@strapi/admin 4.16.2 → 4.18.0

package/ee/server/bootstrap.js

@@ -1,41 +0,0 @@
-'use strict';
-
-// eslint-disable-next-line node/no-extraneous-require
-const { features } = require('@strapi/strapi/dist/utils/ee');
-const executeCEBootstrap = require('../../server/bootstrap');
-const { getService } = require('../../server/utils');
-const actions = require('./config/admin-actions');
-const { persistTablesWithPrefix } = require('./utils/persisted-tables');
-
-module.exports = async (args) => {
-  const { actionProvider } = getService('permission');
-
-  if (features.isEnabled('sso')) {
-    await actionProvider.registerMany(actions.sso);
-  }
-
-  if (features.isEnabled('audit-logs')) {
-    await persistTablesWithPrefix('strapi_audit_logs');
-
-    await actionProvider.registerMany(actions.auditLogs);
-  }
-
-  if (features.isEnabled('review-workflows')) {
-    await persistTablesWithPrefix('strapi_workflows');
-
-    const { bootstrap: rwBootstrap } = getService('review-workflows');
-
-    await rwBootstrap();
-    await actionProvider.registerMany(actions.reviewWorkflows);
-
-    // Decorate the entity service with review workflow logic
-    const { decorator } = getService('review-workflows-decorator');
-    strapi.entityService.decorate(decorator);
-
-    await getService('review-workflows-weekly-metrics').registerCron();
-  }
-
-  await getService('seat-enforcement').seatEnforcementWorkflow();
-
-  await executeCEBootstrap(args);
-};

package/ee/server/config/admin-actions.js

@@ -1,72 +0,0 @@
-'use strict';
-
-module.exports = {
-  sso: [
-    {
-      uid: 'provider-login.read',
-      displayName: 'Read',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'single sign on',
-      subCategory: 'options',
-    },
-    {
-      uid: 'provider-login.update',
-      displayName: 'Update',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'single sign on',
-      subCategory: 'options',
-    },
-  ],
-  auditLogs: [
-    {
-      uid: 'audit-logs.read',
-      displayName: 'Read',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'audit logs',
-      subCategory: 'options',
-    },
-  ],
-  reviewWorkflows: [
-    {
-      uid: 'review-workflows.create',
-      displayName: 'Create',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'review workflows',
-      subCategory: 'options',
-    },
-    {
-      uid: 'review-workflows.read',
-      displayName: 'Read',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'review workflows',
-      subCategory: 'options',
-    },
-    {
-      uid: 'review-workflows.update',
-      displayName: 'Update',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'review workflows',
-      subCategory: 'options',
-    },
-    {
-      uid: 'review-workflows.delete',
-      displayName: 'Delete',
-      pluginName: 'admin',
-      section: 'settings',
-      category: 'review workflows',
-      subCategory: 'options',
-    },
-    {
-      uid: 'review-workflows.stage.transition',
-      displayName: 'Change stage',
-      pluginName: 'admin',
-      section: 'internal',
-    },
-  ],
-};

package/ee/server/constants/default-stages.json

@@ -1,18 +0,0 @@
-[
-  {
-    "name": "To do",
-    "color": "#4945FF"
-  },
-  {
-    "name": "Ready to review",
-    "color": "#9736E8"
-  },
-  {
-    "name": "In progress",
-    "color": "#EE5E52"
-  },
-  {
-    "name": "Reviewed",
-    "color": "#328048"
-  }
-]

package/ee/server/constants/default-workflow.json

@@ -1,3 +0,0 @@
-{
-  "name": "Default"
-}

package/ee/server/constants/webhookEvents.js

@@ -1,5 +0,0 @@
-'use strict';
-
-module.exports = {
-  WORKFLOW_UPDATE_STAGE: 'review-workflows.updateEntryStage',
-};

package/ee/server/constants/workflows.js

@@ -1,33 +0,0 @@
-'use strict';
-
-// TODO concatenate admin + content type singular name
-module.exports = {
-  WORKFLOW_MODEL_UID: 'admin::workflow',
-  STAGE_MODEL_UID: 'admin::workflow-stage',
-  STAGE_TRANSITION_UID: 'admin::review-workflows.stage.transition',
-  STAGE_DEFAULT_COLOR: '#4945FF',
-  ENTITY_STAGE_ATTRIBUTE: 'strapi_stage',
-  ENTITY_ASSIGNEE_ATTRIBUTE: 'strapi_assignee',
-  MAX_WORKFLOWS: 200,
-  MAX_STAGES_PER_WORKFLOW: 200,
-  ERRORS: {
-    WORKFLOW_WITHOUT_STAGES: 'A workflow must have at least one stage.',
-    WORKFLOWS_LIMIT:
-      'You’ve reached the limit of workflows in your plan. Delete a workflow or contact Sales to enable more workflows.',
-    STAGES_LIMIT:
-      'You’ve reached the limit of stages for this workflow in your plan. Try deleting some stages or contact Sales to enable more stages.',
-    DUPLICATED_STAGE_NAME: 'Stage names must be unique.',
-  },
-  WORKFLOW_POPULATE: {
-    stages: {
-      populate: {
-        permissions: {
-          fields: ['action', 'actionParameters'],
-          populate: {
-            role: { fields: ['id', 'name'] },
-          },
-        },
-      },
-    },
-  },
-};

