@strapi/core 0.0.0-experimental.6dbac0c205b0f8495781db5706c18cac1a62e62b → 0.0.0-experimental.6dcc00cde430a8f928a482d5c989396386c42f54

package/dist/middlewares/cors.d.ts

@@ -1,7 +1,7 @@
-import type { Common } from '@strapi/types';
+import type { Core } from '@strapi/types';
 export type Config = {
     enabled?: boolean;
-    origin: string | string[] | ((ctx: any) => string | string[]);
+    origin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>);
     expose?: string | string[];
     maxAge?: number;
     credentials?: boolean;
@@ -9,5 +9,13 @@ export type Config = {
     headers?: string | string[];
     keepHeadersOnError?: boolean;
 };
-export declare const cors: Common.MiddlewareFactory<Config>;
+/**
+ * Determines if a request origin is allowed based on the configured origin list
+ * @param requestOrigin - The origin from the request header
+ * @param configuredOrigin - The origin configuration (string, array, or function)
+ * @param ctx - The Koa context (for function-based origin)
+ * @returns The allowed origin string or empty string if blocked
+ */
+export declare const matchOrigin: (requestOrigin: string | undefined, configuredOrigin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>), ctx?: any) => Promise<string>;
+export declare const cors: Core.MiddlewareFactory<Config>;
 //# sourceMappingURL=cors.d.ts.map

package/dist/middlewares/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middlewares/cors.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,MAAM,GAAG;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAWF,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CA2CjD,CAAC"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middlewares/cors.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAWF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,kBACP,MAAM,GAAG,SAAS,oBAE7B,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,EAAE,GAAG,QAAQ,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,QAC5D,GAAG,KACR,QAAQ,MAAM,CAgChB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CA0B/C,CAAC"}

package/dist/middlewares/cors.js

@@ -1,51 +1,86 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const koaCors = require("@koa/cors");
-const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
-const koaCors__default = /* @__PURE__ */ _interopDefault(koaCors);
+'use strict';
+
+var koaCors = require('@koa/cors');
+
 const defaults = {
-  origin: "*",
-  maxAge: 31536e3,
-  credentials: true,
-  methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"],
-  headers: ["Content-Type", "Authorization", "Origin", "Accept"],
-  keepHeadersOnError: false
+    origin: '*',
+    maxAge: 31536000,
+    credentials: true,
+    methods: [
+        'GET',
+        'POST',
+        'PUT',
+        'PATCH',
+        'DELETE',
+        'HEAD',
+        'OPTIONS'
+    ],
+    headers: [
+        'Content-Type',
+        'Authorization',
+        'Origin',
+        'Accept'
+    ],
+    keepHeadersOnError: false
 };
-const cors = (config) => {
-  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {
-    ...defaults,
-    ...config
-  };
-  if (config.enabled !== void 0) {
-    strapi.log.warn(
-      "The strapi::cors middleware no longer supports the `enabled` option. Using it to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from the exported array in config/middleware.js"
-    );
-  }
-  return koaCors__default.default({
-    async origin(ctx) {
-      let originList;
-      if (typeof origin === "function") {
-        originList = await origin(ctx);
-      } else {
-        originList = origin;
-      }
-      const whitelist = Array.isArray(originList) ? originList : originList.split(/\s*,\s*/);
-      const requestOrigin = ctx.headers.origin ?? "";
-      if (whitelist.includes("*")) {
-        return credentials ? requestOrigin : "*";
-      }
-      if (!whitelist.includes(requestOrigin)) {
-        return ctx.throw(`${requestOrigin} is not a valid origin`);
-      }
-      return requestOrigin;
-    },
-    exposeHeaders: expose,
-    maxAge,
-    credentials,
-    allowMethods: methods,
-    allowHeaders: headers,
-    keepHeadersOnError
-  });
+/**
+ * Determines if a request origin is allowed based on the configured origin list
+ * @param requestOrigin - The origin from the request header
+ * @param configuredOrigin - The origin configuration (string, array, or function)
+ * @param ctx - The Koa context (for function-based origin)
+ * @returns The allowed origin string or empty string if blocked
+ */ const matchOrigin = async (requestOrigin, configuredOrigin, ctx)=>{
+    if (!requestOrigin) {
+        return '*';
+    }
+    let originList;
+    if (typeof configuredOrigin === 'function') {
+        originList = await configuredOrigin(ctx);
+    } else {
+        originList = configuredOrigin;
+    }
+    // Normalize originList into an array
+    let normalizedOrigins;
+    if (Array.isArray(originList)) {
+        normalizedOrigins = originList;
+    } else if (originList === undefined || originList === null) {
+        // Handle undefined/null - treat as wildcard
+        normalizedOrigins = [
+            '*'
+        ];
+    } else {
+        // Handle comma-separated string of origins
+        normalizedOrigins = originList.split(',').map((origin)=>origin.trim());
+    }
+    // Check if wildcard is in the normalized origins
+    if (normalizedOrigins.includes('*')) {
+        return requestOrigin;
+    }
+    // Check if request origin is in the normalized origins
+    return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';
 };
+const cors = (config)=>{
+    const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {
+        ...defaults,
+        ...config
+    };
+    if (config.enabled !== undefined) {
+        strapi.log.warn('The strapi::cors middleware no longer supports the `enabled` option. Using it' + ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' + ' the exported array in config/middleware.js');
+    }
+    return koaCors({
+        async origin (ctx) {
+            const requestOrigin = ctx.get('Origin');
+            return matchOrigin(requestOrigin, origin, ctx);
+        },
+        exposeHeaders: expose,
+        maxAge,
+        credentials,
+        allowMethods: methods,
+        allowHeaders: headers,
+        keepHeadersOnError
+    });
+};
+
 exports.cors = cors;
+exports.matchOrigin = matchOrigin;
 //# sourceMappingURL=cors.js.map

