@strapi/plugin-users-permissions 5.19.0 → 5.21.0

package/dist/server/routes/content-api/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sources":["../../../../server/routes/content-api/validation.js"],"sourcesContent":["'use strict';\n\nconst { AbstractRouteValidator } = require('@strapi/utils');\nconst z = require('zod/v4');\n\nclass UsersPermissionsRouteValidator extends AbstractRouteValidator {\n  constructor(strapi) {\n    super();\n    this._strapi = strapi;\n  }\n\n  get userSchema() {\n    return z.object({\n      id: z.number(),\n      documentId: z.string(),\n      username: z.string(),\n      email: z.string(),\n      provider: z.string(),\n      confirmed: z.boolean(),\n      blocked: z.boolean(),\n      role: z\n        .union([\n          z.number(),\n          z.object({\n            id: z.number(),\n            name: z.string(),\n            description: z.string().nullable(),\n            type: z.string(),\n            createdAt: z.string(),\n            updatedAt: z.string(),\n          }),\n        ])\n        .optional(),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n      publishedAt: z.string(),\n    });\n  }\n\n  get roleSchema() {\n    return z.object({\n      id: z.number(),\n      documentId: z.string(),\n      name: z.string(),\n      description: z.string().nullable(),\n      type: z.string(),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n      publishedAt: z.string(),\n      nb_users: z.number().optional(),\n      permissions: z\n        .record(\n          z.string(), // plugin name\n          z.object({\n            controllers: z.record(\n              z.string(), // controller name\n              z.record(\n                z.string(), // action name\n                z.object({\n                  enabled: z.boolean(),\n                  policy: z.string(),\n                })\n              )\n            ),\n          })\n        )\n        .optional(),\n      users: z.array(z.unknown()).optional(),\n    });\n  }\n\n  get permissionSchema() {\n    return z.object({\n      id: z.number(),\n      action: z.string(),\n      role: z.object({\n        id: z.number(),\n        name: z.string(),\n        description: z.string().nullable(),\n        type: z.string(),\n      }),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n    });\n  }\n\n  get authResponseSchema() {\n    return z.object({\n      jwt: z.string(),\n      user: this.userSchema,\n    });\n  }\n\n  get authResponseWithoutJwtSchema() {\n    return z.object({\n      user: this.userSchema,\n    });\n  }\n\n  get authRegisterResponseSchema() {\n    return z.union([this.authResponseSchema, this.authResponseWithoutJwtSchema]);\n  }\n\n  get forgotPasswordResponseSchema() {\n    return z.object({\n      ok: z.boolean(),\n    });\n  }\n\n  get sendEmailConfirmationResponseSchema() {\n    return z.object({\n      email: z.string(),\n      sent: z.boolean(),\n    });\n  }\n\n  get rolesResponseSchema() {\n    return z.object({\n      roles: z.array(this.roleSchema),\n    });\n  }\n\n  get roleResponseSchema() {\n    return z.object({\n      role: this.roleSchema,\n    });\n  }\n\n  get roleSuccessResponseSchema() {\n    return z.object({\n      ok: z.boolean(),\n    });\n  }\n\n  get permissionsResponseSchema() {\n    return z.object({\n      permissions: z.record(\n        z.string(), // plugin name\n        z.object({\n          controllers: z.record(\n            z.string(), // controller name\n            z.record(\n              z.string(), // action name\n              z.object({\n                enabled: z.boolean(),\n                policy: z.string(),\n              })\n            )\n          ),\n        })\n      ),\n    });\n  }\n\n  get loginBodySchema() {\n    return z.object({\n      identifier: z.string(),\n      password: z.string(),\n    });\n  }\n\n  get registerBodySchema() {\n    return z.object({\n      username: z.string(),\n      email: z.email(),\n      password: z.string(),\n    });\n  }\n\n  get forgotPasswordBodySchema() {\n    return z.object({\n      email: z.email(),\n    });\n  }\n\n  get resetPasswordBodySchema() {\n    return z.object({\n      code: z.string(),\n      password: z.string(),\n      passwordConfirmation: z.string(),\n    });\n  }\n\n  get changePasswordBodySchema() {\n    return z.object({\n      currentPassword: z.string(),\n      password: z.string(),\n      passwordConfirmation: z.string(),\n    });\n  }\n\n  get sendEmailConfirmationBodySchema() {\n    return z.object({\n      email: z.email(),\n    });\n  }\n\n  get createUserBodySchema() {\n    return z.object({\n      username: z.string(),\n      email: z.email(),\n      password: z.string(),\n      