@strapi/strapi 4.15.0-alpha.0 → 4.15.1

package/dist/middlewares/query.js

@@ -1,45 +1,40 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.query = void 0;
-const qs_1 = __importDefault(require("qs"));
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const qs = require("qs");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const qs__default = /* @__PURE__ */ _interopDefault(qs);
 const defaults = {
-    strictNullHandling: true,
-    arrayLimit: 100,
-    depth: 20,
+  strictNullHandling: true,
+  arrayLimit: 100,
+  depth: 20
 };
-/**
- * Body parser hook
- */
 const addQsParser = (app, settings) => {
-    Object.defineProperty(app.request, 'query', {
-        configurable: false,
-        enumerable: true,
-        /*
-         * Get parsed query-string.
-         */
-        get() {
-            const qstr = this.querystring;
-            this._querycache = this._querycache || {};
-            const cache = this._querycache;
-            if (!cache[qstr]) {
-                cache[qstr] = qs_1.default.parse(qstr, settings);
-            }
-            return cache[qstr];
-        },
-        /*
-         * Set query-string as an object.
-         */
-        set(obj) {
-            this.querystring = qs_1.default.stringify(obj);
-        },
-    });
-    return app;
+  Object.defineProperty(app.request, "query", {
+    configurable: false,
+    enumerable: true,
+    /*
+     * Get parsed query-string.
+     */
+    get() {
+      const qstr = this.querystring;
+      this._querycache = this._querycache || {};
+      const cache = this._querycache;
+      if (!cache[qstr]) {
+        cache[qstr] = qs__default.default.parse(qstr, settings);
+      }
+      return cache[qstr];
+    },
+    /*
+     * Set query-string as an object.
+     */
+    set(obj) {
+      this.querystring = qs__default.default.stringify(obj);
+    }
+  });
+  return app;
 };
 const query = (config, { strapi }) => {
-    addQsParser(strapi.server.app, { ...defaults, ...config });
+  addQsParser(strapi.server.app, { ...defaults, ...config });
 };
 exports.query = query;
-//# sourceMappingURL=query.js.map
+//# sourceMappingURL=query.js.map

package/dist/middlewares/query.js.map

@@ -1 +1 @@
-{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/middlewares/query.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAuC;AAMvC,MAAM,QAAQ,GAAW;IACvB,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,EAAE;CACV,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,GAAG,CAAC,GAAQ,EAAE,QAAgB,EAAE,EAAE;IACjD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE;QAC1C,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,IAAI;QAChB;;WAEG;QACH,GAAG;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAE/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBAChB,KAAK,CAAC,IAAI,CAAC,GAAG,YAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;aACxC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED;;WAEG;QACH,GAAG,CAAC,GAAG;YACL,IAAI,CAAC,WAAW,GAAG,YAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEK,MAAM,KAAK,GAA6B,CAC7C,MAAuB,EACvB,EAAE,MAAM,EAAsB,EAC9B,EAAE;IACF,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC;AALW,QAAA,KAAK,SAKhB"}
+{"version":3,"file":"query.js","sources":["../../src/middlewares/query.ts"],"sourcesContent":["import qs, { IParseOptions } from 'qs';\nimport type Koa from 'koa';\nimport type { Strapi, Common } from '@strapi/types';\n\ntype Config = IParseOptions;\n\nconst defaults: Config = {\n  strictNullHandling: true,\n  arrayLimit: 100,\n  depth: 20,\n};\n\n/**\n * Body parser hook\n */\nconst addQsParser = (app: Koa, settings: Config) => {\n  Object.defineProperty(app.request, 'query', {\n    configurable: false,\n    enumerable: true,\n    /*\n     * Get parsed query-string.\n     */\n    get() {\n      const qstr = this.querystring;\n      this._querycache = this._querycache || {};\n      const cache = this._querycache;\n\n      if (!cache[qstr]) {\n        cache[qstr] = qs.parse(qstr, settings);\n      }\n\n      return cache[qstr];\n    },\n\n    /*\n     * Set query-string as an object.\n     */\n    set(obj) {\n      this.querystring = qs.stringify(obj);\n    },\n  });\n\n  return app;\n};\n\nexport const query: Common.MiddlewareFactory = (\n  config: Partial<Config>,\n  { strapi }: { strapi: Strapi }\n) => {\n  addQsParser(strapi.server.app, { ...defaults, ...config });\n};\n"],"names":["qs"],"mappings":";;;;;AAMA,MAAM,WAAmB;AAAA,EACvB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,OAAO;AACT;AAKA,MAAM,cAAc,CAAC,KAAU,aAAqB;AAC3C,SAAA,eAAe,IAAI,SAAS,SAAS;AAAA,IAC1C,cAAc;AAAA,IACd,YAAY;AAAA;AAAA;AAAA;AAAA,IAIZ,MAAM;AACJ,YAAM,OAAO,KAAK;AACb,WAAA,cAAc,KAAK,eAAe,CAAA;AACvC,YAAM,QAAQ,KAAK;AAEf,UAAA,CAAC,MAAM,IAAI,GAAG;AAChB,cAAM,IAAI,IAAIA,YAAAA,QAAG,MAAM,MAAM,QAAQ;AAAA,MACvC;AAEA,aAAO,MAAM,IAAI;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAK;AACF,WAAA,cAAcA,YAAAA,QAAG,UAAU,GAAG;AAAA,IACrC;AAAA,EAAA,CACD;AAEM,SAAA;AACT;AAEO,MAAM,QAAkC,CAC7C,QACA,EAAE,aACC;AACS,cAAA,OAAO,OAAO,KAAK,EAAE,GAAG,UAAU,GAAG,QAAQ;AAC3D;;"}

