strapi-plugin-magic-link-v5 4.11.2 → 4.12.0

package/README.md

@@ -37,7 +37,7 @@ This plugin is licensed under the **MIT License** - free for everyone to use!
 
 **Important:** The license validation system must remain intact and functional. This ensures quality, support, and continued development. Users must activate the plugin (free) through the admin interface.
 
-📄 See [LICENSE](./LICENSE) for full terms
+📄 See [LICENSE](./LICENSE) for full terms  
 
 ---
 
@@ -54,6 +54,7 @@ This plugin is licensed under the **MIT License** - free for everyone to use!
 - 🛡️ **IP Banning** - Block suspicious IP addresses
 - 🔒 **Session Revocation** - Instantly revoke any active JWT session
 - ⏰ **Token Expiration** - Configurable expiration periods
+- 🚦 **Rate Limiting** - Prevent abuse with configurable request limits (5 per 15 min default)
 - 🎯 **Login Attempt Limiting** - Prevent brute force attacks
 - 📊 **Security Score** - Real-time security configuration assessment
 - 📝 **Login Info Tracking** - Store IP addresses and user agents for audit
@@ -315,6 +316,27 @@ if (loginToken) {
 - `verify_email` - Require email verification
 - `callback_url` - Post-login redirect URL
 
+### Security & Rate Limiting
+- `rate_limit_enabled` - Enable/disable rate limiting (default: `true`)
+- `rate_limit_max_attempts` - Maximum requests allowed (default: `5`)
+- `rate_limit_window_minutes` - Time window in minutes (default: `15`)
+
+**How it works:**
+- Limits token creation requests per IP address
+- Limits token creation requests per email address
+- Returns `429 Too Many Requests` when limit exceeded
+- Automatic cleanup of expired entries every 30 minutes
+
+**Example:** With default settings (5 attempts per 15 minutes):
+- User can request max 5 magic links in 15 minutes
+- After 5 attempts, they must wait up to 15 minutes
+- Protects against brute-force and spam attacks
+
+**Management:**
+- View statistics in Settings → Security & Rate Limiting
+- Manually cleanup expired entries
+- Reset all limits if needed
+
 ---
 
