@strapi/plugin-users-permissions 5.52.2 → 5.53.0

package/dist/server/graphql/mutations/auth/change-password.js

@@ -2,6 +2,7 @@
 
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
+var rateLimit = require('./rate-limit.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -14,8 +15,10 @@ function requireChangePassword() {
     hasRequiredChangePassword = 1;
     const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
+    const { createRateLimitRunner } = rateLimit.__require();
     changePassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/change-password');
         return {
             type: 'UsersPermissionsLoginPayload',
             args: {
@@ -26,9 +29,9 @@ function requireChangePassword() {
             description: 'Change user password. Confirm with the current password.',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args);
-                await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').changePassword(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/change-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"change-password.js","sources":["../../../../../server/src/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","changePassword","nexus","strapi","nonNull","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBH,OAAAA,CAAQ,QAAA,CAAA;AACzBI,gBAAAA,QAAAA,EAAUJ,OAAAA,CAAQ,QAAA,CAAA;AAClBK,gBAAAA,oBAAAA,EAAsBL,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIM,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACa,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"change-password.js","sources":["../../../../../server/src/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/change-password');\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').changePassword(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","changePassword","nexus","strapi","nonNull","runRateLimit","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","user","jwt"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,mBAAAA,EAAAA;AAElCC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,uBAAA,CAAA;QAEnD,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBJ,OAAAA,CAAQ,QAAA,CAAA;AACzBK,gBAAAA,QAAAA,EAAUL,OAAAA,CAAQ,QAAA,CAAA;AAClBM,gBAAAA,oBAAAA,EAAsBN,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIO,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMX,YAAAA,CAAaU,UAAAA,EAAY;AAAEE,oBAAAA,IAAAA,EAAMtB,aAAAA,CAAcY,IAAAA;iBAAK,EAAI,CAACW,GAAAA,GAC5Ef,MAAAA,CAAOgB,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQnB,cAAc,CAACiB,GAAAA,CAAAA,CAAAA;gBAGvErB,eAAAA,CAAgBmB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,IAAAA,EAAML,MAAAA,CAAOK,IAAI,IAAIL,MAAAA;AACrBM,oBAAAA,GAAAA,EAAKN,OAAOM;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/change-password.mjs

@@ -1,5 +1,6 @@
 import require$$0 from 'lodash/fp';
 import { __require as requireUtils } from '../../utils.mjs';
+import { __require as requireRateLimit } from './rate-limit.mjs';
 
 var changePassword;
 var hasRequiredChangePassword;
@@ -8,8 +9,10 @@ function requireChangePassword() {
     hasRequiredChangePassword = 1;
     const { toPlainObject } = require$$0;
     const { checkBadRequest } = requireUtils();
+    const { createRateLimitRunner } = requireRateLimit();
     changePassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/change-password');
         return {
             type: 'UsersPermissionsLoginPayload',
             args: {
@@ -20,9 +23,9 @@ function requireChangePassword() {
             description: 'Change user password. Confirm with the current password.',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args);
-                await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').changePassword(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/change-password.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"change-password.mjs","sources":["../../../../../server/src/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').changePassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","changePassword","nexus","strapi","nonNull","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBH,OAAAA,CAAQ,QAAA,CAAA;AACzBI,gBAAAA,QAAAA,EAAUJ,OAAAA,CAAQ,QAAA,CAAA;AAClBK,gBAAAA,oBAAAA,EAAsBL,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIM,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACa,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"change-password.mjs","sources":["../../../../../server/src/graphql/mutations/auth/change-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/change-password');\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      currentPassword: nonNull('String'),\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n    },\n\n    description: 'Change user password. Confirm with the current password.',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').changePassword(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","changePassword","nexus","strapi","nonNull","runRateLimit","type","args","currentPassword","password","passwordConfirmation","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","user","jwt"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,gBAAAA,EAAAA;AAElCC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,uBAAA,CAAA;QAEnD,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,eAAAA,EAAiBJ,OAAAA,CAAQ,QAAA,CAAA;AACzBK,gBAAAA,QAAAA,EAAUL,OAAAA,CAAQ,QAAA,CAAA;AAClBM,gBAAAA,oBAAAA,EAAsBN,OAAAA,CAAQ,QAAA;AACpC,aAAA;YAEIO,WAAAA,EAAa,0DAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMX,YAAAA,CAAaU,UAAAA,EAAY;AAAEE,oBAAAA,IAAAA,EAAMtB,aAAAA,CAAcY,IAAAA;iBAAK,EAAI,CAACW,GAAAA,GAC5Ef,MAAAA,CAAOgB,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQnB,cAAc,CAACiB,GAAAA,CAAAA,CAAAA;gBAGvErB,eAAAA,CAAgBmB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,IAAAA,EAAML,MAAAA,CAAOK,IAAI,IAAIL,MAAAA;AACrBM,oBAAAA,GAAAA,EAAKN,OAAOM;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/forgot-password.js

@@ -2,6 +2,7 @@
 
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
+var rateLimit = require('./rate-limit.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -14,8 +15,10 @@ function requireForgotPassword() {
     hasRequiredForgotPassword = 1;
     const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
+    const { createRateLimitRunner } = rateLimit.__require();
     forgotPassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/forgot-password');
         return {
             type: 'UsersPermissionsPasswordPayload',
             args: {
@@ -24,9 +27,9 @@ function requireForgotPassword() {
             description: 'Request a reset password token',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args);
-                await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').forgotPassword(ctx));
                 checkBadRequest(output);
                 return {
                     ok: output.ok || output

package/dist/server/graphql/mutations/auth/forgot-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.js","sources":["../../../../../server/src/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","forgotPassword","nexus","strapi","nonNull","type","args","email","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","ok"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,cAAc,CAACW,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,EAAAA,EAAID,MAAAA,CAAOC,EAAE,IAAID;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"forgot-password.js","sources":["../../../../../server/src/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/forgot-password');\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').forgotPassword(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","forgotPassword","nexus","strapi","nonNull","runRateLimit","type","args","email","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","ok"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,mBAAAA,EAAAA;AAElCC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,uBAAA,CAAA;QAEnD,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEIK,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMT,YAAAA,CAAaQ,UAAAA,EAAY;AAAEE,oBAAAA,IAAAA,EAAMpB,aAAAA,CAAcY,IAAAA;iBAAK,EAAI,CAACS,GAAAA,GAC5Eb,MAAAA,CAAOc,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACe,GAAAA,CAAAA,CAAAA;gBAGvEnB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,EAAAA,EAAIL,MAAAA,CAAOK,EAAE,IAAIL;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/forgot-password.mjs

