@strapi/core 0.0.0-experimental.6dbac0c205b0f8495781db5706c18cac1a62e62b

package/dist/middlewares/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sources":["../../src/middlewares/session.ts"],"sourcesContent":["import { isEmpty, isArray } from 'lodash/fp';\nimport koaSession from 'koa-session';\nimport type { Common } from '@strapi/types';\n\nconst defaultConfig = {\n  key: 'koa.sess',\n  maxAge: 86400000,\n  autoCommit: true,\n  overwrite: true,\n  httpOnly: true,\n  signed: true,\n  rolling: false,\n  renew: false,\n  secure: process.env.NODE_ENV === 'production',\n  sameSite: undefined,\n};\n\nexport const session: Common.MiddlewareFactory<Partial<koaSession.opts>> = (\n  userConfig,\n  { strapi }\n) => {\n  const { keys } = strapi.server.app;\n  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {\n    throw new Error(\n      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`\n    );\n  }\n\n  const config: Partial<koaSession.opts> = { ...defaultConfig, ...userConfig };\n\n  strapi.server.use(koaSession(config, strapi.server.app));\n};\n"],"names":["isArray","isEmpty","koaSession"],"mappings":";;;;;;AAIA,MAAM,gBAAgB;AAAA,EACpB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AACZ;AAEO,MAAM,UAA8D,CACzE,YACA,EAAE,aACC;AACH,QAAM,EAAE,KAAS,IAAA,OAAO,OAAO;AAC3B,MAAA,CAACA,EAAAA,QAAQ,IAAI,KAAKC,EAAA,QAAQ,IAAI,KAAK,KAAK,KAAKA,EAAAA,OAAO,GAAG;AACzD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,SAAmC,EAAE,GAAG,eAAe,GAAG,WAAW;AAE3E,SAAO,OAAO,IAAIC,oBAAA,QAAW,QAAQ,OAAO,OAAO,GAAG,CAAC;AACzD;;"}

package/dist/middlewares/session.mjs

@@ -0,0 +1,28 @@
+import { isArray, isEmpty } from "lodash/fp";
+import koaSession from "koa-session";
+const defaultConfig = {
+  key: "koa.sess",
+  maxAge: 864e5,
+  autoCommit: true,
+  overwrite: true,
+  httpOnly: true,
+  signed: true,
+  rolling: false,
+  renew: false,
+  secure: process.env.NODE_ENV === "production",
+  sameSite: void 0
+};
+const session = (userConfig, { strapi }) => {
+  const { keys } = strapi.server.app;
+  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {
+    throw new Error(
+      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`
+    );
+  }
+  const config = { ...defaultConfig, ...userConfig };
+  strapi.server.use(koaSession(config, strapi.server.app));
+};
+export {
+  session
+};
+//# sourceMappingURL=session.mjs.map

package/dist/middlewares/session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.mjs","sources":["../../src/middlewares/session.ts"],"sourcesContent":["import { isEmpty, isArray } from 'lodash/fp';\nimport koaSession from 'koa-session';\nimport type { Common } from '@strapi/types';\n\nconst defaultConfig = {\n  key: 'koa.sess',\n  maxAge: 86400000,\n  autoCommit: true,\n  overwrite: true,\n  httpOnly: true,\n  signed: true,\n  rolling: false,\n  renew: false,\n  secure: process.env.NODE_ENV === 'production',\n  sameSite: undefined,\n};\n\nexport const session: Common.MiddlewareFactory<Partial<koaSession.opts>> = (\n  userConfig,\n  { strapi }\n) => {\n  const { keys } = strapi.server.app;\n  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {\n    throw new Error(\n      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`\n    );\n  }\n\n  const config: Partial<koaSession.opts> = { ...defaultConfig, ...userConfig };\n\n  strapi.server.use(koaSession(config, strapi.server.app));\n};\n"],"names":[],"mappings":";;AAIA,MAAM,gBAAgB;AAAA,EACpB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AACZ;AAEO,MAAM,UAA8D,CACzE,YACA,EAAE,aACC;AACH,QAAM,EAAE,KAAS,IAAA,OAAO,OAAO;AAC3B,MAAA,CAAC,QAAQ,IAAI,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,OAAO,GAAG;AACzD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,SAAmC,EAAE,GAAG,eAAe,GAAG,WAAW;AAE3E,SAAO,OAAO,IAAI,WAAW,QAAQ,OAAO,OAAO,GAAG,CAAC;AACzD;"}

package/dist/services/auth/index.d.ts

@@ -0,0 +1,26 @@
+import type { Common } from '@strapi/types';
+import type { ParameterizedContext } from 'koa';
+interface AuthenticationResponse {
+    authenticated?: boolean;
+    credentials?: unknown;
+    ability?: unknown;
+    error?: Error | null;
+}
+interface AuthenticationInfo {
+    strategy: Strategy;
+    credentials: unknown;
+    ability: unknown;
+}
+interface Strategy {
+    name: string;
+    authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;
+    verify?: (auth: AuthenticationInfo, config: Common.RouteConfig['auth']) => Promise<any>;
+}
+interface Authentication {
+    register: (type: string, strategy: Strategy) => Authentication;
+    authenticate: Common.MiddlewareHandler;
+    verify: (auth: AuthenticationInfo, config?: Common.RouteConfig['auth']) => Promise<any>;
+}
+declare const createAuthentication: () => Authentication;
+export default createAuthentication;
+//# sourceMappingURL=index.d.ts.map

package/dist/services/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/auth/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,KAAK,CAAC;AAEhD,UAAU,sBAAsB;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAED,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACzF;AAED,UAAU,cAAc;IACtB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,cAAc,CAAC;IAC/D,YAAY,EAAE,MAAM,CAAC,iBAAiB,CAAC;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACzF;AAcD,QAAA,MAAM,oBAAoB,QAAO,cA4FhC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/services/auth/index.js

