@webbio/strapi-plugin-page-builder 0.9.6-platform → 0.9.8-authentication

package/dist/server/services/constants/customUserConstants.js

@@ -0,0 +1,16 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACTIONS = exports.CONTENT_ENTITY_MANAGER = exports.USER_ROLE = exports.USER_CONTENT_MANAGER = exports.USER_MODEL = exports.CREATED_BY_ATTRIBUTE = exports.UPDATED_BY_ATTRIBUTE = void 0;
+const utils_1 = require("@strapi/utils");
+_a = utils_1.contentTypes.constants, exports.UPDATED_BY_ATTRIBUTE = _a.UPDATED_BY_ATTRIBUTE, exports.CREATED_BY_ATTRIBUTE = _a.CREATED_BY_ATTRIBUTE;
+exports.USER_MODEL = 'plugin::users-permissions.user';
+exports.USER_CONTENT_MANAGER = 'plugin::users-permissions.contentmanageruser';
+exports.USER_ROLE = 'plugin::users-permissions.role';
+exports.CONTENT_ENTITY_MANAGER = 'plugin::content-manager.entity-manager';
+exports.ACTIONS = {
+    read: 'plugin::content-manager.explorer.read',
+    create: 'plugin::content-manager.explorer.create',
+    edit: 'plugin::content-manager.explorer.update',
+    delete: 'plugin::content-manager.explorer.delete'
+};

