63 Commits
Author SHA1 Message Date
Jamie Howard 16559ac3c8 fix(users-permissions): implement session revocation on password changes (#25168) 2026-01-13 09:41:45 +01:00
Jamie Howard 3d65d99e83 [Community PR] support httpOnly cookie for refresh token (#24954)
* fix(users-permissions): support httpOnly cookie for refresh token in /auth/refresh endpoint

* test(auth): reduce duplication in test

* test(auth): further duplication reduction
2026-01-09 09:10:20 +00:00
Jamie Howard 91f3ae970f enhancement: cookie security configuration (#24524) 2025-10-14 09:15:09 +02:00
Jamie Howard d23f1485e5 feat: Advanced Session Configuration (#24346) 2025-09-23 12:04:29 +02:00
Andrei LucaandJamie Howard 7bc7b72479 fix(plugins/users): remove redundant grant-koa dependency in favor of grant.koa (#22622)
Co-authored-by: Jamie Howard <48524071+jhoward1994@users.noreply.github.com>
2025-01-27 11:58:37 +00:00
Bassel Kanso 483fc83a30 fix: refactoring validation methods 2024-10-02 12:03:28 +03:00
Bassel Kanso f4fb74d10c fix: prettier issue 2024-09-27 11:07:29 +03:00
Bassel Kanso a663bc54a4 feat: add password rules config to users-permissions 2024-09-27 10:54:37 +03:00
Alexandre Bodin da64f1575a fix: emailConfirmation broken 2024-09-16 10:26:16 +02:00
Convly 481550a0d4 Merge branch 'refs/heads/develop' into v5/main
# Conflicts:
#	.github/actions/check-pr-status/package.json
#	docs/docs/docs/01-core/admin/05-features/authentication.md
#	docs/docusaurus.config.js
#	docs/yarn.lock
#	examples/getstarted/package.json
#	examples/kitchensink-ts/package.json
#	examples/kitchensink/package.json
#	examples/plugins/workspace-plugin/package.json
#	lerna.json
#	package.json
#	packages/admin-test-utils/package.json
#	packages/cli/create-strapi-app/package.json
#	packages/cli/create-strapi-starter/package.json
#	packages/cli/create-strapi/package.json
#	packages/core/admin/admin/src/App.tsx
#	packages/core/admin/admin/src/components/AuthenticatedApp.tsx
#	packages/core/admin/admin/src/components/Context.tsx
#	packages/core/admin/admin/src/components/LeftMenu.tsx
#	packages/core/admin/admin/src/components/PrivateRoute.tsx
#	packages/core/admin/admin/src/content-manager/pages/ListSettingsView/index.jsx
#	packages/core/admin/admin/src/content-manager/pages/ListView/components/BulkActions/PublishAction.tsx
#	packages/core/admin/admin/src/content-manager/pages/ListView/components/TableCells/CellContent.tsx
#	packages/core/admin/admin/src/features/Configuration.tsx
#	packages/core/admin/admin/src/index.ts
#	packages/core/admin/admin/src/pages/ProfilePage.tsx
#	packages/core/admin/admin/src/pages/UseCasePage.tsx
#	packages/core/admin/ee/server/src/services/metrics.ts
#	packages/core/admin/package.json
#	packages/core/admin/server/src/bootstrap.ts
#	packages/core/content-manager/package.json
#	packages/core/content-releases/admin/src/components/CMReleasesContainer.tsx
#	packages/core/content-releases/admin/src/components/ReleaseListCell.tsx
#	packages/core/content-releases/admin/src/index.ts
#	packages/core/content-releases/admin/src/pages/ReleaseDetailsPage.tsx
#	packages/core/content-releases/admin/src/pages/tests/ReleaseDetailsPage.test.tsx
#	packages/core/content-releases/admin/src/services/release.ts
#	packages/core/content-releases/package.json
