@strapi/core 0.0.0-experimental.00380841fe1b29f71fe755bb387fa1f75073621b

package/dist/loaders/policies.mjs

@@ -0,0 +1,27 @@
+import { join, extname, basename } from 'path';
+import fse from 'fs-extra';
+import { importDefault } from '@strapi/utils';
+
+// TODO:: allow folders with index.js inside for bigger policies
+async function loadPolicies(strapi) {
+    const dir = strapi.dirs.dist.policies;
+    if (!await fse.pathExists(dir)) {
+        return;
+    }
+    const policies = {};
+    const paths = await fse.readdir(dir, {
+        withFileTypes: true
+    });
+    for (const fd of paths){
+        const { name } = fd;
+        const fullPath = join(dir, name);
+        if (fd.isFile() && extname(name) === '.js') {
+            const key = basename(name, '.js');
+            policies[key] = importDefault(fullPath);
+        }
+    }
+    strapi.get('policies').add(`global::`, policies);
+}
+
+export { loadPolicies as default };
+//# sourceMappingURL=policies.mjs.map

package/dist/loaders/policies.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.mjs","sources":["../../src/loaders/policies.ts"],"sourcesContent":["import { join, extname, basename } from 'path';\nimport fse from 'fs-extra';\nimport { importDefault } from '@strapi/utils';\n\nimport type { Core } from '@strapi/types';\n\n// TODO:: allow folders with index.js inside for bigger policies\nexport default async function loadPolicies(strapi: Core.Strapi) {\n  const dir = strapi.dirs.dist.policies;\n\n  if (!(await fse.pathExists(dir))) {\n    return;\n  }\n\n  const policies: Record<string, Core.Policy> = {};\n  const paths = await fse.readdir(dir, { withFileTypes: true });\n\n  for (const fd of paths) {\n    const { name } = fd;\n    const fullPath = join(dir, name);\n\n    if (fd.isFile() && extname(name) === '.js') {\n      const key = basename(name, '.js');\n      policies[key] = importDefault(fullPath);\n    }\n  }\n\n  strapi.get('policies').add(`global::`, policies);\n}\n"],"names":["loadPolicies","strapi","dir","dirs","dist","policies","fse","pathExists","paths","readdir","withFileTypes","fd","name","fullPath","join","isFile","extname","key","basename","importDefault","get","add"],"mappings":";;;;AAMA;AACe,eAAeA,aAAaC,MAAmB,EAAA;AAC5D,IAAA,MAAMC,MAAMD,MAAOE,CAAAA,IAAI,CAACC,IAAI,CAACC,QAAQ;AAErC,IAAA,IAAI,CAAE,MAAMC,GAAIC,CAAAA,UAAU,CAACL,GAAO,CAAA,EAAA;AAChC,QAAA;AACF;AAEA,IAAA,MAAMG,WAAwC,EAAC;AAC/C,IAAA,MAAMG,KAAQ,GAAA,MAAMF,GAAIG,CAAAA,OAAO,CAACP,GAAK,EAAA;QAAEQ,aAAe,EAAA;AAAK,KAAA,CAAA;IAE3D,KAAK,MAAMC,MAAMH,KAAO,CAAA;QACtB,MAAM,EAAEI,IAAI,EAAE,GAAGD,EAAAA;QACjB,MAAME,QAAAA,GAAWC,KAAKZ,GAAKU,EAAAA,IAAAA,CAAAA;AAE3B,QAAA,IAAID,EAAGI,CAAAA,MAAM,EAAMC,IAAAA,OAAAA,CAAQJ,UAAU,KAAO,EAAA;YAC1C,MAAMK,GAAAA,GAAMC,SAASN,IAAM,EAAA,KAAA,CAAA;YAC3BP,QAAQ,CAACY,GAAI,CAAA,GAAGE,aAAcN,CAAAA,QAAAA,CAAAA;AAChC;AACF;IAEAZ,MAAOmB,CAAAA,GAAG,CAAC,UAAYC,CAAAA,CAAAA,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAEhB,QAAAA,CAAAA;AACzC;;;;"}

package/dist/loaders/sanitizers.d.ts

@@ -0,0 +1,4 @@
+import type { Core } from '@strapi/types';
+declare const _default: (strapi: Core.Strapi) => void;
+export default _default;
+//# sourceMappingURL=sanitizers.d.ts.map

package/dist/loaders/sanitizers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizers.d.ts","sourceRoot":"","sources":["../../src/loaders/sanitizers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;iCAElB,KAAK,MAAM;AAAnC,wBAEE"}

package/dist/loaders/sanitizers.js

@@ -0,0 +1,12 @@
+'use strict';
+
+var loadSanitizers = ((strapi)=>{
+    strapi.get('sanitizers').set('content-api', {
+        input: [],
+        output: [],
+        query: []
+    });
+});
+
+module.exports = loadSanitizers;
+//# sourceMappingURL=sanitizers.js.map

package/dist/loaders/sanitizers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizers.js","sources":["../../src/loaders/sanitizers.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nexport default (strapi: Core.Strapi) => {\n  strapi.get('sanitizers').set('content-api', { input: [], output: [], query: [] });\n};\n"],"names":["strapi","get","set","input","output","query"],"mappings":";;AAEA,qBAAe,CAAA,CAACA,MAAAA,GAAAA;AACdA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,YAAcC,CAAAA,CAAAA,GAAG,CAAC,aAAe,EAAA;AAAEC,QAAAA,KAAAA,EAAO,EAAE;AAAEC,QAAAA,MAAAA,EAAQ,EAAE;AAAEC,QAAAA,KAAAA,EAAO;AAAG,KAAA,CAAA;AACjF,CAAA;;;;"}

package/dist/loaders/sanitizers.mjs

@@ -0,0 +1,10 @@
+var loadSanitizers = ((strapi)=>{
+    strapi.get('sanitizers').set('content-api', {
+        input: [],
+        output: [],
+        query: []
+    });
+});
+
+export { loadSanitizers as default };
+//# sourceMappingURL=sanitizers.mjs.map

package/dist/loaders/sanitizers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizers.mjs","sources":["../../src/loaders/sanitizers.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nexport default (strapi: Core.Strapi) => {\n  strapi.get('sanitizers').set('content-api', { input: [], output: [], query: [] });\n};\n"],"names":["strapi","get","set","input","output","query"],"mappings":"AAEA,qBAAe,CAAA,CAACA,MAAAA,GAAAA;AACdA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,YAAcC,CAAAA,CAAAA,GAAG,CAAC,aAAe,EAAA;AAAEC,QAAAA,KAAAA,EAAO,EAAE;AAAEC,QAAAA,MAAAA,EAAQ,EAAE;AAAEC,QAAAA,KAAAA,EAAO;AAAG,KAAA,CAAA;AACjF,CAAA;;;;"}

