@strapi/strapi 4.12.6 → 4.13.0-alpha.0

package/dist/middlewares/public/index.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publicStatic = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const stream_1 = __importDefault(require("stream"));
+const lodash_1 = __importDefault(require("lodash"));
+const fp_1 = require("lodash/fp");
+const koa_static_1 = __importDefault(require("koa-static"));
+const utils = __importStar(require("../../utils"));
+const serve_static_1 = require("./serve-static");
+const defaults = {
+    maxAge: 60000,
+    defaultIndex: true,
+};
+const publicStatic = (config, { strapi }) => {
+    const { defaultIndex, maxAge } = (0, fp_1.defaultsDeep)(defaults, config);
+    if (defaultIndex === true) {
+        const index = fs_1.default.readFileSync(path_1.default.join(__dirname, 'index.html'), 'utf8');
+        const serveIndexPage = async (ctx, next) => {
+            // defer rendering of strapi index page
+            await next();
+            if (ctx.body != null || ctx.status !== 404)
+                return;
+            ctx.url = 'index.html';
+            const isInitialized = await utils.isInitialized(strapi);
+            const data = {
+                serverTime: new Date().toUTCString(),
+                isInitialized,
+                ...lodash_1.default.pick(strapi, [
+                    'config.info.version',
+                    'config.info.name',
+                    'config.admin.url',
+                    'config.server.url',
+                    'config.environment',
+                    'config.serveAdminPanel',
+                ]),
+            };
+            const content = lodash_1.default.template(index)(data);
+            const body = new stream_1.default.Readable({
+                read() {
+                    this.push(Buffer.from(content));
+                    this.push(null);
+                },
+            });
+            // Serve static.
+            ctx.type = 'html';
+            ctx.body = body;
+        };
+        strapi.server.routes([
+            {
+                method: 'GET',
+                path: '/',
+                handler: serveIndexPage,
+                config: { auth: false },
+            },
+            {
+                method: 'GET',
+                path: '/index.html',
+                handler: serveIndexPage,
+                config: { auth: false },
+            },
+            {
+                method: 'GET',
+                path: '/assets/images/(.*)',
+                handler: (0, serve_static_1.serveStatic)(path_1.default.resolve(__dirname, 'assets/images'), {
+                    maxage: maxAge,
+                    defer: true,
+                }),
+                config: { auth: false },
+            },
+            // All other public GET-routes except /uploads/(.*) which is handled in upload middleware
+            {
+                method: 'GET',
+                path: '/((?!uploads/).+)',
+                handler: (0, koa_static_1.default)(strapi.dirs.static.public, {
+                    maxage: maxAge,
+                    defer: true,
+                }),
+                config: { auth: false },
+            },
+        ]);
+    }
+};
+exports.publicStatic = publicStatic;
+//# sourceMappingURL=index.js.map

package/dist/middlewares/public/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/middlewares/public/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,oDAA4B;AAC5B,oDAAuB;AACvB,kCAAyC;AACzC,4DAAmC;AACnC,mDAAqC;AACrC,iDAA6C;AAO7C,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,KAAK;IACb,YAAY,EAAE,IAAI;CACnB,CAAC;AAEK,MAAM,YAAY,GAA6B,CACpD,MAAc,EACd,EAAE,MAAM,EAAsB,EAC9B,EAAE;IACF,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEhE,IAAI,YAAY,KAAK,IAAI,EAAE;QACzB,MAAM,KAAK,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,cAAc,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACnE,uCAAuC;YACvC,MAAM,IAAI,EAAE,CAAC;YAEb,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO;YAEnD,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC;YACvB,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG;gBACX,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,aAAa;gBACb,GAAG,gBAAC,CAAC,IAAI,CAAC,MAAM,EAAE;oBAChB,qBAAqB;oBACrB,kBAAkB;oBAClB,kBAAkB;oBAClB,mBAAmB;oBACnB,oBAAoB;oBACpB,wBAAwB;iBACzB,CAAC;aACH,CAAC;YACF,MAAM,OAAO,GAAG,gBAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,gBAAM,CAAC,QAAQ,CAAC;gBAC/B,IAAI;oBACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC;aACF,CAAC,CAAC;YAEH,gBAAgB;YAChB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;YAClB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACnB;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACxB;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACxB;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,IAAA,0BAAW,EAAC,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE;oBAC7D,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE,IAAI;iBACZ,CAAC;gBACF,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACxB;YACD,yFAAyF;YACzF;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,IAAA,oBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE,IAAI;iBACZ,CAAC;gBACF,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACxB;SACF,CAAC,CAAC;KACJ;AACH,CAAC,CAAC;AA5EW,QAAA,YAAY,gBA4EvB"}

