@strapi/plugin-users-permissions 5.51.1 → 5.52.0

package/dist/server/utils/sanitize/sanitizers.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizers.js","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,2BAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"sanitizers.js","sources":["../../../../server/src/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,2BAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,2BAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/sanitizers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizers.mjs","sources":["../../../../server/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,UAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"sanitizers.mjs","sources":["../../../../server/src/utils/sanitize/sanitizers.js"],"sourcesContent":["'use strict';\n\nconst { curry } = require('lodash/fp');\nconst { traverseEntity, async } = require('@strapi/utils');\n\nconst { removeUserRelationFromRoleEntities } = require('./visitors');\n\nconst sanitizeUserRelationFromRoleEntities = curry((schema, entity) => {\n  return traverseEntity(\n    removeUserRelationFromRoleEntities,\n    { schema, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n});\n\nconst defaultSanitizeOutput = curry((schema, entity) => {\n  return async.pipe(sanitizeUserRelationFromRoleEntities(schema))(entity);\n});\n\nmodule.exports = {\n  sanitizeUserRelationFromRoleEntities,\n  defaultSanitizeOutput,\n};\n"],"names":["curry","require$$0","traverseEntity","async","require$$1","removeUserRelationFromRoleEntities","require$$2","sanitizeUserRelationFromRoleEntities","schema","entity","getModel","strapi","bind","defaultSanitizeOutput","pipe","sanitizers"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,KAAK,EAAE,GAAGC,UAAAA;AAClB,IAAA,MAAM,EAAEC,cAAc,EAAEC,KAAK,EAAE,GAAGC,UAAAA;IAElC,MAAM,EAAEC,kCAAkC,EAAE,GAAGC,eAAAA,EAAAA;IAE/C,MAAMC,oCAAAA,GAAuCP,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC1D,QAAA,OAAOP,eACLG,kCAAAA,EACA;AAAEG,YAAAA,MAAAA;AAAQE,YAAAA,QAAAA,EAAUC,MAAAA,CAAOD,QAAQ,CAACE,IAAI,CAACD,MAAAA;SAAO,EAChDF,MAAAA,CAAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMI,qBAAAA,GAAwBb,KAAAA,CAAM,CAACQ,MAAAA,EAAQC,MAAAA,GAAAA;AAC3C,QAAA,OAAON,KAAAA,CAAMW,IAAI,CAACP,oCAAAA,CAAqCC,MAAAA,CAAAA,CAAAA,CAASC,MAAAA,CAAAA;AAClE,IAAA,CAAA,CAAA;IAEAM,UAAAA,GAAiB;AACfR,QAAAA,oCAAAA;AACAM,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,4CAAAA;AACtC,KAAA;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../../server/src/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,4CAAAA;AACtC,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../../../server/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,yCAAAA;AACtC,KAAA;;;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../../../server/src/utils/sanitize/visitors/index.js"],"sourcesContent":["'use strict';\n\nmodule.exports = {\n  removeUserRelationFromRoleEntities: require('./remove-user-relation-from-role-entities'),\n};\n"],"names":["visitors","removeUserRelationFromRoleEntities","require$$0"],"mappings":";;;;;;;IAEAA,QAAAA,GAAiB;QACfC,kCAAAA,EAAoCC,yCAAAA;AACtC,KAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js.map

