@strapi/plugin-users-permissions 5.48.1 → 5.49.0

package/dist/server/controllers/validation/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sources":["../../../../server/controllers/validation/auth.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst callbackSchema = yup.object({\n  identifier: yup.string().required(),\n  password: yup.string().required(),\n});\n\nconst createRegisterSchema = (config) =>\n  yup.object({\n    email: yup.string().email().required(),\n    username: yup.string().required(),\n    password: yup\n      .string()\n      .required()\n      .test(function (value) {\n        if (!value) return true;\n        const isValid = new TextEncoder().encode(value).length <= 72;\n        if (!isValid) {\n          return this.createError({ message: 'Password must be less than 73 bytes' });\n        }\n        return true;\n      })\n      .test(async function (value) {\n        if (typeof config?.validatePassword === 'function') {\n          try {\n            const isValid = await config.validatePassword(value);\n            if (!isValid) {\n              return this.createError({ message: 'Password validation failed.' });\n            }\n          } catch (error) {\n            return this.createError({ message: error.message || 'An error occurred.' });\n          }\n        }\n        return true;\n      }),\n  });\n\nconst sendEmailConfirmationSchema = yup.object({\n  email: yup.string().email().required(),\n});\n\nconst validateEmailConfirmationSchema = yup.object({\n  confirmation: yup.string().required(),\n});\n\nconst forgotPasswordSchema = yup\n  .object({\n    email: yup.string().email().required(),\n  })\n  .noUnknown();\n\nconst createResetPasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n\n      code: yup.string().required(),\n    })\n    .noUnknown();\n\nconst createChangePasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n      currentPassword: yup.string().required(),\n    })\n    .noUnknown();\n\nmodule.exports = {\n  validateCallbackBody: validateYupSchema(callbackSchema),\n  validateRegisterBody: (payload, config) =>\n    validateYupSchema(createRegisterSchema(config))(payload),\n  validateSendEmailConfirmationBody: validateYupSchema(sendEmailConfirmationSchema),\n  validateEmailConfirmationBody: validateYupSchema(validateEmailConfirmationSchema),\n  validateForgotPasswordBody: validateYupSchema(forgotPasswordSchema),\n  validateResetPasswordBody: (payload, config) =>\n    validateYupSchema(createResetPasswordSchema(config))(payload),\n  validateChangePasswordBody: (payload, config) =>\n    validateYupSchema(createChangePasswordSchema(config))(payload),\n};\n"],"names":["yup","validateYupSchema","require$$0","callbackSchema","object","identifier","string","required","password","createRegisterSchema","config","email","username","test","value","isValid","TextEncoder","encode","length","createError","message","validatePassword","error","sendEmailConfirmationSchema","validateEmailConfirmationSchema","confirmation","forgotPasswordSchema","noUnknown","createResetPasswordSchema","passwordConfirmation","oneOf","ref","code","createChangePasswordSchema","currentPassword","auth","validateCallbackBody","validateRegisterBody","payload","validateSendEmailConfirmationBody","validateEmailConfirmationBody","validateForgotPasswordBody","validateResetPasswordBody","validateChangePasswordBody"],"mappings":";;;;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,UAAAA;IAEnC,MAAMC,cAAAA,GAAiBH,GAAAA,CAAII,MAAM,CAAC;QAChCC,UAAAA,EAAYL,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;QACjCC,QAAAA,EAAUR,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,KAAA,CAAA;AAEA,IAAA,MAAME,oBAAAA,GAAuB,CAACC,MAAAA,GAC5BV,GAAAA,CAAII,MAAM,CAAC;AACTO,YAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ,EAAA;YACpCK,QAAAA,EAAUZ,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;YAC/BC,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AAClF,gBAAA;gBACQ,OAAO,IAAA;YACf,CAAA,CAAA,CACOP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAC9E,wBAAA;AACA,oBAAA,CAAA,CAAY,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACpF,oBAAA;AACA,gBAAA;gBACQ,OAAO,IAAA;AACf,YAAA,CAAA;AACA,SAAA,CAAA;IAEA,MAAMG,2BAAAA,GAA8BvB,GAAAA,CAAII,MAAM,CAAC;AAC7CO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACtC,KAAA,CAAA;IAEA,MAAMiB,+BAAAA,GAAkCxB,GAAAA,CAAII,MAAM,CAAC;QACjDqB,YAAAA,EAAczB,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACrC,KAAA,CAAA;IAEA,MAAMmB,oBAAAA,GAAuB1B,GAAAA,CAC1BI,MAAM,CAAC;AACNO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACxC,KAAA,CAAA,CACGoB,SAAS,EAAA;AAEZ,IAAA,MAAMC,yBAAAA,GAA4B,CAAClB,MAAAA,GACjCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAEhCC,IAAAA,EAAMhC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,SAAA,CAAA,CACKoB,SAAS,EAAA;AAEd,IAAA,MAAMM,0BAAAA,GAA6B,CAACvB,MAAAA,GAClCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAChCG,eAAAA,EAAiBlC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AAC5C,SAAA,CAAA,CACKoB,SAAS,EAAA;IAEdQ,IAAAA,GAAiB;AACfC,QAAAA,oBAAAA,EAAsBnC,iBAAAA,CAAkBE,cAAAA,CAAAA;AACxCkC,QAAAA,oBAAAA,EAAsB,CAACC,OAAAA,EAAS5B,MAAAA,GAC9BT,iBAAAA,CAAkBQ,qBAAqBC,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AAClDC,QAAAA,iCAAAA,EAAmCtC,iBAAAA,CAAkBsB,2BAAAA,CAAAA;AACrDiB,QAAAA,6BAAAA,EAA+BvC,iBAAAA,CAAkBuB,+BAAAA,CAAAA;AACjDiB,QAAAA,0BAAAA,EAA4BxC,iBAAAA,CAAkByB,oBAAAA,CAAAA;AAC9CgB,QAAAA,yBAAAA,EAA2B,CAACJ,OAAAA,EAAS5B,MAAAA,GACnCT,iBAAAA,CAAkB2B,0BAA0BlB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AACvDK,QAAAA,0BAAAA,EAA4B,CAACL,OAAAA,EAAS5B,MAAAA,GACpCT,iBAAAA,CAAkBgC,2BAA2BvB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA;AAC1D,KAAA;;;;;;"}
+{"version":3,"file":"auth.js","sources":["../../../../server/controllers/validation/auth.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst callbackSchema = yup.object({\n  identifier: yup.string().required(),\n  password: yup.string().required(),\n});\n\nconst createRegisterSchema = (config) =>\n  yup.object({\n    email: yup.string().email().required(),\n    username: yup.string().required(),\n    password: yup\n      .string()\n      .required()\n      .test(function (value) {\n        if (!value) return true;\n        const isValid = new TextEncoder().encode(value).length <= 72;\n        if (!isValid) {\n          return this.createError({ message: 'Password must be less than 73 bytes' });\n        }\n        return true;\n      })\n      .test(async function (value) {\n        if (typeof config?.validatePassword === 'function') {\n          try {\n            const isValid = await config.validatePassword(value);\n            if (!isValid) {\n              return this.createError({ message: 'Password validation failed.' });\n            }\n          } catch (error) {\n            return this.createError({ message: error.message || 'An error occurred.' });\n          }\n        }\n        return true;\n      }),\n  });\n\nconst sendEmailConfirmationSchema = yup.object({\n  email: yup.string().email().required(),\n});\n\nconst validateEmailConfirmationSchema = yup.object({\n  confirmation: yup.string().required(),\n});\n\nconst forgotPasswordSchema = yup\n  .object({\n    email: yup.string().email().required(),\n  })\n  .noUnknown();\n\nconst createResetPasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n\n      code: yup.string().required(),\n    })\n    .noUnknown();\n\nconst createChangePasswordSchema = (config) =>\n  yup\n    .object({\n      password: yup\n        .string()\n        .required()\n        .test(function (value) {\n          if (!value) return true;\n          const isValid = new TextEncoder().encode(value).length <= 72;\n          if (!isValid) {\n            return this.createError({ message: 'Password must be less than 73 bytes' });\n          }\n          return true;\n        })\n        .test(async function (value) {\n          if (typeof config?.validatePassword === 'function') {\n            try {\n              const isValid = await config.validatePassword(value);\n              if (!isValid) {\n                return this.createError({ message: 'Password validation failed.' });\n              }\n            } catch (error) {\n              return this.createError({ message: error.message || 'An error occurred.' });\n            }\n          }\n          return true;\n        }),\n      passwordConfirmation: yup\n        .string()\n        .required()\n        .oneOf([yup.ref('password')], 'Passwords do not match'),\n      currentPassword: yup.string().required(),\n    })\n    .noUnknown();\n\nmodule.exports = {\n  validateCallbackBody: validateYupSchema(callbackSchema),\n  validateRegisterBody: (payload, config) =>\n    validateYupSchema(createRegisterSchema(config))(payload),\n  validateSendEmailConfirmationBody: validateYupSchema(sendEmailConfirmationSchema),\n  validateEmailConfirmationBody: validateYupSchema(validateEmailConfirmationSchema),\n  validateForgotPasswordBody: validateYupSchema(forgotPasswordSchema),\n  validateResetPasswordBody: (payload, config) =>\n    validateYupSchema(createResetPasswordSchema(config))(payload),\n  validateChangePasswordBody: (payload, config) =>\n    validateYupSchema(createChangePasswordSchema(config))(payload),\n};\n"],"names":["yup","validateYupSchema","require$$0","callbackSchema","object","identifier","string","required","password","createRegisterSchema","config","email","username","test","value","isValid","TextEncoder","encode","length","createError","message","validatePassword","error","sendEmailConfirmationSchema","validateEmailConfirmationSchema","confirmation","forgotPasswordSchema","noUnknown","createResetPasswordSchema","passwordConfirmation","oneOf","ref","code","createChangePasswordSchema","currentPassword","auth","validateCallbackBody","validateRegisterBody","payload","validateSendEmailConfirmationBody","validateEmailConfirmationBody","validateForgotPasswordBody","validateResetPasswordBody","validateChangePasswordBody"],"mappings":";;;;;;;;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,2BAAAA;IAEnC,MAAMC,cAAAA,GAAiBH,GAAAA,CAAII,MAAM,CAAC;QAChCC,UAAAA,EAAYL,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;QACjCC,QAAAA,EAAUR,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,KAAA,CAAA;AAEA,IAAA,MAAME,oBAAAA,GAAuB,CAACC,MAAAA,GAC5BV,GAAAA,CAAII,MAAM,CAAC;AACTO,YAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ,EAAA;YACpCK,QAAAA,EAAUZ,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ,EAAA;YAC/BC,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AAClF,gBAAA;gBACQ,OAAO,IAAA;YACf,CAAA,CAAA,CACOP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAC9E,wBAAA;AACA,oBAAA,CAAA,CAAY,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACpF,oBAAA;AACA,gBAAA;gBACQ,OAAO,IAAA;AACf,YAAA,CAAA;AACA,SAAA,CAAA;IAEA,MAAMG,2BAAAA,GAA8BvB,GAAAA,CAAII,MAAM,CAAC;AAC7CO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACtC,KAAA,CAAA;IAEA,MAAMiB,+BAAAA,GAAkCxB,GAAAA,CAAII,MAAM,CAAC;QACjDqB,YAAAA,EAAczB,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACrC,KAAA,CAAA;IAEA,MAAMmB,oBAAAA,GAAuB1B,GAAAA,CAC1BI,MAAM,CAAC;AACNO,QAAAA,KAAAA,EAAOX,GAAAA,CAAIM,MAAM,EAAA,CAAGK,KAAK,GAAGJ,QAAQ;AACxC,KAAA,CAAA,CACGoB,SAAS,EAAA;AAEZ,IAAA,MAAMC,yBAAAA,GAA4B,CAAClB,MAAAA,GACjCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAEhCC,IAAAA,EAAMhC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AACjC,SAAA,CAAA,CACKoB,SAAS,EAAA;AAEd,IAAA,MAAMM,0BAAAA,GAA6B,CAACvB,MAAAA,GAClCV,GAAAA,CACGI,MAAM,CAAC;YACNI,QAAAA,EAAUR,GAAAA,CACPM,MAAM,EAAA,CACNC,QAAQ,GACRM,IAAI,CAAC,SAAUC,KAAK,EAAA;gBACnB,IAAI,CAACA,OAAO,OAAO,IAAA;AACnB,gBAAA,MAAMC,UAAU,IAAIC,WAAAA,EAAAA,CAAcC,MAAM,CAACH,KAAAA,CAAAA,CAAOI,MAAM,IAAI,EAAA;AAC1D,gBAAA,IAAI,CAACH,OAAAA,EAAS;oBACZ,OAAO,IAAI,CAACI,WAAW,CAAC;wBAAEC,OAAAA,EAAS;AAAqC,qBAAA,CAAA;AACpF,gBAAA;gBACU,OAAO,IAAA;YACjB,CAAA,CAAA,CACSP,IAAI,CAAC,eAAgBC,KAAK,EAAA;gBACzB,IAAI,OAAOJ,MAAAA,EAAQW,gBAAAA,KAAqB,UAAA,EAAY;oBAClD,IAAI;AACF,wBAAA,MAAMN,OAAAA,GAAU,MAAML,MAAAA,CAAOW,gBAAgB,CAACP,KAAAA,CAAAA;AAC9C,wBAAA,IAAI,CAACC,OAAAA,EAAS;4BACZ,OAAO,IAAI,CAACI,WAAW,CAAC;gCAAEC,OAAAA,EAAS;AAA6B,6BAAA,CAAA;AAChF,wBAAA;AACA,oBAAA,CAAA,CAAc,OAAOE,KAAAA,EAAO;wBACd,OAAO,IAAI,CAACH,WAAW,CAAC;4BAAEC,OAAAA,EAASE,KAAAA,CAAMF,OAAO,IAAI;AAAoB,yBAAA,CAAA;AACtF,oBAAA;AACA,gBAAA;gBACU,OAAO,IAAA;AACjB,YAAA,CAAA,CAAA;AACMS,YAAAA,oBAAAA,EAAsB7B,IACnBM,MAAM,EAAA,CACNC,QAAQ,EAAA,CACRuB,KAAK,CAAC;AAAC9B,gBAAAA,GAAAA,CAAI+B,GAAG,CAAC,UAAA;aAAY,EAAE,wBAAA,CAAA;YAChCG,eAAAA,EAAiBlC,GAAAA,CAAIM,MAAM,EAAA,CAAGC,QAAQ;AAC5C,SAAA,CAAA,CACKoB,SAAS,EAAA;IAEdQ,IAAAA,GAAiB;AACfC,QAAAA,oBAAAA,EAAsBnC,iBAAAA,CAAkBE,cAAAA,CAAAA;AACxCkC,QAAAA,oBAAAA,EAAsB,CAACC,OAAAA,EAAS5B,MAAAA,GAC9BT,iBAAAA,CAAkBQ,qBAAqBC,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AAClDC,QAAAA,iCAAAA,EAAmCtC,iBAAAA,CAAkBsB,2BAAAA,CAAAA;AACrDiB,QAAAA,6BAAAA,EAA+BvC,iBAAAA,CAAkBuB,+BAAAA,CAAAA;AACjDiB,QAAAA,0BAAAA,EAA4BxC,iBAAAA,CAAkByB,oBAAAA,CAAAA;AAC9CgB,QAAAA,yBAAAA,EAA2B,CAACJ,OAAAA,EAAS5B,MAAAA,GACnCT,iBAAAA,CAAkB2B,0BAA0BlB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA,CAAAA;AACvDK,QAAAA,0BAAAA,EAA4B,CAACL,OAAAA,EAAS5B,MAAAA,GACpCT,iBAAAA,CAAkBgC,2BAA2BvB,MAAAA,CAAAA,CAAAA,CAAS4B,OAAAA;AAC1D,KAAA;;;;;;"}

package/dist/server/controllers/validation/email-template.js

@@ -3,13 +3,18 @@
 var require$$0 = require('lodash/fp');
 var require$$1 = require('@strapi/utils');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
 var emailTemplate;
 var hasRequiredEmailTemplate;
 function requireEmailTemplate() {
     if (hasRequiredEmailTemplate) return emailTemplate;
     hasRequiredEmailTemplate = 1;
-    const { trim } = require$$0;
-    const { template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp } } = require$$1;
+    const { trim } = require$$0__default.default;
+    const { template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp } } = require$$1__default.default;
     const invalidPatternsRegexes = [
         // Ignore "evaluation" patterns: <% ... %>
         /<%[^=]([\s\S]*?)%>/m,

package/dist/server/controllers/validation/email-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-template.js","sources":["../../../../server/controllers/validation/email-template.js"],"sourcesContent":["'use strict';\n\nconst { trim } = require('lodash/fp');\nconst {\n  template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp },\n} = require('@strapi/utils');\n\nconst invalidPatternsRegexes = [\n  // Ignore \"evaluation\" patterns: <% ... %>\n  /<%[^=]([\\s\\S]*?)%>/m,\n  // Ignore basic string interpolations\n  /\\${([^{}]*)}/m,\n];\n\nconst authorizedKeys = [\n  'URL',\n  'ADMIN_URL',\n  'SERVER_URL',\n  'CODE',\n  'USER',\n  'USER.email',\n  'USER.username',\n  'TOKEN',\n];\n\nconst matchAll = (pattern, src) => {\n  const matches = [];\n  let match;\n\n  const regexPatternWithGlobal = RegExp(pattern, 'g');\n\n  // eslint-disable-next-line no-cond-assign\n  while ((match = regexPatternWithGlobal.exec(src))) {\n    const [, group] = match;\n\n    matches.push(trim(group));\n  }\n\n  return matches;\n};\n\nconst isValidEmailTemplate = (template) => {\n  // Check for known invalid patterns\n  for (const reg of invalidPatternsRegexes) {\n    if (reg.test(template)) {\n      return false;\n    }\n  }\n\n  const interpolation = {\n    // Strict interpolation pattern to match only valid groups\n    strict: createStrictInterpolationRegExp(authorizedKeys),\n    // Weak interpolation pattern to match as many group as possible.\n    loose: createLooseInterpolationRegExp(),\n  };\n\n  // Compute both strict & loose matches\n  const strictMatches = matchAll(interpolation.strict, template);\n  const looseMatches = matchAll(interpolation.loose, template);\n\n  // If we have more matches with the loose RegExp than with the strict one,\n  // then it means that at least one of the interpolation group is invalid\n  // Note: In the future, if we wanted to give more details for error formatting\n  // purposes, we could return the difference between the two arrays\n  if (looseMatches.length > strictMatches.length) {\n    return false;\n  }\n\n  return true;\n};\n\nmodule.exports = {\n  isValidEmailTemplate,\n};\n"],"names":["trim","require$$0","template","createLooseInterpolationRegExp","createStrictInterpolationRegExp","require$$1","invalidPatternsRegexes","authorizedKeys","matchAll","pattern","src","matches","match","regexPatternWithGlobal","RegExp","exec","group","push","isValidEmailTemplate","reg","test","interpolation","strict","loose","strictMatches","looseMatches","length","emailTemplate"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,IAAI,EAAE,GAAGC,UAAAA;IACjB,MAAM,EACJC,UAAU,EAAEC,8BAA8B,EAAEC,+BAA+B,EAAE,EAC9E,GAAGC,UAAAA;AAEJ,IAAA,MAAMC,sBAAAA,GAAyB;;AAE7B,QAAA,qBAAA;;AAEA,QAAA;AACD,KAAA;AAED,IAAA,MAAMC,cAAAA,GAAiB;AACrB,QAAA,KAAA;AACA,QAAA,WAAA;AACA,QAAA,YAAA;AACA,QAAA,MAAA;AACA,QAAA,MAAA;AACA,QAAA,YAAA;AACA,QAAA,eAAA;AACA,QAAA;AACD,KAAA;IAED,MAAMC,QAAAA,GAAW,CAACC,OAAAA,EAASC,GAAAA,GAAAA;AACzB,QAAA,MAAMC,UAAU,EAAE;QAClB,IAAIC,KAAAA;QAEJ,MAAMC,sBAAAA,GAAyBC,OAAOL,OAAAA,EAAS,GAAA,CAAA;;AAG/C,QAAA,MAAQG,KAAAA,GAAQC,sBAAAA,CAAuBE,IAAI,CAACL,GAAAA,CAAAA,CAAO;YACjD,MAAM,GAAGM,MAAM,GAAGJ,KAAAA;YAElBD,OAAAA,CAAQM,IAAI,CAACjB,IAAAA,CAAKgB,KAAAA,CAAAA,CAAAA;AACtB,QAAA;QAEE,OAAOL,OAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMO,uBAAuB,CAAChB,QAAAA,GAAAA;;QAE5B,KAAK,MAAMiB,OAAOb,sBAAAA,CAAwB;YACxC,IAAIa,GAAAA,CAAIC,IAAI,CAAClB,QAAAA,CAAAA,EAAW;gBACtB,OAAO,KAAA;AACb,YAAA;AACA,QAAA;AAEE,QAAA,MAAMmB,aAAAA,GAAgB;;AAEpBC,YAAAA,MAAAA,EAAQlB,+BAAAA,CAAgCG,cAAAA,CAAAA;;YAExCgB,KAAAA,EAAOpB,8BAAAA;AACX,SAAA;;AAGE,QAAA,MAAMqB,aAAAA,GAAgBhB,QAAAA,CAASa,aAAAA,CAAcC,MAAM,EAAEpB,QAAAA,CAAAA;AACrD,QAAA,MAAMuB,YAAAA,GAAejB,QAAAA,CAASa,aAAAA,CAAcE,KAAK,EAAErB,QAAAA,CAAAA;;;;;AAMnD,QAAA,IAAIuB,YAAAA,CAAaC,MAAM,GAAGF,aAAAA,CAAcE,MAAM,EAAE;YAC9C,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,IAAA;AACT,IAAA,CAAA;IAEAC,aAAAA,GAAiB;AACfT,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"email-template.js","sources":["../../../../server/controllers/validation/email-template.js"],"sourcesContent":["'use strict';\n\nconst { trim } = require('lodash/fp');\nconst {\n  template: { createLooseInterpolationRegExp, createStrictInterpolationRegExp },\n} = require('@strapi/utils');\n\nconst invalidPatternsRegexes = [\n  // Ignore \"evaluation\" patterns: <% ... %>\n  /<%[^=]([\\s\\S]*?)%>/m,\n  // Ignore basic string interpolations\n  /\\${([^{}]*)}/m,\n];\n\nconst authorizedKeys = [\n  'URL',\n  'ADMIN_URL',\n  'SERVER_URL',\n  'CODE',\n  'USER',\n  'USER.email',\n  'USER.username',\n  'TOKEN',\n];\n\nconst matchAll = (pattern, src) => {\n  const matches = [];\n  let match;\n\n  const regexPatternWithGlobal = RegExp(pattern, 'g');\n\n  // eslint-disable-next-line no-cond-assign\n  while ((match = regexPatternWithGlobal.exec(src))) {\n    const [, group] = match;\n\n    matches.push(trim(group));\n  }\n\n  return matches;\n};\n\nconst isValidEmailTemplate = (template) => {\n  // Check for known invalid patterns\n  for (const reg of invalidPatternsRegexes) {\n    if (reg.test(template)) {\n      return false;\n    }\n  }\n\n  const interpolation = {\n    // Strict interpolation pattern to match only valid groups\n    strict: createStrictInterpolationRegExp(authorizedKeys),\n    // Weak interpolation pattern to match as many group as possible.\n    loose: createLooseInterpolationRegExp(),\n  };\n\n  // Compute both strict & loose matches\n  const strictMatches = matchAll(interpolation.strict, template);\n  const looseMatches = matchAll(interpolation.loose, template);\n\n  // If we have more matches with the loose RegExp than with the strict one,\n  // then it means that at least one of the interpolation group is invalid\n  // Note: In the future, if we wanted to give more details for error formatting\n  // purposes, we could return the difference between the two arrays\n  if (looseMatches.length > strictMatches.length) {\n    return false;\n  }\n\n  return true;\n};\n\nmodule.exports = {\n  isValidEmailTemplate,\n};\n"],"names":["trim","require$$0","template","createLooseInterpolationRegExp","createStrictInterpolationRegExp","require$$1","invalidPatternsRegexes","authorizedKeys","matchAll","pattern","src","matches","match","regexPatternWithGlobal","RegExp","exec","group","push","isValidEmailTemplate","reg","test","interpolation","strict","loose","strictMatches","looseMatches","length","emailTemplate"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,IAAI,EAAE,GAAGC,2BAAAA;IACjB,MAAM,EACJC,UAAU,EAAEC,8BAA8B,EAAEC,+BAA+B,EAAE,EAC9E,GAAGC,2BAAAA;AAEJ,IAAA,MAAMC,sBAAAA,GAAyB;;AAE7B,QAAA,qBAAA;;AAEA,QAAA;AACD,KAAA;AAED,IAAA,MAAMC,cAAAA,GAAiB;AACrB,QAAA,KAAA;AACA,QAAA,WAAA;AACA,QAAA,YAAA;AACA,QAAA,MAAA;AACA,QAAA,MAAA;AACA,QAAA,YAAA;AACA,QAAA,eAAA;AACA,QAAA;AACD,KAAA;IAED,MAAMC,QAAAA,GAAW,CAACC,OAAAA,EAASC,GAAAA,GAAAA;AACzB,QAAA,MAAMC,UAAU,EAAE;QAClB,IAAIC,KAAAA;QAEJ,MAAMC,sBAAAA,GAAyBC,OAAOL,OAAAA,EAAS,GAAA,CAAA;;AAG/C,QAAA,MAAQG,KAAAA,GAAQC,sBAAAA,CAAuBE,IAAI,CAACL,GAAAA,CAAAA,CAAO;YACjD,MAAM,GAAGM,MAAM,GAAGJ,KAAAA;YAElBD,OAAAA,CAAQM,IAAI,CAACjB,IAAAA,CAAKgB,KAAAA,CAAAA,CAAAA;AACtB,QAAA;QAEE,OAAOL,OAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMO,uBAAuB,CAAChB,QAAAA,GAAAA;;QAE5B,KAAK,MAAMiB,OAAOb,sBAAAA,CAAwB;YACxC,IAAIa,GAAAA,CAAIC,IAAI,CAAClB,QAAAA,CAAAA,EAAW;gBACtB,OAAO,KAAA;AACb,YAAA;AACA,QAAA;AAEE,QAAA,MAAMmB,aAAAA,GAAgB;;AAEpBC,YAAAA,MAAAA,EAAQlB,+BAAAA,CAAgCG,cAAAA,CAAAA;;YAExCgB,KAAAA,EAAOpB,8BAAAA;AACX,SAAA;;AAGE,QAAA,MAAMqB,aAAAA,GAAgBhB,QAAAA,CAASa,aAAAA,CAAcC,MAAM,EAAEpB,QAAAA,CAAAA;AACrD,QAAA,MAAMuB,YAAAA,GAAejB,QAAAA,CAASa,aAAAA,CAAcE,KAAK,EAAErB,QAAAA,CAAAA;;;;;AAMnD,QAAA,IAAIuB,YAAAA,CAAaC,MAAM,GAAGF,aAAAA,CAAcE,MAAM,EAAE;YAC9C,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,IAAA;AACT,IAAA,CAAA;IAEAC,aAAAA,GAAiB;AACfT,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/controllers/validation/user.js

@@ -2,12 +2,16 @@
 
 var require$$1 = require('@strapi/utils');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
 var user;
 var hasRequiredUser;
 function requireUser() {
     if (hasRequiredUser) return user;
     hasRequiredUser = 1;
-    const { yup, validateYupSchema } = require$$1;
+    const { yup, validateYupSchema } = require$$1__default.default;
     const deleteRoleSchema = yup.object().shape({
         role: yup.strapiID().required()
     });

