@strapi/core 0.0.0-next.f09127d8df0234ad0b771b931b044b7c2e09c686 → 0.0.0-next.f09bff0783c6e3dfd3c34ed73b6f1a47de7b8d80

package/dist/services/auth/index.mjs

@@ -1,80 +0,0 @@
-import assert from "assert/strict";
-import { has } from "lodash/fp";
-import { errors } from "@strapi/utils";
-const INVALID_STRATEGY_MSG = "Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}";
-const validStrategy = (strategy) => {
-  assert(has("authenticate", strategy), INVALID_STRATEGY_MSG);
-  assert(typeof strategy.authenticate === "function", INVALID_STRATEGY_MSG);
-  if (has("verify", strategy)) {
-    assert(typeof strategy.verify === "function", INVALID_STRATEGY_MSG);
-  }
-};
-const createAuthentication = () => {
-  const strategies = {};
-  return {
-    register(type, strategy) {
-      validStrategy(strategy);
-      if (!strategies[type]) {
-        strategies[type] = [];
-      }
-      strategies[type].push(strategy);
-      return this;
-    },
-    async authenticate(ctx, next) {
-      const route = ctx.state.route;
-      const config = route?.config?.auth;
-      if (config === false) {
-        return next();
-      }
-      const routeStrategies = route.info.type ? strategies[route.info.type] : [];
-      const configStrategies = config?.strategies ?? routeStrategies ?? [];
-      const strategiesToUse = configStrategies.reduce(
-        (acc, strategy) => {
-          if (typeof strategy === "string") {
-            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);
-            if (routeStrategy) {
-              acc.push(routeStrategy);
-            }
-          } else if (typeof strategy === "object") {
-            validStrategy(strategy);
-            acc.push(strategy);
-          }
-          return acc;
-        },
-        []
-      );
-      for (const strategy of strategiesToUse) {
-        const result = await strategy.authenticate(ctx);
-        const { authenticated = false, credentials, ability = null, error = null } = result || {};
-        if (error !== null) {
-          return ctx.unauthorized(error);
-        }
-        if (authenticated) {
-          ctx.state.isAuthenticated = true;
-          ctx.state.auth = {
-            strategy,
-            credentials,
-            ability
-          };
-          return next();
-        }
-      }
-      return ctx.unauthorized("Missing or invalid credentials");
-    },
-    async verify(auth, config = {}) {
-      if (config === false) {
-        return;
-      }
-      if (!auth) {
-        throw new errors.UnauthorizedError();
-      }
-      if (typeof auth.strategy.verify === "function") {
-        return auth.strategy.verify(auth, config);
-      }
-    }
-  };
-};
-export {
-  createAuthentication as default
-};
-//# sourceMappingURL=index.mjs.map

package/dist/services/auth/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","sources":["../../../src/services/auth/index.ts"],"sourcesContent":["import assert from 'assert/strict';\nimport { has } from 'lodash/fp';\n\nimport { errors } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\nimport type { ParameterizedContext } from 'koa';\n\ninterface AuthenticationResponse {\n  authenticated?: boolean;\n  credentials?: unknown;\n  ability?: unknown;\n  error?: Error | null;\n}\n\ninterface AuthenticationInfo {\n  strategy: Strategy;\n  credentials: unknown;\n  ability: unknown;\n}\n\ninterface Strategy {\n  name: string;\n  authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;\n  verify?: (auth: AuthenticationInfo, config: Core.RouteConfig['auth']) => Promise<any>;\n}\n\ninterface Authentication {\n  register: (type: string, strategy: Strategy) => Authentication;\n  authenticate: Core.MiddlewareHandler;\n  verify: (auth: AuthenticationInfo, config?: Core.RouteConfig['auth']) => Promise<any>;\n}\n\nconst INVALID_STRATEGY_MSG =\n  'Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}';\n\nconst validStrategy = (strategy: Strategy) => {\n  assert(has('authenticate', strategy), INVALID_STRATEGY_MSG);\n  assert(typeof strategy.authenticate === 'function', INVALID_STRATEGY_MSG);\n\n  if (has('verify', strategy)) {\n    assert(typeof strategy.verify === 'function', INVALID_STRATEGY_MSG);\n  }\n};\n\nconst createAuthentication = (): Authentication => {\n  const strategies: Record<string, Strategy[]> = {};\n\n  return {\n    register(type, strategy) {\n      validStrategy(strategy);\n\n      if (!strategies[type]) {\n        strategies[type] = [];\n      }\n\n      strategies[type].push(strategy);\n\n      return this;\n    },\n\n    async authenticate(ctx, next) {\n      const route: Core.Route = ctx.state.route;\n\n      // use route strategy\n      const config = route?.config?.auth;\n\n      if (config === false) {\n        return next();\n      }\n\n      const routeStrategies = route.info.type ? strategies[route.info.type] : [];\n      const configStrategies = (config?.strategies ?? routeStrategies ?? []) as Array<\n        string | Strategy\n      >;\n\n      const strategiesToUse: Strategy[] = configStrategies.reduce(\n        (acc, strategy: string | Strategy) => {\n          // Resolve by strategy name\n          if (typeof strategy === 'string') {\n            const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);\n\n            if (routeStrategy) {\n              acc.push(routeStrategy);\n            }\n          }\n\n          // Use the given strategy as is\n          else if (typeof strategy === 'object') {\n            validStrategy(strategy);\n\n            acc.push(strategy);\n          }\n\n          return acc;\n        },\n        [] as Strategy[]\n      );\n\n      for (const strategy of strategiesToUse) {\n        const result = await strategy.authenticate(ctx);\n\n        const { authenticated = false, credentials, ability = null, error = null } = result || {};\n\n        if (error !== null) {\n          return ctx.unauthorized(error);\n        }\n\n        if (authenticated) {\n          ctx.state.isAuthenticated = true;\n          ctx.state.auth = {\n            strategy,\n            credentials,\n            ability,\n          };\n\n          return next();\n        }\n      }\n\n      return ctx.unauthorized('Missing or invalid credentials');\n    },\n\n    async verify(auth, config = {}) {\n      if (config === false) {\n        return;\n      }\n\n      if (!auth) {\n        throw new errors.UnauthorizedError();\n      }\n\n      if (typeof auth.strategy.verify === 'function') {\n        return auth.strategy.verify(auth, config);\n      }\n    },\n  };\n};\n\nexport default createAuthentication;\n"],"names":[],"mappings":";;;AAgCA,MAAM,uBACJ;AAEF,MAAM,gBAAgB,CAAC,aAAuB;AAC5C,SAAO,IAAI,gBAAgB,QAAQ,GAAG,oBAAoB;AAC1D,SAAO,OAAO,SAAS,iBAAiB,YAAY,oBAAoB;AAEpE,MAAA,IAAI,UAAU,QAAQ,GAAG;AAC3B,WAAO,OAAO,SAAS,WAAW,YAAY,oBAAoB;AAAA,EAAA;AAEtE;AAEA,MAAM,uBAAuB,MAAsB;AACjD,QAAM,aAAyC,CAAC;AAEzC,SAAA;AAAA,IACL,SAAS,MAAM,UAAU;AACvB,oBAAc,QAAQ;AAElB,UAAA,CAAC,WAAW,IAAI,GAAG;AACV,mBAAA,IAAI,IAAI,CAAC;AAAA,MAAA;AAGX,iBAAA,IAAI,EAAE,KAAK,QAAQ;AAEvB,aAAA;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,KAAK,MAAM;AACtB,YAAA,QAAoB,IAAI,MAAM;AAG9B,YAAA,SAAS,OAAO,QAAQ;AAE9B,UAAI,WAAW,OAAO;AACpB,eAAO,KAAK;AAAA,MAAA;AAGR,YAAA,kBAAkB,MAAM,KAAK,OAAO,WAAW,MAAM,KAAK,IAAI,IAAI,CAAC;AACzE,YAAM,mBAAoB,QAAQ,cAAc,mBAAmB,CAAC;AAIpE,YAAM,kBAA8B,iBAAiB;AAAA,QACnD,CAAC,KAAK,aAAgC;AAEhC,cAAA,OAAO,aAAa,UAAU;AAChC,kBAAM,gBAAgB,gBAAgB,KAAK,CAAC,OAAO,GAAG,SAAS,QAAQ;AAEvE,gBAAI,eAAe;AACjB,kBAAI,KAAK,aAAa;AAAA,YAAA;AAAA,UACxB,WAIO,OAAO,aAAa,UAAU;AACrC,0BAAc,QAAQ;AAEtB,gBAAI,KAAK,QAAQ;AAAA,UAAA;AAGZ,iBAAA;AAAA,QACT;AAAA,QACA,CAAA;AAAA,MACF;AAEA,iBAAW,YAAY,iBAAiB;AACtC,cAAM,SAAS,MAAM,SAAS,aAAa,GAAG;AAExC,cAAA,EAAE,gBAAgB,OAAO,aAAa,UAAU,MAAM,QAAQ,SAAS,UAAU,CAAC;AAExF,YAAI,UAAU,MAAM;AACX,iBAAA,IAAI,aAAa,KAAK;AAAA,QAAA;AAG/B,YAAI,eAAe;AACjB,cAAI,MAAM,kBAAkB;AAC5B,cAAI,MAAM,OAAO;AAAA,YACf;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAEA,iBAAO,KAAK;AAAA,QAAA;AAAA,MACd;AAGK,aAAA,IAAI,aAAa,gCAAgC;AAAA,IAC1D;AAAA,IAEA,MAAM,OAAO,MAAM,SAAS,IAAI;AAC9B,UAAI,WAAW,OAAO;AACpB;AAAA,MAAA;AAGF,UAAI,CAAC,MAAM;AACH,cAAA,IAAI,OAAO,kBAAkB;AAAA,MAAA;AAGrC,UAAI,OAAO,KAAK,SAAS,WAAW,YAAY;AAC9C,eAAO,KAAK,SAAS,OAAO,MAAM,MAAM;AAAA,MAAA;AAAA,IAC1C;AAAA,EAEJ;AACF;"}

