@strapi/core 0.0.0-experimental.6dbac0c205b0f8495781db5706c18cac1a62e62b

package/dist/middlewares/public/index.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const fs = require("fs");
+const path = require("path");
+const stream = require("stream");
+const _$1 = require("lodash");
+const _ = require("lodash/fp");
+const koaStatic = require("koa-static");
+require("open");
+require("@strapi/utils");
+const isInitialized = require("../../utils/is-initialized.js");
+const serveStatic = require("./serve-static.js");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const fs__default = /* @__PURE__ */ _interopDefault(fs);
+const path__default = /* @__PURE__ */ _interopDefault(path);
+const stream__default = /* @__PURE__ */ _interopDefault(stream);
+const ___default = /* @__PURE__ */ _interopDefault(_$1);
+const koaStatic__default = /* @__PURE__ */ _interopDefault(koaStatic);
+const defaults = {
+  maxAge: 6e4,
+  defaultIndex: true
+};
+const publicStatic = (config, { strapi }) => {
+  const { defaultIndex, maxAge } = _.defaultsDeep(defaults, config);
+  if (defaultIndex === true) {
+    const index = fs__default.default.readFileSync(path__default.default.join(__dirname, "index.html"), "utf8");
+    const serveIndexPage = async (ctx, next) => {
+      await next();
+      if (ctx.body != null || ctx.status !== 404)
+        return;
+      ctx.url = "index.html";
+      const isInitialized$1 = await isInitialized(strapi);
+      const data = {
+        serverTime: (/* @__PURE__ */ new Date()).toUTCString(),
+        isInitialized: isInitialized$1,
+        ...___default.default.pick(strapi, [
+          "config.info.version",
+          "config.info.name",
+          "config.admin.url",
+          "config.server.url",
+          "config.environment",
+          "config.serveAdminPanel"
+        ])
+      };
+      const content = ___default.default.template(index)(data);
+      const body = new stream__default.default.Readable({
+        read() {
+          this.push(Buffer.from(content));
+          this.push(null);
+        }
+      });
+      ctx.type = "html";
+      ctx.body = body;
+    };
+    strapi.server.routes([
+      {
+        method: "GET",
+        path: "/",
+        handler: serveIndexPage,
+        config: { auth: false }
+      },
+      {
+        method: "GET",
+        path: "/index.html",
+        handler: serveIndexPage,
+        config: { auth: false }
+      },
+      {
+        method: "GET",
+        path: "/assets/images/(.*)",
+        handler: serveStatic.serveStatic(path__default.default.resolve(__dirname, "assets/images"), {
+          maxage: maxAge,
+          defer: true
+        }),
+        config: { auth: false }
+      },
+      // All other public GET-routes except /uploads/(.*) which is handled in upload middleware
+      {
+        method: "GET",
+        path: "/((?!uploads/).+)",
+        handler: koaStatic__default.default(strapi.dirs.static.public, {
+          maxage: maxAge,
+          defer: true
+        }),
+        config: { auth: false }
+      }
+    ]);
+  }
+};
+exports.publicStatic = publicStatic;
+//# sourceMappingURL=index.js.map

package/dist/middlewares/public/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../src/middlewares/public/index.ts"],"sourcesContent":["import fs from 'fs';\nimport path from 'path';\nimport stream from 'stream';\nimport _ from 'lodash';\nimport { defaultsDeep } from 'lodash/fp';\nimport koaStatic from 'koa-static';\nimport type { Strapi, Common } from '@strapi/types';\nimport * as utils from '../../utils';\nimport { serveStatic } from './serve-static';\n\ntype Config = koaStatic.Options;\n\nconst defaults = {\n  maxAge: 60000,\n  defaultIndex: true,\n};\n\nexport const publicStatic: Common.MiddlewareFactory = (\n  config: Config,\n  { strapi }: { strapi: Strapi }\n) => {\n  const { defaultIndex, maxAge } = defaultsDeep(defaults, config);\n\n  if (defaultIndex === true) {\n    const index = fs.readFileSync(path.join(__dirname, 'index.html'), 'utf8');\n\n    const serveIndexPage: Common.MiddlewareHandler = async (ctx, next) => {\n      // defer rendering of strapi index page\n      await next();\n\n      if (ctx.body != null || ctx.status !== 404) return;\n\n      ctx.url = 'index.html';\n      const isInitialized = await utils.isInitialized(strapi);\n      const data = {\n        serverTime: new Date().toUTCString(),\n        isInitialized,\n        ..._.pick(strapi, [\n          'config.info.version',\n          'config.info.name',\n          'config.admin.url',\n          'config.server.url',\n          'config.environment',\n          'config.serveAdminPanel',\n        ]),\n      };\n      const content = _.template(index)(data);\n      const body = new stream.Readable({\n        read() {\n          this.push(Buffer.from(content));\n          this.push(null);\n        },\n      });\n\n      // Serve static.\n      ctx.type = 'html';\n      ctx.body = body;\n    };\n\n    strapi.server.routes([\n      {\n        method: 'GET',\n        path: '/',\n        handler: serveIndexPage,\n        config: { auth: false },\n      },\n      {\n        method: 'GET',\n        path: '/index.html',\n        handler: serveIndexPage,\n        config: { auth: false },\n      },\n      {\n        method: 'GET',\n        path: '/assets/images/(.*)',\n        handler: serveStatic(path.resolve(__dirname, 'assets/images'), {\n          maxage: maxAge,\n          defer: true,\n        }),\n        config: { auth: false },\n      },\n      // All other public GET-routes except /uploads/(.*) which is handled in upload middleware\n      {\n        method: 'GET',\n        path: '/((?!uploads/).+)',\n        handler: koaStatic(strapi.dirs.static.public, {\n          maxage: maxAge,\n          defer: true,\n        }),\n        config: { auth: false },\n      },\n    ]);\n  }\n};\n"],"names":["defaultsDeep","fs","path","isInitialized","utils.isInitialized","_","stream","serveStatic","koaStatic"],"mappings":";;;;;;;;;;;;;;;;;;AAYA,MAAM,WAAW;AAAA,EACf,QAAQ;AAAA,EACR,cAAc;AAChB;AAEO,MAAM,eAAyC,CACpD,QACA,EAAE,aACC;AACH,QAAM,EAAE,cAAc,OAAA,IAAWA,EAAAA,aAAa,UAAU,MAAM;AAE9D,MAAI,iBAAiB,MAAM;AACnB,UAAA,QAAQC,oBAAG,aAAaC,cAAA,QAAK,KAAK,WAAW,YAAY,GAAG,MAAM;AAElE,UAAA,iBAA2C,OAAO,KAAK,SAAS;AAEpE,YAAM,KAAK;AAEX,UAAI,IAAI,QAAQ,QAAQ,IAAI,WAAW;AAAK;AAE5C,UAAI,MAAM;AACV,YAAMC,kBAAgB,MAAMC,cAAoB,MAAM;AACtD,YAAM,OAAO;AAAA,QACX,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,QAAA,eACnCD;AAAAA,QACA,GAAGE,WAAE,QAAA,KAAK,QAAQ;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QAAA,CACD;AAAA,MAAA;AAEH,YAAM,UAAUA,WAAAA,QAAE,SAAS,KAAK,EAAE,IAAI;AAChC,YAAA,OAAO,IAAIC,gBAAA,QAAO,SAAS;AAAA,QAC/B,OAAO;AACL,eAAK,KAAK,OAAO,KAAK,OAAO,CAAC;AAC9B,eAAK,KAAK,IAAI;AAAA,QAChB;AAAA,MAAA,CACD;AAGD,UAAI,OAAO;AACX,UAAI,OAAO;AAAA,IAAA;AAGb,WAAO,OAAO,OAAO;AAAA,MACnB;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,QACT,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,QACT,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAASC,YAAY,YAAAL,cAAA,QAAK,QAAQ,WAAW,eAAe,GAAG;AAAA,UAC7D,QAAQ;AAAA,UACR,OAAO;AAAA,QAAA,CACR;AAAA,QACD,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA;AAAA,MAEA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAASM,mBAAAA,QAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,UAC5C,QAAQ;AAAA,UACR,OAAO;AAAA,QAAA,CACR;AAAA,QACD,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,IAAA,CACD;AAAA,EACH;AACF;;"}

