@payloadcms/figma 0.0.1-alpha.1 → 0.0.1-alpha.10

package/dist/oauth/utilities/createDebugLogger.js

@@ -0,0 +1,16 @@
+export const createDebugLogger = (payload, condition)=>{
+    return {
+        error: (args)=>{
+            if (condition) {
+                payload.logger.error(args);
+            }
+        },
+        info: (args)=>{
+            if (condition) {
+                payload.logger.info(args);
+            }
+        }
+    };
+};
+
+//# sourceMappingURL=createDebugLogger.js.map

package/dist/oauth/utilities/createDebugLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/createDebugLogger.ts"],"sourcesContent":["import type { Payload } from 'payload'\n\nimport type { DebugLogger } from '../types.js'\n\nexport const createDebugLogger = (payload: Payload, condition?: boolean): DebugLogger => {\n  return {\n    error: (args: unknown) => {\n      if (condition) {\n        payload.logger.error(args)\n      }\n    },\n    info: (args: unknown) => {\n      if (condition) {\n        payload.logger.info(args)\n      }\n    },\n  }\n}\n"],"names":["createDebugLogger","payload","condition","error","args","logger","info"],"mappings":"AAIA,OAAO,MAAMA,oBAAoB,CAACC,SAAkBC;IAClD,OAAO;QACLC,OAAO,CAACC;YACN,IAAIF,WAAW;gBACbD,QAAQI,MAAM,CAACF,KAAK,CAACC;YACvB;QACF;QACAE,MAAM,CAACF;YACL,IAAIF,WAAW;gBACbD,QAAQI,MAAM,CAACC,IAAI,CAACF;YACtB;QACF;IACF;AACF,EAAC"}

package/dist/oauth/utilities/extractOrigin.d.ts

@@ -0,0 +1,2 @@
+export declare const extractOrigin: (url: string) => null | string;
+//# sourceMappingURL=extractOrigin.d.ts.map

package/dist/oauth/utilities/extractOrigin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractOrigin.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/extractOrigin.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,QAAS,MAAM,KAAG,IAAI,GAAG,MAOlD,CAAA"}

package/dist/oauth/utilities/extractOrigin.js

@@ -0,0 +1,12 @@
+export const extractOrigin = (url)=>{
+    try {
+        const parsed = new URL(url);
+        return parsed.origin // includes protocol, hostname, and port if present
+        ;
+    } catch  {
+        return null // invalid URL
+        ;
+    }
+};
+
+//# sourceMappingURL=extractOrigin.js.map

package/dist/oauth/utilities/extractOrigin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/extractOrigin.ts"],"sourcesContent":["export const extractOrigin = (url: string): null | string => {\n  try {\n    const parsed = new URL(url)\n    return parsed.origin // includes protocol, hostname, and port if present\n  } catch {\n    return null // invalid URL\n  }\n}\n"],"names":["extractOrigin","url","parsed","URL","origin"],"mappings":"AAAA,OAAO,MAAMA,gBAAgB,CAACC;IAC5B,IAAI;QACF,MAAMC,SAAS,IAAIC,IAAIF;QACvB,OAAOC,OAAOE,MAAM,CAAC,mDAAmD;;IAC1E,EAAE,OAAM;QACN,OAAO,KAAK,cAAc;;IAC5B;AACF,EAAC"}

package/dist/oauth/utilities/getAdminCollectionSlug.d.ts

@@ -0,0 +1,3 @@
+import type { Config } from 'payload';
+export declare const getAdminCollectionSlug: (config: Config) => string;
+//# sourceMappingURL=getAdminCollectionSlug.d.ts.map

package/dist/oauth/utilities/getAdminCollectionSlug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAdminCollectionSlug.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getAdminCollectionSlug.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,eAAO,MAAM,sBAAsB,WAAY,MAAM,KAAG,MAmBvD,CAAA"}

package/dist/oauth/utilities/getAdminCollectionSlug.js

@@ -0,0 +1,18 @@
+export const getAdminCollectionSlug = (config)=>{
+    // if config specifies admin user collection, find and use it
+    if (config.admin?.user) {
+        const matchedAdminCollection = config.collections?.find((collection)=>config.admin?.user === collection.slug);
+        if (matchedAdminCollection) {
+            return matchedAdminCollection.slug;
+        }
+    }
+    // if config does not specify admin user collection, find first collection with auth
+    const firstCollectionWithAuth = config.collections?.find(({ auth })=>Boolean(auth));
+    if (firstCollectionWithAuth) {
+        return firstCollectionWithAuth.slug;
+    }
+    // Otherwise, assume that it'll be the built-in auth
+    return 'users';
+};
+
+//# sourceMappingURL=getAdminCollectionSlug.js.map

package/dist/oauth/utilities/getAdminCollectionSlug.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getAdminCollectionSlug.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nexport const getAdminCollectionSlug = (config: Config): string => {\n  // if config specifies admin user collection, find and use it\n  if (config.admin?.user) {\n    const matchedAdminCollection = config.collections?.find(\n      (collection) => config.admin?.user === collection.slug,\n    )\n    if (matchedAdminCollection) {\n      return matchedAdminCollection.slug\n    }\n  }\n\n  // if config does not specify admin user collection, find first collection with auth\n  const firstCollectionWithAuth = config.collections?.find(({ auth }) => Boolean(auth))\n  if (firstCollectionWithAuth) {\n    return firstCollectionWithAuth.slug\n  }\n\n  // Otherwise, assume that it'll be the built-in auth\n  return 'users'\n}\n"],"names":["getAdminCollectionSlug","config","admin","user","matchedAdminCollection","collections","find","collection","slug","firstCollectionWithAuth","auth","Boolean"],"mappings":"AAEA,OAAO,MAAMA,yBAAyB,CAACC;IACrC,6DAA6D;IAC7D,IAAIA,OAAOC,KAAK,EAAEC,MAAM;QACtB,MAAMC,yBAAyBH,OAAOI,WAAW,EAAEC,KACjD,CAACC,aAAeN,OAAOC,KAAK,EAAEC,SAASI,WAAWC,IAAI;QAExD,IAAIJ,wBAAwB;YAC1B,OAAOA,uBAAuBI,IAAI;QACpC;IACF;IAEA,oFAAoF;IACpF,MAAMC,0BAA0BR,OAAOI,WAAW,EAAEC,KAAK,CAAC,EAAEI,IAAI,EAAE,GAAKC,QAAQD;IAC/E,IAAID,yBAAyB;QAC3B,OAAOA,wBAAwBD,IAAI;IACrC;IAEA,oDAAoD;IACpD,OAAO;AACT,EAAC"}

package/dist/oauth/utilities/getAdminPath.d.ts

@@ -0,0 +1,8 @@
+import type { ClientConfig, SanitizedConfig } from 'payload';
+/**
+ * This is the path to the admin panel WITHOUT domain.
+ *
+ * This respects the `basePath` property in the Next config.
+ */
+export declare const getAdminPath: (config: ClientConfig | SanitizedConfig) => string;
+//# sourceMappingURL=getAdminPath.d.ts.map

package/dist/oauth/utilities/getAdminPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAdminPath.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getAdminPath.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE5D;;;;GAIG;AACH,eAAO,MAAM,YAAY,WAAY,YAAY,GAAG,eAAe,WAElE,CAAA"}

