@payloadcms/plugin-stripe 3.89.0-internal.95c9cba → 3.90.0

package/dist/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,OAAO,KAAK,EAA+B,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAIjF,eAAO,MAAM,YAAY,yBACA,kBAAkB,cAChC,MAAM,KAAG,MAmCjB,CAAA"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,OAAO,KAAK,EAA+B,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAKjF,eAAO,MAAM,YAAY,yBACA,kBAAkB,cAChC,MAAM,KAAG,MAkCjB,CAAA"}

package/dist/admin.js

@@ -1,11 +1,13 @@
 import { getFields } from './fields/getFields.js';
+import { sanitizeStripeRESTConfig } from './utilities/sanitizeStripeRESTConfig.js';
 export const stripePlugin = (incomingPluginConfig)=>(config)=>{
         const { collections } = config;
         // set config defaults here
         const pluginConfig = {
             ...incomingPluginConfig,
-            // TODO: in the next major version, default this to `false`
-            rest: incomingPluginConfig?.rest ?? true,
+            rest: sanitizeStripeRESTConfig({
+                rest: incomingPluginConfig?.rest
+            }),
             sync: incomingPluginConfig?.sync || []
         };
         // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key

package/dist/admin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/admin.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport type { SanitizedStripePluginConfig, StripePluginConfig } from './types.js'\n\nimport { getFields } from './fields/getFields.js'\n\nexport const stripePlugin =\n  (incomingPluginConfig: StripePluginConfig) =>\n  (config: Config): Config => {\n    const { collections } = config\n\n    // set config defaults here\n    const pluginConfig: SanitizedStripePluginConfig = {\n      ...incomingPluginConfig,\n      // TODO: in the next major version, default this to `false`\n      rest: incomingPluginConfig?.rest ?? true,\n      sync: incomingPluginConfig?.sync || [],\n    }\n\n    // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key\n    // unfortunately we must set the 'isTestKey' property on the config instead of using the following code:\n    // const isTestKey = stripeConfig.stripeSecretKey?.startsWith('sk_test_');\n\n    return {\n      ...config,\n      collections: collections?.map((collection) => {\n        const syncConfig = pluginConfig.sync?.find((sync) => sync.collection === collection.slug)\n\n        if (syncConfig) {\n          const fields = getFields({\n            collection,\n            pluginConfig,\n            syncConfig,\n          })\n          return {\n            ...collection,\n            fields,\n          }\n        }\n\n        return collection\n      }),\n    }\n  }\n"],"names":["getFields","stripePlugin","incomingPluginConfig","config","collections","pluginConfig","rest","sync","map","collection","syncConfig","find","slug","fields"],"mappings":"AAIA,SAASA,SAAS,QAAQ,wBAAuB;AAEjD,OAAO,MAAMC,eACX,CAACC,uBACD,CAACC;QACC,MAAM,EAAEC,WAAW,EAAE,GAAGD;QAExB,2BAA2B;QAC3B,MAAME,eAA4C;YAChD,GAAGH,oBAAoB;YACvB,2DAA2D;YAC3DI,MAAMJ,sBAAsBI,QAAQ;YACpCC,MAAML,sBAAsBK,QAAQ,EAAE;QACxC;QAEA,6GAA6G;QAC7G,wGAAwG;QACxG,0EAA0E;QAE1E,OAAO;YACL,GAAGJ,MAAM;YACTC,aAAaA,aAAaI,IAAI,CAACC;gBAC7B,MAAMC,aAAaL,aAAaE,IAAI,EAAEI,KAAK,CAACJ,OAASA,KAAKE,UAAU,KAAKA,WAAWG,IAAI;gBAExF,IAAIF,YAAY;oBACd,MAAMG,SAASb,UAAU;wBACvBS;wBACAJ;wBACAK;oBACF;oBACA,OAAO;wBACL,GAAGD,UAAU;wBACbI;oBACF;gBACF;gBAEA,OAAOJ;YACT;QACF;IACF,EAAC"}
+{"version":3,"sources":["../src/admin.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport type { SanitizedStripePluginConfig, StripePluginConfig } from './types.js'\n\nimport { getFields } from './fields/getFields.js'\nimport { sanitizeStripeRESTConfig } from './utilities/sanitizeStripeRESTConfig.js'\n\nexport const stripePlugin =\n  (incomingPluginConfig: StripePluginConfig) =>\n  (config: Config): Config => {\n    const { collections } = config\n\n    // set config defaults here\n    const pluginConfig: SanitizedStripePluginConfig = {\n      ...incomingPluginConfig,\n      rest: sanitizeStripeRESTConfig({ rest: incomingPluginConfig?.rest }),\n      sync: incomingPluginConfig?.sync || [],\n    }\n\n    // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key\n    // unfortunately we must set the 'isTestKey' property on the config instead of using the following code:\n    // const isTestKey = stripeConfig.stripeSecretKey?.startsWith('sk_test_');\n\n    return {\n      ...config,\n      collections: collections?.map((collection) => {\n        const syncConfig = pluginConfig.sync?.find((sync) => sync.collection === collection.slug)\n\n        if (syncConfig) {\n          const fields = getFields({\n            collection,\n            pluginConfig,\n            syncConfig,\n          })\n          return {\n            ...collection,\n            fields,\n          }\n        }\n\n        return collection\n      }),\n    }\n  }\n"],"names":["getFields","sanitizeStripeRESTConfig","stripePlugin","incomingPluginConfig","config","collections","pluginConfig","rest","sync","map","collection","syncConfig","find","slug","fields"],"mappings":"AAIA,SAASA,SAAS,QAAQ,wBAAuB;AACjD,SAASC,wBAAwB,QAAQ,0CAAyC;AAElF,OAAO,MAAMC,eACX,CAACC,uBACD,CAACC;QACC,MAAM,EAAEC,WAAW,EAAE,GAAGD;QAExB,2BAA2B;QAC3B,MAAME,eAA4C;YAChD,GAAGH,oBAAoB;YACvBI,MAAMN,yBAAyB;gBAAEM,MAAMJ,sBAAsBI;YAAK;YAClEC,MAAML,sBAAsBK,QAAQ,EAAE;QACxC;QAEA,6GAA6G;QAC7G,wGAAwG;QACxG,0EAA0E;QAE1E,OAAO;YACL,GAAGJ,MAAM;YACTC,aAAaA,aAAaI,IAAI,CAACC;gBAC7B,MAAMC,aAAaL,aAAaE,IAAI,EAAEI,KAAK,CAACJ,OAASA,KAAKE,UAAU,KAAKA,WAAWG,IAAI;gBAExF,IAAIF,YAAY;oBACd,MAAMG,SAASd,UAAU;wBACvBU;wBACAJ;wBACAK;oBACF;oBACA,OAAO;wBACL,GAAGD,UAAU;wBACbI;oBACF;gBACF;gBAEA,OAAOJ;YACT;QACF;IACF,EAAC"}

package/dist/exports/types.d.ts

@@ -1,2 +1,2 @@
-export type { FieldSyncConfig, SanitizedStripePluginConfig, StripePluginConfig, StripeProxy, StripeWebhookHandler, StripeWebhookHandlers, SyncConfig, } from '../types.js';
+export type { FieldSyncConfig, SanitizedStripePluginConfig, StripePluginConfig, StripeProxy, StripeRESTAccess, StripeRESTConfig, StripeWebhookHandler, StripeWebhookHandlers, SyncConfig, } from '../types.js';
 //# sourceMappingURL=types.d.ts.map

package/dist/exports/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/exports/types.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,2BAA2B,EAC3B,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,GACX,MAAM,aAAa,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/exports/types.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,2BAA2B,EAC3B,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,GACX,MAAM,aAAa,CAAA"}

package/dist/exports/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/exports/types.ts"],"sourcesContent":["export type {\n  FieldSyncConfig,\n  SanitizedStripePluginConfig,\n  StripePluginConfig,\n  StripeProxy,\n  StripeWebhookHandler,\n  StripeWebhookHandlers,\n  SyncConfig,\n} from '../types.js'\n"],"names":[],"mappings":"AAAA,WAQoB"}
+{"version":3,"sources":["../../src/exports/types.ts"],"sourcesContent":["export type {\n  FieldSyncConfig,\n  SanitizedStripePluginConfig,\n  StripePluginConfig,\n  StripeProxy,\n  StripeRESTAccess,\n  StripeRESTConfig,\n  StripeWebhookHandler,\n  StripeWebhookHandlers,\n  SyncConfig,\n} from '../types.js'\n"],"names":[],"mappings":"AAAA,WAUoB"}

package/dist/fields/getFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getFields.d.ts","sourceRoot":"","sources":["../../src/fields/getFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAEtD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAE9D,UAAU,IAAI;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,YAAY,EAAE,2BAA2B,CAAA;IACzC,UAAU,EAAE;QACV,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF;AAED,eAAO,MAAM,SAAS,6CAA8C,IAAI,KAAG,KAAK,EAyC/E,CAAA"}
+{"version":3,"file":"getFields.d.ts","sourceRoot":"","sources":["../../src/fields/getFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAEtD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAE9D,UAAU,IAAI;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,YAAY,EAAE,2BAA2B,CAAA;IACzC,UAAU,EAAE;QACV,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF;AAED,eAAO,MAAM,SAAS,6CAA8C,IAAI,KAAG,KAAK,EAiD/E,CAAA"}

package/dist/fields/getFields.js

@@ -2,6 +2,10 @@ export const getFields = ({ collection, pluginConfig, syncConfig })=>{
     const stripeIDField = {
         name: 'stripeID',
         type: 'text',
+        access: {
+            create: ()=>false,
+            update: ()=>false
+        },
         admin: {
             position: 'sidebar',
             readOnly: true
@@ -12,6 +16,10 @@ export const getFields = ({ collection, pluginConfig, syncConfig })=>{
     const skipSyncField = {
         name: 'skipSync',
         type: 'checkbox',
+        access: {
+            create: ()=>false,
+            update: ()=>false
+        },
         admin: {
             position: 'sidebar',
             readOnly: true