@@ -0,0 +1,81 @@
+"use strict";
+const assert = require("assert/strict");
+const _ = require("lodash/fp");
+const strapiUtils = require("@strapi/utils");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const assert__default = /* @__PURE__ */ _interopDefault(assert);
+const INVALID_STRATEGY_MSG = "Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}";
+const validStrategy = (strategy) => {
+  assert__default.default(_.has("authenticate", strategy), INVALID_STRATEGY_MSG);
+  assert__default.default(typeof strategy.authenticate === "function", INVALID_STRATEGY_MSG);
+  if (_.has("verify", strategy)) {
+    assert__default.default(typeof strategy.verify === "function", INVALID_STRATEGY_MSG);
+  }
+};
+const createAuthentication = () => {
+  const strategies = {};
+  return {
+    register(type, strategy) {
+      validStrategy(strategy);
+      if (!strategies[type]) {
+        strategies[type] = [];
+      }
+      strategies[type].push(strategy);
+      return this;
+    },
+    async authenticate(ctx, next) {
+      const route = ctx.state.route;
+      const config = route?.config?.auth;
+      if (config === false) {
+        return next();
+      }
+      const routeStrategies = route.info.type ? strategies[route.info.type] : [];
+      const configStrategies = config?.strategies ?? routeStrategies ?? [];
+      const strategiesToUse = configStrategies.reduce(
+        (acc, strategy) => {
+          if (typeof strategy === "string") {
+            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);
+            if (routeStrategy) {
+              acc.push(routeStrategy);
+            }
+          } else if (typeof strategy === "object") {
+            validStrategy(strategy);
+            acc.push(strategy);
+          }
+          return acc;
+        },
+        []
+      );
+      for (const strategy of strategiesToUse) {
+        const result = await strategy.authenticate(ctx);
+        const { authenticated = false, credentials, ability = null, error = null } = result || {};
+        if (error !== null) {
+          return ctx.unauthorized(error);
+        }
+        if (authenticated) {
+          ctx.state.isAuthenticated = true;
+          ctx.state.auth = {
+            strategy,
+            credentials,
+            ability
+          };
+          return next();
+        }
+      }
+      return ctx.unauthorized("Missing or invalid credentials");
+    },
+    async verify(auth, config = {}) {
+      if (config === false) {
+        return;
+      }
+      if (!auth) {
+        throw new strapiUtils.errors.UnauthorizedError();
+      }
+      if (typeof auth.strategy.verify === "function") {
+        return auth.strategy.verify(auth, config);
+      }
+    }
+  };
+};
+module.exports = createAuthentication;
+//# sourceMappingURL=index.js.map