package/dist/loaders/src-index.d.ts

@@ -0,0 +1,4 @@
+import type { Core } from '@strapi/types';
+declare const _default: (strapi: Core.Strapi) => {} | undefined;
+export default _default;
+//# sourceMappingURL=src-index.d.ts.map

package/dist/loaders/src-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-index.d.ts","sourceRoot":"","sources":["../../src/loaders/src-index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;iCAelB,KAAK,MAAM;AAAnC,wBAuBE"}

package/dist/loaders/src-index.js

@@ -0,0 +1,41 @@
+'use strict';
+
+var path = require('path');
+var fs = require('fs');
+var strapiUtils = require('@strapi/utils');
+
+const srcSchema = strapiUtils.yup.object().shape({
+    bootstrap: strapiUtils.yup.mixed().isFunction(),
+    register: strapiUtils.yup.mixed().isFunction(),
+    destroy: strapiUtils.yup.mixed().isFunction()
+}).noUnknown();
+const validateSrcIndex = (srcIndex)=>{
+    return srcSchema.validateSync(srcIndex, {
+        strict: true,
+        abortEarly: false
+    });
+};
+var loadSrcIndex = ((strapi)=>{
+    if (!fs.existsSync(strapi.dirs.dist.src)) {
+        return;
+    }
+    const pathToSrcIndex = path.resolve(strapi.dirs.dist.src, 'index.js');
+    if (!fs.existsSync(pathToSrcIndex) || fs.statSync(pathToSrcIndex).isDirectory()) {
+        return {};
+    }
+    const srcIndex = strapiUtils.importDefault(pathToSrcIndex);
+    try {
+        validateSrcIndex(srcIndex);
+    } catch (e) {
+        if (e instanceof strapiUtils.yup.ValidationError) {
+            strapi.stopWithError({
+                message: `Invalid file \`./src/index.js\`: ${e.message}`
+            });
+        }
+        throw e;
+    }
+    strapi.app = srcIndex;
+});
+
+module.exports = loadSrcIndex;
+//# sourceMappingURL=src-index.js.map

package/dist/loaders/src-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-index.js","sources":["../../src/loaders/src-index.ts"],"sourcesContent":["import { resolve } from 'path';\nimport { statSync, existsSync } from 'fs';\nimport { yup, importDefault } from '@strapi/utils';\n\nimport type { Core } from '@strapi/types';\n\nconst srcSchema = yup\n  .object()\n  .shape({\n    bootstrap: yup.mixed().isFunction(),\n    register: yup.mixed().isFunction(),\n    destroy: yup.mixed().isFunction(),\n  })\n  .noUnknown();\n\nconst validateSrcIndex = (srcIndex: unknown) => {\n  return srcSchema.validateSync(srcIndex, { strict: true, abortEarly: false });\n};\n\nexport default (strapi: Core.Strapi) => {\n  if (!existsSync(strapi.dirs.dist.src)) {\n    return;\n  }\n\n  const pathToSrcIndex = resolve(strapi.dirs.dist.src, 'index.js');\n  if (!existsSync(pathToSrcIndex) || statSync(pathToSrcIndex).isDirectory()) {\n    return {};\n  }\n\n  const srcIndex = importDefault(pathToSrcIndex);\n\n  try {\n    validateSrcIndex(srcIndex);\n  } catch (e) {\n    if (e instanceof yup.ValidationError) {\n      strapi.stopWithError({ message: `Invalid file \\`./src/index.js\\`: ${e.message}` });\n    }\n\n    throw e;\n  }\n\n  strapi.app = srcIndex;\n};\n"],"names":["srcSchema","yup","object","shape","bootstrap","mixed","isFunction","register","destroy","noUnknown","validateSrcIndex","srcIndex","validateSync","strict","abortEarly","strapi","existsSync","dirs","dist","src","pathToSrcIndex","resolve","statSync","isDirectory","importDefault","e","ValidationError","stopWithError","message","app"],"mappings":";;;;;;AAMA,MAAMA,SAAYC,GAAAA,eAAAA,CACfC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,SAAWH,EAAAA,eAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU,EAAA;IACjCC,QAAUN,EAAAA,eAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU,EAAA;IAChCE,OAASP,EAAAA,eAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU;AACjC,CAAA,CAAA,CACCG,SAAS,EAAA;AAEZ,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxB,OAAOX,SAAAA,CAAUY,YAAY,CAACD,QAAU,EAAA;QAAEE,MAAQ,EAAA,IAAA;QAAMC,UAAY,EAAA;AAAM,KAAA,CAAA;AAC5E,CAAA;AAEA,mBAAe,CAAA,CAACC,MAAAA,GAAAA;IACd,IAAI,CAACC,cAAWD,MAAOE,CAAAA,IAAI,CAACC,IAAI,CAACC,GAAG,CAAG,EAAA;AACrC,QAAA;AACF;IAEA,MAAMC,cAAAA,GAAiBC,aAAQN,MAAOE,CAAAA,IAAI,CAACC,IAAI,CAACC,GAAG,EAAE,UAAA,CAAA;AACrD,IAAA,IAAI,CAACH,aAAWI,CAAAA,cAAAA,CAAAA,IAAmBE,WAASF,CAAAA,cAAAA,CAAAA,CAAgBG,WAAW,EAAI,EAAA;AACzE,QAAA,OAAO,EAAC;AACV;AAEA,IAAA,MAAMZ,WAAWa,yBAAcJ,CAAAA,cAAAA,CAAAA;IAE/B,IAAI;QACFV,gBAAiBC,CAAAA,QAAAA,CAAAA;AACnB,KAAA,CAAE,OAAOc,CAAG,EAAA;QACV,IAAIA,CAAAA,YAAaxB,eAAIyB,CAAAA,eAAe,EAAE;AACpCX,YAAAA,MAAAA,CAAOY,aAAa,CAAC;AAAEC,gBAAAA,OAAAA,EAAS,CAAC,iCAAiC,EAAEH,CAAEG,CAAAA,OAAO,CAAC;AAAE,aAAA,CAAA;AAClF;QAEA,MAAMH,CAAAA;AACR;AAEAV,IAAAA,MAAAA,CAAOc,GAAG,GAAGlB,QAAAA;AACf,CAAA;;;;"}

