strapi-identity 0.2.0 → 0.4.0

package/dist/admin/{index-BfC6z9N5.mjs → index-DpIJdETG.mjs}

@@ -1,12 +1,13 @@
 import * as React from "react";
 import React__default, { useRef, useEffect, useContext, useCallback, useDebugValue, useState } from "react";
-import { jsx, jsxs } from "react/jsx-runtime";
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
 import "react-dom";
 import styled, { keyframes } from "styled-components";
 import { OTPInput, OTPInputContext } from "input-otp";
-import { Box, Flex, Main, Typography, TextInput, Button, SingleSelect, SingleSelectOption } from "@strapi/design-system";
-import { useAuth, RESPONSIVE_DEFAULT_SPACING } from "@strapi/strapi/admin";
+import { Box, Flex, Main, Typography, TextInput, Button, SingleSelect, SingleSelectOption, Modal, Grid } from "@strapi/design-system";
+import { useAuth, RESPONSIVE_DEFAULT_SPACING, Page, Layouts } from "@strapi/strapi/admin";
 import { useIntl } from "react-intl";
+import { QRCodeCanvas } from "qrcode.react";
 import { initialiseInjections } from "strapi-admin-portal";
 const __variableDynamicImportRuntimeHelper = (glob, path, segs) => {
   const v = glob[path];
@@ -637,7 +638,7 @@ function requireReactIs_development$1() {
       var ContextProvider = REACT_PROVIDER_TYPE;
       var Element = REACT_ELEMENT_TYPE;
       var ForwardRef = REACT_FORWARD_REF_TYPE;
-      var Fragment = REACT_FRAGMENT_TYPE;
+      var Fragment2 = REACT_FRAGMENT_TYPE;
       var Lazy = REACT_LAZY_TYPE;
       var Memo = REACT_MEMO_TYPE;
       var Portal = REACT_PORTAL_TYPE;
@@ -696,7 +697,7 @@ function requireReactIs_development$1() {
       reactIs_development$1.ContextProvider = ContextProvider;
       reactIs_development$1.Element = Element;
       reactIs_development$1.ForwardRef = ForwardRef;
-      reactIs_development$1.Fragment = Fragment;
+      reactIs_development$1.Fragment = Fragment2;
       reactIs_development$1.Lazy = Lazy;
       reactIs_development$1.Memo = Memo;
       reactIs_development$1.Portal = Portal;
@@ -1023,7 +1024,7 @@ function requireReactIs_development() {
       var ContextProvider = REACT_PROVIDER_TYPE;
       var Element = REACT_ELEMENT_TYPE;
       var ForwardRef = REACT_FORWARD_REF_TYPE;
-      var Fragment = REACT_FRAGMENT_TYPE;
+      var Fragment2 = REACT_FRAGMENT_TYPE;
       var Lazy = REACT_LAZY_TYPE;
       var Memo = REACT_MEMO_TYPE;
       var Portal = REACT_PORTAL_TYPE;
@@ -1091,7 +1092,7 @@ function requireReactIs_development() {
       reactIs_development.ContextProvider = ContextProvider;
       reactIs_development.Element = Element;
       reactIs_development.ForwardRef = ForwardRef;
-      reactIs_development.Fragment = Fragment;
+      reactIs_development.Fragment = Fragment2;
       reactIs_development.Lazy = Lazy;
       reactIs_development.Memo = Memo;
       reactIs_development.Portal = Portal;
@@ -1506,6 +1507,422 @@ const VerifyPage = ({ fallbackIcon }) => {
     )
   ] });
 };
+function ConfirmModal({
+  open,
+  onOpenChange,
+  onSubmit,
+  qrCodeUri,
+  secret,
+  passcodes
+}) {
+  const { formatMessage } = useIntl();
+  return /* @__PURE__ */ jsx(Modal.Root, { open, onOpenChange, children: /* @__PURE__ */ jsx(Modal.Content, { children: /* @__PURE__ */ jsxs("form", { onSubmit, children: [
+    /* @__PURE__ */ jsx(Modal.Header, { children: /* @__PURE__ */ jsx(Modal.Title, { children: formatMessage({
+      id: getTranslation("profile.setup"),
+      defaultMessage: "Set up Two-Factor Authentication"
+    }) }) }),
+    /* @__PURE__ */ jsx(Modal.Body, { children: passcodes ? /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "center", gap: 4, marginTop: 4, marginBottom: 4, children: [
+      /* @__PURE__ */ jsx(Typography, { textAlign: "center", children: formatMessage({
+        id: getTranslation("profile.recovery_codes"),
+        defaultMessage: "Please save the following recovery codes in a safe place. Each code can only be used once to access your account if you lose access to your authenticator app."
+      }) }),
+      /* @__PURE__ */ jsx(Grid.Root, { gap: 4, marginTop: 4, marginBottom: 4, children: passcodes.map((code) => /* @__PURE__ */ jsx(Grid.Item, { col: 6, children: /* @__PURE__ */ jsx(Typography, { variant: "pi", children: code }) }, code)) }),
+      /* @__PURE__ */ jsx(Typography, { variant: "pi", textAlign: "center", children: formatMessage({
+        id: getTranslation("profile.recovery_codes_warning"),
+        defaultMessage: "If you lose both your authenticator app and your recovery codes, you will need to contact an administrator to regain access to your account."
