@strapi/admin 5.57.0 → 5.59.0

package/dist/server/server/src/validation/admin-tokens.js

@@ -8,16 +8,16 @@ const adminTokenCreationSchema = utils.yup.object().shape({
     kind: utils.yup.string().oneOf([
         'admin'
     ]).optional(),
-    name: utils.yup.string().min(1).required(),
-    description: utils.yup.string().optional(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     lifespan: utils.yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),
     adminPermissions: utils.yup.array().of(commonValidators.permission),
     // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body
     adminUserOwner: utils.yup.mixed().nullable()
 }).noUnknown().strict();
 const adminTokenUpdateSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1).notNull(),
-    description: utils.yup.string().nullable(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     adminPermissions: utils.yup.array().of(commonValidators.permission).nullable()
 }).noUnknown().strict();
 const validateAdminTokenCreationInput = utils.validateYupSchema(adminTokenCreationSchema);

package/dist/server/server/src/validation/admin-tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-tokens.js","sources":["../../../../../server/src/validation/admin-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\nimport { permission } from './common-validators';\n\nconst adminTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['admin']).optional(),\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n    adminPermissions: yup.array().of(permission),\n    // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body\n    adminUserOwner: yup.mixed().nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst adminTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    adminPermissions: yup.array().of(permission).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateAdminTokenCreationInput = validateYupSchema(adminTokenCreationSchema);\nexport const validateAdminTokenUpdateInput = validateYupSchema(adminTokenUpdateSchema);\n"],"names":["adminTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","required","description","lifespan","number","Object","values","constants","API_TOKEN_LIFESPANS","nullable","adminPermissions","array","of","permission","adminUserOwner","mixed","noUnknown","strict","adminTokenUpdateSchema","notNull","validateAdminTokenCreationInput","validateYupSchema","validateAdminTokenUpdateInput"],"mappings":";;;;;;AAIA,MAAMA,wBAAAA,GAA2BC,SAAAA,CAC9BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAQ,KAAA,CAAA,CAAEC,QAAQ,EAAA;AAC5CC,IAAAA,IAAAA,EAAMP,UAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGE,QAAQ,EAAA;AAClCK,IAAAA,QAAAA,EAAUX,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACQ,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,GAAGC,QAAQ,EAAA;AAC1FC,IAAAA,gBAAAA,EAAkBlB,SAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACC,2BAAAA,CAAAA;;IAEjCC,cAAAA,EAAgBtB,SAAAA,CAAIuB,KAAK,EAAA,CAAGN,QAAQ;AACtC,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,sBAAAA,GAAyB1B,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLK,IAAAA,IAAAA,EAAMP,UAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGmB,OAAO,EAAA;IACjCjB,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGa,QAAQ,EAAA;AAClCC,IAAAA,gBAAAA,EAAkBlB,UAAImB,KAAK,EAAA,CAAGC,EAAE,CAACC,6BAAYJ,QAAQ;AACvD,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,+BAAAA,GAAkCC,uBAAAA,CAAkB9B,wBAAAA;AAC1D,MAAM+B,6BAAAA,GAAgCD,uBAAAA,CAAkBH,sBAAAA;;;;;"}
+{"version":3,"file":"admin-tokens.js","sources":["../../../../../server/src/validation/admin-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\nimport { permission } from './common-validators';\n\nconst adminTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['admin']).optional(),\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n    adminPermissions: yup.array().of(permission),\n    // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body\n    adminUserOwner: yup.mixed().nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst adminTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    adminPermissions: yup.array().of(permission).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateAdminTokenCreationInput = validateYupSchema(adminTokenCreationSchema);\nexport const validateAdminTokenUpdateInput = validateYupSchema(adminTokenUpdateSchema);\n"],"names":["adminTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","lifespan","number","Object","values","API_TOKEN_LIFESPANS","nullable","adminPermissions","array","of","permission","adminUserOwner","mixed","noUnknown","strict","adminTokenUpdateSchema","notNull","validateAdminTokenCreationInput","validateYupSchema","validateAdminTokenUpdateInput"],"mappings":";;;;;;AAIA,MAAMA,wBAAAA,GAA2BC,SAAAA,CAC9BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAQ,KAAA,CAAA,CAAEC,QAAQ,EAAA;IAC5CC,IAAAA,EAAMP,SAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAab,SAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEL,QAAQ,EAAA;AACvEQ,IAAAA,QAAAA,EAAUd,SAAAA,CAAIe,MAAM,EAAA,CAAGP,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACW,MAAAA,CAAOC,MAAM,CAACP,SAAAA,CAAUQ,mBAAmB,GAAGC,QAAQ,EAAA;AAC1FC,IAAAA,gBAAAA,EAAkBpB,SAAAA,CAAIqB,KAAK,EAAA,CAAGC,EAAE,CAACC,2BAAAA,CAAAA;;IAEjCC,cAAAA,EAAgBxB,SAAAA,CAAIyB,KAAK,EAAA,CAAGN,QAAQ;AACtC,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,sBAAAA,GAAyB5B,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLK,IAAAA,EAAMP,SAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEkB,OAAO,EAAA;IACtEhB,WAAAA,EAAab,SAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEQ,QAAQ,EAAA;AACvEC,IAAAA,gBAAAA,EAAkBpB,UAAIqB,KAAK,EAAA,CAAGC,EAAE,CAACC,6BAAYJ,QAAQ;AACvD,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,+BAAAA,GAAkCC,uBAAAA,CAAkBhC,wBAAAA;AAC1D,MAAMiC,6BAAAA,GAAgCD,uBAAAA,CAAkBH,sBAAAA;;;;;"}

package/dist/server/server/src/validation/admin-tokens.mjs

@@ -6,16 +6,16 @@ const adminTokenCreationSchema = yup.object().shape({
     kind: yup.string().oneOf([
         'admin'
     ]).optional(),
-    name: yup.string().min(1).required(),
-    description: yup.string().optional(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),
     adminPermissions: yup.array().of(permission),
     // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body
     adminUserOwner: yup.mixed().nullable()
 }).noUnknown().strict();
 const adminTokenUpdateSchema = yup.object().shape({
-    name: yup.string().min(1).notNull(),
-    description: yup.string().nullable(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     adminPermissions: yup.array().of(permission).nullable()
 }).noUnknown().strict();
 const validateAdminTokenCreationInput = validateYupSchema(adminTokenCreationSchema);

package/dist/server/server/src/validation/admin-tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-tokens.mjs","sources":["../../../../../server/src/validation/admin-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\nimport { permission } from './common-validators';\n\nconst adminTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['admin']).optional(),\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n    adminPermissions: yup.array().of(permission),\n    // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body\n    adminUserOwner: yup.mixed().nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst adminTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    adminPermissions: yup.array().of(permission).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateAdminTokenCreationInput = validateYupSchema(adminTokenCreationSchema);\nexport const validateAdminTokenUpdateInput = validateYupSchema(adminTokenUpdateSchema);\n"],"names":["adminTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","required","description","lifespan","number","Object","values","constants","API_TOKEN_LIFESPANS","nullable","adminPermissions","array","of","permission","adminUserOwner","mixed","noUnknown","strict","adminTokenUpdateSchema","notNull","validateAdminTokenCreationInput","validateYupSchema","validateAdminTokenUpdateInput"],"mappings":";;;;AAIA,MAAMA,wBAAAA,GAA2BC,GAAAA,CAC9BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAQ,KAAA,CAAA,CAAEC,QAAQ,EAAA;AAC5CC,IAAAA,IAAAA,EAAMP,IAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGE,QAAQ,EAAA;AAClCK,IAAAA,QAAAA,EAAUX,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACQ,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,GAAGC,QAAQ,EAAA;AAC1FC,IAAAA,gBAAAA,EAAkBlB,GAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACC,UAAAA,CAAAA;;IAEjCC,cAAAA,EAAgBtB,GAAAA,CAAIuB,KAAK,EAAA,CAAGN,QAAQ;AACtC,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,sBAAAA,GAAyB1B,GAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLK,IAAAA,IAAAA,EAAMP,IAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGmB,OAAO,EAAA;IACjCjB,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGa,QAAQ,EAAA;AAClCC,IAAAA,gBAAAA,EAAkBlB,IAAImB,KAAK,EAAA,CAAGC,EAAE,CAACC,YAAYJ,QAAQ;AACvD,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,+BAAAA,GAAkCC,iBAAAA,CAAkB9B,wBAAAA;AAC1D,MAAM+B,6BAAAA,GAAgCD,iBAAAA,CAAkBH,sBAAAA;;;;"}
+{"version":3,"file":"admin-tokens.mjs","sources":["../../../../../server/src/validation/admin-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\nimport { permission } from './common-validators';\n\nconst adminTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['admin']).optional(),\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n    adminPermissions: yup.array().of(permission),\n    // adminUserOwner is set by the controller from ctx.state.user (full user object) or a strapiID from body\n    adminUserOwner: yup.mixed().nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst adminTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    adminPermissions: yup.array().of(permission).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateAdminTokenCreationInput = validateYupSchema(adminTokenCreationSchema);\nexport const validateAdminTokenUpdateInput = validateYupSchema(adminTokenUpdateSchema);\n"],"names":["adminTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","lifespan","number","Object","values","API_TOKEN_LIFESPANS","nullable","adminPermissions","array","of","permission","adminUserOwner","mixed","noUnknown","strict","adminTokenUpdateSchema","notNull","validateAdminTokenCreationInput","validateYupSchema","validateAdminTokenUpdateInput"],"mappings":";;;;AAIA,MAAMA,wBAAAA,GAA2BC,GAAAA,CAC9BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAQ,KAAA,CAAA,CAAEC,QAAQ,EAAA;IAC5CC,IAAAA,EAAMP,GAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAab,GAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEL,QAAQ,EAAA;AACvEQ,IAAAA,QAAAA,EAAUd,GAAAA,CAAIe,MAAM,EAAA,CAAGP,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACW,MAAAA,CAAOC,MAAM,CAACP,SAAAA,CAAUQ,mBAAmB,GAAGC,QAAQ,EAAA;AAC1FC,IAAAA,gBAAAA,EAAkBpB,GAAAA,CAAIqB,KAAK,EAAA,CAAGC,EAAE,CAACC,UAAAA,CAAAA;;IAEjCC,cAAAA,EAAgBxB,GAAAA,CAAIyB,KAAK,EAAA,CAAGN,QAAQ;AACtC,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,sBAAAA,GAAyB5B,GAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLK,IAAAA,EAAMP,GAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEkB,OAAO,EAAA;IACtEhB,WAAAA,EAAab,GAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEQ,QAAQ,EAAA;AACvEC,IAAAA,gBAAAA,EAAkBpB,IAAIqB,KAAK,EAAA,CAAGC,EAAE,CAACC,YAAYJ,QAAQ;AACvD,CAAA,CAAA,CACCO,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,+BAAAA,GAAkCC,iBAAAA,CAAkBhC,wBAAAA;AAC1D,MAAMiC,6BAAAA,GAAgCD,iBAAAA,CAAkBH,sBAAAA;;;;"}