package/dist/loaders/src-index.mjs

@@ -0,0 +1,39 @@
+import { resolve } from 'path';
+import { existsSync, statSync } from 'fs';
+import { yup, importDefault } from '@strapi/utils';
+
+const srcSchema = yup.object().shape({
+    bootstrap: yup.mixed().isFunction(),
+    register: yup.mixed().isFunction(),
+    destroy: yup.mixed().isFunction()
+}).noUnknown();
+const validateSrcIndex = (srcIndex)=>{
+    return srcSchema.validateSync(srcIndex, {
+        strict: true,
+        abortEarly: false
+    });
+};
+var loadSrcIndex = ((strapi)=>{
+    if (!existsSync(strapi.dirs.dist.src)) {
+        return;
+    }
+    const pathToSrcIndex = resolve(strapi.dirs.dist.src, 'index.js');
+    if (!existsSync(pathToSrcIndex) || statSync(pathToSrcIndex).isDirectory()) {
+        return {};
+    }
+    const srcIndex = importDefault(pathToSrcIndex);
+    try {
+        validateSrcIndex(srcIndex);
+    } catch (e) {
+        if (e instanceof yup.ValidationError) {
+            strapi.stopWithError({
+                message: `Invalid file \`./src/index.js\`: ${e.message}`
+            });
+        }
+        throw e;
+    }
+    strapi.app = srcIndex;
+});
+
+export { loadSrcIndex as default };
+//# sourceMappingURL=src-index.mjs.map

package/dist/loaders/src-index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-index.mjs","sources":["../../src/loaders/src-index.ts"],"sourcesContent":["import { resolve } from 'path';\nimport { statSync, existsSync } from 'fs';\nimport { yup, importDefault } from '@strapi/utils';\n\nimport type { Core } from '@strapi/types';\n\nconst srcSchema = yup\n  .object()\n  .shape({\n    bootstrap: yup.mixed().isFunction(),\n    register: yup.mixed().isFunction(),\n    destroy: yup.mixed().isFunction(),\n  })\n  .noUnknown();\n\nconst validateSrcIndex = (srcIndex: unknown) => {\n  return srcSchema.validateSync(srcIndex, { strict: true, abortEarly: false });\n};\n\nexport default (strapi: Core.Strapi) => {\n  if (!existsSync(strapi.dirs.dist.src)) {\n    return;\n  }\n\n  const pathToSrcIndex = resolve(strapi.dirs.dist.src, 'index.js');\n  if (!existsSync(pathToSrcIndex) || statSync(pathToSrcIndex).isDirectory()) {\n    return {};\n  }\n\n  const srcIndex = importDefault(pathToSrcIndex);\n\n  try {\n    validateSrcIndex(srcIndex);\n  } catch (e) {\n    if (e instanceof yup.ValidationError) {\n      strapi.stopWithError({ message: `Invalid file \\`./src/index.js\\`: ${e.message}` });\n    }\n\n    throw e;\n  }\n\n  strapi.app = srcIndex;\n};\n"],"names":["srcSchema","yup","object","shape","bootstrap","mixed","isFunction","register","destroy","noUnknown","validateSrcIndex","srcIndex","validateSync","strict","abortEarly","strapi","existsSync","dirs","dist","src","pathToSrcIndex","resolve","statSync","isDirectory","importDefault","e","ValidationError","stopWithError","message","app"],"mappings":";;;;AAMA,MAAMA,SAAYC,GAAAA,GAAAA,CACfC,MAAM,EAAA,CACNC,KAAK,CAAC;IACLC,SAAWH,EAAAA,GAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU,EAAA;IACjCC,QAAUN,EAAAA,GAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU,EAAA;IAChCE,OAASP,EAAAA,GAAAA,CAAII,KAAK,EAAA,CAAGC,UAAU;AACjC,CAAA,CAAA,CACCG,SAAS,EAAA;AAEZ,MAAMC,mBAAmB,CAACC,QAAAA,GAAAA;IACxB,OAAOX,SAAAA,CAAUY,YAAY,CAACD,QAAU,EAAA;QAAEE,MAAQ,EAAA,IAAA;QAAMC,UAAY,EAAA;AAAM,KAAA,CAAA;AAC5E,CAAA;AAEA,mBAAe,CAAA,CAACC,MAAAA,GAAAA;IACd,IAAI,CAACC,WAAWD,MAAOE,CAAAA,IAAI,CAACC,IAAI,CAACC,GAAG,CAAG,EAAA;AACrC,QAAA;AACF;IAEA,MAAMC,cAAAA,GAAiBC,QAAQN,MAAOE,CAAAA,IAAI,CAACC,IAAI,CAACC,GAAG,EAAE,UAAA,CAAA;AACrD,IAAA,IAAI,CAACH,UAAWI,CAAAA,cAAAA,CAAAA,IAAmBE,QAASF,CAAAA,cAAAA,CAAAA,CAAgBG,WAAW,EAAI,EAAA;AACzE,QAAA,OAAO,EAAC;AACV;AAEA,IAAA,MAAMZ,WAAWa,aAAcJ,CAAAA,cAAAA,CAAAA;IAE/B,IAAI;QACFV,gBAAiBC,CAAAA,QAAAA,CAAAA;AACnB,KAAA,CAAE,OAAOc,CAAG,EAAA;QACV,IAAIA,CAAAA,YAAaxB,GAAIyB,CAAAA,eAAe,EAAE;AACpCX,YAAAA,MAAAA,CAAOY,aAAa,CAAC;AAAEC,gBAAAA,OAAAA,EAAS,CAAC,iCAAiC,EAAEH,CAAEG,CAAAA,OAAO,CAAC;AAAE,aAAA,CAAA;AAClF;QAEA,MAAMH,CAAAA;AACR;AAEAV,IAAAA,MAAAA,CAAOc,GAAG,GAAGlB,QAAAA;AACf,CAAA;;;;"}

package/dist/loaders/validators.d.ts

@@ -0,0 +1,4 @@
+import type { Core } from '@strapi/types';
+declare const _default: (strapi: Core.Strapi) => void;
+export default _default;
+//# sourceMappingURL=validators.d.ts.map

package/dist/loaders/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/loaders/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;iCAElB,KAAK,MAAM;AAAnC,wBAEE"}

package/dist/loaders/validators.js

@@ -0,0 +1,11 @@
+'use strict';
+
+var loadValidators = ((strapi)=>{
+    strapi.get('validators').set('content-api', {
+        input: [],
+        query: []
+    });
+});
+
+module.exports = loadValidators;
+//# sourceMappingURL=validators.js.map

package/dist/loaders/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sources":["../../src/loaders/validators.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nexport default (strapi: Core.Strapi) => {\n  strapi.get('validators').set('content-api', { input: [], query: [] });\n};\n"],"names":["strapi","get","set","input","query"],"mappings":";;AAEA,qBAAe,CAAA,CAACA,MAAAA,GAAAA;AACdA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,YAAcC,CAAAA,CAAAA,GAAG,CAAC,aAAe,EAAA;AAAEC,QAAAA,KAAAA,EAAO,EAAE;AAAEC,QAAAA,KAAAA,EAAO;AAAG,KAAA,CAAA;AACrE,CAAA;;;;"}