package/dist/middlewares/cors.js.map

@@ -1 +1 @@
-{"version":3,"file":"cors.js","sources":["../../src/middlewares/cors.ts"],"sourcesContent":["import koaCors from '@koa/cors';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = {\n  enabled?: boolean;\n  origin: string | string[] | ((ctx: any) => string | string[]);\n  expose?: string | string[];\n  maxAge?: number;\n  credentials?: boolean;\n  methods?: string | string[];\n  headers?: string | string[];\n  keepHeadersOnError?: boolean;\n};\n\nconst defaults: Config = {\n  origin: '*',\n  maxAge: 31536000,\n  credentials: true,\n  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],\n  headers: ['Content-Type', 'Authorization', 'Origin', 'Accept'],\n  keepHeadersOnError: false,\n};\n\nexport const cors: Common.MiddlewareFactory<Config> = (config) => {\n  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {\n    ...defaults,\n    ...config,\n  };\n\n  if (config.enabled !== undefined) {\n    strapi.log.warn(\n      'The strapi::cors middleware no longer supports the `enabled` option. Using it' +\n        ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' +\n        ' the exported array in config/middleware.js'\n    );\n  }\n\n  return koaCors({\n    async origin(ctx) {\n      let originList: string | string[];\n\n      if (typeof origin === 'function') {\n        originList = await origin(ctx);\n      } else {\n        originList = origin;\n      }\n\n      const whitelist = Array.isArray(originList) ? originList : originList.split(/\\s*,\\s*/);\n\n      const requestOrigin = ctx.headers.origin ?? '';\n      if (whitelist.includes('*')) {\n        return credentials ? requestOrigin : '*';\n      }\n\n      if (!whitelist.includes(requestOrigin)) {\n        return ctx.throw(`${requestOrigin} is not a valid origin`);\n      }\n      return requestOrigin;\n    },\n    exposeHeaders: expose,\n    maxAge,\n    credentials,\n    allowMethods: methods,\n    allowHeaders: headers,\n    keepHeadersOnError,\n  });\n};\n"],"names":["koaCors"],"mappings":";;;;;AAeA,MAAM,WAAmB;AAAA,EACvB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,SAAS,CAAC,OAAO,QAAQ,OAAO,SAAS,UAAU,QAAQ,SAAS;AAAA,EACpE,SAAS,CAAC,gBAAgB,iBAAiB,UAAU,QAAQ;AAAA,EAC7D,oBAAoB;AACtB;AAEa,MAAA,OAAyC,CAAC,WAAW;AAC1D,QAAA,EAAE,QAAQ,QAAQ,QAAQ,aAAa,SAAS,SAAS,uBAAuB;AAAA,IACpF,GAAG;AAAA,IACH,GAAG;AAAA,EAAA;AAGD,MAAA,OAAO,YAAY,QAAW;AAChC,WAAO,IAAI;AAAA,MACT;AAAA,IAAA;AAAA,EAIJ;AAEA,SAAOA,yBAAQ;AAAA,IACb,MAAM,OAAO,KAAK;AACZ,UAAA;AAEA,UAAA,OAAO,WAAW,YAAY;AACnB,qBAAA,MAAM,OAAO,GAAG;AAAA,MAAA,OACxB;AACQ,qBAAA;AAAA,MACf;AAEM,YAAA,YAAY,MAAM,QAAQ,UAAU,IAAI,aAAa,WAAW,MAAM,SAAS;AAE/E,YAAA,gBAAgB,IAAI,QAAQ,UAAU;AACxC,UAAA,UAAU,SAAS,GAAG,GAAG;AAC3B,eAAO,cAAc,gBAAgB;AAAA,MACvC;AAEA,UAAI,CAAC,UAAU,SAAS,aAAa,GAAG;AACtC,eAAO,IAAI,MAAM,GAAG,aAAa,wBAAwB;AAAA,MAC3D;AACO,aAAA;AAAA,IACT;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,cAAc;AAAA,IACd;AAAA,EAAA,CACD;AACH;;"}
+{"version":3,"file":"cors.js","sources":["../../src/middlewares/cors.ts"],"sourcesContent":["import koaCors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\n\nexport type Config = {\n  enabled?: boolean;\n  origin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>);\n  expose?: string | string[];\n  maxAge?: number;\n  credentials?: boolean;\n  methods?: string | string[];\n  headers?: string | string[];\n  keepHeadersOnError?: boolean;\n};\n\nconst defaults: Config = {\n  origin: '*',\n  maxAge: 31536000,\n  credentials: true,\n  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],\n  headers: ['Content-Type', 'Authorization', 'Origin', 'Accept'],\n  keepHeadersOnError: false,\n};\n\n/**\n * Determines if a request origin is allowed based on the configured origin list\n * @param requestOrigin - The origin from the request header\n * @param configuredOrigin - The origin configuration (string, array, or function)\n * @param ctx - The Koa context (for function-based origin)\n * @returns The allowed origin string or empty string if blocked\n */\nexport const matchOrigin = async (\n  requestOrigin: string | undefined,\n  configuredOrigin:\n    | string\n    | string[]\n    | ((ctx: any) => string | string[] | Promise<string | string[]>),\n  ctx?: any\n): Promise<string> => {\n  if (!requestOrigin) {\n    return '*';\n  }\n\n  let originList: string | string[];\n\n  if (typeof configuredOrigin === 'function') {\n    originList = await configuredOrigin(ctx);\n  } else {\n    originList = configuredOrigin;\n  }\n\n  // Normalize originList into an array\n  let normalizedOrigins: string[];\n  if (Array.isArray(originList)) {\n    normalizedOrigins = originList;\n  } else if (originList === undefined || originList === null) {\n    // Handle undefined/null - treat as wildcard\n    normalizedOrigins = ['*'];\n  } else {\n    // Handle comma-separated string of origins\n    normalizedOrigins = originList.split(',').map((origin) => origin.trim());\n  }\n\n  // Check if wildcard is in the normalized origins\n  if (normalizedOrigins.includes('*')) {\n    return requestOrigin;\n  }\n\n  // Check if request origin is in the normalized origins\n  return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';\n};\n\nexport const cors: Core.MiddlewareFactory<Config> = (config) => {\n  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {\n    ...defaults,\n    ...config,\n  };\n\n  if (config.enabled !== undefined) {\n    strapi.log.warn(\n      'The strapi::cors middleware no longer supports the `enabled` option. Using it' +\n        ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' +\n        ' the exported array in config/middleware.js'\n    );\n  }\n\n  return koaCors({\n    async origin(ctx) {\n      const requestOrigin = ctx.get('Origin');\n      return matchOrigin(requestOrigin, origin, ctx);\n    },\n    exposeHeaders: expose,\n    maxAge,\n    credentials,\n    allowMethods: methods,\n    allowHeaders: headers,\n    keepHeadersOnError,\n  });\n};\n"],"names":["defaults","origin","maxAge","credentials","methods","headers","keepHeadersOnError","matchOrigin","requestOrigin","configuredOrigin","ctx","originList","normalizedOrigins","Array","isArray","undefined","split","map","trim","includes","cors","config","expose","enabled","strapi","log","warn","koaCors","get","exposeHeaders","allowMethods","allowHeaders"],"mappings":";;;;AAeA,MAAMA,QAAmB,GAAA;IACvBC,MAAQ,EAAA,GAAA;IACRC,MAAQ,EAAA,QAAA;IACRC,WAAa,EAAA,IAAA;IACbC,OAAS,EAAA;AAAC,QAAA,KAAA;AAAO,QAAA,MAAA;AAAQ,QAAA,KAAA;AAAO,QAAA,OAAA;AAAS,QAAA,QAAA;AAAU,QAAA,MAAA;AAAQ,QAAA;AAAU,KAAA;IACrEC,OAAS,EAAA;AAAC,QAAA,cAAA;AAAgB,QAAA,eAAA;AAAiB,QAAA,QAAA;AAAU,QAAA;AAAS,KAAA;IAC9DC,kBAAoB,EAAA;AACtB,CAAA;AAEA;;;;;;AAMC,IACM,MAAMC,WAAc,GAAA,OACzBC,eACAC,gBAIAC,EAAAA,GAAAA,GAAAA;AAEA,IAAA,IAAI,CAACF,aAAe,EAAA;QAClB,OAAO,GAAA;AACT;IAEA,IAAIG,UAAAA;IAEJ,IAAI,OAAOF,qBAAqB,UAAY,EAAA;AAC1CE,QAAAA,UAAAA,GAAa,MAAMF,gBAAiBC,CAAAA,GAAAA,CAAAA;KAC/B,MAAA;QACLC,UAAaF,GAAAA,gBAAAA;AACf;;IAGA,IAAIG,iBAAAA;IACJ,IAAIC,KAAAA,CAAMC,OAAO,CAACH,UAAa,CAAA,EAAA;QAC7BC,iBAAoBD,GAAAA,UAAAA;AACtB,KAAA,MAAO,IAAIA,UAAAA,KAAeI,SAAaJ,IAAAA,UAAAA,KAAe,IAAM,EAAA;;QAE1DC,iBAAoB,GAAA;AAAC,YAAA;AAAI,SAAA;KACpB,MAAA;;QAELA,iBAAoBD,GAAAA,UAAAA,CAAWK,KAAK,CAAC,GAAA,CAAA,CAAKC,GAAG,CAAC,CAAChB,MAAWA,GAAAA,MAAAA,CAAOiB,IAAI,EAAA,CAAA;AACvE;;IAGA,IAAIN,iBAAAA,CAAkBO,QAAQ,CAAC,GAAM,CAAA,EAAA;QACnC,OAAOX,aAAAA;AACT;;AAGA,IAAA,OAAOI,iBAAkBO,CAAAA,QAAQ,CAACX,aAAAA,CAAAA,GAAiBA,aAAgB,GAAA,EAAA;AACrE;AAEO,MAAMY,OAAuC,CAACC,MAAAA,GAAAA;AACnD,IAAA,MAAM,EAAEpB,MAAM,EAAEqB,MAAM,EAAEpB,MAAM,EAAEC,WAAW,EAAEC,OAAO,EAAEC,OAAO,EAAEC,kBAAkB,EAAE,GAAG;AACpF,QAAA,GAAGN,QAAQ;AACX,QAAA,GAAGqB;AACL,KAAA;IAEA,IAAIA,MAAAA,CAAOE,OAAO,KAAKR,SAAW,EAAA;AAChCS,QAAAA,MAAAA,CAAOC,GAAG,CAACC,IAAI,CACb,kFACE,wGACA,GAAA,6CAAA,CAAA;AAEN;AAEA,IAAA,OAAOC,OAAQ,CAAA;AACb,QAAA,MAAM1B,QAAOS,GAAG,EAAA;YACd,MAAMF,aAAAA,GAAgBE,GAAIkB,CAAAA,GAAG,CAAC,QAAA,CAAA;YAC9B,OAAOrB,WAAAA,CAAYC,eAAeP,MAAQS,EAAAA,GAAAA,CAAAA;AAC5C,SAAA;QACAmB,aAAeP,EAAAA,MAAAA;AACfpB,QAAAA,MAAAA;AACAC,QAAAA,WAAAA;QACA2B,YAAc1B,EAAAA,OAAAA;QACd2B,YAAc1B,EAAAA,OAAAA;AACdC,QAAAA;AACF,KAAA,CAAA;AACF;;;;;"}