@@ -1,5 +1,6 @@
 import require$$0 from 'lodash/fp';
 import { __require as requireUtils } from '../../utils.mjs';
+import { __require as requireRateLimit } from './rate-limit.mjs';
 
 var forgotPassword;
 var hasRequiredForgotPassword;
@@ -8,8 +9,10 @@ function requireForgotPassword() {
     hasRequiredForgotPassword = 1;
     const { toPlainObject } = require$$0;
     const { checkBadRequest } = requireUtils();
+    const { createRateLimitRunner } = requireRateLimit();
     forgotPassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/forgot-password');
         return {
             type: 'UsersPermissionsPasswordPayload',
             args: {
@@ -18,9 +21,9 @@ function requireForgotPassword() {
             description: 'Request a reset password token',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args);
-                await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').forgotPassword(ctx));
                 checkBadRequest(output);
                 return {
                     ok: output.ok || output

package/dist/server/graphql/mutations/auth/forgot-password.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.mjs","sources":["../../../../../server/src/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').forgotPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","forgotPassword","nexus","strapi","nonNull","type","args","email","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","ok"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;AAE5BC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,cAAc,CAACW,UAAAA,CAAAA;gBAE3E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,EAAAA,EAAID,MAAAA,CAAOC,EAAE,IAAID;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"forgot-password.mjs","sources":["../../../../../server/src/graphql/mutations/auth/forgot-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/forgot-password');\n\n  return {\n    type: 'UsersPermissionsPasswordPayload',\n\n    args: {\n      email: nonNull('String'),\n    },\n\n    description: 'Request a reset password token',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').forgotPassword(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        ok: output.ok || output,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","forgotPassword","nexus","strapi","nonNull","runRateLimit","type","args","email","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","ok"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,gBAAAA,EAAAA;AAElCC,IAAAA,cAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,uBAAA,CAAA;QAEnD,OAAO;YACLG,IAAAA,EAAM,iCAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,QAAA;AACrB,aAAA;YAEIK,WAAAA,EAAa,gCAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMT,YAAAA,CAAaQ,UAAAA,EAAY;AAAEE,oBAAAA,IAAAA,EAAMpB,aAAAA,CAAcY,IAAAA;iBAAK,EAAI,CAACS,GAAAA,GAC5Eb,MAAAA,CAAOc,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,cAAc,CAACe,GAAAA,CAAAA,CAAAA;gBAGvEnB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,EAAAA,EAAIL,MAAAA,CAAOK,EAAE,IAAIL;AACzB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/login.js

@@ -2,6 +2,7 @@
 
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
+var rateLimit = require('./rate-limit.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -14,8 +15,10 @@ function requireLogin() {
     hasRequiredLogin = 1;
     const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
+    const { createRateLimitRunner } = rateLimit.__require();
     login = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/local');
         return {
             type: nonNull('UsersPermissionsLoginPayload'),
             args: {
@@ -23,12 +26,12 @@ function requireLogin() {
             },
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.params = {
-                    provider: args.input.provider
-                };
-                koaContext.request.body = toPlainObject(args.input);
-                await strapi.plugin('users-permissions').controller('auth').callback(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args.input),
+                    params: {
+                        provider: args.input.provider
+                    }
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').callback(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sources":["../../../../../server/src/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { provider: args.input.provider };\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').callback(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","login","nexus","strapi","nonNull","type","args","input","resolve","parent","context","koaContext","params","provider","request","body","plugin","controller","callback","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMI,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;oBAAEC,QAAAA,EAAUP,IAAAA,CAAKC,KAAK,CAACM;AAAQ,iBAAA;AACnDF,gBAAAA,UAAAA,CAAWG,OAAO,CAACC,IAAI,GAAGlB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOa,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACP,UAAAA,CAAAA;gBAErE,MAAMQ,MAAAA,GAASR,WAAWI,IAAI;gBAE9BhB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"login.js","sources":["../../../../../server/src/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/local');\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(\n        koaContext,\n        {\n          body: toPlainObject(args.input),\n          params: { provider: args.input.provider },\n        },\n        (ctx) => strapi.plugin('users-permissions').controller('auth').callback(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","login","nexus","strapi","nonNull","runRateLimit","type","args","input","resolve","parent","context","koaContext","output","body","params","provider","ctx","plugin","controller","callback","user","jwt"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,mBAAAA,EAAAA;AAElCC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,aAAA,CAAA;QAEnD,OAAO;AACLG,YAAAA,IAAAA,EAAMF,OAAAA,CAAQ,8BAAA,CAAA;YAEdG,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMK,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMR,YAAAA,CACnBO,UAAAA,EACA;oBACEE,IAAAA,EAAMnB,aAAAA,CAAcY,KAAKC,KAAK,CAAA;oBAC9BO,MAAAA,EAAQ;wBAAEC,QAAAA,EAAUT,IAAAA,CAAKC,KAAK,CAACQ;AAAQ;iBACjD,EACQ,CAACC,GAAAA,GAAQd,MAAAA,CAAOe,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACH,GAAAA,CAAAA,CAAAA;gBAG1EpB,eAAAA,CAAgBgB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLQ,IAAAA,EAAMR,MAAAA,CAAOQ,IAAI,IAAIR,MAAAA;AACrBS,oBAAAA,GAAAA,EAAKT,OAAOS;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/login.mjs