package/dist/loaders/validators.mjs

@@ -0,0 +1,9 @@
+var loadValidators = ((strapi)=>{
+    strapi.get('validators').set('content-api', {
+        input: [],
+        query: []
+    });
+});
+
+export { loadValidators as default };
+//# sourceMappingURL=validators.mjs.map

package/dist/loaders/validators.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.mjs","sources":["../../src/loaders/validators.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nexport default (strapi: Core.Strapi) => {\n  strapi.get('validators').set('content-api', { input: [], query: [] });\n};\n"],"names":["strapi","get","set","input","query"],"mappings":"AAEA,qBAAe,CAAA,CAACA,MAAAA,GAAAA;AACdA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,YAAcC,CAAAA,CAAAA,GAAG,CAAC,aAAe,EAAA;AAAEC,QAAAA,KAAAA,EAAO,EAAE;AAAEC,QAAAA,KAAAA,EAAO;AAAG,KAAA,CAAA;AACrE,CAAA;;;;"}

package/dist/middlewares/body.d.ts

@@ -0,0 +1,6 @@
+import { KoaBodyMiddlewareOptions } from 'koa-body';
+import type { Core } from '@strapi/types';
+export type Config = KoaBodyMiddlewareOptions;
+declare const bodyMiddleware: Core.MiddlewareFactory<Config>;
+export { bodyMiddleware as body };
+//# sourceMappingURL=body.d.ts.map

package/dist/middlewares/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../src/middlewares/body.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAG7D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG,wBAAwB,CAAC;AAiB9C,QAAA,MAAM,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CA2DlD,CAAC;AAEF,OAAO,EAAE,cAAc,IAAI,IAAI,EAAE,CAAC"}

package/dist/middlewares/body.js

@@ -0,0 +1,69 @@
+'use strict';
+
+var fse = require('fs-extra');
+var fp = require('lodash/fp');
+var koaBody = require('koa-body');
+var mime = require('mime-types');
+
+const defaults = {
+    multipart: true,
+    patchKoa: true
+};
+function ensureFileMimeType(file) {
+    if (!file.type) {
+        file.type = mime.lookup(file.name) || 'application/octet-stream';
+    }
+}
+function getFiles(ctx) {
+    return ctx?.request?.files?.files;
+}
+const bodyMiddleware = (config, { strapi })=>{
+    const bodyConfig = fp.defaultsDeep(defaults, config);
+    let gqlEndpoint;
+    if (strapi.plugin('graphql')) {
+        const { config: gqlConfig } = strapi.plugin('graphql');
+        gqlEndpoint = gqlConfig('endpoint');
+    }
+    return async (ctx, next)=>{
+        // TODO: find a better way later
+        if (gqlEndpoint && ctx.url === gqlEndpoint) {
+            await next();
+        } else {
+            try {
+                await koaBody.koaBody(bodyConfig)(ctx, async ()=>{});
+                const files = getFiles(ctx);
+                /**
+         * in case the mime-type wasn't sent, Strapi tries to guess it
+         * from the file extension, to avoid a corrupt database state
+         */ if (files) {
+                    if (Array.isArray(files)) {
+                        files.forEach(ensureFileMimeType);
+                    } else {
+                        ensureFileMimeType(files);
+                    }
+                }
+                await next();
+            } catch (error) {
+                if (error instanceof Error && error.message && error.message.includes('maxFileSize exceeded')) {
+                    return ctx.payloadTooLarge('FileTooBig');
+                }
+                throw error;
+            }
+        }
+        const files = getFiles(ctx);
+        // clean any file that was uploaded
+        if (files) {
+            if (Array.isArray(files)) {
+                // not awaiting to not slow the request
+                Promise.all(files.map((file)=>fse.remove(file.filepath)));
+            } else if (files && files.filepath) {
+                // not awaiting to not slow the request
+                fse.remove(files.filepath);
+            }
+            delete ctx.request.files;
+        }
+    };
+};
+
+exports.body = bodyMiddleware;
+//# sourceMappingURL=body.js.map

