strapi-plugin-oidc 1.8.4 → 1.9.0

package/README.md

@@ -48,7 +48,7 @@ module.exports = ({ env }) => ({
       OIDC_GROUP_FIELD: 'groups', // OIDC claim field containing group membership
       OIDC_GROUP_ROLE_MAP: '{}', // JSON map of group names to Strapi role names
       OIDC_REQUIRE_EMAIL_VERIFIED: true, // Reject logins when provider does not report email_verified=true (set false to disable)
-      OIDC_TRUSTED_IP_HEADER: '', // Optional: header set by your CDN/proxy containing the real client IP (see note below); only honoured when server.proxy: true
+      OIDC_TRUSTED_IP_HEADER: '', // Optional: header set by your CDN/proxy containing the real client IP (see note below); only honoured when Koa proxy mode is enabled (see below)
       OIDC_FORCE_SECURE_COOKIES: false, // Set true when behind a trusted HTTPS proxy that Strapi can't auto-detect
     },
   },
@@ -67,9 +67,17 @@ module.exports = ({ env }) => ({
 
 ### Client IP attribution and reverse proxies
 
-The plugin logs client IPs for rate-limit buckets and audit logs. When Strapi runs behind a reverse proxy, **set `server.proxy: true`** so Koa trusts `X-Forwarded-For`; otherwise all IPs will be the proxy's.
+The plugin logs client IPs for rate-limit buckets and audit logs. When Strapi runs behind a reverse proxy, enable Koa proxy mode so Strapi trusts `X-Forwarded-For`; otherwise all IPs will be the proxy's internal address.
 
-Set `OIDC_TRUSTED_IP_HEADER` to the header your CDN or proxy uses to forward the real client IP. The header is only honoured when `server.proxy: true` is set. Accepted values (all others are silently ignored):
+In `config/server.ts`:
+
+```ts
+proxy: {
+  koa: true,
+},
+```
+
+Set `OIDC_TRUSTED_IP_HEADER` to the header your CDN or proxy uses to forward the real client IP. The header is only honoured when Koa proxy mode is enabled. Accepted values (all others are silently ignored):
 
 | Header                      | Provider                                          |
 | --------------------------- | ------------------------------------------------- |

package/dist/admin/{index-Bmg4eTYb.js → index-BbgFpvmz.js}

@@ -7,7 +7,7 @@ const React = require("react");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
 const reactIntl = require("react-intl");
-const index = require("./index-Dk6TYtio.js");
+const index = require("./index-BqKuUY5d.js");
 const styled = require("styled-components");
 const lucideReact = require("lucide-react");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
@@ -426,7 +426,14 @@ const DayButton = styled__default.default.button`
   aspect-ratio: 1;
   border: none;
   background: ${({ $selected, $inRange, $pending, theme }) => $pending ? theme.colors.warning200 : $selected ? theme.colors.primary600 : $inRange ? theme.colors.primary100 : "transparent"};
-  color: ${({ $selected, $inRange, $pending, $future, $alreadySelected, theme }) => $pending ? theme.colors.warning600 : $selected ? theme.colors.neutral0 : $inRange ? theme.colors.primary600 : theme.colors.neutral800};
+  color: ${({
+  $selected,
+  $inRange,
+  $pending,
+  $future: _future,
+  $alreadySelected: _alreadySelected,
+  theme
+}) => $pending ? theme.colors.warning600 : $selected ? theme.colors.neutral0 : $inRange ? theme.colors.primary600 : theme.colors.neutral800};
   opacity: ${({ $future, $alreadySelected }) => $future || $alreadySelected ? 0.4 : 1};
   border-radius: 4px;
   cursor: pointer;
@@ -852,7 +859,6 @@ function TablePagination({ page, pageCount, onPageChange, total }) {
   ] }) });
 }
 const PAGE_SIZE$1 = 10;
-const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function Whitelist({
   users,
   useWhitelist,
@@ -893,7 +899,7 @@ function Whitelist({
         if (!Array.isArray(parsed)) throw new Error();
         const emails = parsed.filter((item) => item?.email).map(
           (item) => String(item.email).trim().toLowerCase()
-        ).filter((email2) => EMAIL_REGEX.test(email2));
+        ).filter((email2) => index.EMAIL_REGEX.test(email2));
         const count = await onImport(emails);
         if (count === 0) {
           toggleNotification({
@@ -935,7 +941,7 @@ function Whitelist({
                   type: "text",
                   disabled: loading,
                   value: email,