@@ -1,5 +1,6 @@
 import require$$0 from 'lodash/fp';
 import { __require as requireUtils } from '../../utils.mjs';
+import { __require as requireRateLimit } from './rate-limit.mjs';
 
 var login;
 var hasRequiredLogin;
@@ -8,8 +9,10 @@ function requireLogin() {
     hasRequiredLogin = 1;
     const { toPlainObject } = require$$0;
     const { checkBadRequest } = requireUtils();
+    const { createRateLimitRunner } = requireRateLimit();
     login = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/local');
         return {
             type: nonNull('UsersPermissionsLoginPayload'),
             args: {
@@ -17,12 +20,12 @@ function requireLogin() {
             },
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.params = {
-                    provider: args.input.provider
-                };
-                koaContext.request.body = toPlainObject(args.input);
-                await strapi.plugin('users-permissions').controller('auth').callback(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args.input),
+                    params: {
+                        provider: args.input.provider
+                    }
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').callback(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/login.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"login.mjs","sources":["../../../../../server/src/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.params = { provider: args.input.provider };\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').callback(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","login","nexus","strapi","nonNull","type","args","input","resolve","parent","context","koaContext","params","provider","request","body","plugin","controller","callback","output","user","jwt"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;AAE5BC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMI,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,MAAM,GAAG;oBAAEC,QAAAA,EAAUP,IAAAA,CAAKC,KAAK,CAACM;AAAQ,iBAAA;AACnDF,gBAAAA,UAAAA,CAAWG,OAAO,CAACC,IAAI,GAAGlB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOa,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACP,UAAAA,CAAAA;gBAErE,MAAMQ,MAAAA,GAASR,WAAWI,IAAI;gBAE9BhB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"login.mjs","sources":["../../../../../server/src/graphql/mutations/auth/login.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/local');\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsLoginInput'),\n    },\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(\n        koaContext,\n        {\n          body: toPlainObject(args.input),\n          params: { provider: args.input.provider },\n        },\n        (ctx) => strapi.plugin('users-permissions').controller('auth').callback(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","login","nexus","strapi","nonNull","runRateLimit","type","args","input","resolve","parent","context","koaContext","output","body","params","provider","ctx","plugin","controller","callback","user","jwt"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,gBAAAA,EAAAA;AAElCC,IAAAA,KAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,aAAA,CAAA;QAEnD,OAAO;AACLG,YAAAA,IAAAA,EAAMF,OAAAA,CAAQ,8BAAA,CAAA;YAEdG,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,4BAAA;AACrB,aAAA;AAEI,YAAA,MAAMK,OAAAA,CAAAA,CAAQC,MAAM,EAAEH,IAAI,EAAEI,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMR,YAAAA,CACnBO,UAAAA,EACA;oBACEE,IAAAA,EAAMnB,aAAAA,CAAcY,KAAKC,KAAK,CAAA;oBAC9BO,MAAAA,EAAQ;wBAAEC,QAAAA,EAAUT,IAAAA,CAAKC,KAAK,CAACQ;AAAQ;iBACjD,EACQ,CAACC,GAAAA,GAAQd,MAAAA,CAAOe,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQC,QAAQ,CAACH,GAAAA,CAAAA,CAAAA;gBAG1EpB,eAAAA,CAAgBgB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLQ,IAAAA,EAAMR,MAAAA,CAAOQ,IAAI,IAAIR,MAAAA;AACrBS,oBAAAA,GAAAA,EAAKT,OAAOS;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/rate-limit.js

@@ -0,0 +1,63 @@
+'use strict';
+
+var rateLimit;
+var hasRequiredRateLimit;
+function requireRateLimit() {
+    if (hasRequiredRateLimit) return rateLimit;
+    hasRequiredRateLimit = 1;
+    const RATE_LIMIT_MIDDLEWARE = 'plugin::users-permissions.rateLimit';
+    const contextQueues = new WeakMap();
+    const getRateLimitPath = (strapi, routeSuffix)=>{
+        const configuredPrefix = strapi.config.get('api.rest.prefix', '/api');
+        const prefix = typeof configuredPrefix === 'string' ? configuredPrefix : '/api';
+        const normalizedPrefix = prefix.replace(/^\/+|\/+$/g, '');
+        const normalizedSuffix = routeSuffix.replace(/^\/+/, '');
+        return `/${[
+            normalizedPrefix,
+            normalizedSuffix
+        ].filter(Boolean).join('/')}`;
+    };
+    const enqueueContextOperation = (koaContext, operation)=>{
+        const previous = contextQueues.get(koaContext) || Promise.resolve();
+        const result = previous.catch(()=>undefined).then(operation);
+        contextQueues.set(koaContext, result.catch(()=>undefined));
+        return result;
+    };
+    const createRateLimitRunner = (strapi, routeSuffix)=>{
+        const rateLimit = strapi.middleware(RATE_LIMIT_MIDDLEWARE)({}, {
+            strapi
+        });
+        const routePath = getRateLimitPath(strapi, routeSuffix);
+        return (koaContext, { body, params }, controller)=>enqueueContextOperation(koaContext, async ()=>{
+                const originalBody = koaContext.request.body;
+                const originalPath = koaContext.request.path;
+                const originalParams = koaContext.params;
+                const originalResponseBody = koaContext.body;
+                let responseStatus = 200;
+                koaContext.request.path = routePath;
+                koaContext.request.body = body;
+                if (params) {
+                    koaContext.params = params;
+                }
+                try {
+                    await rateLimit(koaContext, ()=>controller(koaContext));
+                    responseStatus = koaContext.status;
+                    return koaContext.body;
+                } finally{
+                    koaContext.request.path = originalPath;
+                    koaContext.request.body = originalBody;
+                    koaContext.params = originalParams;
+                    koaContext.body = originalResponseBody;
+                    koaContext.status = responseStatus;
+                }
+            });
+    };
+    rateLimit = {
+        createRateLimitRunner,
+        getRateLimitPath
+    };
+    return rateLimit;
+}
+
+exports.__require = requireRateLimit;
+//# sourceMappingURL=rate-limit.js.map