@@ -1 +1 @@
-{"version":3,"file":"remove-user-relation-from-role-entities.js","sources":["../../../../../server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"remove-user-relation-from-role-entities.js","sources":["../../../../../server/src/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/utils/sanitize/visitors/remove-user-relation-from-role-entities.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"remove-user-relation-from-role-entities.mjs","sources":["../../../../../server/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"remove-user-relation-from-role-entities.mjs","sources":["../../../../../server/src/utils/sanitize/visitors/remove-user-relation-from-role-entities.js"],"sourcesContent":["'use strict';\n\nmodule.exports = ({ schema, key, attribute }, { remove }) => {\n  if (\n    attribute?.type === 'relation' &&\n    attribute?.target === 'plugin::users-permissions.user' &&\n    schema.uid === 'plugin::users-permissions.role'\n  ) {\n    remove(key);\n  }\n};\n"],"names":["removeUserRelationFromRoleEntities","schema","key","attribute","remove","type","target","uid"],"mappings":";;;;;IAEAA,kCAAAA,GAAiB,CAAC,EAAEC,MAAM,EAAEC,GAAG,EAAEC,SAAS,EAAE,EAAE,EAAEC,MAAM,EAAE,GAAA;QACtD,IACED,SAAAA,EAAWE,SAAS,UAAA,IACpBF,SAAAA,EAAWG,WAAW,gCAAA,IACtBL,MAAAA,CAAOM,GAAG,KAAK,gCAAA,EACf;YACAH,MAAAA,CAAOF,GAAAA,CAAAA;AACX,QAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/utils/verify-jwt-with-jwks.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-jwt-with-jwks.js","sources":["../../../server/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,uCAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,2BAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;AAAK,SAAA,CAAA;AAEhF,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;AAAI,SAAA,CAAA;AAEpD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"verify-jwt-with-jwks.js","sources":["../../../server/src/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,uCAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,2BAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;;AAE3E,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;;AAEhD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/verify-jwt-with-jwks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"verify-jwt-with-jwks.mjs","sources":["../../../server/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,SAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,UAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;AAAK,SAAA,CAAA;AAEhF,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;AAAI,SAAA,CAAA;AAEpD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}
+{"version":3,"file":"verify-jwt-with-jwks.mjs","sources":["../../../server/src/utils/verify-jwt-with-jwks.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\nconst jwt = require('jsonwebtoken');\n\nconst jwkToKeyObject = (jwk) => crypto.createPublicKey({ key: jwk, format: 'jwk' });\n\nconst verifyJwtWithJwks = async ({ idToken, jwksUrl }) => {\n  const decoded = jwt.decode(idToken, { complete: true });\n\n  if (!decoded?.header?.kid || !decoded.payload) {\n    throw new Error('The provided token is not valid');\n  }\n\n  const response = await fetch(jwksUrl.toString());\n  if (!response.ok) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const jwk = await response.json();\n  const key = jwk.keys?.find(({ kid }) => kid === decoded.header.kid);\n\n  if (!key) {\n    throw new Error('There was an error verifying the token');\n  }\n\n  const publicKey = jwkToKeyObject(key);\n\n  return new Promise((resolve, reject) => {\n    jwt.verify(idToken, publicKey, { algorithms: ['RS256'] }, (err, tokenPayload) => {\n      if (err) {\n        reject(new Error('There was an error verifying the token'));\n        return;\n      }\n      resolve(tokenPayload);\n    });\n  });\n};\n\nmodule.exports = {\n  jwkToKeyObject,\n  verifyJwtWithJwks,\n};\n"],"names":["crypto","require$$0","jwt","require$$1","jwkToKeyObject","jwk","createPublicKey","key","format","verifyJwtWithJwks","idToken","jwksUrl","decoded","decode","complete","header","kid","payload","Error","response","fetch","toString","ok","json","keys","find","publicKey","Promise","resolve","reject","verify","algorithms","err","tokenPayload","verifyJwtWithJwks_1"],"mappings":";;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,SAAAA,EAAAA;AACf,IAAA,MAAMC,GAAAA,GAAMC,UAAAA;AAEZ,IAAA,MAAMC,cAAAA,GAAiB,CAACC,GAAAA,GAAQL,MAAAA,CAAOM,eAAe,CAAC;YAAEC,GAAAA,EAAKF,GAAAA;YAAKG,MAAAA,EAAQ;;AAE3E,IAAA,MAAMC,oBAAoB,OAAO,EAAEC,OAAO,EAAEC,OAAO,EAAE,GAAA;AACnD,QAAA,MAAMC,OAAAA,GAAUV,GAAAA,CAAIW,MAAM,CAACH,OAAAA,EAAS;YAAEI,QAAAA,EAAU;;AAEhD,QAAA,IAAI,CAACF,OAAAA,EAASG,MAAAA,EAAQC,OAAO,CAACJ,OAAAA,CAAQK,OAAO,EAAE;AAC7C,YAAA,MAAM,IAAIC,KAAAA,CAAM,iCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMT,OAAAA,CAAQU,QAAQ,EAAA,CAAA;QAC7C,IAAI,CAACF,QAAAA,CAASG,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIJ,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;QAEE,MAAMb,GAAAA,GAAM,MAAMc,QAAAA,CAASI,IAAI,EAAA;AAC/B,QAAA,MAAMhB,GAAAA,GAAMF,GAAAA,CAAImB,IAAI,EAAEC,KAAK,CAAC,EAAET,GAAG,EAAE,GAAKA,GAAAA,KAAQJ,OAAAA,CAAQG,MAAM,CAACC,GAAG,CAAA;AAElE,QAAA,IAAI,CAACT,GAAAA,EAAK;AACR,YAAA,MAAM,IAAIW,KAAAA,CAAM,wCAAA,CAAA;AACpB,QAAA;AAEE,QAAA,MAAMQ,YAAYtB,cAAAA,CAAeG,GAAAA,CAAAA;QAEjC,OAAO,IAAIoB,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;YAC3B3B,GAAAA,CAAI4B,MAAM,CAACpB,OAAAA,EAASgB,SAAAA,EAAW;gBAAEK,UAAAA,EAAY;AAAC,oBAAA;AAAQ;AAAA,aAAA,EAAI,CAACC,GAAAA,EAAKC,YAAAA,GAAAA;AAC9D,gBAAA,IAAID,GAAAA,EAAK;AACPH,oBAAAA,MAAAA,CAAO,IAAIX,KAAAA,CAAM,wCAAA,CAAA,CAAA;AACjB,oBAAA;AACR,gBAAA;gBACMU,OAAAA,CAAQK,YAAAA,CAAAA;AACd,YAAA,CAAA,CAAA;AACA,QAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAC,mBAAAA,GAAiB;AACf9B,QAAAA,cAAAA;AACAK,QAAAA;AACF,KAAA;;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/plugin-users-permissions",
-  "version": "5.51.1",
+  "version": "5.52.0",
   "description": "Protect your API with a full-authentication process based on JWT",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -32,7 +32,7 @@
       "default": "./dist/admin/index.js"
     },
     "./strapi-server": {
-      "source": "./server/index.js",
+      "source": "./server/src/index.js",
       "import": "./dist/server/index.mjs",
       "require": "./dist/server/index.js",
       "default": "./dist/server/index.js"
@@ -53,9 +53,9 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
-    "@strapi/design-system": "2.2.3",
-    "@strapi/icons": "2.2.3",
-    "@strapi/utils": "5.51.1",
+    "@strapi/design-system": "2.2.4",
+    "@strapi/icons": "2.2.4",
+    "@strapi/utils": "5.52.0",
     "bcryptjs": "2.4.3",
     "formik": "2.4.9",
     "immer": "9.0.21",
@@ -72,7 +72,7 @@
     "zod": "3.25.76"
   },
   "devDependencies": {
-    "@strapi/strapi": "5.51.1",
+    "@strapi/strapi": "5.52.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.2",
@@ -82,7 +82,7 @@
     "msw": "2.13.4",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-router-dom": "6.30.3",
+    "react-router-dom": "6.30.4",
     "styled-components": "6.4.1"
   },
   "peerDependencies": {