package/ee/server/content-types/index.js

@@ -1,9 +0,0 @@
-'use strict';
-
-const workflow = require('./workflow');
-const workflowStage = require('./workflow-stage');
-
-module.exports = {
-  workflow,
-  'workflow-stage': workflowStage,
-};

package/ee/server/content-types/workflow/index.js

@@ -1,41 +0,0 @@
-'use strict';
-
-module.exports = {
-  schema: {
-    collectionName: 'strapi_workflows',
-    info: {
-      name: 'Workflow',
-      description: '',
-      singularName: 'workflow',
-      pluralName: 'workflows',
-      displayName: 'Workflow',
-    },
-    options: {},
-    pluginOptions: {
-      'content-manager': {
-        visible: false,
-      },
-      'content-type-builder': {
-        visible: false,
-      },
-    },
-    attributes: {
-      name: {
-        type: 'string',
-        required: true,
-        unique: true,
-      },
-      stages: {
-        type: 'relation',
-        target: 'admin::workflow-stage',
-        relation: 'oneToMany',
-        mappedBy: 'workflow',
-      },
-      contentTypes: {
-        type: 'json',
-        required: true,
-        default: [],
-      },
-    },
-  },
-};

package/ee/server/content-types/workflow-stage/index.js

@@ -1,51 +0,0 @@
-'use strict';
-
-const { STAGE_DEFAULT_COLOR } = require('../../constants/workflows');
-
-module.exports = {
-  schema: {
-    collectionName: 'strapi_workflows_stages',
-    info: {
-      name: 'Workflow Stage',
-      description: '',
-      singularName: 'workflow-stage',
-      pluralName: 'workflow-stages',
-      displayName: 'Stages',
-    },
-    options: {
-      version: '1.1.0',
-    },
-    pluginOptions: {
-      'content-manager': {
-        visible: false,
-      },
-      'content-type-builder': {
-        visible: false,
-      },
-    },
-    attributes: {
-      name: {
-        type: 'string',
-        configurable: false,
-      },
-      color: {
-        type: 'string',
-        configurable: false,
-        default: STAGE_DEFAULT_COLOR,
-      },
-      workflow: {
-        type: 'relation',
-        target: 'admin::workflow',
-        relation: 'manyToOne',
-        inversedBy: 'stages',
-        configurable: false,
-      },
-      permissions: {
-        type: 'relation',
-        target: 'admin::permission',
-        relation: 'manyToMany',
-        configurable: false,
-      },
-    },
-  },
-};

package/ee/server/controllers/__tests__/stages.test.js

@@ -1,174 +0,0 @@
-'use strict';
-
-const { ENTITY_STAGE_ATTRIBUTE } = require('../../constants/workflows');
-const stages = require('../workflows/stages');
-
-describe('Stages', () => {
-  const nonExistantEntityId = 1;
-  const entityId = 2;
-
-  const numberOfStages = 4;
-  const entityStageId = 1;
-
-  const readMock = jest.fn(() => false);
-
-  global.strapi = {
-    admin: {
-      services: {
-        'stage-permissions': {
-          can: jest.fn(() => true),
-        },
-        workflows: {
-          count() {
-            return 1;
-          },
-          getAssignedWorkflow() {
-            return {
-              stages: Array.from({ length: numberOfStages }, (_, i) => ({ id: i + 1 })),
-            };
-          },
-        },
-      },
-    },
-    plugins: {
-      'content-manager': {
-        services: {
-          'permission-checker': {
-            create() {
-              return {
-                cannot: {
-                  read: readMock,
-                },
-              };
-            },
-          },
-        },
-        service(name) {
-          return this.services[name];
-        },
-      },
-    },
-    plugin(name) {
-      return this.plugins[name];
-    },
-    entityService: {
-      findOne: jest.fn((_, id) => {
-        if (id === nonExistantEntityId) {
-          return Promise.resolve(null);
-        }
-
-        return Promise.resolve({
-          id: entityId,
-          [ENTITY_STAGE_ATTRIBUTE]: { id: entityStageId },
-        });
-      }),
-    },
-  };
-
-  const modelUID = 'UID';
-
-  const baseCtx = {
-    state: {
-      userAbility: {},
-    },
-  };
-
-  describe('listAvailableStages', () => {
-    test('non existant entity', async () => {
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: nonExistantEntityId,
-        },
-        throw(status, message) {
-          const error = new Error(message);
-          error.status = status;
-          throw error;
-        },
-      };
-
-      let error;
-      try {
-        await stages.listAvailableStages(ctx);
-      } catch (e) {
-        error = e;
-      }
-
-      expect(error).toBeDefined();
-      expect(error.status).toBe(404);
-    });
-
-    test('cannot transition', async () => {
-      global.strapi.admin.services['stage-permissions'].can.mockReturnValueOnce(false);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(0);
-    });
-
-    test('cannot read', async () => {
-      readMock.mockReturnValueOnce(true);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-        forbidden() {
-          const error = new Error();
-          error.status = 403;
-          throw error;
-        },
-      };
-
-      let error;
-      try {
-        await stages.listAvailableStages(ctx);
-      } catch (e) {
-        error = e;
-      }
-      expect(error.status).toBe(403);
-    });
-
-    test('cannot transition', async () => {
-      global.strapi.admin.services['stage-permissions'].can.mockReturnValueOnce(false);
-
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(0);
-    });
-
-    test('can transition', async () => {
-      const ctx = {
-        ...baseCtx,
-        params: {
-          model_uid: modelUID,
-          id: entityId,
-        },
-      };
-
-      await stages.listAvailableStages(ctx);
-
-      expect(ctx.body.data.length).toBe(numberOfStages - 1);
-      expect(ctx.body.data).not.toContainEqual({ id: entityStageId });
-    });
-  });
-});

