@webbio/strapi-plugin-page-builder 0.9.9-platform → 0.9.10-authentication

package/dist/server/services/private-content/graphql.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extendGraphQL = void 0;
+const utils_1 = require("@strapi/utils");
+const schemas_1 = require("./schemas");
+const constants_1 = require("./constants");
+const { ApplicationError } = utils_1.errors;
+const extendGraphQL = () => {
+    const extensionService = strapi.plugin('graphql').service('extension');
+    const extension = () => ({
+        typeDefs: `
+      input LoginInput {
+        email: String!
+        password: String!
+        platformId: ID!
+      }
+
+      input RegisterInput {
+        email: String!
+        password: String!
+        firstName: String
+        lastName: String
+        company: String
+        jobTitle: String
+        address: String
+        postalCode: String
+        city: String
+        country: String
+        phone: String
+        subscribeToNewsletter: Boolean
+				categories: [ID]
+        platformId: ID!
+      }
+
+      type LoginResponse {
+        jwt: String
+        user: User
+      }
+
+      type RegisterResponse {
+        user: User
+      }
+
+      type ForgotPasswordResponse {
+        ok: Boolean!
+      }
+
+      type User {
+        id: ID!
+        email: String!
+        confirmed: Boolean
+        blocked: Boolean
+        activated: Boolean
+        platformId: ID!
+      }
+
+      type Mutation {
+        platformLogin(input: LoginInput!): LoginResponse
+        platformRegister(input: RegisterInput!): RegisterResponse
+        platformForgotPassword(email: String!): ForgotPasswordResponse
+      }
+      `,
+        resolversConfig: {
+            'Mutation.platformLogin': {
+                auth: false
+            },
+            'Mutation.platformRegister': {
+                auth: false
+            }
+        },
+        resolvers: {
+            Mutation: {
+                platformLogin: {
+                    resolve() {
+                        return null;
+                    }
+                },
+                platformRegister: {
+                    async resolve(parent, args, context) {
+                        const pluginStore = await strapi.store({ type: 'plugin', name: 'users-permissions' });
+                        const settings = await pluginStore.get({ key: 'advanced' });
+                        await (0, schemas_1.validateRegisterSchema)(args.input);
+                        const { email, platformId } = args.input;
+                        const role = await strapi
+                            .query('plugin::users-permissions.role')
+                            .findOne({ where: { type: settings.default_role } });
+                        if (!role) {
+                            throw new ApplicationError('Impossible to find the default role');
+                        }
+                        const conflictingUserCount = await strapi.query(constants_1.USER_MODEL).count({
+                            where: {
+                                email,
+                                platform: {
+                                    id: platformId
+                                }
+                            }
+                        });
+                        if (conflictingUserCount > 0) {
+                            throw new ApplicationError('Email is already taken');
+                        }
+                        const userData = {
+                            ...args.input,
+                            role: role.id,
+                            categories: args.input.categories,
+                            platform: platformId,
+                            email: email.toLowerCase(),
+                            provider: 'local',
+                            confirmed: false,
+                            activateUser: false
+                        };
+                        const createdUser = await strapi.query(constants_1.USER_MODEL).create({
+                            data: userData
+                        });
+                        const userModel = strapi.getModel(constants_1.USER_MODEL);
+                        const sanitizedUser = utils_1.sanitize.contentAPI.output(createdUser, userModel, {
+                            auth: false
+                        });
+                        return {
+                            user: sanitizedUser
+                        };
+                    }
+                }
+            }
+        }
+    });
+    extensionService.use(extension);
+};
+exports.extendGraphQL = extendGraphQL;