package/dist/oauth/utilities/getAdminPath.js

@@ -0,0 +1,9 @@
+/**
+ * This is the path to the admin panel WITHOUT domain.
+ *
+ * This respects the `basePath` property in the Next config.
+ */ export const getAdminPath = (config)=>{
+    return `${process.env.NEXT_BASE_PATH ?? ''}${config.routes?.admin || '/admin'}`;
+};
+
+//# sourceMappingURL=getAdminPath.js.map

package/dist/oauth/utilities/getAdminPath.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getAdminPath.ts"],"sourcesContent":["import type { ClientConfig, SanitizedConfig } from 'payload'\n\n/**\n * This is the path to the admin panel WITHOUT domain.\n *\n * This respects the `basePath` property in the Next config.\n */\nexport const getAdminPath = (config: ClientConfig | SanitizedConfig) => {\n  return `${process.env.NEXT_BASE_PATH ?? ''}${config.routes?.admin || '/admin'}`\n}\n"],"names":["getAdminPath","config","process","env","NEXT_BASE_PATH","routes","admin"],"mappings":"AAEA;;;;CAIC,GACD,OAAO,MAAMA,eAAe,CAACC;IAC3B,OAAO,GAAGC,QAAQC,GAAG,CAACC,cAAc,IAAI,KAAKH,OAAOI,MAAM,EAAEC,SAAS,UAAU;AACjF,EAAC"}

package/dist/oauth/utilities/getAuthorizeURL.d.ts

@@ -0,0 +1,17 @@
+import type { CollectionConfig, Payload } from 'payload';
+import type { Strategy } from '../strategy/index.js';
+import type { CollectionOptions, PluginOptions } from '../types.js';
+interface Args {
+    collection: CollectionConfig;
+    collectionOptions: CollectionOptions;
+    endpointSlug: string;
+    failedRedirect?: unknown;
+    payload: Payload;
+    pluginOptions: PluginOptions;
+    redirect?: unknown;
+    serverURLOverride?: unknown;
+    strategy: Strategy;
+}
+export declare const getAuthorizeURL: ({ collection, collectionOptions, endpointSlug, failedRedirect, payload, pluginOptions, redirect, serverURLOverride, strategy, }: Args) => Promise<string>;
+export {};
+//# sourceMappingURL=getAuthorizeURL.d.ts.map

package/dist/oauth/utilities/getAuthorizeURL.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthorizeURL.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getAuthorizeURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAMxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAY,MAAM,aAAa,CAAA;AAI7E,UAAU,IAAI;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,eAAO,MAAM,eAAe,oIAUzB,IAAI,KAAG,OAAO,CAAC,MAAM,CAoDvB,CAAA"}

package/dist/oauth/utilities/getAuthorizeURL.js

@@ -0,0 +1,45 @@
+import crypto from 'crypto';
+import * as QueryString from 'qs-esm';
+import { v4 as uuid } from 'uuid';
+import { defaultScope } from '../defaults.js';
+export const getAuthorizeURL = async ({ collection, collectionOptions, endpointSlug, failedRedirect, payload, pluginOptions, redirect, serverURLOverride, strategy })=>{
+    const { redirectServerURL } = pluginOptions;
+    await strategy.ensureMeta();
+    // Generate a random code verifier
+    const codeVerifier = crypto.randomBytes(32).toString('base64url');
+    // Create a code challenge by hashing the code verifier
+    const code_challenge = crypto.createHash('sha256').update(codeVerifier).digest('base64url');
+    const state = {
+        sig: payload.encrypt(strategy.name),
+        verifier: payload.encrypt(codeVerifier)
+    };
+    if (typeof serverURLOverride === 'string') {
+        state.serverURL = serverURLOverride;
+    }
+    if (typeof redirect === 'string') {
+        state.redirect = redirect;
+    }
+    if (typeof failedRedirect === 'string') {
+        state.failedRedirect = failedRedirect;
+    }
+    const baseRedirectURL = redirectServerURL || payload.config.serverURL || state.serverURL;
+    const loginRedirectURL = encodeURI(`${baseRedirectURL}${payload.config.routes?.api || '/api'}/${collection.slug}/${endpointSlug}/login`);
+    const params = {
+        client_id: collectionOptions.clientID,
+        code_challenge,
+        code_challenge_method: 'S256',
+        nonce: uuid(),
+        redirect_uri: loginRedirectURL,
+        response_mode: 'form_post',
+        response_type: 'id_token%20token%20code',
+        scope: (collectionOptions.scope ?? defaultScope).join('+'),
+        state: Buffer.from(JSON.stringify(state)).toString('base64'),
+        ...collectionOptions.authorizationURLParams || {}
+    };
+    const authorizeURL = `${strategy.meta?.authorization_endpoint}?${QueryString.stringify(params, {
+        encode: false
+    })}`;
+    return authorizeURL;
+};
+
+//# sourceMappingURL=getAuthorizeURL.js.map

