@depup/payload 3.79.1-depup.0

package/dist/auth/strategies/local/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategies/local/authenticate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AAEtE,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAAA;AAE/C,KAAK,IAAI,GAAG;IACV,GAAG,EAAE,GAAG,CAAA;IACR,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,yBAAyB,sBAA6B,IAAI,KAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CA+B3F,CAAA"}

package/dist/auth/strategies/local/authenticate.js

@@ -0,0 +1,28 @@
+// @ts-strict-ignore
+import crypto from 'crypto';
+export const authenticateLocalStrategy = async ({ doc, password })=>{
+    try {
+        const { hash, salt } = doc;
+        if (typeof salt === 'string' && typeof hash === 'string') {
+            const res = await new Promise((resolve, reject)=>{
+                crypto.pbkdf2(password, salt, 25000, 512, 'sha256', (e, hashBuffer)=>{
+                    if (e) {
+                        reject(e);
+                    }
+                    const storedHashBuffer = Buffer.from(hash, 'hex');
+                    if (hashBuffer.length === storedHashBuffer.length && crypto.timingSafeEqual(hashBuffer, storedHashBuffer)) {
+                        resolve(doc);
+                    } else {
+                        reject(new Error('Invalid password'));
+                    }
+                });
+            });
+            return res;
+        }
+        return null;
+    } catch (ignore) {
+        return null;
+    }
+};
+
+//# sourceMappingURL=authenticate.js.map

package/dist/auth/strategies/local/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/authenticate.ts"],"sourcesContent":["// @ts-strict-ignore\nimport crypto from 'crypto'\n\nimport type { TypeWithID } from '../../../collections/config/types.js'\n\ntype Doc = Record<string, unknown> & TypeWithID\n\ntype Args = {\n  doc: Doc\n  password: string\n}\n\nexport const authenticateLocalStrategy = async ({ doc, password }: Args): Promise<Doc | null> => {\n  try {\n    const { hash, salt } = doc\n\n    if (typeof salt === 'string' && typeof hash === 'string') {\n      const res = await new Promise<Doc | null>((resolve, reject) => {\n        crypto.pbkdf2(password, salt, 25000, 512, 'sha256', (e, hashBuffer) => {\n          if (e) {\n            reject(e)\n          }\n\n          const storedHashBuffer = Buffer.from(hash, 'hex')\n\n          if (\n            hashBuffer.length === storedHashBuffer.length &&\n            crypto.timingSafeEqual(hashBuffer, storedHashBuffer)\n          ) {\n            resolve(doc)\n          } else {\n            reject(new Error('Invalid password'))\n          }\n        })\n      })\n\n      return res\n    }\n\n    return null\n  } catch (ignore) {\n    return null\n  }\n}\n"],"names":["crypto","authenticateLocalStrategy","doc","password","hash","salt","res","Promise","resolve","reject","pbkdf2","e","hashBuffer","storedHashBuffer","Buffer","from","length","timingSafeEqual","Error","ignore"],"mappings":"AAAA,oBAAoB;AACpB,OAAOA,YAAY,SAAQ;AAW3B,OAAO,MAAMC,4BAA4B,OAAO,EAAEC,GAAG,EAAEC,QAAQ,EAAQ;IACrE,IAAI;QACF,MAAM,EAAEC,IAAI,EAAEC,IAAI,EAAE,GAAGH;QAEvB,IAAI,OAAOG,SAAS,YAAY,OAAOD,SAAS,UAAU;YACxD,MAAME,MAAM,MAAM,IAAIC,QAAoB,CAACC,SAASC;gBAClDT,OAAOU,MAAM,CAACP,UAAUE,MAAM,OAAO,KAAK,UAAU,CAACM,GAAGC;oBACtD,IAAID,GAAG;wBACLF,OAAOE;oBACT;oBAEA,MAAME,mBAAmBC,OAAOC,IAAI,CAACX,MAAM;oBAE3C,IACEQ,WAAWI,MAAM,KAAKH,iBAAiBG,MAAM,IAC7ChB,OAAOiB,eAAe,CAACL,YAAYC,mBACnC;wBACAL,QAAQN;oBACV,OAAO;wBACLO,OAAO,IAAIS,MAAM;oBACnB;gBACF;YACF;YAEA,OAAOZ;QACT;QAEA,OAAO;IACT,EAAE,OAAOa,QAAQ;QACf,OAAO;IACT;AACF,EAAC"}

package/dist/auth/strategies/local/authenticate.spec.js

@@ -0,0 +1,83 @@
+import crypto from 'crypto';
+import { describe, expect, it } from 'vitest';
+import { authenticateLocalStrategy } from './authenticate.js';
+// Helper to generate hash/salt like Payload does
+const generateHashAndSalt = (password)=>{
+    const salt = crypto.randomBytes(32).toString('hex');
+    const hash = crypto.pbkdf2Sync(password, salt, 25000, 512, 'sha256').toString('hex');
+    return {
+        hash,
+        salt
+    };
+};
+describe('authenticateLocalStrategy', ()=>{
+    it('should return doc when password is valid', async ()=>{
+        const password = 'test-password';
+        const { hash, salt } = generateHashAndSalt(password);
+        const doc = {
+            id: 1,
+            hash,
+            salt
+        };
+        const result = await authenticateLocalStrategy({
+            doc,
+            password
+        });
+        expect(result).toEqual(doc);
+    });
+    it('should return null when password is invalid', async ()=>{
+        const { hash, salt } = generateHashAndSalt('correct-password');
+        const doc = {
+            id: 1,
+            hash,
+            salt
+        };
+        const result = await authenticateLocalStrategy({
+            doc,
+            password: 'wrong-password'
+        });
+        expect(result).toBeNull();
+    });
+    it('should return null when salt is missing', async ()=>{
+        const { hash } = generateHashAndSalt('test-password');
+        const doc = {
+            id: 1,
+            hash
+        };
+        const result = await authenticateLocalStrategy({
+            doc,
+            password: 'test-password'
+        });
+        expect(result).toBeNull();
+    });
+    it('should return null when hash is missing', async ()=>{
+        const { salt } = generateHashAndSalt('test-password');
+        const doc = {
+            id: 1,
+            salt
+        };
+        const result = await authenticateLocalStrategy({
+            doc,
+            password: 'test-password'
+        });
+        expect(result).toBeNull();
+    });
+    it('should return null when hash has different length (tampered)', async ()=>{
+        const password = 'test-password';
+        const { salt } = generateHashAndSalt(password);
+        // Truncated hash - different length than expected 512 bytes
+        const shortHash = 'abcd1234';
+        const doc = {
+            id: 1,
+            hash: shortHash,
+            salt
+        };
+        const result = await authenticateLocalStrategy({
+            doc,
+            password
+        });
+        expect(result).toBeNull();
+    });
+});
+
+//# sourceMappingURL=authenticate.spec.js.map

