@strapi/admin 5.50.1 → 5.51.0

package/dist/server/shared/utils/session-auth.mjs

@@ -1,6 +1,30 @@
 import crypto from 'crypto';
+import { buildSessionMetadata } from '@strapi/utils';
+import { resolveAuthCookieName } from './auth-cookie-name.mjs';
+import { resolveAuthCookiePath } from './auth-cookie-path.mjs';
+import { resolveAuthCookieDomain } from './auth-cookie-domain.mjs';
 
+const ADMIN_ORIGIN = 'admin';
+const SESSION_CONTENT_TYPE = 'admin::session';
 const REFRESH_COOKIE_NAME = 'strapi_admin_refresh';
+// The resolvers are browser-shared (also inlined into the admin bundle) so
+// they default to console.warn; on the server, route their warnings through
+// the Strapi logger instead.
+const warnViaStrapiLog = (message)=>{
+    strapi.log.warn(message);
+};
+const getAccessCookieName = ()=>{
+    const configured = strapi.config.get('admin.auth.cookie.name');
+    return resolveAuthCookieName(configured, warnViaStrapiLog);
+};
+const getAccessCookiePath = ()=>{
+    const configured = strapi.config.get('admin.auth.cookie.path');
+    return resolveAuthCookiePath(configured, warnViaStrapiLog);
+};
+const getAccessCookieDomain = ()=>{
+    const configured = strapi.config.get('admin.auth.cookie.domain') || strapi.config.get('admin.auth.domain');
+    return resolveAuthCookieDomain(configured, warnViaStrapiLog);
+};
 const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN = 30 * 24 * 60 * 60;
 const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN = 14 * 24 * 60 * 60;
 const DEFAULT_MAX_SESSION_LIFESPAN = 1 * 24 * 60 * 60;
@@ -8,8 +32,8 @@ const DEFAULT_IDLE_SESSION_LIFESPAN = 2 * 60 * 60;
 const getRefreshCookieOptions = (secureRequest)=>{
     const configuredSecure = strapi.config.get('admin.auth.cookie.secure');
     const isProduction = process.env.NODE_ENV === 'production';
-    const domain = strapi.config.get('admin.auth.cookie.domain') || strapi.config.get('admin.auth.domain');
-    const path = strapi.config.get('admin.auth.cookie.path', '/admin');
+    const domain = getAccessCookieDomain();
+    const path = getAccessCookiePath();
     const sameSite = strapi.config.get('admin.auth.cookie.sameSite') ?? 'lax';
     let isSecure;
     if (typeof configuredSecure === 'boolean') {
@@ -69,6 +93,34 @@ const extractDeviceParams = (requestBody)=>{
         rememberMe
     };
 };
+const buildSessionMetadataFromContext = (ctx)=>buildSessionMetadata({
+        userAgent: ctx.request.headers['user-agent']
+    });
+/**
+ * Resolves the device id to use when revoking sessions on logout.
+ * SSO assigns deviceId server-side, so the client-provided value may not match
+ * the active session row. Prefer the deviceId stored on the session backing
+ * the current access token when available.
+ *
+ * Callers should pass `ctx.state.session.id` from the admin auth strategy and
+ * the already-parsed body `deviceId` — the logout route requires authentication,
+ * so sessionId is expected to be present.
+ */ const resolveLogoutDeviceId = async (userId, sessionId, clientDeviceId)=>{
+    if (!sessionId) {
+        strapi.log.debug('resolveLogoutDeviceId: no sessionId; falling back to client deviceId');
+        return clientDeviceId;
+    }
+    const session = await strapi.db.query(SESSION_CONTENT_TYPE).findOne({
+        where: {
+            sessionId
+        }
+    });
+    if (session?.userId !== userId || session?.origin !== ADMIN_ORIGIN) {
+        strapi.log.debug('resolveLogoutDeviceId: access-token session missing or not owned; falling back to client deviceId');
+        return clientDeviceId;
+    }
+    return typeof session.deviceId === 'string' ? session.deviceId : clientDeviceId;
+};
 
-export { DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN, DEFAULT_IDLE_SESSION_LIFESPAN, DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN, DEFAULT_MAX_SESSION_LIFESPAN, REFRESH_COOKIE_NAME, buildCookieOptionsWithExpiry, extractDeviceParams, generateDeviceId, getRefreshCookieOptions, getSessionManager };
+export { DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN, DEFAULT_IDLE_SESSION_LIFESPAN, DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN, DEFAULT_MAX_SESSION_LIFESPAN, REFRESH_COOKIE_NAME, buildCookieOptionsWithExpiry, buildSessionMetadataFromContext, extractDeviceParams, generateDeviceId, getAccessCookieDomain, getAccessCookieName, getAccessCookiePath, getRefreshCookieOptions, getSessionManager, resolveLogoutDeviceId };
 //# sourceMappingURL=session-auth.mjs.map