+      }) })
+    ] }) : /* @__PURE__ */ jsxs(Flex, { direction: "column", children: [
+      /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "center", gap: 4, marginTop: 4, marginBottom: 4, children: [
+        /* @__PURE__ */ jsx(Typography, { children: formatMessage({
+          id: getTranslation("profile.scan_qr"),
+          defaultMessage: "You will need an authenticator app to scan the QR code below."
+        }) }),
+        qrCodeUri && /* @__PURE__ */ jsx(QRCodeCanvas, { value: qrCodeUri, size: 256 }),
+        secret && /* @__PURE__ */ jsx(Typography, { variant: "pi", children: secret || "" })
+      ] }),
+      /* @__PURE__ */ jsx(Rule, {}),
+      /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "center", gap: 4, marginTop: 4, marginBottom: 4, children: [
+        /* @__PURE__ */ jsx(Typography, { children: formatMessage({
+          id: getTranslation("profile.enter_otp"),
+          defaultMessage: "Enter the 6-digit code from your authenticator app to confirm."
+        }) }),
+        /* @__PURE__ */ jsxs(InputOTP, { maxLength: 6, name: "otp", id: "otp", autoFocus: true, children: [
+          /* @__PURE__ */ jsxs(InputOTPGroup, { children: [
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 0 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 1 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 2 })
+          ] }),
+          /* @__PURE__ */ jsx(InputOTPSeparator, {}),
+          /* @__PURE__ */ jsxs(InputOTPGroup, { children: [
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 3 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 4 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 5 })
+          ] })
+        ] })
+      ] })
+    ] }) }),
+    /* @__PURE__ */ jsxs(Modal.Footer, { children: [
+      passcodes && /* @__PURE__ */ jsx("span", {}),
+      /* @__PURE__ */ jsx(Modal.Close, { children: /* @__PURE__ */ jsx(Button, { variant: passcodes ? void 0 : "tertiary", children: passcodes ? formatMessage({ id: "global.close", defaultMessage: "Close" }) : formatMessage({ id: "app.components.Button.cancel", defaultMessage: "Cancel" }) }) }),
+      !passcodes && /* @__PURE__ */ jsx(Button, { type: "submit", children: formatMessage({ id: "app.components.Button.confirm", defaultMessage: "Confirm" }) })
+    ] })
+  ] }) }) });
+}
+const Rule = styled.hr`
+  height: 1px;
+  border: 0;
+  background-color: #e5e5e5;
+`;
+const getCookieValue = (name) => {
+  const cookieArray = document.cookie.split(";");
+  return cookieArray.reduce((result, cookie) => {
+    const [key, value] = cookie.split("=").map((item) => item.trim());
+    return key === name ? decodeURIComponent(value) : result;
+  }, null);
+};
+const getToken = () => {
+  const fromLocalStorage = localStorage.getItem("jwtToken");
+  if (fromLocalStorage) return JSON.parse(fromLocalStorage);
+  const fromCookie = getCookieValue("jwtToken");
+  return fromCookie ?? null;
+};
+function EmailOTPModal({
+  mode,
+  open,
+  email,
+  onOpenChange,
+  onSuccess
+}) {
+  const { formatMessage } = useIntl();
+  const [step, setStep] = useState("send");
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState(null);
+  const handleOpenChange = (nextOpen) => {
+    if (!nextOpen) {
+      setStep("send");
+      setError(null);
+    }
+    onOpenChange(nextOpen);
+  };
+  const handleSend = async () => {
+    const token = getToken();
+    setLoading(true);
+    setError(null);
+    try {
+      const endpoint = mode === "setup" ? "/strapi-identity/enable-email" : "/strapi-identity/disable-email/request";
+      const response = await fetch(endpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", authorization: `Bearer ${token}` }
+      });
+      const body = await response.json();
+      if (!response.ok) {
+        throw new Error(body.error || "Failed to send verification email");
+      }
+      setStep("confirm");
+    } catch (err) {
+      setError(err.message);
+    } finally {
+      setLoading(false);
+    }
+  };
+  const handleConfirm = async (e) => {
+    e.preventDefault();
+    const token = getToken();
+    const formData = new FormData(e.target);
+    const code = formData.get("otp");
+    setLoading(true);
+    setError(null);
+    try {
+      const endpoint = mode === "setup" ? "/strapi-identity/setup-email" : "/strapi-identity/disable";
+      const response = await fetch(endpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", authorization: `Bearer ${token}` },
