@strapi/plugin-users-permissions 4.1.11 → 4.1.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/plugin-users-permissions",
-  "version": "4.1.11",
+  "version": "4.1.12",
   "description": "Protect your API with a full-authentication process based on JWT",
   "repository": {
     "type": "git",
@@ -27,8 +27,8 @@
     "test:front:watch:ce": "cross-env IS_EE=false jest --config ./jest.config.front.js --watchAll"
   },
   "dependencies": {
-    "@strapi/helper-plugin": "4.1.11",
-    "@strapi/utils": "4.1.11",
+    "@strapi/helper-plugin": "4.1.12",
+    "@strapi/utils": "4.1.12",
     "bcryptjs": "2.4.3",
     "grant-koa": "5.4.8",
     "jsonwebtoken": "^8.1.0",
@@ -59,5 +59,5 @@
     "required": true,
     "kind": "plugin"
   },
-  "gitHead": "698ae33e0007811ce24b568cc5d873d7a4d2a832"
+  "gitHead": "ab698015cfc4f43fa0ce2ae94ec59e00a67e4cda"
 }

package/server/controllers/auth.js

@@ -378,7 +378,7 @@ module.exports = {
       throw new ValidationError('token.invalid');
     }
 
-    const [user] = await userService.fetchAll({ filters: { confirmationToken }});
+    const [user] = await userService.fetchAll({ filters: { confirmationToken } });
 
     if (!user) {
       throw new ValidationError('token.invalid');

package/server/controllers/user.js

@@ -12,7 +12,7 @@ const { getService } = require('../utils');
 const { validateCreateUserBody, validateUpdateUserBody } = require('./validation/user');
 
 const { sanitize } = utils;
-const { ApplicationError, ValidationError } = utils.errors;
+const { ApplicationError, ValidationError, NotFoundError } = utils.errors;
 
 const sanitizeOutput = (user, ctx) => {
   const schema = strapi.getModel('plugin::users-permissions.user');
@@ -91,6 +91,10 @@ module.exports = {
     const { email, username, password } = ctx.request.body;
 
     const user = await getService('user').fetch(id);
+    if (!user) {
+      throw new NotFoundError(`User not found`);
+    }
+    
 
     await validateUpdateUserBody(ctx.request.body);
 

package/server/graphql/mutations/auth/email-confirmation.js

@@ -19,7 +19,7 @@ module.exports = ({ nexus, strapi }) => {
     async resolve(parent, args, context) {
       const { koaContext } = context;
 
-      koaContext.request.body = toPlainObject(args);
+      koaContext.query = toPlainObject(args);
 
       await strapi
         .plugin('users-permissions')

package/server/graphql/mutations/crud/user/delete-user.js

@@ -19,7 +19,7 @@ module.exports = ({ nexus, strapi }) => {
       id: nonNull('ID'),
     },
 
-    description: 'Update an existing user',
+    description: 'Delete an existing user',
 
     async resolve(parent, args, context) {
       const { koaContext } = context;

package/server/graphql/resolvers-configs.js

@@ -26,12 +26,12 @@ module.exports = ({ strapi }) => {
 
     // Scoped auth for replaced CRUD operations
     // Role
-    [`Mutation.${createRole}`]: { auth: { scope: [`${roleUID}.create`] } },
-    [`Mutation.${updateRole}`]: { auth: { scope: [`${roleUID}.update`] } },
-    [`Mutation.${deleteRole}`]: { auth: { scope: [`${roleUID}.delete`] } },
+    [`Mutation.${createRole}`]: { auth: { scope: [`${roleUID}.createRole`] } },
+    [`Mutation.${updateRole}`]: { auth: { scope: [`${roleUID}.updateRole`] } },
+    [`Mutation.${deleteRole}`]: { auth: { scope: [`${roleUID}.deleteRole`] } },
     // User
     [`Mutation.${createUser}`]: { auth: { scope: [`${userUID}.create`] } },
     [`Mutation.${updateUser}`]: { auth: { scope: [`${userUID}.update`] } },
-    [`Mutation.${deleteUser}`]: { auth: { scope: [`${userUID}.delete`] } },
+    [`Mutation.${deleteUser}`]: { auth: { scope: [`${userUID}.destroy`] } },
   };
 };