package/dist/services/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../src/services/auth/index.ts"],"sourcesContent":["import assert from 'assert/strict';\nimport { has } from 'lodash/fp';\n\nimport { errors } from '@strapi/utils';\nimport type { Common } from '@strapi/types';\nimport type { ParameterizedContext } from 'koa';\n\ninterface AuthenticationResponse {\n  authenticated?: boolean;\n  credentials?: unknown;\n  ability?: unknown;\n  error?: Error | null;\n}\n\ninterface AuthenticationInfo {\n  strategy: Strategy;\n  credentials: unknown;\n  ability: unknown;\n}\n\ninterface Strategy {\n  name: string;\n  authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;\n  verify?: (auth: AuthenticationInfo, config: Common.RouteConfig['auth']) => Promise<any>;\n}\n\ninterface Authentication {\n  register: (type: string, strategy: Strategy) => Authentication;\n  authenticate: Common.MiddlewareHandler;\n  verify: (auth: AuthenticationInfo, config?: Common.RouteConfig['auth']) => Promise<any>;\n}\n\nconst INVALID_STRATEGY_MSG =\n  'Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}';\n\nconst validStrategy = (strategy: Strategy) => {\n  assert(has('authenticate', strategy), INVALID_STRATEGY_MSG);\n  assert(typeof strategy.authenticate === 'function', INVALID_STRATEGY_MSG);\n\n  if (has('verify', strategy)) {\n    assert(typeof strategy.verify === 'function', INVALID_STRATEGY_MSG);\n  }\n};\n\nconst createAuthentication = (): Authentication => {\n  const strategies: Record<string, Strategy[]> = {};\n\n  return {\n    register(type, strategy) {\n      validStrategy(strategy);\n\n      if (!strategies[type]) {\n        strategies[type] = [];\n      }\n\n      strategies[type].push(strategy);\n\n      return this;\n    },\n\n    async authenticate(ctx, next) {\n      const route: Common.Route = ctx.state.route;\n\n      // use route strategy\n      const config = route?.config?.auth;\n\n      if (config === false) {\n        return next();\n      }\n\n      const routeStrategies = route.info.type ? strategies[route.info.type] : [];\n      const configStrategies = (config?.strategies ?? routeStrategies ?? []) as Array<\n        string | Strategy\n      >;\n\n      const strategiesToUse: Strategy[] = configStrategies.reduce(\n        (acc, strategy: string | Strategy) => {\n          // Resolve by strategy name\n          if (typeof strategy === 'string') {\n            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);\n\n            if (routeStrategy) {\n              acc.push(routeStrategy);\n            }\n          }\n\n          // Use the given strategy as is\n          else if (typeof strategy === 'object') {\n            validStrategy(strategy);\n\n            acc.push(strategy);\n          }\n\n          return acc;\n        },\n        [] as Strategy[]\n      );\n\n      for (const strategy of strategiesToUse) {\n        const result = await strategy.authenticate(ctx);\n\n        const { authenticated = false, credentials, ability = null, error = null } = result || {};\n\n        if (error !== null) {\n          return ctx.unauthorized(error);\n        }\n\n        if (authenticated) {\n          ctx.state.isAuthenticated = true;\n          ctx.state.auth = {\n            strategy,\n            credentials,\n            ability,\n          };\n\n          return next();\n        }\n      }\n\n      return ctx.unauthorized('Missing or invalid credentials');\n    },\n\n    async verify(auth, config = {}) {\n      if (config === false) {\n        return;\n      }\n\n      if (!auth) {\n        throw new errors.UnauthorizedError();\n      }\n\n      if (typeof auth.strategy.verify === 'function') {\n        return auth.strategy.verify(auth, config);\n      }\n    },\n  };\n};\n\nexport default createAuthentication;\n"],"names":["assert","has","errors"],"mappings":";;;;;;AAgCA,MAAM,uBACJ;AAEF,MAAM,gBAAgB,CAAC,aAAuB;AAC5CA,kBAAAA,QAAOC,EAAAA,IAAI,gBAAgB,QAAQ,GAAG,oBAAoB;AAC1DD,kBAAAA,QAAO,OAAO,SAAS,iBAAiB,YAAY,oBAAoB;AAEpE,MAAAC,EAAA,IAAI,UAAU,QAAQ,GAAG;AAC3BD,oBAAAA,QAAO,OAAO,SAAS,WAAW,YAAY,oBAAoB;AAAA,EACpE;AACF;AAEA,MAAM,uBAAuB,MAAsB;AACjD,QAAM,aAAyC,CAAA;AAExC,SAAA;AAAA,IACL,SAAS,MAAM,UAAU;AACvB,oBAAc,QAAQ;AAElB,UAAA,CAAC,WAAW,IAAI,GAAG;AACV,mBAAA,IAAI,IAAI;MACrB;AAEW,iBAAA,IAAI,EAAE,KAAK,QAAQ;AAEvB,aAAA;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,KAAK,MAAM;AACtB,YAAA,QAAsB,IAAI,MAAM;AAGhC,YAAA,SAAS,OAAO,QAAQ;AAE9B,UAAI,WAAW,OAAO;AACpB,eAAO,KAAK;AAAA,MACd;AAEM,YAAA,kBAAkB,MAAM,KAAK,OAAO,WAAW,MAAM,KAAK,IAAI,IAAI;AACxE,YAAM,mBAAoB,QAAQ,cAAc,mBAAmB,CAAA;AAInE,YAAM,kBAA8B,iBAAiB;AAAA,QACnD,CAAC,KAAK,aAAgC;AAEhC,cAAA,OAAO,aAAa,UAAU;AAChC,kBAAM,gBAAgB,gBAAgB,KAAK,CAAC,OAAO,GAAG,SAAS,QAAQ;AAEvE,gBAAI,eAAe;AACjB,kBAAI,KAAK,aAAa;AAAA,YACxB;AAAA,UAAA,WAIO,OAAO,aAAa,UAAU;AACrC,0BAAc,QAAQ;AAEtB,gBAAI,KAAK,QAAQ;AAAA,UACnB;AAEO,iBAAA;AAAA,QACT;AAAA,QACA,CAAC;AAAA,MAAA;AAGH,iBAAW,YAAY,iBAAiB;AACtC,cAAM,SAAS,MAAM,SAAS,aAAa,GAAG;AAExC,cAAA,EAAE,gBAAgB,OAAO,aAAa,UAAU,MAAM,QAAQ,KAAA,IAAS,UAAU;AAEvF,YAAI,UAAU,MAAM;AACX,iBAAA,IAAI,aAAa,KAAK;AAAA,QAC/B;AAEA,YAAI,eAAe;AACjB,cAAI,MAAM,kBAAkB;AAC5B,cAAI,MAAM,OAAO;AAAA,YACf;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAGF,iBAAO,KAAK;AAAA,QACd;AAAA,MACF;AAEO,aAAA,IAAI,aAAa,gCAAgC;AAAA,IAC1D;AAAA,IAEA,MAAM,OAAO,MAAM,SAAS,IAAI;AAC9B,UAAI,WAAW,OAAO;AACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM;AACH,cAAA,IAAIE,YAAAA,OAAO;MACnB;AAEA,UAAI,OAAO,KAAK,SAAS,WAAW,YAAY;AAC9C,eAAO,KAAK,SAAS,OAAO,MAAM,MAAM;AAAA,MAC1C;AAAA,IACF;AAAA,EAAA;AAEJ;;"}

