@strapi/plugin-users-permissions 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282 → 0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc

package/dist/server/utils/refresh-cookie-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-cookie-options.js","sources":["../../../server/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"refresh-cookie-options.js","sources":["../../../server/src/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/refresh-cookie-options.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-cookie-options.mjs","sources":["../../../server/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"refresh-cookie-options.mjs","sources":["../../../server/src/utils/refresh-cookie-options.js"],"sourcesContent":["'use strict';\n\nconst buildRefreshCookieOptions = (upSessions, isProduction) => {\n  const isSecure =\n    typeof upSessions.cookie?.secure === 'boolean' ? upSessions.cookie?.secure : isProduction;\n\n  return {\n    httpOnly: true,\n    secure: isSecure,\n    sameSite: upSessions.cookie?.sameSite ?? 'lax',\n    path: upSessions.cookie?.path ?? '/',\n    domain: upSessions.cookie?.domain,\n    maxAge: upSessions.cookie?.maxAge,\n    overwrite: true,\n  };\n};\n\nmodule.exports = {\n  buildRefreshCookieOptions,\n};\n"],"names":["buildRefreshCookieOptions","upSessions","isProduction","isSecure","cookie","secure","httpOnly","sameSite","path","domain","maxAge","overwrite","refreshCookieOptions"],"mappings":";;;;;IAEA,MAAMA,yBAAAA,GAA4B,CAACC,UAAAA,EAAYC,YAAAA,GAAAA;QAC7C,MAAMC,QAAAA,GACJ,OAAOF,UAAAA,CAAWG,MAAM,EAAEC,WAAW,SAAA,GAAYJ,UAAAA,CAAWG,MAAM,EAAEC,MAAAA,GAASH,YAAAA;QAE/E,OAAO;YACLI,QAAAA,EAAU,IAAA;YACVD,MAAAA,EAAQF,QAAAA;YACRI,QAAAA,EAAUN,UAAAA,CAAWG,MAAM,EAAEG,QAAAA,IAAY,KAAA;YACzCC,IAAAA,EAAMP,UAAAA,CAAWG,MAAM,EAAEI,IAAAA,IAAQ,GAAA;YACjCC,MAAAA,EAAQR,UAAAA,CAAWG,MAAM,EAAEK,MAAAA;YAC3BC,MAAAA,EAAQT,UAAAA,CAAWG,MAAM,EAAEM,MAAAA;YAC3BC,SAAAA,EAAW;AACf,SAAA;AACA,IAAA,CAAA;IAEAC,oBAAAA,GAAiB;AACfZ,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../server/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,YAAAA,GAAaC,oBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,oBAAAA,YAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../server/src/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,YAAAA,GAAaC,oBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,oBAAAA,YAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../../server/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,QAAAA,UAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../../server/src/utils/sanitize/index.js"],"sourcesContent":["'use strict';\n\nconst visitors = require('./visitors');\nconst sanitizers = require('./sanitizers');\n\nmodule.exports = {\n  sanitizers,\n  visitors,\n};\n"],"names":["visitors","require$$0","sanitizers","require$$1","sanitize"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB;AACfF,QAAAA,UAAAA;AACAF,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/sanitizers.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var require$$0 = require('lodash/fp');
+var require$$0 = require('lodash');
 var require$$1 = require('@strapi/utils');
 var index = require('./visitors/index.js');
 

package/dist/server/utils/sanitize/sanitizers.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizers.js","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,2BAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"sanitizers.js","sources":["../../../../server/src/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,2BAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/sanitizers.mjs

@@ -1,4 +1,4 @@
-import require$$0 from 'lodash/fp';
+import require$$0 from 'lodash';
 import require$$1 from '@strapi/utils';
 import { __require as requireVisitors } from './visitors/index.mjs';
 

package/dist/server/utils/sanitize/sanitizers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizers.mjs","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,UAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"sanitizers.mjs","sources":["../../../../server/src/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,UAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,4CAAAA;AACtC,KAAA;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../../server/src/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,4CAAAA;AACtC,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,yCAAAA;AACtC,KAAA;;;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../../../server/src/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,yCAAAA;AACtC,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js.map