package/dist/server/services/private-content/index.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const strapi_1 = require("../../utils/strapi");
+const user_1 = require("./user");
+const graphql_1 = require("./graphql");
+const platform_1 = require("./platform");
+const page_1 = require("./page");
+exports.default = {
+    async enablePrivateContent() {
+        var _a, _b;
+        if (this.isPrivateContentEnabled) {
+            await ((_b = (_a = strapi.services) === null || _a === void 0 ? void 0 : _a['plugin::page-builder.builder']) === null || _b === void 0 ? void 0 : _b.buildComponents());
+            (0, user_1.extendUser)();
+            (0, user_1.extendControllers)();
+            (0, graphql_1.extendGraphQL)();
+            (0, platform_1.extendPlatform)();
+            (0, page_1.extendPage)();
+        }
+    },
+    isPrivateContentEnabled() {
+        const pageBuilderConfig = (0, strapi_1.getConfig)();
+        return (pageBuilderConfig === null || pageBuilderConfig === void 0 ? void 0 : pageBuilderConfig.privateContent) === true;
+    },
+    async activateUser(token) {
+        const jwtService = strapi.plugin('users-permissions').service('jwt');
+        const decodedToken = await jwtService.verify(token);
+        if (decodedToken) {
+            const user = await strapi.query('plugin::users-permissions.user').findOne({
+                where: {
+                    id: decodedToken.userId,
+                    platform: {
+                        id: decodedToken.platformId
+                    }
+                }
+            });
+            if (!user.confirmed && user.confirmationToken && user.confirmationToken === token) {
+                await strapi.entityService.update('plugin::users-permissions.user', user.id, {
+                    // @ts-ignore
+                    data: { confirmed: true, confirmationToken: null }
+                });
+                await strapi.service('plugin::page-builder.email').sendAdminMail(user);
+                return ' User has been created';
+            }
+            throw new Error('User already activated');
+        }
+    },
+    async removeInactiveUsers() {
+        const oneDayAgo = new Date();
+        oneDayAgo.setHours(oneDayAgo.getHours() - 24);
+        const usersToDelete = await (await strapi.query('plugin::users-permissions.user').findMany({
+            where: {
+                $and: [
+                    {
+                        confirmed: {
+                            $eq: false
+                        }
+                    },
+                    {
+                        createdAt: {
+                            $lt: oneDayAgo
+                        }
+                    }
+                ]
+            }
+        })).map((user) => {
+            return user.id;
+        });
+        try {
+            await strapi.query('plugin::users-permissions.user').deleteMany({
+                where: {
+                    id: {
+                        $in: usersToDelete
+                    }
+                }
+            });
+        }
+        catch (error) {
+            console.log(error);
+        }
+    }
+};

package/dist/server/services/private-content/mail-template/txtMail.email.template.text.js

@@ -0,0 +1,12 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.txtEmail = void 0;
+const handlebars_1 = __importDefault(require("handlebars"));
+const txtEmail = (mailData) => {
+    const template = handlebars_1.default.compile(mailData.text);
+    return template(mailData);
+};
+exports.txtEmail = txtEmail;

package/dist/server/services/private-content/mail-template/txtMail.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/server/services/private-content/page.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extendPage = void 0;
+const constants_1 = require("../../../shared/utils/constants");
+const extendPage = () => {
+    const pageContentType = strapi.contentType(constants_1.PAGE_UID);
+    pageContentType.attributes = {
+        ...pageContentType.attributes,
+        isProtected: {
+            type: 'boolean',
+            required: false,
+            default: false
+        }
+    };
+    delete pageContentType.attributes.username;
+};
+exports.extendPage = extendPage;

package/dist/server/services/private-content/platform.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extendPlatform = void 0;
+const constants_1 = require("../../../shared/utils/constants");
+const extendPlatform = () => {
+    const platformContentType = strapi.contentType(constants_1.PLATFORM_UID);
+    platformContentType.attributes = {
+        ...platformContentType.attributes,
+        isProtected: {
+            type: 'boolean',
+            required: false,
+            default: false
+        }
+    };
+    delete platformContentType.attributes.username;
+};
+exports.extendPlatform = extendPlatform;

package/dist/server/services/private-content/schemas/index.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateResetPasswordSchema = exports.validateForgotPasswordSchema = exports.validateLoginSchema = exports.validateRegisterSchema = exports.resetPasswordSchema = exports.forgotPasswordSchema = exports.loginSchema = void 0;
+const utils_1 = require("@strapi/utils");
+const registerSchema = utils_1.yup.object({
+    email: utils_1.yup.string().email().required(),
+    password: utils_1.yup.string().required(),
+    platformId: utils_1.yup.number().required()
+});
+exports.loginSchema = utils_1.yup.object({
+    email: utils_1.yup.string().email().required(),
+    password: utils_1.yup.string().required(),
+    platformId: utils_1.yup.number().required()
+});
+exports.forgotPasswordSchema = utils_1.yup.object({
+    email: utils_1.yup.string().email().required(),
+    platformId: utils_1.yup.number().required()
+});
+exports.resetPasswordSchema = utils_1.yup.object({
+    password: utils_1.yup.string().required(),
+    resetPasswordToken: utils_1.yup.string().required()
+});
+const validateRegisterSchema = async (input) => (0, utils_1.validateYupSchema)(input, registerSchema);
+exports.validateRegisterSchema = validateRegisterSchema;
+const validateLoginSchema = async (input) => (0, utils_1.validateYupSchema)(input, exports.loginSchema);
+exports.validateLoginSchema = validateLoginSchema;
+const validateForgotPasswordSchema = async (input) => (0, utils_1.validateYupSchema)(input, exports.forgotPasswordSchema);
+exports.validateForgotPasswordSchema = validateForgotPasswordSchema;
+const validateResetPasswordSchema = async (input) => (0, utils_1.validateYupSchema)(input, exports.resetPasswordSchema);
+exports.validateResetPasswordSchema = validateResetPasswordSchema;