 ## 🎨 Email Templates

package/dist/_chunks/LicenseGuard-4qUaBnpR.mjs

@@ -0,0 +1,617 @@
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
+import { useState, createContext, useContext, useEffect } from "react";
+import { IntlProvider } from "react-intl";
+import enTranslations from "./en-CY2mttoE.mjs";
+import deTranslations from "./de-DgQpHp0b.mjs";
+import frTranslations from "./fr-kaYC4Lni.mjs";
+import esTranslations from "./es-OMu2lO40.mjs";
+import ptTranslations from "./pt-QLD22f2s.mjs";
+import { Box, Loader, Typography, Flex, TextInput, Button } from "@strapi/design-system";
+import { useFetchClient, useNotification } from "@strapi/strapi/admin";
+import { Cross, Key, Check } from "@strapi/icons";
+import { useNavigate } from "react-router-dom";
+import styled, { keyframes } from "styled-components";
+const LanguageContext = createContext();
+const usePluginLanguage = () => {
+  const context = useContext(LanguageContext);
+  if (!context) {
+    throw new Error("usePluginLanguage must be used within LanguageProvider");
+  }
+  return context;
+};
+const translations = {
+  en: enTranslations,
+  de: deTranslations,
+  fr: frTranslations,
+  es: esTranslations,
+  pt: ptTranslations
+};
+const LanguageProvider = ({ children }) => {
+  const [currentLanguage, setCurrentLanguage] = useState(() => {
+    return localStorage.getItem("magic-link-language") || "en";
+  });
+  const changeLanguage = (newLang) => {
+    setCurrentLanguage(newLang);
+    localStorage.setItem("magic-link-language", newLang);
+  };
+  const value = {
+    language: currentLanguage,
+    changeLanguage,
+    t: (key) => {
+      const messages = translations[currentLanguage] || translations.en;
+      return messages[key] || key;
+    }
+  };
+  return /* @__PURE__ */ jsx(LanguageContext.Provider, { value, children: /* @__PURE__ */ jsx(
+    IntlProvider,
+    {
+      locale: currentLanguage,
+      messages: translations[currentLanguage],
+      defaultLocale: "en",
+      children
+    }
+  ) });
+};
+const fadeIn = keyframes`
+  from { opacity: 0; }
+  to { opacity: 1; }
+`;
+const slideUp = keyframes`
+  from { 
+    opacity: 0;
+    transform: translateY(30px);
+  }
+  to { 
+    opacity: 1;
+    transform: translateY(0);
+  }
+`;
+const ModalOverlay = styled.div`
+  position: fixed;
+  top: 0;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  background: rgba(4, 28, 47, 0.85);
+  backdrop-filter: blur(8px);
+  z-index: 9999;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  animation: ${fadeIn} 0.3s ease-out;
+  padding: 20px;
+`;
+const ModalContent = styled(Box)`
+  background: white;
+  border-radius: 16px;
+  width: 100%;
+  max-width: 580px;
+  box-shadow: 0 25px 50px rgba(0, 0, 0, 0.3);
+  animation: ${slideUp} 0.4s cubic-bezier(0.4, 0, 0.2, 1);
+  overflow: hidden;
+`;
+const GradientHeader = styled(Box)`
+  background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+  padding: 32px 40px;
+  position: relative;
+  overflow: hidden;
+
+  &::before {
+    content: '';
+    position: absolute;
+    top: -50%;
+    right: -50%;
+    width: 200%;
+    height: 200%;
+    background: radial-gradient(circle, rgba(255,255,255,0.1) 0%, transparent 70%);
+  }
+`;
+const IconWrapper = styled.div`
+  width: 72px;
+  height: 72px;
+  border-radius: 50%;
+  background: rgba(255, 255, 255, 0.2);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  margin: 0 auto 16px;
+  backdrop-filter: blur(10px);
+  border: 2px solid rgba(255, 255, 255, 0.3);
+
+  svg {
+    width: 36px;
+    height: 36px;
+    color: white;
+  }
+`;
+const CloseButton = styled.button`
+  position: absolute;
+  top: 16px;
+  right: 16px;
+  background: rgba(255, 255, 255, 0.2);
+  border: 2px solid rgba(255, 255, 255, 0.3);
+  border-radius: 50%;
+  width: 36px;
+  height: 36px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  cursor: pointer;
+  transition: all 0.2s;
+  z-index: 10;
+  
+  svg {
+    width: 20px;
+    height: 20px;
+    color: white;
+  }
+
+  &:hover {
+    background: rgba(255, 255, 255, 0.3);
+    transform: scale(1.1);
+  }
+
+  &:active {
+    transform: scale(0.95);
+  }
+`;
+const ToggleButton = styled.button`
+  background: none;
+  border: none;
+  color: #667eea;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  padding: 8px 0;
+  text-decoration: underline;
+  transition: color 0.2s;
+  
+  &:hover {
+    color: #764ba2;
+  }
+`;
+const LicenseGuard = ({ children }) => {
+  const { get, post } = useFetchClient();
+  const { toggleNotification } = useNotification();
+  const navigate = useNavigate();
+  const [isChecking, setIsChecking] = useState(true);
+  const [needsLicense, setNeedsLicense] = useState(false);
+  const [isCreating, setIsCreating] = useState(false);
+  const [useExistingKey, setUseExistingKey] = useState(false);
+  const [useAutoCreate, setUseAutoCreate] = useState(true);
+  const [existingLicenseKey, setExistingLicenseKey] = useState("");
+  const [existingEmail, setExistingEmail] = useState("");
+  const [adminUser, setAdminUser] = useState(null);
+  const [formData, setFormData] = useState({
+    email: "",
+    firstName: "",
+    lastName: ""
+  });
+  useEffect(() => {
+    checkLicenseStatus();
+    fetchAdminUser();
+  }, []);
+  const fetchAdminUser = async () => {
+    try {
+      const response = await get("/admin/users/me");
+      if (response.data) {
+        setAdminUser(response.data);
+        setFormData({
+          email: response.data.email || "",