package/dist/server/shared/utils/session-auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"session-auth.mjs","sources":["../../../../shared/utils/session-auth.ts"],"sourcesContent":["import crypto from 'crypto';\nimport type { Modules } from '@strapi/types';\n\nexport const REFRESH_COOKIE_NAME = 'strapi_admin_refresh';\n\nexport const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN = 30 * 24 * 60 * 60;\nexport const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN = 14 * 24 * 60 * 60;\nexport const DEFAULT_MAX_SESSION_LIFESPAN = 1 * 24 * 60 * 60;\nexport const DEFAULT_IDLE_SESSION_LIFESPAN = 2 * 60 * 60;\n\nexport const getRefreshCookieOptions = (secureRequest?: boolean) => {\n  const configuredSecure = strapi.config.get('admin.auth.cookie.secure');\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const domain: string | undefined =\n    strapi.config.get('admin.auth.cookie.domain') || strapi.config.get('admin.auth.domain');\n  const path: string = strapi.config.get('admin.auth.cookie.path', '/admin');\n\n  const sameSite: boolean | 'lax' | 'strict' | 'none' =\n    strapi.config.get('admin.auth.cookie.sameSite') ?? 'lax';\n\n  let isSecure: boolean;\n  if (typeof configuredSecure === 'boolean') {\n    isSecure = configuredSecure;\n  } else if (secureRequest !== undefined) {\n    isSecure = isProduction && secureRequest;\n  } else {\n    isSecure = isProduction;\n  }\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    overwrite: true,\n    domain,\n    path,\n    sameSite,\n    maxAge: undefined,\n  };\n};\n\nconst getLifespansForType = (\n  type: 'refresh' | 'session'\n): { idleSeconds: number; maxSeconds: number } => {\n  if (type === 'refresh') {\n    const idleSeconds = Number(\n      strapi.config.get(\n        'admin.auth.sessions.idleRefreshTokenLifespan',\n        DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN\n      )\n    );\n    const maxSeconds = Number(\n      strapi.config.get(\n        'admin.auth.sessions.maxRefreshTokenLifespan',\n        DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN\n      )\n    );\n\n    return { idleSeconds, maxSeconds };\n  }\n\n  const idleSeconds = Number(\n    strapi.config.get('admin.auth.sessions.idleSessionLifespan', DEFAULT_IDLE_SESSION_LIFESPAN)\n  );\n  const maxSeconds = Number(\n    strapi.config.get('admin.auth.sessions.maxSessionLifespan', DEFAULT_MAX_SESSION_LIFESPAN)\n  );\n\n  return { idleSeconds, maxSeconds };\n};\n\nexport const buildCookieOptionsWithExpiry = (\n  type: 'refresh' | 'session',\n  absoluteExpiresAtISO?: string,\n  secureRequest?: boolean\n) => {\n  const base = getRefreshCookieOptions(secureRequest);\n  if (type === 'session') {\n    return base;\n  }\n\n  const { idleSeconds } = getLifespansForType('refresh');\n  const now = Date.now();\n  const idleExpiry = now + idleSeconds * 1000;\n  const absoluteExpiry = absoluteExpiresAtISO\n    ? new Date(absoluteExpiresAtISO).getTime()\n    : idleExpiry;\n  const chosen = new Date(Math.min(idleExpiry, absoluteExpiry));\n\n  return { ...base, expires: chosen, maxAge: Math.max(0, chosen.getTime() - now) };\n};\n\nexport const getSessionManager = (): Modules.SessionManager.SessionManagerService | null => {\n  const manager = strapi.sessionManager as Modules.SessionManager.SessionManagerService | undefined;\n  return manager ?? null;\n};\n\nexport const generateDeviceId = (): string => crypto.randomUUID();\n\nexport const extractDeviceParams = (\n  requestBody: unknown\n): { deviceId: string; rememberMe: boolean } => {\n  const body = (requestBody ?? {}) as { deviceId?: string; rememberMe?: boolean };\n  const deviceId = body.deviceId || generateDeviceId();\n  const rememberMe = Boolean(body.rememberMe);\n\n  return { deviceId, rememberMe };\n};\n"],"names":["REFRESH_COOKIE_NAME","DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN","DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN","DEFAULT_MAX_SESSION_LIFESPAN","DEFAULT_IDLE_SESSION_LIFESPAN","getRefreshCookieOptions","secureRequest","configuredSecure","strapi","config","get","isProduction","process","env","NODE_ENV","domain","path","sameSite","isSecure","undefined","httpOnly","secure","overwrite","maxAge","getLifespansForType","type","idleSeconds","Number","maxSeconds","buildCookieOptionsWithExpiry","absoluteExpiresAtISO","base","now","Date","idleExpiry","absoluteExpiry","getTime","chosen","Math","min","expires","max","getSessionManager","manager","sessionManager","generateDeviceId","crypto","randomUUID","extractDeviceParams","requestBody","body","deviceId","rememberMe","Boolean"],"mappings":";;AAGO,MAAMA,sBAAsB;AAE5B,MAAMC,kCAAAA,GAAqC,EAAA,GAAK,EAAA,GAAK,KAAK;AAC1D,MAAMC,mCAAAA,GAAsC,EAAA,GAAK,EAAA,GAAK,KAAK;AAC3D,MAAMC,4BAAAA,GAA+B,CAAA,GAAI,EAAA,GAAK,KAAK;AACnD,MAAMC,6BAAAA,GAAgC,CAAA,GAAI,EAAA,GAAK;AAE/C,MAAMC,0BAA0B,CAACC,aAAAA,GAAAA;AACtC,IAAA,MAAMC,gBAAAA,GAAmBC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,0BAAA,CAAA;AAC3C,IAAA,MAAMC,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;IAE9C,MAAMC,MAAAA,GACJP,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,0BAAA,CAAA,IAA+BF,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,mBAAA,CAAA;AACrE,IAAA,MAAMM,OAAeR,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,wBAAA,EAA0B,QAAA,CAAA;AAEjE,IAAA,MAAMO,WACJT,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,4BAAA,CAAA,IAAiC,KAAA;IAErD,IAAIQ,QAAAA;IACJ,IAAI,OAAOX,qBAAqB,SAAA,EAAW;QACzCW,QAAAA,GAAWX,gBAAAA;IACb,CAAA,MAAO,IAAID,kBAAkBa,SAAAA,EAAW;AACtCD,QAAAA,QAAAA,GAAWP,YAAAA,IAAgBL,aAAAA;IAC7B,CAAA,MAAO;QACLY,QAAAA,GAAWP,YAAAA;AACb,IAAA;IAEA,OAAO;QACLS,QAAAA,EAAU,IAAA;QACVC,MAAAA,EAAQH,QAAAA;QACRI,SAAAA,EAAW,IAAA;AACXP,QAAAA,MAAAA;AACAC,QAAAA,IAAAA;AACAC,QAAAA,QAAAA;QACAM,MAAAA,EAAQJ;AACV,KAAA;AACF;AAEA,MAAMK,sBAAsB,CAC1BC,IAAAA,GAAAA;AAEA,IAAwB;AACtB,QAAA,MAAMC,cAAcC,MAAAA,CAClBnB,MAAAA,CAAOC,MAAM,CAACC,GAAG,CACf,8CAAA,EACAR,mCAAAA,CAAAA,CAAAA;AAGJ,QAAA,MAAM0B,aAAaD,MAAAA,CACjBnB,MAAAA,CAAOC,MAAM,CAACC,GAAG,CACf,6CAAA,EACAT,kCAAAA,CAAAA,CAAAA;QAIJ,OAAO;AAAEyB,YAAAA,WAAAA;AAAaE,YAAAA;AAAW,SAAA;AACnC,IAAA;AAUF,CAAA;AAEO,MAAMC,4BAAAA,GAA+B,CAC1CJ,IAAAA,EACAK,oBAAAA,EACAxB,aAAAA,GAAAA;AAEA,IAAA,MAAMyB,OAAO1B,uBAAAA,CAAwBC,aAAAA,CAAAA;AACrC,IAAA,IAAImB,SAAS,SAAA,EAAW;QACtB,OAAOM,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM,EAAEL,WAAW,EAAE,GAAGF,mBAAAA,CAAoB,CAAA;IAC5C,MAAMQ,GAAAA,GAAMC,KAAKD,GAAG,EAAA;IACpB,MAAME,UAAAA,GAAaF,MAAMN,WAAAA,GAAc,IAAA;AACvC,IAAA,MAAMS,iBAAiBL,oBAAAA,GACnB,IAAIG,IAAAA,CAAKH,oBAAAA,CAAAA,CAAsBM,OAAO,EAAA,GACtCF,UAAAA;AACJ,IAAA,MAAMG,SAAS,IAAIJ,IAAAA,CAAKK,IAAAA,CAAKC,GAAG,CAACL,UAAAA,EAAYC,cAAAA,CAAAA,CAAAA;IAE7C,OAAO;AAAE,QAAA,GAAGJ,IAAI;QAAES,OAAAA,EAASH,MAAAA;AAAQd,QAAAA,MAAAA,EAAQe,KAAKG,GAAG,CAAC,CAAA,EAAGJ,MAAAA,CAAOD,OAAO,EAAA,GAAKJ,GAAAA;AAAK,KAAA;AACjF;MAEaU,iBAAAA,GAAoB,IAAA;IAC/B,MAAMC,OAAAA,GAAUnC,OAAOoC,cAAc;AACrC,IAAA,OAAOD,OAAAA,IAAW,IAAA;AACpB;AAEO,MAAME,gBAAAA,GAAmB,IAAcC,MAAAA,CAAOC,UAAU;AAExD,MAAMC,sBAAsB,CACjCC,WAAAA,GAAAA;IAEA,MAAMC,IAAAA,GAAQD,eAAe,EAAC;IAC9B,MAAME,QAAAA,GAAWD,IAAAA,CAAKC,QAAQ,IAAIN,gBAAAA,EAAAA;IAClC,MAAMO,UAAAA,GAAaC,OAAAA,CAAQH,IAAAA,CAAKE,UAAU,CAAA;IAE1C,OAAO;AAAED,QAAAA,QAAAA;AAAUC,QAAAA;AAAW,KAAA;AAChC;;;;"}
+{"version":3,"file":"session-auth.mjs","sources":["../../../../shared/utils/session-auth.ts"],"sourcesContent":["import crypto from 'crypto';\nimport type { Context } from 'koa';\nimport type { Modules } from '@strapi/types';\nimport { buildSessionMetadata } from '@strapi/utils';\n\nimport { resolveAuthCookieName } from './auth-cookie-name';\nimport { resolveAuthCookiePath } from './auth-cookie-path';\nimport { resolveAuthCookieDomain } from './auth-cookie-domain';\n\nconst ADMIN_ORIGIN = 'admin';\nconst SESSION_CONTENT_TYPE = 'admin::session';\n\nexport const REFRESH_COOKIE_NAME = 'strapi_admin_refresh';\n\n// The resolvers are browser-shared (also inlined into the admin bundle) so\n// they default to console.warn; on the server, route their warnings through\n// the Strapi logger instead.\nconst warnViaStrapiLog = (message: string): void => {\n  strapi.log.warn(message);\n};\n\nexport const getAccessCookieName = (): string => {\n  const configured: string | undefined = strapi.config.get('admin.auth.cookie.name');\n  return resolveAuthCookieName(configured, warnViaStrapiLog);\n};\n\nexport const getAccessCookiePath = (): string => {\n  const configured: string | undefined = strapi.config.get('admin.auth.cookie.path');\n  return resolveAuthCookiePath(configured, warnViaStrapiLog);\n};\n\nexport const getAccessCookieDomain = (): string | undefined => {\n  const configured: string | undefined =\n    strapi.config.get('admin.auth.cookie.domain') || strapi.config.get('admin.auth.domain');\n  return resolveAuthCookieDomain(configured, warnViaStrapiLog);\n};\n\nexport const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN = 30 * 24 * 60 * 60;\nexport const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN = 14 * 24 * 60 * 60;\nexport const DEFAULT_MAX_SESSION_LIFESPAN = 1 * 24 * 60 * 60;\nexport const DEFAULT_IDLE_SESSION_LIFESPAN = 2 * 60 * 60;\n\nexport const getRefreshCookieOptions = (secureRequest?: boolean) => {\n  const configuredSecure = strapi.config.get('admin.auth.cookie.secure');\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const domain = getAccessCookieDomain();\n  const path = getAccessCookiePath();\n\n  const sameSite: boolean | 'lax' | 'strict' | 'none' =\n    strapi.config.get('admin.auth.cookie.sameSite') ?? 'lax';\n\n  let isSecure: boolean;\n  if (typeof configuredSecure === 'boolean') {\n    isSecure = configuredSecure;\n  } else if (secureRequest !== undefined) {\n    isSecure = isProduction && secureRequest;\n  } else {\n    isSecure = isProduction;\n  }\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    overwrite: true,\n    domain,\n    path,\n    sameSite,\n    maxAge: undefined,\n  };\n};\n\nconst getLifespansForType = (\n  type: 'refresh' | 'session'\n): { idleSeconds: number; maxSeconds: number } => {\n  if (type === 'refresh') {\n    const idleSeconds = Number(\n      strapi.config.get(\n        'admin.auth.sessions.idleRefreshTokenLifespan',\n        DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN\n      )\n    );\n    const maxSeconds = Number(\n      strapi.config.get(\n        'admin.auth.sessions.maxRefreshTokenLifespan',\n        DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN\n      )\n    );\n\n    return { idleSeconds, maxSeconds };\n  }\n\n  const idleSeconds = Number(\n    strapi.config.get('admin.auth.sessions.idleSessionLifespan', DEFAULT_IDLE_SESSION_LIFESPAN)\n  );\n  const maxSeconds = Number(\n    strapi.config.get('admin.auth.sessions.maxSessionLifespan', DEFAULT_MAX_SESSION_LIFESPAN)\n  );\n\n  return { idleSeconds, maxSeconds };\n};\n\nexport const buildCookieOptionsWithExpiry = (\n  type: 'refresh' | 'session',\n  absoluteExpiresAtISO?: string,\n  secureRequest?: boolean\n) => {\n  const base = getRefreshCookieOptions(secureRequest);\n  if (type === 'session') {\n    return base;\n  }\n\n  const { idleSeconds } = getLifespansForType('refresh');\n  const now = Date.now();\n  const idleExpiry = now + idleSeconds * 1000;\n  const absoluteExpiry = absoluteExpiresAtISO\n    ? new Date(absoluteExpiresAtISO).getTime()\n    : idleExpiry;\n  const chosen = new Date(Math.min(idleExpiry, absoluteExpiry));\n\n  return { ...base, expires: chosen, maxAge: Math.max(0, chosen.getTime() - now) };\n};\n\nexport const getSessionManager = (): Modules.SessionManager.SessionManagerService | null => {\n  const manager = strapi.sessionManager as Modules.SessionManager.SessionManagerService | undefined;\n  return manager ?? null;\n};\n\nexport const generateDeviceId = (): string => crypto.randomUUID();\n\nexport const extractDeviceParams = (\n  requestBody: unknown\n): { deviceId: string; rememberMe: boolean } => {\n  const body = (requestBody ?? {}) as { deviceId?: string; rememberMe?: boolean };\n  const deviceId = body.deviceId || generateDeviceId();\n  const rememberMe = Boolean(body.rememberMe);\n\n  return { deviceId, rememberMe };\n};\n\nexport const buildSessionMetadataFromContext = (ctx: Context) =>\n  buildSessionMetadata({\n    userAgent: ctx.request.headers['user-agent'],\n  });\n\n/**\n * Resolves the device id to use when revoking sessions on logout.\n * SSO assigns deviceId server-side, so the client-provided value may not match\n * the active session row. Prefer the deviceId stored on the session backing\n * the current access token when available.