package/dist/middlewares/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sources":["../../src/middlewares/body.ts"],"sourcesContent":["import fse from 'fs-extra';\nimport { defaultsDeep } from 'lodash/fp';\nimport { koaBody, KoaBodyMiddlewareOptions } from 'koa-body';\nimport mime from 'mime-types';\nimport type Koa from 'koa';\nimport type { Core } from '@strapi/types';\n\nexport type Config = KoaBodyMiddlewareOptions;\n\nconst defaults = {\n  multipart: true,\n  patchKoa: true,\n};\n\nfunction ensureFileMimeType(file: any): void {\n  if (!file.type) {\n    file.type = mime.lookup(file.name) || 'application/octet-stream';\n  }\n}\n\nfunction getFiles(ctx: Koa.Context) {\n  return ctx?.request?.files?.files;\n}\n\nconst bodyMiddleware: Core.MiddlewareFactory<Config> = (config, { strapi }) => {\n  const bodyConfig: Config = defaultsDeep(defaults, config);\n\n  let gqlEndpoint: string | undefined;\n  if (strapi.plugin('graphql')) {\n    const { config: gqlConfig } = strapi.plugin('graphql');\n    gqlEndpoint = gqlConfig('endpoint');\n  }\n\n  return async (ctx, next) => {\n    // TODO: find a better way later\n    if (gqlEndpoint && ctx.url === gqlEndpoint) {\n      await next();\n    } else {\n      try {\n        await koaBody(bodyConfig)(ctx, async () => {});\n\n        const files = getFiles(ctx);\n\n        /**\n         * in case the mime-type wasn't sent, Strapi tries to guess it\n         * from the file extension, to avoid a corrupt database state\n         */\n        if (files) {\n          if (Array.isArray(files)) {\n            files.forEach(ensureFileMimeType);\n          } else {\n            ensureFileMimeType(files);\n          }\n        }\n\n        await next();\n      } catch (error) {\n        if (\n          error instanceof Error &&\n          error.message &&\n          error.message.includes('maxFileSize exceeded')\n        ) {\n          return ctx.payloadTooLarge('FileTooBig');\n        }\n\n        throw error;\n      }\n    }\n\n    const files = getFiles(ctx);\n\n    // clean any file that was uploaded\n    if (files) {\n      if (Array.isArray(files)) {\n        // not awaiting to not slow the request\n        Promise.all(files.map((file) => fse.remove(file.filepath)));\n      } else if (files && files.filepath) {\n        // not awaiting to not slow the request\n        fse.remove(files.filepath);\n      }\n      delete ctx.request.files;\n    }\n  };\n};\n\nexport { bodyMiddleware as body };\n"],"names":["defaults","multipart","patchKoa","ensureFileMimeType","file","type","mime","lookup","name","getFiles","ctx","request","files","bodyMiddleware","config","strapi","bodyConfig","defaultsDeep","gqlEndpoint","plugin","gqlConfig","next","url","koaBody","Array","isArray","forEach","error","Error","message","includes","payloadTooLarge","Promise","all","map","fse","remove","filepath"],"mappings":";;;;;;;AASA,MAAMA,QAAW,GAAA;IACfC,SAAW,EAAA,IAAA;IACXC,QAAU,EAAA;AACZ,CAAA;AAEA,SAASC,mBAAmBC,IAAS,EAAA;IACnC,IAAI,CAACA,IAAKC,CAAAA,IAAI,EAAE;AACdD,QAAAA,IAAAA,CAAKC,IAAI,GAAGC,IAAAA,CAAKC,MAAM,CAACH,IAAAA,CAAKI,IAAI,CAAK,IAAA,0BAAA;AACxC;AACF;AAEA,SAASC,SAASC,GAAgB,EAAA;IAChC,OAAOA,GAAAA,EAAKC,SAASC,KAAOA,EAAAA,KAAAA;AAC9B;AAEA,MAAMC,cAAiD,GAAA,CAACC,MAAQ,EAAA,EAAEC,MAAM,EAAE,GAAA;IACxE,MAAMC,UAAAA,GAAqBC,gBAAajB,QAAUc,EAAAA,MAAAA,CAAAA;IAElD,IAAII,WAAAA;IACJ,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAY,CAAA,EAAA;AAC5B,QAAA,MAAM,EAAEL,MAAQM,EAAAA,SAAS,EAAE,GAAGL,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA;AAC5CD,QAAAA,WAAAA,GAAcE,SAAU,CAAA,UAAA,CAAA;AAC1B;AAEA,IAAA,OAAO,OAAOV,GAAKW,EAAAA,IAAAA,GAAAA;;AAEjB,QAAA,IAAIH,WAAeR,IAAAA,GAAAA,CAAIY,GAAG,KAAKJ,WAAa,EAAA;YAC1C,MAAMG,IAAAA,EAAAA;SACD,MAAA;YACL,IAAI;gBACF,MAAME,eAAAA,CAAQP,UAAYN,CAAAA,CAAAA,GAAAA,EAAK,UAAa,EAAA,CAAA;AAE5C,gBAAA,MAAME,QAAQH,QAASC,CAAAA,GAAAA,CAAAA;AAEvB;;;AAGC,YACD,IAAIE,KAAO,EAAA;oBACT,IAAIY,KAAAA,CAAMC,OAAO,CAACb,KAAQ,CAAA,EAAA;AACxBA,wBAAAA,KAAAA,CAAMc,OAAO,CAACvB,kBAAAA,CAAAA;qBACT,MAAA;wBACLA,kBAAmBS,CAAAA,KAAAA,CAAAA;AACrB;AACF;gBAEA,MAAMS,IAAAA,EAAAA;AACR,aAAA,CAAE,OAAOM,KAAO,EAAA;gBACd,IACEA,KAAAA,YAAiBC,KACjBD,IAAAA,KAAAA,CAAME,OAAO,IACbF,MAAME,OAAO,CAACC,QAAQ,CAAC,sBACvB,CAAA,EAAA;oBACA,OAAOpB,GAAAA,CAAIqB,eAAe,CAAC,YAAA,CAAA;AAC7B;gBAEA,MAAMJ,KAAAA;AACR;AACF;AAEA,QAAA,MAAMf,QAAQH,QAASC,CAAAA,GAAAA,CAAAA;;AAGvB,QAAA,IAAIE,KAAO,EAAA;YACT,IAAIY,KAAAA,CAAMC,OAAO,CAACb,KAAQ,CAAA,EAAA;;gBAExBoB,OAAQC,CAAAA,GAAG,CAACrB,KAAAA,CAAMsB,GAAG,CAAC,CAAC9B,IAAAA,GAAS+B,GAAIC,CAAAA,MAAM,CAAChC,IAAAA,CAAKiC,QAAQ,CAAA,CAAA,CAAA;AAC1D,aAAA,MAAO,IAAIzB,KAAAA,IAASA,KAAMyB,CAAAA,QAAQ,EAAE;;gBAElCF,GAAIC,CAAAA,MAAM,CAACxB,KAAAA,CAAMyB,QAAQ,CAAA;AAC3B;YACA,OAAO3B,GAAAA,CAAIC,OAAO,CAACC,KAAK;AAC1B;AACF,KAAA;AACF;;;;"}

package/dist/middlewares/body.mjs

@@ -0,0 +1,67 @@
+import fse from 'fs-extra';
+import { defaultsDeep } from 'lodash/fp';
+import { koaBody } from 'koa-body';
+import mime from 'mime-types';
+
+const defaults = {
+    multipart: true,
+    patchKoa: true
+};
+function ensureFileMimeType(file) {
+    if (!file.type) {
+        file.type = mime.lookup(file.name) || 'application/octet-stream';
+    }
+}
+function getFiles(ctx) {
+    return ctx?.request?.files?.files;
+}
+const bodyMiddleware = (config, { strapi })=>{
+    const bodyConfig = defaultsDeep(defaults, config);
+    let gqlEndpoint;
+    if (strapi.plugin('graphql')) {
+        const { config: gqlConfig } = strapi.plugin('graphql');
+        gqlEndpoint = gqlConfig('endpoint');
+    }
+    return async (ctx, next)=>{
+        // TODO: find a better way later
+        if (gqlEndpoint && ctx.url === gqlEndpoint) {
+            await next();
+        } else {
+            try {
+                await koaBody(bodyConfig)(ctx, async ()=>{});
+                const files = getFiles(ctx);
+                /**
+         * in case the mime-type wasn't sent, Strapi tries to guess it
+         * from the file extension, to avoid a corrupt database state
+         */ if (files) {
+                    if (Array.isArray(files)) {
+                        files.forEach(ensureFileMimeType);
+                    } else {
+                        ensureFileMimeType(files);
+                    }
+                }
+                await next();
+            } catch (error) {
+                if (error instanceof Error && error.message && error.message.includes('maxFileSize exceeded')) {
+                    return ctx.payloadTooLarge('FileTooBig');
+                }
+                throw error;
+            }
+        }
+        const files = getFiles(ctx);
+        // clean any file that was uploaded
+        if (files) {
+            if (Array.isArray(files)) {
+                // not awaiting to not slow the request
+                Promise.all(files.map((file)=>fse.remove(file.filepath)));
+            } else if (files && files.filepath) {
+                // not awaiting to not slow the request
+                fse.remove(files.filepath);
+            }
+            delete ctx.request.files;
+        }
+    };
+};
+
+export { bodyMiddleware as body };
+//# sourceMappingURL=body.mjs.map