package/dist/server/services/custom-user.js

@@ -0,0 +1,161 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const pluginId_1 = __importDefault(require("../../admin/src/pluginId"));
+const toString_1 = __importDefault(require("lodash/toString"));
+const has_1 = __importDefault(require("lodash/has"));
+const omit_1 = __importDefault(require("lodash/omit"));
+const utils_1 = require("@strapi/utils");
+const customUserConstants_1 = require("./constants/customUserConstants");
+const { ApplicationError, ValidationError, NotFoundError, ForbiddenError } = utils_1.errors;
+exports.default = {
+    async createCustomUsers() {
+        const config = this.getConfig();
+        const customNPOUser = config === null || config === void 0 ? void 0 : config.customNPOUser;
+        if (customNPOUser) {
+            await this.createNPOUsers();
+            await this.customNPOUserControllers();
+        }
+    },
+    async createNPOUsers() {
+        const contentTypeName = await strapi.contentType(customUserConstants_1.USER_MODEL);
+        contentTypeName.attributes = {
+            // Spread previous defined attributes
+            ...contentTypeName.attributes,
+            // Add new, or override attributes
+            platform: {
+                type: 'relation',
+                relation: 'oneToOne',
+                target: 'api::platform.platform',
+                required: true
+            },
+            firstName: {
+                type: 'string'
+            },
+            lastName: {
+                type: 'string'
+            },
+            company: {
+                type: 'string'
+            },
+            jobTitle: {
+                type: 'string'
+            },
+            address: {
+                type: 'string'
+            },
+            postalCode: {
+                type: 'string'
+            },
+            city: {
+                type: 'string'
+            },
+            country: {
+                type: 'string'
+            },
+            phone: {
+                type: 'string'
+            },
+            categories: {
+                type: 'relation',
+                relation: 'oneToMany',
+                target: 'api::category.category'
+            }
+        };
+        delete contentTypeName.attributes.username;
+    },
+    async findEntityAndCheckPermissions(ability, action, model, id) {
+        const entity = await strapi.query(customUserConstants_1.USER_MODEL).findOne({
+            where: { id },
+            populate: [`${customUserConstants_1.CREATED_BY_ATTRIBUTE}.roles`, 'platform']
+        });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        const pm = strapi.admin.services.permission.createPermissionsManager({ ability, action, model });
+        if (pm.ability.cannot(pm.action, pm.toSubject(entity))) {
+            throw new ForbiddenError();
+        }
+        const entityWithoutCreatorRoles = (0, omit_1.default)(entity, `${customUserConstants_1.CREATED_BY_ATTRIBUTE}.roles`);
+        return { pm, entity: entityWithoutCreatorRoles };
+    },
+    customNPOUserControllers() {
+        const contentController = strapi.controller(customUserConstants_1.USER_CONTENT_MANAGER);
+        contentController.create = async (ctx) => {
+            var _a;
+            const { body } = ctx.request;
+            const { user: admin, userAbility } = ctx.state;
+            const { email } = body;
+            const platformId = body.platform.connect[0].id;
+            const pm = (_a = strapi === null || strapi === void 0 ? void 0 : strapi.admin) === null || _a === void 0 ? void 0 : _a.services.permission.createPermissionsManager({
+                ability: userAbility,
+                action: customUserConstants_1.ACTIONS.create,
+                model: customUserConstants_1.USER_MODEL
+            });
+            if (!pm.isAllowed) {
+                return ctx.forbidden();
+            }
+            const sanitizedBody = await pm.pickPermittedFieldsOf(body, { subject: customUserConstants_1.USER_MODEL });
+            const userWithSameEmail = await strapi.query(customUserConstants_1.USER_MODEL).findOne({
+                where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] }
+            });
+            if (userWithSameEmail) {
+                throw new ApplicationError('Email already taken');
+            }
+            const user = {
+                ...sanitizedBody,
+                provider: 'local',
+                [customUserConstants_1.CREATED_BY_ATTRIBUTE]: admin.id,
+                [customUserConstants_1.UPDATED_BY_ATTRIBUTE]: admin.id
+            };
+            user.email = user.email.toLowerCase();
+            const advanced = await (strapi === null || strapi === void 0 ? void 0 : strapi.store({ type: 'plugin', name: 'users-permissions', key: 'advanced' }).get({}));
+            if (user.role.connect.length === 0) {
+                //@ts-ignore strapi types...
+                const defaultRole = await strapi.query(customUserConstants_1.USER_ROLE).findOne({ where: { type: advanced.default_role } });
+                user.role = defaultRole.id;
+            }
+            try {
+                const data = await strapi.service(customUserConstants_1.CONTENT_ENTITY_MANAGER).create(user, customUserConstants_1.USER_MODEL);
+                const sanitizedData = await pm.sanitizeOutput(data, { action: customUserConstants_1.ACTIONS.read });
+                ctx.created(sanitizedData);
+            }
+            catch (error) {
+                throw new ApplicationError(error.message);
+            }
+        };
+        contentController.update = async (ctx) => {
+            const { id } = ctx.params;
+            const { body } = ctx.request;
+            const { user: admin, userAbility } = ctx.state;
+            const { email, password } = body;
+            const { pm, entity } = await this.findEntityAndCheckPermissions(userAbility, customUserConstants_1.ACTIONS.edit, customUserConstants_1.USER_MODEL, id);
+            const user = entity;
+            const platformId = body.platform.connect.length > 0 ? body.platform.connect[0].id : entity.platform.id;
+            if ((0, has_1.default)(body, 'password') && !password && user.provider === 'local') {
+                throw new ValidationError('password.notNull');
+            }
+            //@ts-ignore
+            if ((0, has_1.default)(body, 'email')) {
+                const userWithSameEmail = await strapi
+                    .query(customUserConstants_1.USER_MODEL)
+                    .findOne({ where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] } });
+                if (userWithSameEmail && (0, toString_1.default)(userWithSameEmail.id) !== (0, toString_1.default)(id)) {
+                    throw new ApplicationError('Email already taken');
+                }
+                body.email = body.email.toLowerCase();
+            }
+            const sanitizedData = await pm.pickPermittedFieldsOf(body, { subject: pm.toSubject(user) });
+            const updateData = (0, omit_1.default)({ ...sanitizedData, updatedBy: admin.id }, 'createdBy');
+            const data = await strapi
+                .service('plugin::content-manager.entity-manager')
+                .update({ id }, updateData, customUserConstants_1.USER_MODEL);
+            ctx.body = await pm.sanitizeOutput(data, { action: customUserConstants_1.ACTIONS.read });
+        };
+    },
+    getConfig() {
+        return strapi.config.get(`plugin.${pluginId_1.default}`);
+    }
+};