package/dist/middlewares/public/index.mjs

@@ -0,0 +1,85 @@
+import fs from "fs";
+import path from "path";
+import stream from "stream";
+import _ from "lodash";
+import { defaultsDeep } from "lodash/fp";
+import koaStatic from "koa-static";
+import "open";
+import "@strapi/utils";
+import isInitialized from "../../utils/is-initialized.mjs";
+import { serveStatic } from "./serve-static.mjs";
+const defaults = {
+  maxAge: 6e4,
+  defaultIndex: true
+};
+const publicStatic = (config, { strapi }) => {
+  const { defaultIndex, maxAge } = defaultsDeep(defaults, config);
+  if (defaultIndex === true) {
+    const index = fs.readFileSync(path.join(__dirname, "index.html"), "utf8");
+    const serveIndexPage = async (ctx, next) => {
+      await next();
+      if (ctx.body != null || ctx.status !== 404)
+        return;
+      ctx.url = "index.html";
+      const isInitialized$1 = await isInitialized(strapi);
+      const data = {
+        serverTime: (/* @__PURE__ */ new Date()).toUTCString(),
+        isInitialized: isInitialized$1,
+        ..._.pick(strapi, [
+          "config.info.version",
+          "config.info.name",
+          "config.admin.url",
+          "config.server.url",
+          "config.environment",
+          "config.serveAdminPanel"
+        ])
+      };
+      const content = _.template(index)(data);
+      const body = new stream.Readable({
+        read() {
+          this.push(Buffer.from(content));
+          this.push(null);
+        }
+      });
+      ctx.type = "html";
+      ctx.body = body;
+    };
+    strapi.server.routes([
+      {
+        method: "GET",
+        path: "/",
+        handler: serveIndexPage,
+        config: { auth: false }
+      },
+      {
+        method: "GET",
+        path: "/index.html",
+        handler: serveIndexPage,
+        config: { auth: false }
+      },
+      {
+        method: "GET",
+        path: "/assets/images/(.*)",
+        handler: serveStatic(path.resolve(__dirname, "assets/images"), {
+          maxage: maxAge,
+          defer: true
+        }),
+        config: { auth: false }
+      },
+      // All other public GET-routes except /uploads/(.*) which is handled in upload middleware
+      {
+        method: "GET",
+        path: "/((?!uploads/).+)",
+        handler: koaStatic(strapi.dirs.static.public, {
+          maxage: maxAge,
+          defer: true
+        }),
+        config: { auth: false }
+      }
+    ]);
+  }
+};
+export {
+  publicStatic
+};
+//# sourceMappingURL=index.mjs.map