package/dist/oauth/utilities/getAuthorizeURL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getAuthorizeURL.ts"],"sourcesContent":["import type { CollectionConfig, Payload } from 'payload'\n\nimport crypto from 'crypto'\nimport * as QueryString from 'qs-esm'\nimport { v4 as uuid } from 'uuid'\n\nimport type { Strategy } from '../strategy/index.js'\nimport type { CollectionOptions, PluginOptions, StateObj } from '../types.js'\n\nimport { defaultScope } from '../defaults.js'\n\ninterface Args {\n  collection: CollectionConfig\n  collectionOptions: CollectionOptions\n  endpointSlug: string\n  failedRedirect?: unknown\n  payload: Payload\n  pluginOptions: PluginOptions\n  redirect?: unknown\n  serverURLOverride?: unknown\n  strategy: Strategy\n}\n\nexport const getAuthorizeURL = async ({\n  collection,\n  collectionOptions,\n  endpointSlug,\n  failedRedirect,\n  payload,\n  pluginOptions,\n  redirect,\n  serverURLOverride,\n  strategy,\n}: Args): Promise<string> => {\n  const { redirectServerURL } = pluginOptions\n\n  await strategy.ensureMeta()\n\n  // Generate a random code verifier\n  const codeVerifier = crypto.randomBytes(32).toString('base64url')\n\n  // Create a code challenge by hashing the code verifier\n  const code_challenge = crypto.createHash('sha256').update(codeVerifier).digest('base64url')\n\n  const state: StateObj = {\n    sig: payload.encrypt(strategy.name),\n    verifier: payload.encrypt(codeVerifier),\n  }\n\n  if (typeof serverURLOverride === 'string') {\n    state.serverURL = serverURLOverride\n  }\n\n  if (typeof redirect === 'string') {\n    state.redirect = redirect\n  }\n\n  if (typeof failedRedirect === 'string') {\n    state.failedRedirect = failedRedirect\n  }\n\n  const baseRedirectURL = redirectServerURL || payload.config.serverURL || state.serverURL\n\n  const loginRedirectURL = encodeURI(\n    `${baseRedirectURL}${payload.config.routes?.api || '/api'}/${collection.slug}/${endpointSlug}/login`,\n  )\n\n  const params = {\n    client_id: collectionOptions.clientID,\n    code_challenge,\n    code_challenge_method: 'S256',\n    nonce: uuid(),\n    redirect_uri: loginRedirectURL,\n    response_mode: 'form_post',\n    response_type: 'id_token%20token%20code',\n    scope: (collectionOptions.scope ?? defaultScope).join('+'),\n    state: Buffer.from(JSON.stringify(state)).toString('base64'),\n    ...(collectionOptions.authorizationURLParams || {}),\n  }\n\n  const authorizeURL = `${strategy.meta?.authorization_endpoint}?${QueryString.stringify(params, {\n    encode: false,\n  })}`\n\n  return authorizeURL\n}\n"],"names":["crypto","QueryString","v4","uuid","defaultScope","getAuthorizeURL","collection","collectionOptions","endpointSlug","failedRedirect","payload","pluginOptions","redirect","serverURLOverride","strategy","redirectServerURL","ensureMeta","codeVerifier","randomBytes","toString","code_challenge","createHash","update","digest","state","sig","encrypt","name","verifier","serverURL","baseRedirectURL","config","loginRedirectURL","encodeURI","routes","api","slug","params","client_id","clientID","code_challenge_method","nonce","redirect_uri","response_mode","response_type","scope","join","Buffer","from","JSON","stringify","authorizationURLParams","authorizeURL","meta","authorization_endpoint","encode"],"mappings":"AAEA,OAAOA,YAAY,SAAQ;AAC3B,YAAYC,iBAAiB,SAAQ;AACrC,SAASC,MAAMC,IAAI,QAAQ,OAAM;AAKjC,SAASC,YAAY,QAAQ,iBAAgB;AAc7C,OAAO,MAAMC,kBAAkB,OAAO,EACpCC,UAAU,EACVC,iBAAiB,EACjBC,YAAY,EACZC,cAAc,EACdC,OAAO,EACPC,aAAa,EACbC,QAAQ,EACRC,iBAAiB,EACjBC,QAAQ,EACH;IACL,MAAM,EAAEC,iBAAiB,EAAE,GAAGJ;IAE9B,MAAMG,SAASE,UAAU;IAEzB,kCAAkC;IAClC,MAAMC,eAAejB,OAAOkB,WAAW,CAAC,IAAIC,QAAQ,CAAC;IAErD,uDAAuD;IACvD,MAAMC,iBAAiBpB,OAAOqB,UAAU,CAAC,UAAUC,MAAM,CAACL,cAAcM,MAAM,CAAC;IAE/E,MAAMC,QAAkB;QACtBC,KAAKf,QAAQgB,OAAO,CAACZ,SAASa,IAAI;QAClCC,UAAUlB,QAAQgB,OAAO,CAACT;IAC5B;IAEA,IAAI,OAAOJ,sBAAsB,UAAU;QACzCW,MAAMK,SAAS,GAAGhB;IACpB;IAEA,IAAI,OAAOD,aAAa,UAAU;QAChCY,MAAMZ,QAAQ,GAAGA;IACnB;IAEA,IAAI,OAAOH,mBAAmB,UAAU;QACtCe,MAAMf,cAAc,GAAGA;IACzB;IAEA,MAAMqB,kBAAkBf,qBAAqBL,QAAQqB,MAAM,CAACF,SAAS,IAAIL,MAAMK,SAAS;IAExF,MAAMG,mBAAmBC,UACvB,GAAGH,kBAAkBpB,QAAQqB,MAAM,CAACG,MAAM,EAAEC,OAAO,OAAO,CAAC,EAAE7B,WAAW8B,IAAI,CAAC,CAAC,EAAE5B,aAAa,MAAM,CAAC;IAGtG,MAAM6B,SAAS;QACbC,WAAW/B,kBAAkBgC,QAAQ;QACrCnB;QACAoB,uBAAuB;QACvBC,OAAOtC;QACPuC,cAAcV;QACdW,eAAe;QACfC,eAAe;QACfC,OAAO,AAACtC,CAAAA,kBAAkBsC,KAAK,IAAIzC,YAAW,EAAG0C,IAAI,CAAC;QACtDtB,OAAOuB,OAAOC,IAAI,CAACC,KAAKC,SAAS,CAAC1B,QAAQL,QAAQ,CAAC;QACnD,GAAIZ,kBAAkB4C,sBAAsB,IAAI,CAAC,CAAC;IACpD;IAEA,MAAMC,eAAe,GAAGtC,SAASuC,IAAI,EAAEC,uBAAuB,CAAC,EAAErD,YAAYiD,SAAS,CAACb,QAAQ;QAC7FkB,QAAQ;IACV,IAAI;IAEJ,OAAOH;AACT,EAAC"}

package/dist/oauth/utilities/getCookieExpiration.d.ts

@@ -0,0 +1,4 @@
+type CookieExpires = Date | number | string | undefined;
+export declare const getCookieExpiration: (expires?: CookieExpires) => Date;
+export {};
+//# sourceMappingURL=getCookieExpiration.d.ts.map

package/dist/oauth/utilities/getCookieExpiration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCookieExpiration.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getCookieExpiration.ts"],"names":[],"mappings":"AAAA,KAAK,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;AAEvD,eAAO,MAAM,mBAAmB,aAAc,aAAa,KAAG,IAS7D,CAAA"}

package/dist/oauth/utilities/getCookieExpiration.js

@@ -0,0 +1,11 @@
+export const getCookieExpiration = (expires)=>{
+    if (expires instanceof Date) {
+        return expires;
+    }
+    const seconds = typeof expires === 'number' ? expires : 7200;
+    const currentTime = new Date();
+    currentTime.setSeconds(currentTime.getSeconds() + seconds);
+    return currentTime;
+};
+
+//# sourceMappingURL=getCookieExpiration.js.map

package/dist/oauth/utilities/getCookieExpiration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getCookieExpiration.ts"],"sourcesContent":["type CookieExpires = Date | number | string | undefined\n\nexport const getCookieExpiration = (expires?: CookieExpires): Date => {\n  if (expires instanceof Date) {\n    return expires\n  }\n\n  const seconds = typeof expires === 'number' ? expires : 7200\n  const currentTime = new Date()\n  currentTime.setSeconds(currentTime.getSeconds() + seconds)\n  return currentTime\n}\n"],"names":["getCookieExpiration","expires","Date","seconds","currentTime","setSeconds","getSeconds"],"mappings":"AAEA,OAAO,MAAMA,sBAAsB,CAACC;IAClC,IAAIA,mBAAmBC,MAAM;QAC3B,OAAOD;IACT;IAEA,MAAME,UAAU,OAAOF,YAAY,WAAWA,UAAU;IACxD,MAAMG,cAAc,IAAIF;IACxBE,YAAYC,UAAU,CAACD,YAAYE,UAAU,KAAKH;IAClD,OAAOC;AACT,EAAC"}

package/dist/oauth/utilities/getSecondsFromTokenExp.d.ts

@@ -0,0 +1,2 @@
+export declare function getSecondsFromTokenExp(futureUnixTimestamp: number): number;
+//# sourceMappingURL=getSecondsFromTokenExp.d.ts.map

package/dist/oauth/utilities/getSecondsFromTokenExp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSecondsFromTokenExp.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getSecondsFromTokenExp.ts"],"names":[],"mappings":"AAAA,wBAAgB,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAG1E"}

package/dist/oauth/utilities/getSecondsFromTokenExp.js

@@ -0,0 +1,7 @@
+export function getSecondsFromTokenExp(futureUnixTimestamp) {
+    const now = Math.floor(Date.now() / 1000) // current time in seconds
+    ;
+    return futureUnixTimestamp - now;
+}
+
+//# sourceMappingURL=getSecondsFromTokenExp.js.map

package/dist/oauth/utilities/getSecondsFromTokenExp.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getSecondsFromTokenExp.ts"],"sourcesContent":["export function getSecondsFromTokenExp(futureUnixTimestamp: number): number {\n  const now = Math.floor(Date.now() / 1000) // current time in seconds\n  return futureUnixTimestamp - now\n}\n"],"names":["getSecondsFromTokenExp","futureUnixTimestamp","now","Math","floor","Date"],"mappings":"AAAA,OAAO,SAASA,uBAAuBC,mBAA2B;IAChE,MAAMC,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK,MAAM,0BAA0B;;IACpE,OAAOD,sBAAsBC;AAC/B"}