package/dist/middlewares/query.mjs

@@ -0,0 +1,38 @@
+import qs from "qs";
+const defaults = {
+  strictNullHandling: true,
+  arrayLimit: 100,
+  depth: 20
+};
+const addQsParser = (app, settings) => {
+  Object.defineProperty(app.request, "query", {
+    configurable: false,
+    enumerable: true,
+    /*
+     * Get parsed query-string.
+     */
+    get() {
+      const qstr = this.querystring;
+      this._querycache = this._querycache || {};
+      const cache = this._querycache;
+      if (!cache[qstr]) {
+        cache[qstr] = qs.parse(qstr, settings);
+      }
+      return cache[qstr];
+    },
+    /*
+     * Set query-string as an object.
+     */
+    set(obj) {
+      this.querystring = qs.stringify(obj);
+    }
+  });
+  return app;
+};
+const query = (config, { strapi }) => {
+  addQsParser(strapi.server.app, { ...defaults, ...config });
+};
+export {
+  query
+};
+//# sourceMappingURL=query.mjs.map

package/dist/middlewares/query.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.mjs","sources":["../../src/middlewares/query.ts"],"sourcesContent":["import qs, { IParseOptions } from 'qs';\nimport type Koa from 'koa';\nimport type { Strapi, Common } from '@strapi/types';\n\ntype Config = IParseOptions;\n\nconst defaults: Config = {\n  strictNullHandling: true,\n  arrayLimit: 100,\n  depth: 20,\n};\n\n/**\n * Body parser hook\n */\nconst addQsParser = (app: Koa, settings: Config) => {\n  Object.defineProperty(app.request, 'query', {\n    configurable: false,\n    enumerable: true,\n    /*\n     * Get parsed query-string.\n     */\n    get() {\n      const qstr = this.querystring;\n      this._querycache = this._querycache || {};\n      const cache = this._querycache;\n\n      if (!cache[qstr]) {\n        cache[qstr] = qs.parse(qstr, settings);\n      }\n\n      return cache[qstr];\n    },\n\n    /*\n     * Set query-string as an object.\n     */\n    set(obj) {\n      this.querystring = qs.stringify(obj);\n    },\n  });\n\n  return app;\n};\n\nexport const query: Common.MiddlewareFactory = (\n  config: Partial<Config>,\n  { strapi }: { strapi: Strapi }\n) => {\n  addQsParser(strapi.server.app, { ...defaults, ...config });\n};\n"],"names":[],"mappings":";AAMA,MAAM,WAAmB;AAAA,EACvB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,OAAO;AACT;AAKA,MAAM,cAAc,CAAC,KAAU,aAAqB;AAC3C,SAAA,eAAe,IAAI,SAAS,SAAS;AAAA,IAC1C,cAAc;AAAA,IACd,YAAY;AAAA;AAAA;AAAA;AAAA,IAIZ,MAAM;AACJ,YAAM,OAAO,KAAK;AACb,WAAA,cAAc,KAAK,eAAe,CAAA;AACvC,YAAM,QAAQ,KAAK;AAEf,UAAA,CAAC,MAAM,IAAI,GAAG;AAChB,cAAM,IAAI,IAAI,GAAG,MAAM,MAAM,QAAQ;AAAA,MACvC;AAEA,aAAO,MAAM,IAAI;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAK;AACF,WAAA,cAAc,GAAG,UAAU,GAAG;AAAA,IACrC;AAAA,EAAA,CACD;AAEM,SAAA;AACT;AAEO,MAAM,QAAkC,CAC7C,QACA,EAAE,aACC;AACS,cAAA,OAAO,OAAO,KAAK,EAAE,GAAG,UAAU,GAAG,QAAQ;AAC3D;"}

package/dist/middlewares/response-time.d.ts

@@ -1,2 +1,3 @@
 import type { Common } from '@strapi/types';
 export declare const responseTime: Common.MiddlewareFactory;
+//# sourceMappingURL=response-time.d.ts.map

package/dist/middlewares/response-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.d.ts","sourceRoot":"","sources":["../../src/middlewares/response-time.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,iBASjC,CAAC"}