+        body: JSON.stringify({ code })
+      });
+      const body = await response.json();
+      if (!response.ok) {
+        throw new Error(body.error || "Invalid or expired code");
+      }
+      handleOpenChange(false);
+      onSuccess();
+    } catch (err) {
+      setError(err.message);
+    } finally {
+      setLoading(false);
+    }
+  };
+  const title = mode === "setup" ? formatMessage({
+    id: getTranslation("email_otp.setup_title"),
+    defaultMessage: "Enable Email OTP"
+  }) : formatMessage({
+    id: getTranslation("email_otp.disable_title"),
+    defaultMessage: "Disable Email OTP"
+  });
+  return /* @__PURE__ */ jsx(Modal.Root, { open, onOpenChange: handleOpenChange, children: /* @__PURE__ */ jsxs(Modal.Content, { children: [
+    /* @__PURE__ */ jsx(Modal.Header, { children: /* @__PURE__ */ jsx(Modal.Title, { children: title }) }),
+    step === "send" ? /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx(Modal.Body, { children: /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "center", gap: 4, marginTop: 4, marginBottom: 4, children: [
+        /* @__PURE__ */ jsx(Typography, { textAlign: "center", children: mode === "setup" ? formatMessage(
+          {
+            id: getTranslation("email_otp.setup_description"),
+            defaultMessage: "We'll send a 6-digit verification code to {email}. Enter it to enable Email OTP."
+          },
+          { email: /* @__PURE__ */ jsx("strong", { children: email }) }
+        ) : formatMessage(
+          {
+            id: getTranslation("email_otp.disable_description"),
+            defaultMessage: "We'll send a 6-digit verification code to {email}. Enter it to disable Email OTP."
+          },
+          { email: /* @__PURE__ */ jsx("strong", { children: email }) }
+        ) }),
+        error ? /* @__PURE__ */ jsx(Typography, { role: "alert", textColor: "danger600", textAlign: "center", children: error }) : null
+      ] }) }),
+      /* @__PURE__ */ jsxs(Modal.Footer, { children: [
+        /* @__PURE__ */ jsx(Modal.Close, { children: /* @__PURE__ */ jsx(Button, { variant: "tertiary", children: formatMessage({ id: "app.components.Button.cancel", defaultMessage: "Cancel" }) }) }),
+        /* @__PURE__ */ jsx(Button, { onClick: handleSend, loading, children: formatMessage({
+          id: getTranslation("email_otp.send_code"),
+          defaultMessage: "Send verification email"
+        }) })
+      ] })
+    ] }) : /* @__PURE__ */ jsxs("form", { onSubmit: handleConfirm, children: [
+      /* @__PURE__ */ jsx(Modal.Body, { children: /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "center", gap: 4, marginTop: 4, marginBottom: 4, children: [
+        /* @__PURE__ */ jsx(Typography, { textAlign: "center", children: formatMessage(
+          {
+            id: getTranslation("email_otp.confirm_description"),
+            defaultMessage: "Enter the 6-digit code sent to {email}."
+          },
+          { email: /* @__PURE__ */ jsx("strong", { children: email }) }
+        ) }),
+        /* @__PURE__ */ jsxs(InputOTP, { maxLength: 6, name: "otp", id: "otp", autoFocus: true, children: [
+          /* @__PURE__ */ jsxs(InputOTPGroup, { children: [
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 0 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 1 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 2 })
+          ] }),
+          /* @__PURE__ */ jsx(InputOTPSeparator, {}),
+          /* @__PURE__ */ jsxs(InputOTPGroup, { children: [
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 3 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 4 }),
+            /* @__PURE__ */ jsx(InputOTPSlot, { index: 5 })
+          ] })
+        ] }),
+        error ? /* @__PURE__ */ jsx(Typography, { role: "alert", textColor: "danger600", textAlign: "center", children: error }) : null,
+        /* @__PURE__ */ jsx(Button, { variant: "ghost", type: "button", onClick: () => handleSend(), children: formatMessage({
+          id: getTranslation("email_otp.resend_code"),
+          defaultMessage: "Resend code"
+        }) })
+      ] }) }),
+      /* @__PURE__ */ jsxs(Modal.Footer, { children: [
+        /* @__PURE__ */ jsx(Modal.Close, { children: /* @__PURE__ */ jsx(Button, { variant: "tertiary", children: formatMessage({
+          id: "app.components.Button.cancel",
+          defaultMessage: "Cancel"
+        }) }) }),
+        /* @__PURE__ */ jsx(Button, { type: "submit", loading, children: formatMessage({
+          id: "app.components.Button.confirm",
