@strapi/plugin-users-permissions 4.0.0-next.6 → 4.0.0

package/controllers/users-permissions.js

@@ -1,271 +0,0 @@
-'use strict';
-
-const _ = require('lodash');
-const { getService } = require('../utils');
-const { isValidEmailTemplate } = require('./validation/email-template');
-
-module.exports = {
-  /**
-   * Default action.
-   *
-   * @return {Object}
-   */
-  async createRole(ctx) {
-    if (_.isEmpty(ctx.request.body)) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Cannot be empty' }] }]);
-    }
-
-    try {
-      await getService('users-permissions').createRole(ctx.request.body);
-
-      ctx.send({ ok: true });
-    } catch (err) {
-      strapi.log.error(err);
-      ctx.badRequest(null, [{ messages: [{ id: 'An error occured' }] }]);
-    }
-  },
-
-  async deleteRole(ctx) {
-    // Fetch public role.
-    const publicRole = await strapi
-      .query('plugins::users-permissions.role')
-      .findOne({ where: { type: 'public' } });
-
-    const publicRoleID = publicRole.id;
-
-    const roleID = ctx.params.role;
-
-    if (!roleID) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Bad request' }] }]);
-    }
-
-    // Prevent from removing the public role.
-    if (roleID.toString() === publicRoleID.toString()) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Unauthorized' }] }]);
-    }
-
-    try {
-      await getService('users-permissions').deleteRole(roleID, publicRoleID);
-
-      ctx.send({ ok: true });
-    } catch (err) {
-      strapi.log.error(err);
-      ctx.badRequest(null, [{ messages: [{ id: 'Bad request' }] }]);
-    }
-  },
-
-  async getPermissions(ctx) {
-    try {
-      const permissions = await getService('users-permissions').getActions();
-
-      ctx.send({ permissions });
-    } catch (err) {
-      ctx.badRequest(null, [{ message: [{ id: 'Not Found' }] }]);
-    }
-  },
-
-  async getPolicies(ctx) {
-    ctx.send({
-      policies: _.without(
-        _.keys(strapi.plugins['users-permissions'].config.policies),
-        'permissions'
-      ),
-    });
-  },
-
-  async getRole(ctx) {
-    const { id } = ctx.params;
-    const { lang } = ctx.query;
-    const plugins = await getService('users-permissions').getPlugins(lang);
-    const role = await getService('users-permissions').getRole(id, plugins);
-
-    if (_.isEmpty(role)) {
-      return ctx.badRequest(null, [{ messages: [{ id: `Role don't exist` }] }]);
-    }
-
-    ctx.send({ role });
-  },
-
-  async getRoles(ctx) {
-    try {
-      const roles = await getService('users-permissions').getRoles();
-
-      ctx.send({ roles });
-    } catch (err) {
-      ctx.badRequest(null, [{ messages: [{ id: 'Not found' }] }]);
-    }
-  },
-
-  async getRoutes(ctx) {
-    try {
-      const routes = await getService('users-permissions').getRoutes();
-
-      ctx.send({ routes });
-    } catch (err) {
-      ctx.badRequest(null, [{ messages: [{ id: 'Not found' }] }]);
-    }
-  },
-
-  async index(ctx) {
-    // Send 200 `ok`
-    ctx.send({ message: 'ok' });
-  },
-
-  async searchUsers(ctx) {
-    const { id } = ctx.params;
-
-    const data = await strapi.query('plugins::users-permissions.user').custom(searchQueries)({
-      id,
-    });
-
-    ctx.send(data);
-  },
-
-  async updateRole(ctx) {
-    const roleID = ctx.params.role;
-
-    if (_.isEmpty(ctx.request.body)) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Bad request' }] }]);
-    }
-
-    try {
-      await getService('users-permissions').updateRole(roleID, ctx.request.body);
-
-      ctx.send({ ok: true });
-    } catch (err) {
-      strapi.log.error(err);
-      ctx.badRequest(null, [{ messages: [{ id: 'An error occurred' }] }]);
-    }
-  },
-
-  async getEmailTemplate(ctx) {
-    ctx.send(
-      await strapi
-        .store({
-          environment: '',
-          type: 'plugin',
-          name: 'users-permissions',
-          key: 'email',
-        })
-        .get()
-    );
-  },
-
-  async updateEmailTemplate(ctx) {
-    if (_.isEmpty(ctx.request.body)) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Cannot be empty' }] }]);
-    }
-
-    const emailTemplates = ctx.request.body['email-templates'];
-
-    for (let key in emailTemplates) {
-      const template = emailTemplates[key].options.message;
-
-      if (!isValidEmailTemplate(template)) {
-        return ctx.badRequest(null, [{ messages: [{ id: 'Invalid template' }] }]);
-      }
-    }
-
-    await strapi
-      .store({
-        environment: '',
-        type: 'plugin',
-        name: 'users-permissions',
-        key: 'email',
-      })
-      .set({ value: emailTemplates });
-
-    ctx.send({ ok: true });
-  },
-
-  async getAdvancedSettings(ctx) {
-    ctx.send({
-      settings: await strapi
-        .store({
-          environment: '',
-          type: 'plugin',
-          name: 'users-permissions',
-          key: 'advanced',
-        })
-        .get(),
-      roles: await getService('users-permissions').getRoles(),
-    });
-  },
-
-  async updateAdvancedSettings(ctx) {
-    if (_.isEmpty(ctx.request.body)) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Cannot be empty' }] }]);
-    }
-
-    await strapi
-      .store({
-        environment: '',
-        type: 'plugin',
-        name: 'users-permissions',
-        key: 'advanced',
-      })
-      .set({ value: ctx.request.body });
-
-    ctx.send({ ok: true });
-  },
-
-  async getProviders(ctx) {
-    const providers = await strapi
-      .store({
-        environment: '',
-        type: 'plugin',
-        name: 'users-permissions',
-        key: 'grant',
-      })
-      .get();
-
-    for (const provider in providers) {
-      if (provider !== 'email') {
-        providers[provider].redirectUri = strapi.plugins[
-          'users-permissions'
-        ].services.providers.buildRedirectUri(provider);
-      }
-    }
-
-    ctx.send(providers);
-  },
-
-  async updateProviders(ctx) {
-    if (_.isEmpty(ctx.request.body)) {
-      return ctx.badRequest(null, [{ messages: [{ id: 'Cannot be empty' }] }]);
-    }
-
-    await strapi
-      .store({
-        environment: '',
-        type: 'plugin',
-        name: 'users-permissions',
-        key: 'grant',
-      })
-      .set({ value: ctx.request.body.providers });
-
-    ctx.send({ ok: true });
-  },
-};
-
-const searchQueries = {
-  bookshelf({ model }) {
-    return ({ id }) => {
-      return model
-        .query(function(qb) {
-          qb.where('username', 'LIKE', `%${id}%`).orWhere('email', 'LIKE', `%${id}%`);
-        })
-        .fetchAll()
-        .then(results => results.toJSON());
-    };
-  },
-  mongoose({ model }) {
-    return ({ id }) => {
-      const re = new RegExp(id);
-
-      return model.find({
-        $or: [{ username: re }, { email: re }],
-      });
-    };
-  },
-};