package/dist/middlewares/response-time.js

@@ -1,13 +1,12 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.responseTime = void 0;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const responseTime = () => {
-    return async (ctx, next) => {
-        const start = Date.now();
-        await next();
-        const delta = Math.ceil(Date.now() - start);
-        ctx.set('X-Response-Time', `${delta}ms`);
-    };
+  return async (ctx, next) => {
+    const start = Date.now();
+    await next();
+    const delta = Math.ceil(Date.now() - start);
+    ctx.set("X-Response-Time", `${delta}ms`);
+  };
 };
 exports.responseTime = responseTime;
-//# sourceMappingURL=response-time.js.map
+//# sourceMappingURL=response-time.js.map

package/dist/middlewares/response-time.js.map

@@ -1 +1 @@
-{"version":3,"file":"response-time.js","sourceRoot":"","sources":["../../src/middlewares/response-time.ts"],"names":[],"mappings":";;;AAEO,MAAM,YAAY,GAA6B,GAAG,EAAE;IACzD,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC,CAAC;AATW,QAAA,YAAY,gBASvB"}
+{"version":3,"file":"response-time.js","sources":["../../src/middlewares/response-time.ts"],"sourcesContent":["import type { Common } from '@strapi/types';\n\nexport const responseTime: Common.MiddlewareFactory = () => {\n  return async (ctx, next) => {\n    const start = Date.now();\n\n    await next();\n\n    const delta = Math.ceil(Date.now() - start);\n    ctx.set('X-Response-Time', `${delta}ms`);\n  };\n};\n"],"names":[],"mappings":";;AAEO,MAAM,eAAyC,MAAM;AACnD,SAAA,OAAO,KAAK,SAAS;AACpB,UAAA,QAAQ,KAAK;AAEnB,UAAM,KAAK;AAEX,UAAM,QAAQ,KAAK,KAAK,KAAK,IAAA,IAAQ,KAAK;AAC1C,QAAI,IAAI,mBAAmB,GAAG,KAAK,IAAI;AAAA,EAAA;AAE3C;;"}

package/dist/middlewares/response-time.mjs

@@ -0,0 +1,12 @@
+const responseTime = () => {
+  return async (ctx, next) => {
+    const start = Date.now();
+    await next();
+    const delta = Math.ceil(Date.now() - start);
+    ctx.set("X-Response-Time", `${delta}ms`);
+  };
+};
+export {
+  responseTime
+};
+//# sourceMappingURL=response-time.mjs.map

package/dist/middlewares/response-time.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time.mjs","sources":["../../src/middlewares/response-time.ts"],"sourcesContent":["import type { Common } from '@strapi/types';\n\nexport const responseTime: Common.MiddlewareFactory = () => {\n  return async (ctx, next) => {\n    const start = Date.now();\n\n    await next();\n\n    const delta = Math.ceil(Date.now() - start);\n    ctx.set('X-Response-Time', `${delta}ms`);\n  };\n};\n"],"names":[],"mappings":"AAEO,MAAM,eAAyC,MAAM;AACnD,SAAA,OAAO,KAAK,SAAS;AACpB,UAAA,QAAQ,KAAK;AAEnB,UAAM,KAAK;AAEX,UAAM,QAAQ,KAAK,KAAK,KAAK,IAAA,IAAQ,KAAK;AAC1C,QAAI,IAAI,mBAAmB,GAAG,KAAK,IAAI;AAAA,EAAA;AAE3C;"}

package/dist/middlewares/responses.d.ts

@@ -3,3 +3,4 @@ export interface Config {
     handlers?: Record<number, Common.MiddlewareHandler>;
 }
 export declare const responses: Common.MiddlewareFactory<Config>;
+//# sourceMappingURL=responses.d.ts.map

package/dist/middlewares/responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/middlewares/responses.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAED,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAWtD,CAAC"}

package/dist/middlewares/responses.js

@@ -1,16 +1,15 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.responses = void 0;
-const fp_1 = require("lodash/fp");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
 const responses = (config = {}) => {
-    return async (ctx, next) => {
-        await next();
-        const { status } = ctx;
-        const handler = config?.handlers?.[status];
-        if ((0, fp_1.isFunction)(handler)) {
-            await handler(ctx, next);
-        }
-    };
+  return async (ctx, next) => {
+    await next();
+    const { status } = ctx;
+    const handler = config?.handlers?.[status];
+    if (_.isFunction(handler)) {
+      await handler(ctx, next);
+    }
+  };
 };
 exports.responses = responses;
-//# sourceMappingURL=responses.js.map
+//# sourceMappingURL=responses.js.map

package/dist/middlewares/responses.js.map

@@ -1 +1 @@
-{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/middlewares/responses.ts"],"names":[],"mappings":";;;AAAA,kCAAuC;AAOhC,MAAM,SAAS,GAAqC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE;IACzE,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE;YACvB,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,SAAS,aAWpB"}
+{"version":3,"file":"responses.js","sources":["../../src/middlewares/responses.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport type { Common } from '@strapi/types';\n\nexport interface Config {\n  handlers?: Record<number, Common.MiddlewareHandler>;\n}\n\nexport const responses: Common.MiddlewareFactory<Config> = (config = {}) => {\n  return async (ctx, next) => {\n    await next();\n\n    const { status } = ctx;\n    const handler = config?.handlers?.[status];\n\n    if (isFunction(handler)) {\n      await handler(ctx, next);\n    }\n  };\n};\n"],"names":["isFunction"],"mappings":";;;AAOO,MAAM,YAA8C,CAAC,SAAS,OAAO;AACnE,SAAA,OAAO,KAAK,SAAS;AAC1B,UAAM,KAAK;AAEL,UAAA,EAAE,OAAW,IAAA;AACb,UAAA,UAAU,QAAQ,WAAW,MAAM;AAErC,QAAAA,EAAAA,WAAW,OAAO,GAAG;AACjB,YAAA,QAAQ,KAAK,IAAI;AAAA,IACzB;AAAA,EAAA;AAEJ;;"}

