@payloadcms/figma 0.0.1-alpha.1 → 0.0.1-alpha.10

package/dist/oauth/exports/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/oauth/exports/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA"}

package/dist/oauth/exports/client.js

@@ -0,0 +1,4 @@
+export { DefaultLoginButton } from '../components/LoginButton/index.jsx';
+export { LogoutButton } from '../components/LogoutButton/index.jsx';
+
+//# sourceMappingURL=client.js.map

package/dist/oauth/exports/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/exports/client.ts"],"sourcesContent":["export { DefaultLoginButton } from '../components/LoginButton/index.jsx'\nexport { LogoutButton } from '../components/LogoutButton/index.jsx'\n"],"names":["DefaultLoginButton","LogoutButton"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,sCAAqC;AACxE,SAASC,YAAY,QAAQ,uCAAsC"}

package/dist/oauth/hooks/afterLogout.d.ts

@@ -0,0 +1,8 @@
+import type { CollectionAfterLogoutHook, CollectionConfig } from 'payload';
+import type { PluginOptions } from '../types.js';
+export declare const getAfterLogout: ({ collection, cookieName, pluginOptions, }: {
+    collection: CollectionConfig;
+    cookieName: string;
+    pluginOptions: PluginOptions;
+}) => CollectionAfterLogoutHook;
+//# sourceMappingURL=afterLogout.d.ts.map

package/dist/oauth/hooks/afterLogout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"afterLogout.d.ts","sourceRoot":"","sources":["../../../src/oauth/hooks/afterLogout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAKhD,eAAO,MAAM,cAAc,+CAKtB;IACD,UAAU,EAAE,gBAAgB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,aAAa,CAAA;CAC7B,KAAG,yBAuBH,CAAA"}

package/dist/oauth/hooks/afterLogout.js

@@ -0,0 +1,27 @@
+import { clearCookie } from '../utilities/clearCookie.js';
+import { createCookieOptions } from '../utilities/createCookieOptions.js';
+export const getAfterLogout = ({ collection, cookieName, pluginOptions })=>({ req })=>{
+        if (!req) {
+            return;
+        }
+        if (!req.responseHeaders) {
+            req.responseHeaders = new Headers();
+        }
+        const cookieOptions = createCookieOptions({
+            collection,
+            headers: req.headers,
+            pluginOptions
+        });
+        clearCookie({
+            cookieName,
+            cookieOptions,
+            req
+        });
+        clearCookie({
+            cookieName: `${cookieName}-refresh`,
+            cookieOptions,
+            req
+        });
+    };
+
+//# sourceMappingURL=afterLogout.js.map

package/dist/oauth/hooks/afterLogout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/hooks/afterLogout.ts"],"sourcesContent":["import type { CollectionAfterLogoutHook, CollectionConfig } from 'payload'\n\nimport type { PluginOptions } from '../types.js'\n\nimport { clearCookie } from '../utilities/clearCookie.js'\nimport { createCookieOptions } from '../utilities/createCookieOptions.js'\n\nexport const getAfterLogout =\n  ({\n    collection,\n    cookieName,\n    pluginOptions,\n  }: {\n    collection: CollectionConfig\n    cookieName: string\n    pluginOptions: PluginOptions\n  }): CollectionAfterLogoutHook =>\n  ({ req }) => {\n    if (!req) {\n      return\n    }\n\n    if (!req.responseHeaders) {\n      req.responseHeaders = new Headers()\n    }\n\n    const cookieOptions = createCookieOptions({ collection, headers: req.headers, pluginOptions })\n\n    clearCookie({\n      cookieName,\n      cookieOptions,\n      req,\n    })\n\n    clearCookie({\n      cookieName: `${cookieName}-refresh`,\n      cookieOptions,\n      req,\n    })\n  }\n"],"names":["clearCookie","createCookieOptions","getAfterLogout","collection","cookieName","pluginOptions","req","responseHeaders","Headers","cookieOptions","headers"],"mappings":"AAIA,SAASA,WAAW,QAAQ,8BAA6B;AACzD,SAASC,mBAAmB,QAAQ,sCAAqC;AAEzE,OAAO,MAAMC,iBACX,CAAC,EACCC,UAAU,EACVC,UAAU,EACVC,aAAa,EAKd,GACD,CAAC,EAAEC,GAAG,EAAE;QACN,IAAI,CAACA,KAAK;YACR;QACF;QAEA,IAAI,CAACA,IAAIC,eAAe,EAAE;YACxBD,IAAIC,eAAe,GAAG,IAAIC;QAC5B;QAEA,MAAMC,gBAAgBR,oBAAoB;YAAEE;YAAYO,SAASJ,IAAII,OAAO;YAAEL;QAAc;QAE5FL,YAAY;YACVI;YACAK;YACAH;QACF;QAEAN,YAAY;YACVI,YAAY,GAAGA,WAAW,QAAQ,CAAC;YACnCK;YACAH;QACF;IACF,EAAC"}

package/dist/oauth/hooks/me.d.ts

@@ -0,0 +1,5 @@
+import { type CollectionMeHook } from 'payload';
+export declare const getMeHook: ({ cookieName }: {
+    cookieName: string;
+}) => CollectionMeHook;
+//# sourceMappingURL=me.d.ts.map

package/dist/oauth/hooks/me.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../../src/oauth/hooks/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAgB,MAAM,SAAS,CAAA;AAK7D,eAAO,MAAM,SAAS,mBACH;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,KAAG,gBAgDzC,CAAA"}

package/dist/oauth/hooks/me.js

@@ -0,0 +1,55 @@
+import { parseCookies } from 'payload';
+import { createDebugLogger } from '../utilities/createDebugLogger.js';
+import { getTokenExp } from '../utilities/getTokenExp.js';
+export const getMeHook = ({ cookieName })=>// eslint-disable-next-line @typescript-eslint/require-await
+    async ({ args, user })=>{
+        const debugLogger = createDebugLogger(args.req.payload, false);
+        const cookies = parseCookies(args.req.headers);
+        const refreshToken = cookies.get(`${cookieName}-refresh`);
+        let token = cookies.get(cookieName);
+        let exp;
+        if (refreshToken) {
+            exp = getTokenExp({
+                debugLogger,
+                token: refreshToken
+            });
+            if (exp) {
+                return {
+                    exp,
+                    user
+                };
+            }
+        }
+        if (!token) {
+            // Parse Authorization header if exists
+            const jwtFromHeader = args.req.headers.get('authorization');
+            if (typeof jwtFromHeader === 'string' && jwtFromHeader.startsWith('Bearer ')) {
+                token = jwtFromHeader.replace('Bearer ', '');
+                exp = getTokenExp({
+                    debugLogger,
+                    token
+                });
+                if (exp) {
+                    return {
+                        exp,
+                        user
+                    };
+                }
+            }
+        }
+        if (token) {
+            exp = getTokenExp({
+                debugLogger,
+                token
+            });
+            if (exp) {
+                return {
+                    exp,
+                    user
+                };
+            }
+        }
+        return undefined;
+    };
+
+//# sourceMappingURL=me.js.map