+          defaultMessage: "Confirm"
+        }) })
+      ] })
+    ] })
+  ] }) });
+}
+const InjectEnforced = async (app) => {
+  const _router = app.router;
+  while (!_router.router) await new Promise((resolve) => setTimeout(resolve, 10));
+  _router.router.routes?.[0].children?.push({
+    path: "strapi-identity/enforced",
+    element: /* @__PURE__ */ jsx(EnforcedPage, {})
+  });
+};
+const EnforcedPage = () => {
+  const { formatMessage } = useIntl();
+  const [loading, setLoading] = useState(true);
+  const [emailConfigured, setEmailConfigured] = useState(false);
+  const [userEmail, setUserEmail] = useState("");
+  const [totpModalOpen, setTotpModalOpen] = useState(false);
+  const [uri, setUri] = useState(null);
+  const [secret, setSecret] = useState(null);
+  const [passcodes, setPasscodes] = useState(null);
+  const [emailModalOpen, setEmailModalOpen] = useState(false);
+  useEffect(() => {
+    const ac = new AbortController();
+    (async () => {
+      const token = getToken();
+      try {
+        const [statusRes, configRes, meRes] = await Promise.all([
+          fetch("/strapi-identity/status", {
+            headers: { authorization: `Bearer ${token}` },
+            signal: ac.signal
+          }),
+          fetch("/strapi-identity/config", {
+            headers: { authorization: `Bearer ${token}` },
+            signal: ac.signal
+          }),
+          fetch("/admin/users/me", {
+            headers: { authorization: `Bearer ${token}` },
+            signal: ac.signal
+          })
+        ]);
+        if (statusRes.ok) {
+          const statusBody = await statusRes.json();
+          if (statusBody.data?.status === "full") {
+            window.location.replace("/admin");
+            return;
+          }
+        }
+        if (configRes.ok) {
+          const configBody = await configRes.json();
+          setEmailConfigured(!!configBody.data?.email_enabled);
+        }
+        if (meRes.ok) {
+          const meBody = await meRes.json();
+          setUserEmail(meBody.data?.email || "");
+        }
+      } catch (error) {
+        if (error.name === "AbortError") return;
+        console.error("Failed to check MFA status:", error);
+      } finally {
+        setLoading(false);
+      }
+    })();
+    return () => ac.abort();
+  }, []);
+  const handleEnableTOTP = async () => {
+    const token = getToken();
+    try {
+      const response = await fetch("/strapi-identity/enable", {
+        method: "POST",
+        headers: { "Content-Type": "application/json", authorization: `Bearer ${token}` },
+        body: JSON.stringify({ enable: true })
+      });
+      const body = await response.json();
+      if (!response.ok) {
+        throw new Error(body.error || "Failed to initiate TOTP setup");
+      }
+      setUri(body.data?.uri || null);
+      setSecret(body.data?.secret || null);
+      setTotpModalOpen(true);
+    } catch (error) {
+      console.error(error);
+    }
+  };
+  const handleConfirmTOTP = async (e) => {
+    e.preventDefault();
+    const formData = new FormData(e.target);
+    const code = formData.get("otp");
+    const token = getToken();
+    try {
+      const response = await fetch("/strapi-identity/setup", {
+        method: "POST",
+        headers: { "Content-Type": "application/json", authorization: `Bearer ${token}` },
+        body: JSON.stringify({ code })
+      });
+      const body = await response.json();
+      if (!response.ok) {
+        throw new Error(body.error || "Failed to set up MFA");
+      }
+      if (body.data?.recoveryCodes) {
+        setPasscodes(body.data.recoveryCodes);
+      } else {
+        window.location.replace("/admin");
+      }
+      setUri(null);
+      setSecret(null);
+    } catch (error) {
+      console.error(error);
+    }
+  };
+  const handleCloseTOTP = () => {
+    if (passcodes) {
+      window.location.replace("/admin");
+      return;
+    }
+    setTotpModalOpen(false);
+    setUri(null);
+    setSecret(null);
+    setPasscodes(null);
+  };
+  if (loading) return null;
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Page.Title, { children: formatMessage({
+      id: getTranslation("enforced.page_title"),
+      defaultMessage: "MFA Required"
+    }) }),
+    /* @__PURE__ */ jsxs(Page.Main, { children: [
+      /* @__PURE__ */ jsx(
+        Layouts.Header,
+        {
+          title: formatMessage({
+            id: getTranslation("enforced.title"),
+            defaultMessage: "Multi-Factor Authentication Required"
+          }),
