strapi-plugin-oidc 1.0.0

package/dist/_chunks/index-BuS0wmlA.mjs

@@ -0,0 +1,412 @@
+import { jsxs, Fragment, jsx } from "react/jsx-runtime";
+import { useState, useCallback, memo, useEffect } from "react";
+import { Routes, Route } from "react-router-dom";
+import { useFetchClient, Page, Layouts } from "@strapi/strapi/admin";
+import { Table, Thead, Tr, Th, Checkbox, Tbody, Td, Button, Box, Flex, Toggle, Typography, Grid, Field, MultiSelect, MultiSelectOption, Divider, Dialog, IconButton, Alert, Tabs } from "@strapi/design-system";
+import { useIntl } from "react-intl";
+import { p as pluginId } from "./index-CHl-03dY.mjs";
+import styled from "styled-components";
+import { Plus, Trash, WarningCircle } from "@strapi/icons";
+const getTrad = (id) => `${pluginId}.${id}`;
+const ButtonWrapper = styled.div`
+    margin: 10px 0 0 0;
+
+    & button {
+        margin: 0 0 0 auto;
+    }
+`;
+const Description = styled.p`
+    font-size: 16px;
+    margin: 20px 0;
+`;
+function Role({ ssoRoles, roles, onSaveRole, onChangeRoleCheck }) {
+  const { formatMessage } = useIntl();
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsxs(Table, { colCount: roles.length + 1, rowCount: ssoRoles.length, children: [
+      /* @__PURE__ */ jsx(Thead, { children: /* @__PURE__ */ jsxs(Tr, { children: [
+        /* @__PURE__ */ jsx(Th, { children: /* @__PURE__ */ jsx(Checkbox, { style: { display: "none" } }) }),
+        roles.map((role) => /* @__PURE__ */ jsx(Th, { children: role["name"] }, role["id"]))
+      ] }) }),
+      /* @__PURE__ */ jsx(Tbody, { children: ssoRoles.map((ssoRole) => /* @__PURE__ */ jsxs(Tr, { children: [
+        /* @__PURE__ */ jsx(Td, { children: ssoRole["name"] }),
+        roles.map((role) => /* @__PURE__ */ jsx(Th, { children: /* @__PURE__ */ jsx(
+          Checkbox,
+          {
+            checked: ssoRole["role"] && ssoRole["role"].includes(role["id"]),
+            onCheckedChange: (value) => onChangeRoleCheck(value, ssoRole["oauth_type"], role["id"]),
+            children: ""
+          }
+        ) }, role["id"]))
+      ] }, ssoRole["oauth_type"])) })
+    ] }),
+    /* @__PURE__ */ jsx(Description, { children: formatMessage({
+      id: getTrad("page.notes"),
+      defaultMessage: "This will not be reflected for already registered users."
+    }) }),
+    /* @__PURE__ */ jsx(ButtonWrapper, { children: /* @__PURE__ */ jsx(Button, { variant: "default", onClick: onSaveRole, children: formatMessage({
+      id: getTrad("page.save"),
+      defaultMessage: "Save"
+    }) }) })
+  ] });
+}
+const LocalizedDate = ({ date }) => {
+  const userLocale = navigator.language || "en-US";
+  return new Intl.DateTimeFormat(userLocale, {
+    year: "numeric",
+    month: "long",
+    day: "numeric",
+    hour: "2-digit",
+    minute: "2-digit"
+  }).format(new Date(date));
+};
+function Whitelist({ users, roles, useWhitelist, loading, onSave, onDelete, onToggle }) {
+  const [email, setEmail] = useState("");
+  const [selectedRoles, setSelectedRoles] = useState([]);
+  const { formatMessage } = useIntl();
+  const onSaveEmail = useCallback(async () => {
+    const emailText = email.trim();
+    if (users.some((user) => user.email === emailText)) {
+      alert(
+        formatMessage({
+          id: getTrad("tab.whitelist.error.unique"),
+          defaultMessage: "Already registered email address."
