers/authentication/index.js

@@ -1,11 +0,0 @@
-'use strict';
-
-const middlewares = require('./middlewares');
-const constants = require('./constants');
-const utils = require('./utils');
-
-module.exports = {
-  middlewares,
-  constants,
-  utils,
-};

package/ee/server/controllers/authentication/middlewares.js

@@ -1,117 +0,0 @@
-'use strict';
-
-const passport = require('koa-passport');
-
-const { getService } = require('../../../../server/utils');
-const utils = require('./utils');
-
-const defaultConnectionError = () => new Error('Invalid connection payload');
-
-const authenticate = async (ctx, next) => {
-  const {
-    params: { provider },
-  } = ctx;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-
-  return passport.authenticate(provider, null, async (error, profile) => {
-    if (error || !profile || !profile.email) {
-      if (error) {
-        strapi.log.error(error);
-      }
-
-      strapi.eventHub.emit('admin.auth.error', {
-        error: error || defaultConnectionError(),
-        provider,
-      });
-
-      return ctx.redirect(redirectUrls.error);
-    }
-
-    const user = await getService('user').findOneByEmail(profile.email);
-    const scenario = user ? existingUserScenario : nonExistingUserScenario;
-
-    return scenario(ctx, next)(user || profile, provider);
-  })(ctx, next);
-};
-
-const existingUserScenario = (ctx, next) => async (user, provider) => {
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-
-  if (!user.isActive) {
-    strapi.eventHub.emit('admin.auth.error', {
-      error: new Error(`Deactivated user tried to login (${user.id})`),
-      provider,
-    });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  ctx.state.user = user;
-  return next();
-};
-
-const nonExistingUserScenario = (ctx, next) => async (profile, provider) => {
-  const { email, firstname, lastname, username } = profile;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-  const adminStore = await utils.getAdminStore();
-  const { providers } = await adminStore.get({ key: 'auth' });
-
-  // We need at least the username or the firstname/lastname combination to register a new user
-  const isMissingRegisterFields = !username && (!firstname || !lastname);
-
-  if (!providers.autoRegister || !providers.defaultRole || isMissingRegisterFields) {
-    strapi.eventHub.emit('admin.auth.error', { error: defaultConnectionError(), provider });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  const defaultRole = await getService('role').findOne({ id: providers.defaultRole });
-
-  // If the default role has been misconfigured, redirect with an error
-  if (!defaultRole) {
-    strapi.eventHub.emit('admin.auth.error', { error: defaultConnectionError(), provider });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  // Register a new user with the information given by the provider and login with it
-  ctx.state.user = await getService('user').create({
-    email,
-    username,
-    firstname,
-    lastname,
-    roles: [defaultRole.id],
-    isActive: true,
-    registrationToken: null,
-  });
-
-  strapi.eventHub.emit('admin.auth.autoRegistration', {
-    user: ctx.state.user,
-    provider,
-  });
-
-  return next();
-};
-
-const redirectWithAuth = (ctx) => {
-  const {
-    params: { provider },
-  } = ctx;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-  const domain = strapi.config.get('admin.auth.domain');
-  const { user } = ctx.state;
-
-  const jwt = getService('token').createJwtToken(user);
-
-  const isProduction = strapi.config.get('environment') === 'production';
-
-  const cookiesOptions = { httpOnly: false, secure: isProduction, overwrite: true, domain };
-
-  const sanitizedUser = getService('user').sanitizeUser(user);
-  strapi.eventHub.emit('admin.auth.success', { user: sanitizedUser, provider });
-
-  ctx.cookies.set('jwtToken', jwt, cookiesOptions);
-  ctx.redirect(redirectUrls.success);
-};
-
-module.exports = {
-  authenticate,
-  redirectWithAuth,
-};

package/ee/server/controllers/authentication/utils.js

@@ -1,23 +0,0 @@
-'use strict';
-
-const { mapValues } = require('lodash/fp');
-const { PROVIDER_REDIRECT_ERROR, PROVIDER_REDIRECT_SUCCESS } = require('./constants');
-
-const PROVIDER_URLS_MAP = {
-  success: PROVIDER_REDIRECT_SUCCESS,
-  error: PROVIDER_REDIRECT_ERROR,
-};
-
-const getAdminStore = async () => strapi.store({ type: 'core', name: 'admin' });
-
-const getPrefixedRedirectUrls = () => {
-  const { url: adminUrl } = strapi.config.get('admin');
-  const prefixUrl = (url) => `${adminUrl || '/admin'}${url}`;
-
-  return mapValues(prefixUrl, PROVIDER_URLS_MAP);
-};
-
-module.exports = {
-  getAdminStore,
-  getPrefixedRedirectUrls,
-};

