@strapi/plugin-users-permissions 0.0.0-experimental.62ebf57bb35846666febb5ee2078fe02fe990f57 → 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282

package/dist/server/strategies/users-permissions.js

@@ -0,0 +1,126 @@
+'use strict';
+
+var require$$0 = require('lodash/fp');
+var require$$1 = require('@strapi/utils');
+var index = require('../utils/index.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
+var usersPermissions;
+var hasRequiredUsersPermissions;
+function requireUsersPermissions() {
+    if (hasRequiredUsersPermissions) return usersPermissions;
+    hasRequiredUsersPermissions = 1;
+    const { castArray, map, every, pipe } = require$$0__default.default;
+    const { ForbiddenError, UnauthorizedError } = require$$1__default.default.errors;
+    const { getService } = index.__require();
+    const getAdvancedSettings = ()=>{
+        return strapi.store({
+            type: 'plugin',
+            name: 'users-permissions'
+        }).get({
+            key: 'advanced'
+        });
+    };
+    const authenticate = async (ctx)=>{
+        try {
+            const token = await getService('jwt').getToken(ctx);
+            if (token) {
+                const { id, sessionId } = token;
+                // Invalid token
+                if (id === undefined) {
+                    return {
+                        authenticated: false
+                    };
+                }
+                const user = await getService('user').fetchAuthenticatedUser(id);
+                // No user associated to the token
+                if (!user) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                const advancedSettings = await getAdvancedSettings();
+                // User not confirmed
+                if (advancedSettings.email_confirmation && !user.confirmed) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                // User blocked
+                if (user.blocked) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                // Fetch user's permissions
+                const permissions = await Promise.resolve(user.role.id).then(getService('permission').findRolePermissions).then(map(getService('permission').toContentAPIPermission));
+                // Generate an ability (content API engine) based on the given permissions
+                const ability = await strapi.contentAPI.permissions.engine.generateAbility(permissions);
+                ctx.state.user = user;
+                // Expose the session backing this request (refresh mode only) so endpoints
+                // can flag the "current" session when listing active sessions.
+                if (sessionId) {
+                    ctx.state.session = {
+                        id: sessionId
+                    };
+                }
+                return {
+                    authenticated: true,
+                    credentials: user,
+                    ability
+                };
+            }
+            const publicPermissions = await getService('permission').findPublicPermissions().then(map(getService('permission').toContentAPIPermission));
+            if (publicPermissions.length === 0) {
+                return {
+                    authenticated: false
+                };
+            }
+            const ability = await strapi.contentAPI.permissions.engine.generateAbility(publicPermissions);
+            return {
+                authenticated: true,
+                credentials: null,
+                ability
+            };
+        } catch (err) {
+            return {
+                authenticated: false
+            };
+        }
+    };
+    const verify = async (auth, config)=>{
+        const { credentials: user, ability } = auth;
+        if (!config.scope) {
+            if (!user) {
+                // A non authenticated user cannot access routes that do not have a scope
+                throw new UnauthorizedError();
+            } else {
+                // An authenticated user can access non scoped routes
+                return;
+            }
+        }
+        // If no ability have been generated, then consider auth is missing
+        if (!ability) {
+            throw new UnauthorizedError();
+        }
+        const isAllowed = pipe(// Make sure we're dealing with an array
+        castArray, // Transform the scope array into an action array
+        every((scope)=>ability.can(scope)))(config.scope);
+        if (!isAllowed) {
+            throw new ForbiddenError();
+        }
+    };
+    usersPermissions = {
+        name: 'users-permissions',
+        authenticate,
+        verify
+    };
+    return usersPermissions;
+}
+
+exports.__require = requireUsersPermissions;
+//# sourceMappingURL=users-permissions.js.map