package/dist/middlewares/public/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../src/middlewares/public/index.ts"],"sourcesContent":["import fs from 'fs';\nimport path from 'path';\nimport stream from 'stream';\nimport _ from 'lodash';\nimport { defaultsDeep } from 'lodash/fp';\nimport koaStatic from 'koa-static';\nimport type { Strapi, Common } from '@strapi/types';\nimport * as utils from '../../utils';\nimport { serveStatic } from './serve-static';\n\ntype Config = koaStatic.Options;\n\nconst defaults = {\n  maxAge: 60000,\n  defaultIndex: true,\n};\n\nexport const publicStatic: Common.MiddlewareFactory = (\n  config: Config,\n  { strapi }: { strapi: Strapi }\n) => {\n  const { defaultIndex, maxAge } = defaultsDeep(defaults, config);\n\n  if (defaultIndex === true) {\n    const index = fs.readFileSync(path.join(__dirname, 'index.html'), 'utf8');\n\n    const serveIndexPage: Common.MiddlewareHandler = async (ctx, next) => {\n      // defer rendering of strapi index page\n      await next();\n\n      if (ctx.body != null || ctx.status !== 404) return;\n\n      ctx.url = 'index.html';\n      const isInitialized = await utils.isInitialized(strapi);\n      const data = {\n        serverTime: new Date().toUTCString(),\n        isInitialized,\n        ..._.pick(strapi, [\n          'config.info.version',\n          'config.info.name',\n          'config.admin.url',\n          'config.server.url',\n          'config.environment',\n          'config.serveAdminPanel',\n        ]),\n      };\n      const content = _.template(index)(data);\n      const body = new stream.Readable({\n        read() {\n          this.push(Buffer.from(content));\n          this.push(null);\n        },\n      });\n\n      // Serve static.\n      ctx.type = 'html';\n      ctx.body = body;\n    };\n\n    strapi.server.routes([\n      {\n        method: 'GET',\n        path: '/',\n        handler: serveIndexPage,\n        config: { auth: false },\n      },\n      {\n        method: 'GET',\n        path: '/index.html',\n        handler: serveIndexPage,\n        config: { auth: false },\n      },\n      {\n        method: 'GET',\n        path: '/assets/images/(.*)',\n        handler: serveStatic(path.resolve(__dirname, 'assets/images'), {\n          maxage: maxAge,\n          defer: true,\n        }),\n        config: { auth: false },\n      },\n      // All other public GET-routes except /uploads/(.*) which is handled in upload middleware\n      {\n        method: 'GET',\n        path: '/((?!uploads/).+)',\n        handler: koaStatic(strapi.dirs.static.public, {\n          maxage: maxAge,\n          defer: true,\n        }),\n        config: { auth: false },\n      },\n    ]);\n  }\n};\n"],"names":["isInitialized","utils.isInitialized"],"mappings":";;;;;;;;;;AAYA,MAAM,WAAW;AAAA,EACf,QAAQ;AAAA,EACR,cAAc;AAChB;AAEO,MAAM,eAAyC,CACpD,QACA,EAAE,aACC;AACH,QAAM,EAAE,cAAc,OAAA,IAAW,aAAa,UAAU,MAAM;AAE9D,MAAI,iBAAiB,MAAM;AACnB,UAAA,QAAQ,GAAG,aAAa,KAAK,KAAK,WAAW,YAAY,GAAG,MAAM;AAElE,UAAA,iBAA2C,OAAO,KAAK,SAAS;AAEpE,YAAM,KAAK;AAEX,UAAI,IAAI,QAAQ,QAAQ,IAAI,WAAW;AAAK;AAE5C,UAAI,MAAM;AACV,YAAMA,kBAAgB,MAAMC,cAAoB,MAAM;AACtD,YAAM,OAAO;AAAA,QACX,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,QAAA,eACnCD;AAAAA,QACA,GAAG,EAAE,KAAK,QAAQ;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QAAA,CACD;AAAA,MAAA;AAEH,YAAM,UAAU,EAAE,SAAS,KAAK,EAAE,IAAI;AAChC,YAAA,OAAO,IAAI,OAAO,SAAS;AAAA,QAC/B,OAAO;AACL,eAAK,KAAK,OAAO,KAAK,OAAO,CAAC;AAC9B,eAAK,KAAK,IAAI;AAAA,QAChB;AAAA,MAAA,CACD;AAGD,UAAI,OAAO;AACX,UAAI,OAAO;AAAA,IAAA;AAGb,WAAO,OAAO,OAAO;AAAA,MACnB;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,QACT,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,QACT,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS,YAAY,KAAK,QAAQ,WAAW,eAAe,GAAG;AAAA,UAC7D,QAAQ;AAAA,UACR,OAAO;AAAA,QAAA,CACR;AAAA,QACD,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA;AAAA,MAEA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS,UAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,UAC5C,QAAQ;AAAA,UACR,OAAO;AAAA,QAAA,CACR;AAAA,QACD,QAAQ,EAAE,MAAM,MAAM;AAAA,MACxB;AAAA,IAAA,CACD;AAAA,EACH;AACF;"}

package/dist/middlewares/public/serve-static.d.ts

@@ -0,0 +1,4 @@
+import koaStatic from 'koa-static';
+import type { Common } from '@strapi/types';
+export declare const serveStatic: (filesDir: string, koaStaticOptions?: koaStatic.Options) => Common.MiddlewareHandler;
+//# sourceMappingURL=serve-static.d.ts.map

package/dist/middlewares/public/serve-static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-static.d.ts","sourceRoot":"","sources":["../../../src/middlewares/public/serve-static.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,YAAY,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG5C,eAAO,MAAM,WAAW,aAAc,MAAM,qBAAoB,UAAU,OAAO,6BAkBhF,CAAC"}

package/dist/middlewares/public/serve-static.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const path = require("path");
+const koaStatic = require("koa-static");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const path__default = /* @__PURE__ */ _interopDefault(path);
+const koaStatic__default = /* @__PURE__ */ _interopDefault(koaStatic);
+const serveStatic = (filesDir, koaStaticOptions = {}) => {
+  const serve = koaStatic__default.default(filesDir, koaStaticOptions);
+  const middleware = async (ctx, next) => {
+    const prev = ctx.path;
+    const newPath = path__default.default.basename(ctx.path);
+    ctx.path = newPath;
+    await serve(ctx, async () => {
+      ctx.path = prev;
+      await next();
+      ctx.path = newPath;
+    });
+    ctx.path = prev;
+  };
+  return middleware;
+};
+exports.serveStatic = serveStatic;
+//# sourceMappingURL=serve-static.js.map

package/dist/middlewares/public/serve-static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-static.js","sources":["../../../src/middlewares/public/serve-static.ts"],"sourcesContent":["import path from 'path';\nimport koaStatic from 'koa-static';\nimport type { Common } from '@strapi/types';\n\n// serveStatic is not supposed to be used to serve a folder that have sub-folders\nexport const serveStatic = (filesDir: string, koaStaticOptions: koaStatic.Options = {}) => {\n  const serve = koaStatic(filesDir, koaStaticOptions);\n\n  // eslint-disable-next-line @typescript-eslint/ban-types\n  const middleware: Common.MiddlewareHandler = async (ctx, next) => {\n    const prev = ctx.path;\n    const newPath = path.basename(ctx.path);\n    ctx.path = newPath;\n\n    await serve(ctx, async () => {\n      ctx.path = prev;\n      await next();\n      ctx.path = newPath;\n    });\n    ctx.path = prev;\n  };\n\n  return middleware;\n};\n"],"names":["koaStatic","path"],"mappings":";;;;;;;AAKO,MAAM,cAAc,CAAC,UAAkB,mBAAsC,OAAO;AACnF,QAAA,QAAQA,mBAAAA,QAAU,UAAU,gBAAgB;AAG5C,QAAA,aAAuC,OAAO,KAAK,SAAS;AAChE,UAAM,OAAO,IAAI;AACjB,UAAM,UAAUC,cAAA,QAAK,SAAS,IAAI,IAAI;AACtC,QAAI,OAAO;AAEL,UAAA,MAAM,KAAK,YAAY;AAC3B,UAAI,OAAO;AACX,YAAM,KAAK;AACX,UAAI,OAAO;AAAA,IAAA,CACZ;AACD,QAAI,OAAO;AAAA,EAAA;AAGN,SAAA;AACT;;"}