package/dist/oauth/hooks/me.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/hooks/me.ts"],"sourcesContent":["import { type CollectionMeHook, parseCookies } from 'payload'\n\nimport { createDebugLogger } from '../utilities/createDebugLogger.js'\nimport { getTokenExp } from '../utilities/getTokenExp.js'\n\nexport const getMeHook =\n  ({ cookieName }: { cookieName: string }): CollectionMeHook =>\n  // eslint-disable-next-line @typescript-eslint/require-await\n  async ({ args, user }) => {\n    const debugLogger = createDebugLogger(args.req.payload, false)\n\n    const cookies = parseCookies(args.req.headers)\n    const refreshToken = cookies.get(`${cookieName}-refresh`)\n    let token = cookies.get(cookieName)\n\n    let exp: number | undefined\n\n    if (refreshToken) {\n      exp = getTokenExp({ debugLogger, token: refreshToken })\n      if (exp) {\n        return {\n          exp,\n          user,\n        }\n      }\n    }\n\n    if (!token) {\n      // Parse Authorization header if exists\n      const jwtFromHeader = args.req.headers.get('authorization')\n      if (typeof jwtFromHeader === 'string' && jwtFromHeader.startsWith('Bearer ')) {\n        token = jwtFromHeader.replace('Bearer ', '')\n        exp = getTokenExp({ debugLogger, token })\n        if (exp) {\n          return {\n            exp,\n            user,\n          }\n        }\n      }\n    }\n\n    if (token) {\n      exp = getTokenExp({ debugLogger, token })\n\n      if (exp) {\n        return {\n          exp,\n          user,\n        }\n      }\n    }\n\n    return undefined\n  }\n"],"names":["parseCookies","createDebugLogger","getTokenExp","getMeHook","cookieName","args","user","debugLogger","req","payload","cookies","headers","refreshToken","get","token","exp","jwtFromHeader","startsWith","replace","undefined"],"mappings":"AAAA,SAAgCA,YAAY,QAAQ,UAAS;AAE7D,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,WAAW,QAAQ,8BAA6B;AAEzD,OAAO,MAAMC,YACX,CAAC,EAAEC,UAAU,EAA0B,GACvC,4DAA4D;IAC5D,OAAO,EAAEC,IAAI,EAAEC,IAAI,EAAE;QACnB,MAAMC,cAAcN,kBAAkBI,KAAKG,GAAG,CAACC,OAAO,EAAE;QAExD,MAAMC,UAAUV,aAAaK,KAAKG,GAAG,CAACG,OAAO;QAC7C,MAAMC,eAAeF,QAAQG,GAAG,CAAC,GAAGT,WAAW,QAAQ,CAAC;QACxD,IAAIU,QAAQJ,QAAQG,GAAG,CAACT;QAExB,IAAIW;QAEJ,IAAIH,cAAc;YAChBG,MAAMb,YAAY;gBAAEK;gBAAaO,OAAOF;YAAa;YACrD,IAAIG,KAAK;gBACP,OAAO;oBACLA;oBACAT;gBACF;YACF;QACF;QAEA,IAAI,CAACQ,OAAO;YACV,uCAAuC;YACvC,MAAME,gBAAgBX,KAAKG,GAAG,CAACG,OAAO,CAACE,GAAG,CAAC;YAC3C,IAAI,OAAOG,kBAAkB,YAAYA,cAAcC,UAAU,CAAC,YAAY;gBAC5EH,QAAQE,cAAcE,OAAO,CAAC,WAAW;gBACzCH,MAAMb,YAAY;oBAAEK;oBAAaO;gBAAM;gBACvC,IAAIC,KAAK;oBACP,OAAO;wBACLA;wBACAT;oBACF;gBACF;YACF;QACF;QAEA,IAAIQ,OAAO;YACTC,MAAMb,YAAY;gBAAEK;gBAAaO;YAAM;YAEvC,IAAIC,KAAK;gBACP,OAAO;oBACLA;oBACAT;gBACF;YACF;QACF;QAEA,OAAOa;IACT,EAAC"}

package/dist/oauth/hooks/refresh.d.ts

@@ -0,0 +1,8 @@
+import { type CollectionRefreshHook } from 'payload';
+import type { Strategy } from '../strategy/index.js';
+import type { PluginOptions } from '../types.js';
+export declare const getRefreshHook: ({ pluginOptions, strategy, }: {
+    pluginOptions: PluginOptions;
+    strategy: Strategy;
+}) => CollectionRefreshHook;
+//# sourceMappingURL=refresh.d.ts.map

package/dist/oauth/hooks/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../src/oauth/hooks/refresh.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,qBAAqB,EAAgC,MAAM,SAAS,CAAA;AAElF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAShD,eAAO,MAAM,cAAc,iCAItB;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,QAAQ,EAAE,QAAQ,CAAA;CACnB,KAAG,qBAiGH,CAAA"}

package/dist/oauth/hooks/refresh.js

@@ -0,0 +1,91 @@
+import jwt from 'jsonwebtoken';
+import { generateCookie, parseCookies } from 'payload';
+import { createCookieOptions } from '../utilities/createCookieOptions.js';
+import { createDebugLogger } from '../utilities/createDebugLogger.js';
+import { getCookieExpiration } from '../utilities/getCookieExpiration.js';
+import { getTokenExp } from '../utilities/getTokenExp.js';
+import { mergeHeaders } from '../utilities/mergeHeaders.js';
+import { refreshTokens } from '../utilities/refreshTokens.js';
+export const getRefreshHook = ({ pluginOptions, strategy })=>async ({ args, user })=>{
+        if (!args.req.responseHeaders) {
+            args.req.responseHeaders = new Headers();
+        }
+        const debugLogger = createDebugLogger(args.req.payload, strategy.debug);
+        const cookies = parseCookies(args.req.headers);
+        if (strategy.collectionOptions.usePayloadJWT) {
+            const token = cookies.get(strategy.cookieName);
+            if (!token) {
+                args.req.payload.logger.error(`No token found under cookie: ${strategy.cookieName}`);
+                return undefined;
+            }
+            const decoded = jwt.verify(token, args.req.payload.secret);
+            strategy.debugLog('usePayloadJWT: true - Refreshing token', {
+                decoded,
+                [strategy.cookieName]: token
+            });
+            if (decoded && typeof decoded === 'object') {
+                const auth = typeof strategy.collection.auth === 'object' ? strategy.collection.auth : {};
+                const { tokenExpiration: authTokenExp } = auth;
+                const tokenExpiration = authTokenExp || 7200;
+                delete decoded.exp;
+                delete decoded.iat;
+                const refreshedToken = jwt.sign(decoded, args.req.payload.secret, {
+                    expiresIn: tokenExpiration
+                });
+                const cookieOptions = createCookieOptions({
+                    collection: strategy.collection,
+                    headers: args.req.headers,
+                    pluginOptions
+                });
+                const refreshCookie = generateCookie({
+                    returnCookieAsObject: false,
+                    ...cookieOptions,
+                    name: `${strategy.cookieName}-refresh`,
+                    expires: getCookieExpiration(cookieOptions?.expires ?? getTokenExp({
+                        debugLogger,
+                        token
+                    }) ?? 31_556_952),
+                    value: refreshedToken
+                });
+                args.req.responseHeaders.append('Set-Cookie', refreshCookie);
+                const newDecoded = jwt.decode(refreshedToken);
+                strategy.debugLog('usePayloadJWT: true - Received new refresh token', {
+                    newDecoded,
+                    refreshedToken
+                });
+                if (typeof newDecoded === 'object' && newDecoded) {
+                    return {
+                        exp: Number(newDecoded.exp),
+                        refreshedToken,
+                        strategy: strategy.name,
+                        user
+                    };
+                }
+            }
+        } else {
+            const refreshToken = cookies.get(`${strategy.cookieName}-refresh`);
+            if (!refreshToken) {
+                return undefined;
+            }
+            const result = await refreshTokens({
+                payload: args.req.payload,
+                refreshToken,
+                strategy
+            });
+            if (!result) {
+                return undefined;
+            }
+            mergeHeaders(result.headers, args.req.responseHeaders);
+            if (result.decodedOauthToken.exp) {
+                return {
+                    exp: result.decodedOauthToken.exp,
+                    refreshedToken: result.token,
+                    strategy: strategy.name,
+                    user
+                };
+            }
+        }
+        return undefined;
+    };
+
+//# sourceMappingURL=refresh.js.map