package/dist/fields/getFields.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/fields/getFields.ts"],"sourcesContent":["import type { CollectionConfig, Field } from 'payload'\n\nimport type { SanitizedStripePluginConfig } from '../types.js'\n\ninterface Args {\n  collection: CollectionConfig\n  pluginConfig: SanitizedStripePluginConfig\n  syncConfig: {\n    stripeResourceType: string\n  }\n}\n\nexport const getFields = ({ collection, pluginConfig, syncConfig }: Args): Field[] => {\n  const stripeIDField: Field = {\n    name: 'stripeID',\n    type: 'text',\n    admin: {\n      position: 'sidebar',\n      readOnly: true,\n    },\n    label: 'Stripe ID',\n    saveToJWT: true,\n  }\n\n  const skipSyncField: Field = {\n    name: 'skipSync',\n    type: 'checkbox',\n    admin: {\n      position: 'sidebar',\n      readOnly: true,\n    },\n    label: 'Skip Sync',\n  }\n\n  const docUrlField: Field = {\n    name: 'docUrl',\n    type: 'ui',\n    admin: {\n      components: {\n        Field: '@payloadcms/plugin-stripe/client#LinkToDoc',\n      },\n      custom: {\n        isTestKey: pluginConfig.isTestKey,\n        nameOfIDField: 'stripeID',\n        stripeResourceType: syncConfig.stripeResourceType,\n      },\n      position: 'sidebar',\n    },\n  }\n\n  const fields = [...collection.fields, stripeIDField, skipSyncField, docUrlField]\n\n  return fields\n}\n"],"names":["getFields","collection","pluginConfig","syncConfig","stripeIDField","name","type","admin","position","readOnly","label","saveToJWT","skipSyncField","docUrlField","components","Field","custom","isTestKey","nameOfIDField","stripeResourceType","fields"],"mappings":"AAYA,OAAO,MAAMA,YAAY,CAAC,EAAEC,UAAU,EAAEC,YAAY,EAAEC,UAAU,EAAQ;IACtE,MAAMC,gBAAuB;QAC3BC,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,UAAU;YACVC,UAAU;QACZ;QACAC,OAAO;QACPC,WAAW;IACb;IAEA,MAAMC,gBAAuB;QAC3BP,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,UAAU;YACVC,UAAU;QACZ;QACAC,OAAO;IACT;IAEA,MAAMG,cAAqB;QACzBR,MAAM;QACNC,MAAM;QACNC,OAAO;YACLO,YAAY;gBACVC,OAAO;YACT;YACAC,QAAQ;gBACNC,WAAWf,aAAae,SAAS;gBACjCC,eAAe;gBACfC,oBAAoBhB,WAAWgB,kBAAkB;YACnD;YACAX,UAAU;QACZ;IACF;IAEA,MAAMY,SAAS;WAAInB,WAAWmB,MAAM;QAAEhB;QAAeQ;QAAeC;KAAY;IAEhF,OAAOO;AACT,EAAC"}
+{"version":3,"sources":["../../src/fields/getFields.ts"],"sourcesContent":["import type { CollectionConfig, Field } from 'payload'\n\nimport type { SanitizedStripePluginConfig } from '../types.js'\n\ninterface Args {\n  collection: CollectionConfig\n  pluginConfig: SanitizedStripePluginConfig\n  syncConfig: {\n    stripeResourceType: string\n  }\n}\n\nexport const getFields = ({ collection, pluginConfig, syncConfig }: Args): Field[] => {\n  const stripeIDField: Field = {\n    name: 'stripeID',\n    type: 'text',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    admin: {\n      position: 'sidebar',\n      readOnly: true,\n    },\n    label: 'Stripe ID',\n    saveToJWT: true,\n  }\n\n  const skipSyncField: Field = {\n    name: 'skipSync',\n    type: 'checkbox',\n    access: {\n      create: () => false,\n      update: () => false,\n    },\n    admin: {\n      position: 'sidebar',\n      readOnly: true,\n    },\n    label: 'Skip Sync',\n  }\n\n  const docUrlField: Field = {\n    name: 'docUrl',\n    type: 'ui',\n    admin: {\n      components: {\n        Field: '@payloadcms/plugin-stripe/client#LinkToDoc',\n      },\n      custom: {\n        isTestKey: pluginConfig.isTestKey,\n        nameOfIDField: 'stripeID',\n        stripeResourceType: syncConfig.stripeResourceType,\n      },\n      position: 'sidebar',\n    },\n  }\n\n  const fields = [...collection.fields, stripeIDField, skipSyncField, docUrlField]\n\n  return fields\n}\n"],"names":["getFields","collection","pluginConfig","syncConfig","stripeIDField","name","type","access","create","update","admin","position","readOnly","label","saveToJWT","skipSyncField","docUrlField","components","Field","custom","isTestKey","nameOfIDField","stripeResourceType","fields"],"mappings":"AAYA,OAAO,MAAMA,YAAY,CAAC,EAAEC,UAAU,EAAEC,YAAY,EAAEC,UAAU,EAAQ;IACtE,MAAMC,gBAAuB;QAC3BC,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,OAAO;YACLC,UAAU;YACVC,UAAU;QACZ;QACAC,OAAO;QACPC,WAAW;IACb;IAEA,MAAMC,gBAAuB;QAC3BV,MAAM;QACNC,MAAM;QACNC,QAAQ;YACNC,QAAQ,IAAM;YACdC,QAAQ,IAAM;QAChB;QACAC,OAAO;YACLC,UAAU;YACVC,UAAU;QACZ;QACAC,OAAO;IACT;IAEA,MAAMG,cAAqB;QACzBX,MAAM;QACNC,MAAM;QACNI,OAAO;YACLO,YAAY;gBACVC,OAAO;YACT;YACAC,QAAQ;gBACNC,WAAWlB,aAAakB,SAAS;gBACjCC,eAAe;gBACfC,oBAAoBnB,WAAWmB,kBAAkB;YACnD;YACAX,UAAU;QACZ;IACF;IAEA,MAAMY,SAAS;WAAItB,WAAWsB,MAAM;QAAEnB;QAAeW;QAAeC;KAAY;IAEhF,OAAOO;AACT,EAAC"}

package/dist/hooks/createNewInStripe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createNewInStripe.d.ts","sourceRoot":"","sources":["../../src/hooks/createNewInStripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAK7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,KAAK,4BAA4B,GAAG;IAClC,UAAU,EAAE,gBAAgB,CAAA;CAC7B,GAAG,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AAEnE,MAAM,MAAM,oCAAoC,GAAG,CACjD,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC,GAAG,4BAA4B,KAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AAE1B,eAAO,MAAM,iBAAiB,EAAE,oCA0H/B,CAAA"}
+{"version":3,"file":"createNewInStripe.d.ts","sourceRoot":"","sources":["../../src/hooks/createNewInStripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAK7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,KAAK,4BAA4B,GAAG;IAClC,UAAU,EAAE,gBAAgB,CAAA;CAC7B,GAAG,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AAEnE,MAAM,MAAM,oCAAoC,GAAG,CACjD,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC,GAAG,4BAA4B,KAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AAE1B,eAAO,MAAM,iBAAiB,EAAE,oCAoH/B,CAAA"}

package/dist/hooks/createNewInStripe.js

@@ -1,6 +1,6 @@
 import { APIError } from 'payload';
 import Stripe from 'stripe';
-import { deepen } from '../utilities/deepen.js';
+import { getSyncedFields } from '../utilities/deepen.js';
 export const createNewInStripe = async (args)=>{
     const { collection, data, operation, pluginConfig, req } = args;
     const { logs, sync } = pluginConfig || {};
@@ -24,12 +24,11 @@ export const createNewInStripe = async (args)=>{
             const syncConfig = sync?.find((conf)=>conf.collection === collectionSlug);
             if (syncConfig) {
                 // combine all fields of this object and match their respective values within the document
-                let syncedFields = syncConfig.fields.reduce((acc, field)=>{
-                    const { fieldPath, stripeProperty } = field;
-                    acc[stripeProperty] = dataRef[fieldPath];
-                    return acc;
-                }, {});
-                syncedFields = deepen(syncedFields);
+                const syncedFields = getSyncedFields({
+                    data: dataRef,
+                    fields: syncConfig.fields,
+                    source: 'payload'
+                });
                 // api version can only be the latest, stripe recommends ts ignoring it
                 const stripe = new Stripe(pluginConfig?.stripeSecretKey || '', {
                     apiVersion: '2022-08-01'

