@payloadcms/figma 0.0.1-alpha.72 → 0.0.1-alpha.74
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api/control-plane.d.ts +0 -1
- package/dist/api/control-plane.js +0 -2
- package/dist/api/error-response.d.ts +0 -1
- package/dist/api/error-response.js +0 -2
- package/dist/api/figma-api.d.ts +0 -1
- package/dist/api/figma-api.js +0 -2
- package/dist/auth/browser.d.ts +0 -1
- package/dist/auth/browser.js +0 -2
- package/dist/auth/callback-server.d.ts +0 -1
- package/dist/auth/callback-server.js +0 -2
- package/dist/auth/credentials.d.ts +0 -1
- package/dist/auth/credentials.js +0 -2
- package/dist/auth/crypto-utils.d.ts +0 -1
- package/dist/auth/crypto-utils.js +0 -2
- package/dist/auth/jwt-validator.d.ts +12 -6
- package/dist/auth/jwt-validator.js +15 -7
- package/dist/auth/oauth-flow.d.ts +0 -1
- package/dist/auth/oauth-flow.js +0 -2
- package/dist/auth/paste-code.d.ts +0 -1
- package/dist/auth/paste-code.js +0 -2
- package/dist/auth/pkce.d.ts +0 -1
- package/dist/auth/pkce.js +0 -2
- package/dist/auth/project-token.d.ts +0 -1
- package/dist/auth/project-token.js +4 -3
- package/dist/auth/refresh.d.ts +0 -1
- package/dist/auth/refresh.js +0 -2
- package/dist/auth/token-store-migration.d.ts +0 -1
- package/dist/auth/token-store-migration.js +0 -2
- package/dist/auth/token-store.d.ts +0 -1
- package/dist/auth/token-store.js +0 -2
- package/dist/auth/types.d.ts +0 -1
- package/dist/auth/types.js +0 -2
- package/dist/cli.d.ts +0 -1
- package/dist/cli.js +0 -2
- package/dist/commands/bootstrap.d.ts +0 -1
- package/dist/commands/bootstrap.js +0 -2
- package/dist/commands/build-lambda-zip.d.ts +0 -1
- package/dist/commands/build-lambda-zip.js +0 -2
- package/dist/commands/debug.d.ts +0 -1
- package/dist/commands/debug.js +0 -2
- package/dist/commands/deploy.d.ts +0 -1
- package/dist/commands/deploy.js +0 -2
- package/dist/commands/dump-tokens.d.ts +0 -1
- package/dist/commands/dump-tokens.js +0 -2
- package/dist/commands/env.d.ts +0 -1
- package/dist/commands/env.js +0 -2
- package/dist/commands/init.d.ts +0 -1
- package/dist/commands/init.js +2 -4
- package/dist/commands/list-tokens.d.ts +0 -1
- package/dist/commands/list-tokens.js +0 -2
- package/dist/commands/login.d.ts +0 -1
- package/dist/commands/login.js +0 -2
- package/dist/commands/logout.d.ts +0 -1
- package/dist/commands/logout.js +0 -2
- package/dist/commands/upgrade.d.ts +0 -1
- package/dist/commands/upgrade.js +0 -2
- package/dist/config/oauth.d.ts +0 -1
- package/dist/config/oauth.js +0 -2
- package/dist/constants.d.ts +0 -1
- package/dist/constants.js +0 -2
- package/dist/db-content-api/generated/content-api-types.d.ts +0 -1
- package/dist/db-content-api/generated/content-api-types.js +0 -2
- package/dist/db-content-api/index.d.ts +0 -1
- package/dist/db-content-api/index.js +0 -2
- package/dist/db-content-api/temp-utilities/slug.d.ts +0 -1
- package/dist/db-content-api/temp-utilities/slug.js +0 -2
- package/dist/db-content-api/temp-utilities/sorting.d.ts +0 -1
- package/dist/db-content-api/temp-utilities/sorting.js +0 -2
- package/dist/db-content-api/temp-utilities/types.d.ts +0 -1
- package/dist/db-content-api/temp-utilities/types.js +0 -2
- package/dist/db-content-api/temp-utilities/unwrapDocument.d.ts +0 -1
- package/dist/db-content-api/temp-utilities/unwrapDocument.js +0 -2
- package/dist/db-content-api/utilities/auth.d.ts +0 -1
- package/dist/db-content-api/utilities/auth.js +0 -2
- package/dist/db-content-api/utilities/data/applyDefaults.d.ts +0 -1