package/dist/middlewares/responses.mjs

@@ -0,0 +1,15 @@
+import { isFunction } from "lodash/fp";
+const responses = (config = {}) => {
+  return async (ctx, next) => {
+    await next();
+    const { status } = ctx;
+    const handler = config?.handlers?.[status];
+    if (isFunction(handler)) {
+      await handler(ctx, next);
+    }
+  };
+};
+export {
+  responses
+};
+//# sourceMappingURL=responses.mjs.map

package/dist/middlewares/responses.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.mjs","sources":["../../src/middlewares/responses.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport type { Common } from '@strapi/types';\n\nexport interface Config {\n  handlers?: Record<number, Common.MiddlewareHandler>;\n}\n\nexport const responses: Common.MiddlewareFactory<Config> = (config = {}) => {\n  return async (ctx, next) => {\n    await next();\n\n    const { status } = ctx;\n    const handler = config?.handlers?.[status];\n\n    if (isFunction(handler)) {\n      await handler(ctx, next);\n    }\n  };\n};\n"],"names":[],"mappings":";AAOO,MAAM,YAA8C,CAAC,SAAS,OAAO;AACnE,SAAA,OAAO,KAAK,SAAS;AAC1B,UAAM,KAAK;AAEL,UAAA,EAAE,OAAW,IAAA;AACb,UAAA,UAAU,QAAQ,WAAW,MAAM;AAErC,QAAA,WAAW,OAAO,GAAG;AACjB,YAAA,QAAQ,KAAK,IAAI;AAAA,IACzB;AAAA,EAAA;AAEJ;"}

package/dist/middlewares/security.d.ts

@@ -2,3 +2,4 @@ import { KoaHelmet } from 'koa-helmet';
 import type { Common } from '@strapi/types';
 export type Config = NonNullable<Parameters<KoaHelmet>[0]>;
 export declare const security: Common.MiddlewareFactory<Config>;
+//# sourceMappingURL=security.d.ts.map

package/dist/middlewares/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/middlewares/security.ts"],"names":[],"mappings":"AACA,OAAe,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AA0B3D,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAwBnD,CAAC"}

package/dist/middlewares/security.js

@@ -1,52 +1,50 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.security = void 0;
-const fp_1 = require("lodash/fp");
-const koa_helmet_1 = __importDefault(require("koa-helmet"));
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
+const helmet = require("koa-helmet");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const helmet__default = /* @__PURE__ */ _interopDefault(helmet);
 const defaults = {
-    crossOriginEmbedderPolicy: false,
-    crossOriginOpenerPolicy: false,
-    crossOriginResourcePolicy: false,
-    originAgentCluster: false,
-    contentSecurityPolicy: {
-        useDefaults: true,
-        directives: {
-            'connect-src': ["'self'", 'https:'],
-            'img-src': ["'self'", 'data:', 'blob:', 'https://market-assets.strapi.io'],
-            'media-src': ["'self'", 'data:', 'blob:'],
-            upgradeInsecureRequests: null,
-        },
-    },
-    xssFilter: false,
-    hsts: {
-        maxAge: 31536000,
-        includeSubDomains: true,
-    },
-    frameguard: {
-        action: 'sameorigin',
-    },
+  crossOriginEmbedderPolicy: false,
+  crossOriginOpenerPolicy: false,
+  crossOriginResourcePolicy: false,
+  originAgentCluster: false,
+  contentSecurityPolicy: {
+    useDefaults: true,
+    directives: {
+      "connect-src": ["'self'", "https:"],
+      "img-src": ["'self'", "data:", "blob:", "https://market-assets.strapi.io"],
+      "media-src": ["'self'", "data:", "blob:"],
+      upgradeInsecureRequests: null
+    }
+  },
+  xssFilter: false,
+  hsts: {
+    maxAge: 31536e3,
+    includeSubDomains: true
+  },
+  frameguard: {
+    action: "sameorigin"
+  }
 };
 const security = (config, { strapi }) => (ctx, next) => {
-    let helmetConfig = (0, fp_1.defaultsDeep)(defaults, config);
-    const specialPaths = ['/documentation'];
-    if (strapi.plugin('graphql')) {
-        const { config: gqlConfig } = strapi.plugin('graphql');
-        specialPaths.push(gqlConfig('endpoint'));
-    }
-    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {
-        helmetConfig = (0, fp_1.merge)(helmetConfig, {
-            contentSecurityPolicy: {
-                directives: {
-                    'script-src': ["'self'", "'unsafe-inline'", 'cdn.jsdelivr.net'],
-                    'img-src': ["'self'", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],
-                },
-            },
-        });
-    }
-    return (0, koa_helmet_1.default)(helmetConfig)(ctx, next);
+  let helmetConfig = _.defaultsDeep(defaults, config);
+  const specialPaths = ["/documentation"];
+  if (strapi.plugin("graphql")) {
+    const { config: gqlConfig } = strapi.plugin("graphql");
+    specialPaths.push(gqlConfig("endpoint"));
+  }
+  if (ctx.method === "GET" && specialPaths.some((str) => ctx.path.startsWith(str))) {
+    helmetConfig = _.merge(helmetConfig, {
+      contentSecurityPolicy: {
+        directives: {
+          "script-src": ["'self'", "'unsafe-inline'", "cdn.jsdelivr.net"],
+          "img-src": ["'self'", "data:", "cdn.jsdelivr.net", "strapi.io"]
+        }
+      }
+    });
+  }
+  return helmet__default.default(helmetConfig)(ctx, next);
 };
 exports.security = security;
-//# sourceMappingURL=security.js.map
+//# sourceMappingURL=security.js.map