package/dist/oauth/hooks/refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/hooks/refresh.ts"],"sourcesContent":["import jwt from 'jsonwebtoken'\nimport { type CollectionRefreshHook, generateCookie, parseCookies } from 'payload'\n\nimport type { Strategy } from '../strategy/index.js'\nimport type { PluginOptions } from '../types.js'\n\nimport { createCookieOptions } from '../utilities/createCookieOptions.js'\nimport { createDebugLogger } from '../utilities/createDebugLogger.js'\nimport { getCookieExpiration } from '../utilities/getCookieExpiration.js'\nimport { getTokenExp } from '../utilities/getTokenExp.js'\nimport { mergeHeaders } from '../utilities/mergeHeaders.js'\nimport { refreshTokens } from '../utilities/refreshTokens.js'\n\nexport const getRefreshHook =\n  ({\n    pluginOptions,\n    strategy,\n  }: {\n    pluginOptions: PluginOptions\n    strategy: Strategy\n  }): CollectionRefreshHook =>\n  async ({ args, user }) => {\n    if (!args.req.responseHeaders) {\n      args.req.responseHeaders = new Headers()\n    }\n\n    const debugLogger = createDebugLogger(args.req.payload, strategy.debug)\n\n    const cookies = parseCookies(args.req.headers)\n\n    if (strategy.collectionOptions.usePayloadJWT) {\n      const token = cookies.get(strategy.cookieName)\n\n      if (!token) {\n        args.req.payload.logger.error(`No token found under cookie: ${strategy.cookieName}`)\n        return undefined\n      }\n\n      const decoded = jwt.verify(token, args.req.payload.secret)\n\n      strategy.debugLog('usePayloadJWT: true - Refreshing token', {\n        decoded,\n        [strategy.cookieName]: token,\n      })\n\n      if (decoded && typeof decoded === 'object') {\n        const auth = typeof strategy.collection.auth === 'object' ? strategy.collection.auth : {}\n        const { tokenExpiration: authTokenExp } = auth\n        const tokenExpiration = authTokenExp || 7200\n\n        delete decoded.exp\n        delete decoded.iat\n\n        const refreshedToken = jwt.sign(decoded, args.req.payload.secret, {\n          expiresIn: tokenExpiration,\n        })\n\n        const cookieOptions = createCookieOptions({\n          collection: strategy.collection,\n          headers: args.req.headers,\n          pluginOptions,\n        })\n\n        const refreshCookie = generateCookie({\n          returnCookieAsObject: false,\n          ...cookieOptions,\n          name: `${strategy.cookieName}-refresh`,\n          expires: getCookieExpiration(\n            cookieOptions?.expires ?? getTokenExp({ debugLogger, token }) ?? 31_556_952,\n          ),\n          value: refreshedToken,\n        }) as string\n\n        args.req.responseHeaders.append('Set-Cookie', refreshCookie)\n\n        const newDecoded = jwt.decode(refreshedToken)\n\n        strategy.debugLog('usePayloadJWT: true - Received new refresh token', {\n          newDecoded,\n          refreshedToken,\n        })\n\n        if (typeof newDecoded === 'object' && newDecoded) {\n          return {\n            exp: Number(newDecoded.exp),\n            refreshedToken,\n            strategy: strategy.name,\n            user,\n          }\n        }\n      }\n    } else {\n      const refreshToken = cookies.get(`${strategy.cookieName}-refresh`)\n\n      if (!refreshToken) {\n        return undefined\n      }\n\n      const result = await refreshTokens({ payload: args.req.payload, refreshToken, strategy })\n\n      if (!result) {\n        return undefined\n      }\n\n      mergeHeaders(result.headers, args.req.responseHeaders)\n\n      if (result.decodedOauthToken.exp) {\n        return {\n          exp: result.decodedOauthToken.exp,\n          refreshedToken: result.token,\n          strategy: strategy.name,\n          user,\n        }\n      }\n    }\n\n    return undefined\n  }\n"],"names":["jwt","generateCookie","parseCookies","createCookieOptions","createDebugLogger","getCookieExpiration","getTokenExp","mergeHeaders","refreshTokens","getRefreshHook","pluginOptions","strategy","args","user","req","responseHeaders","Headers","debugLogger","payload","debug","cookies","headers","collectionOptions","usePayloadJWT","token","get","cookieName","logger","error","undefined","decoded","verify","secret","debugLog","auth","collection","tokenExpiration","authTokenExp","exp","iat","refreshedToken","sign","expiresIn","cookieOptions","refreshCookie","returnCookieAsObject","name","expires","value","append","newDecoded","decode","Number","refreshToken","result","decodedOauthToken"],"mappings":"AAAA,OAAOA,SAAS,eAAc;AAC9B,SAAqCC,cAAc,EAAEC,YAAY,QAAQ,UAAS;AAKlF,SAASC,mBAAmB,QAAQ,sCAAqC;AACzE,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,mBAAmB,QAAQ,sCAAqC;AACzE,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,YAAY,QAAQ,+BAA8B;AAC3D,SAASC,aAAa,QAAQ,gCAA+B;AAE7D,OAAO,MAAMC,iBACX,CAAC,EACCC,aAAa,EACbC,QAAQ,EAIT,GACD,OAAO,EAAEC,IAAI,EAAEC,IAAI,EAAE;QACnB,IAAI,CAACD,KAAKE,GAAG,CAACC,eAAe,EAAE;YAC7BH,KAAKE,GAAG,CAACC,eAAe,GAAG,IAAIC;QACjC;QAEA,MAAMC,cAAcb,kBAAkBQ,KAAKE,GAAG,CAACI,OAAO,EAAEP,SAASQ,KAAK;QAEtE,MAAMC,UAAUlB,aAAaU,KAAKE,GAAG,CAACO,OAAO;QAE7C,IAAIV,SAASW,iBAAiB,CAACC,aAAa,EAAE;YAC5C,MAAMC,QAAQJ,QAAQK,GAAG,CAACd,SAASe,UAAU;YAE7C,IAAI,CAACF,OAAO;gBACVZ,KAAKE,GAAG,CAACI,OAAO,CAACS,MAAM,CAACC,KAAK,CAAC,CAAC,6BAA6B,EAAEjB,SAASe,UAAU,EAAE;gBACnF,OAAOG;YACT;YAEA,MAAMC,UAAU9B,IAAI+B,MAAM,CAACP,OAAOZ,KAAKE,GAAG,CAACI,OAAO,CAACc,MAAM;YAEzDrB,SAASsB,QAAQ,CAAC,0CAA0C;gBAC1DH;gBACA,CAACnB,SAASe,UAAU,CAAC,EAAEF;YACzB;YAEA,IAAIM,WAAW,OAAOA,YAAY,UAAU;gBAC1C,MAAMI,OAAO,OAAOvB,SAASwB,UAAU,CAACD,IAAI,KAAK,WAAWvB,SAASwB,UAAU,CAACD,IAAI,GAAG,CAAC;gBACxF,MAAM,EAAEE,iBAAiBC,YAAY,EAAE,GAAGH;gBAC1C,MAAME,kBAAkBC,gBAAgB;gBAExC,OAAOP,QAAQQ,GAAG;gBAClB,OAAOR,QAAQS,GAAG;gBAElB,MAAMC,iBAAiBxC,IAAIyC,IAAI,CAACX,SAASlB,KAAKE,GAAG,CAACI,OAAO,CAACc,MAAM,EAAE;oBAChEU,WAAWN;gBACb;gBAEA,MAAMO,gBAAgBxC,oBAAoB;oBACxCgC,YAAYxB,SAASwB,UAAU;oBAC/Bd,SAAST,KAAKE,GAAG,CAACO,OAAO;oBACzBX;gBACF;gBAEA,MAAMkC,gBAAgB3C,eAAe;oBACnC4C,sBAAsB;oBACtB,GAAGF,aAAa;oBAChBG,MAAM,GAAGnC,SAASe,UAAU,CAAC,QAAQ,CAAC;oBACtCqB,SAAS1C,oBACPsC,eAAeI,WAAWzC,YAAY;wBAAEW;wBAAaO;oBAAM,MAAM;oBAEnEwB,OAAOR;gBACT;gBAEA5B,KAAKE,GAAG,CAACC,eAAe,CAACkC,MAAM,CAAC,cAAcL;gBAE9C,MAAMM,aAAalD,IAAImD,MAAM,CAACX;gBAE9B7B,SAASsB,QAAQ,CAAC,oDAAoD;oBACpEiB;oBACAV;gBACF;gBAEA,IAAI,OAAOU,eAAe,YAAYA,YAAY;oBAChD,OAAO;wBACLZ,KAAKc,OAAOF,WAAWZ,GAAG;wBAC1BE;wBACA7B,UAAUA,SAASmC,IAAI;wBACvBjC;oBACF;gBACF;YACF;QACF,OAAO;YACL,MAAMwC,eAAejC,QAAQK,GAAG,CAAC,GAAGd,SAASe,UAAU,CAAC,QAAQ,CAAC;YAEjE,IAAI,CAAC2B,cAAc;gBACjB,OAAOxB;YACT;YAEA,MAAMyB,SAAS,MAAM9C,cAAc;gBAAEU,SAASN,KAAKE,GAAG,CAACI,OAAO;gBAAEmC;gBAAc1C;YAAS;YAEvF,IAAI,CAAC2C,QAAQ;gBACX,OAAOzB;YACT;YAEAtB,aAAa+C,OAAOjC,OAAO,EAAET,KAAKE,GAAG,CAACC,eAAe;YAErD,IAAIuC,OAAOC,iBAAiB,CAACjB,GAAG,EAAE;gBAChC,OAAO;oBACLA,KAAKgB,OAAOC,iBAAiB,CAACjB,GAAG;oBACjCE,gBAAgBc,OAAO9B,KAAK;oBAC5Bb,UAAUA,SAASmC,IAAI;oBACvBjC;gBACF;YACF;QACF;QAEA,OAAOgB;IACT,EAAC"}