+          subtitle: formatMessage({
+            id: getTranslation("enforced.subtitle"),
+            defaultMessage: "Your administrator requires MFA to be configured before you can access the CMS."
+          })
+        }
+      ),
+      /* @__PURE__ */ jsx(Layouts.Content, { children: /* @__PURE__ */ jsx(
+        Box,
+        {
+          background: "neutral0",
+          hasRadius: true,
+          shadow: "tableShadow",
+          paddingTop: 6,
+          paddingBottom: 6,
+          paddingLeft: 7,
+          paddingRight: 7,
+          children: /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "stretch", gap: 4, children: [
+            /* @__PURE__ */ jsxs(Flex, { direction: "column", alignItems: "stretch", gap: 1, children: [
+              /* @__PURE__ */ jsx(Typography, { variant: "delta", tag: "h2", children: formatMessage({
+                id: getTranslation("enforced.card_title"),
+                defaultMessage: "Set Up Two-Factor Authentication"
+              }) }),
+              /* @__PURE__ */ jsx(Typography, { children: formatMessage({
+                id: getTranslation("enforced.description"),
+                defaultMessage: "To continue using the CMS, you must enable at least one Multi-Factor Authentication method. Choose an option below to get started."
+              }) })
+            ] }),
+            /* @__PURE__ */ jsxs(Flex, { gap: 3, wrap: "wrap", children: [
+              /* @__PURE__ */ jsx(Button, { size: "L", onClick: handleEnableTOTP, children: formatMessage({
+                id: getTranslation("enforced.setup_totp"),
+                defaultMessage: "Set up Authenticator App"
+              }) }),
+              emailConfigured && /* @__PURE__ */ jsx(Button, { size: "L", variant: "secondary", onClick: () => setEmailModalOpen(true), children: formatMessage({
+                id: getTranslation("enforced.setup_email"),
+                defaultMessage: "Set up Email OTP"
+              }) })
+            ] })
+          ] })
+        }
+      ) })
+    ] }),
+    /* @__PURE__ */ jsx(
+      ConfirmModal,
+      {
+        open: totpModalOpen,
+        onOpenChange: handleCloseTOTP,
+        qrCodeUri: uri,
+        secret,
+        passcodes,
+        onSubmit: handleConfirmTOTP
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      EmailOTPModal,
+      {
+        mode: "setup",
+        open: emailModalOpen,
+        email: userEmail,
+        onOpenChange: (open) => {
+          if (!open) setEmailModalOpen(false);
+        },
+        onSuccess: () => {
+          window.location.replace("/admin");
+        }
+      }
+    )
+  ] });
+};
 const plugin = {
   register(app) {
     app.registerPlugin({
@@ -1520,12 +1937,9 @@ const plugin = {
         defaultMessage: "Strapi Identity Settings"
       },
       id: "strapi-identity-settings",
-      to: `/settings/${PLUGIN_ID}`,
-      Component: async () => import("./SettingsPage-7Ytl01jH.mjs"),
-      permissions: [
-        { action: "plugin::strapi-identity.settings.read" },
-        { action: "plugin::strapi-identity.settings.read" }
-      ]
+      to: `/${PLUGIN_ID}`,
+      Component: () => import("./SettingsPage-Dm_llkYv.mjs"),
+      permissions: [{ action: "plugin::strapi-identity.settings.update" }]
     });
     app.addMiddlewares([mfaRedirect]);
     const injections = initialiseInjections(app);
@@ -1533,21 +1947,23 @@ const plugin = {
       id: "profile-toggle",
       route: "/admin/me",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div > div:nth-child(2)',
-      Component: async () => import("./ProfileToggle-BCtCsOvj.mjs")
+      Component: () => import("./ProfileToggle-k0d-caPC.mjs")
     });
     injections.registerRoute({
       id: "admin-reset",
       route: "/admin/settings/users/:id",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div:nth-child(2)',
-      Component: async () => import("./AdminReset-B-WGECOX.mjs")
+      permissions: [{ action: "plugin::strapi-identity.settings.update" }],
+      Component: () => import("./AdminReset-DOmsyqwQ.mjs")
     });
     InjectVerify(app);
+    InjectEnforced(app);
   },
   registerTrads({ locales }) {
     return Promise.all(
       locales.map(async (locale) => {
         try {