package/dist/services/auth/index.mjs

@@ -0,0 +1,80 @@
+import assert from "assert/strict";
+import { has } from "lodash/fp";
+import { errors } from "@strapi/utils";
+const INVALID_STRATEGY_MSG = "Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}";
+const validStrategy = (strategy) => {
+  assert(has("authenticate", strategy), INVALID_STRATEGY_MSG);
+  assert(typeof strategy.authenticate === "function", INVALID_STRATEGY_MSG);
+  if (has("verify", strategy)) {
+    assert(typeof strategy.verify === "function", INVALID_STRATEGY_MSG);
+  }
+};
+const createAuthentication = () => {
+  const strategies = {};
+  return {
+    register(type, strategy) {
+      validStrategy(strategy);
+      if (!strategies[type]) {
+        strategies[type] = [];
+      }
+      strategies[type].push(strategy);
+      return this;
+    },
+    async authenticate(ctx, next) {
+      const route = ctx.state.route;
+      const config = route?.config?.auth;
+      if (config === false) {
+        return next();
+      }
+      const routeStrategies = route.info.type ? strategies[route.info.type] : [];
+      const configStrategies = config?.strategies ?? routeStrategies ?? [];
+      const strategiesToUse = configStrategies.reduce(
+        (acc, strategy) => {
+          if (typeof strategy === "string") {
+            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);
+            if (routeStrategy) {
+              acc.push(routeStrategy);
+            }
+          } else if (typeof strategy === "object") {
+            validStrategy(strategy);
+            acc.push(strategy);
+          }
+          return acc;
+        },
+        []
+      );
+      for (const strategy of strategiesToUse) {
+        const result = await strategy.authenticate(ctx);
+        const { authenticated = false, credentials, ability = null, error = null } = result || {};
+        if (error !== null) {
+          return ctx.unauthorized(error);
+        }
+        if (authenticated) {
+          ctx.state.isAuthenticated = true;
+          ctx.state.auth = {
+            strategy,
+            credentials,
+            ability
+          };
+          return next();
+        }
+      }
+      return ctx.unauthorized("Missing or invalid credentials");
+    },
+    async verify(auth, config = {}) {
+      if (config === false) {
+        return;
+      }
+      if (!auth) {
+        throw new errors.UnauthorizedError();
+      }
+      if (typeof auth.strategy.verify === "function") {
+        return auth.strategy.verify(auth, config);
+      }
+    }
+  };
+};
+export {
+  createAuthentication as default
+};
+//# sourceMappingURL=index.mjs.map

