strapi-plugin-publish-media-validation 1.0.0

package/README.md

@@ -0,0 +1,64 @@
+# strapi-plugin-publish-media-validation
+
+A Strapi v5 plugin that enforces `required: true` on **media fields at publish time**.
+
+## Why this exists
+
+Strapi v5 validates `required: true` on scalar fields (string, integer, etc.) when publishing, but skips that check for media fields (`type: "media"`). This means a content manager can publish an entry with a missing required banner, thumbnail, or any other required image/file — even though the field is marked as required in the schema.
+
+This plugin intercepts the Document Service `publish` action and blocks it if any required media field is empty, returning a clear error message instead of silently allowing the publish.
+
+## Installation
+
+```bash
+npm install strapi-plugin-publish-media-validation
+# or
+yarn add strapi-plugin-publish-media-validation
+# or
+pnpm add strapi-plugin-publish-media-validation
+```
+
+### pnpm users
+
+Because `@strapi/utils` is a peer dependency and pnpm does not hoist packages by default, you also need to add it as a direct dependency:
+
+```bash
+pnpm add @strapi/utils
+```
+
+## Usage
+
+No configuration needed. Once installed, the plugin automatically scans every content type's schema on publish and blocks any entry where a `required: true` media field is empty.
+
+**Example schema:**
+
+```json
+{
+  "banner": {
+    "type": "media",
+    "multiple": false,
+    "required": true,
+    "allowedTypes": ["images"]
+  }
+}
+```
+
+If you try to publish without a banner, the admin panel will show:
+
+> The following required media fields are empty: Banner
+
+## How it works
+
+The plugin registers a [Document Service middleware](https://docs.strapi.io/dev-docs/backend-customization/document-service-middlewares) that:
+
+1. Runs on every `publish` action across all content types
+2. Reads the model schema to find `type: "media"` fields with `required: true`
+3. Fetches the draft document and checks each required media field
+4. Throws a `ValidationError` listing any empty fields, which Strapi maps to a 400 response with the message shown in the admin UI
+
+## Compatibility
+
+| Strapi version | Supported |
+|----------------|-----------|
+| v5.x           | ✅        |
+| v4.x           | ❌        |

package/dist/server/__tests__/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/server/__tests__/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/server/__tests__/index.test.ts"],"names":[],"mappings":""}