-                  hasError: Boolean(email && !EMAIL_REGEX.test(email)),
+                  hasError: Boolean(email && !index.EMAIL_REGEX.test(email)),
                   onChange: (e) => setEmail(e.currentTarget.value),
                   placeholder: formatMessage(index.getTrad("whitelist.email.placeholder")),
                   style: { fontSize: "1.4rem", lineHeight: "2.2rem" }
@@ -946,7 +952,7 @@ function Whitelist({
                 {
                   size: "S",
                   startIcon: /* @__PURE__ */ jsxRuntime.jsx(icons.Plus, {}),
-                  disabled: loading || email.trim() === "" || !EMAIL_REGEX.test(email),
+                  disabled: loading || email.trim() === "" || !index.EMAIL_REGEX.test(email),
                   loading,
                   onClick: onSaveEmail,
                   children: formatMessage(index.getTrad("page.add"))
@@ -1066,6 +1072,163 @@ function Whitelist({
     ] })
   ] });
 }
+const AUDIT_ACTIONS = [
+  "login_success",
+  "login_failure",
+  "missing_code",
+  "state_mismatch",
+  "nonce_mismatch",
+  "token_exchange_failed",
+  "whitelist_rejected",
+  "email_not_verified",
+  "id_token_invalid",
+  "logout",
+  "session_expired",
+  "user_created"
+];
+const IP_REGEX = /^(?:(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,5}(?::[0-9a-fA-F]{1,4}){1,2}|(?:[0-9a-fA-F]{1,4}:){1,4}(?::[0-9a-fA-F]{1,4}){1,3}|(?:[0-9a-fA-F]{1,4}:){1,3}(?::[0-9a-fA-F]{1,4}){1,4}|(?:[0-9a-fA-F]{1,4}:){1,2}(?::[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:(?::[0-9a-fA-F]{1,4}){1,6}|:(?::[0-9a-fA-F]{1,4}){1,7}|::))$/;
+function FilterBar({
+  filters,
+  hasActiveFilters,
+  onFiltersChange,
+  onResetPage,
+  onClear
+}) {
+  const { formatMessage } = reactIntl.useIntl();
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    designSystem.Box,
+    {
+      background: "neutral100",
+      hasRadius: true,
+      padding: 4,
+      marginBottom: 4,
+      borderColor: "neutral200",
+      borderWidth: "1px",
+      borderStyle: "solid",
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, alignItems: "center", marginBottom: 3, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Filter, { size: "1.6rem" }) }),
+          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "delta", tag: "h3", children: formatMessage(index.getTrad("auditlog.filters")) })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, wrap: "wrap", children: [
+          /* @__PURE__ */ jsxRuntime.jsx(
+            TagDateInput,
+            {
+              placeholder: formatMessage(index.getTrad("auditlog.filters.createdAt")),
+              value: filters.createdAt ?? [],
+              onChange: (selections) => {
+                onFiltersChange((prev) => {
+                  if (selections.length === 0) {
+                    const { createdAt: _createdAt, ...rest } = prev;
+                    return rest;
+                  }
+                  return { ...prev, createdAt: selections };
+                });
+                onResetPage();
+              },
+              startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(icons.Calendar, { width: "1.4rem", height: "1.4rem" }) })
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            TagInput,
+            {
+              value: filters.action ?? [],
+              onChange: (value) => onFiltersChange((prev) => ({ ...prev, action: value })),
+              options: AUDIT_ACTIONS,
+              placeholder: formatMessage(index.getTrad("auditlog.filters.action")),
+              startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ClipboardList, { size: "1.4rem" }) })
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            TagInput,
+            {
+              value: filters.email ?? [],
+              onChange: (value) => onFiltersChange((prev) => ({ ...prev, email: value })),
+              placeholder: formatMessage(index.getTrad("auditlog.filters.email")),
+              startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(icons.Mail, { width: "1.4rem", height: "1.4rem" }) }),
+              validate: (v) => index.EMAIL_REGEX.test(v)
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            TagInput,
+            {
+              value: filters.ip ?? [],
+              onChange: (value) => onFiltersChange((prev) => ({ ...prev, ip: value })),
