@strapi/admin 5.50.2 → 5.51.0

package/dist/server/src/routes/serve-admin-panel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-admin-panel.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/serve-admin-panel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAIzC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,QAAA,MAAM,uBAAuB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,SA4CnE,CAAC;AAGF,eAAO,MAAM,WAAW,GAAI,UAAU,GAAG,EAAE,qBAAqB,MAGhD,KAAK,OAAO,EAAE,MAAM,IAAI,kBAiBvC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"serve-admin-panel.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/serve-admin-panel.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAIzC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAW1C,QAAA,MAAM,uBAAuB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,SAmDnE,CAAC;AAGF,eAAO,MAAM,WAAW,GAAI,UAAU,GAAG,EAAE,qBAAqB,MAGhD,KAAK,OAAO,EAAE,MAAM,IAAI,kBAiBvC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/server/src/services/auth.d.ts

@@ -1,5 +1,22 @@
 import type { AdminUser } from '../../../shared/contracts/shared';
 import '@strapi/types';
+/**
+ * Resolve the reset-password token lifetime, in milliseconds, from config.
+ * Falls back to {@link DEFAULT_RESET_PASSWORD_TOKEN_EXPIRES_IN} for unset/invalid values.
+ */
+declare const getResetPasswordTokenTTL: () => number;
+/**
+ * Create a reset-password token with an expiry and persist it on the user.
+ * Shared by the CE and EE auth services so the expiry behaviour can't drift.
+ * @returns the generated reset-password token
+ */
+declare const assignResetPasswordToken: (userId: AdminUser["id"]) => Promise<string>;
+/**
+ * Reject a reset-password token that has expired — or that has no expiry at all
+ * (tokens issued before this was introduced) — clearing the stale token so it
+ * cannot be retried. Shared by the CE and EE auth services. (GH#25711)
+ */
+declare const assertResetPasswordTokenIsValid: (user: AdminUser) => Promise<void>;
 declare const _default: {
     checkCredentials: ({ email, password }: {
         email: string;
@@ -18,4 +35,5 @@ declare const _default: {
     }) => Promise<AdminUser>;
 };
 export default _default;
+export { getResetPasswordTokenTTL, assignResetPasswordToken, assertResetPasswordTokenIsValid };
 //# sourceMappingURL=auth.d.ts.map

package/dist/server/src/services/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../server/src/services/auth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,eAAe,CAAC;;4CAwB8B;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;;;iCAPpD,MAAM,QAAQ,MAAM;6BARxB,MAAM;;eAuCmB,MAAM;;;4BA2CE,MAAM;kBAAY,MAAM;;;AAgBzF,wBAAmG"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../server/src/services/auth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,eAAe,CAAC;AAQvB;;;GAGG;AACH,QAAA,MAAM,wBAAwB,QAAO,MASpC,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,wBAAwB,GAAU,QAAQ,SAAS,CAAC,IAAI,CAAC,KAAG,OAAO,CAAC,MAAM,CAU/E,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,+BAA+B,GAAU,MAAM,SAAS,KAAG,OAAO,CAAC,IAAI,CAa5E,CAAC;;4CAsBmD;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;;;iCAPpD,MAAM,QAAQ,MAAM;6BARxB,MAAM;;eAuCmB,MAAM;;;4BA0CE,MAAM;kBAAY,MAAM;;;AAmBzF,wBAAmG;AACnG,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/server/src/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;oBA4Bo7B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IATz+B,sDAAsD;;;;;;;;;;;;;;;;;;;;;;;;;;AAZxD,wBAoBE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;oBA4Bw/B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAT7iC,sDAAsD;;;;;;;;;;;;;;;;;;;;;;;;;;AAZxD,wBAoBE"}