package/dist/hooks/createNewInStripe.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hooks/createNewInStripe.ts"],"sourcesContent":["import type { CollectionBeforeValidateHook, CollectionConfig } from 'payload'\n\nimport { APIError } from 'payload'\nimport Stripe from 'stripe'\n\nimport type { StripePluginConfig } from '../types.js'\n\nimport { deepen } from '../utilities/deepen.js'\n\ntype HookArgsWithCustomCollection = {\n  collection: CollectionConfig\n} & Omit<Parameters<CollectionBeforeValidateHook>[0], 'collection'>\n\nexport type CollectionBeforeValidateHookWithArgs = (\n  args: {\n    collection?: CollectionConfig\n    pluginConfig?: StripePluginConfig\n  } & HookArgsWithCustomCollection,\n) => Promise<Partial<any>>\n\nexport const createNewInStripe: CollectionBeforeValidateHookWithArgs = async (args) => {\n  const { collection, data, operation, pluginConfig, req } = args\n\n  const { logs, sync } = pluginConfig || {}\n\n  const payload = req?.payload\n\n  const dataRef = data || {}\n\n  if (process.env.NODE_ENV === 'test') {\n    dataRef.stripeID = 'test'\n    return dataRef\n  }\n\n  if (payload) {\n    if (data?.skipSync) {\n      if (logs) {\n        payload.logger.info(`Bypassing collection-level hooks.`)\n      }\n    } else {\n      // initialize as 'false' so that all Payload admin events sync to Stripe\n      // then conditionally set to 'true' to for events that originate from webhooks\n      // this will prevent webhook events from triggering an unnecessary sync / infinite loop\n      dataRef.skipSync = false\n\n      const { slug: collectionSlug } = collection || {}\n      const syncConfig = sync?.find((conf) => conf.collection === collectionSlug)\n\n      if (syncConfig) {\n        // combine all fields of this object and match their respective values within the document\n        let syncedFields = syncConfig.fields.reduce(\n          (acc, field) => {\n            const { fieldPath, stripeProperty } = field\n\n            acc[stripeProperty] = dataRef[fieldPath]\n            return acc\n          },\n          {} as Record<string, any>,\n        )\n\n        syncedFields = deepen(syncedFields)\n\n        // api version can only be the latest, stripe recommends ts ignoring it\n        const stripe = new Stripe(pluginConfig?.stripeSecretKey || '', { apiVersion: '2022-08-01' })\n\n        if (operation === 'update') {\n          if (logs) {\n            payload.logger.info(\n              `A '${collectionSlug}' document has changed in Payload with ID: '${data?.id}', syncing with Stripe...`,\n            )\n          }\n\n          // NOTE: the Stripe document will be created in the \"afterChange\" hook, so create a new stripe document here if no stripeID exists\n          if (!dataRef.stripeID) {\n            try {\n              // NOTE: Typed as \"any\" because the \"create\" method is not standard across all Stripe resources\n              const stripeResource = await stripe?.[syncConfig.stripeResourceType]?.create(\n                // @ts-expect-error\n                syncedFields,\n              )\n\n              if (logs) {\n                payload.logger.info(\n                  `✅ Successfully created new '${syncConfig.stripeResourceType}' resource in Stripe with ID: '${stripeResource.id}'.`,\n                )\n              }\n\n              dataRef.stripeID = stripeResource.id\n\n              // NOTE: this is to prevent sync in the \"afterChange\" hook\n              dataRef.skipSync = true\n            } catch (error: unknown) {\n              const msg = error instanceof Error ? error.message : error\n              if (logs) {\n                payload.logger.error(`- Error creating Stripe document: ${msg}`)\n              }\n            }\n          }\n        }\n\n        if (operation === 'create') {\n          if (logs) {\n            payload.logger.info(\n              `A new '${collectionSlug}' document was created in Payload with ID: '${data?.id}', syncing with Stripe...`,\n            )\n          }\n\n          try {\n            if (logs) {\n              payload.logger.info(\n                `- Creating new '${syncConfig.stripeResourceType}' resource in Stripe...`,\n              )\n            }\n\n            // NOTE: Typed as \"any\" because the \"create\" method is not standard across all Stripe resources\n            const stripeResource = await stripe?.[syncConfig.stripeResourceType]?.create(\n              // @ts-expect-error\n              syncedFields,\n            )\n\n            if (logs) {\n              payload.logger.info(\n                `✅ Successfully created new '${syncConfig.stripeResourceType}' resource in Stripe with ID: '${stripeResource.id}'.`,\n              )\n            }\n\n            dataRef.stripeID = stripeResource.id\n\n            // IMPORTANT: this is to prevent sync in the \"afterChange\" hook\n            dataRef.skipSync = true\n          } catch (error: unknown) {\n            const msg = error instanceof Error ? error.message : error\n            throw new APIError(\n              `Failed to create new '${syncConfig.stripeResourceType}' resource in Stripe: ${msg}`,\n            )\n          }\n        }\n      }\n    }\n  }\n\n  return dataRef\n}\n"],"names":["APIError","Stripe","deepen","createNewInStripe","args","collection","data","operation","pluginConfig","req","logs","sync","payload","dataRef","process","env","NODE_ENV","stripeID","skipSync","logger","info","slug","collectionSlug","syncConfig","find","conf","syncedFields","fields","reduce","acc","field","fieldPath","stripeProperty","stripe","stripeSecretKey","apiVersion","id","stripeResource","stripeResourceType","create","error","msg","Error","message"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,OAAOC,YAAY,SAAQ;AAI3B,SAASC,MAAM,QAAQ,yBAAwB;AAa/C,OAAO,MAAMC,oBAA0D,OAAOC;IAC5E,MAAM,EAAEC,UAAU,EAAEC,IAAI,EAAEC,SAAS,EAAEC,YAAY,EAAEC,GAAG,EAAE,GAAGL;IAE3D,MAAM,EAAEM,IAAI,EAAEC,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAExC,MAAMI,UAAUH,KAAKG;IAErB,MAAMC,UAAUP,QAAQ,CAAC;IAEzB,IAAIQ,QAAQC,GAAG,CAACC,QAAQ,KAAK,QAAQ;QACnCH,QAAQI,QAAQ,GAAG;QACnB,OAAOJ;IACT;IAEA,IAAID,SAAS;QACX,IAAIN,MAAMY,UAAU;YAClB,IAAIR,MAAM;gBACRE,QAAQO,MAAM,CAACC,IAAI,CAAC,CAAC,iCAAiC,CAAC;YACzD;QACF,OAAO;YACL,wEAAwE;YACxE,8EAA8E;YAC9E,uFAAuF;YACvFP,QAAQK,QAAQ,GAAG;YAEnB,MAAM,EAAEG,MAAMC,cAAc,EAAE,GAAGjB,cAAc,CAAC;YAChD,MAAMkB,aAAaZ,MAAMa,KAAK,CAACC,OAASA,KAAKpB,UAAU,KAAKiB;YAE5D,IAAIC,YAAY;gBACd,0FAA0F;gBAC1F,IAAIG,eAAeH,WAAWI,MAAM,CAACC,MAAM,CACzC,CAACC,KAAKC;oBACJ,MAAM,EAAEC,SAAS,EAAEC,cAAc,EAAE,GAAGF;oBAEtCD,GAAG,CAACG,eAAe,GAAGnB,OAAO,CAACkB,UAAU;oBACxC,OAAOF;gBACT,GACA,CAAC;gBAGHH,eAAexB,OAAOwB;gBAEtB,uEAAuE;gBACvE,MAAMO,SAAS,IAAIhC,OAAOO,cAAc0B,mBAAmB,IAAI;oBAAEC,YAAY;gBAAa;gBAE1F,IAAI5B,cAAc,UAAU;oBAC1B,IAAIG,MAAM;wBACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,GAAG,EAAEE,eAAe,4CAA4C,EAAEhB,MAAM8B,GAAG,yBAAyB,CAAC;oBAE1G;oBAEA,kIAAkI;oBAClI,IAAI,CAACvB,QAAQI,QAAQ,EAAE;wBACrB,IAAI;4BACF,+FAA+F;4BAC/F,MAAMoB,iBAAiB,MAAMJ,QAAQ,CAACV,WAAWe,kBAAkB,CAAC,EAAEC,OACpE,mBAAmB;4BACnBb;4BAGF,IAAIhB,MAAM;gCACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEG,WAAWe,kBAAkB,CAAC,+BAA+B,EAAED,eAAeD,EAAE,CAAC,EAAE,CAAC;4BAEvH;4BAEAvB,QAAQI,QAAQ,GAAGoB,eAAeD,EAAE;4BAEpC,0DAA0D;4BAC1DvB,QAAQK,QAAQ,GAAG;wBACrB,EAAE,OAAOsB,OAAgB;4BACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;4BACrD,IAAI9B,MAAM;gCACRE,QAAQO,MAAM,CAACqB,KAAK,CAAC,CAAC,kCAAkC,EAAEC,KAAK;4BACjE;wBACF;oBACF;gBACF;gBAEA,IAAIlC,cAAc,UAAU;oBAC1B,IAAIG,MAAM;wBACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,OAAO,EAAEE,eAAe,4CAA4C,EAAEhB,MAAM8B,GAAG,yBAAyB,CAAC;oBAE9G;oBAEA,IAAI;wBACF,IAAI1B,MAAM;4BACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,gBAAgB,EAAEG,WAAWe,kBAAkB,CAAC,uBAAuB,CAAC;wBAE7E;wBAEA,+FAA+F;wBAC/F,MAAMD,iBAAiB,MAAMJ,QAAQ,CAACV,WAAWe,kBAAkB,CAAC,EAAEC,OACpE,mBAAmB;wBACnBb;wBAGF,IAAIhB,MAAM;4BACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEG,WAAWe,kBAAkB,CAAC,+BAA+B,EAAED,eAAeD,EAAE,CAAC,EAAE,CAAC;wBAEvH;wBAEAvB,QAAQI,QAAQ,GAAGoB,eAAeD,EAAE;wBAEpC,+DAA+D;wBAC/DvB,QAAQK,QAAQ,GAAG;oBACrB,EAAE,OAAOsB,OAAgB;wBACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;wBACrD,MAAM,IAAIxC,SACR,CAAC,sBAAsB,EAAEuB,WAAWe,kBAAkB,CAAC,sBAAsB,EAAEG,KAAK;oBAExF;gBACF;YACF;QACF;IACF;IAEA,OAAO5B;AACT,EAAC"}
+{"version":3,"sources":["../../src/hooks/createNewInStripe.ts"],"sourcesContent":["import type { CollectionBeforeValidateHook, CollectionConfig } from 'payload'\n\nimport { APIError } from 'payload'\nimport Stripe from 'stripe'\n\nimport type { StripePluginConfig } from '../types.js'\n\nimport { getSyncedFields } from '../utilities/deepen.js'\n\ntype HookArgsWithCustomCollection = {\n  collection: CollectionConfig\n} & Omit<Parameters<CollectionBeforeValidateHook>[0], 'collection'>\n\nexport type CollectionBeforeValidateHookWithArgs = (\n  args: {\n    collection?: CollectionConfig\n    pluginConfig?: StripePluginConfig\n  } & HookArgsWithCustomCollection,\n) => Promise<Partial<any>>\n\nexport const createNewInStripe: CollectionBeforeValidateHookWithArgs = async (args) => {\n  const { collection, data, operation, pluginConfig, req } = args\n\n  const { logs, sync } = pluginConfig || {}\n\n  const payload = req?.payload\n\n  const dataRef = data || {}\n\n  if (process.env.NODE_ENV === 'test') {\n    dataRef.stripeID = 'test'\n    return dataRef\n  }\n\n  if (payload) {\n    if (data?.skipSync) {\n      if (logs) {\n        payload.logger.info(`Bypassing collection-level hooks.`)\n      }\n    } else {\n      // initialize as 'false' so that all Payload admin events sync to Stripe\n      // then conditionally set to 'true' to for events that originate from webhooks\n      // this will prevent webhook events from triggering an unnecessary sync / infinite loop\n      dataRef.skipSync = false\n\n      const { slug: collectionSlug } = collection || {}\n      const syncConfig = sync?.find((conf) => conf.collection === collectionSlug)\n\n      if (syncConfig) {\n        // combine all fields of this object and match their respective values within the document\n        const syncedFields = getSyncedFields({\n          data: dataRef,\n          fields: syncConfig.fields,\n          source: 'payload',\n        })\n\n        // api version can only be the latest, stripe recommends ts ignoring it\n        const stripe = new Stripe(pluginConfig?.stripeSecretKey || '', { apiVersion: '2022-08-01' })\n\n        if (operation === 'update') {\n          if (logs) {\n            payload.logger.info(\n              `A '${collectionSlug}' document has changed in Payload with ID: '${data?.id}', syncing with Stripe...`,\n            )\n          }\n\n          // NOTE: the Stripe document will be created in the \"afterChange\" hook, so create a new stripe document here if no stripeID exists\n          if (!dataRef.stripeID) {\n            try {\n              // NOTE: Typed as \"any\" because the \"create\" method is not standard across all Stripe resources\n              const stripeResource = await stripe?.[syncConfig.stripeResourceType]?.create(\n                // @ts-expect-error\n                syncedFields,\n              )\n\n              if (logs) {\n                payload.logger.info(\n                  `✅ Successfully created new '${syncConfig.stripeResourceType}' resource in Stripe with ID: '${stripeResource.id}'.`,\n                )\n              }\n\n              dataRef.stripeID = stripeResource.id\n\n              // NOTE: this is to prevent sync in the \"afterChange\" hook\n              dataRef.skipSync = true\n            } catch (error: unknown) {\n              const msg = error instanceof Error ? error.message : error\n              if (logs) {\n                payload.logger.error(`- Error creating Stripe document: ${msg}`)\n              }\n            }\n          }\n        }\n\n        if (operation === 'create') {\n          if (logs) {\n            payload.logger.info(\n              `A new '${collectionSlug}' document was created in Payload with ID: '${data?.id}', syncing with Stripe...`,\n            )\n          }\n\n          try {\n            if (logs) {\n              payload.logger.info(\n                `- Creating new '${syncConfig.stripeResourceType}' resource in Stripe...`,\n              )\n            }\n\n            // NOTE: Typed as \"any\" because the \"create\" method is not standard across all Stripe resources\n            const stripeResource = await stripe?.[syncConfig.stripeResourceType]?.create(\n              // @ts-expect-error\n              syncedFields,\n            )\n\n            if (logs) {\n              payload.logger.info(\n                `✅ Successfully created new '${syncConfig.stripeResourceType}' resource in Stripe with ID: '${stripeResource.id}'.`,\n              )\n            }\n\n            dataRef.stripeID = stripeResource.id\n\n            // IMPORTANT: this is to prevent sync in the \"afterChange\" hook\n            dataRef.skipSync = true\n          } catch (error: unknown) {\n            const msg = error instanceof Error ? error.message : error\n            throw new APIError(\n              `Failed to create new '${syncConfig.stripeResourceType}' resource in Stripe: ${msg}`,\n            )\n          }\n        }\n      }\n    }\n  }\n\n  return dataRef\n}\n"],"names":["APIError","Stripe","getSyncedFields","createNewInStripe","args","collection","data","operation","pluginConfig","req","logs","sync","payload","dataRef","process","env","NODE_ENV","stripeID","skipSync","logger","info","slug","collectionSlug","syncConfig","find","conf","syncedFields","fields","source","stripe","stripeSecretKey","apiVersion","id","stripeResource","stripeResourceType","create","error","msg","Error","message"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,OAAOC,YAAY,SAAQ;AAI3B,SAASC,eAAe,QAAQ,yBAAwB;AAaxD,OAAO,MAAMC,oBAA0D,OAAOC;IAC5E,MAAM,EAAEC,UAAU,EAAEC,IAAI,EAAEC,SAAS,EAAEC,YAAY,EAAEC,GAAG,EAAE,GAAGL;IAE3D,MAAM,EAAEM,IAAI,EAAEC,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAExC,MAAMI,UAAUH,KAAKG;IAErB,MAAMC,UAAUP,QAAQ,CAAC;IAEzB,IAAIQ,QAAQC,GAAG,CAACC,QAAQ,KAAK,QAAQ;QACnCH,QAAQI,QAAQ,GAAG;QACnB,OAAOJ;IACT;IAEA,IAAID,SAAS;QACX,IAAIN,MAAMY,UAAU;YAClB,IAAIR,MAAM;gBACRE,QAAQO,MAAM,CAACC,IAAI,CAAC,CAAC,iCAAiC,CAAC;YACzD;QACF,OAAO;YACL,wEAAwE;YACxE,8EAA8E;YAC9E,uFAAuF;YACvFP,QAAQK,QAAQ,GAAG;YAEnB,MAAM,EAAEG,MAAMC,cAAc,EAAE,GAAGjB,cAAc,CAAC;YAChD,MAAMkB,aAAaZ,MAAMa,KAAK,CAACC,OAASA,KAAKpB,UAAU,KAAKiB;YAE5D,IAAIC,YAAY;gBACd,0FAA0F;gBAC1F,MAAMG,eAAexB,gBAAgB;oBACnCI,MAAMO;oBACNc,QAAQJ,WAAWI,MAAM;oBACzBC,QAAQ;gBACV;gBAEA,uEAAuE;gBACvE,MAAMC,SAAS,IAAI5B,OAAOO,cAAcsB,mBAAmB,IAAI;oBAAEC,YAAY;gBAAa;gBAE1F,IAAIxB,cAAc,UAAU;oBAC1B,IAAIG,MAAM;wBACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,GAAG,EAAEE,eAAe,4CAA4C,EAAEhB,MAAM0B,GAAG,yBAAyB,CAAC;oBAE1G;oBAEA,kIAAkI;oBAClI,IAAI,CAACnB,QAAQI,QAAQ,EAAE;wBACrB,IAAI;4BACF,+FAA+F;4BAC/F,MAAMgB,iBAAiB,MAAMJ,QAAQ,CAACN,WAAWW,kBAAkB,CAAC,EAAEC,OACpE,mBAAmB;4BACnBT;4BAGF,IAAIhB,MAAM;gCACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEG,WAAWW,kBAAkB,CAAC,+BAA+B,EAAED,eAAeD,EAAE,CAAC,EAAE,CAAC;4BAEvH;4BAEAnB,QAAQI,QAAQ,GAAGgB,eAAeD,EAAE;4BAEpC,0DAA0D;4BAC1DnB,QAAQK,QAAQ,GAAG;wBACrB,EAAE,OAAOkB,OAAgB;4BACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;4BACrD,IAAI1B,MAAM;gCACRE,QAAQO,MAAM,CAACiB,KAAK,CAAC,CAAC,kCAAkC,EAAEC,KAAK;4BACjE;wBACF;oBACF;gBACF;gBAEA,IAAI9B,cAAc,UAAU;oBAC1B,IAAIG,MAAM;wBACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,OAAO,EAAEE,eAAe,4CAA4C,EAAEhB,MAAM0B,GAAG,yBAAyB,CAAC;oBAE9G;oBAEA,IAAI;wBACF,IAAItB,MAAM;4BACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,gBAAgB,EAAEG,WAAWW,kBAAkB,CAAC,uBAAuB,CAAC;wBAE7E;wBAEA,+FAA+F;wBAC/F,MAAMD,iBAAiB,MAAMJ,QAAQ,CAACN,WAAWW,kBAAkB,CAAC,EAAEC,OACpE,mBAAmB;wBACnBT;wBAGF,IAAIhB,MAAM;4BACRE,QAAQO,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEG,WAAWW,kBAAkB,CAAC,+BAA+B,EAAED,eAAeD,EAAE,CAAC,EAAE,CAAC;wBAEvH;wBAEAnB,QAAQI,QAAQ,GAAGgB,eAAeD,EAAE;wBAEpC,+DAA+D;wBAC/DnB,QAAQK,QAAQ,GAAG;oBACrB,EAAE,OAAOkB,OAAgB;wBACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;wBACrD,MAAM,IAAIpC,SACR,CAAC,sBAAsB,EAAEuB,WAAWW,kBAAkB,CAAC,sBAAsB,EAAEG,KAAK;oBAExF;gBACF;YACF;QACF;IACF;IAEA,OAAOxB;AACT,EAAC"}