package/dist/server/server/src/validation/api-tokens.js

@@ -7,15 +7,15 @@ const apiTokenCreationSchema = utils.yup.object().shape({
     kind: utils.yup.string().oneOf([
         'content-api'
     ]).optional(),
-    name: utils.yup.string().min(1).required(),
-    description: utils.yup.string().optional(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     type: utils.yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),
     permissions: utils.yup.array().of(utils.yup.string()).nullable(),
     lifespan: utils.yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable()
 }).noUnknown().strict();
 const apiTokenUpdateSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1).notNull(),
-    description: utils.yup.string().nullable(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     type: utils.yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),
     permissions: utils.yup.array().of(utils.yup.string()).nullable()
 }).noUnknown().strict();

package/dist/server/server/src/validation/api-tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-tokens.js","sources":["../../../../../server/src/validation/api-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst apiTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['content-api']).optional(),\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst apiTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateApiTokenCreationInput = validateYupSchema(apiTokenCreationSchema);\nexport const validateApiTokenUpdateInput = validateYupSchema(apiTokenUpdateSchema);\n\nexport default {\n  validateApiTokenCreationInput,\n  validateApiTokenUpdateInput,\n};\n"],"names":["apiTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","required","description","type","Object","values","constants","API_TOKEN_TYPE","permissions","array","of","nullable","lifespan","number","API_TOKEN_LIFESPANS","noUnknown","strict","apiTokenUpdateSchema","notNull","validateApiTokenCreationInput","validateYupSchema","validateApiTokenUpdateInput"],"mappings":";;;;;AAGA,MAAMA,sBAAAA,GAAyBC,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAc,KAAA,CAAA,CAAEC,QAAQ,EAAA;AAClDC,IAAAA,IAAAA,EAAMP,UAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGE,QAAQ,EAAA;IAClCK,IAAAA,EAAMX,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,cAAc,CAAA,CAAA,CAAGT,QAAQ,EAAA;IAC1EU,WAAAA,EAAahB,SAAAA,CAAIiB,KAAK,EAAA,CAAGC,EAAE,CAAClB,SAAAA,CAAII,MAAM,IAAIe,QAAQ,EAAA;AAClDC,IAAAA,QAAAA,EAAUpB,SAAAA,CAAIqB,MAAM,EAAA,CAAGb,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUQ,mBAAmB,GAAGH,QAAQ;AAC5F,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,oBAAAA,GAAuBzB,SAAAA,CAC1BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLK,IAAAA,IAAAA,EAAMP,UAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGkB,OAAO,EAAA;IACjChB,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGe,QAAQ,EAAA;IAClCR,IAAAA,EAAMX,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,cAAc,CAAA,CAAA,CAAGT,QAAQ,EAAA;IAC1EU,WAAAA,EAAahB,SAAAA,CAAIiB,KAAK,EAAA,CAAGC,EAAE,CAAClB,SAAAA,CAAII,MAAM,IAAIe,QAAQ;AACpD,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,6BAAAA,GAAgCC,uBAAAA,CAAkB7B,sBAAAA;AACxD,MAAM8B,2BAAAA,GAA8BD,uBAAAA,CAAkBH,oBAAAA;;;;;"}
+{"version":3,"file":"api-tokens.js","sources":["../../../../../server/src/validation/api-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst apiTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['content-api']).optional(),\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst apiTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateApiTokenCreationInput = validateYupSchema(apiTokenCreationSchema);\nexport const validateApiTokenUpdateInput = validateYupSchema(apiTokenUpdateSchema);\n\nexport default {\n  validateApiTokenCreationInput,\n  validateApiTokenUpdateInput,\n};\n"],"names":["apiTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","type","Object","values","API_TOKEN_TYPE","permissions","array","of","nullable","lifespan","number","API_TOKEN_LIFESPANS","noUnknown","strict","apiTokenUpdateSchema","notNull","validateApiTokenCreationInput","validateYupSchema","validateApiTokenUpdateInput"],"mappings":";;;;;AAGA,MAAMA,sBAAAA,GAAyBC,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAc,KAAA,CAAA,CAAEC,QAAQ,EAAA;IAClDC,IAAAA,EAAMP,SAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAab,SAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEL,QAAQ,EAAA;IACvEQ,IAAAA,EAAMd,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUO,cAAc,CAAA,CAAA,CAAGX,QAAQ,EAAA;IAC1EY,WAAAA,EAAalB,SAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACpB,SAAAA,CAAII,MAAM,IAAIiB,QAAQ,EAAA;AAClDC,IAAAA,QAAAA,EAAUtB,SAAAA,CAAIuB,MAAM,EAAA,CAAGf,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUc,mBAAmB,GAAGH,QAAQ;AAC5F,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,oBAAAA,GAAuB3B,SAAAA,CAC1BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLK,IAAAA,EAAMP,SAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEiB,OAAO,EAAA;IACtEf,WAAAA,EAAab,SAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEU,QAAQ,EAAA;IACvEP,IAAAA,EAAMd,SAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUO,cAAc,CAAA,CAAA,CAAGX,QAAQ,EAAA;IAC1EY,WAAAA,EAAalB,SAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACpB,SAAAA,CAAII,MAAM,IAAIiB,QAAQ;AACpD,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,6BAAAA,GAAgCC,uBAAAA,CAAkB/B,sBAAAA;AACxD,MAAMgC,2BAAAA,GAA8BD,uBAAAA,CAAkBH,oBAAAA;;;;;"}

package/dist/server/server/src/validation/api-tokens.mjs

@@ -5,15 +5,15 @@ const apiTokenCreationSchema = yup.object().shape({
     kind: yup.string().oneOf([
         'content-api'
     ]).optional(),
-    name: yup.string().min(1).required(),
-    description: yup.string().optional(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),
     permissions: yup.array().of(yup.string()).nullable(),
     lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable()
 }).noUnknown().strict();
 const apiTokenUpdateSchema = yup.object().shape({
-    name: yup.string().min(1).notNull(),
-    description: yup.string().nullable(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),
     permissions: yup.array().of(yup.string()).nullable()
 }).noUnknown().strict();

package/dist/server/server/src/validation/api-tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-tokens.mjs","sources":["../../../../../server/src/validation/api-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst apiTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['content-api']).optional(),\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst apiTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateApiTokenCreationInput = validateYupSchema(apiTokenCreationSchema);\nexport const validateApiTokenUpdateInput = validateYupSchema(apiTokenUpdateSchema);\n\nexport default {\n  validateApiTokenCreationInput,\n  validateApiTokenUpdateInput,\n};\n"],"names":["apiTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","required","description","type","Object","values","constants","API_TOKEN_TYPE","permissions","array","of","nullable","lifespan","number","API_TOKEN_LIFESPANS","noUnknown","strict","apiTokenUpdateSchema","notNull","validateApiTokenCreationInput","validateYupSchema","validateApiTokenUpdateInput"],"mappings":";;;AAGA,MAAMA,sBAAAA,GAAyBC,GAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAc,KAAA,CAAA,CAAEC,QAAQ,EAAA;AAClDC,IAAAA,IAAAA,EAAMP,IAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGE,QAAQ,EAAA;IAClCK,IAAAA,EAAMX,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,cAAc,CAAA,CAAA,CAAGT,QAAQ,EAAA;IAC1EU,WAAAA,EAAahB,GAAAA,CAAIiB,KAAK,EAAA,CAAGC,EAAE,CAAClB,GAAAA,CAAII,MAAM,IAAIe,QAAQ,EAAA;AAClDC,IAAAA,QAAAA,EAAUpB,GAAAA,CAAIqB,MAAM,EAAA,CAAGb,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUQ,mBAAmB,GAAGH,QAAQ;AAC5F,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,oBAAAA,GAAuBzB,GAAAA,CAC1BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLK,IAAAA,IAAAA,EAAMP,IAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,GAAGkB,OAAO,EAAA;IACjChB,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGe,QAAQ,EAAA;IAClCR,IAAAA,EAAMX,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACO,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,cAAc,CAAA,CAAA,CAAGT,QAAQ,EAAA;IAC1EU,WAAAA,EAAahB,GAAAA,CAAIiB,KAAK,EAAA,CAAGC,EAAE,CAAClB,GAAAA,CAAII,MAAM,IAAIe,QAAQ;AACpD,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,6BAAAA,GAAgCC,iBAAAA,CAAkB7B,sBAAAA;AACxD,MAAM8B,2BAAAA,GAA8BD,iBAAAA,CAAkBH,oBAAAA;;;;"}
+{"version":3,"file":"api-tokens.mjs","sources":["../../../../../server/src/validation/api-tokens.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst apiTokenCreationSchema = yup\n  .object()\n  .shape({\n    kind: yup.string().oneOf(['content-api']).optional(),\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n    lifespan: yup.number().min(1).oneOf(Object.values(constants.API_TOKEN_LIFESPANS)).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst apiTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    type: yup.string().oneOf(Object.values(constants.API_TOKEN_TYPE)).optional(),\n    permissions: yup.array().of(yup.string()).nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateApiTokenCreationInput = validateYupSchema(apiTokenCreationSchema);\nexport const validateApiTokenUpdateInput = validateYupSchema(apiTokenUpdateSchema);\n\nexport default {\n  validateApiTokenCreationInput,\n  validateApiTokenUpdateInput,\n};\n"],"names":["apiTokenCreationSchema","yup","object","shape","kind","string","oneOf","optional","name","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","type","Object","values","API_TOKEN_TYPE","permissions","array","of","nullable","lifespan","number","API_TOKEN_LIFESPANS","noUnknown","strict","apiTokenUpdateSchema","notNull","validateApiTokenCreationInput","validateYupSchema","validateApiTokenUpdateInput"],"mappings":";;;AAGA,MAAMA,sBAAAA,GAAyBC,GAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAAC,QAAA;AAAc,KAAA,CAAA,CAAEC,QAAQ,EAAA;IAClDC,IAAAA,EAAMP,GAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAab,GAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEL,QAAQ,EAAA;IACvEQ,IAAAA,EAAMd,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUO,cAAc,CAAA,CAAA,CAAGX,QAAQ,EAAA;IAC1EY,WAAAA,EAAalB,GAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACpB,GAAAA,CAAII,MAAM,IAAIiB,QAAQ,EAAA;AAClDC,IAAAA,QAAAA,EAAUtB,GAAAA,CAAIuB,MAAM,EAAA,CAAGf,GAAG,CAAC,CAAA,CAAA,CAAGH,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUc,mBAAmB,GAAGH,QAAQ;AAC5F,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,oBAAAA,GAAuB3B,GAAAA,CAC1BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLK,IAAAA,EAAMP,GAAAA,CAAII,MAAM,EAAA,CAAGI,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEiB,OAAO,EAAA;IACtEf,WAAAA,EAAab,GAAAA,CAAII,MAAM,EAAA,CAAGK,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEU,QAAQ,EAAA;IACvEP,IAAAA,EAAMd,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAACU,MAAAA,CAAOC,MAAM,CAACN,SAAAA,CAAUO,cAAc,CAAA,CAAA,CAAGX,QAAQ,EAAA;IAC1EY,WAAAA,EAAalB,GAAAA,CAAImB,KAAK,EAAA,CAAGC,EAAE,CAACpB,GAAAA,CAAII,MAAM,IAAIiB,QAAQ;AACpD,CAAA,CAAA,CACCI,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,6BAAAA,GAAgCC,iBAAAA,CAAkB/B,sBAAAA;AACxD,MAAMgC,2BAAAA,GAA8BD,iBAAAA,CAAkBH,oBAAAA;;;;"}

package/dist/server/server/src/validation/role.js

@@ -1,10 +1,12 @@
 'use strict';
 
 var utils = require('@strapi/utils');
+var constants = require('../services/constants.js');
 