package/dist/middlewares/public/serve-static.mjs

@@ -0,0 +1,21 @@
+import path from "path";
+import koaStatic from "koa-static";
+const serveStatic = (filesDir, koaStaticOptions = {}) => {
+  const serve = koaStatic(filesDir, koaStaticOptions);
+  const middleware = async (ctx, next) => {
+    const prev = ctx.path;
+    const newPath = path.basename(ctx.path);
+    ctx.path = newPath;
+    await serve(ctx, async () => {
+      ctx.path = prev;
+      await next();
+      ctx.path = newPath;
+    });
+    ctx.path = prev;
+  };
+  return middleware;
+};
+export {
+  serveStatic
+};
+//# sourceMappingURL=serve-static.mjs.map

package/dist/middlewares/public/serve-static.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-static.mjs","sources":["../../../src/middlewares/public/serve-static.ts"],"sourcesContent":["import path from 'path';\nimport koaStatic from 'koa-static';\nimport type { Common } from '@strapi/types';\n\n// serveStatic is not supposed to be used to serve a folder that have sub-folders\nexport const serveStatic = (filesDir: string, koaStaticOptions: koaStatic.Options = {}) => {\n  const serve = koaStatic(filesDir, koaStaticOptions);\n\n  // eslint-disable-next-line @typescript-eslint/ban-types\n  const middleware: Common.MiddlewareHandler = async (ctx, next) => {\n    const prev = ctx.path;\n    const newPath = path.basename(ctx.path);\n    ctx.path = newPath;\n\n    await serve(ctx, async () => {\n      ctx.path = prev;\n      await next();\n      ctx.path = newPath;\n    });\n    ctx.path = prev;\n  };\n\n  return middleware;\n};\n"],"names":[],"mappings":";;AAKO,MAAM,cAAc,CAAC,UAAkB,mBAAsC,OAAO;AACnF,QAAA,QAAQ,UAAU,UAAU,gBAAgB;AAG5C,QAAA,aAAuC,OAAO,KAAK,SAAS;AAChE,UAAM,OAAO,IAAI;AACjB,UAAM,UAAU,KAAK,SAAS,IAAI,IAAI;AACtC,QAAI,OAAO;AAEL,UAAA,MAAM,KAAK,YAAY;AAC3B,UAAI,OAAO;AACX,YAAM,KAAK;AACX,UAAI,OAAO;AAAA,IAAA,CACZ;AACD,QAAI,OAAO;AAAA,EAAA;AAGN,SAAA;AACT;"}

package/dist/middlewares/query.d.ts

@@ -0,0 +1,3 @@
+import type { Common } from '@strapi/types';
+export declare const query: Common.MiddlewareFactory;
+//# sourceMappingURL=query.d.ts.map

package/dist/middlewares/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/middlewares/query.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAU,MAAM,EAAE,MAAM,eAAe,CAAC;AA2CpD,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,iBAK1B,CAAC"}

package/dist/middlewares/query.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const qs = require("qs");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const qs__default = /* @__PURE__ */ _interopDefault(qs);
+const defaults = {
+  strictNullHandling: true,
+  arrayLimit: 100,
+  depth: 20
+};
+const addQsParser = (app, settings) => {
+  Object.defineProperty(app.request, "query", {
+    configurable: false,
+    enumerable: true,
+    /*
+     * Get parsed query-string.
+     */
+    get() {
+      const qstr = this.querystring;
+      this._querycache = this._querycache || {};
+      const cache = this._querycache;
+      if (!cache[qstr]) {
+        cache[qstr] = qs__default.default.parse(qstr, settings);
+      }
+      return cache[qstr];
+    },
+    /*
+     * Set query-string as an object.
+     */
+    set(obj) {
+      this.querystring = qs__default.default.stringify(obj);
+    }
+  });
+  return app;
+};
+const query = (config, { strapi }) => {
+  addQsParser(strapi.server.app, { ...defaults, ...config });
+};
+exports.query = query;
+//# sourceMappingURL=query.js.map

package/dist/middlewares/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sources":["../../src/middlewares/query.ts"],"sourcesContent":["import qs, { IParseOptions } from 'qs';\nimport type Koa from 'koa';\nimport type { Strapi, Common } from '@strapi/types';\n\ntype Config = IParseOptions;\n\nconst defaults: Config = {\n  strictNullHandling: true,\n  arrayLimit: 100,\n  depth: 20,\n};\n\n/**\n * Body parser hook\n */\nconst addQsParser = (app: Koa, settings: Config) => {\n  Object.defineProperty(app.request, 'query', {\n    configurable: false,\n    enumerable: true,\n    /*\n     * Get parsed query-string.\n     */\n    get() {\n      const qstr = this.querystring;\n      this._querycache = this._querycache || {};\n      const cache = this._querycache;\n\n      if (!cache[qstr]) {\n        cache[qstr] = qs.parse(qstr, settings);\n      }\n\n      return cache[qstr];\n    },\n\n    /*\n     * Set query-string as an object.\n     */\n    set(obj) {\n      this.querystring = qs.stringify(obj);\n    },\n  });\n\n  return app;\n};\n\nexport const query: Common.MiddlewareFactory = (\n  config: Partial<Config>,\n  { strapi }: { strapi: Strapi }\n) => {\n  addQsParser(strapi.server.app, { ...defaults, ...config });\n};\n"],"names":["qs"],"mappings":";;;;;AAMA,MAAM,WAAmB;AAAA,EACvB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,OAAO;AACT;AAKA,MAAM,cAAc,CAAC,KAAU,aAAqB;AAC3C,SAAA,eAAe,IAAI,SAAS,SAAS;AAAA,IAC1C,cAAc;AAAA,IACd,YAAY;AAAA;AAAA;AAAA;AAAA,IAIZ,MAAM;AACJ,YAAM,OAAO,KAAK;AACb,WAAA,cAAc,KAAK,eAAe,CAAA;AACvC,YAAM,QAAQ,KAAK;AAEf,UAAA,CAAC,MAAM,IAAI,GAAG;AAChB,cAAM,IAAI,IAAIA,YAAAA,QAAG,MAAM,MAAM,QAAQ;AAAA,MACvC;AAEA,aAAO,MAAM,IAAI;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAK;AACF,WAAA,cAAcA,YAAAA,QAAG,UAAU,GAAG;AAAA,IACrC;AAAA,EAAA,CACD;AAEM,SAAA;AACT;AAEO,MAAM,QAAkC,CAC7C,QACA,EAAE,aACC;AACS,cAAA,OAAO,OAAO,KAAK,EAAE,GAAG,UAAU,GAAG,QAAQ;AAC3D;;"}