package/dist/services/config.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const _ = require("lodash");
-const createConfigProvider = (initialConfig = {}, strapi) => {
-  const state = {
-    config: { ...initialConfig }
-    // not deep clone because it would break some config
-  };
-  const transformPathString = (path) => {
-    if (path.startsWith("plugin.")) {
-      const newPath = path.replace("plugin.", "plugin::");
-      (strapi?.log?.warn ?? console.warn)(
-        `Using dot notation for model config namespaces is deprecated, for example "plugin::myplugin" should be used instead of "plugin.myplugin". Modifying requested path ${path} to ${newPath}`
-      );
-      return newPath;
-    }
-    return path;
-  };
-  const transformDeprecatedPaths = (path) => {
-    if (_.isString(path)) {
-      return transformPathString(path);
-    }
-    if (_.isArray(path)) {
-      if (path.some((part) => !(_.isString(part) || _.isNumber(part)))) {
-        return path;
-      }
-      return transformPathString(path.join("."));
-    }
-    return path;
-  };
-  return {
-    ...state.config,
-    // TODO: to remove
-    get(path, defaultValue) {
-      return _.get(state.config, transformDeprecatedPaths(path), defaultValue);
-    },
-    set(path, val) {
-      _.set(state.config, transformDeprecatedPaths(path), val);
-      return this;
-    },
-    has(path) {
-      return _.has(state.config, transformDeprecatedPaths(path));
-    }
-  };
-};
-exports.createConfigProvider = createConfigProvider;
-//# sourceMappingURL=config.js.map

package/dist/services/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sources":["../../src/services/config.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { get, set, has, isString, isNumber, isArray, type PropertyPath } from 'lodash';\n\ntype State = {\n  config: Config;\n};\n\ntype Config = Record<string, unknown>;\n\nexport const createConfigProvider = (\n  initialConfig: Record<string, unknown> = {},\n  strapi?: Core.Strapi\n): Core.ConfigProvider => {\n  const state: State = {\n    config: { ...initialConfig }, // not deep clone because it would break some config\n  };\n\n  // Accessing model configs with dot (.) was deprecated between v4->v5, but to avoid a major breaking change\n  // we will still support certain namespaces, currently only 'plugin.'\n  const transformPathString = (path: string) => {\n    if (path.startsWith('plugin.')) {\n      const newPath = path.replace('plugin.', 'plugin::');\n\n      // strapi logger may not be loaded yet, so fall back to console\n      (strapi?.log?.warn ?? console.warn)(\n        `Using dot notation for model config namespaces is deprecated, for example \"plugin::myplugin\" should be used instead of \"plugin.myplugin\". Modifying requested path ${path} to ${newPath}`\n      );\n      return newPath;\n    }\n\n    return path;\n  };\n\n  const transformDeprecatedPaths = (path: PropertyPath): PropertyPath => {\n    if (isString(path)) {\n      return transformPathString(path);\n    }\n    if (isArray(path)) {\n      // if the path is not joinable, we won't apply our deprecation support\n      if (path.some((part) => !(isString(part) || isNumber(part)))) {\n        return path;\n      }\n\n      return transformPathString(path.join('.'));\n    }\n\n    return path;\n  };\n\n  return {\n    ...state.config, // TODO: to remove\n    get(path: PropertyPath, defaultValue?: unknown) {\n      return get(state.config, transformDeprecatedPaths(path), defaultValue);\n    },\n    set(path: PropertyPath, val: unknown) {\n      set(state.config, transformDeprecatedPaths(path), val);\n      return this;\n    },\n    has(path: PropertyPath) {\n      return has(state.config, transformDeprecatedPaths(path));\n    },\n  };\n};\n"],"names":["isString","isArray","isNumber","get","set","has"],"mappings":";;;AASO,MAAM,uBAAuB,CAClC,gBAAyC,IACzC,WACwB;AACxB,QAAM,QAAe;AAAA,IACnB,QAAQ,EAAE,GAAG,cAAc;AAAA;AAAA,EAC7B;AAIM,QAAA,sBAAsB,CAAC,SAAiB;AACxC,QAAA,KAAK,WAAW,SAAS,GAAG;AAC9B,YAAM,UAAU,KAAK,QAAQ,WAAW,UAAU;AAGjD,OAAA,QAAQ,KAAK,QAAQ,QAAQ;AAAA,QAC5B,sKAAsK,IAAI,OAAO,OAAO;AAAA,MAC1L;AACO,aAAA;AAAA,IAAA;AAGF,WAAA;AAAA,EACT;AAEM,QAAA,2BAA2B,CAAC,SAAqC;AACjE,QAAAA,EAAAA,SAAS,IAAI,GAAG;AAClB,aAAO,oBAAoB,IAAI;AAAA,IAAA;AAE7B,QAAAC,EAAAA,QAAQ,IAAI,GAAG;AAEb,UAAA,KAAK,KAAK,CAAC,SAAS,EAAED,EAAAA,SAAS,IAAI,KAAKE,EAAA,SAAS,IAAI,EAAE,GAAG;AACrD,eAAA;AAAA,MAAA;AAGT,aAAO,oBAAoB,KAAK,KAAK,GAAG,CAAC;AAAA,IAAA;AAGpC,WAAA;AAAA,EACT;AAEO,SAAA;AAAA,IACL,GAAG,MAAM;AAAA;AAAA,IACT,IAAI,MAAoB,cAAwB;AAC9C,aAAOC,EAAAA,IAAI,MAAM,QAAQ,yBAAyB,IAAI,GAAG,YAAY;AAAA,IACvE;AAAA,IACA,IAAI,MAAoB,KAAc;AACpCC,QAAA,IAAI,MAAM,QAAQ,yBAAyB,IAAI,GAAG,GAAG;AAC9C,aAAA;AAAA,IACT;AAAA,IACA,IAAI,MAAoB;AACtB,aAAOC,EAAI,IAAA,MAAM,QAAQ,yBAAyB,IAAI,CAAC;AAAA,IAAA;AAAA,EAE3D;AACF;;"}