+const { ROLE_TEXT_MAX_LENGTH } = constants;
 const roleCreateSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1).required(),
-    description: utils.yup.string().nullable()
+    name: utils.yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH).required(),
+    description: utils.yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable()
 }).noUnknown();
 const rolesDeleteSchema = utils.yup.object().shape({
     ids: utils.yup.array().of(utils.yup.strapiID()).min(1).required().test('roles-deletion-checks', 'Roles deletion checks have failed', async function checkRolesDeletion(ids) {
@@ -35,8 +37,8 @@ const roleDeleteSchema = utils.yup.strapiID().required().test('no-admin-single-d
     return true;
 });
 const roleUpdateSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1),
-    description: utils.yup.string().nullable()
+    name: utils.yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH),
+    description: utils.yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable()
 }).noUnknown();
 const validateRoleCreateInput = utils.validateYupSchema(roleCreateSchema);
 const validateRoleUpdateInput = utils.validateYupSchema(roleUpdateSchema);

package/dist/server/server/src/validation/role.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.js","sources":["../../../../../server/src/validation/role.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst roleCreateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).required(),\n    description: yup.string().nullable(),\n  })\n  .noUnknown();\n\nconst rolesDeleteSchema = yup\n  .object()\n  .shape({\n    ids: yup\n      .array()\n      .of(yup.strapiID())\n      .min(1)\n      .required()\n      .test(\n        'roles-deletion-checks',\n        'Roles deletion checks have failed',\n        async function checkRolesDeletion(ids) {\n          try {\n            await strapi.service('admin::role').checkRolesIdForDeletion(ids);\n          } catch (e) {\n            // @ts-expect-error yup types\n            return this.createError({ path: 'ids', message: e.message });\n          }\n\n          return true;\n        }\n      ),\n  })\n  .noUnknown();\n\nconst roleDeleteSchema = yup\n  .strapiID()\n  .required()\n  .test(\n    'no-admin-single-delete',\n    'Role deletion checks have failed',\n    async function checkRoleDeletion(id) {\n      try {\n        await strapi.service('admin::role').checkRolesIdForDeletion([id]);\n      } catch (e) {\n        // @ts-expect-error yup types\n        return this.createError({ path: 'id', message: e.message });\n      }\n\n      return true;\n    }\n  );\n\nconst roleUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1),\n    description: yup.string().nullable(),\n  })\n  .noUnknown();\n\nexport const validateRoleCreateInput = validateYupSchema(roleCreateSchema);\nexport const validateRoleUpdateInput = validateYupSchema(roleUpdateSchema);\nexport const validateRolesDeleteInput = validateYupSchema(rolesDeleteSchema);\nexport const validateRoleDeleteInput = validateYupSchema(roleDeleteSchema);\n\nexport default {\n  validateRoleUpdateInput,\n  validateRoleCreateInput,\n  validateRolesDeleteInput,\n  validateRoleDeleteInput,\n};\n"],"names":["roleCreateSchema","yup","object","shape","name","string","min","required","description","nullable","noUnknown","rolesDeleteSchema","ids","array","of","strapiID","test","checkRolesDeletion","strapi","service","checkRolesIdForDeletion","e","createError","path","message","roleDeleteSchema","checkRoleDeletion","id","roleUpdateSchema","validateRoleCreateInput","validateYupSchema","validateRoleUpdateInput","validateRolesDeleteInput","validateRoleDeleteInput"],"mappings":";;;;AAEA,MAAMA,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaP,SAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ;AACpC,CAAA,CAAA,CACCC,SAAS,EAAA;AAEZ,MAAMC,iBAAAA,GAAoBV,SAAAA,CACvBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLS,IAAAA,GAAAA,EAAKX,UACFY,KAAK,EAAA,CACLC,EAAE,CAACb,SAAAA,CAAIc,QAAQ,EAAA,CAAA,CACfT,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,GACRS,IAAI,CACH,yBACA,mCAAA,EACA,eAAeC,mBAAmBL,GAAG,EAAA;QACnC,IAAI;AACF,YAAA,MAAMM,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAACR,GAAAA,CAAAA;AAC9D,QAAA,CAAA,CAAE,OAAOS,CAAAA,EAAG;;YAEV,OAAO,IAAI,CAACC,WAAW,CAAC;gBAAEC,IAAAA,EAAM,KAAA;AAAOC,gBAAAA,OAAAA,EAASH,EAAEG;AAAQ,aAAA,CAAA;AAC5D,QAAA;QAEA,OAAO,IAAA;AACT,IAAA,CAAA;AAEN,CAAA,CAAA,CACCd,SAAS,EAAA;AAEZ,MAAMe,gBAAAA,GAAmBxB,SAAAA,CACtBc,QAAQ,EAAA,CACRR,QAAQ,EAAA,CACRS,IAAI,CACH,wBAAA,EACA,kCAAA,EACA,eAAeU,iBAAAA,CAAkBC,EAAE,EAAA;IACjC,IAAI;AACF,QAAA,MAAMT,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAAC;AAACO,YAAAA;AAAG,SAAA,CAAA;AAClE,IAAA,CAAA,CAAE,OAAON,CAAAA,EAAG;;QAEV,OAAO,IAAI,CAACC,WAAW,CAAC;YAAEC,IAAAA,EAAM,IAAA;AAAMC,YAAAA,OAAAA,EAASH,EAAEG;AAAQ,SAAA,CAAA;AAC3D,IAAA;IAEA,OAAO,IAAA;AACT,CAAA,CAAA;AAGJ,MAAMI,gBAAAA,GAAmB3B,SAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACvBE,WAAAA,EAAaP,SAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ;AACpC,CAAA,CAAA,CACCC,SAAS,EAAA;AAEL,MAAMmB,uBAAAA,GAA0BC,uBAAAA,CAAkB9B,gBAAAA;AAClD,MAAM+B,uBAAAA,GAA0BD,uBAAAA,CAAkBF,gBAAAA;AAClD,MAAMI,wBAAAA,GAA2BF,uBAAAA,CAAkBnB,iBAAAA;AACnD,MAAMsB,uBAAAA,GAA0BH,uBAAAA,CAAkBL,gBAAAA;;;;;;;"}
+{"version":3,"file":"role.js","sources":["../../../../../server/src/validation/role.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst { ROLE_TEXT_MAX_LENGTH } = constants;\n\nconst roleCreateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable(),\n  })\n  .noUnknown();\n\nconst rolesDeleteSchema = yup\n  .object()\n  .shape({\n    ids: yup\n      .array()\n      .of(yup.strapiID())\n      .min(1)\n      .required()\n      .test(\n        'roles-deletion-checks',\n        'Roles deletion checks have failed',\n        async function checkRolesDeletion(ids) {\n          try {\n            await strapi.service('admin::role').checkRolesIdForDeletion(ids);\n          } catch (e) {\n            // @ts-expect-error yup types\n            return this.createError({ path: 'ids', message: e.message });\n          }\n\n          return true;\n        }\n      ),\n  })\n  .noUnknown();\n\nconst roleDeleteSchema = yup\n  .strapiID()\n  .required()\n  .test(\n    'no-admin-single-delete',\n    'Role deletion checks have failed',\n    async function checkRoleDeletion(id) {\n      try {\n        await strapi.service('admin::role').checkRolesIdForDeletion([id]);\n      } catch (e) {\n        // @ts-expect-error yup types\n        return this.createError({ path: 'id', message: e.message });\n      }\n\n      return true;\n    }\n  );\n\nconst roleUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH),\n    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable(),\n  })\n  .noUnknown();\n\nexport const validateRoleCreateInput = validateYupSchema(roleCreateSchema);\nexport const validateRoleUpdateInput = validateYupSchema(roleUpdateSchema);\nexport const validateRolesDeleteInput = validateYupSchema(rolesDeleteSchema);\nexport const validateRoleDeleteInput = validateYupSchema(roleDeleteSchema);\n\nexport default {\n  validateRoleUpdateInput,\n  validateRoleCreateInput,\n  validateRolesDeleteInput,\n  validateRoleDeleteInput,\n};\n"],"names":["ROLE_TEXT_MAX_LENGTH","constants","roleCreateSchema","yup","object","shape","name","string","min","max","required","description","nullable","noUnknown","rolesDeleteSchema","ids","array","of","strapiID","test","checkRolesDeletion","strapi","service","checkRolesIdForDeletion","e","createError","path","message","roleDeleteSchema","checkRoleDeletion","id","roleUpdateSchema","validateRoleCreateInput","validateYupSchema","validateRoleUpdateInput","validateRolesDeleteInput","validateRoleDeleteInput"],"mappings":";;;;;AAGA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,SAAAA;AAEjC,MAAMC,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACT,oBAAAA,CAAAA,CAAsBU,QAAQ,EAAA;AAC5DC,IAAAA,WAAAA,EAAaR,UAAII,MAAM,EAAA,CAAGE,GAAG,CAACT,sBAAsBY,QAAQ;AAC9D,CAAA,CAAA,CACCC,SAAS,EAAA;AAEZ,MAAMC,iBAAAA,GAAoBX,SAAAA,CACvBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLU,IAAAA,GAAAA,EAAKZ,UACFa,KAAK,EAAA,CACLC,EAAE,CAACd,SAAAA,CAAIe,QAAQ,EAAA,CAAA,CACfV,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ,GACRS,IAAI,CACH,yBACA,mCAAA,EACA,eAAeC,mBAAmBL,GAAG,EAAA;QACnC,IAAI;AACF,YAAA,MAAMM,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAACR,GAAAA,CAAAA;AAC9D,QAAA,CAAA,CAAE,OAAOS,CAAAA,EAAG;;YAEV,OAAO,IAAI,CAACC,WAAW,CAAC;gBAAEC,IAAAA,EAAM,KAAA;AAAOC,gBAAAA,OAAAA,EAASH,EAAEG;AAAQ,aAAA,CAAA;AAC5D,QAAA;QAEA,OAAO,IAAA;AACT,IAAA,CAAA;AAEN,CAAA,CAAA,CACCd,SAAS,EAAA;AAEZ,MAAMe,gBAAAA,GAAmBzB,SAAAA,CACtBe,QAAQ,EAAA,CACRR,QAAQ,EAAA,CACRS,IAAI,CACH,wBAAA,EACA,kCAAA,EACA,eAAeU,iBAAAA,CAAkBC,EAAE,EAAA;IACjC,IAAI;AACF,QAAA,MAAMT,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAAC;AAACO,YAAAA;AAAG,SAAA,CAAA;AAClE,IAAA,CAAA,CAAE,OAAON,CAAAA,EAAG;;QAEV,OAAO,IAAI,CAACC,WAAW,CAAC;YAAEC,IAAAA,EAAM,IAAA;AAAMC,YAAAA,OAAAA,EAASH,EAAEG;AAAQ,SAAA,CAAA;AAC3D,IAAA;IAEA,OAAO,IAAA;AACT,CAAA,CAAA;AAGJ,MAAMI,gBAAAA,GAAmB5B,SAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACT,oBAAAA,CAAAA;AAC9BW,IAAAA,WAAAA,EAAaR,UAAII,MAAM,EAAA,CAAGE,GAAG,CAACT,sBAAsBY,QAAQ;AAC9D,CAAA,CAAA,CACCC,SAAS,EAAA;AAEL,MAAMmB,uBAAAA,GAA0BC,uBAAAA,CAAkB/B,gBAAAA;AAClD,MAAMgC,uBAAAA,GAA0BD,uBAAAA,CAAkBF,gBAAAA;AAClD,MAAMI,wBAAAA,GAA2BF,uBAAAA,CAAkBnB,iBAAAA;AACnD,MAAMsB,uBAAAA,GAA0BH,uBAAAA,CAAkBL,gBAAAA;;;;;;;"}

package/dist/server/server/src/validation/role.mjs

@@ -1,8 +1,10 @@
 import { yup, validateYupSchema } from '@strapi/utils';
+import constants from '../services/constants.mjs';
 