package/dist/oauth/utilities/getTokenExp.d.ts

@@ -0,0 +1,6 @@
+import type { DebugLogger } from '../types.js';
+export declare const getTokenExp: ({ debugLogger, token, }: {
+    debugLogger: DebugLogger;
+    token: string;
+}) => number | undefined;
+//# sourceMappingURL=getTokenExp.d.ts.map

package/dist/oauth/utilities/getTokenExp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getTokenExp.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getTokenExp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,eAAO,MAAM,WAAW,4BAGrB;IACD,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,MAAM,GAAG,SAwBZ,CAAA"}

package/dist/oauth/utilities/getTokenExp.js

@@ -0,0 +1,20 @@
+import jwt from 'jsonwebtoken';
+export const getTokenExp = ({ debugLogger, token })=>{
+    if (!token) {
+        return undefined;
+    }
+    try {
+        const decoded = jwt.decode(token);
+        if (decoded && typeof decoded === 'object' && 'exp' in decoded && typeof decoded.exp === 'number') {
+            return decoded.exp;
+        }
+    } catch (err) {
+        debugLogger.error({
+            err,
+            msg: 'Error decoding token in getTokenExp'
+        });
+    }
+    return undefined;
+};
+
+//# sourceMappingURL=getTokenExp.js.map

package/dist/oauth/utilities/getTokenExp.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getTokenExp.ts"],"sourcesContent":["import jwt from 'jsonwebtoken'\n\nimport type { DebugLogger } from '../types.js'\n\nexport const getTokenExp = ({\n  debugLogger,\n  token,\n}: {\n  debugLogger: DebugLogger\n  token: string\n}): number | undefined => {\n  if (!token) {\n    return undefined\n  }\n\n  try {\n    const decoded = jwt.decode(token)\n\n    if (\n      decoded &&\n      typeof decoded === 'object' &&\n      'exp' in decoded &&\n      typeof decoded.exp === 'number'\n    ) {\n      return decoded.exp\n    }\n  } catch (err: unknown) {\n    debugLogger.error({\n      err,\n      msg: 'Error decoding token in getTokenExp',\n    })\n  }\n\n  return undefined\n}\n"],"names":["jwt","getTokenExp","debugLogger","token","undefined","decoded","decode","exp","err","error","msg"],"mappings":"AAAA,OAAOA,SAAS,eAAc;AAI9B,OAAO,MAAMC,cAAc,CAAC,EAC1BC,WAAW,EACXC,KAAK,EAIN;IACC,IAAI,CAACA,OAAO;QACV,OAAOC;IACT;IAEA,IAAI;QACF,MAAMC,UAAUL,IAAIM,MAAM,CAACH;QAE3B,IACEE,WACA,OAAOA,YAAY,YACnB,SAASA,WACT,OAAOA,QAAQE,GAAG,KAAK,UACvB;YACA,OAAOF,QAAQE,GAAG;QACpB;IACF,EAAE,OAAOC,KAAc;QACrBN,YAAYO,KAAK,CAAC;YAChBD;YACAE,KAAK;QACP;IACF;IAEA,OAAON;AACT,EAAC"}

package/dist/oauth/utilities/getUsernameField.d.ts

@@ -0,0 +1,9 @@
+import type { CollectionConfig, EmailField, TextField } from 'payload';
+import type { CollectionOptions } from '../types.js';
+interface Args {
+    collection: CollectionConfig;
+    collectionOptions: CollectionOptions;
+}
+export declare const getUsernameField: ({ collection, collectionOptions, }: Args) => EmailField | TextField;
+export {};
+//# sourceMappingURL=getUsernameField.d.ts.map

package/dist/oauth/utilities/getUsernameField.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUsernameField.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/getUsernameField.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAItE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAIpD,UAAU,IAAI;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,iBAAiB,CAAA;CACrC;AACD,eAAO,MAAM,gBAAgB,uCAG1B,IAAI,KAAG,UAAU,GAAG,SA0BtB,CAAA"}

package/dist/oauth/utilities/getUsernameField.js

@@ -0,0 +1,20 @@
+import { flattenTopLevelFields } from 'payload';
+import { defaultUsernameField } from '../defaults.js';
+export const getUsernameField = ({ collection, collectionOptions })=>{
+    if (!collectionOptions.usernameField) {
+        return defaultUsernameField;
+    }
+    if (typeof collectionOptions.usernameField === 'string') {
+        const matchedField = flattenTopLevelFields(collection.fields).find((field)=>field.name === collectionOptions.usernameField);
+        if (!matchedField) {
+            throw new Error(`Username field "${collectionOptions.usernameField}" not found in collection "${collection.slug}"`);
+        }
+        if (matchedField.type !== 'text' && matchedField.type !== 'email') {
+            throw new Error(`Username field "${collectionOptions.usernameField}" must be of type "text" or "email"`);
+        }
+        return matchedField;
+    }
+    return collectionOptions.usernameField;
+};
+
+//# sourceMappingURL=getUsernameField.js.map

package/dist/oauth/utilities/getUsernameField.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/getUsernameField.ts"],"sourcesContent":["import type { CollectionConfig, EmailField, TextField } from 'payload'\n\nimport { flattenTopLevelFields } from 'payload'\n\nimport type { CollectionOptions } from '../types.js'\n\nimport { defaultUsernameField } from '../defaults.js'\n\ninterface Args {\n  collection: CollectionConfig\n  collectionOptions: CollectionOptions\n}\nexport const getUsernameField = ({\n  collection,\n  collectionOptions,\n}: Args): EmailField | TextField => {\n  if (!collectionOptions.usernameField) {\n    return defaultUsernameField\n  }\n\n  if (typeof collectionOptions.usernameField === 'string') {\n    const matchedField = flattenTopLevelFields(collection.fields).find(\n      (field) => field.name === collectionOptions.usernameField,\n    )\n\n    if (!matchedField) {\n      throw new Error(\n        `Username field \"${collectionOptions.usernameField}\" not found in collection \"${collection.slug}\"`,\n      )\n    }\n\n    if (matchedField.type !== 'text' && matchedField.type !== 'email') {\n      throw new Error(\n        `Username field \"${collectionOptions.usernameField}\" must be of type \"text\" or \"email\"`,\n      )\n    }\n\n    return matchedField\n  }\n\n  return collectionOptions.usernameField\n}\n"],"names":["flattenTopLevelFields","defaultUsernameField","getUsernameField","collection","collectionOptions","usernameField","matchedField","fields","find","field","name","Error","slug","type"],"mappings":"AAEA,SAASA,qBAAqB,QAAQ,UAAS;AAI/C,SAASC,oBAAoB,QAAQ,iBAAgB;AAMrD,OAAO,MAAMC,mBAAmB,CAAC,EAC/BC,UAAU,EACVC,iBAAiB,EACZ;IACL,IAAI,CAACA,kBAAkBC,aAAa,EAAE;QACpC,OAAOJ;IACT;IAEA,IAAI,OAAOG,kBAAkBC,aAAa,KAAK,UAAU;QACvD,MAAMC,eAAeN,sBAAsBG,WAAWI,MAAM,EAAEC,IAAI,CAChE,CAACC,QAAUA,MAAMC,IAAI,KAAKN,kBAAkBC,aAAa;QAG3D,IAAI,CAACC,cAAc;YACjB,MAAM,IAAIK,MACR,CAAC,gBAAgB,EAAEP,kBAAkBC,aAAa,CAAC,2BAA2B,EAAEF,WAAWS,IAAI,CAAC,CAAC,CAAC;QAEtG;QAEA,IAAIN,aAAaO,IAAI,KAAK,UAAUP,aAAaO,IAAI,KAAK,SAAS;YACjE,MAAM,IAAIF,MACR,CAAC,gBAAgB,EAAEP,kBAAkBC,aAAa,CAAC,mCAAmC,CAAC;QAE3F;QAEA,OAAOC;IACT;IAEA,OAAOF,kBAAkBC,aAAa;AACxC,EAAC"}

