@depup/payload 3.79.1-depup.0

package/dist/auth/extractJWT.js

@@ -0,0 +1,62 @@
+import { parseCookies } from '../utilities/parseCookies.js';
+const extractionMethods = {
+    Bearer: ({ headers })=>{
+        const jwtFromHeader = headers.get('Authorization');
+        // RFC6750 OAuth 2.0 Bearer token
+        if (jwtFromHeader?.startsWith('Bearer ')) {
+            return jwtFromHeader.replace('Bearer ', '');
+        }
+        return null;
+    },
+    cookie: ({ headers, payload })=>{
+        const cookies = parseCookies(headers);
+        const tokenCookieName = `${payload.config.cookiePrefix}-token`;
+        const cookieToken = cookies.get(tokenCookieName);
+        if (!cookieToken) {
+            return null;
+        }
+        const origin = headers.get('Origin');
+        // Origin present — validate against csrf allowlist
+        if (origin) {
+            if (payload.config.csrf.length === 0 || payload.config.csrf.includes(origin)) {
+                return cookieToken;
+            }
+            return null;
+        }
+        // No Origin and no csrf configured — no allowlist to enforce
+        if (payload.config.csrf.length === 0) {
+            return cookieToken;
+        }
+        // No Origin with csrf configured — fall back to Sec-Fetch-Site
+        const secFetchSite = headers.get('Sec-Fetch-Site');
+        // Allow same-origin, same-site, and direct navigations (none)
+        if (secFetchSite === 'same-origin' || secFetchSite === 'same-site' || secFetchSite === 'none') {
+            return cookieToken;
+        }
+        // Reject cross-site requests and missing header (non-browser clients)
+        return null;
+    },
+    JWT: ({ headers })=>{
+        const jwtFromHeader = headers.get('Authorization');
+        if (jwtFromHeader?.startsWith('JWT ')) {
+            return jwtFromHeader.replace('JWT ', '');
+        }
+        return null;
+    }
+};
+export const extractJWT = (args)=>{
+    const { headers, payload } = args;
+    const extractionOrder = payload.config.auth.jwtOrder;
+    for (const extractionStrategy of extractionOrder){
+        const result = extractionMethods[extractionStrategy]({
+            headers,
+            payload
+        });
+        if (result) {
+            return result;
+        }
+    }
+    return null;
+};
+
+//# sourceMappingURL=extractJWT.js.map

package/dist/auth/extractJWT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/extractJWT.ts"],"sourcesContent":["import type { BasePayload } from '../index.js'\nimport type { AuthStrategyFunctionArgs } from './index.js'\n\nimport { parseCookies } from '../utilities/parseCookies.js'\n\ntype ExtractionMethod = (args: { headers: Headers; payload: BasePayload }) => null | string\n\nconst extractionMethods: Record<string, ExtractionMethod> = {\n  Bearer: ({ headers }) => {\n    const jwtFromHeader = headers.get('Authorization')\n\n    // RFC6750 OAuth 2.0 Bearer token\n    if (jwtFromHeader?.startsWith('Bearer ')) {\n      return jwtFromHeader.replace('Bearer ', '')\n    }\n\n    return null\n  },\n  cookie: ({ headers, payload }) => {\n    const cookies = parseCookies(headers)\n    const tokenCookieName = `${payload.config.cookiePrefix}-token`\n    const cookieToken = cookies.get(tokenCookieName)\n\n    if (!cookieToken) {\n      return null\n    }\n\n    const origin = headers.get('Origin')\n\n    // Origin present — validate against csrf allowlist\n    if (origin) {\n      if (payload.config.csrf.length === 0 || payload.config.csrf.includes(origin)) {\n        return cookieToken\n      }\n      return null\n    }\n\n    // No Origin and no csrf configured — no allowlist to enforce\n    if (payload.config.csrf.length === 0) {\n      return cookieToken\n    }\n\n    // No Origin with csrf configured — fall back to Sec-Fetch-Site\n    const secFetchSite = headers.get('Sec-Fetch-Site')\n\n    // Allow same-origin, same-site, and direct navigations (none)\n    if (secFetchSite === 'same-origin' || secFetchSite === 'same-site' || secFetchSite === 'none') {\n      return cookieToken\n    }\n\n    // Reject cross-site requests and missing header (non-browser clients)\n    return null\n  },\n  JWT: ({ headers }) => {\n    const jwtFromHeader = headers.get('Authorization')\n\n    if (jwtFromHeader?.startsWith('JWT ')) {\n      return jwtFromHeader.replace('JWT ', '')\n    }\n\n    return null\n  },\n}\n\nexport const extractJWT = (args: Omit<AuthStrategyFunctionArgs, 'strategyName'>): null | string => {\n  const { headers, payload } = args\n\n  const extractionOrder = payload.config.auth.jwtOrder\n\n  for (const extractionStrategy of extractionOrder) {\n    const result = extractionMethods[extractionStrategy]!({ headers, payload })\n\n    if (result) {\n      return result\n    }\n  }\n\n  return null\n}\n"],"names":["parseCookies","extractionMethods","Bearer","headers","jwtFromHeader","get","startsWith","replace","cookie","payload","cookies","tokenCookieName","config","cookiePrefix","cookieToken","origin","csrf","length","includes","secFetchSite","JWT","extractJWT","args","extractionOrder","auth","jwtOrder","extractionStrategy","result"],"mappings":"AAGA,SAASA,YAAY,QAAQ,+BAA8B;AAI3D,MAAMC,oBAAsD;IAC1DC,QAAQ,CAAC,EAAEC,OAAO,EAAE;QAClB,MAAMC,gBAAgBD,QAAQE,GAAG,CAAC;QAElC,iCAAiC;QACjC,IAAID,eAAeE,WAAW,YAAY;YACxC,OAAOF,cAAcG,OAAO,CAAC,WAAW;QAC1C;QAEA,OAAO;IACT;IACAC,QAAQ,CAAC,EAAEL,OAAO,EAAEM,OAAO,EAAE;QAC3B,MAAMC,UAAUV,aAAaG;QAC7B,MAAMQ,kBAAkB,GAAGF,QAAQG,MAAM,CAACC,YAAY,CAAC,MAAM,CAAC;QAC9D,MAAMC,cAAcJ,QAAQL,GAAG,CAACM;QAEhC,IAAI,CAACG,aAAa;YAChB,OAAO;QACT;QAEA,MAAMC,SAASZ,QAAQE,GAAG,CAAC;QAE3B,mDAAmD;QACnD,IAAIU,QAAQ;YACV,IAAIN,QAAQG,MAAM,CAACI,IAAI,CAACC,MAAM,KAAK,KAAKR,QAAQG,MAAM,CAACI,IAAI,CAACE,QAAQ,CAACH,SAAS;gBAC5E,OAAOD;YACT;YACA,OAAO;QACT;QAEA,6DAA6D;QAC7D,IAAIL,QAAQG,MAAM,CAACI,IAAI,CAACC,MAAM,KAAK,GAAG;YACpC,OAAOH;QACT;QAEA,+DAA+D;QAC/D,MAAMK,eAAehB,QAAQE,GAAG,CAAC;QAEjC,8DAA8D;QAC9D,IAAIc,iBAAiB,iBAAiBA,iBAAiB,eAAeA,iBAAiB,QAAQ;YAC7F,OAAOL;QACT;QAEA,sEAAsE;QACtE,OAAO;IACT;IACAM,KAAK,CAAC,EAAEjB,OAAO,EAAE;QACf,MAAMC,gBAAgBD,QAAQE,GAAG,CAAC;QAElC,IAAID,eAAeE,WAAW,SAAS;YACrC,OAAOF,cAAcG,OAAO,CAAC,QAAQ;QACvC;QAEA,OAAO;IACT;AACF;AAEA,OAAO,MAAMc,aAAa,CAACC;IACzB,MAAM,EAAEnB,OAAO,EAAEM,OAAO,EAAE,GAAGa;IAE7B,MAAMC,kBAAkBd,QAAQG,MAAM,CAACY,IAAI,CAACC,QAAQ;IAEpD,KAAK,MAAMC,sBAAsBH,gBAAiB;QAChD,MAAMI,SAAS1B,iBAAiB,CAACyB,mBAAmB,CAAE;YAAEvB;YAASM;QAAQ;QAEzE,IAAIkB,QAAQ;YACV,OAAOA;QACT;IACF;IAEA,OAAO;AACT,EAAC"}

