Alexandre Bodin
42b87679bb
Refactor policies to have a consistent factory API like middlewares
2021-11-08 09:33:36 +01:00
Pierre Noël
c6a5a047d6
Merge branch 'releases/v4' into v4/error-handling
2021-11-05 10:40:11 +01:00
Pierre Noël
db1cb3040c
refactor error-handling PR
2021-11-05 10:13:43 +01:00
Convly
d6516116b2
Move pipeAsync to @strapi/utils
2021-11-04 16:43:27 +01:00
Jean-Sébastien Herbaux
7f285fb755
[V4] Enhanced sanitize & remove restricted relations from content API's payloads ( #11411 )
...
* Rework sanitizeEntity, first iteration
* remove console.log
* Remove useless comments
* Fix e2e tests
* Fix up user e2e test
* Fix remove-restricted-relations visitor
* Handle grapqhql resolver, prevent access to restricted relations
* Handle polymorphic relation in the related visitor
* Remove morph attribute if empty
* Use only the find action to check if the relation is allowed
2021-11-04 15:47:53 +01:00
Convly
14d6a5b2c4
Fix users-permissions user controllers permissions
2021-11-04 15:18:09 +01:00
Alexandre Bodin
8a018619ef
Add /plugins list api and update description to be plain english for now
2021-11-04 12:01:49 +01:00
Pierre Noël
cb098ec280
clean yup validations
2021-11-04 11:42:45 +01:00
Pierre Noël
194321591e
fix EE e2e tests
2021-11-04 11:42:43 +01:00
Pierre Noël
b4c9ad0440
refacto graphql errors
2021-11-04 11:42:43 +01:00
Pierre Noël
0a6200ac2f
fix unit tests
2021-11-04 11:42:40 +01:00
Pierre Noël
b58274aecb
refactor error handling
2021-11-04 11:41:29 +01:00
Dieter Stinglhamber
8191be8a10
enable API token strategy
2021-11-02 10:48:15 +01:00
Alexandre Bodin
9cd59197b1
Fix tests and move api token config to use camelcase naming
2021-10-26 12:18:53 +02:00
Alexandre Bodin
a33d9e56be
Move admin config to config/admin.js
2021-10-26 12:12:02 +02:00
Dieter Sting
ed64650c25
Merge pull request #11298 from strapi/features/api-token-fe
...
Implement the UI for the API Tokens
2021-10-26 09:20:20 +02:00
Dieter Stinglhamber
ed83cc353c
implement the ListView for the API Tokens
2021-10-25 09:15:03 +02:00
Pierre Noël
6fd9f780c7
Merge branch 'v4/ctb' into v4/plural-name-in-CTB
2021-10-22 12:33:48 +02:00
Alexandre BODIN
bd5a1106e9
Update packages/core/admin/server/controllers/authenticated-user.js
2021-10-21 15:31:05 +02:00
Alexandre Bodin
15e18be98c
Add current password requirement to edit own profile password
2021-10-21 13:20:57 +02:00
Alexandre Bodin
3d04f9bfb2
Update the snapshots
2021-10-20 18:15:53 +02:00
Alexandre Bodin
cc52a93a47
Use array checks in api-token aut strategy
2021-10-11 12:29:38 +02:00
Alexandre Bodin
c1c6dd4c11
Harmonize registries and simplify listing commands
2021-10-07 13:06:40 +02:00
Alexandre Bodin
c1aa57f436
Harmonize and make policies and middlwares more consistent
2021-10-05 10:43:24 +02:00
Alexandre Bodin
6ef3e1deb6
Migrate plugin generator and fix some internal issues to make everything compatible
2021-09-30 11:40:54 +02:00
Pierre Noël
947981200b
use { strapi } as params in all lifecycle functions
2021-09-28 16:54:07 +02:00
Dieter Stinglhamber
17742d2153
update tests to avoid false negative
2021-09-28 11:17:44 +02:00
Alexandre BODIN
9ae4f28928
Merge pull request #11082 from strapi/v4/fix-user-sort
...
fix sort on admin user
2021-09-27 18:24:51 +02:00
Pierre Noël
995c5c86b9
clean code
2021-09-27 16:44:05 +02:00
Pierre Noël
6ba4ce561f
lower email when login using local provider
2021-09-27 16:40:04 +02:00
Pierre Noël
95d9b19588
fix sort on admin user
2021-09-27 16:06:43 +02:00
Pierre Noël
491a662692
clean some code
2021-09-27 12:28:17 +02:00
Pierre Noël
0f123ceb39
fix RBAC
2021-09-27 11:08:48 +02:00
Pierre Noël
d02c7ab741
Use new filters format in the upload plugin
2021-09-27 11:08:47 +02:00
Alexandre Bodin
60cbb448f6
Make perm compare accurate
2021-09-25 00:59:53 +02:00
Alexandre BODIN
87d79388c1
Merge pull request #11064 from strapi/v4/refactor-policy-api
...
[v4] Refactor policy API
2021-09-24 18:44:21 +02:00
Dieter Stinglhamber
14a0ba9ee3
comment the api-token auth strategy
2021-09-24 12:07:31 +02:00
Dieter Stinglhamber
edeca8a6ce
fix issue with string and number id comparaison
2021-09-24 12:07:00 +02:00
Dieter Stinglhamber
b9b98c620c
improve scope matching and verification failures
2021-09-24 12:07:00 +02:00
Dieter Sting
0db6950d9d
fix typo
...
Co-authored-by: Alexandre BODIN <alexandrebodin@users.noreply.github.com>
2021-09-24 12:07:00 +02:00
Dieter Stinglhamber
4b6704d2ae
fix unit tests
2021-09-24 12:07:00 +02:00
Dieter Stinglhamber
1a72747672
add api-token auth strategy to the content-api
2021-09-24 12:06:56 +02:00
Dieter Stinglhamber
5bc7c4462a
fix typo
2021-09-24 12:05:40 +02:00
Dieter Stinglhamber
31d74d2710
allow for partial payload to update a token
2021-09-24 12:05:40 +02:00
Dieter Stinglhamber
f7bd99cb74
implement PUT endpoint to update a token
2021-09-24 12:05:40 +02:00
Dieter Stinglhamber
ca668c78e8
store the hashed accessKey in the database
2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
b50afb69d5
implement POST endpoint to create api tokens
2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
78e5bd98d3
update tests and rename get method
2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
f791c21cc9
fix typos
2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
a4e0df4ce8
implement GET endpoint to get a single token
2021-09-24 12:05:39 +02:00