package/dist/oauth/utilities/hasUserTokenPropsChanged.d.ts

@@ -0,0 +1,8 @@
+type User = Record<string, unknown>;
+/**
+ * Iterate over the user's properties and compare them to the token's properties.
+ * If a property has changed, return true.
+ */
+export declare const hasUserTokenPropsChanged: (user: User, token: Record<string, unknown>) => boolean;
+export {};
+//# sourceMappingURL=hasUserTokenPropsChanged.d.ts.map

package/dist/oauth/utilities/hasUserTokenPropsChanged.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasUserTokenPropsChanged.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/hasUserTokenPropsChanged.ts"],"names":[],"mappings":"AAAA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEnC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,SAAU,IAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAerF,CAAA"}

package/dist/oauth/utilities/hasUserTokenPropsChanged.js

@@ -0,0 +1,25 @@
+/**
+ * Iterate over the user's properties and compare them to the token's properties.
+ * If a property has changed, return true.
+ */ export const hasUserTokenPropsChanged = (user, token)=>{
+    // For each property in token:
+    // - if so, are the values different?
+    // - if so, return true
+    // Iterate over the user's properties
+    for(const key in user){
+        if (user[key] && token[key]) {
+            if (compareValues(user[key], token[key])) {
+                return true;
+            }
+        }
+    }
+    return false;
+};
+function compareValues(userVal, tokenVal) {
+    if (Array.isArray(userVal) && Array.isArray(tokenVal)) {
+        return userVal.some((val)=>!tokenVal.includes(val)) || tokenVal.some((val)=>!userVal.includes(val));
+    }
+    return userVal !== tokenVal;
+}
+
+//# sourceMappingURL=hasUserTokenPropsChanged.js.map

package/dist/oauth/utilities/hasUserTokenPropsChanged.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/hasUserTokenPropsChanged.ts"],"sourcesContent":["type User = Record<string, unknown>\n\n/**\n * Iterate over the user's properties and compare them to the token's properties.\n * If a property has changed, return true.\n */\nexport const hasUserTokenPropsChanged = (user: User, token: Record<string, unknown>): boolean => {\n  // For each property in token:\n  // - if so, are the values different?\n  // - if so, return true\n\n  // Iterate over the user's properties\n  for (const key in user) {\n    if (user[key] && token[key]) {\n      if (compareValues(user[key], token[key])) {\n        return true\n      }\n    }\n  }\n\n  return false\n}\n\nfunction compareValues(userVal: unknown, tokenVal: unknown): boolean {\n  if (Array.isArray(userVal) && Array.isArray(tokenVal)) {\n    return (\n      userVal.some((val) => !tokenVal.includes(val)) ||\n      tokenVal.some((val) => !userVal.includes(val))\n    )\n  }\n  return userVal !== tokenVal\n}\n"],"names":["hasUserTokenPropsChanged","user","token","key","compareValues","userVal","tokenVal","Array","isArray","some","val","includes"],"mappings":"AAEA;;;CAGC,GACD,OAAO,MAAMA,2BAA2B,CAACC,MAAYC;IACnD,8BAA8B;IAC9B,qCAAqC;IACrC,uBAAuB;IAEvB,qCAAqC;IACrC,IAAK,MAAMC,OAAOF,KAAM;QACtB,IAAIA,IAAI,CAACE,IAAI,IAAID,KAAK,CAACC,IAAI,EAAE;YAC3B,IAAIC,cAAcH,IAAI,CAACE,IAAI,EAAED,KAAK,CAACC,IAAI,GAAG;gBACxC,OAAO;YACT;QACF;IACF;IAEA,OAAO;AACT,EAAC;AAED,SAASC,cAAcC,OAAgB,EAAEC,QAAiB;IACxD,IAAIC,MAAMC,OAAO,CAACH,YAAYE,MAAMC,OAAO,CAACF,WAAW;QACrD,OACED,QAAQI,IAAI,CAAC,CAACC,MAAQ,CAACJ,SAASK,QAAQ,CAACD,SACzCJ,SAASG,IAAI,CAAC,CAACC,MAAQ,CAACL,QAAQM,QAAQ,CAACD;IAE7C;IACA,OAAOL,YAAYC;AACrB"}

package/dist/oauth/utilities/mergeHeaders.d.ts

@@ -0,0 +1,2 @@
+export declare function mergeHeaders(sourceHeaders: Headers, destinationHeaders: Headers): void;
+//# sourceMappingURL=mergeHeaders.d.ts.map

package/dist/oauth/utilities/mergeHeaders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeHeaders.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/mergeHeaders.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,GAAG,IAAI,CA8BtF"}

package/dist/oauth/utilities/mergeHeaders.js

@@ -0,0 +1,37 @@
+const headersToJoin = [
+    'set-cookie',
+    'warning',
+    'www-authenticate',
+    'proxy-authenticate',
+    'vary'
+];
+export function mergeHeaders(sourceHeaders, destinationHeaders) {
+    // Create a map to store combined headers
+    const combinedHeaders = new Headers();
+    // Add existing destination headers to the combined map
+    destinationHeaders.forEach((value, key)=>{
+        combinedHeaders.set(key, value);
+    });
+    // Add source headers to the combined map, joining specific headers
+    sourceHeaders.forEach((value, key)=>{
+        const lowerKey = key.toLowerCase();
+        if (headersToJoin.includes(lowerKey)) {
+            if (combinedHeaders.has(key)) {
+                combinedHeaders.set(key, `${combinedHeaders.get(key)}, ${value}`);
+            } else {
+                combinedHeaders.set(key, value);
+            }
+        } else {
+            combinedHeaders.set(key, value);
+        }
+    });
+    // Clear the destination headers and set the combined headers
+    destinationHeaders.forEach((_, key)=>{
+        destinationHeaders.delete(key);
+    });
+    combinedHeaders.forEach((value, key)=>{
+        destinationHeaders.append(key, value);
+    });
+}
+
+//# sourceMappingURL=mergeHeaders.js.map