- package/dist/db-content-api/utilities/data/applyDefaults.js +0 -2
- package/dist/db-content-api/utilities/data/castFieldValue.d.ts +0 -1
- package/dist/db-content-api/utilities/data/castFieldValue.js +0 -2
- package/dist/db-content-api/utilities/data/index.d.ts +0 -1
- package/dist/db-content-api/utilities/data/index.js +0 -2
- package/dist/db-content-api/utilities/data/removeVirtualFields.d.ts +0 -1
- package/dist/db-content-api/utilities/data/removeVirtualFields.js +0 -2
- package/dist/db-content-api/utilities/data/stripFields.d.ts +0 -1
- package/dist/db-content-api/utilities/data/stripFields.js +0 -2
- package/dist/db-content-api/utilities/data/transformPublishedLocale.d.ts +0 -1
- package/dist/db-content-api/utilities/data/transformPublishedLocale.js +0 -2
- package/dist/db-content-api/utilities/data/validateRelationships.d.ts +0 -1
- package/dist/db-content-api/utilities/data/validateRelationships.js +0 -2
- package/dist/db-content-api/utilities/joins.d.ts +0 -1
- package/dist/db-content-api/utilities/joins.js +0 -2
- package/dist/db-content-api/utilities/locale/index.d.ts +0 -1
- package/dist/db-content-api/utilities/locale/index.js +0 -2
- package/dist/db-content-api/utilities/meta/buildLocalizedPaths.d.ts +0 -1
- package/dist/db-content-api/utilities/meta/buildLocalizedPaths.js +0 -2
- package/dist/db-content-api/utilities/meta/buildMeta.d.ts +0 -1
- package/dist/db-content-api/utilities/meta/buildMeta.js +0 -2
- package/dist/db-content-api/utilities/meta/buildPathTypes.d.ts +0 -1
- package/dist/db-content-api/utilities/meta/buildPathTypes.js +0 -2
- package/dist/db-content-api/utilities/meta/buildUniquePaths.d.ts +0 -1
- package/dist/db-content-api/utilities/meta/buildUniquePaths.js +0 -2
- package/dist/db-content-api/utilities/meta/normalizeLocaleInWhere.d.ts +0 -1
- package/dist/db-content-api/utilities/meta/normalizeLocaleInWhere.js +0 -2
- package/dist/db-content-api/utilities/where.d.ts +0 -1
- package/dist/db-content-api/utilities/where.js +0 -2
- package/dist/deploy/schedule-extract-plugin.d.ts +0 -1
- package/dist/deploy/schedule-extract-plugin.js +0 -2
- package/dist/endpoints/health.d.ts +0 -1
- package/dist/endpoints/health.js +0 -2
- package/dist/endpoints/schema.d.ts +0 -1
- package/dist/endpoints/schema.js +0 -2
- package/dist/exports/client.d.ts +0 -1
- package/dist/exports/client.js +0 -2
- package/dist/index.d.ts +0 -1
- package/dist/index.js +0 -2
- package/dist/lib/download-skill.d.ts +0 -1
- package/dist/lib/download-skill.js +0 -2
- package/dist/oauth/components/FigmaAvatar/index.d.ts +0 -1
- package/dist/oauth/components/FigmaAvatar/index.js +0 -2
- package/dist/oauth/components/FigmaAvatarCell/index.d.ts +0 -1
- package/dist/oauth/components/FigmaAvatarCell/index.js +0 -2
- package/dist/oauth/components/FigmaAvatarPlaceholder/index.d.ts +0 -1
- package/dist/oauth/components/FigmaAvatarPlaceholder/index.js +0 -2
- package/dist/oauth/components/LoginButton/iframeAutoLogin.d.ts +0 -1
- package/dist/oauth/components/LoginButton/iframeAutoLogin.js +0 -2
- package/dist/oauth/components/LoginButton/index.d.ts +0 -1
- package/dist/oauth/components/LoginButton/index.js +3 -5
- package/dist/oauth/components/LogoutButton/index.d.ts +0 -1
- package/dist/oauth/components/LogoutButton/index.js +0 -2
- package/dist/oauth/defaults.d.ts +0 -1
- package/dist/oauth/defaults.js +0 -2
- package/dist/oauth/endpoints/getLoginEndpoint.d.ts +0 -1