#	packages/core/content-releases/server/src/controllers/release.ts
#	packages/core/content-type-builder/package.json
#	packages/core/core/.gitignore
#	packages/core/data-transfer/package.json
#	packages/core/database/package.json
#	packages/core/database/src/query/helpers/populate/apply.ts
#	packages/core/email/package.json
#	packages/core/helper-plugin/package.json
#	packages/core/permissions/package.json
#	packages/core/strapi/package.json
#	packages/core/types/package.json
#	packages/core/upload/admin/src/components/AssetDialog/BrowseStep/tests/__snapshots__/index.test.jsx.snap
#	packages/core/upload/admin/src/pages/App/ConfigureTheView/components/tests/__snapshots__/Settings.test.jsx.snap
#	packages/core/upload/admin/src/pages/App/ConfigureTheView/tests/__snapshots__/ConfigureTheView.test.jsx.snap
#	packages/core/upload/package.json
#	packages/core/upload/server/services/provider.js
#	packages/core/upload/server/services/upload.js
#	packages/core/upload/server/src/services/image-manipulation.ts
#	packages/core/upload/server/tsconfig.eslint.json
#	packages/core/utils/package.json
#	packages/generators/app/package.json
#	packages/generators/app/src/utils/db-client-dependencies.ts
#	packages/generators/generators/package.json
#	packages/plugins/cloud/package.json
#	packages/plugins/color-picker/package.json
#	packages/plugins/documentation/package.json
#	packages/plugins/graphql/package.json
#	packages/plugins/i18n/admin/src/components/LocaleListCell.tsx
#	packages/plugins/i18n/admin/src/contentReleasesHooks/releaseDetailsView.ts
#	packages/plugins/i18n/admin/src/index.ts
#	packages/plugins/i18n/package.json
#	packages/plugins/sentry/package.json
#	packages/plugins/users-permissions/package.json
#	packages/providers/email-amazon-ses/package.json
#	packages/providers/email-mailgun/package.json
#	packages/providers/email-nodemailer/package.json
#	packages/providers/email-sendgrid/package.json
#	packages/providers/email-sendmail/package.json
#	packages/providers/upload-aws-s3/package.json
#	packages/providers/upload-cloudinary/package.json
#	packages/providers/upload-local/package.json
#	packages/utils/api-tests/package.json
#	packages/utils/eslint-config-custom/package.json
#	packages/utils/logger/package.json
#	packages/utils/tsconfig/package.json
#	packages/utils/typescript/package.json
#	packages/utils/upgrade/LICENSE
#	packages/utils/upgrade/bin/upgrade.js
#	packages/utils/upgrade/package.json
#	packages/utils/upgrade/packup.config.ts
#	scripts/front/package.json
#	tests/e2e/constants.ts
#	tests/e2e/tests/content-releases/releases-page.spec.ts
#	yarn.lock
2024-05-30 13:12:27 +02:00
Convly 59a1c00f8c enhancement: improve callback URL validation 2024-04-17 16:24:18 +02:00
Convly e762295cbe enhancement: add validation for custom U&P OAuth callbacks 2024-04-05 09:12:04 +02:00
Alexandre Bodin e68afb0e1e chore: inverse control of contentAPI sanitize & validate 2024-03-21 22:26:41 +01:00
Alexandre Bodin a95285578b chore: database enhancements 2024-03-13 22:13:40 +01:00
Alexandre Bodin 5ffb3c7100 chore: deprecate entity-service and delegate to document service 2024-03-12 21:02:33 +01:00
Ben Irvin ab2af1e539 fix(core): use module uid for config namespace instead of dot notation 2024-03-11 12:28:46 +01:00