package/dist/auth/strategies/local/authenticate.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/authenticate.spec.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { authenticateLocalStrategy } from './authenticate.js'\n\n// Helper to generate hash/salt like Payload does\nconst generateHashAndSalt = (password: string): { hash: string; salt: string } => {\n  const salt = crypto.randomBytes(32).toString('hex')\n  const hash = crypto.pbkdf2Sync(password, salt, 25000, 512, 'sha256').toString('hex')\n  return { hash, salt }\n}\n\ndescribe('authenticateLocalStrategy', () => {\n  it('should return doc when password is valid', async () => {\n    const password = 'test-password'\n    const { hash, salt } = generateHashAndSalt(password)\n    const doc = { id: 1, hash, salt }\n\n    const result = await authenticateLocalStrategy({ doc, password })\n\n    expect(result).toEqual(doc)\n  })\n\n  it('should return null when password is invalid', async () => {\n    const { hash, salt } = generateHashAndSalt('correct-password')\n    const doc = { id: 1, hash, salt }\n\n    const result = await authenticateLocalStrategy({ doc, password: 'wrong-password' })\n\n    expect(result).toBeNull()\n  })\n\n  it('should return null when salt is missing', async () => {\n    const { hash } = generateHashAndSalt('test-password')\n    const doc = { id: 1, hash }\n\n    const result = await authenticateLocalStrategy({ doc, password: 'test-password' })\n\n    expect(result).toBeNull()\n  })\n\n  it('should return null when hash is missing', async () => {\n    const { salt } = generateHashAndSalt('test-password')\n    const doc = { id: 1, salt }\n\n    const result = await authenticateLocalStrategy({ doc, password: 'test-password' })\n\n    expect(result).toBeNull()\n  })\n\n  it('should return null when hash has different length (tampered)', async () => {\n    const password = 'test-password'\n    const { salt } = generateHashAndSalt(password)\n    // Truncated hash - different length than expected 512 bytes\n    const shortHash = 'abcd1234'\n    const doc = { id: 1, hash: shortHash, salt }\n\n    const result = await authenticateLocalStrategy({ doc, password })\n\n    expect(result).toBeNull()\n  })\n})\n"],"names":["crypto","describe","expect","it","authenticateLocalStrategy","generateHashAndSalt","password","salt","randomBytes","toString","hash","pbkdf2Sync","doc","id","result","toEqual","toBeNull","shortHash"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAE3B,SAASC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,yBAAyB,QAAQ,oBAAmB;AAE7D,iDAAiD;AACjD,MAAMC,sBAAsB,CAACC;IAC3B,MAAMC,OAAOP,OAAOQ,WAAW,CAAC,IAAIC,QAAQ,CAAC;IAC7C,MAAMC,OAAOV,OAAOW,UAAU,CAACL,UAAUC,MAAM,OAAO,KAAK,UAAUE,QAAQ,CAAC;IAC9E,OAAO;QAAEC;QAAMH;IAAK;AACtB;AAEAN,SAAS,6BAA6B;IACpCE,GAAG,4CAA4C;QAC7C,MAAMG,WAAW;QACjB,MAAM,EAAEI,IAAI,EAAEH,IAAI,EAAE,GAAGF,oBAAoBC;QAC3C,MAAMM,MAAM;YAAEC,IAAI;YAAGH;YAAMH;QAAK;QAEhC,MAAMO,SAAS,MAAMV,0BAA0B;YAAEQ;YAAKN;QAAS;QAE/DJ,OAAOY,QAAQC,OAAO,CAACH;IACzB;IAEAT,GAAG,+CAA+C;QAChD,MAAM,EAAEO,IAAI,EAAEH,IAAI,EAAE,GAAGF,oBAAoB;QAC3C,MAAMO,MAAM;YAAEC,IAAI;YAAGH;YAAMH;QAAK;QAEhC,MAAMO,SAAS,MAAMV,0BAA0B;YAAEQ;YAAKN,UAAU;QAAiB;QAEjFJ,OAAOY,QAAQE,QAAQ;IACzB;IAEAb,GAAG,2CAA2C;QAC5C,MAAM,EAAEO,IAAI,EAAE,GAAGL,oBAAoB;QACrC,MAAMO,MAAM;YAAEC,IAAI;YAAGH;QAAK;QAE1B,MAAMI,SAAS,MAAMV,0BAA0B;YAAEQ;YAAKN,UAAU;QAAgB;QAEhFJ,OAAOY,QAAQE,QAAQ;IACzB;IAEAb,GAAG,2CAA2C;QAC5C,MAAM,EAAEI,IAAI,EAAE,GAAGF,oBAAoB;QACrC,MAAMO,MAAM;YAAEC,IAAI;YAAGN;QAAK;QAE1B,MAAMO,SAAS,MAAMV,0BAA0B;YAAEQ;YAAKN,UAAU;QAAgB;QAEhFJ,OAAOY,QAAQE,QAAQ;IACzB;IAEAb,GAAG,gEAAgE;QACjE,MAAMG,WAAW;QACjB,MAAM,EAAEC,IAAI,EAAE,GAAGF,oBAAoBC;QACrC,4DAA4D;QAC5D,MAAMW,YAAY;QAClB,MAAML,MAAM;YAAEC,IAAI;YAAGH,MAAMO;YAAWV;QAAK;QAE3C,MAAMO,SAAS,MAAMV,0BAA0B;YAAEQ;YAAKN;QAAS;QAE/DJ,OAAOY,QAAQE,QAAQ;IACzB;AACF"}