- package/dist/oauth/endpoints/getLoginEndpoint.js +0 -2
- package/dist/oauth/endpoints/getLogoutEndpoint.d.ts +0 -1
- package/dist/oauth/endpoints/getLogoutEndpoint.js +0 -2
- package/dist/oauth/endpoints/getMetaEndpoint.d.ts +0 -1
- package/dist/oauth/endpoints/getMetaEndpoint.js +0 -2
- package/dist/oauth/endpoints/getRedirectToLoginEndpoint.d.ts +0 -1
- package/dist/oauth/endpoints/getRedirectToLoginEndpoint.js +0 -2
- package/dist/oauth/exports/client.d.ts +0 -1
- package/dist/oauth/exports/client.js +0 -2
- package/dist/oauth/hooks/afterLogout.d.ts +0 -1
- package/dist/oauth/hooks/afterLogout.js +0 -2
- package/dist/oauth/hooks/me.d.ts +0 -1
- package/dist/oauth/hooks/me.js +0 -2
- package/dist/oauth/hooks/refresh.d.ts +0 -1
- package/dist/oauth/hooks/refresh.js +0 -2
- package/dist/oauth/index.d.ts +0 -1
- package/dist/oauth/index.js +0 -2
- package/dist/oauth/strategy/index.d.ts +0 -1
- package/dist/oauth/strategy/index.js +9 -3
- package/dist/oauth/types.d.ts +0 -1
- package/dist/oauth/types.js +0 -2
- package/dist/oauth/utilities/clearCookie.d.ts +0 -1
- package/dist/oauth/utilities/clearCookie.js +0 -2
- package/dist/oauth/utilities/createCookieOptions.d.ts +0 -1
- package/dist/oauth/utilities/createCookieOptions.js +0 -2
- package/dist/oauth/utilities/createDebugLogger.d.ts +0 -1
- package/dist/oauth/utilities/createDebugLogger.js +0 -2
- package/dist/oauth/utilities/establishSession.d.ts +0 -1
- package/dist/oauth/utilities/establishSession.js +0 -2
- package/dist/oauth/utilities/exchangeCodeForAccessToken.d.ts +0 -1
- package/dist/oauth/utilities/exchangeCodeForAccessToken.js +0 -2
- package/dist/oauth/utilities/extractOrigin.d.ts +0 -1
- package/dist/oauth/utilities/extractOrigin.js +0 -2
- package/dist/oauth/utilities/figmaHostnames.d.ts +0 -1
- package/dist/oauth/utilities/figmaHostnames.js +0 -2
- package/dist/oauth/utilities/getAdminCollectionSlug.d.ts +0 -1
- package/dist/oauth/utilities/getAdminCollectionSlug.js +0 -2
- package/dist/oauth/utilities/getAuthorizeURL.d.ts +0 -1
- package/dist/oauth/utilities/getAuthorizeURL.js +0 -2
- package/dist/oauth/utilities/getCookieExpiration.d.ts +0 -1
- package/dist/oauth/utilities/getCookieExpiration.js +0 -2
- package/dist/oauth/utilities/getSecondsFromTokenExp.d.ts +0 -1
- package/dist/oauth/utilities/getSecondsFromTokenExp.js +0 -2
- package/dist/oauth/utilities/getTokenExp.d.ts +0 -1
- package/dist/oauth/utilities/getTokenExp.js +0 -2
- package/dist/oauth/utilities/getUsernameField.d.ts +0 -1
- package/dist/oauth/utilities/getUsernameField.js +0 -2
- package/dist/oauth/utilities/hasUserTokenPropsChanged.d.ts +0 -1
- package/dist/oauth/utilities/hasUserTokenPropsChanged.js +0 -2
- package/dist/oauth/utilities/isAbsoluteURL.d.ts +0 -1
- package/dist/oauth/utilities/isAbsoluteURL.js +0 -2
- package/dist/oauth/utilities/isDuplicateKeyError.d.ts +0 -1
- package/dist/oauth/utilities/isDuplicateKeyError.js +0 -2
- package/dist/oauth/utilities/mergeHeaders.d.ts +0 -1
- package/dist/oauth/utilities/mergeHeaders.js +0 -2
- package/dist/oauth/utilities/refreshTokens.d.ts +0 -1
- package/dist/oauth/utilities/refreshTokens.js +9 -3
- package/dist/oauth/utilities/withPartitionedCookie.d.ts +0 -1
- package/dist/oauth/utilities/withPartitionedCookie.js +0 -2
- package/dist/oauth/utils/getSearchParam.d.ts +27 -0
- package/dist/oauth/utils/getSearchParam.js +45 -0
- package/dist/plugin/adapter.d.ts +0 -1
- package/dist/plugin/adapter.js +0 -2