+const { ROLE_TEXT_MAX_LENGTH } = constants;
 const roleCreateSchema = yup.object().shape({
-    name: yup.string().min(1).required(),
-    description: yup.string().nullable()
+    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH).required(),
+    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable()
 }).noUnknown();
 const rolesDeleteSchema = yup.object().shape({
     ids: yup.array().of(yup.strapiID()).min(1).required().test('roles-deletion-checks', 'Roles deletion checks have failed', async function checkRolesDeletion(ids) {
@@ -33,8 +35,8 @@ const roleDeleteSchema = yup.strapiID().required().test('no-admin-single-delete'
     return true;
 });
 const roleUpdateSchema = yup.object().shape({
-    name: yup.string().min(1),
-    description: yup.string().nullable()
+    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH),
+    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable()
 }).noUnknown();
 const validateRoleCreateInput = validateYupSchema(roleCreateSchema);
 const validateRoleUpdateInput = validateYupSchema(roleUpdateSchema);

package/dist/server/server/src/validation/role.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"role.mjs","sources":["../../../../../server/src/validation/role.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst roleCreateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).required(),\n    description: yup.string().nullable(),\n  })\n  .noUnknown();\n\nconst rolesDeleteSchema = yup\n  .object()\n  .shape({\n    ids: yup\n      .array()\n      .of(yup.strapiID())\n      .min(1)\n      .required()\n      .test(\n        'roles-deletion-checks',\n        'Roles deletion checks have failed',\n        async function checkRolesDeletion(ids) {\n          try {\n            await strapi.service('admin::role').checkRolesIdForDeletion(ids);\n          } catch (e) {\n            // @ts-expect-error yup types\n            return this.createError({ path: 'ids', message: e.message });\n          }\n\n          return true;\n        }\n      ),\n  })\n  .noUnknown();\n\nconst roleDeleteSchema = yup\n  .strapiID()\n  .required()\n  .test(\n    'no-admin-single-delete',\n    'Role deletion checks have failed',\n    async function checkRoleDeletion(id) {\n      try {\n        await strapi.service('admin::role').checkRolesIdForDeletion([id]);\n      } catch (e) {\n        // @ts-expect-error yup types\n        return this.createError({ path: 'id', message: e.message });\n      }\n\n      return true;\n    }\n  );\n\nconst roleUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1),\n    description: yup.string().nullable(),\n  })\n  .noUnknown();\n\nexport const validateRoleCreateInput = validateYupSchema(roleCreateSchema);\nexport const validateRoleUpdateInput = validateYupSchema(roleUpdateSchema);\nexport const validateRolesDeleteInput = validateYupSchema(rolesDeleteSchema);\nexport const validateRoleDeleteInput = validateYupSchema(roleDeleteSchema);\n\nexport default {\n  validateRoleUpdateInput,\n  validateRoleCreateInput,\n  validateRolesDeleteInput,\n  validateRoleDeleteInput,\n};\n"],"names":["roleCreateSchema","yup","object","shape","name","string","min","required","description","nullable","noUnknown","rolesDeleteSchema","ids","array","of","strapiID","test","checkRolesDeletion","strapi","service","checkRolesIdForDeletion","e","createError","path","message","roleDeleteSchema","checkRoleDeletion","id","roleUpdateSchema","validateRoleCreateInput","validateYupSchema","validateRoleUpdateInput","validateRolesDeleteInput","validateRoleDeleteInput"],"mappings":";;AAEA,MAAMA,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,IAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaP,GAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ;AACpC,CAAA,CAAA,CACCC,SAAS,EAAA;AAEZ,MAAMC,iBAAAA,GAAoBV,GAAAA,CACvBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLS,IAAAA,GAAAA,EAAKX,IACFY,KAAK,EAAA,CACLC,EAAE,CAACb,GAAAA,CAAIc,QAAQ,EAAA,CAAA,CACfT,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,GACRS,IAAI,CACH,yBACA,mCAAA,EACA,eAAeC,mBAAmBL,GAAG,EAAA;QACnC,IAAI;AACF,YAAA,MAAMM,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAACR,GAAAA,CAAAA;AAC9D,QAAA,CAAA,CAAE,OAAOS,CAAAA,EAAG;;YAEV,OAAO,IAAI,CAACC,WAAW,CAAC;gBAAEC,IAAAA,EAAM,KAAA;AAAOC,gBAAAA,OAAAA,EAASH,EAAEG;AAAQ,aAAA,CAAA;AAC5D,QAAA;QAEA,OAAO,IAAA;AACT,IAAA,CAAA;AAEN,CAAA,CAAA,CACCd,SAAS,EAAA;AAEZ,MAAMe,gBAAAA,GAAmBxB,GAAAA,CACtBc,QAAQ,EAAA,CACRR,QAAQ,EAAA,CACRS,IAAI,CACH,wBAAA,EACA,kCAAA,EACA,eAAeU,iBAAAA,CAAkBC,EAAE,EAAA;IACjC,IAAI;AACF,QAAA,MAAMT,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAAC;AAACO,YAAAA;AAAG,SAAA,CAAA;AAClE,IAAA,CAAA,CAAE,OAAON,CAAAA,EAAG;;QAEV,OAAO,IAAI,CAACC,WAAW,CAAC;YAAEC,IAAAA,EAAM,IAAA;AAAMC,YAAAA,OAAAA,EAASH,EAAEG;AAAQ,SAAA,CAAA;AAC3D,IAAA;IAEA,OAAO,IAAA;AACT,CAAA,CAAA;AAGJ,MAAMI,gBAAAA,GAAmB3B,GAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACvBE,WAAAA,EAAaP,GAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ;AACpC,CAAA,CAAA,CACCC,SAAS,EAAA;AAEL,MAAMmB,uBAAAA,GAA0BC,iBAAAA,CAAkB9B,gBAAAA;AAClD,MAAM+B,uBAAAA,GAA0BD,iBAAAA,CAAkBF,gBAAAA;AAClD,MAAMI,wBAAAA,GAA2BF,iBAAAA,CAAkBnB,iBAAAA;AACnD,MAAMsB,uBAAAA,GAA0BH,iBAAAA,CAAkBL,gBAAAA;;;;"}
+{"version":3,"file":"role.mjs","sources":["../../../../../server/src/validation/role.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../services/constants';\n\nconst { ROLE_TEXT_MAX_LENGTH } = constants;\n\nconst roleCreateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable(),\n  })\n  .noUnknown();\n\nconst rolesDeleteSchema = yup\n  .object()\n  .shape({\n    ids: yup\n      .array()\n      .of(yup.strapiID())\n      .min(1)\n      .required()\n      .test(\n        'roles-deletion-checks',\n        'Roles deletion checks have failed',\n        async function checkRolesDeletion(ids) {\n          try {\n            await strapi.service('admin::role').checkRolesIdForDeletion(ids);\n          } catch (e) {\n            // @ts-expect-error yup types\n            return this.createError({ path: 'ids', message: e.message });\n          }\n\n          return true;\n        }\n      ),\n  })\n  .noUnknown();\n\nconst roleDeleteSchema = yup\n  .strapiID()\n  .required()\n  .test(\n    'no-admin-single-delete',\n    'Role deletion checks have failed',\n    async function checkRoleDeletion(id) {\n      try {\n        await strapi.service('admin::role').checkRolesIdForDeletion([id]);\n      } catch (e) {\n        // @ts-expect-error yup types\n        return this.createError({ path: 'id', message: e.message });\n      }\n\n      return true;\n    }\n  );\n\nconst roleUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(ROLE_TEXT_MAX_LENGTH),\n    description: yup.string().max(ROLE_TEXT_MAX_LENGTH).nullable(),\n  })\n  .noUnknown();\n\nexport const validateRoleCreateInput = validateYupSchema(roleCreateSchema);\nexport const validateRoleUpdateInput = validateYupSchema(roleUpdateSchema);\nexport const validateRolesDeleteInput = validateYupSchema(rolesDeleteSchema);\nexport const validateRoleDeleteInput = validateYupSchema(roleDeleteSchema);\n\nexport default {\n  validateRoleUpdateInput,\n  validateRoleCreateInput,\n  validateRolesDeleteInput,\n  validateRoleDeleteInput,\n};\n"],"names":["ROLE_TEXT_MAX_LENGTH","constants","roleCreateSchema","yup","object","shape","name","string","min","max","required","description","nullable","noUnknown","rolesDeleteSchema","ids","array","of","strapiID","test","checkRolesDeletion","strapi","service","checkRolesIdForDeletion","e","createError","path","message","roleDeleteSchema","checkRoleDeletion","id","roleUpdateSchema","validateRoleCreateInput","validateYupSchema","validateRoleUpdateInput","validateRolesDeleteInput","validateRoleDeleteInput"],"mappings":";;;AAGA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,SAAAA;AAEjC,MAAMC,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACT,oBAAAA,CAAAA,CAAsBU,QAAQ,EAAA;AAC5DC,IAAAA,WAAAA,EAAaR,IAAII,MAAM,EAAA,CAAGE,GAAG,CAACT,sBAAsBY,QAAQ;AAC9D,CAAA,CAAA,CACCC,SAAS,EAAA;AAEZ,MAAMC,iBAAAA,GAAoBX,GAAAA,CACvBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLU,IAAAA,GAAAA,EAAKZ,IACFa,KAAK,EAAA,CACLC,EAAE,CAACd,GAAAA,CAAIe,QAAQ,EAAA,CAAA,CACfV,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ,GACRS,IAAI,CACH,yBACA,mCAAA,EACA,eAAeC,mBAAmBL,GAAG,EAAA;QACnC,IAAI;AACF,YAAA,MAAMM,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAACR,GAAAA,CAAAA;AAC9D,QAAA,CAAA,CAAE,OAAOS,CAAAA,EAAG;;YAEV,OAAO,IAAI,CAACC,WAAW,CAAC;gBAAEC,IAAAA,EAAM,KAAA;AAAOC,gBAAAA,OAAAA,EAASH,EAAEG;AAAQ,aAAA,CAAA;AAC5D,QAAA;QAEA,OAAO,IAAA;AACT,IAAA,CAAA;AAEN,CAAA,CAAA,CACCd,SAAS,EAAA;AAEZ,MAAMe,gBAAAA,GAAmBzB,GAAAA,CACtBe,QAAQ,EAAA,CACRR,QAAQ,EAAA,CACRS,IAAI,CACH,wBAAA,EACA,kCAAA,EACA,eAAeU,iBAAAA,CAAkBC,EAAE,EAAA;IACjC,IAAI;AACF,QAAA,MAAMT,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeC,uBAAuB,CAAC;AAACO,YAAAA;AAAG,SAAA,CAAA;AAClE,IAAA,CAAA,CAAE,OAAON,CAAAA,EAAG;;QAEV,OAAO,IAAI,CAACC,WAAW,CAAC;YAAEC,IAAAA,EAAM,IAAA;AAAMC,YAAAA,OAAAA,EAASH,EAAEG;AAAQ,SAAA,CAAA;AAC3D,IAAA;IAEA,OAAO,IAAA;AACT,CAAA,CAAA;AAGJ,MAAMI,gBAAAA,GAAmB5B,GAAAA,CACtBC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,IAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACT,oBAAAA,CAAAA;AAC9BW,IAAAA,WAAAA,EAAaR,IAAII,MAAM,EAAA,CAAGE,GAAG,CAACT,sBAAsBY,QAAQ;AAC9D,CAAA,CAAA,CACCC,SAAS,EAAA;AAEL,MAAMmB,uBAAAA,GAA0BC,iBAAAA,CAAkB/B,gBAAAA;AAClD,MAAMgC,uBAAAA,GAA0BD,iBAAAA,CAAkBF,gBAAAA;AAClD,MAAMI,wBAAAA,GAA2BF,iBAAAA,CAAkBnB,iBAAAA;AACnD,MAAMsB,uBAAAA,GAA0BH,iBAAAA,CAAkBL,gBAAAA;;;;"}