package/dist/middlewares/public/serve-static.d.ts

@@ -0,0 +1,3 @@
+import koaStatic from 'koa-static';
+import type { Common } from '../../types';
+export declare const serveStatic: (filesDir: string, koaStaticOptions?: koaStatic.Options) => Common.MiddlewareHandler;

package/dist/middlewares/public/serve-static.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serveStatic = void 0;
+const path_1 = __importDefault(require("path"));
+const koa_static_1 = __importDefault(require("koa-static"));
+// serveStatic is not supposed to be used to serve a folder that have sub-folders
+const serveStatic = (filesDir, koaStaticOptions = {}) => {
+    const serve = (0, koa_static_1.default)(filesDir, koaStaticOptions);
+    // eslint-disable-next-line @typescript-eslint/ban-types
+    const middleware = async (ctx, next) => {
+        const prev = ctx.path;
+        const newPath = path_1.default.basename(ctx.path);
+        ctx.path = newPath;
+        await serve(ctx, async () => {
+            ctx.path = prev;
+            await next();
+            ctx.path = newPath;
+        });
+        ctx.path = prev;
+    };
+    return middleware;
+};
+exports.serveStatic = serveStatic;
+//# sourceMappingURL=serve-static.js.map

package/dist/middlewares/public/serve-static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-static.js","sourceRoot":"","sources":["../../../src/middlewares/public/serve-static.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,4DAAmC;AAGnC,iFAAiF;AAC1E,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,mBAAsC,EAAE,EAAE,EAAE;IACxF,MAAM,KAAK,GAAG,IAAA,oBAAS,EAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEpD,wDAAwD;IACxD,MAAM,UAAU,GAA6B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,cAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QAEnB,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC1B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAlBW,QAAA,WAAW,eAkBtB"}

package/dist/middlewares/query.d.ts

@@ -0,0 +1,2 @@
+import type { Common } from '../types';
+export declare const query: Common.MiddlewareFactory;

package/dist/middlewares/query.js

@@ -0,0 +1,45 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.query = void 0;
+const qs_1 = __importDefault(require("qs"));
+const defaults = {
+    strictNullHandling: true,
+    arrayLimit: 100,
+    depth: 20,
+};
+/**
+ * Body parser hook
+ */
+const addQsParser = (app, settings) => {
+    Object.defineProperty(app.request, 'query', {
+        configurable: false,
+        enumerable: true,
+        /*
+         * Get parsed query-string.
+         */
+        get() {
+            const qstr = this.querystring;
+            this._querycache = this._querycache || {};
+            const cache = this._querycache;
+            if (!cache[qstr]) {
+                cache[qstr] = qs_1.default.parse(qstr, settings);
+            }
+            return cache[qstr];
+        },
+        /*
+         * Set query-string as an object.
+         */
+        set(obj) {
+            this.querystring = qs_1.default.stringify(obj);
+        },
+    });
+    return app;
+};
+const query = (config, { strapi }) => {
+    addQsParser(strapi.server.app, { ...defaults, ...config });
+};
+exports.query = query;
+//# sourceMappingURL=query.js.map

package/dist/middlewares/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/middlewares/query.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAuC;AAOvC,MAAM,QAAQ,GAAW;IACvB,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,EAAE;CACV,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,CAAC,GAAQ,EAAE,QAAgB,EAAE,EAAE;IACjD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE;QAC1C,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,IAAI;QAChB;;WAEG;QACH,GAAG;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAE/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBAChB,KAAK,CAAC,IAAI,CAAC,GAAG,YAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;aACxC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED;;WAEG;QACH,GAAG,CAAC,GAAG;YACL,IAAI,CAAC,WAAW,GAAG,YAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEK,MAAM,KAAK,GAA6B,CAC7C,MAAuB,EACvB,EAAE,MAAM,EAAsB,EAC9B,EAAE;IACF,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC;AALW,QAAA,KAAK,SAKhB"}