package/dist/middlewares/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middlewares/security.ts"],"names":[],"mappings":";;;;;;AAAA,kCAAgD;AAChD,4DAA+C;AAM/C,MAAM,QAAQ,GAAW;IACvB,yBAAyB,EAAE,KAAK;IAChC,uBAAuB,EAAE,KAAK;IAC9B,yBAAyB,EAAE,KAAK;IAChC,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE;YACV,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,CAAC;YAC1E,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;YACzC,uBAAuB,EAAE,IAAI;SAC9B;KACF;IACD,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ;QAChB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,MAAM,EAAE,YAAY;KACrB;CACF,CAAC;AAEK,MAAM,QAAQ,GACnB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACZ,IAAI,YAAY,GAAW,IAAA,iBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE;QAChF,YAAY,GAAG,IAAA,UAAK,EAAC,YAAY,EAAE;YACjC,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,YAAY,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;oBAC/D,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;KACJ;IAED,OAAO,IAAA,oBAAM,EAAC,YAAY,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC,CAAC;AAxBS,QAAA,QAAQ,YAwBjB"}
+{"version":3,"file":"security.js","sources":["../../src/middlewares/security.ts"],"sourcesContent":["import { defaultsDeep, merge } from 'lodash/fp';\nimport helmet, { KoaHelmet } from 'koa-helmet';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<KoaHelmet>[0]>;\n\nconst defaults: Config = {\n  crossOriginEmbedderPolicy: false,\n  crossOriginOpenerPolicy: false,\n  crossOriginResourcePolicy: false,\n  originAgentCluster: false,\n  contentSecurityPolicy: {\n    useDefaults: true,\n    directives: {\n      'connect-src': [\"'self'\", 'https:'],\n      'img-src': [\"'self'\", 'data:', 'blob:', 'https://market-assets.strapi.io'],\n      'media-src': [\"'self'\", 'data:', 'blob:'],\n      upgradeInsecureRequests: null,\n    },\n  },\n  xssFilter: false,\n  hsts: {\n    maxAge: 31536000,\n    includeSubDomains: true,\n  },\n  frameguard: {\n    action: 'sameorigin',\n  },\n};\n\nexport const security: Common.MiddlewareFactory<Config> =\n  (config, { strapi }) =>\n  (ctx, next) => {\n    let helmetConfig: Config = defaultsDeep(defaults, config);\n\n    const specialPaths = ['/documentation'];\n\n    if (strapi.plugin('graphql')) {\n      const { config: gqlConfig } = strapi.plugin('graphql');\n      specialPaths.push(gqlConfig('endpoint'));\n    }\n\n    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {\n      helmetConfig = merge(helmetConfig, {\n        contentSecurityPolicy: {\n          directives: {\n            'script-src': [\"'self'\", \"'unsafe-inline'\", 'cdn.jsdelivr.net'],\n            'img-src': [\"'self'\", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],\n          },\n        },\n      });\n    }\n\n    return helmet(helmetConfig)(ctx, next);\n  };\n"],"names":["defaultsDeep","merge","helmet"],"mappings":";;;;;;AAOA,MAAM,WAAmB;AAAA,EACvB,2BAA2B;AAAA,EAC3B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,IACrB,aAAa;AAAA,IACb,YAAY;AAAA,MACV,eAAe,CAAC,UAAU,QAAQ;AAAA,MAClC,WAAW,CAAC,UAAU,SAAS,SAAS,iCAAiC;AAAA,MACzE,aAAa,CAAC,UAAU,SAAS,OAAO;AAAA,MACxC,yBAAyB;AAAA,IAC3B;AAAA,EACF;AAAA,EACA,WAAW;AAAA,EACX,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,mBAAmB;AAAA,EACrB;AAAA,EACA,YAAY;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAEa,MAAA,WACX,CAAC,QAAQ,EAAE,aACX,CAAC,KAAK,SAAS;AACT,MAAA,eAAuBA,EAAAA,aAAa,UAAU,MAAM;AAElD,QAAA,eAAe,CAAC,gBAAgB;AAElC,MAAA,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,EAAE,QAAQ,UAAA,IAAc,OAAO,OAAO,SAAS;AACxC,iBAAA,KAAK,UAAU,UAAU,CAAC;AAAA,EACzC;AAEA,MAAI,IAAI,WAAW,SAAS,aAAa,KAAK,CAAC,QAAQ,IAAI,KAAK,WAAW,GAAG,CAAC,GAAG;AAChF,mBAAeC,QAAM,cAAc;AAAA,MACjC,uBAAuB;AAAA,QACrB,YAAY;AAAA,UACV,cAAc,CAAC,UAAU,mBAAmB,kBAAkB;AAAA,UAC9D,WAAW,CAAC,UAAU,SAAS,oBAAoB,WAAW;AAAA,QAChE;AAAA,MACF;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAOC,gBAAO,QAAA,YAAY,EAAE,KAAK,IAAI;AACvC;;"}