\n *\n * Callers should pass `ctx.state.session.id` from the admin auth strategy and\n * the already-parsed body `deviceId` — the logout route requires authentication,\n * so sessionId is expected to be present.\n */\nexport const resolveLogoutDeviceId = async (\n  userId: string,\n  sessionId: string | undefined,\n  clientDeviceId: string | undefined\n): Promise<string | undefined> => {\n  if (!sessionId) {\n    strapi.log.debug('resolveLogoutDeviceId: no sessionId; falling back to client deviceId');\n    return clientDeviceId;\n  }\n\n  const session = await strapi.db.query(SESSION_CONTENT_TYPE).findOne({\n    where: { sessionId },\n  });\n\n  if (session?.userId !== userId || session?.origin !== ADMIN_ORIGIN) {\n    strapi.log.debug(\n      'resolveLogoutDeviceId: access-token session missing or not owned; falling back to client deviceId'\n    );\n    return clientDeviceId;\n  }\n\n  return typeof session.deviceId === 'string' ? session.deviceId : clientDeviceId;\n};\n"],"names":["ADMIN_ORIGIN","SESSION_CONTENT_TYPE","REFRESH_COOKIE_NAME","warnViaStrapiLog","message","strapi","log","warn","getAccessCookieName","configured","config","get","resolveAuthCookieName","getAccessCookiePath","resolveAuthCookiePath","getAccessCookieDomain","resolveAuthCookieDomain","DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN","DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN","DEFAULT_MAX_SESSION_LIFESPAN","DEFAULT_IDLE_SESSION_LIFESPAN","getRefreshCookieOptions","secureRequest","configuredSecure","isProduction","process","env","NODE_ENV","domain","path","sameSite","isSecure","undefined","httpOnly","secure","overwrite","maxAge","getLifespansForType","type","idleSeconds","Number","maxSeconds","buildCookieOptionsWithExpiry","absoluteExpiresAtISO","base","now","Date","idleExpiry","absoluteExpiry","getTime","chosen","Math","min","expires","max","getSessionManager","manager","sessionManager","generateDeviceId","crypto","randomUUID","extractDeviceParams","requestBody","body","deviceId","rememberMe","Boolean","buildSessionMetadataFromContext","ctx","buildSessionMetadata","userAgent","request","headers","resolveLogoutDeviceId","userId","sessionId","clientDeviceId","debug","session","db","query","findOne","where","origin"],"mappings":";;;;;;AASA,MAAMA,YAAAA,GAAe,OAAA;AACrB,MAAMC,oBAAAA,GAAuB,gBAAA;AAEtB,MAAMC,sBAAsB;AAEnC;AACA;AACA;AACA,MAAMC,mBAAmB,CAACC,OAAAA,GAAAA;IACxBC,MAAAA,CAAOC,GAAG,CAACC,IAAI,CAACH,OAAAA,CAAAA;AAClB,CAAA;MAEaI,mBAAAA,GAAsB,IAAA;AACjC,IAAA,MAAMC,UAAAA,GAAiCJ,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,wBAAA,CAAA;AACzD,IAAA,OAAOC,sBAAsBH,UAAAA,EAAYN,gBAAAA,CAAAA;AAC3C;MAEaU,mBAAAA,GAAsB,IAAA;AACjC,IAAA,MAAMJ,UAAAA,GAAiCJ,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,wBAAA,CAAA;AACzD,IAAA,OAAOG,sBAAsBL,UAAAA,EAAYN,gBAAAA,CAAAA;AAC3C;MAEaY,qBAAAA,GAAwB,IAAA;IACnC,MAAMN,UAAAA,GACJJ,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,0BAAA,CAAA,IAA+BN,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,mBAAA,CAAA;AACrE,IAAA,OAAOK,wBAAwBP,UAAAA,EAAYN,gBAAAA,CAAAA;AAC7C;AAEO,MAAMc,kCAAAA,GAAqC,EAAA,GAAK,EAAA,GAAK,KAAK;AAC1D,MAAMC,mCAAAA,GAAsC,EAAA,GAAK,EAAA,GAAK,KAAK;AAC3D,MAAMC,4BAAAA,GAA+B,CAAA,GAAI,EAAA,GAAK,KAAK;AACnD,MAAMC,6BAAAA,GAAgC,CAAA,GAAI,EAAA,GAAK;AAE/C,MAAMC,0BAA0B,CAACC,aAAAA,GAAAA;AACtC,IAAA,MAAMC,gBAAAA,GAAmBlB,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,0BAAA,CAAA;AAC3C,IAAA,MAAMa,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;AAE9C,IAAA,MAAMC,MAAAA,GAASb,qBAAAA,EAAAA;AACf,IAAA,MAAMc,IAAAA,GAAOhB,mBAAAA,EAAAA;AAEb,IAAA,MAAMiB,WACJzB,MAAAA,CAAOK,MAAM,CAACC,GAAG,CAAC,4BAAA,CAAA,IAAiC,KAAA;IAErD,IAAIoB,QAAAA;IACJ,IAAI,OAAOR,qBAAqB,SAAA,EAAW;QACzCQ,QAAAA,GAAWR,gBAAAA;IACb,CAAA,MAAO,IAAID,kBAAkBU,SAAAA,EAAW;AACtCD,QAAAA,QAAAA,GAAWP,YAAAA,IAAgBF,aAAAA;IAC7B,CAAA,MAAO;QACLS,QAAAA,GAAWP,YAAAA;AACb,IAAA;IAEA,OAAO;QACLS,QAAAA,EAAU,IAAA;QACVC,MAAAA,EAAQH,QAAAA;QACRI,SAAAA,EAAW,IAAA;AACXP,QAAAA,MAAAA;AACAC,QAAAA,IAAAA;AACAC,QAAAA,QAAAA;QACAM,MAAAA,EAAQJ;AACV,KAAA;AACF;AAEA,MAAMK,sBAAsB,CAC1BC,IAAAA,GAAAA;AAEA,IAAwB;AACtB,QAAA,MAAMC,cAAcC,MAAAA,CAClBnC,MAAAA,CAAOK,MAAM,CAACC,GAAG,CACf,8CAAA,EACAO,mCAAAA,CAAAA,CAAAA;AAGJ,QAAA,MAAMuB,aAAaD,MAAAA,CACjBnC,MAAAA,CAAOK,MAAM,CAACC,GAAG,CACf,6CAAA,EACAM,kCAAAA,CAAAA,CAAAA;QAIJ,OAAO;AAAEsB,YAAAA,WAAAA;AAAaE,YAAAA;AAAW,SAAA;AACnC,IAAA;AAUF,CAAA;AAEO,MAAMC,4BAAAA,GAA+B,CAC1CJ,IAAAA,EACAK,oBAAAA,EACArB,aAAAA,GAAAA;AAEA,IAAA,MAAMsB,OAAOvB,uBAAAA,CAAwBC,aAAAA,CAAAA;AACrC,IAAA,IAAIgB,SAAS,SAAA,EAAW;QACtB,OAAOM,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM,EAAEL,WAAW,EAAE,GAAGF,mBAAAA,CAAoB,CAAA;IAC5C,MAAMQ,GAAAA,GAAMC,KAAKD,GAAG,EAAA;IACpB,MAAME,UAAAA,GAAaF,MAAMN,WAAAA,GAAc,IAAA;AACvC,IAAA,MAAMS,iBAAiBL,oBAAAA,GACnB,IAAIG,IAAAA,CAAKH,oBAAAA,CAAAA,CAAsBM,OAAO,EAAA,GACtCF,UAAAA;AACJ,IAAA,MAAMG,SAAS,IAAIJ,IAAAA,CAAKK,IAAAA,CAAKC,GAAG,CAACL,UAAAA,EAAYC,cAAAA,CAAAA,CAAAA;IAE7C,OAAO;AAAE,QAAA,GAAGJ,IAAI;QAAES,OAAAA,EAASH,MAAAA;AAAQd,QAAAA,MAAAA,EAAQe,KAAKG,GAAG,CAAC,CAAA,EAAGJ,MAAAA,CAAOD,OAAO,EAAA,GAAKJ,GAAAA;AAAK,KAAA;AACjF;MAEaU,iBAAAA,GAAoB,IAAA;IAC/B,MAAMC,OAAAA,GAAUnD,OAAOoD,cAAc;AACrC,IAAA,OAAOD,OAAAA,IAAW,IAAA;AACpB;AAEO,MAAME,gBAAAA,GAAmB,IAAcC,MAAAA,CAAOC,UAAU;AAExD,MAAMC,sBAAsB,CACjCC,WAAAA,GAAAA;IAEA,MAAMC,IAAAA,GAAQD,eAAe,EAAC;IAC9B,MAAME,QAAAA,GAAWD,IAAAA,CAAKC,QAAQ,IAAIN,gBAAAA,EAAAA;IAClC,MAAMO,UAAAA,GAAaC,OAAAA,CAAQH,IAAAA,CAAKE,UAAU,CAAA;IAE1C,OAAO;AAAED,QAAAA,QAAAA;AAAUC,QAAAA;AAAW,KAAA;AAChC;AAEO,MAAME,+BAAAA,GAAkC,CAACC,GAAAA,GAC9CC,oBAAAA,CAAqB;AACnBC,QAAAA,SAAAA,EAAWF,GAAAA,CAAIG,OAAO,CAACC,OAAO,CAAC,YAAA;KACjC;AAEF;;;;;;;;;AASC,IACM,MAAMC,qBAAAA,GAAwB,OACnCC,QACAC,SAAAA,EACAC,cAAAA,GAAAA;AAEA,IAAA,IAAI,CAACD,SAAAA,EAAW;QACdtE,MAAAA,CAAOC,GAAG,CAACuE,KAAK,CAAC,sEAAA,CAAA;QACjB,OAAOD,cAAAA;AACT,IAAA;IAEA,MAAME,OAAAA,GAAU,MAAMzE,MAAAA,CAAO0E,EAAE,CAACC,KAAK,CAAC/E,oBAAAA,CAAAA,CAAsBgF,OAAO,CAAC;QAClEC,KAAAA,EAAO;AAAEP,YAAAA;AAAU;AACrB,KAAA,CAAA;AAEA,IAAA,IAAIG,OAAAA,EAASJ,MAAAA,KAAWA,MAAAA,IAAUI,OAAAA,EAASK,WAAWnF,YAAAA,EAAc;QAClEK,MAAAA,CAAOC,GAAG,CAACuE,KAAK,CACd,mGAAA,CAAA;QAEF,OAAOD,cAAAA;AACT,IAAA;AAEA,IAAA,OAAO,OAAOE,OAAAA,CAAQd,QAAQ,KAAK,QAAA,GAAWc,OAAAA,CAAQd,QAAQ,GAAGY,cAAAA;AACnE;;;;"}