role: z.number().optional(),\n    });\n  }\n\n  get updateUserBodySchema() {\n    return z.object({\n      username: z.string().optional(),\n      email: z.email().optional(),\n      password: z.string().optional(),\n      role: z.number().optional(),\n    });\n  }\n\n  get createRoleBodySchema() {\n    return z.object({\n      name: z.string(),\n      description: z.string().optional(),\n      type: z.string(),\n      permissions: z.record(z.string(), z.unknown()).optional(),\n    });\n  }\n\n  get updateRoleBodySchema() {\n    return z.object({\n      name: z.string().optional(),\n      description: z.string().optional(),\n      type: z.string().optional(),\n      permissions: z.record(z.string(), z.unknown()).optional(),\n    });\n  }\n\n  get userIdParam() {\n    return z.string();\n  }\n\n  get roleIdParam() {\n    return z.string();\n  }\n\n  get providerParam() {\n    return z.string();\n  }\n}\n\nmodule.exports = {\n  UsersPermissionsRouteValidator,\n};\n"],"names":["AbstractRouteValidator","require$$0","z","require$$1","UsersPermissionsRouteValidator","userSchema","object","id","number","documentId","string","username","email","provider","confirmed","boolean","blocked","role","union","name","description","nullable","type","createdAt","updatedAt","optional","publishedAt","roleSchema","nb_users","permissions","record","controllers","enabled","policy","users","array","unknown","permissionSchema","action","authResponseSchema","jwt","user","authResponseWithoutJwtSchema","authRegisterResponseSchema","forgotPasswordResponseSchema","ok","sendEmailConfirmationResponseSchema","sent","rolesResponseSchema","roles","roleResponseSchema","roleSuccessResponseSchema","permissionsResponseSchema","loginBodySchema","identifier","password","registerBodySchema","forgotPasswordBodySchema","resetPasswordBodySchema","code","passwordConfirmation","changePasswordBodySchema","currentPassword","sendEmailConfirmationBodySchema","createUserBodySchema","updateUserBodySchema","createRoleBodySchema","updateRoleBodySchema","userIdParam","roleIdParam","providerParam","constructor","strapi","_strapi","validation"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,sBAAsB,EAAE,GAAGC,UAAAA;AACnC,IAAA,MAAMC,CAAIC,GAAAA,YAAAA;AAEV,IAAA,MAAMC,8BAAuCJ,SAAAA,sBAAAA,CAAAA;AAM3C,QAAA,IAAIK,UAAa,GAAA;YACf,OAAOH,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZC,gBAAAA,UAAAA,EAAYP,EAAEQ,MAAM,EAAA;AACpBC,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEQ,MAAM,EAAA;AACfG,gBAAAA,QAAAA,EAAUX,EAAEQ,MAAM,EAAA;AAClBI,gBAAAA,SAAAA,EAAWZ,EAAEa,OAAO,EAAA;AACpBC,gBAAAA,OAAAA,EAASd,EAAEa,OAAO,EAAA;gBAClBE,IAAMf,EAAAA,CAAAA,CACHgB,KAAK,CAAC;AACLhB,oBAAAA,CAAAA,CAAEM,MAAM,EAAA;AACRN,oBAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPC,wBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZW,wBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;wBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,wBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;AACda,wBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,wBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM;AAC/B,qBAAA;AACS,iBAAA,CAAA,CACAe,QAAQ,EAAA;AACXF,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM,EAAA;AACnBgB,gBAAAA,WAAAA,EAAaxB,EAAEQ,MAAM;AAC3B,aAAA,CAAA;AACG;AAED,QAAA,IAAIiB,UAAa,GAAA;YACf,OAAOzB,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZC,gBAAAA,UAAAA,EAAYP,EAAEQ,MAAM,EAAA;AACpBS,gBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;gBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,gBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;AACda,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM,EAAA;AACnBgB,gBAAAA,WAAAA,EAAaxB,EAAEQ,MAAM,EAAA;gBACrBkB,QAAU1B,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ,EAAA;gBAC7BI,WAAa3B,EAAAA,CAAAA,CACV4B,MAAM,CACL5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPyB,oBAAAA,WAAAA,EAAa7B,CAAE4B,CAAAA,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAE4B,MAAM,CACN5B,CAAEQ,CAAAA,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACP0B,wBAAAA,OAAAA,EAAS9B,EAAEa,OAAO,EAAA;AAClBkB,wBAAAA,MAAAA,EAAQ/B,EAAEQ,MAAM;AAClC,qBAAA,CAAA,CAAA;AAGA,iBAAA,CAAA,CAAA,CAESe,QAAQ,EAAA;AACXS,gBAAAA,KAAAA,EAAOhC,EAAEiC,KAAK,CAACjC,CAAEkC,CAAAA,OAAO,IAAIX,QAAQ;AAC1C,aAAA,CAAA;AACG;AAED,QAAA,IAAIY,gBAAmB,GAAA;YACrB,OAAOnC,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZ8B,gBAAAA,MAAAA,EAAQpC,EAAEQ,MAAM,EAAA;gBAChBO,IAAMf,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACbC,oBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZW,oBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;oBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,oBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM;AACtB,iBAAA,CAAA;AACMa,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM;AACzB,aAAA,CAAA;AACG;AAED,QAAA,IAAI6B,kBAAqB,GAAA;YACvB,OAAOrC,CAAAA,CAAEI,MAAM,CAAC;AACdkC,gBAAAA,GAAAA,EAAKtC,EAAEQ,MAAM,EAAA;gBACb+B,IAAM,EAAA,IAAI,CAACpC;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIqC,4BAA+B,GAAA;YACjC,OAAOxC,CAAAA,CAAEI,MAAM,CAAC;gBACdmC,IAAM,EAAA,IAAI,CAACpC;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIsC,0BAA6B,GAAA;YAC/B,OAAOzC,CAAAA,CAAEgB,KAAK,CAAC;AAAC,gBAAA,IAAI,CAACqB,kBAAkB;AAAE,gBAAA,IAAI,CAACG;AAA6B,aAAA,CAAA;AAC5E;AAED,QAAA,IAAIE,4BAA+B,GAAA;YACjC,OAAO1C,CAAAA,CAAEI,MAAM,CAAC;AACduC,gBAAAA,EAAAA,EAAI3C,EAAEa,OAAO;AACnB,aAAA,CAAA;AACG;AAED,QAAA,IAAI+B,mCAAsC,GAAA;YACxC,OAAO5C,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEQ,MAAM,EAAA;AACfqC,gBAAAA,IAAAA,EAAM7C,EAAEa,OAAO;AACrB,aAAA,CAAA;AACG;AAED,QAAA,IAAIiC,mBAAsB,GAAA;YACxB,OAAO9C,CAAAA,CAAEI,MAAM,CAAC;AACd2C,gBAAAA,KAAAA,EAAO/C,CAAEiC,CAAAA,KAAK,CAAC,IAAI,CAACR,UAAU;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAIuB,kBAAqB,GAAA;YACvB,OAAOhD,CAAAA,CAAEI,MAAM,CAAC;gBACdW,IAAM,EAAA,IAAI,CAACU;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIwB,yBAA4B,GAAA;YAC9B,OAAOjD,CAAAA,CAAEI,MAAM,CAAC;AACduC,gBAAAA,EAAAA,EAAI3C,EAAEa,OAAO;AACnB,aAAA,CAAA;AACG;AAED,QAAA,IAAIqC,yBAA4B,GAAA;YAC9B,OAAOlD,CAAAA,CAAEI,MAAM,CAAC;gBACduB,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPyB,oBAAAA,WAAAA,EAAa7B,CAAE4B,CAAAA,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAE4B,MAAM,CACN5B,CAAEQ,CAAAA,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACP0B,wBAAAA,OAAAA,EAAS9B,EAAEa,OAAO,EAAA;AAClBkB,wBAAAA,MAAAA,EAAQ/B,EAAEQ,MAAM;AAChC,qBAAA,CAAA,CAAA;AAGA,iBAAA,CAAA;AAEA,aAAA,CAAA;AACG;AAED,QAAA,IAAI2C,eAAkB,GAAA;YACpB,OAAOnD,CAAAA,CAAEI,MAAM,CAAC;AACdgD,gBAAAA,UAAAA,EAAYpD,EAAEQ,MAAM,EAAA;AACpB6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM;AACxB,aAAA,CAAA;AACG;AAED,QAAA,IAAI8C,kBAAqB,GAAA;YACvB,OAAOtD,CAAAA,CAAEI,MAAM,CAAC;AACdK,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK,EAAA;AACd2C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM;AACxB,aAAA,CAAA;AACG;AAED,QAAA,IAAI+C,wBAA2B,GAAA;YAC7B,OAAOvD,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK;AACpB,aAAA,CAAA;AACG;AAED,QAAA,IAAI8C,uBAA0B,GAAA;YAC5B,OAAOxD,CAAAA,CAAEI,MAAM,CAAC;AACdqD,gBAAAA,IAAAA,EAAMzD,EAAEQ,MAAM,EAAA;AACd6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;AAClBkD,gBAAAA,oBAAAA,EAAsB1D,EAAEQ,MAAM;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAImD,wBAA2B,GAAA;YAC7B,OAAO3D,CAAAA,CAAEI,MAAM,CAAC;AACdwD,gBAAAA,eAAAA,EAAiB5D,EAAEQ,MAAM,EAAA;AACzB6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;AAClBkD,gBAAAA,oBAAAA,EAAsB1D,EAAEQ,MAAM;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAIqD,+BAAkC,GAAA;YACpC,OAAO7D,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK;AACpB,aAAA,CAAA;AACG;AAED,QAAA,IAAIoD,oBAAuB,GAAA;YACzB,OAAO9D,CAAAA,CAAEI,MAAM,CAAC;AACdK,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK,EAAA;AACd2C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;gBAClBO,IAAMf,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ;AAC/B,aAAA,CAAA;AACG;AAED,QAAA,IAAIwC,oBAAuB,GAAA;YACzB,OAAO/D,CAAAA,CAAEI,MAAM,CAAC;gBACdK,QAAUT,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAC7Bb,KAAOV,EAAAA,CAAAA,CAAEU,KAAK,EAAA,CAAGa,QAAQ,EAAA;gBACzB8B,QAAUrD,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAC7BR,IAAMf,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ;AAC/B,aAAA,CAAA;AACG;AAED,QAAA,IAAIyC,oBAAuB,GAAA;YACzB,OAAOhE,CAAAA,CAAEI,MAAM,CAAC;AACda,gBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;gBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;AAChCH,gBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;gBACdmB,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CAAC5B,CAAAA,CAAEQ,MAAM,EAAIR,EAAAA,CAAAA,CAAEkC,OAAO,EAAA,CAAA,CAAIX,QAAQ;AAC7D,aAAA,CAAA;AACG;AAED,QAAA,IAAI0C,oBAAuB,GAAA;YACzB,OAAOjE,CAAAA,CAAEI,MAAM,CAAC;gBACda,IAAMjB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBACzBL,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAChCH,IAAMpB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBACzBI,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CAAC5B,CAAAA,CAAEQ,MAAM,EAAIR,EAAAA,CAAAA,CAAEkC,OAAO,EAAA,CAAA,CAAIX,QAAQ;AAC7D,aAAA,CAAA;AACG;AAED,QAAA,IAAI2C,WAAc,GAAA;AAChB,YAAA,OAAOlE,EAAEQ,MAAM,EAAA;AAChB;AAED,QAAA,IAAI2D,WAAc,GAAA;AAChB,YAAA,OAAOnE,EAAEQ,MAAM,EAAA;AAChB;AAED,QAAA,IAAI4D,aAAgB,GAAA;AAClB,YAAA,OAAOpE,EAAEQ,MAAM,EAAA;AAChB;AA7OD6D,QAAAA,WAAAA,CAAYC,MAAM,CAAE;YAClB,KAAK,EAAA;YACL,IAAI,CAACC,OAAO,GAAGD,MAAAA;AAChB;AA2OH;IAEAE,UAAiB,GAAA;AACftE,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/routes/content-api/validation.mjs