package/dist/server/graphql/mutations/auth/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sources":["../../../../../server/src/graphql/mutations/auth/rate-limit.js"],"sourcesContent":["'use strict';\n\nconst RATE_LIMIT_MIDDLEWARE = 'plugin::users-permissions.rateLimit';\nconst contextQueues = new WeakMap();\n\nconst getRateLimitPath = (strapi, routeSuffix) => {\n  const configuredPrefix = strapi.config.get('api.rest.prefix', '/api');\n  const prefix = typeof configuredPrefix === 'string' ? configuredPrefix : '/api';\n  const normalizedPrefix = prefix.replace(/^\\/+|\\/+$/g, '');\n  const normalizedSuffix = routeSuffix.replace(/^\\/+/, '');\n\n  return `/${[normalizedPrefix, normalizedSuffix].filter(Boolean).join('/')}`;\n};\n\nconst enqueueContextOperation = (koaContext, operation) => {\n  const previous = contextQueues.get(koaContext) || Promise.resolve();\n  const result = previous.catch(() => undefined).then(operation);\n\n  contextQueues.set(\n    koaContext,\n    result.catch(() => undefined)\n  );\n\n  return result;\n};\n\nconst createRateLimitRunner = (strapi, routeSuffix) => {\n  const rateLimit = strapi.middleware(RATE_LIMIT_MIDDLEWARE)({}, { strapi });\n  const routePath = getRateLimitPath(strapi, routeSuffix);\n\n  return (koaContext, { body, params }, controller) =>\n    enqueueContextOperation(koaContext, async () => {\n      const originalBody = koaContext.request.body;\n      const originalPath = koaContext.request.path;\n      const originalParams = koaContext.params;\n      const originalResponseBody = koaContext.body;\n      let responseStatus = 200;\n\n      koaContext.request.path = routePath;\n      koaContext.request.body = body;\n      if (params) {\n        koaContext.params = params;\n      }\n\n      try {\n        await rateLimit(koaContext, () => controller(koaContext));\n        responseStatus = koaContext.status;\n        return koaContext.body;\n      } finally {\n        koaContext.request.path = originalPath;\n        koaContext.request.body = originalBody;\n        koaContext.params = originalParams;\n        koaContext.body = originalResponseBody;\n        koaContext.status = responseStatus;\n      }\n    });\n};\n\nmodule.exports = {\n  createRateLimitRunner,\n  getRateLimitPath,\n};\n"],"names":["RATE_LIMIT_MIDDLEWARE","contextQueues","WeakMap","getRateLimitPath","strapi","routeSuffix","configuredPrefix","config","get","prefix","normalizedPrefix","replace","normalizedSuffix","filter","Boolean","join","enqueueContextOperation","koaContext","operation","previous","Promise","resolve","result","catch","undefined","then","set","createRateLimitRunner","rateLimit","middleware","routePath","body","params","controller","originalBody","request","originalPath","path","originalParams","originalResponseBody","responseStatus","status"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,qBAAAA,GAAwB,qCAAA;AAC9B,IAAA,MAAMC,gBAAgB,IAAIC,OAAAA,EAAAA;IAE1B,MAAMC,gBAAAA,GAAmB,CAACC,MAAAA,EAAQC,WAAAA,GAAAA;AAChC,QAAA,MAAMC,mBAAmBF,MAAAA,CAAOG,MAAM,CAACC,GAAG,CAAC,iBAAA,EAAmB,MAAA,CAAA;AAC9D,QAAA,MAAMC,MAAAA,GAAS,OAAOH,gBAAAA,KAAqB,QAAA,GAAWA,gBAAAA,GAAmB,MAAA;AACzE,QAAA,MAAMI,gBAAAA,GAAmBD,MAAAA,CAAOE,OAAO,CAAC,YAAA,EAAc,EAAA,CAAA;AACtD,QAAA,MAAMC,gBAAAA,GAAmBP,WAAAA,CAAYM,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA;QAErD,OAAO,CAAC,CAAC,EAAE;AAACD,YAAAA,gBAAAA;AAAkBE,YAAAA;AAAiB,SAAA,CAACC,MAAM,CAACC,OAAAA,CAAAA,CAASC,IAAI,CAAC,GAAA,CAAA,CAAA,CAAM;AAC7E,IAAA,CAAA;IAEA,MAAMC,uBAAAA,GAA0B,CAACC,UAAAA,EAAYC,SAAAA,GAAAA;AAC3C,QAAA,MAAMC,WAAWlB,aAAAA,CAAcO,GAAG,CAACS,UAAAA,CAAAA,IAAeG,QAAQC,OAAO,EAAA;AACjE,QAAA,MAAMC,SAASH,QAAAA,CAASI,KAAK,CAAC,IAAMC,SAAAA,CAAAA,CAAWC,IAAI,CAACP,SAAAA,CAAAA;AAEpDjB,QAAAA,aAAAA,CAAcyB,GAAG,CACfT,UAAAA,EACAK,MAAAA,CAAOC,KAAK,CAAC,IAAMC,SAAAA,CAAAA,CAAAA;QAGrB,OAAOF,MAAAA;AACT,IAAA,CAAA;IAEA,MAAMK,qBAAAA,GAAwB,CAACvB,MAAAA,EAAQC,WAAAA,GAAAA;AACrC,QAAA,MAAMuB,YAAYxB,MAAAA,CAAOyB,UAAU,CAAC7B,qBAAAA,CAAAA,CAAuB,EAAA,EAAI;AAAEI,YAAAA;;QACjE,MAAM0B,SAAAA,GAAY3B,iBAAiBC,MAAAA,EAAQC,WAAAA,CAAAA;QAE3C,OAAO,CAACY,UAAAA,EAAY,EAAEc,IAAI,EAAEC,MAAM,EAAE,EAAEC,UAAAA,GACpCjB,uBAAAA,CAAwBC,UAAAA,EAAY,UAAA;AAClC,gBAAA,MAAMiB,YAAAA,GAAejB,UAAAA,CAAWkB,OAAO,CAACJ,IAAI;AAC5C,gBAAA,MAAMK,YAAAA,GAAenB,UAAAA,CAAWkB,OAAO,CAACE,IAAI;gBAC5C,MAAMC,cAAAA,GAAiBrB,WAAWe,MAAM;gBACxC,MAAMO,oBAAAA,GAAuBtB,WAAWc,IAAI;AAC5C,gBAAA,IAAIS,cAAAA,GAAiB,GAAA;gBAErBvB,UAAAA,CAAWkB,OAAO,CAACE,IAAI,GAAGP,SAAAA;gBAC1Bb,UAAAA,CAAWkB,OAAO,CAACJ,IAAI,GAAGA,IAAAA;AAC1B,gBAAA,IAAIC,MAAAA,EAAQ;AACVf,oBAAAA,UAAAA,CAAWe,MAAM,GAAGA,MAAAA;AAC5B,gBAAA;gBAEM,IAAI;oBACF,MAAMJ,SAAAA,CAAUX,UAAAA,EAAY,IAAMgB,UAAAA,CAAWhB,UAAAA,CAAAA,CAAAA;AAC7CuB,oBAAAA,cAAAA,GAAiBvB,WAAWwB,MAAM;AAClC,oBAAA,OAAOxB,WAAWc,IAAI;gBAC9B,CAAA,QAAgB;oBACRd,UAAAA,CAAWkB,OAAO,CAACE,IAAI,GAAGD,YAAAA;oBAC1BnB,UAAAA,CAAWkB,OAAO,CAACJ,IAAI,GAAGG,YAAAA;AAC1BjB,oBAAAA,UAAAA,CAAWe,MAAM,GAAGM,cAAAA;AACpBrB,oBAAAA,UAAAA,CAAWc,IAAI,GAAGQ,oBAAAA;AAClBtB,oBAAAA,UAAAA,CAAWwB,MAAM,GAAGD,cAAAA;AAC5B,gBAAA;AACA,YAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAZ,SAAAA,GAAiB;AACfD,QAAAA,qBAAAA;AACAxB,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/rate-limit.mjs