package/dist/server/src/services/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/services/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACxB,kBAAkB,EAElB,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;;yBA6D5B,OAAO,CAAC,wBAAwB,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAE,KAClE,OAAO,CAAC,SAAS,CAAC;mCASP,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,mBAAmB,GAAG,UAAU,GAAG,OAAO,CAAC,KAC9F,OAAO,CAAC,SAAS,CAAC;qBA4Cf,IAAI,CAAC,EAAE,cACC,OAAO,CAAC,sBAAsB,CAAC,KAC1C,OAAO,CAAC,SAAS,CAAC;0BAsHoB,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;8CAU9C,MAAM,KACxB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC;iDAmBxE;QACD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC9B;yBAzP2B,SAAS,KAAG,kBAAkB;kBA8Q/B,IAAI,CAAC,EAAE;4BAUG,MAAM;+BAUL,OAAO,CAAC,OAAO,CAAC;qBAWxB,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;uBAsCjC,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAuClC,OAAO,CAAC,MAAM,CAAC;2BAcrB,OAAO,CAAC,MAAM,CAAC;+BAOT,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC;6CAoBX,OAAO,CAAC,IAAI,CAAC;kCAzQtB,MAAM,YAAY,MAAM;6BAmR/B,OAAO,CAAC,MAAM,EAAE,CAAC;oCA9OR,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;;AAmPvE,wBAoBE"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../server/src/services/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,KAAK,EACV,SAAS,EAET,wBAAwB,EACxB,kBAAkB,EAElB,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;;yBAmE5B,OAAO,CAAC,wBAAwB,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAE,KAClE,OAAO,CAAC,SAAS,CAAC;mCASP,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,mBAAmB,GAAG,UAAU,GAAG,OAAO,CAAC,KAC9F,OAAO,CAAC,SAAS,CAAC;qBA4Cf,IAAI,CAAC,EAAE,cACC,OAAO,CAAC,sBAAsB,CAAC,KAC1C,OAAO,CAAC,SAAS,CAAC;0BAsHoB,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;8CAU9C,MAAM,KACxB,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG,SAAS,CAAC;iDAmBxE;QACD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC9B;yBA/P2B,SAAS,KAAG,kBAAkB;kBAoR/B,IAAI,CAAC,EAAE;4BAUG,MAAM;+BAUL,OAAO,CAAC,OAAO,CAAC;qBAWxB,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;uBAsCjC,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAuClC,OAAO,CAAC,MAAM,CAAC;2BAcrB,OAAO,CAAC,MAAM,CAAC;+BAOT,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC;6CAoBX,OAAO,CAAC,IAAI,CAAC;kCAzQtB,MAAM,YAAY,MAAM;6BAmR/B,OAAO,CAAC,MAAM,EAAE,CAAC;oCA9OR,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,OAAO,CAAC;;AAmPvE,wBAoBE"}

package/dist/shared/contracts/shared.d.ts

@@ -22,6 +22,7 @@ export interface AdminUser extends Entity {
     email?: string;
     password?: string;
     resetPasswordToken?: string | null;
+    resetPasswordTokenExpiresAt?: string | Date | null;
     registrationToken?: string | null;
     isActive: boolean;
     roles: AdminRole[];
@@ -34,7 +35,7 @@ export type AdminUserCreationPayload = Omit<AdminUser, keyof Entity | 'roles' |
 export type AdminUserUpdatePayload = Omit<AdminUser, keyof Entity | 'roles'> & {
     roles: Data.ID[];
 };
-export type SanitizedAdminUser = Omit<AdminUser, 'password' | 'resetPasswordToken' | 'roles'> & {
+export type SanitizedAdminUser = Omit<AdminUser, 'password' | 'resetPasswordToken' | 'resetPasswordTokenExpiresAt' | 'roles'> & {
     roles: SanitizedAdminRole[];
 };
 export type AdminTokenOwner = Pick<AdminUser, 'id' | 'firstname' | 'lastname' | 'username' | 'email'>;

package/dist/shared/contracts/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,oBAAoB,GAAG,OAAO,CAAC,GAAG;IAC9F,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;CAC/B"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,UAAU,GAAG,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAC5E,GAAG;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;CAC/B"}

package/dist/shared/utils/__tests__/auth-cookie-domain.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/auth-cookie-domain.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-domain.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/auth-cookie-domain.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/__tests__/auth-cookie-path.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/utils/__tests__/auth-cookie-path.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-path.test.d.ts","sourceRoot":"","sources":["../../../../shared/utils/__tests__/auth-cookie-path.test.ts"],"names":[],"mappings":""}

package/dist/shared/utils/auth-cookie-domain.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Domain attribute of the admin auth (access) token cookie, configurable
+ * through `admin.auth.cookie.domain` (falling back to `admin.auth.domain`) so
+ * multiple Strapi instances under the same parent domain share, or stay
+ * isolated to, the intended host.
+ *
+ * Browser-safe single source for both sides of the handoff: the admin panel
+ * cannot read server config, so the build transports the config value into
+ * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_DOMAIN` variable
+ * (see create-build-context.ts in @strapi/strapi); the server resolves the
+ * same config at runtime. Changing the domain requires an admin rebuild, like
+ * any other admin config change.
+ *
+ * Defaults to `undefined` (host-only cookie) to match the browser default and
+ * the refresh-cookie behaviour in `getRefreshCookieOptions` when no domain is
+ * configured. A host-only cookie and a `Domain`-scoped cookie are distinct
+ * entries in the browser cookie store, so set and delete must agree on the
+ * domain or logout leaves a colliding copy behind.
+ */
+export declare const DEFAULT_AUTH_COOKIE_DOMAIN: undefined;
+export declare const resolveAuthCookieDomain: (configuredDomain?: string, warn?: (message: string) => void) => string | undefined;

