@strapi/plugin-users-permissions 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282 → 0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc

package/dist/server/graphql/types/login-payload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"login-payload.mjs","sources":["../../../../server/graphql/types/login-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsLoginPayload',\n\n    definition(t) {\n      t.string('jwt');\n      t.nonNull.field('user', { type: 'UsersPermissionsMe' });\n    },\n  });\n};\n"],"names":["loginPayload","nexus","objectType","name","definition","t","string","nonNull","field","type"],"mappings":";;;;;IAEAA,YAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,8BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;AACVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,KAAA,CAAA;AACTD,gBAAAA,CAAAA,CAAEE,OAAO,CAACC,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;AAAoB,iBAAA,CAAA;AAC1D,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"login-payload.mjs","sources":["../../../../server/src/graphql/types/login-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsLoginPayload',\n\n    definition(t) {\n      t.string('jwt');\n      t.nonNull.field('user', { type: 'UsersPermissionsMe' });\n    },\n  });\n};\n"],"names":["loginPayload","nexus","objectType","name","definition","t","string","nonNull","field","type"],"mappings":";;;;;IAEAA,YAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,8BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;AACVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,KAAA,CAAA;AACTD,gBAAAA,CAAAA,CAAEE,OAAO,CAACC,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;;AACtC,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/me-role.js.map

@@ -1 +1 @@
-{"version":3,"file":"me-role.js","sources":["../../../../server/graphql/types/me-role.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMeRole',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.string('name');\n      t.string('description');\n      t.string('type');\n    },\n  });\n};\n"],"names":["meRole","nexus","objectType","name","definition","t","nonNull","id","string"],"mappings":";;;;;;;IAEAA,MAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,wBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,MAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,aAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,MAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"me-role.js","sources":["../../../../server/src/graphql/types/me-role.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMeRole',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.string('name');\n      t.string('description');\n      t.string('type');\n    },\n  });\n};\n"],"names":["meRole","nexus","objectType","name","definition","t","nonNull","id","string"],"mappings":";;;;;;;IAEAA,MAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,wBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,MAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,aAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,MAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/me-role.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"me-role.mjs","sources":["../../../../server/graphql/types/me-role.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMeRole',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.string('name');\n      t.string('description');\n      t.string('type');\n    },\n  });\n};\n"],"names":["meRole","nexus","objectType","name","definition","t","nonNull","id","string"],"mappings":";;;;;IAEAA,MAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,wBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,MAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,aAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,MAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"me-role.mjs","sources":["../../../../server/src/graphql/types/me-role.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMeRole',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.string('name');\n      t.string('description');\n      t.string('type');\n    },\n  });\n};\n"],"names":["meRole","nexus","objectType","name","definition","t","nonNull","id","string"],"mappings":";;;;;IAEAA,MAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,wBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,MAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,aAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,MAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/me.js.map