package/dist/server/controllers/validation/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sources":["../../../../server/controllers/validation/user.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst deleteRoleSchema = yup.object().shape({\n  role: yup.strapiID().required(),\n});\n\nconst createUserBodySchema = yup.object().shape({\n  email: yup.string().email().required(),\n  username: yup.string().min(1).required(),\n  password: yup.string().min(1).required(),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup\n          .object()\n          .shape({\n            connect: yup\n              .array()\n              .of(yup.object().shape({ id: yup.strapiID().required() }))\n              .min(1, 'Users must have a role')\n              .required(),\n          })\n          .required()\n      : yup.strapiID().required()\n  ),\n});\n\nconst updateUserBodySchema = yup.object().shape({\n  email: yup.string().email().min(1),\n  username: yup.string().min(1),\n  password: yup\n    .mixed()\n    .test(\n      'password-validation',\n      'Password must be at least 1 character',\n      function validatePassword(value) {\n        if (value == null || value === '') {\n          return true;\n        }\n        return typeof value === 'string' && value.length >= 1;\n      }\n    ),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup.object().shape({\n          connect: yup\n            .array()\n            .of(yup.object().shape({ id: yup.strapiID().required() }))\n            .required(),\n          disconnect: yup\n            .array()\n            .test('CheckDisconnect', 'Cannot remove role', function test(disconnectValue) {\n              if (value.connect.length === 0 && disconnectValue.length > 0) {\n                return false;\n              }\n\n              return true;\n            })\n            .required(),\n        })\n      : yup.strapiID()\n  ),\n});\n\nmodule.exports = {\n  validateCreateUserBody: validateYupSchema(createUserBodySchema),\n  validateUpdateUserBody: validateYupSchema(updateUserBodySchema),\n  validateDeleteRoleBody: validateYupSchema(deleteRoleSchema),\n};\n"],"names":["yup","validateYupSchema","require$$0","deleteRoleSchema","object","shape","role","strapiID","required","createUserBodySchema","email","string","username","min","password","lazy","value","connect","array","of","id","updateUserBodySchema","mixed","test","validatePassword","length","disconnect","disconnectValue","user","validateCreateUserBody","validateUpdateUserBody","validateDeleteRoleBody"],"mappings":";;;;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,UAAAA;AAEnC,IAAA,MAAMC,gBAAAA,GAAmBH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;QAC1CC,IAAAA,EAAMN,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAC/B,KAAA,CAAA;AAEA,IAAA,MAAMC,oBAAAA,GAAuBT,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CK,QAAAA,KAAAA,EAAOV,GAAAA,CAAIW,MAAM,EAAA,CAAGD,KAAK,GAAGF,QAAQ,EAAA;AACpCI,QAAAA,QAAAA,EAAUZ,IAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGL,QAAQ,EAAA;AACtCM,QAAAA,QAAAA,EAAUd,IAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGL,QAAQ,EAAA;AACtCF,QAAAA,IAAAA,EAAMN,GAAAA,CAAIe,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbhB,GAAAA,CACGI,MAAM,EAAA,CACNC,KAAK,CAAC;gBACLY,OAAAA,EAASjB,GAAAA,CACNkB,KAAK,EAAA,CACLC,EAAE,CAACnB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;oBAAEe,EAAAA,EAAIpB,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAAE,iBAAA,CAAA,CAAA,CACrDK,GAAG,CAAC,CAAA,EAAG,wBAAA,CAAA,CACPL,QAAQ;AACvB,aAAA,CAAA,CACWA,QAAQ,EAAA,GACXR,GAAAA,CAAIO,QAAQ,GAAGC,QAAQ,EAAA;AAE/B,KAAA,CAAA;AAEA,IAAA,MAAMa,oBAAAA,GAAuBrB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CK,QAAAA,KAAAA,EAAOV,IAAIW,MAAM,EAAA,CAAGD,KAAK,EAAA,CAAGG,GAAG,CAAC,CAAA,CAAA;AAChCD,QAAAA,QAAAA,EAAUZ,GAAAA,CAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,CAAA,CAAA;QAC3BC,QAAAA,EAAUd,GAAAA,CACPsB,KAAK,EAAA,CACLC,IAAI,CACH,qBAAA,EACA,uCAAA,EACA,SAASC,gBAAAA,CAAiBR,KAAK,EAAA;YAC7B,IAAIA,KAAAA,IAAS,IAAA,IAAQA,KAAAA,KAAU,EAAA,EAAI;gBACjC,OAAO,IAAA;AACjB,YAAA;AACQ,YAAA,OAAO,OAAOA,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMS,MAAM,IAAI,CAAA;AAC5D,QAAA,CAAA,CAAA;AAEEnB,QAAAA,IAAAA,EAAMN,GAAAA,CAAIe,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbhB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;gBACjBY,OAAAA,EAASjB,GAAAA,CACNkB,KAAK,EAAA,CACLC,EAAE,CAACnB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;oBAAEe,EAAAA,EAAIpB,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAAE,iBAAA,CAAA,CAAA,CACrDA,QAAQ,EAAA;gBACXkB,UAAAA,EAAY1B,GAAAA,CACTkB,KAAK,EAAA,CACLK,IAAI,CAAC,iBAAA,EAAmB,oBAAA,EAAsB,SAASA,IAAAA,CAAKI,eAAe,EAAA;oBAC1E,IAAIX,KAAAA,CAAMC,OAAO,CAACQ,MAAM,KAAK,CAAA,IAAKE,eAAAA,CAAgBF,MAAM,GAAG,CAAA,EAAG;wBAC5D,OAAO,KAAA;AACvB,oBAAA;oBAEc,OAAO,IAAA;AACrB,gBAAA,CAAA,CAAA,CACajB,QAAQ;AACrB,aAAA,CAAA,GACQR,IAAIO,QAAQ,EAAA;AAEpB,KAAA,CAAA;IAEAqB,IAAAA,GAAiB;AACfC,QAAAA,sBAAAA,EAAwB5B,iBAAAA,CAAkBQ,oBAAAA,CAAAA;AAC1CqB,QAAAA,sBAAAA,EAAwB7B,iBAAAA,CAAkBoB,oBAAAA,CAAAA;AAC1CU,QAAAA,sBAAAA,EAAwB9B,iBAAAA,CAAkBE,gBAAAA;AAC5C,KAAA;;;;;;"}
+{"version":3,"file":"user.js","sources":["../../../../server/controllers/validation/user.js"],"sourcesContent":["'use strict';\n\nconst { yup, validateYupSchema } = require('@strapi/utils');\n\nconst deleteRoleSchema = yup.object().shape({\n  role: yup.strapiID().required(),\n});\n\nconst createUserBodySchema = yup.object().shape({\n  email: yup.string().email().required(),\n  username: yup.string().min(1).required(),\n  password: yup.string().min(1).required(),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup\n          .object()\n          .shape({\n            connect: yup\n              .array()\n              .of(yup.object().shape({ id: yup.strapiID().required() }))\n              .min(1, 'Users must have a role')\n              .required(),\n          })\n          .required()\n      : yup.strapiID().required()\n  ),\n});\n\nconst updateUserBodySchema = yup.object().shape({\n  email: yup.string().email().min(1),\n  username: yup.string().min(1),\n  password: yup\n    .mixed()\n    .test(\n      'password-validation',\n      'Password must be at least 1 character',\n      function validatePassword(value) {\n        if (value == null || value === '') {\n          return true;\n        }\n        return typeof value === 'string' && value.length >= 1;\n      }\n    ),\n  role: yup.lazy((value) =>\n    typeof value === 'object'\n      ? yup.object().shape({\n          connect: yup\n            .array()\n            .of(yup.object().shape({ id: yup.strapiID().required() }))\n            .required(),\n          disconnect: yup\n            .array()\n            .test('CheckDisconnect', 'Cannot remove role', function test(disconnectValue) {\n              if (value.connect.length === 0 && disconnectValue.length > 0) {\n                return false;\n              }\n\n              return true;\n            })\n            .required(),\n        })\n      : yup.strapiID()\n  ),\n});\n\nmodule.exports = {\n  validateCreateUserBody: validateYupSchema(createUserBodySchema),\n  validateUpdateUserBody: validateYupSchema(updateUserBodySchema),\n  validateDeleteRoleBody: validateYupSchema(deleteRoleSchema),\n};\n"],"names":["yup","validateYupSchema","require$$0","deleteRoleSchema","object","shape","role","strapiID","required","createUserBodySchema","email","string","username","min","password","lazy","value","connect","array","of","id","updateUserBodySchema","mixed","test","validatePassword","length","disconnect","disconnectValue","user","validateCreateUserBody","validateUpdateUserBody","validateDeleteRoleBody"],"mappings":";;;;;;;;;;;;;AAEA,IAAA,MAAM,EAAEA,GAAG,EAAEC,iBAAiB,EAAE,GAAGC,2BAAAA;AAEnC,IAAA,MAAMC,gBAAAA,GAAmBH,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;QAC1CC,IAAAA,EAAMN,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAC/B,KAAA,CAAA;AAEA,IAAA,MAAMC,oBAAAA,GAAuBT,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CK,QAAAA,KAAAA,EAAOV,GAAAA,CAAIW,MAAM,EAAA,CAAGD,KAAK,GAAGF,QAAQ,EAAA;AACpCI,QAAAA,QAAAA,EAAUZ,IAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGL,QAAQ,EAAA;AACtCM,QAAAA,QAAAA,EAAUd,IAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,GAAGL,QAAQ,EAAA;AACtCF,QAAAA,IAAAA,EAAMN,GAAAA,CAAIe,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbhB,GAAAA,CACGI,MAAM,EAAA,CACNC,KAAK,CAAC;gBACLY,OAAAA,EAASjB,GAAAA,CACNkB,KAAK,EAAA,CACLC,EAAE,CAACnB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;oBAAEe,EAAAA,EAAIpB,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAAE,iBAAA,CAAA,CAAA,CACrDK,GAAG,CAAC,CAAA,EAAG,wBAAA,CAAA,CACPL,QAAQ;AACvB,aAAA,CAAA,CACWA,QAAQ,EAAA,GACXR,GAAAA,CAAIO,QAAQ,GAAGC,QAAQ,EAAA;AAE/B,KAAA,CAAA;AAEA,IAAA,MAAMa,oBAAAA,GAAuBrB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;AAC9CK,QAAAA,KAAAA,EAAOV,IAAIW,MAAM,EAAA,CAAGD,KAAK,EAAA,CAAGG,GAAG,CAAC,CAAA,CAAA;AAChCD,QAAAA,QAAAA,EAAUZ,GAAAA,CAAIW,MAAM,EAAA,CAAGE,GAAG,CAAC,CAAA,CAAA;QAC3BC,QAAAA,EAAUd,GAAAA,CACPsB,KAAK,EAAA,CACLC,IAAI,CACH,qBAAA,EACA,uCAAA,EACA,SAASC,gBAAAA,CAAiBR,KAAK,EAAA;YAC7B,IAAIA,KAAAA,IAAS,IAAA,IAAQA,KAAAA,KAAU,EAAA,EAAI;gBACjC,OAAO,IAAA;AACjB,YAAA;AACQ,YAAA,OAAO,OAAOA,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMS,MAAM,IAAI,CAAA;AAC5D,QAAA,CAAA,CAAA;AAEEnB,QAAAA,IAAAA,EAAMN,GAAAA,CAAIe,IAAI,CAAC,CAACC,KAAAA,GACd,OAAOA,KAAAA,KAAU,QAAA,GACbhB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;gBACjBY,OAAAA,EAASjB,GAAAA,CACNkB,KAAK,EAAA,CACLC,EAAE,CAACnB,GAAAA,CAAII,MAAM,EAAA,CAAGC,KAAK,CAAC;oBAAEe,EAAAA,EAAIpB,GAAAA,CAAIO,QAAQ,EAAA,CAAGC,QAAQ;AAAE,iBAAA,CAAA,CAAA,CACrDA,QAAQ,EAAA;gBACXkB,UAAAA,EAAY1B,GAAAA,CACTkB,KAAK,EAAA,CACLK,IAAI,CAAC,iBAAA,EAAmB,oBAAA,EAAsB,SAASA,IAAAA,CAAKI,eAAe,EAAA;oBAC1E,IAAIX,KAAAA,CAAMC,OAAO,CAACQ,MAAM,KAAK,CAAA,IAAKE,eAAAA,CAAgBF,MAAM,GAAG,CAAA,EAAG;wBAC5D,OAAO,KAAA;AACvB,oBAAA;oBAEc,OAAO,IAAA;AACrB,gBAAA,CAAA,CAAA,CACajB,QAAQ;AACrB,aAAA,CAAA,GACQR,IAAIO,QAAQ,EAAA;AAEpB,KAAA,CAAA;IAEAqB,IAAAA,GAAiB;AACfC,QAAAA,sBAAAA,EAAwB5B,iBAAAA,CAAkBQ,oBAAAA,CAAAA;AAC1CqB,QAAAA,sBAAAA,EAAwB7B,iBAAAA,CAAkBoB,oBAAAA,CAAAA;AAC1CU,QAAAA,sBAAAA,EAAwB9B,iBAAAA,CAAkBE,gBAAAA;AAC5C,KAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/change-password.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var changePassword;