package/dist/middlewares/cors.mjs

@@ -1,49 +1,83 @@
-import koaCors from "@koa/cors";
+import koaCors from '@koa/cors';
+
 const defaults = {
-  origin: "*",
-  maxAge: 31536e3,
-  credentials: true,
-  methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"],
-  headers: ["Content-Type", "Authorization", "Origin", "Accept"],
-  keepHeadersOnError: false
+    origin: '*',
+    maxAge: 31536000,
+    credentials: true,
+    methods: [
+        'GET',
+        'POST',
+        'PUT',
+        'PATCH',
+        'DELETE',
+        'HEAD',
+        'OPTIONS'
+    ],
+    headers: [
+        'Content-Type',
+        'Authorization',
+        'Origin',
+        'Accept'
+    ],
+    keepHeadersOnError: false
 };
-const cors = (config) => {
-  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {
-    ...defaults,
-    ...config
-  };
-  if (config.enabled !== void 0) {
-    strapi.log.warn(
-      "The strapi::cors middleware no longer supports the `enabled` option. Using it to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from the exported array in config/middleware.js"
-    );
-  }
-  return koaCors({
-    async origin(ctx) {
-      let originList;
-      if (typeof origin === "function") {
-        originList = await origin(ctx);
-      } else {
-        originList = origin;
-      }
-      const whitelist = Array.isArray(originList) ? originList : originList.split(/\s*,\s*/);
-      const requestOrigin = ctx.headers.origin ?? "";
-      if (whitelist.includes("*")) {
-        return credentials ? requestOrigin : "*";
-      }
-      if (!whitelist.includes(requestOrigin)) {
-        return ctx.throw(`${requestOrigin} is not a valid origin`);
-      }
-      return requestOrigin;
-    },
-    exposeHeaders: expose,
-    maxAge,
-    credentials,
-    allowMethods: methods,
-    allowHeaders: headers,
-    keepHeadersOnError
-  });
+/**
+ * Determines if a request origin is allowed based on the configured origin list
+ * @param requestOrigin - The origin from the request header
+ * @param configuredOrigin - The origin configuration (string, array, or function)
+ * @param ctx - The Koa context (for function-based origin)
+ * @returns The allowed origin string or empty string if blocked
+ */ const matchOrigin = async (requestOrigin, configuredOrigin, ctx)=>{
+    if (!requestOrigin) {
+        return '*';
+    }
+    let originList;
+    if (typeof configuredOrigin === 'function') {
+        originList = await configuredOrigin(ctx);
+    } else {
+        originList = configuredOrigin;
+    }
+    // Normalize originList into an array
+    let normalizedOrigins;
+    if (Array.isArray(originList)) {
+        normalizedOrigins = originList;
+    } else if (originList === undefined || originList === null) {
+        // Handle undefined/null - treat as wildcard
+        normalizedOrigins = [
+            '*'
+        ];
+    } else {
+        // Handle comma-separated string of origins
+        normalizedOrigins = originList.split(',').map((origin)=>origin.trim());
+    }
+    // Check if wildcard is in the normalized origins
+    if (normalizedOrigins.includes('*')) {
+        return requestOrigin;
+    }
+    // Check if request origin is in the normalized origins
+    return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';
 };
-export {
-  cors
+const cors = (config)=>{
+    const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {
+        ...defaults,
+        ...config
+    };
+    if (config.enabled !== undefined) {
+        strapi.log.warn('The strapi::cors middleware no longer supports the `enabled` option. Using it' + ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' + ' the exported array in config/middleware.js');
+    }
+    return koaCors({
+        async origin (ctx) {
+            const requestOrigin = ctx.get('Origin');
+            return matchOrigin(requestOrigin, origin, ctx);
+        },
+        exposeHeaders: expose,
+        maxAge,
+        credentials,
+        allowMethods: methods,
+        allowHeaders: headers,
+        keepHeadersOnError
+    });
 };
+
+export { cors, matchOrigin };
 //# sourceMappingURL=cors.mjs.map

