strapi-identity 0.7.0 → 0.7.1

package/dist/admin/{AdminReset-8bbnTK5T.mjs → AdminReset-C8tJMMQS.mjs}

@@ -2,7 +2,7 @@ import { jsxs, Fragment, jsx } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { W as WarningAlert } from "./WarningAlert-VU011LVF.mjs";
 import { Box, Flex, Typography, Grid, Button } from "@strapi/design-system";
-import { g as getToken, a as getTranslation } from "./index-CuphCaxI.mjs";
+import { g as getToken, a as getTranslation } from "./index-BGCzWKE5.mjs";
 import { useIntl } from "react-intl";
 const AdminReset = ({ id }) => {
   const { formatMessage } = useIntl();

package/dist/admin/{AdminReset-BTaE7Xxb.js → AdminReset-CB9VgfLp.js}

@@ -4,7 +4,7 @@ const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const WarningAlert = require("./WarningAlert-DFE5euMk.js");
 const designSystem = require("@strapi/design-system");
-const index = require("./index-BM19x6ag.js");
+const index = require("./index-Z7ZoOcpL.js");
 const reactIntl = require("react-intl");
 const AdminReset = ({ id }) => {
   const { formatMessage } = reactIntl.useIntl();

package/dist/admin/{ProfileToggle-DklJn1dC.js → ProfileToggle-DAWXMfz9.js}

@@ -3,7 +3,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
 const designSystem = require("@strapi/design-system");
-const index = require("./index-BM19x6ag.js");
+const index = require("./index-Z7ZoOcpL.js");
 const reactIntl = require("react-intl");
 function RemoveModal({ open, onOpenChange, onSubmit }) {
   const { formatMessage } = reactIntl.useIntl();
@@ -200,14 +200,10 @@ const ProfileToggle = () => {
         const statusBody = await statusRes.json();
         const enabledBody = await enabledRes.json();
         if (!statusRes.ok) {
-          throw new Error(
-            `${statusRes.status} - ${statusBody.error || "Failed to get MFA status"}`
-          );
+          throw new Error(`${statusRes.status} - ${statusBody.error || "Failed to get MFA status"}`);
         }
         if (!enabledRes.ok) {
-          throw new Error(
-            `${enabledRes.status} - ${enabledBody.error || "Failed to get MFA config"}`
-          );
+          throw new Error(`${enabledRes.status} - ${enabledBody.error || "Failed to get MFA config"}`);
         }
         setMfaEnabled(enabledBody.data);
         setEnabled(statusBody.data?.status || null);

package/dist/admin/{ProfileToggle-Z87n9Js6.mjs → ProfileToggle-U8uYHOxp.mjs}

@@ -1,7 +1,7 @@
 import { jsx, jsxs, Fragment } from "react/jsx-runtime";
 import { useState, useEffect } from "react";
 import { Modal, Flex, Typography, TextInput, Button, Box, Grid, Field, Toggle } from "@strapi/design-system";
-import { a as getTranslation, I as InputOTP, b as InputOTPGroup, c as InputOTPSlot, d as InputOTPSeparator, g as getToken, C as ConfirmModal, E as EmailOTPModal } from "./index-CuphCaxI.mjs";
+import { a as getTranslation, I as InputOTP, b as InputOTPGroup, c as InputOTPSlot, d as InputOTPSeparator, g as getToken, C as ConfirmModal, E as EmailOTPModal } from "./index-BGCzWKE5.mjs";
 import { useIntl } from "react-intl";
 function RemoveModal({ open, onOpenChange, onSubmit }) {
   const { formatMessage } = useIntl();
@@ -198,14 +198,10 @@ const ProfileToggle = () => {
         const statusBody = await statusRes.json();
         const enabledBody = await enabledRes.json();
         if (!statusRes.ok) {
-          throw new Error(
-            `${statusRes.status} - ${statusBody.error || "Failed to get MFA status"}`
-          );
+          throw new Error(`${statusRes.status} - ${statusBody.error || "Failed to get MFA status"}`);
         }
         if (!enabledRes.ok) {
-          throw new Error(
-            `${enabledRes.status} - ${enabledBody.error || "Failed to get MFA config"}`
-          );
+          throw new Error(`${enabledRes.status} - ${enabledBody.error || "Failed to get MFA config"}`);
         }
         setMfaEnabled(enabledBody.data);
         setEnabled(statusBody.data?.status || null);

package/dist/admin/{SettingsPage-GcVWCKZU.js → SettingsPage-CZJeoZM-.js}

@@ -6,7 +6,7 @@ const WarningAlert = require("./WarningAlert-DFE5euMk.js");
 const admin = require("@strapi/strapi/admin");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
-const index = require("./index-BM19x6ag.js");
+const index = require("./index-Z7ZoOcpL.js");
 const reactIntl = require("react-intl");
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 var lodash$1 = { exports: {} };