@@ -1 +1 @@
-{"version":3,"file":"remove-user-relation-from-role-entities.js","sources":["../../../../../server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"remove-user-relation-from-role-entities.js","sources":["../../../../../server/src/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/remove-user-relation-from-role-entities.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"remove-user-relation-from-role-entities.mjs","sources":["../../../../../server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"remove-user-relation-from-role-entities.mjs","sources":["../../../../../server/src/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/utils/trim-grant-session-response.js

@@ -0,0 +1,67 @@
+'use strict';
+
+var trimGrantSessionResponse_1;
+var hasRequiredTrimGrantSessionResponse;
+function requireTrimGrantSessionResponse() {
+    if (hasRequiredTrimGrantSessionResponse) return trimGrantSessionResponse_1;
+    hasRequiredTrimGrantSessionResponse = 1;
+    const compact = (value)=>{
+        if (value === null || value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== 'object' || Array.isArray(value)) {
+            return value;
+        }
+        return Object.fromEntries(Object.entries(value).map(([key, entry])=>[
+                key,
+                compact(entry)
+            ]).filter(([, entry])=>entry !== undefined));
+    };
+    /**
+	 * Compact grant's OAuth token response before it is written to the signed
+	 * koa-session cookie. The full token exchange payload (especially Cognito's
+	 * dual JWTs plus a duplicated raw blob) can exceed the browser's ~4 KB
+	 * per-cookie limit and silently break the auth callback.
+	 *
+	 * Keep only fields that auth.callback / providers-registry actually read.
+	 */ const trimGrantSessionResponse = (grantResponse, provider)=>{
+        if (!grantResponse || typeof grantResponse !== 'object') {
+            return grantResponse;
+        }
+        switch(provider){
+            case 'cognito':
+                return compact({
+                    id_token: grantResponse.id_token
+                });
+            case 'twitter':
+                return compact({
+                    access_token: grantResponse.access_token,
+                    access_secret: grantResponse.access_secret,
+                    raw: grantResponse.raw?.screen_name ? {
+                        screen_name: grantResponse.raw.screen_name
+                    } : undefined
+                });
+            case 'vk':
+                return compact({
+                    access_token: grantResponse.access_token,
+                    raw: grantResponse.raw?.email != null && grantResponse.raw?.user_id != null ? {
+                        email: grantResponse.raw.email,
+                        user_id: grantResponse.raw.user_id
+                    } : undefined
+                });
+            default:
+                return compact({
+                    access_token: grantResponse.access_token,
+                    oauth_token: grantResponse.oauth_token,
+                    id_token: grantResponse.id_token
+                });
+        }
+    };
+    trimGrantSessionResponse_1 = {
+        trimGrantSessionResponse
+    };
+    return trimGrantSessionResponse_1;
+}
+
+exports.__require = requireTrimGrantSessionResponse;
+//# sourceMappingURL=trim-grant-session-response.js.map