package/dist/server/services/email.js

@@ -0,0 +1,127 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const AWS = __importStar(require("@aws-sdk/client-ses"));
+const txtMail_email_template_text_1 = require("./private-content/mail-template/txtMail.email.template.text");
+const constants_1 = require("../../shared/utils/constants");
+exports.default = {
+    async sendMail(options) {
+        const { from, to, subject, text, firstName, lastName, confirmationUrl } = options;
+        const emailData = (0, txtMail_email_template_text_1.txtEmail)({
+            email: to,
+            firstName: firstName,
+            lastName: lastName,
+            text: text,
+            confirmationUrl: confirmationUrl
+        });
+        try {
+            const client = new AWS.SES();
+            await client.sendEmail({
+                Source: from,
+                Destination: {
+                    ToAddresses: [to]
+                },
+                Message: {
+                    Subject: { Data: subject },
+                    Body: {
+                        Text: { Data: emailData }
+                    }
+                }
+            });
+        }
+        catch (error) {
+            console.error(error);
+        }
+    },
+    async sendAdminMail(user) {
+        const foundUser = await strapi.entityService.findOne(constants_1.USER_PERMISSION_USER_PLUGIN, user.id, {
+            populate: { platform: { populate: { platformMails: { populate: '*' } } } }
+        });
+        await this.sendMail({
+            // @ts-ignore we all love strapi typings
+            from: foundUser.platform.platformMails.adminEmail.fromEmail,
+            // @ts-ignore
+            to: foundUser.platform.platformMails.adminEmail.toMail,
+            // @ts-ignore
+            subject: foundUser.platform.platformMails.adminEmail.subject,
+            // @ts-ignore
+            text: foundUser.platform.platformMails.adminEmail.message,
+            firstName: user.firstName,
+            lastName: user.lastName
+        });
+    },
+    async sendConfirmationEmail(user) {
+        const foundUser = await strapi.entityService.findOne(constants_1.USER_PERMISSION_USER_PLUGIN, user.id, {
+            populate: { platform: { populate: { platformMails: { populate: '*' } } } }
+        });
+        if (foundUser && foundUser.platform) {
+            const jwtService = strapi.plugin('users-permissions').service('jwt');
+            const confirmationToken = await jwtService.issue(
+            // @ts-ignore
+            { userId: user.id, platformId: foundUser.platform.id }, { expiresIn: '1d' });
+            await strapi.entityService.update(constants_1.USER_PERMISSION_USER_PLUGIN, user.id, {
+                // @ts-ignore
+                data: { confirmationToken: confirmationToken }
+            });
+            // @ts-ignore
+            const activateUrl = `${foundUser.platform.domain}/api/page-builder/activate/${confirmationToken}`;
+            await this.sendMail({
+                // @ts-ignore
+                from: foundUser.platform.platformMails.accountCreatedMail.fromEmail,
+                to: user.email,
+                // @ts-ignore
+                subject: foundUser.platform.platformMails.accountCreatedMail.subject,
+                // @ts-ignore
+                text: foundUser.platform.platformMails.accountCreatedMail.message,
+                firstName: user.firstName,
+                lastName: user.lastName,
+                confirmationUrl: activateUrl
+            });
+        }
+    },
+    async sendForgotPasswordMail(user) {
+        if (user && user.platform) {
+            const jwtService = strapi.plugin('users-permissions').service('jwt');
+            const resetPasswordToken = await jwtService.issue({ userId: user.id, platformId: user.platform.id }, { expiresIn: '1d' });
+            await strapi.entityService.update(constants_1.USER_PERMISSION_USER_PLUGIN, user.id, {
+                // @ts-ignore
+                data: { resetPasswordToken }
+            });
+            const activateUrl = `${user.platform.domain}/api/page-builder/reset/${resetPasswordToken}`;
+            await this.sendMail({
+                // @ts-ignore
+                from: user.platform.platformMails.resetPasswordMail.fromEmail,
+                to: user.email,
+                // @ts-ignore
+                subject: user.platform.platformMails.resetPasswordMail.subject,
+                // @ts-ignore
+                text: user.platform.platformMails.resetPasswordMail.message,
+                firstName: user.firstName,
+                lastName: user.lastName,
+                confirmationUrl: activateUrl
+            });
+        }
+    }
+};

package/dist/server/services/index.js

@@ -9,11 +9,15 @@ const page_type_1 = __importDefault(require("./page-type"));
 const collection_types_1 = __importDefault(require("./collection-types"));
 const template_1 = __importDefault(require("./template"));
 const platform_1 = __importDefault(require("./platform"));
+const email_1 = __importDefault(require("./email"));
+const private_content_1 = __importDefault(require("./private-content"));
 exports.default = {
     page: page_1.default,
     builder: builder_1.default,
     'page-type': page_type_1.default,
     'collection-types': collection_types_1.default,
     template: template_1.default,
-    platform: platform_1.default
+    platform: platform_1.default,
+    email: email_1.default,
+    'private-content': private_content_1.default
 };