package/rollup.config.mjs

@@ -11,9 +11,9 @@ export default defineConfig([
   }),
   baseConfig({
     input: {
-      index: './server/index.js',
+      index: './server/src/index.js',
     },
-    rootDir: './server',
+    rootDir: './server/src',
     outDir: './dist/server',
   }),
 ]);

package/server/{controllers → src/controllers}/auth.js

@@ -451,11 +451,11 @@ module.exports = ({ strapi }) => ({
         ctx.session = ctx.session || {};
         ctx.session.grant = ctx.session.grant || {};
         ctx.session.grant.dynamic = {
-          ...(ctx.session.grant.dynamic || {}),
+          ...ctx.session.grant.dynamic,
           callback: customCallback,
         };
         ctx.state.oauthConnect = { callback: customCallback };
-      } catch (e) {
+      } catch {
         throw new ValidationError('Invalid callback URL provided', { callback: customCallback });
       }
     }

package/server/{services → src/services}/users-permissions.js

@@ -250,7 +250,7 @@ module.exports = ({ strapi }) => ({
 
     try {
       return _.template(layout, { interpolate, evaluate: false, escape: false })(data);
-    } catch (e) {
+    } catch {
       throw new errors.ApplicationError('Invalid email template');
     }
   },

package/server/{strategies → src/strategies}/users-permissions.js

@@ -77,7 +77,7 @@ const authenticate = async (ctx) => {
       credentials: null,
       ability,
     };
-  } catch (err) {
+  } catch {
     return { authenticated: false };
   }
 };

package/server/utils/index.d.ts

@@ -1,23 +0,0 @@
-import * as usersPermissions from '../services/users-permissions';
-import * as user from '../services/user';
-import * as role from '../services/role';
-import * as jwt from '../services/jwt';
-import * as providers from '../services/providers';
-import * as providersRegistry from '../services/providers-registry';
-import * as permission from '../services/permission';
-
-type S = {
-  ['users-permissions']: typeof usersPermissions;
-  ['role']: typeof role;
-  user: typeof user;
-  jwt: typeof jwt;
-  providers: typeof providers;
-  ['providers-registry']: typeof providersRegistry;
-  permission: typeof permission;
-};
-
-export function getService<T extends keyof S>(name: T): ReturnType<S[T]>;
-
-export function isUsernameTaken(username: string): Promise<boolean>;
-
-export function findValidUsername(basename: string): Promise<string>;