package/dist/middlewares/cors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cors.mjs","sources":["../../src/middlewares/cors.ts"],"sourcesContent":["import koaCors from '@koa/cors';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = {\n  enabled?: boolean;\n  origin: string | string[] | ((ctx: any) => string | string[]);\n  expose?: string | string[];\n  maxAge?: number;\n  credentials?: boolean;\n  methods?: string | string[];\n  headers?: string | string[];\n  keepHeadersOnError?: boolean;\n};\n\nconst defaults: Config = {\n  origin: '*',\n  maxAge: 31536000,\n  credentials: true,\n  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],\n  headers: ['Content-Type', 'Authorization', 'Origin', 'Accept'],\n  keepHeadersOnError: false,\n};\n\nexport const cors: Common.MiddlewareFactory<Config> = (config) => {\n  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {\n    ...defaults,\n    ...config,\n  };\n\n  if (config.enabled !== undefined) {\n    strapi.log.warn(\n      'The strapi::cors middleware no longer supports the `enabled` option. Using it' +\n        ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' +\n        ' the exported array in config/middleware.js'\n    );\n  }\n\n  return koaCors({\n    async origin(ctx) {\n      let originList: string | string[];\n\n      if (typeof origin === 'function') {\n        originList = await origin(ctx);\n      } else {\n        originList = origin;\n      }\n\n      const whitelist = Array.isArray(originList) ? originList : originList.split(/\\s*,\\s*/);\n\n      const requestOrigin = ctx.headers.origin ?? '';\n      if (whitelist.includes('*')) {\n        return credentials ? requestOrigin : '*';\n      }\n\n      if (!whitelist.includes(requestOrigin)) {\n        return ctx.throw(`${requestOrigin} is not a valid origin`);\n      }\n      return requestOrigin;\n    },\n    exposeHeaders: expose,\n    maxAge,\n    credentials,\n    allowMethods: methods,\n    allowHeaders: headers,\n    keepHeadersOnError,\n  });\n};\n"],"names":[],"mappings":";AAeA,MAAM,WAAmB;AAAA,EACvB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,SAAS,CAAC,OAAO,QAAQ,OAAO,SAAS,UAAU,QAAQ,SAAS;AAAA,EACpE,SAAS,CAAC,gBAAgB,iBAAiB,UAAU,QAAQ;AAAA,EAC7D,oBAAoB;AACtB;AAEa,MAAA,OAAyC,CAAC,WAAW;AAC1D,QAAA,EAAE,QAAQ,QAAQ,QAAQ,aAAa,SAAS,SAAS,uBAAuB;AAAA,IACpF,GAAG;AAAA,IACH,GAAG;AAAA,EAAA;AAGD,MAAA,OAAO,YAAY,QAAW;AAChC,WAAO,IAAI;AAAA,MACT;AAAA,IAAA;AAAA,EAIJ;AAEA,SAAO,QAAQ;AAAA,IACb,MAAM,OAAO,KAAK;AACZ,UAAA;AAEA,UAAA,OAAO,WAAW,YAAY;AACnB,qBAAA,MAAM,OAAO,GAAG;AAAA,MAAA,OACxB;AACQ,qBAAA;AAAA,MACf;AAEM,YAAA,YAAY,MAAM,QAAQ,UAAU,IAAI,aAAa,WAAW,MAAM,SAAS;AAE/E,YAAA,gBAAgB,IAAI,QAAQ,UAAU;AACxC,UAAA,UAAU,SAAS,GAAG,GAAG;AAC3B,eAAO,cAAc,gBAAgB;AAAA,MACvC;AAEA,UAAI,CAAC,UAAU,SAAS,aAAa,GAAG;AACtC,eAAO,IAAI,MAAM,GAAG,aAAa,wBAAwB;AAAA,MAC3D;AACO,aAAA;AAAA,IACT;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,cAAc;AAAA,IACd;AAAA,EAAA,CACD;AACH;"}
+{"version":3,"file":"cors.mjs","sources":["../../src/middlewares/cors.ts"],"sourcesContent":["import koaCors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\n\nexport type Config = {\n  enabled?: boolean;\n  origin: string | string[] | ((ctx: any) => string | string[] | Promise<string | string[]>);\n  expose?: string | string[];\n  maxAge?: number;\n  credentials?: boolean;\n  methods?: string | string[];\n  headers?: string | string[];\n  keepHeadersOnError?: boolean;\n};\n\nconst defaults: Config = {\n  origin: '*',\n  maxAge: 31536000,\n  credentials: true,\n  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],\n  headers: ['Content-Type', 'Authorization', 'Origin', 'Accept'],\n  keepHeadersOnError: false,\n};\n\n/**\n * Determines if a request origin is allowed based on the configured origin list\n * @param requestOrigin - The origin from the request header\n * @param configuredOrigin - The origin configuration (string, array, or function)\n * @param ctx - The Koa context (for function-based origin)\n * @returns The allowed origin string or empty string if blocked\n */\nexport const matchOrigin = async (\n  requestOrigin: string | undefined,\n  configuredOrigin:\n    | string\n    | string[]\n    | ((ctx: any) => string | string[] | Promise<string | string[]>),\n  ctx?: any\n): Promise<string> => {\n  if (!requestOrigin) {\n    return '*';\n  }\n\n  let originList: string | string[];\n\n  if (typeof configuredOrigin === 'function') {\n    originList = await configuredOrigin(ctx);\n  } else {\n    originList = configuredOrigin;\n  }\n\n  // Normalize originList into an array\n  let normalizedOrigins: string[];\n  if (Array.isArray(originList)) {\n    normalizedOrigins = originList;\n  } else if (originList === undefined || originList === null) {\n    // Handle undefined/null - treat as wildcard\n    normalizedOrigins = ['*'];\n  } else {\n    // Handle comma-separated string of origins\n    normalizedOrigins = originList.split(',').map((origin) => origin.trim());\n  }\n\n  // Check if wildcard is in the normalized origins\n  if (normalizedOrigins.includes('*')) {\n    return requestOrigin;\n  }\n\n  // Check if request origin is in the normalized origins\n  return normalizedOrigins.includes(requestOrigin) ? requestOrigin : '';\n};\n\nexport const cors: Core.MiddlewareFactory<Config> = (config) => {\n  const { origin, expose, maxAge, credentials, methods, headers, keepHeadersOnError } = {\n    ...defaults,\n    ...config,\n  };\n\n  if (config.enabled !== undefined) {\n    strapi.log.warn(\n      'The strapi::cors middleware no longer supports the `enabled` option. Using it' +\n        ' to conditionally enable CORS might cause an insecure default. To disable strapi::cors, remove it from' +\n        ' the exported array in config/middleware.js'\n    );\n  }\n\n  return koaCors({\n    async origin(ctx) {\n      const requestOrigin = ctx.get('Origin');\n      return matchOrigin(requestOrigin, origin, ctx);\n    },\n    exposeHeaders: expose,\n    maxAge,\n    credentials,\n    allowMethods: methods,\n    allowHeaders: headers,\n    keepHeadersOnError,\n  });\n};\n"],"names":["defaults","origin","maxAge","credentials","methods","headers","keepHeadersOnError","matchOrigin","requestOrigin","configuredOrigin","ctx","originList","normalizedOrigins","Array","isArray","undefined","split","map","trim","includes","cors","config","expose","enabled","strapi","log","warn","koaCors","get","exposeHeaders","allowMethods","allowHeaders"],"mappings":";;AAeA,MAAMA,QAAmB,GAAA;IACvBC,MAAQ,EAAA,GAAA;IACRC,MAAQ,EAAA,QAAA;IACRC,WAAa,EAAA,IAAA;IACbC,OAAS,EAAA;AAAC,QAAA,KAAA;AAAO,QAAA,MAAA;AAAQ,QAAA,KAAA;AAAO,QAAA,OAAA;AAAS,QAAA,QAAA;AAAU,QAAA,MAAA;AAAQ,QAAA;AAAU,KAAA;IACrEC,OAAS,EAAA;AAAC,QAAA,cAAA;AAAgB,QAAA,eAAA;AAAiB,QAAA,QAAA;AAAU,QAAA;AAAS,KAAA;IAC9DC,kBAAoB,EAAA;AACtB,CAAA;AAEA;;;;;;AAMC,IACM,MAAMC,WAAc,GAAA,OACzBC,eACAC,gBAIAC,EAAAA,GAAAA,GAAAA;AAEA,IAAA,IAAI,CAACF,aAAe,EAAA;QAClB,OAAO,GAAA;AACT;IAEA,IAAIG,UAAAA;IAEJ,IAAI,OAAOF,qBAAqB,UAAY,EAAA;AAC1CE,QAAAA,UAAAA,GAAa,MAAMF,gBAAiBC,CAAAA,GAAAA,CAAAA;KAC/B,MAAA;QACLC,UAAaF,GAAAA,gBAAAA;AACf;;IAGA,IAAIG,iBAAAA;IACJ,IAAIC,KAAAA,CAAMC,OAAO,CAACH,UAAa,CAAA,EAAA;QAC7BC,iBAAoBD,GAAAA,UAAAA;AACtB,KAAA,MAAO,IAAIA,UAAAA,KAAeI,SAAaJ,IAAAA,UAAAA,KAAe,IAAM,EAAA;;QAE1DC,iBAAoB,GAAA;AAAC,YAAA;AAAI,SAAA;KACpB,MAAA;;QAELA,iBAAoBD,GAAAA,UAAAA,CAAWK,KAAK,CAAC,GAAA,CAAA,CAAKC,GAAG,CAAC,CAAChB,MAAWA,GAAAA,MAAAA,CAAOiB,IAAI,EAAA,CAAA;AACvE;;IAGA,IAAIN,iBAAAA,CAAkBO,QAAQ,CAAC,GAAM,CAAA,EAAA;QACnC,OAAOX,aAAAA;AACT;;AAGA,IAAA,OAAOI,iBAAkBO,CAAAA,QAAQ,CAACX,aAAAA,CAAAA,GAAiBA,aAAgB,GAAA,EAAA;AACrE;AAEO,MAAMY,OAAuC,CAACC,MAAAA,GAAAA;AACnD,IAAA,MAAM,EAAEpB,MAAM,EAAEqB,MAAM,EAAEpB,MAAM,EAAEC,WAAW,EAAEC,OAAO,EAAEC,OAAO,EAAEC,kBAAkB,EAAE,GAAG;AACpF,QAAA,GAAGN,QAAQ;AACX,QAAA,GAAGqB;AACL,KAAA;IAEA,IAAIA,MAAAA,CAAOE,OAAO,KAAKR,SAAW,EAAA;AAChCS,QAAAA,MAAAA,CAAOC,GAAG,CAACC,IAAI,CACb,kFACE,wGACA,GAAA,6CAAA,CAAA;AAEN;AAEA,IAAA,OAAOC,OAAQ,CAAA;AACb,QAAA,MAAM1B,QAAOS,GAAG,EAAA;YACd,MAAMF,aAAAA,GAAgBE,GAAIkB,CAAAA,GAAG,CAAC,QAAA,CAAA;YAC9B,OAAOrB,WAAAA,CAAYC,eAAeP,MAAQS,EAAAA,GAAAA,CAAAA;AAC5C,SAAA;QACAmB,aAAeP,EAAAA,MAAAA;AACfpB,QAAAA,MAAAA;AACAC,QAAAA,WAAAA;QACA2B,YAAc1B,EAAAA,OAAAA;QACd2B,YAAc1B,EAAAA,OAAAA;AACdC,QAAAA;AACF,KAAA,CAAA;AACF;;;;"}