package/dist/oauth/index.d.ts

@@ -0,0 +1,4 @@
+import type { Plugin } from 'payload';
+import type { PluginOptions } from './types.js';
+export declare const oAuth2Plugin: (pluginOptions: PluginOptions) => Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoD,MAAM,EAAE,MAAM,SAAS,CAAA;AAEvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAc/C,eAAO,MAAM,YAAY,kBACP,aAAa,KAAG,MAwP/B,CAAA"}

package/dist/oauth/index.js

@@ -0,0 +1,222 @@
+import { defaultVerify } from './defaults.js';
+import { getLoginEndpoint } from './endpoints/getLoginEndpoint.js';
+import { getLogoutEndpoint } from './endpoints/getLogoutEndpoint.js';
+import { getMetaEndpoint } from './endpoints/getMetaEndpoint.js';
+import { getRedirectToLoginEndpoint } from './endpoints/getRedirectToLoginEndpoint.js';
+import { getAfterLogout } from './hooks/afterLogout.js';
+import { getMeHook } from './hooks/me.js';
+import { getRefreshHook } from './hooks/refresh.js';
+import { Strategy } from './strategy/index.js';
+import { getAdminCollectionSlug } from './utilities/getAdminCollectionSlug.js';
+import { getUsernameField } from './utilities/getUsernameField.js';
+export const oAuth2Plugin = (pluginOptions)=>(config)=>{
+        const { collections: allCollectionOptions, debug, disabled } = pluginOptions;
+        const strategyName = pluginOptions?.strategyName || 'oauth';
+        // Defaults to sso, but can be overridden to accommodate multiple strategies on one collection
+        const endpointSlug = pluginOptions?.strategyName || 'sso';
+        const adminCollectionSlug = getAdminCollectionSlug(config);
+        const adminCollectionOptions = allCollectionOptions.find(({ slug })=>slug === adminCollectionSlug);
+        if (!adminCollectionOptions) {
+            throw new Error(`Can't find collection options for the admin collection ${adminCollectionSlug}.`);
+        }
+        let LoginButton = null;
+        if (adminCollectionOptions.LoginButton === false) {
+            LoginButton = null;
+        } else if (typeof adminCollectionOptions.LoginButton === 'string') {
+            LoginButton = {
+                clientProps: {
+                    disabled,
+                    endpointSlug
+                },
+                path: adminCollectionOptions.LoginButton
+            };
+        } else if (typeof adminCollectionOptions.LoginButton === 'object') {
+            LoginButton = {
+                ...adminCollectionOptions.LoginButton,
+                clientProps: {
+                    ...adminCollectionOptions.LoginButton.clientProps,
+                    disabled,
+                    endpointSlug
+                }
+            };
+        } else {
+            // Default to the provided LoginButton component path
+            LoginButton = {
+                clientProps: {
+                    disabled,
+                    endpointSlug
+                },
+                path: '@payloadcms/figma/client#DefaultLoginButton'
+            };
+        }
+        return {
+            ...config,
+            admin: {
+                ...config.admin || {},
+                components: {
+                    ...typeof config.admin === 'object' && typeof config.admin.components === 'object' ? config.admin.components : {},
+                    ...adminCollectionOptions.endOAuthSessionOnLogout ? {
+                        logout: {
+                            Button: {
+                                clientProps: {
+                                    disabled,
+                                    endpointSlug
+                                },
+                                path: '@payloadcms/figma/client#LogoutButton'
+                            }
+                        }
+                    } : {},
+                    beforeLogin: [
+                        ...typeof config.admin === 'object' && typeof config.admin.components === 'object' && Array.isArray(config.admin.components.beforeLogin) ? config.admin.components.beforeLogin : [],
+                        ...LoginButton ? [
+                            LoginButton
+                        ] : []
+                    ]
+                }
+            },
+            collections: (config.collections || []).map((existingCollection)=>{
+                const collectionOptions = allCollectionOptions.find(({ slug })=>slug === existingCollection.slug);
+                if (!collectionOptions) {
+                    return existingCollection;
+                }
+                let cookieName = pluginOptions?.cookieName || `payload-${strategyName}-token`;
+                // If the usePayloadJWT option is enabled, use the default cookie name from Payload
+                if (collectionOptions.usePayloadJWT) {
+                    cookieName = `${config.cookiePrefix || 'payload'}-token`;
+                }
+                // Check if email field exists, if not add it
+                const hasEmailField = existingCollection.fields.some((field)=>'name' in field && field.name === 'email');
+                // Add email field to collection before getting username field
+                // This ensures getUsernameField can find the email field if it's configured as the username
+                const collectionWithEmail = hasEmailField ? existingCollection : {
+                    ...existingCollection,
+                    fields: [
+                        ...existingCollection.fields,
+                        {
+                            name: 'email',
+                            type: 'email'
+                        }
+                    ]
+                };
+                const usernameField = getUsernameField({
+                    collection: collectionWithEmail,
+                    collectionOptions
+                });
+                const fields = [
+                    ...collectionWithEmail.fields,
+                    ...typeof adminCollectionOptions.usernameField === 'string' ? [] : [
+                        usernameField
+                    ]
+                ];
+                if (disabled) {
+                    return {
+                        ...existingCollection,
+                        fields
+                    };
+                }
+                const strategy = new Strategy({
+                    clientID: collectionOptions.clientID,
+                    clientSecret: collectionOptions.clientSecret,
+                    collection: existingCollection,
+                    collectionOptions,
+                    cookieName,
+                    debug,
+                    identityMetadata: collectionOptions.identityMetadata,
+                    pluginOptions,
+                    strategyName,
+                    verify: collectionOptions.verify ?? defaultVerify({
+                        collection: existingCollection,
+                        strategyName,
+                        usernameField
+                    })
+                });
+                const authStrategy = {
+                    name: `${existingCollection.slug}-${strategyName}`,
+                    // Bind 'this' to ensure the authenticate function has the correct context
+                    authenticate: strategy.authenticate.bind(strategy)
+                };
+                let disableLocalStrategy;
+                if (collectionOptions.disableLocalStrategy === false) {
+                    // When the plugin collection option has disableLocalStrategy option set to false, do not disable the local strategy
+                    disableLocalStrategy = undefined;
+                } else if (collectionOptions.disableLocalStrategy) {
+                    // use the configured disableLocalStrategy which can include `enableFields`, etc.
+                    disableLocalStrategy = collectionOptions.disableLocalStrategy;
+                } else {
+                    // by default disableLocalStrategy
+                    disableLocalStrategy = true;
+                }
+                return {
+                    ...existingCollection,
+                    auth: {
+                        ...typeof existingCollection.auth === 'object' ? existingCollection.auth : {},
+                        disableLocalStrategy,
+                        strategies: [
+                            ...typeof existingCollection.auth === 'object' && Array.isArray(existingCollection.auth.strategies) ? existingCollection.auth.strategies : [],
+                            authStrategy
+                        ]
+                    },
+                    endpoints: [
+                        ...existingCollection.endpoints || [],
+                        getLoginEndpoint({
+                            collection: existingCollection,
+                            collectionOptions,
+                            endpointSlug,
+                            pluginOptions,
+                            strategy
+                        }),
+                        getMetaEndpoint({
+                            collection: existingCollection,
+                            collectionOptions,
+                            endpointSlug,
+                            pluginOptions,
+                            strategy
+                        }),
+                        getLogoutEndpoint({
+                            collection: existingCollection,
+                            endpointSlug,
+                            pluginOptions,
+                            strategy
+                        }),
+                        getRedirectToLoginEndpoint({
+                            collection: existingCollection,
+                            collectionOptions,
+                            endpointSlug,
+                            pluginOptions,
+                            strategy
+                        })
+                    ],
+                    fields,
+                    hooks: {
+                        ...existingCollection.hooks || {},
+                        afterLogout: [
+                            ...typeof existingCollection.hooks === 'object' && Array.isArray(existingCollection.hooks.afterLogout) ? existingCollection.hooks.afterLogout : [],
+                            getAfterLogout({
+                                collection: existingCollection,
+                                cookieName,
+                                pluginOptions
+                            })
+                        ],
+                        me: [
+                            ...typeof existingCollection.hooks === 'object' && Array.isArray(existingCollection.hooks.me) ? existingCollection.hooks.me : [],
+                            // Do not inject the me hook if the usePayloadJWT option is enabled
+                            ...!collectionOptions.usePayloadJWT ? [
+                                getMeHook({
+                                    cookieName
+                                })
+                            ] : []
+                        ],
+                        refresh: [
+                            ...typeof existingCollection.hooks === 'object' && Array.isArray(existingCollection.hooks.refresh) ? existingCollection.hooks.refresh : [],
+                            getRefreshHook({
+                                pluginOptions,
+                                strategy
+                            })
+                        ]
+                    }
+                };
+            })
+        };
+    };
+
+//# sourceMappingURL=index.js.map