package/dist/middlewares/query.mjs

@@ -0,0 +1,38 @@
+import qs from "qs";
+const defaults = {
+  strictNullHandling: true,
+  arrayLimit: 100,
+  depth: 20
+};
+const addQsParser = (app, settings) => {
+  Object.defineProperty(app.request, "query", {
+    configurable: false,
+    enumerable: true,
+    /*
+     * Get parsed query-string.
+     */
+    get() {
+      const qstr = this.querystring;
+      this._querycache = this._querycache || {};
+      const cache = this._querycache;
+      if (!cache[qstr]) {
+        cache[qstr] = qs.parse(qstr, settings);
+      }
+      return cache[qstr];
+    },
+    /*
+     * Set query-string as an object.
+     */
+    set(obj) {
+      this.querystring = qs.stringify(obj);
+    }
+  });
+  return app;
+};
+const query = (config, { strapi }) => {
+  addQsParser(strapi.server.app, { ...defaults, ...config });
+};
+export {
+  query
+};
+//# sourceMappingURL=query.mjs.map

package/dist/middlewares/query.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.mjs","sources":["../../src/middlewares/query.ts"],"sourcesContent":["import qs, { IParseOptions } from 'qs';\nimport type Koa from 'koa';\nimport type { Strapi, Common } from '@strapi/types';\n\ntype Config = IParseOptions;\n\nconst defaults: Config = {\n  strictNullHandling: true,\n  arrayLimit: 100,\n  depth: 20,\n};\n\n/**\n * Body parser hook\n */\nconst addQsParser = (app: Koa, settings: Config) => {\n  Object.defineProperty(app.request, 'query', {\n    configurable: false,\n    enumerable: true,\n    /*\n     * Get parsed query-string.\n     */\n    get() {\n      const qstr = this.querystring;\n      this._querycache = this._querycache || {};\n      const cache = this._querycache;\n\n      if (!cache[qstr]) {\n        cache[qstr] = qs.parse(qstr, settings);\n      }\n\n      return cache[qstr];\n    },\n\n    /*\n     * Set query-string as an object.\n     */\n    set(obj) {\n      this.querystring = qs.stringify(obj);\n    },\n  });\n\n  return app;\n};\n\nexport const query: Common.MiddlewareFactory = (\n  config: Partial<Config>,\n  { strapi }: { strapi: Strapi }\n) => {\n  addQsParser(strapi.server.app, { ...defaults, ...config });\n};\n"],"names":[],"mappings":";AAMA,MAAM,WAAmB;AAAA,EACvB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,OAAO;AACT;AAKA,MAAM,cAAc,CAAC,KAAU,aAAqB;AAC3C,SAAA,eAAe,IAAI,SAAS,SAAS;AAAA,IAC1C,cAAc;AAAA,IACd,YAAY;AAAA;AAAA;AAAA;AAAA,IAIZ,MAAM;AACJ,YAAM,OAAO,KAAK;AACb,WAAA,cAAc,KAAK,eAAe,CAAA;AACvC,YAAM,QAAQ,KAAK;AAEf,UAAA,CAAC,MAAM,IAAI,GAAG;AAChB,cAAM,IAAI,IAAI,GAAG,MAAM,MAAM,QAAQ;AAAA,MACvC;AAEA,aAAO,MAAM,IAAI;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAK;AACF,WAAA,cAAc,GAAG,UAAU,GAAG;AAAA,IACrC;AAAA,EAAA,CACD;AAEM,SAAA;AACT;AAEO,MAAM,QAAkC,CAC7C,QACA,EAAE,aACC;AACS,cAAA,OAAO,OAAO,KAAK,EAAE,GAAG,UAAU,GAAG,QAAQ;AAC3D;"}

package/dist/middlewares/response-time.d.ts

@@ -0,0 +1,3 @@
+import type { Common } from '@strapi/types';
+export declare const responseTime: Common.MiddlewareFactory;
+//# sourceMappingURL=response-time.d.ts.map

package/dist/middlewares/response-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.d.ts","sourceRoot":"","sources":["../../src/middlewares/response-time.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,iBASjC,CAAC"}

package/dist/middlewares/response-time.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const responseTime = () => {
+  return async (ctx, next) => {
+    const start = Date.now();
+    await next();
+    const delta = Math.ceil(Date.now() - start);
+    ctx.set("X-Response-Time", `${delta}ms`);
+  };
+};
+exports.responseTime = responseTime;
+//# sourceMappingURL=response-time.js.map