package/dist/auth/getAccessResults.d.ts

@@ -0,0 +1,8 @@
+import type { PayloadRequest } from '../types/index.js';
+import type { SanitizedPermissions } from './types.js';
+type GetAccessResultsArgs = {
+    req: PayloadRequest;
+};
+export declare function getAccessResults({ req, }: GetAccessResultsArgs): Promise<SanitizedPermissions>;
+export {};
+//# sourceMappingURL=getAccessResults.d.ts.map

package/dist/auth/getAccessResults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessResults.d.ts","sourceRoot":"","sources":["../../src/auth/getAccessResults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAKnE,KAAK,oBAAoB,GAAG;IAC1B,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,GACJ,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqEtD"}

package/dist/auth/getAccessResults.js

@@ -0,0 +1,63 @@
+import { getEntityPermissions } from '../utilities/getEntityPermissions/getEntityPermissions.js';
+import { sanitizePermissions } from '../utilities/sanitizePermissions.js';
+export async function getAccessResults({ req }) {
+    const results = {
+        collections: {},
+        globals: {}
+    };
+    const { payload, user } = req;
+    const isLoggedIn = !!user;
+    const userCollectionConfig = user && user.collection ? payload?.collections?.[user.collection]?.config : null;
+    if (userCollectionConfig && payload.config.admin.user === user?.collection) {
+        results.canAccessAdmin = userCollectionConfig.access.admin ? await userCollectionConfig.access.admin({
+            req
+        }) : isLoggedIn;
+    } else {
+        results.canAccessAdmin = false;
+    }
+    const blockReferencesPermissions = {};
+    await Promise.all(payload.config.collections.map(async (collection)=>{
+        const collectionOperations = [
+            'create',
+            'read',
+            'update',
+            'delete'
+        ];
+        if (collection.auth && typeof collection.auth.maxLoginAttempts !== 'undefined' && collection.auth.maxLoginAttempts !== 0) {
+            collectionOperations.push('unlock');
+        }
+        if (collection.versions) {
+            collectionOperations.push('readVersions');
+        }
+        const collectionPermissions = await getEntityPermissions({
+            blockReferencesPermissions,
+            entity: collection,
+            entityType: 'collection',
+            fetchData: false,
+            operations: collectionOperations,
+            req
+        });
+        results.collections[collection.slug] = collectionPermissions;
+    }));
+    await Promise.all(payload.config.globals.map(async (global)=>{
+        const globalOperations = [
+            'read',
+            'update'
+        ];
+        if (global.versions) {
+            globalOperations.push('readVersions');
+        }
+        const globalPermissions = await getEntityPermissions({
+            blockReferencesPermissions,
+            entity: global,
+            entityType: 'global',
+            fetchData: false,
+            operations: globalOperations,
+            req
+        });
+        results.globals[global.slug] = globalPermissions;
+    }));
+    return sanitizePermissions(results);
+}
+
+//# sourceMappingURL=getAccessResults.js.map