package/dist/middlewares/errors.d.ts

@@ -1,4 +1,4 @@
-import type { Common } from '@strapi/types';
-declare const errorMiddleware: Common.MiddlewareFactory;
+import type { Core } from '@strapi/types';
+declare const errorMiddleware: Core.MiddlewareFactory;
 export { errorMiddleware as errors };
 //# sourceMappingURL=errors.d.ts.map

package/dist/middlewares/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/middlewares/errors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C,QAAA,MAAM,eAAe,EAAE,MAAM,CAAC,iBA8B7B,CAAC;AAEF,OAAO,EAAE,eAAe,IAAI,MAAM,EAAE,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/middlewares/errors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAI1C,QAAA,MAAM,eAAe,EAAE,IAAI,CAAC,iBA8B3B,CAAC;AAEF,OAAO,EAAE,eAAe,IAAI,MAAM,EAAE,CAAC"}

package/dist/middlewares/errors.js

@@ -1,33 +1,35 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const strapiUtils = require("@strapi/utils");
-const errors = require("../services/errors.js");
-const errorMiddleware = () => {
-  return async (ctx, next) => {
-    try {
-      await next();
-      if (!ctx.response._explicitStatus) {
-        return ctx.notFound();
-      }
-    } catch (error) {
-      if (error instanceof strapiUtils.errors.ApplicationError) {
-        const { status: status2, body: body2 } = errors.formatApplicationError(error);
-        ctx.status = status2;
-        ctx.body = body2;
-        return;
-      }
-      if (error instanceof strapiUtils.errors.HttpError) {
-        const { status: status2, body: body2 } = errors.formatHttpError(error);
-        ctx.status = status2;
-        ctx.body = body2;
-        return;
-      }
-      strapi.log.error(error);
-      const { status, body } = errors.formatInternalError(error);
-      ctx.status = status;
-      ctx.body = body;
-    }
-  };
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+var errors = require('../services/errors.js');
+
+const errorMiddleware = ()=>{
+    return async (ctx, next)=>{
+        try {
+            await next();
+            if (!ctx.response._explicitStatus) {
+                return ctx.notFound();
+            }
+        } catch (error) {
+            if (error instanceof strapiUtils.errors.ApplicationError) {
+                const { status, body } = errors.formatApplicationError(error);
+                ctx.status = status;
+                ctx.body = body;
+                return;
+            }
+            if (error instanceof strapiUtils.errors.HttpError) {
+                const { status, body } = errors.formatHttpError(error);
+                ctx.status = status;
+                ctx.body = body;
+                return;
+            }
+            strapi.log.error(error);
+            const { status, body } = errors.formatInternalError(error);
+            ctx.status = status;
+            ctx.body = body;
+        }
+    };
 };
+
 exports.errors = errorMiddleware;
 //# sourceMappingURL=errors.js.map

package/dist/middlewares/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sources":["../../src/middlewares/errors.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Common } from '@strapi/types';\n\nimport { formatApplicationError, formatHttpError, formatInternalError } from '../services/errors';\n\nconst errorMiddleware: Common.MiddlewareFactory = (/* _, { strapi } */) => {\n  return async (ctx, next) => {\n    try {\n      await next();\n\n      if (!ctx.response._explicitStatus) {\n        return ctx.notFound();\n      }\n    } catch (error) {\n      if (error instanceof errors.ApplicationError) {\n        const { status, body } = formatApplicationError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      if (error instanceof errors.HttpError) {\n        const { status, body } = formatHttpError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      strapi.log.error(error);\n\n      const { status, body } = formatInternalError(error);\n      ctx.status = status;\n      ctx.body = body;\n    }\n  };\n};\n\nexport { errorMiddleware as errors };\n"],"names":["errors","status","body","formatApplicationError","formatHttpError","formatInternalError"],"mappings":";;;;AAKA,MAAM,kBAA4C,MAAyB;AAClE,SAAA,OAAO,KAAK,SAAS;AACtB,QAAA;AACF,YAAM,KAAK;AAEP,UAAA,CAAC,IAAI,SAAS,iBAAiB;AACjC,eAAO,IAAI;MACb;AAAA,aACO,OAAO;AACV,UAAA,iBAAiBA,mBAAO,kBAAkB;AAC5C,cAAM,EAAE,QAAAC,SAAQ,MAAAC,UAASC,OAAAA,uBAAuB,KAAK;AACrD,YAAI,SAASF;AACb,YAAI,OAAOC;AACX;AAAA,MACF;AAEI,UAAA,iBAAiBF,mBAAO,WAAW;AACrC,cAAM,EAAE,QAAAC,SAAQ,MAAAC,UAASE,OAAAA,gBAAgB,KAAK;AAC9C,YAAI,SAASH;AACb,YAAI,OAAOC;AACX;AAAA,MACF;AAEO,aAAA,IAAI,MAAM,KAAK;AAEtB,YAAM,EAAE,QAAQ,KAAK,IAAIG,2BAAoB,KAAK;AAClD,UAAI,SAAS;AACb,UAAI,OAAO;AAAA,IACb;AAAA,EAAA;AAEJ;;"}
+{"version":3,"file":"errors.js","sources":["../../src/middlewares/errors.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { formatApplicationError, formatHttpError, formatInternalError } from '../services/errors';\n\nconst errorMiddleware: Core.MiddlewareFactory = (/* _, { strapi } */) => {\n  return async (ctx, next) => {\n    try {\n      await next();\n\n      if (!ctx.response._explicitStatus) {\n        return ctx.notFound();\n      }\n    } catch (error) {\n      if (error instanceof errors.ApplicationError) {\n        const { status, body } = formatApplicationError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      if (error instanceof errors.HttpError) {\n        const { status, body } = formatHttpError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      strapi.log.error(error);\n\n      const { status, body } = formatInternalError(error);\n      ctx.status = status;\n      ctx.body = body;\n    }\n  };\n};\n\nexport { errorMiddleware as errors };\n"],"names":["errorMiddleware","ctx","next","response","_explicitStatus","notFound","error","errors","ApplicationError","status","body","formatApplicationError","HttpError","formatHttpError","strapi","log","formatInternalError"],"mappings":";;;;;AAKA,MAAMA,eAA0C,GAAA,IAAA;AAC9C,IAAA,OAAO,OAAOC,GAAKC,EAAAA,IAAAA,GAAAA;QACjB,IAAI;YACF,MAAMA,IAAAA,EAAAA;AAEN,YAAA,IAAI,CAACD,GAAAA,CAAIE,QAAQ,CAACC,eAAe,EAAE;AACjC,gBAAA,OAAOH,IAAII,QAAQ,EAAA;AACrB;AACF,SAAA,CAAE,OAAOC,KAAO,EAAA;YACd,IAAIA,KAAAA,YAAiBC,kBAAOC,CAAAA,gBAAgB,EAAE;AAC5C,gBAAA,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAE,GAAGC,6BAAuBL,CAAAA,KAAAA,CAAAA;AAChDL,gBAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,gBAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACX,gBAAA;AACF;YAEA,IAAIJ,KAAAA,YAAiBC,kBAAOK,CAAAA,SAAS,EAAE;AACrC,gBAAA,MAAM,EAAEH,MAAM,EAAEC,IAAI,EAAE,GAAGG,sBAAgBP,CAAAA,KAAAA,CAAAA;AACzCL,gBAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,gBAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACX,gBAAA;AACF;YAEAI,MAAOC,CAAAA,GAAG,CAACT,KAAK,CAACA,KAAAA,CAAAA;AAEjB,YAAA,MAAM,EAAEG,MAAM,EAAEC,IAAI,EAAE,GAAGM,0BAAoBV,CAAAA,KAAAA,CAAAA;AAC7CL,YAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,YAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACb;AACF,KAAA;AACF;;;;"}