package/dist/oauth/utilities/mergeHeaders.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/mergeHeaders.ts"],"sourcesContent":["const headersToJoin = ['set-cookie', 'warning', 'www-authenticate', 'proxy-authenticate', 'vary']\n\nexport function mergeHeaders(sourceHeaders: Headers, destinationHeaders: Headers): void {\n  // Create a map to store combined headers\n  const combinedHeaders = new Headers()\n\n  // Add existing destination headers to the combined map\n  destinationHeaders.forEach((value, key) => {\n    combinedHeaders.set(key, value)\n  })\n\n  // Add source headers to the combined map, joining specific headers\n  sourceHeaders.forEach((value, key) => {\n    const lowerKey = key.toLowerCase()\n    if (headersToJoin.includes(lowerKey)) {\n      if (combinedHeaders.has(key)) {\n        combinedHeaders.set(key, `${combinedHeaders.get(key)}, ${value}`)\n      } else {\n        combinedHeaders.set(key, value)\n      }\n    } else {\n      combinedHeaders.set(key, value)\n    }\n  })\n\n  // Clear the destination headers and set the combined headers\n  destinationHeaders.forEach((_, key) => {\n    destinationHeaders.delete(key)\n  })\n  combinedHeaders.forEach((value, key) => {\n    destinationHeaders.append(key, value)\n  })\n}\n"],"names":["headersToJoin","mergeHeaders","sourceHeaders","destinationHeaders","combinedHeaders","Headers","forEach","value","key","set","lowerKey","toLowerCase","includes","has","get","_","delete","append"],"mappings":"AAAA,MAAMA,gBAAgB;IAAC;IAAc;IAAW;IAAoB;IAAsB;CAAO;AAEjG,OAAO,SAASC,aAAaC,aAAsB,EAAEC,kBAA2B;IAC9E,yCAAyC;IACzC,MAAMC,kBAAkB,IAAIC;IAE5B,uDAAuD;IACvDF,mBAAmBG,OAAO,CAAC,CAACC,OAAOC;QACjCJ,gBAAgBK,GAAG,CAACD,KAAKD;IAC3B;IAEA,mEAAmE;IACnEL,cAAcI,OAAO,CAAC,CAACC,OAAOC;QAC5B,MAAME,WAAWF,IAAIG,WAAW;QAChC,IAAIX,cAAcY,QAAQ,CAACF,WAAW;YACpC,IAAIN,gBAAgBS,GAAG,CAACL,MAAM;gBAC5BJ,gBAAgBK,GAAG,CAACD,KAAK,GAAGJ,gBAAgBU,GAAG,CAACN,KAAK,EAAE,EAAED,OAAO;YAClE,OAAO;gBACLH,gBAAgBK,GAAG,CAACD,KAAKD;YAC3B;QACF,OAAO;YACLH,gBAAgBK,GAAG,CAACD,KAAKD;QAC3B;IACF;IAEA,6DAA6D;IAC7DJ,mBAAmBG,OAAO,CAAC,CAACS,GAAGP;QAC7BL,mBAAmBa,MAAM,CAACR;IAC5B;IACAJ,gBAAgBE,OAAO,CAAC,CAACC,OAAOC;QAC9BL,mBAAmBc,MAAM,CAACT,KAAKD;IACjC;AACF"}

package/dist/oauth/utilities/refreshTokens.d.ts

@@ -0,0 +1,16 @@
+import type jwt from 'jsonwebtoken';
+import type { Payload } from 'payload';
+import type { Strategy } from '../strategy/index.js';
+interface Args {
+    payload: Payload;
+    refreshToken: string;
+    strategy: Strategy;
+}
+type Result = {
+    decodedOauthToken: jwt.JwtPayload;
+    headers: Headers;
+    token: string;
+} | false;
+export declare const refreshTokens: ({ payload, refreshToken, strategy }: Args) => Promise<Result>;
+export {};
+//# sourceMappingURL=refreshTokens.d.ts.map

package/dist/oauth/utilities/refreshTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshTokens.d.ts","sourceRoot":"","sources":["../../../src/oauth/utilities/refreshTokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAItC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AASpD,UAAU,IAAI;IACZ,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,KAAK,MAAM,GACP;IACE,iBAAiB,EAAE,GAAG,CAAC,UAAU,CAAA;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,GACD,KAAK,CAAA;AAET,eAAO,MAAM,aAAa,wCAA+C,IAAI,KAAG,OAAO,CAAC,MAAM,CAmE7F,CAAA"}

package/dist/oauth/utilities/refreshTokens.js

@@ -0,0 +1,67 @@
+import { generateCookie } from 'payload';
+import { getProjectToken } from '../../api/figma-api.js';
+import { validateProjectToken } from '../../auth/jwt-validator.js';
+import { getEnvironment } from '../../constants.js';
+import { createCookieOptions } from './createCookieOptions.js';
+import { createDebugLogger } from './createDebugLogger.js';
+import { getCookieExpiration } from './getCookieExpiration.js';
+export const refreshTokens = async ({ payload, refreshToken, strategy })=>{
+    const debugLogger = createDebugLogger(payload, strategy.debug);
+    debugLogger.info({
+        msg: 'Refreshing tokens'
+    });
+    const headers = new Headers();
+    // At this point, access token is expired
+    // but refresh token is still valid
+    // so we will refresh both tokens
+    try {
+        // Get another project token
+        const { expiresAt, token } = await getProjectToken(refreshToken, 'someproject');
+        debugLogger.info({
+            expiresAt,
+            msg: 'Received new tokens from Figma API',
+            token
+        });
+        // On error, no user
+        if (!token) {
+            debugLogger.error({
+                msg: 'Error refreshing tokens'
+            });
+            return false;
+        }
+        if (token) {
+            debugLogger.info({
+                msg: 'Successfully refreshed project token',
+                token
+            });
+            const expires_in = new Date(expiresAt);
+            const cookieOptions = createCookieOptions({
+                collection: strategy.collection,
+                headers,
+                pluginOptions: strategy.pluginOptions
+            });
+            const tokenCookie = generateCookie({
+                ...cookieOptions,
+                name: strategy.cookieName,
+                expires: getCookieExpiration(expires_in),
+                returnCookieAsObject: false,
+                value: token
+            });
+            headers.append('Set-Cookie', tokenCookie);
+            const decodedOauthToken = await validateProjectToken(token, getEnvironment());
+            return {
+                decodedOauthToken,
+                headers,
+                token
+            };
+        }
+    } catch (error) {
+        debugLogger.error({
+            err: error,
+            msg: 'Error refreshing tokens'
+        });
+    }
+    return false;
+};
+
+//# sourceMappingURL=refreshTokens.js.map