package/dist/auth/getAccessResults.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/getAccessResults.ts"],"sourcesContent":["import type { AllOperations, PayloadRequest } from '../types/index.js'\nimport type { Permissions, SanitizedPermissions } from './types.js'\n\nimport { getEntityPermissions } from '../utilities/getEntityPermissions/getEntityPermissions.js'\nimport { sanitizePermissions } from '../utilities/sanitizePermissions.js'\n\ntype GetAccessResultsArgs = {\n  req: PayloadRequest\n}\nexport async function getAccessResults({\n  req,\n}: GetAccessResultsArgs): Promise<SanitizedPermissions> {\n  const results = {\n    collections: {},\n    globals: {},\n  } as Permissions\n  const { payload, user } = req\n\n  const isLoggedIn = !!user\n  const userCollectionConfig =\n    user && user.collection ? payload?.collections?.[user.collection]?.config : null\n\n  if (userCollectionConfig && payload.config.admin.user === user?.collection) {\n    results.canAccessAdmin = userCollectionConfig.access.admin\n      ? await userCollectionConfig.access.admin({ req })\n      : isLoggedIn\n  } else {\n    results.canAccessAdmin = false\n  }\n  const blockReferencesPermissions = {}\n\n  await Promise.all(\n    payload.config.collections.map(async (collection) => {\n      const collectionOperations: AllOperations[] = ['create', 'read', 'update', 'delete']\n\n      if (\n        collection.auth &&\n        typeof collection.auth.maxLoginAttempts !== 'undefined' &&\n        collection.auth.maxLoginAttempts !== 0\n      ) {\n        collectionOperations.push('unlock')\n      }\n\n      if (collection.versions) {\n        collectionOperations.push('readVersions')\n      }\n\n      const collectionPermissions = await getEntityPermissions({\n        blockReferencesPermissions,\n        entity: collection,\n        entityType: 'collection',\n        fetchData: false,\n        operations: collectionOperations,\n        req,\n      })\n      results.collections![collection.slug] = collectionPermissions\n    }),\n  )\n\n  await Promise.all(\n    payload.config.globals.map(async (global) => {\n      const globalOperations: AllOperations[] = ['read', 'update']\n\n      if (global.versions) {\n        globalOperations.push('readVersions')\n      }\n\n      const globalPermissions = await getEntityPermissions({\n        blockReferencesPermissions,\n        entity: global,\n        entityType: 'global',\n        fetchData: false,\n        operations: globalOperations,\n        req,\n      })\n      results.globals![global.slug] = globalPermissions\n    }),\n  )\n\n  return sanitizePermissions(results)\n}\n"],"names":["getEntityPermissions","sanitizePermissions","getAccessResults","req","results","collections","globals","payload","user","isLoggedIn","userCollectionConfig","collection","config","admin","canAccessAdmin","access","blockReferencesPermissions","Promise","all","map","collectionOperations","auth","maxLoginAttempts","push","versions","collectionPermissions","entity","entityType","fetchData","operations","slug","global","globalOperations","globalPermissions"],"mappings":"AAGA,SAASA,oBAAoB,QAAQ,4DAA2D;AAChG,SAASC,mBAAmB,QAAQ,sCAAqC;AAKzE,OAAO,eAAeC,iBAAiB,EACrCC,GAAG,EACkB;IACrB,MAAMC,UAAU;QACdC,aAAa,CAAC;QACdC,SAAS,CAAC;IACZ;IACA,MAAM,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAGL;IAE1B,MAAMM,aAAa,CAAC,CAACD;IACrB,MAAME,uBACJF,QAAQA,KAAKG,UAAU,GAAGJ,SAASF,aAAa,CAACG,KAAKG,UAAU,CAAC,EAAEC,SAAS;IAE9E,IAAIF,wBAAwBH,QAAQK,MAAM,CAACC,KAAK,CAACL,IAAI,KAAKA,MAAMG,YAAY;QAC1EP,QAAQU,cAAc,GAAGJ,qBAAqBK,MAAM,CAACF,KAAK,GACtD,MAAMH,qBAAqBK,MAAM,CAACF,KAAK,CAAC;YAAEV;QAAI,KAC9CM;IACN,OAAO;QACLL,QAAQU,cAAc,GAAG;IAC3B;IACA,MAAME,6BAA6B,CAAC;IAEpC,MAAMC,QAAQC,GAAG,CACfX,QAAQK,MAAM,CAACP,WAAW,CAACc,GAAG,CAAC,OAAOR;QACpC,MAAMS,uBAAwC;YAAC;YAAU;YAAQ;YAAU;SAAS;QAEpF,IACET,WAAWU,IAAI,IACf,OAAOV,WAAWU,IAAI,CAACC,gBAAgB,KAAK,eAC5CX,WAAWU,IAAI,CAACC,gBAAgB,KAAK,GACrC;YACAF,qBAAqBG,IAAI,CAAC;QAC5B;QAEA,IAAIZ,WAAWa,QAAQ,EAAE;YACvBJ,qBAAqBG,IAAI,CAAC;QAC5B;QAEA,MAAME,wBAAwB,MAAMzB,qBAAqB;YACvDgB;YACAU,QAAQf;YACRgB,YAAY;YACZC,WAAW;YACXC,YAAYT;YACZjB;QACF;QACAC,QAAQC,WAAW,AAAC,CAACM,WAAWmB,IAAI,CAAC,GAAGL;IAC1C;IAGF,MAAMR,QAAQC,GAAG,CACfX,QAAQK,MAAM,CAACN,OAAO,CAACa,GAAG,CAAC,OAAOY;QAChC,MAAMC,mBAAoC;YAAC;YAAQ;SAAS;QAE5D,IAAID,OAAOP,QAAQ,EAAE;YACnBQ,iBAAiBT,IAAI,CAAC;QACxB;QAEA,MAAMU,oBAAoB,MAAMjC,qBAAqB;YACnDgB;YACAU,QAAQK;YACRJ,YAAY;YACZC,WAAW;YACXC,YAAYG;YACZ7B;QACF;QACAC,QAAQE,OAAO,AAAC,CAACyB,OAAOD,IAAI,CAAC,GAAGG;IAClC;IAGF,OAAOhC,oBAAoBG;AAC7B"}

package/dist/auth/getAuthFields.d.ts

@@ -0,0 +1,4 @@
+import type { Field } from '../fields/config/types.js';
+import type { IncomingAuthType } from './types.js';
+export declare const getBaseAuthFields: (authConfig: IncomingAuthType) => Field[];
+//# sourceMappingURL=getAuthFields.d.ts.map

package/dist/auth/getAuthFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthFields.d.ts","sourceRoot":"","sources":["../../src/auth/getAuthFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAa,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAUlD,eAAO,MAAM,iBAAiB,eAAgB,gBAAgB,KAAG,KAAK,EAmDrE,CAAA"}

package/dist/auth/getAuthFields.js

@@ -0,0 +1,52 @@
+import { accountLockFields } from './baseFields/accountLock.js';
+import { apiKeyFields } from './baseFields/apiKey.js';
+import { baseAuthFields } from './baseFields/auth.js';
+import { emailFieldConfig } from './baseFields/email.js';
+import { sessionsFieldConfig } from './baseFields/sessions.js';
+import { usernameFieldConfig } from './baseFields/username.js';
+import { verificationFields } from './baseFields/verification.js';
+export const getBaseAuthFields = (authConfig)=>{
+    const authFields = [];
+    if (authConfig.useAPIKey) {
+        authFields.push(...apiKeyFields);
+    }
+    if (!authConfig.disableLocalStrategy || typeof authConfig.disableLocalStrategy === 'object' && authConfig.disableLocalStrategy.enableFields) {
+        const emailField = {
+            ...emailFieldConfig
+        };
+        let usernameField;
+        if (authConfig.loginWithUsername) {
+            usernameField = {
+                ...usernameFieldConfig
+            };
+            if (typeof authConfig.loginWithUsername === 'object') {
+                if (authConfig.loginWithUsername.requireEmail === false) {
+                    emailField.required = false;
+                }
+                if (authConfig.loginWithUsername.requireUsername === false) {
+                    usernameField.required = false;
+                }
+                if (authConfig.loginWithUsername.allowEmailLogin === false) {
+                    emailField.unique = false;
+                }
+            }
+        }
+        authFields.push(emailField);
+        if (usernameField) {
+            authFields.push(usernameField);
+        }
+        authFields.push(...baseAuthFields);
+        if (authConfig.verify) {
+            authFields.push(...verificationFields);
+        }
+        if (authConfig?.maxLoginAttempts && authConfig.maxLoginAttempts > 0) {
+            authFields.push(...accountLockFields);
+        }
+        if (authConfig.useSessions) {
+            authFields.push(sessionsFieldConfig);
+        }
+    }
+    return authFields;
+};
+
+//# sourceMappingURL=getAuthFields.js.map