package/dist/middlewares/response-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.js","sources":["../../src/middlewares/response-time.ts"],"sourcesContent":["import type { Common } from '@strapi/types';\n\nexport const responseTime: Common.MiddlewareFactory = () => {\n  return async (ctx, next) => {\n    const start = Date.now();\n\n    await next();\n\n    const delta = Math.ceil(Date.now() - start);\n    ctx.set('X-Response-Time', `${delta}ms`);\n  };\n};\n"],"names":[],"mappings":";;AAEO,MAAM,eAAyC,MAAM;AACnD,SAAA,OAAO,KAAK,SAAS;AACpB,UAAA,QAAQ,KAAK;AAEnB,UAAM,KAAK;AAEX,UAAM,QAAQ,KAAK,KAAK,KAAK,IAAA,IAAQ,KAAK;AAC1C,QAAI,IAAI,mBAAmB,GAAG,KAAK,IAAI;AAAA,EAAA;AAE3C;;"}

package/dist/middlewares/response-time.mjs

@@ -0,0 +1,12 @@
+const responseTime = () => {
+  return async (ctx, next) => {
+    const start = Date.now();
+    await next();
+    const delta = Math.ceil(Date.now() - start);
+    ctx.set("X-Response-Time", `${delta}ms`);
+  };
+};
+export {
+  responseTime
+};
+//# sourceMappingURL=response-time.mjs.map

package/dist/middlewares/response-time.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.mjs","sources":["../../src/middlewares/response-time.ts"],"sourcesContent":["import type { Common } from '@strapi/types';\n\nexport const responseTime: Common.MiddlewareFactory = () => {\n  return async (ctx, next) => {\n    const start = Date.now();\n\n    await next();\n\n    const delta = Math.ceil(Date.now() - start);\n    ctx.set('X-Response-Time', `${delta}ms`);\n  };\n};\n"],"names":[],"mappings":"AAEO,MAAM,eAAyC,MAAM;AACnD,SAAA,OAAO,KAAK,SAAS;AACpB,UAAA,QAAQ,KAAK;AAEnB,UAAM,KAAK;AAEX,UAAM,QAAQ,KAAK,KAAK,KAAK,IAAA,IAAQ,KAAK;AAC1C,QAAI,IAAI,mBAAmB,GAAG,KAAK,IAAI;AAAA,EAAA;AAE3C;"}

package/dist/middlewares/responses.d.ts

@@ -0,0 +1,6 @@
+import type { Common } from '@strapi/types';
+export interface Config {
+    handlers?: Record<number, Common.MiddlewareHandler>;
+}
+export declare const responses: Common.MiddlewareFactory<Config>;
+//# sourceMappingURL=responses.d.ts.map

package/dist/middlewares/responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/middlewares/responses.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAED,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAWtD,CAAC"}

package/dist/middlewares/responses.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
+const responses = (config = {}) => {
+  return async (ctx, next) => {
+    await next();
+    const { status } = ctx;
+    const handler = config?.handlers?.[status];
+    if (_.isFunction(handler)) {
+      await handler(ctx, next);
+    }
+  };
+};
+exports.responses = responses;
+//# sourceMappingURL=responses.js.map

package/dist/middlewares/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sources":["../../src/middlewares/responses.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport type { Common } from '@strapi/types';\n\nexport interface Config {\n  handlers?: Record<number, Common.MiddlewareHandler>;\n}\n\nexport const responses: Common.MiddlewareFactory<Config> = (config = {}) => {\n  return async (ctx, next) => {\n    await next();\n\n    const { status } = ctx;\n    const handler = config?.handlers?.[status];\n\n    if (isFunction(handler)) {\n      await handler(ctx, next);\n    }\n  };\n};\n"],"names":["isFunction"],"mappings":";;;AAOO,MAAM,YAA8C,CAAC,SAAS,OAAO;AACnE,SAAA,OAAO,KAAK,SAAS;AAC1B,UAAM,KAAK;AAEL,UAAA,EAAE,OAAW,IAAA;AACb,UAAA,UAAU,QAAQ,WAAW,MAAM;AAErC,QAAAA,EAAAA,WAAW,OAAO,GAAG;AACjB,YAAA,QAAQ,KAAK,IAAI;AAAA,IACzB;AAAA,EAAA;AAEJ;;"}

package/dist/middlewares/responses.mjs

@@ -0,0 +1,15 @@
+import { isFunction } from "lodash/fp";
+const responses = (config = {}) => {
+  return async (ctx, next) => {
+    await next();
+    const { status } = ctx;
+    const handler = config?.handlers?.[status];
+    if (isFunction(handler)) {
+      await handler(ctx, next);
+    }
+  };
+};
+export {
+  responses
+};
+//# sourceMappingURL=responses.mjs.map

package/dist/middlewares/responses.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.mjs","sources":["../../src/middlewares/responses.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport type { Common } from '@strapi/types';\n\nexport interface Config {\n  handlers?: Record<number, Common.MiddlewareHandler>;\n}\n\nexport const responses: Common.MiddlewareFactory<Config> = (config = {}) => {\n  return async (ctx, next) => {\n    await next();\n\n    const { status } = ctx;\n    const handler = config?.handlers?.[status];\n\n    if (isFunction(handler)) {\n      await handler(ctx, next);\n    }\n  };\n};\n"],"names":[],"mappings":";AAOO,MAAM,YAA8C,CAAC,SAAS,OAAO;AACnE,SAAA,OAAO,KAAK,SAAS;AAC1B,UAAM,KAAK;AAEL,UAAA,EAAE,OAAW,IAAA;AACb,UAAA,UAAU,QAAQ,WAAW,MAAM;AAErC,QAAA,WAAW,OAAO,GAAG;AACjB,YAAA,QAAQ,KAAK,IAAI;AAAA,IACzB;AAAA,EAAA;AAEJ;"}

package/dist/middlewares/security.d.ts

@@ -0,0 +1,5 @@
+import { KoaHelmet } from 'koa-helmet';
+import type { Common } from '@strapi/types';
+export type Config = NonNullable<Parameters<KoaHelmet>[0]>;
+export declare const security: Common.MiddlewareFactory<Config>;
+//# sourceMappingURL=security.d.ts.map

package/dist/middlewares/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/middlewares/security.ts"],"names":[],"mappings":"AACA,OAAe,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AA0B3D,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAwBnD,CAAC"}

