strapi-plugin-magic-sessionmanager 4.5.0 → 4.5.1

package/dist/_chunks/{Analytics-B7t0WvG7.js → Analytics-Cp-WjeV3.js}

@@ -6,8 +6,8 @@ const admin = require("@strapi/strapi/admin");
 const styled = require("styled-components");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
-const index = require("./index-CKrO7KSQ.js");
-const useLicense = require("./useLicense-DHAFqFSZ.js");
+const index = require("./index-BRESWp1b.js");
+const useLicense = require("./useLicense-D_wQcoMn.js");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 const styled__default = /* @__PURE__ */ _interopDefault(styled);
 const theme = {

package/dist/_chunks/{Analytics-DmlZwyVu.mjs → Analytics-DQyamHg6.mjs}

@@ -4,8 +4,8 @@ import { useFetchClient } from "@strapi/strapi/admin";
 import styled, { css, keyframes } from "styled-components";
 import { Loader, Typography, Box, Flex, Badge } from "@strapi/design-system";
 import { ChartBubble, Crown, User, Clock, Monitor } from "@strapi/icons";
-import { a as pluginId } from "./index-DuVZXuJh.mjs";
-import { u as useLicense } from "./useLicense-Xzo6nyh3.mjs";
+import { a as pluginId } from "./index-BbbrBv3t.mjs";
+import { u as useLicense } from "./useLicense-Bszkymz3.mjs";
 const theme = {
   shadows: {
     sm: "0 1px 3px 0 rgba(0, 0, 0, 0.1)",

package/dist/_chunks/{App-Bir8yK_r.js → App-BvYLeEbF.js}

@@ -5,10 +5,10 @@ const react = require("react");
 const reactIntl = require("react-intl");
 const admin = require("@strapi/strapi/admin");
 const styled = require("styled-components");
-const index = require("./index-CKrO7KSQ.js");
+const index = require("./index-BRESWp1b.js");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
-const useLicense = require("./useLicense-DHAFqFSZ.js");
+const useLicense = require("./useLicense-D_wQcoMn.js");
 const StyledButtons = require("./StyledButtons-DDuxnYz8.js");
 const reactRouterDom = require("react-router-dom");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };

package/dist/_chunks/{App-LfsjcXXp.mjs → App-CN4bKWV9.mjs}

@@ -3,10 +3,10 @@ import { useState, useEffect } from "react";
 import { useIntl } from "react-intl";
 import { useFetchClient, useNotification, Page } from "@strapi/strapi/admin";
 import styled, { css, keyframes } from "styled-components";
-import { p as parseUserAgent, a as pluginId$1, g as getTranslation } from "./index-DuVZXuJh.mjs";
+import { p as parseUserAgent, a as pluginId$1, g as getTranslation } from "./index-BbbrBv3t.mjs";
 import { Modal, Flex, Box, Typography, Divider, Button, Loader, SingleSelect, SingleSelectOption, Thead, Tr, Th, Tbody, Td, Table, TextInput } from "@strapi/design-system";
 import { Check, Information, Monitor, Server, Clock, Cross, Earth, Shield, Crown, Phone, Download, User, Eye, Trash, Search, Key } from "@strapi/icons";
-import { u as useLicense } from "./useLicense-Xzo6nyh3.mjs";
+import { u as useLicense } from "./useLicense-Bszkymz3.mjs";
 import { S as ShowHideButton, T as TertiaryButton, D as DangerButton, I as IconButtonPrimary, a as IconButtonWarning, b as IconButtonDanger } from "./StyledButtons-Cz8oYhmc.mjs";
 import { useNavigate } from "react-router-dom";
 const theme = {

package/dist/_chunks/{License-OToijT0s.mjs → License-Bgcm630d.mjs}

@@ -4,7 +4,7 @@ import { Loader, Box, Alert, Flex, Typography, Button, Badge, Accordion } from "
 import { useFetchClient, useNotification } from "@strapi/strapi/admin";
 import { ArrowClockwise, Duplicate, Download, User, Shield, Sparkle, ChartBubble } from "@strapi/icons";
 import styled, { css, keyframes } from "styled-components";
-import { a as pluginId } from "./index-DuVZXuJh.mjs";
+import { a as pluginId } from "./index-BbbrBv3t.mjs";
 const theme = {
   borderRadius: { lg: "12px" }
 };