package/dist/auth/getAuthFields.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/getAuthFields.ts"],"sourcesContent":["import type { Field, TextField } from '../fields/config/types.js'\nimport type { IncomingAuthType } from './types.js'\n\nimport { accountLockFields } from './baseFields/accountLock.js'\nimport { apiKeyFields } from './baseFields/apiKey.js'\nimport { baseAuthFields } from './baseFields/auth.js'\nimport { emailFieldConfig } from './baseFields/email.js'\nimport { sessionsFieldConfig } from './baseFields/sessions.js'\nimport { usernameFieldConfig } from './baseFields/username.js'\nimport { verificationFields } from './baseFields/verification.js'\n\nexport const getBaseAuthFields = (authConfig: IncomingAuthType): Field[] => {\n  const authFields: Field[] = []\n\n  if (authConfig.useAPIKey) {\n    authFields.push(...apiKeyFields)\n  }\n\n  if (\n    !authConfig.disableLocalStrategy ||\n    (typeof authConfig.disableLocalStrategy === 'object' &&\n      authConfig.disableLocalStrategy.enableFields)\n  ) {\n    const emailField = { ...emailFieldConfig }\n    let usernameField: TextField | undefined\n\n    if (authConfig.loginWithUsername) {\n      usernameField = { ...usernameFieldConfig }\n      if (typeof authConfig.loginWithUsername === 'object') {\n        if (authConfig.loginWithUsername.requireEmail === false) {\n          emailField.required = false\n        }\n        if (authConfig.loginWithUsername.requireUsername === false) {\n          usernameField.required = false\n        }\n        if (authConfig.loginWithUsername.allowEmailLogin === false) {\n          emailField.unique = false\n        }\n      }\n    }\n\n    authFields.push(emailField)\n    if (usernameField) {\n      authFields.push(usernameField)\n    }\n\n    authFields.push(...baseAuthFields)\n\n    if (authConfig.verify) {\n      authFields.push(...verificationFields)\n    }\n\n    if (authConfig?.maxLoginAttempts && authConfig.maxLoginAttempts > 0) {\n      authFields.push(...accountLockFields)\n    }\n\n    if (authConfig.useSessions) {\n      authFields.push(sessionsFieldConfig)\n    }\n  }\n\n  return authFields\n}\n"],"names":["accountLockFields","apiKeyFields","baseAuthFields","emailFieldConfig","sessionsFieldConfig","usernameFieldConfig","verificationFields","getBaseAuthFields","authConfig","authFields","useAPIKey","push","disableLocalStrategy","enableFields","emailField","usernameField","loginWithUsername","requireEmail","required","requireUsername","allowEmailLogin","unique","verify","maxLoginAttempts","useSessions"],"mappings":"AAGA,SAASA,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,YAAY,QAAQ,yBAAwB;AACrD,SAASC,cAAc,QAAQ,uBAAsB;AACrD,SAASC,gBAAgB,QAAQ,wBAAuB;AACxD,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,kBAAkB,QAAQ,+BAA8B;AAEjE,OAAO,MAAMC,oBAAoB,CAACC;IAChC,MAAMC,aAAsB,EAAE;IAE9B,IAAID,WAAWE,SAAS,EAAE;QACxBD,WAAWE,IAAI,IAAIV;IACrB;IAEA,IACE,CAACO,WAAWI,oBAAoB,IAC/B,OAAOJ,WAAWI,oBAAoB,KAAK,YAC1CJ,WAAWI,oBAAoB,CAACC,YAAY,EAC9C;QACA,MAAMC,aAAa;YAAE,GAAGX,gBAAgB;QAAC;QACzC,IAAIY;QAEJ,IAAIP,WAAWQ,iBAAiB,EAAE;YAChCD,gBAAgB;gBAAE,GAAGV,mBAAmB;YAAC;YACzC,IAAI,OAAOG,WAAWQ,iBAAiB,KAAK,UAAU;gBACpD,IAAIR,WAAWQ,iBAAiB,CAACC,YAAY,KAAK,OAAO;oBACvDH,WAAWI,QAAQ,GAAG;gBACxB;gBACA,IAAIV,WAAWQ,iBAAiB,CAACG,eAAe,KAAK,OAAO;oBAC1DJ,cAAcG,QAAQ,GAAG;gBAC3B;gBACA,IAAIV,WAAWQ,iBAAiB,CAACI,eAAe,KAAK,OAAO;oBAC1DN,WAAWO,MAAM,GAAG;gBACtB;YACF;QACF;QAEAZ,WAAWE,IAAI,CAACG;QAChB,IAAIC,eAAe;YACjBN,WAAWE,IAAI,CAACI;QAClB;QAEAN,WAAWE,IAAI,IAAIT;QAEnB,IAAIM,WAAWc,MAAM,EAAE;YACrBb,WAAWE,IAAI,IAAIL;QACrB;QAEA,IAAIE,YAAYe,oBAAoBf,WAAWe,gBAAgB,GAAG,GAAG;YACnEd,WAAWE,IAAI,IAAIX;QACrB;QAEA,IAAIQ,WAAWgB,WAAW,EAAE;YAC1Bf,WAAWE,IAAI,CAACP;QAClB;IACF;IAEA,OAAOK;AACT,EAAC"}

package/dist/auth/getFieldsToSign.d.ts

@@ -0,0 +1,9 @@
+import type { CollectionConfig } from '../collections/config/types.js';
+import type { PayloadRequest } from '../types/index.js';
+export declare const getFieldsToSign: (args: {
+    collectionConfig: CollectionConfig;
+    email: string;
+    sid?: string;
+    user: PayloadRequest["user"];
+}) => Record<string, unknown>;
+//# sourceMappingURL=getFieldsToSign.d.ts.map

package/dist/auth/getFieldsToSign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFieldsToSign.d.ts","sourceRoot":"","sources":["../../src/auth/getFieldsToSign.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAEtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAiHvD,eAAO,MAAM,eAAe,SAAU;IACpC,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;CAC7B,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAoBzB,CAAA"}

