yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-09-16 12:02:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

accept permissions params for api-tokens

Browse Source
This commit is contained in:
Ben Irvin 2022-08-09 09:59:09 +02:00
parent f208e0c69d
commit 8cc144679d
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
packages/core/admin/server/controllers/api-token.js
View File

@ -24,6 +24,7 @@ module.exports = {
name: trim(body.name), name: trim(body.name),
description: trim(body.description), description: trim(body.description),
type: body.type, type: body.type,
permissions: body.permissions,
}; };
await validateApiTokenCreationInput(attributes); await validateApiTokenCreationInput(attributes);

8
packages/core/admin/server/validation/api-tokens.js
View File

@ -15,6 +15,10 @@ const apiTokenCreationSchema = yup
.string() .string()
.oneOf(Object.values(constants.API_TOKEN_TYPE)) .oneOf(Object.values(constants.API_TOKEN_TYPE))
.required(), .required(),
permissions: yup
.array()
.of(yup.string())
.nullable(),
}) })
.noUnknown(); .noUnknown();
@ -30,6 +34,10 @@ const apiTokenUpdateSchema = yup
.string() .string()
.oneOf(Object.values(constants.API_TOKEN_TYPE)) .oneOf(Object.values(constants.API_TOKEN_TYPE))
.notNull(), .notNull(),
permissions: yup
.array()
.of(yup.string())
.nullable(),
}) })
.noUnknown(); .noUnknown();