@strapi/plugin-users-permissions 4.0.0-next.1 → 4.0.0-next.13

package/config/layout.js

@@ -1,10 +0,0 @@
-'use strict';
-
-module.exports = {
-  user: {
-    actions: {
-      create: 'User.create', // Use the User plugin's controller.
-      update: 'User.update',
-    },
-  },
-};

package/config/policies/isAuthenticated.js

@@ -1,9 +0,0 @@
-'use strict';
-
-module.exports = async (ctx, next) => {
-  if (!ctx.state.user) {
-    return ctx.unauthorized();
-  }
-
-  await next();
-};

package/config/policies/permissions.js

@@ -1,94 +0,0 @@
-'use strict';
-
-const _ = require('lodash');
-const { getService } = require('../../utils');
-
-module.exports = async (ctx, next) => {
-  let role;
-
-  if (ctx.state.user) {
-    // request is already authenticated in a different way
-    return next();
-  }
-
-  if (ctx.request && ctx.request.header && ctx.request.header.authorization) {
-    try {
-      const { id } = await getService('jwt').getToken(ctx);
-
-      if (id === undefined) {
-        throw new Error('Invalid token: Token did not contain required fields');
-      }
-
-      // fetch authenticated user
-      ctx.state.user = await getService('user').fetchAuthenticatedUser(id);
-    } catch (err) {
-      return handleErrors(ctx, err, 'unauthorized');
-    }
-
-    if (!ctx.state.user) {
-      return handleErrors(ctx, 'User Not Found', 'unauthorized');
-    }
-
-    role = ctx.state.user.role;
-
-    if (role.type === 'root') {
-      return await next();
-    }
-
-    const store = await strapi.store({
-      environment: '',
-      type: 'plugin',
-      name: 'users-permissions',
-    });
-
-    if (
-      _.get(await store.get({ key: 'advanced' }), 'email_confirmation') &&
-      !ctx.state.user.confirmed
-    ) {
-      return handleErrors(ctx, 'Your account email is not confirmed.', 'unauthorized');
-    }
-
-    if (ctx.state.user.blocked) {
-      return handleErrors(
-        ctx,
-        'Your account has been blocked by the administrator.',
-        'unauthorized'
-      );
-    }
-  }
-
-  // Retrieve `public` role.
-  if (!role) {
-    role = await strapi
-      .query('plugins::users-permissions.role')
-      .findOne({ where: { type: 'public' } });
-  }
-
-  const route = ctx.request.route;
-
-  const permission = await strapi.query('plugins::users-permissions.permission').findOne({
-    where: {
-      role: { id: role.id },
-      type: route.plugin || 'application',
-      controller: route.controller,
-      action: route.action,
-      enabled: true,
-    },
-  });
-
-  if (!permission) {
-    return handleErrors(ctx, undefined, 'forbidden');
-  }
-
-  // Execute the policies.
-  if (permission.policy) {
-    return await strapi.plugins['users-permissions'].config.policies[permission.policy](ctx, next);
-  }
-
-  // Execute the action.
-  await next();
-};
-
-const handleErrors = (ctx, err = undefined, type) => {
-  throw strapi.errors[type](err);
-};

package/config/request.json

@@ -1,6 +0,0 @@
-{
-  "ratelimit": {
-    "interval": 60000,
-    "max": 10
-  }
-}

