blocks|key|148315|text|在Strapi+v4中，它似乎被sanitizeOutput函数所取代。它接受实体，但看起来也需要传递上下文(ctx)。不过，官方文件中并没有对此作任何描述。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|148316|entityMap^0|G|E|1J|3|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

In Strapi v4 it looks like it's replaced by <code>sanitizeOutput</code> function. It accepts the entity but looks like it needs context (<code>ctx</code>) to be passed too. It is not described anywhere in the official documentation though.

blocks|key|77589|text|您需要使用"@strapi/utils“中的"sanitize”实用程序。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|77590|const+{+sanitize+}+=+require('@strapi/utils');

module.exports+=+createCoreController('api::payment.payment',+({+strapi+})+=>+({
++async+create(ctx)+{
++++const+entity+=+await+strapi.entityService.create('api::payment.payment',+{
++++++data:+{
++++++++field1:+1,
++++++++field2:+2,
++++++},
++++});
++++const+sanitizedEntity+=+await+sanitize.contentAPI.output(entity);

++++return+{+data:+sanitizedEntity+};
++},
}));|code-block|syntax|javascript|77591|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You need to use the &quot;sanitize&quot; utility from &quot;@strapi/utils&quot;.
<pre><code>const { sanitize } = require('@strapi/utils');

module.exports = createCoreController('api::payment.payment', ({ strapi }) =&gt; ({
 async create(ctx) {
 const entity = await strapi.entityService.create('api::payment.payment', {
 data: {
 field1: 1,
 field2: 2,
 },
 });
 const sanitizedEntity = await sanitize.contentAPI.output(entity);

 return { data: sanitizedEntity };
 },
}));

</code></pre>

blocks|key|73581|text|所以过了一段时间，strapi社区论坛上的一个家伙JustJerem想出了一个解决方案:首先你必须安装strapi-utils：npm+i+-D+strapi-utils，然后在你的控制器中你必须这样做：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|73582|const+{+sanitizeEntity+}+=+require('strapi-utils/lib');

currentUser:+async+(ctx,+next)+=>+{
++++const+{id,+isAdmin+=+false}+=+await+strapi.plugins['users-permissions'].services.jwt.getToken(ctx);+
++++const+entity+=+await+strapi.entityService.findOne('plugin::users-permissions.user',+id);+//+or+get+the+user+differently,+in+this+case+I+can't+take+it+from+context

++++let+sanitizedEntity+=+sanitizeEntity(entity,+{+model:+strapi.getModel('plugin::users-permissions.user')+});
++++return+sanitizedEntity;
++}|code-block|syntax|javascript|73583|仅此而已。这是他最初帖子的链接：https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326|73584|entityMap|0|LINK|mutability|MUTABLE|url|https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326^0|1F|C|1S|L|0|0|G|1L|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]|$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|Z|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|10|8|@]|D|@$9|11|A|12|1|13]]|E|$]]|$1|M|3|-4|5|6|7|14|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

So some time later, JustJerem, a guy on the strapi community forums came up with a solution to this; firstly you have to install <code>strapi-utils</code>: <code>npm i -D strapi-utils</code>, then in your controller you have to do this:
<pre><code>const { sanitizeEntity } = require('strapi-utils/lib');

currentUser: async (ctx, next) =&gt; {
 const {id, isAdmin = false} = await strapi.plugins['users-permissions'].services.jwt.getToken(ctx); 
 const entity = await strapi.entityService.findOne('plugin::users-permissions.user', id); // or get the user differently, in this case I can't take it from context

 let sanitizedEntity = sanitizeEntity(entity, { model: strapi.getModel('plugin::users-permissions.user') });
 return sanitizedEntity;
 }
</code></pre>
And that's all there is to it.
Here's the link to his original post:
<a href="https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326" rel="nofollow noreferrer">https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326</a>

blocks|key|163221|text|所以我同时在strapi社区论坛上发布了这个问题。一个名为JustJerem的用户给了我一个问题的答案，这个问题看起来是这样的：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|163222|**const+{+sanitizeEntity+}+=+require("strapi-utils/lib");**