package/dist/server/utils/trim-grant-session-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trim-grant-session-response.js","sources":["../../../server/src/utils/trim-grant-session-response.js"],"sourcesContent":["'use strict';\n\nconst compact = (value) => {\n  if (value === null || value === undefined) {\n    return undefined;\n  }\n\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return value;\n  }\n\n  return Object.fromEntries(\n    Object.entries(value)\n      .map(([key, entry]) => [key, compact(entry)])\n      .filter(([, entry]) => entry !== undefined)\n  );\n};\n\n/**\n * Compact grant's OAuth token response before it is written to the signed\n * koa-session cookie. The full token exchange payload (especially Cognito's\n * dual JWTs plus a duplicated raw blob) can exceed the browser's ~4 KB\n * per-cookie limit and silently break the auth callback.\n *\n * Keep only fields that auth.callback / providers-registry actually read.\n */\nconst trimGrantSessionResponse = (grantResponse, provider) => {\n  if (!grantResponse || typeof grantResponse !== 'object') {\n    return grantResponse;\n  }\n\n  switch (provider) {\n    case 'cognito':\n      return compact({\n        id_token: grantResponse.id_token,\n      });\n\n    case 'twitter':\n      return compact({\n        access_token: grantResponse.access_token,\n        access_secret: grantResponse.access_secret,\n        raw: grantResponse.raw?.screen_name\n          ? { screen_name: grantResponse.raw.screen_name }\n          : undefined,\n      });\n\n    case 'vk':\n      return compact({\n        access_token: grantResponse.access_token,\n        raw:\n          grantResponse.raw?.email != null && grantResponse.raw?.user_id != null\n            ? {\n                email: grantResponse.raw.email,\n                user_id: grantResponse.raw.user_id,\n              }\n            : undefined,\n      });\n\n    default:\n      return compact({\n        access_token: grantResponse.access_token,\n        oauth_token: grantResponse.oauth_token,\n        id_token: grantResponse.id_token,\n      });\n  }\n};\n\nmodule.exports = {\n  trimGrantSessionResponse,\n};\n"],"names":["compact","value","undefined","Array","isArray","Object","fromEntries","entries","map","key","entry","filter","trimGrantSessionResponse","grantResponse","provider","id_token","access_token","access_secret","raw","screen_name","email","user_id","oauth_token","trimGrantSessionResponse_1"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,UAAU,CAACC,KAAAA,GAAAA;QACf,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;YACzC,OAAOA,SAAAA;AACX,QAAA;AAEE,QAAA,IAAI,OAAOD,KAAAA,KAAU,QAAA,IAAYE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;YACrD,OAAOA,KAAAA;AACX,QAAA;AAEE,QAAA,OAAOI,MAAAA,CAAOC,WAAW,CACvBD,MAAAA,CAAOE,OAAO,CAACN,KAAAA,CAAAA,CACZO,GAAG,CAAC,CAAC,CAACC,GAAAA,EAAKC,MAAM,GAAK;AAACD,gBAAAA,GAAAA;gBAAKT,OAAAA,CAAQU,KAAAA;AAAO,aAAA,CAAA,CAC3CC,MAAM,CAAC,CAAC,GAAGD,KAAAA,CAAM,GAAKA,KAAAA,KAAUR,SAAAA,CAAAA,CAAAA;AAEvC,IAAA,CAAA;AAEA;;;;;;;KAQA,MAAMU,wBAAAA,GAA2B,CAACC,aAAAA,EAAeC,QAAAA,GAAAA;AAC/C,QAAA,IAAI,CAACD,aAAAA,IAAiB,OAAOA,aAAAA,KAAkB,QAAA,EAAU;YACvD,OAAOA,aAAAA;AACX,QAAA;QAEE,OAAQC,QAAAA;YACN,KAAK,SAAA;AACH,gBAAA,OAAOd,OAAAA,CAAQ;AACbe,oBAAAA,QAAAA,EAAUF,cAAcE;AAChC,iBAAA,CAAA;YAEI,KAAK,SAAA;AACH,gBAAA,OAAOf,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;AACxCC,oBAAAA,aAAAA,EAAeJ,cAAcI,aAAa;oBAC1CC,GAAAA,EAAKL,aAAAA,CAAcK,GAAG,EAAEC,WAAAA,GACpB;wBAAEA,WAAAA,EAAaN,aAAAA,CAAcK,GAAG,CAACC;qBAAW,GAC5CjB;AACZ,iBAAA,CAAA;YAEI,KAAK,IAAA;AACH,gBAAA,OAAOF,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;oBACxCE,GAAAA,EACEL,aAAAA,CAAcK,GAAG,EAAEE,KAAAA,IAAS,QAAQP,aAAAA,CAAcK,GAAG,EAAEG,OAAAA,IAAW,IAAA,GAC9D;wBACED,KAAAA,EAAOP,aAAAA,CAAcK,GAAG,CAACE,KAAK;wBAC9BC,OAAAA,EAASR,aAAAA,CAAcK,GAAG,CAACG;qBAC3C,GACcnB;AACd,iBAAA,CAAA;AAEI,YAAA;AACE,gBAAA,OAAOF,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;AACxCM,oBAAAA,WAAAA,EAAaT,cAAcS,WAAW;AACtCP,oBAAAA,QAAAA,EAAUF,cAAcE;AAChC,iBAAA,CAAA;AACA;AACA,IAAA,CAAA;IAEAQ,0BAAAA,GAAiB;AACfX,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/trim-grant-session-response.mjs