package/dist/hooks/syncExistingWithStripe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncExistingWithStripe.d.ts","sourceRoot":"","sources":["../../src/hooks/syncExistingWithStripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAK3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,KAAK,4BAA4B,GAAG;IAClC,UAAU,EAAE,gBAAgB,CAAA;CAC7B,GAAG,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AAEjE,MAAM,MAAM,kCAAkC,GAAG,CAC/C,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC,GAAG,4BAA4B,KAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AAE1B,eAAO,MAAM,sBAAsB,EAAE,kCAwEpC,CAAA"}
+{"version":3,"file":"syncExistingWithStripe.d.ts","sourceRoot":"","sources":["../../src/hooks/syncExistingWithStripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAK3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,KAAK,4BAA4B,GAAG;IAClC,UAAU,EAAE,gBAAgB,CAAA;CAC7B,GAAG,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AAEjE,MAAM,MAAM,kCAAkC,GAAG,CAC/C,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC,GAAG,4BAA4B,KAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AAE1B,eAAO,MAAM,sBAAsB,EAAE,kCAkEpC,CAAA"}

package/dist/hooks/syncExistingWithStripe.js

@@ -1,6 +1,6 @@
 import { APIError } from 'payload';
 import Stripe from 'stripe';
-import { deepen } from '../utilities/deepen.js';
+import { getSyncedFields } from '../utilities/deepen.js';
 export const syncExistingWithStripe = async (args)=>{
     const { collection, data, operation, originalDoc, pluginConfig, req } = args;
     const { logs, sync } = pluginConfig || {};
@@ -11,12 +11,11 @@ export const syncExistingWithStripe = async (args)=>{
         if (syncConfig) {
             if (operation === 'update') {
                 // combine all fields of this object and match their respective values within the document
-                let syncedFields = syncConfig.fields.reduce((acc, field)=>{
-                    const { fieldPath, stripeProperty } = field;
-                    acc[stripeProperty] = data[fieldPath];
-                    return acc;
-                }, {});
-                syncedFields = deepen(syncedFields);
+                const syncedFields = getSyncedFields({
+                    data,
+                    fields: syncConfig.fields,
+                    source: 'payload'
+                });
                 if (logs) {
                     payload.logger.info(`A '${collectionSlug}' document has changed in Payload with ID: '${originalDoc?._id}', syncing with Stripe...`);
                 }