+        })
+      );
+    } else {
+      await onSave(emailText, selectedRoles);
+      setEmail("");
+      setSelectedRoles([]);
+    }
+  }, [email, selectedRoles, users, onSave, formatMessage]);
+  const isValidEmail = useCallback(() => {
+    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    return emailRegex.test(email);
+  }, [email]);
+  return /* @__PURE__ */ jsx(Fragment, { children: /* @__PURE__ */ jsxs(Box, { padding: 4, children: [
+    /* @__PURE__ */ jsxs(Flex, { gap: 4, marginBottom: 4, children: [
+      /* @__PURE__ */ jsx(
+        Toggle,
+        {
+          checked: useWhitelist,
+          onLabel: "Enabled",
+          offLabel: "Disabled",
+          onChange: onToggle
+        }
+      ),
+      /* @__PURE__ */ jsx(Typography, { variant: "delta", children: useWhitelist ? formatMessage({
+        id: getTrad("tab.whitelist.enabled"),
+        defaultMessage: "Whitelist is currently enabled."
+      }) : formatMessage({
+        id: getTrad("tab.whitelist.disabled"),
+        defaultMessage: "Whitelist is currently disabled."
+      }) })
+    ] }),
+    /* @__PURE__ */ jsx(Typography, { tag: "p", marginBottom: 4, children: formatMessage({
+      id: getTrad("tab.whitelist.description"),
+      defaultMessage: "Only the following email addresses are allowed to authenticate with SSO."
+    }) }),
+    /* @__PURE__ */ jsxs(Grid.Root, { tag: "fieldset", gap: 4, padding: "0px", gridCols: 3, borderWidth: 0, marginTop: 5, marginBottom: 5, children: [
+      /* @__PURE__ */ jsx(Grid.Item, { xs: 1, children: /* @__PURE__ */ jsx(Field.Root, { children: /* @__PURE__ */ jsx(
+        Field.Input,
+        {
+          type: "email",
+          disabled: loading,
+          value: email,
+          hasError: email && !isValidEmail(),
+          onChange: (e) => setEmail(e.currentTarget.value),
+          placeholder: "Email address"
+        }
+      ) }) }),
+      /* @__PURE__ */ jsx(Grid.Item, { xs: 1, children: /* @__PURE__ */ jsx(Field.Root, { children: /* @__PURE__ */ jsx(
+        MultiSelect,
+        {
+          placeholder: "Select specific roles",
+          withTags: true,
+          value: selectedRoles,
+          onChange: setSelectedRoles,
+          children: roles.map((role) => /* @__PURE__ */ jsx(MultiSelectOption, { value: role.id.toString(), children: role.name }, role.id))
+        }
+      ) }) }),
+      /* @__PURE__ */ jsx(Grid.Item, { xs: 1, children: /* @__PURE__ */ jsx(
+        Button,
+        {
+          startIcon: /* @__PURE__ */ jsx(Plus, {}),
+          disabled: loading || email.trim() === "" || !isValidEmail(),
+          loading,
+          onClick: onSaveEmail,
+          children: formatMessage({
+            id: getTrad("page.save"),
+            defaultMessage: "Save"
+          })
+        }
+      ) })
+    ] }),
+    /* @__PURE__ */ jsx(Divider, {}),
+    /* @__PURE__ */ jsxs(Table, { colCount: 5, rowCount: users.length, children: [
+      /* @__PURE__ */ jsx(Thead, { children: /* @__PURE__ */ jsxs(Tr, { children: [
+        /* @__PURE__ */ jsx(Th, { children: formatMessage({
+          id: getTrad("tab.whitelist.table.no"),
+          defaultMessage: "No"
+        }) }),
+        /* @__PURE__ */ jsx(Th, { children: formatMessage({
+          id: getTrad("tab.whitelist.table.email"),
+          defaultMessage: "Email"
+        }) }),
+        /* @__PURE__ */ jsx(Th, { children: "Roles" }),
+        /* @__PURE__ */ jsx(Th, { children: formatMessage({
+          id: getTrad("tab.whitelist.table.created"),
