@strapi/upload 5.54.0 → 5.55.1

package/dist/server/src/services/extensions/utils.d.ts

@@ -1,4 +1,46 @@
 import type { UID } from '@strapi/types';
+import type { File } from '../../types';
+/**
+ * One presign per distinct URL, keyed by the bare (unsigned) URL. The promise
+ * is stored rather than its result so concurrent occurrences of the same URL
+ * (the `async.map` in `mapRichtextUrls`, or several entries of a `findMany`)
+ * share a single provider call.
+ *
+ * A cache must never outlive the document service call or migration run that
+ * created it: a signed URL is only as fresh as the request that produced it.
+ */
+type SignCache = Map<string, Promise<string | null>>;
+declare const createSignCache: () => SignCache;
+/**
+ * Returns a richtext URL with its signature removed, if we own it.
+ *
+ * Only the query parameters the provider's own fresh signature introduces are
+ * removed (for S3, the `X-Amz-*` family), every other parameter is kept. That
+ * way a provider that signs whatever it is handed cannot make us drop `?v=x`
+ * from a link to an external site. A parameter of an old signature that the
+ * fresh one no longer carries (an `X-Amz-Security-Token` from credentials no
+ * longer in use, say) survives in the row; it is not a signature, and the read
+ * path replaces the whole URL with the provider output anyway.
+ */
+declare const stripSignedUrl: (url: string, cache: SignCache) => Promise<string>;
+/**
+ * Apply `mapUrl` to every markdown image / link URL and every raw HTML
+ * `src` / `href` URL of a richtext value.
+ */
+declare const mapRichtextUrls: (value: unknown, mapUrl: (url: string) => Promise<string>) => Promise<unknown>;
+/**
+ * Apply `mapImage` to every `image` node of a blocks value, recursively.
+ * A new array is always returned, the original value is never mutated.
+ */
+declare const mapBlocksImages: (value: unknown, mapImage: (image: File) => Promise<File>) => Promise<unknown>;
+/**
+ * Remove the signature from a blocks `image` node: the signature parameters on
+ * the file URL and on every format URL (the same presigner signs them all, so
+ * the same parameter names apply), and the `isUrlSigned` flag `signFileUrls`
+ * sets on the file and on each format. The node carries a full file object, so
+ * the ownership check is made with it rather than with a URL derived stand in.
+ */
+declare const unsignImage: (image: File, cache?: SignCache) => Promise<File>;
 /**
  *
  * Iterate through an entity manager result
@@ -7,8 +49,16 @@ import type { UID } from '@strapi/types';
  *
  * @param {Object} entity
  * @param {Object} modelAttributes
+ * @param {Map} cache one per document service call, see `SignCache`
  * @returns
  */
-declare const signEntityMedia: (entity: any, uid: UID.Schema) => Promise<any>;
-export { signEntityMedia };
+declare const signEntityMedia: (entity: any, uid: UID.Schema, cache?: SignCache) => Promise<any>;
+/**
+ * Iterate through the input data of a create / update / clone and replace
+ * every signed provider URL found in a richtext or blocks attribute with its
+ * unsigned form, so that a short lived signature is never persisted.
+ */
+declare const unsignEntityMedia: (data: any, uid: UID.Schema, cache?: SignCache) => Promise<any>;
+export type { SignCache };
+export { createSignCache, signEntityMedia, unsignEntityMedia, mapRichtextUrls, mapBlocksImages, stripSignedUrl, unsignImage, };
 //# sourceMappingURL=utils.d.ts.map

package/dist/server/src/services/extensions/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/extensions/utils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AAyDjD;;;;;;;;;GASG;AACH,QAAA,MAAM,eAAe,GAAU,QAAQ,GAAG,EAAE,KAAK,GAAG,CAAC,MAAM,iBAmB1D,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/extensions/utils.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AAKjD,OAAO,KAAK,EAAU,IAAI,EAAE,MAAM,aAAa,CAAC;AAahD;;;;;;;;GAQG;AACH,KAAK,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AAErD,QAAA,MAAM,eAAe,QAAO,SAAsB,CAAC;AAiKnD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,cAAc,GAAU,KAAK,MAAM,EAAE,OAAO,SAAS,oBAa1D,CAAC;AAKF;;;GAGG;AACH,QAAA,MAAM,eAAe,GAAU,OAAO,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,qBAgCtF,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,eAAe,GACnB,OAAO,OAAO,EACd,UAAU,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,KACvC,OAAO,CAAC,OAAO,CAsBjB,CAAC;AAgBF;;;;;;GAMG;AACH,QAAA,MAAM,WAAW,GAAU,OAAO,IAAI,EAAE,QAAO,SAA6B,kBAoC3E,CAAC;AAkEF;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,GACnB,QAAQ,GAAG,EACX,KAAK,GAAG,CAAC,MAAM,EACf,QAAO,SAA6B,iBAoBrC,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,iBAAiB,GACrB,MAAM,GAAG,EACT,KAAK,GAAG,CAAC,MAAM,EACf,QAAO,SAA6B,iBAcrC,CAAC;AAEF,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,GACZ,CAAC"}

package/dist/server/src/services/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../../server/src/services/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;yBAM1B,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE;sBACzB,MAAM,eAAe,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;;;AADlE,wBA0BG"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../../server/src/services/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;yBAM1B,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE;sBACzB,MAAM,eAAe,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;;;AADlE,wBAyBG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/upload",
-  "version": "5.54.0",
+  "version": "5.55.1",
   "description": "Makes it easy to upload images and files to your Strapi Application.",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -75,11 +75,11 @@
     "@radix-ui/react-dialog": "1.0.5",
     "@radix-ui/react-toggle-group": "1.1.11",
     "@reduxjs/toolkit": "1.9.7",
-    "@strapi/database": "5.54.0",
+    "@strapi/database": "5.55.1",
     "@strapi/design-system": "2.2.4",
     "@strapi/icons": "2.2.4",
-    "@strapi/provider-upload-local": "5.54.0",
-    "@strapi/utils": "5.54.0",
+    "@strapi/provider-upload-local": "5.55.1",
+    "@strapi/utils": "5.55.1",
     "byte-size": "8.1.1",
     "cropperjs": "1.6.2",
     "date-fns": "2.30.0",
@@ -103,8 +103,8 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/admin": "5.54.0",
-    "@strapi/types": "5.54.0",
+    "@strapi/admin": "5.55.1",
+    "@strapi/types": "5.55.1",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.2",