@strapi/admin 5.52.3 → 5.54.0

package/dist/admin/src/hooks/useSessionKeepalive.d.ts

@@ -0,0 +1,88 @@
+declare const SESSION_EXPIRY_BUFFER_MS = 1000;
+/**
+ * How long before the access token's `exp` an active tab renews. Renewing
+ * ahead of expiry (rather than at it) means the refreshed token is already in
+ * shared storage by the time any *other* tab's post-expiry timer fires — so an
+ * idle sibling re-syncs instead of racing the refresh.
+ */
+declare const SESSION_RENEW_MARGIN_MS = 10000;
+interface UseSessionKeepaliveOptions {
+    /**
+     * The current admin access JWT (from Redux), or `null` when logged out.
+     */
+    token: string | null;
+    /**
+     * Called when a renewal attempt is rejected by the server (the session is
+     * truly over: refresh token idle/max window elapsed). This is a
+     * server-confirmed end of session, so it SHOULD broadcast a global logout to
+     * every tab.
+     */
+    onSessionDead?: () => void;
+    /**
+     * Read the access token currently in shared storage (localStorage/cookie).
+     * Because every open tab shares the same refresh cookie, an active tab that
+     * refreshes writes a newer access token here. When omitted, the hook never
+     * re-syncs across tabs.
+     */
+    getStoredToken?: () => string | null;
+    /**
+     * Adopt a newer shared token instead of treating this tab's token as stale.
+     * Typically dispatches `setToken`, which updates Redux and causes this hook
+     * to re-arm against the later `exp`. Only called when `getStoredToken`
+     * returns a token whose `exp` is later than the in-memory one.
+     */
+    onResync?: (token: string) => void;
+    /**
+     * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to
+     * decide whether to silently renew when the access token is about to expire.
+     * Idle tabs must NOT renew — that would defeat the server's
+     * `idleSessionLifespan` / `idleRefreshTokenLifespan`. When omitted, the hook
+     * never treats the tab as active.
+     */
+    getLastActivityAt?: () => number;
+    /**
+     * Silently renew the session (rotate the refresh token + mint a new access
+     * token). Resolves `true` on success — the resulting `setToken` re-arms this
+     * hook against the new `exp` — or `false` when the server rejects it. Only
+     * called when the user was active during the current token's lifetime.
+     */
+    renewSession?: () => Promise<boolean>;
+    /**
+     * Escape hatch for tests / dev environments where we don't want the
+     * automatic renew / re-sync behavior. Mirrors the existing `_disableRenewToken`
+     * prop on `<AuthProvider>`.
+     */
+    disabled?: boolean;
+}
+/**
+ * Keep the admin session alive while the user is active — without one tab
+ * tearing down another, and without logging anyone out because a short-lived
+ * access token aged out.
+ *
+ * The access token (`accessTokenLifespan`, e.g. 30 min) is transport plumbing,
+ * not the session length; the refresh token's idle/max window is the session.
+ * So expiry of the access JWT must never clear auth state or unmount the page:
+ * the next user-initiated request 401s, `withTokenRefresh` refreshes and
+ * retries, and only a *rejected* refresh ends the session (`onSessionDead`).
+ * Two timers are armed per token:
+ *
+ * - Renew (at `exp` minus a margin): if the user interacted during this token's
+ *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the
+ *   hook; a server rejection (`onSessionDead`) ends the session globally.
+ *   Renewing early guarantees the refreshed token reaches shared storage before
+ *   any sibling tab's post-expiry timer fires.
+ * - Post-expiry (just after `exp`): the fallback when this tab did not renew.
+ *   It first re-syncs from a token another tab refreshed (so an idle tab rides
+ *   on an active sibling), then renews if activity arrived late. If the tab is
+ *   still idle, it does nothing destructive — the stale access token stays in
+ *   place so form state survives until the next request.
+ *
+ * Idle tabs must not renew: a tab left open forever must not keep the session
+ * alive past the server's idle/max window.
+ *
+ * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped
+ * silently — the 401 refresh path still covers the next user-initiated request.
+ */
+declare const useSessionKeepalive: ({ token, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled, }: UseSessionKeepaliveOptions) => void;
+export { useSessionKeepalive, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };
+export type { UseSessionKeepaliveOptions };

package/dist/admin/src/utils/getFetchClient.d.ts

@@ -15,18 +15,26 @@ export type ApiError = errors.ApplicationError | errors.ForbiddenError | errors.
 declare const setOnTokenUpdate: (callback: ((token: string) => void) | null) => void;
 /**
  * Set the callback that will be called when the active session is no longer
- * valid (refresh token rejected by the server, or detected idle on the
- * client). This lets the active tab redirect to /auth/login without waiting
- * for the next user-initiated request to fail.
+ * valid — i.e. the server rejected the refresh token, not merely that the
+ * short-lived access token expired. This lets the tab redirect to /auth/login
+ * (after any unsaved-changes guard) rather than sitting on a dead session.
  *
  * @param callback - Function to call when the session ends, or null to clear
  */
 declare const setOnSessionExpired: (callback: (() => void) | null) => void;
+/**
+ * Re-arm session-expired notifications after a new access token is stored
+ * (silent refresh) or after a successful login.
+ */
+declare const resetSessionExpiredNotification: () => void;
 /**
  * Trigger the registered session-expired callback, if any. Safe to call from
- * non-React code (e.g., the RTK Query baseQuery 401 handler).