package/dist/services/config.mjs

@@ -1,47 +0,0 @@
-import { get, set, has, isString, isArray, isNumber } from "lodash";
-const createConfigProvider = (initialConfig = {}, strapi) => {
-  const state = {
-    config: { ...initialConfig }
-    // not deep clone because it would break some config
-  };
-  const transformPathString = (path) => {
-    if (path.startsWith("plugin.")) {
-      const newPath = path.replace("plugin.", "plugin::");
-      (strapi?.log?.warn ?? console.warn)(
-        `Using dot notation for model config namespaces is deprecated, for example "plugin::myplugin" should be used instead of "plugin.myplugin". Modifying requested path ${path} to ${newPath}`
-      );
-      return newPath;
-    }
-    return path;
-  };
-  const transformDeprecatedPaths = (path) => {
-    if (isString(path)) {
-      return transformPathString(path);
-    }
-    if (isArray(path)) {
-      if (path.some((part) => !(isString(part) || isNumber(part)))) {
-        return path;
-      }
-      return transformPathString(path.join("."));
-    }
-    return path;
-  };
-  return {
-    ...state.config,
-    // TODO: to remove
-    get(path, defaultValue) {
-      return get(state.config, transformDeprecatedPaths(path), defaultValue);
-    },
-    set(path, val) {
-      set(state.config, transformDeprecatedPaths(path), val);
-      return this;
-    },
-    has(path) {
-      return has(state.config, transformDeprecatedPaths(path));
-    }
-  };
-};
-export {
-  createConfigProvider
-};
-//# sourceMappingURL=config.mjs.map

package/dist/services/config.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.mjs","sources":["../../src/services/config.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { get, set, has, isString, isNumber, isArray, type PropertyPath } from 'lodash';\n\ntype State = {\n  config: Config;\n};\n\ntype Config = Record<string, unknown>;\n\nexport const createConfigProvider = (\n  initialConfig: Record<string, unknown> = {},\n  strapi?: Core.Strapi\n): Core.ConfigProvider => {\n  const state: State = {\n    config: { ...initialConfig }, // not deep clone because it would break some config\n  };\n\n  // Accessing model configs with dot (.) was deprecated between v4->v5, but to avoid a major breaking change\n  // we will still support certain namespaces, currently only 'plugin.'\n  const transformPathString = (path: string) => {\n    if (path.startsWith('plugin.')) {\n      const newPath = path.replace('plugin.', 'plugin::');\n\n      // strapi logger may not be loaded yet, so fall back to console\n      (strapi?.log?.warn ?? console.warn)(\n        `Using dot notation for model config namespaces is deprecated, for example \"plugin::myplugin\" should be used instead of \"plugin.myplugin\". Modifying requested path ${path} to ${newPath}`\n      );\n      return newPath;\n    }\n\n    return path;\n  };\n\n  const transformDeprecatedPaths = (path: PropertyPath): PropertyPath => {\n    if (isString(path)) {\n      return transformPathString(path);\n    }\n    if (isArray(path)) {\n      // if the path is not joinable, we won't apply our deprecation support\n      if (path.some((part) => !(isString(part) || isNumber(part)))) {\n        return path;\n      }\n\n      return transformPathString(path.join('.'));\n    }\n\n    return path;\n  };\n\n  return {\n    ...state.config, // TODO: to remove\n    get(path: PropertyPath, defaultValue?: unknown) {\n      return get(state.config, transformDeprecatedPaths(path), defaultValue);\n    },\n    set(path: PropertyPath, val: unknown) {\n      set(state.config, transformDeprecatedPaths(path), val);\n      return this;\n    },\n    has(path: PropertyPath) {\n      return has(state.config, transformDeprecatedPaths(path));\n    },\n  };\n};\n"],"names":[],"mappings":";AASO,MAAM,uBAAuB,CAClC,gBAAyC,IACzC,WACwB;AACxB,QAAM,QAAe;AAAA,IACnB,QAAQ,EAAE,GAAG,cAAc;AAAA;AAAA,EAC7B;AAIM,QAAA,sBAAsB,CAAC,SAAiB;AACxC,QAAA,KAAK,WAAW,SAAS,GAAG;AAC9B,YAAM,UAAU,KAAK,QAAQ,WAAW,UAAU;AAGjD,OAAA,QAAQ,KAAK,QAAQ,QAAQ;AAAA,QAC5B,sKAAsK,IAAI,OAAO,OAAO;AAAA,MAC1L;AACO,aAAA;AAAA,IAAA;AAGF,WAAA;AAAA,EACT;AAEM,QAAA,2BAA2B,CAAC,SAAqC;AACjE,QAAA,SAAS,IAAI,GAAG;AAClB,aAAO,oBAAoB,IAAI;AAAA,IAAA;AAE7B,QAAA,QAAQ,IAAI,GAAG;AAEb,UAAA,KAAK,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS,IAAI,EAAE,GAAG;AACrD,eAAA;AAAA,MAAA;AAGT,aAAO,oBAAoB,KAAK,KAAK,GAAG,CAAC;AAAA,IAAA;AAGpC,WAAA;AAAA,EACT;AAEO,SAAA;AAAA,IACL,GAAG,MAAM;AAAA;AAAA,IACT,IAAI,MAAoB,cAAwB;AAC9C,aAAO,IAAI,MAAM,QAAQ,yBAAyB,IAAI,GAAG,YAAY;AAAA,IACvE;AAAA,IACA,IAAI,MAAoB,KAAc;AACpC,UAAI,MAAM,QAAQ,yBAAyB,IAAI,GAAG,GAAG;AAC9C,aAAA;AAAA,IACT;AAAA,IACA,IAAI,MAAoB;AACtB,aAAO,IAAI,MAAM,QAAQ,yBAAyB,IAAI,CAAC;AAAA,IAAA;AAAA,EAE3D;AACF;"}

package/dist/services/content-api/index.js

@@ -1,85 +0,0 @@
-"use strict";
-const _ = require("lodash");
-const strapiUtils = require("@strapi/utils");
-const index = require("./permissions/index.js");
-const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
-const ___default = /* @__PURE__ */ _interopDefault(_);
-const transformRoutePrefixFor = (pluginName) => (route) => {
-  const prefix = route.config && route.config.prefix;
-  const path = prefix !== void 0 ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;
-  return {
-    ...route,
-    path
-  };
-};
-const filterContentAPI = (route) => route.info.type === "content-api";
-const createContentAPI = (strapi) => {
-  const getRoutesMap = async () => {
-    const routesMap = {};
-    ___default.default.forEach(strapi.apis, (api, apiName) => {
-      const routes = ___default.default.flatMap(api.routes, (route) => {
-        if ("routes" in route) {
-          return route.routes;
-        }
-        return route;
-      }).filter(filterContentAPI);
-      if (routes.length === 0) {
-        return;
-      }
-      const apiPrefix = strapi.config.get("api.rest.prefix");
-      routesMap[`api::${apiName}`] = routes.map((route) => ({
-        ...route,
-        path: `${apiPrefix}${route.path}`
-      }));
-    });
-    ___default.default.forEach(strapi.plugins, (plugin, pluginName) => {
-      const transformPrefix = transformRoutePrefixFor(pluginName);
-      if (Array.isArray(plugin.routes)) {
-        return plugin.routes.map(transformPrefix).filter(filterContentAPI);
-      }
-      const routes = ___default.default.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(
-        filterContentAPI
-      );
-      if (routes.length === 0) {
-        return;
-      }
-      const apiPrefix = strapi.config.get("api.rest.prefix");
-      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({
-        ...route,
-        path: `${apiPrefix}${route.path}`
-      }));
-    });
-    return routesMap;
-  };
-  const sanitizer = strapiUtils.sanitize.createAPISanitizers({
-    getModel(uid) {
-      return strapi.getModel(uid);
-    },
-    // NOTE: use lazy access to allow registration of sanitizers after the creation of the container
-    get sanitizers() {
-      return {
-        input: strapi.sanitizers.get("content-api.input"),
-        output: strapi.sanitizers.get("content-api.output")
-      };
-    }
-  });
-  const validator = strapiUtils.validate.createAPIValidators({
-    getModel(uid) {
-      return strapi.getModel(uid);
-    },
-    // NOTE: use lazy access to allow registration of validators after the creation of the container
-    get validators() {
-      return {
-        input: strapi.validators.get("content-api.input")
-      };
-    }
-  });
-  return {
-    permissions: index(strapi),
-    getRoutesMap,
-    sanitize: sanitizer,
-    validate: validator
-  };
-};
-module.exports = createContentAPI;
-//# sourceMappingURL=index.js.map