package/middlewares/users-permissions/defaults.json

@@ -1,5 +0,0 @@
-{
-  "users-permissions": {
-    "enabled": true
-  }
-}

package/middlewares/users-permissions/index.js

@@ -1,40 +0,0 @@
-'use strict';
-
-/**
- * Module dependencies
- */
-
-// Public node modules.
-const _ = require('lodash');
-
-module.exports = strapi => {
-  return {
-    beforeInitialize() {
-      strapi.config.middleware.load.before.unshift('users-permissions');
-    },
-
-    initialize() {
-      _.forEach(strapi.admin.config.routes, value => {
-        if (_.get(value.config, 'policies')) {
-          value.config.policies.unshift('plugins::users-permissions.permissions');
-        }
-      });
-
-      _.forEach(strapi.config.routes, value => {
-        if (_.get(value.config, 'policies')) {
-          value.config.policies.unshift('plugins::users-permissions.permissions');
-        }
-      });
-
-      if (strapi.plugins) {
-        _.forEach(strapi.plugins, plugin => {
-          _.forEach(plugin.config.routes, value => {
-            if (_.get(value.config, 'policies')) {
-              value.config.policies.unshift('plugins::users-permissions.permissions');
-            }
-          });
-        });
-      }
-    },
-  };
-};

package/models/Permission.js

@@ -1,7 +0,0 @@
-'use strict';
-
-/**
- * Lifecycle callbacks for the `Permission` model.
- */
-
-module.exports = {};

package/models/Permission.settings.json

@@ -1,45 +0,0 @@
-{
-  "collectionName": "up_permissions",
-  "info": {
-    "name": "permission",
-    "description": ""
-  },
-  "pluginOptions": {
-    "content-manager": {
-      "visible": false
-    }
-  },
-  "attributes": {
-    "type": {
-      "type": "string",
-      "required": true,
-      "configurable": false
-    },
-    "controller": {
-      "type": "string",
-      "required": true,
-      "configurable": false
-    },
-    "action": {
-      "type": "string",
-      "required": true,
-      "configurable": false
-    },
-    "enabled": {
-      "type": "boolean",
-      "required": true,
-      "configurable": false
-    },
-    "policy": {
-      "type": "string",
-      "configurable": false
-    },
-    "role": {
-      "type": "relation",
-      "relation": "manyToOne",
-      "target": "plugins::users-permissions.role",
-      "inversedBy": "permissions",
-      "configurable": false
-    }
-  }
-}

