@webbio/strapi-plugin-page-builder 0.9.9-platform → 0.9.10-authentication

package/server/services/private-content/user.ts

@@ -0,0 +1,187 @@
+import toString from 'lodash/toString';
+import has from 'lodash/has';
+import omit from 'lodash/omit';
+import { errors } from '@strapi/utils';
+import {
+	ACTIONS,
+	CONTENT_ENTITY_MANAGER,
+	CREATED_BY_ATTRIBUTE,
+	UPDATED_BY_ATTRIBUTE,
+	USER_CONTENT_MANAGER,
+	USER_MODEL,
+	USER_ROLE
+} from './constants';
+
+const { ApplicationError, ValidationError, NotFoundError, ForbiddenError } = errors;
+
+export const extendUser = () => {
+	const userContentType = strapi.contentType(USER_MODEL);
+	userContentType.attributes = {
+		// Spread previous defined attributes
+		...userContentType.attributes,
+		// Add new, or override attributes
+		platform: {
+			type: 'relation',
+			relation: 'oneToOne',
+			target: 'api::platform.platform',
+			required: true
+		},
+		firstName: {
+			type: 'string'
+		},
+		lastName: {
+			type: 'string'
+		},
+		company: {
+			type: 'string'
+		},
+		jobTitle: {
+			type: 'string'
+		},
+		address: {
+			type: 'string'
+		},
+		postalCode: {
+			type: 'string'
+		},
+		city: {
+			type: 'string'
+		},
+		country: {
+			type: 'string'
+		},
+		phone: {
+			type: 'string'
+		},
+		activateUser: {
+			type: 'boolean',
+			default: false
+		},
+		categories: {
+			type: 'relation',
+			relation: 'oneToMany',
+			target: 'plugin::page-builder.category'
+		},
+		confirmMailSend: {
+			type: 'boolean',
+			private: true,
+			writable: false,
+			visible: false,
+			default: false
+		}
+	};
+	delete userContentType.attributes.username;
+};
+
+export const extendControllers = () => {
+	const contentController = strapi.controller(USER_CONTENT_MANAGER);
+	contentController.create = async (ctx: any) => {
+		const { body } = ctx.request;
+		const { user: admin, userAbility } = ctx.state;
+
+		const { email } = body;
+		const platformId = body.platform.connect[0].id;
+
+		const pm = strapi?.admin?.services.permission.createPermissionsManager({
+			ability: userAbility,
+			action: ACTIONS.create,
+			model: USER_MODEL
+		});
+
+		if (!pm.isAllowed) {
+			return ctx.forbidden();
+		}
+
+		const sanitizedBody = await pm.pickPermittedFieldsOf(body, { subject: USER_MODEL });
+
+		const userWithSameEmail = await strapi.query(USER_MODEL).findOne({
+			where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] }
+		});
+
+		if (userWithSameEmail) {
+			throw new ApplicationError('Email already taken');
+		}
+
+		const user = {
+			...sanitizedBody,
+			provider: 'local',
+			[CREATED_BY_ATTRIBUTE]: admin.id,
+			[UPDATED_BY_ATTRIBUTE]: admin.id
+		};
+
+		user.email = user.email.toLowerCase();
+
+		const advanced = await strapi?.store({ type: 'plugin', name: 'users-permissions', key: 'advanced' }).get({});
+
+		if (user.role.connect.length === 0) {
+			//@ts-ignore strapi types...
+			const defaultRole = await strapi.query(USER_ROLE).findOne({ where: { type: advanced.default_role } });
+			user.role = defaultRole.id;
+		}
+
+		try {
+			const data = await strapi.service(CONTENT_ENTITY_MANAGER).create(user, USER_MODEL);
+			const sanitizedData = await pm.sanitizeOutput(data, { action: ACTIONS.read });
+
+			ctx.created(sanitizedData);
+		} catch (error) {
+			throw new ApplicationError(error.message);
+		}
+	};
+	contentController.update = async (ctx: any) => {
+		const { id } = ctx.params;
+		const { body } = ctx.request;
+		const { user: admin, userAbility } = ctx.state;
+
+		const { email, password } = body;
+
+		const { pm, entity } = await findEntityAndCheckPermissions(userAbility, ACTIONS.edit, USER_MODEL, id);
+		const user = entity;
+
+		const platformId = body.platform.connect.length > 0 ? body.platform.connect[0].id : entity.platform.id;
+
+		if (has(body, 'password') && !password && user.provider === 'local') {
+			throw new ValidationError('password.notNull');
+		}
+
+		//@ts-ignore
+		if (has(body, 'email')) {
+			const userWithSameEmail = await strapi
+				.query(USER_MODEL)
+				.findOne({ where: { $and: [{ email: email.toLowerCase() }, { platform: { id: platformId } }] } });
+
+			if (userWithSameEmail && toString(userWithSameEmail.id) !== toString(id)) {
+				throw new ApplicationError('Email already taken');
+			}
+			body.email = body.email.toLowerCase();
+		}
+
+		const sanitizedData = await pm.pickPermittedFieldsOf(body, { subject: pm.toSubject(user) });
+		const updateData = omit({ ...sanitizedData, updatedBy: admin.id }, 'createdBy');
+
+		const data = await strapi.service('plugin::content-manager.entity-manager').update({ id }, updateData, USER_MODEL);
+
+		ctx.body = await pm.sanitizeOutput(data, { action: ACTIONS.read });
+	};
+};
+
+const findEntityAndCheckPermissions = async (ability, action, model, id) => {
+	const entity = await strapi.query(USER_MODEL).findOne({
+		where: { id },
+		populate: [`${CREATED_BY_ATTRIBUTE}.roles`, 'platform']
+	});
+
+	if (!entity) {
+		throw new NotFoundError();
+	}
+
+	const pm = strapi.admin.services.permission.createPermissionsManager({ ability, action, model });
+
+	if (pm.ability.cannot(pm.action, pm.toSubject(entity))) {
+		throw new ForbiddenError();
+	}
+
+	const entityWithoutCreatorRoles = omit(entity, `${CREATED_BY_ATTRIBUTE}.roles`);
+
+	return { pm, entity: entityWithoutCreatorRoles };
+};

package/server/utils/strapi.ts

@@ -1,4 +1,5 @@
 import { Common } from '@strapi/strapi';
+import pluginId from '../../admin/src/pluginId';
 
 export const getDeepPopulate = (uid: Common.UID.Component, populate?: any, depth: number = 0) => {
 	if (populate) {
@@ -43,3 +44,7 @@ export const getPopulatedEntity = async (uid, id) => {
 		populate
 	});
 };
+
+export const getConfig = () => {
+	return strapi.config.get(`plugin.${pluginId}`) as Record<string, any>;
+};

package/shared/utils/constants.ts

@@ -4,3 +4,5 @@ export const PAGE_TYPE_UID = 'api::page-type.page-type';
 export const PLATFORM_UID = 'api::platform.platform';
 export const PAGE_TYPE_PAGE = 'page';
 export const PLATFORM = 'platform';
+export const USER_PERMISSION_USER_PLUGIN = 'plugin::users-permissions.user';
+export const PAGE_BUILDER_EMAIL_PLUGIN = 'plugin::page-builder.email';