package/dist/hooks/syncExistingWithStripe.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hooks/syncExistingWithStripe.ts"],"sourcesContent":["import type { CollectionBeforeChangeHook, CollectionConfig } from 'payload'\n\nimport { APIError } from 'payload'\nimport Stripe from 'stripe'\n\nimport type { StripePluginConfig } from '../types.js'\n\nimport { deepen } from '../utilities/deepen.js'\n\ntype HookArgsWithCustomCollection = {\n  collection: CollectionConfig\n} & Omit<Parameters<CollectionBeforeChangeHook>[0], 'collection'>\n\nexport type CollectionBeforeChangeHookWithArgs = (\n  args: {\n    collection?: CollectionConfig\n    pluginConfig?: StripePluginConfig\n  } & HookArgsWithCustomCollection,\n) => Promise<Partial<any>>\n\nexport const syncExistingWithStripe: CollectionBeforeChangeHookWithArgs = async (args) => {\n  const { collection, data, operation, originalDoc, pluginConfig, req } = args\n\n  const { logs, sync } = pluginConfig || {}\n\n  const { payload } = req\n\n  const { slug: collectionSlug } = collection || {}\n\n  if (process.env.NODE_ENV !== 'test' && !data.skipSync) {\n    const syncConfig = sync?.find((conf) => conf.collection === collectionSlug)\n\n    if (syncConfig) {\n      if (operation === 'update') {\n        // combine all fields of this object and match their respective values within the document\n        let syncedFields = syncConfig.fields.reduce(\n          (acc, field) => {\n            const { fieldPath, stripeProperty } = field\n\n            acc[stripeProperty] = data[fieldPath]\n            return acc\n          },\n          {} as Record<string, any>,\n        )\n\n        syncedFields = deepen(syncedFields)\n\n        if (logs) {\n          payload.logger.info(\n            `A '${collectionSlug}' document has changed in Payload with ID: '${originalDoc?._id}', syncing with Stripe...`,\n          )\n        }\n\n        if (!data.stripeID) {\n          // NOTE: the \"beforeValidate\" hook populates this\n          if (logs) {\n            payload.logger.error(`- There is no Stripe ID for this document, skipping.`)\n          }\n        } else {\n          if (logs) {\n            payload.logger.info(`- Syncing to Stripe resource with ID: '${data.stripeID}'...`)\n          }\n\n          try {\n            // api version can only be the latest, stripe recommends ts ignoring it\n            const stripe = new Stripe(pluginConfig?.stripeSecretKey || '', {\n              apiVersion: '2022-08-01',\n            })\n\n            const stripeResource = await stripe?.[syncConfig?.stripeResourceType]?.update(\n              data.stripeID,\n              syncedFields,\n            )\n\n            if (logs) {\n              payload.logger.info(\n                `✅ Successfully synced Stripe resource with ID: '${stripeResource.id}'.`,\n              )\n            }\n          } catch (error: unknown) {\n            const msg = error instanceof Error ? error.message : error\n            throw new APIError(`Failed to sync document with ID: '${data.id}' to Stripe: ${msg}`)\n          }\n        }\n      }\n    }\n  }\n\n  // Set back to 'false' so that all changes continue to sync to Stripe, see note in './createNewInStripe.ts'\n  data.skipSync = false\n\n  return data\n}\n"],"names":["APIError","Stripe","deepen","syncExistingWithStripe","args","collection","data","operation","originalDoc","pluginConfig","req","logs","sync","payload","slug","collectionSlug","process","env","NODE_ENV","skipSync","syncConfig","find","conf","syncedFields","fields","reduce","acc","field","fieldPath","stripeProperty","logger","info","_id","stripeID","error","stripe","stripeSecretKey","apiVersion","stripeResource","stripeResourceType","update","id","msg","Error","message"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,OAAOC,YAAY,SAAQ;AAI3B,SAASC,MAAM,QAAQ,yBAAwB;AAa/C,OAAO,MAAMC,yBAA6D,OAAOC;IAC/E,MAAM,EAAEC,UAAU,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,YAAY,EAAEC,GAAG,EAAE,GAAGN;IAExE,MAAM,EAAEO,IAAI,EAAEC,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAExC,MAAM,EAAEI,OAAO,EAAE,GAAGH;IAEpB,MAAM,EAAEI,MAAMC,cAAc,EAAE,GAAGV,cAAc,CAAC;IAEhD,IAAIW,QAAQC,GAAG,CAACC,QAAQ,KAAK,UAAU,CAACZ,KAAKa,QAAQ,EAAE;QACrD,MAAMC,aAAaR,MAAMS,KAAK,CAACC,OAASA,KAAKjB,UAAU,KAAKU;QAE5D,IAAIK,YAAY;YACd,IAAIb,cAAc,UAAU;gBAC1B,0FAA0F;gBAC1F,IAAIgB,eAAeH,WAAWI,MAAM,CAACC,MAAM,CACzC,CAACC,KAAKC;oBACJ,MAAM,EAAEC,SAAS,EAAEC,cAAc,EAAE,GAAGF;oBAEtCD,GAAG,CAACG,eAAe,GAAGvB,IAAI,CAACsB,UAAU;oBACrC,OAAOF;gBACT,GACA,CAAC;gBAGHH,eAAerB,OAAOqB;gBAEtB,IAAIZ,MAAM;oBACRE,QAAQiB,MAAM,CAACC,IAAI,CACjB,CAAC,GAAG,EAAEhB,eAAe,4CAA4C,EAAEP,aAAawB,IAAI,yBAAyB,CAAC;gBAElH;gBAEA,IAAI,CAAC1B,KAAK2B,QAAQ,EAAE;oBAClB,iDAAiD;oBACjD,IAAItB,MAAM;wBACRE,QAAQiB,MAAM,CAACI,KAAK,CAAC,CAAC,oDAAoD,CAAC;oBAC7E;gBACF,OAAO;oBACL,IAAIvB,MAAM;wBACRE,QAAQiB,MAAM,CAACC,IAAI,CAAC,CAAC,uCAAuC,EAAEzB,KAAK2B,QAAQ,CAAC,IAAI,CAAC;oBACnF;oBAEA,IAAI;wBACF,uEAAuE;wBACvE,MAAME,SAAS,IAAIlC,OAAOQ,cAAc2B,mBAAmB,IAAI;4BAC7DC,YAAY;wBACd;wBAEA,MAAMC,iBAAiB,MAAMH,QAAQ,CAACf,YAAYmB,mBAAmB,EAAEC,OACrElC,KAAK2B,QAAQ,EACbV;wBAGF,IAAIZ,MAAM;4BACRE,QAAQiB,MAAM,CAACC,IAAI,CACjB,CAAC,gDAAgD,EAAEO,eAAeG,EAAE,CAAC,EAAE,CAAC;wBAE5E;oBACF,EAAE,OAAOP,OAAgB;wBACvB,MAAMQ,MAAMR,iBAAiBS,QAAQT,MAAMU,OAAO,GAAGV;wBACrD,MAAM,IAAIlC,SAAS,CAAC,kCAAkC,EAAEM,KAAKmC,EAAE,CAAC,aAAa,EAAEC,KAAK;oBACtF;gBACF;YACF;QACF;IACF;IAEA,2GAA2G;IAC3GpC,KAAKa,QAAQ,GAAG;IAEhB,OAAOb;AACT,EAAC"}
+{"version":3,"sources":["../../src/hooks/syncExistingWithStripe.ts"],"sourcesContent":["import type { CollectionBeforeChangeHook, CollectionConfig } from 'payload'\n\nimport { APIError } from 'payload'\nimport Stripe from 'stripe'\n\nimport type { StripePluginConfig } from '../types.js'\n\nimport { getSyncedFields } from '../utilities/deepen.js'\n\ntype HookArgsWithCustomCollection = {\n  collection: CollectionConfig\n} & Omit<Parameters<CollectionBeforeChangeHook>[0], 'collection'>\n\nexport type CollectionBeforeChangeHookWithArgs = (\n  args: {\n    collection?: CollectionConfig\n    pluginConfig?: StripePluginConfig\n  } & HookArgsWithCustomCollection,\n) => Promise<Partial<any>>\n\nexport const syncExistingWithStripe: CollectionBeforeChangeHookWithArgs = async (args) => {\n  const { collection, data, operation, originalDoc, pluginConfig, req } = args\n\n  const { logs, sync } = pluginConfig || {}\n\n  const { payload } = req\n\n  const { slug: collectionSlug } = collection || {}\n\n  if (process.env.NODE_ENV !== 'test' && !data.skipSync) {\n    const syncConfig = sync?.find((conf) => conf.collection === collectionSlug)\n\n    if (syncConfig) {\n      if (operation === 'update') {\n        // combine all fields of this object and match their respective values within the document\n        const syncedFields = getSyncedFields({\n          data,\n          fields: syncConfig.fields,\n          source: 'payload',\n        })\n\n        if (logs) {\n          payload.logger.info(\n            `A '${collectionSlug}' document has changed in Payload with ID: '${originalDoc?._id}', syncing with Stripe...`,\n          )\n        }\n\n        if (!data.stripeID) {\n          // NOTE: the \"beforeValidate\" hook populates this\n          if (logs) {\n            payload.logger.error(`- There is no Stripe ID for this document, skipping.`)\n          }\n        } else {\n          if (logs) {\n            payload.logger.info(`- Syncing to Stripe resource with ID: '${data.stripeID}'...`)\n          }\n\n          try {\n            // api version can only be the latest, stripe recommends ts ignoring it\n            const stripe = new Stripe(pluginConfig?.stripeSecretKey || '', {\n              apiVersion: '2022-08-01',\n            })\n\n            const stripeResource = await stripe?.[syncConfig?.stripeResourceType]?.update(\n              data.stripeID,\n              syncedFields,\n            )\n\n            if (logs) {\n              payload.logger.info(\n                `✅ Successfully synced Stripe resource with ID: '${stripeResource.id}'.`,\n              )\n            }\n          } catch (error: unknown) {\n            const msg = error instanceof Error ? error.message : error\n            throw new APIError(`Failed to sync document with ID: '${data.id}' to Stripe: ${msg}`)\n          }\n        }\n      }\n    }\n  }\n\n  // Set back to 'false' so that all changes continue to sync to Stripe, see note in './createNewInStripe.ts'\n  data.skipSync = false\n\n  return data\n}\n"],"names":["APIError","Stripe","getSyncedFields","syncExistingWithStripe","args","collection","data","operation","originalDoc","pluginConfig","req","logs","sync","payload","slug","collectionSlug","process","env","NODE_ENV","skipSync","syncConfig","find","conf","syncedFields","fields","source","logger","info","_id","stripeID","error","stripe","stripeSecretKey","apiVersion","stripeResource","stripeResourceType","update","id","msg","Error","message"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,OAAOC,YAAY,SAAQ;AAI3B,SAASC,eAAe,QAAQ,yBAAwB;AAaxD,OAAO,MAAMC,yBAA6D,OAAOC;IAC/E,MAAM,EAAEC,UAAU,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,YAAY,EAAEC,GAAG,EAAE,GAAGN;IAExE,MAAM,EAAEO,IAAI,EAAEC,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAExC,MAAM,EAAEI,OAAO,EAAE,GAAGH;IAEpB,MAAM,EAAEI,MAAMC,cAAc,EAAE,GAAGV,cAAc,CAAC;IAEhD,IAAIW,QAAQC,GAAG,CAACC,QAAQ,KAAK,UAAU,CAACZ,KAAKa,QAAQ,EAAE;QACrD,MAAMC,aAAaR,MAAMS,KAAK,CAACC,OAASA,KAAKjB,UAAU,KAAKU;QAE5D,IAAIK,YAAY;YACd,IAAIb,cAAc,UAAU;gBAC1B,0FAA0F;gBAC1F,MAAMgB,eAAerB,gBAAgB;oBACnCI;oBACAkB,QAAQJ,WAAWI,MAAM;oBACzBC,QAAQ;gBACV;gBAEA,IAAId,MAAM;oBACRE,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,GAAG,EAAEZ,eAAe,4CAA4C,EAAEP,aAAaoB,IAAI,yBAAyB,CAAC;gBAElH;gBAEA,IAAI,CAACtB,KAAKuB,QAAQ,EAAE;oBAClB,iDAAiD;oBACjD,IAAIlB,MAAM;wBACRE,QAAQa,MAAM,CAACI,KAAK,CAAC,CAAC,oDAAoD,CAAC;oBAC7E;gBACF,OAAO;oBACL,IAAInB,MAAM;wBACRE,QAAQa,MAAM,CAACC,IAAI,CAAC,CAAC,uCAAuC,EAAErB,KAAKuB,QAAQ,CAAC,IAAI,CAAC;oBACnF;oBAEA,IAAI;wBACF,uEAAuE;wBACvE,MAAME,SAAS,IAAI9B,OAAOQ,cAAcuB,mBAAmB,IAAI;4BAC7DC,YAAY;wBACd;wBAEA,MAAMC,iBAAiB,MAAMH,QAAQ,CAACX,YAAYe,mBAAmB,EAAEC,OACrE9B,KAAKuB,QAAQ,EACbN;wBAGF,IAAIZ,MAAM;4BACRE,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,gDAAgD,EAAEO,eAAeG,EAAE,CAAC,EAAE,CAAC;wBAE5E;oBACF,EAAE,OAAOP,OAAgB;wBACvB,MAAMQ,MAAMR,iBAAiBS,QAAQT,MAAMU,OAAO,GAAGV;wBACrD,MAAM,IAAI9B,SAAS,CAAC,kCAAkC,EAAEM,KAAK+B,EAAE,CAAC,aAAa,EAAEC,KAAK;oBACtF;gBACF;YACF;QACF;IACF;IAEA,2GAA2G;IAC3GhC,KAAKa,QAAQ,GAAG;IAEhB,OAAOb;AACT,EAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAY,MAAM,SAAS,CAAA;AAE/C,OAAO,KAAK,EAA+B,kBAAkB,EAAE,MAAM,YAAY,CAAA;AASjF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAExD,eAAO,MAAM,YAAY,yBACA,kBAAkB,cAChC,MAAM,KAAG,MAiGjB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAY,MAAM,SAAS,CAAA;AAE/C,OAAO,KAAK,EAA+B,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAUjF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAExD,eAAO,MAAM,YAAY,yBACA,kBAAkB,cAChC,MAAM,KAAG,MAiGjB,CAAA"}