+          defaultMessage: "Created At"
+        }) }),
+        /* @__PURE__ */ jsx(Th, { children: " " })
+      ] }) }),
+      /* @__PURE__ */ jsx(Tbody, { children: users.map((user) => {
+        const userRolesNames = (user.roles || []).map((roleId) => {
+          const r = roles.find((ro) => ro.id.toString() === roleId.toString());
+          return r ? r.name : roleId;
+        }).join(", ");
+        return /* @__PURE__ */ jsxs(Tr, { children: [
+          /* @__PURE__ */ jsx(Td, { children: user.id }),
+          /* @__PURE__ */ jsx(Td, { children: user.email }),
+          /* @__PURE__ */ jsx(Td, { children: userRolesNames || "Default" }),
+          /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsx(LocalizedDate, { date: user.createdAt }) }),
+          /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsxs(Dialog.Root, { children: [
+            /* @__PURE__ */ jsx(Dialog.Trigger, { children: /* @__PURE__ */ jsx(IconButton, { label: "Delete", withTooltip: false, children: /* @__PURE__ */ jsx(Trash, {}) }) }),
+            /* @__PURE__ */ jsxs(Dialog.Content, { children: [
+              /* @__PURE__ */ jsx(Dialog.Header, { children: formatMessage({
+                id: getTrad("tab.whitelist.delete.title"),
+                defaultMessage: "Confirmation"
+              }) }),
+              /* @__PURE__ */ jsx(Dialog.Body, { icon: /* @__PURE__ */ jsx(WarningCircle, { fill: "danger600" }), children: /* @__PURE__ */ jsxs(Typography, { variant: "delta", children: [
+                formatMessage({
+                  id: getTrad("tab.whitelist.delete.description"),
+                  defaultMessage: "Are you sure you want to delete this?"
+                }),
+                /* @__PURE__ */ jsx("br", {}),
+                user.email
+              ] }) }),
+              /* @__PURE__ */ jsxs(Dialog.Footer, { children: [
+                /* @__PURE__ */ jsx(Dialog.Cancel, { children: /* @__PURE__ */ jsx(Button, { fullWidth: true, variant: "tertiary", children: formatMessage({
+                  id: getTrad("page.cancel"),
+                  defaultMessage: "Cancel"
+                }) }) }),
+                /* @__PURE__ */ jsx(Dialog.Action, { children: /* @__PURE__ */ jsx(Button, { fullWidth: true, variant: "danger-light", onClick: () => onDelete(user.id), children: formatMessage({
+                  id: getTrad("page.ok"),
+                  defaultMessage: "OK"
+                }) }) })
+              ] })
+            ] })
+          ] }) })
+        ] }, user.id);
+      }) })
+    ] })
+  ] }) });
+}
+const AlertMessage = styled.div`
+    margin-left: -250px;
+    position: fixed;
+    left: 50%;
+    top: 2.875rem;
+    z-index: 10;
+    width: 31.25rem;
+`;
+function SuccessAlertMessage({ onClose: onClose2 }) {
+  const { formatMessage } = useIntl();
+  return /* @__PURE__ */ jsx(AlertMessage, { children: /* @__PURE__ */ jsx(
+    Alert,
+    {
+      title: "Success",
+      variant: "success",
+      closeLabel: "",
+      onClose: onClose2,
+      children: formatMessage({
+        id: getTrad("page.save.success"),
+        defaultMessage: "Updated settings"
+      })
+    }
+  ) });
+}
+function ErrorAlertMessage() {
+  const { formatMessage } = useIntl();
+  return /* @__PURE__ */ jsx(AlertMessage, { children: /* @__PURE__ */ jsx(
+    Alert,
+    {
+      title: "Error",
+      variant: "danger",
+      closeLabel: "",
+      onClose,
+      children: formatMessage({
+        id: getTrad("page.save.error"),
+        defaultMessage: "Update failed."