package/dist/server/strategies/users-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-permissions.js","sources":["../../../server/strategies/users-permissions.js"],"sourcesContent":["'use strict';\n\nconst { castArray, map, every, pipe } = require('lodash/fp');\nconst { ForbiddenError, UnauthorizedError } = require('@strapi/utils').errors;\n\nconst { getService } = require('../utils');\n\nconst getAdvancedSettings = () => {\n  return strapi.store({ type: 'plugin', name: 'users-permissions' }).get({ key: 'advanced' });\n};\n\nconst authenticate = async (ctx) => {\n  try {\n    const token = await getService('jwt').getToken(ctx);\n\n    if (token) {\n      const { id, sessionId } = token;\n\n      // Invalid token\n      if (id === undefined) {\n        return { authenticated: false };\n      }\n\n      const user = await getService('user').fetchAuthenticatedUser(id);\n\n      // No user associated to the token\n      if (!user) {\n        return { error: 'Invalid credentials' };\n      }\n\n      const advancedSettings = await getAdvancedSettings();\n\n      // User not confirmed\n      if (advancedSettings.email_confirmation && !user.confirmed) {\n        return { error: 'Invalid credentials' };\n      }\n\n      // User blocked\n      if (user.blocked) {\n        return { error: 'Invalid credentials' };\n      }\n\n      // Fetch user's permissions\n      const permissions = await Promise.resolve(user.role.id)\n        .then(getService('permission').findRolePermissions)\n        .then(map(getService('permission').toContentAPIPermission));\n\n      // Generate an ability (content API engine) based on the given permissions\n      const ability = await strapi.contentAPI.permissions.engine.generateAbility(permissions);\n\n      ctx.state.user = user;\n      // Expose the session backing this request (refresh mode only) so endpoints\n      // can flag the \"current\" session when listing active sessions.\n      if (sessionId) {\n        ctx.state.session = { id: sessionId };\n      }\n\n      return {\n        authenticated: true,\n        credentials: user,\n        ability,\n      };\n    }\n\n    const publicPermissions = await getService('permission')\n      .findPublicPermissions()\n      .then(map(getService('permission').toContentAPIPermission));\n\n    if (publicPermissions.length === 0) {\n      return { authenticated: false };\n    }\n\n    const ability = await strapi.contentAPI.permissions.engine.generateAbility(publicPermissions);\n\n    return {\n      authenticated: true,\n      credentials: null,\n      ability,\n    };\n  } catch (err) {\n    return { authenticated: false };\n  }\n};\n\nconst verify = async (auth, config) => {\n  const { credentials: user, ability } = auth;\n\n  if (!config.scope) {\n    if (!user) {\n      // A non authenticated user cannot access routes that do not have a scope\n      throw new UnauthorizedError();\n    } else {\n      // An authenticated user can access non scoped routes\n      return;\n    }\n  }\n\n  // If no ability have been generated, then consider auth is missing\n  if (!ability) {\n    throw new UnauthorizedError();\n  }\n\n  const isAllowed = pipe(\n    // Make sure we're dealing with an array\n    castArray,\n    // Transform the scope array into an action array\n    every((scope) => ability.can(scope))\n  )(config.scope);\n\n  if (!isAllowed) {\n    throw new ForbiddenError();\n  }\n};\n\nmodule.exports = {\n  name: 'users-permissions',\n  authenticate,\n  verify,\n};\n"],"names":["castArray","map","every","pipe","require$$0","ForbiddenError","UnauthorizedError","require$$1","errors","getService","require$$2","getAdvancedSettings","strapi","store","type","name","get","key","authenticate","ctx","token","getToken","id","sessionId","undefined","authenticated","user","fetchAuthenticatedUser","error","advancedSettings","email_confirmation","confirmed","blocked","permissions","Promise","resolve","role","then","findRolePermissions","toContentAPIPermission","ability","contentAPI","engine","generateAbility","state","session","credentials","publicPermissions","findPublicPermissions","length","err","verify","auth","config","scope","isAllowed","can","usersPermissions"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,SAAS,EAAEC,GAAG,EAAEC,KAAK,EAAEC,IAAI,EAAE,GAAGC,2BAAAA;AACxC,IAAA,MAAM,EAAEC,cAAc,EAAEC,iBAAiB,EAAE,GAAGC,4BAAyBC,MAAM;IAE7E,MAAM,EAAEC,UAAU,EAAE,GAAGC,eAAAA,EAAAA;AAEvB,IAAA,MAAMC,mBAAAA,GAAsB,IAAA;QAC1B,OAAOC,MAAAA,CAAOC,KAAK,CAAC;YAAEC,IAAAA,EAAM,QAAA;YAAUC,IAAAA,EAAM;AAAmB,SAAA,CAAA,CAAIC,GAAG,CAAC;YAAEC,GAAAA,EAAK;AAAU,SAAA,CAAA;AAC1F,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAe,OAAOC,GAAAA,GAAAA;QAC1B,IAAI;AACF,YAAA,MAAMC,KAAAA,GAAQ,MAAMX,UAAAA,CAAW,KAAA,CAAA,CAAOY,QAAQ,CAACF,GAAAA,CAAAA;AAE/C,YAAA,IAAIC,KAAAA,EAAO;AACT,gBAAA,MAAM,EAAEE,EAAE,EAAEC,SAAS,EAAE,GAAGH,KAAAA;;AAG1B,gBAAA,IAAIE,OAAOE,SAAAA,EAAW;oBACpB,OAAO;wBAAEC,aAAAA,EAAe;;AAChC,gBAAA;AAEM,gBAAA,MAAMC,IAAAA,GAAO,MAAMjB,UAAAA,CAAW,MAAA,CAAA,CAAQkB,sBAAsB,CAACL,EAAAA,CAAAA;;AAG7D,gBAAA,IAAI,CAACI,IAAAA,EAAM;oBACT,OAAO;wBAAEE,KAAAA,EAAO;;AACxB,gBAAA;AAEM,gBAAA,MAAMC,mBAAmB,MAAMlB,mBAAAA,EAAAA;;AAG/B,gBAAA,IAAIkB,iBAAiBC,kBAAkB,IAAI,CAACJ,IAAAA,CAAKK,SAAS,EAAE;oBAC1D,OAAO;wBAAEH,KAAAA,EAAO;;AACxB,gBAAA;;gBAGM,IAAIF,IAAAA,CAAKM,OAAO,EAAE;oBAChB,OAAO;wBAAEJ,KAAAA,EAAO;;AACxB,gBAAA;;gBAGM,MAAMK,WAAAA,GAAc,MAAMC,OAAAA,CAAQC,OAAO,CAACT,IAAAA,CAAKU,IAAI,CAACd,EAAE,CAAA,CACnDe,IAAI,CAAC5B,UAAAA,CAAW,cAAc6B,mBAAmB,CAAA,CACjDD,IAAI,CAACpC,GAAAA,CAAIQ,UAAAA,CAAW,YAAA,CAAA,CAAc8B,sBAAsB,CAAA,CAAA;;gBAG3D,MAAMC,OAAAA,GAAU,MAAM5B,MAAAA,CAAO6B,UAAU,CAACR,WAAW,CAACS,MAAM,CAACC,eAAe,CAACV,WAAAA,CAAAA;gBAE3Ed,GAAAA,CAAIyB,KAAK,CAAClB,IAAI,GAAGA,IAAAA;;;AAGjB,gBAAA,IAAIH,SAAAA,EAAW;oBACbJ,GAAAA,CAAIyB,KAAK,CAACC,OAAO,GAAG;wBAAEvB,EAAAA,EAAIC;AAAS,qBAAA;AAC3C,gBAAA;gBAEM,OAAO;oBACLE,aAAAA,EAAe,IAAA;oBACfqB,WAAAA,EAAapB,IAAAA;AACbc,oBAAAA;AACR,iBAAA;AACA,YAAA;YAEI,MAAMO,iBAAAA,GAAoB,MAAMtC,UAAAA,CAAW,YAAA,CAAA,CACxCuC,qBAAqB,EAAA,CACrBX,IAAI,CAACpC,GAAAA,CAAIQ,UAAAA,CAAW,YAAA,CAAA,CAAc8B,sBAAsB,CAAA,CAAA;YAE3D,IAAIQ,iBAAAA,CAAkBE,MAAM,KAAK,CAAA,EAAG;gBAClC,OAAO;oBAAExB,aAAAA,EAAe;;AAC9B,YAAA;YAEI,MAAMe,OAAAA,GAAU,MAAM5B,MAAAA,CAAO6B,UAAU,CAACR,WAAW,CAACS,MAAM,CAACC,eAAe,CAACI,iBAAAA,CAAAA;YAE3E,OAAO;gBACLtB,aAAAA,EAAe,IAAA;gBACfqB,WAAAA,EAAa,IAAA;AACbN,gBAAAA;AACN,aAAA;AACA,QAAA,CAAA,CAAI,OAAOU,GAAAA,EAAK;YACZ,OAAO;gBAAEzB,aAAAA,EAAe;;AAC5B,QAAA;AACA,IAAA,CAAA;IAEA,MAAM0B,MAAAA,GAAS,OAAOC,IAAAA,EAAMC,MAAAA,GAAAA;AAC1B,QAAA,MAAM,EAAEP,WAAAA,EAAapB,IAAI,EAAEc,OAAO,EAAE,GAAGY,IAAAA;QAEvC,IAAI,CAACC,MAAAA,CAAOC,KAAK,EAAE;AACjB,YAAA,IAAI,CAAC5B,IAAAA,EAAM;;AAET,gBAAA,MAAM,IAAIpB,iBAAAA,EAAAA;YAChB,CAAA,MAAW;;AAEL,gBAAA;AACN,YAAA;AACA,QAAA;;AAGE,QAAA,IAAI,CAACkC,OAAAA,EAAS;AACZ,YAAA,MAAM,IAAIlC,iBAAAA,EAAAA;AACd,QAAA;QAEE,MAAMiD,SAAAA,GAAYpD;AAEhBH,QAAAA,SAAAA;AAEAE,QAAAA,KAAAA,CAAM,CAACoD,KAAAA,GAAUd,OAAAA,CAAQgB,GAAG,CAACF,KAAAA,CAAAA,CAAAA,CAAAA,CAC7BD,OAAOC,KAAK,CAAA;AAEd,QAAA,IAAI,CAACC,SAAAA,EAAW;AACd,YAAA,MAAM,IAAIlD,cAAAA,EAAAA;AACd,QAAA;AACA,IAAA,CAAA;IAEAoD,gBAAAA,GAAiB;QACf1C,IAAAA,EAAM,mBAAA;AACNG,QAAAA,YAAAA;AACAiC,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/strategies/users-permissions.mjs