+ * non-React code (e.g., the RTK Query baseQuery 401 handler). Returns `false`
+ * when nothing is listening, so callers can fall back to a hard redirect
+ * instead of leaving the user on a dead page. Subsequent calls during the same
+ * dead session return `true` without invoking the handler again.
  */
-declare const triggerSessionExpired: () => void;
+declare const triggerSessionExpired: () => boolean;
 /**
  * Store the new token in the appropriate storage (localStorage or cookie)
  * and notify the app to update its state.
@@ -38,6 +46,13 @@ declare const triggerSessionExpired: () => void;
  * @internal Exported for testing purposes
  */
 declare const storeToken: (token: string) => void;
+declare const ADMIN_REFRESH_LOCK = "strapi-admin-access-token";
+/**
+ * Refresh the access token by calling the /admin/access-token endpoint.
+ * This uses a low-level fetch to avoid recursion through the interceptor.
+ * Returns the new token on success, or null on failure.
+ */
+declare const refreshAccessToken: (tokenUsedByFailedRequest?: string | null) => Promise<string | null>;
 /**
  * Attempt to refresh the token if not already refreshing.
  * Uses a module-level promise to prevent concurrent refresh requests.
@@ -46,7 +61,7 @@ declare const storeToken: (token: string) => void;
  * @throws {Error} If the token refresh fails (e.g., refresh token expired)
  * @internal Exported for testing purposes
  */
-declare const attemptTokenRefresh: () => Promise<string>;
+declare const attemptTokenRefresh: (tokenUsedByFailedRequest?: string | null) => Promise<string>;
 type FetchResponse<TData = unknown> = {
     data: TData;
     status?: number;
@@ -117,5 +132,5 @@ type FetchClient = {
  * ```
  */
 declare const getFetchClient: (defaultOptions?: FetchConfig) => FetchClient;
-export { getFetchClient, isFetchError, FetchError, attemptTokenRefresh, storeToken, setOnTokenUpdate, setOnSessionExpired, triggerSessionExpired, };
+export { getFetchClient, isFetchError, FetchError, attemptTokenRefresh, refreshAccessToken, storeToken, setOnTokenUpdate, setOnSessionExpired, triggerSessionExpired, resetSessionExpiredNotification, ADMIN_REFRESH_LOCK, };
 export type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };

package/dist/admin/src/utils/unsavedChangesRegistry.d.ts

@@ -0,0 +1,11 @@
+type UnsavedChangesCheck = () => boolean;
+/**
+ * Register a callback that reports whether a form (or other surface) has unsaved
+ * edits. Used by the auth layer to warn before session-expiry logout discards
+ * in-memory state that route blockers never see (token clear unmounts the form).
+ */
+declare const registerUnsavedChangesCheck: (id: string, check: UnsavedChangesCheck) => (() => void);
+declare const hasUnsavedChanges: () => boolean;
+declare const clearUnsavedChangesChecks: () => void;
+export { registerUnsavedChangesCheck, hasUnsavedChanges, clearUnsavedChangesChecks };
+export type { UnsavedChangesCheck };

package/dist/admin/tests/store.d.ts

@@ -178,6 +178,10 @@ declare const initialState: () => {
                         action: string;
                         subject: null;
                     }[];
+                    export: {
+                        action: string;
+                        subject: null;
+                    }[];
                 };
                 "review-workflows": {
                     main: {

package/dist/admin/tests/utils.d.ts

@@ -188,6 +188,10 @@ declare const defaultTestStoreConfig: () => {
                             action: string;
                             subject: null;
                         }[];
+                        export: {
+                            action: string;
+                            subject: null;
+                        }[];
                     };
                     "review-workflows": {
                         main: {

package/dist/ee/admin/src/constants.d.ts

@@ -15,6 +15,10 @@ export declare const ADMIN_PERMISSIONS_EE: {
                 action: string;
                 subject: null;
             }[];
+            export: {
+                action: string;
+                subject: null;
+            }[];
         };
         'review-workflows': {
             main: {

package/dist/ee/admin/src/pages/SettingsPage/pages/AuditLogs/components/ExportCard.d.ts

@@ -0,0 +1,10 @@
+import type { ExportProgress, ExportResult } from '../hooks/useExportAuditLogs';
+interface ExportCardProps {
+    progress: ExportProgress | null;
+    exportResult: ExportResult | null;
+    onDownload: () => void;
+    onDismiss: () => void;
+}
+declare const ExportCard: ({ progress, exportResult, onDownload, onDismiss }: ExportCardProps) => import("react/jsx-runtime").JSX.Element | null;
+export { ExportCard };
+export type { ExportCardProps };

package/dist/ee/admin/src/pages/SettingsPage/pages/AuditLogs/hooks/useExportAuditLogs.d.ts

@@ -0,0 +1,18 @@
+interface ExportProgress {
+    fetched: number;
+    total: number;
+}
+interface ExportResult {
+    blob: Blob;
+    fileName: string;
+}
+declare const useExportAuditLogs: () => {
+    exportAuditLogs: (filters: unknown, totalEntries: number) => Promise<void>;
+    downloadExport: () => void;
+    dismissExport: () => void;
+    isExporting: boolean;
+    progress: ExportProgress | null;
+    exportResult: ExportResult | null;
+};