package/dist/services/content-api/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sources":["../../../src/services/content-api/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport { sanitize, validate } from '@strapi/utils';\n\nimport type { Core, UID } from '@strapi/types';\n\nimport instantiatePermissionsUtilities from './permissions';\n\nconst transformRoutePrefixFor = (pluginName: string) => (route: Core.Route) => {\n  const prefix = route.config && route.config.prefix;\n  const path = prefix !== undefined ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;\n\n  return {\n    ...route,\n    path,\n  };\n};\n\nconst filterContentAPI = (route: Core.Route) => route.info.type === 'content-api';\n\n/**\n * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)\n */\nconst createContentAPI = (strapi: Core.Strapi) => {\n  const getRoutesMap = async () => {\n    const routesMap: Record<string, Core.Route[]> = {};\n\n    _.forEach(strapi.apis, (api, apiName) => {\n      const routes = _.flatMap(api.routes, (route) => {\n        if ('routes' in route) {\n          return route.routes;\n        }\n\n        return route;\n      }).filter(filterContentAPI);\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`api::${apiName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    _.forEach(strapi.plugins, (plugin, pluginName) => {\n      const transformPrefix = transformRoutePrefixFor(pluginName);\n\n      if (Array.isArray(plugin.routes)) {\n        return plugin.routes.map(transformPrefix).filter(filterContentAPI);\n      }\n\n      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(\n        filterContentAPI\n      );\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    return routesMap;\n  };\n\n  const sanitizer = sanitize.createAPISanitizers({\n    getModel(uid: string) {\n      return strapi.getModel(uid as UID.Schema);\n    },\n    // NOTE: use lazy access to allow registration of sanitizers after the creation of the container\n    get sanitizers() {\n      return {\n        input: strapi.sanitizers.get('content-api.input'),\n        output: strapi.sanitizers.get('content-api.output'),\n      };\n    },\n  });\n\n  const validator = validate.createAPIValidators({\n    getModel(uid: string) {\n      return strapi.getModel(uid as UID.Schema);\n    },\n    // NOTE: use lazy access to allow registration of validators after the creation of the container\n    get validators() {\n      return {\n        input: strapi.validators.get('content-api.input'),\n      };\n    },\n  });\n\n  return {\n    permissions: instantiatePermissionsUtilities(strapi),\n    getRoutesMap,\n    sanitize: sanitizer,\n    validate: validator,\n  };\n};\n\nexport default createContentAPI;\n"],"names":["_","sanitize","validate","instantiatePermissionsUtilities"],"mappings":";;;;;;AAOA,MAAM,0BAA0B,CAAC,eAAuB,CAAC,UAAsB;AAC7E,QAAM,SAAS,MAAM,UAAU,MAAM,OAAO;AAC5C,QAAM,OAAO,WAAW,SAAY,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,IAAI;AAEnF,SAAA;AAAA,IACL,GAAG;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,mBAAmB,CAAC,UAAsB,MAAM,KAAK,SAAS;AAK9D,MAAA,mBAAmB,CAAC,WAAwB;AAChD,QAAM,eAAe,YAAY;AAC/B,UAAM,YAA0C,CAAC;AAEjDA,eAAA,QAAE,QAAQ,OAAO,MAAM,CAAC,KAAK,YAAY;AACvC,YAAM,SAASA,WAAAA,QAAE,QAAQ,IAAI,QAAQ,CAAC,UAAU;AAC9C,YAAI,YAAY,OAAO;AACrB,iBAAO,MAAM;AAAA,QAAA;AAGR,eAAA;AAAA,MAAA,CACR,EAAE,OAAO,gBAAgB;AAEtB,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MAAA;AAGF,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QACpD,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAAA,EAC/B;AAAA,IAAA,CACH;AAEDA,eAAA,QAAE,QAAQ,OAAO,SAAS,CAAC,QAAQ,eAAe;AAC1C,YAAA,kBAAkB,wBAAwB,UAAU;AAE1D,UAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,eAAO,OAAO,OAAO,IAAI,eAAe,EAAE,OAAO,gBAAgB;AAAA,MAAA;AAGnE,YAAM,SAASA,WAAA,QAAE,QAAQ,OAAO,QAAQ,CAAC,UAAU,MAAM,OAAO,IAAI,eAAe,CAAC,EAAE;AAAA,QACpF;AAAA,MACF;AAEI,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MAAA;AAGF,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,WAAW,UAAU,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QAC1D,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAAA,EAC/B;AAAA,IAAA,CACH;AAEM,WAAA;AAAA,EACT;AAEM,QAAA,YAAYC,qBAAS,oBAAoB;AAAA,IAC7C,SAAS,KAAa;AACb,aAAA,OAAO,SAAS,GAAiB;AAAA,IAC1C;AAAA;AAAA,IAEA,IAAI,aAAa;AACR,aAAA;AAAA,QACL,OAAO,OAAO,WAAW,IAAI,mBAAmB;AAAA,QAChD,QAAQ,OAAO,WAAW,IAAI,oBAAoB;AAAA,MACpD;AAAA,IAAA;AAAA,EACF,CACD;AAEK,QAAA,YAAYC,qBAAS,oBAAoB;AAAA,IAC7C,SAAS,KAAa;AACb,aAAA,OAAO,SAAS,GAAiB;AAAA,IAC1C;AAAA;AAAA,IAEA,IAAI,aAAa;AACR,aAAA;AAAA,QACL,OAAO,OAAO,WAAW,IAAI,mBAAmB;AAAA,MAClD;AAAA,IAAA;AAAA,EACF,CACD;AAEM,SAAA;AAAA,IACL,aAAaC,MAAgC,MAAM;AAAA,IACnD;AAAA,IACA,UAAU;AAAA,IACV,UAAU;AAAA,EACZ;AACF;;"}