package/dist/index.js

@@ -4,13 +4,16 @@ import { deleteFromStripe } from './hooks/deleteFromStripe.js';
 import { syncExistingWithStripe } from './hooks/syncExistingWithStripe.js';
 import { stripeREST } from './routes/rest.js';
 import { stripeWebhooks } from './routes/webhooks.js';
+import { sanitizeStripeRESTConfig } from './utilities/sanitizeStripeRESTConfig.js';
 export { stripeProxy } from './utilities/stripeProxy.js';
 export const stripePlugin = (incomingStripeConfig)=>(config)=>{
         const { collections } = config;
         // set config defaults here
         const pluginConfig = {
             ...incomingStripeConfig,
-            rest: incomingStripeConfig?.rest ?? false,
+            rest: sanitizeStripeRESTConfig({
+                rest: incomingStripeConfig?.rest
+            }),
             sync: incomingStripeConfig?.sync || []
         };
         // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key
@@ -31,7 +34,7 @@ export const stripePlugin = (incomingStripeConfig)=>(config)=>{
                 path: '/stripe/webhooks'
             }
         ];
-        if (incomingStripeConfig?.rest) {
+        if (pluginConfig.rest) {
             endpoints.push({
                 handler: async (req)=>{
                     const res = await stripeREST({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Config, Endpoint } from 'payload'\n\nimport type { SanitizedStripePluginConfig, StripePluginConfig } from './types.js'\n\nimport { getFields } from './fields/getFields.js'\nimport { createNewInStripe } from './hooks/createNewInStripe.js'\nimport { deleteFromStripe } from './hooks/deleteFromStripe.js'\nimport { syncExistingWithStripe } from './hooks/syncExistingWithStripe.js'\nimport { stripeREST } from './routes/rest.js'\nimport { stripeWebhooks } from './routes/webhooks.js'\n\nexport { stripeProxy } from './utilities/stripeProxy.js'\n\nexport const stripePlugin =\n  (incomingStripeConfig: StripePluginConfig) =>\n  (config: Config): Config => {\n    const { collections } = config\n\n    // set config defaults here\n    const pluginConfig: SanitizedStripePluginConfig = {\n      ...incomingStripeConfig,\n      rest: incomingStripeConfig?.rest ?? false,\n      sync: incomingStripeConfig?.sync || [],\n    }\n\n    // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key\n    // unfortunately we must set the 'isTestKey' property on the config instead of using the following code:\n    // const isTestKey = stripeConfig.stripeSecretKey?.startsWith('sk_test_');\n\n    const endpoints: Endpoint[] = [\n      ...(config?.endpoints || []),\n      {\n        handler: async (req) => {\n          const res = await stripeWebhooks({\n            config,\n            pluginConfig,\n            req,\n          })\n\n          return res\n        },\n        method: 'post',\n        path: '/stripe/webhooks',\n      },\n    ]\n\n    if (incomingStripeConfig?.rest) {\n      endpoints.push({\n        handler: async (req) => {\n          const res = await stripeREST({\n            pluginConfig,\n            req,\n          })\n\n          return res\n        },\n        method: 'post' as Endpoint['method'],\n        path: '/stripe/rest',\n      })\n    }\n\n    for (const collection of collections!) {\n      const { hooks: existingHooks } = collection\n\n      const syncConfig = pluginConfig.sync?.find((sync) => sync.collection === collection.slug)\n\n      if (!syncConfig) {\n        continue\n      }\n      const fields = getFields({\n        collection,\n        pluginConfig,\n        syncConfig,\n      })\n      collection.fields = fields\n\n      if (!collection.hooks) {\n        collection.hooks = {}\n      }\n\n      collection.hooks.afterDelete = [\n        ...(existingHooks?.afterDelete || []),\n        (args) =>\n          deleteFromStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n      collection.hooks.beforeChange = [\n        ...(existingHooks?.beforeChange || []),\n        (args) =>\n          syncExistingWithStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n      collection.hooks.beforeValidate = [\n        ...(existingHooks?.beforeValidate || []),\n        (args) =>\n          createNewInStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n    }\n\n    config.endpoints = endpoints\n\n    return config\n  }\n"],"names":["getFields","createNewInStripe","deleteFromStripe","syncExistingWithStripe","stripeREST","stripeWebhooks","stripeProxy","stripePlugin","incomingStripeConfig","config","collections","pluginConfig","rest","sync","endpoints","handler","req","res","method","path","push","collection","hooks","existingHooks","syncConfig","find","slug","fields","afterDelete","args","beforeChange","beforeValidate"],"mappings":"AAIA,SAASA,SAAS,QAAQ,wBAAuB;AACjD,SAASC,iBAAiB,QAAQ,+BAA8B;AAChE,SAASC,gBAAgB,QAAQ,8BAA6B;AAC9D,SAASC,sBAAsB,QAAQ,oCAAmC;AAC1E,SAASC,UAAU,QAAQ,mBAAkB;AAC7C,SAASC,cAAc,QAAQ,uBAAsB;AAErD,SAASC,WAAW,QAAQ,6BAA4B;AAExD,OAAO,MAAMC,eACX,CAACC,uBACD,CAACC;QACC,MAAM,EAAEC,WAAW,EAAE,GAAGD;QAExB,2BAA2B;QAC3B,MAAME,eAA4C;YAChD,GAAGH,oBAAoB;YACvBI,MAAMJ,sBAAsBI,QAAQ;YACpCC,MAAML,sBAAsBK,QAAQ,EAAE;QACxC;QAEA,6GAA6G;QAC7G,wGAAwG;QACxG,0EAA0E;QAE1E,MAAMC,YAAwB;eACxBL,QAAQK,aAAa,EAAE;YAC3B;gBACEC,SAAS,OAAOC;oBACd,MAAMC,MAAM,MAAMZ,eAAe;wBAC/BI;wBACAE;wBACAK;oBACF;oBAEA,OAAOC;gBACT;gBACAC,QAAQ;gBACRC,MAAM;YACR;SACD;QAED,IAAIX,sBAAsBI,MAAM;YAC9BE,UAAUM,IAAI,CAAC;gBACbL,SAAS,OAAOC;oBACd,MAAMC,MAAM,MAAMb,WAAW;wBAC3BO;wBACAK;oBACF;oBAEA,OAAOC;gBACT;gBACAC,QAAQ;gBACRC,MAAM;YACR;QACF;QAEA,KAAK,MAAME,cAAcX,YAAc;YACrC,MAAM,EAAEY,OAAOC,aAAa,EAAE,GAAGF;YAEjC,MAAMG,aAAab,aAAaE,IAAI,EAAEY,KAAK,CAACZ,OAASA,KAAKQ,UAAU,KAAKA,WAAWK,IAAI;YAExF,IAAI,CAACF,YAAY;gBACf;YACF;YACA,MAAMG,SAAS3B,UAAU;gBACvBqB;gBACAV;gBACAa;YACF;YACAH,WAAWM,MAAM,GAAGA;YAEpB,IAAI,CAACN,WAAWC,KAAK,EAAE;gBACrBD,WAAWC,KAAK,GAAG,CAAC;YACtB;YAEAD,WAAWC,KAAK,CAACM,WAAW,GAAG;mBACzBL,eAAeK,eAAe,EAAE;gBACpC,CAACC,OACC3B,iBAAiB;wBACf,GAAG2B,IAAI;wBACPR;wBACAV;oBACF;aACH;YACDU,WAAWC,KAAK,CAACQ,YAAY,GAAG;mBAC1BP,eAAeO,gBAAgB,EAAE;gBACrC,CAACD,OACC1B,uBAAuB;wBACrB,GAAG0B,IAAI;wBACPR;wBACAV;oBACF;aACH;YACDU,WAAWC,KAAK,CAACS,cAAc,GAAG;mBAC5BR,eAAeQ,kBAAkB,EAAE;gBACvC,CAACF,OACC5B,kBAAkB;wBAChB,GAAG4B,IAAI;wBACPR;wBACAV;oBACF;aACH;QACH;QAEAF,OAAOK,SAAS,GAAGA;QAEnB,OAAOL;IACT,EAAC"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Config, Endpoint } from 'payload'\n\nimport type { SanitizedStripePluginConfig, StripePluginConfig } from './types.js'\n\nimport { getFields } from './fields/getFields.js'\nimport { createNewInStripe } from './hooks/createNewInStripe.js'\nimport { deleteFromStripe } from './hooks/deleteFromStripe.js'\nimport { syncExistingWithStripe } from './hooks/syncExistingWithStripe.js'\nimport { stripeREST } from './routes/rest.js'\nimport { stripeWebhooks } from './routes/webhooks.js'\nimport { sanitizeStripeRESTConfig } from './utilities/sanitizeStripeRESTConfig.js'\n\nexport { stripeProxy } from './utilities/stripeProxy.js'\n\nexport const stripePlugin =\n  (incomingStripeConfig: StripePluginConfig) =>\n  (config: Config): Config => {\n    const { collections } = config\n\n    // set config defaults here\n    const pluginConfig: SanitizedStripePluginConfig = {\n      ...incomingStripeConfig,\n      rest: sanitizeStripeRESTConfig({ rest: incomingStripeConfig?.rest }),\n      sync: incomingStripeConfig?.sync || [],\n    }\n\n    // NOTE: env variables are never passed to the client, but we need to know if `stripeSecretKey` is a test key\n    // unfortunately we must set the 'isTestKey' property on the config instead of using the following code:\n    // const isTestKey = stripeConfig.stripeSecretKey?.startsWith('sk_test_');\n\n    const endpoints: Endpoint[] = [\n      ...(config?.endpoints || []),\n      {\n        handler: async (req) => {\n          const res = await stripeWebhooks({\n            config,\n            pluginConfig,\n            req,\n          })\n\n          return res\n        },\n        method: 'post',\n        path: '/stripe/webhooks',\n      },\n    ]\n\n    if (pluginConfig.rest) {\n      endpoints.push({\n        handler: async (req) => {\n          const res = await stripeREST({\n            pluginConfig,\n            req,\n          })\n\n          return res\n        },\n        method: 'post' as Endpoint['method'],\n        path: '/stripe/rest',\n      })\n    }\n\n    for (const collection of collections!) {\n      const { hooks: existingHooks } = collection\n\n      const syncConfig = pluginConfig.sync?.find((sync) => sync.collection === collection.slug)\n\n      if (!syncConfig) {\n        continue\n      }\n      const fields = getFields({\n        collection,\n        pluginConfig,\n        syncConfig,\n      })\n      collection.fields = fields\n\n      if (!collection.hooks) {\n        collection.hooks = {}\n      }\n\n      collection.hooks.afterDelete = [\n        ...(existingHooks?.afterDelete || []),\n        (args) =>\n          deleteFromStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n      collection.hooks.beforeChange = [\n        ...(existingHooks?.beforeChange || []),\n        (args) =>\n          syncExistingWithStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n      collection.hooks.beforeValidate = [\n        ...(existingHooks?.beforeValidate || []),\n        (args) =>\n          createNewInStripe({\n            ...args,\n            collection,\n            pluginConfig,\n          }),\n      ]\n    }\n\n    config.endpoints = endpoints\n\n    return config\n  }\n"],"names":["getFields","createNewInStripe","deleteFromStripe","syncExistingWithStripe","stripeREST","stripeWebhooks","sanitizeStripeRESTConfig","stripeProxy","stripePlugin","incomingStripeConfig","config","collections","pluginConfig","rest","sync","endpoints","handler","req","res","method","path","push","collection","hooks","existingHooks","syncConfig","find","slug","fields","afterDelete","args","beforeChange","beforeValidate"],"mappings":"AAIA,SAASA,SAAS,QAAQ,wBAAuB;AACjD,SAASC,iBAAiB,QAAQ,+BAA8B;AAChE,SAASC,gBAAgB,QAAQ,8BAA6B;AAC9D,SAASC,sBAAsB,QAAQ,oCAAmC;AAC1E,SAASC,UAAU,QAAQ,mBAAkB;AAC7C,SAASC,cAAc,QAAQ,uBAAsB;AACrD,SAASC,wBAAwB,QAAQ,0CAAyC;AAElF,SAASC,WAAW,QAAQ,6BAA4B;AAExD,OAAO,MAAMC,eACX,CAACC,uBACD,CAACC;QACC,MAAM,EAAEC,WAAW,EAAE,GAAGD;QAExB,2BAA2B;QAC3B,MAAME,eAA4C;YAChD,GAAGH,oBAAoB;YACvBI,MAAMP,yBAAyB;gBAAEO,MAAMJ,sBAAsBI;YAAK;YAClEC,MAAML,sBAAsBK,QAAQ,EAAE;QACxC;QAEA,6GAA6G;QAC7G,wGAAwG;QACxG,0EAA0E;QAE1E,MAAMC,YAAwB;eACxBL,QAAQK,aAAa,EAAE;YAC3B;gBACEC,SAAS,OAAOC;oBACd,MAAMC,MAAM,MAAMb,eAAe;wBAC/BK;wBACAE;wBACAK;oBACF;oBAEA,OAAOC;gBACT;gBACAC,QAAQ;gBACRC,MAAM;YACR;SACD;QAED,IAAIR,aAAaC,IAAI,EAAE;YACrBE,UAAUM,IAAI,CAAC;gBACbL,SAAS,OAAOC;oBACd,MAAMC,MAAM,MAAMd,WAAW;wBAC3BQ;wBACAK;oBACF;oBAEA,OAAOC;gBACT;gBACAC,QAAQ;gBACRC,MAAM;YACR;QACF;QAEA,KAAK,MAAME,cAAcX,YAAc;YACrC,MAAM,EAAEY,OAAOC,aAAa,EAAE,GAAGF;YAEjC,MAAMG,aAAab,aAAaE,IAAI,EAAEY,KAAK,CAACZ,OAASA,KAAKQ,UAAU,KAAKA,WAAWK,IAAI;YAExF,IAAI,CAACF,YAAY;gBACf;YACF;YACA,MAAMG,SAAS5B,UAAU;gBACvBsB;gBACAV;gBACAa;YACF;YACAH,WAAWM,MAAM,GAAGA;YAEpB,IAAI,CAACN,WAAWC,KAAK,EAAE;gBACrBD,WAAWC,KAAK,GAAG,CAAC;YACtB;YAEAD,WAAWC,KAAK,CAACM,WAAW,GAAG;mBACzBL,eAAeK,eAAe,EAAE;gBACpC,CAACC,OACC5B,iBAAiB;wBACf,GAAG4B,IAAI;wBACPR;wBACAV;oBACF;aACH;YACDU,WAAWC,KAAK,CAACQ,YAAY,GAAG;mBAC1BP,eAAeO,gBAAgB,EAAE;gBACrC,CAACD,OACC3B,uBAAuB;wBACrB,GAAG2B,IAAI;wBACPR;wBACAV;oBACF;aACH;YACDU,WAAWC,KAAK,CAACS,cAAc,GAAG;mBAC5BR,eAAeQ,kBAAkB,EAAE;gBACvC,CAACF,OACC7B,kBAAkB;wBAChB,GAAG6B,IAAI;wBACPR;wBACAV;oBACF;aACH;QACH;QAEAF,OAAOK,SAAS,GAAGA;QAEnB,OAAOL;IACT,EAAC"}