+export { useExportAuditLogs };
+export type { ExportProgress, ExportResult };

package/dist/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.d.ts

@@ -27,5 +27,18 @@ export declare const actionTypes: {
     'permission.create': string;
     'permission.update': string;
     'permission.delete': string;
+    'release.create': string;
+    'release.update': string;
+    'release.delete': string;
+    'release.trigger': string;
+    'release.entry.add': string;
+    'release.entry.update': string;
+    'release.entry.remove': string;
+    'release.settings.update': string;
+    'audit-log.export': string;
+    'locale.create': string;
+    'locale.update': string;
+    'locale.delete': string;
+    'locale.default.update': string;
 };
 export declare const getDefaultMessage: (value: keyof typeof actionTypes) => string;

package/dist/ee/server/src/audit-logs/controllers/audit-logs.d.ts

@@ -3,6 +3,7 @@ declare const _default: {
     findMany(ctx: Context): Promise<void>;
     findManyUsers(ctx: Context): Promise<void>;
     findOne(ctx: Context): Promise<void>;
+    export(ctx: Context): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=audit-logs.d.ts.map

package/dist/ee/server/src/audit-logs/controllers/audit-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;;kBAKb,OAAO;uBAUF,OAAO;iBAUb,OAAO;;AArB5B,wBA+BE"}
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;;kBAkBb,OAAO;uBAUF,OAAO;iBAUb,OAAO;gBAWR,OAAO;;AAhC3B,wBA2FE"}

package/dist/ee/server/src/audit-logs/routes/audit-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAeA,wBAsBE"}
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAeA,wBA4BE"}

package/dist/ee/server/src/audit-logs/services/audit-logs.d.ts

@@ -1,10 +1,19 @@
+import { Readable } from 'stream';
 import type { Core } from '@strapi/types';
 interface Event {
     action: string;
     date: Date;
-    userId: string | number;
+    userId: string | number | null;
     payload: Record<string, unknown>;
 }
+interface ExportQuery {
+    cursor?: number;
+    pageSize?: number;
+    until?: number;
+    token?: string;
+    [key: string]: unknown;
+}
+declare const toCsvLine: (row: any) => string;
 /**
  * @description
  * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')
@@ -20,6 +29,18 @@ declare const createAuditLogsService: (strapi: Core.Strapi) => {
             total: number;
         };
     }>;
+    isExportTooLarge(query: {
+        filters?: unknown;
+    }): Promise<boolean>;
+    isTrustedContinuation(query: ExportQuery): boolean;
+    createExportStream(query: ExportQuery): Promise<{
+        stream: Readable;
+        nextCursor: number | null;
+        until: number;
+        isNewExport: boolean;
+        partSize: number;
+        exportToken: string;
+    }>;
     findManyUsers(query: {
         page?: number | string;
         pageSize?: number | string;
@@ -27,7 +48,7 @@ declare const createAuditLogsService: (strapi: Core.Strapi) => {
         results: {
             id: any;
             email: any;
-            displayName: any;
+            displayName: string;
         }[];
         pagination: {
             page: number;
@@ -39,5 +60,5 @@ declare const createAuditLogsService: (strapi: Core.Strapi) => {
     findOne(id: unknown): Promise<any>;
     deleteExpiredEvents(expirationDate: Date): Promise<import("@strapi/database/dist/types").CountResult>;
 };
-export { createAuditLogsService };
+export { createAuditLogsService, toCsvLine };
 //# sourceMappingURL=audit-logs.d.ts.map

package/dist/ee/server/src/audit-logs/services/audit-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/services/audit-logs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,UAAU,KAAK;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAsBD;;;GAGG;AACH,QAAA,MAAM,sBAAsB,GAAI,QAAQ,IAAI,CAAC,MAAM;qBAExB,KAAK;oBAWN,OAAO;;;;;;;;;yBAiCF;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE;;;;;;;;;;;;;gBAmC/D,OAAO;wCAkBW,IAAI;CAU3C,CAAC;AAEF,OAAO,EAAE,sBAAsB,EAAE,CAAC"}
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/services/audit-logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAyB1C,UAAU,KAAK;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IAEX,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAkCD,UAAU,WAAW;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA8BD,QAAA,MAAM,SAAS,GAAI,KAAK,GAAG,WAc1B,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,sBAAsB,GAAI,QAAQ,IAAI,CAAC,MAAM;qBAExB,KAAK;oBAWN,OAAO;;;;;;;;;4BAiCC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;iCAoBtB,WAAW;8BAIR,WAAW;;;;;;;;yBA2GhB;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE;;;;;;;;;;;;;gBAmC/D,OAAO;wCAkBW,IAAI;CAU3C,CAAC;AAEF,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/services/lifecycles.d.ts

@@ -1,9 +1,15 @@
-import type { Core } from '@strapi/types';
+import type { Core, Modules } from '@strapi/types';
 /**
  * @description
- * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycles')
+ * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycle')
  */
 declare const createAuditLogsLifecycleService: (strapi: Core.Strapi) => {
+    /**
+     * Adds an event to the list of audited events. Plugins register their own from
+     * their bootstrap; the transformer builds the audited shape
+     * ({resource, details, outcome}) from the arguments passed to eventHub.emit().