@@ -0,0 +1,214 @@
+import require$$1 from '@strapi/utils';
+import require$$1$1 from 'zod/v4';
+
+var validation;
+var hasRequiredValidation;
+function requireValidation() {
+    if (hasRequiredValidation) return validation;
+    hasRequiredValidation = 1;
+    const { AbstractRouteValidator } = require$$1;
+    const z = require$$1$1;
+    class UsersPermissionsRouteValidator extends AbstractRouteValidator {
+        get userSchema() {
+            return z.object({
+                id: z.number(),
+                documentId: z.string(),
+                username: z.string(),
+                email: z.string(),
+                provider: z.string(),
+                confirmed: z.boolean(),
+                blocked: z.boolean(),
+                role: z.union([
+                    z.number(),
+                    z.object({
+                        id: z.number(),
+                        name: z.string(),
+                        description: z.string().nullable(),
+                        type: z.string(),
+                        createdAt: z.string(),
+                        updatedAt: z.string()
+                    })
+                ]).optional(),
+                createdAt: z.string(),
+                updatedAt: z.string(),
+                publishedAt: z.string()
+            });
+        }
+        get roleSchema() {
+            return z.object({
+                id: z.number(),
+                documentId: z.string(),
+                name: z.string(),
+                description: z.string().nullable(),
+                type: z.string(),
+                createdAt: z.string(),
+                updatedAt: z.string(),
+                publishedAt: z.string(),
+                nb_users: z.number().optional(),
+                permissions: z.record(z.string(), z.object({
+                    controllers: z.record(z.string(), z.record(z.string(), z.object({
+                        enabled: z.boolean(),
+                        policy: z.string()
+                    })))
+                })).optional(),
+                users: z.array(z.unknown()).optional()
+            });
+        }
+        get permissionSchema() {
+            return z.object({
+                id: z.number(),
+                action: z.string(),
+                role: z.object({
+                    id: z.number(),
+                    name: z.string(),
+                    description: z.string().nullable(),
+                    type: z.string()
+                }),
+                createdAt: z.string(),
+                updatedAt: z.string()
+            });
+        }
+        get authResponseSchema() {
+            return z.object({
+                jwt: z.string(),
+                user: this.userSchema
+            });
+        }
+        get authResponseWithoutJwtSchema() {
+            return z.object({
+                user: this.userSchema
+            });
+        }
+        get authRegisterResponseSchema() {
+            return z.union([
+                this.authResponseSchema,
+                this.authResponseWithoutJwtSchema
+            ]);
+        }
+        get forgotPasswordResponseSchema() {
+            return z.object({
+                ok: z.boolean()
+            });
+        }
+        get sendEmailConfirmationResponseSchema() {
+            return z.object({
+                email: z.string(),
+                sent: z.boolean()
+            });
+        }
+        get rolesResponseSchema() {
+            return z.object({
+                roles: z.array(this.roleSchema)
+            });
+        }
+        get roleResponseSchema() {
+            return z.object({
+                role: this.roleSchema
+            });
+        }
+        get roleSuccessResponseSchema() {
+            return z.object({
+                ok: z.boolean()
+            });
+        }
+        get permissionsResponseSchema() {
+            return z.object({
+                permissions: z.record(z.string(), z.object({
+                    controllers: z.record(z.string(), z.record(z.string(), z.object({
+                        enabled: z.boolean(),
+                        policy: z.string()
+                    })))
+                }))
+            });
+        }
+        get loginBodySchema() {
+            return z.object({
+                identifier: z.string(),
+                password: z.string()
+            });
+        }
+        get registerBodySchema() {
+            return z.object({
+                username: z.string(),
+                email: z.email(),
+                password: z.string()
+            });
+        }
+        get forgotPasswordBodySchema() {
+            return z.object({
+                email: z.email()
+            });
+        }
+        get resetPasswordBodySchema() {
+            return z.object({
+                code: z.string(),
+                password: z.string(),
+                passwordConfirmation: z.string()
+            });
+        }
+        get changePasswordBodySchema() {
+            return z.object({
+                currentPassword: z.string(),
+                password: z.string(),
+                passwordConfirmation: z.string()
+            });
+        }
+        get sendEmailConfirmationBodySchema() {
+            return z.object({
+                email: z.email()
+            });
+        }
+        get createUserBodySchema() {
+            return z.object({
+                username: z.string(),
+                email: z.email(),
+                password: z.string(),
+                role: z.number().optional()
+            });
+        }
+        get updateUserBodySchema() {
+            return z.object({
+                username: z.string().optional(),
+                email: z.email().optional(),
+                password: z.string().optional(),
+                role: z.number().optional()
+            });
+        }
+        get createRoleBodySchema() {
+            return z.object({
+                name: z.string(),
+                description: z.string().optional(),
+                type: z.string(),
+                permissions: z.record(z.string(), z.unknown()).optional()
+            });
+        }
+        get updateRoleBodySchema() {
+            return z.object({
+                name: z.string().optional(),
+                description: z.string().optional(),
+                type: z.string().optional(),
+                permissions: z.record(z.string(), z.unknown()).optional()
+            });
+        }
+        get userIdParam() {
+            return z.string();
+        }
+        get roleIdParam() {
+            return z.string();
+        }
+        get providerParam() {
+            return z.string();
+        }
+        constructor(strapi){
+            super();
+            this._strapi = strapi;
+        }
+    }
+    validation = {
+        UsersPermissionsRouteValidator
+    };
+    return validation;
+}
+
+export { requireValidation as __require };
+//# sourceMappingURL=validation.mjs.map