+              placeholder: formatMessage(index.getTrad("auditlog.filters.ip")),
+              startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Server, { size: "1.4rem" }) }),
+              validate: (v) => IP_REGEX.test(v)
+            }
+          ),
+          hasActiveFilters && /* @__PURE__ */ jsxRuntime.jsx(SizedButton, { size: "S", variant: "danger-light", startIcon: /* @__PURE__ */ jsxRuntime.jsx(icons.Trash, {}), onClick: onClear, children: formatMessage(index.getTrad("auditlog.filters.clear")) })
+        ] })
+      ]
+    }
+  );
+}
+const DETAILS_TEXT_STYLE = {
+  display: "block",
+  overflow: "hidden",
+  textOverflow: "ellipsis",
+  whiteSpace: "nowrap",
+  maxWidth: "180px",
+  cursor: "help"
+};
+function LogTable({ records, loading, hasActiveFilters }) {
+  const { formatMessage } = reactIntl.useIntl();
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { position: "relative", width: "100%" }, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(CustomTable, { colCount: 5, rowCount: records.length, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(designSystem.Thead, { children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Tr, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.timestamp")) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.action")) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.email")) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.ip")) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.details")) })
+      ] }) }),
+      /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Tbody, { children: [
+        records.length === 0 && /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tr, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { colSpan: 5, children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Flex, { justifyContent: "center", alignItems: "center", style: { minHeight: "80px" }, children: loading ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Loader, { small: true }) : /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { textColor: "neutral600", children: hasActiveFilters ? formatMessage(index.getTrad("auditlog.filters.empty")) : formatMessage(index.getTrad("auditlog.table.empty")) }) }) }) }),
+        records.map((record) => {
+          const detailKey = record.detailsKey ? `audit.${record.detailsKey}` : null;
+          const detail = detailKey && index.en[detailKey] ? formatMessage(index.getTrad(detailKey), record.detailsParams ?? {}) : null;
+          return /* @__PURE__ */ jsxRuntime.jsxs(
+            designSystem.Tr,
+            {
+              style: { opacity: loading ? 0.4 : 1, transition: "opacity 0.15s" },
+              children: [
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: /* @__PURE__ */ jsxRuntime.jsx(LocalizedDate, { date: record.createdAt, options: { second: "2-digit" } }) }) }),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, alignItems: "center", children: [
+                  /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.action }),
+                  /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tooltip, { label: formatMessage(index.getTrad(`auditlog.action.${record.action}`)), children: /* @__PURE__ */ jsxRuntime.jsx(
+                    icons.Information,
+                    {
+                      "aria-hidden": true,
+                      style: { cursor: "help" },
+                      width: "1.4rem",
+                      height: "1.4rem",
+                      fill: "primary600"
+                    }
+                  ) })
+                ] }) }),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.email ?? "—" }) }),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.ip ?? "—" }) }),
+                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { style: { maxWidth: "200px" }, children: detail ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tooltip, { label: detail, side: "top", children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", textColor: "neutral600", style: DETAILS_TEXT_STYLE, children: detail }) }) : /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", textColor: "neutral600", children: "—" }) })
+              ]
+            },
+            record.id
+          );
+        })