@@ -0,0 +1,119 @@
+import require$$0 from 'lodash/fp';
+import require$$1 from '@strapi/utils';
+import { __require as requireUtils } from '../utils/index.mjs';
+
+var usersPermissions;
+var hasRequiredUsersPermissions;
+function requireUsersPermissions() {
+    if (hasRequiredUsersPermissions) return usersPermissions;
+    hasRequiredUsersPermissions = 1;
+    const { castArray, map, every, pipe } = require$$0;
+    const { ForbiddenError, UnauthorizedError } = require$$1.errors;
+    const { getService } = requireUtils();
+    const getAdvancedSettings = ()=>{
+        return strapi.store({
+            type: 'plugin',
+            name: 'users-permissions'
+        }).get({
+            key: 'advanced'
+        });
+    };
+    const authenticate = async (ctx)=>{
+        try {
+            const token = await getService('jwt').getToken(ctx);
+            if (token) {
+                const { id, sessionId } = token;
+                // Invalid token
+                if (id === undefined) {
+                    return {
+                        authenticated: false
+                    };
+                }
+                const user = await getService('user').fetchAuthenticatedUser(id);
+                // No user associated to the token
+                if (!user) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                const advancedSettings = await getAdvancedSettings();
+                // User not confirmed
+                if (advancedSettings.email_confirmation && !user.confirmed) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                // User blocked
+                if (user.blocked) {
+                    return {
+                        error: 'Invalid credentials'
+                    };
+                }
+                // Fetch user's permissions
+                const permissions = await Promise.resolve(user.role.id).then(getService('permission').findRolePermissions).then(map(getService('permission').toContentAPIPermission));
+                // Generate an ability (content API engine) based on the given permissions
+                const ability = await strapi.contentAPI.permissions.engine.generateAbility(permissions);
+                ctx.state.user = user;
+                // Expose the session backing this request (refresh mode only) so endpoints
+                // can flag the "current" session when listing active sessions.
+                if (sessionId) {
+                    ctx.state.session = {
+                        id: sessionId
+                    };
+                }
+                return {
+                    authenticated: true,
+                    credentials: user,
+                    ability
+                };
+            }
+            const publicPermissions = await getService('permission').findPublicPermissions().then(map(getService('permission').toContentAPIPermission));
+            if (publicPermissions.length === 0) {
+                return {
+                    authenticated: false
+                };
+            }
+            const ability = await strapi.contentAPI.permissions.engine.generateAbility(publicPermissions);
+            return {
+                authenticated: true,
+                credentials: null,
+                ability
+            };
+        } catch (err) {
+            return {
+                authenticated: false
+            };
+        }
+    };
+    const verify = async (auth, config)=>{
+        const { credentials: user, ability } = auth;
+        if (!config.scope) {
+            if (!user) {
+                // A non authenticated user cannot access routes that do not have a scope
+                throw new UnauthorizedError();
+            } else {
+                // An authenticated user can access non scoped routes
+                return;
+            }
+        }
+        // If no ability have been generated, then consider auth is missing
+        if (!ability) {
+            throw new UnauthorizedError();
+        }
+        const isAllowed = pipe(// Make sure we're dealing with an array
+        castArray, // Transform the scope array into an action array
+        every((scope)=>ability.can(scope)))(config.scope);
+        if (!isAllowed) {
+            throw new ForbiddenError();
+        }
+    };
+    usersPermissions = {
+        name: 'users-permissions',
+        authenticate,
+        verify
+    };
+    return usersPermissions;
+}
+
+export { requireUsersPermissions as __require };
+//# sourceMappingURL=users-permissions.mjs.map