+      })
+    }
+  ) });
+}
+const HomePage = () => {
+  const { formatMessage } = useIntl();
+  const [loading, setLoading] = useState(false);
+  const [ssoRoles, setSSORoles] = useState([]);
+  const [roles, setRoles] = useState([]);
+  const [useWhitelist, setUseWhitelist] = useState(false);
+  const [users, setUsers] = useState([]);
+  const [showSuccess, setSuccess] = useState(false);
+  const [showError, setError] = useState(false);
+  const { get, put, post, del } = useFetchClient();
+  useEffect(() => {
+    get(`/strapi-plugin-oidc/sso-roles`).then((response) => {
+      setSSORoles(response.data);
+    });
+    get(`/admin/roles`).then((response) => {
+      setRoles(response.data.data);
+    });
+    get("/strapi-plugin-oidc/whitelist").then((response) => {
+      setUsers(response.data.whitelistUsers);
+      setUseWhitelist(response.data.useWhitelist);
+    });
+  }, [setSSORoles, setRoles]);
+  const onChangeRoleCheck = (value, ssoId, role) => {
+    for (const ssoRole of ssoRoles) {
+      if (ssoRole["oauth_type"] === ssoId) {
+        if (ssoRole["role"]) {
+          if (value) {
+            ssoRole["role"].push(role);
+          } else {
+            ssoRole["role"] = ssoRole["role"].filter((selectRole) => selectRole !== role);
+          }
+        } else {
+          ssoRole["role"] = [role];
+        }
+      }
+    }
+    setSSORoles(ssoRoles.slice());
+  };
+  const onSaveRole = async () => {
+    try {
+      await put("/strapi-plugin-oidc/sso-roles", {
+        roles: ssoRoles.map((role) => ({
+          "oauth_type": role["oauth_type"],
+          role: role["role"]
+        }))
+      });
+      setSuccess(true);
+      setTimeout(() => {
+        setSuccess(false);
+      }, 3e3);
+    } catch (e) {
+      console.error(e);
+      setError(true);
+      setTimeout(() => {
+        setError(false);
+      }, 3e3);
+    }
+  };
+  const onRegisterWhitelist = async (email, selectedRoles) => {
+    setLoading(true);
+    post("/strapi-plugin-oidc/whitelist", {
+      email,
+      roles: selectedRoles
+    }).then((response) => {
+      get("/strapi-plugin-oidc/whitelist").then((response2) => {
+        setUsers(response2.data.whitelistUsers);
+        setUseWhitelist(response2.data.useWhitelist);
+      });
+      setLoading(false);
+      setSuccess(true);
+      setTimeout(() => {
+        setSuccess(false);
+      }, 3e3);
+    });
+  };
+  const onDeleteWhitelist = async (id) => {
+    setLoading(true);
+    del(`/strapi-plugin-oidc/whitelist/${id}`).then((response) => {
+      get("/strapi-plugin-oidc/whitelist").then((response2) => {
+        setUsers(response2.data.whitelistUsers);
+        setUseWhitelist(response2.data.useWhitelist);
+      });
+      setLoading(false);
+      setSuccess(true);
+      setTimeout(() => {
+        setSuccess(false);
+      }, 3e3);
+    });
+  };
+  const onToggleWhitelist = async (e) => {
+    const newValue = e.target.checked;
+    setLoading(true);
+    try {
+      await put("/strapi-plugin-oidc/whitelist/settings", {
+        useWhitelist: newValue
+      });
+      setUseWhitelist(newValue);
+      setSuccess(true);
+      setTimeout(() => {
+        setSuccess(false);
+      }, 3e3);
+    } catch (err) {
+      console.error(err);
+      setError(true);
+      setTimeout(() => {
+        setError(false);
+      }, 3e3);
+    } finally {
+      setLoading(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs(Page.Protect, { permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }], children: [
+    /* @__PURE__ */ jsx(
+      Layouts.Header,
+      {