package/dist/middlewares/response-time.d.ts

@@ -0,0 +1,2 @@
+import type { Common } from '../types';
+export declare const responseTime: Common.MiddlewareFactory;

package/dist/middlewares/response-time.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.responseTime = void 0;
+const responseTime = () => {
+    return async (ctx, next) => {
+        const start = Date.now();
+        await next();
+        const delta = Math.ceil(Date.now() - start);
+        ctx.set('X-Response-Time', `${delta}ms`);
+    };
+};
+exports.responseTime = responseTime;
+//# sourceMappingURL=response-time.js.map

package/dist/middlewares/response-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.js","sourceRoot":"","sources":["../../src/middlewares/response-time.ts"],"names":[],"mappings":";;;AAEO,MAAM,YAAY,GAA6B,GAAG,EAAE;IACzD,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC,CAAC;AATW,QAAA,YAAY,gBASvB"}

package/dist/middlewares/responses.d.ts

@@ -0,0 +1,5 @@
+import type { Common } from '../types';
+export interface Config {
+    handlers?: Record<number, Common.MiddlewareHandler>;
+}
+export declare const responses: Common.MiddlewareFactory<Config>;

package/dist/middlewares/responses.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.responses = void 0;
+const fp_1 = require("lodash/fp");
+const responses = (config = {}) => {
+    return async (ctx, next) => {
+        await next();
+        const { status } = ctx;
+        const handler = config?.handlers?.[status];
+        if ((0, fp_1.isFunction)(handler)) {
+            await handler(ctx, next);
+        }
+    };
+};
+exports.responses = responses;
+//# sourceMappingURL=responses.js.map

package/dist/middlewares/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/middlewares/responses.ts"],"names":[],"mappings":";;;AAAA,kCAAuC;AAOhC,MAAM,SAAS,GAAqC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE;IACzE,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE;YACvB,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,SAAS,aAWpB"}

package/dist/middlewares/security.d.ts

@@ -0,0 +1,4 @@
+import { KoaHelmet } from 'koa-helmet';
+import type { Common } from '../types';
+export type Config = NonNullable<Parameters<KoaHelmet>[0]>;
+export declare const security: Common.MiddlewareFactory<Config>;

package/dist/middlewares/security.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.security = void 0;
+const fp_1 = require("lodash/fp");
+const koa_helmet_1 = __importDefault(require("koa-helmet"));
+const defaults = {
+    crossOriginEmbedderPolicy: false,
+    crossOriginOpenerPolicy: false,
+    crossOriginResourcePolicy: false,
+    originAgentCluster: false,
+    contentSecurityPolicy: {
+        useDefaults: true,
+        directives: {
+            'connect-src': ["'self'", 'https:'],
+            'img-src': ["'self'", 'data:', 'blob:', 'https://market-assets.strapi.io'],
+            'media-src': ["'self'", 'data:', 'blob:'],
+            upgradeInsecureRequests: null,
+        },
+    },
+    xssFilter: false,
+    hsts: {
+        maxAge: 31536000,
+        includeSubDomains: true,
+    },
+    frameguard: {
+        action: 'sameorigin',
+    },
+};
+const security = (config, { strapi }) => (ctx, next) => {
+    let helmetConfig = (0, fp_1.defaultsDeep)(defaults, config);
+    const specialPaths = ['/documentation'];
+    if (strapi.plugin('graphql')) {
+        const { config: gqlConfig } = strapi.plugin('graphql');
+        specialPaths.push(gqlConfig('endpoint'));
+    }
+    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {
+        helmetConfig = (0, fp_1.merge)(helmetConfig, {
+            contentSecurityPolicy: {
+                directives: {
+                    'script-src': ["'self'", "'unsafe-inline'", 'cdn.jsdelivr.net'],
+                    'img-src': ["'self'", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],
+                },
+            },
+        });
+    }
+    return (0, koa_helmet_1.default)(helmetConfig)(ctx, next);
+};
+exports.security = security;
+//# sourceMappingURL=security.js.map