package/dist/auth/getFieldsToSign.js

@@ -0,0 +1,118 @@
+import { fieldAffectsData, tabHasName } from '../fields/config/types.js';
+const traverseFields = ({ data, // parent,
+fields, result })=>{
+    fields.forEach((field)=>{
+        switch(field.type){
+            case 'collapsible':
+            case 'row':
+                {
+                    traverseFields({
+                        data,
+                        fields: field.fields,
+                        result
+                    });
+                    break;
+                }
+            case 'group':
+                {
+                    if (fieldAffectsData(field)) {
+                        const groupData = data[field.name] ?? {};
+                        let targetResult;
+                        if (typeof field.saveToJWT === 'string') {
+                            targetResult = field.saveToJWT;
+                            result[field.saveToJWT] = groupData;
+                        } else if (field.saveToJWT) {
+                            targetResult = field.name;
+                            result[field.name] = groupData;
+                        }
+                        const groupResult = targetResult ? result[targetResult] : result;
+                        traverseFields({
+                            data: groupData,
+                            fields: field.fields,
+                            result: groupResult
+                        });
+                        break;
+                    } else {
+                        traverseFields({
+                            data,
+                            fields: field.fields,
+                            result
+                        });
+                        break;
+                    }
+                }
+            case 'tab':
+                {
+                    if (tabHasName(field)) {
+                        const tabData = data[field.name] ?? {};
+                        let targetResult;
+                        if (typeof field.saveToJWT === 'string') {
+                            targetResult = field.saveToJWT;
+                            result[field.saveToJWT] = tabData;
+                        } else if (field.saveToJWT) {
+                            targetResult = field.name;
+                            result[field.name] = tabData;
+                        }
+                        const tabResult = targetResult ? result[targetResult] : result;
+                        traverseFields({
+                            data: tabData,
+                            fields: field.fields,
+                            result: tabResult
+                        });
+                    } else {
+                        traverseFields({
+                            data,
+                            fields: field.fields,
+                            result
+                        });
+                    }
+                    break;
+                }
+            case 'tabs':
+                {
+                    traverseFields({
+                        data,
+                        fields: field.tabs.map((tab)=>({
+                                ...tab,
+                                type: 'tab'
+                            })),
+                        result
+                    });
+                    break;
+                }
+            default:
+                if (fieldAffectsData(field)) {
+                    if (field.saveToJWT) {
+                        if (typeof field.saveToJWT === 'string') {
+                            result[field.saveToJWT] = data[field.name];
+                            delete result[field.name];
+                        } else {
+                            result[field.name] = data[field.name];
+                        }
+                    } else if (field.saveToJWT === false) {
+                        delete result[field.name];
+                    }
+                }
+        }
+    });
+    return result;
+};
+export const getFieldsToSign = (args)=>{
+    const { collectionConfig, email, sid, user } = args;
+    const result = {
+        id: user?.id,
+        collection: collectionConfig.slug,
+        email
+    };
+    if (sid) {
+        result.sid = sid;
+    }
+    traverseFields({
+        data: user,
+        fields: collectionConfig.fields,
+        result
+    });
+    return result;
+};
+
+//# sourceMappingURL=getFieldsToSign.js.map

package/dist/auth/getFieldsToSign.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/getFieldsToSign.ts"],"sourcesContent":["import type { CollectionConfig } from '../collections/config/types.js'\nimport type { Field, TabAsField } from '../fields/config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { fieldAffectsData, tabHasName } from '../fields/config/types.js'\n\ntype TraverseFieldsArgs = {\n  data: Record<string, unknown>\n  fields: (Field | TabAsField)[]\n  result: Record<string, unknown>\n}\nconst traverseFields = ({\n  data,\n  // parent,\n  fields,\n  result,\n}: TraverseFieldsArgs) => {\n  fields.forEach((field) => {\n    switch (field.type) {\n      case 'collapsible':\n      case 'row': {\n        traverseFields({\n          data,\n          fields: field.fields,\n          result,\n        })\n        break\n      }\n      case 'group': {\n        if (fieldAffectsData(field)) {\n          const groupData: Record<string, unknown> =\n            (data[field.name] as Record<string, unknown>) ?? {}\n          let targetResult\n          if (typeof field.saveToJWT === 'string') {\n            targetResult = field.saveToJWT\n            result[field.saveToJWT] = groupData\n          } else if (field.saveToJWT) {\n            targetResult = field.name\n            result[field.name] = groupData\n          }\n          const groupResult = (targetResult ? result[targetResult] : result) as Record<\n            string,\n            unknown\n          >\n          traverseFields({\n            data: groupData,\n            fields: field.fields,\n            result: groupResult,\n          })\n          break\n        } else {\n          traverseFields({\n            data,\n            fields: field.fields,\n            result,\n          })\n\n          break\n        }\n      }\n      case 'tab': {\n        if (tabHasName(field)) {\n          const tabData: Record<string, unknown> =\n            (data[field.name] as Record<string, unknown>) ?? {}\n          let targetResult\n          if (typeof field.saveToJWT === 'string') {\n            targetResult = field.saveToJWT\n            result[field.saveToJWT] = tabData\n          } else if (field.saveToJWT) {\n            targetResult = field.name\n            result[field.name] = tabData\n          }\n          const tabResult = (targetResult ? result[targetResult] : result) as Record<\n            string,\n            unknown\n          >\n          traverseFields({\n            data: tabData,\n            fields: field.fields,\n            result: tabResult,\n          })\n        } else {\n          traverseFields({\n            data,\n            fields: field.fields,\n            result,\n          })\n        }\n        break\n      }\n      case 'tabs': {\n        traverseFields({\n          data,\n          fields: field.tabs.map((tab) => ({ ...tab, type: 'tab' })),\n          result,\n        })\n        break\n      }\n      default:\n        if (fieldAffectsData(field)) {\n          if (field.saveToJWT) {\n            if (typeof field.saveToJWT === 'string') {\n              result[field.saveToJWT] = data[field.name]\n              delete result[field.name]\n            } else {\n              result[field.name] = data[field.name] as Record<string, unknown>\n            }\n          } else if (field.saveToJWT === false) {\n            delete result[field.name]\n          }\n        }\n    }\n  })\n  return result\n}\nexport const getFieldsToSign = (args: {\n  collectionConfig: CollectionConfig\n  email: string\n  sid?: string\n  user: PayloadRequest['user']\n}): Record<string, unknown> => {\n  const { collectionConfig, email, sid, user } = args\n\n  const result: Record<string, unknown> = {\n    id: user?.id,\n    collection: collectionConfig.slug,\n    email,\n  }\n\n  if (sid) {\n    result.sid = sid\n  }\n\n  traverseFields({\n    data: user!,\n    fields: collectionConfig.fields,\n    result,\n  })\n\n  return result\n}\n"],"names":["fieldAffectsData","tabHasName","traverseFields","data","fields","result","forEach","field","type","groupData","name","targetResult","saveToJWT","groupResult","tabData","tabResult","tabs","map","tab","getFieldsToSign","args","collectionConfig","email","sid","user","id","collection","slug"],"mappings":"AAIA,SAASA,gBAAgB,EAAEC,UAAU,QAAQ,4BAA2B;AAOxE,MAAMC,iBAAiB,CAAC,EACtBC,IAAI,EACJ,UAAU;AACVC,MAAM,EACNC,MAAM,EACa;IACnBD,OAAOE,OAAO,CAAC,CAACC;QACd,OAAQA,MAAMC,IAAI;YAChB,KAAK;YACL,KAAK;gBAAO;oBACVN,eAAe;wBACbC;wBACAC,QAAQG,MAAMH,MAAM;wBACpBC;oBACF;oBACA;gBACF;YACA,KAAK;gBAAS;oBACZ,IAAIL,iBAAiBO,QAAQ;wBAC3B,MAAME,YACJ,AAACN,IAAI,CAACI,MAAMG,IAAI,CAAC,IAAgC,CAAC;wBACpD,IAAIC;wBACJ,IAAI,OAAOJ,MAAMK,SAAS,KAAK,UAAU;4BACvCD,eAAeJ,MAAMK,SAAS;4BAC9BP,MAAM,CAACE,MAAMK,SAAS,CAAC,GAAGH;wBAC5B,OAAO,IAAIF,MAAMK,SAAS,EAAE;4BAC1BD,eAAeJ,MAAMG,IAAI;4BACzBL,MAAM,CAACE,MAAMG,IAAI,CAAC,GAAGD;wBACvB;wBACA,MAAMI,cAAeF,eAAeN,MAAM,CAACM,aAAa,GAAGN;wBAI3DH,eAAe;4BACbC,MAAMM;4BACNL,QAAQG,MAAMH,MAAM;4BACpBC,QAAQQ;wBACV;wBACA;oBACF,OAAO;wBACLX,eAAe;4BACbC;4BACAC,QAAQG,MAAMH,MAAM;4BACpBC;wBACF;wBAEA;oBACF;gBACF;YACA,KAAK;gBAAO;oBACV,IAAIJ,WAAWM,QAAQ;wBACrB,MAAMO,UACJ,AAACX,IAAI,CAACI,MAAMG,IAAI,CAAC,IAAgC,CAAC;wBACpD,IAAIC;wBACJ,IAAI,OAAOJ,MAAMK,SAAS,KAAK,UAAU;4BACvCD,eAAeJ,MAAMK,SAAS;4BAC9BP,MAAM,CAACE,MAAMK,SAAS,CAAC,GAAGE;wBAC5B,OAAO,IAAIP,MAAMK,SAAS,EAAE;4BAC1BD,eAAeJ,MAAMG,IAAI;4BACzBL,MAAM,CAACE,MAAMG,IAAI,CAAC,GAAGI;wBACvB;wBACA,MAAMC,YAAaJ,eAAeN,MAAM,CAACM,aAAa,GAAGN;wBAIzDH,eAAe;4BACbC,MAAMW;4BACNV,QAAQG,MAAMH,MAAM;4BACpBC,QAAQU;wBACV;oBACF,OAAO;wBACLb,eAAe;4BACbC;4BACAC,QAAQG,MAAMH,MAAM;4BACpBC;wBACF;oBACF;oBACA;gBACF;YACA,KAAK;gBAAQ;oBACXH,eAAe;wBACbC;wBACAC,QAAQG,MAAMS,IAAI,CAACC,GAAG,CAAC,CAACC,MAAS,CAAA;gCAAE,GAAGA,GAAG;gCAAEV,MAAM;4BAAM,CAAA;wBACvDH;oBACF;oBACA;gBACF;YACA;gBACE,IAAIL,iBAAiBO,QAAQ;oBAC3B,IAAIA,MAAMK,SAAS,EAAE;wBACnB,IAAI,OAAOL,MAAMK,SAAS,KAAK,UAAU;4BACvCP,MAAM,CAACE,MAAMK,SAAS,CAAC,GAAGT,IAAI,CAACI,MAAMG,IAAI,CAAC;4BAC1C,OAAOL,MAAM,CAACE,MAAMG,IAAI,CAAC;wBAC3B,OAAO;4BACLL,MAAM,CAACE,MAAMG,IAAI,CAAC,GAAGP,IAAI,CAACI,MAAMG,IAAI,CAAC;wBACvC;oBACF,OAAO,IAAIH,MAAMK,SAAS,KAAK,OAAO;wBACpC,OAAOP,MAAM,CAACE,MAAMG,IAAI,CAAC;oBAC3B;gBACF;QACJ;IACF;IACA,OAAOL;AACT;AACA,OAAO,MAAMc,kBAAkB,CAACC;IAM9B,MAAM,EAAEC,gBAAgB,EAAEC,KAAK,EAAEC,GAAG,EAAEC,IAAI,EAAE,GAAGJ;IAE/C,MAAMf,SAAkC;QACtCoB,IAAID,MAAMC;QACVC,YAAYL,iBAAiBM,IAAI;QACjCL;IACF;IAEA,IAAIC,KAAK;QACPlB,OAAOkB,GAAG,GAAGA;IACf;IAEArB,eAAe;QACbC,MAAMqB;QACNpB,QAAQiB,iBAAiBjB,MAAM;QAC/BC;IACF;IAEA,OAAOA;AACT,EAAC"}