@@ -0,0 +1,61 @@
+var rateLimit;
+var hasRequiredRateLimit;
+function requireRateLimit() {
+    if (hasRequiredRateLimit) return rateLimit;
+    hasRequiredRateLimit = 1;
+    const RATE_LIMIT_MIDDLEWARE = 'plugin::users-permissions.rateLimit';
+    const contextQueues = new WeakMap();
+    const getRateLimitPath = (strapi, routeSuffix)=>{
+        const configuredPrefix = strapi.config.get('api.rest.prefix', '/api');
+        const prefix = typeof configuredPrefix === 'string' ? configuredPrefix : '/api';
+        const normalizedPrefix = prefix.replace(/^\/+|\/+$/g, '');
+        const normalizedSuffix = routeSuffix.replace(/^\/+/, '');
+        return `/${[
+            normalizedPrefix,
+            normalizedSuffix
+        ].filter(Boolean).join('/')}`;
+    };
+    const enqueueContextOperation = (koaContext, operation)=>{
+        const previous = contextQueues.get(koaContext) || Promise.resolve();
+        const result = previous.catch(()=>undefined).then(operation);
+        contextQueues.set(koaContext, result.catch(()=>undefined));
+        return result;
+    };
+    const createRateLimitRunner = (strapi, routeSuffix)=>{
+        const rateLimit = strapi.middleware(RATE_LIMIT_MIDDLEWARE)({}, {
+            strapi
+        });
+        const routePath = getRateLimitPath(strapi, routeSuffix);
+        return (koaContext, { body, params }, controller)=>enqueueContextOperation(koaContext, async ()=>{
+                const originalBody = koaContext.request.body;
+                const originalPath = koaContext.request.path;
+                const originalParams = koaContext.params;
+                const originalResponseBody = koaContext.body;
+                let responseStatus = 200;
+                koaContext.request.path = routePath;
+                koaContext.request.body = body;
+                if (params) {
+                    koaContext.params = params;
+                }
+                try {
+                    await rateLimit(koaContext, ()=>controller(koaContext));
+                    responseStatus = koaContext.status;
+                    return koaContext.body;
+                } finally{
+                    koaContext.request.path = originalPath;
+                    koaContext.request.body = originalBody;
+                    koaContext.params = originalParams;
+                    koaContext.body = originalResponseBody;
+                    koaContext.status = responseStatus;
+                }
+            });
+    };
+    rateLimit = {
+        createRateLimitRunner,
+        getRateLimitPath
+    };
+    return rateLimit;
+}
+
+export { requireRateLimit as __require };
+//# sourceMappingURL=rate-limit.mjs.map