package/dist/auth/strategies/local/generatePasswordSaltHash.d.ts

@@ -0,0 +1,13 @@
+import type { SanitizedCollectionConfig } from '../../../collections/config/types.js';
+import type { PayloadRequest } from '../../../types/index.js';
+type Args = {
+    collection: SanitizedCollectionConfig;
+    password: string;
+    req: PayloadRequest;
+};
+export declare const generatePasswordSaltHash: ({ collection, password: passwordToSet, req, }: Args) => Promise<{
+    hash: string;
+    salt: string;
+}>;
+export {};
+//# sourceMappingURL=generatePasswordSaltHash.d.ts.map

package/dist/auth/strategies/local/generatePasswordSaltHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatePasswordSaltHash.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategies/local/generatePasswordSaltHash.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAA;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAmB7D,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,yBAAyB,CAAA;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,wBAAwB,kDAIlC,IAAI,KAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA4B/C,CAAA"}

package/dist/auth/strategies/local/generatePasswordSaltHash.js

@@ -0,0 +1,48 @@
+import crypto from 'crypto';
+import { ValidationError } from '../../../errors/index.js';
+import { password } from '../../../fields/validations.js';
+function randomBytes() {
+    return new Promise((resolve, reject)=>crypto.randomBytes(32, (err, saltBuffer)=>err ? reject(err) : resolve(saltBuffer)));
+}
+function pbkdf2Promisified(password, salt) {
+    return new Promise((resolve, reject)=>crypto.pbkdf2(password, salt, 25000, 512, 'sha256', (err, hashRaw)=>err ? reject(err) : resolve(hashRaw)));
+}
+export const generatePasswordSaltHash = async ({ collection, password: passwordToSet, req })=>{
+    const validationResult = password(passwordToSet, {
+        name: 'password',
+        type: 'text',
+        blockData: {},
+        data: {},
+        event: 'submit',
+        path: [
+            'password'
+        ],
+        preferences: {
+            fields: {}
+        },
+        req,
+        required: true,
+        siblingData: {}
+    });
+    if (typeof validationResult === 'string') {
+        throw new ValidationError({
+            collection: collection?.slug,
+            errors: [
+                {
+                    message: validationResult,
+                    path: 'password'
+                }
+            ]
+        });
+    }
+    const saltBuffer = await randomBytes();
+    const salt = saltBuffer.toString('hex');
+    const hashRaw = await pbkdf2Promisified(passwordToSet, salt);
+    const hash = hashRaw.toString('hex');
+    return {
+        hash,
+        salt
+    };
+};
+
+//# sourceMappingURL=generatePasswordSaltHash.js.map

package/dist/auth/strategies/local/generatePasswordSaltHash.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/generatePasswordSaltHash.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { SanitizedCollectionConfig } from '../../../collections/config/types.js'\nimport type { PayloadRequest } from '../../../types/index.js'\n\nimport { ValidationError } from '../../../errors/index.js'\nimport { password } from '../../../fields/validations.js'\n\nfunction randomBytes(): Promise<Buffer> {\n  return new Promise((resolve, reject) =>\n    crypto.randomBytes(32, (err, saltBuffer) => (err ? reject(err) : resolve(saltBuffer))),\n  )\n}\n\nfunction pbkdf2Promisified(password: string, salt: string): Promise<Buffer> {\n  return new Promise((resolve, reject) =>\n    crypto.pbkdf2(password, salt, 25000, 512, 'sha256', (err, hashRaw) =>\n      err ? reject(err) : resolve(hashRaw),\n    ),\n  )\n}\n\ntype Args = {\n  collection: SanitizedCollectionConfig\n  password: string\n  req: PayloadRequest\n}\n\nexport const generatePasswordSaltHash = async ({\n  collection,\n  password: passwordToSet,\n  req,\n}: Args): Promise<{ hash: string; salt: string }> => {\n  const validationResult = password(passwordToSet, {\n    name: 'password',\n    type: 'text',\n    blockData: {},\n    data: {},\n    event: 'submit',\n    path: ['password'],\n    preferences: { fields: {} },\n    req,\n    required: true,\n    siblingData: {},\n  })\n\n  if (typeof validationResult === 'string') {\n    throw new ValidationError({\n      collection: collection?.slug,\n      errors: [{ message: validationResult, path: 'password' }],\n    })\n  }\n\n  const saltBuffer = await randomBytes()\n  const salt = saltBuffer.toString('hex')\n\n  const hashRaw = await pbkdf2Promisified(passwordToSet, salt)\n  const hash = hashRaw.toString('hex')\n\n  return { hash, salt }\n}\n"],"names":["crypto","ValidationError","password","randomBytes","Promise","resolve","reject","err","saltBuffer","pbkdf2Promisified","salt","pbkdf2","hashRaw","generatePasswordSaltHash","collection","passwordToSet","req","validationResult","name","type","blockData","data","event","path","preferences","fields","required","siblingData","slug","errors","message","toString","hash"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAK3B,SAASC,eAAe,QAAQ,2BAA0B;AAC1D,SAASC,QAAQ,QAAQ,iCAAgC;AAEzD,SAASC;IACP,OAAO,IAAIC,QAAQ,CAACC,SAASC,SAC3BN,OAAOG,WAAW,CAAC,IAAI,CAACI,KAAKC,aAAgBD,MAAMD,OAAOC,OAAOF,QAAQG;AAE7E;AAEA,SAASC,kBAAkBP,QAAgB,EAAEQ,IAAY;IACvD,OAAO,IAAIN,QAAQ,CAACC,SAASC,SAC3BN,OAAOW,MAAM,CAACT,UAAUQ,MAAM,OAAO,KAAK,UAAU,CAACH,KAAKK,UACxDL,MAAMD,OAAOC,OAAOF,QAAQO;AAGlC;AAQA,OAAO,MAAMC,2BAA2B,OAAO,EAC7CC,UAAU,EACVZ,UAAUa,aAAa,EACvBC,GAAG,EACE;IACL,MAAMC,mBAAmBf,SAASa,eAAe;QAC/CG,MAAM;QACNC,MAAM;QACNC,WAAW,CAAC;QACZC,MAAM,CAAC;QACPC,OAAO;QACPC,MAAM;YAAC;SAAW;QAClBC,aAAa;YAAEC,QAAQ,CAAC;QAAE;QAC1BT;QACAU,UAAU;QACVC,aAAa,CAAC;IAChB;IAEA,IAAI,OAAOV,qBAAqB,UAAU;QACxC,MAAM,IAAIhB,gBAAgB;YACxBa,YAAYA,YAAYc;YACxBC,QAAQ;gBAAC;oBAAEC,SAASb;oBAAkBM,MAAM;gBAAW;aAAE;QAC3D;IACF;IAEA,MAAMf,aAAa,MAAML;IACzB,MAAMO,OAAOF,WAAWuB,QAAQ,CAAC;IAEjC,MAAMnB,UAAU,MAAMH,kBAAkBM,eAAeL;IACvD,MAAMsB,OAAOpB,QAAQmB,QAAQ,CAAC;IAE9B,OAAO;QAAEC;QAAMtB;IAAK;AACtB,EAAC"}