package/dist/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/oauth/index.ts"],"sourcesContent":["import type { AuthStrategy, CollectionConfig, IncomingAuthType, Plugin } from 'payload'\n\nimport type { PluginOptions } from './types.js'\n\nimport { defaultVerify } from './defaults.js'\nimport { getLoginEndpoint } from './endpoints/getLoginEndpoint.js'\nimport { getLogoutEndpoint } from './endpoints/getLogoutEndpoint.js'\nimport { getMetaEndpoint } from './endpoints/getMetaEndpoint.js'\nimport { getRedirectToLoginEndpoint } from './endpoints/getRedirectToLoginEndpoint.js'\nimport { getAfterLogout } from './hooks/afterLogout.js'\nimport { getMeHook } from './hooks/me.js'\nimport { getRefreshHook } from './hooks/refresh.js'\nimport { Strategy } from './strategy/index.js'\nimport { getAdminCollectionSlug } from './utilities/getAdminCollectionSlug.js'\nimport { getUsernameField } from './utilities/getUsernameField.js'\n\nexport const oAuth2Plugin =\n  (pluginOptions: PluginOptions): Plugin =>\n  (config) => {\n    const { collections: allCollectionOptions, debug, disabled } = pluginOptions\n\n    const strategyName = pluginOptions?.strategyName || 'oauth'\n    // Defaults to sso, but can be overridden to accommodate multiple strategies on one collection\n    const endpointSlug = pluginOptions?.strategyName || 'sso'\n\n    const adminCollectionSlug = getAdminCollectionSlug(config)\n    const adminCollectionOptions = allCollectionOptions.find(\n      ({ slug }) => slug === adminCollectionSlug,\n    )\n\n    if (!adminCollectionOptions) {\n      throw new Error(\n        `Can't find collection options for the admin collection ${adminCollectionSlug}.`,\n      )\n    }\n\n    let LoginButton = null\n\n    if (adminCollectionOptions.LoginButton === false) {\n      LoginButton = null\n    } else if (typeof adminCollectionOptions.LoginButton === 'string') {\n      LoginButton = {\n        clientProps: {\n          disabled,\n          endpointSlug,\n        },\n        path: adminCollectionOptions.LoginButton,\n      }\n    } else if (typeof adminCollectionOptions.LoginButton === 'object') {\n      LoginButton = {\n        ...adminCollectionOptions.LoginButton,\n        clientProps: {\n          ...adminCollectionOptions.LoginButton.clientProps,\n          disabled,\n          endpointSlug,\n        },\n      }\n    } else {\n      // Default to the provided LoginButton component path\n      LoginButton = {\n        clientProps: {\n          disabled,\n          endpointSlug,\n        },\n        path: '@payloadcms/figma/client#DefaultLoginButton',\n      }\n    }\n\n    return {\n      ...config,\n      admin: {\n        ...(config.admin || {}),\n        components: {\n          ...(typeof config.admin === 'object' && typeof config.admin.components === 'object'\n            ? config.admin.components\n            : {}),\n          ...(adminCollectionOptions.endOAuthSessionOnLogout\n            ? {\n                logout: {\n                  Button: {\n                    clientProps: {\n                      disabled,\n                      endpointSlug,\n                    },\n                    path: '@payloadcms/figma/client#LogoutButton',\n                  },\n                },\n              }\n            : {}),\n          beforeLogin: [\n            ...(typeof config.admin === 'object' &&\n            typeof config.admin.components === 'object' &&\n            Array.isArray(config.admin.components.beforeLogin)\n              ? config.admin.components.beforeLogin\n              : []),\n            ...(LoginButton ? [LoginButton] : []),\n          ],\n        },\n      },\n      collections: (config.collections || []).map((existingCollection) => {\n        const collectionOptions = allCollectionOptions.find(\n          ({ slug }) => slug === existingCollection.slug,\n        )\n\n        if (!collectionOptions) {\n          return existingCollection\n        }\n\n        let cookieName = pluginOptions?.cookieName || `payload-${strategyName}-token`\n        // If the usePayloadJWT option is enabled, use the default cookie name from Payload\n        if (collectionOptions.usePayloadJWT) {\n          cookieName = `${config.cookiePrefix || 'payload'}-token`\n        }\n\n        // Check if email field exists, if not add it\n        const hasEmailField = existingCollection.fields.some(\n          (field) => 'name' in field && field.name === 'email',\n        )\n\n        // Add email field to collection before getting username field\n        // This ensures getUsernameField can find the email field if it's configured as the username\n        const collectionWithEmail: CollectionConfig = hasEmailField\n          ? existingCollection\n          : {\n              ...existingCollection,\n              fields: [\n                ...existingCollection.fields,\n                {\n                  name: 'email',\n                  type: 'email',\n                },\n              ],\n            }\n\n        const usernameField = getUsernameField({\n          collection: collectionWithEmail,\n          collectionOptions,\n        })\n\n        const fields = [\n          ...collectionWithEmail.fields,\n          ...