package/dist/server/graphql/mutations/auth/rate-limit.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.mjs","sources":["../../../../../server/src/graphql/mutations/auth/rate-limit.js"],"sourcesContent":["'use strict';\n\nconst RATE_LIMIT_MIDDLEWARE = 'plugin::users-permissions.rateLimit';\nconst contextQueues = new WeakMap();\n\nconst getRateLimitPath = (strapi, routeSuffix) => {\n  const configuredPrefix = strapi.config.get('api.rest.prefix', '/api');\n  const prefix = typeof configuredPrefix === 'string' ? configuredPrefix : '/api';\n  const normalizedPrefix = prefix.replace(/^\\/+|\\/+$/g, '');\n  const normalizedSuffix = routeSuffix.replace(/^\\/+/, '');\n\n  return `/${[normalizedPrefix, normalizedSuffix].filter(Boolean).join('/')}`;\n};\n\nconst enqueueContextOperation = (koaContext, operation) => {\n  const previous = contextQueues.get(koaContext) || Promise.resolve();\n  const result = previous.catch(() => undefined).then(operation);\n\n  contextQueues.set(\n    koaContext,\n    result.catch(() => undefined)\n  );\n\n  return result;\n};\n\nconst createRateLimitRunner = (strapi, routeSuffix) => {\n  const rateLimit = strapi.middleware(RATE_LIMIT_MIDDLEWARE)({}, { strapi });\n  const routePath = getRateLimitPath(strapi, routeSuffix);\n\n  return (koaContext, { body, params }, controller) =>\n    enqueueContextOperation(koaContext, async () => {\n      const originalBody = koaContext.request.body;\n      const originalPath = koaContext.request.path;\n      const originalParams = koaContext.params;\n      const originalResponseBody = koaContext.body;\n      let responseStatus = 200;\n\n      koaContext.request.path = routePath;\n      koaContext.request.body = body;\n      if (params) {\n        koaContext.params = params;\n      }\n\n      try {\n        await rateLimit(koaContext, () => controller(koaContext));\n        responseStatus = koaContext.status;\n        return koaContext.body;\n      } finally {\n        koaContext.request.path = originalPath;\n        koaContext.request.body = originalBody;\n        koaContext.params = originalParams;\n        koaContext.body = originalResponseBody;\n        koaContext.status = responseStatus;\n      }\n    });\n};\n\nmodule.exports = {\n  createRateLimitRunner,\n  getRateLimitPath,\n};\n"],"names":["RATE_LIMIT_MIDDLEWARE","contextQueues","WeakMap","getRateLimitPath","strapi","routeSuffix","configuredPrefix","config","get","prefix","normalizedPrefix","replace","normalizedSuffix","filter","Boolean","join","enqueueContextOperation","koaContext","operation","previous","Promise","resolve","result","catch","undefined","then","set","createRateLimitRunner","rateLimit","middleware","routePath","body","params","controller","originalBody","request","originalPath","path","originalParams","originalResponseBody","responseStatus","status"],"mappings":";;;;;AAEA,IAAA,MAAMA,qBAAAA,GAAwB,qCAAA;AAC9B,IAAA,MAAMC,gBAAgB,IAAIC,OAAAA,EAAAA;IAE1B,MAAMC,gBAAAA,GAAmB,CAACC,MAAAA,EAAQC,WAAAA,GAAAA;AAChC,QAAA,MAAMC,mBAAmBF,MAAAA,CAAOG,MAAM,CAACC,GAAG,CAAC,iBAAA,EAAmB,MAAA,CAAA;AAC9D,QAAA,MAAMC,MAAAA,GAAS,OAAOH,gBAAAA,KAAqB,QAAA,GAAWA,gBAAAA,GAAmB,MAAA;AACzE,QAAA,MAAMI,gBAAAA,GAAmBD,MAAAA,CAAOE,OAAO,CAAC,YAAA,EAAc,EAAA,CAAA;AACtD,QAAA,MAAMC,gBAAAA,GAAmBP,WAAAA,CAAYM,OAAO,CAAC,MAAA,EAAQ,EAAA,CAAA;QAErD,OAAO,CAAC,CAAC,EAAE;AAACD,YAAAA,gBAAAA;AAAkBE,YAAAA;AAAiB,SAAA,CAACC,MAAM,CAACC,OAAAA,CAAAA,CAASC,IAAI,CAAC,GAAA,CAAA,CAAA,CAAM;AAC7E,IAAA,CAAA;IAEA,MAAMC,uBAAAA,GAA0B,CAACC,UAAAA,EAAYC,SAAAA,GAAAA;AAC3C,QAAA,MAAMC,WAAWlB,aAAAA,CAAcO,GAAG,CAACS,UAAAA,CAAAA,IAAeG,QAAQC,OAAO,EAAA;AACjE,QAAA,MAAMC,SAASH,QAAAA,CAASI,KAAK,CAAC,IAAMC,SAAAA,CAAAA,CAAWC,IAAI,CAACP,SAAAA,CAAAA;AAEpDjB,QAAAA,aAAAA,CAAcyB,GAAG,CACfT,UAAAA,EACAK,MAAAA,CAAOC,KAAK,CAAC,IAAMC,SAAAA,CAAAA,CAAAA;QAGrB,OAAOF,MAAAA;AACT,IAAA,CAAA;IAEA,MAAMK,qBAAAA,GAAwB,CAACvB,MAAAA,EAAQC,WAAAA,GAAAA;AACrC,QAAA,MAAMuB,YAAYxB,MAAAA,CAAOyB,UAAU,CAAC7B,qBAAAA,CAAAA,CAAuB,EAAA,EAAI;AAAEI,YAAAA;;QACjE,MAAM0B,SAAAA,GAAY3B,iBAAiBC,MAAAA,EAAQC,WAAAA,CAAAA;QAE3C,OAAO,CAACY,UAAAA,EAAY,EAAEc,IAAI,EAAEC,MAAM,EAAE,EAAEC,UAAAA,GACpCjB,uBAAAA,CAAwBC,UAAAA,EAAY,UAAA;AAClC,gBAAA,MAAMiB,YAAAA,GAAejB,UAAAA,CAAWkB,OAAO,CAACJ,IAAI;AAC5C,gBAAA,MAAMK,YAAAA,GAAenB,UAAAA,CAAWkB,OAAO,CAACE,IAAI;gBAC5C,MAAMC,cAAAA,GAAiBrB,WAAWe,MAAM;gBACxC,MAAMO,oBAAAA,GAAuBtB,WAAWc,IAAI;AAC5C,gBAAA,IAAIS,cAAAA,GAAiB,GAAA;gBAErBvB,UAAAA,CAAWkB,OAAO,CAACE,IAAI,GAAGP,SAAAA;gBAC1Bb,UAAAA,CAAWkB,OAAO,CAACJ,IAAI,GAAGA,IAAAA;AAC1B,gBAAA,IAAIC,MAAAA,EAAQ;AACVf,oBAAAA,UAAAA,CAAWe,MAAM,GAAGA,MAAAA;AAC5B,gBAAA;gBAEM,IAAI;oBACF,MAAMJ,SAAAA,CAAUX,UAAAA,EAAY,IAAMgB,UAAAA,CAAWhB,UAAAA,CAAAA,CAAAA;AAC7CuB,oBAAAA,cAAAA,GAAiBvB,WAAWwB,MAAM;AAClC,oBAAA,OAAOxB,WAAWc,IAAI;gBAC9B,CAAA,QAAgB;oBACRd,UAAAA,CAAWkB,OAAO,CAACE,IAAI,GAAGD,YAAAA;oBAC1BnB,UAAAA,CAAWkB,OAAO,CAACJ,IAAI,GAAGG,YAAAA;AAC1BjB,oBAAAA,UAAAA,CAAWe,MAAM,GAAGM,cAAAA;AACpBrB,oBAAAA,UAAAA,CAAWc,IAAI,GAAGQ,oBAAAA;AAClBtB,oBAAAA,UAAAA,CAAWwB,MAAM,GAAGD,cAAAA;AAC5B,gBAAA;AACA,YAAA,CAAA,CAAA;AACA,IAAA,CAAA;IAEAZ,SAAAA,GAAiB;AACfD,QAAAA,qBAAAA;AACAxB,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/register.js