package/dist/_chunks/{License-B56Xklj2.js → License-DPyeZQWz.js}

@@ -6,7 +6,7 @@ const designSystem = require("@strapi/design-system");
 const admin = require("@strapi/strapi/admin");
 const icons = require("@strapi/icons");
 const styled = require("styled-components");
-const index = require("./index-CKrO7KSQ.js");
+const index = require("./index-BRESWp1b.js");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 const styled__default = /* @__PURE__ */ _interopDefault(styled);
 const theme = {

package/dist/_chunks/{OnlineUsersWidget-DTEzguhS.js → OnlineUsersWidget-BYnqhN3O.js}

@@ -6,7 +6,7 @@ const reactIntl = require("react-intl");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
 const admin = require("@strapi/strapi/admin");
-const index = require("./index-CKrO7KSQ.js");
+const index = require("./index-BRESWp1b.js");
 const OnlineUsersWidget = () => {
   const { formatMessage } = reactIntl.useIntl();
   const { get } = admin.useFetchClient();

package/dist/_chunks/{OnlineUsersWidget-Fpc0aH2z.mjs → OnlineUsersWidget-E2FA7rGi.mjs}

@@ -4,7 +4,7 @@ import { useIntl } from "react-intl";
 import { Box, Typography, Flex, Grid } from "@strapi/design-system";
 import { Check, Cross, Clock, User } from "@strapi/icons";
 import { useFetchClient } from "@strapi/strapi/admin";
-import { g as getTranslation } from "./index-DuVZXuJh.mjs";
+import { g as getTranslation } from "./index-BbbrBv3t.mjs";
 const OnlineUsersWidget = () => {
   const { formatMessage } = useIntl();
   const { get } = useFetchClient();