package/dist/server/__tests__/index.test.js

@@ -0,0 +1,123 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@strapi/utils");
+const index_1 = __importDefault(require("../index"));
+// Capture the middleware function registered via strapi.documents.use()
+function buildStrapi(modelAttributes, docFields = {}) {
+    let capturedMiddleware = null;
+    const strapi = {
+        documents: Object.assign((uid) => ({
+            findOne: jest.fn().mockResolvedValue(docFields),
+        }), {
+            use: jest.fn((fn) => {
+                capturedMiddleware = fn;
+            }),
+        }),
+        getModel: jest.fn().mockReturnValue(modelAttributes !== null ? { attributes: modelAttributes } : null),
+    };
+    index_1.default.register({ strapi: strapi });
+    return {
+        strapi,
+        runMiddleware: (ctx) => {
+            if (!capturedMiddleware)
+                throw new Error('middleware not registered');
+            const next = jest.fn().mockResolvedValue(undefined);
+            return { result: capturedMiddleware(ctx, next), next };
+        },
+    };
+}
+const baseCtx = {
+    action: 'publish',
+    uid: 'api::article.article',
+    params: { documentId: 'abc123' },
+};
+describe('register', () => {
+    it('calls strapi.documents.use once', () => {
+        const { strapi } = buildStrapi({});
+        expect(strapi.documents.use).toHaveBeenCalledTimes(1);
+    });
+});
+describe('middleware', () => {
+    it('passes through when action is not publish', async () => {
+        const { runMiddleware } = buildStrapi({});
+        const { next } = runMiddleware({ ...baseCtx, action: 'create' });
+        await next;
+        expect(next).toHaveBeenCalled();
+    });
+    it('passes through when model is null', async () => {
+        const { runMiddleware } = buildStrapi(null);
+        const { next } = runMiddleware(baseCtx);
+        await next;
+        expect(next).toHaveBeenCalled();
+    });
+    it('passes through when model has no required media fields', async () => {
+        const { runMiddleware } = buildStrapi({
+            title: { type: 'string', required: true },
+            cover: { type: 'media', required: false },
+        });
+        const { next } = runMiddleware(baseCtx);
+        await next;
+        expect(next).toHaveBeenCalled();
+    });
+    it('passes through when there is no documentId', async () => {
+        const { runMiddleware } = buildStrapi({
+            cover: { type: 'media', required: true },
+        });
+        const { next } = runMiddleware({ ...baseCtx, params: {} });
+        await next;
+        expect(next).toHaveBeenCalled();
+    });
+    it('passes through when all required media fields are populated', async () => {
+        const { runMiddleware } = buildStrapi({ cover: { type: 'media', required: true } }, { cover: { id: 1, url: '/uploads/img.jpg' } });
+        const { result, next } = runMiddleware(baseCtx);
+        await result;
+        expect(next).toHaveBeenCalled();
+    });
+    it('throws ValidationError when a required media field is empty', async () => {
+        const { runMiddleware } = buildStrapi({ cover: { type: 'media', required: true } }, { cover: null });
+        const { result } = runMiddleware(baseCtx);
+        await expect(result).rejects.toThrow(utils_1.errors.ValidationError);
+        await expect(result).rejects.toThrow('Cover');
+    });
+    it('lists all missing fields in the error message', async () => {
+        const { runMiddleware } = buildStrapi({
+            cover: { type: 'media', required: true },
+            heroImage: { type: 'media', required: true },
+        }, { cover: null, heroImage: null });
+        const { result } = runMiddleware(baseCtx);
+        await expect(result).rejects.toThrow('Cover');
+        await expect(result).rejects.toThrow('Hero Image');
+    });
+    it('only validates required media fields, not optional ones', async () => {
+        const { runMiddleware } = buildStrapi({
+            cover: { type: 'media', required: true },
+            gallery: { type: 'media', required: false },
+        }, { cover: { id: 1 }, gallery: null });
+        const { result, next } = runMiddleware(baseCtx);
+        await result;
+        expect(next).toHaveBeenCalled();
+    });
+    it('populates only required media fields when fetching the document', async () => {
+        const findOne = jest.fn().mockResolvedValue({ cover: { id: 1 } });
+        const strapi = {
+            documents: Object.assign(() => ({ findOne }), {
+                use: jest.fn((fn) => fn(baseCtx, jest.fn().mockResolvedValue(undefined))),
+            }),
+            getModel: jest.fn().mockReturnValue({
+                attributes: {
+                    cover: { type: 'media', required: true },
+                    title: { type: 'string', required: true },
+                },
+            }),
+        };
+        index_1.default.register({ strapi: strapi });
+        expect(findOne).toHaveBeenCalledWith({
+            documentId: 'abc123',
+            populate: { cover: true },
+        });
+    });
+});
+//# sourceMappingURL=index.test.js.map