package/dist/server/server/src/validation/transfer/token.js

@@ -6,14 +6,14 @@ var utils = require('@strapi/utils');
 var constants = require('../../services/constants.js');
 
 const transferTokenCreationSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1).required(),
-    description: utils.yup.string().optional(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     permissions: utils.yup.array().min(1).of(utils.yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE))).required(),
     lifespan: utils.yup.number().min(1).oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS)).nullable()
 }).noUnknown().strict();
 const transferTokenUpdateSchema = utils.yup.object().shape({
-    name: utils.yup.string().min(1).notNull(),
-    description: utils.yup.string().nullable(),
+    name: utils.yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: utils.yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     permissions: utils.yup.array().min(1).of(utils.yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE))).nullable()
 }).noUnknown().strict();
 const validateTransferTokenCreationInput = utils.validateYupSchema(transferTokenCreationSchema);

package/dist/server/server/src/validation/transfer/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sources":["../../../../../../server/src/validation/transfer/token.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../../services/constants';\n\nconst transferTokenCreationSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .required(),\n    lifespan: yup\n      .number()\n      .min(1)\n      .oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst transferTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateTransferTokenCreationInput = validateYupSchema(transferTokenCreationSchema);\nexport const validateTransferTokenUpdateInput = validateYupSchema(transferTokenUpdateSchema);\n\nexport default {\n  validateTransferTokenCreationInput,\n  validateTransferTokenUpdateInput,\n};\n"],"names":["transferTokenCreationSchema","yup","object","shape","name","string","min","required","description","optional","permissions","array","of","oneOf","Object","values","constants","TRANSFER_TOKEN_TYPE","lifespan","number","TRANSFER_TOKEN_LIFESPANS","nullable","noUnknown","strict","transferTokenUpdateSchema","notNull","validateTransferTokenCreationInput","validateYupSchema","validateTransferTokenUpdateInput"],"mappings":";;;;;;;AAGA,MAAMA,2BAAAA,GAA8BC,SAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaP,SAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ,EAAA;AAClCC,IAAAA,WAAAA,EAAaT,UACVU,KAAK,EAAA,CACLL,GAAG,CAAC,CAAA,CAAA,CACJM,EAAE,CAACX,SAAAA,CAAII,MAAM,EAAA,CAAGQ,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,IACjEV,QAAQ,EAAA;AACXW,IAAAA,QAAAA,EAAUjB,SAAAA,CACPkB,MAAM,EAAA,CACNb,GAAG,CAAC,CAAA,CAAA,CACJO,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUI,wBAAwB,GACtDC,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,yBAAAA,GAA4BvB,SAAAA,CAC/BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGmB,OAAO,EAAA;IACjCjB,WAAAA,EAAaP,SAAAA,CAAII,MAAM,EAAA,CAAGgB,QAAQ,EAAA;AAClCX,IAAAA,WAAAA,EAAaT,UACVU,KAAK,EAAA,CACLL,GAAG,CAAC,CAAA,CAAA,CACJM,EAAE,CAACX,SAAAA,CAAII,MAAM,EAAA,CAAGQ,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,IACjEI,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,kCAAAA,GAAqCC,uBAAAA,CAAkB3B,2BAAAA;AAC7D,MAAM4B,gCAAAA,GAAmCD,uBAAAA,CAAkBH,yBAAAA;AAElE,YAAe;AACbE,IAAAA,kCAAAA;AACAE,IAAAA;AACF,CAAA;;;;;;"}
+{"version":3,"file":"token.js","sources":["../../../../../../server/src/validation/transfer/token.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../../services/constants';\n\nconst transferTokenCreationSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .required(),\n    lifespan: yup\n      .number()\n      .min(1)\n      .oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst transferTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateTransferTokenCreationInput = validateYupSchema(transferTokenCreationSchema);\nexport const validateTransferTokenUpdateInput = validateYupSchema(transferTokenUpdateSchema);\n\nexport default {\n  validateTransferTokenCreationInput,\n  validateTransferTokenUpdateInput,\n};\n"],"names":["transferTokenCreationSchema","yup","object","shape","name","string","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","optional","permissions","array","of","oneOf","Object","values","TRANSFER_TOKEN_TYPE","lifespan","number","TRANSFER_TOKEN_LIFESPANS","nullable","noUnknown","strict","transferTokenUpdateSchema","notNull","validateTransferTokenCreationInput","validateYupSchema","validateTransferTokenUpdateInput"],"mappings":";;;;;;;AAGA,MAAMA,2BAAAA,GAA8BC,SAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGE,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEG,QAAQ,EAAA;AACvEC,IAAAA,WAAAA,EAAaZ,UACVa,KAAK,EAAA,CACLR,GAAG,CAAC,CAAA,CAAA,CACJS,EAAE,CAACd,SAAAA,CAAII,MAAM,EAAA,CAAGW,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUW,mBAAmB,IACjET,QAAQ,EAAA;AACXU,IAAAA,QAAAA,EAAUnB,SAAAA,CACPoB,MAAM,EAAA,CACNf,GAAG,CAAC,CAAA,CAAA,CACJU,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUc,wBAAwB,GACtDC,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,yBAAAA,GAA4BzB,SAAAA,CAC/BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,SAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEkB,OAAO,EAAA;IACtEhB,WAAAA,EAAaV,SAAAA,CAAII,MAAM,EAAA,CAAGE,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEc,QAAQ,EAAA;AACvEV,IAAAA,WAAAA,EAAaZ,UACVa,KAAK,EAAA,CACLR,GAAG,CAAC,CAAA,CAAA,CACJS,EAAE,CAACd,SAAAA,CAAII,MAAM,EAAA,CAAGW,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUW,mBAAmB,IACjEI,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,kCAAAA,GAAqCC,uBAAAA,CAAkB7B,2BAAAA;AAC7D,MAAM8B,gCAAAA,GAAmCD,uBAAAA,CAAkBH,yBAAAA;AAElE,YAAe;AACbE,IAAAA,kCAAAA;AACAE,IAAAA;AACF,CAAA;;;;;;"}

package/dist/server/server/src/validation/transfer/token.mjs

@@ -2,14 +2,14 @@ import { yup, validateYupSchema } from '@strapi/utils';
 import constants from '../../services/constants.mjs';
 
 const transferTokenCreationSchema = yup.object().shape({
-    name: yup.string().min(1).required(),
-    description: yup.string().optional(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),
     permissions: yup.array().min(1).of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE))).required(),
     lifespan: yup.number().min(1).oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS)).nullable()
 }).noUnknown().strict();
 const transferTokenUpdateSchema = yup.object().shape({
-    name: yup.string().min(1).notNull(),
-    description: yup.string().nullable(),
+    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),
+    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),
     permissions: yup.array().min(1).of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE))).nullable()
 }).noUnknown().strict();
 const validateTransferTokenCreationInput = validateYupSchema(transferTokenCreationSchema);