package/dist/index.spec.js

@@ -0,0 +1,115 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const mocks = vi.hoisted(()=>({
+        stripeREST: vi.fn()
+    }));
+vi.mock('./routes/rest.js', ()=>({
+        stripeREST: mocks.stripeREST
+    }));
+import { stripePlugin } from './index.js';
+const createBaseConfig = ()=>({
+        collections: []
+    });
+describe('stripePlugin REST endpoint registration', ()=>{
+    beforeEach(()=>{
+        vi.clearAllMocks();
+        mocks.stripeREST.mockResolvedValue(Response.json({}, {
+            status: 405
+        }));
+    });
+    // Mutation caught: restoring the legacy `rest: true` configuration without an explicit allowlist.
+    it('should reject the legacy true configuration', ()=>{
+        expect(()=>stripePlugin({
+                // @ts-expect-error -- `true` is intentionally rejected in every supported release line.
+                rest: true,
+                stripeSecretKey: 'sk_test_example'
+            })(createBaseConfig())).toThrow('non-empty allowedMethods');
+        expect(mocks.stripeREST).not.toHaveBeenCalled();
+    });
+    // Mutation caught: only registering the endpoint for the legacy boolean form.
+    it('should register an object-configured endpoint with its exact allowlist', async ()=>{
+        const transformedConfig = stripePlugin({
+            rest: {
+                allowedMethods: [
+                    'customers.list'
+                ]
+            },
+            stripeSecretKey: 'sk_test_example'
+        })(createBaseConfig());
+        const endpoint = transformedConfig.endpoints?.find(({ path })=>path === '/stripe/rest');
+        const req = {};
+        await endpoint?.handler(req);
+        expect(endpoint).toMatchObject({
+            method: 'post',
+            path: '/stripe/rest'
+        });
+        expect(mocks.stripeREST).toHaveBeenCalledWith({
+            pluginConfig: expect.objectContaining({
+                rest: {
+                    allowedMethods: [
+                        'customers.list'
+                    ]
+                }
+            }),
+            req
+        });
+    });
+    // Mutation caught: registering the REST endpoint when its configuration is omitted.
+    it('should not register the REST endpoint when the option is absent', ()=>{
+        const transformedConfig = stripePlugin({
+            stripeSecretKey: 'sk_test_example'
+        })(createBaseConfig());
+        expect(transformedConfig.endpoints?.filter(({ path })=>path === '/stripe/rest')).toEqual([]);
+    });
+    // Mutation caught: removing fail-closed runtime handling for untyped configurations.
+    it('should treat false from an untyped configuration as disabled', ()=>{
+        const transformedConfig = stripePlugin({
+            // @ts-expect-error -- omission is the supported way to disable the endpoint.
+            rest: false,
+            stripeSecretKey: 'sk_test_example'
+        })(createBaseConfig());
+        expect(transformedConfig.endpoints?.filter(({ path })=>path === '/stripe/rest')).toEqual([]);
+    });
+});
+describe('stripePlugin managed fields', ()=>{
+    it('should prevent API writes to Stripe-managed fields', ()=>{
+        const transformedConfig = stripePlugin({
+            stripeSecretKey: 'sk_test_example',
+            sync: [
+                {
+                    collection: 'products',
+                    fields: [],
+                    stripeResourceType: 'products',
+                    stripeResourceTypeSingular: 'product'
+                }
+            ]
+        })({
+            collections: [
+                {
+                    fields: [],
+                    slug: 'products'
+                }
+            ]
+        });
+        const fields = transformedConfig.collections?.[0]?.fields ?? [];
+        const stripeIDField = fields.find((field)=>'name' in field && field.name === 'stripeID');
+        const skipSyncField = fields.find((field)=>'name' in field && field.name === 'skipSync');
+        expect(stripeIDField).toMatchObject({
+            access: {
+                create: expect.any(Function),
+                update: expect.any(Function)
+            }
+        });
+        expect(skipSyncField).toMatchObject({
+            access: {
+                create: expect.any(Function),
+                update: expect.any(Function)
+            }
+        });
+        expect(stripeIDField?.access?.create?.({})).toBe(false);
+        expect(stripeIDField?.access?.update?.({})).toBe(false);
+        expect(skipSyncField?.access?.create?.({})).toBe(false);
+        expect(skipSyncField?.access?.update?.({})).toBe(false);
+    });
+});
+
+//# sourceMappingURL=index.spec.js.map