(typeof adminCollectionOptions.usernameField === 'string' ? [] : [usernameField]),\n        ]\n\n        if (disabled) {\n          return {\n            ...existingCollection,\n            fields,\n          }\n        }\n\n        const strategy = new Strategy({\n          clientID: collectionOptions.clientID,\n          clientSecret: collectionOptions.clientSecret,\n          collection: existingCollection,\n          collectionOptions,\n          cookieName,\n          debug,\n          identityMetadata: collectionOptions.identityMetadata,\n          pluginOptions,\n          strategyName,\n          verify:\n            collectionOptions.verify ??\n            defaultVerify({\n              collection: existingCollection,\n              strategyName,\n              usernameField,\n            }),\n        })\n\n        const authStrategy: AuthStrategy = {\n          name: `${existingCollection.slug}-${strategyName}`,\n          // Bind 'this' to ensure the authenticate function has the correct context\n          authenticate: strategy.authenticate.bind(strategy),\n        }\n\n        let disableLocalStrategy: IncomingAuthType['disableLocalStrategy']\n\n        if (collectionOptions.disableLocalStrategy === false) {\n          // When the plugin collection option has disableLocalStrategy option set to false, do not disable the local strategy\n          disableLocalStrategy = undefined\n        } else if (collectionOptions.disableLocalStrategy) {\n          // use the configured disableLocalStrategy which can include `enableFields`, etc.\n          disableLocalStrategy = collectionOptions.disableLocalStrategy\n        } else {\n          // by default disableLocalStrategy\n          disableLocalStrategy = true\n        }\n\n        return {\n          ...existingCollection,\n          auth: {\n            ...(typeof existingCollection.auth === 'object' ? existingCollection.auth : {}),\n            disableLocalStrategy,\n            strategies: [\n              ...(typeof existingCollection.auth === 'object' &&\n              Array.isArray(existingCollection.auth.strategies)\n                ? existingCollection.auth.strategies\n                : []),\n              authStrategy,\n            ],\n          },\n          endpoints: [\n            ...(existingCollection.endpoints || []),\n            getLoginEndpoint({\n              collection: existingCollection,\n              collectionOptions,\n              endpointSlug,\n              pluginOptions,\n              strategy,\n            }),\n            getMetaEndpoint({\n              collection: existingCollection,\n              collectionOptions,\n              endpointSlug,\n              pluginOptions,\n              strategy,\n            }),\n            getLogoutEndpoint({\n              collection: existingCollection,\n              endpointSlug,\n              pluginOptions,\n              strategy,\n            }),\n            getRedirectToLoginEndpoint({\n              collection: existingCollection,\n              collectionOptions,\n              endpointSlug,\n              pluginOptions,\n              strategy,\n            }),\n          ],\n          fields,\n          hooks: {\n            ...(existingCollection.hooks || {}),\n            afterLogout: [\n              ...(typeof existingCollection.hooks === 'object' &&\n              Array.isArray(existingCollection.hooks.afterLogout)\n                ? existingCollection.hooks.afterLogout\n                : []),\n              getAfterLogout({\n                collection: existingCollection,\n                cookieName,\n                pluginOptions,\n              }),\n            ],\n            me: [\n              ...(typeof existingCollection.hooks === 'object' &&\n              Array.isArray(existingCollection.hooks.me)\n                ? existingCollection.hooks.me\n                : []),\n              // Do not inject the me hook if the usePayloadJWT option is enabled\n              ...(!collectionOptions.usePayloadJWT ? [getMeHook({ cookieName })] : []),\n            ],\n            refresh: [\n              ...