86 Commits

Author SHA1 Message Date
Abdón Rodríguez Davila
46cf9b88f1
Merge branch 'master' into split-auth-providers 2022-01-25 13:44:27 +01:00
Pierre Noël
e230827335 fix dynamic callback 2022-01-19 17:12:59 +01:00
Pierre Noël
c4fee8e676 use strapi.log.info + replace uuid by crypto + remove dead code 2022-01-19 17:12:57 +01:00
Pierre Noël
da9b064536 add session middleware + remove authentication using url param access_token 2022-01-19 17:10:41 +01:00
Alexandre BODIN
cc9a1b7e01
Merge pull request #11983 from tillschweneker/fix-env_path-variable
[FIX] respect custom ENV_PATH
2022-01-19 10:25:12 +01:00
Abdón Rodríguez Davila
59d151644f Split providers and grant config to a new files
Signed-off-by: Abdón Rodríguez Davila <a@abdonrd.com>
2022-01-13 16:37:50 +01:00
Pierre Noël
d4b59a1029 fix confirmation url missing the api prefix 2022-01-10 18:13:19 +01:00
Kim, Harim
0fd0f57126
Fix Update user does not update component attribute (#11871)
* use entityService to update user instead of old query, add update test

Signed-off-by: harimkims <harimkims@gmail.com>

* fix e2e test

* Add component update test

* Remove console.log

Co-authored-by: Jean-Sébastien Herbaux <jean-sebastien.herbaux@epitech.eu>
2022-01-05 15:54:58 +01:00
tillschweneker
6ba1a78cc7 [FIX] respect custom ENV_PATH when setting JWT_SECRET 2021-12-22 10:15:15 +01:00
Kim, Harim
bd0aa9e9f5
Fix unable to reset password in GraphQL mutation (#11964)
Signed-off-by: harimkims <harimkims@gmail.com>
2021-12-21 11:45:18 +01:00
harimkims
26c8dfbe5f send filter in context query
Signed-off-by: harimkims <harimkims@gmail.com>
2021-12-14 19:30:24 +09:00
harimkims
74dee39682 Fix unable to filter users, add e2e test 2021-12-04 21:50:54 +09:00
DMehaffy
7e874e00a0 Update all documentation links to new docs url (#11424)
Signed-off-by: Derrick Mehaffy <derrickmehaffy@gmail.com>
2021-11-29 18:13:52 +01:00
Pierre Noël
b0b4135ce0 remove defaults key from stored grant config 2021-11-29 16:05:45 +01:00
Alexandre Bodin
1d6e3ef529 Fix url join 2021-11-29 10:41:26 +01:00
Dieter Stinglhamber
0446793ee9 use pluginOption visibility 2021-11-23 10:37:08 +01:00
Alexandre BODIN
d3aedca699
Merge pull request #11579 from strapi/v4/allow-access-token-param
Allow access_token query param for auth
2021-11-16 09:34:36 +01:00
Alexandre Bodin
113bea8e7f Support query access_token 2021-11-16 09:25:55 +01:00
Alexandre BODIN
f4facb654b
Merge pull request #11475 from strapi/v4/new-sanitize-fixes
[V4] Enhancements for the new sanitize processes
2021-11-12 14:52:47 +01:00
Convly
25e62db93a use 'sanitizers' instead of 'utils' 2021-11-10 17:08:54 +01:00
Convly
07fef39592 Merge branch 'releases/v4' of github.com:strapi/strapi into v4/up-resolvers-picker-fix 2021-11-09 18:38:20 +01:00
Pierre Noël
36395aab78 allow unknown parameters for user creation of this UP plugin 2021-11-09 15:42:46 +01:00
Convly
16ab717fb2 Merge branch 'releases/v4' of github.com:strapi/strapi into v4/new-sanitize-fixes 2021-11-08 15:53:58 +01:00
Convly
8d4f8ddd57 Simplify & abstract common sanitize logic 2021-11-08 15:52:42 +01:00
Convly
05c5e4860e Sanitize user information for email templates 2021-11-05 10:45:25 +01:00
Pierre Noël
c6a5a047d6 Merge branch 'releases/v4' into v4/error-handling 2021-11-05 10:40:11 +01:00
Jean-Sébastien Herbaux
7f285fb755
[V4] Enhanced sanitize & remove restricted relations from content API's payloads (#11411)
* Rework sanitizeEntity, first iteration

