@strapi/admin 4.16.2 → 4.18.0

package/server/domain/permission/index.js

@@ -1,156 +0,0 @@
-'use strict';
-
-const {
-  pipe,
-  set,
-  pick,
-  eq,
-  omit,
-  remove,
-  get,
-  uniq,
-  isArray,
-  map,
-  curry,
-  merge,
-} = require('lodash/fp');
-
-/**
- * Domain representation of a Permission (RBAC)
- * @typedef {Object} Permission
- * @property {string} [id] - The unique identifier of the permission
- * @property {string} [role] - The role associated to a permission
- * @property {string} action - The human readable name of an action
- * @property {string} properties - A set of properties used to define the permission with more granularity
- * @property {string} conditions - Conditions to check when evaluating the permission
- * @property {string} subject - The subject on which the permission should applies
- */
-
-const permissionFields = [
-  'id',
-  'action',
-  'actionParameters',
-  'subject',
-  'properties',
-  'conditions',
-  'role',
-];
-const sanitizedPermissionFields = [
-  'id',
-  'action',
-  'actionParameters',
-  'subject',
-  'properties',
-  'conditions',
-];
-
-const sanitizePermissionFields = pick(sanitizedPermissionFields);
-
-/**
- * Creates a permission with default values
- * @return {Permission}
- */
-const getDefaultPermission = () => ({
-  actionParameters: {},
-  conditions: [],
-  properties: {},
-  subject: null,
-});
-
-/**
- * Returns a new permission with the given condition
- * @param {string} condition - The condition to add
- * @param {Permission} permission - The permission on which we want to add the condition
- * @return {Permission}
- */
-const addCondition = curry((condition, permission) => {
-  const { conditions } = permission;
-  const newConditions = Array.isArray(conditions)
-    ? uniq(conditions.concat(condition))
-    : [condition];
-
-  return set('conditions', newConditions, permission);
-});
-
-/**
- * Returns a new permission without the given condition
- * @param {string} condition - The condition to remove
- * @param {Permission} permission - The permission on which we want to remove the condition
- * @return {Permission}
- */
-const removeCondition = curry((condition, permission) => {
-  return set('conditions', remove(eq(condition), permission.conditions), permission);
-});
-
-/**
- * Gets a property or a part of a property from a permission.
- * @param {string} property - The property to get
- * @param {Permission} permission - The permission on which we want to access the property
- * @return {Permission}
- */
-const getProperty = curry((property, permission) => get(`properties.${property}`, permission));
-
-/**
- * Set a value for a given property on a new permission object
- * @param {string} property - The name of the property
- * @param {any} value - The value of the property
- * @param {Permission} permission - The permission on which we want to set the property
- * @return {Permission}
- */
-const setProperty = (property, value, permission) => {
-  return set(`properties.${property}`, value, permission);
-};
-
-/**
- * Returns a new permission without the given property name set
- * @param {string} property - The name of the property to delete
- * @param {Permission} permission - The permission on which we want to remove the property
- * @return {Permission}
- */
-const deleteProperty = (property, permission) => omit(`properties.${property}`, permission);
-
-/**
- * Creates a new {@link Permission} object from raw attributes. Set default values for certain fields
- * @param {Permission} attributes
- * @return {Permission}
- */
-const create = (attributes) => {
-  return pipe(pick(permissionFields), merge(getDefaultPermission()))(attributes);
-};
-
-/**
- * Using the given condition provider, check and remove invalid condition from the permission's condition array.
- * @param {object} provider - The condition provider used to do the checks
- * @param {Permission} permission - The condition to sanitize
- * @return {Permission}
- */
-const sanitizeConditions = curry((provider, permission) => {
-  if (!isArray(permission.conditions)) {
-    return permission;
-  }
-
-  return permission.conditions
-    .filter((condition) => !provider.has(condition))
-    .reduce((perm, condition) => removeCondition(condition, perm), permission);
-});
-
-/**
- * Transform raw attributes into valid permissions using the create domain function.
- * @param {object | object[]} payload - Can either be a single object of attributes or an array of those objects.
- * @return {Permission | Permission[]}
- */
-const toPermission = (payload) => (isArray(payload) ? map(create, payload) : create(payload));
-
-module.exports = {
-  addCondition,
-  removeCondition,
-  create,
-  deleteProperty,
-  permissionFields,
-  getProperty,
-  sanitizedPermissionFields,
-  sanitizeConditions,
-  sanitizePermissionFields,
-  setProperty,
-  toPermission,
-};