package/dist/services/auth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../src/services/auth/index.ts"],"sourcesContent":["import assert from 'assert/strict';\nimport { has } from 'lodash/fp';\n\nimport { errors } from '@strapi/utils';\nimport type { Common } from '@strapi/types';\nimport type { ParameterizedContext } from 'koa';\n\ninterface AuthenticationResponse {\n  authenticated?: boolean;\n  credentials?: unknown;\n  ability?: unknown;\n  error?: Error | null;\n}\n\ninterface AuthenticationInfo {\n  strategy: Strategy;\n  credentials: unknown;\n  ability: unknown;\n}\n\ninterface Strategy {\n  name: string;\n  authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;\n  verify?: (auth: AuthenticationInfo, config: Common.RouteConfig['auth']) => Promise<any>;\n}\n\ninterface Authentication {\n  register: (type: string, strategy: Strategy) => Authentication;\n  authenticate: Common.MiddlewareHandler;\n  verify: (auth: AuthenticationInfo, config?: Common.RouteConfig['auth']) => Promise<any>;\n}\n\nconst INVALID_STRATEGY_MSG =\n  'Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}';\n\nconst validStrategy = (strategy: Strategy) => {\n  assert(has('authenticate', strategy), INVALID_STRATEGY_MSG);\n  assert(typeof strategy.authenticate === 'function', INVALID_STRATEGY_MSG);\n\n  if (has('verify', strategy)) {\n    assert(typeof strategy.verify === 'function', INVALID_STRATEGY_MSG);\n  }\n};\n\nconst createAuthentication = (): Authentication => {\n  const strategies: Record<string, Strategy[]> = {};\n\n  return {\n    register(type, strategy) {\n      validStrategy(strategy);\n\n      if (!strategies[type]) {\n        strategies[type] = [];\n      }\n\n      strategies[type].push(strategy);\n\n      return this;\n    },\n\n    async authenticate(ctx, next) {\n      const route: Common.Route = ctx.state.route;\n\n      // use route strategy\n      const config = route?.config?.auth;\n\n      if (config === false) {\n        return next();\n      }\n\n      const routeStrategies = route.info.type ? strategies[route.info.type] : [];\n      const configStrategies = (config?.strategies ?? routeStrategies ?? []) as Array<\n        string | Strategy\n      >;\n\n      const strategiesToUse: Strategy[] = configStrategies.reduce(\n        (acc, strategy: string | Strategy) => {\n          // Resolve by strategy name\n          if (typeof strategy === 'string') {\n            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);\n\n            if (routeStrategy) {\n              acc.push(routeStrategy);\n            }\n          }\n\n          // Use the given strategy as is\n          else if (typeof strategy === 'object') {\n            validStrategy(strategy);\n\n            acc.push(strategy);\n          }\n\n          return acc;\n        },\n        [] as Strategy[]\n      );\n\n      for (const strategy of strategiesToUse) {\n        const result = await strategy.authenticate(ctx);\n\n        const { authenticated = false, credentials, ability = null, error = null } = result || {};\n\n        if (error !== null) {\n          return ctx.unauthorized(error);\n        }\n\n        if (authenticated) {\n          ctx.state.isAuthenticated = true;\n          ctx.state.auth = {\n            strategy,\n            credentials,\n            ability,\n          };\n\n          return next();\n        }\n      }\n\n      return ctx.unauthorized('Missing or invalid credentials');\n    },\n\n    async verify(auth, config = {}) {\n      if (config === false) {\n        return;\n      }\n\n      if (!auth) {\n        throw new errors.UnauthorizedError();\n      }\n\n      if (typeof auth.strategy.verify === 'function') {\n        return auth.strategy.verify(auth, config);\n      }\n    },\n  };\n};\n\nexport default createAuthentication;\n"],"names":[],"mappings":";;;AAgCA,MAAM,uBACJ;AAEF,MAAM,gBAAgB,CAAC,aAAuB;AAC5C,SAAO,IAAI,gBAAgB,QAAQ,GAAG,oBAAoB;AAC1D,SAAO,OAAO,SAAS,iBAAiB,YAAY,oBAAoB;AAEpE,MAAA,IAAI,UAAU,QAAQ,GAAG;AAC3B,WAAO,OAAO,SAAS,WAAW,YAAY,oBAAoB;AAAA,EACpE;AACF;AAEA,MAAM,uBAAuB,MAAsB;AACjD,QAAM,aAAyC,CAAA;AAExC,SAAA;AAAA,IACL,SAAS,MAAM,UAAU;AACvB,oBAAc,QAAQ;AAElB,UAAA,CAAC,WAAW,IAAI,GAAG;AACV,mBAAA,IAAI,IAAI;MACrB;AAEW,iBAAA,IAAI,EAAE,KAAK,QAAQ;AAEvB,aAAA;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,KAAK,MAAM;AACtB,YAAA,QAAsB,IAAI,MAAM;AAGhC,YAAA,SAAS,OAAO,QAAQ;AAE9B,UAAI,WAAW,OAAO;AACpB,eAAO,KAAK;AAAA,MACd;AAEM,YAAA,kBAAkB,MAAM,KAAK,OAAO,WAAW,MAAM,KAAK,IAAI,IAAI;AACxE,YAAM,mBAAoB,QAAQ,cAAc,mBAAmB,CAAA;AAInE,YAAM,kBAA8B,iBAAiB;AAAA,QACnD,CAAC,KAAK,aAAgC;AAEhC,cAAA,OAAO,aAAa,UAAU;AAChC,kBAAM,gBAAgB,gBAAgB,KAAK,CAAC,OAAO,GAAG,SAAS,QAAQ;AAEvE,gBAAI,eAAe;AACjB,kBAAI,KAAK,aAAa;AAAA,YACxB;AAAA,UAAA,WAIO,OAAO,aAAa,UAAU;AACrC,0BAAc,QAAQ;AAEtB,gBAAI,KAAK,QAAQ;AAAA,UACnB;AAEO,iBAAA;AAAA,QACT;AAAA,QACA,CAAC;AAAA,MAAA;AAGH,iBAAW,YAAY,iBAAiB;AACtC,cAAM,SAAS,MAAM,SAAS,aAAa,GAAG;AAExC,cAAA,EAAE,gBAAgB,OAAO,aAAa,UAAU,MAAM,QAAQ,KAAA,IAAS,UAAU;AAEvF,YAAI,UAAU,MAAM;AACX,iBAAA,IAAI,aAAa,KAAK;AAAA,QAC/B;AAEA,YAAI,eAAe;AACjB,cAAI,MAAM,kBAAkB;AAC5B,cAAI,MAAM,OAAO;AAAA,YACf;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAGF,iBAAO,KAAK;AAAA,QACd;AAAA,MACF;AAEO,aAAA,IAAI,aAAa,gCAAgC;AAAA,IAC1D;AAAA,IAEA,MAAM,OAAO,MAAM,SAAS,IAAI;AAC9B,UAAI,WAAW,OAAO;AACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM;AACH,cAAA,IAAI,OAAO;MACnB;AAEA,UAAI,OAAO,KAAK,SAAS,WAAW,YAAY;AAC9C,eAAO,KAAK,SAAS,OAAO,MAAM,MAAM;AAAA,MAC1C;AAAA,IACF;AAAA,EAAA;AAEJ;"}

package/dist/services/content-api/index.d.ts

@@ -0,0 +1,54 @@
+import type { Strapi, Common } from '@strapi/types';
+/**
+ * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)
+ */
+declare const createContentAPI: (strapi: Strapi) => {
+    permissions: {
+        engine: import("@strapi/permissions/dist/engine").Engine;
+        providers: {
+            action: {
+                register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+            condition: {
+                register(condition: import("./permissions/providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+        };
+        registerActions: () => Promise<void>;
+        getActionsMap: () => Record<string, {
+            controllers: Record<string, string[]>;
+        }>;
+    };
+    getRoutesMap: () => Promise<Record<string, Common.Route[]>>;
+};
+export default createContentAPI;
+//# sourceMappingURL=index.d.ts.map

package/dist/services/content-api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/content-api/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAepD;;GAEG;AACH,QAAA,MAAM,gBAAgB,WAAY,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDvC,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/services/content-api/index.js