package/dist/server/strategies/users-permissions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-permissions.mjs","sources":["../../../server/strategies/users-permissions.js"],"sourcesContent":["'use strict';\n\nconst { castArray, map, every, pipe } = require('lodash/fp');\nconst { ForbiddenError, UnauthorizedError } = require('@strapi/utils').errors;\n\nconst { getService } = require('../utils');\n\nconst getAdvancedSettings = () => {\n  return strapi.store({ type: 'plugin', name: 'users-permissions' }).get({ key: 'advanced' });\n};\n\nconst authenticate = async (ctx) => {\n  try {\n    const token = await getService('jwt').getToken(ctx);\n\n    if (token) {\n      const { id, sessionId } = token;\n\n      // Invalid token\n      if (id === undefined) {\n        return { authenticated: false };\n      }\n\n      const user = await getService('user').fetchAuthenticatedUser(id);\n\n      // No user associated to the token\n      if (!user) {\n        return { error: 'Invalid credentials' };\n      }\n\n      const advancedSettings = await getAdvancedSettings();\n\n      // User not confirmed\n      if (advancedSettings.email_confirmation && !user.confirmed) {\n        return { error: 'Invalid credentials' };\n      }\n\n      // User blocked\n      if (user.blocked) {\n        return { error: 'Invalid credentials' };\n      }\n\n      // Fetch user's permissions\n      const permissions = await Promise.resolve(user.role.id)\n        .then(getService('permission').findRolePermissions)\n        .then(map(getService('permission').toContentAPIPermission));\n\n      // Generate an ability (content API engine) based on the given permissions\n      const ability = await strapi.contentAPI.permissions.engine.generateAbility(permissions);\n\n      ctx.state.user = user;\n      // Expose the session backing this request (refresh mode only) so endpoints\n      // can flag the \"current\" session when listing active sessions.\n      if (sessionId) {\n        ctx.state.session = { id: sessionId };\n      }\n\n      return {\n        authenticated: true,\n        credentials: user,\n        ability,\n      };\n    }\n\n    const publicPermissions = await getService('permission')\n      .findPublicPermissions()\n      .then(map(getService('permission').toContentAPIPermission));\n\n    if (publicPermissions.length === 0) {\n      return { authenticated: false };\n    }\n\n    const ability = await strapi.contentAPI.permissions.engine.generateAbility(publicPermissions);\n\n    return {\n      authenticated: true,\n      credentials: null,\n      ability,\n    };\n  } catch (err) {\n    return { authenticated: false };\n  }\n};\n\nconst verify = async (auth, config) => {\n  const { credentials: user, ability } = auth;\n\n  if (!config.scope) {\n    if (!user) {\n      // A non authenticated user cannot access routes that do not have a scope\n      throw new UnauthorizedError();\n    } else {\n      // An authenticated user can access non scoped routes\n      return;\n    }\n  }\n\n  // If no ability have been generated, then consider auth is missing\n  if (!ability) {\n    throw new UnauthorizedError();\n  }\n\n  const isAllowed = pipe(\n    // Make sure we're dealing with an array\n    castArray,\n    // Transform the scope array into an action array\n    every((scope) => ability.can(scope))\n  )(config.scope);\n\n  if (!isAllowed) {\n    throw new ForbiddenError();\n  }\n};\n\nmodule.exports = {\n  name: 'users-permissions',\n  authenticate,\n  verify,\n};\n"],"names":["castArray","map","every","pipe","require$$0","ForbiddenError","UnauthorizedError","require$$1","errors","getService","require$$2","getAdvancedSettings","strapi","store","type","name","get","key","authenticate","ctx","token","getToken","id","sessionId","undefined","authenticated","user","fetchAuthenticatedUser","error","advancedSettings","email_confirmation","confirmed","blocked","permissions","Promise","resolve","role","then","findRolePermissions","toContentAPIPermission","ability","contentAPI","engine","generateAbility","state","session","credentials","publicPermissions","findPublicPermissions","length","err","verify","auth","config","scope","isAllowed","can","usersPermissions"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,SAAS,EAAEC,GAAG,EAAEC,KAAK,EAAEC,IAAI,EAAE,GAAGC,UAAAA;AACxC,IAAA,MAAM,EAAEC,cAAc,EAAEC,iBAAiB,EAAE,GAAGC,WAAyBC,MAAM;IAE7E,MAAM,EAAEC,UAAU,EAAE,GAAGC,YAAAA,EAAAA;AAEvB,IAAA,MAAMC,mBAAAA,GAAsB,IAAA;QAC1B,OAAOC,MAAAA,CAAOC,KAAK,CAAC;YAAEC,IAAAA,EAAM,QAAA;YAAUC,IAAAA,EAAM;AAAmB,SAAA,CAAA,CAAIC,GAAG,CAAC;YAAEC,GAAAA,EAAK;AAAU,SAAA,CAAA;AAC1F,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAe,OAAOC,GAAAA,GAAAA;QAC1B,IAAI;AACF,YAAA,MAAMC,KAAAA,GAAQ,MAAMX,UAAAA,CAAW,KAAA,CAAA,CAAOY,QAAQ,CAACF,GAAAA,CAAAA;AAE/C,YAAA,IAAIC,KAAAA,EAAO;AACT,gBAAA,MAAM,EAAEE,EAAE,EAAEC,SAAS,EAAE,GAAGH,KAAAA;;AAG1B,gBAAA,IAAIE,OAAOE,SAAAA,EAAW;oBACpB,OAAO;wBAAEC,aAAAA,EAAe;;AAChC,gBAAA;AAEM,gBAAA,MAAMC,IAAAA,GAAO,MAAMjB,UAAAA,CAAW,MAAA,CAAA,CAAQkB,sBAAsB,CAACL,EAAAA,CAAAA;;AAG7D,gBAAA,IAAI,CAACI,IAAAA,EAAM;oBACT,OAAO;wBAAEE,KAAAA,EAAO;;AACxB,gBAAA;AAEM,gBAAA,MAAMC,mBAAmB,MAAMlB,mBAAAA,EAAAA;;AAG/B,gBAAA,IAAIkB,iBAAiBC,kBAAkB,IAAI,CAACJ,IAAAA,CAAKK,SAAS,EAAE;oBAC1D,OAAO;wBAAEH,KAAAA,EAAO;;AACxB,gBAAA;;gBAGM,IAAIF,IAAAA,CAAKM,OAAO,EAAE;oBAChB,OAAO;wBAAEJ,KAAAA,EAAO;;AACxB,gBAAA;;gBAGM,MAAMK,WAAAA,GAAc,MAAMC,OAAAA,CAAQC,OAAO,CAACT,IAAAA,CAAKU,IAAI,CAACd,EAAE,CAAA,CACnDe,IAAI,CAAC5B,UAAAA,CAAW,cAAc6B,mBAAmB,CAAA,CACjDD,IAAI,CAACpC,GAAAA,CAAIQ,UAAAA,CAAW,YAAA,CAAA,CAAc8B,sBAAsB,CAAA,CAAA;;gBAG3D,MAAMC,OAAAA,GAAU,MAAM5B,MAAAA,CAAO6B,UAAU,CAACR,WAAW,CAACS,MAAM,CAACC,eAAe,CAACV,WAAAA,CAAAA;gBAE3Ed,GAAAA,CAAIyB,KAAK,CAAClB,IAAI,GAAGA,IAAAA;;;AAGjB,gBAAA,IAAIH,SAAAA,EAAW;oBACbJ,GAAAA,CAAIyB,KAAK,CAACC,OAAO,GAAG;wBAAEvB,EAAAA,EAAIC;AAAS,qBAAA;AAC3C,gBAAA;gBAEM,OAAO;oBACLE,aAAAA,EAAe,IAAA;oBACfqB,WAAAA,EAAapB,IAAAA;AACbc,oBAAAA;AACR,iBAAA;AACA,YAAA;YAEI,MAAMO,iBAAAA,GAAoB,MAAMtC,UAAAA,CAAW,YAAA,CAAA,CACxCuC,qBAAqB,EAAA,CACrBX,IAAI,CAACpC,GAAAA,CAAIQ,UAAAA,CAAW,YAAA,CAAA,CAAc8B,sBAAsB,CAAA,CAAA;YAE3D,IAAIQ,iBAAAA,CAAkBE,MAAM,KAAK,CAAA,EAAG;gBAClC,OAAO;oBAAExB,aAAAA,EAAe;;AAC9B,YAAA;YAEI,MAAMe,OAAAA,GAAU,MAAM5B,MAAAA,CAAO6B,UAAU,CAACR,WAAW,CAACS,MAAM,CAACC,eAAe,CAACI,iBAAAA,CAAAA;YAE3E,OAAO;gBACLtB,aAAAA,EAAe,IAAA;gBACfqB,WAAAA,EAAa,IAAA;AACbN,gBAAAA;AACN,aAAA;AACA,QAAA,CAAA,CAAI,OAAOU,GAAAA,EAAK;YACZ,OAAO;gBAAEzB,aAAAA,EAAe;;AAC5B,QAAA;AACA,IAAA,CAAA;IAEA,MAAM0B,MAAAA,GAAS,OAAOC,IAAAA,EAAMC,MAAAA,GAAAA;AAC1B,QAAA,MAAM,EAAEP,WAAAA,EAAapB,IAAI,EAAEc,OAAO,EAAE,GAAGY,IAAAA;QAEvC,IAAI,CAACC,MAAAA,CAAOC,KAAK,EAAE;AACjB,YAAA,IAAI,CAAC5B,IAAAA,EAAM;;AAET,gBAAA,MAAM,IAAIpB,iBAAAA,EAAAA;YAChB,CAAA,MAAW;;AAEL,gBAAA;AACN,YAAA;AACA,QAAA;;AAGE,QAAA,IAAI,CAACkC,OAAAA,EAAS;AACZ,YAAA,MAAM,IAAIlC,iBAAAA,EAAAA;AACd,QAAA;QAEE,MAAMiD,SAAAA,GAAYpD;AAEhBH,QAAAA,SAAAA;AAEAE,QAAAA,KAAAA,CAAM,CAACoD,KAAAA,GAAUd,OAAAA,CAAQgB,GAAG,CAACF,KAAAA,CAAAA,CAAAA,CAAAA,CAC7BD,OAAOC,KAAK,CAAA;AAEd,QAAA,IAAI,CAACC,SAAAA,EAAW;AACd,YAAA,MAAM,IAAIlD,cAAAA,EAAAA;AACd,QAAA;AACA,IAAA,CAAA;IAEAoD,gBAAAA,GAAiB;QACf1C,IAAAA,EAAM,mBAAA;AACNG,QAAAA,YAAAA;AACAiC,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/index.js