package/dist/services/content-api/index.mjs

@@ -1,84 +0,0 @@
-import _ from "lodash";
-import { sanitize, validate } from "@strapi/utils";
-import instantiatePermissionsUtilities from "./permissions/index.mjs";
-const transformRoutePrefixFor = (pluginName) => (route) => {
-  const prefix = route.config && route.config.prefix;
-  const path = prefix !== void 0 ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;
-  return {
-    ...route,
-    path
-  };
-};
-const filterContentAPI = (route) => route.info.type === "content-api";
-const createContentAPI = (strapi) => {
-  const getRoutesMap = async () => {
-    const routesMap = {};
-    _.forEach(strapi.apis, (api, apiName) => {
-      const routes = _.flatMap(api.routes, (route) => {
-        if ("routes" in route) {
-          return route.routes;
-        }
-        return route;
-      }).filter(filterContentAPI);
-      if (routes.length === 0) {
-        return;
-      }
-      const apiPrefix = strapi.config.get("api.rest.prefix");
-      routesMap[`api::${apiName}`] = routes.map((route) => ({
-        ...route,
-        path: `${apiPrefix}${route.path}`
-      }));
-    });
-    _.forEach(strapi.plugins, (plugin, pluginName) => {
-      const transformPrefix = transformRoutePrefixFor(pluginName);
-      if (Array.isArray(plugin.routes)) {
-        return plugin.routes.map(transformPrefix).filter(filterContentAPI);
-      }
-      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(
-        filterContentAPI
-      );
-      if (routes.length === 0) {
-        return;
-      }
-      const apiPrefix = strapi.config.get("api.rest.prefix");
-      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({
-        ...route,
-        path: `${apiPrefix}${route.path}`
-      }));
-    });
-    return routesMap;
-  };
-  const sanitizer = sanitize.createAPISanitizers({
-    getModel(uid) {
-      return strapi.getModel(uid);
-    },
-    // NOTE: use lazy access to allow registration of sanitizers after the creation of the container
-    get sanitizers() {
-      return {
-        input: strapi.sanitizers.get("content-api.input"),
-        output: strapi.sanitizers.get("content-api.output")
-      };
-    }
-  });
-  const validator = validate.createAPIValidators({
-    getModel(uid) {
-      return strapi.getModel(uid);
-    },
-    // NOTE: use lazy access to allow registration of validators after the creation of the container
-    get validators() {
-      return {
-        input: strapi.validators.get("content-api.input")
-      };
-    }
-  });
-  return {
-    permissions: instantiatePermissionsUtilities(strapi),
-    getRoutesMap,
-    sanitize: sanitizer,
-    validate: validator
-  };
-};
-export {
-  createContentAPI as default
-};
-//# sourceMappingURL=index.mjs.map

package/dist/services/content-api/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","sources":["../../../src/services/content-api/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport { sanitize, validate } from '@strapi/utils';\n\nimport type { Core, UID } from '@strapi/types';\n\nimport instantiatePermissionsUtilities from './permissions';\n\nconst transformRoutePrefixFor = (pluginName: string) => (route: Core.Route) => {\n  const prefix = route.config && route.config.prefix;\n  const path = prefix !== undefined ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;\n\n  return {\n    ...route,\n    path,\n  };\n};\n\nconst filterContentAPI = (route: Core.Route) => route.info.type === 'content-api';\n\n/**\n * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)\n */\nconst createContentAPI = (strapi: Core.Strapi) => {\n  const getRoutesMap = async () => {\n    const routesMap: Record<string, Core.Route[]> = {};\n\n    _.forEach(strapi.apis, (api, apiName) => {\n      const routes = _.flatMap(api.routes, (route) => {\n        if ('routes' in route) {\n          return route.routes;\n        }\n\n        return route;\n      }).filter(filterContentAPI);\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`api::${apiName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    _.forEach(strapi.plugins, (plugin, pluginName) => {\n      const transformPrefix = transformRoutePrefixFor(pluginName);\n\n      if (Array.isArray(plugin.routes)) {\n        return plugin.routes.map(transformPrefix).filter(filterContentAPI);\n      }\n\n      const routes = _.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(\n        filterContentAPI\n      );\n\n      if (routes.length === 0) {\n        return;\n      }\n\n      const apiPrefix = strapi.config.get('api.rest.prefix');\n      routesMap[`plugin::${pluginName}`] = routes.map((route) => ({\n        ...route,\n        path: `${apiPrefix}${route.path}`,\n      }));\n    });\n\n    return routesMap;\n  };\n\n  const sanitizer = sanitize.createAPISanitizers({\n    getModel(uid: string) {\n      return strapi.getModel(uid as UID.Schema);\n    },\n    // NOTE: use lazy access to allow registration of sanitizers after the creation of the container\n    get sanitizers() {\n      return {\n        input: strapi.sanitizers.get('content-api.input'),\n        output: strapi.sanitizers.get('content-api.output'),\n      };\n    },\n  });\n\n  const validator = validate.createAPIValidators({\n    getModel(uid: string) {\n      return strapi.getModel(uid as UID.Schema);\n    },\n    // NOTE: use lazy access to allow registration of validators after the creation of the container\n    get validators() {\n      return {\n        input: strapi.validators.get('content-api.input'),\n      };\n    },\n  });\n\n  return {\n    permissions: instantiatePermissionsUtilities(strapi),\n    getRoutesMap,\n    sanitize: sanitizer,\n    validate: validator,\n  };\n};\n\nexport default createContentAPI;\n"],"names":[],"mappings":";;;AAOA,MAAM,0BAA0B,CAAC,eAAuB,CAAC,UAAsB;AAC7E,QAAM,SAAS,MAAM,UAAU,MAAM,OAAO;AAC5C,QAAM,OAAO,WAAW,SAAY,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,IAAI,UAAU,GAAG,MAAM,IAAI;AAEnF,SAAA;AAAA,IACL,GAAG;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,mBAAmB,CAAC,UAAsB,MAAM,KAAK,SAAS;AAK9D,MAAA,mBAAmB,CAAC,WAAwB;AAChD,QAAM,eAAe,YAAY;AAC/B,UAAM,YAA0C,CAAC;AAEjD,MAAE,QAAQ,OAAO,MAAM,CAAC,KAAK,YAAY;AACvC,YAAM,SAAS,EAAE,QAAQ,IAAI,QAAQ,CAAC,UAAU;AAC9C,YAAI,YAAY,OAAO;AACrB,iBAAO,MAAM;AAAA,QAAA;AAGR,eAAA;AAAA,MAAA,CACR,EAAE,OAAO,gBAAgB;AAEtB,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MAAA;AAGF,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QACpD,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAAA,EAC/B;AAAA,IAAA,CACH;AAED,MAAE,QAAQ,OAAO,SAAS,CAAC,QAAQ,eAAe;AAC1C,YAAA,kBAAkB,wBAAwB,UAAU;AAE1D,UAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,eAAO,OAAO,OAAO,IAAI,eAAe,EAAE,OAAO,gBAAgB;AAAA,MAAA;AAGnE,YAAM,SAAS,EAAE,QAAQ,OAAO,QAAQ,CAAC,UAAU,MAAM,OAAO,IAAI,eAAe,CAAC,EAAE;AAAA,QACpF;AAAA,MACF;AAEI,UAAA,OAAO,WAAW,GAAG;AACvB;AAAA,MAAA;AAGF,YAAM,YAAY,OAAO,OAAO,IAAI,iBAAiB;AACrD,gBAAU,WAAW,UAAU,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW;AAAA,QAC1D,GAAG;AAAA,QACH,MAAM,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,MAAA,EAC/B;AAAA,IAAA,CACH;AAEM,WAAA;AAAA,EACT;AAEM,QAAA,YAAY,SAAS,oBAAoB;AAAA,IAC7C,SAAS,KAAa;AACb,aAAA,OAAO,SAAS,GAAiB;AAAA,IAC1C;AAAA;AAAA,IAEA,IAAI,aAAa;AACR,aAAA;AAAA,QACL,OAAO,OAAO,WAAW,IAAI,mBAAmB;AAAA,QAChD,QAAQ,OAAO,WAAW,IAAI,oBAAoB;AAAA,MACpD;AAAA,IAAA;AAAA,EACF,CACD;AAEK,QAAA,YAAY,SAAS,oBAAoB;AAAA,IAC7C,SAAS,KAAa;AACb,aAAA,OAAO,SAAS,GAAiB;AAAA,IAC1C;AAAA;AAAA,IAEA,IAAI,aAAa;AACR,aAAA;AAAA,QACL,OAAO,OAAO,WAAW,IAAI,mBAAmB;AAAA,MAClD;AAAA,IAAA;AAAA,EACF,CACD;AAEM,SAAA;AAAA,IACL,aAAa,gCAAgC,MAAM;AAAA,IACnD;AAAA,IACA,UAAU;AAAA,IACV,UAAU;AAAA,EACZ;AACF;"}