@@ -0,0 +1,65 @@
+var trimGrantSessionResponse_1;
+var hasRequiredTrimGrantSessionResponse;
+function requireTrimGrantSessionResponse() {
+    if (hasRequiredTrimGrantSessionResponse) return trimGrantSessionResponse_1;
+    hasRequiredTrimGrantSessionResponse = 1;
+    const compact = (value)=>{
+        if (value === null || value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== 'object' || Array.isArray(value)) {
+            return value;
+        }
+        return Object.fromEntries(Object.entries(value).map(([key, entry])=>[
+                key,
+                compact(entry)
+            ]).filter(([, entry])=>entry !== undefined));
+    };
+    /**
+	 * Compact grant's OAuth token response before it is written to the signed
+	 * koa-session cookie. The full token exchange payload (especially Cognito's
+	 * dual JWTs plus a duplicated raw blob) can exceed the browser's ~4 KB
+	 * per-cookie limit and silently break the auth callback.
+	 *
+	 * Keep only fields that auth.callback / providers-registry actually read.
+	 */ const trimGrantSessionResponse = (grantResponse, provider)=>{
+        if (!grantResponse || typeof grantResponse !== 'object') {
+            return grantResponse;
+        }
+        switch(provider){
+            case 'cognito':
+                return compact({
+                    id_token: grantResponse.id_token
+                });
+            case 'twitter':
+                return compact({
+                    access_token: grantResponse.access_token,
+                    access_secret: grantResponse.access_secret,
+                    raw: grantResponse.raw?.screen_name ? {
+                        screen_name: grantResponse.raw.screen_name
+                    } : undefined
+                });
+            case 'vk':
+                return compact({
+                    access_token: grantResponse.access_token,
+                    raw: grantResponse.raw?.email != null && grantResponse.raw?.user_id != null ? {
+                        email: grantResponse.raw.email,
+                        user_id: grantResponse.raw.user_id
+                    } : undefined
+                });
+            default:
+                return compact({
+                    access_token: grantResponse.access_token,
+                    oauth_token: grantResponse.oauth_token,
+                    id_token: grantResponse.id_token
+                });
+        }
+    };
+    trimGrantSessionResponse_1 = {
+        trimGrantSessionResponse
+    };
+    return trimGrantSessionResponse_1;
+}
+
+export { requireTrimGrantSessionResponse as __require };
+//# sourceMappingURL=trim-grant-session-response.mjs.map