@@ -1 +1 @@
-{"version":3,"file":"me.js","sources":["../../../../server/graphql/types/me.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMe',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.id('documentId');\n      t.nonNull.string('username');\n      t.string('email');\n      t.boolean('confirmed');\n      t.boolean('blocked');\n      t.field('role', { type: 'UsersPermissionsMeRole' });\n    },\n  });\n};\n"],"names":["me","nexus","objectType","name","definition","t","nonNull","id","string","boolean","field","type"],"mappings":";;;;;;;IAEAA,EAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,oBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,YAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,UAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,OAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,WAAA,CAAA;AACVJ,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,SAAA,CAAA;gBACVJ,CAAAA,CAAEK,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;AAAwB,iBAAA,CAAA;AACtD,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"me.js","sources":["../../../../server/src/graphql/types/me.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMe',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.id('documentId');\n      t.nonNull.string('username');\n      t.string('email');\n      t.boolean('confirmed');\n      t.boolean('blocked');\n      t.field('role', { type: 'UsersPermissionsMeRole' });\n    },\n  });\n};\n"],"names":["me","nexus","objectType","name","definition","t","nonNull","id","string","boolean","field","type"],"mappings":";;;;;;;IAEAA,EAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,oBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,YAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,UAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,OAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,WAAA,CAAA;AACVJ,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,SAAA,CAAA;gBACVJ,CAAAA,CAAEK,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;AAAwB,iBAAA,CAAA;AACtD,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/me.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"me.mjs","sources":["../../../../server/graphql/types/me.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMe',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.id('documentId');\n      t.nonNull.string('username');\n      t.string('email');\n      t.boolean('confirmed');\n      t.boolean('blocked');\n      t.field('role', { type: 'UsersPermissionsMeRole' });\n    },\n  });\n};\n"],"names":["me","nexus","objectType","name","definition","t","nonNull","id","string","boolean","field","type"],"mappings":";;;;;IAEAA,EAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,oBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,YAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,UAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,OAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,WAAA,CAAA;AACVJ,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,SAAA,CAAA;gBACVJ,CAAAA,CAAEK,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;AAAwB,iBAAA,CAAA;AACtD,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"me.mjs","sources":["../../../../server/src/graphql/types/me.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsMe',\n\n    definition(t) {\n      t.nonNull.id('id');\n      t.nonNull.id('documentId');\n      t.nonNull.string('username');\n      t.string('email');\n      t.boolean('confirmed');\n      t.boolean('blocked');\n      t.field('role', { type: 'UsersPermissionsMeRole' });\n    },\n  });\n};\n"],"names":["me","nexus","objectType","name","definition","t","nonNull","id","string","boolean","field","type"],"mappings":";;;;;IAEAA,EAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,oBAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,IAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACC,EAAE,CAAC,YAAA,CAAA;gBACbF,CAAAA,CAAEC,OAAO,CAACE,MAAM,CAAC,UAAA,CAAA;AACjBH,gBAAAA,CAAAA,CAAEG,MAAM,CAAC,OAAA,CAAA;AACTH,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,WAAA,CAAA;AACVJ,gBAAAA,CAAAA,CAAEI,OAAO,CAAC,SAAA,CAAA;gBACVJ,CAAAA,CAAEK,KAAK,CAAC,MAAA,EAAQ;oBAAEC,IAAAA,EAAM;AAAwB,iBAAA,CAAA;AACtD,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/password-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"password-payload.js","sources":["../../../../server/graphql/types/password-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsPasswordPayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["passwordPayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;;;IAEAA,eAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,iCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"password-payload.js","sources":["../../../../server/src/graphql/types/password-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsPasswordPayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["passwordPayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;;;IAEAA,eAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,iCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/password-payload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password-payload.mjs","sources":["../../../../server/graphql/types/password-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsPasswordPayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["passwordPayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;IAEAA,eAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,iCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"password-payload.mjs","sources":["../../../../server/src/graphql/types/password-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsPasswordPayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["passwordPayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;IAEAA,eAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,iCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/register-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-input.js","sources":["../../../../server/graphql/types/register-input.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.inputObjectType({\n    name: 'UsersPermissionsRegisterInput',\n\n    definition(t) {\n      t.nonNull.string('username');\n      t.nonNull.string('email');\n      t.nonNull.string('password');\n    },\n  });\n};\n"],"names":["registerInput","nexus","inputObjectType","name","definition","t","nonNull","string"],"mappings":";;;;;;;IAEAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,eAAe,CAAC;YAC3BC,IAAAA,EAAM,+BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,OAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;AACvB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register-input.js","sources":["../../../../server/src/graphql/types/register-input.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.inputObjectType({\n    name: 'UsersPermissionsRegisterInput',\n\n    definition(t) {\n      t.nonNull.string('username');\n      t.nonNull.string('email');\n      t.nonNull.string('password');\n    },\n  });\n};\n"],"names":["registerInput","nexus","inputObjectType","name","definition","t","nonNull","string"],"mappings":";;;;;;;IAEAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,eAAe,CAAC;YAC3BC,IAAAA,EAAM,+BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,OAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;AACvB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/register-input.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register-input.mjs","sources":["../../../../server/graphql/types/register-input.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.inputObjectType({\n    name: 'UsersPermissionsRegisterInput',\n\n    definition(t) {\n      t.nonNull.string('username');\n      t.nonNull.string('email');\n      t.nonNull.string('password');\n    },\n  });\n};\n"],"names":["registerInput","nexus","inputObjectType","name","definition","t","nonNull","string"],"mappings":";;;;;IAEAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,eAAe,CAAC;YAC3BC,IAAAA,EAAM,+BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,OAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;AACvB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register-input.mjs","sources":["../../../../server/src/graphql/types/register-input.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.inputObjectType({\n    name: 'UsersPermissionsRegisterInput',\n\n    definition(t) {\n      t.nonNull.string('username');\n      t.nonNull.string('email');\n      t.nonNull.string('password');\n    },\n  });\n};\n"],"names":["registerInput","nexus","inputObjectType","name","definition","t","nonNull","string"],"mappings":";;;;;IAEAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,eAAe,CAAC;YAC3BC,IAAAA,EAAM,+BAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,OAAA,CAAA;gBACjBF,CAAAA,CAAEC,OAAO,CAACC,MAAM,CAAC,UAAA,CAAA;AACvB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/update-role-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-role-payload.js","sources":["../../../../server/graphql/types/update-role-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsUpdateRolePayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["updateRolePayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;;;IAEAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,mCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"update-role-payload.js","sources":["../../../../server/src/graphql/types/update-role-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsUpdateRolePayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["updateRolePayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;;;IAEAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,mCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/update-role-payload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"update-role-payload.mjs","sources":["../../../../server/graphql/types/update-role-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsUpdateRolePayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["updateRolePayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;IAEAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,mCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"update-role-payload.mjs","sources":["../../../../server/src/graphql/types/update-role-payload.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ nexus }) => {\n  return nexus.objectType({\n    name: 'UsersPermissionsUpdateRolePayload',\n\n    definition(t) {\n      t.nonNull.boolean('ok');\n    },\n  });\n};\n"],"names":["updateRolePayload","nexus","objectType","name","definition","t","nonNull","boolean"],"mappings":";;;;;IAEAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAE,GAAA;QACzB,OAAOA,KAAAA,CAAMC,UAAU,CAAC;YACtBC,IAAAA,EAAM,mCAAA;AAENC,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;gBACVA,CAAAA,CAAEC,OAAO,CAACC,OAAO,CAAC,IAAA,CAAA;AACxB,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/user-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-input.js","sources":["../../../../server/graphql/types/user-input.js"],"sourcesContent":["'use strict';\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n  const userInputName = getContentTypeInputName(userContentType);\n\n  return nexus.extendInputType({\n    type: userInputName,\n\n    definition(t) {\n      // Manually add the private password field back to the data\n      // input type as it is used for CRUD operations on users\n      t.string('password');\n    },\n  });\n};\n"],"names":["usersPermissionsUserUID","userInput","nexus","strapi","getContentTypeInputName","plugin","service","naming","userContentType","getModel","userInputName","extendInputType","type","definition","t","string"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,SAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QAEpF,MAAMC,eAAAA,GAAkBL,MAAAA,CAAOM,QAAQ,CAACT,uBAAAA,CAAAA;AACxC,QAAA,MAAMU,gBAAgBN,uBAAAA,CAAwBI,eAAAA,CAAAA;QAE9C,OAAON,KAAAA,CAAMS,eAAe,CAAC;YAC3BC,IAAAA,EAAMF,aAAAA;AAENG,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;;;AAGVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,UAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"user-input.js","sources":["../../../../server/src/graphql/types/user-input.js"],"sourcesContent":["'use strict';\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n  const userInputName = getContentTypeInputName(userContentType);\n\n  return nexus.extendInputType({\n    type: userInputName,\n\n    definition(t) {\n      // Manually add the private password field back to the data\n      // input type as it is used for CRUD operations on users\n      t.string('password');\n    },\n  });\n};\n"],"names":["usersPermissionsUserUID","userInput","nexus","strapi","getContentTypeInputName","plugin","service","naming","userContentType","getModel","userInputName","extendInputType","type","definition","t","string"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,SAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QAEpF,MAAMC,eAAAA,GAAkBL,MAAAA,CAAOM,QAAQ,CAACT,uBAAAA,CAAAA;AACxC,QAAA,MAAMU,gBAAgBN,uBAAAA,CAAwBI,eAAAA,CAAAA;QAE9C,OAAON,KAAAA,CAAMS,eAAe,CAAC;YAC3BC,IAAAA,EAAMF,aAAAA;AAENG,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;;;AAGVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,UAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/types/user-input.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user-input.mjs","sources":["../../../../server/graphql/types/user-input.js"],"sourcesContent":["'use strict';\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n  const userInputName = getContentTypeInputName(userContentType);\n\n  return nexus.extendInputType({\n    type: userInputName,\n\n    definition(t) {\n      // Manually add the private password field back to the data\n      // input type as it is used for CRUD operations on users\n      t.string('password');\n    },\n  });\n};\n"],"names":["usersPermissionsUserUID","userInput","nexus","strapi","getContentTypeInputName","plugin","service","naming","userContentType","getModel","userInputName","extendInputType","type","definition","t","string"],"mappings":";;;;;AAEA,IAAA,MAAMA,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,SAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QAEpF,MAAMC,eAAAA,GAAkBL,MAAAA,CAAOM,QAAQ,CAACT,uBAAAA,CAAAA;AACxC,QAAA,MAAMU,gBAAgBN,uBAAAA,CAAwBI,eAAAA,CAAAA;QAE9C,OAAON,KAAAA,CAAMS,eAAe,CAAC;YAC3BC,IAAAA,EAAMF,aAAAA;AAENG,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;;;AAGVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,UAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"user-input.mjs","sources":["../../../../server/src/graphql/types/user-input.js"],"sourcesContent":["'use strict';\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n  const userInputName = getContentTypeInputName(userContentType);\n\n  return nexus.extendInputType({\n    type: userInputName,\n\n    definition(t) {\n      // Manually add the private password field back to the data\n      // input type as it is used for CRUD operations on users\n      t.string('password');\n    },\n  });\n};\n"],"names":["usersPermissionsUserUID","userInput","nexus","strapi","getContentTypeInputName","plugin","service","naming","userContentType","getModel","userInputName","extendInputType","type","definition","t","string"],"mappings":";;;;;AAEA,IAAA,MAAMA,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,SAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QAEpF,MAAMC,eAAAA,GAAkBL,MAAAA,CAAOM,QAAQ,CAACT,uBAAAA,CAAAA;AACxC,QAAA,MAAMU,gBAAgBN,uBAAAA,CAAwBI,eAAAA,CAAAA;QAE9C,OAAON,KAAAA,CAAMS,eAAe,CAAC;YAC3BC,IAAAA,EAAMF,aAAAA;AAENG,YAAAA,UAAAA,CAAAA,CAAWC,CAAC,EAAA;;;AAGVA,gBAAAA,CAAAA,CAAEC,MAAM,CAAC,UAAA,CAAA;AACf,YAAA;AACA,SAAA,CAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/utils.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var require$$0 = require('lodash/fp');
+var require$$0 = require('lodash');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -11,15 +11,15 @@ var hasRequiredUtils;
 function requireUtils() {
     if (hasRequiredUtils) return utils;
     hasRequiredUtils = 1;
-    const { getOr } = require$$0__default.default;
+    const { get } = require$$0__default.default;
     /**
 	 * Throws an ApolloError if context body contains a bad request
 	 * @param contextBody - body of the context object given to the resolver
 	 * @throws ApolloError if the body is a bad request
 	 */ function checkBadRequest(contextBody) {
-        const statusCode = getOr(200, 'statusCode', contextBody);
+        const statusCode = get(contextBody, 'statusCode', 200);
         if (statusCode !== 200) {
-            const errorMessage = getOr('Bad Request', 'error', contextBody);
+            const errorMessage = get(contextBody, 'error', 'Bad Request');
             const exception = new Error(errorMessage);
             exception.code = statusCode || 400;
             exception.data = contextBody;