* remove console.log

* Remove useless comments

* Fix e2e tests

* Fix up user e2e test

* Fix remove-restricted-relations visitor

* Handle grapqhql resolver, prevent access to restricted relations

* Handle polymorphic relation in the related visitor

* Remove morph attribute if empty

* Use only the find action to check if the relation is allowed
2021-11-04 15:47:53 +01:00
Convly
14d6a5b2c4 Fix users-permissions user controllers permissions 2021-11-04 15:18:09 +01:00
Pierre Noël
cb098ec280 clean yup validations 2021-11-04 11:42:45 +01:00
Pierre Noël
b4c9ad0440 refacto graphql errors 2021-11-04 11:42:43 +01:00
Pierre Noël
b58274aecb refactor error handling 2021-11-04 11:41:29 +01:00
Alexandre Bodin
4fa751d519 Move u&p providers urls 2021-10-26 16:51:29 +02:00
Alexandre BODIN
5501518e6c
Merge pull request #11219 from strapi/v4/content-api-actions
Filter action and routes displayed in users-permissions to be in the content-api
2021-10-11 16:06:34 +02:00
Alexandre BODIN
0ac9d88f28
Merge pull request #11183 from strapi/v4/destroy-lifecycle
add destroy lifecycle for user + register rateLimit middleware
2021-10-11 08:50:53 +02:00
Pierre Noël
14f9a9c847 Handle SIGINT and SIGTERM signals + fix sentry being initiated twice 2021-10-08 11:42:13 +02:00
Alexandre Bodin
3b472e22f7 Filter action and routes displayed in users-permissions to be in the
content-api

- Remove legacy getPlugins code
2021-10-08 10:12:21 +02:00
Alexandre Bodin
c1aa57f436 Harmonize and make policies and middlwares more consistent 2021-10-05 10:43:24 +02:00
Pierre Noël
7c1c2d43f3 add destroy lifecycle for user + register rateLimit middleware 2021-10-04 16:47:30 +02:00
Pierre Noël
32eb442cd5 store emails in lowercase + add /api as prefix 2021-09-29 12:04:42 +02:00
Alexandre Bodin
c0c6c2aeab Fix users counter in u&p role list view 2021-09-29 11:27:45 +02:00
Pierre Noël
947981200b use { strapi } as params in all lifecycle functions 2021-09-28 16:54:07 +02:00
Convly
20b20a0f92 Fix e2e test for UP, i18n & upload + various i18n fixes 2021-09-27 17:17:24 +02:00
Convly
ef3650f073 Merge branch 'releases/v4' into v4/graphql-schema-generation-refactor 2021-09-27 10:33:31 +02:00
Alexandre BODIN
4fadcdee91
Merge pull request #11029 from strapi/features/api-token
API Token backend implementation
2021-09-24 14:21:10 +02:00
Alexandre Bodin
9774e14890 Fixing invalid action name on restart because of lowercasing 2021-09-24 12:23:02 +02:00
Dieter Stinglhamber
b9b98c620c improve scope matching and verification failures 2021-09-24 12:07:00 +02:00
Dieter Stinglhamber
6c6328bc0d remove console.log statement 2021-09-24 12:07:00 +02:00
Dieter Stinglhamber
1a72747672 add api-token auth strategy to the content-api 2021-09-24 12:06:56 +02:00
Alexandre Bodin
b8d388b4a7 Prefix route in U&P with /api 2021-09-24 09:55:01 +02:00
Alexandre Bodin
7cf05bfb10 Move CM files into the new structure 2021-09-24 09:04:44 +02:00