package/dist/services/content-api/permissions/engine.js

@@ -1,7 +0,0 @@
-"use strict";
-const permissions = require("@strapi/permissions");
-const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
-const permissions__default = /* @__PURE__ */ _interopDefault(permissions);
-const createPermissionEngine = ({ providers }) => permissions__default.default.engine.new({ providers });
-module.exports = createPermissionEngine;
-//# sourceMappingURL=engine.js.map

package/dist/services/content-api/permissions/engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.js","sources":["../../../../src/services/content-api/permissions/engine.ts"],"sourcesContent":["import permissions from '@strapi/permissions';\n\ntype Options = Parameters<typeof permissions.engine.new>[0];\n\nexport default ({ providers }: Options) => permissions.engine.new({ providers });\n"],"names":["permissions"],"mappings":";;;;AAIA,MAAA,yBAAe,CAAC,EAAE,UAAU,MAAeA,6BAAY,OAAO,IAAI,EAAE,WAAW;;"}

package/dist/services/content-api/permissions/engine.mjs

@@ -1,6 +0,0 @@
-import permissions from "@strapi/permissions";
-const createPermissionEngine = ({ providers }) => permissions.engine.new({ providers });
-export {
-  createPermissionEngine as default
-};
-//# sourceMappingURL=engine.mjs.map

package/dist/services/content-api/permissions/engine.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.mjs","sources":["../../../../src/services/content-api/permissions/engine.ts"],"sourcesContent":["import permissions from '@strapi/permissions';\n\ntype Options = Parameters<typeof permissions.engine.new>[0];\n\nexport default ({ providers }: Options) => permissions.engine.new({ providers });\n"],"names":[],"mappings":";AAIA,MAAA,yBAAe,CAAC,EAAE,UAAU,MAAe,YAAY,OAAO,IAAI,EAAE,WAAW;"}

package/dist/services/content-api/permissions/index.js

@@ -1,87 +0,0 @@
-"use strict";
-const _ = require("lodash");
-const action = require("./providers/action.js");
-const condition = require("./providers/condition.js");
-const engine = require("./engine.js");
-const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
-const ___default = /* @__PURE__ */ _interopDefault(_);
-const typeSymbol = Symbol.for("__type__");
-const createValidatePermissionHandler = (actionProvider) => ({ permission }) => {
-  const action2 = actionProvider.get(permission.action);
-  if (!action2) {
-    strapi.log.debug(
-      `Unknown action "${permission.action}" supplied when registering a new permission`
-    );
-    return false;
-  }
-  return true;
-};
-const instantiatePermissionsUtilities = (strapi2) => {
-  const providers = {
-    action: action(),
-    condition: condition()
-  };
-  const getActionsMap = () => {
-    const actionMap = {};
-    const isContentApi = (action2) => {
-      if (!___default.default.has(action2, typeSymbol)) {
-        return false;
-      }
-      return action2[typeSymbol].includes("content-api");
-    };
-    const registerAPIsActions = (apis, source) => {
-      ___default.default.forEach(apis, (api, apiName) => {
-        const controllers = ___default.default.reduce(
-          api.controllers,
-          (acc, controller, controllerName) => {
-            const contentApiActions = ___default.default.pickBy(controller, isContentApi);
-            if (___default.default.isEmpty(contentApiActions)) {
-              return acc;
-            }
-            acc[controllerName] = Object.keys(contentApiActions);
-            return acc;
-          },
-          {}
-        );
-        if (!___default.default.isEmpty(controllers)) {
-          actionMap[`${source}::${apiName}`] = { controllers };
-        }
-      });
-    };
-    registerAPIsActions(strapi2.apis, "api");
-    registerAPIsActions(strapi2.plugins, "plugin");
-    return actionMap;
-  };
-  const registerActions = async () => {
-    const actionsMap = getActionsMap();
-    for (const [api, value] of Object.entries(actionsMap)) {
-      const { controllers } = value;
-      for (const [controller, actions] of Object.entries(controllers)) {
-        await Promise.all(
-          actions.map((action2) => {
-            const actionUID = `${api}.${controller}.${action2}`;
-            return providers.action.register(actionUID, {
-              api,
-              controller,
-              action: action2,
-              uid: actionUID
-            });
-          })
-        );
-      }
-    }
-  };
-  const engine$1 = engine({ providers });
-  engine$1.on(
-    "before-format::validate.permission",
-    createValidatePermissionHandler(providers.action)
-  );
-  return {
-    engine: engine$1,
-    providers,
-    registerActions,
-    getActionsMap
-  };
-};
-module.exports = instantiatePermissionsUtilities;
-//# sourceMappingURL=index.js.map