package/dist/server/graphql/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sources":["../../../server/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { getOr } = require('lodash/fp');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = getOr(200, 'statusCode', contextBody);\n\n  if (statusCode !== 200) {\n    const errorMessage = getOr('Bad Request', 'error', contextBody);\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["getOr","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAElB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,KAAAA,CAAM,GAAA,EAAK,YAAA,EAAcG,WAAAA,CAAAA;AAE5C,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,KAAAA,CAAM,aAAA,EAAe,OAAA,EAASG,WAAAA,CAAAA;YAEnD,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"utils.js","sources":["../../../server/src/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { get } = require('lodash');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = get(contextBody, 'statusCode', 200);\n\n  if (statusCode !== 200) {\n    const errorMessage = get(contextBody, 'error', 'Bad Request');\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["get","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;;;;;;;IAEA,MAAM,EAAEA,GAAG,EAAE,GAAGC,2BAAAA;AAEhB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,GAAAA,CAAIG,WAAAA,EAAa,YAAA,EAAc,GAAA,CAAA;AAElD,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,GAAAA,CAAIG,WAAAA,EAAa,OAAA,EAAS,aAAA,CAAA;YAE/C,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/graphql/utils.mjs

@@ -1,19 +1,19 @@
-import require$$0 from 'lodash/fp';
+import require$$0 from 'lodash';
 
 var utils;
 var hasRequiredUtils;
 function requireUtils() {
     if (hasRequiredUtils) return utils;
     hasRequiredUtils = 1;
-    const { getOr } = require$$0;
+    const { get } = require$$0;
     /**
 	 * Throws an ApolloError if context body contains a bad request
 	 * @param contextBody - body of the context object given to the resolver
 	 * @throws ApolloError if the body is a bad request
 	 */ function checkBadRequest(contextBody) {
-        const statusCode = getOr(200, 'statusCode', contextBody);
+        const statusCode = get(contextBody, 'statusCode', 200);
         if (statusCode !== 200) {
-            const errorMessage = getOr('Bad Request', 'error', contextBody);
+            const errorMessage = get(contextBody, 'error', 'Bad Request');
             const exception = new Error(errorMessage);
             exception.code = statusCode || 400;
             exception.data = contextBody;

package/dist/server/graphql/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","sources":["../../../server/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { getOr } = require('lodash/fp');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = getOr(200, 'statusCode', contextBody);\n\n  if (statusCode !== 200) {\n    const errorMessage = getOr('Bad Request', 'error', contextBody);\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["getOr","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAElB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,KAAAA,CAAM,GAAA,EAAK,YAAA,EAAcG,WAAAA,CAAAA;AAE5C,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,KAAAA,CAAM,aAAA,EAAe,OAAA,EAASG,WAAAA,CAAAA;YAEnD,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"utils.mjs","sources":["../../../server/src/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { get } = require('lodash');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = get(contextBody, 'statusCode', 200);\n\n  if (statusCode !== 200) {\n    const errorMessage = get(contextBody, 'error', 'Bad Request');\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["get","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;IAEA,MAAM,EAAEA,GAAG,EAAE,GAAGC,UAAAA;AAEhB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,GAAAA,CAAIG,WAAAA,EAAa,YAAA,EAAc,GAAA,CAAA;AAElD,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,GAAAA,CAAIG,WAAAA,EAAa,OAAA,EAAS,aAAA,CAAA;YAE/C,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/index.js

@@ -3,8 +3,8 @@
 var _commonjsHelpers = require('./_virtual/_commonjsHelpers.js');
 var index$1 = require('./index2.js');
 
-var serverExports = index$1.__require();
-var index = /*@__PURE__*/ _commonjsHelpers.getDefaultExportFromCjs(serverExports);
+var srcExports = index$1.__require();
+var index = /*@__PURE__*/ _commonjsHelpers.getDefaultExportFromCjs(srcExports);
 
 module.exports = index;
 //# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../server/index.js?commonjs-entry"],"sourcesContent":["import { getDefaultExportFromCjs } from \"\u0000commonjsHelpers.js\";\nimport { __require as requireServer } from \"/home/runner/work/strapi/strapi/packages/plugins/users-permissions/server/index.js\";\nvar serverExports = requireServer();\nexport { serverExports as __moduleExports };\nexport default /*@__PURE__*/getDefaultExportFromCjs(serverExports);"],"names":["serverExports","requireServer","getDefaultExportFromCjs"],"mappings":";;;;;AAEA,IAAIA,aAAAA,GAAgBC,iBAAAA,EAAAA;AAEpB,YAAe,cAAaC,wCAAAA,CAAwBF,aAAAA,CAAAA;;;;"}
+{"version":3,"file":"index.js","sources":["../../server/src/index.js?commonjs-entry"],"sourcesContent":["import { getDefaultExportFromCjs } from \"\u0000commonjsHelpers.js\";\nimport { __require as requireSrc } from \"/home/runner/work/strapi/strapi/packages/plugins/users-permissions/server/src/index.js\";\nvar srcExports = requireSrc();\nexport { srcExports as __moduleExports };\nexport default /*@__PURE__*/getDefaultExportFromCjs(srcExports);"],"names":["srcExports","requireSrc","getDefaultExportFromCjs"],"mappings":";;;;;AAEA,IAAIA,UAAAA,GAAaC,iBAAAA,EAAAA;AAEjB,YAAe,cAAaC,wCAAAA,CAAwBF,UAAAA,CAAAA;;;;"}

package/dist/server/index.mjs

@@ -1,8 +1,8 @@
 import { getDefaultExportFromCjs } from './_virtual/_commonjsHelpers.mjs';
-import { __require as requireServer } from './index2.mjs';
+import { __require as requireSrc } from './index2.mjs';
 
-var serverExports = requireServer();
-var index = /*@__PURE__*/ getDefaultExportFromCjs(serverExports);
+var srcExports = requireSrc();
+var index = /*@__PURE__*/ getDefaultExportFromCjs(srcExports);
 
 export { index as default };
 //# sourceMappingURL=index.mjs.map

package/dist/server/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../server/index.js?commonjs-entry"],"sourcesContent":["import { getDefaultExportFromCjs } from \"\u0000commonjsHelpers.js\";\nimport { __require as requireServer } from \"/home/runner/work/strapi/strapi/packages/plugins/users-permissions/server/index.js\";\nvar serverExports = requireServer();\nexport { serverExports as __moduleExports };\nexport default /*@__PURE__*/getDefaultExportFromCjs(serverExports);"],"names":["serverExports","requireServer","getDefaultExportFromCjs"],"mappings":";;;AAEA,IAAIA,aAAAA,GAAgBC,aAAAA,EAAAA;AAEpB,YAAe,cAAaC,uBAAAA,CAAwBF,aAAAA,CAAAA;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../server/src/index.js?commonjs-entry"],"sourcesContent":["import { getDefaultExportFromCjs } from \"\u0000commonjsHelpers.js\";\nimport { __require as requireSrc } from \"/home/runner/work/strapi/strapi/packages/plugins/users-permissions/server/src/index.js\";\nvar srcExports = requireSrc();\nexport { srcExports as __moduleExports };\nexport default /*@__PURE__*/getDefaultExportFromCjs(srcExports);"],"names":["srcExports","requireSrc","getDefaultExportFromCjs"],"mappings":";;;AAEA,IAAIA,UAAAA,GAAaC,UAAAA,EAAAA;AAEjB,YAAe,cAAaC,uBAAAA,CAAwBF,UAAAA,CAAAA;;;;"}

package/dist/server/index2.js

@@ -9,11 +9,11 @@ var index$3 = require('./routes/index.js');
 var index$4 = require('./controllers/index.js');
 var config = require('./config.js');
 