package/dist/server/__tests__/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../../src/server/__tests__/index.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAuC;AACvC,qDAA8B;AAE9B,wEAAwE;AACxE,SAAS,WAAW,CAClB,eAA+C,EAC/C,YAA4C,EAAE;IAE9C,IAAI,kBAAkB,GAAoB,IAAI,CAAC;IAE/C,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,MAAM,CAAC,MAAM,CACtB,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SAChD,CAAC,EACF;YACE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAY,EAAE,EAAE;gBAC5B,kBAAkB,GAAG,EAAE,CAAC;YAC1B,CAAC,CAAC;SACH,CACF;QACD,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CACjC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAClE;KACF,CAAC;IAEF,eAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAa,EAAE,CAAC,CAAC;IAE3C,OAAO;QACL,MAAM;QACN,aAAa,EAAE,CAAC,GAA4B,EAAE,EAAE;YAC9C,IAAI,CAAC,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,sBAAsB;IAC3B,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE;CACjC,CAAC;AAEF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;YACpC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;YACpC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CACnC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAC5C,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,CAC9C,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CACnC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAC5C,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAM,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CACnC;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC7C,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CACjC,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CACnC;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC5C,EACD,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CACpC,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC5C,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAY,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;aACpF,CAAC;YACF,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBAClC,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC1C;aACF,CAAC;SACH,CAAC;QAEF,eAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAa,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YACnC,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,14 @@
+import type { Core } from '@strapi/strapi';
+declare const _default: {
+    register: ({ strapi }: {
+        strapi: Core.Strapi;
+    }) => void;
+    bootstrap: (_args: {
+        strapi: Core.Strapi;
+    }) => void;
+    destroy: (_args: {
+        strapi: Core.Strapi;
+    }) => void;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAO,MAAM,gBAAgB,CAAC;;2BAGlB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;uBAqC3B;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;qBACzB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;;AAE/C,wBAAgD"}

package/dist/server/index.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@strapi/utils");
+const register = ({ strapi }) => {
+    strapi.documents.use(async (ctx, next) => {
+        var _a;
+        if (ctx.action !== 'publish')
+            return next();
+        const model = strapi.getModel(ctx.uid);
+        if (!(model === null || model === void 0 ? void 0 : model.attributes))
+            return next();
+        const requiredMediaFields = Object.entries(model.attributes)
+            .filter(([, attr]) => attr.type === 'media' && attr.required === true)
+            .map(([key]) => key);
+        if (requiredMediaFields.length === 0)
+            return next();
+        const documentId = (_a = ctx.params) === null || _a === void 0 ? void 0 : _a.documentId;
+        if (!documentId)
+            return next();
+        const populate = Object.fromEntries(requiredMediaFields.map((f) => [f, true]));
+        const doc = await strapi.documents(ctx.uid).findOne({
+            documentId,
+            populate,
+        });
+        const missing = requiredMediaFields.filter((f) => !(doc === null || doc === void 0 ? void 0 : doc[f]));
+        if (missing.length > 0) {
+            const labels = missing
+                .map((f) => f.charAt(0).toUpperCase() + f.slice(1).replace(/([A-Z])/g, ' $1'))
+                .join(', ');
+            throw new utils_1.errors.ValidationError(`The following required media fields are empty: ${labels}`);
+        }
+        return next();
+    });
+};
+const bootstrap = (_args) => { };
+const destroy = (_args) => { };
+exports.default = { register, bootstrap, destroy };
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;AACA,yCAAuC;AAEvC,MAAM,QAAQ,GAAG,CAAC,EAAE,MAAM,EAA2B,EAAE,EAAE;IACvD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAsB,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,UAAU,CAAA;YAAE,OAAO,IAAI,EAAE,CAAC;QAEtC,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;aACzD,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAE,IAAY,CAAC,IAAI,KAAK,OAAO,IAAK,IAAY,CAAC,QAAQ,KAAK,IAAI,CAAC;aACvF,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAEpD,MAAM,UAAU,GAAG,MAAC,GAAG,CAAC,MAAkC,0CAAE,UAAU,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAsB,CAAC,CAAC,OAAO,CAAC;YACrE,UAAU;YACV,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAW,CAAC,CAAC,CAAA,CAAC,CAAC;QAEtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,OAAO;iBACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;iBAC7E,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,cAAM,CAAC,eAAe,CAC9B,kDAAkD,MAAM,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAE,EAAE,GAAE,CAAC,CAAC;AACzD,MAAM,OAAO,GAAG,CAAC,KAA8B,EAAE,EAAE,GAAE,CAAC,CAAC;AAEvD,kBAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "strapi-plugin-publish-media-validation",
+  "version": "1.0.0",
+  "description": "Strapi v5 plugin that enforces required media fields at publish time — works around the known limitation where required: true on media fields is not validated on publish.",
+  "license": "MIT",
+  "keywords": [
+    "strapi",
+    "plugin",
+    "media",
+    "validation",
+    "publish",
+    "required"
+  ],
+  "main": "./dist/server/index.js",
+  "exports": {
+    "./strapi-server": "./dist/server/index.js"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "strapi": {
+    "kind": "plugin",
+    "name": "publish-media-validation",
+    "displayName": "Publish Media Validation",
+    "description": "Enforces required media fields when publishing content types in Strapi v5."
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "prepublishOnly": "npm run build",
+    "test": "jest",
+    "test:watch": "jest --watch"
+  },
+  "jest": {
+    "testEnvironment": "node",
+    "testMatch": ["**/__tests__/**/*.test.ts"],
+    "transform": {
+      "^.+\\.tsx?$": ["ts-jest", { "tsconfig": "tsconfig.test.json" }]
+    }
+  },
+  "peerDependencies": {
+    "@strapi/strapi": ">=5.0.0"
+  },
+  "devDependencies": {
+    "@strapi/strapi": "5.44.0",
+    "@strapi/utils": "5.44.0",
+    "@types/jest": "^30.0.0",
+    "jest": "^30.4.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^5.0.0"
+  }
+}