package/dist/_chunks/{Settings-CO3-iggu.js → Settings-Bt6wy131.js}

@@ -7,8 +7,8 @@ const designSystem = require("@strapi/design-system");
 const admin = require("@strapi/strapi/admin");
 const icons = require("@strapi/icons");
 const styled = require("styled-components");
-const index = require("./index-CKrO7KSQ.js");
-const useLicense = require("./useLicense-DHAFqFSZ.js");
+const index = require("./index-BRESWp1b.js");
+const useLicense = require("./useLicense-D_wQcoMn.js");
 const StyledButtons = require("./StyledButtons-DDuxnYz8.js");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 const styled__default = /* @__PURE__ */ _interopDefault(styled);
@@ -350,6 +350,14 @@ const SettingsPage = () => {
     lastSeenRateLimit: 30,
     retentionDays: 90,
     maxSessionAgeDays: 30,
+    // Grace window (ms) during which a freshly-issued JWT is accepted
+    // without a matching session row. Prevents strict-session enforcement
+    // from blocking the very first request after login. 0 disables.
+    sessionCreationGraceMs: 5e3,
+    // Opt-in fast path for the periodic idle-session cleanup: single
+    // SQL UPDATE instead of batched Document-Service writes. Bypasses
+    // lifecycle hooks; required for very large installations.
+    cleanupUseDbDirect: false,
     strictSessionEnforcement: false,
     trustedProxies: false,
     enableGeolocation: true,
@@ -397,7 +405,7 @@ const SettingsPage = () => {
             }
           });
         }
-        setSettings(loadedSettings);
+        setSettings((prev) => ({ ...prev, ...loadedSettings }));
       } else {
         setSettings((prev) => ({ ...prev, emailTemplates: getDefaultTemplates() }));
       }
@@ -632,6 +640,45 @@ const SettingsPage = () => {
                 ),
                 /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: settings.retentionDays === -1 ? t("settings.general.retention.hintNever", "Old sessions deleted after never") : t("settings.general.retention.hint", "Old sessions deleted after {days}", { days: `${settings.retentionDays} days` }) })
               ] }) }),
+              /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Box, { children: [
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", fontWeight: "bold", style: { marginBottom: "8px", display: "block" }, children: t("settings.general.grace.title", "Post-Login Grace Period") }),
+                /* @__PURE__ */ jsxRuntime.jsxs(
+                  designSystem.SingleSelect,
+                  {
+                    value: String(settings.sessionCreationGraceMs ?? 5e3),
+                    onChange: (value) => handleChange("sessionCreationGraceMs", parseInt(value)),
+                    children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "0", children: t("settings.general.grace.off", "Off (strict from first request)") }),
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "2000", children: t("settings.general.grace.2s", "2 seconds") }),
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "5000", children: t("settings.general.grace.5s", "5 seconds (Recommended)") }),
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "10000", children: t("settings.general.grace.10s", "10 seconds") }),
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "30000", children: t("settings.general.grace.30s", "30 seconds") })
+                    ]
+                  }
+                ),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: t(
+                  "settings.general.grace.hint",
+                  "Accepts a freshly-issued JWT without a matching session row for this window, preventing strict-enforcement races right after login."
+                ) })
+              ] }) }),
+              /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Box, { children: [
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", fontWeight: "bold", style: { marginBottom: "8px", display: "block" }, children: t("settings.general.cleanupMode.title", "Cleanup Strategy") }),
+                /* @__PURE__ */ jsxRuntime.jsxs(
+                  designSystem.SingleSelect,
+                  {
+                    value: settings.cleanupUseDbDirect ? "db" : "document-service",
+                    onChange: (value) => handleChange("cleanupUseDbDirect", value === "db"),
+                    children: [
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "document-service", children: t("settings.general.cleanupMode.ds", "Document Service (Recommended, safe)") }),
+                      /* @__PURE__ */ jsxRuntime.jsx(designSystem.SingleSelectOption, { value: "db", children: t("settings.general.cleanupMode.db", "Direct SQL UPDATE (large-scale)") })
+                    ]
+                  }
+                ),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: t(
+                  "settings.general.cleanupMode.hint",
+                  "Direct SQL drains the entire idle-session backlog in one statement but bypasses lifecycle hooks. Only switch if you run >50 k active sessions."
+                ) })
+              ] }) }),
               /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 12, children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Box, { padding: 4, background: "danger100", style: { borderRadius: theme.borderRadius.md, border: `2px solid rgba(220, 38, 38, 0.2)` }, children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 3, alignItems: "flex-start", children: [
                 /* @__PURE__ */ jsxRuntime.jsx(icons.Trash, { style: { width: "18px", height: "18px", color: "var(--colors-danger600, #DC2626)", flexShrink: 0, marginTop: "2px" } }),
                 /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Box, { style: { flex: 1 }, children: [