package/dist/shared/utils/auth-cookie-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-domain.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,WAAY,CAAC;AAQpD,eAAO,MAAM,uBAAuB,GAClC,mBAAmB,MAAM,EACzB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAAM,GAAG,SAeX,CAAC"}

package/dist/shared/utils/auth-cookie-name.d.ts

@@ -11,4 +11,4 @@
  * rebuild, like any other admin config change.
  */
 export declare const DEFAULT_AUTH_COOKIE_NAME = "jwtToken";
-export declare const resolveAuthCookieName: (configuredName?: string) => string;
+export declare const resolveAuthCookieName: (configuredName?: string, warn?: (message: string) => void) => string;

package/dist/shared/utils/auth-cookie-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-cookie-name.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAKnD,eAAO,MAAM,qBAAqB,GAAI,iBAAiB,MAAM,KAAG,MAe/D,CAAC"}
+{"version":3,"file":"auth-cookie-name.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAKnD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}

package/dist/shared/utils/auth-cookie-path.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Path attribute of the admin auth (access) token cookie, configurable
+ * through `admin.auth.cookie.path` so multiple Strapi instances on the same
+ * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
+ *
+ * Browser-safe single source for both sides of the handoff: the admin panel
+ * cannot read server config, so the build transports the config value into
+ * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable
+ * (see create-build-context.ts in @strapi/strapi); the server resolves the
+ * same config at runtime. Changing the path requires an admin rebuild, like
+ * any other admin config change.
+ *
+ * Defaults to `/admin` to match the refresh-cookie path used by
+ * `getRefreshCookieOptions`.
+ */
+export declare const DEFAULT_AUTH_COOKIE_PATH = "/admin";
+export declare const resolveAuthCookiePath: (configuredPath?: string, warn?: (message: string) => void) => string;

package/dist/shared/utils/auth-cookie-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-path.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAWjD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}

package/dist/shared/utils/session-auth.d.ts

@@ -1,6 +1,9 @@
+import type { Context } from 'koa';
 import type { Modules } from '@strapi/types';
 export declare const REFRESH_COOKIE_NAME = "strapi_admin_refresh";
 export declare const getAccessCookieName: () => string;
+export declare const getAccessCookiePath: () => string;
+export declare const getAccessCookieDomain: () => string | undefined;
 export declare const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN: number;
 export declare const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN: number;
 export declare const DEFAULT_MAX_SESSION_LIFESPAN: number;
@@ -38,3 +41,15 @@ export declare const extractDeviceParams: (requestBody: unknown) => {
     deviceId: string;
     rememberMe: boolean;
 };
+export declare const buildSessionMetadataFromContext: (ctx: Context) => Record<string, unknown>;
+/**
+ * Resolves the device id to use when revoking sessions on logout.
+ * SSO assigns deviceId server-side, so the client-provided value may not match
+ * the active session row. Prefer the deviceId stored on the session backing
+ * the current access token when available.
+ *
+ * Callers should pass `ctx.state.session.id` from the admin auth strategy and
+ * the already-parsed body `deviceId` — the logout route requires authentication,
+ * so sessionId is expected to be present.
+ */
+export declare const resolveLogoutDeviceId: (userId: string, sessionId: string | undefined, clientDeviceId: string | undefined) => Promise<string | undefined>;

package/dist/shared/utils/session-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA6B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC"}
+{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAS1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAAM,GAAG,SAIjD,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA4B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,OAAO,4BAGxD,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,MAAM,EACd,WAAW,MAAM,GAAG,SAAS,EAC7B,gBAAgB,MAAM,GAAG,SAAS,KACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAkB5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/admin",
-  "version": "5.50.2",
+  "version": "5.51.0",
   "description": "Strapi Admin",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -91,10 +91,10 @@
     "@reduxjs/toolkit": "1.9.7",
     "@strapi/design-system": "2.2.3",
     "@strapi/icons": "2.2.3",
-    "@strapi/permissions": "5.50.2",
-    "@strapi/types": "5.50.2",
-    "@strapi/typescript-utils": "5.50.2",
-    "@strapi/utils": "5.50.2",
+    "@strapi/permissions": "5.51.0",
+    "@strapi/types": "5.51.0",
+    "@strapi/typescript-utils": "5.51.0",
+    "@strapi/utils": "5.51.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -145,11 +145,11 @@
     "typescript": "5.9.3",
     "use-context-selector": "1.4.1",
     "yup": "0.32.9",
-    "zod": "3.25.67"
+    "zod": "3.25.76"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.50.2",
-    "@strapi/data-transfer": "5.50.2",
+    "@strapi/admin-test-utils": "5.51.0",
+    "@strapi/data-transfer": "5.51.0",
     "@testing-library/jest-dom": "6.9.1",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",