 var hasRequiredChangePassword;
 function requireChangePassword() {
     if (hasRequiredChangePassword) return changePassword;
     hasRequiredChangePassword = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     changePassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/change-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"change-password.js","sources":["../../../../../server/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","changePassword","nexus","strapi","nonNull","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBH,OAAAA,CAAQ,QAAA,CAAA;AACzBI,gBAAAA,QAAAA,EAAUJ,OAAAA,CAAQ,QAAA,CAAA;AAClBK,gBAAAA,oBAAAA,EAAsBL,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIM,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACa,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"change-password.js","sources":["../../../../../server/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","changePassword","nexus","strapi","nonNull","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBH,OAAAA,CAAQ,QAAA,CAAA;AACzBI,gBAAAA,QAAAA,EAAUJ,OAAAA,CAAQ,QAAA,CAAA;AAClBK,gBAAAA,oBAAAA,EAAsBL,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIM,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACa,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/email-confirmation.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var emailConfirmation;
 var hasRequiredEmailConfirmation;
 function requireEmailConfirmation() {
     if (hasRequiredEmailConfirmation) return emailConfirmation;
     hasRequiredEmailConfirmation = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     emailConfirmation = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/email-confirmation.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-confirmation.js","sources":["../../../../../server/graphql/mutations/auth/email-confirmation.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      confirmation: nonNull('String'),\n    },\n\n    description: 'Confirm an email users email address',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.query = toPlainObject(args);\n\n      await strapi\n        .plugin('users-permissions')\n        .controller('auth')\n        .emailConfirmation(koaContext, null, true);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","emailConfirmation","nexus","strapi","nonNull","type","args","confirmation","description","resolve","parent","context","koaContext","query","plugin","controller","output","body","user","jwt"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,YAAAA,EAAcH,OAAAA,CAAQ,QAAA;AAC5B,aAAA;YAEII,WAAAA,EAAa,sCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvBC,UAAAA,CAAWC,KAAK,GAAGhB,aAAAA,CAAcS,IAAAA,CAAAA;gBAEjC,MAAMH,MAAAA,CACHW,MAAM,CAAC,mBAAA,CAAA,CACPC,UAAU,CAAC,MAAA,CAAA,CACXd,iBAAiB,CAACW,UAAAA,EAAY,IAAA,EAAM,IAAA,CAAA;gBAEvC,MAAMI,MAAAA,GAASJ,WAAWK,IAAI;gBAE9BlB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLE,IAAAA,EAAMF,MAAAA,CAAOE,IAAI,IAAIF,MAAAA;AACrBG,oBAAAA,GAAAA,EAAKH,OAAOG;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"email-confirmation.js","sources":["../../../../../server/graphql/mutations/auth/email-confirmation.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      confirmation: nonNull('String'),\n    },\n\n    description: 'Confirm an email users email address',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.query = toPlainObject(args);\n\n      await strapi\n        .plugin('users-permissions')\n        .controller('auth')\n        .emailConfirmation(koaContext, null, true);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","emailConfirmation","nexus","strapi","nonNull","type","args","confirmation","description","resolve","parent","context","koaContext","query","plugin","controller","output","body","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,iBAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,YAAAA,EAAcH,OAAAA,CAAQ,QAAA;AAC5B,aAAA;YAEII,WAAAA,EAAa,sCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvBC,UAAAA,CAAWC,KAAK,GAAGhB,aAAAA,CAAcS,IAAAA,CAAAA;gBAEjC,MAAMH,MAAAA,CACHW,MAAM,CAAC,mBAAA,CAAA,CACPC,UAAU,CAAC,MAAA,CAAA,CACXd,iBAAiB,CAACW,UAAAA,EAAY,IAAA,EAAM,IAAA,CAAA;gBAEvC,MAAMI,MAAAA,GAASJ,WAAWK,IAAI;gBAE9BlB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLE,IAAAA,EAAMF,MAAAA,CAAOE,IAAI,IAAIF,MAAAA;AACrBG,oBAAAA,GAAAA,EAAKH,OAAOG;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/forgot-password.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var forgotPassword;
 var hasRequiredForgotPassword;
 function requireForgotPassword() {
     if (hasRequiredForgotPassword) return forgotPassword;
     hasRequiredForgotPassword = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     forgotPassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/forgot-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.js","sources":["../../../../../server/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","forgotPassword","nexus","strapi","nonNull","type","args","email","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","ok"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,cAAc,CAACW,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,EAAAA,EAAID,MAAAA,CAAOC,EAAE,IAAID;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"forgot-password.js","sources":["../../../../../server/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","forgotPassword","nexus","strapi","nonNull","type","args","email","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","ok"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,cAAc,CAACW,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,EAAAA,EAAID,MAAAA,CAAOC,EAAE,IAAID;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/login.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var login;
 var hasRequiredLogin;
 function requireLogin() {
     if (hasRequiredLogin) return login;
     hasRequiredLogin = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     login = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sources":["../../../../../server/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { provider: args.input.provider };\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').callback(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","login","nexus","strapi","nonNull","type","args","input","resolve","parent","context","koaContext","params","provider","request","body","plugin","controller","callback","output","user","jwt"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMI,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;oBAAEC,QAAAA,EAAUP,IAAAA,CAAKC,KAAK,CAACM;;AAC3CF,gBAAAA,UAAAA,CAAWG,OAAO,CAACC,IAAI,GAAGlB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOa,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACP,UAAAA,CAAAA;gBAErE,MAAMQ,MAAAA,GAASR,WAAWI,IAAI;gBAE9BhB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"login.js","sources":["../../../../../server/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { provider: args.input.provider };\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').callback(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","login","nexus","strapi","nonNull","type","args","input","resolve","parent","context","koaContext","params","provider","request","body","plugin","controller","callback","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMI,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;oBAAEC,QAAAA,EAAUP,IAAAA,CAAKC,KAAK,CAACM;;AAC3CF,gBAAAA,UAAAA,CAAWG,OAAO,CAACC,IAAI,GAAGlB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOa,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACP,UAAAA,CAAAA;gBAErE,MAAMQ,MAAAA,GAASR,WAAWI,IAAI;gBAE9BhB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/register.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var register;
 var hasRequiredRegister;
 function requireRegister() {
     if (hasRequiredRegister) return register;
     hasRequiredRegister = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     register = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sources":["../../../../../server/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').register(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","register","nexus","strapi","nonNull","type","args","input","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,QAAQ,CAACW,UAAAA,CAAAA;gBAErE,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register.js","sources":["../../../../../server/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').register(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","register","nexus","strapi","nonNull","type","args","input","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,QAAQ,CAACW,UAAAA,CAAAA;gBAErE,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/reset-password.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var resetPassword;
 var hasRequiredResetPassword;
 function requireResetPassword() {
     if (hasRequiredResetPassword) return resetPassword;
     hasRequiredResetPassword = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     resetPassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;