package/dist/server/services/private-content/user.js

@@ -0,0 +1,159 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extendControllers = exports.extendUser = void 0;
+const toString_1 = __importDefault(require("lodash/toString"));
+const has_1 = __importDefault(require("lodash/has"));
+const omit_1 = __importDefault(require("lodash/omit"));
+const utils_1 = require("@strapi/utils");
+const constants_1 = require("./constants");
+const { ApplicationError, ValidationError, NotFoundError, ForbiddenError } = utils_1.errors;
+const extendUser = () => {
+    const userContentType = strapi.contentType(constants_1.USER_MODEL);
+    userContentType.attributes = {
+        // Spread previous defined attributes
+        ...userContentType.attributes,
+        // Add new, or override attributes
+        platform: {
+            type: 'relation',
+            relation: 'oneToOne',
+            target: 'api::platform.platform',
+            required: true
+        },
+        firstName: {
+            type: 'string'
+        },
+        lastName: {
+            type: 'string'
+        },
+        company: {
+            type: 'string'
+        },
+        jobTitle: {
+            type: 'string'
+        },
+        address: {
+            type: 'string'
+        },
+        postalCode: {
+            type: 'string'
+        },
+        city: {
+            type: 'string'
+        },
+        country: {
+            type: 'string'
+        },
+        phone: {
+            type: 'string'
+        },
+        activateUser: {
+            type: 'boolean',
+            default: false
+        },
+        categories: {
+            type: 'relation',
+            relation: 'oneToMany',
+            target: 'plugin::page-builder.category'
+        },
+        confirmMailSend: {
+            type: 'boolean',
+            private: true,
+            writable: false,
+            visible: false,
+            default: false
+        }
+    };
+    delete userContentType.attributes.username;
+};
+exports.extendUser = extendUser;
+const extendControllers = () => {
+    const contentController = strapi.controller(constants_1.USER_CONTENT_MANAGER);
+    contentController.create = async (ctx) => {
+        var _a;
+        const { body } = ctx.request;
+        const { user: admin, userAbility } = ctx.state;
+        const { email } = body;
+        const platformId = body.platform.connect[0].id;
+        const pm = (_a = strapi === null || strapi === void 0 ? void 0 : strapi.admin) === null || _a === void 0 ? void 0 : _a.services.permission.createPermissionsManager({
+            ability: userAbility,
+            action: constants_1.ACTIONS.create,
+            model: constants_1.USER_MODEL
+        });
+        if (!pm.isAllowed) {
+            return ctx.forbidden();
+        }
+        const sanitizedBody = await pm.pickPermittedFieldsOf(body, { subject: constants_1.USER_MODEL });
+        const userWithSameEmail = await strapi.query(constants_1.USER_MODEL).findOne({
+            where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] }
+        });
+        if (userWithSameEmail) {
+            throw new ApplicationError('Email already taken');
+        }
+        const user = {
+            ...sanitizedBody,
+            provider: 'local',
+            [constants_1.CREATED_BY_ATTRIBUTE]: admin.id,
+            [constants_1.UPDATED_BY_ATTRIBUTE]: admin.id
+        };
+        user.email = user.email.toLowerCase();
+        const advanced = await (strapi === null || strapi === void 0 ? void 0 : strapi.store({ type: 'plugin', name: 'users-permissions', key: 'advanced' }).get({}));
+        if (user.role.connect.length === 0) {
+            //@ts-ignore strapi types...
+            const defaultRole = await strapi.query(constants_1.USER_ROLE).findOne({ where: { type: advanced.default_role } });
+            user.role = defaultRole.id;
+        }
+        try {
+            const data = await strapi.service(constants_1.CONTENT_ENTITY_MANAGER).create(user, constants_1.USER_MODEL);
+            const sanitizedData = await pm.sanitizeOutput(data, { action: constants_1.ACTIONS.read });
+            ctx.created(sanitizedData);
+        }
+        catch (error) {
+            throw new ApplicationError(error.message);
+        }
+    };
+    contentController.update = async (ctx) => {
+        const { id } = ctx.params;
+        const { body } = ctx.request;
+        const { user: admin, userAbility } = ctx.state;
+        const { email, password } = body;
+        const { pm, entity } = await findEntityAndCheckPermissions(userAbility, constants_1.ACTIONS.edit, constants_1.USER_MODEL, id);
+        const user = entity;
+        const platformId = body.platform.connect.length > 0 ? body.platform.connect[0].id : entity.platform.id;
+        if ((0, has_1.default)(body, 'password') && !password && user.provider === 'local') {
+            throw new ValidationError('password.notNull');
+        }
+        //@ts-ignore
+        if ((0, has_1.default)(body, 'email')) {
+            const userWithSameEmail = await strapi
+                .query(constants_1.USER_MODEL)
+                .findOne({ where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] } });
+            if (userWithSameEmail && (0, toString_1.default)(userWithSameEmail.id) !== (0, toString_1.default)(id)) {
+                throw new ApplicationError('Email already taken');
+            }
+            body.email = body.email.toLowerCase();
+        }
+        const sanitizedData = await pm.pickPermittedFieldsOf(body, { subject: pm.toSubject(user) });
+        const updateData = (0, omit_1.default)({ ...sanitizedData, updatedBy: admin.id }, 'createdBy');
+        const data = await strapi.service('plugin::content-manager.entity-manager').update({ id }, updateData, constants_1.USER_MODEL);
+        ctx.body = await pm.sanitizeOutput(data, { action: constants_1.ACTIONS.read });
+    };
+};
+exports.extendControllers = extendControllers;
+const findEntityAndCheckPermissions = async (ability, action, model, id) => {
+    const entity = await strapi.query(constants_1.USER_MODEL).findOne({
+        where: { id },
+        populate: [`${constants_1.CREATED_BY_ATTRIBUTE}.roles`, 'platform']
+    });
+    if (!entity) {
+        throw new NotFoundError();
+    }
+    const pm = strapi.admin.services.permission.createPermissionsManager({ ability, action, model });
+    if (pm.ability.cannot(pm.action, pm.toSubject(entity))) {
+        throw new ForbiddenError();
+    }
+    const entityWithoutCreatorRoles = (0, omit_1.default)(entity, `${constants_1.CREATED_BY_ATTRIBUTE}.roles`);
+    return { pm, entity: entityWithoutCreatorRoles };
+};