package/dist/middlewares/errors.mjs

@@ -1,33 +1,33 @@
-import { errors } from "@strapi/utils";
-import { formatApplicationError, formatHttpError, formatInternalError } from "../services/errors.mjs";
-const errorMiddleware = () => {
-  return async (ctx, next) => {
-    try {
-      await next();
-      if (!ctx.response._explicitStatus) {
-        return ctx.notFound();
-      }
-    } catch (error) {
-      if (error instanceof errors.ApplicationError) {
-        const { status: status2, body: body2 } = formatApplicationError(error);
-        ctx.status = status2;
-        ctx.body = body2;
-        return;
-      }
-      if (error instanceof errors.HttpError) {
-        const { status: status2, body: body2 } = formatHttpError(error);
-        ctx.status = status2;
-        ctx.body = body2;
-        return;
-      }
-      strapi.log.error(error);
-      const { status, body } = formatInternalError(error);
-      ctx.status = status;
-      ctx.body = body;
-    }
-  };
-};
-export {
-  errorMiddleware as errors
+import { errors } from '@strapi/utils';
+import { formatApplicationError, formatHttpError, formatInternalError } from '../services/errors.mjs';
+
+const errorMiddleware = ()=>{
+    return async (ctx, next)=>{
+        try {
+            await next();
+            if (!ctx.response._explicitStatus) {
+                return ctx.notFound();
+            }
+        } catch (error) {
+            if (error instanceof errors.ApplicationError) {
+                const { status, body } = formatApplicationError(error);
+                ctx.status = status;
+                ctx.body = body;
+                return;
+            }
+            if (error instanceof errors.HttpError) {
+                const { status, body } = formatHttpError(error);
+                ctx.status = status;
+                ctx.body = body;
+                return;
+            }
+            strapi.log.error(error);
+            const { status, body } = formatInternalError(error);
+            ctx.status = status;
+            ctx.body = body;
+        }
+    };
 };
+
+export { errorMiddleware as errors };
 //# sourceMappingURL=errors.mjs.map

package/dist/middlewares/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","sources":["../../src/middlewares/errors.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Common } from '@strapi/types';\n\nimport { formatApplicationError, formatHttpError, formatInternalError } from '../services/errors';\n\nconst errorMiddleware: Common.MiddlewareFactory = (/* _, { strapi } */) => {\n  return async (ctx, next) => {\n    try {\n      await next();\n\n      if (!ctx.response._explicitStatus) {\n        return ctx.notFound();\n      }\n    } catch (error) {\n      if (error instanceof errors.ApplicationError) {\n        const { status, body } = formatApplicationError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      if (error instanceof errors.HttpError) {\n        const { status, body } = formatHttpError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      strapi.log.error(error);\n\n      const { status, body } = formatInternalError(error);\n      ctx.status = status;\n      ctx.body = body;\n    }\n  };\n};\n\nexport { errorMiddleware as errors };\n"],"names":["status","body"],"mappings":";;AAKA,MAAM,kBAA4C,MAAyB;AAClE,SAAA,OAAO,KAAK,SAAS;AACtB,QAAA;AACF,YAAM,KAAK;AAEP,UAAA,CAAC,IAAI,SAAS,iBAAiB;AACjC,eAAO,IAAI;MACb;AAAA,aACO,OAAO;AACV,UAAA,iBAAiB,OAAO,kBAAkB;AAC5C,cAAM,EAAE,QAAAA,SAAQ,MAAAC,UAAS,uBAAuB,KAAK;AACrD,YAAI,SAASD;AACb,YAAI,OAAOC;AACX;AAAA,MACF;AAEI,UAAA,iBAAiB,OAAO,WAAW;AACrC,cAAM,EAAE,QAAAD,SAAQ,MAAAC,UAAS,gBAAgB,KAAK;AAC9C,YAAI,SAASD;AACb,YAAI,OAAOC;AACX;AAAA,MACF;AAEO,aAAA,IAAI,MAAM,KAAK;AAEtB,YAAM,EAAE,QAAQ,KAAK,IAAI,oBAAoB,KAAK;AAClD,UAAI,SAAS;AACb,UAAI,OAAO;AAAA,IACb;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"errors.mjs","sources":["../../src/middlewares/errors.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { formatApplicationError, formatHttpError, formatInternalError } from '../services/errors';\n\nconst errorMiddleware: Core.MiddlewareFactory = (/* _, { strapi } */) => {\n  return async (ctx, next) => {\n    try {\n      await next();\n\n      if (!ctx.response._explicitStatus) {\n        return ctx.notFound();\n      }\n    } catch (error) {\n      if (error instanceof errors.ApplicationError) {\n        const { status, body } = formatApplicationError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      if (error instanceof errors.HttpError) {\n        const { status, body } = formatHttpError(error);\n        ctx.status = status;\n        ctx.body = body;\n        return;\n      }\n\n      strapi.log.error(error);\n\n      const { status, body } = formatInternalError(error);\n      ctx.status = status;\n      ctx.body = body;\n    }\n  };\n};\n\nexport { errorMiddleware as errors };\n"],"names":["errorMiddleware","ctx","next","response","_explicitStatus","notFound","error","errors","ApplicationError","status","body","formatApplicationError","HttpError","formatHttpError","strapi","log","formatInternalError"],"mappings":";;;AAKA,MAAMA,eAA0C,GAAA,IAAA;AAC9C,IAAA,OAAO,OAAOC,GAAKC,EAAAA,IAAAA,GAAAA;QACjB,IAAI;YACF,MAAMA,IAAAA,EAAAA;AAEN,YAAA,IAAI,CAACD,GAAAA,CAAIE,QAAQ,CAACC,eAAe,EAAE;AACjC,gBAAA,OAAOH,IAAII,QAAQ,EAAA;AACrB;AACF,SAAA,CAAE,OAAOC,KAAO,EAAA;YACd,IAAIA,KAAAA,YAAiBC,MAAOC,CAAAA,gBAAgB,EAAE;AAC5C,gBAAA,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAE,GAAGC,sBAAuBL,CAAAA,KAAAA,CAAAA;AAChDL,gBAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,gBAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACX,gBAAA;AACF;YAEA,IAAIJ,KAAAA,YAAiBC,MAAOK,CAAAA,SAAS,EAAE;AACrC,gBAAA,MAAM,EAAEH,MAAM,EAAEC,IAAI,EAAE,GAAGG,eAAgBP,CAAAA,KAAAA,CAAAA;AACzCL,gBAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,gBAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACX,gBAAA;AACF;YAEAI,MAAOC,CAAAA,GAAG,CAACT,KAAK,CAACA,KAAAA,CAAAA;AAEjB,YAAA,MAAM,EAAEG,MAAM,EAAEC,IAAI,EAAE,GAAGM,mBAAoBV,CAAAA,KAAAA,CAAAA;AAC7CL,YAAAA,GAAAA,CAAIQ,MAAM,GAAGA,MAAAA;AACbR,YAAAA,GAAAA,CAAIS,IAAI,GAAGA,IAAAA;AACb;AACF,KAAA;AACF;;;;"}

package/dist/middlewares/favicon.d.ts

@@ -1,5 +1,6 @@
+/// <reference path="../../src/modules.d.ts" />
 import koaFavicon from 'koa-favicon';
-import type { Common } from '@strapi/types';
+import type { Core } from '@strapi/types';
 export type Config = NonNullable<Parameters<typeof koaFavicon>[1]>;
-export declare const favicon: Common.MiddlewareFactory<Config>;
+export declare const favicon: Core.MiddlewareFactory<Config>;
 //# sourceMappingURL=favicon.d.ts.map