package/dist/oauth/utilities/refreshTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/oauth/utilities/refreshTokens.ts"],"sourcesContent":["import type jwt from 'jsonwebtoken'\nimport type { Payload } from 'payload'\n\nimport { generateCookie } from 'payload'\n\nimport type { Strategy } from '../strategy/index.js'\n\nimport { getProjectToken } from '../../api/figma-api.js'\nimport { validateProjectToken } from '../../auth/jwt-validator.js'\nimport { getEnvironment } from '../../constants.js'\nimport { createCookieOptions } from './createCookieOptions.js'\nimport { createDebugLogger } from './createDebugLogger.js'\nimport { getCookieExpiration } from './getCookieExpiration.js'\n\ninterface Args {\n  payload: Payload\n  refreshToken: string\n  strategy: Strategy\n}\n\ntype Result =\n  | {\n      decodedOauthToken: jwt.JwtPayload\n      headers: Headers\n      token: string\n    }\n  | false\n\nexport const refreshTokens = async ({ payload, refreshToken, strategy }: Args): Promise<Result> => {\n  const debugLogger = createDebugLogger(payload, strategy.debug)\n\n  debugLogger.info({\n    msg: 'Refreshing tokens',\n  })\n\n  const headers = new Headers()\n\n  // At this point, access token is expired\n  // but refresh token is still valid\n  // so we will refresh both tokens\n\n  try {\n    // Get another project token\n    const { expiresAt, token } = await getProjectToken(refreshToken, 'someproject')\n\n    debugLogger.info({\n      expiresAt,\n      msg: 'Received new tokens from Figma API',\n      token,\n    })\n\n    // On error, no user\n    if (!token) {\n      debugLogger.error({\n        msg: 'Error refreshing tokens',\n      })\n      return false\n    }\n\n    if (token) {\n      debugLogger.info({\n        msg: 'Successfully refreshed project token',\n        token,\n      })\n\n      const expires_in = new Date(expiresAt)\n\n      const cookieOptions = createCookieOptions({\n        collection: strategy.collection,\n        headers,\n        pluginOptions: strategy.pluginOptions,\n      })\n\n      const tokenCookie = generateCookie({\n        ...cookieOptions,\n        name: strategy.cookieName,\n        expires: getCookieExpiration(expires_in),\n        returnCookieAsObject: false,\n        value: token,\n      }) as string\n\n      headers.append('Set-Cookie', tokenCookie)\n\n      const decodedOauthToken = await validateProjectToken(token, getEnvironment())\n\n      return { decodedOauthToken, headers, token }\n    }\n  } catch (error) {\n    debugLogger.error({\n      err: error,\n      msg: 'Error refreshing tokens',\n    })\n  }\n\n  return false\n}\n"],"names":["generateCookie","getProjectToken","validateProjectToken","getEnvironment","createCookieOptions","createDebugLogger","getCookieExpiration","refreshTokens","payload","refreshToken","strategy","debugLogger","debug","info","msg","headers","Headers","expiresAt","token","error","expires_in","Date","cookieOptions","collection","pluginOptions","tokenCookie","name","cookieName","expires","returnCookieAsObject","value","append","decodedOauthToken","err"],"mappings":"AAGA,SAASA,cAAc,QAAQ,UAAS;AAIxC,SAASC,eAAe,QAAQ,yBAAwB;AACxD,SAASC,oBAAoB,QAAQ,8BAA6B;AAClE,SAASC,cAAc,QAAQ,qBAAoB;AACnD,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,iBAAiB,QAAQ,yBAAwB;AAC1D,SAASC,mBAAmB,QAAQ,2BAA0B;AAgB9D,OAAO,MAAMC,gBAAgB,OAAO,EAAEC,OAAO,EAAEC,YAAY,EAAEC,QAAQ,EAAQ;IAC3E,MAAMC,cAAcN,kBAAkBG,SAASE,SAASE,KAAK;IAE7DD,YAAYE,IAAI,CAAC;QACfC,KAAK;IACP;IAEA,MAAMC,UAAU,IAAIC;IAEpB,yCAAyC;IACzC,mCAAmC;IACnC,iCAAiC;IAEjC,IAAI;QACF,4BAA4B;QAC5B,MAAM,EAAEC,SAAS,EAAEC,KAAK,EAAE,GAAG,MAAMjB,gBAAgBQ,cAAc;QAEjEE,YAAYE,IAAI,CAAC;YACfI;YACAH,KAAK;YACLI;QACF;QAEA,oBAAoB;QACpB,IAAI,CAACA,OAAO;YACVP,YAAYQ,KAAK,CAAC;gBAChBL,KAAK;YACP;YACA,OAAO;QACT;QAEA,IAAII,OAAO;YACTP,YAAYE,IAAI,CAAC;gBACfC,KAAK;gBACLI;YACF;YAEA,MAAME,aAAa,IAAIC,KAAKJ;YAE5B,MAAMK,gBAAgBlB,oBAAoB;gBACxCmB,YAAYb,SAASa,UAAU;gBAC/BR;gBACAS,eAAed,SAASc,aAAa;YACvC;YAEA,MAAMC,cAAczB,eAAe;gBACjC,GAAGsB,aAAa;gBAChBI,MAAMhB,SAASiB,UAAU;gBACzBC,SAAStB,oBAAoBc;gBAC7BS,sBAAsB;gBACtBC,OAAOZ;YACT;YAEAH,QAAQgB,MAAM,CAAC,cAAcN;YAE7B,MAAMO,oBAAoB,MAAM9B,qBAAqBgB,OAAOf;YAE5D,OAAO;gBAAE6B;gBAAmBjB;gBAASG;YAAM;QAC7C;IACF,EAAE,OAAOC,OAAO;QACdR,YAAYQ,KAAK,CAAC;YAChBc,KAAKd;YACLL,KAAK;QACP;IACF;IAEA,OAAO;AACT,EAAC"}

package/dist/plugin/build-config.d.ts

@@ -22,7 +22,13 @@ import type { Config, SanitizedConfig } from 'payload';
  */
 export type FigmaConfig = {
     editor?: Config['editor'];
-} & Omit<Config, 'db' | 'editor' | 'secret'>;
+} & {
+    figma: {
+        region: string;
+        tenantId: string;
+        useContentSystem?: boolean;
+    };
+} & Omit<Config, 'db' | 'editor' | 'secret'> & Partial<Pick<Config, 'db'>>;
 /**
  * Figma platform wrapper for Payload's buildConfig.
  * Automatically injects:

package/dist/plugin/build-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-config.d.ts","sourceRoot":"","sources":["../../src/plugin/build-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAOtD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;CAC1B,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAA;AAE5C;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAW/E"}
+{"version":3,"file":"build-config.d.ts","sourceRoot":"","sources":["../../src/plugin/build-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAQtD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;CAC1B,GAAG;IACF,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAC3B,CAAA;CACF,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;AAE7B;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAmC/E"}

package/dist/plugin/build-config.js

@@ -1,5 +1,6 @@
 import { lexicalEditor } from '@payloadcms/richtext-lexical';
 import { buildConfig as payloadBuildConfig } from 'payload';
+import { oAuth2Plugin } from '../oauth/index.js';
 import { figmaContentSystem } from './adapter.js';
 /**
  * Figma platform wrapper for Payload's buildConfig.
@@ -14,9 +15,35 @@ import { figmaContentSystem } from './adapter.js';
     // Build complete config with Figma platform defaults
     const configWithFigmaDefaults = {
         ...config,
-        db: figmaContentSystem(),
+        db: config.figma.useContentSystem ? figmaContentSystem() : config.db,
         editor: config.editor ?? lexicalEditor(),
-        secret: 'MY_SECRET'
+        secret: 'MY_SECRET',
+        // Add oauth to plugins if not already present
+        plugins: [
+            ...config.plugins ?? [],
+            oAuth2Plugin({
+                collections: [
+                    {
+                        slug: 'users',
+                        // Use adapter because Figma app doesn't support OIDC scopes
+                        authorizationURLParams: {
+                            response_mode: 'query',
+                            response_type: 'code'
+                        },
+                        clientID: process.env.FIGMA_OAUTH_CLIENT_ID,
+                        clientSecret: process.env.FIGMA_OAUTH_CLIENT_SECRET,
+                        identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',
+                        scope: [
+                            'current_user:read'
+                        ],
+                        token: 'id_token',
+                        usernameField: 'email'
+                    }
+                ],
+                debug: !!process.env.DEBUG,
+                disabled: false
+            })
+        ]
     };
     // Delegate to Payload's buildConfig
     return await payloadBuildConfig(configWithFigmaDefaults);