package/dist/server/server/src/validation/transfer/token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"token.mjs","sources":["../../../../../../server/src/validation/transfer/token.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../../services/constants';\n\nconst transferTokenCreationSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).required(),\n    description: yup.string().optional(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .required(),\n    lifespan: yup\n      .number()\n      .min(1)\n      .oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst transferTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).notNull(),\n    description: yup.string().nullable(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateTransferTokenCreationInput = validateYupSchema(transferTokenCreationSchema);\nexport const validateTransferTokenUpdateInput = validateYupSchema(transferTokenUpdateSchema);\n\nexport default {\n  validateTransferTokenCreationInput,\n  validateTransferTokenUpdateInput,\n};\n"],"names":["transferTokenCreationSchema","yup","object","shape","name","string","min","required","description","optional","permissions","array","of","oneOf","Object","values","constants","TRANSFER_TOKEN_TYPE","lifespan","number","TRANSFER_TOKEN_LIFESPANS","nullable","noUnknown","strict","transferTokenUpdateSchema","notNull","validateTransferTokenCreationInput","validateYupSchema","validateTransferTokenUpdateInput"],"mappings":";;;AAGA,MAAMA,2BAAAA,GAA8BC,GAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,IAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGC,QAAQ,EAAA;IAClCC,WAAAA,EAAaP,GAAAA,CAAII,MAAM,EAAA,CAAGI,QAAQ,EAAA;AAClCC,IAAAA,WAAAA,EAAaT,IACVU,KAAK,EAAA,CACLL,GAAG,CAAC,CAAA,CAAA,CACJM,EAAE,CAACX,GAAAA,CAAII,MAAM,EAAA,CAAGQ,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,IACjEV,QAAQ,EAAA;AACXW,IAAAA,QAAAA,EAAUjB,GAAAA,CACPkB,MAAM,EAAA,CACNb,GAAG,CAAC,CAAA,CAAA,CACJO,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUI,wBAAwB,GACtDC,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,yBAAAA,GAA4BvB,GAAAA,CAC/BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,IAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,GAAGmB,OAAO,EAAA;IACjCjB,WAAAA,EAAaP,GAAAA,CAAII,MAAM,EAAA,CAAGgB,QAAQ,EAAA;AAClCX,IAAAA,WAAAA,EAAaT,IACVU,KAAK,EAAA,CACLL,GAAG,CAAC,CAAA,CAAA,CACJM,EAAE,CAACX,GAAAA,CAAII,MAAM,EAAA,CAAGQ,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACC,SAAAA,CAAUC,mBAAmB,IACjEI,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,kCAAAA,GAAqCC,iBAAAA,CAAkB3B,2BAAAA;AAC7D,MAAM4B,gCAAAA,GAAmCD,iBAAAA,CAAkBH,yBAAAA;AAElE,YAAe;AACbE,IAAAA,kCAAAA;AACAE,IAAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"token.mjs","sources":["../../../../../../server/src/validation/transfer/token.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport constants from '../../services/constants';\n\nconst transferTokenCreationSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).required(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).optional(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .required(),\n    lifespan: yup\n      .number()\n      .min(1)\n      .oneOf(Object.values(constants.TRANSFER_TOKEN_LIFESPANS))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nconst transferTokenUpdateSchema = yup\n  .object()\n  .shape({\n    name: yup.string().min(1).max(constants.TOKEN_TEXT_MAX_LENGTH).notNull(),\n    description: yup.string().max(constants.TOKEN_TEXT_MAX_LENGTH).nullable(),\n    permissions: yup\n      .array()\n      .min(1)\n      .of(yup.string().oneOf(Object.values(constants.TRANSFER_TOKEN_TYPE)))\n      .nullable(),\n  })\n  .noUnknown()\n  .strict();\n\nexport const validateTransferTokenCreationInput = validateYupSchema(transferTokenCreationSchema);\nexport const validateTransferTokenUpdateInput = validateYupSchema(transferTokenUpdateSchema);\n\nexport default {\n  validateTransferTokenCreationInput,\n  validateTransferTokenUpdateInput,\n};\n"],"names":["transferTokenCreationSchema","yup","object","shape","name","string","min","max","constants","TOKEN_TEXT_MAX_LENGTH","required","description","optional","permissions","array","of","oneOf","Object","values","TRANSFER_TOKEN_TYPE","lifespan","number","TRANSFER_TOKEN_LIFESPANS","nullable","noUnknown","strict","transferTokenUpdateSchema","notNull","validateTransferTokenCreationInput","validateYupSchema","validateTransferTokenUpdateInput"],"mappings":";;;AAGA,MAAMA,2BAAAA,GAA8BC,GAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEC,QAAQ,EAAA;IACvEC,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGE,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEG,QAAQ,EAAA;AACvEC,IAAAA,WAAAA,EAAaZ,IACVa,KAAK,EAAA,CACLR,GAAG,CAAC,CAAA,CAAA,CACJS,EAAE,CAACd,GAAAA,CAAII,MAAM,EAAA,CAAGW,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUW,mBAAmB,IACjET,QAAQ,EAAA;AACXU,IAAAA,QAAAA,EAAUnB,GAAAA,CACPoB,MAAM,EAAA,CACNf,GAAG,CAAC,CAAA,CAAA,CACJU,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUc,wBAAwB,GACtDC,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAET,MAAMC,yBAAAA,GAA4BzB,GAAAA,CAC/BC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,IAAAA,EAAMH,GAAAA,CAAII,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,CAAA,CAAEkB,OAAO,EAAA;IACtEhB,WAAAA,EAAaV,GAAAA,CAAII,MAAM,EAAA,CAAGE,GAAG,CAACC,SAAAA,CAAUC,qBAAqB,EAAEc,QAAQ,EAAA;AACvEV,IAAAA,WAAAA,EAAaZ,IACVa,KAAK,EAAA,CACLR,GAAG,CAAC,CAAA,CAAA,CACJS,EAAE,CAACd,GAAAA,CAAII,MAAM,EAAA,CAAGW,KAAK,CAACC,MAAAA,CAAOC,MAAM,CAACV,SAAAA,CAAUW,mBAAmB,IACjEI,QAAQ;AACb,CAAA,CAAA,CACCC,SAAS,GACTC,MAAM,EAAA;AAEF,MAAMG,kCAAAA,GAAqCC,iBAAAA,CAAkB7B,2BAAAA;AAC7D,MAAM8B,gCAAAA,GAAmCD,iBAAAA,CAAkBH,yBAAAA;AAElE,YAAe;AACbE,IAAAA,kCAAAA;AACAE,IAAAA;AACF,CAAA;;;;"}

package/dist/server/shared/utils/auth-cookie-path.js

@@ -1,19 +1,22 @@
 'use strict';
 
 /**
- * Path attribute of the admin auth (access) token cookie, configurable
- * through `admin.auth.cookie.path` so multiple Strapi instances on the same
- * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
+ * Validates the Path attribute of the admin auth cookies. The path is
+ * configurable through `admin.auth.cookie.path` so multiple Strapi instances
+ * on the same parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
  *
  * Browser-safe single source for both sides of the handoff: the admin panel
- * cannot read server config, so the build transports the config value into
- * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable
- * (see create-build-context.ts in @strapi/strapi); the server resolves the
- * same config at runtime. Changing the path requires an admin rebuild, like
- * any other admin config change.
+ * cannot read server config, so the build transports the access cookie path
+ * into the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH`
+ * variable (see create-build-context.ts in @strapi/strapi); the server
+ * resolves the same config at runtime. Changing the path requires an admin
+ * rebuild, like any other admin config change.
  *
- * Defaults to `/admin` to match the refresh-cookie path used by
- * `getRefreshCookieOptions`.
+ * The callers pick the value to validate (see session-auth.ts). When
+ * `admin.auth.cookie.path` is unset, the access cookie follows the path the
+ * panel is served from (`admin.url`) and the refresh cookie follows the admin
+ * API (`/admin`), each behind any `server.url` subpath.
+ * `DEFAULT_AUTH_COOKIE_PATH` is only the fallback for a missing or invalid value.
  */ const DEFAULT_AUTH_COOKIE_PATH = '/admin';
 const isValidCookiePath = (path)=>{
     if (!path.startsWith('/')) {

package/dist/server/shared/utils/auth-cookie-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-cookie-path.js","sources":["../../../../shared/utils/auth-cookie-path.ts"],"sourcesContent":["/**\n * Path attribute of the admin auth (access) token cookie, configurable\n * through `admin.auth.cookie.path` so multiple Strapi instances on the same\n * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).\n *\n * Browser-safe single source for both sides of the handoff: the admin panel\n * cannot read server config, so the build transports the config value into\n * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable\n * (see create-build-context.ts in @strapi/strapi); the server resolves the\n * same config at runtime. Changing the path requires an admin rebuild, like\n * any other admin config change.\n *\n * Defaults to `/admin` to match the refresh-cookie path used by\n * `getRefreshCookieOptions`.\n */\nexport const DEFAULT_AUTH_COOKIE_PATH = '/admin';\n\nconst isValidCookiePath = (path: string): boolean => {\n  if (!path.startsWith('/')) {\n    return false;\n  }\n\n  // RFC 6265 path-av: any CHAR except CTLs or \";\".\n  // eslint-disable-next-line no-control-regex -- CTL chars are exactly what RFC 6265 forbids\n  return !/[\\x00-\\x1F\\x7F;]/.test(path);\n};\n\nexport const resolveAuthCookiePath = (\n  configuredPath?: string,\n  warn: (message: string) => void = console.warn\n): string => {\n  const cookiePath = (configuredPath || '').trim();\n\n  if (!cookiePath) {\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  if (!isValidCookiePath(cookiePath)) {\n    warn(\n      `Ignoring invalid admin auth cookie path \"${cookiePath}\" (must be an absolute path without \";\"); using \"${DEFAULT_AUTH_COOKIE_PATH}\" instead.`\n    );\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  return cookiePath;\n};\n"],"names":["DEFAULT_AUTH_COOKIE_PATH","isValidCookiePath","path","startsWith","test","resolveAuthCookiePath","configuredPath","warn","console","cookiePath","trim"],"mappings":";;AAAA;;;;;;;;;;;;;;IAeO,MAAMA,wBAAAA,GAA2B;AAExC,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,IAAI,CAACA,IAAAA,CAAKC,UAAU,CAAC,GAAA,CAAA,EAAM;QACzB,OAAO,KAAA;AACT,IAAA;;;IAIA,OAAO,CAAC,kBAAA,CAAmBC,IAAI,CAACF,IAAAA,CAAAA;AAClC,CAAA;MAEaG,qBAAAA,GAAwB,CACnCC,cAAAA,EACAC,IAAAA,GAAkCC,QAAQD,IAAI,GAAA;AAE9C,IAAA,MAAME,aAAa,CAACH,cAAAA,IAAkB,EAAC,EAAGI,IAAI,EAAA;AAE9C,IAAA,IAAI,CAACD,UAAAA,EAAY;QACf,OAAOT,wBAAAA;AACT,IAAA;IAEA,IAAI,CAACC,kBAAkBQ,UAAAA,CAAAA,EAAa;QAClCF,IAAAA,CACE,CAAC,yCAAyC,EAAEE,UAAAA,CAAW,iDAAiD,EAAET,wBAAAA,CAAyB,UAAU,CAAC,CAAA;QAEhJ,OAAOA,wBAAAA;AACT,IAAA;IAEA,OAAOS,UAAAA;AACT;;;;;"}
+{"version":3,"file":"auth-cookie-path.js","sources":["../../../../shared/utils/auth-cookie-path.ts"],"sourcesContent":["/**\n * Validates the Path attribute of the admin auth cookies. The path is\n * configurable through `admin.auth.cookie.path` so multiple Strapi instances\n * on the same parent domain can keep separate cookies (e.g. `/strapi-de/admin`).\n *\n * Browser-safe single source for both sides of the handoff: the admin panel\n * cannot read server config, so the build transports the access cookie path\n * into the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH`\n * variable (see create-build-context.ts in @strapi/strapi); the server\n * resolves the same config at runtime. Changing the path requires an admin\n * rebuild, like any other admin config change.\n *\n * The callers pick the value to validate (see session-auth.ts). When\n * `admin.auth.cookie.path` is unset, the access cookie follows the path the\n * panel is served from (`admin.url`) and the refresh cookie follows the admin\n * API (`/admin`), each behind any `server.url` subpath.\n * `DEFAULT_AUTH_COOKIE_PATH` is only the fallback for a missing or invalid value.\n */\nexport const DEFAULT_AUTH_COOKIE_PATH = '/admin';\n\nconst isValidCookiePath = (path: string): boolean => {\n  if (!path.startsWith('/')) {\n    return false;\n  }\n\n  // RFC 6265 path-av: any CHAR except CTLs or \";\".\n  // eslint-disable-next-line no-control-regex -- CTL chars are exactly what RFC 6265 forbids\n  return !/[\\x00-\\x1F\\x7F;]/.test(path);\n};\n\nexport const resolveAuthCookiePath = (\n  configuredPath?: string,\n  warn: (message: string) => void = console.warn\n): string => {\n  const cookiePath = (configuredPath || '').trim();\n\n  if (!cookiePath) {\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  if (!isValidCookiePath(cookiePath)) {\n    warn(\n      `Ignoring invalid admin auth cookie path \"${cookiePath}\" (must be an absolute path without \";\"); using \"${DEFAULT_AUTH_COOKIE_PATH}\" instead.`\n    );\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  return cookiePath;\n};\n"],"names":["DEFAULT_AUTH_COOKIE_PATH","isValidCookiePath","path","startsWith","test","resolveAuthCookiePath","configuredPath","warn","console","cookiePath","trim"],"mappings":";;AAAA;;;;;;;;;;;;;;;;;IAkBO,MAAMA,wBAAAA,GAA2B;AAExC,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,IAAI,CAACA,IAAAA,CAAKC,UAAU,CAAC,GAAA,CAAA,EAAM;QACzB,OAAO,KAAA;AACT,IAAA;;;IAIA,OAAO,CAAC,kBAAA,CAAmBC,IAAI,CAACF,IAAAA,CAAAA;AAClC,CAAA;MAEaG,qBAAAA,GAAwB,CACnCC,cAAAA,EACAC,IAAAA,GAAkCC,QAAQD,IAAI,GAAA;AAE9C,IAAA,MAAME,aAAa,CAACH,cAAAA,IAAkB,EAAC,EAAGI,IAAI,EAAA;AAE9C,IAAA,IAAI,CAACD,UAAAA,EAAY;QACf,OAAOT,wBAAAA;AACT,IAAA;IAEA,IAAI,CAACC,kBAAkBQ,UAAAA,CAAAA,EAAa;QAClCF,IAAAA,CACE,CAAC,yCAAyC,EAAEE,UAAAA,CAAW,iDAAiD,EAAET,wBAAAA,CAAyB,UAAU,CAAC,CAAA;QAEhJ,OAAOA,wBAAAA;AACT,IAAA;IAEA,OAAOS,UAAAA;AACT;;;;;"}