package/config/routes.json

@@ -1,381 +0,0 @@
-{
-  "routes": [
-    {
-      "method": "GET",
-      "path": "/",
-      "handler": "users-permissions.index",
-      "config": {
-        "policies": []
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/search/:id",
-      "handler": "users-permissions.searchUsers",
-      "config": {
-        "policies": [],
-        "description": "Search for users",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "find"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/policies",
-      "handler": "users-permissions.getPolicies",
-      "config": {
-        "policies": []
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/roles/:id",
-      "handler": "users-permissions.getRole",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.roles.read"]]],
-        "description": "Retrieve a role depending on its id",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "Role",
-          "actionType": "findOne"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/roles",
-      "handler": "users-permissions.getRoles",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.roles.read"]]],
-        "description": "Retrieve all role documents",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "Role",
-          "actionType": "find"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/routes",
-      "handler": "users-permissions.getRoutes",
-      "config": {
-        "policies": []
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/email-templates",
-      "handler": "users-permissions.getEmailTemplate",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.email-templates.read"]]]
-      }
-    },
-    {
-      "method": "PUT",
-      "path": "/email-templates",
-      "handler": "users-permissions.updateEmailTemplate",
-      "config": {
-        "policies": [
-          ["admin::hasPermissions", ["plugins::users-permissions.email-templates.update"]]
-        ]
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/advanced",
-      "handler": "users-permissions.getAdvancedSettings",
-      "config": {
-        "policies": [
-          ["admin::hasPermissions", ["plugins::users-permissions.advanced-settings.read"]]
-        ]
-      }
-    },
-    {
-      "method": "PUT",
-      "path": "/advanced",
-      "handler": "users-permissions.updateAdvancedSettings",
-      "config": {
-        "policies": [
-          ["admin::hasPermissions", ["plugins::users-permissions.advanced-settings.update"]]
-        ]
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/permissions",
-      "handler": "users-permissions.getPermissions",
-      "config": {
-        "policies": []
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/providers",
-      "handler": "users-permissions.getProviders",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.providers.read"]]]
-      }
-    },
-
-    {
-      "method": "PUT",
-      "path": "/providers",
-      "handler": "users-permissions.updateProviders",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.providers.update"]]]
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/roles",
-      "handler": "users-permissions.createRole",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.roles.create"]]],
-        "description": "Create a new role",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "Role",
-          "actionType": "create"
-        }
-      }
-    },
-    {
-      "method": "PUT",
-      "path": "/roles/:role",
-      "handler": "users-permissions.updateRole",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.roles.update"]]],
-        "description": "Update a role",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "Role",
-          "actionType": "update"
-        }
-      }
-    },
-    {
-      "method": "DELETE",
-      "path": "/roles/:role",
-      "handler": "users-permissions.deleteRole",
-      "config": {
-        "policies": [["admin::hasPermissions", ["plugins::users-permissions.roles.delete"]]],
-        "description": "Delete a role",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "Role",
-          "actionType": "destroy"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/connect/*",
-      "handler": "Auth.connect",
-      "config": {
-        "policies": ["plugins::users-permissions.ratelimit"],
-        "prefix": "",
-        "description": "Connect a provider",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/auth/local",
-      "handler": "Auth.callback",
-      "config": {
-        "policies": ["plugins::users-permissions.ratelimit"],
-        "prefix": "",
-        "description": "Login a user using the identifiers email and password",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/auth/local/register",
-      "handler": "Auth.register",
-      "config": {
-        "policies": ["plugins::users-permissions.ratelimit"],
-        "prefix": "",
-        "description": "Register a new user with the default role",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "create"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/auth/:provider/callback",
-      "handler": "Auth.callback",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Successfull redirection after approving a provider",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/auth/forgot-password",
-      "handler": "Auth.forgotPassword",
-      "config": {
-        "policies": ["plugins::users-permissions.ratelimit"],
-        "prefix": "",
-        "description": "Send the reset password email link",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/auth/reset-password",
-      "handler": "Auth.resetPassword",
-      "config": {
-        "policies": ["plugins::users-permissions.ratelimit"],
-        "prefix": "",
-        "description": "Reset user password with a code (resetToken)",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/auth/email-confirmation",
-      "handler": "Auth.emailConfirmation",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Validate a user account",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/auth/send-email-confirmation",
-      "handler": "Auth.sendEmailConfirmation",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Send a confirmation email to user",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/users/count",
-      "handler": "User.count",
-      "config": {
-        "prefix": "",
-        "policies": []
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/users",
-      "handler": "User.find",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Retrieve all user documents",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "find"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/users/me",
-      "handler": "User.me",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Retrieve the logged in user information",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "findOne"
-        }
-      }
-    },
-    {
-      "method": "GET",
-      "path": "/users/:id",
-      "handler": "User.findOne",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Retrieve a single user depending on his id",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "findOne"
-        }
-      }
-    },
-    {
-      "method": "POST",
-      "path": "/users",
-      "handler": "User.create",
-      "config": {
-        "policies": [],
-        "prefix": ""
-      }
-    },
-    {
-      "method": "PUT",
-      "path": "/users/:id",
-      "handler": "User.update",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Update an existing user",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "update"
-        }
-      }
-    },
-    {
-      "method": "DELETE",
-      "path": "/users/:id",
-      "handler": "User.destroy",
-      "config": {
-        "policies": [],
-        "prefix": "",
-        "description": "Delete an existing user",
-        "tag": {
-          "plugin": "users-permissions",
-          "name": "User",
-          "actionType": "destroy"
-        }
-      }
-    }
-  ]
-}

package/config/security.json

@@ -1,5 +0,0 @@
-{
-  "jwt": {
-    "expiresIn": "30d"
-  }
-}