-var server;
-var hasRequiredServer;
-function requireServer() {
-    if (hasRequiredServer) return server;
-    hasRequiredServer = 1;
+var src;
+var hasRequiredSrc;
+function requireSrc() {
+    if (hasRequiredSrc) return src;
+    hasRequiredSrc = 1;
     const register$1 = register.__require();
     const bootstrap = index.__require();
     const contentTypes = index$5.__require();
@@ -22,7 +22,7 @@ function requireServer() {
     const routes = index$3.__require();
     const controllers = index$4.__require();
     const config$1 = config.__require();
-    server = ()=>({
+    src = ()=>({
             register: register$1,
             bootstrap,
             config: config$1,
@@ -32,8 +32,8 @@ function requireServer() {
             middlewares,
             services
         });
-    return server;
+    return src;
 }
 
-exports.__require = requireServer;
+exports.__require = requireSrc;
 //# sourceMappingURL=index2.js.map

package/dist/server/index2.js.map

@@ -1 +1 @@
-{"version":3,"file":"index2.js","sources":["../../server/index.js"],"sourcesContent":["'use strict';\n\nconst register = require('./register');\nconst bootstrap = require('./bootstrap');\nconst contentTypes = require('./content-types');\nconst middlewares = require('./middlewares');\nconst services = require('./services');\nconst routes = require('./routes');\nconst controllers = require('./controllers');\nconst config = require('./config');\n\nmodule.exports = () => ({\n  register,\n  bootstrap,\n  config,\n  routes,\n  controllers,\n  contentTypes,\n  middlewares,\n  services,\n});\n"],"names":["register","require$$0","bootstrap","require$$1","contentTypes","require$$2","middlewares","require$$3","services","require$$4","routes","require$$5","controllers","require$$6","config","require$$7","server"],"mappings":";;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,UAAAA,GAAWC,kBAAAA,EAAAA;AACjB,IAAA,MAAMC,SAAAA,GAAYC,eAAAA,EAAAA;AAClB,IAAA,MAAMC,YAAAA,GAAeC,iBAAAA,EAAAA;AACrB,IAAA,MAAMC,WAAAA,GAAcC,iBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAAWC,iBAAAA,EAAAA;AACjB,IAAA,MAAMC,MAAAA,GAASC,iBAAAA,EAAAA;AACf,IAAA,MAAMC,WAAAA,GAAcC,iBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAASC,gBAAAA,EAAAA;AAEfC,IAAAA,MAAAA,GAAiB,KAAO;AACtBhB,sBAAAA,UAAAA;AACAE,YAAAA,SAAAA;AACAY,oBAAAA,QAAAA;AACAJ,YAAAA,MAAAA;AACAE,YAAAA,WAAAA;AACAR,YAAAA,YAAAA;AACAE,YAAAA,WAAAA;AACAE,YAAAA;SACF,CAAA;;;;;;"}
+{"version":3,"file":"index2.js","sources":["../../server/src/index.js"],"sourcesContent":["'use strict';\n\nconst register = require('./register');\nconst bootstrap = require('./bootstrap');\nconst contentTypes = require('./content-types');\nconst middlewares = require('./middlewares');\nconst services = require('./services');\nconst routes = require('./routes');\nconst controllers = require('./controllers');\nconst config = require('./config');\n\nmodule.exports = () => ({\n  register,\n  bootstrap,\n  config,\n  routes,\n  controllers,\n  contentTypes,\n  middlewares,\n  services,\n});\n"],"names":["register","require$$0","bootstrap","require$$1","contentTypes","require$$2","middlewares","require$$3","services","require$$4","routes","require$$5","controllers","require$$6","config","require$$7","src"],"mappings":";;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,UAAAA,GAAWC,kBAAAA,EAAAA;AACjB,IAAA,MAAMC,SAAAA,GAAYC,eAAAA,EAAAA;AAClB,IAAA,MAAMC,YAAAA,GAAeC,iBAAAA,EAAAA;AACrB,IAAA,MAAMC,WAAAA,GAAcC,iBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAAWC,iBAAAA,EAAAA;AACjB,IAAA,MAAMC,MAAAA,GAASC,iBAAAA,EAAAA;AACf,IAAA,MAAMC,WAAAA,GAAcC,iBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAASC,gBAAAA,EAAAA;AAEfC,IAAAA,GAAAA,GAAiB,KAAO;AACtBhB,sBAAAA,UAAAA;AACAE,YAAAA,SAAAA;AACAY,oBAAAA,QAAAA;AACAJ,YAAAA,MAAAA;AACAE,YAAAA,WAAAA;AACAR,YAAAA,YAAAA;AACAE,YAAAA,WAAAA;AACAE,YAAAA;SACF,CAAA;;;;;;"}

package/dist/server/index2.mjs

@@ -7,11 +7,11 @@ import { __require as requireRoutes } from './routes/index.mjs';
 import { __require as requireControllers } from './controllers/index.mjs';
 import { __require as requireConfig } from './config.mjs';
 
-var server;
-var hasRequiredServer;
-function requireServer() {
-    if (hasRequiredServer) return server;
-    hasRequiredServer = 1;
+var src;
+var hasRequiredSrc;
+function requireSrc() {
+    if (hasRequiredSrc) return src;
+    hasRequiredSrc = 1;
     const register = requireRegister();
     const bootstrap = requireBootstrap();
     const contentTypes = requireContentTypes();
@@ -20,7 +20,7 @@ function requireServer() {
     const routes = requireRoutes();
     const controllers = requireControllers();
     const config = requireConfig();
-    server = ()=>({
+    src = ()=>({
             register,
             bootstrap,
             config,
@@ -30,8 +30,8 @@ function requireServer() {
             middlewares,
             services
         });
-    return server;
+    return src;
 }
 
-export { requireServer as __require };
+export { requireSrc as __require };
 //# sourceMappingURL=index2.mjs.map

package/dist/server/index2.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index2.mjs","sources":["../../server/index.js"],"sourcesContent":["'use strict';\n\nconst register = require('./register');\nconst bootstrap = require('./bootstrap');\nconst contentTypes = require('./content-types');\nconst middlewares = require('./middlewares');\nconst services = require('./services');\nconst routes = require('./routes');\nconst controllers = require('./controllers');\nconst config = require('./config');\n\nmodule.exports = () => ({\n  register,\n  bootstrap,\n  config,\n  routes,\n  controllers,\n  contentTypes,\n  middlewares,\n  services,\n});\n"],"names":["register","require$$0","bootstrap","require$$1","contentTypes","require$$2","middlewares","require$$3","services","require$$4","routes","require$$5","controllers","require$$6","config","require$$7","server"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,SAAAA,GAAYC,gBAAAA,EAAAA;AAClB,IAAA,MAAMC,YAAAA,GAAeC,mBAAAA,EAAAA;AACrB,IAAA,MAAMC,WAAAA,GAAcC,kBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,MAAAA,GAASC,aAAAA,EAAAA;AACf,IAAA,MAAMC,WAAAA,GAAcC,kBAAAA,EAAAA;AACpB,IAAA,MAAMC,MAAAA,GAASC,aAAAA,EAAAA;AAEfC,IAAAA,MAAAA,GAAiB,KAAO;AACtBhB,YAAAA,QAAAA;AACAE,YAAAA,SAAAA;AACAY,YAAAA,MAAAA;AACAJ,YAAAA,MAAAA;AACAE,YAAAA,WAAAA;AACAR,YAAAA,YAAAA;AACAE,YAAAA,WAAAA;AACAE,YAAAA;SACF,CAAA;;;;;;"}
+{"version":3,"file":"index2.mjs","sources":["../../server/src/index.js"],"sourcesContent":["'use strict';\n\nconst register = require('./register');\nconst bootstrap = require('./bootstrap');\nconst contentTypes = require('./content-types');\nconst middlewares = require('./middlewares');\nconst services = require('./services');\nconst routes = require('./routes');\nconst controllers = require('./controllers');\nconst config = require('./config');\n\nmodule.exports = () => ({\n  register,\n  bootstrap,\n  config,\n  routes,\n  controllers,\n  contentTypes,\n  middlewares,\n  services,\n});\n"],"names":["register","require$$0","bootstrap","require$$1","contentTypes","require$$2","middlewares","require$$3","services","require$$4","routes","require$$5","controllers","require$$6","config","require$$7","src"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,SAAAA,GAAYC,gBAAAA,EAAAA;AAClB,IAAA,MAAMC,YAAAA,GAAeC,mBAAAA,EAAAA;AACrB,IAAA,MAAMC,WAAAA,GAAcC,kBAAAA,EAAAA;AACpB,IAAA,MAAMC,QAAAA,GAAWC,eAAAA,EAAAA;AACjB,IAAA,MAAMC,MAAAA,GAASC,aAAAA,EAAAA;AACf,IAAA,MAAMC,WAAAA,GAAcC,kBAAAA,EAAAA;AACpB,IAAA,MAAMC,MAAAA,GAASC,aAAAA,EAAAA;AAEfC,IAAAA,GAAAA,GAAiB,KAAO;AACtBhB,YAAAA,QAAAA;AACAE,YAAAA,SAAAA;AACAY,YAAAA,MAAAA;AACAJ,YAAAA,MAAAA;AACAE,YAAAA,WAAAA;AACAR,YAAAA,YAAAA;AACAE,YAAAA,WAAAA;AACAE,YAAAA;SACF,CAAA;;;;;;"}

