strapi-identity 0.5.0 → 0.5.1

package/dist/admin/{AdminReset-D4NNnBDS.mjs → AdminReset-DjVX7phX.mjs}

@@ -2,7 +2,7 @@ import { jsxs, Fragment, jsx } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { W as WarningAlert } from "./WarningAlert-VU011LVF.mjs";
 import { Box, Flex, Typography, Grid, Button } from "@strapi/design-system";
-import { g as getToken, a as getTranslation } from "./index-CKG2ZxYT.mjs";
+import { g as getToken, a as getTranslation } from "./index-Bm3H4z3W.mjs";
 import { useIntl } from "react-intl";
 const AdminReset = ({ id }) => {
   const { formatMessage } = useIntl();

package/dist/admin/{AdminReset-BoWx0F06.js → AdminReset-DsKz040S.js}

@@ -4,7 +4,7 @@ const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const WarningAlert = require("./WarningAlert-DFE5euMk.js");
 const designSystem = require("@strapi/design-system");
-const index = require("./index-BeqHh5Gz.js");
+const index = require("./index-Ce4QOU6Y.js");
 const reactIntl = require("react-intl");
 const AdminReset = ({ id }) => {
   const { formatMessage } = reactIntl.useIntl();

package/dist/admin/{ProfileToggle-DtjyJRWN.js → ProfileToggle-4u6WWddz.js}

@@ -3,7 +3,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const designSystem = require("@strapi/design-system");
-const index = require("./index-BeqHh5Gz.js");
+const index = require("./index-Ce4QOU6Y.js");
 const reactIntl = require("react-intl");
 function RemoveModal({ open, onOpenChange, onSubmit }) {
   const { formatMessage } = reactIntl.useIntl();

package/dist/admin/{ProfileToggle-NJZgrDT_.mjs → ProfileToggle-B1UK1opI.mjs}

@@ -1,7 +1,7 @@
 import { jsx, jsxs, Fragment } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { Modal, Flex, Typography, TextInput, Button, Box, Grid, Field, Toggle } from "@strapi/design-system";
-import { a as getTranslation, I as InputOTP, b as InputOTPGroup, c as InputOTPSlot, d as InputOTPSeparator, g as getToken, C as ConfirmModal, E as EmailOTPModal } from "./index-CKG2ZxYT.mjs";
+import { a as getTranslation, I as InputOTP, b as InputOTPGroup, c as InputOTPSlot, d as InputOTPSeparator, g as getToken, C as ConfirmModal, E as EmailOTPModal } from "./index-Bm3H4z3W.mjs";
 import { useIntl } from "react-intl";
 function RemoveModal({ open, onOpenChange, onSubmit }) {
   const { formatMessage } = useIntl();

package/dist/admin/{SettingsPage-CZuOMYvG.mjs → SettingsPage-CcHTu8-f.mjs}

@@ -4,7 +4,7 @@ import { W as WarningAlert } from "./WarningAlert-VU011LVF.mjs";
 import { useNotification, Page, Layouts } from "@strapi/strapi/admin";
 import { Button, Flex, Typography, Grid, Field, Toggle, TextInput, Textarea } from "@strapi/design-system";
 import { Check } from "@strapi/icons";
-import { g as getToken, a as getTranslation } from "./index-CKG2ZxYT.mjs";
+import { g as getToken, a as getTranslation } from "./index-Bm3H4z3W.mjs";
 import { useIntl } from "react-intl";
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 var lodash$1 = { exports: {} };

package/dist/admin/{SettingsPage-BXl7gVGV.js → SettingsPage-DZDW9kNI.js}

@@ -6,7 +6,7 @@ const WarningAlert = require("./WarningAlert-DFE5euMk.js");
 const admin = require("@strapi/strapi/admin");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
-const index = require("./index-BeqHh5Gz.js");
+const index = require("./index-Ce4QOU6Y.js");
 const reactIntl = require("react-intl");
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 var lodash$1 = { exports: {} };