package/dist/server/utils/strapi.js

@@ -1,6 +1,10 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getPopulatedEntity = exports.getDeepPopulate = void 0;
+exports.getConfig = exports.getPopulatedEntity = exports.getDeepPopulate = void 0;
+const pluginId_1 = __importDefault(require("../../admin/src/pluginId"));
 const getDeepPopulate = (uid, populate, depth = 0) => {
     if (populate) {
         return populate;
@@ -37,3 +41,7 @@ const getPopulatedEntity = async (uid, id) => {
     });
 };
 exports.getPopulatedEntity = getPopulatedEntity;
+const getConfig = () => {
+    return strapi.config.get(`plugin.${pluginId_1.default}`);
+};
+exports.getConfig = getConfig;

package/dist/shared/utils/constants.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PLATFORM = exports.PAGE_TYPE_PAGE = exports.PLATFORM_UID = exports.PAGE_TYPE_UID = exports.TEMPLATE_UID = exports.PAGE_UID = void 0;
+exports.PAGE_BUILDER_EMAIL_PLUGIN = exports.USER_PERMISSION_USER_PLUGIN = exports.PLATFORM = exports.PAGE_TYPE_PAGE = exports.PLATFORM_UID = exports.PAGE_TYPE_UID = exports.TEMPLATE_UID = exports.PAGE_UID = void 0;
 exports.PAGE_UID = 'api::page.page';
 exports.TEMPLATE_UID = 'api::template.template';
 exports.PAGE_TYPE_UID = 'api::page-type.page-type';
 exports.PLATFORM_UID = 'api::platform.platform';
 exports.PAGE_TYPE_PAGE = 'page';
 exports.PLATFORM = 'platform';
+exports.USER_PERMISSION_USER_PLUGIN = 'plugin::users-permissions.user';
+exports.PAGE_BUILDER_EMAIL_PLUGIN = 'plugin::page-builder.email';