package/dist/server/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../server/middlewares/index.js"],"sourcesContent":["'use strict';\n\nconst rateLimit = require('./rateLimit');\n\nmodule.exports = {\n  rateLimit,\n};\n"],"names":["rateLimit","require$$0","middlewares"],"mappings":";;;;;;;;;AAEA,IAAA,MAAMA,WAAAA,GAAYC,mBAAAA,EAAAA;IAElBC,WAAAA,GAAiB;AACfF,mBAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../server/src/middlewares/index.js"],"sourcesContent":["'use strict';\n\nconst rateLimit = require('./rateLimit');\n\nmodule.exports = {\n  rateLimit,\n};\n"],"names":["rateLimit","require$$0","middlewares"],"mappings":";;;;;;;;;AAEA,IAAA,MAAMA,WAAAA,GAAYC,mBAAAA,EAAAA;IAElBC,WAAAA,GAAiB;AACfF,mBAAAA;AACF,KAAA;;;;;;"}

package/dist/server/middlewares/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../server/middlewares/index.js"],"sourcesContent":["'use strict';\n\nconst rateLimit = require('./rateLimit');\n\nmodule.exports = {\n  rateLimit,\n};\n"],"names":["rateLimit","require$$0","middlewares"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,SAAAA,GAAYC,gBAAAA,EAAAA;IAElBC,WAAAA,GAAiB;AACfF,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../server/src/middlewares/index.js"],"sourcesContent":["'use strict';\n\nconst rateLimit = require('./rateLimit');\n\nmodule.exports = {\n  rateLimit,\n};\n"],"names":["rateLimit","require$$0","middlewares"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,SAAAA,GAAYC,gBAAAA,EAAAA;IAElBC,WAAAA,GAAiB;AACfF,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/middlewares/rateLimit.js

@@ -3,7 +3,7 @@
 var rateLimit = require('../_virtual/rateLimit.js');
 var require$$1$1 = require('path');
 var require$$1 = require('@strapi/utils');
-var require$$0 = require('lodash/fp');
+var require$$0 = require('lodash');
 var require$$3 = require('koa2-ratelimit');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -19,7 +19,7 @@ function requireRateLimit() {
     hasRequiredRateLimit = 1;
     const path = require$$1__default$1.default;
     const utils = require$$1__default.default;
-    const { isString, has, toLower } = require$$0__default.default;
+    const { toLower, isString, has } = require$$0__default.default;
     const { RateLimitError } = utils.errors;
     /**
 	 * Routes where the rate-limit key MUST NOT include a user identifier
@@ -59,8 +59,8 @@ function requireRateLimit() {
 	 * lower-cased, trailing slashes removed so `/api/auth/local` and
 	 * `/api/auth/local/` share one bucket.
 	 */ const normalizeRequestPathForRateLimit = (requestPath)=>{
-        const normalized = path.normalize(requestPath);
-        const lower = toLower(normalized);
+        const normalized = path.posix.normalize(requestPath);
+        const lower = normalized.toLowerCase();
         return lower.replace(/\/+$/, '') || '/';
     };
     const getEmailIdentifierForKey = (body)=>{
@@ -106,7 +106,7 @@ function requireRateLimit() {
                     enabled: true
                 };
             }
-            if (!has('enabled', rateLimitConfig)) {
+            if (!has(rateLimitConfig, 'enabled')) {
                 rateLimitConfig.enabled = true;
             }
             if (rateLimitConfig.enabled === true) {

package/dist/server/middlewares/rateLimit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rateLimit.js","sources":["../../../server/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { isString, has, toLower } = require('lodash/fp');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.normalize(requestPath);\n  const lower = toLower(normalized);\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has('enabled', rateLimitConfig)) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","isString","has","toLower","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","normalize","lower","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,6BAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,2BAAAA;AACd,IAAA,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAEC,OAAO,EAAE,GAAGC,2BAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;QACxC,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,SAAS,CAACR,WAAAA,CAAAA;AAClC,QAAA,MAAMS,QAAQf,OAAAA,CAAQa,UAAAA,CAAAA;AACtB,QAAA,OAAOE,KAAAA,CAAMC,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACpB,QAAAA,CAASoB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOnB,OAAAA,CAAQkB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIf,WAAAA;AACJ,QAAA,IAAI,CAACR,QAAAA,CAASuB,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCS,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAElB,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI7B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACI8B,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,kBAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACxC,GAAAA,CAAI,SAAA,EAAW2B,eAAAA,CAAAA,EAAkB;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,4BAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,kBAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,kBAAAA,CAAAC,OAAA,CAAA9B,yBAAwC,GAAGA,yBAAAA;IAC3C6B,kBAAAA,CAAAC,OAAA,CAAAtB,gCAA+C,GAAGA,gCAAAA;IAClDqB,kBAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}
+{"version":3,"file":"rateLimit.js","sources":["../../../server/src/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { toLower, isString, has } = require('lodash');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.posix.normalize(requestPath);\n  const lower = normalized.toLowerCase();\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has(rateLimitConfig, 'enabled')) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","toLower","isString","has","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","posix","normalize","lower","toLowerCase","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,6BAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,2BAAAA;AACd,IAAA,MAAM,EAAEC,OAAO,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGC,2BAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;AACxC,QAAA,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,KAAK,CAACC,SAAS,CAACT,WAAAA,CAAAA;QACxC,MAAMU,KAAAA,GAAQH,WAAWI,WAAW,EAAA;AACpC,QAAA,OAAOD,KAAAA,CAAME,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACrB,QAAAA,CAASqB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOvB,OAAAA,CAAQsB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIjB,WAAAA;AACJ,QAAA,IAAI,CAACP,QAAAA,CAASwB,GAAAA,CAAIC,OAAO,CAAC9B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCW,GAAAA,CAAIC,OAAO,CAAC9B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEiB,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAEpB,WAAAA,CAAY,CAAC,EAAEiB,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI/B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACIgC,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,kBAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACzC,GAAAA,CAAI4B,eAAAA,EAAiB,SAAA,CAAA,EAAY;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,4BAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,kBAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,kBAAAA,CAAAC,OAAA,CAAAhC,yBAAwC,GAAGA,yBAAAA;IAC3C+B,kBAAAA,CAAAC,OAAA,CAAAxB,gCAA+C,GAAGA,gCAAAA;IAClDuB,kBAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}

package/dist/server/middlewares/rateLimit.mjs

@@ -1,7 +1,7 @@
 import { __module as rateLimit } from '../_virtual/rateLimit.mjs';
 import require$$1$1 from 'path';
 import require$$1 from '@strapi/utils';
-import require$$0 from 'lodash/fp';
+import require$$0 from 'lodash';
 import require$$3 from 'koa2-ratelimit';
 