Alexandre Bodin 41da5d47c9 chore: setup configuration in one place only 2024-01-23 14:36:43 +01:00
Ben Irvin 17f8ef0d9b fix: tests and logging 2024-01-16 18:22:14 +01:00
Ben Irvin 8263926b47 feat: register.allowedFields defaults to empty array 2024-01-16 18:14:32 +01:00
Kushal Kanungo ae06d7f100 changed the error type from application to forbidden 2023-09-12 20:24:43 +05:30
Kushal Kanungo a8149c55fd fix: blocked users can still login via provider 2023-09-06 11:05:39 +05:30
Ben Irvin 7cbd31e19c add allowedFields feature 2023-08-25 13:44:44 +02:00
derrickmehaffy 773db0dcaf add role as a failsafe 2023-04-17 08:08:19 -07:00
derrickmehaffy 52f5b7a16e update blacklist with all system fields 2023-04-17 07:30:28 -07:00
Alexandre Bodin cf49ddbbfc Prettier and backend fix 2022-08-11 10:20:49 +02:00
Alexandre Bodin 0ae14c06cb 1st fix pass 2022-08-11 10:20:48 +02:00
Alexandre Bodin dd357e63e6 Put missing code back 2022-08-11 10:04:46 +02:00
Alexandre Bodin a25a65918c Move to Post and cleanup validation 2022-08-03 16:46:41 +02:00
Alexandre Bodin fbc7e882f4 Apply feedback and finish some tasks 2022-08-02 20:58:37 +02:00
Alexandre Bodin 85b3e7de32 Merge branch 'master' into feature/user-permissions-change-password 2022-08-02 20:22:13 +02:00
Alexandre Bodin f7f9ecc898 Fix check login before checking status 2022-06-01 20:35:43 +02:00
Alexandre Bodin bb5500fe0b Remove console.log 2022-06-01 20:13:57 +02:00
Alexandre Bodin 291e2b6835 Cleanup email confirmation api 2022-06-01 17:59:30 +02:00
Alexandre Bodin e42e6444d7 Refactor providers and cleanup auth code 2022-06-01 16:22:19 +02:00
Alexandre Bodin 9c81bcaacb Fix username vs email registration and login issues 2022-05-31 19:38:08 +02:00
Alexandre Bodin 4f02ba6b74 wip 2022-05-31 14:06:58 +02:00
Alexandre Bodin aac0e2b465 Merge branch 'master' of github.com:strapi/strapi into fix/mime-type-migration 2022-05-14 09:00:44 +02:00
Sergey 6e7b77c9e2 fix: userService.fetch applies id only and should be replaced by fetchAll 2022-05-11 21:31:11 +02:00
Kai-Siang Wang 95879d9c17 feat: upgrade purest package to v4 2022-03-30 13:57:49 +08:00
Pierre Noël 6df5d8d11f Merge pull request #12771 from marlonbaeten/master
Add SERVER_URL variable to user e-mail templates
2022-03-21 14:44:59 +01:00
Marlon Baeten 03028a763f Added ADMIN_URL to email templates 2022-03-21 11:04:54 +01:00
WalkingPizza c0a7ff801b Allow users to change own password 2022-03-20 19:50:08 +01:00
Marlon dbc8aae306 Fix getAbsoluteServerUrl import in auth.js 2022-03-14 10:09:49 +01:00
Mark Kaylor a58c2bc035 Merge branch 'master' of github.com:strapi/strapi into strapi-market-release 2022-03-11 11:08:17 +01:00
Kevin Antonio Rateni Iatauro ba73a398dd Removed user not found error 2022-03-10 17:51:47 +01:00
Kevin Antonio Rateni Iatauro 39db68bcbf Merge branch 'strapi:master' into fix/up-email-confirmation-user-not-found 2022-03-10 11:39:47 +01:00
Marlon Baeten 1028fefb7f Add SERVER_URL variable to user e-mail templates 2022-03-07 16:08:47 +01:00
thomas-br c85208bf97 Merge branch 'patch-1' of github.com:thomas-br/strapi into patch-1 2022-01-29 22:33:34 +01:00
thomas-br e602d645be correcting entity update 2022-01-29 22:16:18 +01:00
WalkingPizza a49141679c Handle user not found error in email confirmation 2022-01-28 22:03:23 +01:00