package/ee/server/controllers/admin.js

@@ -1,50 +0,0 @@
-'use strict';
-
-const { isNil } = require('lodash/fp');
-// eslint-disable-next-line node/no-extraneous-require
-const ee = require('@strapi/strapi/dist/utils/ee');
-const { env } = require('@strapi/utils');
-const { getService } = require('../../../server/utils');
-
-module.exports = {
-  async licenseLimitInformation() {
-    const permittedSeats = ee.seats;
-
-    let shouldNotify = false;
-    let licenseLimitStatus = null;
-    let enforcementUserCount;
-
-    const currentActiveUserCount = await getService('user').getCurrentActiveUserCount();
-
-    const eeDisabledUsers = await getService('seat-enforcement').getDisabledUserList();
-
-    if (eeDisabledUsers) {
-      enforcementUserCount = currentActiveUserCount + eeDisabledUsers.length;
-    } else {
-      enforcementUserCount = currentActiveUserCount;
-    }
-
-    if (!isNil(permittedSeats) && enforcementUserCount > permittedSeats) {
-      shouldNotify = true;
-      licenseLimitStatus = 'OVER_LIMIT';
-    }
-
-    if (!isNil(permittedSeats) && enforcementUserCount === permittedSeats) {
-      shouldNotify = true;
-      licenseLimitStatus = 'AT_LIMIT';
-    }
-
-    const data = {
-      enforcementUserCount,
-      currentActiveUserCount,
-      permittedSeats,
-      shouldNotify,
-      shouldStopCreate: isNil(permittedSeats) ? false : currentActiveUserCount >= permittedSeats,
-      licenseLimitStatus,
-      isHostedOnStrapiCloud: env('STRAPI_HOSTING', null) === 'strapi.cloud',
-      features: ee.features.list() ?? [],
-    };
-
-    return { data };
-  },
-};

package/ee/server/controllers/audit-logs.js

@@ -1,24 +0,0 @@
-'use strict';
-
-const { validateFindMany } = require('../validation/audit-logs');
-
-module.exports = {
-  async findMany(ctx) {
-    const { query } = ctx.request;
-    await validateFindMany(query);
-
-    const auditLogs = strapi.container.get('audit-logs');
-    const body = await auditLogs.findMany(query);
-
-    ctx.body = body;
-  },
-
-  async findOne(ctx) {
-    const { id } = ctx.params;
-
-    const auditLogs = strapi.container.get('audit-logs');
-    const body = await auditLogs.findOne(id);
-
-    ctx.body = body;
-  },
-};

package/ee/server/controllers/authentication/constants.js

@@ -1,11 +0,0 @@
-'use strict';
-
-const PROVIDER_REDIRECT_BASE = '/auth/login';
-const PROVIDER_REDIRECT_SUCCESS = `${PROVIDER_REDIRECT_BASE}/success`;
-const PROVIDER_REDIRECT_ERROR = `${PROVIDER_REDIRECT_BASE}/error`;
-
-module.exports = {
-  PROVIDER_REDIRECT_BASE,
-  PROVIDER_REDIRECT_SUCCESS,
-  PROVIDER_REDIRECT_ERROR,
-};