@@ -0,0 +1,59 @@
+"use strict";
+const _ = require("lodash");
+const index = require("./permissions/index.js");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const ___default = /* @__PURE__ */ _interopDefault(_);
+const transformRoutePrefixFor = (pluginName) => (route) => {
+  const prefix = route.config && route.config.prefix;
+  const path = prefix !== void 0 ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;
+  return {
+    ...route,
+    path
+  };
+};
+const filterContentAPI = (route) => route.info.type === "content-api";
+const createContentAPI = (strapi) => {
+  const getRoutesMap = async () => {
+    const routesMap = {};
+    ___default.default.forEach(strapi.api, (api, apiName) => {
+      const routes = ___default.default.flatMap(api.routes, (route) => {
+        if ("routes" in route) {
+          return route.routes;
+        }
+        return route;
+      }).filter(filterContentAPI);
+      if (routes.length === 0) {
+        return;
+      }
+      const apiPrefix = strapi.config.get("api.rest.prefix");
+      routesMap[`api::${apiName}`] = routes.map((route) => ({
+        ...route,
+        path: `${apiPrefix}${route.path}`
+      }));
+    });
+    ___default.default.forEach(strapi.plugins, (plugin, pluginName) => {
+      const transformPrefix = transformRoutePrefixFor(pluginName);
+      if (Array.isArray(plugin.routes)) {
+        return plugin.routes.map(transformPrefix).filter(filterContentAPI);
+      }
+      const routes = ___default.default.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(
+        filterContentAPI
+      );
+      if (routes.length === 0) {
+        return;
+      }
+      const apiPrefix = strapi.config.get("api.rest.prefix");
+      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({
+        ...route,
+        path: `${apiPrefix}${route.path}`
+      }));
+    });
+    return routesMap;
+  };
+  return {
+    permissions: index(strapi),
+    getRoutesMap
+  };
+};
+module.exports = createContentAPI;
+//# sourceMappingURL=index.js.map

package/dist/services/content-api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../src/services/content-api/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Strapi, Common } from '@strapi/types';\nimport instantiatePermissionsUtilities from './permissions';\n\nconst transformRoutePrefixFor = (pluginName: string) => (route: Common.Route) => {\n  const prefix = route.config && route.config.prefix;\n  const path = prefix !== undefined ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;\n\n  return {\n    ...route,\n    path,\n  };\n};\n\nconst filterContentAPI = (route: Common.Route) => route.info.type === 'content-api';\n\n/**\n * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)\n */\nconst createContentAPI = (strapi: Strapi) => {\n  const getRoutesMap = async () => {\n    const routesMap: Record<string, Common.Route[]> = {};\n\n    _.forEach(strapi.api, (api, apiName) => {\n      const routes = _.flatMap(api.routes, (route) => {\n        if ('routes' in route) {\n          return route.routes;\n        }\n\n        return route;\n      }).filter(filterContentAPI);\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`api::${apiName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    _.forEach(strapi.plugins, (plugin, pluginName) => {\n      const transformPrefix = transformRoutePrefixFor(pluginName);\n\n      if (Array.isArray(plugin.routes)) {\n        return plugin.routes.map(transformPrefix).filter(filterContentAPI);\n      }\n\n      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(\n        filterContentAPI\n      );\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    return routesMap;\n  };\n\n  return {\n    permissions: instantiatePermissionsUtilities(strapi),\n    getRoutesMap,\n  };\n};\n\nexport default createContentAPI;\n"],"names":["_","instantiatePermissionsUtilities"],"mappings":";;;;;AAIA,MAAM,0BAA0B,CAAC,eAAuB,CAAC,UAAwB;AAC/E,QAAM,SAAS,MAAM,UAAU,MAAM,OAAO;AAC5C,QAAM,OAAO,WAAW,SAAY,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,IAAI;AAEnF,SAAA;AAAA,IACL,GAAG;AAAA,IACH;AAAA,EAAA;AAEJ;AAEA,MAAM,mBAAmB,CAAC,UAAwB,MAAM,KAAK,SAAS;AAKhE,MAAA,mBAAmB,CAAC,WAAmB;AAC3C,QAAM,eAAe,YAAY;AAC/B,UAAM,YAA4C,CAAA;AAElDA,eAAA,QAAE,QAAQ,OAAO,KAAK,CAAC,KAAK,YAAY;AACtC,YAAM,SAASA,WAAAA,QAAE,QAAQ,IAAI,QAAQ,CAAC,UAAU;AAC9C,YAAI,YAAY,OAAO;AACrB,iBAAO,MAAM;AAAA,QACf;AAEO,eAAA;AAAA,MAAA,CACR,EAAE,OAAO,gBAAgB;AAEtB,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QACpD,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAC/B,EAAA;AAAA,IAAA,CACH;AAEDA,eAAA,QAAE,QAAQ,OAAO,SAAS,CAAC,QAAQ,eAAe;AAC1C,YAAA,kBAAkB,wBAAwB,UAAU;AAE1D,UAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,eAAO,OAAO,OAAO,IAAI,eAAe,EAAE,OAAO,gBAAgB;AAAA,MACnE;AAEA,YAAM,SAASA,WAAA,QAAE,QAAQ,OAAO,QAAQ,CAAC,UAAU,MAAM,OAAO,IAAI,eAAe,CAAC,EAAE;AAAA,QACpF;AAAA,MAAA;AAGE,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,WAAW,UAAU,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QAC1D,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAC/B,EAAA;AAAA,IAAA,CACH;AAEM,WAAA;AAAA,EAAA;AAGF,SAAA;AAAA,IACL,aAAaC,MAAgC,MAAM;AAAA,IACnD;AAAA,EAAA;AAEJ;;"}