package/dist/server/routes/content-api/validation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.mjs","sources":["../../../../server/routes/content-api/validation.js"],"sourcesContent":["'use strict';\n\nconst { AbstractRouteValidator } = require('@strapi/utils');\nconst z = require('zod/v4');\n\nclass UsersPermissionsRouteValidator extends AbstractRouteValidator {\n  constructor(strapi) {\n    super();\n    this._strapi = strapi;\n  }\n\n  get userSchema() {\n    return z.object({\n      id: z.number(),\n      documentId: z.string(),\n      username: z.string(),\n      email: z.string(),\n      provider: z.string(),\n      confirmed: z.boolean(),\n      blocked: z.boolean(),\n      role: z\n        .union([\n          z.number(),\n          z.object({\n            id: z.number(),\n            name: z.string(),\n            description: z.string().nullable(),\n            type: z.string(),\n            createdAt: z.string(),\n            updatedAt: z.string(),\n          }),\n        ])\n        .optional(),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n      publishedAt: z.string(),\n    });\n  }\n\n  get roleSchema() {\n    return z.object({\n      id: z.number(),\n      documentId: z.string(),\n      name: z.string(),\n      description: z.string().nullable(),\n      type: z.string(),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n      publishedAt: z.string(),\n      nb_users: z.number().optional(),\n      permissions: z\n        .record(\n          z.string(), // plugin name\n          z.object({\n            controllers: z.record(\n              z.string(), // controller name\n              z.record(\n                z.string(), // action name\n                z.object({\n                  enabled: z.boolean(),\n                  policy: z.string(),\n                })\n              )\n            ),\n          })\n        )\n        .optional(),\n      users: z.array(z.unknown()).optional(),\n    });\n  }\n\n  get permissionSchema() {\n    return z.object({\n      id: z.number(),\n      action: z.string(),\n      role: z.object({\n        id: z.number(),\n        name: z.string(),\n        description: z.string().nullable(),\n        type: z.string(),\n      }),\n      createdAt: z.string(),\n      updatedAt: z.string(),\n    });\n  }\n\n  get authResponseSchema() {\n    return z.object({\n      jwt: z.string(),\n      user: this.userSchema,\n    });\n  }\n\n  get authResponseWithoutJwtSchema() {\n    return z.object({\n      user: this.userSchema,\n    });\n  }\n\n  get authRegisterResponseSchema() {\n    return z.union([this.authResponseSchema, this.authResponseWithoutJwtSchema]);\n  }\n\n  get forgotPasswordResponseSchema() {\n    return z.object({\n      ok: z.boolean(),\n    });\n  }\n\n  get sendEmailConfirmationResponseSchema() {\n    return z.object({\n      email: z.string(),\n      sent: z.boolean(),\n    });\n  }\n\n  get rolesResponseSchema() {\n    return z.object({\n      roles: z.array(this.roleSchema),\n    });\n  }\n\n  get roleResponseSchema() {\n    return z.object({\n      role: this.roleSchema,\n    });\n  }\n\n  get roleSuccessResponseSchema() {\n    return z.object({\n      ok: z.boolean(),\n    });\n  }\n\n  get permissionsResponseSchema() {\n    return z.object({\n      permissions: z.record(\n        z.string(), // plugin name\n        z.object({\n          controllers: z.record(\n            z.string(), // controller name\n            z.record(\n              z.string(), // action name\n              z.object({\n                enabled: z.boolean(),\n                policy: z.string(),\n              })\n            )\n          ),\n        })\n      ),\n    });\n  }\n\n  get loginBodySchema() {\n    return z.object({\n      identifier: z.string(),\n      password: z.string(),\n    });\n  }\n\n  get registerBodySchema() {\n    return z.object({\n      username: z.string(),\n      email: z.email(),\n      password: z.string(),\n    });\n  }\n\n  get forgotPasswordBodySchema() {\n    return z.object({\n      email: z.email(),\n    });\n  }\n\n  get resetPasswordBodySchema() {\n    return z.object({\n      code: z.string(),\n      password: z.string(),\n      passwordConfirmation: z.string(),\n    });\n  }\n\n  get changePasswordBodySchema() {\n    return z.object({\n      currentPassword: z.string(),\n      password: z.string(),\n      passwordConfirmation: z.string(),\n    });\n  }\n\n  get sendEmailConfirmationBodySchema() {\n    return z.object({\n      email: z.email(),\n    });\n  }\n\n  get createUserBodySchema() {\n    return z.object({\n      username: z.string(),\n      email: z.email(),\n      password: z.string(),\n      role: z.number().optional(),\n    });\n  }\n\n  get updateUserBodySchema() {\n    return z.object({\n      username: z.string().optional(),\n      email: z.email().optional(),\n      password: z.string().optional(),\n      role: z.number().optional(),\n    });\n  }\n\n  