+      ] })
+    ] }),
+    loading && records.length > 0 && /* @__PURE__ */ jsxRuntime.jsx(
+      designSystem.Flex,
+      {
+        justifyContent: "center",
+        alignItems: "center",
+        style: { position: "absolute", inset: 0, pointerEvents: "none" },
+        children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Loader, { small: true })
+      }
+    )
+  ] });
+}
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
 function getDefaultExportFromCjs(x) {
   return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, "default") ? x["default"] : x;
@@ -3607,30 +3770,6 @@ function requireLib() {
 }
 var libExports = /* @__PURE__ */ requireLib();
 const qs = /* @__PURE__ */ getDefaultExportFromCjs(libExports);
-const AUDIT_ACTIONS = [
-  "login_success",
-  "login_failure",
-  "missing_code",
-  "state_mismatch",
-  "nonce_mismatch",
-  "token_exchange_failed",
-  "whitelist_rejected",
-  "email_not_verified",
-  "id_token_invalid",
-  "logout",
-  "session_expired",
-  "user_created"
-];
-const PAGE_SIZE = 10;
-const MIN_SPINNER_MS = 400;
-const DETAILS_TEXT_STYLE = {
-  display: "block",
-  overflow: "hidden",
-  textOverflow: "ellipsis",
-  whiteSpace: "nowrap",
-  maxWidth: "180px",
-  cursor: "help"
-};
 function toWireFilters(f) {
   const out = {};
   if (f.action?.length) out.action = { $or: f.action.map((v) => ({ $eq: v })) };
@@ -3647,11 +3786,10 @@ function buildQueryString(params) {
   const { filters, ...rest } = params;
   return qs.stringify(
     { ...rest, filters: filters ? toWireFilters(filters) : void 0 },
-    {
-      encodeValuesOnly: true
-    }
+    { encodeValuesOnly: true }
   );
 }
+const PAGE_SIZE = index.AUDIT_LOG_DEFAULTS.ADMIN_PAGE_SIZE;
 function useDebounced(value, delay = 300) {
   const [debounced, setDebounced] = React.useState(value);
   React.useEffect(() => {
@@ -3660,10 +3798,8 @@ function useDebounced(value, delay = 300) {
   }, [value, delay]);
   return debounced;
 }
-function AuditLog({ title } = {}) {
-  const { formatMessage } = reactIntl.useIntl();
-  const { get: get2, del } = admin.useFetchClient();
-  const { toggleNotification } = admin.useNotification();
+function useAuditLogs(page, filters) {
+  const { get: get2 } = admin.useFetchClient();
   const [records, setRecords] = React.useState([]);
   const [pagination, setPagination] = React.useState({
     page: 1,
@@ -3671,9 +3807,7 @@ function AuditLog({ title } = {}) {
     total: 0,
     pageCount: 1
   });
-  const [page, setPage] = React.useState(1);
   const [loading, setLoading] = React.useState(true);
-  const [filters, setFilters] = React.useState({});
   const fetchGenRef = React.useRef(0);
   const debouncedFilters = useDebounced(filters);
   const fetchLogs = React.useCallback(
@@ -3695,7 +3829,7 @@ function AuditLog({ title } = {}) {
         };
       } catch {
       }
-      const remaining = MIN_SPINNER_MS - (Date.now() - startTime);
+      const remaining = index.UI_DEFAULTS.MIN_SPINNER_MS - (Date.now() - startTime);
       if (remaining > 0) await new Promise((r) => setTimeout(r, remaining));
       if (gen !== fetchGenRef.current) return;
       setRecords(newRecords);
@@ -3707,6 +3841,15 @@ function AuditLog({ title } = {}) {
   React.useEffect(() => {
     fetchLogs(page, debouncedFilters);
   }, [fetchLogs, page, debouncedFilters]);
+  return { records, pagination, loading };
+}
+function AuditLog({ title } = {}) {
+  const { formatMessage } = reactIntl.useIntl();
+  const { del } = admin.useFetchClient();
+  const { toggleNotification } = admin.useNotification();
+  const [page, setPage] = React.useState(1);
+  const [filters, setFilters] = React.useState({});
+  const { records, pagination, loading } = useAuditLogs(page, filters);
   const handleClearAll = async () => {
     try {
       await del("/strapi-plugin-oidc/audit-logs");
@@ -3727,9 +3870,7 @@ function AuditLog({ title } = {}) {
     try {
       const cookieMatch = document.cookie.match(/(?:^|;\s*)jwtToken=([^;]+)/);
       const token = cookieMatch ? decodeURIComponent(cookieMatch[1]) : "";
-      const queryString = buildQueryString({
-        filters
-      });
+      const queryString = buildQueryString({ filters });
       const response = await fetch(`/strapi-plugin-oidc/audit-logs/export?${queryString}`, {