package/dist/index.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.spec.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { beforeEach, describe, expect, it, vi } from 'vitest'\n\nconst mocks = vi.hoisted(() => ({\n  stripeREST: vi.fn(),\n}))\n\nvi.mock('./routes/rest.js', () => ({\n  stripeREST: mocks.stripeREST,\n}))\n\nimport { stripePlugin } from './index.js'\n\nconst createBaseConfig = (): Config => ({ collections: [] })\n\ndescribe('stripePlugin REST endpoint registration', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n    mocks.stripeREST.mockResolvedValue(Response.json({}, { status: 405 }))\n  })\n\n  // Mutation caught: restoring the legacy `rest: true` configuration without an explicit allowlist.\n  it('should reject the legacy true configuration', () => {\n    expect(() =>\n      stripePlugin({\n        // @ts-expect-error -- `true` is intentionally rejected in every supported release line.\n        rest: true,\n        stripeSecretKey: 'sk_test_example',\n      })(createBaseConfig()),\n    ).toThrow('non-empty allowedMethods')\n\n    expect(mocks.stripeREST).not.toHaveBeenCalled()\n  })\n\n  // Mutation caught: only registering the endpoint for the legacy boolean form.\n  it('should register an object-configured endpoint with its exact allowlist', async () => {\n    const transformedConfig = stripePlugin({\n      rest: { allowedMethods: ['customers.list'] },\n      stripeSecretKey: 'sk_test_example',\n    })(createBaseConfig())\n    const endpoint = transformedConfig.endpoints?.find(({ path }) => path === '/stripe/rest')\n    const req = {} as Parameters<NonNullable<typeof endpoint>['handler']>[0]\n\n    await endpoint?.handler(req)\n\n    expect(endpoint).toMatchObject({ method: 'post', path: '/stripe/rest' })\n    expect(mocks.stripeREST).toHaveBeenCalledWith({\n      pluginConfig: expect.objectContaining({\n        rest: { allowedMethods: ['customers.list'] },\n      }),\n      req,\n    })\n  })\n\n  // Mutation caught: registering the REST endpoint when its configuration is omitted.\n  it('should not register the REST endpoint when the option is absent', () => {\n    const transformedConfig = stripePlugin({\n      stripeSecretKey: 'sk_test_example',\n    })(createBaseConfig())\n\n    expect(transformedConfig.endpoints?.filter(({ path }) => path === '/stripe/rest')).toEqual([])\n  })\n\n  // Mutation caught: removing fail-closed runtime handling for untyped configurations.\n  it('should treat false from an untyped configuration as disabled', () => {\n    const transformedConfig = stripePlugin({\n      // @ts-expect-error -- omission is the supported way to disable the endpoint.\n      rest: false,\n      stripeSecretKey: 'sk_test_example',\n    })(createBaseConfig())\n\n    expect(transformedConfig.endpoints?.filter(({ path }) => path === '/stripe/rest')).toEqual([])\n  })\n})\n\ndescribe('stripePlugin managed fields', () => {\n  it('should prevent API writes to Stripe-managed fields', () => {\n    const transformedConfig = stripePlugin({\n      stripeSecretKey: 'sk_test_example',\n      sync: [\n        {\n          collection: 'products',\n          fields: [],\n          stripeResourceType: 'products',\n          stripeResourceTypeSingular: 'product',\n        },\n      ],\n    })({\n      collections: [\n        {\n          fields: [],\n          slug: 'products',\n        },\n      ],\n    })\n    const fields = transformedConfig.collections?.[0]?.fields ?? []\n    const stripeIDField = fields.find((field) => 'name' in field && field.name === 'stripeID')\n    const skipSyncField = fields.find((field) => 'name' in field && field.name === 'skipSync')\n\n    expect(stripeIDField).toMatchObject({\n      access: { create: expect.any(Function), update: expect.any(Function) },\n    })\n    expect(skipSyncField).toMatchObject({\n      access: { create: expect.any(Function), update: expect.any(Function) },\n    })\n    expect(stripeIDField?.access?.create?.({} as never)).toBe(false)\n    expect(stripeIDField?.access?.update?.({} as never)).toBe(false)\n    expect(skipSyncField?.access?.create?.({} as never)).toBe(false)\n    expect(skipSyncField?.access?.update?.({} as never)).toBe(false)\n  })\n})\n"],"names":["beforeEach","describe","expect","it","vi","mocks","hoisted","stripeREST","fn","mock","stripePlugin","createBaseConfig","collections","clearAllMocks","mockResolvedValue","Response","json","status","rest","stripeSecretKey","toThrow","not","toHaveBeenCalled","transformedConfig","allowedMethods","endpoint","endpoints","find","path","req","handler","toMatchObject","method","toHaveBeenCalledWith","pluginConfig","objectContaining","filter","toEqual","sync","collection","fields","stripeResourceType","stripeResourceTypeSingular","slug","stripeIDField","field","name","skipSyncField","access","create","any","Function","update","toBe"],"mappings":"AAEA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,MAAMC,QAAQD,GAAGE,OAAO,CAAC,IAAO,CAAA;QAC9BC,YAAYH,GAAGI,EAAE;IACnB,CAAA;AAEAJ,GAAGK,IAAI,CAAC,oBAAoB,IAAO,CAAA;QACjCF,YAAYF,MAAME,UAAU;IAC9B,CAAA;AAEA,SAASG,YAAY,QAAQ,aAAY;AAEzC,MAAMC,mBAAmB,IAAe,CAAA;QAAEC,aAAa,EAAE;IAAC,CAAA;AAE1DX,SAAS,2CAA2C;IAClDD,WAAW;QACTI,GAAGS,aAAa;QAChBR,MAAME,UAAU,CAACO,iBAAiB,CAACC,SAASC,IAAI,CAAC,CAAC,GAAG;YAAEC,QAAQ;QAAI;IACrE;IAEA,kGAAkG;IAClGd,GAAG,+CAA+C;QAChDD,OAAO,IACLQ,aAAa;gBACX,wFAAwF;gBACxFQ,MAAM;gBACNC,iBAAiB;YACnB,GAAGR,qBACHS,OAAO,CAAC;QAEVlB,OAAOG,MAAME,UAAU,EAAEc,GAAG,CAACC,gBAAgB;IAC/C;IAEA,8EAA8E;IAC9EnB,GAAG,0EAA0E;QAC3E,MAAMoB,oBAAoBb,aAAa;YACrCQ,MAAM;gBAAEM,gBAAgB;oBAAC;iBAAiB;YAAC;YAC3CL,iBAAiB;QACnB,GAAGR;QACH,MAAMc,WAAWF,kBAAkBG,SAAS,EAAEC,KAAK,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAAS;QAC1E,MAAMC,MAAM,CAAC;QAEb,MAAMJ,UAAUK,QAAQD;QAExB3B,OAAOuB,UAAUM,aAAa,CAAC;YAAEC,QAAQ;YAAQJ,MAAM;QAAe;QACtE1B,OAAOG,MAAME,UAAU,EAAE0B,oBAAoB,CAAC;YAC5CC,cAAchC,OAAOiC,gBAAgB,CAAC;gBACpCjB,MAAM;oBAAEM,gBAAgB;wBAAC;qBAAiB;gBAAC;YAC7C;YACAK;QACF;IACF;IAEA,oFAAoF;IACpF1B,GAAG,mEAAmE;QACpE,MAAMoB,oBAAoBb,aAAa;YACrCS,iBAAiB;QACnB,GAAGR;QAEHT,OAAOqB,kBAAkBG,SAAS,EAAEU,OAAO,CAAC,EAAER,IAAI,EAAE,GAAKA,SAAS,iBAAiBS,OAAO,CAAC,EAAE;IAC/F;IAEA,qFAAqF;IACrFlC,GAAG,gEAAgE;QACjE,MAAMoB,oBAAoBb,aAAa;YACrC,6EAA6E;YAC7EQ,MAAM;YACNC,iBAAiB;QACnB,GAAGR;QAEHT,OAAOqB,kBAAkBG,SAAS,EAAEU,OAAO,CAAC,EAAER,IAAI,EAAE,GAAKA,SAAS,iBAAiBS,OAAO,CAAC,EAAE;IAC/F;AACF;AAEApC,SAAS,+BAA+B;IACtCE,GAAG,sDAAsD;QACvD,MAAMoB,oBAAoBb,aAAa;YACrCS,iBAAiB;YACjBmB,MAAM;gBACJ;oBACEC,YAAY;oBACZC,QAAQ,EAAE;oBACVC,oBAAoB;oBACpBC,4BAA4B;gBAC9B;aACD;QACH,GAAG;YACD9B,aAAa;gBACX;oBACE4B,QAAQ,EAAE;oBACVG,MAAM;gBACR;aACD;QACH;QACA,MAAMH,SAASjB,kBAAkBX,WAAW,EAAE,CAAC,EAAE,EAAE4B,UAAU,EAAE;QAC/D,MAAMI,gBAAgBJ,OAAOb,IAAI,CAAC,CAACkB,QAAU,UAAUA,SAASA,MAAMC,IAAI,KAAK;QAC/E,MAAMC,gBAAgBP,OAAOb,IAAI,CAAC,CAACkB,QAAU,UAAUA,SAASA,MAAMC,IAAI,KAAK;QAE/E5C,OAAO0C,eAAeb,aAAa,CAAC;YAClCiB,QAAQ;gBAAEC,QAAQ/C,OAAOgD,GAAG,CAACC;gBAAWC,QAAQlD,OAAOgD,GAAG,CAACC;YAAU;QACvE;QACAjD,OAAO6C,eAAehB,aAAa,CAAC;YAClCiB,QAAQ;gBAAEC,QAAQ/C,OAAOgD,GAAG,CAACC;gBAAWC,QAAQlD,OAAOgD,GAAG,CAACC;YAAU;QACvE;QACAjD,OAAO0C,eAAeI,QAAQC,SAAS,CAAC,IAAaI,IAAI,CAAC;QAC1DnD,OAAO0C,eAAeI,QAAQI,SAAS,CAAC,IAAaC,IAAI,CAAC;QAC1DnD,OAAO6C,eAAeC,QAAQC,SAAS,CAAC,IAAaI,IAAI,CAAC;QAC1DnD,OAAO6C,eAAeC,QAAQI,SAAS,CAAC,IAAaC,IAAI,CAAC;IAC5D;AACF"}

package/dist/routes/rest.d.ts

@@ -1,7 +1,7 @@
 import type { PayloadRequest } from 'payload';
-import type { StripePluginConfig } from '../types.js';
+import type { SanitizedStripePluginConfig } from '../types.js';
 export declare const stripeREST: (args: {
-    pluginConfig: StripePluginConfig;
+    pluginConfig: SanitizedStripePluginConfig;
     req: PayloadRequest;
-}) => Promise<any>;
+}) => Promise<Response>;
 //# sourceMappingURL=rest.d.ts.map

package/dist/routes/rest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/routes/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,eAAO,MAAM,UAAU,SAAgB;IACrC,YAAY,EAAE,kBAAkB,CAAA;IAChC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,GAAG,CAyCd,CAAA"}
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/routes/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAI9D,eAAO,MAAM,UAAU,SAAgB;IACrC,YAAY,EAAE,2BAA2B,CAAA;IACzC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,QAAQ,CAiEnB,CAAA"}

package/dist/routes/rest.js

@@ -1,35 +1,118 @@
-import { addDataAndFileToRequest, Forbidden } from 'payload';
+import { addDataAndFileToRequest, canAccessAdmin, UnauthorizedError } from 'payload';
 import { stripeProxy } from '../utilities/stripeProxy.js';
 export const stripeREST = async (args)=>{
-    let responseStatus = 200;
-    let responseJSON;
     const { pluginConfig, req } = args;
-    await addDataAndFileToRequest(req);
-    const requestWithData = req;
-    const { data, payload, user } = requestWithData;
-    const { stripeSecretKey } = pluginConfig;
     try {
-        if (!user) {
-            // TODO: make this customizable from the config
-            throw new Forbidden(req.t);
+        await addDataAndFileToRequest(req);
+    } catch (err) {
+        return unexpectedErrorResponse({
+            err,
+            req
+        });
+    }
+    if (!req.user) {
+        return errorResponse({
+            message: 'Unauthorized',
+            status: 401
+        });
+    }
+    if (!pluginConfig.rest) {
+        return unexpectedErrorResponse({
+            err: new Error('Stripe REST handler called while disabled'),
+            req
+        });
+    }
+    let hasAccess;
+    if (pluginConfig.rest.access) {
+        try {
+            hasAccess = await pluginConfig.rest.access({
+                req
+            });
+        } catch (err) {
+            return unexpectedErrorResponse({
+                err,
+                req
+            });
         }
-        responseJSON = await stripeProxy({
-            stripeArgs: data?.stripeArgs,
-            stripeMethod: data?.stripeMethod,
-            stripeSecretKey
-        });
-        const { status } = responseJSON;
-        responseStatus = status;
-    } catch (error) {
-        const message = `An error has occurred in the Stripe plugin REST handler: '${JSON.stringify(error)}'`;
-        payload.logger.error(message);
-        responseStatus = 500;
-        responseJSON = {
-            message
-        };
-    }
-    return Response.json(responseJSON, {
-        status: responseStatus
+    } else {
+        try {
+            hasAccess = await hasAdminAccess({
+                req
+            });
+        } catch (err) {
+            return unexpectedErrorResponse({
+                err,
+                req
+            });
+        }
+    }
+    if (!hasAccess) {
+        return errorResponse({
+            message: 'Forbidden',
+            status: 403
+        });
+    }
+    const { stripeArgs, stripeMethod } = req.data ?? {};
+    if (typeof stripeMethod !== 'string' || stripeMethod.trim().length === 0) {
+        return errorResponse({
+            message: 'Invalid request',
+            status: 400
+        });
+    }
+    if (!pluginConfig.rest.allowedMethods.includes(stripeMethod)) {
+        return errorResponse({
+            message: 'Invalid request',
+            status: 400
+        });
+    }
+    if (!Array.isArray(stripeArgs)) {
+        return errorResponse({
+            message: 'Invalid request',
+            status: 400
+        });
+    }
+    try {
+        const responseJSON = await stripeProxy({
+            stripeArgs,
+            stripeMethod,
+            stripeSecretKey: pluginConfig.stripeSecretKey
+        });
+        return Response.json(responseJSON, {
+            status: responseJSON.status
+        });
+    } catch (err) {
+        return unexpectedErrorResponse({
+            err,
+            req
+        });
+    }
+};
+const hasAdminAccess = async ({ req })=>{
+    try {
+        await canAccessAdmin({
+            req
+        });
+        return true;
+    } catch (err) {
+        if (err instanceof UnauthorizedError) {
+            return false;
+        }
+        throw err;
+    }
+};
+const errorResponse = ({ message, status })=>Response.json({
+        message
+    }, {
+        status
+    });
+const unexpectedErrorResponse = ({ err, req })=>{
+    req.payload.logger.error({
+        err,
+        msg: 'An unexpected error occurred in the Stripe plugin REST handler.'
+    });
+    return errorResponse({
+        message: 'Internal server error',
+        status: 500
     });
 };