+          firstName: response.data.firstname || "",
+          lastName: response.data.lastname || ""
+        });
+      }
+    } catch (error) {
+      console.error("Error fetching admin user:", error);
+    }
+  };
+  const checkLicenseStatus = async () => {
+    setIsChecking(true);
+    try {
+      const response = await get("/magic-link/license/status");
+      if (response.data.valid) {
+        setNeedsLicense(false);
+      } else {
+        setNeedsLicense(true);
+      }
+    } catch (error) {
+      console.error("Error checking license:", error);
+      setNeedsLicense(true);
+    } finally {
+      setIsChecking(false);
+    }
+  };
+  const handleAutoCreateLicense = async (e) => {
+    e.preventDefault();
+    setIsCreating(true);
+    try {
+      console.log("Auto-creating license with admin user data...");
+      const response = await post("/magic-link/license/auto-create", {});
+      console.log("Auto-create response:", response);
+      if (response.data && response.data.success) {
+        toggleNotification({
+          type: "success",
+          message: `License automatically created! Reloading...`
+        });
+        setNeedsLicense(false);
+        setTimeout(() => {
+          window.location.reload();
+        }, 500);
+      } else {
+        throw new Error("Failed to auto-create license");
+      }
+    } catch (error) {
+      console.error("Error auto-creating license:", error);
+      toggleNotification({
+        type: "danger",
+        message: error?.response?.data?.error?.message || "Failed to auto-create license. Try manual creation."
+      });
+      setIsCreating(false);
+      setUseAutoCreate(false);
+    }
+  };
+  const handleCreateLicense = async (e) => {
+    e.preventDefault();
+    if (!formData.email || !formData.firstName || !formData.lastName) {
+      toggleNotification({
+        type: "warning",
+        message: "Please fill in all fields"
+      });
+      return;
+    }
+    setIsCreating(true);
+    try {
+      console.log("Creating license with data:", formData);
+      const response = await post("/magic-link/license/create", formData);
+      console.log("License creation response:", response);
+      if (response.data && response.data.success) {
+        toggleNotification({
+          type: "success",
+          message: `License created successfully! Reloading...`
+        });
+        setNeedsLicense(false);
+        setTimeout(() => {
+          window.location.reload();
+        }, 500);
+      } else {
+        throw new Error("Failed to create license");
+      }
+    } catch (error) {
+      console.error("Error creating license:", error);
+      toggleNotification({
+        type: "danger",
+        message: error?.response?.data?.error?.message || "Failed to create license. Please try again."
+      });
+      setIsCreating(false);
+    }
+  };
+  const handleValidateExistingKey = async (e) => {
+    e.preventDefault();
+    if (!existingLicenseKey.trim() || !existingEmail.trim()) {
+      toggleNotification({
+        type: "warning",
+        message: "Please enter both license key and email address",
+        title: "Validation Error"
+      });
+      return;
+    }
+    setIsCreating(true);
+    try {
+      console.log("Validating existing license key...");
+      const pluginStore = await post("/magic-link/license/store-key", {
+        licenseKey: existingLicenseKey.trim(),
+        email: existingEmail.trim()
+      });
+      if (pluginStore.data && pluginStore.data.success) {
+        toggleNotification({
+          type: "success",
+          message: "License key validated successfully! Reloading...",
+          title: "✅ License Activated"
+        });
+        setNeedsLicense(false);
+        setTimeout(() => {
+          window.location.reload();
+        }, 500);
+      } else {
+        throw new Error("Invalid license key or email");
+      }
+    } catch (error) {
+      console.error("Error validating license key:", error);
+      toggleNotification({
+        type: "danger",
+        message: error?.response?.data?.error?.message || "Invalid license key or email address. Please check and try again.",
+        title: "Validation Error"
+      });
+      setIsCreating(false);
+    }
+  };
+  const handleClose = () => {
+    navigate("/content-manager");
+  };
+  if (isChecking) {
+    return /* @__PURE__ */ jsx(Box, { padding: 8, style: { textAlign: "center" }, children: /* @__PURE__ */ jsx(Loader, { children: "Checking license..." }) });
+  }
+  if (needsLicense) {
+    return /* @__PURE__ */ jsx(ModalOverlay, { children: /* @__PURE__ */ jsxs(ModalContent, { children: [
+      /* @__PURE__ */ jsxs(GradientHeader, { children: [
+        /* @__PURE__ */ jsx(CloseButton, { onClick: handleClose, type: "button", children: /* @__PURE__ */ jsx(Cross, {}) }),
+        /* @__PURE__ */ jsx(IconWrapper, { children: /* @__PURE__ */ jsx(Key, {}) }),
+        /* @__PURE__ */ jsxs(Box, { style: { textAlign: "center", position: "relative" }, children: [
+          /* @__PURE__ */ jsx(
+            Typography,
+            {
+              variant: "alpha",
+              style: {
+                color: "white",
+                fontSize: "24px",
+                fontWeight: "700",
+                marginBottom: "12px",
+                display: "block"
+              },
+              children: "🔐 Activate Magic Link Plugin"
+            }
+          ),