@@ -0,0 +1,52 @@
+'use strict';
+
+var require$$0 = require('crypto');
+var index = require('./sanitize/index.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
+var utils;
+var hasRequiredUtils;
+function requireUtils() {
+    if (hasRequiredUtils) return utils;
+    hasRequiredUtils = 1;
+    const crypto = require$$0__default.default;
+    const sanitize = index.__require();
+    const MAX_USERNAME_ATTEMPTS = 10;
+    const getService = (name)=>{
+        return strapi.plugin('users-permissions').service(name);
+    };
+    const isUsernameTaken = async (username)=>{
+        const user = await strapi.db.query('plugin::users-permissions.user').findOne({
+            where: {
+                username
+            }
+        });
+        return Boolean(user);
+    };
+    const findValidUsername = async (basename)=>{
+        const minLength = strapi.getModel('plugin::users-permissions.user')?.attributes?.username?.minLength ?? 3;
+        const tryBasenameFirst = basename.length >= minLength;
+        let attempt = 0;
+        let candidate;
+        let taken;
+        do {
+            candidate = attempt === 0 && tryBasenameFirst ? basename : `${basename}${crypto.randomInt(1000, 9999)}`;
+            taken = await isUsernameTaken(candidate);
+            attempt += 1;
+        }while (taken && attempt <= MAX_USERNAME_ATTEMPTS)
+        return taken ? crypto.randomUUID() : candidate;
+    };
+    utils = {
+        getService,
+        isUsernameTaken,
+        findValidUsername,
+        sanitize
+    };
+    return utils;
+}
+
+exports.__require = requireUtils;
+//# sourceMappingURL=index.js.map