get createRoleBodySchema() {\n    return z.object({\n      name: z.string(),\n      description: z.string().optional(),\n      type: z.string(),\n      permissions: z.record(z.string(), z.unknown()).optional(),\n    });\n  }\n\n  get updateRoleBodySchema() {\n    return z.object({\n      name: z.string().optional(),\n      description: z.string().optional(),\n      type: z.string().optional(),\n      permissions: z.record(z.string(), z.unknown()).optional(),\n    });\n  }\n\n  get userIdParam() {\n    return z.string();\n  }\n\n  get roleIdParam() {\n    return z.string();\n  }\n\n  get providerParam() {\n    return z.string();\n  }\n}\n\nmodule.exports = {\n  UsersPermissionsRouteValidator,\n};\n"],"names":["AbstractRouteValidator","require$$0","z","require$$1","UsersPermissionsRouteValidator","userSchema","object","id","number","documentId","string","username","email","provider","confirmed","boolean","blocked","role","union","name","description","nullable","type","createdAt","updatedAt","optional","publishedAt","roleSchema","nb_users","permissions","record","controllers","enabled","policy","users","array","unknown","permissionSchema","action","authResponseSchema","jwt","user","authResponseWithoutJwtSchema","authRegisterResponseSchema","forgotPasswordResponseSchema","ok","sendEmailConfirmationResponseSchema","sent","rolesResponseSchema","roles","roleResponseSchema","roleSuccessResponseSchema","permissionsResponseSchema","loginBodySchema","identifier","password","registerBodySchema","forgotPasswordBodySchema","resetPasswordBodySchema","code","passwordConfirmation","changePasswordBodySchema","currentPassword","sendEmailConfirmationBodySchema","createUserBodySchema","updateUserBodySchema","createRoleBodySchema","updateRoleBodySchema","userIdParam","roleIdParam","providerParam","constructor","strapi","_strapi","validation"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,sBAAsB,EAAE,GAAGC,UAAAA;AACnC,IAAA,MAAMC,CAAIC,GAAAA,YAAAA;AAEV,IAAA,MAAMC,8BAAuCJ,SAAAA,sBAAAA,CAAAA;AAM3C,QAAA,IAAIK,UAAa,GAAA;YACf,OAAOH,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZC,gBAAAA,UAAAA,EAAYP,EAAEQ,MAAM,EAAA;AACpBC,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEQ,MAAM,EAAA;AACfG,gBAAAA,QAAAA,EAAUX,EAAEQ,MAAM,EAAA;AAClBI,gBAAAA,SAAAA,EAAWZ,EAAEa,OAAO,EAAA;AACpBC,gBAAAA,OAAAA,EAASd,EAAEa,OAAO,EAAA;gBAClBE,IAAMf,EAAAA,CAAAA,CACHgB,KAAK,CAAC;AACLhB,oBAAAA,CAAAA,CAAEM,MAAM,EAAA;AACRN,oBAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPC,wBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZW,wBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;wBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,wBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;AACda,wBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,wBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM;AAC/B,qBAAA;AACS,iBAAA,CAAA,CACAe,QAAQ,EAAA;AACXF,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM,EAAA;AACnBgB,gBAAAA,WAAAA,EAAaxB,EAAEQ,MAAM;AAC3B,aAAA,CAAA;AACG;AAED,QAAA,IAAIiB,UAAa,GAAA;YACf,OAAOzB,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZC,gBAAAA,UAAAA,EAAYP,EAAEQ,MAAM,EAAA;AACpBS,gBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;gBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,gBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;AACda,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM,EAAA;AACnBgB,gBAAAA,WAAAA,EAAaxB,EAAEQ,MAAM,EAAA;gBACrBkB,QAAU1B,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ,EAAA;gBAC7BI,WAAa3B,EAAAA,CAAAA,CACV4B,MAAM,CACL5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPyB,oBAAAA,WAAAA,EAAa7B,CAAE4B,CAAAA,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAE4B,MAAM,CACN5B,CAAEQ,CAAAA,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACP0B,wBAAAA,OAAAA,EAAS9B,EAAEa,OAAO,EAAA;AAClBkB,wBAAAA,MAAAA,EAAQ/B,EAAEQ,MAAM;AAClC,qBAAA,CAAA,CAAA;AAGA,iBAAA,CAAA,CAAA,CAESe,QAAQ,EAAA;AACXS,gBAAAA,KAAAA,EAAOhC,EAAEiC,KAAK,CAACjC,CAAEkC,CAAAA,OAAO,IAAIX,QAAQ;AAC1C,aAAA,CAAA;AACG;AAED,QAAA,IAAIY,gBAAmB,GAAA;YACrB,OAAOnC,CAAAA,CAAEI,MAAM,CAAC;AACdC,gBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZ8B,gBAAAA,MAAAA,EAAQpC,EAAEQ,MAAM,EAAA;gBAChBO,IAAMf,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACbC,oBAAAA,EAAAA,EAAIL,EAAEM,MAAM,EAAA;AACZW,oBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;oBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGW,QAAQ,EAAA;AAChCC,oBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM;AACtB,iBAAA,CAAA;AACMa,gBAAAA,SAAAA,EAAWrB,EAAEQ,MAAM,EAAA;AACnBc,gBAAAA,SAAAA,EAAWtB,EAAEQ,MAAM;AACzB,aAAA,CAAA;AACG;AAED,QAAA,IAAI6B,kBAAqB,GAAA;YACvB,OAAOrC,CAAAA,CAAEI,MAAM,CAAC;AACdkC,gBAAAA,GAAAA,EAAKtC,EAAEQ,MAAM,EAAA;gBACb+B,IAAM,EAAA,IAAI,CAACpC;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIqC,4BAA+B,GAAA;YACjC,OAAOxC,CAAAA,CAAEI,MAAM,CAAC;gBACdmC,IAAM,EAAA,IAAI,CAACpC;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIsC,0BAA6B,GAAA;YAC/B,OAAOzC,CAAAA,CAAEgB,KAAK,CAAC;AAAC,gBAAA,IAAI,CAACqB,kBAAkB;AAAE,gBAAA,IAAI,CAACG;AAA6B,aAAA,CAAA;AAC5E;AAED,QAAA,IAAIE,4BAA+B,GAAA;YACjC,OAAO1C,CAAAA,CAAEI,MAAM,CAAC;AACduC,gBAAAA,EAAAA,EAAI3C,EAAEa,OAAO;AACnB,aAAA,CAAA;AACG;AAED,QAAA,IAAI+B,mCAAsC,GAAA;YACxC,OAAO5C,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEQ,MAAM,EAAA;AACfqC,gBAAAA,IAAAA,EAAM7C,EAAEa,OAAO;AACrB,aAAA,CAAA;AACG;AAED,QAAA,IAAIiC,mBAAsB,GAAA;YACxB,OAAO9C,CAAAA,CAAEI,MAAM,CAAC;AACd2C,gBAAAA,KAAAA,EAAO/C,CAAEiC,CAAAA,KAAK,CAAC,IAAI,CAACR,UAAU;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAIuB,kBAAqB,GAAA;YACvB,OAAOhD,CAAAA,CAAEI,MAAM,CAAC;gBACdW,IAAM,EAAA,IAAI,CAACU;AACjB,aAAA,CAAA;AACG;AAED,QAAA,IAAIwB,yBAA4B,GAAA;YAC9B,OAAOjD,CAAAA,CAAEI,MAAM,CAAC;AACduC,gBAAAA,EAAAA,EAAI3C,EAAEa,OAAO;AACnB,aAAA,CAAA;AACG;AAED,QAAA,IAAIqC,yBAA4B,GAAA;YAC9B,OAAOlD,CAAAA,CAAEI,MAAM,CAAC;gBACduB,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACPyB,oBAAAA,WAAAA,EAAa7B,CAAE4B,CAAAA,MAAM,CACnB5B,CAAAA,CAAEQ,MAAM,EACRR,EAAAA,CAAAA,CAAE4B,MAAM,CACN5B,CAAEQ,CAAAA,MAAM,EACRR,EAAAA,CAAAA,CAAEI,MAAM,CAAC;AACP0B,wBAAAA,OAAAA,EAAS9B,EAAEa,OAAO,EAAA;AAClBkB,wBAAAA,MAAAA,EAAQ/B,EAAEQ,MAAM;AAChC,qBAAA,CAAA,CAAA;AAGA,iBAAA,CAAA;AAEA,aAAA,CAAA;AACG;AAED,QAAA,IAAI2C,eAAkB,GAAA;YACpB,OAAOnD,CAAAA,CAAEI,MAAM,CAAC;AACdgD,gBAAAA,UAAAA,EAAYpD,EAAEQ,MAAM,EAAA;AACpB6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM;AACxB,aAAA,CAAA;AACG;AAED,QAAA,IAAI8C,kBAAqB,GAAA;YACvB,OAAOtD,CAAAA,CAAEI,MAAM,CAAC;AACdK,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK,EAAA;AACd2C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM;AACxB,aAAA,CAAA;AACG;AAED,QAAA,IAAI+C,wBAA2B,GAAA;YAC7B,OAAOvD,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK;AACpB,aAAA,CAAA;AACG;AAED,QAAA,IAAI8C,uBAA0B,GAAA;YAC5B,OAAOxD,CAAAA,CAAEI,MAAM,CAAC;AACdqD,gBAAAA,IAAAA,EAAMzD,EAAEQ,MAAM,EAAA;AACd6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;AAClBkD,gBAAAA,oBAAAA,EAAsB1D,EAAEQ,MAAM;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAImD,wBAA2B,GAAA;YAC7B,OAAO3D,CAAAA,CAAEI,MAAM,CAAC;AACdwD,gBAAAA,eAAAA,EAAiB5D,EAAEQ,MAAM,EAAA;AACzB6C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;AAClBkD,gBAAAA,oBAAAA,EAAsB1D,EAAEQ,MAAM;AACpC,aAAA,CAAA;AACG;AAED,QAAA,IAAIqD,+BAAkC,GAAA;YACpC,OAAO7D,CAAAA,CAAEI,MAAM,CAAC;AACdM,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK;AACpB,aAAA,CAAA;AACG;AAED,QAAA,IAAIoD,oBAAuB,GAAA;YACzB,OAAO9D,CAAAA,CAAEI,MAAM,CAAC;AACdK,gBAAAA,QAAAA,EAAUT,EAAEQ,MAAM,EAAA;AAClBE,gBAAAA,KAAAA,EAAOV,EAAEU,KAAK,EAAA;AACd2C,gBAAAA,QAAAA,EAAUrD,EAAEQ,MAAM,EAAA;gBAClBO,IAAMf,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ;AAC/B,aAAA,CAAA;AACG;AAED,QAAA,IAAIwC,oBAAuB,GAAA;YACzB,OAAO/D,CAAAA,CAAEI,MAAM,CAAC;gBACdK,QAAUT,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAC7Bb,KAAOV,EAAAA,CAAAA,CAAEU,KAAK,EAAA,CAAGa,QAAQ,EAAA;gBACzB8B,QAAUrD,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAC7BR,IAAMf,EAAAA,CAAAA,CAAEM,MAAM,EAAA,CAAGiB,QAAQ;AAC/B,aAAA,CAAA;AACG;AAED,QAAA,IAAIyC,oBAAuB,GAAA;YACzB,OAAOhE,CAAAA,CAAEI,MAAM,CAAC;AACda,gBAAAA,IAAAA,EAAMjB,EAAEQ,MAAM,EAAA;gBACdU,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;AAChCH,gBAAAA,IAAAA,EAAMpB,EAAEQ,MAAM,EAAA;gBACdmB,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CAAC5B,CAAAA,CAAEQ,MAAM,EAAIR,EAAAA,CAAAA,CAAEkC,OAAO,EAAA,CAAA,CAAIX,QAAQ;AAC7D,aAAA,CAAA;AACG;AAED,QAAA,IAAI0C,oBAAuB,GAAA;YACzB,OAAOjE,CAAAA,CAAEI,MAAM,CAAC;gBACda,IAAMjB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBACzBL,WAAalB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBAChCH,IAAMpB,EAAAA,CAAAA,CAAEQ,MAAM,EAAA,CAAGe,QAAQ,EAAA;gBACzBI,WAAa3B,EAAAA,CAAAA,CAAE4B,MAAM,CAAC5B,CAAAA,CAAEQ,MAAM,EAAIR,EAAAA,CAAAA,CAAEkC,OAAO,EAAA,CAAA,CAAIX,QAAQ;AAC7D,aAAA,CAAA;AACG;AAED,QAAA,IAAI2C,WAAc,GAAA;AAChB,YAAA,OAAOlE,EAAEQ,MAAM,EAAA;AAChB;AAED,QAAA,IAAI2D,WAAc,GAAA;AAChB,YAAA,OAAOnE,EAAEQ,MAAM,EAAA;AAChB;AAED,QAAA,IAAI4D,aAAgB,GAAA;AAClB,YAAA,OAAOpE,EAAEQ,MAAM,EAAA;AAChB;AA7OD6D,QAAAA,WAAAA,CAAYC,MAAM,CAAE;YAClB,KAAK,EAAA;YACL,IAAI,CAACC,OAAO,GAAGD,MAAAA;AAChB;AA2OH;IAEAE,UAAiB,GAAA;AACftE,QAAAA;AACF,KAAA;;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/plugin-users-permissions",
-  "version": "5.19.0",
+  "version": "5.21.0",
   "description": "Protect your API with a full-authentication process based on JWT",
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
   "dependencies": {
     "@strapi/design-system": "2.0.0-rc.29",
     "@strapi/icons": "2.0.0-rc.29",
-    "@strapi/utils": "5.19.0",
+    "@strapi/utils": "5.21.0",
     "bcryptjs": "2.4.3",
     "formik": "2.4.5",
     "grant": "^5.4.8",
@@ -66,10 +66,11 @@
     "react-query": "3.39.3",
     "react-redux": "8.1.3",
     "url-join": "4.0.1",
-    "yup": "0.32.9"
+    "yup": "0.32.9",
+    "zod": "3.25.67"
   },
   "devDependencies": {
-    "@strapi/strapi": "5.19.0",
+    "@strapi/strapi": "5.21.0",
     "@testing-library/dom": "10.1.0",
     "@testing-library/react": "15.0.7",
     "@testing-library/user-event": "14.5.2",