package/dist/middlewares/security.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
+const helmet = require("koa-helmet");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const helmet__default = /* @__PURE__ */ _interopDefault(helmet);
+const defaults = {
+  crossOriginEmbedderPolicy: false,
+  crossOriginOpenerPolicy: false,
+  crossOriginResourcePolicy: false,
+  originAgentCluster: false,
+  contentSecurityPolicy: {
+    useDefaults: true,
+    directives: {
+      "connect-src": ["'self'", "https:"],
+      "img-src": ["'self'", "data:", "blob:", "https://market-assets.strapi.io"],
+      "media-src": ["'self'", "data:", "blob:"],
+      upgradeInsecureRequests: null
+    }
+  },
+  xssFilter: false,
+  hsts: {
+    maxAge: 31536e3,
+    includeSubDomains: true
+  },
+  frameguard: {
+    action: "sameorigin"
+  }
+};
+const security = (config, { strapi }) => (ctx, next) => {
+  let helmetConfig = _.defaultsDeep(defaults, config);
+  const specialPaths = ["/documentation"];
+  if (strapi.plugin("graphql")) {
+    const { config: gqlConfig } = strapi.plugin("graphql");
+    specialPaths.push(gqlConfig("endpoint"));
+  }
+  if (ctx.method === "GET" && specialPaths.some((str) => ctx.path.startsWith(str))) {
+    helmetConfig = _.merge(helmetConfig, {
+      contentSecurityPolicy: {
+        directives: {
+          "script-src": ["'self'", "'unsafe-inline'", "cdn.jsdelivr.net"],
+          "img-src": ["'self'", "data:", "cdn.jsdelivr.net", "strapi.io"]
+        }
+      }
+    });
+  }
+  return helmet__default.default(helmetConfig)(ctx, next);
+};
+exports.security = security;
+//# sourceMappingURL=security.js.map

package/dist/middlewares/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sources":["../../src/middlewares/security.ts"],"sourcesContent":["import { defaultsDeep, merge } from 'lodash/fp';\nimport helmet, { KoaHelmet } from 'koa-helmet';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<KoaHelmet>[0]>;\n\nconst defaults: Config = {\n  crossOriginEmbedderPolicy: false,\n  crossOriginOpenerPolicy: false,\n  crossOriginResourcePolicy: false,\n  originAgentCluster: false,\n  contentSecurityPolicy: {\n    useDefaults: true,\n    directives: {\n      'connect-src': [\"'self'\", 'https:'],\n      'img-src': [\"'self'\", 'data:', 'blob:', 'https://market-assets.strapi.io'],\n      'media-src': [\"'self'\", 'data:', 'blob:'],\n      upgradeInsecureRequests: null,\n    },\n  },\n  xssFilter: false,\n  hsts: {\n    maxAge: 31536000,\n    includeSubDomains: true,\n  },\n  frameguard: {\n    action: 'sameorigin',\n  },\n};\n\nexport const security: Common.MiddlewareFactory<Config> =\n  (config, { strapi }) =>\n  (ctx, next) => {\n    let helmetConfig: Config = defaultsDeep(defaults, config);\n\n    const specialPaths = ['/documentation'];\n\n    if (strapi.plugin('graphql')) {\n      const { config: gqlConfig } = strapi.plugin('graphql');\n      specialPaths.push(gqlConfig('endpoint'));\n    }\n\n    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {\n      helmetConfig = merge(helmetConfig, {\n        contentSecurityPolicy: {\n          directives: {\n            'script-src': [\"'self'\", \"'unsafe-inline'\", 'cdn.jsdelivr.net'],\n            'img-src': [\"'self'\", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],\n          },\n        },\n      });\n    }\n\n    return helmet(helmetConfig)(ctx, next);\n  };\n"],"names":["defaultsDeep","merge","helmet"],"mappings":";;;;;;AAOA,MAAM,WAAmB;AAAA,EACvB,2BAA2B;AAAA,EAC3B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,IACrB,aAAa;AAAA,IACb,YAAY;AAAA,MACV,eAAe,CAAC,UAAU,QAAQ;AAAA,MAClC,WAAW,CAAC,UAAU,SAAS,SAAS,iCAAiC;AAAA,MACzE,aAAa,CAAC,UAAU,SAAS,OAAO;AAAA,MACxC,yBAAyB;AAAA,IAC3B;AAAA,EACF;AAAA,EACA,WAAW;AAAA,EACX,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,mBAAmB;AAAA,EACrB;AAAA,EACA,YAAY;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAEa,MAAA,WACX,CAAC,QAAQ,EAAE,aACX,CAAC,KAAK,SAAS;AACT,MAAA,eAAuBA,EAAAA,aAAa,UAAU,MAAM;AAElD,QAAA,eAAe,CAAC,gBAAgB;AAElC,MAAA,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,EAAE,QAAQ,UAAA,IAAc,OAAO,OAAO,SAAS;AACxC,iBAAA,KAAK,UAAU,UAAU,CAAC;AAAA,EACzC;AAEA,MAAI,IAAI,WAAW,SAAS,aAAa,KAAK,CAAC,QAAQ,IAAI,KAAK,WAAW,GAAG,CAAC,GAAG;AAChF,mBAAeC,QAAM,cAAc;AAAA,MACjC,uBAAuB;AAAA,QACrB,YAAY;AAAA,UACV,cAAc,CAAC,UAAU,mBAAmB,kBAAkB;AAAA,UAC9D,WAAW,CAAC,UAAU,SAAS,oBAAoB,WAAW;AAAA,QAChE;AAAA,MACF;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAOC,gBAAO,QAAA,YAAY,EAAE,KAAK,IAAI;AACvC;;"}