+          /* @__PURE__ */ jsx(
+            Typography,
+            {
+              variant: "epsilon",
+              style: {
+                color: "rgba(255, 255, 255, 0.9)",
+                fontSize: "14px",
+                display: "block"
+              },
+              children: useExistingKey ? "Enter your existing license key" : "Create a license to start using the plugin"
+            }
+          )
+        ] })
+      ] }),
+      /* @__PURE__ */ jsx(
+        Box,
+        {
+          as: "form",
+          onSubmit: useExistingKey ? handleValidateExistingKey : useAutoCreate ? handleAutoCreateLicense : handleCreateLicense,
+          padding: 6,
+          paddingLeft: 8,
+          paddingRight: 8,
+          children: /* @__PURE__ */ jsxs(Flex, { direction: "column", gap: 5, style: { width: "100%" }, children: [
+            /* @__PURE__ */ jsxs(Box, { style: { textAlign: "center", width: "100%" }, children: [
+              !useExistingKey && /* @__PURE__ */ jsx(
+                ToggleButton,
+                {
+                  type: "button",
+                  onClick: () => setUseAutoCreate(!useAutoCreate),
+                  disabled: isCreating,
+                  style: { marginBottom: "8px", display: "block", margin: "0 auto" },
+                  children: useAutoCreate ? "→ Manual entry" : "← Auto-create with my account"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                ToggleButton,
+                {
+                  type: "button",
+                  onClick: () => {
+                    setUseExistingKey(!useExistingKey);
+                    if (!useExistingKey) setUseAutoCreate(false);
+                  },
+                  disabled: isCreating,
+                  children: useExistingKey ? "← Create new license" : "Have a license key? →"
+                }
+              )
+            ] }),
+            /* @__PURE__ */ jsx(
+              Box,
+              {
+                background: "primary100",
+                padding: 4,
+                style: {
+                  borderRadius: "8px",
+                  border: "2px solid #BAE6FD",
+                  width: "100%"
+                },
+                children: /* @__PURE__ */ jsx(Typography, { variant: "omega", style: { fontSize: "13px", lineHeight: "1.6" }, children: useExistingKey ? "🔑 Enter your email and license key to activate." : useAutoCreate && adminUser ? `✨ Click "Activate" to auto-create a license with your account (${adminUser.email})` : "💡 A license will be created with the details below." })
+              }
+            ),
+            useExistingKey ? (
+              // Existing License Key Input
+              /* @__PURE__ */ jsxs(Fragment, { children: [
+                /* @__PURE__ */ jsxs(Box, { style: { width: "100%" }, children: [
+                  /* @__PURE__ */ jsx(
+                    Typography,
+                    {
+                      variant: "pi",
+                      fontWeight: "bold",
+                      style: { marginBottom: "8px", display: "block" },
+                      children: "Email Address *"
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(
+                    TextInput,
+                    {
+                      placeholder: "admin@example.com",
+                      type: "email",
+                      value: existingEmail,
+                      onChange: (e) => setExistingEmail(e.target.value),
+                      required: true,
+                      disabled: isCreating,
+                      style: { width: "100%" }
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(Typography, { variant: "omega", textColor: "neutral600", style: { fontSize: "11px", marginTop: "4px" }, children: "Enter the email address associated with this license" })
+                ] }),
+                /* @__PURE__ */ jsxs(Box, { style: { width: "100%" }, children: [
+                  /* @__PURE__ */ jsx(
+                    Typography,
+                    {
+                      variant: "pi",
+                      fontWeight: "bold",
+                      style: { marginBottom: "8px", display: "block" },
+                      children: "License Key *"
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(
+                    TextInput,
+                    {
+                      placeholder: "67C5-40D2-7695-718C",
+                      value: existingLicenseKey,
+                      onChange: (e) => setExistingLicenseKey(e.target.value),
+                      required: true,
+                      disabled: isCreating,
+                      style: { width: "100%", fontFamily: "monospace" }
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(Typography, { variant: "omega", textColor: "neutral600", style: { fontSize: "11px", marginTop: "4px" }, children: "Enter the license key in the format: XXXX-XXXX-XXXX-XXXX" })
+                ] })
+              ] })
+            ) : useAutoCreate && adminUser ? (
+              // Auto-create mode - Show user info
+              /* @__PURE__ */ jsxs(
+                Box,
+                {
+                  background: "success100",
+                  padding: 5,
+                  style: {
+                    borderRadius: "8px",
+                    border: "2px solid #DCFCE7",
+                    textAlign: "center"
+                  },
+                  children: [