package/dist/server/services/private-content/components/admin-email.json

@@ -0,0 +1,22 @@
+{
+    "collectionName": "components_internal_admin_emails",
+    "info": {
+        "displayName": "AdminEmail",
+        "description": ""
+    },
+    "options": {},
+    "attributes": {
+        "toMail": {
+            "type": "string"
+        },
+        "fromEmail": {
+            "type": "string"
+        },
+        "subject": {
+            "type": "string"
+        },
+        "message": {
+            "type": "text"
+        }
+    }
+}

package/dist/server/services/private-content/components/email.json

@@ -0,0 +1,22 @@
+{
+    "collectionName": "components_internal_emails",
+    "info": {
+        "displayName": "email",
+        "description": ""
+    },
+    "options": {},
+    "attributes": {
+        "nameSender": {
+            "type": "string"
+        },
+        "fromEmail": {
+            "type": "string"
+        },
+        "subject": {
+            "type": "string"
+        },
+        "message": {
+            "type": "text"
+        }
+    }
+}

package/dist/server/services/private-content/components/platform-email.json

@@ -0,0 +1,30 @@
+{
+    "collectionName": "components_internal_platform_emails",
+    "info": {
+        "displayName": "PlatformEmail"
+    },
+    "options": {},
+    "attributes": {
+        "resetPasswordMail": {
+            "type": "component",
+            "repeatable": false,
+            "component": "internal.email"
+        },
+        "accountCreatedMail": {
+            "type": "component",
+            "repeatable": false,
+            "component": "internal.email"
+        },
+        "accountAcceptedMail": {
+            "type": "component",
+            "repeatable": false,
+            "component": "internal.email"
+        },
+        "adminEmail": {
+            "displayName": "AdminEmail",
+            "type": "component",
+            "repeatable": false,
+            "component": "internal.admin-email"
+        }
+    }
+}

package/dist/server/services/private-content/constants/index.js

@@ -0,0 +1,16 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACTIONS = exports.CONTENT_ENTITY_MANAGER = exports.USER_ROLE = exports.USER_CONTENT_MANAGER = exports.USER_MODEL = exports.CREATED_BY_ATTRIBUTE = exports.UPDATED_BY_ATTRIBUTE = void 0;
+const utils_1 = require("@strapi/utils");
+_a = utils_1.contentTypes.constants, exports.UPDATED_BY_ATTRIBUTE = _a.UPDATED_BY_ATTRIBUTE, exports.CREATED_BY_ATTRIBUTE = _a.CREATED_BY_ATTRIBUTE;
+exports.USER_MODEL = 'plugin::users-permissions.user';
+exports.USER_CONTENT_MANAGER = 'plugin::users-permissions.contentmanageruser';
+exports.USER_ROLE = 'plugin::users-permissions.role';
+exports.CONTENT_ENTITY_MANAGER = 'plugin::content-manager.entity-manager';
+exports.ACTIONS = {
+    read: 'plugin::content-manager.explorer.read',
+    create: 'plugin::content-manager.explorer.create',
+    edit: 'plugin::content-manager.explorer.update',
+    delete: 'plugin::content-manager.explorer.delete'
+};

package/dist/server/services/private-content/email.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = {};

