@strapi/plugin-users-permissions 4.0.2 → 4.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/plugin-users-permissions",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "description": "Protect your API with a full-authentication process based on JWT",
   "repository": {
     "type": "git",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@purest/providers": "^1.0.2",
-    "@strapi/helper-plugin": "4.0.2",
-    "@strapi/utils": "4.0.2",
+    "@strapi/helper-plugin": "4.0.3",
+    "@strapi/utils": "4.0.3",
     "bcryptjs": "2.4.3",
     "grant-koa": "5.4.8",
     "jsonwebtoken": "^8.1.0",
@@ -51,7 +51,7 @@
     "koa": "^2.13.1"
   },
   "engines": {
-    "node": ">=12.x.x <=16.x.x",
+    "node": ">=12.22.0 <=16.x.x",
     "npm": ">=6.0.0"
   },
   "strapi": {
@@ -61,5 +61,5 @@
     "required": true,
     "kind": "plugin"
   },
-  "gitHead": "fd656a47698e0a33aae42abd4330410c8cba1d08"
+  "gitHead": "48893ae3fc951b618fd8c4fdc6970e623d2c92db"
 }

package/server/controllers/auth.js

@@ -386,7 +386,7 @@ module.exports = {
       throw new ValidationError('token.invalid');
     }
 
-    await userService.edit({ id: user.id }, { confirmed: true, confirmationToken: null });
+    await userService.edit(user.id, { confirmed: true, confirmationToken: null });
 
     if (returnUser) {
       ctx.send({

package/server/controllers/user.js

@@ -123,7 +123,7 @@ module.exports = {
       ...ctx.request.body,
     };
 
-    const data = await getService('user').edit({ id }, updateData);
+    const data = await getService('user').edit(user.id, updateData);
     const sanitizedData = await sanitizeOutput(data, ctx);
 
     ctx.send(sanitizedData);

package/server/services/user.js

@@ -45,16 +45,23 @@ module.exports = ({ strapi }) => ({
 
   /**
    * Promise to edit a/an user.
+   * @param {string} userId
+   * @param {object} params
    * @return {Promise}
    */
-  async edit(params, values) {
-    if (values.password) {
-      values.password = await getService('user').hashPassword(values);
+  async edit(userId, params = {}) {
+    if (params.password) {
+      params.password = await getService('user').hashPassword(params);
     }
 
-    return strapi
-      .query('plugin::users-permissions.user')
-      .update({ where: params, data: values, populate: ['role'] });
+    return strapi.entityService.update(
+      'plugin::users-permissions.user',
+      userId,
+      {
+        data: params,
+        populate: ['role']
+      }
+    );
   },
 
   /**
@@ -132,7 +139,7 @@ module.exports = ({ strapi }) => ({
 
     const confirmationToken = crypto.randomBytes(20).toString('hex');
 
-    await this.edit({ id: user.id }, { confirmationToken });
+    await this.edit(user.id, { confirmationToken });
 
     settings.message = await userPermissionService.template(settings.message, {
       URL: `${getAbsoluteServerUrl(strapi.config)}/auth/email-confirmation`,