package/models/Role.js

@@ -1,7 +0,0 @@
-'use strict';
-
-/**
- * Lifecycle callbacks for the `Role` model.
- */
-
-module.exports = {};

package/models/Role.settings.json

@@ -1,43 +0,0 @@
-{
-  "collectionName": "up_roles",
-  "info": {
-    "name": "role",
-    "description": ""
-  },
-  "pluginOptions": {
-    "content-manager": {
-      "visible": false
-    }
-  },
-  "attributes": {
-    "name": {
-      "type": "string",
-      "minLength": 3,
-      "required": true,
-      "configurable": false
-    },
-    "description": {
-      "type": "string",
-      "configurable": false
-    },
-    "type": {
-      "type": "string",
-      "unique": true,
-      "configurable": false
-    },
-    "permissions": {
-      "type": "relation",
-      "relation": "oneToMany",
-      "target": "plugins::users-permissions.permission",
-      "mappedBy": "role",
-      "configurable": false
-    },
-    "users": {
-      "type": "relation",
-      "relation": "oneToMany",
-      "target": "plugins::users-permissions.user",
-      "mappedBy": "role",
-      "configurable": false
-    }
-  }
-}

package/models/User.js

@@ -1,7 +0,0 @@
-'use strict';
-
-/**
- * Lifecycle callbacks for the `User` model.
- */
-
-module.exports = {};

package/models/User.settings.json

@@ -1,63 +0,0 @@
-{
-  "collectionName": "up_users",
-  "info": {
-    "name": "user",
-    "description": ""
-  },
-  "options": {
-    "draftAndPublish": false,
-    "timestamps": true
-  },
-  "attributes": {
-    "username": {
-      "type": "string",
-      "minLength": 3,
-      "unique": true,
-      "configurable": false,
-      "required": true
-    },
-    "email": {
-      "type": "email",
-      "minLength": 6,
-      "configurable": false,
-      "required": true
-    },
-    "provider": {
-      "type": "string",
-      "configurable": false
-    },
-    "password": {
-      "type": "password",
-      "minLength": 6,
-      "configurable": false,
-      "private": true
-    },
-    "resetPasswordToken": {
-      "type": "string",
-      "configurable": false,
-      "private": true
-    },
-    "confirmationToken": {
-      "type": "string",
-      "configurable": false,
-      "private": true
-    },
-    "confirmed": {
-      "type": "boolean",
-      "default": false,
-      "configurable": false
-    },
-    "blocked": {
-      "type": "boolean",
-      "default": false,
-      "configurable": false
-    },
-    "role": {
-      "type": "relation",
-      "relation": "manyToOne",
-      "target": "plugins::users-permissions.role",
-      "inversedBy": "users",
-      "configurable": false
-    }
-  }
-}

package/services/jwt.js

@@ -1,65 +0,0 @@
-'use strict';
-
-/**
- * Jwt.js service
- *
- * @description: A set of functions similar to controller's actions to avoid code duplication.
- */
-
-const _ = require('lodash');
-const jwt = require('jsonwebtoken');
-
-module.exports = {
-  getToken(ctx) {
-    const params = _.assign({}, ctx.request.body, ctx.request.query);
-
-    let token = '';
-
-    if (ctx.request && ctx.request.header && ctx.request.header.authorization) {
-      const parts = ctx.request.header.authorization.split(' ');
-
-      if (parts.length === 2) {
-        const scheme = parts[0];
-        const credentials = parts[1];
-        if (/^Bearer$/i.test(scheme)) {
-          token = credentials;
-        }
-      } else {
-        throw new Error(
-          'Invalid authorization header format. Format is Authorization: Bearer [token]'
-        );
-      }
-    } else if (params.token) {
-      token = params.token;
-    } else {
-      throw new Error('No authorization header was found');
-    }
-
-    return this.verify(token);
-  },
-
-  issue(payload, jwtOptions = {}) {
-    _.defaults(jwtOptions, strapi.plugins['users-permissions'].config.jwt);
-    return jwt.sign(
-      _.clone(payload.toJSON ? payload.toJSON() : payload),
-      _.get(strapi.plugins, ['users-permissions', 'config', 'jwtSecret']),
-      jwtOptions
-    );
-  },
-
-  verify(token) {
-    return new Promise(function(resolve, reject) {
-      jwt.verify(
-        token,
-        _.get(strapi.plugins, ['users-permissions', 'config', 'jwtSecret']),
-        {},
-        function(err, tokenPayload = {}) {
-          if (err) {
-            return reject(new Error('Invalid token.'));
-          }
-          resolve(tokenPayload);
-        }
-      );
-    });
-  },
-};