package/dist/middlewares/body.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.mjs","sources":["../../src/middlewares/body.ts"],"sourcesContent":["import fse from 'fs-extra';\nimport { defaultsDeep } from 'lodash/fp';\nimport { koaBody, KoaBodyMiddlewareOptions } from 'koa-body';\nimport mime from 'mime-types';\nimport type Koa from 'koa';\nimport type { Core } from '@strapi/types';\n\nexport type Config = KoaBodyMiddlewareOptions;\n\nconst defaults = {\n  multipart: true,\n  patchKoa: true,\n};\n\nfunction ensureFileMimeType(file: any): void {\n  if (!file.type) {\n    file.type = mime.lookup(file.name) || 'application/octet-stream';\n  }\n}\n\nfunction getFiles(ctx: Koa.Context) {\n  return ctx?.request?.files?.files;\n}\n\nconst bodyMiddleware: Core.MiddlewareFactory<Config> = (config, { strapi }) => {\n  const bodyConfig: Config = defaultsDeep(defaults, config);\n\n  let gqlEndpoint: string | undefined;\n  if (strapi.plugin('graphql')) {\n    const { config: gqlConfig } = strapi.plugin('graphql');\n    gqlEndpoint = gqlConfig('endpoint');\n  }\n\n  return async (ctx, next) => {\n    // TODO: find a better way later\n    if (gqlEndpoint && ctx.url === gqlEndpoint) {\n      await next();\n    } else {\n      try {\n        await koaBody(bodyConfig)(ctx, async () => {});\n\n        const files = getFiles(ctx);\n\n        /**\n         * in case the mime-type wasn't sent, Strapi tries to guess it\n         * from the file extension, to avoid a corrupt database state\n         */\n        if (files) {\n          if (Array.isArray(files)) {\n            files.forEach(ensureFileMimeType);\n          } else {\n            ensureFileMimeType(files);\n          }\n        }\n\n        await next();\n      } catch (error) {\n        if (\n          error instanceof Error &&\n          error.message &&\n          error.message.includes('maxFileSize exceeded')\n        ) {\n          return ctx.payloadTooLarge('FileTooBig');\n        }\n\n        throw error;\n      }\n    }\n\n    const files = getFiles(ctx);\n\n    // clean any file that was uploaded\n    if (files) {\n      if (Array.isArray(files)) {\n        // not awaiting to not slow the request\n        Promise.all(files.map((file) => fse.remove(file.filepath)));\n      } else if (files && files.filepath) {\n        // not awaiting to not slow the request\n        fse.remove(files.filepath);\n      }\n      delete ctx.request.files;\n    }\n  };\n};\n\nexport { bodyMiddleware as body };\n"],"names":["defaults","multipart","patchKoa","ensureFileMimeType","file","type","mime","lookup","name","getFiles","ctx","request","files","bodyMiddleware","config","strapi","bodyConfig","defaultsDeep","gqlEndpoint","plugin","gqlConfig","next","url","koaBody","Array","isArray","forEach","error","Error","message","includes","payloadTooLarge","Promise","all","map","fse","remove","filepath"],"mappings":";;;;;AASA,MAAMA,QAAW,GAAA;IACfC,SAAW,EAAA,IAAA;IACXC,QAAU,EAAA;AACZ,CAAA;AAEA,SAASC,mBAAmBC,IAAS,EAAA;IACnC,IAAI,CAACA,IAAKC,CAAAA,IAAI,EAAE;AACdD,QAAAA,IAAAA,CAAKC,IAAI,GAAGC,IAAAA,CAAKC,MAAM,CAACH,IAAAA,CAAKI,IAAI,CAAK,IAAA,0BAAA;AACxC;AACF;AAEA,SAASC,SAASC,GAAgB,EAAA;IAChC,OAAOA,GAAAA,EAAKC,SAASC,KAAOA,EAAAA,KAAAA;AAC9B;AAEA,MAAMC,cAAiD,GAAA,CAACC,MAAQ,EAAA,EAAEC,MAAM,EAAE,GAAA;IACxE,MAAMC,UAAAA,GAAqBC,aAAajB,QAAUc,EAAAA,MAAAA,CAAAA;IAElD,IAAII,WAAAA;IACJ,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAY,CAAA,EAAA;AAC5B,QAAA,MAAM,EAAEL,MAAQM,EAAAA,SAAS,EAAE,GAAGL,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA;AAC5CD,QAAAA,WAAAA,GAAcE,SAAU,CAAA,UAAA,CAAA;AAC1B;AAEA,IAAA,OAAO,OAAOV,GAAKW,EAAAA,IAAAA,GAAAA;;AAEjB,QAAA,IAAIH,WAAeR,IAAAA,GAAAA,CAAIY,GAAG,KAAKJ,WAAa,EAAA;YAC1C,MAAMG,IAAAA,EAAAA;SACD,MAAA;YACL,IAAI;gBACF,MAAME,OAAAA,CAAQP,UAAYN,CAAAA,CAAAA,GAAAA,EAAK,UAAa,EAAA,CAAA;AAE5C,gBAAA,MAAME,QAAQH,QAASC,CAAAA,GAAAA,CAAAA;AAEvB;;;AAGC,YACD,IAAIE,KAAO,EAAA;oBACT,IAAIY,KAAAA,CAAMC,OAAO,CAACb,KAAQ,CAAA,EAAA;AACxBA,wBAAAA,KAAAA,CAAMc,OAAO,CAACvB,kBAAAA,CAAAA;qBACT,MAAA;wBACLA,kBAAmBS,CAAAA,KAAAA,CAAAA;AACrB;AACF;gBAEA,MAAMS,IAAAA,EAAAA;AACR,aAAA,CAAE,OAAOM,KAAO,EAAA;gBACd,IACEA,KAAAA,YAAiBC,KACjBD,IAAAA,KAAAA,CAAME,OAAO,IACbF,MAAME,OAAO,CAACC,QAAQ,CAAC,sBACvB,CAAA,EAAA;oBACA,OAAOpB,GAAAA,CAAIqB,eAAe,CAAC,YAAA,CAAA;AAC7B;gBAEA,MAAMJ,KAAAA;AACR;AACF;AAEA,QAAA,MAAMf,QAAQH,QAASC,CAAAA,GAAAA,CAAAA;;AAGvB,QAAA,IAAIE,KAAO,EAAA;YACT,IAAIY,KAAAA,CAAMC,OAAO,CAACb,KAAQ,CAAA,EAAA;;gBAExBoB,OAAQC,CAAAA,GAAG,CAACrB,KAAAA,CAAMsB,GAAG,CAAC,CAAC9B,IAAAA,GAAS+B,GAAIC,CAAAA,MAAM,CAAChC,IAAAA,CAAKiC,QAAQ,CAAA,CAAA,CAAA;AAC1D,aAAA,MAAO,IAAIzB,KAAAA,IAASA,KAAMyB,CAAAA,QAAQ,EAAE;;gBAElCF,GAAIC,CAAAA,MAAM,CAACxB,KAAAA,CAAMyB,QAAQ,CAAA;AAC3B;YACA,OAAO3B,GAAAA,CAAIC,OAAO,CAACC,KAAK;AAC1B;AACF,KAAA;AACF;;;;"}