package/dist/auth/strategies/local/incrementLoginAttempts.d.ts

@@ -0,0 +1,10 @@
+import type { SanitizedCollectionConfig } from '../../../collections/config/types.js';
+import { type Payload, type TypedUser } from '../../../index.js';
+type Args = {
+    collection: SanitizedCollectionConfig;
+    payload: Payload;
+    user: TypedUser;
+};
+export declare const incrementLoginAttempts: ({ collection, payload, user, }: Args) => Promise<void>;
+export {};
+//# sourceMappingURL=incrementLoginAttempts.d.ts.map

package/dist/auth/strategies/local/incrementLoginAttempts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incrementLoginAttempts.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategies/local/incrementLoginAttempts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAA;AAErF,OAAO,EAAmB,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAGjF,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,yBAAyB,CAAA;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,SAAS,CAAA;CAChB,CAAA;AAID,eAAO,MAAM,sBAAsB,mCAIhC,IAAI,KAAG,OAAO,CAAC,IAAI,CAuIrB,CAAA"}

package/dist/auth/strategies/local/incrementLoginAttempts.js

@@ -0,0 +1,114 @@
+import { isUserLocked } from '../../isUserLocked.js';
+// Note: this function does not use req in its updates, as we want those to be visible in parallel requests that are on a different
+// transaction. At the same time, we want updates from parallel requests to be visible here.
+export const incrementLoginAttempts = async ({ collection, payload, user })=>{
+    const { auth: { lockTime, maxLoginAttempts } } = collection;
+    const currentTime = Date.now();
+    let updatedLockUntil = null;
+    let updatedLoginAttempts = null;
+    if (user.lockUntil && !isUserLocked(new Date(user.lockUntil))) {
+        // Expired lock, restart count at 1
+        const updatedUser = await payload.db.updateOne({
+            id: user.id,
+            collection: collection.slug,
+            data: {
+                lockUntil: null,
+                loginAttempts: 1
+            },
+            select: {
+                lockUntil: true,
+                loginAttempts: true
+            }
+        });
+        updatedLockUntil = updatedUser.lockUntil;
+        updatedLoginAttempts = updatedUser.loginAttempts;
+        user.lockUntil = updatedLockUntil;
+    } else {
+        const data = {
+            loginAttempts: {
+                $inc: 1
+            }
+        };
+        const willReachMaxAttempts = typeof user.loginAttempts === 'number' && user.loginAttempts + 1 >= maxLoginAttempts;
+        // Lock the account if at max attempts and not already locked
+        if (willReachMaxAttempts) {
+            const lockUntil = new Date(currentTime + lockTime).toISOString();
+            data.lockUntil = lockUntil;
+        }
+        const updatedUser = await payload.db.updateOne({
+            id: user.id,
+            collection: collection.slug,
+            data,
+            select: {
+                lockUntil: true,
+                loginAttempts: true
+            }
+        });
+        updatedLockUntil = updatedUser.lockUntil;
+        updatedLoginAttempts = updatedUser.loginAttempts;
+    }
+    if (updatedLoginAttempts === null) {
+        throw new Error('Failed to update login attempts or lockUntil for user');
+    }
+    // Check updated latest lockUntil and loginAttempts in case there were parallel updates
+    const reachedMaxAttemptsForCurrentUser = typeof updatedLoginAttempts === 'number' && updatedLoginAttempts - 1 >= maxLoginAttempts;
+    const reachedMaxAttemptsForNextUser = typeof updatedLoginAttempts === 'number' && updatedLoginAttempts >= maxLoginAttempts;
+    if (reachedMaxAttemptsForCurrentUser) {
+        user.lockUntil = updatedLockUntil;
+    }
+    user.loginAttempts = updatedLoginAttempts - 1; // -1, as the updated increment is applied for the *next* login attempt, not the current one
+    if (reachedMaxAttemptsForNextUser && (!updatedLockUntil || !isUserLocked(new Date(updatedLockUntil)))) {
+        // If lockUntil reached max login attempts due to multiple parallel attempts but user was not locked yet,
+        const newLockUntil = new Date(currentTime + lockTime).toISOString();
+        await payload.db.updateOne({
+            id: user.id,
+            collection: collection.slug,
+            data: {
+                lockUntil: newLockUntil
+            },
+            returning: false
+        });
+        if (reachedMaxAttemptsForCurrentUser) {
+            user.lockUntil = newLockUntil;
+        }
+        if (collection.auth.useSessions) {
+            // Remove all active sessions that have been created in a 20 second window. This protects
+            // against brute force attacks - example: 99 incorrect, 1 correct parallel login attempts.
+            // The correct login attempt will be finished first, as it's faster due to not having to perform
+            // an additional db update here.
+            // However, this request (the incorrect login attempt request) can kill the successful login attempt here.
+            // Fetch user sessions separately (do not do this in the updateOne select in order to preserve the returning: true db call optimization)
+            const currentUser = await payload.db.findOne({
+                collection: collection.slug,
+                select: {
+                    sessions: true
+                },
+                where: {
+                    id: {
+                        equals: user.id
+                    }
+                }
+            });
+            if (currentUser?.sessions?.length) {
+                // Does not hurt also removing expired sessions
+                currentUser.sessions = currentUser.sessions.filter((session)=>{
+                    const sessionCreatedAt = new Date(session.createdAt);
+                    const twentySecondsAgo = new Date(currentTime - 20000);
+                    // Remove sessions created within the last 20 seconds
+                    return sessionCreatedAt <= twentySecondsAgo;
+                });
+                user.sessions = currentUser.sessions;
+                // Ensure updatedAt date is always updated
+                user.updatedAt = new Date().toISOString();
+                await payload.db.updateOne({
+                    id: user.id,
+                    collection: collection.slug,
+                    data: user,
+                    returning: false
+                });
+            }
+        }
+    }
+};
+
+//# sourceMappingURL=incrementLoginAttempts.js.map