package/dist/server/src/content-types/User.d.ts

@@ -58,6 +58,12 @@ declare const _default: {
             private: boolean;
             searchable: boolean;
         };
+        resetPasswordTokenExpiresAt: {
+            type: string;
+            configurable: boolean;
+            private: boolean;
+            searchable: boolean;
+        };
         registrationToken: {
             type: string;
             configurable: boolean;

package/dist/server/src/content-types/User.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../../../server/src/content-types/User.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAiHE"}
+{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../../../server/src/content-types/User.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAuHE"}

package/dist/server/src/content-types/index.d.ts

@@ -129,6 +129,12 @@ declare const _default: {
                     private: boolean;
                     searchable: boolean;
                 };
+                resetPasswordTokenExpiresAt: {
+                    type: string;
+                    configurable: boolean;
+                    private: boolean;
+                    searchable: boolean;
+                };
                 registrationToken: {
                     type: string;
                     configurable: boolean;

package/dist/server/src/content-types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/content-types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,wBASE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/content-types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,wBASE"}

package/dist/server/src/controllers/admin.d.ts

@@ -26,8 +26,8 @@ declare const _default: {
     updateProjectSettings(ctx: Context): Promise<GetProjectSettings.Response>;
     telemetryProperties(ctx: Context): Promise<{
         data: {
-            useTypescriptOnServer: any;
-            useTypescriptOnAdmin: any;
+            useTypescriptOnServer: boolean;
+            useTypescriptOnAdmin: boolean;
             isHostedOnStrapiCloud: boolean;
             numberOfAllContentTypes: number;
             numberOfComponents: number;
@@ -53,7 +53,7 @@ declare const _default: {
     getGuidedTourMeta(ctx: Context): Promise<{
         data: {
             isFirstSuperAdminUser: boolean;
-            schemas: import("@strapi/types/dist/public").ContentTypeSchemas;
+            schemas: import("@strapi/types/dist/public/registries.js").ContentTypeSchemas;
         };
     }>;
 };

package/dist/server/src/controllers/authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAQ,MAAM,KAAK,CAAC;AAGzC,OAAO,eAAe,CAAC;;;0BAwHO,OAAO;kBAcf,OAAO;uBAiDF,OAAO;wBAmDN,OAAO;uBAUR,OAAO;qBAsDT,OAAO;gBAyCZ,OAAO;;AA7S3B,wBAsUE"}
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAQ,MAAM,KAAK,CAAC;AAGzC,OAAO,eAAe,CAAC;;;0BAqHO,OAAO;kBAcf,OAAO;uBAiDF,OAAO;wBAmDN,OAAO;uBAUR,OAAO;qBAsDT,OAAO;gBAyCZ,OAAO;;AA7S3B,wBA2UE"}

package/dist/server/src/controllers/index.d.ts

@@ -22,8 +22,8 @@ declare const _default: {
         updateProjectSettings(ctx: import("koa").Context): Promise<import("../../../shared/contracts/admin").GetProjectSettings.Response>;
         telemetryProperties(ctx: import("koa").Context): Promise<{
             data: {
-                useTypescriptOnServer: any;
-                useTypescriptOnAdmin: any;
+                useTypescriptOnServer: boolean;
+                useTypescriptOnAdmin: boolean;
                 isHostedOnStrapiCloud: boolean;
                 numberOfAllContentTypes: number;
                 numberOfComponents: number;
@@ -49,7 +49,7 @@ declare const _default: {
         getGuidedTourMeta(ctx: import("koa").Context): Promise<{
             data: {
                 isFirstSuperAdminUser: boolean;
-                schemas: import("@strapi/types/dist/public").ContentTypeSchemas;
+                schemas: import("@strapi/types/dist/public/registries.js").ContentTypeSchemas;
             };
         }>;
     };

package/dist/server/src/domain/user.d.ts

@@ -10,9 +10,10 @@ export declare function createUser(attributes: Partial<AdminUserCreationPayload>
     email?: string | undefined;
     password?: string | undefined;
     resetPasswordToken?: string | null | undefined;
+    resetPasswordTokenExpiresAt?: (string | Date | null) | undefined;
     registrationToken?: string | null | undefined;
     preferedLanguage?: string | undefined;
-    roles: import("@strapi/types/dist/data").ID[];
+    roles: import("@strapi/types/dist/data/constants.js").ID[];
     isActive: boolean;
 };
 export declare const hasSuperAdminRole: (user: AdminUser) => boolean;

package/dist/server/src/domain/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/domain/user.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAI1C;;;GAGG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,wBAAwB,CAAC;;;;;;;;;;;EAOvE;AAED,eAAO,MAAM,iBAAiB,GAAI,MAAM,SAAS,YAEhD,CAAC;AAEF,eAAO,MAAM,yBAAyB,UAOrC,CAAC;;;8BAXsC,SAAS;;;AAajD,wBAIE"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/domain/user.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAI1C;;;GAGG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,wBAAwB,CAAC;;;;;;;;;;;;EAOvE;AAED,eAAO,MAAM,iBAAiB,GAAI,MAAM,SAAS,YAEhD,CAAC;AAEF,eAAO,MAAM,yBAAyB,UAOrC,CAAC;;;8BAXsC,SAAS;;;AAajD,wBAIE"}