package/dist/auth/getLoginOptions.d.ts

@@ -0,0 +1,6 @@
+import type { Auth } from './types.js';
+export declare const getLoginOptions: (loginWithUsername: Auth["loginWithUsername"]) => {
+    canLoginWithEmail: boolean;
+    canLoginWithUsername: boolean;
+};
+//# sourceMappingURL=getLoginOptions.d.ts.map

package/dist/auth/getLoginOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getLoginOptions.d.ts","sourceRoot":"","sources":["../../src/auth/getLoginOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEtC,eAAO,MAAM,eAAe,sBACP,IAAI,CAAC,mBAAmB,CAAC,KAC3C;IACD,iBAAiB,EAAE,OAAO,CAAA;IAC1B,oBAAoB,EAAE,OAAO,CAAA;CAM9B,CAAA"}

package/dist/auth/getLoginOptions.js

@@ -0,0 +1,8 @@
+export const getLoginOptions = (loginWithUsername)=>{
+    return {
+        canLoginWithEmail: !loginWithUsername || loginWithUsername.allowEmailLogin,
+        canLoginWithUsername: Boolean(loginWithUsername)
+    };
+};
+
+//# sourceMappingURL=getLoginOptions.js.map

package/dist/auth/getLoginOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/getLoginOptions.ts"],"sourcesContent":["import type { Auth } from './types.js'\n\nexport const getLoginOptions = (\n  loginWithUsername: Auth['loginWithUsername'],\n): {\n  canLoginWithEmail: boolean\n  canLoginWithUsername: boolean\n} => {\n  return {\n    canLoginWithEmail: !loginWithUsername || loginWithUsername.allowEmailLogin!,\n    canLoginWithUsername: Boolean(loginWithUsername),\n  }\n}\n"],"names":["getLoginOptions","loginWithUsername","canLoginWithEmail","allowEmailLogin","canLoginWithUsername","Boolean"],"mappings":"AAEA,OAAO,MAAMA,kBAAkB,CAC7BC;IAKA,OAAO;QACLC,mBAAmB,CAACD,qBAAqBA,kBAAkBE,eAAe;QAC1EC,sBAAsBC,QAAQJ;IAChC;AACF,EAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,4 @@
+export * from './cookies.js';
+export { extractJWT } from './extractJWT.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAE5B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,cAAc,YAAY,CAAA"}

package/dist/auth/index.js

@@ -0,0 +1,5 @@
+export * from './cookies.js';
+export { extractJWT } from './extractJWT.js';
+export * from './types.js';
+
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/index.ts"],"sourcesContent":["export * from './cookies.js'\n\nexport { extractJWT } from './extractJWT.js'\nexport * from './types.js'\n"],"names":["extractJWT"],"mappings":"AAAA,cAAc,eAAc;AAE5B,SAASA,UAAU,QAAQ,kBAAiB;AAC5C,cAAc,aAAY"}