package/dist/auth/strategies/local/incrementLoginAttempts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/incrementLoginAttempts.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../../../collections/config/types.js'\n\nimport { type JsonObject, type Payload, type TypedUser } from '../../../index.js'\nimport { isUserLocked } from '../../isUserLocked.js'\n\ntype Args = {\n  collection: SanitizedCollectionConfig\n  payload: Payload\n  user: TypedUser\n}\n\n// Note: this function does not use req in its updates, as we want those to be visible in parallel requests that are on a different\n// transaction. At the same time, we want updates from parallel requests to be visible here.\nexport const incrementLoginAttempts = async ({\n  collection,\n  payload,\n  user,\n}: Args): Promise<void> => {\n  const {\n    auth: { lockTime, maxLoginAttempts },\n  } = collection\n\n  const currentTime = Date.now()\n\n  let updatedLockUntil: null | string = null\n  let updatedLoginAttempts: null | number = null\n\n  if (user.lockUntil && !isUserLocked(new Date(user.lockUntil))) {\n    // Expired lock, restart count at 1\n    const updatedUser = await payload.db.updateOne({\n      id: user.id,\n      collection: collection.slug,\n      data: {\n        lockUntil: null,\n        loginAttempts: 1,\n      },\n      select: {\n        lockUntil: true,\n        loginAttempts: true,\n      },\n    })\n    updatedLockUntil = updatedUser.lockUntil\n    updatedLoginAttempts = updatedUser.loginAttempts\n    user.lockUntil = updatedLockUntil\n  } else {\n    const data: JsonObject = {\n      loginAttempts: {\n        $inc: 1,\n      },\n    }\n\n    const willReachMaxAttempts =\n      typeof user.loginAttempts === 'number' && user.loginAttempts + 1 >= maxLoginAttempts\n    // Lock the account if at max attempts and not already locked\n    if (willReachMaxAttempts) {\n      const lockUntil = new Date(currentTime + lockTime).toISOString()\n      data.lockUntil = lockUntil\n    }\n\n    const updatedUser = await payload.db.updateOne({\n      id: user.id,\n      collection: collection.slug,\n      data,\n      select: {\n        lockUntil: true,\n        loginAttempts: true,\n      },\n    })\n\n    updatedLockUntil = updatedUser.lockUntil\n    updatedLoginAttempts = updatedUser.loginAttempts\n  }\n\n  if (updatedLoginAttempts === null) {\n    throw new Error('Failed to update login attempts or lockUntil for user')\n  }\n\n  // Check updated latest lockUntil and loginAttempts in case there were parallel updates\n  const reachedMaxAttemptsForCurrentUser =\n    typeof updatedLoginAttempts === 'number' && updatedLoginAttempts - 1 >= maxLoginAttempts\n\n  const reachedMaxAttemptsForNextUser =\n    typeof updatedLoginAttempts === 'number' && updatedLoginAttempts >= maxLoginAttempts\n\n  if (reachedMaxAttemptsForCurrentUser) {\n    user.lockUntil = updatedLockUntil\n  }\n  user.loginAttempts = updatedLoginAttempts - 1 // -1, as the updated increment is applied for the *next* login attempt, not the current one\n\n  if (\n    reachedMaxAttemptsForNextUser &&\n    (!updatedLockUntil || !isUserLocked(new Date(updatedLockUntil)))\n  ) {\n    // If lockUntil reached max login attempts due to multiple parallel attempts but user was not locked yet,\n    const newLockUntil = new Date(currentTime + lockTime).toISOString()\n\n    await payload.db.updateOne({\n      id: user.id,\n      collection: collection.slug,\n      data: {\n        lockUntil: newLockUntil,\n      },\n      returning: false,\n    })\n\n    if (reachedMaxAttemptsForCurrentUser) {\n      user.lockUntil = newLockUntil\n    }\n\n    if (collection.auth.useSessions) {\n      // Remove all active sessions that have been created in a 20 second window. This protects\n      // against brute force attacks - example: 99 incorrect, 1 correct parallel login attempts.\n      // The correct login attempt will be finished first, as it's faster due to not having to perform\n      // an additional db update here.\n      // However, this request (the incorrect login attempt request) can kill the successful login attempt here.