         headers: { Authorization: `Bearer ${token}` }
       });
@@ -3797,135 +3938,17 @@ function AuditLog({ title } = {}) {
         )
       ] })
     ] }),
-    /* @__PURE__ */ jsxRuntime.jsxs(
-      designSystem.Box,
+    /* @__PURE__ */ jsxRuntime.jsx(
+      FilterBar,
       {
-        background: "neutral100",
-        hasRadius: true,
-        padding: 4,
-        marginBottom: 4,
-        borderColor: "neutral200",
-        borderWidth: "1px",
-        borderStyle: "solid",
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, alignItems: "center", marginBottom: 3, children: [
-            /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Filter, { size: "1.6rem" }) }),
-            /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "delta", tag: "h3", children: formatMessage(index.getTrad("auditlog.filters")) })
-          ] }),
-          /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, wrap: "wrap", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(
-              TagDateInput,
-              {
-                placeholder: formatMessage(index.getTrad("auditlog.filters.createdAt")),
-                value: filters.createdAt ?? [],
-                onChange: (selections) => {
-                  setFilters((prev) => {
-                    if (selections.length === 0) {
-                      const { createdAt: _removed, ...rest } = prev;
-                      return rest;
-                    }
-                    return { ...prev, createdAt: selections };
-                  });
-                  setPage(1);
-                },
-                startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(icons.Calendar, { width: "1.4rem", height: "1.4rem" }) })
-              }
-            ),
-            /* @__PURE__ */ jsxRuntime.jsx(
-              TagInput,
-              {
-                value: filters.action ?? [],
-                onChange: (value) => setFilters((prev) => ({ ...prev, action: value })),
-                options: AUDIT_ACTIONS,
-                placeholder: formatMessage(index.getTrad("auditlog.filters.action")),
-                startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ClipboardList, { size: "1.4rem" }) })
-              }
-            ),
-            /* @__PURE__ */ jsxRuntime.jsx(
-              TagInput,
-              {
-                value: filters.email ?? [],
-                onChange: (value) => setFilters((prev) => ({ ...prev, email: value })),
-                placeholder: formatMessage(index.getTrad("auditlog.filters.email")),
-                startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(icons.Mail, { width: "1.4rem", height: "1.4rem" }) }),
-                validate: (v) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v)
-              }
-            ),
-            /* @__PURE__ */ jsxRuntime.jsx(
-              TagInput,
-              {
-                value: filters.ip ?? [],
-                onChange: (value) => setFilters((prev) => ({ ...prev, ip: value })),
-                placeholder: formatMessage(index.getTrad("auditlog.filters.ip")),
-                startIcon: /* @__PURE__ */ jsxRuntime.jsx(Icon, { children: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Server, { size: "1.4rem" }) }),
-                validate: (v) => /^(?:(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,5}(?::[0-9a-fA-F]{1,4}){1,2}|(?:[0-9a-fA-F]{1,4}:){1,4}(?::[0-9a-fA-F]{1,4}){1,3}|(?:[0-9a-fA-F]{1,4}:){1,3}(?::[0-9a-fA-F]{1,4}){1,4}|(?:[0-9a-fA-F]{1,4}:){1,2}(?::[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:(?::[0-9a-fA-F]{1,4}){1,6}|:(?::[0-9a-fA-F]{1,4}){1,7}|::))$/.test(
-                  v
-                )
-              }
-            ),
-            hasActiveFilters && /* @__PURE__ */ jsxRuntime.jsx(
-              SizedButton,
-              {
-                size: "S",
-                variant: "danger-light",
-                startIcon: /* @__PURE__ */ jsxRuntime.jsx(icons.Trash, {}),
-                onClick: clearFilters,
-                children: formatMessage(index.getTrad("auditlog.filters.clear"))
-              }
-            )
-          ] })
-        ]
+        filters,
+        hasActiveFilters,
+        onFiltersChange: setFilters,
+        onResetPage: () => setPage(1),