package/dist/auth/isUserLocked.d.ts

@@ -0,0 +1,2 @@
+export declare const isUserLocked: (date: Date) => boolean;
+//# sourceMappingURL=isUserLocked.d.ts.map

package/dist/auth/isUserLocked.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isUserLocked.d.ts","sourceRoot":"","sources":["../../src/auth/isUserLocked.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,OAKzC,CAAA"}

package/dist/auth/isUserLocked.js

@@ -0,0 +1,8 @@
+export const isUserLocked = (date)=>{
+    if (!date) {
+        return false;
+    }
+    return date.getTime() > Date.now();
+};
+
+//# sourceMappingURL=isUserLocked.js.map

package/dist/auth/isUserLocked.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/isUserLocked.ts"],"sourcesContent":["export const isUserLocked = (date: Date): boolean => {\n  if (!date) {\n    return false\n  }\n  return date.getTime() > Date.now()\n}\n"],"names":["isUserLocked","date","getTime","Date","now"],"mappings":"AAAA,OAAO,MAAMA,eAAe,CAACC;IAC3B,IAAI,CAACA,MAAM;QACT,OAAO;IACT;IACA,OAAOA,KAAKC,OAAO,KAAKC,KAAKC,GAAG;AAClC,EAAC"}

package/dist/auth/jwt.d.ts

@@ -0,0 +1,9 @@
+export declare const jwtSign: ({ fieldsToSign, secret, tokenExpiration, }: {
+    fieldsToSign: Record<string, unknown>;
+    secret: string;
+    tokenExpiration: number;
+}) => Promise<{
+    exp: number;
+    token: string;
+}>;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,OAAO,+CAIjB;IACD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,MAAM,CAAA;CACxB;;;EAUA,CAAA"}

package/dist/auth/jwt.js

@@ -0,0 +1,16 @@
+import { SignJWT } from 'jose';
+export const jwtSign = async ({ fieldsToSign, secret, tokenExpiration })=>{
+    const secretKey = new TextEncoder().encode(secret);
+    const issuedAt = Math.floor(Date.now() / 1000);
+    const exp = issuedAt + tokenExpiration;
+    const token = await new SignJWT(fieldsToSign).setProtectedHeader({
+        alg: 'HS256',
+        typ: 'JWT'
+    }).setIssuedAt(issuedAt).setExpirationTime(exp).sign(secretKey);
+    return {
+        exp,
+        token
+    };
+};
+
+//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/jwt.ts"],"sourcesContent":["import { SignJWT } from 'jose'\n\nexport const jwtSign = async ({\n  fieldsToSign,\n  secret,\n  tokenExpiration,\n}: {\n  fieldsToSign: Record<string, unknown>\n  secret: string\n  tokenExpiration: number\n}) => {\n  const secretKey = new TextEncoder().encode(secret)\n  const issuedAt = Math.floor(Date.now() / 1000)\n  const exp = issuedAt + tokenExpiration\n  const token = await new SignJWT(fieldsToSign)\n    .setProtectedHeader({ alg: 'HS256', typ: 'JWT' })\n    .setIssuedAt(issuedAt)\n    .setExpirationTime(exp)\n    .sign(secretKey)\n  return { exp, token }\n}\n"],"names":["SignJWT","jwtSign","fieldsToSign","secret","tokenExpiration","secretKey","TextEncoder","encode","issuedAt","Math","floor","Date","now","exp","token","setProtectedHeader","alg","typ","setIssuedAt","setExpirationTime","sign"],"mappings":"AAAA,SAASA,OAAO,QAAQ,OAAM;AAE9B,OAAO,MAAMC,UAAU,OAAO,EAC5BC,YAAY,EACZC,MAAM,EACNC,eAAe,EAKhB;IACC,MAAMC,YAAY,IAAIC,cAAcC,MAAM,CAACJ;IAC3C,MAAMK,WAAWC,KAAKC,KAAK,CAACC,KAAKC,GAAG,KAAK;IACzC,MAAMC,MAAML,WAAWJ;IACvB,MAAMU,QAAQ,MAAM,IAAId,QAAQE,cAC7Ba,kBAAkB,CAAC;QAAEC,KAAK;QAASC,KAAK;IAAM,GAC9CC,WAAW,CAACV,UACZW,iBAAiB,CAACN,KAClBO,IAAI,CAACf;IACR,OAAO;QAAEQ;QAAKC;IAAM;AACtB,EAAC"}

package/dist/auth/operations/access.d.ts

@@ -0,0 +1,8 @@
+import type { PayloadRequest } from '../../types/index.js';
+import type { SanitizedPermissions } from '../types.js';
+type Arguments = {
+    req: PayloadRequest;
+};
+export declare const accessOperation: (args: Arguments) => Promise<SanitizedPermissions>;
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/auth/operations/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/auth/operations/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAMvD,KAAK,SAAS,GAAG;IACf,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,eAAe,SAAgB,SAAS,KAAG,OAAO,CAAC,oBAAoB,CAWnF,CAAA"}

package/dist/auth/operations/access.js

@@ -0,0 +1,17 @@
+import { killTransaction } from '../../utilities/killTransaction.js';
+import { adminInit as adminInitTelemetry } from '../../utilities/telemetry/events/adminInit.js';
+import { getAccessResults } from '../getAccessResults.js';
+export const accessOperation = async (args)=>{
+    const { req } = args;
+    adminInitTelemetry(req);
+    try {
+        return getAccessResults({
+            req
+        });
+    } catch (e) {
+        await killTransaction(req);
+        throw e;
+    }
+};
+
+//# sourceMappingURL=access.js.map

package/dist/auth/operations/access.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/auth/operations/access.ts"],"sourcesContent":["import type { PayloadRequest } from '../../types/index.js'\nimport type { SanitizedPermissions } from '../types.js'\n\nimport { killTransaction } from '../../utilities/killTransaction.js'\nimport { adminInit as adminInitTelemetry } from '../../utilities/telemetry/events/adminInit.js'\nimport { getAccessResults } from '../getAccessResults.js'\n\ntype Arguments = {\n  req: PayloadRequest\n}\n\nexport const accessOperation = async (args: Arguments): Promise<SanitizedPermissions> => {\n  const { req } = args\n\n  adminInitTelemetry(req)\n\n  try {\n    return getAccessResults({ req })\n  } catch (e: unknown) {\n    await killTransaction(req)\n    throw e\n  }\n}\n"],"names":["killTransaction","adminInit","adminInitTelemetry","getAccessResults","accessOperation","args","req","e"],"mappings":"AAGA,SAASA,eAAe,QAAQ,qCAAoC;AACpE,SAASC,aAAaC,kBAAkB,QAAQ,gDAA+C;AAC/F,SAASC,gBAAgB,QAAQ,yBAAwB;AAMzD,OAAO,MAAMC,kBAAkB,OAAOC;IACpC,MAAM,EAAEC,GAAG,EAAE,GAAGD;IAEhBH,mBAAmBI;IAEnB,IAAI;QACF,OAAOH,iBAAiB;YAAEG;QAAI;IAChC,EAAE,OAAOC,GAAY;QACnB,MAAMP,gBAAgBM;QACtB,MAAMC;IACR;AACF,EAAC"}