package/dist/middlewares/favicon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"favicon.d.ts","sourceRoot":"","sources":["../../src/middlewares/favicon.ts"],"names":[],"mappings":"AAEA,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAOnE,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAgBpD,CAAC"}
+{"version":3,"file":"favicon.d.ts","sourceRoot":"","sources":["../../src/middlewares/favicon.ts"],"names":[],"mappings":";AAEA,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAOnE,eAAO,MAAM,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAgBlD,CAAC"}

package/dist/middlewares/favicon.js

@@ -1,22 +1,32 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const fs = require("fs");
-const path = require("path");
-const koaFavicon = require("koa-favicon");
-const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
-const koaFavicon__default = /* @__PURE__ */ _interopDefault(koaFavicon);
+'use strict';
+
+var fs = require('fs');
+var path = require('path');
+var koaFavicon = require('koa-favicon');
+
 const defaults = {
-  path: "favicon.png",
-  maxAge: 864e5
+    path: 'favicon.png',
+    maxAge: 86400000
 };
-const favicon = (config, { strapi }) => {
-  const { maxAge, path: faviconDefaultPath } = { ...defaults, ...config };
-  const { root: appRoot } = strapi.dirs.app;
-  let faviconPath = faviconDefaultPath;
-  if (!fs.existsSync(path.resolve(appRoot, faviconPath))) {
-    faviconPath = "favicon.ico";
-  }
-  return koaFavicon__default.default(path.resolve(appRoot, faviconPath), { maxAge });
+const favicon = (config, { strapi })=>{
+    const { maxAge, path: faviconDefaultPath } = {
+        ...defaults,
+        ...config
+    };
+    const { root: appRoot } = strapi.dirs.app;
+    let faviconPath = faviconDefaultPath;
+    /** TODO (v5): Updating the favicon to use a png caused
+   *  https://github.com/strapi/strapi/issues/14693
+   *
+   *  This check ensures backwards compatibility until
+   *  the next major version
+   */ if (!fs.existsSync(path.resolve(appRoot, faviconPath))) {
+        faviconPath = 'favicon.ico';
+    }
+    return koaFavicon(path.resolve(appRoot, faviconPath), {
+        maxAge
+    });
 };
+
 exports.favicon = favicon;
 //# sourceMappingURL=favicon.js.map

package/dist/middlewares/favicon.js.map

@@ -1 +1 @@
-{"version":3,"file":"favicon.js","sources":["../../src/middlewares/favicon.ts"],"sourcesContent":["import { existsSync } from 'fs';\nimport { resolve } from 'path';\nimport koaFavicon from 'koa-favicon';\nimport type { Common } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<typeof koaFavicon>[1]>;\n\nconst defaults = {\n  path: 'favicon.png',\n  maxAge: 86400000,\n};\n\nexport const favicon: Common.MiddlewareFactory<Config> = (config, { strapi }) => {\n  const { maxAge, path: faviconDefaultPath } = { ...defaults, ...config };\n  const { root: appRoot } = strapi.dirs.app;\n  let faviconPath = faviconDefaultPath;\n\n  /** TODO (v5): Updating the favicon to use a png caused\n   *  https://github.com/strapi/strapi/issues/14693\n   *\n   *  This check ensures backwards compatibility until\n   *  the next major version\n   */\n  if (!existsSync(resolve(appRoot, faviconPath))) {\n    faviconPath = 'favicon.ico';\n  }\n\n  return koaFavicon(resolve(appRoot, faviconPath), { maxAge });\n};\n"],"names":["existsSync","resolve","koaFavicon"],"mappings":";;;;;;;AAOA,MAAM,WAAW;AAAA,EACf,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,MAAM,UAA4C,CAAC,QAAQ,EAAE,aAAa;AACzE,QAAA,EAAE,QAAQ,MAAM,mBAAA,IAAuB,EAAE,GAAG,UAAU,GAAG;AAC/D,QAAM,EAAE,MAAM,QAAQ,IAAI,OAAO,KAAK;AACtC,MAAI,cAAc;AAQlB,MAAI,CAACA,GAAAA,WAAWC,KAAAA,QAAQ,SAAS,WAAW,CAAC,GAAG;AAChC,kBAAA;AAAA,EAChB;AAEA,SAAOC,oBAAAA,QAAWD,KAAAA,QAAQ,SAAS,WAAW,GAAG,EAAE,QAAQ;AAC7D;;"}
+{"version":3,"file":"favicon.js","sources":["../../src/middlewares/favicon.ts"],"sourcesContent":["import { existsSync } from 'fs';\nimport { resolve } from 'path';\nimport koaFavicon from 'koa-favicon';\nimport type { Core } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<typeof koaFavicon>[1]>;\n\nconst defaults = {\n  path: 'favicon.png',\n  maxAge: 86400000,\n};\n\nexport const favicon: Core.MiddlewareFactory<Config> = (config, { strapi }) => {\n  const { maxAge, path: faviconDefaultPath } = { ...defaults, ...config };\n  const { root: appRoot } = strapi.dirs.app;\n  let faviconPath = faviconDefaultPath;\n\n  /** TODO (v5): Updating the favicon to use a png caused\n   *  https://github.com/strapi/strapi/issues/14693\n   *\n   *  This check ensures backwards compatibility until\n   *  the next major version\n   */\n  if (!existsSync(resolve(appRoot, faviconPath))) {\n    faviconPath = 'favicon.ico';\n  }\n\n  return koaFavicon(resolve(appRoot, faviconPath), { maxAge });\n};\n"],"names":["defaults","path","maxAge","favicon","config","strapi","faviconDefaultPath","root","appRoot","dirs","app","faviconPath","existsSync","resolve","koaFavicon"],"mappings":";;;;;;AAOA,MAAMA,QAAW,GAAA;IACfC,IAAM,EAAA,aAAA;IACNC,MAAQ,EAAA;AACV,CAAA;MAEaC,OAA0C,GAAA,CAACC,MAAQ,EAAA,EAAEC,MAAM,EAAE,GAAA;AACxE,IAAA,MAAM,EAAEH,MAAM,EAAED,IAAMK,EAAAA,kBAAkB,EAAE,GAAG;AAAE,QAAA,GAAGN,QAAQ;AAAE,QAAA,GAAGI;AAAO,KAAA;IACtE,MAAM,EAAEG,MAAMC,OAAO,EAAE,GAAGH,MAAOI,CAAAA,IAAI,CAACC,GAAG;AACzC,IAAA,IAAIC,WAAcL,GAAAA,kBAAAA;AAElB;;;;;AAKC,MACD,IAAI,CAACM,aAAWC,CAAAA,YAAAA,CAAQL,SAASG,WAAe,CAAA,CAAA,EAAA;QAC9CA,WAAc,GAAA,aAAA;AAChB;IAEA,OAAOG,UAAAA,CAAWD,YAAQL,CAAAA,OAAAA,EAASG,WAAc,CAAA,EAAA;AAAET,QAAAA;AAAO,KAAA,CAAA;AAC5D;;;;"}