package/dist/server/src/index.d.ts

@@ -1,9 +1,9 @@
 declare let admin: {
     bootstrap: ({ strapi }: {
-        strapi: import("@strapi/types/dist/core").Strapi;
+        strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
     }) => Promise<void>;
     register: ({ strapi }: {
-        strapi: import("@strapi/types/dist/core").Strapi;
+        strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
     }) => void;
     destroy: () => Promise<void>;
     config: {
@@ -108,7 +108,7 @@ declare let admin: {
                 isActive?: true;
             }) => Promise<import("../../shared/contracts/shared").AdminUser>;
             createFirstAdmin: (attributes: Omit<Partial<import("../../shared/contracts/shared").AdminUserCreationPayload>, "registrationToken" | "isActive" | "roles">) => Promise<import("../../shared/contracts/shared").AdminUser>;
-            updateById: (id: import("@strapi/types/dist/data").ID, attributes: Partial<import("../../shared/contracts/shared").AdminUserUpdatePayload>) => Promise<import("../../shared/contracts/shared").AdminUser>;
+            updateById: (id: import("@strapi/types/dist/data/constants.js").ID, attributes: Partial<import("../../shared/contracts/shared").AdminUserUpdatePayload>) => Promise<import("../../shared/contracts/shared").AdminUser>;
             exists: (attributes?: unknown) => Promise<boolean>;
             findRegistrationInfo: (registrationToken: string) => Promise<Pick<import("../../shared/contracts/shared").AdminUser, "email" | "firstname" | "lastname"> | undefined>;
             register: ({ registrationToken, userInfo, }: {
@@ -116,18 +116,18 @@ declare let admin: {
                 userInfo: Partial<import("../../shared/contracts/shared").AdminUser>;
             }) => Promise<import("../../shared/contracts/shared").AdminUser>;
             sanitizeUser: (user: import("../../shared/contracts/shared").AdminUser) => import("../../shared/contracts/shared").SanitizedAdminUser;
-            findOne: (id: import("@strapi/types/dist/data").ID, populate?: string[]) => Promise<any>;
+            findOne: (id: import("@strapi/types/dist/data/constants.js").ID, populate?: string[]) => Promise<any>;
             findOneByEmail: (email: string, populate?: never[]) => Promise<any>;
             findPage: (params?: {}) => Promise<unknown>;
-            deleteById: (id: import("@strapi/types/dist/data").ID) => Promise<import("../../shared/contracts/shared").AdminUser | null>;
+            deleteById: (id: import("@strapi/types/dist/data/constants.js").ID) => Promise<import("../../shared/contracts/shared").AdminUser | null>;
             deleteByIds: (ids: (string | number)[]) => Promise<import("../../shared/contracts/shared").AdminUser[]>;
             countUsersWithoutRole: () => Promise<number>;
             count: (where?: {}) => Promise<number>;
-            assignARoleToAll: (roleId: import("@strapi/types/dist/data").ID) => Promise<void>;
+            assignARoleToAll: (roleId: import("@strapi/types/dist/data/constants.js").ID) => Promise<void>;
             displayWarningIfUsersDontHaveRole: () => Promise<void>;
             resetPasswordByEmail: (email: string, password: string) => Promise<void>;
             getLanguagesInUse: () => Promise<string[]>;
-            isFirstSuperAdminUser: (userId: import("@strapi/types/dist/data").ID) => Promise<boolean>;
+            isFirstSuperAdminUser: (userId: import("@strapi/types/dist/data/constants.js").ID) => Promise<boolean>;
         };
         role: {
             hooks: {
@@ -153,17 +153,17 @@ declare let admin: {
             update: (params: any, attributes: Partial<import("../../shared/contracts/shared").AdminRole>) => Promise<import("../../shared/contracts/shared").AdminRole>;
             exists: (params?: unknown) => Promise<boolean>;
             count: (params?: any) => Promise<number>;
-            deleteByIds: (ids?: import("@strapi/types/dist/data").ID[]) => Promise<import("../../shared/contracts/shared").AdminRole[]>;
-            getUsersCount: (roleId: import("@strapi/types/dist/data").ID) => Promise<number>;
+            deleteByIds: (ids?: import("@strapi/types/dist/data/constants.js").ID[]) => Promise<import("../../shared/contracts/shared").AdminRole[]>;
+            getUsersCount: (roleId: import("@strapi/types/dist/data/constants.js").ID) => Promise<number>;
             getSuperAdmin: () => Promise<import("../../shared/contracts/shared").AdminRole | undefined>;
             getSuperAdminWithUsersCount: () => Promise<import("./services/role").AdminRoleWithUsersCount>;
             createRolesIfNoneExist: () => Promise<void>;
             displayWarningIfNoSuperAdmin: () => Promise<void>;
-            addPermissions: (roleId: import("@strapi/types/dist/data").ID, permissions: any) => Promise<import("../../shared/contracts/shared").Permission[]>;
+            addPermissions: (roleId: import("@strapi/types/dist/data/constants.js").ID, permissions: any) => Promise<import("../../shared/contracts/shared").Permission[]>;
             hasSuperAdminRole: (user: import("../../shared/contracts/shared").AdminUser) => boolean;
-            assignPermissions: (roleId: import("@strapi/types/dist/data").ID, permissions?: Array<Pick<import("../../shared/contracts/shared").Permission, "action" | "subject" | "conditions">>) => Promise<import("../../shared/contracts/shared").Permission[]>;
+            assignPermissions: (roleId: import("@strapi/types/dist/data/constants.js").ID, permissions?: Array<Pick<import("../../shared/contracts/shared").Permission, "action" | "subject" | "conditions">>) => Promise<import("../../shared/contracts/shared").Permission[]>;
             resetSuperAdminPermissions: () => Promise<void>;
-            checkRolesIdForDeletion: (ids?: import("@strapi/types/dist/data").ID[]) => Promise<void>;
+            checkRolesIdForDeletion: (ids?: import("@strapi/types/dist/data/constants.js").ID[]) => Promise<void>;
             constants: {
                 superAdminCode: string;
             };
@@ -182,8 +182,8 @@ declare let admin: {
             sendDidInviteUser: () => Promise<void>;
             sendDidUpdateRolePermissions: () => Promise<void>;
             sendDidChangeInterfaceLanguage: () => Promise<void>;
-            sendUpdateProjectInformation: (strapi: import("@strapi/types/dist/core").Strapi) => Promise<void>;
-            startCron: (strapi: import("@strapi/types/dist/core").Strapi) => void;
+            sendUpdateProjectInformation: (strapi: import("@strapi/types/dist/core/strapi.js").Strapi) => Promise<void>;
+            startCron: (strapi: import("@strapi/types/dist/core/strapi.js").Strapi) => void;
         };
         'content-type': typeof import("./services/content-type");
         constants: typeof import("./services/constants");
@@ -199,7 +199,7 @@ declare let admin: {
             decrypt: (encryptedValue: string) => string | null;
         };
         homepage: ({ strapi }: {
-            strapi: import("@strapi/types/dist/core").Strapi;
+            strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
         }) => {
             getKeyStatistics: () => Promise<{
                 assets: number;
@@ -238,8 +238,8 @@ declare let admin: {
             updateProjectSettings(ctx: import("koa").Context): Promise<import("../../shared/contracts/admin").GetProjectSettings.Response>;
             telemetryProperties(ctx: import("koa").Context): Promise<{
                 data: {
-                    useTypescriptOnServer: any;
-                    useTypescriptOnAdmin: any;
+                    useTypescriptOnServer: boolean;
+                    useTypescriptOnAdmin: boolean;
                     isHostedOnStrapiCloud: boolean;
                     numberOfAllContentTypes: number;
                     numberOfComponents: number;
@@ -265,7 +265,7 @@ declare let admin: {
             getGuidedTourMeta(ctx: import("koa").Context): Promise<{
                 data: {
                     isFirstSuperAdminUser: boolean;
-                    schemas: import("@strapi/types/dist/public").ContentTypeSchemas;
+                    schemas: import("@strapi/types/dist/public/registries.js").ContentTypeSchemas;
                 };
             }>;
         };
@@ -500,6 +500,12 @@ declare let admin: {
                         private: boolean;
                         searchable: boolean;
                     };
+                    resetPasswordTokenExpiresAt: {
+                        type: string;
+                        configurable: boolean;
+                        private: boolean;
+                        searchable: boolean;
+                    };
                     registrationToken: {
                         type: string;
                         configurable: boolean;
@@ -948,7 +954,7 @@ declare let admin: {
     };
     middlewares: {
         rateLimit: (config: any, { strapi }: {
-            strapi: import("@strapi/types/dist/core").Strapi;
+            strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
         }) => (ctx: import("koa").Context, next: import("koa").Next) => Promise<any>;
         'data-transfer': () => (ctx: import("koa").Context, next: import("koa").Next) => Promise<any>;
     };

package/dist/server/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/src/index.ts"],"names":[],"mappings":"AAeA,QAAA,IAAI,KAAK;;;;;;;;;;;;;;;;;;;;;;sBAPG,GAAG;;;;;sBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA6Bm5C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA3B/4C,0BAAY,EAAC,wBACjC;gCAPe,0BAAW,EAAC,wBACtB;;CAqBJ,CAAC;AAUF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/src/index.ts"],"names":[],"mappings":"AAeA,QAAA,IAAI,KAAK;;;;;;;;;;;;;;;;;;;;;;sBAPG,GAAG;;;;;sBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA6Bu9C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA3Bn9C,0BAAY,EAAC,wBACjC;gCAPe,0BAAW,EAAC,wBACtB;;CAqBJ,CAAC;AAUF,eAAe,KAAK,CAAC"}

package/dist/server/src/middlewares/index.d.ts

@@ -2,7 +2,7 @@ export { default as rateLimit } from './rateLimit';
 export { default as dataTransfer } from './data-transfer';
 declare const _default: {
     rateLimit: (config: any, { strapi }: {
-        strapi: import("@strapi/types/dist/core").Strapi;
+        strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
     }) => (ctx: import("koa").Context, next: import("koa").Next) => Promise<any>;
     'data-transfer': () => (ctx: import("koa").Context, next: import("koa").Next) => Promise<any>;
 };

package/dist/server/src/routes/serve-admin-panel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-admin-panel.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/serve-admin-panel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAIzC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,QAAA,MAAM,uBAAuB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,SA4CnE,CAAC;AAGF,eAAO,MAAM,WAAW,GAAI,UAAU,GAAG,EAAE,qBAAqB,MAGhD,KAAK,OAAO,EAAE,MAAM,IAAI,kBAiBvC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"serve-admin-panel.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/serve-admin-panel.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAIzC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAW1C,QAAA,MAAM,uBAAuB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,SAmDnE,CAAC;AAGF,eAAO,MAAM,WAAW,GAAI,UAAU,GAAG,EAAE,qBAAqB,MAGhD,KAAK,OAAO,EAAE,MAAM,IAAI,kBAiBvC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/server/src/services/auth.d.ts