package/dist/middlewares/security.mjs

@@ -0,0 +1,48 @@
+import { defaultsDeep, merge } from "lodash/fp";
+import helmet from "koa-helmet";
+const defaults = {
+  crossOriginEmbedderPolicy: false,
+  crossOriginOpenerPolicy: false,
+  crossOriginResourcePolicy: false,
+  originAgentCluster: false,
+  contentSecurityPolicy: {
+    useDefaults: true,
+    directives: {
+      "connect-src": ["'self'", "https:"],
+      "img-src": ["'self'", "data:", "blob:", "https://market-assets.strapi.io"],
+      "media-src": ["'self'", "data:", "blob:"],
+      upgradeInsecureRequests: null
+    }
+  },
+  xssFilter: false,
+  hsts: {
+    maxAge: 31536e3,
+    includeSubDomains: true
+  },
+  frameguard: {
+    action: "sameorigin"
+  }
+};
+const security = (config, { strapi }) => (ctx, next) => {
+  let helmetConfig = defaultsDeep(defaults, config);
+  const specialPaths = ["/documentation"];
+  if (strapi.plugin("graphql")) {
+    const { config: gqlConfig } = strapi.plugin("graphql");
+    specialPaths.push(gqlConfig("endpoint"));
+  }
+  if (ctx.method === "GET" && specialPaths.some((str) => ctx.path.startsWith(str))) {
+    helmetConfig = merge(helmetConfig, {
+      contentSecurityPolicy: {
+        directives: {
+          "script-src": ["'self'", "'unsafe-inline'", "cdn.jsdelivr.net"],
+          "img-src": ["'self'", "data:", "cdn.jsdelivr.net", "strapi.io"]
+        }
+      }
+    });
+  }
+  return helmet(helmetConfig)(ctx, next);
+};
+export {
+  security
+};
+//# sourceMappingURL=security.mjs.map

package/dist/middlewares/security.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.mjs","sources":["../../src/middlewares/security.ts"],"sourcesContent":["import { defaultsDeep, merge } from 'lodash/fp';\nimport helmet, { KoaHelmet } from 'koa-helmet';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<KoaHelmet>[0]>;\n\nconst defaults: Config = {\n  crossOriginEmbedderPolicy: false,\n  crossOriginOpenerPolicy: false,\n  crossOriginResourcePolicy: false,\n  originAgentCluster: false,\n  contentSecurityPolicy: {\n    useDefaults: true,\n    directives: {\n      'connect-src': [\"'self'\", 'https:'],\n      'img-src': [\"'self'\", 'data:', 'blob:', 'https://market-assets.strapi.io'],\n      'media-src': [\"'self'\", 'data:', 'blob:'],\n      upgradeInsecureRequests: null,\n    },\n  },\n  xssFilter: false,\n  hsts: {\n    maxAge: 31536000,\n    includeSubDomains: true,\n  },\n  frameguard: {\n    action: 'sameorigin',\n  },\n};\n\nexport const security: Common.MiddlewareFactory<Config> =\n  (config, { strapi }) =>\n  (ctx, next) => {\n    let helmetConfig: Config = defaultsDeep(defaults, config);\n\n    const specialPaths = ['/documentation'];\n\n    if (strapi.plugin('graphql')) {\n      const { config: gqlConfig } = strapi.plugin('graphql');\n      specialPaths.push(gqlConfig('endpoint'));\n    }\n\n    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {\n      helmetConfig = merge(helmetConfig, {\n        contentSecurityPolicy: {\n          directives: {\n            'script-src': [\"'self'\", \"'unsafe-inline'\", 'cdn.jsdelivr.net'],\n            'img-src': [\"'self'\", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],\n          },\n        },\n      });\n    }\n\n    return helmet(helmetConfig)(ctx, next);\n  };\n"],"names":[],"mappings":";;AAOA,MAAM,WAAmB;AAAA,EACvB,2BAA2B;AAAA,EAC3B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,IACrB,aAAa;AAAA,IACb,YAAY;AAAA,MACV,eAAe,CAAC,UAAU,QAAQ;AAAA,MAClC,WAAW,CAAC,UAAU,SAAS,SAAS,iCAAiC;AAAA,MACzE,aAAa,CAAC,UAAU,SAAS,OAAO;AAAA,MACxC,yBAAyB;AAAA,IAC3B;AAAA,EACF;AAAA,EACA,WAAW;AAAA,EACX,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,mBAAmB;AAAA,EACrB;AAAA,EACA,YAAY;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAEa,MAAA,WACX,CAAC,QAAQ,EAAE,aACX,CAAC,KAAK,SAAS;AACT,MAAA,eAAuB,aAAa,UAAU,MAAM;AAElD,QAAA,eAAe,CAAC,gBAAgB;AAElC,MAAA,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,EAAE,QAAQ,UAAA,IAAc,OAAO,OAAO,SAAS;AACxC,iBAAA,KAAK,UAAU,UAAU,CAAC;AAAA,EACzC;AAEA,MAAI,IAAI,WAAW,SAAS,aAAa,KAAK,CAAC,QAAQ,IAAI,KAAK,WAAW,GAAG,CAAC,GAAG;AAChF,mBAAe,MAAM,cAAc;AAAA,MACjC,uBAAuB;AAAA,QACrB,YAAY;AAAA,UACV,cAAc,CAAC,UAAU,mBAAmB,kBAAkB;AAAA,UAC9D,WAAW,CAAC,UAAU,SAAS,oBAAoB,WAAW;AAAA,QAChE;AAAA,MACF;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAO,OAAO,YAAY,EAAE,KAAK,IAAI;AACvC;"}

package/dist/middlewares/session.d.ts

@@ -0,0 +1,4 @@
+import koaSession from 'koa-session';
+import type { Common } from '@strapi/types';
+export declare const session: Common.MiddlewareFactory<Partial<koaSession.opts>>;
+//# sourceMappingURL=session.d.ts.map

package/dist/middlewares/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/middlewares/session.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAe5C,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CActE,CAAC"}

package/dist/middlewares/session.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
+const koaSession = require("koa-session");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const koaSession__default = /* @__PURE__ */ _interopDefault(koaSession);
+const defaultConfig = {
+  key: "koa.sess",
+  maxAge: 864e5,
+  autoCommit: true,
+  overwrite: true,
+  httpOnly: true,
+  signed: true,
+  rolling: false,
+  renew: false,
+  secure: process.env.NODE_ENV === "production",
+  sameSite: void 0
+};
+const session = (userConfig, { strapi }) => {
+  const { keys } = strapi.server.app;
+  if (!_.isArray(keys) || _.isEmpty(keys) || keys.some(_.isEmpty)) {
+    throw new Error(
+      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`
+    );
+  }
+  const config = { ...defaultConfig, ...userConfig };
+  strapi.server.use(koaSession__default.default(config, strapi.server.app));
+};
+exports.session = session;
+//# sourceMappingURL=session.js.map