package/dist/server/services/private-content/graphql/index.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extendGraphQL = void 0;
+const types_1 = require("./types");
+const register_1 = require("./resolvers/register");
+const login_1 = require("./resolvers/login");
+const forgot_password_1 = require("./resolvers/forgot-password");
+const reset_password_1 = require("./resolvers/reset-password");
+const findOnePage_1 = require("./resolvers/findOnePage");
+const findPage_1 = require("./resolvers/findPage");
+const extendGraphQL = () => {
+    const extensionService = strapi.plugin('graphql').service('extension');
+    const extension = () => ({
+        typeDefs: `
+			${types_1.RegisterInput}
+
+      ${types_1.LoginInput}
+
+			${types_1.RegisterResponse}
+
+			${types_1.LoginResponse}
+
+			${types_1.User}
+
+			${types_1.Mutations}
+
+			${types_1.ForgotPasswordInput}
+
+			${types_1.ForgotPasswordResponse}
+
+			${types_1.ResetPasswordInput}
+
+			${types_1.ResetPasswordResponse}
+
+			${types_1.ResetPasswordInput}
+
+			${types_1.ResetPasswordResponse}
+
+			${types_1.Queries}
+
+      `,
+        resolvers: {
+            Query: {
+                page: findOnePage_1.page,
+                pages: findPage_1.pages
+            },
+            Mutation: {
+                platformLogin: login_1.platformLogin,
+                platformRegister: register_1.platformRegister,
+                platformForgotPassword: forgot_password_1.platformForgotPassword,
+                platformResetPassword: reset_password_1.platformResetPassword
+            }
+        },
+        resolversConfig: {
+            'Mutation.platformLogin': {
+                auth: false
+            },
+            'Mutation.platformRegister': {
+                auth: false
+            },
+            'Mutation.platformForgotPassword': {
+                auth: false
+            },
+            'Mutation.platformResetPassword': {
+                auth: false
+            },
+            'Query.page': {
+                auth: false
+            },
+            'Query.pages': {
+                auth: false
+            }
+        }
+    });
+    extensionService.use(extension);
+};
+exports.extendGraphQL = extendGraphQL;

package/dist/server/services/private-content/graphql/resolvers/findOnePage.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.page = void 0;
+const fp_1 = require("lodash/fp");
+const utils_1 = require("@strapi/utils");
+const constants_1 = require("../../../../../shared/utils/constants");
+const apollo_server_koa_1 = require("apollo-server-koa");
+exports.page = {
+    async resolve(parent, args, ctx) {
+        var _a, _b, _c, _d;
+        const uid = constants_1.PAGE_UID;
+        const { toEntityResponse } = strapi.plugin('graphql').service('format').returnTypes;
+        const { transformArgs } = strapi.plugin('graphql').service('builders').utils;
+        const populatedArgs = { ...args, populate: { platform: true } };
+        const transformedArgs = transformArgs(populatedArgs, strapi.contentType(constants_1.PAGE_UID));
+        const sanitizedQuery = await utils_1.sanitize.contentAPI.query(populatedArgs, strapi.contentType(constants_1.PAGE_UID));
+        const value = await strapi.entityService.findOne(uid, args.id, (0, fp_1.omit)('id', sanitizedQuery));
+        // @ts-ignore Strapi types are the best
+        if (!((_a = value === null || value === void 0 ? void 0 : value.platform) === null || _a === void 0 ? void 0 : _a.isPrivate) && !value.isPrivate) {
+            return toEntityResponse(value, { args: transformedArgs, resourceUID: uid });
+        }
+        if (
+        // @ts-ignore Strapi types are the best
+        (((_b = value === null || value === void 0 ? void 0 : value.platform) === null || _b === void 0 ? void 0 : _b.isPrivate) === true && ctx.koaContext.req.headers.authorization) ||
+            ((value === null || value === void 0 ? void 0 : value.isPrivate) === true && ctx.koaContext.req.headers.authorization)) {
+            const auth = ctx.koaContext.req.headers.authorization;
+            const token = auth.split(' ');
+            const jwtService = strapi.plugin('users-permissions').service('jwt');
+            const decodedToken = await jwtService.verify(token[1]);
+            if (decodedToken) {
+                const user = ctx.state.user;
+                // @ts-ignore Strapi types are the best
+                if (((_c = user === null || user === void 0 ? void 0 : user.platform) === null || _c === void 0 ? void 0 : _c.id) === ((_d = value === null || value === void 0 ? void 0 : value.platform) === null || _d === void 0 ? void 0 : _d.id)) {
+                    return toEntityResponse(value, { args: transformedArgs, resourceUID: uid });
+                }
+            }
+        }
+        return new apollo_server_koa_1.ForbiddenError('Forbidden access');
+    }
+};

