@strapi/admin 5.58.0 → 5.59.0

package/dist/shared/utils/auth-cookie-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-cookie-path.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAYjD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}
+{"version":3,"file":"auth-cookie-path.d.ts","sourceRoot":"","sources":["../../../shared/utils/auth-cookie-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAYjD,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,EACvB,OAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,KAC7C,MAeF,CAAC"}

package/dist/shared/utils/session-auth.d.ts

@@ -2,7 +2,23 @@ import type { Context } from 'koa';
 import type { Modules } from '@strapi/types';
 export declare const REFRESH_COOKIE_NAME = "strapi_admin_refresh";
 export declare const getAccessCookieName: () => string;
+/**
+ * Path of the non-httpOnly access cookie. Only the admin panel reads it,
+ * through `document.cookie`, which exposes a cookie only on pages its path
+ * matches. So when `admin.auth.cookie.path` is unset it follows the path the
+ * browser loads the panel from (`admin.url`, behind any `server.url` subpath).
+ * The admin build resolves the same value (create-build-context.ts).
+ */
 export declare const getAccessCookiePath: () => string;
+/**
+ * Path of the httpOnly refresh cookie (and every other cookie built from
+ * `getRefreshCookieOptions`). Only the admin API reads it, and the API does not
+ * move with `admin.url`, so it follows the API path instead of the panel.
+ * `admin.auth.cookie.path` is kept when it covers the API path. Otherwise the
+ * browser would never send the cookie to `/admin/access-token` and every
+ * session would end when its access token expires, so the API path is used.
+ */
+export declare const getRefreshCookiePath: () => string;
 export declare const getAccessCookieDomain: () => string | undefined;
 export declare const DEFAULT_MAX_REFRESH_TOKEN_LIFESPAN: number;
 export declare const DEFAULT_IDLE_REFRESH_TOKEN_LIFESPAN: number;

package/dist/shared/utils/session-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAS1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAAM,GAAG,SAIjD,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA4B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,OAAO,4BAGxD,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,MAAM,EACd,WAAW,MAAM,GAAG,SAAS,EAC7B,gBAAgB,MAAM,GAAG,SAAS,KACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAkB5B,CAAC"}
+{"version":3,"file":"session-auth.d.ts","sourceRoot":"","sources":["../../../shared/utils/session-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAS1D,eAAO,MAAM,mBAAmB,QAAO,MAGtC,CAAC;AAoDF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,QAAO,MAKtC,CAAC;AAIF;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,QAAO,MAqBvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAAM,GAAG,SAIjD,CAAC;AAEF,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,mCAAmC,QAAoB,CAAC;AACrE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAEzD,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,OAAO;;;;;;;;CA4B9D,CAAC;AAgCF,eAAO,MAAM,4BAA4B,GACvC,MAAM,SAAS,GAAG,SAAS,EAC3B,uBAAuB,MAAM,EAC7B,gBAAgB,OAAO;;;;;;;;;;;;;;;;;CAgBxB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,OAAO,CAAC,cAAc,CAAC,qBAAqB,GAAG,IAGnF,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAA6B,CAAC;AAElE,eAAO,MAAM,mBAAmB,GAC9B,aAAa,OAAO,KACnB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAMzC,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAAI,KAAK,OAAO,4BAGxD,CAAC;AAEL;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,MAAM,EACd,WAAW,MAAM,GAAG,SAAS,EAC7B,gBAAgB,MAAM,GAAG,SAAS,KACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAkB5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/admin",
-  "version": "5.58.0",
+  "version": "5.59.0",
   "description": "Strapi Admin",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -91,10 +91,10 @@
     "@reduxjs/toolkit": "1.9.7",
     "@strapi/design-system": "2.2.4",
     "@strapi/icons": "2.2.4",
-    "@strapi/permissions": "5.58.0",
-    "@strapi/types": "5.58.0",
-    "@strapi/typescript-utils": "5.58.0",
-    "@strapi/utils": "5.58.0",
+    "@strapi/permissions": "5.59.0",
+    "@strapi/types": "5.59.0",
+    "@strapi/typescript-utils": "5.59.0",
+    "@strapi/utils": "5.59.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -148,8 +148,8 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.58.0",
-    "@strapi/data-transfer": "5.58.0",
+    "@strapi/admin-test-utils": "5.59.0",
+    "@strapi/data-transfer": "5.59.0",
     "@testing-library/jest-dom": "6.9.1",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",