package/dist/server/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../server/utils/index.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('crypto');\nconst sanitize = require('./sanitize');\n\nconst MAX_USERNAME_ATTEMPTS = 10;\n\nconst getService = (name) => {\n  return strapi.plugin('users-permissions').service(name);\n};\n\nconst isUsernameTaken = async (username) => {\n  const user = await strapi.db\n    .query('plugin::users-permissions.user')\n    .findOne({ where: { username } });\n  return Boolean(user);\n};\n\nconst findValidUsername = async (basename) => {\n  const minLength =\n    strapi.getModel('plugin::users-permissions.user')?.attributes?.username?.minLength ?? 3;\n  const tryBasenameFirst = basename.length >= minLength;\n\n  let attempt = 0;\n  let candidate;\n  let taken;\n  do {\n    candidate =\n      attempt === 0 && tryBasenameFirst ? basename : `${basename}${crypto.randomInt(1000, 9999)}`;\n    taken = await isUsernameTaken(candidate);\n    attempt += 1;\n  } while (taken && attempt <= MAX_USERNAME_ATTEMPTS);\n\n  return taken ? crypto.randomUUID() : candidate;\n};\n\nmodule.exports = {\n  getService,\n  isUsernameTaken,\n  findValidUsername,\n  sanitize,\n};\n"],"names":["crypto","require$$0","sanitize","require$$1","MAX_USERNAME_ATTEMPTS","getService","name","strapi","plugin","service","isUsernameTaken","username","user","db","query","findOne","where","Boolean","findValidUsername","basename","minLength","getModel","attributes","tryBasenameFirst","length","attempt","candidate","taken","randomInt","randomUUID","utils"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,2BAAAA;AACf,IAAA,MAAMC,QAAAA,GAAWC,eAAAA,EAAAA;AAEjB,IAAA,MAAMC,qBAAAA,GAAwB,EAAA;AAE9B,IAAA,MAAMC,aAAa,CAACC,IAAAA,GAAAA;AAClB,QAAA,OAAOC,MAAAA,CAAOC,MAAM,CAAC,mBAAA,CAAA,CAAqBC,OAAO,CAACH,IAAAA,CAAAA;AACpD,IAAA,CAAA;AAEA,IAAA,MAAMI,kBAAkB,OAAOC,QAAAA,GAAAA;QAC7B,MAAMC,IAAAA,GAAO,MAAML,MAAAA,CAAOM,EAAE,CACzBC,KAAK,CAAC,gCAAA,CAAA,CACNC,OAAO,CAAC;YAAEC,KAAAA,EAAO;AAAEL,gBAAAA;AAAQ;AAAE,SAAA,CAAA;AAChC,QAAA,OAAOM,OAAAA,CAAQL,IAAAA,CAAAA;AACjB,IAAA,CAAA;AAEA,IAAA,MAAMM,oBAAoB,OAAOC,QAAAA,GAAAA;AAC/B,QAAA,MAAMC,YACJb,MAAAA,CAAOc,QAAQ,CAAC,gCAAA,CAAA,EAAmCC,UAAAA,EAAYX,UAAUS,SAAAA,IAAa,CAAA;QACxF,MAAMG,gBAAAA,GAAmBJ,QAAAA,CAASK,MAAM,IAAIJ,SAAAA;AAE5C,QAAA,IAAIK,OAAAA,GAAU,CAAA;QACd,IAAIC,SAAAA;QACJ,IAAIC,KAAAA;QACJ,GAAG;YACDD,SAAAA,GACED,OAAAA,KAAY,CAAA,IAAKF,gBAAAA,GAAmBJ,QAAAA,GAAW,CAAA,EAAGA,WAAWnB,MAAAA,CAAO4B,SAAS,CAAC,IAAA,EAAM,IAAA,CAAA,CAAA,CAAO;AAC7FD,YAAAA,KAAAA,GAAQ,MAAMjB,eAAAA,CAAgBgB,SAAAA,CAAAA;YAC9BD,OAAAA,IAAW,CAAA;QACf,CAAA,OAAWE,KAAAA,IAASF,WAAWrB,qBAAAA;QAE7B,OAAOuB,KAAAA,GAAQ3B,MAAAA,CAAO6B,UAAU,EAAA,GAAKH,SAAAA;AACvC,IAAA,CAAA;IAEAI,KAAAA,GAAiB;AACfzB,QAAAA,UAAAA;AACAK,QAAAA,eAAAA;AACAQ,QAAAA,iBAAAA;AACAhB,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/index.mjs

@@ -0,0 +1,46 @@
+import require$$0 from 'crypto';
+import { __require as requireSanitize } from './sanitize/index.mjs';
+
+var utils;
+var hasRequiredUtils;
+function requireUtils() {
+    if (hasRequiredUtils) return utils;
+    hasRequiredUtils = 1;
+    const crypto = require$$0;
+    const sanitize = requireSanitize();
+    const MAX_USERNAME_ATTEMPTS = 10;
+    const getService = (name)=>{
+        return strapi.plugin('users-permissions').service(name);
+    };
+    const isUsernameTaken = async (username)=>{
+        const user = await strapi.db.query('plugin::users-permissions.user').findOne({
+            where: {
+                username
+            }
+        });
+        return Boolean(user);
+    };
+    const findValidUsername = async (basename)=>{
+        const minLength = strapi.getModel('plugin::users-permissions.user')?.attributes?.username?.minLength ?? 3;
+        const tryBasenameFirst = basename.length >= minLength;
+        let attempt = 0;
+        let candidate;
+        let taken;
+        do {
+            candidate = attempt === 0 && tryBasenameFirst ? basename : `${basename}${crypto.randomInt(1000, 9999)}`;
+            taken = await isUsernameTaken(candidate);
+            attempt += 1;
+        }while (taken && attempt <= MAX_USERNAME_ATTEMPTS)
+        return taken ? crypto.randomUUID() : candidate;
+    };
+    utils = {
+        getService,
+        isUsernameTaken,
+        findValidUsername,
+        sanitize
+    };
+    return utils;
+}
+
+export { requireUtils as __require };
+//# sourceMappingURL=index.mjs.map