@@ -2,6 +2,7 @@
 
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
+var rateLimit = require('./rate-limit.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -14,8 +15,10 @@ function requireRegister() {
     hasRequiredRegister = 1;
     const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
+    const { createRateLimitRunner } = rateLimit.__require();
     register = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/local/register');
         return {
             type: nonNull('UsersPermissionsLoginPayload'),
             args: {
@@ -24,9 +27,9 @@ function requireRegister() {
             description: 'Register a user',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args.input);
-                await strapi.plugin('users-permissions').controller('auth').register(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args.input)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').register(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sources":["../../../../../server/src/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').register(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","register","nexus","strapi","nonNull","type","args","input","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,QAAQ,CAACW,UAAAA,CAAAA;gBAErE,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register.js","sources":["../../../../../server/src/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/local/register');\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args.input) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').register(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","register","nexus","strapi","nonNull","runRateLimit","type","args","input","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","user","jwt"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,mBAAAA,EAAAA;AAElCC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,sBAAA,CAAA;QAEnD,OAAO;AACLG,YAAAA,IAAAA,EAAMF,OAAAA,CAAQ,8BAAA,CAAA;YAEdG,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEIK,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMT,YAAAA,CAAaQ,UAAAA,EAAY;oBAAEE,IAAAA,EAAMpB,aAAAA,CAAcY,KAAKC,KAAK;iBAAC,EAAI,CAACQ,GAAAA,GAClFb,MAAAA,CAAOc,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,QAAQ,CAACe,GAAAA,CAAAA,CAAAA;gBAGjEnB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,IAAAA,EAAML,MAAAA,CAAOK,IAAI,IAAIL,MAAAA;AACrBM,oBAAAA,GAAAA,EAAKN,OAAOM;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/register.mjs

@@ -1,5 +1,6 @@
 import require$$0 from 'lodash/fp';
 import { __require as requireUtils } from '../../utils.mjs';
+import { __require as requireRateLimit } from './rate-limit.mjs';
 
 var register;
 var hasRequiredRegister;
@@ -8,8 +9,10 @@ function requireRegister() {
     hasRequiredRegister = 1;
     const { toPlainObject } = require$$0;
     const { checkBadRequest } = requireUtils();
+    const { createRateLimitRunner } = requireRateLimit();
     register = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/local/register');
         return {
             type: nonNull('UsersPermissionsLoginPayload'),
             args: {
@@ -18,9 +21,9 @@ function requireRegister() {
             description: 'Register a user',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args.input);
-                await strapi.plugin('users-permissions').controller('auth').register(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args.input)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').register(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/register.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register.mjs","sources":["../../../../../server/src/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args.input);\n\n      await strapi.plugin('users-permissions').controller('auth').register(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","register","nexus","strapi","nonNull","type","args","input","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;AAE5BC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;AACLG,YAAAA,IAAAA,EAAMD,OAAAA,CAAQ,8BAAA,CAAA;YAEdE,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOH,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEII,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGjB,aAAAA,CAAcS,KAAKC,KAAK,CAAA;gBAElD,MAAMJ,MAAAA,CAAOY,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQf,QAAQ,CAACW,UAAAA,CAAAA;gBAErE,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9Bf,eAAAA,CAAgBkB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"register.mjs","sources":["../../../../../server/src/graphql/mutations/auth/register.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/local/register');\n\n  return {\n    type: nonNull('UsersPermissionsLoginPayload'),\n\n    args: {\n      input: nonNull('UsersPermissionsRegisterInput'),\n    },\n\n    description: 'Register a user',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args.input) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').register(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","register","nexus","strapi","nonNull","runRateLimit","type","args","input","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","user","jwt"],"mappings":";;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,YAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,gBAAAA,EAAAA;AAElCC,IAAAA,QAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,sBAAA,CAAA;QAEnD,OAAO;AACLG,YAAAA,IAAAA,EAAMF,OAAAA,CAAQ,8BAAA,CAAA;YAEdG,IAAAA,EAAM;AACJC,gBAAAA,KAAAA,EAAOJ,OAAAA,CAAQ,+BAAA;AACrB,aAAA;YAEIK,WAAAA,EAAa,iBAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEJ,IAAI,EAAEK,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMT,YAAAA,CAAaQ,UAAAA,EAAY;oBAAEE,IAAAA,EAAMpB,aAAAA,CAAcY,KAAKC,KAAK;iBAAC,EAAI,CAACQ,GAAAA,GAClFb,MAAAA,CAAOc,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,QAAQ,CAACe,GAAAA,CAAAA,CAAAA;gBAGjEnB,eAAAA,CAAgBiB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,IAAAA,EAAML,MAAAA,CAAOK,IAAI,IAAIL,MAAAA;AACrBM,oBAAAA,GAAAA,EAAKN,OAAOM;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}

package/dist/server/graphql/mutations/auth/reset-password.js

@@ -2,6 +2,7 @@
 
 var require$$0 = require('lodash/fp');
 var utils = require('../../utils.js');
+var rateLimit = require('./rate-limit.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -14,8 +15,10 @@ function requireResetPassword() {
     hasRequiredResetPassword = 1;
     const { toPlainObject } = require$$0__default.default;
     const { checkBadRequest } = utils.__require();
+    const { createRateLimitRunner } = rateLimit.__require();
     resetPassword = ({ nexus, strapi })=>{
         const { nonNull } = nexus;
+        const runRateLimit = createRateLimitRunner(strapi, '/auth/reset-password');
         return {
             type: 'UsersPermissionsLoginPayload',
             args: {
@@ -26,9 +29,9 @@ function requireResetPassword() {
             description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',
             async resolve (parent, args, context) {
                 const { koaContext } = context;
-                koaContext.request.body = toPlainObject(args);
-                await strapi.plugin('users-permissions').controller('auth').resetPassword(koaContext);
-                const output = koaContext.body;
+                const output = await runRateLimit(koaContext, {
+                    body: toPlainObject(args)
+                }, (ctx)=>strapi.plugin('users-permissions').controller('auth').resetPassword(ctx));
                 checkBadRequest(output);
                 return {
                     user: output.user || output,