package/dist/server/shared/utils/auth-cookie-path.mjs

@@ -1,17 +1,20 @@
 /**
- * Path attribute of the admin auth (access) token cookie, configurable
- * through `admin.auth.cookie.path` so multiple Strapi instances on the same
- * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
+ * Validates the Path attribute of the admin auth cookies. The path is
+ * configurable through `admin.auth.cookie.path` so multiple Strapi instances
+ * on the same parent domain can keep separate cookies (e.g. `/strapi-de/admin`).
  *
  * Browser-safe single source for both sides of the handoff: the admin panel
- * cannot read server config, so the build transports the config value into
- * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable
- * (see create-build-context.ts in @strapi/strapi); the server resolves the
- * same config at runtime. Changing the path requires an admin rebuild, like
- * any other admin config change.
+ * cannot read server config, so the build transports the access cookie path
+ * into the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH`
+ * variable (see create-build-context.ts in @strapi/strapi); the server
+ * resolves the same config at runtime. Changing the path requires an admin
+ * rebuild, like any other admin config change.
  *
- * Defaults to `/admin` to match the refresh-cookie path used by
- * `getRefreshCookieOptions`.
+ * The callers pick the value to validate (see session-auth.ts). When
+ * `admin.auth.cookie.path` is unset, the access cookie follows the path the
+ * panel is served from (`admin.url`) and the refresh cookie follows the admin
+ * API (`/admin`), each behind any `server.url` subpath.
+ * `DEFAULT_AUTH_COOKIE_PATH` is only the fallback for a missing or invalid value.
  */ const DEFAULT_AUTH_COOKIE_PATH = '/admin';
 const isValidCookiePath = (path)=>{
     if (!path.startsWith('/')) {

package/dist/server/shared/utils/auth-cookie-path.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth-cookie-path.mjs","sources":["../../../../shared/utils/auth-cookie-path.ts"],"sourcesContent":["/**\n * Path attribute of the admin auth (access) token cookie, configurable\n * through `admin.auth.cookie.path` so multiple Strapi instances on the same\n * parent domain can keep separate cookies (e.g. `/strapi-de/admin`).\n *\n * Browser-safe single source for both sides of the handoff: the admin panel\n * cannot read server config, so the build transports the config value into\n * the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH` variable\n * (see create-build-context.ts in @strapi/strapi); the server resolves the\n * same config at runtime. Changing the path requires an admin rebuild, like\n * any other admin config change.\n *\n * Defaults to `/admin` to match the refresh-cookie path used by\n * `getRefreshCookieOptions`.\n */\nexport const DEFAULT_AUTH_COOKIE_PATH = '/admin';\n\nconst isValidCookiePath = (path: string): boolean => {\n  if (!path.startsWith('/')) {\n    return false;\n  }\n\n  // RFC 6265 path-av: any CHAR except CTLs or \";\".\n  // eslint-disable-next-line no-control-regex -- CTL chars are exactly what RFC 6265 forbids\n  return !/[\\x00-\\x1F\\x7F;]/.test(path);\n};\n\nexport const resolveAuthCookiePath = (\n  configuredPath?: string,\n  warn: (message: string) => void = console.warn\n): string => {\n  const cookiePath = (configuredPath || '').trim();\n\n  if (!cookiePath) {\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  if (!isValidCookiePath(cookiePath)) {\n    warn(\n      `Ignoring invalid admin auth cookie path \"${cookiePath}\" (must be an absolute path without \";\"); using \"${DEFAULT_AUTH_COOKIE_PATH}\" instead.`\n    );\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  return cookiePath;\n};\n"],"names":["DEFAULT_AUTH_COOKIE_PATH","isValidCookiePath","path","startsWith","test","resolveAuthCookiePath","configuredPath","warn","console","cookiePath","trim"],"mappings":"AAAA;;;;;;;;;;;;;;IAeO,MAAMA,wBAAAA,GAA2B;AAExC,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,IAAI,CAACA,IAAAA,CAAKC,UAAU,CAAC,GAAA,CAAA,EAAM;QACzB,OAAO,KAAA;AACT,IAAA;;;IAIA,OAAO,CAAC,kBAAA,CAAmBC,IAAI,CAACF,IAAAA,CAAAA;AAClC,CAAA;MAEaG,qBAAAA,GAAwB,CACnCC,cAAAA,EACAC,IAAAA,GAAkCC,QAAQD,IAAI,GAAA;AAE9C,IAAA,MAAME,aAAa,CAACH,cAAAA,IAAkB,EAAC,EAAGI,IAAI,EAAA;AAE9C,IAAA,IAAI,CAACD,UAAAA,EAAY;QACf,OAAOT,wBAAAA;AACT,IAAA;IAEA,IAAI,CAACC,kBAAkBQ,UAAAA,CAAAA,EAAa;QAClCF,IAAAA,CACE,CAAC,yCAAyC,EAAEE,UAAAA,CAAW,iDAAiD,EAAET,wBAAAA,CAAyB,UAAU,CAAC,CAAA;QAEhJ,OAAOA,wBAAAA;AACT,IAAA;IAEA,OAAOS,UAAAA;AACT;;;;"}
+{"version":3,"file":"auth-cookie-path.mjs","sources":["../../../../shared/utils/auth-cookie-path.ts"],"sourcesContent":["/**\n * Validates the Path attribute of the admin auth cookies. The path is\n * configurable through `admin.auth.cookie.path` so multiple Strapi instances\n * on the same parent domain can keep separate cookies (e.g. `/strapi-de/admin`).\n *\n * Browser-safe single source for both sides of the handoff: the admin panel\n * cannot read server config, so the build transports the access cookie path\n * into the bundle through the internal `STRAPI_ADMIN_AUTH_COOKIE_PATH`\n * variable (see create-build-context.ts in @strapi/strapi); the server\n * resolves the same config at runtime. Changing the path requires an admin\n * rebuild, like any other admin config change.\n *\n * The callers pick the value to validate (see session-auth.ts). When\n * `admin.auth.cookie.path` is unset, the access cookie follows the path the\n * panel is served from (`admin.url`) and the refresh cookie follows the admin\n * API (`/admin`), each behind any `server.url` subpath.\n * `DEFAULT_AUTH_COOKIE_PATH` is only the fallback for a missing or invalid value.\n */\nexport const DEFAULT_AUTH_COOKIE_PATH = '/admin';\n\nconst isValidCookiePath = (path: string): boolean => {\n  if (!path.startsWith('/')) {\n    return false;\n  }\n\n  // RFC 6265 path-av: any CHAR except CTLs or \";\".\n  // eslint-disable-next-line no-control-regex -- CTL chars are exactly what RFC 6265 forbids\n  return !/[\\x00-\\x1F\\x7F;]/.test(path);\n};\n\nexport const resolveAuthCookiePath = (\n  configuredPath?: string,\n  warn: (message: string) => void = console.warn\n): string => {\n  const cookiePath = (configuredPath || '').trim();\n\n  if (!cookiePath) {\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  if (!isValidCookiePath(cookiePath)) {\n    warn(\n      `Ignoring invalid admin auth cookie path \"${cookiePath}\" (must be an absolute path without \";\"); using \"${DEFAULT_AUTH_COOKIE_PATH}\" instead.`\n    );\n    return DEFAULT_AUTH_COOKIE_PATH;\n  }\n\n  return cookiePath;\n};\n"],"names":["DEFAULT_AUTH_COOKIE_PATH","isValidCookiePath","path","startsWith","test","resolveAuthCookiePath","configuredPath","warn","console","cookiePath","trim"],"mappings":"AAAA;;;;;;;;;;;;;;;;;IAkBO,MAAMA,wBAAAA,GAA2B;AAExC,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,IAAI,CAACA,IAAAA,CAAKC,UAAU,CAAC,GAAA,CAAA,EAAM;QACzB,OAAO,KAAA;AACT,IAAA;;;IAIA,OAAO,CAAC,kBAAA,CAAmBC,IAAI,CAACF,IAAAA,CAAAA;AAClC,CAAA;MAEaG,qBAAAA,GAAwB,CACnCC,cAAAA,EACAC,IAAAA,GAAkCC,QAAQD,IAAI,GAAA;AAE9C,IAAA,MAAME,aAAa,CAACH,cAAAA,IAAkB,EAAC,EAAGI,IAAI,EAAA;AAE9C,IAAA,IAAI,CAACD,UAAAA,EAAY;QACf,OAAOT,wBAAAA;AACT,IAAA;IAEA,IAAI,CAACC,kBAAkBQ,UAAAA,CAAAA,EAAa;QAClCF,IAAAA,CACE,CAAC,yCAAyC,EAAEE,UAAAA,CAAW,iDAAiD,EAAET,wBAAAA,CAAyB,UAAU,CAAC,CAAA;QAEhJ,OAAOA,wBAAAA;AACT,IAAA;IAEA,OAAOS,UAAAA;AACT;;;;"}

package/dist/server/shared/utils/get-project-type.js

@@ -0,0 +1,49 @@
+'use strict';
+
+/**
+ * Resolves the plan label from the license information returned by the
+ * `/admin/project-type` endpoint (browser) or `strapi.ee` (server).
+ *
+ * This labels the edition that is running: it follows `isEE`, so a lapsed license reads
+ * Community. Browser tracking and NPS report this label and the startup table applies the same
+ * rule; server metrics also label the running edition, but never say Growth. For the plan a
+ * license was issued for, lapsed or not (the Plan card, the Support card and the debug dump),
+ * use `getLicensedPlan` below.
+ *
+ * The label is intentionally limited to three values:
+ * - `Community`  when there is no license (Community Edition).
+ * - `Growth`     when the licensed plan price id contains "growth".
+ * - `Enterprise` for any other licensed plan.
+ */ const getProjectType = ({ isEE, planPriceId })=>{
+    if (!isEE) {
+        return 'Community';
+    }
+    if (planPriceId?.toLowerCase().includes('growth')) {
+        return 'Growth';
+    }
+    return 'Enterprise';
+};
+// The statuses a license can be in once it has been read. `none` (never licensed) is left out
+// on purpose, and so is a missing status, which a mixed-version install can produce.
+const LICENSED_STATUSES = new Set([
+    'active',
+    'expired',
+    'unknown'
+]);
+/**
+ * Resolves the plan a license was issued for, including one that has lapsed or can no longer
+ * be read, so Support links, the Plan card and the debug dump can still name it. It unlocks
+ * nothing: feature gating stays on `isEE`.
+ *
+ * A plan is only reported when a type was verified at some point (live, or retained once the
+ * license lapsed) AND the status is licensed. A corrupt license file sets `unknown` before any
+ * type is stored, and with no price id `getProjectType` would fall through to Enterprise, so
+ * both conditions are required. Every caller that derives a plan should go through here.
+ */ const getLicensedPlan = ({ licenseStatus, type, planPriceId })=>getProjectType({
+        isEE: Boolean(type) && LICENSED_STATUSES.has(licenseStatus ?? ''),
+        planPriceId: planPriceId ?? undefined
+    });
+
+exports.getLicensedPlan = getLicensedPlan;
+exports.getProjectType = getProjectType;
+//# sourceMappingURL=get-project-type.js.map