package/server/domain/user.js

@@ -1,28 +0,0 @@
-'use strict';
-
-const { SUPER_ADMIN_CODE } = require('../services/constants');
-
-/**
- * Create a new user model by merging default and specified attributes
- * @param attributes A partial user object
- */
-function createUser(attributes) {
-  return {
-    roles: [],
-    isActive: false,
-    username: null,
-    ...attributes,
-  };
-}
-
-const hasSuperAdminRole = (user) => {
-  return user.roles.filter((role) => role.code === SUPER_ADMIN_CODE).length > 0;
-};
-
-const ADMIN_USER_ALLOWED_FIELDS = ['id', 'firstname', 'lastname', 'username'];
-
-module.exports = {
-  createUser,
-  hasSuperAdminRole,
-  ADMIN_USER_ALLOWED_FIELDS,
-};

package/server/index.js

@@ -1,26 +0,0 @@
-'use strict';
-
-const bootstrap = require('./bootstrap');
-const register = require('./register');
-const destroy = require('./destroy');
-
-const config = require('./config');
-const policies = require('./policies');
-const routes = require('./routes');
-const services = require('./services');
-const controllers = require('./controllers');
-const contentTypes = require('./content-types');
-const middlewares = require('./middlewares');
-
-module.exports = {
-  register,
-  bootstrap,
-  destroy,
-  config,
-  policies,
-  routes,
-  services,
-  controllers,
-  contentTypes,
-  middlewares,
-};

package/server/middlewares/data-transfer.js

@@ -1,29 +0,0 @@
-'use strict';
-
-const { getService } = require('../utils');
-
-module.exports = () => async (ctx, next) => {
-  const transferUtils = getService('transfer').utils;
-
-  const { hasValidTokenSalt, isDataTransferEnabled, isDisabledFromEnv } = transferUtils;
-
-  if (isDataTransferEnabled()) {
-    return next();
-  }
-
-  if (!hasValidTokenSalt()) {
-    return ctx.notImplemented(
-      'The server configuration for data transfer is invalid. Please contact your server administrator.',
-      {
-        code: 'INVALID_TOKEN_SALT',
-      }
-    );
-  }
-
-  if (isDisabledFromEnv()) {
-    return ctx.notFound();
-  }
-
-  // This should never happen as long as we're handling individual scenarios above
-  throw new Error('Unexpected error while trying to access a data transfer route');
-};

package/server/middlewares/index.js

@@ -1,8 +0,0 @@
-'use strict';
-
-const rateLimit = require('./rateLimit');
-
-module.exports = {
-  rateLimit,
-  'data-transfer': require('./data-transfer'),
-};

package/server/middlewares/rateLimit.js

@@ -1,47 +0,0 @@
-'use strict';
-
-const path = require('path');
-const utils = require('@strapi/utils');
-const { isString, has, toLower } = require('lodash/fp');
-
-const { RateLimitError } = utils.errors;
-
-module.exports =
-  (config, { strapi }) =>
-  async (ctx, next) => {
-    let rateLimitConfig = strapi.config.get('admin.rateLimit');
-
-    if (!rateLimitConfig) {
-      rateLimitConfig = {
-        enabled: true,
-      };
-    }
-
-    if (!has('enabled', rateLimitConfig)) {
-      rateLimitConfig.enabled = true;
-    }
-
-    if (rateLimitConfig.enabled === true) {
-      const rateLimit = require('koa2-ratelimit').RateLimit;
-
-      const userEmail = toLower(ctx.request.body.email) || 'unknownEmail';
-      const requestPath = isString(ctx.request.path)
-        ? toLower(path.normalize(ctx.request.path)).replace(/\/$/, '')
-        : 'invalidPath';
-
-      const loadConfig = {
-        interval: { min: 5 },
-        max: 5,
-        prefixKey: `${userEmail}:${requestPath}:${ctx.request.ip}`,
-        handler() {
-          throw new RateLimitError();
-        },
-        ...rateLimitConfig,
-        ...config,
-      };
-
-      return rateLimit.middleware(loadConfig)(ctx, next);
-    }
-
-    return next();
-  };