+        title: "OIDC",
+        subtitle: formatMessage({
+          id: getTrad("page.title"),
+          defaultMessage: "Default role setting at first login"
+        })
+      }
+    ),
+    showSuccess && /* @__PURE__ */ jsx(SuccessAlertMessage, { onClose: () => setSuccess(false) }),
+    showError && /* @__PURE__ */ jsx(ErrorAlertMessage, { onClose: () => setError(false) }),
+    /* @__PURE__ */ jsx(Box, { padding: 10, children: /* @__PURE__ */ jsxs(Tabs.Root, { defaultValue: "role", children: [
+      /* @__PURE__ */ jsxs(Tabs.List, { "aria-label": "Manage your attribute", style: { maxWidth: 300 }, children: [
+        /* @__PURE__ */ jsx(Tabs.Trigger, { value: "role", children: formatMessage({
+          id: getTrad("tab.roles"),
+          defaultMessage: "Roles"
+        }) }),
+        /* @__PURE__ */ jsx(Tabs.Trigger, { value: "whitelist", children: formatMessage({
+          id: getTrad("tab.whitelist"),
+          defaultMessage: "Whitelist"
+        }) })
+      ] }),
+      /* @__PURE__ */ jsx(Tabs.Content, { value: "role", style: { background: "initial" }, children: /* @__PURE__ */ jsx(
+        Role,
+        {
+          roles,
+          ssoRoles,
+          onSaveRole,
+          onChangeRoleCheck
+        }
+      ) }),
+      /* @__PURE__ */ jsx(Tabs.Content, { value: "whitelist", children: /* @__PURE__ */ jsx(
+        Whitelist,
+        {
+          loading,
+          users,
+          roles,
+          useWhitelist,
+          onSave: onRegisterWhitelist,
+          onDelete: onDeleteWhitelist,
+          onToggle: onToggleWhitelist
+        }
+      ) })
+    ] }) })
+  ] });
+};
+const HomePage$1 = memo(HomePage);
+const App = () => {
+  return /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsxs(Routes, { children: [
+    /* @__PURE__ */ jsx(Route, { index: true, element: /* @__PURE__ */ jsx(HomePage$1, {}) }),
+    /* @__PURE__ */ jsx(Route, { path: "*", element: /* @__PURE__ */ jsx(Page.Error, {}) })
+  ] }) });
+};
+export {
+  App as default
+};

package/dist/_chunks/index-CHl-03dY.mjs

@@ -0,0 +1,204 @@
+import { useRef, useEffect } from "react";
+import "react/jsx-runtime";
+import "@strapi/icons";
+const __variableDynamicImportRuntimeHelper = (glob, path, segs) => {
+  const v = glob[path];
+  if (v) {
+    return typeof v === "function" ? v() : Promise.resolve(v);
+  }
+  return new Promise((_, reject) => {
+    (typeof queueMicrotask === "function" ? queueMicrotask : setTimeout)(
+      reject.bind(
+        null,
+        new Error(
+          "Unknown variable dynamic import: " + path + (path.split("/").length !== segs ? ". Note that variables only represent file names one level deep." : "")
+        )
+      )
+    );
+  });
+};
+const name$1 = "strapi-plugin-oidc";
+const version = "1.0.8";
+const description = "OIDC Single Sign On plugin for Strapi!";
+const strapi = {
+  displayName: "OIDC",
+  name: "strapi-plugin-oidc",
+  description: "Provides OIDC middleware for Strapi instances",
+  kind: "plugin"
+};
+const scripts = {
+  build: "strapi-plugin build",
+  watch: "strapi-plugin watch",
+  "watch:link": "strapi-plugin watch:link",
+  verify: "strapi-plugin verify",
+  test: "jest",
+  lint: "eslint"
+};
+const keywords = [
+  "strapi",
+  "plugin",
+  "oauth",
+  "SSO",
+  "OIDC",
+  "Zitadel"
+];
+const peerDependencies = {
+  "@strapi/strapi": "^5.24.1"
+};
+const dependencies = {
+  "@strapi/design-system": "^2.0.0-rc.11",
+  "@strapi/icons": "^2.0.0-rc.11",
+  "@strapi/utils": "^5.24.1",
+  axios: "^1.8.4",
+  "baseline-browser-mapping": "^2.10.14",
+  "caniuse-lite": "^1.0.30001785",