package/dist/_chunks/{Settings-Bz3lPBJ6.mjs → Settings-D9N7m11p.mjs}

@@ -5,8 +5,8 @@ import { Flex, Loader, Typography, Button, Box, Badge, Accordion, Grid, SingleSe
 import { useFetchClient, useNotification } from "@strapi/strapi/admin";
 import { Check, Information, Cog, Trash, Shield, Code, Duplicate, Clock, Mail } from "@strapi/icons";
 import styled, { css, keyframes } from "styled-components";
-import { a as pluginId, g as getTranslation } from "./index-DuVZXuJh.mjs";
-import { u as useLicense } from "./useLicense-Xzo6nyh3.mjs";
+import { a as pluginId, g as getTranslation } from "./index-BbbrBv3t.mjs";
+import { u as useLicense } from "./useLicense-Bszkymz3.mjs";
 import { D as DangerButton, S as ShowHideButton, G as GradientButton, C as CopyButton, T as TertiaryButton, c as SecondaryButton } from "./StyledButtons-Cz8oYhmc.mjs";
 const theme = {
   borderRadius: { md: "8px", lg: "12px" }
@@ -346,6 +346,14 @@ const SettingsPage = () => {
     lastSeenRateLimit: 30,
     retentionDays: 90,
     maxSessionAgeDays: 30,
+    // Grace window (ms) during which a freshly-issued JWT is accepted
+    // without a matching session row. Prevents strict-session enforcement
+    // from blocking the very first request after login. 0 disables.
+    sessionCreationGraceMs: 5e3,
+    // Opt-in fast path for the periodic idle-session cleanup: single
+    // SQL UPDATE instead of batched Document-Service writes. Bypasses
+    // lifecycle hooks; required for very large installations.
+    cleanupUseDbDirect: false,
     strictSessionEnforcement: false,
     trustedProxies: false,
     enableGeolocation: true,
@@ -393,7 +401,7 @@ const SettingsPage = () => {
             }
           });
         }
-        setSettings(loadedSettings);
+        setSettings((prev) => ({ ...prev, ...loadedSettings }));
       } else {
         setSettings((prev) => ({ ...prev, emailTemplates: getDefaultTemplates() }));
       }
@@ -628,6 +636,45 @@ const SettingsPage = () => {
                 ),
                 /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: settings.retentionDays === -1 ? t("settings.general.retention.hintNever", "Old sessions deleted after never") : t("settings.general.retention.hint", "Old sessions deleted after {days}", { days: `${settings.retentionDays} days` }) })
               ] }) }),
+              /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, children: /* @__PURE__ */ jsxs(Box, { children: [
+                /* @__PURE__ */ jsx(Typography, { variant: "pi", fontWeight: "bold", style: { marginBottom: "8px", display: "block" }, children: t("settings.general.grace.title", "Post-Login Grace Period") }),
+                /* @__PURE__ */ jsxs(
+                  SingleSelect,
+                  {
+                    value: String(settings.sessionCreationGraceMs ?? 5e3),
+                    onChange: (value) => handleChange("sessionCreationGraceMs", parseInt(value)),
+                    children: [
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "0", children: t("settings.general.grace.off", "Off (strict from first request)") }),
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "2000", children: t("settings.general.grace.2s", "2 seconds") }),
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "5000", children: t("settings.general.grace.5s", "5 seconds (Recommended)") }),
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "10000", children: t("settings.general.grace.10s", "10 seconds") }),
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "30000", children: t("settings.general.grace.30s", "30 seconds") })
+                    ]
+                  }
+                ),
+                /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: t(
+                  "settings.general.grace.hint",
+                  "Accepts a freshly-issued JWT without a matching session row for this window, preventing strict-enforcement races right after login."
+                ) })
+              ] }) }),
+              /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, children: /* @__PURE__ */ jsxs(Box, { children: [
+                /* @__PURE__ */ jsx(Typography, { variant: "pi", fontWeight: "bold", style: { marginBottom: "8px", display: "block" }, children: t("settings.general.cleanupMode.title", "Cleanup Strategy") }),
+                /* @__PURE__ */ jsxs(
+                  SingleSelect,
+                  {
+                    value: settings.cleanupUseDbDirect ? "db" : "document-service",
+                    onChange: (value) => handleChange("cleanupUseDbDirect", value === "db"),
+                    children: [
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "document-service", children: t("settings.general.cleanupMode.ds", "Document Service (Recommended, safe)") }),
+                      /* @__PURE__ */ jsx(SingleSelectOption, { value: "db", children: t("settings.general.cleanupMode.db", "Direct SQL UPDATE (large-scale)") })
+                    ]
+                  }
+                ),
+                /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", style: { fontSize: "11px", marginTop: "8px" }, children: t(
+                  "settings.general.cleanupMode.hint",
+                  "Direct SQL drains the entire idle-session backlog in one statement but bypasses lifecycle hooks. Only switch if you run >50 k active sessions."
+                ) })
+              ] }) }),
               /* @__PURE__ */ jsx(Grid.Item, { col: 12, children: /* @__PURE__ */ jsx(Box, { padding: 4, background: "danger100", style: { borderRadius: theme.borderRadius.md, border: `2px solid rgba(220, 38, 38, 0.2)` }, children: /* @__PURE__ */ jsxs(Flex, { gap: 3, alignItems: "flex-start", children: [
                 /* @__PURE__ */ jsx(Trash, { style: { width: "18px", height: "18px", color: "var(--colors-danger600, #DC2626)", flexShrink: 0, marginTop: "2px" } }),
                 /* @__PURE__ */ jsxs(Box, { style: { flex: 1 }, children: [