-          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/ar.json": () => import("./ar-DwZqj0qM.mjs"), "./translations/ca.json": () => import("./ca-aKVVc8iQ.mjs"), "./translations/cs.json": () => import("./cs--prflMHS.mjs"), "./translations/de.json": () => import("./de-BT25lv_6.mjs"), "./translations/dk.json": () => import("./dk-Ck3AQYU7.mjs"), "./translations/en.json": () => import("./en-9qzlpde0.mjs"), "./translations/es.json": () => import("./es-lh6XoPb7.mjs"), "./translations/eu.json": () => import("./eu-Cuz6ijBX.mjs"), "./translations/fr.json": () => import("./fr-ChlDcZsG.mjs"), "./translations/gu.json": () => import("./gu-B6zyD1bW.mjs"), "./translations/he.json": () => import("./he-C5V-qZCX.mjs"), "./translations/hi.json": () => import("./hi-czhOWo6-.mjs"), "./translations/hu.json": () => import("./hu-NbZ3aiYV.mjs"), "./translations/id.json": () => import("./id-NH9PvcR5.mjs"), "./translations/it.json": () => import("./it-Cmrey6tg.mjs"), "./translations/ja.json": () => import("./ja-DH3KMqOL.mjs"), "./translations/ko.json": () => import("./ko-DPN28RE8.mjs"), "./translations/ml.json": () => import("./ml-MsHNacm6.mjs"), "./translations/ms.json": () => import("./ms-TjHAaxTd.mjs"), "./translations/nl.json": () => import("./nl-BLILZU8-.mjs"), "./translations/no.json": () => import("./no-BtVZ-siy.mjs"), "./translations/pl.json": () => import("./pl-DCSB6LwZ.mjs"), "./translations/pt-BR.json": () => import("./pt-BR-CeLqmj88.mjs"), "./translations/pt.json": () => import("./pt-fgjdOyW5.mjs"), "./translations/ru.json": () => import("./ru-B_hlpAyP.mjs"), "./translations/sa.json": () => import("./sa-BtuJ_I1t.mjs"), "./translations/sk.json": () => import("./sk-mmuTFlCK.mjs"), "./translations/sv.json": () => import("./sv-BlaHc5ax.mjs"), "./translations/th.json": () => import("./th-BwyhFaeE.mjs"), "./translations/tr.json": () => import("./tr-BLocNlbZ.mjs"), "./translations/uk.json": () => import("./uk-CyZ10xtq.mjs"), "./translations/vi.json": () => import("./vi-Bx_UJ8up.mjs"), "./translations/zh-Hans.json": () => import("./zh-Hans-s7G2GUHU.mjs"), "./translations/zh.json": () => import("./zh-CjJdRa3l.mjs") }), `./translations/${locale}.json`, 3);
+          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/ar.json": () => import("./ar-B4yBU4m7.mjs"), "./translations/ca.json": () => import("./ca-DLE8GCgI.mjs"), "./translations/cs.json": () => import("./cs-3kxvJ5GN.mjs"), "./translations/de.json": () => import("./de-BTldhzPN.mjs"), "./translations/dk.json": () => import("./dk-CCNCrmIK.mjs"), "./translations/en.json": () => import("./en-1anycEwN.mjs"), "./translations/es.json": () => import("./es-DMANTUCL.mjs"), "./translations/eu.json": () => import("./eu-BITeCOIE.mjs"), "./translations/fr.json": () => import("./fr-C81x3RP3.mjs"), "./translations/gu.json": () => import("./gu-DDR6O_Dp.mjs"), "./translations/he.json": () => import("./he-TPBr5x3o.mjs"), "./translations/hi.json": () => import("./hi-Pwt1EMiO.mjs"), "./translations/hu.json": () => import("./hu-CTKkJzwl.mjs"), "./translations/id.json": () => import("./id-Bq3jNpUL.mjs"), "./translations/it.json": () => import("./it-CgRQVAPr.mjs"), "./translations/ja.json": () => import("./ja-2xaH1Qf2.mjs"), "./translations/ko.json": () => import("./ko-CGgmfI4W.mjs"), "./translations/ml.json": () => import("./ml-aXIja392.mjs"), "./translations/ms.json": () => import("./ms-CLGR4CKx.mjs"), "./translations/nl.json": () => import("./nl-CGFOqn_t.mjs"), "./translations/no.json": () => import("./no-BIbR3s2A.mjs"), "./translations/pl.json": () => import("./pl-BBEIjPVT.mjs"), "./translations/pt-BR.json": () => import("./pt-BR-C0S_4PYn.mjs"), "./translations/pt.json": () => import("./pt-DwDWDT_T.mjs"), "./translations/ru.json": () => import("./ru-DuxM9hFK.mjs"), "./translations/sa.json": () => import("./sa-DfqNZDgh.mjs"), "./translations/sk.json": () => import("./sk-BcYzeG4F.mjs"), "./translations/sv.json": () => import("./sv-CkoFHi6o.mjs"), "./translations/th.json": () => import("./th-C4FBlfLA.mjs"), "./translations/tr.json": () => import("./tr-Djsa55Fh.mjs"), "./translations/uk.json": () => import("./uk-BDoDjhO2.mjs"), "./translations/vi.json": () => import("./vi-D977KjlZ.mjs"), "./translations/zh-Hans.json": () => import("./zh-Hans-DNgRcEC-.mjs"), "./translations/zh.json": () => import("./zh-CKYKCaVd.mjs") }), `./translations/${locale}.json`, 3);
           const newData = {};
           const keys = Object.keys(data);
           for (const key of keys) {
@@ -1571,10 +1987,13 @@ const mfaRedirect = () => {
   };
 };
 export {
+  ConfirmModal as C,
+  EmailOTPModal as E,
   InputOTP as I,
-  InputOTPGroup as a,
-  InputOTPSlot as b,
-  InputOTPSeparator as c,
-  getTranslation as g,
+  getTranslation as a,
+  InputOTPGroup as b,
+  InputOTPSlot as c,
+  InputOTPSeparator as d,
+  getToken as g,
   plugin as p
 };