package/dist/server/graphql/mutations/auth/reset-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.js","sources":["../../../../../server/graphql/mutations/auth/reset-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n      code: nonNull('String'),\n    },\n\n    description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').resetPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","resetPassword","nexus","strapi","nonNull","type","args","password","passwordConfirmation","code","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,QAAAA,EAAUH,OAAAA,CAAQ,QAAA,CAAA;AAClBI,gBAAAA,oBAAAA,EAAsBJ,OAAAA,CAAQ,QAAA,CAAA;AAC9BK,gBAAAA,IAAAA,EAAML,OAAAA,CAAQ,QAAA;AACpB,aAAA;YAEIM,WAAAA,EAAa,2EAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,aAAa,CAACa,UAAAA,CAAAA;gBAE1E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"reset-password.js","sources":["../../../../../server/graphql/mutations/auth/reset-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n      code: nonNull('String'),\n    },\n\n    description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').resetPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","resetPassword","nexus","strapi","nonNull","type","args","password","passwordConfirmation","code","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,QAAAA,EAAUH,OAAAA,CAAQ,QAAA,CAAA;AAClBI,gBAAAA,oBAAAA,EAAsBJ,OAAAA,CAAQ,QAAA,CAAA;AAC9BK,gBAAAA,IAAAA,EAAML,OAAAA,CAAQ,QAAA;AACpB,aAAA;YAEIM,WAAAA,EAAa,2EAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,aAAa,CAACa,UAAAA,CAAAA;gBAE1E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/crud/role/create-role.js

@@ -2,12 +2,16 @@
 
 var require$$0 = require('lodash/fp');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var createRole;
 var hasRequiredCreateRole;
 function requireCreateRole() {
     if (hasRequiredCreateRole) return createRole;
     hasRequiredCreateRole = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const usersPermissionsRoleUID = 'plugin::users-permissions.role';
     createRole = ({ nexus, strapi })=>{
         const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;

package/dist/server/graphql/mutations/crud/role/create-role.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-role.js","sources":["../../../../../../server/graphql/mutations/crud/role/create-role.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst usersPermissionsRoleUID = 'plugin::users-permissions.role';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n  const { nonNull } = nexus;\n\n  const roleContentType = strapi.getModel(usersPermissionsRoleUID);\n\n  const roleInputName = getContentTypeInputName(roleContentType);\n\n  return {\n    type: 'UsersPermissionsCreateRolePayload',\n\n    args: {\n      data: nonNull(roleInputName),\n    },\n\n    description: 'Create a new role',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('role').createRole(koaContext);\n\n      return { ok: true };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","usersPermissionsRoleUID","createRole","nexus","strapi","getContentTypeInputName","plugin","service","naming","nonNull","roleContentType","getModel","roleInputName","type","args","data","description","resolve","parent","context","koaContext","request","body","controller","ok"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;AAE1B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QACpF,MAAM,EAAEC,OAAO,EAAE,GAAGN,KAAAA;QAEpB,MAAMO,eAAAA,GAAkBN,MAAAA,CAAOO,QAAQ,CAACV,uBAAAA,CAAAA;AAExC,QAAA,MAAMW,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;QAE9C,OAAO;YACLG,IAAAA,EAAM,mCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,IAAAA,EAAMN,OAAAA,CAAQG,aAAAA;AACpB,aAAA;YAEII,WAAAA,EAAa,mBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGvB,aAAAA,CAAce,KAAKC,IAAI,CAAA;gBAEjD,MAAMX,MAAAA,CAAOE,MAAM,CAAC,mBAAA,CAAA,CAAqBiB,UAAU,CAAC,MAAA,CAAA,CAAQrB,UAAU,CAACkB,UAAAA,CAAAA;gBAEvE,OAAO;oBAAEI,EAAAA,EAAI;;AACnB,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"create-role.js","sources":["../../../../../../server/graphql/mutations/crud/role/create-role.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst usersPermissionsRoleUID = 'plugin::users-permissions.role';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { getContentTypeInputName } = strapi.plugin('graphql').service('utils').naming;\n  const { nonNull } = nexus;\n\n  const roleContentType = strapi.getModel(usersPermissionsRoleUID);\n\n  const roleInputName = getContentTypeInputName(roleContentType);\n\n  return {\n    type: 'UsersPermissionsCreateRolePayload',\n\n    args: {\n      data: nonNull(roleInputName),\n    },\n\n    description: 'Create a new role',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('role').createRole(koaContext);\n\n      return { ok: true };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","usersPermissionsRoleUID","createRole","nexus","strapi","getContentTypeInputName","plugin","service","naming","nonNull","roleContentType","getModel","roleInputName","type","args","data","description","resolve","parent","context","koaContext","request","body","controller","ok"],"mappings":";;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;AAE1B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,uBAAuB,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWC,OAAO,CAAC,OAAA,CAAA,CAASC,MAAM;QACpF,MAAM,EAAEC,OAAO,EAAE,GAAGN,KAAAA;QAEpB,MAAMO,eAAAA,GAAkBN,MAAAA,CAAOO,QAAQ,CAACV,uBAAAA,CAAAA;AAExC,QAAA,MAAMW,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;QAE9C,OAAO;YACLG,IAAAA,EAAM,mCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,IAAAA,EAAMN,OAAAA,CAAQG,aAAAA;AACpB,aAAA;YAEII,WAAAA,EAAa,mBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGvB,aAAAA,CAAce,KAAKC,IAAI,CAAA;gBAEjD,MAAMX,MAAAA,CAAOE,MAAM,CAAC,mBAAA,CAAA,CAAqBiB,UAAU,CAAC,MAAA,CAAA,CAAQrB,UAAU,CAACkB,UAAAA,CAAAA;gBAEvE,OAAO;oBAAEI,EAAAA,EAAI;;AACnB,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/crud/user/create-user.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var createUser;
 var hasRequiredCreateUser;
 function requireCreateUser() {
     if (hasRequiredCreateUser) return createUser;
     hasRequiredCreateUser = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     const usersPermissionsUserUID = 'plugin::users-permissions.user';
     createUser = ({ nexus, strapi })=>{