package/dist/_chunks/{UpgradePage-KqUN7mDh.js → UpgradePage-Bh21Lg-G.js}

@@ -6,7 +6,7 @@ const admin = require("@strapi/strapi/admin");
 const styled = require("styled-components");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
-const index = require("./index-CKrO7KSQ.js");
+const index = require("./index-BRESWp1b.js");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 const styled__default = /* @__PURE__ */ _interopDefault(styled);
 const Container = styled__default.default(designSystem.Box)`

package/dist/_chunks/{UpgradePage-TBx1l2mQ.mjs → UpgradePage-DM23ZYVa.mjs}

@@ -4,7 +4,7 @@ import { useFetchClient, useNotification } from "@strapi/strapi/admin";
 import styled from "styled-components";
 import { Flex, Typography, Box, Badge, Button } from "@strapi/design-system";
 import { Check, Cross, Sparkle, Lightning, Rocket } from "@strapi/icons";
-import { a as pluginId } from "./index-DuVZXuJh.mjs";
+import { a as pluginId } from "./index-BbbrBv3t.mjs";
 const Container = styled(Box)`
   padding: 32px;
   max-width: 1400px;

package/dist/_chunks/{index-CKrO7KSQ.js → index-BRESWp1b.js}

@@ -444,7 +444,7 @@ const index = {
         id: `${pluginId}.plugin.name`,
         defaultMessage: pluginPkg.strapi.displayName
       },
-      Component: () => Promise.resolve().then(() => require("./App-Bir8yK_r.js")),
+      Component: () => Promise.resolve().then(() => require("./App-BvYLeEbF.js")),
       permissions: pluginPermissions
     });
     app.createSettingSection(
@@ -461,7 +461,7 @@ const index = {
           },
           id: "upgrade",
           to: `${pluginId}/upgrade`,
-          Component: () => Promise.resolve().then(() => require("./UpgradePage-KqUN7mDh.js")),
+          Component: () => Promise.resolve().then(() => require("./UpgradePage-Bh21Lg-G.js")),
           permissions: pluginPermissions
         },
         {
@@ -471,7 +471,7 @@ const index = {
           },
           id: "general",
           to: `${pluginId}/general`,
-          Component: () => Promise.resolve().then(() => require("./Settings-CO3-iggu.js")),
+          Component: () => Promise.resolve().then(() => require("./Settings-Bt6wy131.js")),
           permissions: pluginPermissions
         },
         {
@@ -481,7 +481,7 @@ const index = {
           },
           id: "analytics",
           to: `${pluginId}/analytics`,
-          Component: () => Promise.resolve().then(() => require("./Analytics-B7t0WvG7.js")),
+          Component: () => Promise.resolve().then(() => require("./Analytics-Cp-WjeV3.js")),
           permissions: pluginPermissions
         },
         {
@@ -491,7 +491,7 @@ const index = {
           },
           id: "license",
           to: `${pluginId}/license`,
-          Component: () => Promise.resolve().then(() => require("./License-B56Xklj2.js")),
+          Component: () => Promise.resolve().then(() => require("./License-DPyeZQWz.js")),
           permissions: pluginPermissions
         }
       ]
@@ -510,7 +510,7 @@ const index = {
           defaultMessage: "Online Users"
         },
         component: async () => {
-          const component = await Promise.resolve().then(() => require("./OnlineUsersWidget-DTEzguhS.js"));
+          const component = await Promise.resolve().then(() => require("./OnlineUsersWidget-BYnqhN3O.js"));
           return component.default;
         },
         id: "online-users-widget",