package/ee/server/controllers/authentication.js

@@ -1,64 +0,0 @@
-'use strict';
-
-const { pick } = require('lodash/fp');
-const compose = require('koa-compose');
-const { ValidationError } = require('@strapi/utils').errors;
-
-const { validateProviderOptionsUpdate } = require('../validation/authentication');
-const { middlewares, utils } = require('./authentication/index');
-
-const toProviderDTO = pick(['uid', 'displayName', 'icon']);
-const toProviderLoginOptionsDTO = pick(['autoRegister', 'defaultRole', 'ssoLockedRoles']);
-
-const providerAuthenticationFlow = compose([
-  middlewares.authenticate,
-  middlewares.redirectWithAuth,
-]);
-
-module.exports = {
-  async getProviders(ctx) {
-    const { providerRegistry } = strapi.admin.services.passport;
-
-    ctx.body = providerRegistry.getAll().map(toProviderDTO);
-  },
-
-  async getProviderLoginOptions(ctx) {
-    const adminStore = await utils.getAdminStore();
-    const { providers: providersOptions } = await adminStore.get({ key: 'auth' });
-
-    ctx.body = {
-      data: toProviderLoginOptionsDTO(providersOptions),
-    };
-  },
-
-  async updateProviderLoginOptions(ctx) {
-    const {
-      request: { body },
-    } = ctx;
-
-    await validateProviderOptionsUpdate(body);
-
-    const adminStore = await utils.getAdminStore();
-    const currentAuthOptions = await adminStore.get({ key: 'auth' });
-    const newAuthOptions = { ...currentAuthOptions, providers: body };
-    await adminStore.set({ key: 'auth', value: newAuthOptions });
-
-    ctx.body = {
-      data: toProviderLoginOptionsDTO(newAuthOptions.providers),
-    };
-  },
-
-  providerLogin(ctx, next) {
-    const {
-      params: { provider: providerName },
-    } = ctx;
-
-    const { providerRegistry } = strapi.admin.services.passport;
-
-    if (!providerRegistry.has(providerName)) {
-      throw new ValidationError(`Invalid provider supplied: ${providerName}`);
-    }
-
-    return providerAuthenticationFlow(ctx, next);
-  },
-};

package/ee/server/controllers/index.js

@@ -1,12 +0,0 @@
-'use strict';
-
-module.exports = {
-  authentication: require('./authentication'),
-  role: require('./role'),
-  user: require('./user'),
-  auditLogs: require('./audit-logs'),
-  admin: require('./admin'),
-  workflows: require('./workflows'),
-  stages: require('./workflows/stages'),
-  assignees: require('./workflows/assignees'),
-};

package/ee/server/controllers/role.js

@@ -1,64 +0,0 @@
-'use strict';
-
-const {
-  validateRoleCreateInput,
-  validateRoleDeleteInput,
-  validateRolesDeleteInput,
-} = require('../validation/role');
-const { getService } = require('../../../server/utils');
-
-module.exports = {
-  /**
-   * Create a new role
-   * @param {KoaContext} ctx - koa context
-   */
-  async create(ctx) {
-    await validateRoleCreateInput(ctx.request.body);
-
-    const roleService = getService('role');
-
-    const role = await roleService.create(ctx.request.body);
-    const sanitizedRole = roleService.sanitizeRole(role);
-
-    ctx.created({ data: sanitizedRole });
-  },
-
-  /**
-   * Delete a role
-   * @param {KoaContext} ctx - koa context
-   */
-  async deleteOne(ctx) {
-    const { id } = ctx.params;
-
-    await validateRoleDeleteInput(id);
-
-    const roleService = getService('role');
-
-    const roles = await roleService.deleteByIds([id]);
-
-    const sanitizedRole = roles.map((role) => roleService.sanitizeRole(role))[0] || null;
-
-    return ctx.deleted({
-      data: sanitizedRole,
-    });
-  },
-
-  /**
-   * delete several roles
-   * @param {KoaContext} ctx - koa context
-   */
-  async deleteMany(ctx) {
-    const { body } = ctx.request;
-
-    await validateRolesDeleteInput(body);
-
-    const roleService = getService('role');
-
-    const roles = await roleService.deleteByIds(body.ids);
-    const sanitizedRoles = roles.map(roleService.sanitizeRole);
-
-    return ctx.deleted({
-      data: sanitizedRoles,
-    });
-  },
-};