- package/dist/plugin/auth-preflight.d.ts +0 -1
- package/dist/plugin/auth-preflight.js +0 -2
- package/dist/plugin/bootstrap-preflight.d.ts +0 -1
- package/dist/plugin/bootstrap-preflight.js +0 -2
- package/dist/plugin/build-config.d.ts +0 -1
- package/dist/plugin/build-config.js +0 -2
- package/dist/plugin/dev-cookie-names.d.ts +0 -1
- package/dist/plugin/dev-cookie-names.js +0 -2
- package/dist/storage-content-api/api-types.d.ts +0 -1
- package/dist/storage-content-api/api-types.js +0 -2
- package/dist/storage-content-api/client-uploads/ClientUploadHandler.d.ts +0 -1
- package/dist/storage-content-api/client-uploads/ClientUploadHandler.js +0 -2
- package/dist/storage-content-api/client-uploads/generateSignedURL.d.ts +0 -1
- package/dist/storage-content-api/client-uploads/generateSignedURL.js +0 -2
- package/dist/storage-content-api/client.d.ts +0 -1
- package/dist/storage-content-api/client.js +0 -2
- package/dist/storage-content-api/generateURL.d.ts +0 -1
- package/dist/storage-content-api/generateURL.js +0 -2
- package/dist/storage-content-api/handleDelete.d.ts +0 -1
- package/dist/storage-content-api/handleDelete.js +0 -2
- package/dist/storage-content-api/handleUpload.d.ts +0 -1
- package/dist/storage-content-api/handleUpload.js +0 -2
- package/dist/storage-content-api/index.d.ts +0 -1
- package/dist/storage-content-api/index.js +0 -2
- package/dist/storage-content-api/staticHandler.d.ts +0 -1
- package/dist/storage-content-api/staticHandler.js +0 -2
- package/dist/storage-content-api/types.d.ts +0 -1
- package/dist/storage-content-api/types.js +0 -2
- package/dist/storage-content-api/utilities/getSafeFilename.d.ts +0 -1
- package/dist/storage-content-api/utilities/getSafeFilename.js +0 -2
- package/dist/storage-content-api/utilities/index.d.ts +0 -1
- package/dist/storage-content-api/utilities/index.js +0 -2
- package/dist/storage-content-api/utilities/parseClientUploadContext.d.ts +0 -1
- package/dist/storage-content-api/utilities/parseClientUploadContext.js +0 -2
- package/dist/types/config.d.ts +0 -1
- package/dist/types/config.js +0 -2
- package/dist/types.d.ts +0 -1
- package/dist/types.js +0 -2
- package/dist/utils/adapters/nextjs.d.ts +0 -1
- package/dist/utils/adapters/nextjs.js +0 -2
- package/dist/utils/adapters/nitro.d.ts +0 -1
- package/dist/utils/adapters/nitro.js +0 -2
- package/dist/utils/adapters/vite.d.ts +0 -1
- package/dist/utils/adapters/vite.js +0 -2
- package/dist/utils/asset-collection.d.ts +0 -1
- package/dist/utils/asset-collection.js +0 -2
- package/dist/utils/build-detection.d.ts +0 -1
- package/dist/utils/build-detection.js +0 -2
- package/dist/utils/build-lambda-zip.d.ts +0 -1
- package/dist/utils/build-lambda-zip.js +0 -2
- package/dist/utils/cache-bootstrap.d.ts +0 -1
- package/dist/utils/cache-bootstrap.js +0 -2
- package/dist/utils/config.d.ts +0 -1
- package/dist/utils/config.js +0 -2
- package/dist/utils/deploy-adapter.d.ts +0 -1
- package/dist/utils/deploy-adapter.js +0 -2
- package/dist/utils/download-template.d.ts +0 -1
- package/dist/utils/download-template.js +0 -2
- package/dist/utils/env-management.d.ts +0 -1
- package/dist/utils/env-management.js +0 -2
- package/dist/utils/format-env-suffix.d.ts +0 -1
- package/dist/utils/format-env-suffix.js +0 -2
- package/dist/utils/format.d.ts +0 -1
- package/dist/utils/format.js +0 -2
- package/dist/utils/formatter.d.ts +0 -1
- package/dist/utils/formatter.js +0 -2
- package/dist/utils/fs-utils.d.ts +0 -1