package/dist/admin/{SettingsPage-52kVQn7c.mjs → SettingsPage-DhdlOuM4.mjs}

@@ -4,7 +4,7 @@ import { W as WarningAlert } from "./WarningAlert-VU011LVF.mjs";
 import { useNotification, Page, Layouts } from "@strapi/strapi/admin";
 import { Button, Flex, Typography, Grid, Field, Toggle, TextInput, Textarea } from "@strapi/design-system";
 import { Check } from "@strapi/icons";
-import { g as getToken, a as getTranslation } from "./index-CuphCaxI.mjs";
+import { g as getToken, a as getTranslation } from "./index-BGCzWKE5.mjs";
 import { useIntl } from "react-intl";
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 var lodash$1 = { exports: {} };

package/dist/admin/{index-CuphCaxI.mjs → index-BGCzWKE5.mjs}

@@ -1953,24 +1953,23 @@ const plugin = {
       },
       id: "strapi-identity-settings",
       to: `/${PLUGIN_ID}`,
-      Component: () => import("./SettingsPage-52kVQn7c.mjs"),
+      Component: () => import("./SettingsPage-DhdlOuM4.mjs"),
       permissions: [{ action: "plugin::strapi-identity.settings.update" }]
     });
     app.addMiddlewares([mfaRedirect]);
     const injections = initialiseInjections(app);
-    console.log(app);
     injections.registerRoute({
       id: "profile-toggle",
       route: "/admin/me",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div > div:nth-child(2)',
-      Component: () => import("./ProfileToggle-Z87n9Js6.mjs")
+      Component: () => import("./ProfileToggle-U8uYHOxp.mjs")
     });
     injections.registerRoute({
       id: "admin-reset",
       route: "/admin/settings/users/:id",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div:nth-child(2)',
       permissions: [{ action: "plugin::strapi-identity.settings.update" }],
-      Component: () => import("./AdminReset-8bbnTK5T.mjs")
+      Component: () => import("./AdminReset-C8tJMMQS.mjs")
     });
     InjectVerify(app);
     InjectEnforced(app);

package/dist/admin/{index-BM19x6ag.js → index-Z7ZoOcpL.js}

@@ -1973,24 +1973,23 @@ const plugin = {
       },
       id: "strapi-identity-settings",
       to: `/${PLUGIN_ID}`,
-      Component: () => Promise.resolve().then(() => require("./SettingsPage-GcVWCKZU.js")),
+      Component: () => Promise.resolve().then(() => require("./SettingsPage-CZJeoZM-.js")),
       permissions: [{ action: "plugin::strapi-identity.settings.update" }]
     });
     app.addMiddlewares([mfaRedirect]);
     const injections = strapiAdminPortal.initialiseInjections(app);
-    console.log(app);
     injections.registerRoute({
       id: "profile-toggle",
       route: "/admin/me",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div > div:nth-child(2)',
-      Component: () => Promise.resolve().then(() => require("./ProfileToggle-DklJn1dC.js"))
+      Component: () => Promise.resolve().then(() => require("./ProfileToggle-DAWXMfz9.js"))
     });
     injections.registerRoute({
       id: "admin-reset",
       route: "/admin/settings/users/:id",
       selector: '#main-content form[method="put"] > :nth-child(2) > div > div:nth-child(2)',
       permissions: [{ action: "plugin::strapi-identity.settings.update" }],
-      Component: () => Promise.resolve().then(() => require("./AdminReset-BTaE7Xxb.js"))
+      Component: () => Promise.resolve().then(() => require("./AdminReset-CB9VgfLp.js"))
     });
     InjectVerify(app);
     InjectEnforced(app);

package/dist/admin/index.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-BM19x6ag.js");
+const index = require("./index-Z7ZoOcpL.js");
 require("strapi-admin-portal");
 exports.default = index.plugin;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { p } from "./index-CuphCaxI.mjs";
+import { p } from "./index-BGCzWKE5.mjs";
 import "strapi-admin-portal";
 export {
   p as default