 var hasRequiredRateLimit;
@@ -10,7 +10,7 @@ function requireRateLimit() {
     hasRequiredRateLimit = 1;
     const path = require$$1$1;
     const utils = require$$1;
-    const { isString, has, toLower } = require$$0;
+    const { toLower, isString, has } = require$$0;
     const { RateLimitError } = utils.errors;
     /**
 	 * Routes where the rate-limit key MUST NOT include a user identifier
@@ -50,8 +50,8 @@ function requireRateLimit() {
 	 * lower-cased, trailing slashes removed so `/api/auth/local` and
 	 * `/api/auth/local/` share one bucket.
 	 */ const normalizeRequestPathForRateLimit = (requestPath)=>{
-        const normalized = path.normalize(requestPath);
-        const lower = toLower(normalized);
+        const normalized = path.posix.normalize(requestPath);
+        const lower = normalized.toLowerCase();
         return lower.replace(/\/+$/, '') || '/';
     };
     const getEmailIdentifierForKey = (body)=>{
@@ -97,7 +97,7 @@ function requireRateLimit() {
                     enabled: true
                 };
             }
-            if (!has('enabled', rateLimitConfig)) {
+            if (!has(rateLimitConfig, 'enabled')) {
                 rateLimitConfig.enabled = true;
             }
             if (rateLimitConfig.enabled === true) {

package/dist/server/middlewares/rateLimit.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rateLimit.mjs","sources":["../../../server/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { isString, has, toLower } = require('lodash/fp');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.normalize(requestPath);\n  const lower = toLower(normalized);\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has('enabled', rateLimitConfig)) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","isString","has","toLower","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","normalize","lower","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,YAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,UAAAA;AACd,IAAA,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAEC,OAAO,EAAE,GAAGC,UAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;QACxC,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,SAAS,CAACR,WAAAA,CAAAA;AAClC,QAAA,MAAMS,QAAQf,OAAAA,CAAQa,UAAAA,CAAAA;AACtB,QAAA,OAAOE,KAAAA,CAAMC,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACpB,QAAAA,CAASoB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOnB,OAAAA,CAAQkB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIf,WAAAA;AACJ,QAAA,IAAI,CAACR,QAAAA,CAASuB,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCS,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAElB,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI7B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACI8B,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,SAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACxC,GAAAA,CAAI,SAAA,EAAW2B,eAAAA,CAAAA,EAAkB;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,WAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,SAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,SAAAA,CAAAC,OAAA,CAAA9B,yBAAwC,GAAGA,yBAAAA;IAC3C6B,SAAAA,CAAAC,OAAA,CAAAtB,gCAA+C,GAAGA,gCAAAA;IAClDqB,SAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}
+{"version":3,"file":"rateLimit.mjs","sources":["../../../server/src/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { toLower, isString, has } = require('lodash');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.posix.normalize(requestPath);\n  const lower = normalized.toLowerCase();\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has(rateLimitConfig, 'enabled')) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","toLower","isString","has","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","posix","normalize","lower","toLowerCase","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,YAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,UAAAA;AACd,IAAA,MAAM,EAAEC,OAAO,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGC,UAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;AACxC,QAAA,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,KAAK,CAACC,SAAS,CAACT,WAAAA,CAAAA;QACxC,MAAMU,KAAAA,GAAQH,WAAWI,WAAW,EAAA;AACpC,QAAA,OAAOD,KAAAA,CAAME,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACrB,QAAAA,CAASqB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOvB,OAAAA,CAAQsB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIjB,WAAAA;AACJ,QAAA,IAAI,CAACP,QAAAA,CAASwB,GAAAA,CAAIC,OAAO,CAAC9B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCW,GAAAA,CAAIC,OAAO,CAAC9B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEiB,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAEpB,WAAAA,CAAY,CAAC,EAAEiB,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI/B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACIgC,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,SAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACzC,GAAAA,CAAI4B,eAAAA,EAAiB,SAAA,CAAA,EAAY;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,WAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,SAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,SAAAA,CAAAC,OAAA,CAAAhC,yBAAwC,GAAGA,yBAAAA;IAC3C+B,SAAAA,CAAAC,OAAA,CAAAxB,gCAA+C,GAAGA,gCAAAA;IAClDuB,SAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}