package/dist/server/utils/trim-grant-session-response.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trim-grant-session-response.mjs","sources":["../../../server/src/utils/trim-grant-session-response.js"],"sourcesContent":["'use strict';\n\nconst compact = (value) => {\n  if (value === null || value === undefined) {\n    return undefined;\n  }\n\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return value;\n  }\n\n  return Object.fromEntries(\n    Object.entries(value)\n      .map(([key, entry]) => [key, compact(entry)])\n      .filter(([, entry]) => entry !== undefined)\n  );\n};\n\n/**\n * Compact grant's OAuth token response before it is written to the signed\n * koa-session cookie. The full token exchange payload (especially Cognito's\n * dual JWTs plus a duplicated raw blob) can exceed the browser's ~4 KB\n * per-cookie limit and silently break the auth callback.\n *\n * Keep only fields that auth.callback / providers-registry actually read.\n */\nconst trimGrantSessionResponse = (grantResponse, provider) => {\n  if (!grantResponse || typeof grantResponse !== 'object') {\n    return grantResponse;\n  }\n\n  switch (provider) {\n    case 'cognito':\n      return compact({\n        id_token: grantResponse.id_token,\n      });\n\n    case 'twitter':\n      return compact({\n        access_token: grantResponse.access_token,\n        access_secret: grantResponse.access_secret,\n        raw: grantResponse.raw?.screen_name\n          ? { screen_name: grantResponse.raw.screen_name }\n          : undefined,\n      });\n\n    case 'vk':\n      return compact({\n        access_token: grantResponse.access_token,\n        raw:\n          grantResponse.raw?.email != null && grantResponse.raw?.user_id != null\n            ? {\n                email: grantResponse.raw.email,\n                user_id: grantResponse.raw.user_id,\n              }\n            : undefined,\n      });\n\n    default:\n      return compact({\n        access_token: grantResponse.access_token,\n        oauth_token: grantResponse.oauth_token,\n        id_token: grantResponse.id_token,\n      });\n  }\n};\n\nmodule.exports = {\n  trimGrantSessionResponse,\n};\n"],"names":["compact","value","undefined","Array","isArray","Object","fromEntries","entries","map","key","entry","filter","trimGrantSessionResponse","grantResponse","provider","id_token","access_token","access_secret","raw","screen_name","email","user_id","oauth_token","trimGrantSessionResponse_1"],"mappings":";;;;;AAEA,IAAA,MAAMA,UAAU,CAACC,KAAAA,GAAAA;QACf,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;YACzC,OAAOA,SAAAA;AACX,QAAA;AAEE,QAAA,IAAI,OAAOD,KAAAA,KAAU,QAAA,IAAYE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;YACrD,OAAOA,KAAAA;AACX,QAAA;AAEE,QAAA,OAAOI,MAAAA,CAAOC,WAAW,CACvBD,MAAAA,CAAOE,OAAO,CAACN,KAAAA,CAAAA,CACZO,GAAG,CAAC,CAAC,CAACC,GAAAA,EAAKC,MAAM,GAAK;AAACD,gBAAAA,GAAAA;gBAAKT,OAAAA,CAAQU,KAAAA;AAAO,aAAA,CAAA,CAC3CC,MAAM,CAAC,CAAC,GAAGD,KAAAA,CAAM,GAAKA,KAAAA,KAAUR,SAAAA,CAAAA,CAAAA;AAEvC,IAAA,CAAA;AAEA;;;;;;;KAQA,MAAMU,wBAAAA,GAA2B,CAACC,aAAAA,EAAeC,QAAAA,GAAAA;AAC/C,QAAA,IAAI,CAACD,aAAAA,IAAiB,OAAOA,aAAAA,KAAkB,QAAA,EAAU;YACvD,OAAOA,aAAAA;AACX,QAAA;QAEE,OAAQC,QAAAA;YACN,KAAK,SAAA;AACH,gBAAA,OAAOd,OAAAA,CAAQ;AACbe,oBAAAA,QAAAA,EAAUF,cAAcE;AAChC,iBAAA,CAAA;YAEI,KAAK,SAAA;AACH,gBAAA,OAAOf,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;AACxCC,oBAAAA,aAAAA,EAAeJ,cAAcI,aAAa;oBAC1CC,GAAAA,EAAKL,aAAAA,CAAcK,GAAG,EAAEC,WAAAA,GACpB;wBAAEA,WAAAA,EAAaN,aAAAA,CAAcK,GAAG,CAACC;qBAAW,GAC5CjB;AACZ,iBAAA,CAAA;YAEI,KAAK,IAAA;AACH,gBAAA,OAAOF,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;oBACxCE,GAAAA,EACEL,aAAAA,CAAcK,GAAG,EAAEE,KAAAA,IAAS,QAAQP,aAAAA,CAAcK,GAAG,EAAEG,OAAAA,IAAW,IAAA,GAC9D;wBACED,KAAAA,EAAOP,aAAAA,CAAcK,GAAG,CAACE,KAAK;wBAC9BC,OAAAA,EAASR,aAAAA,CAAcK,GAAG,CAACG;qBAC3C,GACcnB;AACd,iBAAA,CAAA;AAEI,YAAA;AACE,gBAAA,OAAOF,OAAAA,CAAQ;AACbgB,oBAAAA,YAAAA,EAAcH,cAAcG,YAAY;AACxCM,oBAAAA,WAAAA,EAAaT,cAAcS,WAAW;AACtCP,oBAAAA,QAAAA,EAAUF,cAAcE;AAChC,iBAAA,CAAA;AACA;AACA,IAAA,CAAA;IAEAQ,0BAAAA,GAAiB;AACfX,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/verify-jwt-with-jwks.js