+  "generate-password": "^1.7.1",
+  "pkce-challenge": "^3.1.0",
+  react: "^18.0.0",
+  "react-dom": "^18.0.0",
+  "react-intl": "^6.0.0",
+  "react-router-dom": "^6.0.0",
+  "styled-components": "^6.0.0"
+};
+const author = {
+  name: "edmogeor",
+  url: "https://github.com/edmogeor/strapi-plugin-oidc"
+};
+const repository = {
+  type: "git",
+  url: "https://github.com/edmogeor/strapi-plugin-oidc"
+};
+const bugs = {
+  url: "https://github.com/edmogeor/strapi-plugin-oidc/issues"
+};
+const maintainers = [
+  {
+    name: "edmogeor"
+  }
+];
+const engines = {
+  node: ">=20.0.0 <=24.x.x",
+  npm: ">=6.0.0"
+};
+const files = [
+  "dist"
+];
+const license = "MIT";
+const devDependencies = {
+  "@strapi/sdk-plugin": "^5.2.0",
+  eslint: "^9.0.0",
+  globals: "^15.9.0",
+  jest: "^29.3.1"
+};
+const jest = {
+  testPathIgnorePatterns: [
+    "/node_modules/",
+    ".tmp",
+    "dist",
+    ".cache"
+  ],
+  testEnvironment: "node"
+};
+const exports = {
+  "./package.json": "./package.json",
+  "./strapi-admin": {
+    source: "./admin/src/index.js",
+    "import": "./dist/admin/index.mjs",
+    require: "./dist/admin/index.js",
+    "default": "./dist/admin/index.js"
+  },
+  "./strapi-server": {
+    source: "./server/index.js",
+    "import": "./dist/server/index.mjs",
+    require: "./dist/server/index.js",
+    "default": "./dist/server/index.js"
+  }
+};
+const pluginPkg = {
+  name: name$1,
+  version,
+  description,
+  strapi,
+  scripts,
+  keywords,
+  peerDependencies,
+  dependencies,
+  author,
+  repository,
+  bugs,
+  maintainers,
+  engines,
+  files,
+  license,
+  devDependencies,
+  jest,
+  exports
+};
+const pluginId = pluginPkg.name.replace(/^@strapi\/plugin-/i, "");
+const getTranslation = (id) => `${pluginId}.${id}`;
+const Initializer = ({ setPlugin }) => {
+  const ref = useRef();
+  ref.current = setPlugin;
+  useEffect(() => {
+    ref.current(pluginId);
+  }, []);
+  return null;
+};
+const name = pluginPkg.strapi.displayName;
+const index = {
+  register(app) {
+    app.addSettingsLink(
+      {
+        id: "oidc",
+        intlLabel: {
+          id: `${pluginId}.settings.section`,
+          defaultMessage: "OIDC"
+        }
+      },
+      {
+        id: "configuration",
+        to: `/settings/${pluginId}`,
+        intlLabel: {
+          id: `${pluginId}.settings.configuration`,
+          defaultMessage: "Configuration"
+        },
+        Component: async () => {
+          return await import("./index-BuS0wmlA.mjs");
+        },
+        permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }]
+      }
+    );
+    app.registerPlugin({
+      id: pluginId,
+      initializer: Initializer,
+      name
+    });
+  },
+  bootstrap(app) {
+  },
+  async registerTrads({ locales }) {
+    const importedTrads = await Promise.all(
+      locales.map((locale) => {
+        return __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => import("./en-AsM8uCFB.mjs"), "./translations/fr.json": () => import("./fr-hkSxFuzl.mjs"), "./translations/ja.json": () => import("./ja-COdupAQd.mjs") }), `./translations/${locale}.json`, 3).then(({ default: data }) => {
+          const newData = Object.fromEntries(
+            Object.entries(data).map(([key, value]) => [getTranslation(key), value])
+          );
+          return {
+            data: newData,
+            locale
+          };
+        }).catch(() => {
+          return {
+            data: {},
+            locale
+          };
+        });
+      })
+    );
+    return Promise.resolve(importedTrads);
+  }
+};
+export {
+  index as i,
+  pluginId as p
+};