package/dist/plugin/build-config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/plugin/build-config.ts"],"sourcesContent":["import type { Config, SanitizedConfig } from 'payload'\n\nimport { lexicalEditor } from '@payloadcms/richtext-lexical'\nimport { buildConfig as payloadBuildConfig } from 'payload'\n\nimport { figmaContentSystem } from './adapter.js'\n\n/**\n * Configuration type for Payload projects on the Figma platform.\n *\n * Differences from standard Payload Config:\n * - `db`: Omitted (auto-injected by Figma platform)\n * - `secret`: Omitted (auto-injected by Figma platform)\n * - `editor`: Optional (defaults to lexicalEditor() if not provided)\n *\n * @example\n * // Minimal config\n * const config: FigmaConfig = {\n *   collections: [...]\n * }\n *\n * @example\n * // With custom editor\n * const config: FigmaConfig = {\n *   collections: [...],\n *   editor: lexicalEditor({ features: [...] })\n * }\n */\nexport type FigmaConfig = {\n  editor?: Config['editor']\n} & Omit<Config, 'db' | 'editor' | 'secret'>\n\n/**\n * Figma platform wrapper for Payload's buildConfig.\n * Automatically injects:\n * - Figma database adapter\n * - Secret (platform-provided)\n * - Default lexicalEditor (if no custom editor specified)\n *\n * @param config - Payload configuration (db and secret omitted, editor optional)\n * @returns Promise<SanitizedConfig> - Built Payload configuration\n */\nexport async function buildConfig(config: FigmaConfig): Promise<SanitizedConfig> {\n  // Build complete config with Figma platform defaults\n  const configWithFigmaDefaults: Config = {\n    ...config,\n    db: figmaContentSystem(),\n    editor: config.editor ?? lexicalEditor(),\n    secret: 'MY_SECRET',\n  }\n\n  // Delegate to Payload's buildConfig\n  return await payloadBuildConfig(configWithFigmaDefaults)\n}\n"],"names":["lexicalEditor","buildConfig","payloadBuildConfig","figmaContentSystem","config","configWithFigmaDefaults","db","editor","secret"],"mappings":"AAEA,SAASA,aAAa,QAAQ,+BAA8B;AAC5D,SAASC,eAAeC,kBAAkB,QAAQ,UAAS;AAE3D,SAASC,kBAAkB,QAAQ,eAAc;AA2BjD;;;;;;;;;CASC,GACD,OAAO,eAAeF,YAAYG,MAAmB;IACnD,qDAAqD;IACrD,MAAMC,0BAAkC;QACtC,GAAGD,MAAM;QACTE,IAAIH;QACJI,QAAQH,OAAOG,MAAM,IAAIP;QACzBQ,QAAQ;IACV;IAEA,oCAAoC;IACpC,OAAO,MAAMN,mBAAmBG;AAClC"}
+{"version":3,"sources":["../../src/plugin/build-config.ts"],"sourcesContent":["import type { Config, SanitizedConfig } from 'payload'\n\nimport { lexicalEditor } from '@payloadcms/richtext-lexical'\nimport { buildConfig as payloadBuildConfig } from 'payload'\n\nimport { oAuth2Plugin } from '../oauth/index.js'\nimport { figmaContentSystem } from './adapter.js'\n\n/**\n * Configuration type for Payload projects on the Figma platform.\n *\n * Differences from standard Payload Config:\n * - `db`: Omitted (auto-injected by Figma platform)\n * - `secret`: Omitted (auto-injected by Figma platform)\n * - `editor`: Optional (defaults to lexicalEditor() if not provided)\n *\n * @example\n * // Minimal config\n * const config: FigmaConfig = {\n *   collections: [...]\n * }\n *\n * @example\n * // With custom editor\n * const config: FigmaConfig = {\n *   collections: [...],\n *   editor: lexicalEditor({ features: [...] })\n * }\n */\nexport type FigmaConfig = {\n  editor?: Config['editor']\n} & {\n  figma: {\n    region: string\n    tenantId: string\n    useContentSystem?: boolean\n  }\n} & Omit<Config, 'db' | 'editor' | 'secret'> &\n  Partial<Pick<Config, 'db'>>\n\n/**\n * Figma platform wrapper for Payload's buildConfig.\n * Automatically injects:\n * - Figma database adapter\n * - Secret (platform-provided)\n * - Default lexicalEditor (if no custom editor specified)\n *\n * @param config - Payload configuration (db and secret omitted, editor optional)\n * @returns Promise<SanitizedConfig> - Built Payload configuration\n */\nexport async function buildConfig(config: FigmaConfig): Promise<SanitizedConfig> {\n  // Build complete config with Figma platform defaults\n  const configWithFigmaDefaults: Config = {\n    ...config,\n    db: config.figma.useContentSystem ? figmaContentSystem() : config.db!,\n    editor: config.editor ?? lexicalEditor(),\n    secret: 'MY_SECRET',\n    // Add oauth to plugins if not already present\n    plugins: [\n      ...(config.plugins ?? []),\n      oAuth2Plugin({\n        collections: [\n          {\n            slug: 'users',\n            // Use adapter because Figma app doesn't support OIDC scopes\n            authorizationURLParams: {\n              response_mode: 'query',\n              response_type: 'code',\n            },\n            clientID: process.env.FIGMA_OAUTH_CLIENT_ID!,\n            clientSecret: process.env.FIGMA_OAUTH_CLIENT_SECRET,\n            identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',\n            scope: ['current_user:read'],\n            token: 'id_token', // Adapter creates JWT id_token from Figma user info\n            usernameField: 'email',\n          },\n        ],\n        debug: !!process.env.DEBUG,\n        disabled: false,\n      }),\n    ],\n  }\n\n  // Delegate to Payload's buildConfig\n  return await payloadBuildConfig(configWithFigmaDefaults)\n}\n"],"names":["lexicalEditor","buildConfig","payloadBuildConfig","oAuth2Plugin","figmaContentSystem","config","configWithFigmaDefaults","db","figma","useContentSystem","editor","secret","plugins","collections","slug","authorizationURLParams","response_mode","response_type","clientID","process","env","FIGMA_OAUTH_CLIENT_ID","clientSecret","FIGMA_OAUTH_CLIENT_SECRET","identityMetadata","scope","token","usernameField","debug","DEBUG","disabled"],"mappings":"AAEA,SAASA,aAAa,QAAQ,+BAA8B;AAC5D,SAASC,eAAeC,kBAAkB,QAAQ,UAAS;AAE3D,SAASC,YAAY,QAAQ,oBAAmB;AAChD,SAASC,kBAAkB,QAAQ,eAAc;AAkCjD;;;;;;;;;CASC,GACD,OAAO,eAAeH,YAAYI,MAAmB;IACnD,qDAAqD;IACrD,MAAMC,0BAAkC;QACtC,GAAGD,MAAM;QACTE,IAAIF,OAAOG,KAAK,CAACC,gBAAgB,GAAGL,uBAAuBC,OAAOE,EAAE;QACpEG,QAAQL,OAAOK,MAAM,IAAIV;QACzBW,QAAQ;QACR,8CAA8C;QAC9CC,SAAS;eACHP,OAAOO,OAAO,IAAI,EAAE;YACxBT,aAAa;gBACXU,aAAa;oBACX;wBACEC,MAAM;wBACN,4DAA4D;wBAC5DC,wBAAwB;4BACtBC,eAAe;4BACfC,eAAe;wBACjB;wBACAC,UAAUC,QAAQC,GAAG,CAACC,qBAAqB;wBAC3CC,cAAcH,QAAQC,GAAG,CAACG,yBAAyB;wBACnDC,kBAAkB;wBAClBC,OAAO;4BAAC;yBAAoB;wBAC5BC,OAAO;wBACPC,eAAe;oBACjB;iBACD;gBACDC,OAAO,CAAC,CAACT,QAAQC,GAAG,CAACS,KAAK;gBAC1BC,UAAU;YACZ;SACD;IACH;IAEA,oCAAoC;IACpC,OAAO,MAAM5B,mBAAmBI;AAClC"}