package/dist/admin/{index-CKG2ZxYT.mjs → index-Bm3H4z3W.mjs}

@@ -1351,7 +1351,7 @@ const VerifyPage = ({ fallbackIcon }) => {
         );
       }
       const rawTarget = new URLSearchParams(window.location.search).get("redirectTo") || "/admin";
-      const target = rawTarget.startsWith("/") ? rawTarget : "/admin";
+      const target = /^\/[^/]/.test(rawTarget) ? rawTarget : "/admin";
       window.location.replace(target);
     } catch (error2) {
       setError(
@@ -1769,6 +1769,10 @@ const EnforcedPage = () => {
             signal: ac.signal
           })
         ]);
+        if (meRes.status === 401) {
+          window.location.replace("/admin/auth/login");
+          return;
+        }
         if (statusRes.ok) {
           const statusBody = await statusRes.json();
           if (statusBody.data?.status === "full") {
@@ -1784,10 +1788,10 @@ const EnforcedPage = () => {
           const meBody = await meRes.json();
           setUserEmail(meBody.data?.email || "");
         }
+        setLoading(false);
       } catch (error) {
         if (error.name === "AbortError") return;
         console.error("Failed to check MFA status:", error);
-      } finally {
         setLoading(false);
       }
     })();
@@ -1945,7 +1949,7 @@ const plugin = {
       },
       id: "strapi-identity-settings",
       to: `/${PLUGIN_ID}`,
-      Component: () => import("./SettingsPage-CZuOMYvG.mjs"),
+      Component: () => import("./SettingsPage-CcHTu8-f.mjs"),
       permissions: [{ action: "plugin::strapi-identity.settings.update" }]
     });
     app.addMiddlewares([mfaRedirect]);
@@ -1954,14 +1958,14 @@ const plugin = {
       id: "profile-toggle",
       route: "/admin/me",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div > div:nth-child(2)',
-      Component: () => import("./ProfileToggle-NJZgrDT_.mjs")
+      Component: () => import("./ProfileToggle-B1UK1opI.mjs")
     });
     injections.registerRoute({
       id: "admin-reset",
       route: "/admin/settings/users/:id",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div:nth-child(2)',
       permissions: [{ action: "plugin::strapi-identity.settings.update" }],
-      Component: () => import("./AdminReset-D4NNnBDS.mjs")
+      Component: () => import("./AdminReset-DjVX7phX.mjs")
     });
     InjectVerify(app);
     InjectEnforced(app);
@@ -1985,10 +1989,20 @@ const plugin = {
   }
 };
 const mfaRedirect = () => {
-  return () => (next) => (action) => {
-    if (action && action.type === "admin/login" && (action.payload || {}).hasOwnProperty("token") && action.payload.token === void 0) {
-      window.location.replace("/admin/strapi-identity/verify");
-      return;
+  return () => (next) => async (action) => {
+    if (action && action.type === "admin/login" && (action.payload || {}).hasOwnProperty("token")) {
+      if (action.payload.token === void 0) {
+        window.location.replace("/admin/strapi-identity/verify");
+        return;
+      }
+      const config = await fetch("/strapi-identity/config", {
+        headers: { authorization: `Bearer ${action.payload.token}` }
+      }).then((res) => res.json());
+      if (config.data?.enabled && config.data?.enforce) {
+        await next(action);
+        window.location.replace("/admin/strapi-identity/enforced");
+        return;
+      }
     }
     return next(action);
   };