package/dist/server/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sources":["../../server/register.js"],"sourcesContent":["'use strict';\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst authStrategy = require('./strategies/users-permissions');\nconst sanitizers = require('./utils/sanitize/sanitizers');\n\nmodule.exports = ({ strapi }) => {\n  strapi.get('auth').register('content-api', authStrategy);\n  strapi.sanitizers.add('content-api.output', sanitizers.defaultSanitizeOutput);\n\n  if (strapi.plugin('graphql')) {\n    require('./graphql')({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    const specPath = path.join(__dirname, '../../documentation/content-api.yaml');\n    const spec = fs.readFileSync(specPath, 'utf8');\n\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'users-permissions',\n        excludeFromGeneration: ['users-permissions'],\n      });\n  }\n};\n"],"names":["fs","require$$0","path","require$$1","authStrategy","require$$2","sanitizers","require$$3","register","strapi","get","add","defaultSanitizeOutput","plugin","require$$4","specPath","join","__dirname","spec","readFileSync","service","registerOverride","pluginOrigin","excludeFromGeneration"],"mappings":";;;;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,EAAAA,GAAKC,2BAAAA;AACX,IAAA,MAAMC,IAAAA,GAAOC,2BAAAA;AAEb,IAAA,MAAMC,YAAAA,GAAeC,0BAAAA,EAAAA;AACrB,IAAA,MAAMC,YAAAA,GAAaC,oBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1BA,QAAAA,MAAAA,CAAOC,GAAG,CAAC,MAAA,CAAA,CAAQF,QAAQ,CAAC,aAAA,EAAeJ,YAAAA,CAAAA;AAC3CK,QAAAA,MAAAA,CAAOH,UAAU,CAACK,GAAG,CAAC,oBAAA,EAAsBL,aAAWM,qBAAqB,CAAA;QAE5E,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA,EAAY;YAC5BC,eAAAA,EAAAA,CAAqB;AAAEL,gBAAAA;AAAM,aAAA,CAAA;AACjC,QAAA;QAEE,IAAIA,MAAAA,CAAOI,MAAM,CAAC,eAAA,CAAA,EAAkB;AAClC,YAAA,MAAME,QAAAA,GAAWb,IAAAA,CAAKc,IAAI,CAACC,SAAAA,EAAW,sCAAA,CAAA;AACtC,YAAA,MAAMC,IAAAA,GAAOlB,EAAAA,CAAGmB,YAAY,CAACJ,QAAAA,EAAU,MAAA,CAAA;YAEvCN,MAAAA,CACGI,MAAM,CAAC,eAAA,CAAA,CACPO,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACH,IAAAA,EAAM;gBACtBI,YAAAA,EAAc,mBAAA;gBACdC,qBAAAA,EAAuB;AAAC,oBAAA;AAAoB;AACpD,aAAA,CAAA;AACA,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register.js","sources":["../../server/src/register.js"],"sourcesContent":["'use strict';\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst authStrategy = require('./strategies/users-permissions');\nconst sanitizers = require('./utils/sanitize/sanitizers');\n\nmodule.exports = ({ strapi }) => {\n  strapi.get('auth').register('content-api', authStrategy);\n  strapi.sanitizers.add('content-api.output', sanitizers.defaultSanitizeOutput);\n\n  if (strapi.plugin('graphql')) {\n    require('./graphql')({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    const specPath = path.join(__dirname, '../../documentation/content-api.yaml');\n    const spec = fs.readFileSync(specPath, 'utf8');\n\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'users-permissions',\n        excludeFromGeneration: ['users-permissions'],\n      });\n  }\n};\n"],"names":["fs","require$$0","path","require$$1","authStrategy","require$$2","sanitizers","require$$3","register","strapi","get","add","defaultSanitizeOutput","plugin","require$$4","specPath","join","__dirname","spec","readFileSync","service","registerOverride","pluginOrigin","excludeFromGeneration"],"mappings":";;;;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,EAAAA,GAAKC,2BAAAA;AACX,IAAA,MAAMC,IAAAA,GAAOC,2BAAAA;AAEb,IAAA,MAAMC,YAAAA,GAAeC,0BAAAA,EAAAA;AACrB,IAAA,MAAMC,YAAAA,GAAaC,oBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1BA,QAAAA,MAAAA,CAAOC,GAAG,CAAC,MAAA,CAAA,CAAQF,QAAQ,CAAC,aAAA,EAAeJ,YAAAA,CAAAA;AAC3CK,QAAAA,MAAAA,CAAOH,UAAU,CAACK,GAAG,CAAC,oBAAA,EAAsBL,aAAWM,qBAAqB,CAAA;QAE5E,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA,EAAY;YAC5BC,eAAAA,EAAAA,CAAqB;AAAEL,gBAAAA;;AAC3B,QAAA;QAEE,IAAIA,MAAAA,CAAOI,MAAM,CAAC,eAAA,CAAA,EAAkB;AAClC,YAAA,MAAME,QAAAA,GAAWb,IAAAA,CAAKc,IAAI,CAACC,SAAAA,EAAW,sCAAA,CAAA;AACtC,YAAA,MAAMC,IAAAA,GAAOlB,EAAAA,CAAGmB,YAAY,CAACJ,QAAAA,EAAU,MAAA,CAAA;YAEvCN,MAAAA,CACGI,MAAM,CAAC,eAAA,CAAA,CACPO,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACH,IAAAA,EAAM;gBACtBI,YAAAA,EAAc,mBAAA;gBACdC,qBAAAA,EAAuB;AAAC,oBAAA;AAAoB;AACpD,aAAA,CAAA;AACA,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/register.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register.mjs","sources":["../../server/register.js"],"sourcesContent":["'use strict';\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst authStrategy = require('./strategies/users-permissions');\nconst sanitizers = require('./utils/sanitize/sanitizers');\n\nmodule.exports = ({ strapi }) => {\n  strapi.get('auth').register('content-api', authStrategy);\n  strapi.sanitizers.add('content-api.output', sanitizers.defaultSanitizeOutput);\n\n  if (strapi.plugin('graphql')) {\n    require('./graphql')({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    const specPath = path.join(__dirname, '../../documentation/content-api.yaml');\n    const spec = fs.readFileSync(specPath, 'utf8');\n\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'users-permissions',\n        excludeFromGeneration: ['users-permissions'],\n      });\n  }\n};\n"],"names":["fs","require$$0","path","require$$1","authStrategy","require$$2","sanitizers","require$$3","register","strapi","get","add","defaultSanitizeOutput","plugin","require$$4","specPath","join","__dirname","spec","readFileSync","service","registerOverride","pluginOrigin","excludeFromGeneration"],"mappings":";;;;;;;;;;;AAEA,IAAA,MAAMA,EAAAA,GAAKC,UAAAA;AACX,IAAA,MAAMC,IAAAA,GAAOC,UAAAA;AAEb,IAAA,MAAMC,YAAAA,GAAeC,uBAAAA,EAAAA;AACrB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1BA,QAAAA,MAAAA,CAAOC,GAAG,CAAC,MAAA,CAAA,CAAQF,QAAQ,CAAC,aAAA,EAAeJ,YAAAA,CAAAA;AAC3CK,QAAAA,MAAAA,CAAOH,UAAU,CAACK,GAAG,CAAC,oBAAA,EAAsBL,WAAWM,qBAAqB,CAAA;QAE5E,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA,EAAY;YAC5BC,cAAAA,EAAAA,CAAqB;AAAEL,gBAAAA;AAAM,aAAA,CAAA;AACjC,QAAA;QAEE,IAAIA,MAAAA,CAAOI,MAAM,CAAC,eAAA,CAAA,EAAkB;AAClC,YAAA,MAAME,QAAAA,GAAWb,IAAAA,CAAKc,IAAI,CAACC,SAAAA,EAAW,sCAAA,CAAA;AACtC,YAAA,MAAMC,IAAAA,GAAOlB,EAAAA,CAAGmB,YAAY,CAACJ,QAAAA,EAAU,MAAA,CAAA;YAEvCN,MAAAA,CACGI,MAAM,CAAC,eAAA,CAAA,CACPO,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACH,IAAAA,EAAM;gBACtBI,YAAAA,EAAc,mBAAA;gBACdC,qBAAAA,EAAuB;AAAC,oBAAA;AAAoB;AACpD,aAAA,CAAA;AACA,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register.mjs","sources":["../../server/src/register.js"],"sourcesContent":["'use strict';\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst authStrategy = require('./strategies/users-permissions');\nconst sanitizers = require('./utils/sanitize/sanitizers');\n\nmodule.exports = ({ strapi }) => {\n  strapi.get('auth').register('content-api', authStrategy);\n  strapi.sanitizers.add('content-api.output', sanitizers.defaultSanitizeOutput);\n\n  if (strapi.plugin('graphql')) {\n    require('./graphql')({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    const specPath = path.join(__dirname, '../../documentation/content-api.yaml');\n    const spec = fs.readFileSync(specPath, 'utf8');\n\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'users-permissions',\n        excludeFromGeneration: ['users-permissions'],\n      });\n  }\n};\n"],"names":["fs","require$$0","path","require$$1","authStrategy","require$$2","sanitizers","require$$3","register","strapi","get","add","defaultSanitizeOutput","plugin","require$$4","specPath","join","__dirname","spec","readFileSync","service","registerOverride","pluginOrigin","excludeFromGeneration"],"mappings":";;;;;;;;;;;AAEA,IAAA,MAAMA,EAAAA,GAAKC,UAAAA;AACX,IAAA,MAAMC,IAAAA,GAAOC,UAAAA;AAEb,IAAA,MAAMC,YAAAA,GAAeC,uBAAAA,EAAAA;AACrB,IAAA,MAAMC,UAAAA,GAAaC,iBAAAA,EAAAA;IAEnBC,QAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAE,GAAA;AAC1BA,QAAAA,MAAAA,CAAOC,GAAG,CAAC,MAAA,CAAA,CAAQF,QAAQ,CAAC,aAAA,EAAeJ,YAAAA,CAAAA;AAC3CK,QAAAA,MAAAA,CAAOH,UAAU,CAACK,GAAG,CAAC,oBAAA,EAAsBL,WAAWM,qBAAqB,CAAA;QAE5E,IAAIH,MAAAA,CAAOI,MAAM,CAAC,SAAA,CAAA,EAAY;YAC5BC,cAAAA,EAAAA,CAAqB;AAAEL,gBAAAA;;AAC3B,QAAA;QAEE,IAAIA,MAAAA,CAAOI,MAAM,CAAC,eAAA,CAAA,EAAkB;AAClC,YAAA,MAAME,QAAAA,GAAWb,IAAAA,CAAKc,IAAI,CAACC,SAAAA,EAAW,sCAAA,CAAA;AACtC,YAAA,MAAMC,IAAAA,GAAOlB,EAAAA,CAAGmB,YAAY,CAACJ,QAAAA,EAAU,MAAA,CAAA;YAEvCN,MAAAA,CACGI,MAAM,CAAC,eAAA,CAAA,CACPO,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACH,IAAAA,EAAM;gBACtBI,YAAAA,EAAc,mBAAA;gBACdC,qBAAAA,EAAuB;AAAC,oBAAA;AAAoB;AACpD,aAAA,CAAA;AACA,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/routes/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../server/routes/admin/index.js"],"sourcesContent":["'use strict';\n\nconst permissionsRoutes = require('./permissions');\nconst settingsRoutes = require('./settings');\nconst roleRoutes = require('./role');\n\nmodule.exports = {\n  type: 'admin',\n  routes: [...roleRoutes, ...settingsRoutes, ...permissionsRoutes],\n};\n"],"names":["permissionsRoutes","require$$0","settingsRoutes","require$$1","roleRoutes","require$$2","admin","type","routes"],"mappings":";;;;;;;;;;;AAEA,IAAA,MAAMA,iBAAAA,GAAoBC,qBAAAA,EAAAA;AAC1B,IAAA,MAAMC,cAAAA,GAAiBC,kBAAAA,EAAAA;AACvB,IAAA,MAAMC,UAAAA,GAAaC,cAAAA,EAAAA;IAEnBC,KAAAA,GAAiB;QACfC,IAAAA,EAAM,OAAA;QACNC,MAAAA,EAAQ;AAAIJ,YAAAA,GAAAA,UAAAA;AAAeF,YAAAA,GAAAA,cAAAA;AAAmBF,YAAAA,GAAAA;AAAkB;AAClE,KAAA;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../server/src/routes/admin/index.js"],"sourcesContent":["'use strict';\n\nconst permissionsRoutes = require('./permissions');\nconst settingsRoutes = require('./settings');\nconst roleRoutes = require('./role');\n\nmodule.exports = {\n  type: 'admin',\n  routes: [...roleRoutes, ...settingsRoutes, ...permissionsRoutes],\n};\n"],"names":["permissionsRoutes","require$$0","settingsRoutes","require$$1","roleRoutes","require$$2","admin","type","routes"],"mappings":";;;;;;;;;;;AAEA,IAAA,MAAMA,iBAAAA,GAAoBC,qBAAAA,EAAAA;AAC1B,IAAA,MAAMC,cAAAA,GAAiBC,kBAAAA,EAAAA;AACvB,IAAA,MAAMC,UAAAA,GAAaC,cAAAA,EAAAA;IAEnBC,KAAAA,GAAiB;QACfC,IAAAA,EAAM,OAAA;QACNC,MAAAA,EAAQ;AAAIJ,YAAAA,GAAAA,UAAAA;AAAeF,YAAAA,GAAAA,cAAAA;AAAmBF,YAAAA,GAAAA;AAAkB;AAClE,KAAA;;;;;;"}