@@ -0,0 +1,60 @@
+'use strict';
+
+var _node_crypto_commonjsExternal = require('../_virtual/_node_crypto.js');
+var require$$1 = require('jsonwebtoken');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
+var verifyJwtWithJwks_1;
+var hasRequiredVerifyJwtWithJwks;
+function requireVerifyJwtWithJwks() {
+    if (hasRequiredVerifyJwtWithJwks) return verifyJwtWithJwks_1;
+    hasRequiredVerifyJwtWithJwks = 1;
+    const crypto = _node_crypto_commonjsExternal.__require();
+    const jwt = require$$1__default.default;
+    const jwkToKeyObject = (jwk)=>crypto.createPublicKey({
+            key: jwk,
+            format: 'jwk'
+        });
+    const verifyJwtWithJwks = async ({ idToken, jwksUrl })=>{
+        const decoded = jwt.decode(idToken, {
+            complete: true
+        });
+        if (!decoded?.header?.kid || !decoded.payload) {
+            throw new Error('The provided token is not valid');
+        }
+        const response = await fetch(jwksUrl.toString());
+        if (!response.ok) {
+            throw new Error('There was an error verifying the token');
+        }
+        const jwk = await response.json();
+        const key = jwk.keys?.find(({ kid })=>kid === decoded.header.kid);
+        if (!key) {
+            throw new Error('There was an error verifying the token');
+        }
+        const publicKey = jwkToKeyObject(key);
+        return new Promise((resolve, reject)=>{
+            jwt.verify(idToken, publicKey, {
+                algorithms: [
+                    'RS256'
+                ]
+            }, (err, tokenPayload)=>{
+                if (err) {
+                    reject(new Error('There was an error verifying the token'));
+                    return;
+                }
+                resolve(tokenPayload);
+            });
+        });
+    };
+    verifyJwtWithJwks_1 = {
+        jwkToKeyObject,
+        verifyJwtWithJwks
+    };
+    return verifyJwtWithJwks_1;
+}
+
+exports.__require = requireVerifyJwtWithJwks;
+//# sourceMappingURL=verify-jwt-with-jwks.js.map

package/dist/server/utils/verify-jwt-with-jwks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-jwt-with-jwks.js","sources":["../../../server/src/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,uCAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,2BAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;;AAE3E,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;;AAEhD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/verify-jwt-with-jwks.mjs

@@ -0,0 +1,54 @@
+import { __require } from '../_virtual/_node_crypto.mjs';
+import require$$1 from 'jsonwebtoken';
+
+var verifyJwtWithJwks_1;
+var hasRequiredVerifyJwtWithJwks;
+function requireVerifyJwtWithJwks() {
+    if (hasRequiredVerifyJwtWithJwks) return verifyJwtWithJwks_1;
+    hasRequiredVerifyJwtWithJwks = 1;
+    const crypto = __require();
+    const jwt = require$$1;
+    const jwkToKeyObject = (jwk)=>crypto.createPublicKey({
+            key: jwk,
+            format: 'jwk'
+        });
+    const verifyJwtWithJwks = async ({ idToken, jwksUrl })=>{
+        const decoded = jwt.decode(idToken, {
+            complete: true
+        });
+        if (!decoded?.header?.kid || !decoded.payload) {
+            throw new Error('The provided token is not valid');
+        }
+        const response = await fetch(jwksUrl.toString());
+        if (!response.ok) {
+            throw new Error('There was an error verifying the token');
+        }
+        const jwk = await response.json();
+        const key = jwk.keys?.find(({ kid })=>kid === decoded.header.kid);
+        if (!key) {
+            throw new Error('There was an error verifying the token');
+        }
+        const publicKey = jwkToKeyObject(key);
+        return new Promise((resolve, reject)=>{
+            jwt.verify(idToken, publicKey, {
+                algorithms: [
+                    'RS256'
+                ]
+            }, (err, tokenPayload)=>{
+                if (err) {
+                    reject(new Error('There was an error verifying the token'));
+                    return;
+                }
+                resolve(tokenPayload);
+            });
+        });
+    };
+    verifyJwtWithJwks_1 = {
+        jwkToKeyObject,
+        verifyJwtWithJwks
+    };
+    return verifyJwtWithJwks_1;
+}
+
+export { requireVerifyJwtWithJwks as __require };
+//# sourceMappingURL=verify-jwt-with-jwks.mjs.map