package/dist/server/graphql/mutations/crud/user/create-user.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-user.js","sources":["../../../../../../server/graphql/mutations/crud/user/create-user.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../../utils');\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const { getContentTypeInputName, getEntityResponseName } = strapi\n    .plugin('graphql')\n    .service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n\n  const userInputName = getContentTypeInputName(userContentType);\n  const responseName = getEntityResponseName(userContentType);\n\n  return {\n    type: nonNull(responseName),\n\n    args: {\n      data: nonNull(userInputName),\n    },\n\n    description: 'Create a new user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = {};\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('user').create(koaContext);\n\n      checkBadRequest(koaContext.body);\n\n      return {\n        value: koaContext.body,\n        info: { args, resourceUID: 'plugin::users-permissions.user' },\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","usersPermissionsUserUID","createUser","nexus","strapi","nonNull","getContentTypeInputName","getEntityResponseName","plugin","service","naming","userContentType","getModel","userInputName","responseName","type","args","data","description","resolve","parent","context","koaContext","params","request","body","controller","create","value","info","resourceUID"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;AACpB,QAAA,MAAM,EAAEG,uBAAuB,EAAEC,qBAAqB,EAAE,GAAGH,MAAAA,CACxDI,MAAM,CAAC,SAAA,CAAA,CACPC,OAAO,CAAC,SAASC,MAAM;QAE1B,MAAMC,eAAAA,GAAkBP,MAAAA,CAAOQ,QAAQ,CAACX,uBAAAA,CAAAA;AAExC,QAAA,MAAMY,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;AAC9C,QAAA,MAAMG,eAAeP,qBAAAA,CAAsBI,eAAAA,CAAAA;QAE3C,OAAO;AACLI,YAAAA,IAAAA,EAAMV,OAAAA,CAAQS,YAAAA,CAAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,IAAAA,EAAMZ,OAAAA,CAAQQ,aAAAA;AACpB,aAAA;YAEIK,WAAAA,EAAa,mBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvBC,UAAAA,CAAWC,MAAM,GAAG;AACpBD,gBAAAA,UAAAA,CAAWE,OAAO,CAACC,IAAI,GAAG5B,aAAAA,CAAcmB,KAAKC,IAAI,CAAA;gBAEjD,MAAMb,MAAAA,CAAOI,MAAM,CAAC,mBAAA,CAAA,CAAqBkB,UAAU,CAAC,MAAA,CAAA,CAAQC,MAAM,CAACL,UAAAA,CAAAA;AAEnEvB,gBAAAA,eAAAA,CAAgBuB,WAAWG,IAAI,CAAA;gBAE/B,OAAO;AACLG,oBAAAA,KAAAA,EAAON,WAAWG,IAAI;oBACtBI,IAAAA,EAAM;AAAEb,wBAAAA,IAAAA;wBAAMc,WAAAA,EAAa;AAAgC;AACnE,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"create-user.js","sources":["../../../../../../server/graphql/mutations/crud/user/create-user.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../../utils');\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const { getContentTypeInputName, getEntityResponseName } = strapi\n    .plugin('graphql')\n    .service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n\n  const userInputName = getContentTypeInputName(userContentType);\n  const responseName = getEntityResponseName(userContentType);\n\n  return {\n    type: nonNull(responseName),\n\n    args: {\n      data: nonNull(userInputName),\n    },\n\n    description: 'Create a new user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = {};\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('user').create(koaContext);\n\n      checkBadRequest(koaContext.body);\n\n      return {\n        value: koaContext.body,\n        info: { args, resourceUID: 'plugin::users-permissions.user' },\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","usersPermissionsUserUID","createUser","nexus","strapi","nonNull","getContentTypeInputName","getEntityResponseName","plugin","service","naming","userContentType","getModel","userInputName","responseName","type","args","data","description","resolve","parent","context","koaContext","params","request","body","controller","create","value","info","resourceUID"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;AACpB,QAAA,MAAM,EAAEG,uBAAuB,EAAEC,qBAAqB,EAAE,GAAGH,MAAAA,CACxDI,MAAM,CAAC,SAAA,CAAA,CACPC,OAAO,CAAC,SAASC,MAAM;QAE1B,MAAMC,eAAAA,GAAkBP,MAAAA,CAAOQ,QAAQ,CAACX,uBAAAA,CAAAA;AAExC,QAAA,MAAMY,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;AAC9C,QAAA,MAAMG,eAAeP,qBAAAA,CAAsBI,eAAAA,CAAAA;QAE3C,OAAO;AACLI,YAAAA,IAAAA,EAAMV,OAAAA,CAAQS,YAAAA,CAAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,IAAAA,EAAMZ,OAAAA,CAAQQ,aAAAA;AACpB,aAAA;YAEIK,WAAAA,EAAa,mBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvBC,UAAAA,CAAWC,MAAM,GAAG;AACpBD,gBAAAA,UAAAA,CAAWE,OAAO,CAACC,IAAI,GAAG5B,aAAAA,CAAcmB,KAAKC,IAAI,CAAA;gBAEjD,MAAMb,MAAAA,CAAOI,MAAM,CAAC,mBAAA,CAAA,CAAqBkB,UAAU,CAAC,MAAA,CAAA,CAAQC,MAAM,CAACL,UAAAA,CAAAA;AAEnEvB,gBAAAA,eAAAA,CAAgBuB,WAAWG,IAAI,CAAA;gBAE/B,OAAO;AACLG,oBAAAA,KAAAA,EAAON,WAAWG,IAAI;oBACtBI,IAAAA,EAAM;AAAEb,wBAAAA,IAAAA;wBAAMc,WAAAA,EAAa;AAAgC;AACnE,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/crud/user/update-user.js

@@ -3,12 +3,16 @@
 var require$$0 = require('lodash/fp');
 var utils = require('../../../utils.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var updateUser;
 var hasRequiredUpdateUser;
 function requireUpdateUser() {
     if (hasRequiredUpdateUser) return updateUser;
     hasRequiredUpdateUser = 1;
-    const { toPlainObject } = require$$0;
+    const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
     const usersPermissionsUserUID = 'plugin::users-permissions.user';
     updateUser = ({ nexus, strapi })=>{

package/dist/server/graphql/mutations/crud/user/update-user.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-user.js","sources":["../../../../../../server/graphql/mutations/crud/user/update-user.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../../utils');\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const { getContentTypeInputName, getEntityResponseName } = strapi\n    .plugin('graphql')\n    .service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n\n  const userInputName = getContentTypeInputName(userContentType);\n  const responseName = getEntityResponseName(userContentType);\n\n  return {\n    type: nonNull(responseName),\n\n    args: {\n      id: nonNull('ID'),\n      data: nonNull(userInputName),\n    },\n\n    description: 'Update an existing user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { id: args.id };\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('user').update(koaContext);\n\n      checkBadRequest(koaContext.body);\n\n      return {\n        value: koaContext.body,\n        info: { args, resourceUID: 'plugin::users-permissions.user' },\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","usersPermissionsUserUID","updateUser","nexus","strapi","nonNull","getContentTypeInputName","getEntityResponseName","plugin","service","naming","userContentType","getModel","userInputName","responseName","type","args","id","data","description","resolve","parent","context","koaContext","params","request","body","controller","update","value","info","resourceUID"],"mappings":";;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;AACpB,QAAA,MAAM,EAAEG,uBAAuB,EAAEC,qBAAqB,EAAE,GAAGH,MAAAA,CACxDI,MAAM,CAAC,SAAA,CAAA,CACPC,OAAO,CAAC,SAASC,MAAM;QAE1B,MAAMC,eAAAA,GAAkBP,MAAAA,CAAOQ,QAAQ,CAACX,uBAAAA,CAAAA;AAExC,QAAA,MAAMY,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;AAC9C,QAAA,MAAMG,eAAeP,qBAAAA,CAAsBI,eAAAA,CAAAA;QAE3C,OAAO;AACLI,YAAAA,IAAAA,EAAMV,OAAAA,CAAQS,YAAAA,CAAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,EAAAA,EAAIZ,OAAAA,CAAQ,IAAA,CAAA;AACZa,gBAAAA,IAAAA,EAAMb,OAAAA,CAAQQ,aAAAA;AACpB,aAAA;YAEIM,WAAAA,EAAa,yBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEL,IAAI,EAAEM,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;AAAEP,oBAAAA,EAAAA,EAAID,KAAKC;AAAE,iBAAA;AACjCM,gBAAAA,UAAAA,CAAWE,OAAO,CAACC,IAAI,GAAG7B,aAAAA,CAAcmB,KAAKE,IAAI,CAAA;gBAEjD,MAAMd,MAAAA,CAAOI,MAAM,CAAC,mBAAA,CAAA,CAAqBmB,UAAU,CAAC,MAAA,CAAA,CAAQC,MAAM,CAACL,UAAAA,CAAAA;AAEnExB,gBAAAA,eAAAA,CAAgBwB,WAAWG,IAAI,CAAA;gBAE/B,OAAO;AACLG,oBAAAA,KAAAA,EAAON,WAAWG,IAAI;oBACtBI,IAAAA,EAAM;AAAEd,wBAAAA,IAAAA;wBAAMe,WAAAA,EAAa;AAAgC;AACnE,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"update-user.js","sources":["../../../../../../server/graphql/mutations/crud/user/update-user.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../../utils');\n\nconst usersPermissionsUserUID = 'plugin::users-permissions.user';\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const { getContentTypeInputName, getEntityResponseName } = strapi\n    .plugin('graphql')\n    .service('utils').naming;\n\n  const userContentType = strapi.getModel(usersPermissionsUserUID);\n\n  const userInputName = getContentTypeInputName(userContentType);\n  const responseName = getEntityResponseName(userContentType);\n\n  return {\n    type: nonNull(responseName),\n\n    args: {\n      id: nonNull('ID'),\n      data: nonNull(userInputName),\n    },\n\n    description: 'Update an existing user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { id: args.id };\n      koaContext.request.body = toPlainObject(args.data);\n\n      await strapi.plugin('users-permissions').controller('user').update(koaContext);\n\n      checkBadRequest(koaContext.body);\n\n      return {\n        value: koaContext.body,\n        info: { args, resourceUID: 'plugin::users-permissions.user' },\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","usersPermissionsUserUID","updateUser","nexus","strapi","nonNull","getContentTypeInputName","getEntityResponseName","plugin","service","naming","userContentType","getModel","userInputName","responseName","type","args","id","data","description","resolve","parent","context","koaContext","params","request","body","controller","update","value","info","resourceUID"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5B,IAAA,MAAMC,uBAAAA,GAA0B,gCAAA;AAEhCC,IAAAA,UAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;AACpB,QAAA,MAAM,EAAEG,uBAAuB,EAAEC,qBAAqB,EAAE,GAAGH,MAAAA,CACxDI,MAAM,CAAC,SAAA,CAAA,CACPC,OAAO,CAAC,SAASC,MAAM;QAE1B,MAAMC,eAAAA,GAAkBP,MAAAA,CAAOQ,QAAQ,CAACX,uBAAAA,CAAAA;AAExC,QAAA,MAAMY,gBAAgBP,uBAAAA,CAAwBK,eAAAA,CAAAA;AAC9C,QAAA,MAAMG,eAAeP,qBAAAA,CAAsBI,eAAAA,CAAAA;QAE3C,OAAO;AACLI,YAAAA,IAAAA,EAAMV,OAAAA,CAAQS,YAAAA,CAAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,EAAAA,EAAIZ,OAAAA,CAAQ,IAAA,CAAA;AACZa,gBAAAA,IAAAA,EAAMb,OAAAA,CAAQQ,aAAAA;AACpB,aAAA;YAEIM,WAAAA,EAAa,yBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEL,IAAI,EAAEM,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;AAAEP,oBAAAA,EAAAA,EAAID,KAAKC;AAAE,iBAAA;AACjCM,gBAAAA,UAAAA,CAAWE,OAAO,CAACC,IAAI,GAAG7B,aAAAA,CAAcmB,KAAKE,IAAI,CAAA;gBAEjD,MAAMd,MAAAA,CAAOI,MAAM,CAAC,mBAAA,CAAA,CAAqBmB,UAAU,CAAC,MAAA,CAAA,CAAQC,MAAM,CAACL,UAAAA,CAAAA;AAEnExB,gBAAAA,eAAAA,CAAgBwB,WAAWG,IAAI,CAAA;gBAE/B,OAAO;AACLG,oBAAAA,KAAAA,EAAON,WAAWG,IAAI;oBACtBI,IAAAA,EAAM;AAAEd,wBAAAA,IAAAA;wBAAMe,WAAAA,EAAa;AAAgC;AACnE,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/utils.js