package/dist/server/utils/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../server/utils/index.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('crypto');\nconst sanitize = require('./sanitize');\n\nconst MAX_USERNAME_ATTEMPTS = 10;\n\nconst getService = (name) => {\n  return strapi.plugin('users-permissions').service(name);\n};\n\nconst isUsernameTaken = async (username) => {\n  const user = await strapi.db\n    .query('plugin::users-permissions.user')\n    .findOne({ where: { username } });\n  return Boolean(user);\n};\n\nconst findValidUsername = async (basename) => {\n  const minLength =\n    strapi.getModel('plugin::users-permissions.user')?.attributes?.username?.minLength ?? 3;\n  const tryBasenameFirst = basename.length >= minLength;\n\n  let attempt = 0;\n  let candidate;\n  let taken;\n  do {\n    candidate =\n      attempt === 0 && tryBasenameFirst ? basename : `${basename}${crypto.randomInt(1000, 9999)}`;\n    taken = await isUsernameTaken(candidate);\n    attempt += 1;\n  } while (taken && attempt <= MAX_USERNAME_ATTEMPTS);\n\n  return taken ? crypto.randomUUID() : candidate;\n};\n\nmodule.exports = {\n  getService,\n  isUsernameTaken,\n  findValidUsername,\n  sanitize,\n};\n"],"names":["crypto","require$$0","sanitize","require$$1","MAX_USERNAME_ATTEMPTS","getService","name","strapi","plugin","service","isUsernameTaken","username","user","db","query","findOne","where","Boolean","findValidUsername","basename","minLength","getModel","attributes","tryBasenameFirst","length","attempt","candidate","taken","randomInt","randomUUID","utils"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,UAAAA;AACf,IAAA,MAAMC,QAAAA,GAAWC,eAAAA,EAAAA;AAEjB,IAAA,MAAMC,qBAAAA,GAAwB,EAAA;AAE9B,IAAA,MAAMC,aAAa,CAACC,IAAAA,GAAAA;AAClB,QAAA,OAAOC,MAAAA,CAAOC,MAAM,CAAC,mBAAA,CAAA,CAAqBC,OAAO,CAACH,IAAAA,CAAAA;AACpD,IAAA,CAAA;AAEA,IAAA,MAAMI,kBAAkB,OAAOC,QAAAA,GAAAA;QAC7B,MAAMC,IAAAA,GAAO,MAAML,MAAAA,CAAOM,EAAE,CACzBC,KAAK,CAAC,gCAAA,CAAA,CACNC,OAAO,CAAC;YAAEC,KAAAA,EAAO;AAAEL,gBAAAA;AAAQ;AAAE,SAAA,CAAA;AAChC,QAAA,OAAOM,OAAAA,CAAQL,IAAAA,CAAAA;AACjB,IAAA,CAAA;AAEA,IAAA,MAAMM,oBAAoB,OAAOC,QAAAA,GAAAA;AAC/B,QAAA,MAAMC,YACJb,MAAAA,CAAOc,QAAQ,CAAC,gCAAA,CAAA,EAAmCC,UAAAA,EAAYX,UAAUS,SAAAA,IAAa,CAAA;QACxF,MAAMG,gBAAAA,GAAmBJ,QAAAA,CAASK,MAAM,IAAIJ,SAAAA;AAE5C,QAAA,IAAIK,OAAAA,GAAU,CAAA;QACd,IAAIC,SAAAA;QACJ,IAAIC,KAAAA;QACJ,GAAG;YACDD,SAAAA,GACED,OAAAA,KAAY,CAAA,IAAKF,gBAAAA,GAAmBJ,QAAAA,GAAW,CAAA,EAAGA,WAAWnB,MAAAA,CAAO4B,SAAS,CAAC,IAAA,EAAM,IAAA,CAAA,CAAA,CAAO;AAC7FD,YAAAA,KAAAA,GAAQ,MAAMjB,eAAAA,CAAgBgB,SAAAA,CAAAA;YAC9BD,OAAAA,IAAW,CAAA;QACf,CAAA,OAAWE,KAAAA,IAASF,WAAWrB,qBAAAA;QAE7B,OAAOuB,KAAAA,GAAQ3B,MAAAA,CAAO6B,UAAU,EAAA,GAAKH,SAAAA;AACvC,IAAA,CAAA;IAEAI,KAAAA,GAAiB;AACfzB,QAAAA,UAAAA;AACAK,QAAAA,eAAAA;AACAQ,QAAAA,iBAAAA;AACAhB,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/refresh-cookie-options.js

@@ -0,0 +1,27 @@
+'use strict';
+
+var refreshCookieOptions;
+var hasRequiredRefreshCookieOptions;
+function requireRefreshCookieOptions() {
+    if (hasRequiredRefreshCookieOptions) return refreshCookieOptions;
+    hasRequiredRefreshCookieOptions = 1;
+    const buildRefreshCookieOptions = (upSessions, isProduction)=>{
+        const isSecure = typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;
+        return {
+            httpOnly: true,
+            secure: isSecure,
+            sameSite: upSessions.cookie?.sameSite ?? 'lax',
+            path: upSessions.cookie?.path ?? '/',
+            domain: upSessions.cookie?.domain,
+            maxAge: upSessions.cookie?.maxAge,
+            overwrite: true
+        };
+    };
+    refreshCookieOptions = {
+        buildRefreshCookieOptions
+    };
+    return refreshCookieOptions;
+}
+
+exports.__require = requireRefreshCookieOptions;
+//# sourceMappingURL=refresh-cookie-options.js.map

package/dist/server/utils/refresh-cookie-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-cookie-options.js","sources":["../../../server/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/refresh-cookie-options.mjs