package/dist/middlewares/security.mjs

@@ -0,0 +1,48 @@
+import { defaultsDeep, merge } from "lodash/fp";
+import helmet from "koa-helmet";
+const defaults = {
+  crossOriginEmbedderPolicy: false,
+  crossOriginOpenerPolicy: false,
+  crossOriginResourcePolicy: false,
+  originAgentCluster: false,
+  contentSecurityPolicy: {
+    useDefaults: true,
+    directives: {
+      "connect-src": ["'self'", "https:"],
+      "img-src": ["'self'", "data:", "blob:", "https://market-assets.strapi.io"],
+      "media-src": ["'self'", "data:", "blob:"],
+      upgradeInsecureRequests: null
+    }
+  },
+  xssFilter: false,
+  hsts: {
+    maxAge: 31536e3,
+    includeSubDomains: true
+  },
+  frameguard: {
+    action: "sameorigin"
+  }
+};
+const security = (config, { strapi }) => (ctx, next) => {
+  let helmetConfig = defaultsDeep(defaults, config);
+  const specialPaths = ["/documentation"];
+  if (strapi.plugin("graphql")) {
+    const { config: gqlConfig } = strapi.plugin("graphql");
+    specialPaths.push(gqlConfig("endpoint"));
+  }
+  if (ctx.method === "GET" && specialPaths.some((str) => ctx.path.startsWith(str))) {
+    helmetConfig = merge(helmetConfig, {
+      contentSecurityPolicy: {
+        directives: {
+          "script-src": ["'self'", "'unsafe-inline'", "cdn.jsdelivr.net"],
+          "img-src": ["'self'", "data:", "cdn.jsdelivr.net", "strapi.io"]
+        }
+      }
+    });
+  }
+  return helmet(helmetConfig)(ctx, next);
+};
+export {
+  security
+};
+//# sourceMappingURL=security.mjs.map

package/dist/middlewares/security.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.mjs","sources":["../../src/middlewares/security.ts"],"sourcesContent":["import { defaultsDeep, merge } from 'lodash/fp';\nimport helmet, { KoaHelmet } from 'koa-helmet';\n\nimport type { Common } from '@strapi/types';\n\nexport type Config = NonNullable<Parameters<KoaHelmet>[0]>;\n\nconst defaults: Config = {\n  crossOriginEmbedderPolicy: false,\n  crossOriginOpenerPolicy: false,\n  crossOriginResourcePolicy: false,\n  originAgentCluster: false,\n  contentSecurityPolicy: {\n    useDefaults: true,\n    directives: {\n      'connect-src': [\"'self'\", 'https:'],\n      'img-src': [\"'self'\", 'data:', 'blob:', 'https://market-assets.strapi.io'],\n      'media-src': [\"'self'\", 'data:', 'blob:'],\n      upgradeInsecureRequests: null,\n    },\n  },\n  xssFilter: false,\n  hsts: {\n    maxAge: 31536000,\n    includeSubDomains: true,\n  },\n  frameguard: {\n    action: 'sameorigin',\n  },\n};\n\nexport const security: Common.MiddlewareFactory<Config> =\n  (config, { strapi }) =>\n  (ctx, next) => {\n    let helmetConfig: Config = defaultsDeep(defaults, config);\n\n    const specialPaths = ['/documentation'];\n\n    if (strapi.plugin('graphql')) {\n      const { config: gqlConfig } = strapi.plugin('graphql');\n      specialPaths.push(gqlConfig('endpoint'));\n    }\n\n    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {\n      helmetConfig = merge(helmetConfig, {\n        contentSecurityPolicy: {\n          directives: {\n            'script-src': [\"'self'\", \"'unsafe-inline'\", 'cdn.jsdelivr.net'],\n            'img-src': [\"'self'\", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],\n          },\n        },\n      });\n    }\n\n    return helmet(helmetConfig)(ctx, next);\n  };\n"],"names":[],"mappings":";;AAOA,MAAM,WAAmB;AAAA,EACvB,2BAA2B;AAAA,EAC3B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,IACrB,aAAa;AAAA,IACb,YAAY;AAAA,MACV,eAAe,CAAC,UAAU,QAAQ;AAAA,MAClC,WAAW,CAAC,UAAU,SAAS,SAAS,iCAAiC;AAAA,MACzE,aAAa,CAAC,UAAU,SAAS,OAAO;AAAA,MACxC,yBAAyB;AAAA,IAC3B;AAAA,EACF;AAAA,EACA,WAAW;AAAA,EACX,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,mBAAmB;AAAA,EACrB;AAAA,EACA,YAAY;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAEa,MAAA,WACX,CAAC,QAAQ,EAAE,aACX,CAAC,KAAK,SAAS;AACT,MAAA,eAAuB,aAAa,UAAU,MAAM;AAElD,QAAA,eAAe,CAAC,gBAAgB;AAElC,MAAA,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,EAAE,QAAQ,UAAA,IAAc,OAAO,OAAO,SAAS;AACxC,iBAAA,KAAK,UAAU,UAAU,CAAC;AAAA,EACzC;AAEA,MAAI,IAAI,WAAW,SAAS,aAAa,KAAK,CAAC,QAAQ,IAAI,KAAK,WAAW,GAAG,CAAC,GAAG;AAChF,mBAAe,MAAM,cAAc;AAAA,MACjC,uBAAuB;AAAA,QACrB,YAAY;AAAA,UACV,cAAc,CAAC,UAAU,mBAAmB,kBAAkB;AAAA,UAC9D,WAAW,CAAC,UAAU,SAAS,oBAAoB,WAAW;AAAA,QAChE;AAAA,MACF;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAO,OAAO,YAAY,EAAE,KAAK,IAAI;AACvC;"}