\n\n      // Fetch user sessions separately (do not do this in the updateOne select in order to preserve the returning: true db call optimization)\n      const currentUser = await payload.db.findOne<TypedUser>({\n        collection: collection.slug,\n        select: {\n          sessions: true,\n        },\n        where: {\n          id: {\n            equals: user.id,\n          },\n        },\n      })\n      if (currentUser?.sessions?.length) {\n        // Does not hurt also removing expired sessions\n        currentUser.sessions = currentUser.sessions.filter((session) => {\n          const sessionCreatedAt = new Date(session.createdAt)\n          const twentySecondsAgo = new Date(currentTime - 20000)\n\n          // Remove sessions created within the last 20 seconds\n          return sessionCreatedAt <= twentySecondsAgo\n        })\n\n        user.sessions = currentUser.sessions\n\n        // Ensure updatedAt date is always updated\n        user.updatedAt = new Date().toISOString()\n\n        await payload.db.updateOne({\n          id: user.id,\n          collection: collection.slug,\n          data: user,\n          returning: false,\n        })\n      }\n    }\n  }\n}\n"],"names":["isUserLocked","incrementLoginAttempts","collection","payload","user","auth","lockTime","maxLoginAttempts","currentTime","Date","now","updatedLockUntil","updatedLoginAttempts","lockUntil","updatedUser","db","updateOne","id","slug","data","loginAttempts","select","$inc","willReachMaxAttempts","toISOString","Error","reachedMaxAttemptsForCurrentUser","reachedMaxAttemptsForNextUser","newLockUntil","returning","useSessions","currentUser","findOne","sessions","where","equals","length","filter","session","sessionCreatedAt","createdAt","twentySecondsAgo","updatedAt"],"mappings":"AAGA,SAASA,YAAY,QAAQ,wBAAuB;AAQpD,mIAAmI;AACnI,4FAA4F;AAC5F,OAAO,MAAMC,yBAAyB,OAAO,EAC3CC,UAAU,EACVC,OAAO,EACPC,IAAI,EACC;IACL,MAAM,EACJC,MAAM,EAAEC,QAAQ,EAAEC,gBAAgB,EAAE,EACrC,GAAGL;IAEJ,MAAMM,cAAcC,KAAKC,GAAG;IAE5B,IAAIC,mBAAkC;IACtC,IAAIC,uBAAsC;IAE1C,IAAIR,KAAKS,SAAS,IAAI,CAACb,aAAa,IAAIS,KAAKL,KAAKS,SAAS,IAAI;QAC7D,mCAAmC;QACnC,MAAMC,cAAc,MAAMX,QAAQY,EAAE,CAACC,SAAS,CAAC;YAC7CC,IAAIb,KAAKa,EAAE;YACXf,YAAYA,WAAWgB,IAAI;YAC3BC,MAAM;gBACJN,WAAW;gBACXO,eAAe;YACjB;YACAC,QAAQ;gBACNR,WAAW;gBACXO,eAAe;YACjB;QACF;QACAT,mBAAmBG,YAAYD,SAAS;QACxCD,uBAAuBE,YAAYM,aAAa;QAChDhB,KAAKS,SAAS,GAAGF;IACnB,OAAO;QACL,MAAMQ,OAAmB;YACvBC,eAAe;gBACbE,MAAM;YACR;QACF;QAEA,MAAMC,uBACJ,OAAOnB,KAAKgB,aAAa,KAAK,YAAYhB,KAAKgB,aAAa,GAAG,KAAKb;QACtE,6DAA6D;QAC7D,IAAIgB,sBAAsB;YACxB,MAAMV,YAAY,IAAIJ,KAAKD,cAAcF,UAAUkB,WAAW;YAC9DL,KAAKN,SAAS,GAAGA;QACnB;QAEA,MAAMC,cAAc,MAAMX,QAAQY,EAAE,CAACC,SAAS,CAAC;YAC7CC,IAAIb,KAAKa,EAAE;YACXf,YAAYA,WAAWgB,IAAI;YAC3BC;YACAE,QAAQ;gBACNR,WAAW;gBACXO,eAAe;YACjB;QACF;QAEAT,mBAAmBG,YAAYD,SAAS;QACxCD,uBAAuBE,YAAYM,aAAa;IAClD;IAEA,IAAIR,yBAAyB,MAAM;QACjC,MAAM,IAAIa,MAAM;IAClB;IAEA,uFAAuF;IACvF,MAAMC,mCACJ,OAAOd,yBAAyB,YAAYA,uBAAuB,KAAKL;IAE1E,MAAMoB,gCACJ,OAAOf,yBAAyB,YAAYA,wBAAwBL;IAEtE,IAAImB,kCAAkC;QACpCtB,KAAKS,SAAS,GAAGF;IACnB;IACAP,KAAKgB,aAAa,GAAGR,uBAAuB,GAAE,4FAA4F;IAE1I,IACEe,iCACC,CAAA,CAAChB,oBAAoB,CAACX,aAAa,IAAIS,KAAKE,kBAAiB,GAC9D;QACA,yGAAyG;QACzG,MAAMiB,eAAe,IAAInB,KAAKD,cAAcF,UAAUkB,WAAW;QAEjE,MAAMrB,QAAQY,EAAE,CAACC,SAAS,CAAC;YACzBC,IAAIb,KAAKa,EAAE;YACXf,YAAYA,WAAWgB,IAAI;YAC3BC,MAAM;gBACJN,WAAWe;YACb;YACAC,WAAW;QACb;QAEA,IAAIH,kCAAkC;YACpCtB,KAAKS,SAAS,GAAGe;QACnB;QAEA,IAAI1B,WAAWG,IAAI,CAACyB,WAAW,EAAE;YAC/B,yFAAyF;YACzF,0FAA0F;YAC1F,gGAAgG;YAChG,gCAAgC;YAChC,0GAA0G;YAE1G,wIAAwI;YACxI,MAAMC,cAAc,MAAM5B,QAAQY,EAAE,CAACiB,OAAO,CAAY;gBACtD9B,YAAYA,WAAWgB,IAAI;gBAC3BG,QAAQ;oBACNY,UAAU;gBACZ;gBACAC,OAAO;oBACLjB,IAAI;wBACFkB,QAAQ/B,KAAKa,EAAE;oBACjB;gBACF;YACF;YACA,IAAIc,aAAaE,UAAUG,QAAQ;gBACjC,+CAA+C;gBAC/CL,YAAYE,QAAQ,GAAGF,YAAYE,QAAQ,CAACI,MAAM,CAAC,CAACC;oBAClD,MAAMC,mBAAmB,IAAI9B,KAAK6B,QAAQE,SAAS;oBACnD,MAAMC,mBAAmB,IAAIhC,KAAKD,cAAc;oBAEhD,qDAAqD;oBACrD,OAAO+B,oBAAoBE;gBAC7B;gBAEArC,KAAK6B,QAAQ,GAAGF,YAAYE,QAAQ;gBAEpC,0CAA0C;gBAC1C7B,KAAKsC,SAAS,GAAG,IAAIjC,OAAOe,WAAW;gBAEvC,MAAMrB,QAAQY,EAAE,CAACC,SAAS,CAAC;oBACzBC,IAAIb,KAAKa,EAAE;oBACXf,YAAYA,WAAWgB,IAAI;oBAC3BC,MAAMf;oBACNyB,WAAW;gBACb;YACF;QACF;IACF;AACF,EAAC"}