@@ -0,0 +1,25 @@
+var refreshCookieOptions;
+var hasRequiredRefreshCookieOptions;
+function requireRefreshCookieOptions() {
+    if (hasRequiredRefreshCookieOptions) return refreshCookieOptions;
+    hasRequiredRefreshCookieOptions = 1;
+    const buildRefreshCookieOptions = (upSessions, isProduction)=>{
+        const isSecure = typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;
+        return {
+            httpOnly: true,
+            secure: isSecure,
+            sameSite: upSessions.cookie?.sameSite ?? 'lax',
+            path: upSessions.cookie?.path ?? '/',
+            domain: upSessions.cookie?.domain,
+            maxAge: upSessions.cookie?.maxAge,
+            overwrite: true
+        };
+    };
+    refreshCookieOptions = {
+        buildRefreshCookieOptions
+    };
+    return refreshCookieOptions;
+}
+
+export { requireRefreshCookieOptions as __require };
+//# sourceMappingURL=refresh-cookie-options.mjs.map

package/dist/server/utils/refresh-cookie-options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-cookie-options.mjs","sources":["../../../server/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/index.js

@@ -0,0 +1,21 @@
+'use strict';
+
+var index = require('./visitors/index.js');
+var sanitizers = require('./sanitizers.js');
+
+var sanitize;
+var hasRequiredSanitize;
+function requireSanitize() {
+    if (hasRequiredSanitize) return sanitize;
+    hasRequiredSanitize = 1;
+    const visitors = index.__require();
+    const sanitizers$1 = sanitizers.__require();
+    sanitize = {
+        sanitizers: sanitizers$1,
+        visitors
+    };
+    return sanitize;
+}
+
+exports.__require = requireSanitize;
+//# sourceMappingURL=index.js.map

package/dist/server/utils/sanitize/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../server/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,YAAAA,GAAaC,oBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,oBAAAA,YAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/index.mjs

@@ -0,0 +1,19 @@
+import { __require as requireVisitors } from './visitors/index.mjs';
+import { __require as requireSanitizers } from './sanitizers.mjs';
+
+var sanitize;
+var hasRequiredSanitize;
+function requireSanitize() {
+    if (hasRequiredSanitize) return sanitize;
+    hasRequiredSanitize = 1;
+    const visitors = requireVisitors();
+    const sanitizers = requireSanitizers();
+    sanitize = {
+        sanitizers,
+        visitors
+    };
+    return sanitize;
+}
+
+export { requireSanitize as __require };
+//# sourceMappingURL=index.mjs.map

package/dist/server/utils/sanitize/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../server/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,QAAAA,UAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/sanitizers.js

@@ -0,0 +1,37 @@
+'use strict';
+
+var require$$0 = require('lodash/fp');
+var require$$1 = require('@strapi/utils');
+var index = require('./visitors/index.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
+var sanitizers;
+var hasRequiredSanitizers;
+function requireSanitizers() {
+    if (hasRequiredSanitizers) return sanitizers;
+    hasRequiredSanitizers = 1;
+    const { curry } = require$$0__default.default;
+    const { traverseEntity, async } = require$$1__default.default;
+    const { removeUserRelationFromRoleEntities } = index.__require();
+    const sanitizeUserRelationFromRoleEntities = curry((schema, entity)=>{
+        return traverseEntity(removeUserRelationFromRoleEntities, {
+            schema,
+            getModel: strapi.getModel.bind(strapi)
+        }, entity);
+    });
+    const defaultSanitizeOutput = curry((schema, entity)=>{
+        return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);
+    });
+    sanitizers = {
+        sanitizeUserRelationFromRoleEntities,
+        defaultSanitizeOutput
+    };
+    return sanitizers;
+}
+
+exports.__require = requireSanitizers;
+//# sourceMappingURL=sanitizers.js.map

package/dist/server/utils/sanitize/sanitizers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizers.js","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,2BAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/sanitizers.mjs

@@ -0,0 +1,30 @@
+import require$$0 from 'lodash/fp';
+import require$$1 from '@strapi/utils';
+import { __require as requireVisitors } from './visitors/index.mjs';
+
+var sanitizers;
+var hasRequiredSanitizers;
+function requireSanitizers() {
+    if (hasRequiredSanitizers) return sanitizers;
+    hasRequiredSanitizers = 1;
+    const { curry } = require$$0;
+    const { traverseEntity, async } = require$$1;
+    const { removeUserRelationFromRoleEntities } = requireVisitors();
+    const sanitizeUserRelationFromRoleEntities = curry((schema, entity)=>{
+        return traverseEntity(removeUserRelationFromRoleEntities, {
+            schema,
+            getModel: strapi.getModel.bind(strapi)
+        }, entity);
+    });
+    const defaultSanitizeOutput = curry((schema, entity)=>{
+        return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);
+    });
+    sanitizers = {
+        sanitizeUserRelationFromRoleEntities,
+        defaultSanitizeOutput
+    };
+    return sanitizers;
+}
+
+export { requireSanitizers as __require };
+//# sourceMappingURL=sanitizers.mjs.map

package/dist/server/utils/sanitize/sanitizers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizers.mjs","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,UAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+var removeUserRelationFromRoleEntities = require('./remove-user-relation-from-role-entities.js');
+
+var visitors;
+var hasRequiredVisitors;
+function requireVisitors() {
+    if (hasRequiredVisitors) return visitors;
+    hasRequiredVisitors = 1;
+    visitors = {
+        removeUserRelationFromRoleEntities: removeUserRelationFromRoleEntities.__require()
+    };
+    return visitors;
+}
+
+exports.__require = requireVisitors;
+//# sourceMappingURL=index.js.map

package/dist/server/utils/sanitize/visitors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,4CAAAA;AACtC,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.mjs

@@ -0,0 +1,15 @@
+import { __require as requireRemoveUserRelationFromRoleEntities } from './remove-user-relation-from-role-entities.mjs';
+
+var visitors;
+var hasRequiredVisitors;
+function requireVisitors() {
+    if (hasRequiredVisitors) return visitors;
+    hasRequiredVisitors = 1;
+    visitors = {
+        removeUserRelationFromRoleEntities: requireRemoveUserRelationFromRoleEntities()
+    };
+    return visitors;
+}
+
+export { requireVisitors as __require };
+//# sourceMappingURL=index.mjs.map

package/dist/server/utils/sanitize/visitors/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,yCAAAA;AACtC,KAAA;;;;;;"}