+     */
+    registerEvent<TDetails = unknown>(name: string, transform: Modules.AuditLogs.EventTransformer<TDetails>): void;
     register(): Promise</*elided*/ any>;
     unsubscribe(): /*elided*/ any;
     destroy(): /*elided*/ any;

package/dist/ee/server/src/audit-logs/services/lifecycles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycles.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAW,MAAM,eAAe,CAAC;AAiEnD;;;GAGG;AACH,QAAA,MAAM,+BAA+B,GAAI,QAAQ,IAAI,CAAC,MAAM;;;;CA4H3D,CAAC;AAEF,OAAO,EAAE,+BAA+B,EAAE,CAAC"}
+{"version":3,"file":"lifecycles.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAgFnD;;;GAGG;AACH,QAAA,MAAM,+BAA+B,GAAI,QAAQ,IAAI,CAAC,MAAM;IAiHxD;;;;OAIG;kBACW,QAAQ,kBACd,MAAM,aACD,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC;;;;CAyF5D,CAAC;AAEF,OAAO,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/utils/csv.d.ts

@@ -0,0 +1,5 @@
+declare const CSV_BOM = "\uFEFF";
+declare const escapeCsvValue: (value: unknown) => string;
+declare const serializeCsvLine: (values: unknown[]) => string;
+export { escapeCsvValue, serializeCsvLine, CSV_BOM };
+//# sourceMappingURL=csv.d.ts.map

package/dist/ee/server/src/audit-logs/utils/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/utils/csv.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,OAAO,WAAW,CAAC;AAGzB,QAAA,MAAM,cAAc,GAAI,OAAO,OAAO,KAAG,MAgBxC,CAAC;AAEF,QAAA,MAAM,gBAAgB,GAAI,QAAQ,OAAO,EAAE,KAAG,MAE7C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/utils/export-token.d.ts

@@ -0,0 +1,5 @@
+declare const EXPORT_TOKEN_TTL_MS: number;
+declare const signExportToken: (secret: string, until: number, filters: unknown, issuedAt?: number) => string;
+declare const verifyExportToken: (secret: string, token: unknown, until: number, filters: unknown, now?: number) => boolean;
+export { signExportToken, verifyExportToken, EXPORT_TOKEN_TTL_MS };
+//# sourceMappingURL=export-token.d.ts.map

package/dist/ee/server/src/audit-logs/utils/export-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-token.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/utils/export-token.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,mBAAmB,QAAiB,CAAC;AAW3C,QAAA,MAAM,eAAe,GACnB,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,SAAS,OAAO,EAChB,iBAAqB,KACpB,MAA6E,CAAC;AAEjF,QAAA,MAAM,iBAAiB,GACrB,QAAQ,MAAM,EACd,OAAO,OAAO,EACd,OAAO,MAAM,EACb,SAAS,OAAO,EAChB,YAAgB,KACf,OAyBF,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/utils.d.ts

@@ -0,0 +1,10 @@
+interface AdminUserLike {
+    username?: string | null;
+    firstname?: string | null;
+    lastname?: string | null;
+    email: string;
+}
+/** How an admin user is named across audit logs */
+declare const getDisplayName: (user: AdminUserLike) => string;
+export { getDisplayName };
+//# sourceMappingURL=utils.d.ts.map

package/dist/ee/server/src/audit-logs/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/audit-logs/utils.ts"],"names":[],"mappings":"AAAA,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,mDAAmD;AACnD,QAAA,MAAM,cAAc,GAAI,MAAM,aAAa,KAAG,MAU7C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/validation/audit-logs.d.ts

@@ -1,8 +1,10 @@
 export declare const validateFindMany: (body: unknown, errorMessage?: string) => Promise<any>;
 export declare const validateFindManyUsers: (body: unknown, errorMessage?: string) => Promise<any>;
+export declare const validateExport: (body: unknown, errorMessage?: string) => Promise<any>;
 declare const _default: {
     validateFindMany: (body: unknown, errorMessage?: string) => Promise<any>;
     validateFindManyUsers: (body: unknown, errorMessage?: string) => Promise<any>;
+    validateExport: (body: unknown, errorMessage?: string) => Promise<any>;
 };
 export default _default;
 //# sourceMappingURL=audit-logs.d.ts.map

package/dist/ee/server/src/audit-logs/validation/audit-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,gBAAgB,wDAA+D,CAAC;AAC7F,eAAO,MAAM,qBAAqB,wDAEhC,CAAC;;;;;AAEH,wBAGE"}
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,gBAAgB,wDAA+D,CAAC;AAC7F,eAAO,MAAM,qBAAqB,wDAEhC,CAAC;AACH,eAAO,MAAM,cAAc,wDAA6D,CAAC;;;;;;AAEzF,wBAIE"}

package/dist/ee/server/src/config/admin-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-actions.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/config/admin-actions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wBA6BE"}
+{"version":3,"file":"admin-actions.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/config/admin-actions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wBAqCE"}

package/dist/ee/server/src/index.d.ts

@@ -5,6 +5,7 @@ declare const getAdminEE: () => {
             findMany(ctx: import("koa").Context): Promise<void>;
             findManyUsers(ctx: import("koa").Context): Promise<void>;
             findOne(ctx: import("koa").Context): Promise<void>;
+            export(ctx: import("koa").Context): Promise<void>;
         } | undefined;
         authentication: {
