78 Commits

Author SHA1 Message Date
Pierre Noël
54fda9c7c0 change error messages 2022-04-07 16:50:20 +02:00
Pierre Noël
89221e8ee9 fix wording mistakes 2022-04-07 16:50:19 +02:00
Pierre Noël
79396f8bbb continue reading API_TOKEN_SALT + add warning deprecated message 2022-04-07 16:50:19 +02:00
Pierre Noël
20e6d9a94b Improve error messages 2022-04-07 16:50:15 +02:00
Pierre Noël
1e6d1ce6a2 fix unit tests 2022-04-07 16:34:58 +02:00
Pierre Noël
019007ba3e improve error message + remove use of API_TOKEN_SALT 2022-04-07 16:34:57 +02:00
Pierre Noël
9fc63af260 harmonize secret generation + don't generate in production mode 2022-04-07 16:34:56 +02:00
Demian Caldelas
69ce8b5287
Fix sanity check for @casl/ability upgrade #12232 (#12265)
* Fix sanity checks for @casl/ability upgrade

* Add comments for previous commit

* Fix sanity checks for @casl/ability upgrade #12232
2022-01-26 09:55:17 +01:00
Alexandre BODIN
cc9a1b7e01
Merge pull request #11983 from tillschweneker/fix-env_path-variable
[FIX] respect custom ENV_PATH
2022-01-19 10:25:12 +01:00
Vincent
b606178332
Interface language usage metrics (#12107)
* feat: sending didChangeInterfaceLanguage event

* fix: registered user model lifecycle hook to send  event

* test: added tests for user and metrics services

* fix: sending event on user delete

* fix: avoid sending event when language is not updated
2022-01-17 17:45:26 +01:00
harimkims
31259dbf4a Remove unnecessary bracket in the end 2022-01-17 14:13:33 +01:00
Kim, Harim
9e8655716d Refactor code
Co-authored-by: Jean-Sébastien Herbaux <jean-sebastien.herbaux@epitech.eu>
2022-01-17 14:13:33 +01:00
harimkims
de69873606 Fix that returns an empty object when the admin user value is null
Signed-off-by: harimkims <harimkims@gmail.com>
2022-01-17 14:13:33 +01:00
harimkims
2ff2ba860e Fix hasMany admin users making app crash
Signed-off-by: harimkims <harimkims@gmail.com>
2022-01-17 14:13:33 +01:00
tillschweneker
ac0c306a0b [FIX] respect custom ENV_PATH when setting API_TOKEN_SALT 2021-12-22 10:08:47 +01:00
Alexandre BODIN
71bdfa3463
Merge pull request #11668 from strapi/v4/remove-sensible-fields-from-admin-user-relations
remove unallowed fields from admin::user relations
2021-11-25 10:51:02 +01:00
Dieter Stinglhamber
ba25b7b651 remove unallowed fields from admin::user relations 2021-11-24 15:15:23 +01:00
Convly
fdefb1382c Use a custom findOneByEmail to search for existing user 2021-11-23 12:16:54 +01:00
Convly
091d360f7b Fix missing permission for empty components in CTs 2021-11-17 16:57:22 +01:00
Convly
25e62db93a use 'sanitizers' instead of 'utils' 2021-11-10 17:08:54 +01:00
Convly
16ab717fb2 Merge branch 'releases/v4' of github.com:strapi/strapi into v4/new-sanitize-fixes 2021-11-08 15:53:58 +01:00
Convly
8d4f8ddd57 Simplify & abstract common sanitize logic 2021-11-08 15:52:42 +01:00
Pierre Noël
c6a5a047d6 Merge branch 'releases/v4' into v4/error-handling 2021-11-05 10:40:11 +01:00
Convly
d6516116b2 Move pipeAsync to @strapi/utils 2021-11-04 16:43:27 +01:00
Jean-Sébastien Herbaux
7f285fb755
[V4] Enhanced sanitize & remove restricted relations from content API's payloads (#11411)
* Rework sanitizeEntity, first iteration

* remove console.log

* Remove useless comments

* Fix e2e tests

* Fix up user e2e test

* Fix remove-restricted-relations visitor

* Handle grapqhql resolver, prevent access to restricted relations

* Handle polymorphic relation in the related visitor

* Remove morph attribute if empty

* Use only the find action to check if the relation is allowed
2021-11-04 15:47:53 +01:00
Pierre Noël
b4c9ad0440 refacto graphql errors 2021-11-04 11:42:43 +01:00
Pierre Noël
b58274aecb refactor error handling 2021-11-04 11:41:29 +01:00
Alexandre Bodin
9cd59197b1 Fix tests and move api token config to use camelcase naming 2021-10-26 12:18:53 +02:00
Alexandre Bodin
a33d9e56be Move admin config to config/admin.js 2021-10-26 12:12:02 +02:00
Dieter Stinglhamber
ed83cc353c implement the ListView for the API Tokens 2021-10-25 09:15:03 +02:00
Alexandre Bodin
15e18be98c Add current password requirement to edit own profile password 2021-10-21 13:20:57 +02:00
Alexandre BODIN
9ae4f28928
Merge pull request #11082 from strapi/v4/fix-user-sort
fix sort on admin user
2021-09-27 18:24:51 +02:00
Pierre Noël
995c5c86b9 clean code 2021-09-27 16:44:05 +02:00
Pierre Noël
6ba4ce561f lower email when login using local provider 2021-09-27 16:40:04 +02:00
Pierre Noël
95d9b19588 fix sort on admin user 2021-09-27 16:06:43 +02:00
Pierre Noël
491a662692 clean some code 2021-09-27 12:28:17 +02:00
Pierre Noël
0f123ceb39 fix RBAC 2021-09-27 11:08:48 +02:00
Pierre Noël
d02c7ab741 Use new filters format in the upload plugin 2021-09-27 11:08:47 +02:00
Alexandre Bodin
60cbb448f6 Make perm compare accurate 2021-09-25 00:59:53 +02:00
Dieter Stinglhamber
1a72747672 add api-token auth strategy to the content-api 2021-09-24 12:06:56 +02:00
Dieter Stinglhamber
31d74d2710 allow for partial payload to update a token 2021-09-24 12:05:40 +02:00
Dieter Stinglhamber
f7bd99cb74 implement PUT endpoint to update a token 2021-09-24 12:05:40 +02:00
Dieter Stinglhamber
78e5bd98d3 update tests and rename get method 2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
f791c21cc9 fix typos 2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
a4e0df4ce8 implement GET endpoint to get a single token 2021-09-24 12:05:39 +02:00
Dieter Stinglhamber
c143d58bc1 fix typos 2021-09-24 12:05:38 +02:00
Dieter Stinglhamber
930156a574 return deleted token 2021-09-24 12:05:38 +02:00
Dieter Stinglhamber
946d3a0ea3 add DELETE route and logic 2021-09-24 12:05:38 +02:00
Dieter Stinglhamber
643f26975d use plain text in tests in favor of constants 2021-09-24 12:05:38 +02:00
Dieter Stinglhamber
3321aaa92c extract token types in a constant 2021-09-24 12:05:38 +02:00