@strapi/admin 5.50.2 → 5.51.1

package/dist/shared/utils/auth-cookie-domain.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Domain attribute of the admin auth (access) token cookie, configurable
+ * through `admin.auth.cookie.domain` (falling back to `admin.auth.domain`) so
+ * multiple Strapi instances under the same parent domain share, or stay
+ * isolated to, the intended host.
+ *
+ * Browser-safe single source for both sides of the handoff: the admin panel
+ * cannot read server config, so the build transports the config value into
+ * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_DOMAIN` variable
+ * (see create-build-context.ts in @strapi/strapi); the server resolves the
+ * same config at runtime. Changing the domain requires an admin rebuild, like
+ * any other admin config change.
+ *
+ * Defaults to `undefined` (host-only cookie) to match the browser default and
+ * the refresh-cookie behaviour in `getRefreshCookieOptions` when no domain is
+ * configured. A host-only cookie and a `Domain`-scoped cookie are distinct
+ * entries in the browser cookie store, so set and delete must agree on the
+ * domain or logout leaves a colliding copy behind.
+ */
+export declare const DEFAULT_AUTH_COOKIE_DOMAIN: undefined;
+export declare const resolveAuthCookieDomain: (configuredDomain?: string, warn?: (message: string) => void) => string | undefined;

package/dist/shared/utils/auth-cookie-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-domain.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,WAAY,CAAC;AASpD,eAAO,MAAM,uBAAuB,GAClC,mBAAmB,MAAM,EACzB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAAM,GAAG,SAeX,CAAC"}

package/dist/shared/utils/auth-cookie-name.d.ts

@@ -11,4 +11,4 @@
  * rebuild, like any other admin config change.
  */
 export declare const DEFAULT_AUTH_COOKIE_NAME = "jwtToken";
-export declare const resolveAuthCookieName: (configuredName?: string) => string;
+export declare const resolveAuthCookieName: (configuredName?: string, warn?: (message: string) => void) => string;

package/dist/shared/utils/auth-cookie-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-cookie-name.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAKnD,eAAO,MAAM,qBAAqB,GAAI,iBAAiB,MAAM,KAAG,MAe/D,CAAC"}
+{"version":3,"file":"auth-cookie-name.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAKnD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}

package/dist/shared/utils/auth-cookie-path.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Path attribute of the admin auth (access) token cookie, configurable
+ * through `admin.auth.cookie.path` so multiple Strapi instances on the same
+ * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
+ *
+ * Browser-safe single source for both sides of the handoff: the admin panel
+ * cannot read server config, so the build transports the config value into
+ * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable
+ * (see create-build-context.ts in @strapi/strapi); the server resolves the
+ * same config at runtime. Changing the path requires an admin rebuild, like
+ * any other admin config change.
+ *
+ * Defaults to `/admin` to match the refresh-cookie path used by
+ * `getRefreshCookieOptions`.
+ */
+export declare const DEFAULT_AUTH_COOKIE_PATH = "/admin";
+export declare const resolveAuthCookiePath: (configuredPath?: string, warn?: (message: string) => void) => string;

package/dist/shared/utils/auth-cookie-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookie-path.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAYjD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}

package/dist/shared/utils/session-auth.d.ts

@@ -1,6 +1,9 @@
+import type { Context } from 'koa';
 import type { Modules } from '@strapi/types';
 export declare const REFRESH_COOKIE_NAME = "strapi_admin_refresh";
 export declare const getAccessCookieName: () => string;
+export declare const getAccessCookiePath: () => string;
+export declare const getAccessCookieDomain: () => string | undefined;
 export declare const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN: number;
 export declare const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN: number;
 export declare const DEFAULT_MAX_SESSION_LIFESPAN: number;
@@ -38,3 +41,15 @@ export declare const extractDeviceParams: (requestBody: unknown) => {
     deviceId: string;
     rememberMe: boolean;
 };
+export declare const buildSessionMetadataFromContext: (ctx: Context) => Record<string, unknown>;
+/**
+ * Resolves the device id to use when revoking sessions on logout.
+ * SSO assigns deviceId server-side, so the client-provided value may not match
+ * the active session row. Prefer the deviceId stored on the session backing
+ * the current access token when available.
+ *
+ * Callers should pass `ctx.state.session.id` from the admin auth strategy and
+ * the already-parsed body `deviceId` — the logout route requires authentication,
+ * so sessionId is expected to be present.
+ */
+export declare const resolveLogoutDeviceId: (userId: string, sessionId: string | undefined, clientDeviceId: string | undefined) => Promise<string | undefined>;

package/dist/shared/utils/session-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA6B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC"}
+{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAS1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAAM,GAAG,SAIjD,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA4B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,OAAO,4BAGxD,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,MAAM,EACd,WAAW,MAAM,GAAG,SAAS,EAC7B,gBAAgB,MAAM,GAAG,SAAS,KACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAkB5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/admin",
-  "version": "5.50.2",
+  "version": "5.51.1",
   "description": "Strapi Admin",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -87,14 +87,14 @@
     "@casl/ability": "6.7.5",
     "@internationalized/date": "3.12.1",
     "@radix-ui/react-context": "1.0.1",
-    "@radix-ui/react-toolbar": "1.0.4",
+    "@radix-ui/react-toolbar": "1.1.11",
     "@reduxjs/toolkit": "1.9.7",
     "@strapi/design-system": "2.2.3",
     "@strapi/icons": "2.2.3",
-    "@strapi/permissions": "5.50.2",
-    "@strapi/types": "5.50.2",
-    "@strapi/typescript-utils": "5.50.2",
-    "@strapi/utils": "5.50.2",
+    "@strapi/permissions": "5.51.1",
+    "@strapi/types": "5.51.1",
+    "@strapi/typescript-utils": "5.51.1",
+    "@strapi/utils": "5.51.1",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -143,13 +143,13 @@
     "sift": "16.0.1",
     "sonner": "2.0.7",
     "typescript": "5.9.3",
-    "use-context-selector": "1.4.1",
+    "use-context-selector": "1.4.4",
     "yup": "0.32.9",
-    "zod": "3.25.67"
+    "zod": "3.25.76"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.50.2",
-    "@strapi/data-transfer": "5.50.2",
+    "@strapi/admin-test-utils": "5.51.1",
+    "@strapi/data-transfer": "5.51.1",
     "@testing-library/jest-dom": "6.9.1",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",