@@ -2,12 +2,16 @@
 
 var require$$0 = require('lodash/fp');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+
 var utils;
 var hasRequiredUtils;
 function requireUtils() {
     if (hasRequiredUtils) return utils;
     hasRequiredUtils = 1;
-    const { getOr } = require$$0;
+    const { getOr } = require$$0__default.default;
     /**
 	 * Throws an ApolloError if context body contains a bad request
 	 * @param contextBody - body of the context object given to the resolver

package/dist/server/graphql/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sources":["../../../server/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { getOr } = require('lodash/fp');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = getOr(200, 'statusCode', contextBody);\n\n  if (statusCode !== 200) {\n    const errorMessage = getOr('Bad Request', 'error', contextBody);\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["getOr","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAElB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,KAAAA,CAAM,GAAA,EAAK,YAAA,EAAcG,WAAAA,CAAAA;AAE5C,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,KAAAA,CAAM,aAAA,EAAe,OAAA,EAASG,WAAAA,CAAAA;YAEnD,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"utils.js","sources":["../../../server/graphql/utils.js"],"sourcesContent":["'use strict';\n\nconst { getOr } = require('lodash/fp');\n\n/**\n * Throws an ApolloError if context body contains a bad request\n * @param contextBody - body of the context object given to the resolver\n * @throws ApolloError if the body is a bad request\n */\nfunction checkBadRequest(contextBody) {\n  const statusCode = getOr(200, 'statusCode', contextBody);\n\n  if (statusCode !== 200) {\n    const errorMessage = getOr('Bad Request', 'error', contextBody);\n\n    const exception = new Error(errorMessage);\n\n    exception.code = statusCode || 400;\n    exception.data = contextBody;\n\n    throw exception;\n  }\n}\n\nmodule.exports = {\n  checkBadRequest,\n};\n"],"names":["getOr","require$$0","checkBadRequest","contextBody","statusCode","errorMessage","exception","Error","code","data","utils"],"mappings":";;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAElB;;;;KAKA,SAASC,gBAAgBC,WAAW,EAAA;QAClC,MAAMC,UAAAA,GAAaJ,KAAAA,CAAM,GAAA,EAAK,YAAA,EAAcG,WAAAA,CAAAA;AAE5C,QAAA,IAAIC,eAAe,GAAA,EAAK;YACtB,MAAMC,YAAAA,GAAeL,KAAAA,CAAM,aAAA,EAAe,OAAA,EAASG,WAAAA,CAAAA;YAEnD,MAAMG,SAAAA,GAAY,IAAIC,KAAAA,CAAMF,YAAAA,CAAAA;YAE5BC,SAAAA,CAAUE,IAAI,GAAGJ,UAAAA,IAAc,GAAA;AAC/BE,YAAAA,SAAAA,CAAUG,IAAI,GAAGN,WAAAA;YAEjB,MAAMG,SAAAA;AACV,QAAA;AACA,IAAA;IAEAI,KAAAA,GAAiB;AACfR,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/middlewares/rateLimit.js

@@ -6,13 +6,20 @@ var require$$1 = require('@strapi/utils');
 var require$$0 = require('lodash/fp');
 var require$$3 = require('koa2-ratelimit');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$1__default$1 = /*#__PURE__*/_interopDefault(require$$1$1);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$3__default = /*#__PURE__*/_interopDefault(require$$3);
+
 var hasRequiredRateLimit;
 function requireRateLimit() {
     if (hasRequiredRateLimit) return rateLimit.__module.exports;
     hasRequiredRateLimit = 1;
-    const path = require$$1$1;
-    const utils = require$$1;
-    const { isString, has, toLower } = require$$0;
+    const path = require$$1__default$1.default;
+    const utils = require$$1__default.default;
+    const { isString, has, toLower } = require$$0__default.default;
     const { RateLimitError } = utils.errors;
     /**
 	 * Routes where the rate-limit key MUST NOT include a user identifier
@@ -103,7 +110,7 @@ function requireRateLimit() {
                 rateLimitConfig.enabled = true;
             }
             if (rateLimitConfig.enabled === true) {
-                const rateLimit = require$$3.RateLimit;
+                const rateLimit = require$$3__default.default.RateLimit;
                 const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);
                 return rateLimit.middleware(loadConfig)(ctx, next);
             }