package/server/policies/hasPermissions.js

@@ -1,38 +0,0 @@
-'use strict';
-
-const _ = require('lodash');
-const { createPolicy } = require('@strapi/utils').policy;
-const { validateHasPermissionsInput } = require('../validation/policies/hasPermissions');
-
-const inputModifiers = [
-  {
-    check: _.isString,
-    transform: (action) => ({ action }),
-  },
-  {
-    check: _.isArray,
-    transform: (arr) => ({ action: arr[0], subject: arr[1] }),
-  },
-  {
-    // Has to be after the isArray check since _.isObject also matches arrays
-    check: _.isObject,
-    transform: (perm) => perm,
-  },
-];
-
-module.exports = createPolicy({
-  name: 'admin::hasPermissions',
-  validator: validateHasPermissionsInput,
-  handler(ctx, config) {
-    const { actions } = config;
-    const { userAbility: ability } = ctx.state;
-
-    const permissions = actions.map((action) =>
-      inputModifiers.find((modifier) => modifier.check(action)).transform(action)
-    );
-
-    const isAuthorized = permissions.every(({ action, subject }) => ability.can(action, subject));
-
-    return isAuthorized;
-  },
-});

package/server/policies/index.js

@@ -1,7 +0,0 @@
-'use strict';
-
-module.exports = {
-  isAuthenticatedAdmin: require('./isAuthenticatedAdmin'),
-  hasPermissions: require('./hasPermissions'),
-  isTelemetryEnabled: require('./isTelemetryEnabled'),
-};

package/server/policies/isAuthenticatedAdmin.js

@@ -1,5 +0,0 @@
-'use strict';
-
-module.exports = (policyCtx) => {
-  return Boolean(policyCtx.state.isAuthenticated);
-};

package/server/policies/isTelemetryEnabled.js

@@ -1,16 +0,0 @@
-'use strict';
-
-const { createPolicy } = require('@strapi/utils').policy;
-
-/**
- * This policy is used for routes dealing with telemetry and analytics content.
- * It will fails when the telemetry has been disabled on the server.
- */
-module.exports = createPolicy({
-  name: 'admin::isTelemetryEnabled',
-  handler(_ctx, _config, { strapi }) {
-    if (strapi.telemetry.isDisabled) {
-      return false;
-    }
-  },
-});

package/server/register.js

@@ -1,19 +0,0 @@
-'use strict';
-
-const registerAdminPanelRoute = require('./routes/serve-admin-panel');
-
-const adminAuthStrategy = require('./strategies/admin');
-
-const apiTokenAuthStrategy = require('./strategies/api-token');
-
-module.exports = ({ strapi }) => {
-  const passportMiddleware = strapi.admin.services.passport.init();
-
-  strapi.server.api('admin').use(passportMiddleware);
-  strapi.container.get('auth').register('admin', adminAuthStrategy);
-  strapi.container.get('auth').register('content-api', apiTokenAuthStrategy);
-
-  if (strapi.config.serveAdminPanel) {
-    registerAdminPanelRoute({ strapi });
-  }
-};

package/server/routes/admin.js

@@ -1,71 +0,0 @@
-'use strict';
-
-module.exports = [
-  {
-    method: 'GET',
-    path: '/init',
-    handler: 'admin.init',
-    config: { auth: false },
-  },
-  {
-    method: 'GET',
-    path: '/project-settings',
-    handler: 'admin.getProjectSettings',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        {
-          name: 'admin::hasPermissions',
-          config: { actions: ['admin::project-settings.read'] },
-        },
-      ],
-    },
-  },
-  {
-    method: 'POST',
-    path: '/project-settings',
-    handler: 'admin.updateProjectSettings',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        {
-          name: 'admin::hasPermissions',
-          config: { actions: ['admin::project-settings.update'] },
-        },
-      ],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/project-type',
-    handler: 'admin.getProjectType',
-    config: { auth: false },
-  },
-  {
-    method: 'GET',
-    path: '/information',
-    handler: 'admin.information',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/telemetry-properties',
-    handler: 'admin.telemetryProperties',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/plugins',
-    handler: 'admin.plugins',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::marketplace.read'] } },
-      ],
-    },
-  },
-];

