82 Commits

Author SHA1 Message Date
Pierre Noël
b0b4135ce0 remove defaults key from stored grant config 2021-11-29 16:05:45 +01:00
Alexandre Bodin
1d6e3ef529 Fix url join 2021-11-29 10:41:26 +01:00
Alexandre BODIN
d3aedca699
Merge pull request #11579 from strapi/v4/allow-access-token-param
Allow access_token query param for auth
2021-11-16 09:34:36 +01:00
Alexandre Bodin
113bea8e7f Support query access_token 2021-11-16 09:25:55 +01:00
Convly
25e62db93a use 'sanitizers' instead of 'utils' 2021-11-10 17:08:54 +01:00
Convly
16ab717fb2 Merge branch 'releases/v4' of github.com:strapi/strapi into v4/new-sanitize-fixes 2021-11-08 15:53:58 +01:00
Convly
8d4f8ddd57 Simplify & abstract common sanitize logic 2021-11-08 15:52:42 +01:00
Convly
05c5e4860e Sanitize user information for email templates 2021-11-05 10:45:25 +01:00
Pierre Noël
c6a5a047d6 Merge branch 'releases/v4' into v4/error-handling 2021-11-05 10:40:11 +01:00
Jean-Sébastien Herbaux
7f285fb755
[V4] Enhanced sanitize & remove restricted relations from content API's payloads (#11411)
* Rework sanitizeEntity, first iteration

* remove console.log

* Remove useless comments

* Fix e2e tests

* Fix up user e2e test

* Fix remove-restricted-relations visitor

* Handle grapqhql resolver, prevent access to restricted relations

* Handle polymorphic relation in the related visitor

* Remove morph attribute if empty

* Use only the find action to check if the relation is allowed
2021-11-04 15:47:53 +01:00
Pierre Noël
b4c9ad0440 refacto graphql errors 2021-11-04 11:42:43 +01:00
Alexandre Bodin
4fa751d519 Move u&p providers urls 2021-10-26 16:51:29 +02:00
Alexandre Bodin
3b472e22f7 Filter action and routes displayed in users-permissions to be in the
content-api

- Remove legacy getPlugins code
2021-10-08 10:12:21 +02:00
Pierre Noël
32eb442cd5 store emails in lowercase + add /api as prefix 2021-09-29 12:04:42 +02:00
Alexandre Bodin
c0c6c2aeab Fix users counter in u&p role list view 2021-09-29 11:27:45 +02:00
Alexandre Bodin
9774e14890 Fixing invalid action name on restart because of lowercasing 2021-09-24 12:23:02 +02:00
Alexandre Bodin
b8d388b4a7 Prefix route in U&P with /api 2021-09-24 09:55:01 +02:00
Alexandre Bodin
0f3f984ea7 Init migration v4
- Hooks registry
- D&P CT migrations
- i18N CT migrations
- Umzug with js / sql migrations
- Eslint updates
2021-09-13 12:03:12 +02:00
Alexandre Bodin
37bacdb691 Start fixing tests 2021-09-07 21:03:30 +02:00
Alexandre Bodin
caee87bc10 Move U&P permissions to new auth system 2021-09-07 15:11:12 +02:00
Alexandre Bodin
b0609c0d96 Make new format compatible with old permissions format in u&p 2021-09-07 15:11:11 +02:00
Alexandre Bodin
33adde77f6 Cleanup create/update role 2021-09-07 15:11:11 +02:00
Alexandre Bodin
733b5d8690 Cleanup u-p plugin 2021-09-07 15:11:10 +02:00
Alexandre Bodin
561235e7cf Refactor u-p permission syntax 2021-09-07 15:11:10 +02:00
Alexandre Bodin
fe5776258d Fix get routes u&p 2021-09-07 15:11:06 +02:00
Alexandre Bodin
d4eef8ea75 Add some lazy loading 2021-09-07 15:11:05 +02:00
Pierre Noël
bc56be3560 Merge branch 'pluginAPI/loadPlugin' of github.com:strapi/strapi into pluginAPI/loadPlugin 2021-08-20 16:32:14 +02:00
Pierre Noël
09945a46df fixes 2021-08-20 15:23:02 +02:00
Alexandre Bodin
575cbbdc7c Migrate plugin getters 2021-08-19 23:30:49 +02:00
Pierre Noël
98719b6c64 migrate plugin structures to V4 2021-08-19 16:49:33 +02:00
Pierre Noël
eabe72f92e WIP 2021-07-26 16:59:59 +02:00
Pierre Noël
1ac226b962 WIP 2021-07-08 11:20:13 +02:00