package/dist/server/utils/verify-jwt-with-jwks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-jwt-with-jwks.mjs","sources":["../../../server/src/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,SAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,UAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;;AAE3E,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;;AAEhD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}

package/jsconfig.json

@@ -0,0 +1,7 @@
+{
+  "compilerOptions": {
+    "module": "commonjs",
+    "target": "es6"
+  },
+  "exclude": ["node_modules", "dist"]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/plugin-users-permissions",
-  "version": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
+  "version": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
   "description": "Protect your API with a full-authentication process based on JWT",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -32,18 +32,26 @@
       "default": "./dist/admin/index.js"
     },
     "./strapi-server": {
-      "source": "./server/index.js",
+      "types": "./types/strapi-server.d.ts",
+      "source": "./server/src/index.js",
       "import": "./dist/server/index.mjs",
       "require": "./dist/server/index.js",
       "default": "./dist/server/index.js"
     },
     "./package.json": "./package.json"
   },
+  "typesVersions": {
+    "*": {
+      "strapi-server": [
+        "types/strapi-server.d.ts"
+      ]
+    }
+  },
   "scripts": {
     "build": "run -T npm-run-all clean build:code",
     "build:code": "run -T rollup -c",
     "clean": "run -T rimraf dist",
-    "lint": "run -T eslint .",
+    "lint": "run -T eslint . --max-warnings=0",
     "test:front": "run -T cross-env IS_EE=true jest --config ./jest.config.front.js",
     "test:front:ce": "run -T cross-env IS_EE=false jest --config ./jest.config.front.js",
     "test:front:watch": "run -T cross-env IS_EE=true jest --config ./jest.config.front.js --watchAll",
@@ -53,47 +61,49 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
-    "@strapi/design-system": "2.2.1",
-    "@strapi/icons": "2.2.1",
-    "@strapi/utils": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
+    "@strapi/design-system": "2.2.4",
+    "@strapi/icons": "2.2.4",
+    "@strapi/utils": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
     "bcryptjs": "2.4.3",
-    "formik": "2.4.5",
-    "grant": "5.4.24",
+    "formik": "2.4.9",
     "immer": "9.0.21",
-    "jsonwebtoken": "9.0.0",
-    "jwk-to-pem": "2.0.7",
+    "jsonwebtoken": "9.0.3",
     "koa": "2.16.4",
     "koa2-ratelimit": "^1.1.3",
     "lodash": "4.18.1",
     "prop-types": "^15.8.1",
-    "purest": "4.0.2",
     "react-intl": "6.6.2",
     "react-query": "3.39.3",
     "react-redux": "8.1.3",
     "url-join": "4.0.1",
     "yup": "0.32.9",
-    "zod": "3.25.67"
+    "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/strapi": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
+    "@strapi/admin": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
+    "@strapi/strapi": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
     "@testing-library/dom": "10.4.1",
+    "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
+    "@types/jest": "29.5.2",
+    "jest": "29.6.0",
     "msw": "2.13.4",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-router-dom": "6.30.3",
+    "react-router-dom": "6.30.6",
     "styled-components": "6.4.1"
   },
   "peerDependencies": {
-    "@strapi/strapi": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
-    "react": "^17.0.0 || ^18.0.0",
-    "react-dom": "^17.0.0 || ^18.0.0",
+    "@strapi/admin": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
+    "@strapi/strapi": "0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc",
+    "react": "^18.0.0",
+    "react-dom": "^18.0.0",
     "react-router-dom": "^6.30.3",
     "styled-components": "^6.0.0"
   },
   "engines": {
-    "node": ">=20.19.0 <=26.x.x",
+    "node": ">=20.0.0 <=26.x.x",
     "npm": ">=6.0.0"
   },
   "strapi": {

package/rollup.config.mjs

@@ -11,9 +11,9 @@ export default defineConfig([
   }),
   baseConfig({
     input: {
-      index: './server/index.js',
+      index: './server/src/index.js',
     },
-    rootDir: './server',
+    rootDir: './server/src',
     outDir: './dist/server',
   }),
 ]);