module.exports+=+(plugin)+=>+{

++plugin.controllers.user.deleteMe+=+async+(ctx)+=>+{
++++const+entity+=+await+strapi.entityService.delete('plugin::users-permissions.user',+user.id)
++++var+result+=+**sanitizeEntity(entity,+{+model:+strapi.getModel('plugin::users-permissions.user')+})**
++++return+result
++};
//...
};|code-block|syntax|javascript|163223|在strapi论坛上，可以找到最初的答案：|163224|https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326/4?u=derelektrischemoench|offset|length|163225|这个解决方案的所有学分都在strapi板上给JustJerem。这样做对我很有帮助。希望这也能帮到别人。|163226|你好，德莱克崔克|163227|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|0|2A|0|0|0|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|Y|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Z|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|10|8|@]|9|@$K|11|L|12|1|13]]|A|$]]|$1|M|3|N|5|6|7|14|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|15|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|16|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|J]]]]

So I simultaneously posted this question on the strapi community forums. A user named JustJerem got me an answer to this question which looks like this:
<pre><code>**const { sanitizeEntity } = require(&quot;strapi-utils/lib&quot;);**

module.exports = (plugin) =&gt; {

 plugin.controllers.user.deleteMe = async (ctx) =&gt; {
 const entity = await strapi.entityService.delete('plugin::users-permissions.user', user.id)
 var result = **sanitizeEntity(entity, { model: strapi.getModel('plugin::users-permissions.user') })**
 return result
 };
//...
};
</code></pre>
The original answer in the strapi forums can be found here:
<a href="https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326/4?u=derelektrischemoench" rel="nofollow noreferrer">https://forum.strapi.io/t/v4-0-0-sanitize-user-data/13326/4?u=derelektrischemoench</a>
All credits to this solution go out to JustJerem on the strapi boards.
Doing it like this worked for me. Hopefully this can help someone else, too.
Greetings,
derelektrischemoench

blocks|key|148374|text|您可以定义一个sanitizeOutput函数并使用它(在strapi+4中工作)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|148375|const+utils+=+require("@strapi/utils");
const+{sanitize}+=+utils;

const+sanitizeOutput+=+(data,+ctx)+=>+{
+++const+schema+=+strapi.getModel('plugin::xxx.yyy');
+++const+{auth}+=+ctx.state;
+++return+sanitize.contentAPI.output(data,+schema,+{auth});
};

module.exports+=+{

+++++async+find(ctx)+{
+++++++let+entities+=+...+//retrieve+entities
+++++++//call+the+function
+++++++ctx.body+=+await+sanitizeOutput(entities,+ctx);

+++++},
};|code-block|syntax|javascript|148376|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can define a sanitizeOutput function and use it (works in strapi 4):
<pre><code>const utils = require(&quot;@strapi/utils&quot;);
const {sanitize} = utils;

const sanitizeOutput = (data, ctx) =&gt; {
 const schema = strapi.getModel('plugin::xxx.yyy');
 const {auth} = ctx.state;
 return sanitize.contentAPI.output(data, schema, {auth});
};

module.exports = {

 async find(ctx) {
 let entities = ... //retrieve entities
 //call the function
 ctx.body = await sanitizeOutput(entities, ctx);

 },
};
</code></pre>

I'm trying out the new strapi v4 right now (4.0.0) community edition. I've got a custom controller which queries for the current user and (in the future) fetches related objects.
When I did this with strapi v3 I used the built-in <code>sanititzeEntitiy</code> - helper function to remove sensitive fields from the user instance. In v4 however, this function appears to not exist anymore and I can't figure out how to achieve this.
Is there anyone that can help me with this? My code so far is:
<pre><code>
module.exports = {
 currentUser: async(ctx, next) =&gt; {
 let user = ctx.state.user;
 // TODO: sanitize this
 }
}
</code></pre>
In v3 I just did <code>return sanitizeEntity(user);</code> which would have the desired effect. I just can't figure out how to do this in v4 and I can't find anything related to that in the docs.

Strapi v4 sanitizeEntity

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我现在正在试用新的strapi v4 (4.0.0)社区版。我有一个自定义控制器，它查询当前用户，并(在将来)获取相关对象。在使用strapi v3执行此操作时，我使用内置的sanititzeEntitiy -助手函数从用户实例中删除敏感字段。然而，在v4中，这个函数似乎不再存在了，我想不出如何实现它。有人能帮我吗？到...

问斯特拉皮v4 sanitizeEntity
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问斯特拉皮v4 sanitizeEntityEN