package/dist/services/content-api/permissions/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sources":["../../../../src/services/content-api/permissions/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Core } from '@strapi/types';\nimport { createActionProvider, createConditionProvider } from './providers';\nimport createPermissionEngine from './engine';\n\nconst typeSymbol = Symbol.for('__type__');\n\ninterface ValidatePermissionHandler {\n  (params: { permission: { action: string } }): boolean;\n}\n\n/**\n * Creates a handler that checks if the permission's action exists in the action registry\n */\nconst createValidatePermissionHandler =\n  (actionProvider: ReturnType<typeof createActionProvider>): ValidatePermissionHandler =>\n  ({ permission }) => {\n    const action = actionProvider.get(permission.action);\n\n    // If the action isn't registered into the action provider, then ignore the permission and warn the user\n    if (!action) {\n      strapi.log.debug(\n        `Unknown action \"${permission.action}\" supplied when registering a new permission`\n      );\n\n      return false;\n    }\n\n    return true;\n  };\n\n/**\n * Create instances of providers and permission engine for the core content-API service.\n * Also, expose utilities to get information about available actions and such.\n */\nexport default (strapi: Core.Strapi) => {\n  // NOTE: Here we define both an action and condition provider,\n  // but at the moment, we're only using the action one.\n  const providers = {\n    action: createActionProvider(),\n    condition: createConditionProvider(),\n  };\n\n  /**\n   * Get a tree representation of the available Content API actions\n   * based on the methods of the Content API controllers.\n   *\n   * @note Only actions bound to a content-API route are returned.\n   */\n  const getActionsMap = () => {\n    const actionMap: Record<\n      string,\n      {\n        controllers: Record<string, string[]>;\n      }\n    > = {};\n\n    /**\n     * Check if a controller's action is bound to the\n     * content-api by looking at a potential __type__ symbol\n     */\n    const isContentApi = (action: Core.ControllerHandler & { [s: symbol]: any }) => {\n      if (!_.has(action, typeSymbol)) {\n        return false;\n      }\n\n      return action[typeSymbol].includes('content-api');\n    };\n\n    /**\n     * Register actions from a specific API source into the result tree\n     */\n    const registerAPIsActions = (\n      apis: Record<string, Core.Plugin | Core.Module>,\n      source: 'api' | 'plugin'\n    ) => {\n      _.forEach(apis, (api, apiName) => {\n        const controllers = _.reduce(\n          api.controllers,\n          (acc, controller, controllerName) => {\n            const contentApiActions = _.pickBy(controller, isContentApi);\n\n            if (_.isEmpty(contentApiActions)) {\n              return acc;\n            }\n\n            acc[controllerName] = Object.keys(contentApiActions);\n\n            return acc;\n          },\n          {} as Record<string, string[]>\n        );\n\n        if (!_.isEmpty(controllers)) {\n          actionMap[`${source}::${apiName}`] = { controllers };\n        }\n      });\n    };\n\n    registerAPIsActions(strapi.apis, 'api');\n    registerAPIsActions(strapi.plugins, 'plugin');\n\n    return actionMap;\n  };\n\n  /**\n   * Register all the content-API controllers actions into the action provider.\n   * This method make use of the {@link getActionsMap} to generate the list of actions to register.\n   */\n  const registerActions = async () => {\n    const actionsMap = getActionsMap();\n\n    // For each API\n    for (const [api, value] of Object.entries(actionsMap)) {\n      const { controllers } = value;\n\n      // Register controllers methods as actions\n      for (const [controller, actions] of Object.entries(controllers)) {\n        // Register each action individually\n        await Promise.all(\n          actions.map((action) => {\n            const actionUID = `${api}.${controller}.${action}`;\n\n            return providers.action.register(actionUID, {\n              api,\n              controller,\n              action,\n              uid: actionUID,\n            });\n          })\n        );\n      }\n    }\n  };\n\n  // Create an instance of a content-API permission engine\n  // and binds a custom validation handler to it\n  const engine = createPermissionEngine({ providers });\n\n  engine.on(\n    'before-format::validate.permission',\n    createValidatePermissionHandler(providers.action)\n  );\n\n  return {\n    engine,\n    providers,\n    registerActions,\n    getActionsMap,\n  };\n};\n"],"names":["action","strapi","createActionProvider","createConditionProvider","_","engine","createPermissionEngine"],"mappings":";;;;;;;AAKA,MAAM,aAAa,OAAO,IAAI,UAAU;AASxC,MAAM,kCACJ,CAAC,mBACD,CAAC,EAAE,iBAAiB;AAClB,QAAMA,UAAS,eAAe,IAAI,WAAW,MAAM;AAGnD,MAAI,CAACA,SAAQ;AACX,WAAO,IAAI;AAAA,MACT,mBAAmB,WAAW,MAAM;AAAA,IACtC;AAEO,WAAA;AAAA,EAAA;AAGF,SAAA;AACT;AAMF,MAAe,kCAAA,CAACC,YAAwB;AAGtC,QAAM,YAAY;AAAA,IAChB,QAAQC,OAAqB;AAAA,IAC7B,WAAWC,UAAwB;AAAA,EACrC;AAQA,QAAM,gBAAgB,MAAM;AAC1B,UAAM,YAKF,CAAC;AAMC,UAAA,eAAe,CAACH,YAA0D;AAC9E,UAAI,CAACI,WAAAA,QAAE,IAAIJ,SAAQ,UAAU,GAAG;AACvB,eAAA;AAAA,MAAA;AAGT,aAAOA,QAAO,UAAU,EAAE,SAAS,aAAa;AAAA,IAClD;AAKM,UAAA,sBAAsB,CAC1B,MACA,WACG;AACHI,iBAAAA,QAAE,QAAQ,MAAM,CAAC,KAAK,YAAY;AAChC,cAAM,cAAcA,WAAAA,QAAE;AAAA,UACpB,IAAI;AAAA,UACJ,CAAC,KAAK,YAAY,mBAAmB;AACnC,kBAAM,oBAAoBA,WAAA,QAAE,OAAO,YAAY,YAAY;AAEvD,gBAAAA,WAAA,QAAE,QAAQ,iBAAiB,GAAG;AACzB,qBAAA;AAAA,YAAA;AAGT,gBAAI,cAAc,IAAI,OAAO,KAAK,iBAAiB;AAE5C,mBAAA;AAAA,UACT;AAAA,UACA,CAAA;AAAA,QACF;AAEA,YAAI,CAACA,WAAA,QAAE,QAAQ,WAAW,GAAG;AAC3B,oBAAU,GAAG,MAAM,KAAK,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,QAAA;AAAA,MACrD,CACD;AAAA,IACH;AAEoBH,wBAAAA,QAAO,MAAM,KAAK;AAClBA,wBAAAA,QAAO,SAAS,QAAQ;AAErC,WAAA;AAAA,EACT;AAMA,QAAM,kBAAkB,YAAY;AAClC,UAAM,aAAa,cAAc;AAGjC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC/C,YAAA,EAAE,gBAAgB;AAGxB,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,WAAW,GAAG;AAE/D,cAAM,QAAQ;AAAA,UACZ,QAAQ,IAAI,CAACD,YAAW;AACtB,kBAAM,YAAY,GAAG,GAAG,IAAI,UAAU,IAAIA,OAAM;AAEzC,mBAAA,UAAU,OAAO,SAAS,WAAW;AAAA,cAC1C;AAAA,cACA;AAAA,cACA,QAAAA;AAAA,cACA,KAAK;AAAA,YAAA,CACN;AAAA,UACF,CAAA;AAAA,QACH;AAAA,MAAA;AAAA,IACF;AAAA,EAEJ;AAIA,QAAMK,WAASC,OAAuB,EAAE,WAAW;AAE5CD,WAAA;AAAA,IACL;AAAA,IACA,gCAAgC,UAAU,MAAM;AAAA,EAClD;AAEO,SAAA;AAAA,IAAA,QACLA;AAAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;"}

package/dist/services/content-api/permissions/index.mjs

@@ -1,86 +0,0 @@
-import _ from "lodash";
-import createActionProvider from "./providers/action.mjs";
-import createConditionProvider from "./providers/condition.mjs";
-import createPermissionEngine from "./engine.mjs";
-const typeSymbol = Symbol.for("__type__");
-const createValidatePermissionHandler = (actionProvider) => ({ permission }) => {
-  const action = actionProvider.get(permission.action);
-  if (!action) {
-    strapi.log.debug(
-      `Unknown action "${permission.action}" supplied when registering a new permission`
-    );
-    return false;
-  }
-  return true;
-};
-const instantiatePermissionsUtilities = (strapi2) => {
-  const providers = {
-    action: createActionProvider(),
-    condition: createConditionProvider()
-  };
-  const getActionsMap = () => {
-    const actionMap = {};
-    const isContentApi = (action) => {
-      if (!_.has(action, typeSymbol)) {
-        return false;
-      }
-      return action[typeSymbol].includes("content-api");
-    };
-    const registerAPIsActions = (apis, source) => {
-      _.forEach(apis, (api, apiName) => {
-        const controllers = _.reduce(
-          api.controllers,
-          (acc, controller, controllerName) => {
-            const contentApiActions = _.pickBy(controller, isContentApi);
-            if (_.isEmpty(contentApiActions)) {
-              return acc;
-            }
-            acc[controllerName] = Object.keys(contentApiActions);
-            return acc;
-          },
-          {}
-        );
-        if (!_.isEmpty(controllers)) {
-          actionMap[`${source}::${apiName}`] = { controllers };
-        }
-      });
-    };
-    registerAPIsActions(strapi2.apis, "api");
-    registerAPIsActions(strapi2.plugins, "plugin");
-    return actionMap;
-  };
-  const registerActions = async () => {
-    const actionsMap = getActionsMap();
-    for (const [api, value] of Object.entries(actionsMap)) {
-      const { controllers } = value;
-      for (const [controller, actions] of Object.entries(controllers)) {
-        await Promise.all(
-          actions.map((action) => {
-            const actionUID = `${api}.${controller}.${action}`;
-            return providers.action.register(actionUID, {
-              api,
-              controller,
-              action,
-              uid: actionUID
-            });
-          })
-        );
-      }
-    }
-  };
-  const engine = createPermissionEngine({ providers });
-  engine.on(
-    "before-format::validate.permission",
-    createValidatePermissionHandler(providers.action)
-  );
-  return {
-    engine,
-    providers,
-    registerActions,
-    getActionsMap
-  };
-};
-export {
-  instantiatePermissionsUtilities as default
-};
-//# sourceMappingURL=index.mjs.map