package/dist/server/shared/utils/get-project-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-project-type.js","sources":["../../../../shared/utils/get-project-type.ts"],"sourcesContent":["type ProjectType = 'Community' | 'Growth' | 'Enterprise';\n\n/**\n * Resolves the plan label from the license information returned by the\n * `/admin/project-type` endpoint (browser) or `strapi.ee` (server).\n *\n * This labels the edition that is running: it follows `isEE`, so a lapsed license reads\n * Community. Browser tracking and NPS report this label and the startup table applies the same\n * rule; server metrics also label the running edition, but never say Growth. For the plan a\n * license was issued for, lapsed or not (the Plan card, the Support card and the debug dump),\n * use `getLicensedPlan` below.\n *\n * The label is intentionally limited to three values:\n * - `Community`  when there is no license (Community Edition).\n * - `Growth`     when the licensed plan price id contains \"growth\".\n * - `Enterprise` for any other licensed plan.\n */\nconst getProjectType = ({\n  isEE,\n  planPriceId,\n}: {\n  isEE: boolean;\n  planPriceId?: string;\n}): ProjectType => {\n  if (!isEE) {\n    return 'Community';\n  }\n\n  if (planPriceId?.toLowerCase().includes('growth')) {\n    return 'Growth';\n  }\n\n  return 'Enterprise';\n};\n\n// The statuses a license can be in once it has been read. `none` (never licensed) is left out\n// on purpose, and so is a missing status, which a mixed-version install can produce.\nconst LICENSED_STATUSES: ReadonlySet<string> = new Set(['active', 'expired', 'unknown']);\n\n/**\n * Resolves the plan a license was issued for, including one that has lapsed or can no longer\n * be read, so Support links, the Plan card and the debug dump can still name it. It unlocks\n * nothing: feature gating stays on `isEE`.\n *\n * A plan is only reported when a type was verified at some point (live, or retained once the\n * license lapsed) AND the status is licensed. A corrupt license file sets `unknown` before any\n * type is stored, and with no price id `getProjectType` would fall through to Enterprise, so\n * both conditions are required. Every caller that derives a plan should go through here.\n */\nconst getLicensedPlan = ({\n  licenseStatus,\n  type,\n  planPriceId,\n}: {\n  licenseStatus: string | null | undefined;\n  type: string | null | undefined;\n  planPriceId?: string | null;\n}): ProjectType =>\n  getProjectType({\n    isEE: Boolean(type) && LICENSED_STATUSES.has(licenseStatus ?? ''),\n    planPriceId: planPriceId ?? undefined,\n  });\n\nexport { getLicensedPlan, getProjectType };\nexport type { ProjectType };\n"],"names":["getProjectType","isEE","planPriceId","toLowerCase","includes","LICENSED_STATUSES","Set","getLicensedPlan","licenseStatus","type","Boolean","has","undefined"],"mappings":";;AAEA;;;;;;;;;;;;;;AAcC,UACKA,cAAAA,GAAiB,CAAC,EACtBC,IAAI,EACJC,WAAW,EAIZ,GAAA;AACC,IAAA,IAAI,CAACD,IAAAA,EAAM;QACT,OAAO,WAAA;AACT,IAAA;IAEA,IAAIC,WAAAA,EAAaC,WAAAA,EAAAA,CAAcC,QAAAA,CAAS,QAAA,CAAA,EAAW;QACjD,OAAO,QAAA;AACT,IAAA;IAEA,OAAO,YAAA;AACT;AAEA;AACA;AACA,MAAMC,iBAAAA,GAAyC,IAAIC,GAAAA,CAAI;AAAC,IAAA,QAAA;AAAU,IAAA,SAAA;AAAW,IAAA;AAAU,CAAA,CAAA;AAEvF;;;;;;;;;IAUA,MAAMC,eAAAA,GAAkB,CAAC,EACvBC,aAAa,EACbC,IAAI,EACJP,WAAW,EAKZ,GACCF,cAAAA,CAAe;AACbC,QAAAA,IAAAA,EAAMS,OAAAA,CAAQD,IAAAA,CAAAA,IAASJ,iBAAAA,CAAkBM,GAAG,CAACH,aAAAA,IAAiB,EAAA,CAAA;AAC9DN,QAAAA,WAAAA,EAAaA,WAAAA,IAAeU;AAC9B,KAAA;;;;;"}

package/dist/server/shared/utils/get-project-type.mjs

@@ -0,0 +1,46 @@
+/**
+ * Resolves the plan label from the license information returned by the
+ * `/admin/project-type` endpoint (browser) or `strapi.ee` (server).
+ *
+ * This labels the edition that is running: it follows `isEE`, so a lapsed license reads
+ * Community. Browser tracking and NPS report this label and the startup table applies the same
+ * rule; server metrics also label the running edition, but never say Growth. For the plan a
+ * license was issued for, lapsed or not (the Plan card, the Support card and the debug dump),
+ * use `getLicensedPlan` below.
+ *
+ * The label is intentionally limited to three values:
+ * - `Community`  when there is no license (Community Edition).
+ * - `Growth`     when the licensed plan price id contains "growth".
+ * - `Enterprise` for any other licensed plan.
+ */ const getProjectType = ({ isEE, planPriceId })=>{
+    if (!isEE) {
+        return 'Community';
+    }
+    if (planPriceId?.toLowerCase().includes('growth')) {
+        return 'Growth';
+    }
+    return 'Enterprise';
+};
+// The statuses a license can be in once it has been read. `none` (never licensed) is left out
+// on purpose, and so is a missing status, which a mixed-version install can produce.
+const LICENSED_STATUSES = new Set([
+    'active',
+    'expired',
+    'unknown'
+]);
+/**
+ * Resolves the plan a license was issued for, including one that has lapsed or can no longer
+ * be read, so Support links, the Plan card and the debug dump can still name it. It unlocks
+ * nothing: feature gating stays on `isEE`.
+ *
+ * A plan is only reported when a type was verified at some point (live, or retained once the
+ * license lapsed) AND the status is licensed. A corrupt license file sets `unknown` before any
+ * type is stored, and with no price id `getProjectType` would fall through to Enterprise, so
+ * both conditions are required. Every caller that derives a plan should go through here.
+ */ const getLicensedPlan = ({ licenseStatus, type, planPriceId })=>getProjectType({
+        isEE: Boolean(type) && LICENSED_STATUSES.has(licenseStatus ?? ''),
+        planPriceId: planPriceId ?? undefined
+    });
+
+export { getLicensedPlan, getProjectType };
+//# sourceMappingURL=get-project-type.mjs.map

package/dist/server/shared/utils/get-project-type.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-project-type.mjs","sources":["../../../../shared/utils/get-project-type.ts"],"sourcesContent":["type ProjectType = 'Community' | 'Growth' | 'Enterprise';\n\n/**\n * Resolves the plan label from the license information returned by the\n * `/admin/project-type` endpoint (browser) or `strapi.ee` (server).\n *\n * This labels the edition that is running: it follows `isEE`, so a lapsed license reads\n * Community. Browser tracking and NPS report this label and the startup table applies the same\n * rule; server metrics also label the running edition, but never say Growth. For the plan a\n * license was issued for, lapsed or not (the Plan card, the Support card and the debug dump),\n * use `getLicensedPlan` below.\n *\n * The label is intentionally limited to three values:\n * - `Community`  when there is no license (Community Edition).\n * - `Growth`     when the licensed plan price id contains \"growth\".\n * - `Enterprise` for any other licensed plan.\n */\nconst getProjectType = ({\n  isEE,\n  planPriceId,\n}: {\n  isEE: boolean;\n  planPriceId?: string;\n}): ProjectType => {\n  if (!isEE) {\n    return 'Community';\n  }\n\n  if (planPriceId?.toLowerCase().includes('growth')) {\n    return 'Growth';\n  }\n\n  return 'Enterprise';\n};\n\n// The statuses a license can be in once it has been read. `none` (never licensed) is left out\n// on purpose, and so is a missing status, which a mixed-version install can produce.\nconst LICENSED_STATUSES: ReadonlySet<string> = new Set(['active', 'expired', 'unknown']);\n\n/**\n * Resolves the plan a license was issued for, including one that has lapsed or can no longer\n * be read, so Support links, the Plan card and the debug dump can still name it. It unlocks\n * nothing: feature gating stays on `isEE`.\n *\n * A plan is only reported when a type was verified at some point (live, or retained once the\n * license lapsed) AND the status is licensed. A corrupt license file sets `unknown` before any\n * type is stored, and with no price id `getProjectType` would fall through to Enterprise, so\n * both conditions are required. Every caller that derives a plan should go through here.\n */\nconst getLicensedPlan = ({\n  licenseStatus,\n  type,\n  planPriceId,\n}: {\n  licenseStatus: string | null | undefined;\n  type: string | null | undefined;\n  planPriceId?: string | null;\n}): ProjectType =>\n  getProjectType({\n    isEE: Boolean(type) && LICENSED_STATUSES.has(licenseStatus ?? ''),\n    planPriceId: planPriceId ?? undefined,\n  });\n\nexport { getLicensedPlan, getProjectType };\nexport type { ProjectType };\n"],"names":["getProjectType","isEE","planPriceId","toLowerCase","includes","LICENSED_STATUSES","Set","getLicensedPlan","licenseStatus","type","Boolean","has","undefined"],"mappings":"AAEA;;;;;;;;;;;;;;AAcC,UACKA,cAAAA,GAAiB,CAAC,EACtBC,IAAI,EACJC,WAAW,EAIZ,GAAA;AACC,IAAA,IAAI,CAACD,IAAAA,EAAM;QACT,OAAO,WAAA;AACT,IAAA;IAEA,IAAIC,WAAAA,EAAaC,WAAAA,EAAAA,CAAcC,QAAAA,CAAS,QAAA,CAAA,EAAW;QACjD,OAAO,QAAA;AACT,IAAA;IAEA,OAAO,YAAA;AACT;AAEA;AACA;AACA,MAAMC,iBAAAA,GAAyC,IAAIC,GAAAA,CAAI;AAAC,IAAA,QAAA;AAAU,IAAA,SAAA;AAAW,IAAA;AAAU,CAAA,CAAA;AAEvF;;;;;;;;;IAUA,MAAMC,eAAAA,GAAkB,CAAC,EACvBC,aAAa,EACbC,IAAI,EACJP,WAAW,EAKZ,GACCF,cAAAA,CAAe;AACbC,QAAAA,IAAAA,EAAMS,OAAAA,CAAQD,IAAAA,CAAAA,IAASJ,iBAAAA,CAAkBM,GAAG,CAACH,aAAAA,IAAiB,EAAA,CAAA;AAC9DN,QAAAA,WAAAA,EAAaA,WAAAA,IAAeU;AAC9B,KAAA;;;;"}