@strapi/plugin-users-permissions 4.0.0-next.6 → 4.0.0

package/server/routes/admin/role.js

@@ -0,0 +1,79 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/roles/:id',
+    handler: 'role.getRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/roles',
+    handler: 'role.getRoles',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'POST',
+    path: '/roles',
+    handler: 'role.createRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.create'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/roles/:role',
+    handler: 'role.updateRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'DELETE',
+    path: '/roles/:role',
+    handler: 'role.deleteRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.delete'],
+          },
+        },
+      ],
+    },
+  },
+];

package/server/routes/admin/settings.js

@@ -0,0 +1,95 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/email-templates',
+    handler: 'settings.getEmailTemplate',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.email-templates.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/email-templates',
+    handler: 'settings.updateEmailTemplate',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.email-templates.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/advanced',
+    handler: 'settings.getAdvancedSettings',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.advanced-settings.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/advanced',
+    handler: 'settings.updateAdvancedSettings',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.advanced-settings.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/providers',
+    handler: 'settings.getProviders',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.providers.read'],
+          },
+        },
+      ],
+    },
+  },
+
+  {
+    method: 'PUT',
+    path: '/providers',
+    handler: 'settings.updateProviders',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.providers.update'],
+          },
+        },
+      ],
+    },
+  },
+];

package/server/routes/content-api/auth.js

@@ -0,0 +1,73 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/connect/(.*)',
+    handler: 'auth.connect',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/local',
+    handler: 'auth.callback',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/local/register',
+    handler: 'auth.register',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/auth/:provider/callback',
+    handler: 'auth.callback',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/forgot-password',
+    handler: 'auth.forgotPassword',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/reset-password',
+    handler: 'auth.resetPassword',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/auth/email-confirmation',
+    handler: 'auth.emailConfirmation',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/send-email-confirmation',
+    handler: 'auth.sendEmailConfirmation',
+    config: {
+      prefix: '',
+    },
+  },
+];

package/server/routes/content-api/index.js

@@ -0,0 +1,11 @@
+'use strict';
+
+const authRoutes = require('./auth');
+const userRoutes = require('./user');
+const roleRoutes = require('./role');
+const permissionsRoutes = require('./permissions');
+
+module.exports = {
+  type: 'content-api',
+  routes: [...authRoutes, ...userRoutes, ...roleRoutes, ...permissionsRoutes],
+};

package/server/routes/content-api/permissions.js

@@ -0,0 +1,9 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/permissions',
+    handler: 'permissions.getPermissions',
+  },
+];

package/server/routes/content-api/role.js

@@ -0,0 +1,29 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/roles/:id',
+    handler: 'role.getRole',
+  },
+  {
+    method: 'GET',
+    path: '/roles',
+    handler: 'role.getRoles',
+  },
+  {
+    method: 'POST',
+    path: '/roles',
+    handler: 'role.createRole',
+  },
+  {
+    method: 'PUT',
+    path: '/roles/:role',
+    handler: 'role.updateRole',
+  },
+  {
+    method: 'DELETE',
+    path: '/roles/:role',
+    handler: 'role.deleteRole',
+  },
+];

package/server/routes/content-api/user.js

@@ -0,0 +1,61 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/users/count',
+    handler: 'user.count',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users',
+    handler: 'user.find',
+    config: {
+      auth: {},
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users/me',
+    handler: 'user.me',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users/:id',
+    handler: 'user.findOne',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/users',
+    handler: 'user.create',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/users/:id',
+    handler: 'user.update',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'DELETE',
+    path: '/users/:id',
+    handler: 'user.destroy',
+    config: {
+      prefix: '',
+    },
+  },
+];

package/server/routes/index.js

@@ -0,0 +1,6 @@
+'use strict';
+
+module.exports = {
+  admin: require('./admin'),
+  'content-api': require('./content-api'),
+};

package/server/services/index.js

@@ -0,0 +1,15 @@
+'use strict';
+
+const jwt = require('./jwt');
+const providers = require('./providers');
+const user = require('./user');
+const role = require('./role');
+const usersPermissions = require('./users-permissions');
+
+module.exports = {
+  jwt,
+  providers,
+  role,
+  user,
+  'users-permissions': usersPermissions,
+};

package/server/services/jwt.js

@@ -0,0 +1,55 @@
+'use strict';
+
+/**
+ * Jwt.js service
+ *
+ * @description: A set of functions similar to controller's actions to avoid code duplication.
+ */
+
+const _ = require('lodash');
+const jwt = require('jsonwebtoken');
+
+module.exports = ({ strapi }) => ({
+  getToken(ctx) {
+    let token;
+
+    if (ctx.request && ctx.request.header && ctx.request.header.authorization) {
+      const parts = ctx.request.header.authorization.split(/\s+/);
+
+      if (parts[0].toLowerCase() !== 'bearer' || parts.length !== 2) {
+        return null;
+      }
+
+      token = parts[1];
+    } else if (ctx.query.access_token) {
+      token = ctx.query.access_token;
+    } else {
+      return null;
+    }
+
+    return this.verify(token);
+  },
+
+  issue(payload, jwtOptions = {}) {
+    _.defaults(jwtOptions, strapi.config.get('plugin.users-permissions.jwt'));
+    return jwt.sign(
+      _.clone(payload.toJSON ? payload.toJSON() : payload),
+      strapi.config.get('plugin.users-permissions.jwtSecret'),
+      jwtOptions
+    );
+  },
+
+  verify(token) {
+    return new Promise(function(resolve, reject) {
+      jwt.verify(token, strapi.config.get('plugin.users-permissions.jwtSecret'), {}, function(
+        err,
+        tokenPayload = {}
+      ) {
+        if (err) {
+          return reject(new Error('Invalid token.'));
+        }
+        resolve(tokenPayload);
+      });
+    });
+  },
+});