- package/dist/utils/fs-utils.js +0 -2
- package/dist/utils/git.d.ts +0 -1
- package/dist/utils/git.js +0 -2
- package/dist/utils/handle-upgrade.d.ts +0 -1
- package/dist/utils/handle-upgrade.js +0 -2
- package/dist/utils/is-debug.d.ts +0 -1
- package/dist/utils/is-debug.js +0 -2
- package/dist/utils/lambda-config.d.ts +0 -1
- package/dist/utils/lambda-config.js +0 -2
- package/dist/utils/log.d.ts +0 -1
- package/dist/utils/log.js +0 -2
- package/dist/utils/messages.d.ts +0 -1
- package/dist/utils/messages.js +0 -2
- package/dist/utils/package-manager.d.ts +0 -1
- package/dist/utils/package-manager.js +0 -2
- package/dist/utils/parse-template-spec.d.ts +0 -1
- package/dist/utils/parse-template-spec.js +0 -2
- package/dist/utils/payload-config-ast.d.ts +0 -1
- package/dist/utils/payload-config-ast.js +0 -2
- package/dist/utils/payload-config-finder.d.ts +0 -1
- package/dist/utils/payload-config-finder.js +0 -2
- package/dist/utils/payload-config-modifier.d.ts +0 -1
- package/dist/utils/payload-config-modifier.js +0 -2
- package/dist/utils/payload-package-check.d.ts +0 -1
- package/dist/utils/payload-package-check.js +0 -2
- package/dist/utils/project.d.ts +1 -2
- package/dist/utils/project.js +2 -4
- package/dist/utils/resolve-environment.d.ts +0 -1
- package/dist/utils/resolve-environment.js +0 -2
- package/dist/utils/s3-upload.d.ts +0 -1
- package/dist/utils/s3-upload.js +0 -2
- package/dist/utils/token-display.d.ts +0 -1
- package/dist/utils/token-display.js +0 -2
- package/dist/utils/typescript-validator.d.ts +0 -1
- package/dist/utils/typescript-validator.js +0 -2
- package/dist/utils/version-check.d.ts +0 -1
- package/dist/utils/version-check.js +0 -2
- package/package.json +1 -1
|
@@ -171,4 +171,3 @@ export declare function getBootstrapInfo(credential: AuthCredential, cmsResource
|
|
|
171
171
|
* into the new FIGMA_PROJECT_ID (CMS Resource ID).
|
|
172
172
|
*/
|
|
173
173
|
export declare function getCmsResourceId(credential: AuthCredential, datasetId: string): Promise<string>;
|
|
174
|
-
//# sourceMappingURL=control-plane.d.ts.map
|
package/dist/api/figma-api.d.ts
CHANGED
|
@@ -49,4 +49,3 @@ export declare function getProjectToken(credential: AuthCredential, tenantId: st
|
|
|
49
49
|
* @throws {FigmaApiError} If the API call fails
|
|
50
50
|
*/
|
|
51
51
|
export declare function getUserInfo(credential: AuthCredential): Promise<FigmaUserInfo>;
|
|
52
|
-
//# sourceMappingURL=figma-api.d.ts.map
|
package/dist/api/figma-api.js
CHANGED
|
@@ -213,5 +213,3 @@ import { parseControlPlaneApiError } from './error-response.js';
|
|
|
213
213
|
throw new FigmaApiError(`Failed to get user info: ${error instanceof Error ? error.message : 'Unknown error'}`, undefined, error instanceof Error ? error : undefined);
|
|
214
214
|
}
|
|
215
215
|
}
|
|
216
|
-
|
|
217
|
-
//# sourceMappingURL=figma-api.js.map
|
package/dist/auth/browser.d.ts
CHANGED
package/dist/auth/browser.js
CHANGED
package/dist/auth/credentials.js
CHANGED
|
@@ -4,9 +4,9 @@ import type { JWTPayload } from './types.js';
|
|
|
4
4
|
* JWT validation error with specific error codes
|
|
5
5
|
*/
|
|
6
6
|
export declare class JWTValidationError extends Error {
|
|
7
|
-
code: 'EXPIRED' | 'JWKS_FETCH_FAILED' | 'MISSING_KID' | 'SIGNATURE_INVALID';
|
|
7
|
+
code: 'AUDIENCE_INVALID' | 'EXPIRED' | 'JWKS_FETCH_FAILED' | 'MISSING_KID' | 'SIGNATURE_INVALID';
|
|
8
8
|
cause?: Error | undefined;
|
|
9
|
-