package/dist/middlewares/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middlewares/security.ts"],"names":[],"mappings":";;;;;;AAAA,kCAAgD;AAChD,4DAA+C;AAM/C,MAAM,QAAQ,GAAW;IACvB,yBAAyB,EAAE,KAAK;IAChC,uBAAuB,EAAE,KAAK;IAC9B,yBAAyB,EAAE,KAAK;IAChC,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE;YACV,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,CAAC;YAC1E,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;YACzC,uBAAuB,EAAE,IAAI;SAC9B;KACF;IACD,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ;QAChB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,MAAM,EAAE,YAAY;KACrB;CACF,CAAC;AAEK,MAAM,QAAQ,GACnB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACZ,IAAI,YAAY,GAAW,IAAA,iBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE;QAChF,YAAY,GAAG,IAAA,UAAK,EAAC,YAAY,EAAE;YACjC,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,YAAY,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;oBAC/D,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;KACJ;IAED,OAAO,IAAA,oBAAM,EAAC,YAAY,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC,CAAC;AAxBS,QAAA,QAAQ,YAwBjB"}

package/dist/middlewares/session.d.ts

@@ -0,0 +1,3 @@
+import koaSession from 'koa-session';
+import type { Common } from '../types';
+export declare const session: Common.MiddlewareFactory<Partial<koaSession.opts>>;

package/dist/middlewares/session.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.session = void 0;
+const fp_1 = require("lodash/fp");
+const koa_session_1 = __importDefault(require("koa-session"));
+const defaultConfig = {
+    key: 'koa.sess',
+    maxAge: 86400000,
+    autoCommit: true,
+    overwrite: true,
+    httpOnly: true,
+    signed: true,
+    rolling: false,
+    renew: false,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: undefined,
+};
+const session = (userConfig, { strapi }) => {
+    const { keys } = strapi.server.app;
+    if (!(0, fp_1.isArray)(keys) || (0, fp_1.isEmpty)(keys) || keys.some(fp_1.isEmpty)) {
+        throw new Error(`App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`);
+    }
+    const config = { ...defaultConfig, ...userConfig };
+    strapi.server.use((0, koa_session_1.default)(config, strapi.server.app));
+};
+exports.session = session;
+//# sourceMappingURL=session.js.map

package/dist/middlewares/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/middlewares/session.ts"],"names":[],"mappings":";;;;;;AAAA,kCAA6C;AAC7C,8DAAqC;AAGrC,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAC7C,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEK,MAAM,OAAO,GAAuD,CACzE,UAAU,EACV,EAAE,MAAM,EAAE,EACV,EAAE;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IACnC,IAAI,CAAC,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAO,CAAC,EAAE;QACzD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;KACH;IAED,MAAM,MAAM,GAA6B,EAAE,GAAG,aAAa,EAAE,GAAG,UAAU,EAAE,CAAC;IAE7E,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAU,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAdW,QAAA,OAAO,WAclB"}

package/dist/migrations/draft-publish.d.ts

@@ -0,0 +1,8 @@
+import { ContentType } from '../types/core/schemas';
+interface Input {
+    oldContentTypes: Record<string, ContentType>;
+    contentTypes: Record<string, ContentType>;
+}
+declare const enableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
+declare const disableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
+export { enableDraftAndPublish as enable, disableDraftAndPublish as disable };

package/dist/migrations/draft-publish.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.disable = exports.enable = void 0;
+const utils_1 = require("@strapi/utils");
+const enableDraftAndPublish = async ({ oldContentTypes, contentTypes }) => {
+    if (!oldContentTypes) {
+        return;
+    }
+    // run the after content types migrations
+    for (const uid in contentTypes) {
+        if (!oldContentTypes[uid]) {
+            continue;
+        }
+        const oldContentType = oldContentTypes[uid];
+        const contentType = contentTypes[uid];
+        // if d&p was enabled set publishedAt to eq createdAt
+        if (!utils_1.contentTypes.hasDraftAndPublish(oldContentType) &&
+            utils_1.contentTypes.hasDraftAndPublish(contentType)) {
+            const qb = strapi.db?.queryBuilder(uid);
+            await qb
+                .update({ published_at: qb.ref('created_at') })
+                .where({ published_at: null })
+                .execute();
+        }
+    }
+};
+exports.enable = enableDraftAndPublish;
+const disableDraftAndPublish = async ({ oldContentTypes, contentTypes }) => {
+    if (!oldContentTypes) {
+        return;
+    }
+    for (const uid in contentTypes) {
+        if (!oldContentTypes[uid]) {
+            continue;
+        }
+        const oldContentType = oldContentTypes[uid];
+        const contentType = contentTypes[uid];
+        // if d&p was disabled remove unpublish content before sync
+        if (utils_1.contentTypes.hasDraftAndPublish(oldContentType) &&
+            !utils_1.contentTypes.hasDraftAndPublish(contentType)) {
+            await strapi.db?.queryBuilder(uid).delete().where({ published_at: null }).execute();
+        }
+    }
+};
+exports.disable = disableDraftAndPublish;
+//# sourceMappingURL=draft-publish.js.map