package/dist/services/content-api/permissions/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","sources":["../../../../src/services/content-api/permissions/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Core } from '@strapi/types';\nimport { createActionProvider, createConditionProvider } from './providers';\nimport createPermissionEngine from './engine';\n\nconst typeSymbol = Symbol.for('__type__');\n\ninterface ValidatePermissionHandler {\n  (params: { permission: { action: string } }): boolean;\n}\n\n/**\n * Creates a handler that checks if the permission's action exists in the action registry\n */\nconst createValidatePermissionHandler =\n  (actionProvider: ReturnType<typeof createActionProvider>): ValidatePermissionHandler =>\n  ({ permission }) => {\n    const action = actionProvider.get(permission.action);\n\n    // If the action isn't registered into the action provider, then ignore the permission and warn the user\n    if (!action) {\n      strapi.log.debug(\n        `Unknown action \"${permission.action}\" supplied when registering a new permission`\n      );\n\n      return false;\n    }\n\n    return true;\n  };\n\n/**\n * Create instances of providers and permission engine for the core content-API service.\n * Also, expose utilities to get information about available actions and such.\n */\nexport default (strapi: Core.Strapi) => {\n  // NOTE: Here we define both an action and condition provider,\n  // but at the moment, we're only using the action one.\n  const providers = {\n    action: createActionProvider(),\n    condition: createConditionProvider(),\n  };\n\n  /**\n   * Get a tree representation of the available Content API actions\n   * based on the methods of the Content API controllers.\n   *\n   * @note Only actions bound to a content-API route are returned.\n   */\n  const getActionsMap = () => {\n    const actionMap: Record<\n      string,\n      {\n        controllers: Record<string, string[]>;\n      }\n    > = {};\n\n    /**\n     * Check if a controller's action is bound to the\n     * content-api by looking at a potential __type__ symbol\n     */\n    const isContentApi = (action: Core.ControllerHandler & { [s: symbol]: any }) => {\n      if (!_.has(action, typeSymbol)) {\n        return false;\n      }\n\n      return action[typeSymbol].includes('content-api');\n    };\n\n    /**\n     * Register actions from a specific API source into the result tree\n     */\n    const registerAPIsActions = (\n      apis: Record<string, Core.Plugin | Core.Module>,\n      source: 'api' | 'plugin'\n    ) => {\n      _.forEach(apis, (api, apiName) => {\n        const controllers = _.reduce(\n          api.controllers,\n          (acc, controller, controllerName) => {\n            const contentApiActions = _.pickBy(controller, isContentApi);\n\n            if (_.isEmpty(contentApiActions)) {\n              return acc;\n            }\n\n            acc[controllerName] = Object.keys(contentApiActions);\n\n            return acc;\n          },\n          {} as Record<string, string[]>\n        );\n\n        if (!_.isEmpty(controllers)) {\n          actionMap[`${source}::${apiName}`] = { controllers };\n        }\n      });\n    };\n\n    registerAPIsActions(strapi.apis, 'api');\n    registerAPIsActions(strapi.plugins, 'plugin');\n\n    return actionMap;\n  };\n\n  /**\n   * Register all the content-API controllers actions into the action provider.\n   * This method make use of the {@link getActionsMap} to generate the list of actions to register.\n   */\n  const registerActions = async () => {\n    const actionsMap = getActionsMap();\n\n    // For each API\n    for (const [api, value] of Object.entries(actionsMap)) {\n      const { controllers } = value;\n\n      // Register controllers methods as actions\n      for (const [controller, actions] of Object.entries(controllers)) {\n        // Register each action individually\n        await Promise.all(\n          actions.map((action) => {\n            const actionUID = `${api}.${controller}.${action}`;\n\n            return providers.action.register(actionUID, {\n              api,\n              controller,\n              action,\n              uid: actionUID,\n            });\n          })\n        );\n      }\n    }\n  };\n\n  // Create an instance of a content-API permission engine\n  // and binds a custom validation handler to it\n  const engine = createPermissionEngine({ providers });\n\n  engine.on(\n    'before-format::validate.permission',\n    createValidatePermissionHandler(providers.action)\n  );\n\n  return {\n    engine,\n    providers,\n    registerActions,\n    getActionsMap,\n  };\n};\n"],"names":["strapi"],"mappings":";;;;AAKA,MAAM,aAAa,OAAO,IAAI,UAAU;AASxC,MAAM,kCACJ,CAAC,mBACD,CAAC,EAAE,iBAAiB;AAClB,QAAM,SAAS,eAAe,IAAI,WAAW,MAAM;AAGnD,MAAI,CAAC,QAAQ;AACX,WAAO,IAAI;AAAA,MACT,mBAAmB,WAAW,MAAM;AAAA,IACtC;AAEO,WAAA;AAAA,EAAA;AAGF,SAAA;AACT;AAMF,MAAe,kCAAA,CAACA,YAAwB;AAGtC,QAAM,YAAY;AAAA,IAChB,QAAQ,qBAAqB;AAAA,IAC7B,WAAW,wBAAwB;AAAA,EACrC;AAQA,QAAM,gBAAgB,MAAM;AAC1B,UAAM,YAKF,CAAC;AAMC,UAAA,eAAe,CAAC,WAA0D;AAC9E,UAAI,CAAC,EAAE,IAAI,QAAQ,UAAU,GAAG;AACvB,eAAA;AAAA,MAAA;AAGT,aAAO,OAAO,UAAU,EAAE,SAAS,aAAa;AAAA,IAClD;AAKM,UAAA,sBAAsB,CAC1B,MACA,WACG;AACH,QAAE,QAAQ,MAAM,CAAC,KAAK,YAAY;AAChC,cAAM,cAAc,EAAE;AAAA,UACpB,IAAI;AAAA,UACJ,CAAC,KAAK,YAAY,mBAAmB;AACnC,kBAAM,oBAAoB,EAAE,OAAO,YAAY,YAAY;AAEvD,gBAAA,EAAE,QAAQ,iBAAiB,GAAG;AACzB,qBAAA;AAAA,YAAA;AAGT,gBAAI,cAAc,IAAI,OAAO,KAAK,iBAAiB;AAE5C,mBAAA;AAAA,UACT;AAAA,UACA,CAAA;AAAA,QACF;AAEA,YAAI,CAAC,EAAE,QAAQ,WAAW,GAAG;AAC3B,oBAAU,GAAG,MAAM,KAAK,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,QAAA;AAAA,MACrD,CACD;AAAA,IACH;AAEoBA,wBAAAA,QAAO,MAAM,KAAK;AAClBA,wBAAAA,QAAO,SAAS,QAAQ;AAErC,WAAA;AAAA,EACT;AAMA,QAAM,kBAAkB,YAAY;AAClC,UAAM,aAAa,cAAc;AAGjC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC/C,YAAA,EAAE,gBAAgB;AAGxB,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,WAAW,GAAG;AAE/D,cAAM,QAAQ;AAAA,UACZ,QAAQ,IAAI,CAAC,WAAW;AACtB,kBAAM,YAAY,GAAG,GAAG,IAAI,UAAU,IAAI,MAAM;AAEzC,mBAAA,UAAU,OAAO,SAAS,WAAW;AAAA,cAC1C;AAAA,cACA;AAAA,cACA;AAAA,cACA,KAAK;AAAA,YAAA,CACN;AAAA,UACF,CAAA;AAAA,QACH;AAAA,MAAA;AAAA,IACF;AAAA,EAEJ;AAIA,QAAM,SAAS,uBAAuB,EAAE,WAAW;AAE5C,SAAA;AAAA,IACL;AAAA,IACA,gCAAgC,UAAU,MAAM;AAAA,EAClD;AAEO,SAAA;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;"}

package/dist/services/content-api/permissions/providers/action.js

@@ -1,16 +0,0 @@
-"use strict";
-const strapiUtils = require("@strapi/utils");
-const createActionProvider = (options = {}) => {
-  const provider = strapiUtils.providerFactory(options);
-  return {
-    ...provider,
-    async register(action, payload) {
-      if (strapi.isLoaded) {
-        throw new Error(`You can't register new actions outside the bootstrap function.`);
-      }
-      return provider.register(action, payload);
-    }
-  };
-};
-module.exports = createActionProvider;
-//# sourceMappingURL=action.js.map