package/dist/admin/{index-BeqHh5Gz.js → index-Ce4QOU6Y.js}

@@ -1371,7 +1371,7 @@ const VerifyPage = ({ fallbackIcon }) => {
         );
       }
       const rawTarget = new URLSearchParams(window.location.search).get("redirectTo") || "/admin";
-      const target = rawTarget.startsWith("/") ? rawTarget : "/admin";
+      const target = /^\/[^/]/.test(rawTarget) ? rawTarget : "/admin";
       window.location.replace(target);
     } catch (error2) {
       setError(
@@ -1789,6 +1789,10 @@ const EnforcedPage = () => {
             signal: ac.signal
           })
         ]);
+        if (meRes.status === 401) {
+          window.location.replace("/admin/auth/login");
+          return;
+        }
         if (statusRes.ok) {
           const statusBody = await statusRes.json();
           if (statusBody.data?.status === "full") {
@@ -1804,10 +1808,10 @@ const EnforcedPage = () => {
           const meBody = await meRes.json();
           setUserEmail(meBody.data?.email || "");
         }
+        setLoading(false);
       } catch (error) {
         if (error.name === "AbortError") return;
         console.error("Failed to check MFA status:", error);
-      } finally {
         setLoading(false);
       }
     })();
@@ -1965,7 +1969,7 @@ const plugin = {
       },
       id: "strapi-identity-settings",
       to: `/${PLUGIN_ID}`,
-      Component: () => Promise.resolve().then(() => require("./SettingsPage-BXl7gVGV.js")),
+      Component: () => Promise.resolve().then(() => require("./SettingsPage-DZDW9kNI.js")),
       permissions: [{ action: "plugin::strapi-identity.settings.update" }]
     });
     app.addMiddlewares([mfaRedirect]);
@@ -1974,14 +1978,14 @@ const plugin = {
       id: "profile-toggle",
       route: "/admin/me",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div > div:nth-child(2)',
-      Component: () => Promise.resolve().then(() => require("./ProfileToggle-DtjyJRWN.js"))
+      Component: () => Promise.resolve().then(() => require("./ProfileToggle-4u6WWddz.js"))
     });
     injections.registerRoute({
       id: "admin-reset",
       route: "/admin/settings/users/:id",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div:nth-child(2)',
       permissions: [{ action: "plugin::strapi-identity.settings.update" }],
-      Component: () => Promise.resolve().then(() => require("./AdminReset-BoWx0F06.js"))
+      Component: () => Promise.resolve().then(() => require("./AdminReset-DsKz040S.js"))
     });
     InjectVerify(app);
     InjectEnforced(app);
@@ -2005,10 +2009,20 @@ const plugin = {
   }
 };
 const mfaRedirect = () => {
-  return () => (next) => (action) => {
-    if (action && action.type === "admin/login" && (action.payload || {}).hasOwnProperty("token") && action.payload.token === void 0) {
-      window.location.replace("/admin/strapi-identity/verify");
-      return;
+  return () => (next) => async (action) => {
+    if (action && action.type === "admin/login" && (action.payload || {}).hasOwnProperty("token")) {
+      if (action.payload.token === void 0) {
+        window.location.replace("/admin/strapi-identity/verify");
+        return;
+      }
+      const config = await fetch("/strapi-identity/config", {
+        headers: { authorization: `Bearer ${action.payload.token}` }
+      }).then((res) => res.json());
+      if (config.data?.enabled && config.data?.enforce) {
+        await next(action);
+        window.location.replace("/admin/strapi-identity/enforced");
+        return;
+      }
     }
     return next(action);
   };

package/dist/admin/index.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-BeqHh5Gz.js");
+const index = require("./index-Ce4QOU6Y.js");
 require("strapi-admin-portal");
 exports.default = index.plugin;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { p } from "./index-CKG2ZxYT.mjs";
+import { p } from "./index-Bm3H4z3W.mjs";
 import "strapi-admin-portal";
 export {
   p as default

package/dist/server/index.js

@@ -10382,7 +10382,9 @@ const mfa = [
       policies: [
         "has-mfa"
       ],
-      middlewares: []
+      middlewares: [
+        "admin::rateLimit"
+      ]
     }
   },
   {

package/dist/server/index.mjs

@@ -10375,7 +10375,9 @@ const mfa = [
       policies: [
         "has-mfa"
       ],
-      middlewares: []
+      middlewares: [
+        "admin::rateLimit"
+      ]
     }
   },
   {

package/dist/server/src/routes/admin/mfa.json.d.ts

@@ -60,7 +60,7 @@ declare const _default: [
     "config": {
       "auth": false,
       "policies": ["has-mfa"],
-      "middlewares": []
+      "middlewares": ["admin::rateLimit"]
     }
   },
   {

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.5.0",
+  "version": "0.5.1",
   "keywords": [
     "strapi",
     "plugin",