package/dist/middlewares/compression.d.ts

@@ -0,0 +1,5 @@
+import compress from 'koa-compress';
+import type { Core } from '@strapi/types';
+export type Config = compress.CompressOptions;
+export declare const compression: Core.MiddlewareFactory<Config>;
+//# sourceMappingURL=compression.d.ts.map

package/dist/middlewares/compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../src/middlewares/compression.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,cAAc,CAAC;AACpC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC;AAE9C,eAAO,MAAM,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAgC,CAAC"}

package/dist/middlewares/compression.js

@@ -0,0 +1,8 @@
+'use strict';
+
+var compress = require('koa-compress');
+
+const compression = (config)=>compress(config);
+
+exports.compression = compression;
+//# sourceMappingURL=compression.js.map

package/dist/middlewares/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sources":["../../src/middlewares/compression.ts"],"sourcesContent":["import compress from 'koa-compress';\nimport type { Core } from '@strapi/types';\n\nexport type Config = compress.CompressOptions;\n\nexport const compression: Core.MiddlewareFactory<Config> = (config) => compress(config);\n"],"names":["compression","config","compress"],"mappings":";;;;AAKaA,MAAAA,WAAAA,GAA8C,CAACC,MAAAA,GAAWC,SAASD,MAAQ;;;;"}

package/dist/middlewares/compression.mjs

@@ -0,0 +1,6 @@
+import compress from 'koa-compress';
+
+const compression = (config)=>compress(config);
+
+export { compression };
+//# sourceMappingURL=compression.mjs.map

package/dist/middlewares/compression.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.mjs","sources":["../../src/middlewares/compression.ts"],"sourcesContent":["import compress from 'koa-compress';\nimport type { Core } from '@strapi/types';\n\nexport type Config = compress.CompressOptions;\n\nexport const compression: Core.MiddlewareFactory<Config> = (config) => compress(config);\n"],"names":["compression","config","compress"],"mappings":";;AAKaA,MAAAA,WAAAA,GAA8C,CAACC,MAAAA,GAAWC,SAASD,MAAQ;;;;"}

package/dist/middlewares/cors.d.ts

@@ -0,0 +1,21 @@
+import type { Core } from '@strapi/types';
+export type Config = {
+    enabled?: boolean;
+    origin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>);
+    expose?: string | string[];
+    maxAge?: number;
+    credentials?: boolean;
+    methods?: string | string[];
+    headers?: string | string[];
+    keepHeadersOnError?: boolean;
+};
+/**
+ * Determines if a request origin is allowed based on the configured origin list
+ * @param requestOrigin - The origin from the request header
+ * @param configuredOrigin - The origin configuration (string, array, or function)
+ * @param ctx - The Koa context (for function-based origin)
+ * @returns The allowed origin string or empty string if blocked
+ */
+export declare const matchOrigin: (requestOrigin: string | undefined, configuredOrigin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>), ctx?: any) => Promise<string>;
+export declare const cors: Core.MiddlewareFactory<Config>;
+//# sourceMappingURL=cors.d.ts.map

package/dist/middlewares/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middlewares/cors.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,kBACP,MAAM,GAAG,SAAS,oBAE7B,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,EAAE,GAAG,QAAQ,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,QAC5D,GAAG,KACR,QAAQ,MAAM,CAgChB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CA0B/C,CAAC"}

package/dist/middlewares/cors.js

@@ -0,0 +1,86 @@
+'use strict';
+
+var koaCors = require('@koa/cors');
+
+const defaults = {
+    origin: '*',
+    maxAge: 31536000,
+    credentials: true,
+    methods: [
+        'GET',
+        'POST',
+        'PUT',
+        'PATCH',
+        'DELETE',
+        'HEAD',
+        'OPTIONS'
+    ],
+    headers: [
+        'Content-Type',
+        'Authorization',
+        'Origin',
+        'Accept'
+    ],
+    keepHeadersOnError: false
+};
+/**
+ * Determines if a request origin is allowed based on the configured origin list
+ * @param requestOrigin - The origin from the request header
+ * @param configuredOrigin - The origin configuration (string, array, or function)
+ * @param ctx - The Koa context (for function-based origin)
+ * @returns The allowed origin string or empty string if blocked
+ */ const matchOrigin = async (requestOrigin, configuredOrigin, ctx)=>{
+    if (!requestOrigin) {
+        return '*';
+    }
+    let originList;
+    if (typeof configuredOrigin === 'function') {
+        originList = await configuredOrigin(ctx);
+    } else {
+        originList = configuredOrigin;
+    }
+    // Normalize originList into an array
+    let normalizedOrigins;
+    if (Array.isArray(originList)) {
+        normalizedOrigins = originList;
+    } else if (originList === undefined || originList === null) {
+        // Handle undefined/null - treat as wildcard
+        normalizedOrigins = [
+            '*'
+        ];
+    } else {
+        // Handle comma-separated string of origins
+        normalizedOrigins = originList.split(',').map((origin)=>origin.trim());
+    }
+    // Check if wildcard is in the normalized origins
+    if (normalizedOrigins.includes('*')) {
+        return requestOrigin;
+    }
+    // Check if request origin is in the normalized origins
+    return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';
+};
+const cors = (config)=>{
+    const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {
+        ...defaults,
+        ...config
+    };
+    if (config.enabled !== undefined) {
+        strapi.log.warn('The strapi::cors middleware no longer supports the `enabled` option. Using it' + ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' + ' the exported array in config/middleware.js');
+    }
+    return koaCors({
+        async origin (ctx) {
+            const requestOrigin = ctx.get('Origin');
+            return matchOrigin(requestOrigin, origin, ctx);
+        },
+        exposeHeaders: expose,
+        maxAge,
+        credentials,
+        allowMethods: methods,
+        allowHeaders: headers,
+        keepHeadersOnError
+    });
+};
+
+exports.cors = cors;
+exports.matchOrigin = matchOrigin;
+//# sourceMappingURL=cors.js.map

