@strapi/plugin-users-permissions 4.0.0-next.9 → 4.0.3

package/server/graphql/types/me-role.js

@@ -0,0 +1,14 @@
+'use strict';
+
+module.exports = ({ nexus }) => {
+  return nexus.objectType({
+    name: 'UsersPermissionsMeRole',
+
+    definition(t) {
+      t.nonNull.id('id');
+      t.nonNull.string('name');
+      t.string('description');
+      t.string('type');
+    },
+  });
+};

package/server/graphql/types/me.js

@@ -0,0 +1,16 @@
+'use strict';
+
+module.exports = ({ nexus }) => {
+  return nexus.objectType({
+    name: 'UsersPermissionsMe',
+
+    definition(t) {
+      t.nonNull.id('id');
+      t.nonNull.string('username');
+      t.string('email');
+      t.boolean('confirmed');
+      t.boolean('blocked');
+      t.field('role', { type: 'UsersPermissionsMeRole' });
+    },
+  });
+};

package/server/graphql/types/password-payload.js

@@ -0,0 +1,11 @@
+'use strict';
+
+module.exports = ({ nexus }) => {
+  return nexus.objectType({
+    name: 'UsersPermissionsPasswordPayload',
+
+    definition(t) {
+      t.nonNull.boolean('ok');
+    },
+  });
+};

package/server/graphql/types/register-input.js

@@ -0,0 +1,13 @@
+'use strict';
+
+module.exports = ({ nexus }) => {
+  return nexus.inputObjectType({
+    name: 'UsersPermissionsRegisterInput',
+
+    definition(t) {
+      t.nonNull.string('username');
+      t.nonNull.string('email');
+      t.nonNull.string('password');
+    },
+  });
+};

package/server/graphql/types/update-role-payload.js

@@ -0,0 +1,11 @@
+'use strict';
+
+module.exports = ({ nexus }) => {
+  return nexus.objectType({
+    name: 'UsersPermissionsUpdateRolePayload',
+
+    definition(t) {
+      t.nonNull.boolean('ok');
+    },
+  });
+};

package/server/graphql/utils.js

@@ -0,0 +1,27 @@
+'use strict';
+
+const { getOr } = require('lodash/fp');
+
+/**
+ * Throws an ApolloError if context body contains a bad request
+ * @param contextBody - body of the context object given to the resolver
+ * @throws ApolloError if the body is a bad request
+ */
+function checkBadRequest(contextBody) {
+  const statusCode = getOr(200, 'statusCode', contextBody);
+
+  if (statusCode !== 200) {
+    const errorMessage = getOr('Bad Request', 'error', contextBody);
+
+    const exception = new Error(errorMessage);
+
+    exception.code = statusCode || 400;
+    exception.data = contextBody;
+
+    throw exception;
+  }
+}
+
+module.exports = {
+  checkBadRequest,
+};

package/server/index.js

@@ -0,0 +1,21 @@
+'use strict';
+
+const register = require('./register');
+const bootstrap = require('./bootstrap');
+const contentTypes = require('./content-types');
+const middlewares = require('./middlewares');
+const services = require('./services');
+const routes = require('./routes');
+const controllers = require('./controllers');
+const config = require('./config');
+
+module.exports = () => ({
+  register,
+  bootstrap,
+  config,
+  routes,
+  controllers,
+  contentTypes,
+  middlewares,
+  services,
+});

package/server/middlewares/index.js

@@ -1,7 +1,7 @@
 'use strict';
 
-const usersPermissionsMiddleware = require('./users-permissions');
+const rateLimit = require('./rateLimit');
 
 module.exports = {
-  'users-permissions': usersPermissionsMiddleware,
+  rateLimit,
 };

package/server/{policies → middlewares}/rateLimit.js

@@ -1,12 +1,8 @@
 'use strict';
 
-const lazyRateLimit = {
-  get RateLimit() {
-    return require('koa2-ratelimit').RateLimit;
-  },
-};
+module.exports = (config, { strapi }) => async (ctx, next) => {
+  const ratelimit = require('koa2-ratelimit').RateLimit;
 
-module.exports = async (ctx, next) => {
   const message = [
     {
       messages: [
@@ -18,7 +14,7 @@ module.exports = async (ctx, next) => {
     },
   ];
 