package/src/server/__tests__/index.test.ts

@@ -0,0 +1,153 @@
+import { errors } from '@strapi/utils';
+import plugin from '../index';
+
+// Capture the middleware function registered via strapi.documents.use()
+function buildStrapi(
+  modelAttributes: Record<string, unknown> | null,
+  docFields: Record<string, unknown> | null = {}
+) {
+  let capturedMiddleware: Function | null = null;
+
+  const strapi = {
+    documents: Object.assign(
+      (uid: string) => ({
+        findOne: jest.fn().mockResolvedValue(docFields),
+      }),
+      {
+        use: jest.fn((fn: Function) => {
+          capturedMiddleware = fn;
+        }),
+      }
+    ),
+    getModel: jest.fn().mockReturnValue(
+      modelAttributes !== null ? { attributes: modelAttributes } : null
+    ),
+  };
+
+  plugin.register({ strapi: strapi as any });
+
+  return {
+    strapi,
+    runMiddleware: (ctx: Record<string, unknown>) => {
+      if (!capturedMiddleware) throw new Error('middleware not registered');
+      const next = jest.fn().mockResolvedValue(undefined);
+      return { result: capturedMiddleware(ctx, next), next };
+    },
+  };
+}
+
+const baseCtx = {
+  action: 'publish',
+  uid: 'api::article.article',
+  params: { documentId: 'abc123' },
+};
+
+describe('register', () => {
+  it('calls strapi.documents.use once', () => {
+    const { strapi } = buildStrapi({});
+    expect(strapi.documents.use).toHaveBeenCalledTimes(1);
+  });
+});
+
+describe('middleware', () => {
+  it('passes through when action is not publish', async () => {
+    const { runMiddleware } = buildStrapi({});
+    const { next } = runMiddleware({ ...baseCtx, action: 'create' });
+    await next;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('passes through when model is null', async () => {
+    const { runMiddleware } = buildStrapi(null);
+    const { next } = runMiddleware(baseCtx);
+    await next;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('passes through when model has no required media fields', async () => {
+    const { runMiddleware } = buildStrapi({
+      title: { type: 'string', required: true },
+      cover: { type: 'media', required: false },
+    });
+    const { next } = runMiddleware(baseCtx);
+    await next;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('passes through when there is no documentId', async () => {
+    const { runMiddleware } = buildStrapi({
+      cover: { type: 'media', required: true },
+    });
+    const { next } = runMiddleware({ ...baseCtx, params: {} });
+    await next;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('passes through when all required media fields are populated', async () => {
+    const { runMiddleware } = buildStrapi(
+      { cover: { type: 'media', required: true } },
+      { cover: { id: 1, url: '/uploads/img.jpg' } }
+    );
+    const { result, next } = runMiddleware(baseCtx);
+    await result;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('throws ValidationError when a required media field is empty', async () => {
+    const { runMiddleware } = buildStrapi(
+      { cover: { type: 'media', required: true } },
+      { cover: null }
+    );
+    const { result } = runMiddleware(baseCtx);
+    await expect(result).rejects.toThrow(errors.ValidationError);
+    await expect(result).rejects.toThrow('Cover');
+  });
+
+  it('lists all missing fields in the error message', async () => {
+    const { runMiddleware } = buildStrapi(
+      {
+        cover: { type: 'media', required: true },
+        heroImage: { type: 'media', required: true },
+      },
+      { cover: null, heroImage: null }
+    );
+    const { result } = runMiddleware(baseCtx);
+    await expect(result).rejects.toThrow('Cover');
+    await expect(result).rejects.toThrow('Hero Image');
+  });
+
+  it('only validates required media fields, not optional ones', async () => {
+    const { runMiddleware } = buildStrapi(
+      {
+        cover: { type: 'media', required: true },
+        gallery: { type: 'media', required: false },
+      },
+      { cover: { id: 1 }, gallery: null }
+    );
+    const { result, next } = runMiddleware(baseCtx);
+    await result;
+    expect(next).toHaveBeenCalled();
+  });
+
+  it('populates only required media fields when fetching the document', async () => {
+    const findOne = jest.fn().mockResolvedValue({ cover: { id: 1 } });
+    const strapi = {
+      documents: Object.assign(() => ({ findOne }), {
+        use: jest.fn((fn: Function) => fn(baseCtx, jest.fn().mockResolvedValue(undefined))),
+      }),
+      getModel: jest.fn().mockReturnValue({
+        attributes: {
+          cover: { type: 'media', required: true },
+          title: { type: 'string', required: true },
+        },
+      }),
+    };
+
+    plugin.register({ strapi: strapi as any });
+
+    expect(findOne).toHaveBeenCalledWith({
+      documentId: 'abc123',
+      populate: { cover: true },
+    });
+  });
+});

