strapi-typed-client 1.0.2 → 1.0.3

package/dist/plugin/server/src/controllers/schema.d.ts

@@ -6,6 +6,9 @@ export interface StrapiContext {
     state: {
         user?: unknown;
     };
+    request: {
+        header: Record<string, string | undefined>;
+    };
     unauthorized: (message: string) => void;
     body: unknown;
 }
@@ -19,6 +22,7 @@ export interface StrapiInstance {
             getSchemaHash: () => unknown;
         };
     };
+    service: (uid: string) => any;
     log: {
         error: (message: string, error?: unknown) => void;
     };

package/dist/plugin/server/src/controllers/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/server/src/controllers/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE;QACH,IAAI,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE;QACJ,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,OAAO,CAAA;KACxD,CAAA;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QACtB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;YACvB,SAAS,EAAE,MAAM,OAAO,CAAA;YACxB,aAAa,EAAE,MAAM,OAAO,CAAA;SAC/B,CAAA;KACJ,CAAA;IACD,GAAG,EAAE;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;KACpD,CAAA;CACJ;yBAEe,YAAY;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE;IAClD;;;OAGG;mBACkB,aAAa;IAwBlC;;;OAGG;uBACsB,aAAa;;AAjC1C,wBA0DE"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/server/src/controllers/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE;QACH,IAAI,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,OAAO,EAAE;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAC7C,CAAA;IACD,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE;QACJ,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,KAAK,OAAO,CAAA;KACxD,CAAA;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QACtB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;YACvB,SAAS,EAAE,MAAM,OAAO,CAAA;YACxB,aAAa,EAAE,MAAM,OAAO,CAAA;SAC/B,CAAA;KACJ,CAAA;IACD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAA;IAC7B,GAAG,EAAE;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;KACpD,CAAA;CACJ;yBA6Be,YAAY;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE;IAClD;;;OAGG;mBACkB,aAAa;IA4BlC;;;OAGG;uBACsB,aAAa;;AArC1C,wBAgEE"}

package/dist/plugin/server/src/controllers/schema.js

@@ -2,16 +2,42 @@
  * Schema controller for Strapi Types Plugin
  * Exposes endpoints for fetching schema and schema hash
  */
+/**
+ * Manually validate an API token since routes use auth: false
+ * (Strapi skips its auth middleware when auth: false is set)
+ */
+async function validateApiToken(strapi, ctx) {
+    // Already authenticated via other means
+    if (ctx.state.user)
+        return true;
+    const authorization = ctx.request.header.authorization;
+    if (!authorization)
+        return false;
+    const [scheme, token] = authorization.split(' ');
+    if (scheme !== 'Bearer' || !token)
+        return false;
+    try {
+        const apiTokenService = strapi.service('admin::api-token');
+        const accessKey = await apiTokenService.hash(token);
+        const storedToken = await apiTokenService.getBy({ accessKey });
+        return !!storedToken;
+    }
+    catch {
+        return false;
+    }
+}
 export default ({ strapi }) => ({
     /**
      * GET /api/strapi-types/schema
      * Returns the full schema with hash
      */
     async getSchema(ctx) {
-        // Check auth based on config
         const requireAuth = strapi.config.get('plugin::strapi-typed-client.requireAuth', process.env.NODE_ENV === 'production');
-        if (requireAuth && !ctx.state.user) {
-            return ctx.unauthorized('Authentication required to access schema');
+        if (requireAuth) {
+            const isAuthenticated = await validateApiToken(strapi, ctx);
+            if (!isAuthenticated) {
+                return ctx.unauthorized('Authentication required to access schema');
+            }
         }
         try {
             const schemaService = strapi
@@ -30,10 +56,12 @@ export default ({ strapi }) => ({
      * Returns only the schema hash (lightweight)
      */
     async getSchemaHash(ctx) {
-        // Check auth based on config
         const requireAuth = strapi.config.get('plugin::strapi-typed-client.requireAuth', process.env.NODE_ENV === 'production');
-        if (requireAuth && !ctx.state.user) {
-            return ctx.unauthorized('Authentication required to access schema hash');
+        if (requireAuth) {
+            const isAuthenticated = await validateApiToken(strapi, ctx);
+            if (!isAuthenticated) {
+                return ctx.unauthorized('Authentication required to access schema hash');
+            }
         }
         try {
             const schemaService = strapi

package/dist/plugin/server/src/controllers/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../src/plugin/server/src/controllers/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyBH,eAAe,CAAC,EAAE,MAAM,EAA8B,EAAE,EAAE,CAAC,CAAC;IACxD;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,GAAkB;QAC9B,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CACjC,yCAAyC,EACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CACxC,CAAA;QAED,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC,YAAY,CAAC,0CAA0C,CAAC,CAAA;QACvE,CAAC;QAED,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM;iBACvB,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;YAExC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;YACnD,MAAM,KAAK,CAAA;QACf,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,GAAkB;QAClC,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CACjC,yCAAyC,EACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CACxC,CAAA;QAED,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC,YAAY,CACnB,+CAA+C,CAClD,CAAA;QACL,CAAC;QAED,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM;iBACvB,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,EAAE,CAAA;YAE5C,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;YACvD,MAAM,KAAK,CAAA;QACf,CAAC;IACL,CAAC;CACJ,CAAC,CAAA"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../src/plugin/server/src/controllers/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6BH;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC3B,MAAsB,EACtB,GAAkB;IAElB,wCAAwC;IACxC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAE/B,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAA;IACtD,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAA;IAEhC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAE/C,IAAI,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC1D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,WAAW,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED,eAAe,CAAC,EAAE,MAAM,EAA8B,EAAE,EAAE,CAAC,CAAC;IACxD;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,GAAkB;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CACjC,yCAAyC,EACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CACxC,CAAA;QAED,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,YAAY,CACnB,0CAA0C,CAC7C,CAAA;YACL,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM;iBACvB,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;YAExC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;YACnD,MAAM,KAAK,CAAA;QACf,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,GAAkB;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CACjC,yCAAyC,EACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CACxC,CAAA;QAED,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,YAAY,CACnB,+CAA+C,CAClD,CAAA;YACL,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM;iBACvB,MAAM,CAAC,qBAAqB,CAAC;iBAC7B,OAAO,CAAC,QAAQ,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,EAAE,CAAA;YAE5C,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;YACvD,MAAM,KAAK,CAAA;QACf,CAAC;IACL,CAAC;CACJ,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "strapi-typed-client",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "type": "module",
     "description": "Type-safe Strapi v5 client with automatic TypeScript codegen and populate type inference",
     "main": "dist/index.js",