package/dist/_chunks/{index-DuVZXuJh.mjs → index-BbbrBv3t.mjs}

@@ -441,7 +441,7 @@ const index = {
         id: `${pluginId}.plugin.name`,
         defaultMessage: pluginPkg.strapi.displayName
       },
-      Component: () => import("./App-LfsjcXXp.mjs"),
+      Component: () => import("./App-CN4bKWV9.mjs"),
       permissions: pluginPermissions
     });
     app.createSettingSection(
@@ -458,7 +458,7 @@ const index = {
           },
           id: "upgrade",
           to: `${pluginId}/upgrade`,
-          Component: () => import("./UpgradePage-TBx1l2mQ.mjs"),
+          Component: () => import("./UpgradePage-DM23ZYVa.mjs"),
           permissions: pluginPermissions
         },
         {
@@ -468,7 +468,7 @@ const index = {
           },
           id: "general",
           to: `${pluginId}/general`,
-          Component: () => import("./Settings-Bz3lPBJ6.mjs"),
+          Component: () => import("./Settings-D9N7m11p.mjs"),
           permissions: pluginPermissions
         },
         {
@@ -478,7 +478,7 @@ const index = {
           },
           id: "analytics",
           to: `${pluginId}/analytics`,
-          Component: () => import("./Analytics-DmlZwyVu.mjs"),
+          Component: () => import("./Analytics-DQyamHg6.mjs"),
           permissions: pluginPermissions
         },
         {
@@ -488,7 +488,7 @@ const index = {
           },
           id: "license",
           to: `${pluginId}/license`,
-          Component: () => import("./License-OToijT0s.mjs"),
+          Component: () => import("./License-Bgcm630d.mjs"),
           permissions: pluginPermissions
         }
       ]
@@ -507,7 +507,7 @@ const index = {
           defaultMessage: "Online Users"
         },
         component: async () => {
-          const component = await import("./OnlineUsersWidget-Fpc0aH2z.mjs");
+          const component = await import("./OnlineUsersWidget-E2FA7rGi.mjs");
           return component.default;
         },
         id: "online-users-widget",

package/dist/_chunks/{useLicense-Xzo6nyh3.mjs → useLicense-Bszkymz3.mjs}

@@ -1,6 +1,6 @@
 import { useState, useEffect } from "react";
 import { useFetchClient } from "@strapi/strapi/admin";
-import { a as pluginId } from "./index-DuVZXuJh.mjs";
+import { a as pluginId } from "./index-BbbrBv3t.mjs";
 const useLicense = () => {
   const { get } = useFetchClient();
   const [isPremium, setIsPremium] = useState(false);

package/dist/_chunks/{useLicense-DHAFqFSZ.js → useLicense-D_wQcoMn.js}

@@ -1,7 +1,7 @@
 "use strict";
 const react = require("react");
 const admin = require("@strapi/strapi/admin");
-const index = require("./index-CKrO7KSQ.js");
+const index = require("./index-BRESWp1b.js");
 const useLicense = () => {
   const { get } = admin.useFetchClient();
   const [isPremium, setIsPremium] = react.useState(false);

package/dist/admin/index.js

@@ -1,3 +1,3 @@
 "use strict";
-const index = require("../_chunks/index-CKrO7KSQ.js");
+const index = require("../_chunks/index-BRESWp1b.js");
 module.exports = index.index;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { i } from "../_chunks/index-DuVZXuJh.mjs";
+import { i } from "../_chunks/index-BbbrBv3t.mjs";
 export {
   i as default
 };