package/server/routes/api-tokens.js

@@ -1,70 +0,0 @@
-'use strict';
-
-module.exports = [
-  {
-    method: 'POST',
-    path: '/api-tokens',
-    handler: 'api-token.create',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.create'] } },
-      ],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/api-tokens',
-    handler: 'api-token.list',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.read'] } },
-      ],
-    },
-  },
-  {
-    method: 'DELETE',
-    path: '/api-tokens/:id',
-    handler: 'api-token.revoke',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.delete'] } },
-      ],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/api-tokens/:id',
-    handler: 'api-token.get',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.read'] } },
-      ],
-    },
-  },
-  {
-    method: 'PUT',
-    path: '/api-tokens/:id',
-    handler: 'api-token.update',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.update'] } },
-      ],
-    },
-  },
-  {
-    method: 'POST',
-    path: '/api-tokens/:id/regenerate',
-    handler: 'api-token.regenerate',
-    config: {
-      policies: [
-        'admin::isAuthenticatedAdmin',
-        { name: 'admin::hasPermissions', config: { actions: ['admin::api-tokens.regenerate'] } },
-      ],
-    },
-  },
-];

package/server/routes/authentication.js

@@ -1,57 +0,0 @@
-'use strict';
-
-module.exports = [
-  {
-    method: 'POST',
-    path: '/login',
-    handler: 'authentication.login',
-    config: {
-      auth: false,
-      middlewares: ['admin::rateLimit'],
-    },
-  },
-  {
-    method: 'POST',
-    path: '/renew-token',
-    handler: 'authentication.renewToken',
-    config: { auth: false },
-  },
-  {
-    method: 'POST',
-    path: '/register-admin',
-    handler: 'authentication.registerAdmin',
-    config: { auth: false },
-  },
-  {
-    method: 'GET',
-    path: '/registration-info',
-    handler: 'authentication.registrationInfo',
-    config: { auth: false },
-  },
-  {
-    method: 'POST',
-    path: '/register',
-    handler: 'authentication.register',
-    config: { auth: false },
-  },
-  {
-    method: 'POST',
-    path: '/forgot-password',
-    handler: 'authentication.forgotPassword',
-    config: { auth: false },
-  },
-  {
-    method: 'POST',
-    path: '/reset-password',
-    handler: 'authentication.resetPassword',
-    config: { auth: false },
-  },
-  {
-    method: 'POST',
-    path: '/logout',
-    handler: 'authentication.logout',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-];

package/server/routes/content-api.js

@@ -1,20 +0,0 @@
-'use strict';
-
-module.exports = [
-  {
-    method: 'GET',
-    path: '/content-api/permissions',
-    handler: 'content-api.getPermissions',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-  {
-    method: 'GET',
-    path: '/content-api/routes',
-    handler: 'content-api.getRoutes',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-];

package/server/routes/index.js

@@ -1,28 +0,0 @@
-'use strict';
-
-const admin = require('./admin');
-const authentication = require('./authentication');
-const permissions = require('./permissions');
-const users = require('./users');
-const roles = require('./roles');
-const webhooks = require('./webhooks');
-const apiTokens = require('./api-tokens');
-const contentApi = require('./content-api');
-const transfer = require('./transfer');
-
-module.exports = {
-  admin: {
-    type: 'admin',
-    routes: [
-      ...admin,
-      ...authentication,
-      ...permissions,
-      ...users,
-      ...roles,
-      ...webhooks,
-      ...apiTokens,
-      ...contentApi,
-      ...transfer,
-    ],
-  },
-};

package/server/routes/permissions.js

@@ -1,20 +0,0 @@
-'use strict';
-
-module.exports = [
-  {
-    method: 'GET',
-    path: '/permissions',
-    handler: 'permission.getAll',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-  {
-    method: 'POST',
-    path: '/permissions/check',
-    handler: 'permission.check',
-    config: {
-      policies: ['admin::isAuthenticatedAdmin'],
-    },
-  },
-];