package/src/server/index.ts

@@ -0,0 +1,44 @@
+import type { Core, UID } from '@strapi/strapi';
+import { errors } from '@strapi/utils';
+
+const register = ({ strapi }: { strapi: Core.Strapi }) => {
+  strapi.documents.use(async (ctx, next) => {
+    if (ctx.action !== 'publish') return next();
+
+    const model = strapi.getModel(ctx.uid as UID.ContentType);
+    if (!model?.attributes) return next();
+
+    const requiredMediaFields = Object.entries(model.attributes)
+      .filter(([, attr]) => (attr as any).type === 'media' && (attr as any).required === true)
+      .map(([key]) => key);
+
+    if (requiredMediaFields.length === 0) return next();
+
+    const documentId = (ctx.params as { documentId?: string })?.documentId;
+    if (!documentId) return next();
+
+    const populate = Object.fromEntries(requiredMediaFields.map((f) => [f, true]));
+    const doc = await strapi.documents(ctx.uid as UID.ContentType).findOne({
+      documentId,
+      populate,
+    });
+
+    const missing = requiredMediaFields.filter((f) => !(doc as any)?.[f]);
+
+    if (missing.length > 0) {
+      const labels = missing
+        .map((f) => f.charAt(0).toUpperCase() + f.slice(1).replace(/([A-Z])/g, ' $1'))
+        .join(', ');
+      throw new errors.ValidationError(
+        `The following required media fields are empty: ${labels}`
+      );
+    }
+
+    return next();
+  });
+};
+
+const bootstrap = (_args: { strapi: Core.Strapi }) => {};
+const destroy = (_args: { strapi: Core.Strapi }) => {};
+
+export default { register, bootstrap, destroy };