package/dist/server/services/private-content/graphql/resolvers/findPage.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pages = void 0;
+const utils_1 = require("@strapi/utils");
+const constants_1 = require("../../../../../shared/utils/constants");
+exports.pages = {
+    async resolve(parent, args, ctx) {
+        const uid = constants_1.PAGE_UID;
+        const { toEntityResponseCollection } = strapi.plugin('graphql').service('format').returnTypes;
+        const { transformArgs } = strapi.plugin('graphql').service('builders').utils;
+        const populatedArgs = { ...args, populate: { platform: true } };
+        const transformedArgs = transformArgs(populatedArgs, strapi.contentType(constants_1.PAGE_UID));
+        const sanitizedQuery = await utils_1.sanitize.contentAPI.query(populatedArgs, strapi.contentType(constants_1.PAGE_UID));
+        const value = await strapi.entityService.findMany(uid, sanitizedQuery);
+        const user = ctx.state.user;
+        if (user && ctx.koaContext.req.headers.authorization) {
+            const auth = ctx.koaContext.req.headers.authorization;
+            const token = auth.split(' ');
+            const jwtService = strapi.plugin('users-permissions').service('jwt');
+            const decodedToken = await jwtService.verify(token[1]);
+            if (decodedToken) {
+                // @ts-ignore
+                const filteredItems = value.filter((item) => {
+                    // @ts-ignore
+                    if (item.platform.isPrivate === true && user.platform.id === item.platform.id) {
+                        return item;
+                    }
+                    if (item.isPrivate === true && user.platform.id === item.platform.id) {
+                        return item;
+                    }
+                    // @ts-ignore
+                    if (item.platform.isPrivate !== true && item.isPrivate !== true) {
+                        return item;
+                    }
+                });
+                return toEntityResponseCollection(filteredItems, { args: transformedArgs, resourceUID: uid });
+            }
+        }
+        // @ts-ignore
+        const filteredItems = value.filter((item) => item.platform.isPrivate !== true && item.isPrivate !== true);
+        return toEntityResponseCollection(filteredItems, { args: transformedArgs, resourceUID: uid });
+    }
+};

package/dist/server/services/private-content/graphql/resolvers/forgot-password.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.platformForgotPassword = void 0;
+const utils_1 = require("@strapi/utils");
+const constants_1 = require("../../constants");
+const schemas_1 = require("../../schemas");
+const { UnauthorizedError } = utils_1.errors;
+exports.platformForgotPassword = {
+    async resolve(parent, args, context) {
+        await (0, schemas_1.validateForgotPasswordSchema)(args.input);
+        const { email, platformId } = args.input;
+        const user = await strapi.query(constants_1.USER_MODEL).findOne({
+            populate: { platform: { populate: { platformMails: { populate: true } } } },
+            where: {
+                email: email.toLowerCase(),
+                platform: {
+                    id: platformId
+                }
+            }
+        });
+        await strapi.service('plugin::page-builder.email').sendForgotPasswordMail(user);
+        return {
+            message: 'Email has been sent'
+        };
+    }
+};

package/dist/server/services/private-content/graphql/resolvers/login.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.platformLogin = void 0;
+const utils_1 = require("@strapi/utils");
+const constants_1 = require("../../constants");
+const schemas_1 = require("../../schemas");
+const { UnauthorizedError } = utils_1.errors;
+exports.platformLogin = {
+    async resolve(parent, args, context) {
+        await (0, schemas_1.validateLoginSchema)(args.input);
+        const { email, password, platformId } = args.input;
+        const user = await strapi.query(constants_1.USER_MODEL).findOne({
+            where: {
+                email: email.toLowerCase(),
+                platform: {
+                    id: platformId
+                }
+            }
+        });
+        if (user == null) {
+            throw new UnauthorizedError('Invalid email or password');
+        }
+        const isPasswordValid = await strapi
+            .service('plugin::users-permissions.user')
+            .validatePassword(password, user.password);
+        if (isPasswordValid === false) {
+            throw new UnauthorizedError('Invalid email or password');
+        }
+        if (user.confirmed === false) {
+            throw new UnauthorizedError('Email is not confirmed');
+        }
+        if (user.activateUser === false) {
+            throw new UnauthorizedError('Account is not activated');
+        }
+        const sanitizedUser = utils_1.sanitize.contentAPI.output(user, strapi.getModel(constants_1.USER_MODEL), {
+            auth: false
+        });
+        const jwt = await strapi.service('plugin::users-permissions.jwt').issue({ id: user.id, platformId: platformId });
+        return {
+            user: sanitizedUser,
+            jwt
+        };
+    }
+};