package/dist/migrations/draft-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-publish.js","sourceRoot":"","sources":["../../src/migrations/draft-publish.ts"],"names":[],"mappings":";;;AAAA,yCAAkE;AAQlE,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAAE,eAAe,EAAE,YAAY,EAAS,EAAE,EAAE;IAC/E,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO;KACR;IACD,yCAAyC;IAEzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;QAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;YACzB,SAAS;SACV;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEtC,qDAAqD;QACrD,IACE,CAAC,oBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC;YACrD,oBAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,EACjD;YACA,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,EAAE;iBACL,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;iBAC9C,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;iBAC7B,OAAO,EAAE,CAAC;SACd;KACF;AACH,CAAC,CAAC;AAyBgC,uCAAM;AAvBxC,MAAM,sBAAsB,GAAG,KAAK,EAAE,EAAE,eAAe,EAAE,YAAY,EAAS,EAAE,EAAE;IAChF,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO;KACR;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;QAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;YACzB,SAAS;SACV;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEtC,2DAA2D;QAC3D,IACE,oBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC;YACpD,CAAC,oBAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAClD;YACA,MAAM,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACrF;KACF;AACH,CAAC,CAAC;AAEkE,yCAAO"}

package/dist/services/auth/index.d.ts

@@ -0,0 +1,25 @@
+import type { ParameterizedContext } from 'koa';
+import type { Common } from '../../types';
+interface AuthenticationResponse {
+    authenticated?: boolean;
+    credentials?: unknown;
+    ability?: unknown;
+    error?: Error | null;
+}
+interface AuthenticationInfo {
+    strategy: Strategy;
+    credentials: unknown;
+    ability: unknown;
+}
+interface Strategy {
+    name: string;
+    authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;
+    verify?: (auth: AuthenticationInfo, config: Common.RouteConfig['auth']) => Promise<any>;
+}
+interface Authentication {
+    register: (type: string, strategy: Strategy) => Authentication;
+    authenticate: Common.MiddlewareHandler;
+    verify: (auth: AuthenticationInfo, config?: Common.RouteConfig['auth']) => Promise<any>;
+}
+declare const createAuthentication: () => Authentication;
+export default createAuthentication;

package/dist/services/auth/index.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("assert/strict"));
+const fp_1 = require("lodash/fp");
+const utils_1 = require("@strapi/utils");
+const INVALID_STRATEGY_MSG = 'Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}';
+const validStrategy = (strategy) => {
+    (0, strict_1.default)((0, fp_1.has)('authenticate', strategy), INVALID_STRATEGY_MSG);
+    (0, strict_1.default)(typeof strategy.authenticate === 'function', INVALID_STRATEGY_MSG);
+    if ((0, fp_1.has)('verify', strategy)) {
+        (0, strict_1.default)(typeof strategy.verify === 'function', INVALID_STRATEGY_MSG);
+    }
+};
+const createAuthentication = () => {
+    const strategies = {};
+    return {
+        register(type, strategy) {
+            validStrategy(strategy);
+            if (!strategies[type]) {
+                strategies[type] = [];
+            }
+            strategies[type].push(strategy);
+            return this;
+        },
+        async authenticate(ctx, next) {
+            const route = ctx.state.route;
+            // use route strategy
+            const config = route?.config?.auth;
+            if (config === false) {
+                return next();
+            }
+            const routeStrategies = route.info.type ? strategies[route.info.type] : [];
+            const configStrategies = (config?.strategies ?? routeStrategies ?? []);
+            const strategiesToUse = configStrategies.reduce((acc, strategy) => {
+                // Resolve by strategy name
+                if (typeof strategy === 'string') {
+                    const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);
+                    if (routeStrategy) {
+                        acc.push(routeStrategy);
+                    }
+                }
+                // Use the given strategy as is
+                else if (typeof strategy === 'object') {
+                    validStrategy(strategy);
+                    acc.push(strategy);
+                }
+                return acc;
+            }, []);
+            for (const strategy of strategiesToUse) {
+                const result = await strategy.authenticate(ctx);
+                const { authenticated = false, credentials, ability = null, error = null } = result || {};
+                if (error !== null) {
+                    return ctx.unauthorized(error);
+                }
+                if (authenticated) {
+                    ctx.state.isAuthenticated = true;
+                    ctx.state.auth = {
+                        strategy,
+                        credentials,
+                        ability,
+                    };
+                    return next();
+                }
+            }
+            return ctx.unauthorized('Missing or invalid credentials');
+        },
+        async verify(auth, config = {}) {
+            if (config === false) {
+                return;
+            }
+            if (!auth) {
+                throw new utils_1.errors.UnauthorizedError();
+            }
+            if (typeof auth.strategy.verify === 'function') {
+                return auth.strategy.verify(auth, config);
+            }
+        },
+    };
+};
+exports.default = createAuthentication;
+//# sourceMappingURL=index.js.map