(typeof existingCollection.hooks === 'object' &&\n              Array.isArray(existingCollection.hooks.refresh)\n                ? existingCollection.hooks.refresh\n                : []),\n              getRefreshHook({ pluginOptions, strategy }),\n            ],\n          },\n        }\n      }),\n    }\n  }\n"],"names":["defaultVerify","getLoginEndpoint","getLogoutEndpoint","getMetaEndpoint","getRedirectToLoginEndpoint","getAfterLogout","getMeHook","getRefreshHook","Strategy","getAdminCollectionSlug","getUsernameField","oAuth2Plugin","pluginOptions","config","collections","allCollectionOptions","debug","disabled","strategyName","endpointSlug","adminCollectionSlug","adminCollectionOptions","find","slug","Error","LoginButton","clientProps","path","admin","components","endOAuthSessionOnLogout","logout","Button","beforeLogin","Array","isArray","map","existingCollection","collectionOptions","cookieName","usePayloadJWT","cookiePrefix","hasEmailField","fields","some","field","name","collectionWithEmail","type","usernameField","collection","strategy","clientID","clientSecret","identityMetadata","verify","authStrategy","authenticate","bind","disableLocalStrategy","undefined","auth","strategies","endpoints","hooks","afterLogout","me","refresh"],"mappings":"AAIA,SAASA,aAAa,QAAQ,gBAAe;AAC7C,SAASC,gBAAgB,QAAQ,kCAAiC;AAClE,SAASC,iBAAiB,QAAQ,mCAAkC;AACpE,SAASC,eAAe,QAAQ,iCAAgC;AAChE,SAASC,0BAA0B,QAAQ,4CAA2C;AACtF,SAASC,cAAc,QAAQ,yBAAwB;AACvD,SAASC,SAAS,QAAQ,gBAAe;AACzC,SAASC,cAAc,QAAQ,qBAAoB;AACnD,SAASC,QAAQ,QAAQ,sBAAqB;AAC9C,SAASC,sBAAsB,QAAQ,wCAAuC;AAC9E,SAASC,gBAAgB,QAAQ,kCAAiC;AAElE,OAAO,MAAMC,eACX,CAACC,gBACD,CAACC;QACC,MAAM,EAAEC,aAAaC,oBAAoB,EAAEC,KAAK,EAAEC,QAAQ,EAAE,GAAGL;QAE/D,MAAMM,eAAeN,eAAeM,gBAAgB;QACpD,8FAA8F;QAC9F,MAAMC,eAAeP,eAAeM,gBAAgB;QAEpD,MAAME,sBAAsBX,uBAAuBI;QACnD,MAAMQ,yBAAyBN,qBAAqBO,IAAI,CACtD,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAASH;QAGzB,IAAI,CAACC,wBAAwB;YAC3B,MAAM,IAAIG,MACR,CAAC,uDAAuD,EAAEJ,oBAAoB,CAAC,CAAC;QAEpF;QAEA,IAAIK,cAAc;QAElB,IAAIJ,uBAAuBI,WAAW,KAAK,OAAO;YAChDA,cAAc;QAChB,OAAO,IAAI,OAAOJ,uBAAuBI,WAAW,KAAK,UAAU;YACjEA,cAAc;gBACZC,aAAa;oBACXT;oBACAE;gBACF;gBACAQ,MAAMN,uBAAuBI,WAAW;YAC1C;QACF,OAAO,IAAI,OAAOJ,uBAAuBI,WAAW,KAAK,UAAU;YACjEA,cAAc;gBACZ,GAAGJ,uBAAuBI,WAAW;gBACrCC,aAAa;oBACX,GAAGL,uBAAuBI,WAAW,CAACC,WAAW;oBACjDT;oBACAE;gBACF;YACF;QACF,OAAO;YACL,qDAAqD;YACrDM,cAAc;gBACZC,aAAa;oBACXT;oBACAE;gBACF;gBACAQ,MAAM;YACR;QACF;QAEA,OAAO;YACL,GAAGd,MAAM;YACTe,OAAO;gBACL,GAAIf,OAAOe,KAAK,IAAI,CAAC,CAAC;gBACtBC,YAAY;oBACV,GAAI,OAAOhB,OAAOe,KAAK,KAAK,YAAY,OAAOf,OAAOe,KAAK,CAACC,UAAU,KAAK,WACvEhB,OAAOe,KAAK,CAACC,UAAU,GACvB,CAAC,CAAC;oBACN,GAAIR,uBAAuBS,uBAAuB,GAC9C;wBACEC,QAAQ;4BACNC,QAAQ;gCACNN,aAAa;oCACXT;oCACAE;gCACF;gCACAQ,MAAM;4BACR;wBACF;oBACF,IACA,CAAC,CAAC;oBACNM,aAAa;2BACP,OAAOpB,OAAOe,KAAK,KAAK,YAC5B,OAAOf,OAAOe,KAAK,CAACC,UAAU,KAAK,YACnCK,MAAMC,OAAO,CAACtB,OAAOe,KAAK,CAACC,UAAU,CAACI,WAAW,IAC7CpB,OAAOe,KAAK,CAACC,UAAU,CAACI,WAAW,GACnC,EAAE;2BACFR,cAAc;4BAACA;yBAAY,GAAG,EAAE;qBACrC;gBACH;YACF;YACAX,aAAa,AAACD,CAAAA,OAAOC,WAAW,IAAI,EAAE,AAAD,EAAGsB,GAAG,CAAC,CAACC;gBAC3C,MAAMC,oBAAoBvB,qBAAqBO,IAAI,CACjD,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAASc,mBAAmBd,IAAI;gBAGhD,IAAI,CAACe,mBAAmB;oBACtB,OAAOD;gBACT;gBAEA,IAAIE,aAAa3B,eAAe2B,cAAc,CAAC,QAAQ,EAAErB,aAAa,MAAM,CAAC;gBAC7E,mFAAmF;gBACnF,IAAIoB,kBAAkBE,aAAa,EAAE;oBACnCD,aAAa,GAAG1B,OAAO4B,YAAY,IAAI,UAAU,MAAM,CAAC;gBAC1D;gBAEA,6CAA6C;gBAC7C,MAAMC,gBAAgBL,mBAAmBM,MAAM,CAACC,IAAI,CAClD,CAACC,QAAU,UAAUA,SAASA,MAAMC,IAAI,KAAK;gBAG/C,8DAA8D;gBAC9D,4FAA4F;gBAC5F,MAAMC,sBAAwCL,gBAC1CL,qBACA;oBACE,GAAGA,kBAAkB;oBACrBM,QAAQ;2BACHN,mBAAmBM,MAAM;wBAC5B;4BACEG,MAAM;4BACNE,MAAM;wBACR;qBACD;gBACH;gBAEJ,MAAMC,gBAAgBvC,iBAAiB;oBACrCwC,YAAYH;oBACZT;gBACF;gBAEA,MAAMK,SAAS;uBACVI,oBAAoBJ,MAAM;uBACzB,OAAOtB,uBAAuB4B,aAAa,KAAK,WAAW,EAAE,GAAG;wBAACA;qBAAc;iBACpF;gBAED,IAAIhC,UAAU;oBACZ,OAAO;wBACL,GAAGoB,kBAAkB;wBACrBM;oBACF;gBACF;gBAEA,MAAMQ,WAAW,IAAI3C,SAAS;oBAC5B4C,UAAUd,kBAAkBc,QAAQ;oBACpCC,cAAcf,kBAAkBe,YAAY;oBAC5CH,YAAYb;oBACZC;oBACAC;oBACAvB;oBACAsC,kBAAkBhB,kBAAkBgB,gBAAgB;oBACpD1C;oBACAM;oBACAqC,QACEjB,kBAAkBiB,MAAM,IACxBvD,cAAc;wBACZkD,YAAYb;wBACZnB;wBACA+B;oBACF;gBACJ;gBAEA,MAAMO,eAA6B;oBACjCV,MAAM,GAAGT,mBAAmBd,IAAI,CAAC,CAAC,EAAEL,cAAc;oBAClD,0EAA0E;oBAC1EuC,cAAcN,SAASM,YAAY,CAACC,IAAI,CAACP;gBAC3C;gBAEA,IAAIQ;gBAEJ,IAAIrB,kBAAkBqB,oBAAoB,KAAK,OAAO;oBACpD,oHAAoH;oBACpHA,uBAAuBC;gBACzB,OAAO,IAAItB,kBAAkBqB,oBAAoB,EAAE;oBACjD,iFAAiF;oBACjFA,uBAAuBrB,kBAAkBqB,oBAAoB;gBAC/D,OAAO;oBACL,kCAAkC;oBAClCA,uBAAuB;gBACzB;gBAEA,OAAO;oBACL,GAAGtB,kBAAkB;oBACrBwB,MAAM;wBACJ,GAAI,OAAOxB,mBAAmBwB,IAAI,KAAK,WAAWxB,mBAAmBwB,IAAI,GAAG,CAAC,CAAC;wBAC9EF;wBACAG,YAAY;+BACN,OAAOzB,mBAAmBwB,IAAI,KAAK,YACvC3B,MAAMC,OAAO,CAACE,mBAAmBwB,IAAI,CAACC,UAAU,IAC5CzB,mBAAmBwB,IAAI,CAACC,UAAU,GAClC,EAAE;4BACNN;yBACD;oBACH;oBACAO,WAAW;2BACL1B,mBAAmB0B,SAAS,IAAI,EAAE;wBACtC9D,iBAAiB;4BACfiD,YAAYb;4BACZC;4BACAnB;4BACAP;4BACAuC;wBACF;wBACAhD,gBAAgB;4BACd+C,YAAYb;4BACZC;4BACAnB;4BACAP;4BACAuC;wBACF;wBACAjD,kBAAkB;4BAChBgD,YAAYb;4BACZlB;4BACAP;4BACAuC;wBACF;wBACA/C,2BAA2B;4BACzB8C,YAAYb;4BACZC;4BACAnB;4BACAP;4BACAuC;wBACF;qBACD;oBACDR;oBACAqB,OAAO;wBACL,GAAI3B,mBAAmB2B,KAAK,IAAI,CAAC,CAAC;wBAClCC,aAAa;+BACP,OAAO5B,mBAAmB2B,KAAK,KAAK,YACxC9B,MAAMC,OAAO,CAACE,mBAAmB2B,KAAK,CAACC,WAAW,IAC9C5B,mBAAmB2B,KAAK,CAACC,WAAW,GACpC,EAAE;4BACN5D,eAAe;gCACb6C,YAAYb;gCACZE;gCACA3B;4BACF;yBACD;wBACDsD,IAAI;+BACE,OAAO7B,mBAAmB2B,KAAK,KAAK,YACxC9B,MAAMC,OAAO,CAACE,mBAAmB2B,KAAK,CAACE,EAAE,IACrC7B,mBAAmB2B,KAAK,CAACE,EAAE,GAC3B,EAAE;4BACN,mEAAmE;+BAC/D,CAAC5B,kBAAkBE,aAAa,GAAG;gCAAClC,UAAU;oCAAEiC;gCAAW;6BAAG,GAAG,EAAE;yBACxE;wBACD4B,SAAS;+BACH,OAAO9B,mBAAmB2B,KAAK,KAAK,YACxC9B,MAAMC,OAAO,CAACE,mBAAmB2B,KAAK,CAACG,OAAO,IAC1C9B,mBAAmB2B,KAAK,CAACG,OAAO,GAChC,EAAE;4BACN5D,eAAe;gCAAEK;gCAAeuC;4BAAS;yBAC1C;oBACH;gBACF;YACF;QACF;IACF,EAAC"}