package/dist/auth/strategies/local/register.d.ts

@@ -0,0 +1,13 @@
+import type { SanitizedCollectionConfig } from '../../../collections/config/types.js';
+import type { JsonObject, Payload } from '../../../index.js';
+import type { PayloadRequest } from '../../../types/index.js';
+type Args = {
+    collection: SanitizedCollectionConfig;
+    doc: JsonObject;
+    password: string;
+    payload: Payload;
+    req: PayloadRequest;
+};
+export declare const registerLocalStrategy: ({ collection, doc, password, payload, req, }: Args) => Promise<Record<string, unknown>>;
+export {};
+//# sourceMappingURL=register.d.ts.map

package/dist/auth/strategies/local/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategies/local/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAA;AACrF,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,yBAAyB,CAAA;AAMhF,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,yBAAyB,CAAA;IACrC,GAAG,EAAE,UAAU,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,qBAAqB,iDAM/B,IAAI,KAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0ExC,CAAA"}

package/dist/auth/strategies/local/register.js

@@ -0,0 +1,77 @@
+import { ValidationError } from '../../../errors/index.js';
+import { getLoginOptions } from '../../getLoginOptions.js';
+import { generatePasswordSaltHash } from './generatePasswordSaltHash.js';
+export const registerLocalStrategy = async ({ collection, doc, password, payload, req })=>{
+    const loginWithUsername = collection?.auth?.loginWithUsername;
+    const { canLoginWithEmail, canLoginWithUsername } = getLoginOptions(loginWithUsername);
+    let whereConstraint;
+    if (!canLoginWithUsername) {
+        whereConstraint = {
+            email: {
+                equals: doc.email
+            }
+        };
+    } else {
+        whereConstraint = {
+            or: []
+        };
+        if (canLoginWithEmail && doc.email) {
+            whereConstraint.or?.push({
+                email: {
+                    equals: doc.email
+                }
+            });
+        }
+        if (doc.username) {
+            whereConstraint.or?.push({
+                username: {
+                    equals: doc.username
+                }
+            });
+        }
+    }
+    const existingUser = await payload.find({
+        collection: collection.slug,
+        depth: 0,
+        limit: 1,
+        pagination: false,
+        req,
+        where: whereConstraint
+    });
+    if (existingUser.docs.length > 0) {
+        throw new ValidationError({
+            collection: collection.slug,
+            errors: [
+                canLoginWithUsername ? {
+                    message: req.t('error:usernameAlreadyRegistered'),
+                    path: 'username'
+                } : {
+                    message: req.t('error:userEmailAlreadyRegistered'),
+                    path: 'email'
+                }
+            ]
+        });
+    }
+    const { hash, salt } = await generatePasswordSaltHash({
+        collection,
+        password,
+        req
+    });
+    const sanitizedDoc = {
+        ...doc
+    };
+    if (sanitizedDoc.password) {
+        delete sanitizedDoc.password;
+    }
+    return payload.db.create({
+        collection: collection.slug,
+        data: {
+            ...sanitizedDoc,
+            hash,
+            salt
+        },
+        req
+    });
+};
+
+//# sourceMappingURL=register.js.map

package/dist/auth/strategies/local/register.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/register.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../../../collections/config/types.js'\nimport type { JsonObject, Payload } from '../../../index.js'\nimport type { PayloadRequest, SelectType, Where } from '../../../types/index.js'\n\nimport { ValidationError } from '../../../errors/index.js'\nimport { getLoginOptions } from '../../getLoginOptions.js'\nimport { generatePasswordSaltHash } from './generatePasswordSaltHash.js'\n\ntype Args = {\n  collection: SanitizedCollectionConfig\n  doc: JsonObject\n  password: string\n  payload: Payload\n  req: PayloadRequest\n}\n\nexport const registerLocalStrategy = async ({\n  collection,\n  doc,\n  password,\n  payload,\n  req,\n}: Args): Promise<Record<string, unknown>> => {\n  const loginWithUsername = collection?.auth?.loginWithUsername\n\n  const { canLoginWithEmail, canLoginWithUsername } = getLoginOptions(loginWithUsername)\n\n  let whereConstraint: Where\n\n  if (!canLoginWithUsername) {\n    whereConstraint = {\n      email: {\n        equals: doc.email,\n      },\n    }\n  } else {\n    whereConstraint = {\n      or: [],\n    }\n\n    if (canLoginWithEmail && doc.email) {\n      whereConstraint.or?.push({\n        email: {\n          equals: doc.email,\n        },\n      })\n    }\n\n    if (doc.username) {\n      whereConstraint.or?.push({\n        username: {\n          equals: doc.username,\n        },\n      })\n    }\n  }\n\n  const existingUser = await payload.find({\n    collection: collection.slug,\n    depth: 0,\n    limit: 1,\n    pagination: false,\n    req,\n    where: whereConstraint,\n  })\n\n  if (existingUser.docs.length > 0) {\n    throw new ValidationError({\n      collection: collection.slug,\n      errors: [\n        canLoginWithUsername\n          ? {\n              message: req.t('error:usernameAlreadyRegistered'),\n              path: 'username',\n            }\n          : { message: req.t('error:userEmailAlreadyRegistered'), path: 'email' },\n      ],\n    })\n  }\n\n  const { hash, salt } = await generatePasswordSaltHash({ collection, password, req })\n\n  const sanitizedDoc = { ...doc }\n  if (sanitizedDoc.password) {\n    delete sanitizedDoc.password\n  }\n\n  return payload.db.create({\n    collection: collection.slug,\n    data: {\n      ...sanitizedDoc,\n      hash,\n      salt,\n    },\n    req,\n  })\n}\n"],"names":["ValidationError","getLoginOptions","generatePasswordSaltHash","registerLocalStrategy","collection","doc","password","payload","req","loginWithUsername","auth","canLoginWithEmail","canLoginWithUsername","whereConstraint","email","equals","or","push","username","existingUser","find","slug","depth","limit","pagination","where","docs","length","errors","message","t","path","hash","salt","sanitizedDoc","db","create","data"],"mappings":"AAIA,SAASA,eAAe,QAAQ,2BAA0B;AAC1D,SAASC,eAAe,QAAQ,2BAA0B;AAC1D,SAASC,wBAAwB,QAAQ,gCAA+B;AAUxE,OAAO,MAAMC,wBAAwB,OAAO,EAC1CC,UAAU,EACVC,GAAG,EACHC,QAAQ,EACRC,OAAO,EACPC,GAAG,EACE;IACL,MAAMC,oBAAoBL,YAAYM,MAAMD;IAE5C,MAAM,EAAEE,iBAAiB,EAAEC,oBAAoB,EAAE,GAAGX,gBAAgBQ;IAEpE,IAAII;IAEJ,IAAI,CAACD,sBAAsB;QACzBC,kBAAkB;YAChBC,OAAO;gBACLC,QAAQV,IAAIS,KAAK;YACnB;QACF;IACF,OAAO;QACLD,kBAAkB;YAChBG,IAAI,EAAE;QACR;QAEA,IAAIL,qBAAqBN,IAAIS,KAAK,EAAE;YAClCD,gBAAgBG,EAAE,EAAEC,KAAK;gBACvBH,OAAO;oBACLC,QAAQV,IAAIS,KAAK;gBACnB;YACF;QACF;QAEA,IAAIT,IAAIa,QAAQ,EAAE;YAChBL,gBAAgBG,EAAE,EAAEC,KAAK;gBACvBC,UAAU;oBACRH,QAAQV,IAAIa,QAAQ;gBACtB;YACF;QACF;IACF;IAEA,MAAMC,eAAe,MAAMZ,QAAQa,IAAI,CAAC;QACtChB,YAAYA,WAAWiB,IAAI;QAC3BC,OAAO;QACPC,OAAO;QACPC,YAAY;QACZhB;QACAiB,OAAOZ;IACT;IAEA,IAAIM,aAAaO,IAAI,CAACC,MAAM,GAAG,GAAG;QAChC,MAAM,IAAI3B,gBAAgB;YACxBI,YAAYA,WAAWiB,IAAI;YAC3BO,QAAQ;gBACNhB,uBACI;oBACEiB,SAASrB,IAAIsB,CAAC,CAAC;oBACfC,MAAM;gBACR,IACA;oBAAEF,SAASrB,IAAIsB,CAAC,CAAC;oBAAqCC,MAAM;gBAAQ;aACzE;QACH;IACF;IAEA,MAAM,EAAEC,IAAI,EAAEC,IAAI,EAAE,GAAG,MAAM/B,yBAAyB;QAAEE;QAAYE;QAAUE;IAAI;IAElF,MAAM0B,eAAe;QAAE,GAAG7B,GAAG;IAAC;IAC9B,IAAI6B,aAAa5B,QAAQ,EAAE;QACzB,OAAO4B,aAAa5B,QAAQ;IAC9B;IAEA,OAAOC,QAAQ4B,EAAE,CAACC,MAAM,CAAC;QACvBhC,YAAYA,WAAWiB,IAAI;QAC3BgB,MAAM;YACJ,GAAGH,YAAY;YACfF;YACAC;QACF;QACAzB;IACF;AACF,EAAC"}