package/dist/middlewares/session.d.ts

@@ -1,3 +1,4 @@
 import koaSession from 'koa-session';
 import type { Common } from '@strapi/types';
 export declare const session: Common.MiddlewareFactory<Partial<koaSession.opts>>;
+//# sourceMappingURL=session.d.ts.map

package/dist/middlewares/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/middlewares/session.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAe5C,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CActE,CAAC"}

package/dist/middlewares/session.js

@@ -1,30 +1,30 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.session = void 0;
-const fp_1 = require("lodash/fp");
-const koa_session_1 = __importDefault(require("koa-session"));
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const _ = require("lodash/fp");
+const koaSession = require("koa-session");
+const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
+const koaSession__default = /* @__PURE__ */ _interopDefault(koaSession);
 const defaultConfig = {
-    key: 'koa.sess',
-    maxAge: 86400000,
-    autoCommit: true,
-    overwrite: true,
-    httpOnly: true,
-    signed: true,
-    rolling: false,
-    renew: false,
-    secure: process.env.NODE_ENV === 'production',
-    sameSite: undefined,
+  key: "koa.sess",
+  maxAge: 864e5,
+  autoCommit: true,
+  overwrite: true,
+  httpOnly: true,
+  signed: true,
+  rolling: false,
+  renew: false,
+  secure: process.env.NODE_ENV === "production",
+  sameSite: void 0
 };
 const session = (userConfig, { strapi }) => {
-    const { keys } = strapi.server.app;
-    if (!(0, fp_1.isArray)(keys) || (0, fp_1.isEmpty)(keys) || keys.some(fp_1.isEmpty)) {
-        throw new Error(`App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`);
-    }
-    const config = { ...defaultConfig, ...userConfig };
-    strapi.server.use((0, koa_session_1.default)(config, strapi.server.app));
+  const { keys } = strapi.server.app;
+  if (!_.isArray(keys) || _.isEmpty(keys) || keys.some(_.isEmpty)) {
+    throw new Error(
+      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`
+    );
+  }
+  const config = { ...defaultConfig, ...userConfig };
+  strapi.server.use(koaSession__default.default(config, strapi.server.app));
 };
 exports.session = session;
-//# sourceMappingURL=session.js.map
+//# sourceMappingURL=session.js.map