package/dist/admin/index.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-D03zlFnm.js");
+const index = require("./index-B9P8S4CX.js");
 require("strapi-admin-portal");
 exports.default = index.plugin;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { p } from "./index-BfC6z9N5.mjs";
+import { p } from "./index-DpIJdETG.mjs";
 import "strapi-admin-portal";
 export {
   p as default

package/dist/admin/{it-Cmrey6tg.mjs → it-CgRQVAPr.mjs}

@@ -4,6 +4,13 @@ const it = {
   "admin.title": "Autenticazione a due fattori",
   "admin.warn-title": "Reimpostare la 2FA per questo utente?",
   "admin.warning": "La reimpostazione dell'autenticazione a due fattori consentirà all'utente di configurarla nuovamente con un nuovo dispositivo. Questa azione non può essere annullata.",
+  "enforced.card_title": "Configura autenticazione a due fattori",
+  "enforced.description": "Per continuare a utilizzare il CMS, è necessario abilitare almeno un metodo di autenticazione a più fattori. Scegli un'opzione qui sotto per iniziare.",
+  "enforced.page_title": "MFA richiesto",
+  "enforced.setup_email": "Configura OTP via email",
+  "enforced.setup_totp": "Configura l'app di autenticazione",
+  "enforced.subtitle": "L'amministratore richiede che MFA sia configurato prima di poter accedere al CMS.",
+  "enforced.title": "Autenticazione a più fattori richiesta",
   "email_otp.confirm_description": "Inserisci il codice a 6 cifre inviato a {email}.",
   "email_otp.disable_description": "Invieremo un codice di verifica a 6 cifre a {email}. Inseriscilo per disabilitare Email OTP.",
   "email_otp.disable_title": "Disabilita Email OTP",

package/dist/admin/{it-Df6-7-M7.js → it-r0rbu0x0.js}

@@ -6,6 +6,13 @@ const it = {
   "admin.title": "Autenticazione a due fattori",
   "admin.warn-title": "Reimpostare la 2FA per questo utente?",
   "admin.warning": "La reimpostazione dell'autenticazione a due fattori consentirà all'utente di configurarla nuovamente con un nuovo dispositivo. Questa azione non può essere annullata.",
+  "enforced.card_title": "Configura autenticazione a due fattori",
+  "enforced.description": "Per continuare a utilizzare il CMS, è necessario abilitare almeno un metodo di autenticazione a più fattori. Scegli un'opzione qui sotto per iniziare.",
+  "enforced.page_title": "MFA richiesto",
+  "enforced.setup_email": "Configura OTP via email",
+  "enforced.setup_totp": "Configura l'app di autenticazione",
+  "enforced.subtitle": "L'amministratore richiede che MFA sia configurato prima di poter accedere al CMS.",
+  "enforced.title": "Autenticazione a più fattori richiesta",
   "email_otp.confirm_description": "Inserisci il codice a 6 cifre inviato a {email}.",
   "email_otp.disable_description": "Invieremo un codice di verifica a 6 cifre a {email}. Inseriscilo per disabilitare Email OTP.",
   "email_otp.disable_title": "Disabilita Email OTP",