package/dist/auth/strategies/local/resetLoginAttempts.d.ts

@@ -0,0 +1,12 @@
+import type { SanitizedCollectionConfig, TypeWithID } from '../../../collections/config/types.js';
+import type { Payload } from '../../../index.js';
+import type { PayloadRequest } from '../../../types/index.js';
+type Args = {
+    collection: SanitizedCollectionConfig;
+    doc: Record<string, unknown> & TypeWithID;
+    payload: Payload;
+    req: PayloadRequest;
+};
+export declare const resetLoginAttempts: ({ collection, doc, payload, req, }: Args) => Promise<void>;
+export {};
+//# sourceMappingURL=resetLoginAttempts.d.ts.map

package/dist/auth/strategies/local/resetLoginAttempts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resetLoginAttempts.d.ts","sourceRoot":"","sources":["../../../../src/auth/strategies/local/resetLoginAttempts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AACjG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,yBAAyB,CAAA;IACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAAA;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,kBAAkB,uCAK5B,IAAI,KAAG,OAAO,CAAC,IAAI,CAiBrB,CAAA"}

package/dist/auth/strategies/local/resetLoginAttempts.js

@@ -0,0 +1,17 @@
+export const resetLoginAttempts = async ({ collection, doc, payload, req })=>{
+    if (!('lockUntil' in doc && typeof doc.lockUntil === 'string') && (!('loginAttempts' in doc) || doc.loginAttempts === 0)) {
+        return;
+    }
+    await payload.db.updateOne({
+        id: doc.id,
+        collection: collection.slug,
+        data: {
+            lockUntil: null,
+            loginAttempts: 0
+        },
+        req,
+        returning: false
+    });
+};
+
+//# sourceMappingURL=resetLoginAttempts.js.map

package/dist/auth/strategies/local/resetLoginAttempts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/strategies/local/resetLoginAttempts.ts"],"sourcesContent":["import type { SanitizedCollectionConfig, TypeWithID } from '../../../collections/config/types.js'\nimport type { Payload } from '../../../index.js'\nimport type { PayloadRequest } from '../../../types/index.js'\n\ntype Args = {\n  collection: SanitizedCollectionConfig\n  doc: Record<string, unknown> & TypeWithID\n  payload: Payload\n  req: PayloadRequest\n}\n\nexport const resetLoginAttempts = async ({\n  collection,\n  doc,\n  payload,\n  req,\n}: Args): Promise<void> => {\n  if (\n    !('lockUntil' in doc && typeof doc.lockUntil === 'string') &&\n    (!('loginAttempts' in doc) || doc.loginAttempts === 0)\n  ) {\n    return\n  }\n  await payload.db.updateOne({\n    id: doc.id,\n    collection: collection.slug,\n    data: {\n      lockUntil: null,\n      loginAttempts: 0,\n    },\n    req,\n    returning: false,\n  })\n}\n"],"names":["resetLoginAttempts","collection","doc","payload","req","lockUntil","loginAttempts","db","updateOne","id","slug","data","returning"],"mappings":"AAWA,OAAO,MAAMA,qBAAqB,OAAO,EACvCC,UAAU,EACVC,GAAG,EACHC,OAAO,EACPC,GAAG,EACE;IACL,IACE,CAAE,CAAA,eAAeF,OAAO,OAAOA,IAAIG,SAAS,KAAK,QAAO,KACvD,CAAA,CAAE,CAAA,mBAAmBH,GAAE,KAAMA,IAAII,aAAa,KAAK,CAAA,GACpD;QACA;IACF;IACA,MAAMH,QAAQI,EAAE,CAACC,SAAS,CAAC;QACzBC,IAAIP,IAAIO,EAAE;QACVR,YAAYA,WAAWS,IAAI;QAC3BC,MAAM;YACJN,WAAW;YACXC,eAAe;QACjB;QACAF;QACAQ,WAAW;IACb;AACF,EAAC"}