package/dist/server/graphql/mutations/auth/reset-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.js","sources":["../../../../../server/src/graphql/mutations/auth/reset-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n      code: nonNull('String'),\n    },\n\n    description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      koaContext.request.body = toPlainObject(args);\n\n      await strapi.plugin('users-permissions').controller('auth').resetPassword(koaContext);\n\n      const output = koaContext.body;\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","resetPassword","nexus","strapi","nonNull","type","args","password","passwordConfirmation","code","description","resolve","parent","context","koaContext","request","body","plugin","controller","output","user","jwt"],"mappings":";;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;AAE5BC,IAAAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QAEpB,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,QAAAA,EAAUH,OAAAA,CAAQ,QAAA,CAAA;AAClBI,gBAAAA,oBAAAA,EAAsBJ,OAAAA,CAAQ,QAAA,CAAA;AAC9BK,gBAAAA,IAAAA,EAAML,OAAAA,CAAQ,QAAA;AACpB,aAAA;YAEIM,WAAAA,EAAa,2EAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;AAEvBC,gBAAAA,UAAAA,CAAWC,OAAO,CAACC,IAAI,GAAGnB,aAAAA,CAAcS,IAAAA,CAAAA;gBAExC,MAAMH,MAAAA,CAAOc,MAAM,CAAC,mBAAA,CAAA,CAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQjB,aAAa,CAACa,UAAAA,CAAAA;gBAE1E,MAAMK,MAAAA,GAASL,WAAWE,IAAI;gBAE9BjB,eAAAA,CAAgBoB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLC,IAAAA,EAAMD,MAAAA,CAAOC,IAAI,IAAID,MAAAA;AACrBE,oBAAAA,GAAAA,EAAKF,OAAOE;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}
+{"version":3,"file":"reset-password.js","sources":["../../../../../server/src/graphql/mutations/auth/reset-password.js"],"sourcesContent":["'use strict';\n\nconst { toPlainObject } = require('lodash/fp');\n\nconst { checkBadRequest } = require('../../utils');\nconst { createRateLimitRunner } = require('./rate-limit');\n\nmodule.exports = ({ nexus, strapi }) => {\n  const { nonNull } = nexus;\n  const runRateLimit = createRateLimitRunner(strapi, '/auth/reset-password');\n\n  return {\n    type: 'UsersPermissionsLoginPayload',\n\n    args: {\n      password: nonNull('String'),\n      passwordConfirmation: nonNull('String'),\n      code: nonNull('String'),\n    },\n\n    description: 'Reset user password. Confirm with a code (resetToken from forgotPassword)',\n\n    async resolve(parent, args, context) {\n      const { koaContext } = context;\n\n      const output = await runRateLimit(koaContext, { body: toPlainObject(args) }, (ctx) =>\n        strapi.plugin('users-permissions').controller('auth').resetPassword(ctx)\n      );\n\n      checkBadRequest(output);\n\n      return {\n        user: output.user || output,\n        jwt: output.jwt,\n      };\n    },\n  };\n};\n"],"names":["toPlainObject","require$$0","checkBadRequest","require$$1","createRateLimitRunner","require$$2","resetPassword","nexus","strapi","nonNull","runRateLimit","type","args","password","passwordConfirmation","code","description","resolve","parent","context","koaContext","output","body","ctx","plugin","controller","user","jwt"],"mappings":";;;;;;;;;;;;;;;IAEA,MAAM,EAAEA,aAAa,EAAE,GAAGC,2BAAAA;IAE1B,MAAM,EAAEC,eAAe,EAAE,GAAGC,eAAAA,EAAAA;IAC5B,MAAM,EAAEC,qBAAqB,EAAE,GAAGC,mBAAAA,EAAAA;AAElCC,IAAAA,aAAAA,GAAiB,CAAC,EAAEC,KAAK,EAAEC,MAAM,EAAE,GAAA;QACjC,MAAM,EAAEC,OAAO,EAAE,GAAGF,KAAAA;QACpB,MAAMG,YAAAA,GAAeN,sBAAsBI,MAAAA,EAAQ,sBAAA,CAAA;QAEnD,OAAO;YACLG,IAAAA,EAAM,8BAAA;YAENC,IAAAA,EAAM;AACJC,gBAAAA,QAAAA,EAAUJ,OAAAA,CAAQ,QAAA,CAAA;AAClBK,gBAAAA,oBAAAA,EAAsBL,OAAAA,CAAQ,QAAA,CAAA;AAC9BM,gBAAAA,IAAAA,EAAMN,OAAAA,CAAQ,QAAA;AACpB,aAAA;YAEIO,WAAAA,EAAa,2EAAA;AAEb,YAAA,MAAMC,OAAAA,CAAAA,CAAQC,MAAM,EAAEN,IAAI,EAAEO,OAAO,EAAA;gBACjC,MAAM,EAAEC,UAAU,EAAE,GAAGD,OAAAA;gBAEvB,MAAME,MAAAA,GAAS,MAAMX,YAAAA,CAAaU,UAAAA,EAAY;AAAEE,oBAAAA,IAAAA,EAAMtB,aAAAA,CAAcY,IAAAA;iBAAK,EAAI,CAACW,GAAAA,GAC5Ef,MAAAA,CAAOgB,MAAM,CAAC,qBAAqBC,UAAU,CAAC,MAAA,CAAA,CAAQnB,aAAa,CAACiB,GAAAA,CAAAA,CAAAA;gBAGtErB,eAAAA,CAAgBmB,MAAAA,CAAAA;gBAEhB,OAAO;oBACLK,IAAAA,EAAML,MAAAA,CAAOK,IAAI,IAAIL,MAAAA;AACrBM,oBAAAA,GAAAA,EAAKN,OAAOM;AACpB,iBAAA;AACA,YAAA;AACA,SAAA;AACA,IAAA,CAAA;;;;;;"}