             getProviders(ctx: import("koa").Context): Promise<void>;

package/dist/ee/server/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../ee/server/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAc1C,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA4Be;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;wBAcxB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOpD,CAAC;AAEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../ee/server/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAe1C,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA4Be;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;wBAsBxB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOpD,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.js

@@ -1,7 +1,12 @@
 'use strict';
 
+var zlib = require('zlib');
+var utils = require('@strapi/utils');
+var auditLogExport = require('../../../../../shared/utils/audit-log-export.js');
 var auditLogs = require('../validation/audit-logs.js');
 
+const EXPORT_INVALID_CONTINUATION_MESSAGE = 'The export continuation is invalid or has expired. Restart the export.';
+const EXPORT_TOO_LARGE_MESSAGE = 'The export matches more entries than the configured limit. Add filters to reduce it.';
 var auditLogsController = {
     async findMany (ctx) {
         const { query } = ctx.request;
@@ -26,6 +31,51 @@ var auditLogsController = {
         const body = await auditLogs.findOne(id);
         ctx.body = body;
         strapi.telemetry.send('didWatchAnAuditLog');
+    },
+    async export (ctx) {
+        const { query } = ctx.request;
+        const validatedQuery = await auditLogs.validateExport(query);
+        const auditLogs$1 = strapi.get('audit-logs');
+        const isContinuation = validatedQuery.cursor !== undefined;
+        if (isContinuation && !auditLogs$1.isTrustedContinuation(validatedQuery)) {
+            throw new utils.errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);
+        }
+        if (!isContinuation) {
+            if (await auditLogs$1.isExportTooLarge({
+                filters: validatedQuery.filters ?? null
+            })) {
+                throw new utils.errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);
+            }
+        }
+        const { stream, nextCursor, until, isNewExport, partSize, exportToken } = await auditLogs$1.createExportStream(validatedQuery);
+        const date = new Date().toISOString().slice(0, 10);
+        ctx.set('Content-Type', 'text/csv; charset=utf-8');
+        ctx.set('Content-Disposition', `attachment; filename="audit-logs-${date}.csv"`);
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, nextCursor !== null ? String(nextCursor) : auditLogExport.AUDIT_LOGS_EXPORT_CURSOR_DONE);
+        const exposedHeaders = [
+            ctx.response.get('Access-Control-Expose-Headers'),
+            auditLogExport.AUDIT_LOGS_EXPORT_UNTIL_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_TOKEN_HEADER,
+            'Content-Disposition'
+        ].filter(Boolean).join(', ');
+        ctx.set('Access-Control-Expose-Headers', exposedHeaders);
+        ctx.vary('Accept-Encoding');
+        if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {
+            ctx.set('Content-Encoding', 'gzip');
+            const gzip = zlib.createGzip();
+            stream.on('error', (error)=>gzip.destroy(error));
+            ctx.body = stream.pipe(gzip);
+        } else {
+            ctx.body = stream;
+        }
+        if (isNewExport) {
+            strapi.telemetry.send('didExportAuditLogs');
+        }
     }
 };
 

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n};\n"],"names":["findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send"],"mappings":";;;;AAIA,0BAAe;AACb,IAAA,MAAMA,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,0BAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,+BAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import { createGzip } from 'zlib';\n\nimport type { Context } from 'koa';\nimport { errors } from '@strapi/utils';\n\nimport {\n  AUDIT_LOGS_EXPORT_CURSOR_DONE,\n  AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n  AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n  AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n  AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n} from '../../../../../shared/utils/audit-log-export';\nimport { validateExport, validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nconst EXPORT_INVALID_CONTINUATION_MESSAGE =\n  'The export continuation is invalid or has expired. Restart the export.';\nconst EXPORT_TOO_LARGE_MESSAGE =\n  'The export matches more entries than the configured limit. Add filters to reduce it.';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n\n  async export(ctx: Context) {\n    const { query } = ctx.request;\n    const validatedQuery = await validateExport(query);\n\n    const auditLogs = strapi.get('audit-logs');\n\n    const isContinuation = validatedQuery.cursor !