constructor(message: string, code: 'EXPIRED' | 'JWKS_FETCH_FAILED' | 'MISSING_KID' | 'SIGNATURE_INVALID', cause?: Error | undefined);
|
|
9
|
+
constructor(message: string, code: 'AUDIENCE_INVALID' | 'EXPIRED' | 'JWKS_FETCH_FAILED' | 'MISSING_KID' | 'SIGNATURE_INVALID', cause?: Error | undefined);
|
|
10
10
|
}
|
|
11
11
|
/**
|
|
12
12
|
* Validate a project token JWT
|
|
@@ -23,12 +23,19 @@ export declare class JWTValidationError extends Error {
|
|
|
23
23
|
* - Validates standard claims (exp, iat, nbf)
|
|
24
24
|
* - Handles clock skew tolerance
|
|
25
25
|
*
|
|
26
|
-
* @param token - JWT token string
|
|
27
|
-
* @param environment - Figma environment ('production' or 'staging')
|
|
26
|
+
* @param params.token - JWT token string
|
|
27
|
+
* @param params.environment - Figma environment ('production' or 'staging')
|
|
28
|
+
* @param params.audience - Expected `aud` claim (the tenant's contentSystemId);
|
|
29
|
+
* when provided, jose rejects tokens whose `aud` does not match
|
|
28
30
|
* @returns Promise resolving to validated JWT payload
|
|
29
31
|
* @throws {JWTValidationError} If validation fails
|
|
30
32
|
*/
|
|
31
|
-
export declare function validateProjectToken(
|
|
33
|
+
export declare function validateProjectToken(params: {
|
|
34
|
+
/** Expected `aud` claim — the tenant's contentSystemId. Enforced when provided. */
|
|
35
|
+
audience?: string;
|
|
36
|
+
environment: Environment;
|
|
37
|
+
token: string;
|
|
38
|
+
}): Promise<JWTPayload>;
|
|
32
39
|
/**
|
|
33
40
|
* Clear JWKS cache (useful for testing or forcing refresh)
|
|
34
41
|
*
|
|
@@ -39,4 +46,3 @@ export declare function validateProjectToken(token: string, environment: Environ
|
|
|
39
46
|
* - Clearing state between test runs
|
|
40
47
|
*/
|
|
41
48
|
export declare function clearJWKSCache(): void;
|
|
42
|
-
//# sourceMappingURL=jwt-validator.d.ts.map
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { createRemoteJWKSet, jwtVerify } from 'jose';
|
|
2
|
-
import { JWKSMultipleMatchingKeys, JWKSNoMatchingKey, JWSInvalid, JWSSignatureVerificationFailed, JWTExpired } from 'jose/errors';
|
|
2
|
+
import { JWKSMultipleMatchingKeys, JWKSNoMatchingKey, JWSInvalid, JWSSignatureVerificationFailed, JWTClaimValidationFailed, JWTExpired } from 'jose/errors';
|
|
3
3
|
import { getEnvConfig } from '../constants.js';
|
|
4
4
|
/**
|
|
5
5
|
* JWT validation error with specific error codes
|
|
@@ -52,15 +52,21 @@ import { getEnvConfig } from '../constants.js';
|
|
|
52
52
|
* - Validates standard claims (exp, iat, nbf)
|
|
53
53
|
* - Handles clock skew tolerance
|
|
54
54
|
*
|
|
55
|
-
* @param token - JWT token string
|
|
56
|
-
* @param environment - Figma environment ('production' or 'staging')
|
|
55
|
+
* @param params.token - JWT token string
|
|
56
|
+
* @param params.environment - Figma environment ('production' or 'staging')
|
|
57
|
+
* @param params.audience - Expected `aud` claim (the tenant's contentSystemId);
|
|
58
|
+
* when provided, jose rejects tokens whose `aud` does not match
|
|
57
59
|
* @returns Promise resolving to validated JWT payload
|
|
58
60
|
* @throws {JWTValidationError} If validation fails
|
|
59
|
-
*/ export async function validateProjectToken(
|
|
61
|
+
*/ export async function validateProjectToken(params) {
|
|
62
|
+
const { audience, environment, token } = params;
|
|
60
63
|
try {
|
|
61
64
|
const JWKS = getJWKSResolver(environment);
|
|
62
65
|
const { payload } = await jwtVerify(token, JWKS, {