package/dist/oauth/strategy/index.d.ts

@@ -0,0 +1,54 @@
+import type jwt from 'jsonwebtoken';
+import type { AuthStrategyFunctionArgs, AuthStrategyResult, CollectionConfig, Payload } from 'payload';
+import * as jose from 'jose';
+import type { CollectionOptions, PluginOptions, VerifyFunction } from '../types.js';
+export interface Options {
+    clientID: string;
+    clientSecret?: string;
+    collection: CollectionConfig;
+    collectionOptions: CollectionOptions;
+    cookieName: string;
+    debug?: boolean;
+    identityMetadata: string;
+    pluginOptions: PluginOptions;
+    strategyName: string;
+    verify: VerifyFunction;
+}
+export declare class Strategy {
+    clientID: string;
+    clientSecret?: string;
+    collection: CollectionConfig;
+    collectionOptions: CollectionOptions;
+    cookieName: string;
+    debug: boolean;
+    debugLog: (...args: any[]) => void;
+    identityMetadataURL: string;
+    jwks?: {
+        keys: jose.JWK[];
+    };
+    meta?: {
+        authorization_endpoint: string;
+        end_session_endpoint: string;
+        jwks_uri: string;
+        token_endpoint: string;
+        userinfo_endpoint: string;
+    };
+    metaLastFetchedTime?: Date;
+    metaPromise?: Promise<void>;
+    metaPromiseResolve?: () => void;
+    name: string;
+    pluginOptions: PluginOptions;
+    verify: VerifyFunction;
+    constructor(options: Options);
+    authenticate({ canSetHeaders, headers, payload, }: AuthStrategyFunctionArgs): Promise<AuthStrategyResult>;
+    ensureMeta(): Promise<void>;
+    fetchMeta(): Promise<void>;
+    generateOidcPEM(kid: string, alg: string): Promise<string>;
+    jwtVerify({ payload, token }: JwtVerifyArgs): Promise<Error | jwt.JwtPayload | null>;
+}
+type JwtVerifyArgs = {
+    payload: Payload;
+    token: string;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/oauth/strategy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oauth/strategy/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AAEnC,OAAO,KAAK,EACV,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACR,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAUnF,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,cAAc,CAAA;CACvB;AAED,qBAAa,QAAQ;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,UAAU,EAAE,MAAM,CAAA;IAElB,KAAK,EAAE,OAAO,CAAA;IAGd,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAA;IAElC,mBAAmB,EAAE,MAAM,CAAA;IAC3B,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;KACjB,CAAA;IACD,IAAI,CAAC,EAAE;QACL,sBAAsB,EAAE,MAAM,CAAA;QAC9B,oBAAoB,EAAE,MAAM,CAAA;QAC5B,QAAQ,EAAE,MAAM,CAAA;QAChB,cAAc,EAAE,MAAM,CAAA;QACtB,iBAAiB,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,mBAAmB,CAAC,EAAE,IAAI,CAAA;IAE1B,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,aAAa,CAAA;IAC5B,MAAM,EAAE,cAAc,CAAA;gBAEV,OAAO,EAAE,OAAO;IAiBtB,YAAY,CAAC,EACjB,aAAa,EACb,OAAO,EACP,OAAO,GACR,EAAE,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyJnD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAkD1B,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6C1D,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;CAmB3F;AAED,KAAK,aAAa,GAAG;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA"}