package/dist/middlewares/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sources":["../../src/middlewares/cors.ts"],"sourcesContent":["import koaCors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\n\nexport type Config = {\n  enabled?: boolean;\n  origin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>);\n  expose?: string | string[];\n  maxAge?: number;\n  credentials?: boolean;\n  methods?: string | string[];\n  headers?: string | string[];\n  keepHeadersOnError?: boolean;\n};\n\nconst defaults: Config = {\n  origin: '*',\n  maxAge: 31536000,\n  credentials: true,\n  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],\n  headers: ['Content-Type', 'Authorization', 'Origin', 'Accept'],\n  keepHeadersOnError: false,\n};\n\n/**\n * Determines if a request origin is allowed based on the configured origin list\n * @param requestOrigin - The origin from the request header\n * @param configuredOrigin - The origin configuration (string, array, or function)\n * @param ctx - The Koa context (for function-based origin)\n * @returns The allowed origin string or empty string if blocked\n */\nexport const matchOrigin = async (\n  requestOrigin: string | undefined,\n  configuredOrigin:\n    | string\n    | string[]\n    | ((ctx: any) => string | string[] | Promise<string | string[]>),\n  ctx?: any\n): Promise<string> => {\n  if (!requestOrigin) {\n    return '*';\n  }\n\n  let originList: string | string[];\n\n  if (typeof configuredOrigin === 'function') {\n    originList = await configuredOrigin(ctx);\n  } else {\n    originList = configuredOrigin;\n  }\n\n  // Normalize originList into an array\n  let normalizedOrigins: string[];\n  if (Array.isArray(originList)) {\n    normalizedOrigins = originList;\n  } else if (originList === undefined || originList === null) {\n    // Handle undefined/null - treat as wildcard\n    normalizedOrigins = ['*'];\n  } else {\n    // Handle comma-separated string of origins\n    normalizedOrigins = originList.split(',').map((origin) => origin.trim());\n  }\n\n  // Check if wildcard is in the normalized origins\n  if (normalizedOrigins.includes('*')) {\n    return requestOrigin;\n  }\n\n  // Check if request origin is in the normalized origins\n  return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';\n};\n\nexport const cors: Core.MiddlewareFactory<Config> = (config) => {\n  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {\n    ...defaults,\n    ...config,\n  };\n\n  if (config.enabled !== undefined) {\n    strapi.log.warn(\n      'The strapi::cors middleware no longer supports the `enabled` option. Using it' +\n        ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' +\n        ' the exported array in config/middleware.js'\n    );\n  }\n\n  return koaCors({\n    async origin(ctx) {\n      const requestOrigin = ctx.get('Origin');\n      return matchOrigin(requestOrigin, origin, ctx);\n    },\n    exposeHeaders: expose,\n    maxAge,\n    credentials,\n    allowMethods: methods,\n    allowHeaders: headers,\n    keepHeadersOnError,\n  });\n};\n"],"names":["defaults","origin","maxAge","credentials","methods","headers","keepHeadersOnError","matchOrigin","requestOrigin","configuredOrigin","ctx","originList","normalizedOrigins","Array","isArray","undefined","split","map","trim","includes","cors","config","expose","enabled","strapi","log","warn","koaCors","get","exposeHeaders","allowMethods","allowHeaders"],"mappings":";;;;AAeA,MAAMA,QAAmB,GAAA;IACvBC,MAAQ,EAAA,GAAA;IACRC,MAAQ,EAAA,QAAA;IACRC,WAAa,EAAA,IAAA;IACbC,OAAS,EAAA;AAAC,QAAA,KAAA;AAAO,QAAA,MAAA;AAAQ,QAAA,KAAA;AAAO,QAAA,OAAA;AAAS,QAAA,QAAA;AAAU,QAAA,MAAA;AAAQ,QAAA;AAAU,KAAA;IACrEC,OAAS,EAAA;AAAC,QAAA,cAAA;AAAgB,QAAA,eAAA;AAAiB,QAAA,QAAA;AAAU,QAAA;AAAS,KAAA;IAC9DC,kBAAoB,EAAA;AACtB,CAAA;AAEA;;;;;;AAMC,IACM,MAAMC,WAAc,GAAA,OACzBC,eACAC,gBAIAC,EAAAA,GAAAA,GAAAA;AAEA,IAAA,IAAI,CAACF,aAAe,EAAA;QAClB,OAAO,GAAA;AACT;IAEA,IAAIG,UAAAA;IAEJ,IAAI,OAAOF,qBAAqB,UAAY,EAAA;AAC1CE,QAAAA,UAAAA,GAAa,MAAMF,gBAAiBC,CAAAA,GAAAA,CAAAA;KAC/B,MAAA;QACLC,UAAaF,GAAAA,gBAAAA;AACf;;IAGA,IAAIG,iBAAAA;IACJ,IAAIC,KAAAA,CAAMC,OAAO,CAACH,UAAa,CAAA,EAAA;QAC7BC,iBAAoBD,GAAAA,UAAAA;AACtB,KAAA,MAAO,IAAIA,UAAAA,KAAeI,SAAaJ,IAAAA,UAAAA,KAAe,IAAM,EAAA;;QAE1DC,iBAAoB,GAAA;AAAC,YAAA;AAAI,SAAA;KACpB,MAAA;;QAELA,iBAAoBD,GAAAA,UAAAA,CAAWK,KAAK,CAAC,GAAA,CAAA,CAAKC,GAAG,CAAC,CAAChB,MAAWA,GAAAA,MAAAA,CAAOiB,IAAI,EAAA,CAAA;AACvE;;IAGA,IAAIN,iBAAAA,CAAkBO,QAAQ,CAAC,GAAM,CAAA,EAAA;QACnC,OAAOX,aAAAA;AACT;;AAGA,IAAA,OAAOI,iBAAkBO,CAAAA,QAAQ,CAACX,aAAAA,CAAAA,GAAiBA,aAAgB,GAAA,EAAA;AACrE;AAEO,MAAMY,OAAuC,CAACC,MAAAA,GAAAA;AACnD,IAAA,MAAM,EAAEpB,MAAM,EAAEqB,MAAM,EAAEpB,MAAM,EAAEC,WAAW,EAAEC,OAAO,EAAEC,OAAO,EAAEC,kBAAkB,EAAE,GAAG;AACpF,QAAA,GAAGN,QAAQ;AACX,QAAA,GAAGqB;AACL,KAAA;IAEA,IAAIA,MAAAA,CAAOE,OAAO,KAAKR,SAAW,EAAA;AAChCS,QAAAA,MAAAA,CAAOC,GAAG,CAACC,IAAI,CACb,kFACE,wGACA,GAAA,6CAAA,CAAA;AAEN;AAEA,IAAA,OAAOC,OAAQ,CAAA;AACb,QAAA,MAAM1B,QAAOS,GAAG,EAAA;YACd,MAAMF,aAAAA,GAAgBE,GAAIkB,CAAAA,GAAG,CAAC,QAAA,CAAA;YAC9B,OAAOrB,WAAAA,CAAYC,eAAeP,MAAQS,EAAAA,GAAAA,CAAAA;AAC5C,SAAA;QACAmB,aAAeP,EAAAA,MAAAA;AACfpB,QAAAA,MAAAA;AACAC,QAAAA,WAAAA;QACA2B,YAAc1B,EAAAA,OAAAA;QACd2B,YAAc1B,EAAAA,OAAAA;AACdC,QAAAA;AACF,KAAA,CAAA;AACF;;;;;"}