package/dist/services/content-api/index.mjs

@@ -0,0 +1,58 @@
+import _ from "lodash";
+import instantiatePermissionsUtilities from "./permissions/index.mjs";
+const transformRoutePrefixFor = (pluginName) => (route) => {
+  const prefix = route.config && route.config.prefix;
+  const path = prefix !== void 0 ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;
+  return {
+    ...route,
+    path
+  };
+};
+const filterContentAPI = (route) => route.info.type === "content-api";
+const createContentAPI = (strapi) => {
+  const getRoutesMap = async () => {
+    const routesMap = {};
+    _.forEach(strapi.api, (api, apiName) => {
+      const routes = _.flatMap(api.routes, (route) => {
+        if ("routes" in route) {
+          return route.routes;
+        }
+        return route;
+      }).filter(filterContentAPI);
+      if (routes.length === 0) {
+        return;
+      }
+      const apiPrefix = strapi.config.get("api.rest.prefix");
+      routesMap[`api::${apiName}`] = routes.map((route) => ({
+        ...route,
+        path: `${apiPrefix}${route.path}`
+      }));
+    });
+    _.forEach(strapi.plugins, (plugin, pluginName) => {
+      const transformPrefix = transformRoutePrefixFor(pluginName);
+      if (Array.isArray(plugin.routes)) {
+        return plugin.routes.map(transformPrefix).filter(filterContentAPI);
+      }
+      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(
+        filterContentAPI
+      );
+      if (routes.length === 0) {
+        return;
+      }
+      const apiPrefix = strapi.config.get("api.rest.prefix");
+      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({
+        ...route,
+        path: `${apiPrefix}${route.path}`
+      }));
+    });
+    return routesMap;
+  };
+  return {
+    permissions: instantiatePermissionsUtilities(strapi),
+    getRoutesMap
+  };
+};
+export {
+  createContentAPI as default
+};
+//# sourceMappingURL=index.mjs.map

package/dist/services/content-api/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../src/services/content-api/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Strapi, Common } from '@strapi/types';\nimport instantiatePermissionsUtilities from './permissions';\n\nconst transformRoutePrefixFor = (pluginName: string) => (route: Common.Route) => {\n  const prefix = route.config && route.config.prefix;\n  const path = prefix !== undefined ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;\n\n  return {\n    ...route,\n    path,\n  };\n};\n\nconst filterContentAPI = (route: Common.Route) => route.info.type === 'content-api';\n\n/**\n * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)\n */\nconst createContentAPI = (strapi: Strapi) => {\n  const getRoutesMap = async () => {\n    const routesMap: Record<string, Common.Route[]> = {};\n\n    _.forEach(strapi.api, (api, apiName) => {\n      const routes = _.flatMap(api.routes, (route) => {\n        if ('routes' in route) {\n          return route.routes;\n        }\n\n        return route;\n      }).filter(filterContentAPI);\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`api::${apiName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    _.forEach(strapi.plugins, (plugin, pluginName) => {\n      const transformPrefix = transformRoutePrefixFor(pluginName);\n\n      if (Array.isArray(plugin.routes)) {\n        return plugin.routes.map(transformPrefix).filter(filterContentAPI);\n      }\n\n      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(\n        filterContentAPI\n      );\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    return routesMap;\n  };\n\n  return {\n    permissions: instantiatePermissionsUtilities(strapi),\n    getRoutesMap,\n  };\n};\n\nexport default createContentAPI;\n"],"names":[],"mappings":";;AAIA,MAAM,0BAA0B,CAAC,eAAuB,CAAC,UAAwB;AAC/E,QAAM,SAAS,MAAM,UAAU,MAAM,OAAO;AAC5C,QAAM,OAAO,WAAW,SAAY,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,IAAI;AAEnF,SAAA;AAAA,IACL,GAAG;AAAA,IACH;AAAA,EAAA;AAEJ;AAEA,MAAM,mBAAmB,CAAC,UAAwB,MAAM,KAAK,SAAS;AAKhE,MAAA,mBAAmB,CAAC,WAAmB;AAC3C,QAAM,eAAe,YAAY;AAC/B,UAAM,YAA4C,CAAA;AAElD,MAAE,QAAQ,OAAO,KAAK,CAAC,KAAK,YAAY;AACtC,YAAM,SAAS,EAAE,QAAQ,IAAI,QAAQ,CAAC,UAAU;AAC9C,YAAI,YAAY,OAAO;AACrB,iBAAO,MAAM;AAAA,QACf;AAEO,eAAA;AAAA,MAAA,CACR,EAAE,OAAO,gBAAgB;AAEtB,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QACpD,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAC/B,EAAA;AAAA,IAAA,CACH;AAED,MAAE,QAAQ,OAAO,SAAS,CAAC,QAAQ,eAAe;AAC1C,YAAA,kBAAkB,wBAAwB,UAAU;AAE1D,UAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,eAAO,OAAO,OAAO,IAAI,eAAe,EAAE,OAAO,gBAAgB;AAAA,MACnE;AAEA,YAAM,SAAS,EAAE,QAAQ,OAAO,QAAQ,CAAC,UAAU,MAAM,OAAO,IAAI,eAAe,CAAC,EAAE;AAAA,QACpF;AAAA,MAAA;AAGE,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,WAAW,UAAU,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QAC1D,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAC/B,EAAA;AAAA,IAAA,CACH;AAEM,WAAA;AAAA,EAAA;AAGF,SAAA;AAAA,IACL,aAAa,gCAAgC,MAAM;AAAA,IACnD;AAAA,EAAA;AAEJ;"}

package/dist/services/content-api/permissions/engine.d.ts

@@ -0,0 +1,5 @@
+import permissions from '@strapi/permissions';
+type Options = Parameters<typeof permissions.engine.new>[0];
+declare const _default: ({ providers }: Options) => permissions.engine.Engine;
+export default _default;
+//# sourceMappingURL=engine.d.ts.map

package/dist/services/content-api/permissions/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../src/services/content-api/permissions/engine.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,qBAAqB,CAAC;AAE9C,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;wCAE7B,OAAO;AAAtC,wBAAiF"}