|
|
63
|
-
clockTolerance: 300
|
|
66
|
+
clockTolerance: 300,
|
|
67
|
+
...audience ? {
|
|
68
|
+
audience
|
|
69
|
+
} : {}
|
|
64
70
|
});
|
|
65
71
|
return payload;
|
|
66
72
|
} catch (error) {
|
|
@@ -86,6 +92,10 @@ import { getEnvConfig } from '../constants.js';
|
|
|
86
92
|
if (error instanceof JWSInvalid) {
|
|
87
93
|
throw new JWTValidationError('Invalid JWT structure - missing required header fields (kid or alg)', 'MISSING_KID', error);
|
|
88
94
|
}
|
|
95
|
+
// Audience mismatch (or missing `aud` when an audience is required)
|
|
96
|
+
if (error instanceof JWTClaimValidationFailed && error.claim === 'aud') {
|
|
97
|
+
throw new JWTValidationError('Token audience does not match this tenant', 'AUDIENCE_INVALID', error);
|
|
98
|
+
}
|
|
89
99
|
// Network or fetch errors (not jose errors, generic Error instances)
|
|
90
100
|
if (error instanceof Error) {
|
|
91
101
|
const message = error.message;
|
|
@@ -109,5 +119,3 @@ import { getEnvConfig } from '../constants.js';
|
|
|
109
119
|
*/ export function clearJWKSCache() {
|
|
110
120
|
jwksResolvers.clear();
|
|
111
121
|
}
|
|
112
|
-
|
|
113
|
-
//# sourceMappingURL=jwt-validator.js.map
|
|
@@ -75,4 +75,3 @@ export declare function getValidCredential(tokenStore: TokenStore): Promise<Auth
|
|
|
75
75
|
* Use in commands that want to fall through to a login prompt on failure.
|
|
76
76
|
*/
|
|
77
77
|
export declare function tryGetCredential(tokenStore: TokenStore): Promise<AuthCredential | null>;
|
|
78
|
-
//# sourceMappingURL=oauth-flow.d.ts.map
|
package/dist/auth/oauth-flow.js
CHANGED
|
@@ -31,4 +31,3 @@ export declare function parsePastedCode(input: string, expectedState: string): s
|
|
|
31
31
|
* @returns Error message string, or undefined if structurally valid
|
|
32
32
|
*/
|
|
33
33
|
export declare function validatePastedCode(input: string): string | undefined;
|
|
34
|
-
//# sourceMappingURL=paste-code.d.ts.map
|
package/dist/auth/paste-code.js
CHANGED
package/dist/auth/pkce.d.ts
CHANGED
package/dist/auth/pkce.js
CHANGED
|
@@ -153,7 +153,10 @@ function isCachedTokenValid(entry) {
|
|
|
153
153
|
validatedClaims = parseJWTClaims(fetchedToken.token);
|
|
154
154
|
} else {
|
|
155
155
|
try {
|
|
156
|
-
validatedClaims = await validateProjectToken(
|
|
156
|
+
validatedClaims = await validateProjectToken({
|
|
157
|
+
environment: getInfraEnvironment(),
|
|
158
|
+
token: fetchedToken.token
|
|
159
|
+
});
|
|
157
160
|
} catch (validationError) {
|
|
158
161
|
if (validationError instanceof JWTValidationError) {
|
|
159
162
|
throw new ProjectTokenError(`Project token validation failed: ${validationError.message}`, validationError);
|
|
@@ -233,5 +236,3 @@ function isCachedTokenValid(entry) {
|
|
|
233
236
|
});
|
|
234
237
|
return getValidProjectToken(params);
|
|
235
238
|
}
|
|
236
|
-
|
|
237
|
-
//# sourceMappingURL=project-token.js.map
|
package/dist/auth/refresh.d.ts
CHANGED
|
@@ -33,4 +33,3 @@ export declare function refreshAccessToken(refreshToken: string, clientId?: stri
|
|
|
33
33
|
* @throws TokenRefreshError if exchange fails
|
|
34
34
|
*/
|
|
35
35
|
export declare function exchangeCodeForTokens(code: string, codeVerifier: string, redirectUri?: string, clientId?: string): Promise<FigmaTokens>;
|
|
36
|
-
//# sourceMappingURL=refresh.d.ts.map
|
package/dist/auth/refresh.js
CHANGED
package/dist/auth/token-store.js
CHANGED
package/dist/auth/types.d.ts
CHANGED