package/dist/services/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/auth/index.ts"],"names":[],"mappings":";;;;;AAAA,2DAAmC;AACnC,kCAAgC;AAEhC,yCAAuC;AA6BvC,MAAM,oBAAoB,GACxB,qHAAqH,CAAC;AAExH,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAE,EAAE;IAC3C,IAAA,gBAAM,EAAC,IAAA,QAAG,EAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC5D,IAAA,gBAAM,EAAC,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAE1E,IAAI,IAAA,QAAG,EAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QAC3B,IAAA,gBAAM,EAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,oBAAoB,CAAC,CAAC;KACrE;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,GAAmB,EAAE;IAChD,MAAM,UAAU,GAA+B,EAAE,CAAC;IAElD,OAAO;QACL,QAAQ,CAAC,IAAI,EAAE,QAAQ;YACrB,aAAa,CAAC,QAAQ,CAAC,CAAC;YAExB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBACrB,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACvB;YAED,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEhC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI;YAC1B,MAAM,KAAK,GAAiB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAE5C,qBAAqB;YACrB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC;YAEnC,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,OAAO,IAAI,EAAE,CAAC;aACf;YAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,eAAe,IAAI,EAAE,CAEpE,CAAC;YAEF,MAAM,eAAe,GAAe,gBAAgB,CAAC,MAAM,CACzD,CAAC,GAAG,EAAE,QAA2B,EAAE,EAAE;gBACnC,2BAA2B;gBAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;oBAChC,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;oBAEzE,IAAI,aAAa,EAAE;wBACjB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;qBACzB;iBACF;gBAED,+BAA+B;qBAC1B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;oBACrC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBAExB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACpB;gBAED,OAAO,GAAG,CAAC;YACb,CAAC,EACD,EAAgB,CACjB,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE;gBACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAEhD,MAAM,EAAE,aAAa,GAAG,KAAK,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;gBAE1F,IAAI,KAAK,KAAK,IAAI,EAAE;oBAClB,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;iBAChC;gBAED,IAAI,aAAa,EAAE;oBACjB,GAAG,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;oBACjC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG;wBACf,QAAQ;wBACR,WAAW;wBACX,OAAO;qBACR,CAAC;oBAEF,OAAO,IAAI,EAAE,CAAC;iBACf;aACF;YAED,OAAO,GAAG,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE;YAC5B,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,OAAO;aACR;YAED,IAAI,CAAC,IAAI,EAAE;gBACT,MAAM,IAAI,cAAM,CAAC,iBAAiB,EAAE,CAAC;aACtC;YAED,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE;gBAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aAC3C;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,kBAAe,oBAAoB,CAAC"}

package/dist/services/content-api/index.d.ts

@@ -0,0 +1,54 @@
+import { Common } from '../../types';
+import type { Strapi } from '../../Strapi';
+/**
+ * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)
+ */
+declare const createContentAPI: (strapi: Strapi) => {
+    permissions: {
+        engine: import("@strapi/permissions/dist/engine").Engine;
+        providers: {
+            action: {
+                register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+            condition: {
+                register(condition: import("./permissions/providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+        };
+        registerActions: () => Promise<void>;
+        getActionsMap: () => Record<string, {
+            controllers: Record<string, string[]>;
+        }>;
+    };
+    getRoutesMap: () => Promise<Record<string, Common.Route[]>>;
+};
+export default createContentAPI;