package/server/controllers/content-manager-user.js

@@ -2,8 +2,7 @@
 
 const _ = require('lodash');
 const { contentTypes: contentTypesUtils } = require('@strapi/utils');
-const { ApplicationError, ValidationError, NotFoundError, ForbiddenError } =
-  require('@strapi/utils').errors;
+const { ApplicationError, NotFoundError, ForbiddenError } = require('@strapi/utils').errors;
 const { validateCreateUserBody, validateUpdateUserBody } = require('./validation/user');
 
 const { UPDATED_BY_ATTRIBUTE, CREATED_BY_ATTRIBUTE } = contentTypesUtils.constants;
@@ -133,8 +132,8 @@ module.exports = {
 
     await validateUpdateUserBody(ctx.request.body);
 
-    if (_.has(body, 'password') && !password && user.provider === 'local') {
-      throw new ValidationError('password.notNull');
+    if (_.has(body, 'password') && (password == null || password === '')) {
+      delete body.password;
     }
 
     if (_.has(body, 'username')) {

package/server/controllers/validation/user.js

@@ -29,7 +29,18 @@ const createUserBodySchema = yup.object().shape({
 const updateUserBodySchema = yup.object().shape({
   email: yup.string().email().min(1),
   username: yup.string().min(1),
-  password: yup.string().min(1),
+  password: yup
+    .mixed()
+    .test(
+      'password-validation',
+      'Password must be at least 1 character',
+      function validatePassword(value) {
+        if (value == null || value === '') {
+          return true;
+        }
+        return typeof value === 'string' && value.length >= 1;
+      }
+    ),
   role: yup.lazy((value) =>
     typeof value === 'object'
       ? yup.object().shape({

package/server/routes/content-api/auth.js

@@ -1,82 +1,118 @@
 'use strict';
 
-module.exports = [
-  {
-    method: 'GET',
-    path: '/connect/(.*)',
-    handler: 'auth.connect',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+const { UsersPermissionsRouteValidator } = require('./validation');
+
+module.exports = (strapi) => {
+  const validator = new UsersPermissionsRouteValidator(strapi);
+
+  return [
+    {
+      method: 'GET',
+      path: '/connect/(.*)',
+      handler: 'auth.connect',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/local',
-    handler: 'auth.callback',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/local',
+      handler: 'auth.callback',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.loginBodySchema },
+      },
+      response: validator.authResponseSchema,
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/local/register',
-    handler: 'auth.register',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/local/register',
+      handler: 'auth.register',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.registerBodySchema },
+      },
+      response: validator.authRegisterResponseSchema,
     },
-  },
-  {
-    method: 'GET',
-    path: '/auth/:provider/callback',
-    handler: 'auth.callback',
-    config: {
-      prefix: '',
+    {
+      method: 'GET',
+      path: '/auth/:provider/callback',
+      handler: 'auth.callback',
+      config: {
+        prefix: '',
+      },
+      request: {
+        params: {
+          provider: validator.providerParam,
+        },
+      },
+      response: validator.authResponseSchema,
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/forgot-password',
-    handler: 'auth.forgotPassword',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/forgot-password',
+      handler: 'auth.forgotPassword',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.forgotPasswordBodySchema },
+      },
+      response: validator.forgotPasswordResponseSchema,
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/reset-password',
-    handler: 'auth.resetPassword',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/reset-password',
+      handler: 'auth.resetPassword',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.resetPasswordBodySchema },
+      },
+      response: validator.authResponseSchema,
     },
-  },
-  {
-    method: 'GET',
-    path: '/auth/email-confirmation',
-    handler: 'auth.emailConfirmation',
-    config: {
-      prefix: '',
+    {
+      method: 'GET',
+      path: '/auth/email-confirmation',
+      handler: 'auth.emailConfirmation',
+      config: {
+        prefix: '',
+      },
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/send-email-confirmation',
-    handler: 'auth.sendEmailConfirmation',
-    config: {
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/send-email-confirmation',
+      handler: 'auth.sendEmailConfirmation',
+      config: {
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.sendEmailConfirmationBodySchema },
+      },
+      response: validator.sendEmailConfirmationResponseSchema,
     },
-  },
-  {
-    method: 'POST',
-    path: '/auth/change-password',
-    handler: 'auth.changePassword',
-    config: {
-      middlewares: ['plugin::users-permissions.rateLimit'],
-      prefix: '',
+    {
+      method: 'POST',
+      path: '/auth/change-password',
+      handler: 'auth.changePassword',
+      config: {
+        middlewares: ['plugin::users-permissions.rateLimit'],
+        prefix: '',
+      },
+      request: {
+        body: { 'application/json': validator.changePasswordBodySchema },
+      },
+      response: validator.authResponseSchema,
     },
-  },
-];
+  ];
+};

package/server/routes/content-api/index.js

@@ -5,7 +5,14 @@ const userRoutes = require('./user');
 const roleRoutes = require('./role');
 const permissionsRoutes = require('./permissions');
 
-module.exports = {
-  type: 'content-api',
-  routes: [...authRoutes, ...userRoutes, ...roleRoutes, ...permissionsRoutes],
+module.exports = (strapi) => {
+  return {
+    type: 'content-api',
+    routes: [
+      ...authRoutes(strapi),
+      ...userRoutes(strapi),
+      ...roleRoutes(strapi),
+      ...permissionsRoutes(strapi),
+    ],
+  };
 };

package/server/routes/content-api/permissions.js

@@ -1,9 +1,16 @@
 'use strict';
 
-module.exports = [
-  {
-    method: 'GET',
-    path: '/permissions',
-    handler: 'permissions.getPermissions',
-  },
-];
+const { UsersPermissionsRouteValidator } = require('./validation');
+
+module.exports = (strapi) => {
+  const validator = new UsersPermissionsRouteValidator(strapi);
+
+  return [
+    {
+      method: 'GET',
+      path: '/permissions',
+      handler: 'permissions.getPermissions',
+      response: validator.permissionsResponseSchema,
+    },
+  ];
+};