package/dist/admin/{ja-HuAq9ZwT.js → ja-27vNq46V.js}

@@ -6,6 +6,13 @@ const ja = {
   "admin.title": "二要素認証",
   "admin.warn-title": "このユーザーの2FAをリセットしますか？",
   "admin.warning": "二要素認証をリセットすると、ユーザーは新しいデバイスで再設定できるようになります。この操作は元に戻せません。",
+  "enforced.card_title": "二要素認証を設定する",
+  "enforced.description": "CMSの使用を続けるには、少なくとも1つの多要素認証方法を有効にする必要があります。開始するには以下のオプションを選択してください。",
+  "enforced.page_title": "MFAが必要です",
+  "enforced.setup_email": "メールOTPを設定する",
+  "enforced.setup_totp": "認証アプリを設定する",
+  "enforced.subtitle": "CMSにアクセスするには、管理者がMFAを設定するよう求めています。",
+  "enforced.title": "多要素認証が必要です",
   "email_otp.confirm_description": "{email} に送信された6桁のコードを入力してください。",
   "email_otp.disable_description": "{email} に6桁の確認コードを送信します。Email OTPを無効にするには入力してください。",
   "email_otp.disable_title": "Email OTPを無効にする",

package/dist/admin/{ja-DH3KMqOL.mjs → ja-2xaH1Qf2.mjs}

@@ -4,6 +4,13 @@ const ja = {
   "admin.title": "二要素認証",
   "admin.warn-title": "このユーザーの2FAをリセットしますか？",
   "admin.warning": "二要素認証をリセットすると、ユーザーは新しいデバイスで再設定できるようになります。この操作は元に戻せません。",
+  "enforced.card_title": "二要素認証を設定する",
+  "enforced.description": "CMSの使用を続けるには、少なくとも1つの多要素認証方法を有効にする必要があります。開始するには以下のオプションを選択してください。",
+  "enforced.page_title": "MFAが必要です",
+  "enforced.setup_email": "メールOTPを設定する",
+  "enforced.setup_totp": "認証アプリを設定する",
+  "enforced.subtitle": "CMSにアクセスするには、管理者がMFAを設定するよう求めています。",
+  "enforced.title": "多要素認証が必要です",
   "email_otp.confirm_description": "{email} に送信された6桁のコードを入力してください。",
   "email_otp.disable_description": "{email} に6桁の確認コードを送信します。Email OTPを無効にするには入力してください。",
   "email_otp.disable_title": "Email OTPを無効にする",

package/dist/admin/{ko-DPN28RE8.mjs → ko-CGgmfI4W.mjs}

@@ -4,6 +4,13 @@ const ko = {
   "admin.title": "2단계 인증",
   "admin.warn-title": "이 사용자의 2FA를 초기화하시겠습니까?",
   "admin.warning": "2단계 인증을 초기화하면 사용자가 새 기기로 다시 설정할 수 있습니다. 이 작업은 되돌릴 수 없습니다.",
+  "enforced.card_title": "2단계 인증 설정",
+  "enforced.description": "CMS를 계속 사용하려면 적어도 하나의 다중 요소 인증 방법을 활성화해야 합니다. 시작하려면 아래에서 옵션을 선택하세요.",
+  "enforced.page_title": "MFA 필요",
+  "enforced.setup_email": "이메일 OTP 설정",
+  "enforced.setup_totp": "인증 앱 설정",
+  "enforced.subtitle": "관리자는 CMS에 액세스하기 전에 MFA를 설정하도록 요구합니다.",
+  "enforced.title": "다중 요소 인증 필요",
   "email_otp.confirm_description": "{email}로 전송된 6자리 코드를 입력하세요.",
   "email_otp.disable_description": "{email}로 6자리 인증 코드를 전송합니다. Email OTP를 비활성화하려면 입력하세요.",
   "email_otp.disable_title": "Email OTP 비활성화",

package/dist/admin/{ko-S9k8KA8K.js → ko-Ci0l5h1b.js}

@@ -6,6 +6,13 @@ const ko = {
   "admin.title": "2단계 인증",
   "admin.warn-title": "이 사용자의 2FA를 초기화하시겠습니까?",
   "admin.warning": "2단계 인증을 초기화하면 사용자가 새 기기로 다시 설정할 수 있습니다. 이 작업은 되돌릴 수 없습니다.",
+  "enforced.card_title": "2단계 인증 설정",
+  "enforced.description": "CMS를 계속 사용하려면 적어도 하나의 다중 요소 인증 방법을 활성화해야 합니다. 시작하려면 아래에서 옵션을 선택하세요.",
+  "enforced.page_title": "MFA 필요",
+  "enforced.setup_email": "이메일 OTP 설정",
+  "enforced.setup_totp": "인증 앱 설정",
+  "enforced.subtitle": "관리자는 CMS에 액세스하기 전에 MFA를 설정하도록 요구합니다.",
+  "enforced.title": "다중 요소 인증 필요",
   "email_otp.confirm_description": "{email}로 전송된 6자리 코드를 입력하세요.",
   "email_otp.disable_description": "{email}로 6자리 인증 코드를 전송합니다. Email OTP를 비활성화하려면 입력하세요.",
   "email_otp.disable_title": "Email OTP 비활성화",