@@ -1,5 +1,22 @@
 import type { AdminUser } from '../../../shared/contracts/shared';
 import '@strapi/types';
+/**
+ * Resolve the reset-password token lifetime, in milliseconds, from config.
+ * Falls back to {@link DEFAULT_RESET_PASSWORD_TOKEN_EXPIRES_IN} for unset/invalid values.
+ */
+declare const getResetPasswordTokenTTL: () => number;
+/**
+ * Create a reset-password token with an expiry and persist it on the user.
+ * Shared by the CE and EE auth services so the expiry behaviour can't drift.
+ * @returns the generated reset-password token
+ */
+declare const assignResetPasswordToken: (userId: AdminUser["id"]) => Promise<string>;
+/**
+ * Reject a reset-password token that has expired — or that has no expiry at all
+ * (tokens issued before this was introduced) — clearing the stale token so it
+ * cannot be retried. Shared by the CE and EE auth services. (GH#25711)
+ */
+declare const assertResetPasswordTokenIsValid: (user: AdminUser) => Promise<void>;
 declare const _default: {
     checkCredentials: ({ email, password }: {
         email: string;
@@ -18,4 +35,5 @@ declare const _default: {
     }) => Promise<AdminUser>;
 };
 export default _default;
+export { getResetPasswordTokenTTL, assignResetPasswordToken, assertResetPasswordTokenIsValid };
 //# sourceMappingURL=auth.d.ts.map

package/dist/server/src/services/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../server/src/services/auth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,eAAe,CAAC;;4CAwB8B;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;;;iCAPpD,MAAM,QAAQ,MAAM;6BARxB,MAAM;;eAuCmB,MAAM;;;4BA2CE,MAAM;kBAAY,MAAM;;;AAgBzF,wBAAmG"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../server/src/services/auth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,eAAe,CAAC;AAQvB;;;GAGG;AACH,QAAA,MAAM,wBAAwB,QAAO,MASpC,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,wBAAwB,GAAU,QAAQ,SAAS,CAAC,IAAI,CAAC,KAAG,OAAO,CAAC,MAAM,CAU/E,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,+BAA+B,GAAU,MAAM,SAAS,KAAG,OAAO,CAAC,IAAI,CAa5E,CAAC;;4CAsBmD;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;;;iCAPpD,MAAM,QAAQ,MAAM;6BARxB,MAAM;;eAuCmB,MAAM;;;4BA0CE,MAAM;kBAAY,MAAM;;;AAmBzF,wBAAmG;AACnG,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/server/src/services/index.d.ts

@@ -29,7 +29,7 @@ declare const _default: {
             isActive?: true;
         }) => Promise<import("../../../shared/contracts/shared").AdminUser>;
         createFirstAdmin: (attributes: Omit<Partial<import("../../../shared/contracts/shared").AdminUserCreationPayload>, "registrationToken" | "isActive" | "roles">) => Promise<import("../../../shared/contracts/shared").AdminUser>;
-        updateById: (id: import("@strapi/types/dist/data").ID, attributes: Partial<import("../../../shared/contracts/shared").AdminUserUpdatePayload>) => Promise<import("../../../shared/contracts/shared").AdminUser>;
+        updateById: (id: import("@strapi/types/dist/data/constants.js").ID, attributes: Partial<import("../../../shared/contracts/shared").AdminUserUpdatePayload>) => Promise<import("../../../shared/contracts/shared").AdminUser>;
         exists: (attributes?: unknown) => Promise<boolean>;
         findRegistrationInfo: (registrationToken: string) => Promise<Pick<import("../../../shared/contracts/shared").AdminUser, "email" | "firstname" | "lastname"> | undefined>;
         register: ({ registrationToken, userInfo, }: {
@@ -37,18 +37,18 @@ declare const _default: {
             userInfo: Partial<import("../../../shared/contracts/shared").AdminUser>;
         }) => Promise<import("../../../shared/contracts/shared").AdminUser>;
         sanitizeUser: (user: import("../../../shared/contracts/shared").AdminUser) => import("../../../shared/contracts/shared").SanitizedAdminUser;
-        findOne: (id: import("@strapi/types/dist/data").ID, populate?: string[]) => Promise<any>;
+        findOne: (id: import("@strapi/types/dist/data/constants.js").ID, populate?: string[]) => Promise<any>;
         findOneByEmail: (email: string, populate?: never[]) => Promise<any>;
         findPage: (params?: {}) => Promise<unknown>;
-        deleteById: (id: import("@strapi/types/dist/data").ID) => Promise<import("../../../shared/contracts/shared").AdminUser | null>;
+        deleteById: (id: import("@strapi/types/dist/data/constants.js").ID) => Promise<import("../../../shared/contracts/shared").AdminUser | null>;
         deleteByIds: (ids: (string | number)[]) => Promise<import("../../../shared/contracts/shared").AdminUser[]>;
         countUsersWithoutRole: () => Promise<number>;
         count: (where?: {}) => Promise<number>;
-        assignARoleToAll: (roleId: import("@strapi/types/dist/data").ID) => Promise<void>;
+        assignARoleToAll: (roleId: import("@strapi/types/dist/data/constants.js").ID) => Promise<void>;
         displayWarningIfUsersDontHaveRole: () => Promise<void>;
         resetPasswordByEmail: (email: string, password: string) => Promise<void>;
         getLanguagesInUse: () => Promise<string[]>;
-        isFirstSuperAdminUser: (userId: import("@strapi/types/dist/data").ID) => Promise<boolean>;
+        isFirstSuperAdminUser: (userId: import("@strapi/types/dist/data/constants.js").ID) => Promise<boolean>;
     };
     role: {
         hooks: {
@@ -74,17 +74,17 @@ declare const _default: {
         update: (params: any, attributes: Partial<import("../../../shared/contracts/shared").AdminRole>) => Promise<import("../../../shared/contracts/shared").AdminRole>;
         exists: (params?: unknown) => Promise<boolean>;
         count: (params?: any) => Promise<number>;
-        deleteByIds: (ids?: import("@strapi/types/dist/data").ID[]) => Promise<import("../../../shared/contracts/shared").AdminRole[]>;
-        getUsersCount: (roleId: import("@strapi/types/dist/data").ID) => Promise<number>;
+        deleteByIds: (ids?: import("@strapi/types/dist/data/constants.js").ID[]) => Promise<import("../../../shared/contracts/shared").AdminRole[]>;
+        getUsersCount: (roleId: import("@strapi/types/dist/data/constants.js").ID) => Promise<number>;
         getSuperAdmin: () => Promise<import("../../../shared/contracts/shared").AdminRole | undefined>;
         getSuperAdminWithUsersCount: () => Promise<import("./role").AdminRoleWithUsersCount>;
         createRolesIfNoneExist: () => Promise<void>;
         displayWarningIfNoSuperAdmin: () => Promise<void>;
-        addPermissions: (roleId: import("@strapi/types/dist/data").ID, permissions: any) => Promise<import("../../../shared/contracts/shared").Permission[]>;
+        addPermissions: (roleId: import("@strapi/types/dist/data/constants.js").ID, permissions: any) => Promise<import("../../../shared/contracts/shared").Permission[]>;
         hasSuperAdminRole: (user: import("../../../shared/contracts/shared").AdminUser) => boolean;
-        assignPermissions: (roleId: import("@strapi/types/dist/data").ID, permissions?: Array<Pick<import("../../../shared/contracts/shared").Permission, "action" | "subject" | "conditions">>) => Promise<import("../../../shared/contracts/shared").Permission[]>;
+        assignPermissions: (roleId: import("@strapi/types/dist/data/constants.js").ID, permissions?: Array<Pick<import("../../../shared/contracts/shared").Permission, "action" | "subject" | "conditions">>) => Promise<import("../../../shared/contracts/shared").Permission[]>;
         resetSuperAdminPermissions: () => Promise<void>;
-        checkRolesIdForDeletion: (ids?: import("@strapi/types/dist/data").ID[]) => Promise<void>;
+        checkRolesIdForDeletion: (ids?: import("@strapi/types/dist/data/constants.js").ID[]) => Promise<void>;
         constants: {
             superAdminCode: string;
         };
@@ -103,8 +103,8 @@ declare const _default: {
         sendDidInviteUser: () => Promise<void>;
         sendDidUpdateRolePermissions: () => Promise<void>;
         sendDidChangeInterfaceLanguage: () => Promise<void>;
-        sendUpdateProjectInformation: (strapi: import("@strapi/types/dist/core").Strapi) => Promise<void>;
-        startCron: (strapi: import("@strapi/types/dist/core").Strapi) => void;
+        sendUpdateProjectInformation: (strapi: import("@strapi/types/dist/core/strapi.js").Strapi) => Promise<void>;
+        startCron: (strapi: import("@strapi/types/dist/core/strapi.js").Strapi) => void;
     };
     'content-type': typeof contentType;
     constants: typeof constants;
@@ -121,7 +121,7 @@ declare const _default: {
         decrypt: (encryptedValue: string) => string | null;
     };
     homepage: ({ strapi }: {
-        strapi: import("@strapi/types/dist/core").Strapi;
+        strapi: import("@strapi/types/dist/core/strapi.js").Strapi;
     }) => {
         getKeyStatistics: () => Promise<{
             assets: number;