-  return lazyRateLimit.RateLimit.middleware(
+  return ratelimit.middleware(
     Object.assign(
       {},
       {

package/server/register.js

@@ -0,0 +1,11 @@
+'use strict';
+
+const authStrategy = require('./strategies/users-permissions');
+
+module.exports = ({ strapi }) => {
+  strapi.container.get('auth').register('content-api', authStrategy);
+
+  if (strapi.plugin('graphql')) {
+    require('./graphql')({ strapi });
+  }
+};

package/server/routes/admin/index.js

@@ -0,0 +1,10 @@
+'use strict';
+
+const permissionsRoutes = require('./permissions');
+const settingsRoutes = require('./settings');
+const roleRoutes = require('./role');
+
+module.exports = {
+  type: 'admin',
+  routes: [...roleRoutes, ...settingsRoutes, ...permissionsRoutes],
+};

package/server/routes/admin/permissions.js

@@ -0,0 +1,20 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/permissions',
+    handler: 'permissions.getPermissions',
+  },
+  {
+    method: 'GET',
+    path: '/policies',
+    handler: 'permissions.getPolicies',
+  },
+
+  {
+    method: 'GET',
+    path: '/routes',
+    handler: 'permissions.getRoutes',
+  },
+];

package/server/routes/admin/role.js

@@ -0,0 +1,79 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/roles/:id',
+    handler: 'role.getRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/roles',
+    handler: 'role.getRoles',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'POST',
+    path: '/roles',
+    handler: 'role.createRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.create'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/roles/:role',
+    handler: 'role.updateRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'DELETE',
+    path: '/roles/:role',
+    handler: 'role.deleteRole',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.roles.delete'],
+          },
+        },
+      ],
+    },
+  },
+];

package/server/routes/admin/settings.js

@@ -0,0 +1,95 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/email-templates',
+    handler: 'settings.getEmailTemplate',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.email-templates.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/email-templates',
+    handler: 'settings.updateEmailTemplate',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.email-templates.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/advanced',
+    handler: 'settings.getAdvancedSettings',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.advanced-settings.read'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/advanced',
+    handler: 'settings.updateAdvancedSettings',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.advanced-settings.update'],
+          },
+        },
+      ],
+    },
+  },
+  {
+    method: 'GET',
+    path: '/providers',
+    handler: 'settings.getProviders',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.providers.read'],
+          },
+        },
+      ],
+    },
+  },
+
+  {
+    method: 'PUT',
+    path: '/providers',
+    handler: 'settings.updateProviders',
+    config: {
+      policies: [
+        {
+          name: 'admin::hasPermissions',
+          config: {
+            actions: ['plugin::users-permissions.providers.update'],
+          },
+        },
+      ],
+    },
+  },
+];

package/server/routes/content-api/auth.js

@@ -0,0 +1,73 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/connect/(.*)',
+    handler: 'auth.connect',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/local',
+    handler: 'auth.callback',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/local/register',
+    handler: 'auth.register',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/auth/:provider/callback',
+    handler: 'auth.callback',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/forgot-password',
+    handler: 'auth.forgotPassword',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/reset-password',
+    handler: 'auth.resetPassword',
+    config: {
+      middlewares: ['plugin::users-permissions.rateLimit'],
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/auth/email-confirmation',
+    handler: 'auth.emailConfirmation',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/auth/send-email-confirmation',
+    handler: 'auth.sendEmailConfirmation',
+    config: {
+      prefix: '',
+    },
+  },
+];

package/server/routes/content-api/index.js

@@ -0,0 +1,11 @@
+'use strict';
+
+const authRoutes = require('./auth');
+const userRoutes = require('./user');
+const roleRoutes = require('./role');
+const permissionsRoutes = require('./permissions');
+
+module.exports = {
+  type: 'content-api',
+  routes: [...authRoutes, ...userRoutes, ...roleRoutes, ...permissionsRoutes],
+};

package/server/routes/content-api/permissions.js

@@ -0,0 +1,9 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/permissions',
+    handler: 'permissions.getPermissions',
+  },
+];

package/server/routes/content-api/role.js

@@ -0,0 +1,29 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/roles/:id',
+    handler: 'role.getRole',
+  },
+  {
+    method: 'GET',
+    path: '/roles',
+    handler: 'role.getRoles',
+  },
+  {
+    method: 'POST',
+    path: '/roles',
+    handler: 'role.createRole',
+  },
+  {
+    method: 'PUT',
+    path: '/roles/:role',
+    handler: 'role.updateRole',
+  },
+  {
+    method: 'DELETE',
+    path: '/roles/:role',
+    handler: 'role.deleteRole',
+  },
+];

package/server/routes/content-api/user.js

@@ -0,0 +1,61 @@
+'use strict';
+
+module.exports = [
+  {
+    method: 'GET',
+    path: '/users/count',
+    handler: 'user.count',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users',
+    handler: 'user.find',
+    config: {
+      auth: {},
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users/me',
+    handler: 'user.me',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'GET',
+    path: '/users/:id',
+    handler: 'user.findOne',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'POST',
+    path: '/users',
+    handler: 'user.create',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'PUT',
+    path: '/users/:id',
+    handler: 'user.update',
+    config: {
+      prefix: '',
+    },
+  },
+  {
+    method: 'DELETE',
+    path: '/users/:id',
+    handler: 'user.destroy',
+    config: {
+      prefix: '',
+    },
+  },
+];