package/dist/server/middlewares/rateLimit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rateLimit.js","sources":["../../../server/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { isString, has, toLower } = require('lodash/fp');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.normalize(requestPath);\n  const lower = toLower(normalized);\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has('enabled', rateLimitConfig)) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","isString","has","toLower","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","normalize","lower","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,YAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,UAAAA;AACd,IAAA,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAEC,OAAO,EAAE,GAAGC,UAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;QACxC,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,SAAS,CAACR,WAAAA,CAAAA;AAClC,QAAA,MAAMS,QAAQf,OAAAA,CAAQa,UAAAA,CAAAA;AACtB,QAAA,OAAOE,KAAAA,CAAMC,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACpB,QAAAA,CAASoB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOnB,OAAAA,CAAQkB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIf,WAAAA;AACJ,QAAA,IAAI,CAACR,QAAAA,CAASuB,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCS,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAElB,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI7B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACI8B,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,kBAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACxC,GAAAA,CAAI,SAAA,EAAW2B,eAAAA,CAAAA,EAAkB;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,WAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,kBAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,kBAAAA,CAAAC,OAAA,CAAA9B,yBAAwC,GAAGA,yBAAAA;IAC3C6B,kBAAAA,CAAAC,OAAA,CAAAtB,gCAA+C,GAAGA,gCAAAA;IAClDqB,kBAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}
+{"version":3,"file":"rateLimit.js","sources":["../../../server/middlewares/rateLimit.js"],"sourcesContent":["'use strict';\n\nconst path = require('path');\nconst utils = require('@strapi/utils');\nconst { isString, has, toLower } = require('lodash/fp');\n\nconst { RateLimitError } = utils.errors;\n\n/**\n * Routes where the rate-limit key MUST NOT include a user identifier\n * derived from `ctx.request.body.email`.\n *\n * On these routes the request body either has no `email` field\n * (e.g. /auth/local uses `identifier`, /auth/reset-password uses\n * `code`, /auth/change-password uses `currentPassword`) or the\n * field is not part of the route contract. Including the\n * attacker-controlled `body.email` in the rate-limit key on these\n * routes lets a caller obtain a fresh key on every request by\n * varying that field, effectively bypassing per-IP throttling.\n *\n * Comparison uses endsWith so the check is stable under any router\n * mount prefix (e.g. `/api/auth/local`).\n *\n * @see https://github.com/strapi/strapi/security/advisories/GHSA-7mqx-wwh4-f9fw\n *\n * When adding a new `rateLimit`-protected auth route whose body does not\n * use `email` as the real identifier, add its path suffix here (or an\n * equivalent `routeUsesEmailIdentifier` rule) so the key cannot be split\n * with arbitrary `body.email` values.\n */\nconst ROUTES_WITHOUT_IDENTIFIER = ['/auth/local', '/auth/reset-password', '/auth/change-password'];\n\nconst isOAuthCallbackPath = (requestPath) => requestPath.includes('/connect/');\n\nconst routeUsesEmailIdentifier = (requestPath) => {\n  if (isOAuthCallbackPath(requestPath)) {\n    return false;\n  }\n\n  return !ROUTES_WITHOUT_IDENTIFIER.some((route) => requestPath.endsWith(route));\n};\n\n/**\n * Paths suitable for route matching and prefix keys: POSIX-normalized,\n * lower-cased, trailing slashes removed so `/api/auth/local` and\n * `/api/auth/local/` share one bucket.\n */\nconst normalizeRequestPathForRateLimit = (requestPath) => {\n  const normalized = path.normalize(requestPath);\n  const lower = toLower(normalized);\n  return lower.replace(/\\/+$/, '') || '/';\n};\n\nconst getEmailIdentifierForKey = (body) => {\n  if (!body || !isString(body.email) || body.email === '') {\n    return 'unknownIdentifier';\n  }\n\n  return toLower(body.email);\n};\n\nconst buildPrefixKey = (ctx) => {\n  let requestPath;\n  if (!isString(ctx.request.path)) {\n    requestPath = 'invalidPath';\n  } else {\n    requestPath = normalizeRequestPathForRateLimit(ctx.request.path);\n    if (requestPath === '.' || requestPath === '..') {\n      requestPath = 'invalidPath';\n    }\n  }\n\n  if (!routeUsesEmailIdentifier(requestPath)) {\n    return `noIdentifier:${requestPath}:${ctx.request.ip}`;\n  }\n\n  const userIdentifier = getEmailIdentifierForKey(ctx.request.body);\n  return `${userIdentifier}:${requestPath}:${ctx.request.ip}`;\n};\n\nconst buildRateLimitLoadConfig = (ctx, rateLimitConfig, routeMiddlewareConfig) => {\n  return {\n    interval: { min: 5 },\n    max: 5,\n    ...rateLimitConfig,\n    ...routeMiddlewareConfig,\n    handler() {\n      throw new RateLimitError();\n    },\n    prefixKey: buildPrefixKey(ctx),\n  };\n};\n\nmodule.exports =\n  (config, { strapi }) =>\n  async (ctx, next) => {\n    let rateLimitConfig = strapi.config.get('plugin::users-permissions.ratelimit');\n\n    if (!rateLimitConfig) {\n      rateLimitConfig = {\n        enabled: true,\n      };\n    }\n\n    if (!has('enabled', rateLimitConfig)) {\n      rateLimitConfig.enabled = true;\n    }\n\n    if (rateLimitConfig.enabled === true) {\n      const rateLimit = require('koa2-ratelimit').RateLimit;\n\n      const loadConfig = buildRateLimitLoadConfig(ctx, rateLimitConfig, config);\n\n      return rateLimit.middleware(loadConfig)(ctx, next);\n    }\n\n    return next();\n  };\n\nmodule.exports.buildPrefixKey = buildPrefixKey;\nmodule.exports.ROUTES_WITHOUT_IDENTIFIER = ROUTES_WITHOUT_IDENTIFIER;\nmodule.exports.normalizeRequestPathForRateLimit = normalizeRequestPathForRateLimit;\nmodule.exports.buildRateLimitLoadConfig = buildRateLimitLoadConfig;\n"],"names":["path","require$$0","utils","require$$1","isString","has","toLower","require$$2","RateLimitError","errors","ROUTES_WITHOUT_IDENTIFIER","isOAuthCallbackPath","requestPath","includes","routeUsesEmailIdentifier","some","route","endsWith","normalizeRequestPathForRateLimit","normalized","normalize","lower","replace","getEmailIdentifierForKey","body","email","buildPrefixKey","ctx","request","ip","userIdentifier","buildRateLimitLoadConfig","rateLimitConfig","routeMiddlewareConfig","interval","min","max","handler","prefixKey","rateLimitModule","exports","config","strapi","next","get","enabled","rateLimit","require$$3","RateLimit","loadConfig","middleware"],"mappings":";;;;;;;;;;;;;;;;;;;AAEA,IAAA,MAAMA,IAAAA,GAAOC,6BAAAA;AACb,IAAA,MAAMC,KAAAA,GAAQC,2BAAAA;AACd,IAAA,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAEC,OAAO,EAAE,GAAGC,2BAAAA;AAEnC,IAAA,MAAM,EAAEC,cAAc,EAAE,GAAGN,MAAMO,MAAM;AAEvC;;;;;;;;;;;;;;;;;;;;;AAqBA,KACA,MAAMC,yBAAAA,GAA4B;AAAC,QAAA,aAAA;AAAe,QAAA,sBAAA;AAAwB,QAAA;AAAwB,KAAA;AAElG,IAAA,MAAMC,mBAAAA,GAAsB,CAACC,WAAAA,GAAgBA,WAAAA,CAAYC,QAAQ,CAAC,WAAA,CAAA;AAElE,IAAA,MAAMC,2BAA2B,CAACF,WAAAA,GAAAA;AAChC,QAAA,IAAID,oBAAoBC,WAAAA,CAAAA,EAAc;YACpC,OAAO,KAAA;AACX,QAAA;QAEE,OAAO,CAACF,0BAA0BK,IAAI,CAAC,CAACC,KAAAA,GAAUJ,WAAAA,CAAYK,QAAQ,CAACD,KAAAA,CAAAA,CAAAA;AACzE,IAAA,CAAA;AAEA;;;;KAKA,MAAME,mCAAmC,CAACN,WAAAA,GAAAA;QACxC,MAAMO,UAAAA,GAAanB,IAAAA,CAAKoB,SAAS,CAACR,WAAAA,CAAAA;AAClC,QAAA,MAAMS,QAAQf,OAAAA,CAAQa,UAAAA,CAAAA;AACtB,QAAA,OAAOE,KAAAA,CAAMC,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA,IAAO,GAAA;AACtC,IAAA,CAAA;AAEA,IAAA,MAAMC,2BAA2B,CAACC,IAAAA,GAAAA;QAChC,IAAI,CAACA,IAAAA,IAAQ,CAACpB,QAAAA,CAASoB,IAAAA,CAAKC,KAAK,CAAA,IAAKD,IAAAA,CAAKC,KAAK,KAAK,EAAA,EAAI;YACvD,OAAO,mBAAA;AACX,QAAA;QAEE,OAAOnB,OAAAA,CAAQkB,KAAKC,KAAK,CAAA;AAC3B,IAAA,CAAA;AAEA,IAAA,MAAMC,iBAAiB,CAACC,GAAAA,GAAAA;QACtB,IAAIf,WAAAA;AACJ,QAAA,IAAI,CAACR,QAAAA,CAASuB,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA,EAAG;YAC/BY,WAAAA,GAAc,aAAA;QAClB,CAAA,MAAS;AACLA,YAAAA,WAAAA,GAAcM,gCAAAA,CAAiCS,GAAAA,CAAIC,OAAO,CAAC5B,IAAI,CAAA;YAC/D,IAAIY,WAAAA,KAAgB,GAAA,IAAOA,WAAAA,KAAgB,IAAA,EAAM;gBAC/CA,WAAAA,GAAc,aAAA;AACpB,YAAA;AACA,QAAA;QAEE,IAAI,CAACE,yBAAyBF,WAAAA,CAAAA,EAAc;YAC1C,OAAO,CAAC,aAAa,EAAEA,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC1D,QAAA;AAEE,QAAA,MAAMC,cAAAA,GAAiBP,wBAAAA,CAAyBI,GAAAA,CAAIC,OAAO,CAACJ,IAAI,CAAA;QAChE,OAAO,CAAA,EAAGM,cAAAA,CAAe,CAAC,EAAElB,WAAAA,CAAY,CAAC,EAAEe,GAAAA,CAAIC,OAAO,CAACC,EAAE,CAAA,CAAE;AAC7D,IAAA,CAAA;IAEA,MAAME,wBAAAA,GAA2B,CAACJ,GAAAA,EAAKK,eAAAA,EAAiBC,qBAAAA,GAAAA;QACtD,OAAO;YACLC,QAAAA,EAAU;gBAAEC,GAAAA,EAAK;AAAC,aAAA;YAClBC,GAAAA,EAAK,CAAA;AACL,YAAA,GAAGJ,eAAe;AAClB,YAAA,GAAGC,qBAAqB;AACxBI,YAAAA,OAAAA,CAAAA,GAAAA;AACE,gBAAA,MAAM,IAAI7B,cAAAA,EAAAA;AAChB,YAAA,CAAA;AACI8B,YAAAA,SAAAA,EAAWZ,cAAAA,CAAeC,GAAAA;AAC9B,SAAA;AACA,IAAA,CAAA;IAEAY,kBAAAA,CAAAC,OAAc,GACZ,CAACC,MAAAA,EAAQ,EAAEC,MAAM,EAAE,GACnB,OAAOf,GAAAA,EAAKgB,IAAAA,GAAAA;AACV,YAAA,IAAIX,eAAAA,GAAkBU,MAAAA,CAAOD,MAAM,CAACG,GAAG,CAAC,qCAAA,CAAA;AAExC,YAAA,IAAI,CAACZ,eAAAA,EAAiB;gBACpBA,eAAAA,GAAkB;oBAChBa,OAAAA,EAAS;AACjB,iBAAA;AACA,YAAA;YAEI,IAAI,CAACxC,GAAAA,CAAI,SAAA,EAAW2B,eAAAA,CAAAA,EAAkB;AACpCA,gBAAAA,eAAAA,CAAgBa,OAAO,GAAG,IAAA;AAChC,YAAA;YAEI,IAAIb,eAAAA,CAAgBa,OAAO,KAAK,IAAA,EAAM;gBACpC,MAAMC,SAAAA,GAAYC,4BAA0BC,SAAS;gBAErD,MAAMC,UAAAA,GAAalB,wBAAAA,CAAyBJ,GAAAA,EAAKK,eAAAA,EAAiBS,MAAAA,CAAAA;AAElE,gBAAA,OAAOK,SAAAA,CAAUI,UAAU,CAACD,UAAAA,CAAAA,CAAYtB,GAAAA,EAAKgB,IAAAA,CAAAA;AACnD,YAAA;YAEI,OAAOA,IAAAA,EAAAA;AACX,QAAA,CAAA;IAEAJ,kBAAAA,CAAAC,OAAA,CAAAd,cAA6B,GAAGA,cAAAA;IAChCa,kBAAAA,CAAAC,OAAA,CAAA9B,yBAAwC,GAAGA,yBAAAA;IAC3C6B,kBAAAA,CAAAC,OAAA,CAAAtB,gCAA+C,GAAGA,gCAAAA;IAClDqB,kBAAAA,CAAAC,OAAA,CAAAT,wBAAuC,GAAGA,wBAAAA;;;;;;"}

package/dist/server/register.js

@@ -6,13 +6,18 @@ var usersPermissions = require('./strategies/users-permissions.js');
 var sanitizers = require('./utils/sanitize/sanitizers.js');
 var index = require('./graphql/index.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var require$$0__default = /*#__PURE__*/_interopDefault(require$$0);
+var require$$1__default = /*#__PURE__*/_interopDefault(require$$1);
+
 var register;
 var hasRequiredRegister;
 function requireRegister() {
     if (hasRequiredRegister) return register;
     hasRequiredRegister = 1;
-    const fs = require$$0;
-    const path = require$$1;
+    const fs = require$$0__default.default;
+    const path = require$$1__default.default;
     const authStrategy = usersPermissions.__require();
     const sanitizers$1 = sanitizers.__require();
     register = ({ strapi })=>{