package/dist/middlewares/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/middlewares/session.ts"],"names":[],"mappings":";;;;;;AAAA,kCAA6C;AAC7C,8DAAqC;AAGrC,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAC7C,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEK,MAAM,OAAO,GAAuD,CACzE,UAAU,EACV,EAAE,MAAM,EAAE,EACV,EAAE;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IACnC,IAAI,CAAC,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAO,CAAC,EAAE;QACzD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;KACH;IAED,MAAM,MAAM,GAA6B,EAAE,GAAG,aAAa,EAAE,GAAG,UAAU,EAAE,CAAC;IAE7E,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAU,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAdW,QAAA,OAAO,WAclB"}
+{"version":3,"file":"session.js","sources":["../../src/middlewares/session.ts"],"sourcesContent":["import { isEmpty, isArray } from 'lodash/fp';\nimport koaSession from 'koa-session';\nimport type { Common } from '@strapi/types';\n\nconst defaultConfig = {\n  key: 'koa.sess',\n  maxAge: 86400000,\n  autoCommit: true,\n  overwrite: true,\n  httpOnly: true,\n  signed: true,\n  rolling: false,\n  renew: false,\n  secure: process.env.NODE_ENV === 'production',\n  sameSite: undefined,\n};\n\nexport const session: Common.MiddlewareFactory<Partial<koaSession.opts>> = (\n  userConfig,\n  { strapi }\n) => {\n  const { keys } = strapi.server.app;\n  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {\n    throw new Error(\n      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`\n    );\n  }\n\n  const config: Partial<koaSession.opts> = { ...defaultConfig, ...userConfig };\n\n  strapi.server.use(koaSession(config, strapi.server.app));\n};\n"],"names":["isArray","isEmpty","koaSession"],"mappings":";;;;;;AAIA,MAAM,gBAAgB;AAAA,EACpB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AACZ;AAEO,MAAM,UAA8D,CACzE,YACA,EAAE,aACC;AACH,QAAM,EAAE,KAAS,IAAA,OAAO,OAAO;AAC3B,MAAA,CAACA,EAAAA,QAAQ,IAAI,KAAKC,EAAA,QAAQ,IAAI,KAAK,KAAK,KAAKA,EAAAA,OAAO,GAAG;AACzD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,SAAmC,EAAE,GAAG,eAAe,GAAG,WAAW;AAE3E,SAAO,OAAO,IAAIC,oBAAA,QAAW,QAAQ,OAAO,OAAO,GAAG,CAAC;AACzD;;"}

package/dist/middlewares/session.mjs

@@ -0,0 +1,28 @@
+import { isArray, isEmpty } from "lodash/fp";
+import koaSession from "koa-session";
+const defaultConfig = {
+  key: "koa.sess",
+  maxAge: 864e5,
+  autoCommit: true,
+  overwrite: true,
+  httpOnly: true,
+  signed: true,
+  rolling: false,
+  renew: false,
+  secure: process.env.NODE_ENV === "production",
+  sameSite: void 0
+};
+const session = (userConfig, { strapi }) => {
+  const { keys } = strapi.server.app;
+  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {
+    throw new Error(
+      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`
+    );
+  }
+  const config = { ...defaultConfig, ...userConfig };
+  strapi.server.use(koaSession(config, strapi.server.app));
+};
+export {
+  session
+};
+//# sourceMappingURL=session.mjs.map

package/dist/middlewares/session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.mjs","sources":["../../src/middlewares/session.ts"],"sourcesContent":["import { isEmpty, isArray } from 'lodash/fp';\nimport koaSession from 'koa-session';\nimport type { Common } from '@strapi/types';\n\nconst defaultConfig = {\n  key: 'koa.sess',\n  maxAge: 86400000,\n  autoCommit: true,\n  overwrite: true,\n  httpOnly: true,\n  signed: true,\n  rolling: false,\n  renew: false,\n  secure: process.env.NODE_ENV === 'production',\n  sameSite: undefined,\n};\n\nexport const session: Common.MiddlewareFactory<Partial<koaSession.opts>> = (\n  userConfig,\n  { strapi }\n) => {\n  const { keys } = strapi.server.app;\n  if (!isArray(keys) || isEmpty(keys) || keys.some(isEmpty)) {\n    throw new Error(\n      `App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`\n    );\n  }\n\n  const config: Partial<koaSession.opts> = { ...defaultConfig, ...userConfig };\n\n  strapi.server.use(koaSession(config, strapi.server.app));\n};\n"],"names":[],"mappings":";;AAIA,MAAM,gBAAgB;AAAA,EACpB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ,QAAQ,IAAI,aAAa;AAAA,EACjC,UAAU;AACZ;AAEO,MAAM,UAA8D,CACzE,YACA,EAAE,aACC;AACH,QAAM,EAAE,KAAS,IAAA,OAAO,OAAO;AAC3B,MAAA,CAAC,QAAQ,IAAI,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,OAAO,GAAG;AACzD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,SAAmC,EAAE,GAAG,eAAe,GAAG,WAAW;AAE3E,SAAO,OAAO,IAAI,WAAW,QAAQ,OAAO,OAAO,GAAG,CAAC;AACzD;"}

package/dist/migrations/draft-publish.d.ts

@@ -6,3 +6,4 @@ interface Input {
 declare const enableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
 declare const disableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
 export { enableDraftAndPublish as enable, disableDraftAndPublish as disable };
+//# sourceMappingURL=draft-publish.d.ts.map

package/dist/migrations/draft-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-publish.d.ts","sourceRoot":"","sources":["../../src/migrations/draft-publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,UAAU,KAAK;IACb,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACpD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;CAClD;AAED,QAAA,MAAM,qBAAqB,sCAA6C,KAAK,kBA0B5E,CAAC;AAEF,QAAA,MAAM,sBAAsB,sCAA6C,KAAK,kBAqB7E,CAAC;AAEF,OAAO,EAAE,qBAAqB,IAAI,MAAM,EAAE,sBAAsB,IAAI,OAAO,EAAE,CAAC"}