package/dist/server/index.js

@@ -11732,15 +11732,27 @@ var settings$1 = {
       let settings2 = await pluginStore.get({ key: "settings" });
       if (!settings2) {
         settings2 = {
+          // Timing & cleanup
           inactivityTimeout: 15,
           cleanupInterval: 30,
           lastSeenRateLimit: 30,
           retentionDays: 90,
           maxSessionAgeDays: 30,
+          // Grace window (ms) during which a freshly-issued JWT is accepted
+          // without a matching session row — see JWT-verify wrapper in bootstrap.
+          sessionCreationGraceMs: 5e3,
+          // Opt-in: use a single SQL UPDATE for idle-session cleanup
+          // (bypasses Document Service lifecycle, required for very large installs).
+          cleanupUseDbDirect: false,
+          // Geo / security
           enableGeolocation: true,
           enableSecurityScoring: true,
           blockSuspiciousSessions: false,
           maxFailedLogins: 5,
+          enableGeofencing: false,
+          allowedCountries: [],
+          blockedCountries: [],
+          // Notifications
           enableEmailAlerts: false,
           alertOnSuspiciousLogin: true,
           alertOnNewLocation: true,
@@ -11748,11 +11760,10 @@ var settings$1 = {
           enableWebhooks: false,
           discordWebhookUrl: "",
           slackWebhookUrl: "",
-          enableGeofencing: false,
-          allowedCountries: [],
-          blockedCountries: [],
+          // Session policy
           strictSessionEnforcement: false,
           trustedProxies: false,
+          // Email templates
           emailTemplates: {
             suspiciousLogin: { subject: "", html: "", text: "" },
             newLocation: { subject: "", html: "", text: "" },
@@ -11785,16 +11796,26 @@ var settings$1 = {
         type: "plugin",
         name: "magic-sessionmanager"
       });
+      const graceRaw = body.sessionCreationGraceMs;
+      const grace = Number.isFinite(parseInt(graceRaw)) ? Math.max(0, Math.min(parseInt(graceRaw), 3e4)) : 5e3;
       const sanitizedSettings = {
+        // Timing & cleanup
         inactivityTimeout: Math.max(1, Math.min(parseInt(body.inactivityTimeout) || 15, 1440)),
         cleanupInterval: Math.max(5, Math.min(parseInt(body.cleanupInterval) || 30, 1440)),
         lastSeenRateLimit: Math.max(5, Math.min(parseInt(body.lastSeenRateLimit) || 30, 300)),
         retentionDays: Math.max(1, Math.min(parseInt(body.retentionDays) || 90, 365)),
         maxSessionAgeDays: Math.max(1, Math.min(parseInt(body.maxSessionAgeDays) || 30, 365)),
+        sessionCreationGraceMs: grace,
+        cleanupUseDbDirect: !!body.cleanupUseDbDirect,
+        // Geo / security
         enableGeolocation: !!body.enableGeolocation,
         enableSecurityScoring: !!body.enableSecurityScoring,
         blockSuspiciousSessions: !!body.blockSuspiciousSessions,
         maxFailedLogins: Math.max(1, Math.min(parseInt(body.maxFailedLogins) || 5, 100)),
+        enableGeofencing: !!body.enableGeofencing,
+        allowedCountries: sanitizeCountryList(body.allowedCountries),
+        blockedCountries: sanitizeCountryList(body.blockedCountries),
+        // Notifications
         enableEmailAlerts: !!body.enableEmailAlerts,
         alertOnSuspiciousLogin: !!body.alertOnSuspiciousLogin,
         alertOnNewLocation: !!body.alertOnNewLocation,
@@ -11802,11 +11823,10 @@ var settings$1 = {
         enableWebhooks: !!body.enableWebhooks,
         discordWebhookUrl: sanitizeWebhookUrl(body.discordWebhookUrl, "discord"),
         slackWebhookUrl: sanitizeWebhookUrl(body.slackWebhookUrl, "slack"),
-        enableGeofencing: !!body.enableGeofencing,
-        allowedCountries: sanitizeCountryList(body.allowedCountries),
-        blockedCountries: sanitizeCountryList(body.blockedCountries),
+        // Session policy
         strictSessionEnforcement: !!body.strictSessionEnforcement,
         trustedProxies: !!body.trustedProxies,
+        // Email templates
         emailTemplates: sanitizeEmailTemplates(body.emailTemplates)
       };
       await pluginStore.set({