== undefined;\n\n    if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {\n      throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);\n    }\n\n    if (!isContinuation) {\n      if (await auditLogs.isExportTooLarge({ filters: validatedQuery.filters ?? null })) {\n        throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);\n      }\n    }\n\n    const { stream, nextCursor, until, isNewExport, partSize, exportToken } =\n      await auditLogs.createExportStream(validatedQuery);\n\n    const date = new Date().toISOString().slice(0, 10);\n\n    ctx.set('Content-Type', 'text/csv; charset=utf-8');\n    ctx.set('Content-Disposition', `attachment; filename=\"audit-logs-${date}.csv\"`);\n    ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));\n    ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));\n    ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);\n    ctx.set(\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE\n    );\n\n    const exposedHeaders = [\n      ctx.response.get('Access-Control-Expose-Headers'),\n      AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n      AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n      'Content-Disposition',\n    ]\n      .filter(Boolean)\n      .join(', ');\n    ctx.set('Access-Control-Expose-Headers', exposedHeaders);\n\n    ctx.vary('Accept-Encoding');\n    if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {\n      ctx.set('Content-Encoding', 'gzip');\n      const gzip = createGzip();\n      stream.on('error', (error: Error) => gzip.destroy(error));\n      ctx.body = stream.pipe(gzip);\n    } else {\n      ctx.body = stream;\n    }\n\n    if (isNewExport) {\n      strapi.telemetry.send('didExportAuditLogs');\n    }\n  },\n};\n"],"names":["EXPORT_INVALID_CONTINUATION_MESSAGE","EXPORT_TOO_LARGE_MESSAGE","findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send","export","validatedQuery","validateExport","isContinuation","cursor","undefined","isTrustedContinuation","errors","ValidationError","isExportTooLarge","filters","PayloadTooLargeError","stream","nextCursor","until","isNewExport","partSize","exportToken","createExportStream","date","Date","toISOString","slice","set","AUDIT_LOGS_EXPORT_UNTIL_HEADER","String","AUDIT_LOGS_EXPORT_PART_SIZE_HEADER","AUDIT_LOGS_EXPORT_TOKEN_HEADER","AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER","AUDIT_LOGS_EXPORT_CURSOR_DONE","exposedHeaders","response","filter","Boolean","join","vary","acceptsEncodings","gzip","createGzip","on","error","destroy","pipe"],"mappings":";;;;;;;AAcA,MAAMA,mCAAAA,GACJ,wEAAA;AACF,MAAMC,wBAAAA,GACJ,sFAAA;AAEF,0BAAe;AACb,IAAA,MAAMC,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,0BAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,+BAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA,CAAA;AAEA,IAAA,MAAMC,QAAOjB,GAAY,EAAA;AACvB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;QAC7B,MAAMgB,cAAAA,GAAiB,MAAMC,wBAAAA,CAAelB,KAAAA,CAAAA;QAE5C,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;QAE7B,MAAMc,cAAAA,GAAiBF,cAAAA,CAAeG,MAAM,KAAKC,SAAAA;AAEjD,QAAA,IAAIF,cAAAA,IAAkB,CAAChB,WAAAA,CAAUmB,qBAAqB,CAACL,cAAAA,CAAAA,EAAiB;YACtE,MAAM,IAAIM,YAAAA,CAAOC,eAAe,CAAC5B,mCAAAA,CAAAA;AACnC,QAAA;AAEA,QAAA,IAAI,CAACuB,cAAAA,EAAgB;YACnB,IAAI,MAAMhB,WAAAA,CAAUsB,gBAAgB,CAAC;gBAAEC,OAAAA,EAAST,cAAAA,CAAeS,OAAO,IAAI;aAAK,CAAA,EAAI;gBACjF,MAAM,IAAIH,YAAAA,CAAOI,oBAAoB,CAAC9B,wBAAAA,CAAAA;AACxC,YAAA;AACF,QAAA;AAEA,QAAA,MAAM,EAAE+B,MAAM,EAAEC,UAAU,EAAEC,KAAK,EAAEC,WAAW,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GACrE,MAAM9B,WAAAA,CAAU+B,kBAAkB,CAACjB,cAAAA,CAAAA;AAErC,QAAA,MAAMkB,OAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA,CAAGC,KAAK,CAAC,CAAA,EAAG,EAAA,CAAA;QAE/CvC,GAAAA,CAAIwC,GAAG,CAAC,cAAA,EAAgB,yBAAA,CAAA;QACxBxC,GAAAA,CAAIwC,GAAG,CAAC,qBAAA,EAAuB,CAAC,iCAAiC,EAAEJ,IAAAA,CAAK,KAAK,CAAC,CAAA;QAC9EpC,GAAAA,CAAIwC,GAAG,CAACC,6CAAAA,EAAgCC,MAAAA,CAAOX,KAAAA,CAAAA,CAAAA;QAC/C/B,GAAAA,CAAIwC,GAAG,CAACG,iDAAAA,EAAoCD,MAAAA,CAAOT,QAAAA,CAAAA,CAAAA;QACnDjC,GAAAA,CAAIwC,GAAG,CAACI,6CAAAA,EAAgCV,WAAAA,CAAAA;AACxClC,QAAAA,GAAAA,CAAIwC,GAAG,CACLK,mDAAAA,EACAf,UAAAA,KAAe,IAAA,GAAOY,OAAOZ,UAAAA,CAAAA,GAAcgB,4CAAAA,CAAAA;AAG7C,QAAA,MAAMC,cAAAA,GAAiB;YACrB/C,GAAAA,CAAIgD,QAAQ,CAAC1C,GAAG,CAAC,+BAAA,CAAA;AACjBmC,YAAAA,6CAAAA;AACAI,YAAAA,mDAAAA;AACAF,YAAAA,iDAAAA;AACAC,YAAAA,6CAAAA;AACA,YAAA;AACD,SAAA,CACEK,MAAM,CAACC,OAAAA,CAAAA,CACPC,IAAI,CAAC,IAAA,CAAA;QACRnD,GAAAA,CAAIwC,GAAG,CAAC,+BAAA,EAAiCO,cAAAA,CAAAA;AAEzC/C,QAAAA,GAAAA,CAAIoD,IAAI,CAAC,iBAAA,CAAA;AACT,QAAA,IAAIpD,GAAAA,CAAIqD,gBAAgB,CAAC,MAAA,EAAQ,gBAAgB,MAAA,EAAQ;YACvDrD,GAAAA,CAAIwC,GAAG,CAAC,kBAAA,EAAoB,MAAA,CAAA;AAC5B,YAAA,MAAMc,IAAAA,GAAOC,eAAAA,EAAAA;AACb1B,YAAAA,MAAAA,CAAO2B,EAAE,CAAC,OAAA,EAAS,CAACC,KAAAA,GAAiBH,IAAAA,CAAKI,OAAO,CAACD,KAAAA,CAAAA,CAAAA;AAClDzD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA,CAAO8B,IAAI,CAACL,IAAAA,CAAAA;QACzB,CAAA,MAAO;AACLtD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA;AACb,QAAA;AAEA,QAAA,IAAIG,WAAAA,EAAa;YACf3B,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,QAAA;AACF,IAAA;AACF,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.mjs