package/ee/server/controllers/authentication/index.js

@@ -1,11 +0,0 @@
-'use strict';
-
-const middlewares = require('./middlewares');
-const constants = require('./constants');
-const utils = require('./utils');
-
-module.exports = {
-  middlewares,
-  constants,
-  utils,
-};

package/ee/server/controllers/authentication/middlewares.js

@@ -1,117 +0,0 @@
-'use strict';
-
-const passport = require('koa-passport');
-
-const { getService } = require('../../../../server/utils');
-const utils = require('./utils');
-
-const defaultConnectionError = () => new Error('Invalid connection payload');
-
-const authenticate = async (ctx, next) => {
-  const {
-    params: { provider },
-  } = ctx;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-
-  return passport.authenticate(provider, null, async (error, profile) => {
-    if (error || !profile || !profile.email) {
-      if (error) {
-        strapi.log.error(error);
-      }
-
-      strapi.eventHub.emit('admin.auth.error', {
-        error: error || defaultConnectionError(),
-        provider,
-      });
-
-      return ctx.redirect(redirectUrls.error);
-    }
-
-    const user = await getService('user').findOneByEmail(profile.email);
-    const scenario = user ? existingUserScenario : nonExistingUserScenario;
-
-    return scenario(ctx, next)(user || profile, provider);
-  })(ctx, next);
-};
-
-const existingUserScenario = (ctx, next) => async (user, provider) => {
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-
-  if (!user.isActive) {
-    strapi.eventHub.emit('admin.auth.error', {
-      error: new Error(`Deactivated user tried to login (${user.id})`),
-      provider,
-    });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  ctx.state.user = user;
-  return next();
-};
-
-const nonExistingUserScenario = (ctx, next) => async (profile, provider) => {
-  const { email, firstname, lastname, username } = profile;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-  const adminStore = await utils.getAdminStore();
-  const { providers } = await adminStore.get({ key: 'auth' });
-
-  // We need at least the username or the firstname/lastname combination to register a new user
-  const isMissingRegisterFields = !username && (!firstname || !lastname);
-
-  if (!providers.autoRegister || !providers.defaultRole || isMissingRegisterFields) {
-    strapi.eventHub.emit('admin.auth.error', { error: defaultConnectionError(), provider });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  const defaultRole = await getService('role').findOne({ id: providers.defaultRole });
-
-  // If the default role has been misconfigured, redirect with an error
-  if (!defaultRole) {
-    strapi.eventHub.emit('admin.auth.error', { error: defaultConnectionError(), provider });
-    return ctx.redirect(redirectUrls.error);
-  }
-
-  // Register a new user with the information given by the provider and login with it
-  ctx.state.user = await getService('user').create({
-    email,
-    username,
-    firstname,
-    lastname,
-    roles: [defaultRole.id],
-    isActive: true,
-    registrationToken: null,
-  });
-
-  strapi.eventHub.emit('admin.auth.autoRegistration', {
-    user: ctx.state.user,
-    provider,
-  });
-
-  return next();
-};
-
-const redirectWithAuth = (ctx) => {
-  const {
-    params: { provider },
-  } = ctx;
-  const redirectUrls = utils.getPrefixedRedirectUrls();
-  const domain = strapi.config.get('admin.auth.domain');
-  const { user } = ctx.state;
-
-  const jwt = getService('token').createJwtToken(user);
-
-  const isProduction = strapi.config.get('environment') === 'production';
-
-  const cookiesOptions = { httpOnly: false, secure: isProduction, overwrite: true, domain };
-
-  const sanitizedUser = getService('user').sanitizeUser(user);
-  strapi.eventHub.emit('admin.auth.success', { user: sanitizedUser, provider });
-
-  ctx.cookies.set('jwtToken', jwt, cookiesOptions);
-  ctx.redirect(redirectUrls.success);
-};
-
-module.exports = {
-  authenticate,
-  redirectWithAuth,
-};

package/ee/server/controllers/authentication/utils.js

@@ -1,23 +0,0 @@
-'use strict';
-
-const { mapValues } = require('lodash/fp');
-const { PROVIDER_REDIRECT_ERROR, PROVIDER_REDIRECT_SUCCESS } = require('./constants');
-
-const PROVIDER_URLS_MAP = {
-  success: PROVIDER_REDIRECT_SUCCESS,
-  error: PROVIDER_REDIRECT_ERROR,
-};
-
-const getAdminStore = async () => strapi.store({ type: 'core', name: 'admin' });
-
-const getPrefixedRedirectUrls = () => {
-  const { url: adminUrl } = strapi.config.get('admin');
-  const prefixUrl = (url) => `${adminUrl || '/admin'}${url}`;
-
-  return mapValues(prefixUrl, PROVIDER_URLS_MAP);
-};
-
-module.exports = {
-  getAdminStore,
-  getPrefixedRedirectUrls,
-};