package/dist/server/index.mjs

@@ -11719,15 +11719,27 @@ var settings$1 = {
       let settings2 = await pluginStore.get({ key: "settings" });
       if (!settings2) {
         settings2 = {
+          // Timing & cleanup
           inactivityTimeout: 15,
           cleanupInterval: 30,
           lastSeenRateLimit: 30,
           retentionDays: 90,
           maxSessionAgeDays: 30,
+          // Grace window (ms) during which a freshly-issued JWT is accepted
+          // without a matching session row — see JWT-verify wrapper in bootstrap.
+          sessionCreationGraceMs: 5e3,
+          // Opt-in: use a single SQL UPDATE for idle-session cleanup
+          // (bypasses Document Service lifecycle, required for very large installs).
+          cleanupUseDbDirect: false,
+          // Geo / security
           enableGeolocation: true,
           enableSecurityScoring: true,
           blockSuspiciousSessions: false,
           maxFailedLogins: 5,
+          enableGeofencing: false,
+          allowedCountries: [],
+          blockedCountries: [],
+          // Notifications
           enableEmailAlerts: false,
           alertOnSuspiciousLogin: true,
           alertOnNewLocation: true,
@@ -11735,11 +11747,10 @@ var settings$1 = {
           enableWebhooks: false,
           discordWebhookUrl: "",
           slackWebhookUrl: "",
-          enableGeofencing: false,
-          allowedCountries: [],
-          blockedCountries: [],
+          // Session policy
           strictSessionEnforcement: false,
           trustedProxies: false,
+          // Email templates
           emailTemplates: {
             suspiciousLogin: { subject: "", html: "", text: "" },
             newLocation: { subject: "", html: "", text: "" },
@@ -11772,16 +11783,26 @@ var settings$1 = {
         type: "plugin",
         name: "magic-sessionmanager"
       });
+      const graceRaw = body.sessionCreationGraceMs;
+      const grace = Number.isFinite(parseInt(graceRaw)) ? Math.max(0, Math.min(parseInt(graceRaw), 3e4)) : 5e3;
       const sanitizedSettings = {
+        // Timing & cleanup
         inactivityTimeout: Math.max(1, Math.min(parseInt(body.inactivityTimeout) || 15, 1440)),
         cleanupInterval: Math.max(5, Math.min(parseInt(body.cleanupInterval) || 30, 1440)),
         lastSeenRateLimit: Math.max(5, Math.min(parseInt(body.lastSeenRateLimit) || 30, 300)),
         retentionDays: Math.max(1, Math.min(parseInt(body.retentionDays) || 90, 365)),
         maxSessionAgeDays: Math.max(1, Math.min(parseInt(body.maxSessionAgeDays) || 30, 365)),
+        sessionCreationGraceMs: grace,
+        cleanupUseDbDirect: !!body.cleanupUseDbDirect,
+        // Geo / security
         enableGeolocation: !!body.enableGeolocation,
         enableSecurityScoring: !!body.enableSecurityScoring,
         blockSuspiciousSessions: !!body.blockSuspiciousSessions,
         maxFailedLogins: Math.max(1, Math.min(parseInt(body.maxFailedLogins) || 5, 100)),
+        enableGeofencing: !!body.enableGeofencing,
+        allowedCountries: sanitizeCountryList(body.allowedCountries),
+        blockedCountries: sanitizeCountryList(body.blockedCountries),
+        // Notifications
         enableEmailAlerts: !!body.enableEmailAlerts,
         alertOnSuspiciousLogin: !!body.alertOnSuspiciousLogin,
         alertOnNewLocation: !!body.alertOnNewLocation,
@@ -11789,11 +11810,10 @@ var settings$1 = {
         enableWebhooks: !!body.enableWebhooks,
         discordWebhookUrl: sanitizeWebhookUrl(body.discordWebhookUrl, "discord"),
         slackWebhookUrl: sanitizeWebhookUrl(body.slackWebhookUrl, "slack"),
-        enableGeofencing: !!body.enableGeofencing,
-        allowedCountries: sanitizeCountryList(body.allowedCountries),
-        blockedCountries: sanitizeCountryList(body.blockedCountries),
+        // Session policy
         strictSessionEnforcement: !!body.strictSessionEnforcement,
         trustedProxies: !!body.trustedProxies,
+        // Email templates
         emailTemplates: sanitizeEmailTemplates(body.emailTemplates)
       };
       await pluginStore.set({

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.5.0",
+  "version": "4.5.1",
   "keywords": [
     "strapi",
     "strapi-plugin",