package/dist/auth/operations/auth.d.ts

@@ -0,0 +1,17 @@
+import type { SanitizedPermissions, TypedUser } from '../../index.js';
+import type { PayloadRequest } from '../../types/index.js';
+export type AuthArgs = {
+    /**
+     * Specify if it's possible for auth strategies to set headers within this operation.
+     */
+    canSetHeaders?: boolean;
+    headers: Request['headers'];
+    req?: Omit<PayloadRequest, 'user'>;
+};
+export type AuthResult = {
+    permissions: SanitizedPermissions;
+    responseHeaders?: Headers;
+    user: null | TypedUser;
+};
+export declare const auth: (args: Required<AuthArgs>) => Promise<AuthResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth/operations/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/operations/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAM1D,MAAM,MAAM,QAAQ,GAAG;IACrB;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,oBAAoB,CAAA;IACjC,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,EAAE,IAAI,GAAG,SAAS,CAAA;CACvB,CAAA;AAED,eAAO,MAAM,IAAI,SAAgB,QAAQ,CAAC,QAAQ,CAAC,KAAG,OAAO,CAAC,UAAU,CA4BvE,CAAA"}

package/dist/auth/operations/auth.js

@@ -0,0 +1,30 @@
+import { killTransaction } from '../../utilities/killTransaction.js';
+import { executeAuthStrategies } from '../executeAuthStrategies.js';
+import { getAccessResults } from '../getAccessResults.js';
+export const auth = async (args)=>{
+    const { canSetHeaders, headers } = args;
+    const req = args.req;
+    const { payload } = req;
+    try {
+        const { responseHeaders, user } = await executeAuthStrategies({
+            canSetHeaders,
+            headers,
+            payload
+        });
+        req.user = user;
+        req.responseHeaders = responseHeaders;
+        const permissions = await getAccessResults({
+            req
+        });
+        return {
+            permissions,
+            responseHeaders,
+            user
+        };
+    } catch (error) {
+        await killTransaction(req);
+        throw error;
+    }
+};
+
+//# sourceMappingURL=auth.js.map

package/dist/auth/operations/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/auth/operations/auth.ts"],"sourcesContent":["import type { SanitizedPermissions, TypedUser } from '../../index.js'\nimport type { PayloadRequest } from '../../types/index.js'\n\nimport { killTransaction } from '../../utilities/killTransaction.js'\nimport { executeAuthStrategies } from '../executeAuthStrategies.js'\nimport { getAccessResults } from '../getAccessResults.js'\n\nexport type AuthArgs = {\n  /**\n   * Specify if it's possible for auth strategies to set headers within this operation.\n   */\n  canSetHeaders?: boolean\n  headers: Request['headers']\n  req?: Omit<PayloadRequest, 'user'>\n}\n\nexport type AuthResult = {\n  permissions: SanitizedPermissions\n  responseHeaders?: Headers\n  user: null | TypedUser\n}\n\nexport const auth = async (args: Required<AuthArgs>): Promise<AuthResult> => {\n  const { canSetHeaders, headers } = args\n  const req = args.req as PayloadRequest\n  const { payload } = req\n\n  try {\n    const { responseHeaders, user } = await executeAuthStrategies({\n      canSetHeaders,\n      headers,\n      payload,\n    })\n\n    req.user = user\n    req.responseHeaders = responseHeaders\n\n    const permissions = await getAccessResults({\n      req,\n    })\n\n    return {\n      permissions,\n      responseHeaders,\n      user,\n    }\n  } catch (error: unknown) {\n    await killTransaction(req)\n    throw error\n  }\n}\n"],"names":["killTransaction","executeAuthStrategies","getAccessResults","auth","args","canSetHeaders","headers","req","payload","responseHeaders","user","permissions","error"],"mappings":"AAGA,SAASA,eAAe,QAAQ,qCAAoC;AACpE,SAASC,qBAAqB,QAAQ,8BAA6B;AACnE,SAASC,gBAAgB,QAAQ,yBAAwB;AAiBzD,OAAO,MAAMC,OAAO,OAAOC;IACzB,MAAM,EAAEC,aAAa,EAAEC,OAAO,EAAE,GAAGF;IACnC,MAAMG,MAAMH,KAAKG,GAAG;IACpB,MAAM,EAAEC,OAAO,EAAE,GAAGD;IAEpB,IAAI;QACF,MAAM,EAAEE,eAAe,EAAEC,IAAI,EAAE,GAAG,MAAMT,sBAAsB;YAC5DI;YACAC;YACAE;QACF;QAEAD,IAAIG,IAAI,GAAGA;QACXH,IAAIE,eAAe,GAAGA;QAEtB,MAAME,cAAc,MAAMT,iBAAiB;YACzCK;QACF;QAEA,OAAO;YACLI;YACAF;YACAC;QACF;IACF,EAAE,OAAOE,OAAgB;QACvB,MAAMZ,gBAAgBO;QACtB,MAAMK;IACR;AACF,EAAC"}

package/dist/auth/operations/forgotPassword.d.ts

@@ -0,0 +1,16 @@
+import type { AuthOperationsFromCollectionSlug, Collection } from '../../collections/config/types.js';
+import type { AuthCollectionSlug } from '../../index.js';
+import type { PayloadRequest } from '../../types/index.js';
+export type Arguments<TSlug extends AuthCollectionSlug> = {
+    collection: Collection;
+    data: {
+        [key: string]: unknown;
+    } & AuthOperationsFromCollectionSlug<TSlug>['forgotPassword'];
+    disableEmail?: boolean;
+    expiration?: number;
+    overrideAccess?: boolean;
+    req: PayloadRequest;
+};
+export type Result = string;
+export declare const forgotPasswordOperation: <TSlug extends AuthCollectionSlug>(incomingArgs: Arguments<TSlug>) => Promise<null | string>;
+//# sourceMappingURL=forgotPassword.d.ts.map

package/dist/auth/operations/forgotPassword.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgotPassword.d.ts","sourceRoot":"","sources":["../../../src/auth/operations/forgotPassword.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gCAAgC,EAChC,UAAU,EACX,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAS,MAAM,sBAAsB,CAAA;AAcjE,MAAM,MAAM,SAAS,CAAC,KAAK,SAAS,kBAAkB,IAAI;IACxD,UAAU,EAAE,UAAU,CAAA;IACtB,IAAI,EAAE;QACJ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAA;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,MAAM,GAAG,MAAM,CAAA;AAE3B,eAAO,MAAM,uBAAuB,GAAU,KAAK,SAAS,kBAAkB,gBAC9D,SAAS,CAAC,KAAK,CAAC,KAC7B,OAAO,CAAC,IAAI,GAAG,MAAM,CA2LvB,CAAA"}