package/dist/auth/types.js
CHANGED
package/dist/cli.d.ts
CHANGED
package/dist/cli.js
CHANGED
package/dist/commands/debug.d.ts
CHANGED
package/dist/commands/debug.js
CHANGED
package/dist/commands/deploy.js
CHANGED
package/dist/commands/env.d.ts
CHANGED
package/dist/commands/env.js
CHANGED
package/dist/commands/init.d.ts
CHANGED
package/dist/commands/init.js
CHANGED
|
@@ -190,8 +190,8 @@ async function maybeInstallPayloadSkill(args) {
|
|
|
190
190
|
if (projectInfo.hasPayload) {
|
|
191
191
|
// Validate existing Payload version
|
|
192
192
|
if (projectInfo.payloadVersion && !validatePayloadVersion(projectInfo.payloadVersion)) {
|
|
193
|
-
p.log.warn(pc.yellow(`Payload version ${projectInfo.payloadVersion} detected. Version 3.x is required.`));
|
|
194
|
-
p.note('Upgrade to Payload 3.x before continuing', 'Action Required');
|
|
193
|
+
p.log.warn(pc.yellow(`Payload version ${projectInfo.payloadVersion} detected. Version 3.x or newer is required.`));
|
|
194
|
+
p.note('Upgrade to Payload 3.x or newer before continuing', 'Action Required');
|
|
195
195
|
process.exit(1);
|
|
196
196
|
}
|
|
197
197
|
p.log.success(pc.green(`✓ Payload ${projectInfo.payloadVersion || 'detected'}`));
|
|
@@ -435,5 +435,3 @@ async function maybeInstallPayloadSkill(args) {
|
|
|
435
435
|
p.outro(pc.green('✓ Done'));
|
|
436
436
|
}
|
|
437
437
|
}
|
|
438
|
-
|
|
439
|
-
//# sourceMappingURL=init.js.map
|
package/dist/commands/login.d.ts
CHANGED
package/dist/commands/login.js
CHANGED
package/dist/commands/logout.js
CHANGED
package/dist/commands/upgrade.js
CHANGED
|
@@ -327,5 +327,3 @@ async function migrateLocalPackageVersion({ changes, cliDir, cwd, isDryRun }) {
|
|
|
327
327
|
p.log.message(`${pc.green('●')} Package: Installed @payloadcms/figma from local build`);
|
|
328
328
|
changes.push('Installed @payloadcms/figma from local build');
|
|
329
329
|
}
|
|
330
|
-
|
|
331
|
-
//# sourceMappingURL=upgrade.js.map
|
package/dist/config/oauth.d.ts
CHANGED
package/dist/config/oauth.js
CHANGED
|
@@ -40,5 +40,3 @@ export const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
|
|
|
40
40
|
* already-expired and bypass the cache entirely. 30 seconds is well above the
|
|
41
41
|
* round-trip time for the calls these tokens authorize.
|
|
42
42
|
*/ export const PROJECT_TOKEN_EXPIRY_BUFFER_SECONDS = 30;
|
|
43
|
-
|
|
44
|
-
//# sourceMappingURL=oauth.js.map
|
package/dist/constants.d.ts
CHANGED
|
@@ -69,4 +69,3 @@ export declare function setInfraEnvironment(env: Environment | undefined): void;
|
|
|
69
69
|
export declare function getEnvConfig(environment?: Environment): EnvironmentConfig;
|
|
70
70
|
export declare function getInfraEnvironment(): Environment;
|
|
71
71
|
export {};
|
|
72
|
-
//# sourceMappingURL=constants.d.ts.map
|
package/dist/constants.js
CHANGED
|
@@ -1,3 +1,2 @@
|
|
|
1
1
|
import type { Payload } from 'payload';
|
|
2
2
|
export declare function addFallbackSort(sort: string | string[] | undefined, payload: Payload, collectionSlug: string | string[], defaultSort?: string | string[]): string | string[] | undefined;
|
|
3
|
-
//# sourceMappingURL=sorting.d.ts.map
|
|
@@ -4,4 +4,3 @@ import type { Field } from 'payload';
|
|
|
4
4
|
* This handles defaults for nested structures (arrays, groups) which traverseFields doesn't handle
|
|
5
5
|
*/
|
|
6
6
|
export declare function applyDefaults(data: Record<string, unknown>, fields: Field[]): void;
|
|
7
|
-
//# sourceMappingURL=applyDefaults.d.ts.map
|