package/dist/server/index.js

@@ -4030,12 +4030,20 @@ const replaceLogin = (route2, secret2, domain) => {
 };
 const registerMiddlewares = (server) => {
   const configService = strapi.service("plugin::strapi-identity.config");
+  const tokenName = strapi.config.get("admin.auth.cookie.name") || "jwtToken";
   server.use(async (ctx, next) => {
     const mfaCookie = ctx.cookies.get("strapi_admin_mfa");
-    if (mfaCookie && ctx.path.startsWith("/admin/auth")) {
-      ctx.cookies.set("jwtToken", null, { expires: /* @__PURE__ */ new Date(0) });
-      ctx.redirect("/admin/strapi-identity/verify");
-      return;
+    if (mfaCookie) {
+      if (ctx.path.startsWith("/admin/auth")) {
+        ctx.cookies.set(tokenName, null, { expires: /* @__PURE__ */ new Date(0) });
+        ctx.redirect("/admin/strapi-identity/verify");
+        return;
+      }
+      if (["/admin/ai-token", "/admin/ai-usage", "/admin/ai-feature-config"].includes(ctx.path)) {
+        ctx.status = 404;
+        ctx.body = { data: null, error: { status: 404, message: "Not Found" } };
+        return;
+      }
     }
     if (!mfaCookie && ctx.path === "/admin/strapi-identity/verify") {
       ctx.redirect("/admin");
@@ -4044,7 +4052,7 @@ const registerMiddlewares = (server) => {
     await next();
   });
   server.use(async (ctx, next) => {
-    const cookie = ctx.cookies.get("jwtToken");
+    const cookie = ctx.cookies.get(tokenName);
     if (!cookie) {
       await next();
       return;
@@ -4881,13 +4889,13 @@ const disableMFAForAllUsers = async () => {
     strapi.log.error("Error disabling MFA for all users");
   }
 };
-const checkUserByJWT = async (jwtToken) => {
+const checkUserByJWT = async (token) => {
   const config2 = await getConfig();
   const secret2 = strapi.config.get("admin.auth.secret");
   if (!config2.enabled) return false;
   let userId;
   try {
-    const decoded = jwt.verify(jwtToken, secret2);
+    const decoded = jwt.verify(token, secret2);
     userId = decoded.userId || decoded.id;
   } catch {
     return false;

package/dist/server/index.mjs

@@ -4023,12 +4023,20 @@ const replaceLogin = (route2, secret2, domain) => {
 };
 const registerMiddlewares = (server) => {
   const configService = strapi.service("plugin::strapi-identity.config");
+  const tokenName = strapi.config.get("admin.auth.cookie.name") || "jwtToken";
   server.use(async (ctx, next) => {
     const mfaCookie = ctx.cookies.get("strapi_admin_mfa");
-    if (mfaCookie && ctx.path.startsWith("/admin/auth")) {
-      ctx.cookies.set("jwtToken", null, { expires: /* @__PURE__ */ new Date(0) });
-      ctx.redirect("/admin/strapi-identity/verify");
-      return;
+    if (mfaCookie) {
+      if (ctx.path.startsWith("/admin/auth")) {
+        ctx.cookies.set(tokenName, null, { expires: /* @__PURE__ */ new Date(0) });
+        ctx.redirect("/admin/strapi-identity/verify");
+        return;
+      }
+      if (["/admin/ai-token", "/admin/ai-usage", "/admin/ai-feature-config"].includes(ctx.path)) {
+        ctx.status = 404;
+        ctx.body = { data: null, error: { status: 404, message: "Not Found" } };
+        return;
+      }
     }
     if (!mfaCookie && ctx.path === "/admin/strapi-identity/verify") {
       ctx.redirect("/admin");
@@ -4037,7 +4045,7 @@ const registerMiddlewares = (server) => {
     await next();
   });
   server.use(async (ctx, next) => {
-    const cookie = ctx.cookies.get("jwtToken");
+    const cookie = ctx.cookies.get(tokenName);
     if (!cookie) {
       await next();
       return;
@@ -4874,13 +4882,13 @@ const disableMFAForAllUsers = async () => {
     strapi.log.error("Error disabling MFA for all users");
   }
 };
-const checkUserByJWT = async (jwtToken) => {
+const checkUserByJWT = async (token) => {
   const config2 = await getConfig();
   const secret2 = strapi.config.get("admin.auth.secret");
   if (!config2.enabled) return false;
   let userId;
   try {
-    const decoded = jwt.verify(jwtToken, secret2);
+    const decoded = jwt.verify(token, secret2);
     userId = decoded.userId || decoded.id;
   } catch {
     return false;

package/dist/server/src/services/config.d.ts

@@ -50,8 +50,8 @@ export declare const updateConfig: (data: Partial<typeof defaultConfig>) => Prom
 }>;
 /**
  * Checks if a user has MFA enabled by verifying the provided JWT token and checking for an associated MFA token in the database
- * @param jwtToken the JWT token to verify and extract the user ID from
+ * @param token the JWT token to verify and extract the user ID from
  * @returns true if the user has MFA enabled, false otherwise
  */
-export declare const checkUserByJWT: (jwtToken: string) => Promise<boolean>;
+export declare const checkUserByJWT: (token: string) => Promise<boolean>;
 export {};

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.0",
+  "version": "0.7.1",
   "keywords": [
     "strapi",
     "plugin",