package/dist/services/content-api/permissions/engine.js

@@ -0,0 +1,7 @@
+"use strict";
+const permissions = require("@strapi/permissions");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const permissions__default = /* @__PURE__ */ _interopDefault(permissions);
+const createPermissionEngine = ({ providers }) => permissions__default.default.engine.new({ providers });
+module.exports = createPermissionEngine;
+//# sourceMappingURL=engine.js.map

package/dist/services/content-api/permissions/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sources":["../../../../src/services/content-api/permissions/engine.ts"],"sourcesContent":["import permissions from '@strapi/permissions';\n\ntype Options = Parameters<typeof permissions.engine.new>[0];\n\nexport default ({ providers }: Options) => permissions.engine.new({ providers });\n"],"names":["permissions"],"mappings":";;;;AAIA,MAAA,yBAAe,CAAC,EAAE,UAAU,MAAeA,6BAAY,OAAO,IAAI,EAAE,WAAW;;"}

package/dist/services/content-api/permissions/engine.mjs

@@ -0,0 +1,6 @@
+import permissions from "@strapi/permissions";
+const createPermissionEngine = ({ providers }) => permissions.engine.new({ providers });
+export {
+  createPermissionEngine as default
+};
+//# sourceMappingURL=engine.mjs.map

package/dist/services/content-api/permissions/engine.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.mjs","sources":["../../../../src/services/content-api/permissions/engine.ts"],"sourcesContent":["import permissions from '@strapi/permissions';\n\ntype Options = Parameters<typeof permissions.engine.new>[0];\n\nexport default ({ providers }: Options) => permissions.engine.new({ providers });\n"],"names":[],"mappings":";AAIA,MAAA,yBAAe,CAAC,EAAE,UAAU,MAAe,YAAY,OAAO,IAAI,EAAE,WAAW;"}

package/dist/services/content-api/permissions/index.d.ts

@@ -0,0 +1,52 @@
+import type { Strapi } from '@strapi/types';
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get informations about available actions and such.
+ */
+declare const _default: (strapi: Strapi) => {
+    engine: import("@strapi/permissions/dist/engine").Engine;
+    providers: {
+        action: {
+            register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            getWhere(filters?: Record<string, unknown> | undefined): {
+                [x: string]: unknown;
+            }[];
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+        };
+        condition: {
+            register(condition: import("./providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            getWhere(filters?: Record<string, unknown> | undefined): {
+                [x: string]: unknown;
+            }[];
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+        };
+    };
+    registerActions: () => Promise<void>;
+    getActionsMap: () => Record<string, {
+        controllers: Record<string, string[]>;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/services/content-api/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/content-api/permissions/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAU,MAAM,eAAe,CAAC;AA8BpD;;;GAGG;iCACqB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAkBT,OAAO,MAAM,EAAE,MAAM,EAAE,CAAC;;;AAlB7C,wBAqHE"}

package/dist/services/content-api/permissions/index.js

@@ -0,0 +1,87 @@
+"use strict";
+const _ = require("lodash");
+const action = require("./providers/action.js");
+const condition = require("./providers/condition.js");
+const engine = require("./engine.js");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const ___default = /* @__PURE__ */ _interopDefault(_);
+const typeSymbol = Symbol.for("__type__");
+const createValidatePermissionHandler = (actionProvider) => ({ permission }) => {
+  const action2 = actionProvider.get(permission.action);
+  if (!action2) {
+    strapi.log.debug(
+      `Unknown action "${permission.action}" supplied when registering a new permission`
+    );
+    return false;
+  }
+  return true;
+};
+const instantiatePermissionsUtilities = (strapi2) => {
+  const providers = {
+    action: action(),
+    condition: condition()
+  };
+  const getActionsMap = () => {
+    const actionMap = {};
+    const isContentApi = (action2) => {
+      if (!___default.default.has(action2, typeSymbol)) {
+        return false;
+      }
+      return action2[typeSymbol].includes("content-api");
+    };
+    const registerAPIsActions = (apis, source) => {
+      ___default.default.forEach(apis, (api, apiName) => {
+        const controllers = ___default.default.reduce(
+          api.controllers,
+          (acc, controller, controllerName) => {
+            const contentApiActions = ___default.default.pickBy(controller, isContentApi);
+            if (___default.default.isEmpty(contentApiActions)) {
+              return acc;
+            }
+            acc[controllerName] = Object.keys(contentApiActions);
+            return acc;
+          },
+          {}
+        );
+        if (!___default.default.isEmpty(controllers)) {
+          actionMap[`${source}::${apiName}`] = { controllers };
+        }
+      });
+    };
+    registerAPIsActions(strapi2.api, "api");
+    registerAPIsActions(strapi2.plugins, "plugin");
+    return actionMap;
+  };
+  const registerActions = async () => {
+    const actionsMap = getActionsMap();
+    for (const [api, value] of Object.entries(actionsMap)) {
+      const { controllers } = value;
+      for (const [controller, actions] of Object.entries(controllers)) {
+        await Promise.all(
+          actions.map((action2) => {
+            const actionUID = `${api}.${controller}.${action2}`;
+            return providers.action.register(actionUID, {
+              api,
+              controller,
+              action: action2,
+              uid: actionUID
+            });
+          })
+        );
+      }
+    }
+  };
+  const engine$1 = engine({ providers });
+  engine$1.on(
+    "before-format::validate.permission",
+    createValidatePermissionHandler(providers.action)
+  );
+  return {
+    engine: engine$1,
+    providers,
+    registerActions,
+    getActionsMap
+  };
+};
+module.exports = instantiatePermissionsUtilities;
+//# sourceMappingURL=index.js.map