@@ -1,5 +1,10 @@
-import { validateFindManyUsers, validateFindMany } from '../validation/audit-logs.mjs';
+import { createGzip } from 'zlib';
+import { errors } from '@strapi/utils';
+import { AUDIT_LOGS_EXPORT_UNTIL_HEADER, AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, AUDIT_LOGS_EXPORT_TOKEN_HEADER, AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, AUDIT_LOGS_EXPORT_CURSOR_DONE } from '../../../../../shared/utils/audit-log-export.mjs';
+import { validateExport, validateFindManyUsers, validateFindMany } from '../validation/audit-logs.mjs';
 
+const EXPORT_INVALID_CONTINUATION_MESSAGE = 'The export continuation is invalid or has expired. Restart the export.';
+const EXPORT_TOO_LARGE_MESSAGE = 'The export matches more entries than the configured limit. Add filters to reduce it.';
 var auditLogsController = {
     async findMany (ctx) {
         const { query } = ctx.request;
@@ -24,6 +29,51 @@ var auditLogsController = {
         const body = await auditLogs.findOne(id);
         ctx.body = body;
         strapi.telemetry.send('didWatchAnAuditLog');
+    },
+    async export (ctx) {
+        const { query } = ctx.request;
+        const validatedQuery = await validateExport(query);
+        const auditLogs = strapi.get('audit-logs');
+        const isContinuation = validatedQuery.cursor !== undefined;
+        if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {
+            throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);
+        }
+        if (!isContinuation) {
+            if (await auditLogs.isExportTooLarge({
+                filters: validatedQuery.filters ?? null
+            })) {
+                throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);
+            }
+        }
+        const { stream, nextCursor, until, isNewExport, partSize, exportToken } = await auditLogs.createExportStream(validatedQuery);
+        const date = new Date().toISOString().slice(0, 10);
+        ctx.set('Content-Type', 'text/csv; charset=utf-8');
+        ctx.set('Content-Disposition', `attachment; filename="audit-logs-${date}.csv"`);
+        ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));
+        ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));
+        ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);
+        ctx.set(AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE);
+        const exposedHeaders = [
+            ctx.response.get('Access-Control-Expose-Headers'),
+            AUDIT_LOGS_EXPORT_UNTIL_HEADER,
+            AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,
+            AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,
+            AUDIT_LOGS_EXPORT_TOKEN_HEADER,
+            'Content-Disposition'
+        ].filter(Boolean).join(', ');
+        ctx.set('Access-Control-Expose-Headers', exposedHeaders);
+        ctx.vary('Accept-Encoding');
+        if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {
+            ctx.set('Content-Encoding', 'gzip');
+            const gzip = createGzip();
+            stream.on('error', (error)=>gzip.destroy(error));
+            ctx.body = stream.pipe(gzip);
+        } else {
+            ctx.body = stream;
+        }
+        if (isNewExport) {
+            strapi.telemetry.send('didExportAuditLogs');
+        }
     }
 };
 

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n};\n"],"names":["findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send"],"mappings":";;AAIA,0BAAe;AACb,IAAA,MAAMA,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,gBAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,qBAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import { createGzip } from 'zlib';\n\nimport type { Context } from 'koa';\nimport { errors } from '@strapi/utils';\n\nimport {\n  AUDIT_LOGS_EXPORT_CURSOR_DONE,\n  AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n  AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n  AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n  AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n} from '../../../../../shared/utils/audit-log-export';\nimport { validateExport, validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nconst EXPORT_INVALID_CONTINUATION_MESSAGE =\n  'The export continuation is invalid or has expired. Restart the export.';\nconst EXPORT_TOO_LARGE_MESSAGE =\n  'The export matches more entries than the configured limit. Add filters to reduce it.';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n\n  async export(ctx: Context) {\n    const { query } = ctx.request;\n    const validatedQuery = await validateExport(query);\n\n    const auditLogs = strapi.get('audit-logs');\n\n    const isContinuation = validatedQuery.cursor !