+        onClear: clearFilters
       }
     ),
-    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { position: "relative", width: "100%" }, children: [
-      /* @__PURE__ */ jsxRuntime.jsxs(CustomTable, { colCount: 5, rowCount: records.length, children: [
-        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Thead, { children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Tr, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.timestamp")) }),
-          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.action")) }),
-          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.email")) }),
-          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.ip")) }),
-          /* @__PURE__ */ jsxRuntime.jsx(designSystem.Th, { children: formatMessage(index.getTrad("auditlog.table.details")) })
-        ] }) }),
-        /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Tbody, { children: [
-          records.length === 0 && /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tr, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { colSpan: 5, children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Flex, { justifyContent: "center", alignItems: "center", style: { minHeight: "80px" }, children: loading ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Loader, { small: true }) : /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { textColor: "neutral600", children: hasActiveFilters ? formatMessage(index.getTrad("auditlog.filters.empty")) : formatMessage(index.getTrad("auditlog.table.empty")) }) }) }) }),
-          records.map((record) => /* @__PURE__ */ jsxRuntime.jsxs(
-            designSystem.Tr,
-            {
-              style: { opacity: loading ? 0.4 : 1, transition: "opacity 0.15s" },
-              children: [
-                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: /* @__PURE__ */ jsxRuntime.jsx(LocalizedDate, { date: record.createdAt, options: { second: "2-digit" } }) }) }),
-                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, alignItems: "center", children: [
-                  /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.action }),
-                  /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tooltip, { label: formatMessage(index.getTrad(`auditlog.action.${record.action}`)), children: /* @__PURE__ */ jsxRuntime.jsx(
-                    icons.Information,
-                    {
-                      "aria-hidden": true,
-                      style: { cursor: "help" },
-                      width: "1.4rem",
-                      height: "1.4rem",
-                      fill: "primary600"
-                    }
-                  ) })
-                ] }) }),
-                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.email ?? "—" }) }),
-                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", children: record.ip ?? "—" }) }),
-                /* @__PURE__ */ jsxRuntime.jsx(designSystem.Td, { style: { maxWidth: "200px" }, children: record.details ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Tooltip, { label: record.details, side: "top", children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", textColor: "neutral600", style: DETAILS_TEXT_STYLE, children: record.details }) }) : /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", textColor: "neutral600", children: "—" }) })
-              ]
-            },
-            record.id
-          ))
-        ] })
-      ] }),
-      loading && records.length > 0 && /* @__PURE__ */ jsxRuntime.jsx(
-        designSystem.Flex,
-        {
-          justifyContent: "center",
-          alignItems: "center",
-          style: { position: "absolute", inset: 0, pointerEvents: "none" },
-          children: /* @__PURE__ */ jsxRuntime.jsx(designSystem.Loader, { small: true })
-        }
-      )
-    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(LogTable, { records, loading, hasActiveFilters }),
     /* @__PURE__ */ jsxRuntime.jsx(
       TablePagination,
       {
@@ -3995,7 +4018,7 @@ const SwitchInput = styled__default.default.input`
   &:checked + span:before {
     transform: translateX(16px);
   }
-  
+
   &:disabled + span {
     pointer-events: none;
   }
@@ -4013,7 +4036,7 @@ const SwitchSlider = styled__default.default.span`
 