package/dist/server/routes/admin/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../../server/routes/admin/index.js"],"sourcesContent":["'use strict';\n\nconst permissionsRoutes = require('./permissions');\nconst settingsRoutes = require('./settings');\nconst roleRoutes = require('./role');\n\nmodule.exports = {\n  type: 'admin',\n  routes: [...roleRoutes, ...settingsRoutes, ...permissionsRoutes],\n};\n"],"names":["permissionsRoutes","require$$0","settingsRoutes","require$$1","roleRoutes","require$$2","admin","type","routes"],"mappings":";;;;;;;;;AAEA,IAAA,MAAMA,iBAAAA,GAAoBC,kBAAAA,EAAAA;AAC1B,IAAA,MAAMC,cAAAA,GAAiBC,eAAAA,EAAAA;AACvB,IAAA,MAAMC,UAAAA,GAAaC,WAAAA,EAAAA;IAEnBC,KAAAA,GAAiB;QACfC,IAAAA,EAAM,OAAA;QACNC,MAAAA,EAAQ;AAAIJ,YAAAA,GAAAA,UAAAA;AAAeF,YAAAA,GAAAA,cAAAA;AAAmBF,YAAAA,GAAAA;AAAkB;AAClE,KAAA;;;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../../server/src/routes/admin/index.js"],"sourcesContent":["'use strict';\n\nconst permissionsRoutes = require('./permissions');\nconst settingsRoutes = require('./settings');\nconst roleRoutes = require('./role');\n\nmodule.exports = {\n  type: 'admin',\n  routes: [...roleRoutes, ...settingsRoutes, ...permissionsRoutes],\n};\n"],"names":["permissionsRoutes","require$$0","settingsRoutes","require$$1","roleRoutes","require$$2","admin","type","routes"],"mappings":";;;;;;;;;AAEA,IAAA,MAAMA,iBAAAA,GAAoBC,kBAAAA,EAAAA;AAC1B,IAAA,MAAMC,cAAAA,GAAiBC,eAAAA,EAAAA;AACvB,IAAA,MAAMC,UAAAA,GAAaC,WAAAA,EAAAA;IAEnBC,KAAAA,GAAiB;QACfC,IAAAA,EAAM,OAAA;QACNC,MAAAA,EAAQ;AAAIJ,YAAAA,GAAAA,UAAAA;AAAeF,YAAAA,GAAAA,cAAAA;AAAmBF,YAAAA,GAAAA;AAAkB;AAClE,KAAA;;;;;;"}

package/dist/server/routes/admin/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sources":["../../../../server/routes/admin/permissions.js"],"sourcesContent":["'use strict';\n\nmodule.exports = [\n  {\n    method: 'GET',\n    path: '/permissions',\n    handler: 'permissions.getPermissions',\n  },\n  {\n    method: 'GET',\n    path: '/policies',\n    handler: 'permissions.getPolicies',\n  },\n\n  {\n    method: 'GET',\n    path: '/routes',\n    handler: 'permissions.getRoutes',\n  },\n];\n"],"names":["permissions","method","path","handler"],"mappings":";;;;;;;IAEAA,WAAAA,GAAiB;AACf,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,cAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AACE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,WAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AAEE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,SAAA;YACNC,OAAAA,EAAS;AACb;AACC,KAAA;;;;;;"}
+{"version":3,"file":"permissions.js","sources":["../../../../server/src/routes/admin/permissions.js"],"sourcesContent":["'use strict';\n\nmodule.exports = [\n  {\n    method: 'GET',\n    path: '/permissions',\n    handler: 'permissions.getPermissions',\n  },\n  {\n    method: 'GET',\n    path: '/policies',\n    handler: 'permissions.getPolicies',\n  },\n\n  {\n    method: 'GET',\n    path: '/routes',\n    handler: 'permissions.getRoutes',\n  },\n];\n"],"names":["permissions","method","path","handler"],"mappings":";;;;;;;IAEAA,WAAAA,GAAiB;AACf,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,cAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AACE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,WAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AAEE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,SAAA;YACNC,OAAAA,EAAS;AACb;AACC,KAAA;;;;;;"}

package/dist/server/routes/admin/permissions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.mjs","sources":["../../../../server/routes/admin/permissions.js"],"sourcesContent":["'use strict';\n\nmodule.exports = [\n  {\n    method: 'GET',\n    path: '/permissions',\n    handler: 'permissions.getPermissions',\n  },\n  {\n    method: 'GET',\n    path: '/policies',\n    handler: 'permissions.getPolicies',\n  },\n\n  {\n    method: 'GET',\n    path: '/routes',\n    handler: 'permissions.getRoutes',\n  },\n];\n"],"names":["permissions","method","path","handler"],"mappings":";;;;;IAEAA,WAAAA,GAAiB;AACf,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,cAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AACE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,WAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AAEE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,SAAA;YACNC,OAAAA,EAAS;AACb;AACC,KAAA;;;;;;"}
+{"version":3,"file":"permissions.mjs","sources":["../../../../server/src/routes/admin/permissions.js"],"sourcesContent":["'use strict';\n\nmodule.exports = [\n  {\n    method: 'GET',\n    path: '/permissions',\n    handler: 'permissions.getPermissions',\n  },\n  {\n    method: 'GET',\n    path: '/policies',\n    handler: 'permissions.getPolicies',\n  },\n\n  {\n    method: 'GET',\n    path: '/routes',\n    handler: 'permissions.getRoutes',\n  },\n];\n"],"names":["permissions","method","path","handler"],"mappings":";;;;;IAEAA,WAAAA,GAAiB;AACf,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,cAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AACE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,WAAA;YACNC,OAAAA,EAAS;AACb,SAAA;AAEE,QAAA;YACEF,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,SAAA;YACNC,OAAAA,EAAS;AACb;AACC,KAAA;;;;;;"}