== undefined;\n\n    if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {\n      throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);\n    }\n\n    if (!isContinuation) {\n      if (await auditLogs.isExportTooLarge({ filters: validatedQuery.filters ?? null })) {\n        throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);\n      }\n    }\n\n    const { stream, nextCursor, until, isNewExport, partSize, exportToken } =\n      await auditLogs.createExportStream(validatedQuery);\n\n    const date = new Date().toISOString().slice(0, 10);\n\n    ctx.set('Content-Type', 'text/csv; charset=utf-8');\n    ctx.set('Content-Disposition', `attachment; filename=\"audit-logs-${date}.csv\"`);\n    ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));\n    ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));\n    ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);\n    ctx.set(\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE\n    );\n\n    const exposedHeaders = [\n      ctx.response.get('Access-Control-Expose-Headers'),\n      AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n      AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n      'Content-Disposition',\n    ]\n      .filter(Boolean)\n      .join(', ');\n    ctx.set('Access-Control-Expose-Headers', exposedHeaders);\n\n    ctx.vary('Accept-Encoding');\n    if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {\n      ctx.set('Content-Encoding', 'gzip');\n      const gzip = createGzip();\n      stream.on('error', (error: Error) => gzip.destroy(error));\n      ctx.body = stream.pipe(gzip);\n    } else {\n      ctx.body = stream;\n    }\n\n    if (isNewExport) {\n      strapi.telemetry.send('didExportAuditLogs');\n    }\n  },\n};\n"],"names":["EXPORT_INVALID_CONTINUATION_MESSAGE","EXPORT_TOO_LARGE_MESSAGE","findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send","export","validatedQuery","validateExport","isContinuation","cursor","undefined","isTrustedContinuation","errors","ValidationError","isExportTooLarge","filters","PayloadTooLargeError","stream","nextCursor","until","isNewExport","partSize","exportToken","createExportStream","date","Date","toISOString","slice","set","AUDIT_LOGS_EXPORT_UNTIL_HEADER","String","AUDIT_LOGS_EXPORT_PART_SIZE_HEADER","AUDIT_LOGS_EXPORT_TOKEN_HEADER","AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER","AUDIT_LOGS_EXPORT_CURSOR_DONE","exposedHeaders","response","filter","Boolean","join","vary","acceptsEncodings","gzip","createGzip","on","error","destroy","pipe"],"mappings":";;;;;AAcA,MAAMA,mCAAAA,GACJ,wEAAA;AACF,MAAMC,wBAAAA,GACJ,sFAAA;AAEF,0BAAe;AACb,IAAA,MAAMC,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,gBAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,qBAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA,CAAA;AAEA,IAAA,MAAMC,QAAOjB,GAAY,EAAA;AACvB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;QAC7B,MAAMgB,cAAAA,GAAiB,MAAMC,cAAAA,CAAelB,KAAAA,CAAAA;QAE5C,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;QAE7B,MAAMc,cAAAA,GAAiBF,cAAAA,CAAeG,MAAM,KAAKC,SAAAA;AAEjD,QAAA,IAAIF,cAAAA,IAAkB,CAAChB,SAAAA,CAAUmB,qBAAqB,CAACL,cAAAA,CAAAA,EAAiB;YACtE,MAAM,IAAIM,MAAAA,CAAOC,eAAe,CAAC5B,mCAAAA,CAAAA;AACnC,QAAA;AAEA,QAAA,IAAI,CAACuB,cAAAA,EAAgB;YACnB,IAAI,MAAMhB,SAAAA,CAAUsB,gBAAgB,CAAC;gBAAEC,OAAAA,EAAST,cAAAA,CAAeS,OAAO,IAAI;aAAK,CAAA,EAAI;gBACjF,MAAM,IAAIH,MAAAA,CAAOI,oBAAoB,CAAC9B,wBAAAA,CAAAA;AACxC,YAAA;AACF,QAAA;AAEA,QAAA,MAAM,EAAE+B,MAAM,EAAEC,UAAU,EAAEC,KAAK,EAAEC,WAAW,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GACrE,MAAM9B,SAAAA,CAAU+B,kBAAkB,CAACjB,cAAAA,CAAAA;AAErC,QAAA,MAAMkB,OAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA,CAAGC,KAAK,CAAC,CAAA,EAAG,EAAA,CAAA;QAE/CvC,GAAAA,CAAIwC,GAAG,CAAC,cAAA,EAAgB,yBAAA,CAAA;QACxBxC,GAAAA,CAAIwC,GAAG,CAAC,qBAAA,EAAuB,CAAC,iCAAiC,EAAEJ,IAAAA,CAAK,KAAK,CAAC,CAAA;QAC9EpC,GAAAA,CAAIwC,GAAG,CAACC,8BAAAA,EAAgCC,MAAAA,CAAOX,KAAAA,CAAAA,CAAAA;QAC/C/B,GAAAA,CAAIwC,GAAG,CAACG,kCAAAA,EAAoCD,MAAAA,CAAOT,QAAAA,CAAAA,CAAAA;QACnDjC,GAAAA,CAAIwC,GAAG,CAACI,8BAAAA,EAAgCV,WAAAA,CAAAA;AACxClC,QAAAA,GAAAA,CAAIwC,GAAG,CACLK,oCAAAA,EACAf,UAAAA,KAAe,IAAA,GAAOY,OAAOZ,UAAAA,CAAAA,GAAcgB,6BAAAA,CAAAA;AAG7C,QAAA,MAAMC,cAAAA,GAAiB;YACrB/C,GAAAA,CAAIgD,QAAQ,CAAC1C,GAAG,CAAC,+BAAA,CAAA;AACjBmC,YAAAA,8BAAAA;AACAI,YAAAA,oCAAAA;AACAF,YAAAA,kCAAAA;AACAC,YAAAA,8BAAAA;AACA,YAAA;AACD,SAAA,CACEK,MAAM,CAACC,OAAAA,CAAAA,CACPC,IAAI,CAAC,IAAA,CAAA;QACRnD,GAAAA,CAAIwC,GAAG,CAAC,+BAAA,EAAiCO,cAAAA,CAAAA;AAEzC/C,QAAAA,GAAAA,CAAIoD,IAAI,CAAC,iBAAA,CAAA;AACT,QAAA,IAAIpD,GAAAA,CAAIqD,gBAAgB,CAAC,MAAA,EAAQ,gBAAgB,MAAA,EAAQ;YACvDrD,GAAAA,CAAIwC,GAAG,CAAC,kBAAA,EAAoB,MAAA,CAAA;AAC5B,YAAA,MAAMc,IAAAA,GAAOC,UAAAA,EAAAA;AACb1B,YAAAA,MAAAA,CAAO2B,EAAE,CAAC,OAAA,EAAS,CAACC,KAAAA,GAAiBH,IAAAA,CAAKI,OAAO,CAACD,KAAAA,CAAAA,CAAAA;AAClDzD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA,CAAO8B,IAAI,CAACL,IAAAA,CAAAA;QACzB,CAAA,MAAO;AACLtD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA;AACb,QAAA;AAEA,QAAA,IAAIG,WAAAA,EAAa;YACf3B,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,QAAA;AACF,IAAA;AACF,CAAA;;;;"}