   &:before {
     position: absolute;
-    content: "";
+    content: '';
     height: 18px;
     width: 18px;
     left: 3px;
@@ -4023,21 +4046,26 @@ const SwitchSlider = styled__default.default.span`
     border-radius: 50%;
   }
 `;
-function CustomSwitch({ checked, onChange, label, disabled }) {
+function CustomSwitch({
+  checked,
+  onChange,
+  label,
+  disabled
+}) {
   return /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 3, children: [
     /* @__PURE__ */ jsxRuntime.jsxs(SwitchContainer, { $disabled: disabled, children: [
-      /* @__PURE__ */ jsxRuntime.jsx(
-        SwitchInput,
-        {
-          type: "checkbox",
-          checked,
-          onChange,
-          disabled
-        }
-      ),
+      /* @__PURE__ */ jsxRuntime.jsx(SwitchInput, { type: "checkbox", checked, onChange, disabled }),
       /* @__PURE__ */ jsxRuntime.jsx(SwitchSlider, {})
     ] }),
-    label && /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", fontWeight: "bold", textColor: disabled ? "neutral500" : "neutral800", children: label })
+    label && /* @__PURE__ */ jsxRuntime.jsx(
+      designSystem.Typography,
+      {
+        variant: "pi",
+        fontWeight: "bold",
+        textColor: disabled ? "neutral500" : "neutral800",
+        children: label
+      }
+    )
   ] });
 }
 function formatDatetimeForFilename(date) {
@@ -4059,19 +4087,15 @@ function downloadJson(basename, data) {
   a.click();
   URL.revokeObjectURL(url);
 }
+const defaultSnapshot = {
+  oidcRoles: [],
+  users: [],
+  useWhitelist: false,
+  enforceOIDC: false
+};
 const initialState = {
-  current: {
-    oidcRoles: [],
-    users: [],
-    useWhitelist: false,
-    enforceOIDC: false
-  },
-  initial: {
-    oidcRoles: [],
-    users: [],
-    useWhitelist: false,
-    enforceOIDC: false
-  },
+  current: { ...defaultSnapshot },
+  initial: { ...defaultSnapshot },
   roles: [],
   enforceOIDCConfig: null,
   auditLogEnabled: true,

package/dist/admin/{index-Dk6TYtio.js → index-BqKuUY5d.js}

@@ -177,7 +177,10 @@ const en = {
   "user.invalid_state": "State parameter mismatch. Please restart the login flow.",
   "user.signInError": "Authentication failed. Please try again.",
   "settings.section": "OIDC",
-  "settings.configuration": "Configuration"
+  "settings.configuration": "Configuration",
+  "audit.login_failure": "Error: {message}",
+  "audit.roles_updated": "Roles updated to: {roles}",
+  "audit.user_created": "Roles assigned: {roles}"
 };
 function getTrad(id) {
   const pluginIdWithId = `${pluginId}.${id}`;
@@ -189,9 +192,31 @@ function getTrad(id) {
 function t(id) {
   return en[id];
 }
+const PLUGIN_UID = "plugin::strapi-plugin-oidc";
+const PERMISSIONS = {
+  READ: `${PLUGIN_UID}.read`
+};
+const AUDIT_LOG_DEFAULTS = {
+  ADMIN_PAGE_SIZE: 10
+};
+const UI_DEFAULTS = {
+  MIN_SPINNER_MS: 400
+};
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 const name = pluginPkg.strapi.displayName;
 const index = {
   register(app) {
+    const AppPage = React__default.default.lazy(() => Promise.resolve().then(() => require("./index-BbgFpvmz.js")));
+    const link = {
+      id: "configuration",
+      to: `/settings/${pluginId}`,
+      intlLabel: {
+        id: "settings.configuration",
+        defaultMessage: "Configuration"
+      },
+      Component: AppPage,
+      permissions: [{ action: PERMISSIONS.READ, subject: null }]
+    };
     app.addSettingsLink(
       {
         id: "oidc",
@@ -200,18 +225,7 @@ const index = {
           defaultMessage: "OIDC"
         }
       },
-      {
-        id: "configuration",
-        to: `/settings/${pluginId}`,
-        intlLabel: {
-          id: "settings.configuration",
-          defaultMessage: "Configuration"
-        },
-        Component: async () => {
-          return await Promise.resolve().then(() => require("./index-Bmg4eTYb.js"));
-        },
-        permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }]
-      }
+      link
     );
     app.registerPlugin({
       id: pluginId,
@@ -344,5 +358,9 @@ const index = {
     return importedTrads;
   }
 };
+exports.AUDIT_LOG_DEFAULTS = AUDIT_LOG_DEFAULTS;
+exports.EMAIL_REGEX = EMAIL_REGEX;
+exports.UI_DEFAULTS = UI_DEFAULTS;
+exports.en = en;
 exports.getTrad = getTrad;
 exports.index = index;