+                    /* @__PURE__ */ jsx(Typography, { variant: "omega", fontWeight: "bold", style: { marginBottom: "12px", display: "block" }, children: "Ready to activate with your account:" }),
+                    /* @__PURE__ */ jsxs(Typography, { variant: "pi", style: { marginBottom: "4px", display: "block" }, children: [
+                      "👤 ",
+                      adminUser.firstname,
+                      " ",
+                      adminUser.lastname
+                    ] }),
+                    /* @__PURE__ */ jsxs(Typography, { variant: "pi", textColor: "neutral600", children: [
+                      "📧 ",
+                      adminUser.email
+                    ] })
+                  ]
+                }
+              )
+            ) : (
+              // Manual Create License Fields
+              /* @__PURE__ */ jsxs(Fragment, { children: [
+                /* @__PURE__ */ jsxs(Box, { style: { width: "100%" }, children: [
+                  /* @__PURE__ */ jsx(
+                    Typography,
+                    {
+                      variant: "pi",
+                      fontWeight: "bold",
+                      style: { marginBottom: "8px", display: "block" },
+                      children: "Email Address *"
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(
+                    TextInput,
+                    {
+                      placeholder: "admin@example.com",
+                      type: "email",
+                      value: formData.email,
+                      onChange: (e) => setFormData({ ...formData, email: e.target.value }),
+                      required: true,
+                      disabled: isCreating,
+                      style: { width: "100%" }
+                    }
+                  )
+                ] }),
+                /* @__PURE__ */ jsxs(Box, { style: { width: "100%" }, children: [
+                  /* @__PURE__ */ jsx(
+                    Typography,
+                    {
+                      variant: "pi",
+                      fontWeight: "bold",
+                      style: { marginBottom: "8px", display: "block" },
+                      children: "First Name *"
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(
+                    TextInput,
+                    {
+                      placeholder: "John",
+                      value: formData.firstName,
+                      onChange: (e) => setFormData({ ...formData, firstName: e.target.value }),
+                      required: true,
+                      disabled: isCreating,
+                      style: { width: "100%" }
+                    }
+                  )
+                ] }),
+                /* @__PURE__ */ jsxs(Box, { style: { width: "100%" }, children: [
+                  /* @__PURE__ */ jsx(
+                    Typography,
+                    {
+                      variant: "pi",
+                      fontWeight: "bold",
+                      style: { marginBottom: "8px", display: "block" },
+                      children: "Last Name *"
+                    }
+                  ),
+                  /* @__PURE__ */ jsx(
+                    TextInput,
+                    {
+                      placeholder: "Doe",
+                      value: formData.lastName,
+                      onChange: (e) => setFormData({ ...formData, lastName: e.target.value }),
+                      required: true,
+                      disabled: isCreating,
+                      style: { width: "100%" }
+                    }
+                  )
+                ] })
+              ] })
+            ),
+            /* @__PURE__ */ jsx(Flex, { gap: 3, justifyContent: "center", style: { marginTop: "16px" }, children: useExistingKey ? (
+              // Validate Button
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "submit",
+                  size: "L",
+                  startIcon: /* @__PURE__ */ jsx(Check, {}),
+                  loading: isCreating,
+                  disabled: isCreating || !existingLicenseKey.trim() || !existingEmail.trim(),
+                  style: {
+                    background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+                    color: "white",
+                    fontWeight: "600",
+                    border: "none",
+                    boxShadow: "0 4px 12px rgba(102, 126, 234, 0.4)"
+                  },
+                  children: "Validate License"
+                }
+              )
+            ) : (
+              // Create/Auto-Create License Button
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "submit",
+                  size: "L",
+                  startIcon: /* @__PURE__ */ jsx(Check, {}),
+                  loading: isCreating,
+                  disabled: isCreating || !useAutoCreate && (!formData.email || !formData.firstName || !formData.lastName),
+                  style: {
+                    background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+                    color: "white",
+                    fontWeight: "600",
+                    border: "none",
+                    boxShadow: "0 4px 12px rgba(102, 126, 234, 0.4)"
+                  },
+                  children: useAutoCreate ? "Activate License" : "Create License"
+                }
+              )
+            ) })
+          ] })
+        }
+      )
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx(Fragment, { children });
+};
+export {
+  LicenseGuard as L,
+  LanguageProvider as a,
+  usePluginLanguage as u
+};