package/dist/server/src/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;oBA4Bo7B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IATz+B,sDAAsD;;;;;;;;;;;;;;;;;;;;;;;;;;AAZxD,wBAoBE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;oBA4Bw/B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAT7iC,sDAAsD;;;;;;;;;;;;;;;;;;;;;;;;;;AAZxD,wBAoBE"}

package/dist/server/src/services/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/services/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACxB,kBAAkB,EAElB,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;;yBA6D5B,OAAO,CAAC,wBAAwB,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAE,KAClE,OAAO,CAAC,SAAS,CAAC;mCASP,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,mBAAmB,GAAG,UAAU,GAAG,OAAO,CAAC,KAC9F,OAAO,CAAC,SAAS,CAAC;qBA4Cf,IAAI,CAAC,EAAE,cACC,OAAO,CAAC,sBAAsB,CAAC,KAC1C,OAAO,CAAC,SAAS,CAAC;0BAsHoB,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;8CAU9C,MAAM,KACxB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC;iDAmBxE;QACD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC9B;yBAzP2B,SAAS,KAAG,kBAAkB;kBA8Q/B,IAAI,CAAC,EAAE;4BAUG,MAAM;+BAUL,OAAO,CAAC,OAAO,CAAC;qBAWxB,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;uBAsCjC,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAuClC,OAAO,CAAC,MAAM,CAAC;2BAcrB,OAAO,CAAC,MAAM,CAAC;+BAOT,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC;6CAoBX,OAAO,CAAC,IAAI,CAAC;kCAzQtB,MAAM,YAAY,MAAM;6BAmR/B,OAAO,CAAC,MAAM,EAAE,CAAC;oCA9OR,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;;AAmPvE,wBAoBE"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/services/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACxB,kBAAkB,EAElB,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;;yBAmE5B,OAAO,CAAC,wBAAwB,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAE,KAClE,OAAO,CAAC,SAAS,CAAC;mCASP,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,mBAAmB,GAAG,UAAU,GAAG,OAAO,CAAC,KAC9F,OAAO,CAAC,SAAS,CAAC;qBA4Cf,IAAI,CAAC,EAAE,cACC,OAAO,CAAC,sBAAsB,CAAC,KAC1C,OAAO,CAAC,SAAS,CAAC;0BAsHoB,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;8CAU9C,MAAM,KACxB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC;iDAmBxE;QACD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC9B;yBA/P2B,SAAS,KAAG,kBAAkB;kBAoR/B,IAAI,CAAC,EAAE;4BAUG,MAAM;+BAUL,OAAO,CAAC,OAAO,CAAC;qBAWxB,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;uBAsCjC,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAuClC,OAAO,CAAC,MAAM,CAAC;2BAcrB,OAAO,CAAC,MAAM,CAAC;+BAOT,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC;6CAoBX,OAAO,CAAC,IAAI,CAAC;kCAzQtB,MAAM,YAAY,MAAM;6BAmR/B,OAAO,CAAC,MAAM,EAAE,CAAC;oCA9OR,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;;AAmPvE,wBAoBE"}

package/dist/shared/contracts/shared.d.ts

@@ -22,6 +22,7 @@ export interface AdminUser extends Entity {
     email?: string;
     password?: string;
     resetPasswordToken?: string | null;
+    resetPasswordTokenExpiresAt?: string | Date | null;
     registrationToken?: string | null;
     isActive: boolean;
     roles: AdminRole[];
@@ -34,7 +35,7 @@ export type AdminUserCreationPayload = Omit<AdminUser, keyof Entity | 'roles' |
 export type AdminUserUpdatePayload = Omit<AdminUser, keyof Entity | 'roles'> & {
     roles: Data.ID[];
 };
-export type SanitizedAdminUser = Omit<AdminUser, 'password' | 'resetPasswordToken' | 'roles'> & {
+export type SanitizedAdminUser = Omit<AdminUser, 'password' | 'resetPasswordToken' | 'resetPasswordTokenExpiresAt' | 'roles'> & {
     roles: SanitizedAdminRole[];
 };
 export type AdminTokenOwner = Pick<AdminUser, 'id' | 'firstname' | 'lastname' | 'username' | 'email'>;

package/dist/shared/contracts/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,oBAAoB,GAAG,OAAO,CAAC,GAAG;IAC9F,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;CAC/B"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,UAAU,GAAG,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAC5E,GAAG;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;CAC/B"}

package/dist/shared/utils/__tests__/auth-cookie-domain.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/auth-cookie-domain.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-domain.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/auth-cookie-domain.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/__tests__/auth-cookie-name.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/auth-cookie-name.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-name.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/auth-cookie-name.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/__tests__/auth-cookie-path.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/auth-cookie-path.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-path.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/auth-cookie-path.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/__tests__/session-auth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/session-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-auth.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/session-auth.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/auth-cookie-domain.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Domain attribute of the admin auth (access) token cookie, configurable
+ * through `admin.auth.cookie.domain` (falling back to `admin.auth.domain`) so
+ * multiple Strapi instances under the same parent domain share, or stay
+ * isolated to, the intended host.
+ *
+ * Browser-safe single source for both sides of the handoff: the admin panel
+ * cannot read server config, so the build transports the config value into
+ * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_DOMAIN` variable
+ * (see create-build-context.ts in @strapi/strapi); the server resolves the
+ * same config at runtime. Changing the domain requires an admin rebuild, like
+ * any other admin config change.
+ *
+ * Defaults to `undefined` (host-only cookie) to match the browser default and
+ * the refresh-cookie behaviour in `getRefreshCookieOptions` when no domain is
+ * configured. A host-only cookie and a `Domain`-scoped cookie are distinct
+ * entries in the browser cookie store, so set and delete must agree on the
+ * domain or logout leaves a colliding copy behind.
+ */
+export declare const DEFAULT_AUTH_COOKIE_DOMAIN: undefined;
+export declare const resolveAuthCookieDomain: (configuredDomain?: string, warn?: (message: string) => void) => string | undefined;

package/dist/shared/utils/auth-cookie-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-domain.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,WAAY,CAAC;AAQpD,eAAO,MAAM,uBAAuB,GAClC,mBAAmB,MAAM,EACzB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAAM,GAAG,SAeX,CAAC"}