Skip to content

Update Users & Permissions documentation#3169

Draft
pwizla wants to merge 9 commits into
mainfrom
cms/update-users-permissions-docs
Draft

Update Users & Permissions documentation#3169
pwizla wants to merge 9 commits into
mainfrom
cms/update-users-permissions-docs

Conversation

@pwizla
Copy link
Copy Markdown
Collaborator

@pwizla pwizla commented May 12, 2026

This PR updates the Users & Permissions documentation based on a full source code audit (v5.45.1).

  • Fix incorrect default values (token lifespans, rate limiting, JWT secret location)
  • Split API usage into dedicated REST API and GraphQL API sub-pages
  • Document all auth, user CRUD, roles, and permissions endpoints with examples
  • Document all 13 GraphQL operations (previously undocumented)
  • Fix provider pages: copy-paste errors, deprecation warnings for Instagram/LinkedIn/Twitter
  • Fix authentication example: wrong defaults, broken code block
  • Fix customization guide: strapi scoping bug in code examples
  • Add actionable content to register-allowed-fields breaking change

pwizla and others added 7 commits May 12, 2026 12:13
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…ng change

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented May 12, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
documentation Ready Ready Preview, Comment May 13, 2026 10:52am

Request Review

@github-actions github-actions Bot added pr: new content PRs for new product features or new documentation sections source: repo PRs/issues not targeting a specific documentation but rather affecting the whole repo labels May 12, 2026
@github-actions github-actions Bot added the internal PRs created by the Strapi core team label May 12, 2026
@pwizla pwizla changed the title Update Users & Permissions documentation from full audit Update Users & Permissions documentation May 12, 2026
@pwizla pwizla self-assigned this May 12, 2026
@pwizla pwizla added the flag: don't merge This PR should not be merged at the moment label May 12, 2026
…on, unique username on provider conflict

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…esh response

- Revert (plugin, { strapi }) to (plugin) in extension examples (runtime TypeError)
- Add refreshToken to refresh endpoint response, document httpOnly variant
- Fix role deletion claim: users are reassigned, no precondition check
- Fix username generation: random number, not incrementing
- Fix "setup" to "set up" (verb) in CAS provider page
- Fix "urls" to "URLs" in Auth0 provider page
- Add missing commas in security configuration section
- Use numerals per style guide ("All 3 fields" not "All three")
- Tighten sentence in register-allowed-fields breaking change

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

flag: don't merge This PR should not be merged at the moment internal PRs created by the Strapi core team pr: new content PRs for new product features or new documentation sections source: repo PRs/issues not targeting a specific documentation but rather affecting the whole repo

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant